env resolution order problematic when installing gcloud

[leipert]

gcloud (installed via vfox:mise-plugins/vfox-gcloud has trouble picking up the "correct" python version when installing.

With the env variable CLOUDSDK_PYTHON one can tell the install script of gcloud which python version to use. The config below works beautifully when one installs python separately (e.g. mise install python and then mise install gcloud), but fails when installing together mise install

mise.toml:

[tools]
python = "3.13"
gcloud = { version = "latest", depends = ["python"] }

[env]
CLOUDSDK_PYTHON = { value = "{{ tools.python.path | default(value='') }}/bin/python3", tools = true }

mise doctor (before running the install)

DEBUG Version: 2026.6.1 macos-arm64 (2026-06-06)
DEBUG ARGS: /opt/homebrew/bin/mise doctor
version: 2026.6.1 macos-arm64 (2026-06-06)
activated: yes
shims_on_path: no
self_update_available: no

build_info:
  Target: aarch64-apple-darwin
  Features: default, native-tls, self_update
  Built: Sat, 6 Jun 2026 23:50:14 +0000
  Rust Version: rustc 1.96.0 (ac68faa20 2026-05-25) (Homebrew)
  Profile: release
DEBUG $ /bin/zsh --version

shell:
  /bin/zsh
  zsh 5.9 (arm64-apple-darwin25.0)

aqua:
  baked in registry: aquaproj/aqua-registry@v4.521.0
  baked in registry tools: 2212

dirs:
  cache: ~/Library/Caches/mise
  config: ~/.config/mise
  data: ~/.local/share/mise
  shims: ~/.local/share/mise/shims
  state: ~/.local/state/mise
DEBUG [vfox] Getting metadata for 1password-cli
DEBUG config: ~/repos/ttt/mise.toml
DEBUG config: ~/repos/mise.toml
DEBUG config: ~/.config/mise/config.toml

config_files:
  ~/.config/mise/config.toml
  ~/repos/mise.toml
  ~/repos/ttt/mise.toml

env_files:
  (none)

ignored_config_files: (none)

backends:
  aqua
  asdf
  cargo
  conda
  core
  dotnet
  forgejo
  gem
  github
  gitlab
  go
  npm
  pipx
  spm
  http
  s3
  ubi
  vfox
DEBUG current sha for "/Users/ip/.local/share/mise/plugins/1password-cli": ac76504
DEBUG current sha for "/Users/ip/.local/share/mise/plugins/meson": 212ecdb
DEBUG current sha for "/Users/ip/.local/share/mise/plugins/minio": 113b19d
DEBUG current sha for "/Users/ip/.local/share/mise/plugins/postgres": dcbda94
DEBUG current sha for "/Users/ip/.local/share/mise/plugins/redis": d5a67c5
DEBUG current sha for "/Users/ip/.local/share/mise/plugins/swiftformat": ab1f91f
DEBUG current sha for "/Users/ip/.local/share/mise/plugins/yarn": 5a1cb27

plugins:
  1password-cli  https://github.com/mise-plugins/vfox-1password.git#ac76504
  meson          https://github.com/mise-plugins/mise-meson.git#212ecdb
  minio          https://github.com/mise-plugins/mise-minio.git#113b19d
  postgres       https://github.com/mise-plugins/mise-postgres.git#dcbda94
  redis          https://github.com/mise-plugins/mise-redis.git#d5a67c5
  swiftformat    https://github.com/mise-plugins/mise-swiftformat.git#ab1f91f
  yarn           https://github.com/mise-plugins/mise-yarn.git#5a1cb27
DEBUG GET https://mise-versions.jdx.dev/tools/gcloud.toml
DEBUG GET https://mise-versions.jdx.dev/tools/gcloud.toml 200 OK

toolset:
  aqua:anomalyco/opencode@1.16.2
  aqua:cli/cli@2.93.0
  core:bun@1.3.14
  core:go@1.22.6
  core:node@24.14.1
  core:python@3.13.13   (missing)
  vfox:mise-plugins/vfox-gcloud@572.0.0  (missing)
DEBUG EnvResults { env: ["CLOUDSDK_PYTHON"] }

path:
  ~/.local/share/mise/installs/opencode/latest
  ~/.local/share/mise/installs/bun/latest/bin
  ~/.local/share/mise/installs/node/24.14.1/bin
  ~/.local/share/mise/installs/go/1.22.6/bin
  ~/.local/share/mise/installs/github-cli/latest/gh_2.93.0_macOS_arm64/bin
  ~/Library/pnpm
  ~/.dotfiles/bin
  /opt/homebrew/bin
  /opt/homebrew/sbin
  /usr/local/bin
  /System/Cryptexes/App/usr/bin
  /usr/bin
  /bin
  /usr/sbin
  /sbin
  /var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin
  /var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin
  /var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin
  /pkg/env/global/bin
  /Applications/Little Snitch.app/Contents/Components
  /Applications/iTerm.app/Contents/Resources/utilities
  ~/.config/yarn/global/node_modules/.bin
DEBUG EnvResults { env: ["CLOUDSDK_PYTHON"] }

env_vars:
  MISE_SHELL=zsh
  MISE_VERBOSE=1
DEBUG $ mise settings
DEBUG Version: 2026.6.1 macos-arm64 (2026-06-06)
DEBUG ARGS: mise settings

settings:
  experimental                         true   ~/.config/mise/config.toml
  idiomatic_version_file_enable_tools  []     ~/.config/mise/config.toml
  npm.package_manager                  "pnpm" ~/.config/mise/config.toml

1 warning found:

1. mise tool paths are not first in PATH. These paths take precedence:
     ~/Library/pnpm
     ~/.dotfiles/bin
   This may cause system-installed tools to be used instead of mise-managed versions.
   Ensure `mise activate` runs after other PATH modifications in your shell rc file.

2 problems found:

1. tool core:python@3.13.13 is not installed, install with `mise install`

2. tool vfox:mise-plugins/vfox-gcloud@572.0.0 is not installed, install with `mise install`

DEBUG exiting with code: 1
DEBUG Version: 2026.6.1 macos-arm64 (2026-06-06)
DEBUG ARGS: /opt/homebrew/bin/mise hook-env -s zsh --reason precmd
DEBUG [vfox] Getting metadata for 1password-cli
DEBUG config: ~/repos/ttt/mise.toml
DEBUG config: ~/repos/mise.toml
DEBUG config: ~/.config/mise/config.toml
DEBUG [vfox:gcloud] available_async
DEBUG [vfox] Getting metadata for gcloud

output of `mise install`

DEBUG Version: 2026.6.1 macos-arm64 (2026-06-06)
DEBUG ARGS: /opt/homebrew/bin/mise i
DEBUG [vfox] Getting metadata for 1password-cli
DEBUG config: ~/repos/ttt/mise.toml
DEBUG config: ~/repos/mise.toml
DEBUG config: ~/.config/mise/config.toml
DEBUG GET https://mise-versions.jdx.dev/tools/gcloud.toml
DEBUG GET https://mise-versions.jdx.dev/tools/gcloud.toml 200 OK
DEBUG ls: "/Users/ip/.local/state/mise/hints"
INFO  python@3.13.13           [1/3] install
INFO  python@3.13.13           [1/3] download cpython-3.13.13+20260602-aarch64-apple-darwin-install_only_stripped.tar.gz
DEBUG GET Downloading https://github.com/astral-sh/python-build-standalone/releases/download/20260602/cpython-3.13.13+20260602-aarch64-apple-darwin-install_only_stripped.tar.gz to ~/.local/share/mise/downloads/python/3.13.13/cpython-3.13.13+20260602-aarch64-apple-darwin-install_only_stripped.tar.gz
DEBUG GET https://github.com/astral-sh/python-build-standalone/releases/download/20260602/cpython-3.13.13+20260602-aarch64-apple-darwin-install_only_stripped.tar.gz
DEBUG POST https://mise-versions.jdx.dev/api/tools/python
DEBUG GET https://github.com/astral-sh/python-build-standalone/releases/download/20260602/cpython-3.13.13+20260602-aarch64-apple-darwin-install_only_stripped.tar.gz 200 OK
INFO  python@3.13.13           [1/3] generate checksum cpython-3.13.13+20260602-aarch64-apple-darwin-install_only_stripped.tar.gz
INFO  python@3.13.13           [1/3] verify GitHub artifact attestations
DEBUG GET https://mise-versions.jdx.dev/api/github/repos/astral-sh/python-build-standalone/attestations/sha256:b929647e1ebe243bd8b66c731e102b97dd7bdcc08127f03b7b22997ac4667403
DEBUG GET https://mise-versions.jdx.dev/api/github/repos/astral-sh/python-build-standalone/attestations/sha256:b929647e1ebe243bd8b66c731e102b97dd7bdcc08127f03b7b22997ac4667403 200 OK
DEBUG removing '/Users/ip/Library/Caches/dev.sigstore.sigstore-rust/tuf/https%3A%2F%2Ftuf-repo-cdn.sigstore.dev/root.json'
DEBUG removing '/Users/ip/Library/Caches/dev.sigstore.sigstore-rust/tuf/https%3A%2F%2Ftuf-repo-cdn.sigstore.dev/root.json'
INFO  python@3.13.13           [1/3] ✓ GitHub artifact attestations verified
DEBUG GitHub artifact attestations verified successfully for python@3.13.13
DEBUG tar -xf /Users/ip/.local/share/mise/downloads/python/3.13.13/cpython-3.13.13+20260602-aarch64-apple-darwin-install_only_stripped.tar.gz -C /Users/ip/.local/share/mise/installs/python/3.13.13
INFO  python@3.13.13           [1/3] extract cpython-3.13.13+20260602-aarch64-apple-darwin-install_only_stripped.tar.gz
INFO  python@3.13.13           [1/3] python --version
DEBUG $ ~/.local/share/mise/installs/python/3.13.13/bin/python --version
INFO  python@3.13.13           [1/3] Python 3.13.13
INFO  python@3.13.13         ✓ installed
INFO  gcloud@572.0.0           [1/3] install
DEBUG [vfox:gcloud] pre_install
DEBUG [vfox] Getting metadata for gcloud
DEBUG POST https://mise-versions.jdx.dev/api/tools/gcloud
INFO  Downloading https://storage.googleapis.com/cloud-sdk-release/google-cloud-sdk-572.0.0-darwin-arm.tar.gz
INFO  Verifying "/Users/ip/.local/share/mise/downloads/gcloud-572.0.0/google-cloud-sdk-572.0.0-darwin-arm.tar.gz" checksum
INFO  Extracting "/Users/ip/.local/share/mise/downloads/gcloud-572.0.0/google-cloud-sdk-572.0.0-darwin-arm.tar.gz" to "/Users/ip/.local/share/mise/installs/gcloud/572.0.0"
DEBUG remove_dir_all: "/Users/ip/.local/share/mise/installs/gcloud/572.0.0"
DEBUG open: "/Users/ip/.local/share/mise/downloads/gcloud-572.0.0/google-cloud-sdk-572.0.0-darwin-arm.tar.gz"
DEBUG ls: "/Users/ip/.local/share/mise/installs/gcloud/google-cloud-sdk-572.0.0-darwin-arm.tar.gzvvhX1E"
DEBUG mv: "/Users/ip/.local/share/mise/installs/gcloud/google-cloud-sdk-572.0.0-darwin-arm.tar.gzvvhX1E/google-cloud-sdk" -> "/Users/ip/.local/share/mise/installs/gcloud/572.0.0"
DEBUG [vfox:gcloud] post_install
Welcome to the Google Cloud CLI!
/Users/ip/.local/share/mise/installs/gcloud/572.0.0/install.sh: line 218: /bin/python3: No such file or directory
DEBUG [vfox] Getting metadata for 1password-cli
DEBUG config: ~/repos/ttt/mise.toml
DEBUG config: ~/repos/mise.toml
DEBUG config: ~/.config/mise/config.toml
DEBUG [core:python@3.13.13] list_bin_paths: ["/Users/ip/.local/share/mise/installs/python/3.13.13/bin"]
Error:
   0: Failed to install vfox:mise-plugins/vfox-gcloud@latest: runtime error: crates/vfox/src/lua_mod/hooks.rs:53:81: Failed to run gcloud install script
      stack traceback:
      	[C]: in function 'error'
      	crates/vfox/src/lua_mod/hooks.rs:53:81: in function 'PLUGIN.PostInstall'
      	crates/vfox/src/plugin.rs:188:2: in main chunk

Location:
   src/toolset/toolset_install.rs:244

Version:
   2026.6.1 macos-arm64 (2026-06-06)

Backtrace omitted. Run with RUST_BACKTRACE=1 environment variable to display it.
Run with RUST_BACKTRACE=full to include source snippets.
DEBUG Version: 2026.6.1 macos-arm64 (2026-06-06)
DEBUG ARGS: /opt/homebrew/bin/mise hook-env -s zsh --reason precmd
DEBUG [vfox] Getting metadata for 1password-cli
DEBUG config: ~/repos/ttt/mise.toml
DEBUG config: ~/repos/mise.toml
DEBUG config: ~/.config/mise/config.toml
DEBUG [vfox:gcloud] available_async
DEBUG [vfox] Getting metadata for gcloud
DEBUG EnvResults { env: ["CLOUDSDK_PYTHON"] }

It seems like between the install of python and gcloud, the env variable CLOUDSDK_PYTHON is not re-evaluated (which makes sense), but there is also no good way to define the python path via install_env as those variables are not evaluated either.

Any ideas how to approach this differently?

[JamBalaya56562]

Fixed in #10432 (merged) — ships in the next release.

Two parts: (1) vfox's Lua os.execute now runs with mise's sanitized environment (the same mise_env that cmd.exec uses), so plugins like vfox-gcloud that shell out via os.execute no longer inherit a stale value from the raw process env. (2) tools = true [env] values such as CLOUDSDK_PYTHON = "{{ tools.python.path }}/bin/python3" are now resolved against the install toolset and injected into the vfox install env, so a combined mise install (python + gcloud together) gets the correct value — matching what already worked when installing them separately.