How to allow postinstall/lifecycle scripts for specific npm packages via embedded aube?

[appotry]

How to allow postinstall/lifecycle scripts for specific npm packages via embedded aube?

With mise 2026.7.12+, the npm backend uses embedded aube which skips postinstall by default. For packages like opencode-ai that download binaries via postinstall, the binary never gets installed.

I see allow_builds is mentioned in the embedded aube docs/pull requests. How do I configure it per package? Is there a mise setting like npm.allow_builds or does it require manual aube trust policy config?

❯ opencode
/home/user/.cache/aube/virtual-store/opencode-ai@1.18.5-0f12fefed1cfbe73/node_modules/opencode-ai/bin/opencode.exe:1
echo "Error: opencode-ai's postinstall script was not run." >&2
     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^


SyntaxError: Unexpected string
    at wrapSafe (node:internal/modules/cjs/loader:1787:18)
    at Module._compile (node:internal/modules/cjs/loader:1828:20)
    at Object..js (node:internal/modules/cjs/loader:1985:10)
    at Module.load (node:internal/modules/cjs/loader:1577:32)
    at Module._load (node:internal/modules/cjs/loader:1379:12)
    at wrapModuleLoad (node:internal/modules/cjs/loader:255:19)
    at Module.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:154:5)
    at node:internal/main/run_main_module:33:47


Node.js v24.17.0

[khashvin]

Configuring it like this on your config.toml used to work on previous versions but it doesnt work with mise 2026.7.12+

"npm:opencode-ai" = { version = "latest", allow_builds = "true" }

I get this error now.

Resolving opencode-ai@1.18.5...
  + opencode-ai@1.18.5 (specifier: 1.18.5)
npm:opencode-ai@1.18.5 install                                                                                         ◟
error: unexpected argument '--ignore-scripts' found

  tip: to pass '--ignore-scripts' as a value, use '-- --ignore-scripts'

Usage: mise install [OPTIONS] [TOOL@VERSION]...

npm:opencode-ai@1.18.5 install                                                                                         ◟
mise ERROR Failed to install npm:opencode-ai@latest: aube install failed: recursive aube install failed while bootstrapping node-gyp (exit Some(2)) — pre-populate /home/khashvin/.cache/aube/tools/node-gyp/v12 or run `aube install` once while online
mise ERROR Version: 2026.7.13 linux-x64 (2026-07-24)
mise ERROR Run with --verbose or MISE_VERBOSE=1 for more information

[jdx]

This is configured as a per-tool backend option; no manual aube trust-policy file is needed. For opencode-ai, use the narrow allowlist form:

[tools]
"npm:opencode-ai" = {
  version = "latest",
  allow_builds = ["opencode-ai"],
}

There were two separate problems in mise 2026.7.12/2026.7.13:

• package-specific allow_builds was serialized as an array, while aube expects a package-to-boolean map (#11262);
• aube’s node-gyp bootstrap used current_exe(), which re-executed the host as mise install --ignore-scripts --silent, causing the reported argument error. The aube 1.33.1 bump fixes this (#11308).

Both fixes are included in mise 2026.7.14. After upgrading, force a reinstall so the earlier script-skipped installation is replaced:

mise self-update
mise install --force npm:opencode-ai

allow_builds = true should also work on 2026.7.14, but it permits lifecycle scripts for the entire dependency graph; ["opencode-ai"] is the safer choice here.

This comment was generated by an AI coding assistant.

[khashvin]

@jdx Installation works now, but running OpenCode throws this error. I also tried rolling back to versions that previously worked with mise (v1.18.3–v1.18.4), but the issue persists.

➜  ~ opencode --version
/Users/khk/.cache/aube/virtual-store/opencode-ai@1.18.5-a06ab2837a3a582a/node_modules/opencode-ai/bin/opencode.exe:1
����
    �H


SyntaxError: Invalid or unexpected token
    at wrapSafe (node:internal/modules/cjs/loader:1804:18)
    at Module._compile (node:internal/modules/cjs/loader:1845:20)
    at Object..js (node:internal/modules/cjs/loader:2002:10)
    at Module.load (node:internal/modules/cjs/loader:1594:32)
    at Module._load (node:internal/modules/cjs/loader:1396:12)
    at wrapModuleLoad (node:internal/modules/cjs/loader:255:19)
    at Module.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:154:5)
    at node:internal/main/run_main_module:33:47

Node.js v24.18.0

[jdx]

@khashvin Thanks—this is a separate aube linker bug. The generated shim was hard-coded to invoke opencode.exe through Node even after the postinstall replaced it with a native Mach-O/ELF executable.

It is fixed by jdx/aube#1138, which has now been merged. The fix still needs to be included in an aube release and then bumped in mise before it reaches users.

This comment was generated by an AI coding assistant.