[jdx]

Summary

• call aube v1.38.0 with invocation-scoped storage overrides
• disable aube's global virtual store so npm tools are materialized inside their mise install directories
• keep aube metadata and CAS data under mise's shared npm/aube cache subtree
• verify the ownership boundary in unit and end-to-end tests

Root cause

Embedded aube previously inherited aube's process-wide cache/data namespaces and global virtual store. Removing a mise-managed npm tool therefore left package data owned by aube outside mise's cache-prune lifecycle, and standalone aube store prune could not reliably infer when mise installations disappeared.

With project-local materialization, installed tools do not depend on the regenerable CAS after installation. mise cache prune npm can now reclaim that state according to mise's configured cache age.

Fixes #11737

Stack

Depends on #11759, which updates the embedded aube crates to v1.38.0.

Validation

• cargo test embedded_aube_uses_mise_owned_cache_and_store
• mise run test:e2e e2e/backend/test_npm_aube
• cargo check
• cargo clippy --all-features --all-targets -- -D warnings
• cargo fmt --all -- --check

AI-assisted — Tool: Codex; model: unavailable/unavailable; version: unavailable.

---

Note

Medium Risk
Changes npm install storage and materialization behavior; misconfiguration could affect install layout or cache pruning, but scope is limited to embedded aube and is covered by e2e/unit tests.

Overview
Embedded aube installs no longer lean on aube's process-wide global virtual store or default cache/data namespaces for package materialization. Installs call add_with_overrides with EmbedderInstallOverrides: use_global_virtual_store: false so tools land in each mise install dir (node_modules), and cache/store under $MISE_CACHE_DIR/npm/aube/{cache,store} so regenerable CAS/metadata is owned by mise's npm cache lifecycle.

aube_host.rs docs and tests are updated to reflect that on-disk layout is per-invocation overrides, while lockfile/manifest naming (aube.allowBuilds, aube-lock.yaml) stays compatible with standalone aube.

Tests add a unit check for override paths and e2e assertions that packument cache and store files exist under the mise npm cache tree after npm:cowsay install.

^{Reviewed by Cursor Bugbot for commit e076492. Bugbot is set up for automated code reviews on this repo. Configure here.}

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Pro Plus

Run ID: a4d6dabe-5492-47f1-bc85-32adb6f4e183

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[greptile-apps]

Greptile Summary

The PR isolates embedded aube storage within mise's npm cache ownership boundary and disables aube's global virtual store.

• Calls the aube 1.38 embedder with invocation-scoped cache and store overrides.
• Materializes npm tools within their mise installation directories.
• Adds unit and end-to-end coverage for the configured ownership boundary.

Confidence Score: 5/5

The PR appears safe to merge, with no concrete blocking or independently actionable non-blocking issue identified.

The changed installation path consistently supplies mise-owned cache and store directories while disabling global virtual-store materialization, and the added tests cover both the override values and resulting storage boundary.

Important Files Changed

Filename	Overview
src/backend/npm.rs	Routes embedded aube installs through invocation-scoped mise cache/store paths and disables the global virtual store, with focused unit coverage.
src/backend/aube_host.rs	Updates host documentation and test naming to distinguish retained configuration names from newly overridden storage paths.
e2e/backend/test_npm_aube	Extends npm-aube installation coverage to verify that regenerable cache and CAS state are created beneath mise's npm cache root.

_{Reviews (1): Last reviewed commit: "fix(npm): isolate embedded aube storage" | Re-trigger Greptile}

[github-actions]

Instruction counts

Nothing was compared, and so nothing was gated. No series appears on both sides: either the base has no measurements recorded, or the two were measured on different runner classes, which are deliberately not comparable — counts shift between machine types by more than a real regression does.

New, nothing to compare against: env on bamboo-v2-ubuntu24.04-x64-30vcpu-24gb-rust1.97.1, hook-env on bamboo-v2-ubuntu24.04-x64-30vcpu-24gb-rust1.97.1, ls on bamboo-v2-ubuntu24.04-x64-30vcpu-24gb-rust1.97.1, registry on bamboo-v2-ubuntu24.04-x64-30vcpu-24gb-rust1.97.1, startup on bamboo-v2-ubuntu24.04-x64-30vcpu-24gb-rust1.97.1

_{Only instruction counts gate. Wall clock is shown for context — on identical hardware it moves 4-20% run to run.}

_{Measured by tak — instruction-counted CLI benchmarks, stored in this repository's git notes.}

_{e07649204aec vs 2d3bed318608 · measured on the runner, not pushed to the history.}