aube install

• Usage: aube install [FLAGS]
• Aliases: i
• Effect: modifies state

Install all dependencies

Flags

• -D --dev — Install only devDependencies.

• -P --prod — Skip devDependencies; install only production deps.

  Aliases: --production

• --dangerously-allow-all-builds — Allow every dependency's lifecycle scripts to run.

  Bypasses the allowBuilds allowlist. Do not use in CI.

• --dry-run — Resolve and report what would happen without writing the lockfile or linking node_modules.

• --fix-lockfile — Re-resolve lockfile entries whose spec drifted from package.json.

  Leaves everything else pinned at its locked version. Unchanged specs keep their existing version and integrity hash; only drifted entries (and any new transitives they pull in) get re-resolved.

• --force — Force reinstall, ignoring lockfile/state freshness.

  Bypasses the node_modules/.aube-state freshness check and re-resolves the lockfile even when nothing has drifted. Mirrors pnpm's install --force.

• --global-pnpmfile <PATH> — Add a global pnpmfile that runs before the local one.

  Mirrors pnpm's --global-pnpmfile <path>. Relative paths resolve against the project root. The global hook runs first and the local hook (if any) runs second, so local mutations win on conflicts — matching pnpm's composition order.

• --ignore-pnpmfile — Skip running .pnpmfile.mjs / .pnpmfile.cjs hooks for this install.

• --ignore-scripts — Skip lifecycle scripts (no-op; aube already skips by default).

• --lockfile-dir <PATH> — Read and write the lockfile in the given directory.

  Instead of placing the lockfile alongside package.json, the project becomes an importer keyed by its relative path from the lockfile directory. Mirrors pnpm's --lockfile-dir.

• --lockfile-only — Resolve dependencies and write the lockfile, but don't link node_modules.

  Useful for CI workflows that only update the lockfile.

• --merge-git-branch-lockfiles — Merge per-branch lockfiles into the main aube-lock.yaml.

  Combines every aube-lock.<branch>.yaml file in the project into aube-lock.yaml and deletes the branch files. Companion to gitBranchLockfile. When mergeGitBranchLockfilesBranchPattern is set in pnpm-workspace.yaml, this happens automatically on matching branches; the flag forces it regardless.

• --network-concurrency <N> — Set the starting concurrency for registry requests.

  Overrides network-concurrency from .npmrc / aube-workspace.yaml when set. Seeds aube's adaptive limiter rather than capping it: concurrency still grows and shrinks in response to registry throttling. Falls back to an auto-scaled default of worker count x3, clamped to 16-128.

• --no-optional — Skip optionalDependencies; don't install optional native modules.

• --no-side-effects-cache — Inverse of --side-effects-cache.

• --no-verify-store-integrity — Inverse of --verify-store-integrity.

  Skips the SHA-512 verify step for every tarball aube pulls into the store during this install.

• --node-linker <MODE> — Which layout to materialize node_modules/ as.

  isolated (default) uses pnpm's .aube/-backed symlink tree; hoisted builds an npm-style flat tree with conflict nesting. Overrides node-linker / nodeLinker from .npmrc / aube-workspace.yaml when set. pnp is not supported.

• --offline — Fail if any metadata or tarball isn't already in the local cache.

  Never hits the network.

• --package-import-method <METHOD> — How to import package files from the global store into the virtual store.

  One of auto (default: detect the fastest strategy), hardlink, copy, clone (reflink; falls back to copy), or clone-or-copy (reflink with a copy fallback). Overrides package-import-method / packageImportMethod from .npmrc / aube-workspace.yaml when set.

• --pnpmfile <PATH> — Override the local pnpmfile location.

  Mirrors pnpm's --pnpmfile <path>. Relative paths resolve against the project root; absolute paths are used as-is. Wins over pnpmfilePath from pnpm-workspace.yaml. A typo (target missing) is a hard miss with a warning rather than a silent fallback to the default.

• --prefer-offline — Prefer cached metadata over revalidation; only hit the network on a miss.

• --public-hoist-pattern <GLOB> — Selectively hoist matching transitive deps to the root node_modules.

  Repeatable; comma-separated values are also accepted.

• --resolution-mode <MODE> — How to resolve version ranges.

  highest (pnpm's classic behavior) or time-based (pick the lowest satisfying direct dep and constrain transitives by a publish-date cutoff). Accepts pnpm's aliases time and lowest-direct. When omitted, falls back to the resolution-mode key in .npmrc / aube-workspace.yaml.

• --shamefully-hoist — Hoist every non-local transitive dep to the top-level node_modules/.

  Overrides shamefully-hoist / shamefullyHoist from .npmrc / aube-workspace.yaml when set.

• --side-effects-cache — Cache post-build side effects for dependency packages.

  Defaults to on and only applies to packages allowed by allowBuilds / onlyBuiltDependencies. Pair with --no-side-effects-cache to opt out.

• --verify-store-integrity — Verify tarball SHA-512 before importing into the store.

  Checks each tarball against the lockfile integrity. Defaults to true (pnpm parity); pair with --no-verify-store-integrity to skip.

• -h --help — Print help

Lockfile

• --frozen-lockfile — Error if the lockfile drifts from package.json.
• --no-frozen-lockfile — Always re-resolve, even if the lockfile is up to date.
• --prefer-frozen-lockfile — Use the lockfile when fresh, re-resolve when stale.

Network

• --fetch-retries <N> — Number of retry attempts for failed registry fetches.

  Overrides fetchRetries / fetch-retries from .npmrc / aube-workspace.yaml when set. Pair with --fetch-timeout to fail fast in scripted test runs.

• --fetch-retry-factor <N> — Exponential backoff factor between retry attempts.

  Overrides fetchRetryFactor / fetch-retry-factor from .npmrc / aube-workspace.yaml when set. Integer-only; fractional values like 1.5 are rejected.

• --fetch-retry-maxtimeout <MS> — Upper bound (ms) on the computed retry backoff.

  Overrides fetchRetryMaxtimeout / fetch-retry-maxtimeout from .npmrc / aube-workspace.yaml when set.

• --fetch-retry-mintimeout <MS> — Lower bound (ms) on the computed retry backoff.

  Overrides fetchRetryMintimeout / fetch-retry-mintimeout from .npmrc / aube-workspace.yaml when set.

• --fetch-timeout <MS> — Per-request HTTP timeout in milliseconds.

  Overrides fetchTimeout / fetch-timeout from .npmrc / aube-workspace.yaml when set. Covers the whole request (headers and body together).

• --registry <URL> — Override the default registry URL for this invocation.

  Use this npm registry URL for package metadata, tarballs, audit requests, dist-tags, and registry writes.

Virtual store

• --disable-global-virtual-store — Force the shared global virtual store off for this invocation.

  Packages are materialized inside the project's virtual store instead of symlinked from the shared tree under <cacheDir>/virtual-store/v1/ (by default ~/.cache/aube/virtual-store/v1/).

  Aliases: --disable-gvs

• --enable-global-virtual-store — Force the shared global virtual store on for this invocation.

  Overrides CI's default per-project materialization and the disableGlobalVirtualStoreForPackages auto-disable heuristic.

  Aliases: --enable-gvs