mise lock for aws-cli on macos locks Linux to macOS packages

[lowjoel]

Hello! Running mise lock for a project containing aws-cli in tools causes the lockfile to include an invalid binary:

$ cat mise.toml
<snip>
[tools]
# https://github.com/aws/aws-cli/blob/v2/CHANGELOG.rst
aws-cli = "latest"
</snip>
$ head mise.lock
[[tools.aws-cli]]
version = "2.32.15"
backend = "aqua:aws/aws-cli"
"platforms.linux-arm64" = { url = "https://awscli.amazonaws.com/AWSCLIV2-2.32.15.pkg"}
"platforms.linux-x64" = { url = "https://awscli.amazonaws.com/AWSCLIV2-2.32.15.pkg"}
"platforms.macos-arm64" = { url = "https://awscli.amazonaws.com/AWSCLIV2-2.32.15.pkg"}
"platforms.macos-x64" = { url = "https://awscli.amazonaws.com/AWSCLIV2-2.32.15.pkg"}
<snip>

When running the GitHub action for mise install, I then get a cryptic

  mise ERROR Failed to install aqua:aws/aws-cli@latest: failed to open zip archive: ~/.local/share/mise/downloads/aws-cli/2.32.15/AWSCLIV2-2.32.15.pkg: invalid Zip archive: Could not find EOCD

Probably because it's trying to install a macOS package on Linux.

$ mise doctor
version: 2025.12.12 macos-arm64 (2025-12-18)
activated: yes
shims_on_path: no
self_update_available: no

build_info:
  Target: aarch64-apple-darwin
  Features: DEFAULT, NATIVE_TLS, SELF_UPDATE
  Built: Thu, 18 Dec 2025 18:12:37 +0000
  Rust Version: rustc 1.92.0 (ded5c06cf 2025-12-08) (Homebrew)
  Profile: release

shell:
  /bin/zsh
  zsh 5.9 (arm64-apple-darwin25.0)

aqua:
  baked in registry tools: 2166

dirs:
  cache: ~/Library/Caches/mise
  config: ~/.config/mise
  data: ~/.local/share/mise
  shims: ~/.local/share/mise/shims
  state: ~/.local/state/mise

config_files:
  ~/.config/mise/config.toml
  <snip>

ignored_config_files: (none)

backends:
  aqua
  asdf
  cargo
  conda
  core
  dotnet
  gem
  github
  gitlab
  go
  npm
  pipx
  spm
  http
  ubi
  vfox

plugins:
  setup-envtest  https://github.com/mise-plugins/mise-setup-envtest.git#061f3ab

toolset:
  aqua:99designs/aws-vault@7.2.0
  aqua:aws/aws-cli@2.32.15
  aqua:cli/cli@2.83.2
  aqua:getsops/sops@3.11.0
  aqua:jqlang/jq@1.8.1
  aqua:kubernetes/kubectl@1.34.0
  aqua:pnpm/pnpm@10.25.0
  aqua:watchexec/watchexec@2.3.2
  core:node@24.11.1
  core:python@3.14.2

path:
  <snip>/node_modules/.bin
  ~/.local/share/mise/installs/aws-cli/2.32.15/.mise-bins
  ~/.local/share/mise/installs/aws-vault/7.2.0
  ~/.local/share/mise/installs/github-cli/2.83.2/gh_2.83.2_macOS_arm64/bin
  ~/.local/share/mise/installs/jq/1.8.1
  ~/.local/share/mise/installs/kubectl/1.34.0
  ~/.local/share/mise/installs/node/24.11.1/bin
  ~/.local/share/mise/installs/pnpm/10.25.0
  ~/.local/share/mise/installs/python/3.14.2/bin
  ~/.local/share/mise/installs/sops/3.11.0
  ~/.local/share/mise/installs/watchexec/2.3.2/watchexec-2.3.2-aarch64-apple-darwin
  /opt/homebrew/opt/go/libexec/bin
  ~/Development/go/bin
  /opt/homebrew/Cellar/ruby/3.4.7/bin
  /opt/homebrew/Cellar/python@3.13/3.13.10/bin
  /opt/homebrew/Cellar/node@24/24.11.1/bin
  /opt/homebrew/bin
  /opt/homebrew/sbin
  /usr/local/sbin
  /usr/local/bin
  ~/bin
  /System/Cryptexes/App/usr/bin
  /usr/bin
  /bin
  /usr/sbin
  /sbin
  /var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/local/bin
  /var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/bin
  /var/run/com.apple.security.cryptexd/codex.system/bootstrap/usr/appleinternal/bin
  /opt/pmk/env/global/bin
  /Applications/Wireshark.app/Contents/MacOS
  ~/.orbstack/bin
  ~/.zprezto/modules/colors/bin

env_vars:
  MISE_SHELL=zsh
  MISE_TASK_OUTPUT=quiet

settings:
  experimental                         true                    ~/.config/mise/config.toml
  activate_aggressive                  true                    <snip>/mise.toml
  aqua.cosign                          false                   <snip>/mise.toml
  aqua.slsa                            false                   <snip>/mise.toml
  experimental                         true                    <snip>/mise.toml
  fetch_remote_versions_cache          "1d"                    <snip>/mise.toml
  idiomatic_version_file_enable_tools  ["node"]                <snip>/mise.toml
  jobs                                 100                     <snip>/mise.toml
  lockfile                             true                    <snip>/mise.toml
  node.gpg_verify                      false                   <snip>/mise.toml
  python.compile                       false                   <snip>/mise.toml
  quiet                                false                   <snip>/mise.toml
  task_output                          "quiet"                 <snip>/mise.toml
  unix_default_inline_shell_args       "bash -eou pipefail -c" <snip>/mise.toml

No problems found

[mackwic]

Hi, just to add a chip here that we reproduce the same issue. Any guidance would be appreciated

[mackwic]

I've opened a PR with a fix: #8183