diff --git a/recipes/incoming/mise.toml b/recipes/incoming/.deferred/mise.toml
similarity index 100%
rename from recipes/incoming/mise.toml
rename to recipes/incoming/.deferred/mise.toml
diff --git a/recipes/incoming/nu.toml b/recipes/nu.toml
similarity index 65%
rename from recipes/incoming/nu.toml
rename to recipes/nu.toml
index 5d96fb7f..13c42633 100644
--- a/recipes/incoming/nu.toml
+++ b/recipes/nu.toml
@@ -16,31 +16,14 @@ sha256  = "3dafca8bf892f5a2afaac1122a88a7eb7f22a0b62ef901f550173a11d5cbdf6e"
 compiler = "zig-cc"
 target   = "x86_64-linux-musl"
 link     = "static"
-flags    = []
+# --bin nu: solo el shell (no los plugins del workspace, que multiplican el build). SIN fase compile
+# custom ⇒ usa el build por defecto del lab, que MONTA el wrapper .hammer-zig-cc (traduce el target
+# alpine→musl que zig no conoce). La fase abuild-style NO lo montaba ⇒ openssl-sys llamaba a zig con
+# el triple alpine y abortaba (UnknownOperatingSystem).
+flags    = ["--bin", "nu"]
 
 [build.phases]
-# de build() de Alpine (traducido; el lab provee $CBUILD/$CHOST — Etapa G Fase 3; revisá --shared para estático):
-compile = '''
-_abuild_phase() {
-cargo build --release --frozen --bin nu
-}
-_abuild_phase
-'''
-# de package() de Alpine (traducido $pkgdir→/out):
-install = '''
-_abuild_phase() {
-find target/release \
-		-maxdepth 1 \
-		-executable \
-		-type f \
-		-name "nu*" \
-		-exec install -Dm755 '{}' -t "/out"/usr/bin/ \;
-
-	install -Dm644 LICENSE \
-		-t "/out"/usr/share/licenses/nushell/
-}
-_abuild_phase
-'''
+install = "mkdir -p /out/usr/bin && cp target/release/nu /out/usr/bin/nu"
 
 [deps]
 build = ["openssl"]