[cleo] pivot to nix-shell pattern for latest claude and other packages

cleo.darwin.nix

@@ -7,9 +7,10 @@ let
     taps = [
       "fwdcloudsec/granted" # aws sso utility
       "felipeelias/tap" # claude-statusline
-      "f1bonacc1/tap" # process-compose
       "oven-sh/bun" # bun
-      "sst/tap" # opencode
+
+      ## Excluded intentionally
+      # "sst/tap" # opencode
     ];
     brews = [
       "allure"
@@ -17,20 +18,19 @@ let
       "awscli"
       "ccusage"
       "fd"
-      "f1bonacc1/tap/process-compose"
       "felipeelias/tap/claude-statusline"
       "oven-sh/bun/bun"
       "fwdcloudsec/granted/granted"
-      "gdal"
       "gh"
       "jq"
       "maven"
       "rg"
       "snyk-cli"
-      "sst/tap/opencode"
       "ldcli"
 
       ## Excluded intentionally
+      # "gdal"
+      # "sst/tap/opencode"
       # "libpq@17"
       # "node@22"
     ];
@@ -38,7 +38,6 @@ let
       "1password-cli"
       "aws-vpn-client"
       "chromedriver"
-      "claude-code" # stable channel; playbook can opt into claude-code@latest
       "copilot-cli"
       "docker-desktop"
       "expo-orbit"
@@ -124,7 +123,6 @@ in
       ++ [
         "biome"
         "jira-cli"
-        "treehouse"
       ]
     );
     # visual-studio-code is installed by Homebrew (in ansibleRequired.casks) so
@@ -136,9 +134,7 @@ in
         "android-commandlinetools"
         "android-platform-tools"
         "bruno"
-        "claude"
         "figma"
-        "super-productivity"
         "kopiaui"
         "libreoffice"
         "obsidian"
@@ -149,14 +145,6 @@ in
         "zoom"
       ]
     );
-
-    masApps = {
-      BetterSnapTool = 417375580;
-      HiddenBar = 1452453066;
-      # "Jamf Trust" = 1608041266;
-      MeetingBar = 1518425043;
-      Wireguard = 1451685025;
-    };
   };
 
   nix.settings.experimental-features = "nix-command flakes";

cleo.home.nix

@@ -1,4 +1,4 @@
-{ config, pkgs, inputs, vars, ... }:
+{ config, pkgs, vars, ... }:
 {
   imports = [
     ./programs.vscode.nix
@@ -14,6 +14,12 @@
   programs.zsh.shellAliases = {
     laws = "aws --endpoint=http://localhost:4566";
     assume = "source $(brew --prefix)/bin/assume";
+    # Always runs the latest claude-code from the flake, no local install/update needed.
+    claude = "nix run github:sadjow/claude-code-nix";
+    # Same pattern for process-compose.
+    process-compose = "nix run github:F1bonacc1/process-compose --";
+    # Same pattern for treehouse.
+    treehouse = "nix run github:kunchenguid/treehouse --";
   };
 
   programs.zsh.initContent = ''
@@ -109,4 +115,8 @@
     tuiSidebarPanel.enabled = true;
     maintainerAnnouncements = { enabled = false; home = false; };
   };
+  xdg.configFile."treehouse/config.toml".text = ''
+    [hooks]
+    post_create = ["./conditional-package-manage.sh"]
+  '';
 }

hydrogen.darwin.nix

@@ -30,7 +30,6 @@
       "obsidian" 
       "signal" 
       "spotify"
-      "claude-code"
       "claude"
     ];
   };

hydrogen.home.nix

@@ -3,6 +3,11 @@
     ./programs.vscode.nix
   ];
 
+  programs.zsh.shellAliases = {
+    # Always runs the latest claude-code from the flake, no local install/update needed.
+    claude = "nix run github:sadjow/claude-code-nix";
+  };
+
   home.sessionVariables = {
     # Points to the Homebrew location mentioned in your caveat
     NPM_CONFIG_PREFIX = "${config.home.homeDirectory}/.npm-global";