feat: replace bun with deno for npm tools and runtime

.gitignore

@@ -35,8 +35,5 @@ nvim_issue
 stow/shared/.config/zed/prompts
 stow/Darwin/Library/Application Support/lazygit/state.yml
 
-# npm-tools installed packages (lockfile bun.lockb IS tracked)
-npm-tools/node_modules/
-
 # Runtime symlink created by stow/shared/.claude-web/web-setup.sh on the web sandbox
 /.claude

CLAUDE.md

@@ -79,8 +79,8 @@ Example locations:
 
 ### Package-Managed Tools (npm and Python)
 
-For CLI tools installed via bun (npm) or uv (Python). Unlike self-managed CLIs,
-these require explicit upgrades via `./rebuild.sh --update-unstable` or
+For CLI tools installed via deno (npm) or uv (Python). Unlike self-managed
+CLIs, these require explicit upgrades via `./rebuild.sh --update-unstable` or
 `--update`.
 
 - **Module**: `nix/shared/home/package-tools.nix`
@@ -89,9 +89,10 @@ these require explicit upgrades via `./rebuild.sh --update-unstable` or
 
 **Adding npm tools:**
 
-1. Add the package to `packageTools.npmPackages` in the appropriate Nix config
+1. Add a `{ package, bin }` entry to `packageTools.npmPackages` in the
+   appropriate Nix config (`bin` is the package.json "bin" name)
 2. Run `./rebuild.sh` to install
-3. Update later: `./rebuild.sh --update-unstable` or `bun update -g`
+3. Update later: `./rebuild.sh --update-unstable` or `npm-tools-upgrade`
 
 **Adding Python CLI tools (via uv):**
 
@@ -146,8 +147,6 @@ For each language, consult the corresponding file in
 
 ## Gotchas
 
-- **npm packages are macOS-only**: `packageTools.npmPackages` has dynamic
-  linking issues on NixOS — only add npm tools in Darwin configs
 - **Neovim is managed by Bob**, not nixpkgs — binary is at
   `~/.local/share/bob/nvim-bin/nvim`
 - **`stow/` changes take effect immediately** (just re-run

README.md

@@ -20,10 +20,10 @@ symlinking.
 # Rebuild system + packages + dotfiles (reproducible, uses flake.lock)
 ./rebuild.sh
 
-# Update ALL flake inputs + upgrade uv tools + upgrade bun packages
+# Update ALL flake inputs + upgrade uv tools + upgrade npm tools
 ./rebuild.sh --update
 
-# Update unstable inputs + upgrade uv tools + upgrade bun packages
+# Update unstable inputs + upgrade uv tools + upgrade npm tools
 ./rebuild.sh --update-unstable
 
 # Dotfiles only (no Nix rebuild)

extras/README_NIX.md

@@ -83,7 +83,7 @@ sudo nix --extra-experimental-features "nix-command flakes" run nix-darwin -- sw
 | User packages      | home-manager                  | Per-user    | `nix/shared/home/`                      |
 | User preferences   | home-manager                  | Per-user    | `nix/shared/home/` + host-specific      |
 | Self-managed CLIs  | Native installers (curl/wget) | Per-user    | `nix/shared/home/self-managed-clis.nix` |
-| Package tools      | bun (npm), uv (Python)        | Per-user    | `nix/shared/home/package-tools.nix`     |
+| Package tools      | deno (npm), uv (Python)       | Per-user    | `nix/shared/home/package-tools.nix`     |
 | Host configuration | nix-darwin/NixOS              | System-wide | `nix/hosts/*/configuration.nix`         |
 | System packages    | nix-darwin/NixOS              | System-wide | `nix/shared/system/`                    |
 | System settings    | nix-darwin/NixOS              | System-wide | `nix/shared/system/`                    |
@@ -150,7 +150,7 @@ By default, `./rebuild.sh` aims to be "reproducible" and uses the locked
 `--update` to update all inputs.
 
 ```sh
-# Update unstable/Darwin-related inputs + upgrade uv tools + upgrade bun packages
+# Update unstable/Darwin-related inputs + upgrade uv tools + upgrade npm tools
 ./rebuild.sh --update-unstable
 # Or manually (flake inputs only): nix flake update nixpkgs-unstable nix-darwin home-manager-unstable dotfiles
 

flake.nix

@@ -93,15 +93,15 @@
             # stable.${system}.xxx
 
             # Unstable packages
-            unstable.${system}.bun
+            unstable.${system}.deno
             unstable.${system}.go_latest
             unstable.${system}.nodejs
             unstable.${system}.pnpm
             unstable.${system}.python3
             unstable.${system}.ruby
           ];
           shellHook = ''
-            echo -e "\033[32m[dotfiles-toolchain] bun $(bun --version) | $(go version | awk '{print $1" "$3}') | lua $(lua -v 2>&1 | awk '{print $2}') | node $(node -v) (npm $(npm -v)) | pnpm $(pnpm -v) | python $(python --version | awk '{print $2}') | $(ruby -v | cut -d' ' -f1-2)\033[0m"
+            echo -e "\033[32m[dotfiles-toolchain] $(deno --version | awk 'NR==1{print $1" "$2}') | $(go version | awk '{print $1" "$3}') | lua $(lua -v 2>&1 | awk '{print $2}') | node $(node -v) (npm $(npm -v)) | pnpm $(pnpm -v) | python $(python --version | awk '{print $2}') | $(ruby -v | cut -d' ' -f1-2)\033[0m"
           '';
         };
       };

nix/hosts/plumbus/users/fredrik.nix

@@ -23,7 +23,10 @@ in
 
   # plumbus-specific package-managed tools
   packageTools.npmPackages = [
-    "@googleworkspace/cli"
+    {
+      package = "@googleworkspace/cli";
+      bin = "gws";
+    }
   ];
   packageTools.uvTools = [ ];
 

nix/hosts/zap/users/fredrik.nix

@@ -30,7 +30,10 @@ in
 
   # zap-specific package-managed tools
   packageTools.npmPackages = [
-    "@googleworkspace/cli"
+    {
+      package = "@googleworkspace/cli";
+      bin = "gws";
+    }
   ];
   packageTools.uvTools = [ ];
 

nix/shared/home/common.nix

@@ -42,7 +42,7 @@ in
     # Self-managed CLI tools (installed once, auto-update thereafter)
     selfManagedCLIs.clis = [
       (mkCurlInstaller "claude" "Claude Code" "https://claude.ai/install.sh" "$HOME/.local/bin/claude")
-      (mkCurlInstaller "agent" "Cursor Agent" "https://cursor.com/install" "$HOME/.local/bin/agent")
+      # (mkCurlInstaller "agent" "Cursor Agent" "https://cursor.com/install" "$HOME/.local/bin/agent")
       # (mkCurlInstaller "vibe" "Mistral Vibe" "https://mistral.ai/vibe/install.sh" "$HOME/.local/bin/vibe")
       # (mkCurlInstaller "agy" "Antigravity CLI" "https://antigravity.google/cli/install.sh"
       #   "$HOME/.local/bin/agy"
@@ -54,10 +54,10 @@ in
       '' "$HOME/.opencode/bin/opencode")
     ];
 
-    # npm packages via bun (macOS only, mergeable across config levels)
+    # npm packages (mergeable across config levels)
     packageTools.npmPackages = [ ];
 
-    # Python CLI tools via uv (mergeable across config levels)
+    # Python CLI tools (mergeable across config levels)
     packageTools.uvTools = [
       {
         package = "sqlit-tui";
@@ -143,6 +143,11 @@ in
       # ========================================================================
       # Language-specific
       uv
+      # Deno installs/runs the npm-managed CLI tools. Unlike node/bun global
+      # installs (FHS shebangs, glibc-linked shims), deno shims are /bin/sh
+      # scripts exec'ing the nix store deno -> works on NixOS. Unstable for
+      # the latest Node-compat fixes (no-op on macOS, where pkgs IS unstable).
+      unstable.deno
 
       # Generic development
       bfs
@@ -152,7 +157,6 @@ in
       dust
       fd
       gnumake
-      go-task
       # pre-commit # requires swift, which is problematic and very expensive to build on macOS
       ripgrep
       ugrep
@@ -185,11 +189,9 @@ in
       slides
       chafa # Required for showing images in slides
 
-      # AI coding agents from the llm-agents flake input (see flake.nix).
-      # Update via `./rebuild.sh --update-unstable` (or --update).
-      llmAgents.codex # @openai/codex
-      llmAgents.gemini-cli # @google/gemini-cli
-      llmAgents.pi # @earendil-works/pi-coding-agent
+      llmAgents.codex
+      llmAgents.gemini-cli
+      llmAgents.pi
 
       # ========================================================================
       # Infrastructure & Cloud
@@ -209,7 +211,6 @@ in
     home.file.".config/nvim-deps-path".text = lib.makeBinPath (
       with unstable;
       [
-        bun
         cmake
         beamPackages.elixir
         gcc