use Homebrew on both platforms, remove sudo entirely

System packages and cloud CLIs (aws, azure, gcloud) now install via
Homebrew on both Linux and macOS — the apt codepath, custom cloud-CLI
installers, and all sudo handling are gone. gcloud-cli uses the cask
(has proper Linux support as of brew 4.5+). cps binary now lives at
~/.local/bin/cps; self-update uses os.Executable + atomic rename.
Also fix EXDEV on Linux tmpfs /tmp by keeping neovim/go extract temp
dirs inside ~/shell.

Author: Tanq16

README.md

@@ -15,7 +15,7 @@ A single Go binary (`cps`) that sets up and manages a complete CLI development e
 |---|---|
 | [Oh My Zsh](https://ohmyz.sh/) | Shell framework — `cps init` will not run without it |
 | Git | Used to clone plugins and configs |
-| [Homebrew](https://brew.sh/) (macOS only) | System package installs on macOS |
+| [Homebrew](https://brew.sh/) | System package installs (both Linux and macOS) — `cps` installs all system/cloud CLI packages via brew |
 
 **Recommended:**
 
@@ -26,10 +26,13 @@ A single Go binary (`cps`) that sets up and manages a complete CLI development e
 
 ```bash
 ARCH=$(uname -m); [ "$ARCH" = "x86_64" ] && ARCH=amd64; [ "$ARCH" = "aarch64" ] && ARCH=arm64
-curl -sL "https://github.com/tanq16/cli-productivity-suite/releases/latest/download/cps-$(uname -s | tr '[:upper:]' '[:lower:]')-$ARCH" -o cps
-chmod +x cps && sudo mv cps /usr/local/bin/
+mkdir -p "$HOME/.local/bin"
+curl -sL "https://github.com/tanq16/cli-productivity-suite/releases/latest/download/cps-$(uname -s | tr '[:upper:]' '[:lower:]')-$ARCH" -o "$HOME/.local/bin/cps"
+chmod +x "$HOME/.local/bin/cps"
 ```
 
+If `~/.local/bin` isn't on your PATH yet (common on fresh macOS), run `cps init` via its full path — `~/.local/bin/cps init` — for the first invocation. The rc fragment that `init` deploys adds `~/.local/bin` to PATH for all future sessions.
+
 Or build from source:
 
 ```bash
@@ -41,7 +44,7 @@ make build   # produces ./cps
 
 ### `cps init`
 
-Sets up the base environment — core CLI tools (bat, fd, ripgrep, lsd, jq, yq, fzf, sd, gron, sq, zoxide, gh, anbu, danzo, ai-context), Neovim with NvChad, zsh plugins, tmux with TPM, and config files. Requires sudo on Linux for system packages.
+Sets up the base environment — core CLI tools (bat, fd, ripgrep, lsd, jq, yq, fzf, sd, gron, sq, zoxide, gh, anbu, danzo, ai-context), Neovim with NvChad, zsh plugins, tmux with TPM, and config files. System packages install via Homebrew on both Linux and macOS — no sudo required.
 
 ```bash
 cps init
@@ -80,7 +83,7 @@ Terminal cheat sheets — `cps`, `go`, `uv`, `fnm`, `rust`, `tmux`, `nvim`, `fzf
 
 ### `cps self-update`
 
-Updates the `cps` binary to the latest release. Requires sudo.
+Updates the `cps` binary in place (at whatever path it's running from).
 
 ### Flags
 
@@ -148,6 +151,8 @@ rm -rf $HOME/shell $HOME/.tmux $HOME/.config/nvim $HOME/.config/cps
 # Configs
 rm -f $HOME/.tmux.conf $HOME/.zshrc $HOME/.aerospace.toml $HOME/.config/kitty/kitty.conf $HOME/.config/kitty/current-theme.conf
 rm -rf $HOME/.local/share/nvim $HOME/.oh-my-zsh
-sudo rm -f /usr/local/bin/cps
-sudo rm -rf /usr/local/aws-cli
+rm -f $HOME/.local/bin/cps
+
+# Uninstall brew-managed system and cloud packages (optional)
+brew uninstall awscli azure-cli gcloud-cli
 ```

internal/configs/rc-base.zsh

@@ -1,11 +1,21 @@
+# --- Homebrew ---
+export HOMEBREW_NO_AUTO_UPDATE=1
+if [ -x /opt/homebrew/bin/brew ]; then
+  eval "$(/opt/homebrew/bin/brew shellenv)"
+elif [ -x /home/linuxbrew/.linuxbrew/bin/brew ]; then
+  eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
+elif [ -x /usr/local/bin/brew ]; then
+  eval "$(/usr/local/bin/brew shellenv)"
+fi
+
 # --- Oh My Zsh ---
 export ZSH="$HOME/.oh-my-zsh"
 ZSH_THEME="spaceship"
 plugins=(zsh-autosuggestions zsh-syntax-highlighting)
 source $ZSH/oh-my-zsh.sh
 
 # --- PATH ---
-export PATH="$HOME/shell/extensions:$HOME/shell/executables:/opt/homebrew/bin:$HOME/.local/bin:$PATH"
+export PATH="$HOME/shell/extensions:$HOME/shell/executables:$HOME/.local/bin:$PATH"
 
 # --- FZF ---
 [ -f "$HOME/shell/completions/fzf.zsh" ] && source "$HOME/shell/completions/fzf.zsh"

internal/configs/rc-cloud.zsh

@@ -1,6 +1,8 @@
 # --- gcloud ---
-[ -f "$HOME/shell/gcloud-sdk/path.zsh.inc" ] && source "$HOME/shell/gcloud-sdk/path.zsh.inc"
-[ -f "$HOME/shell/gcloud-sdk/completion.zsh.inc" ] && source "$HOME/shell/gcloud-sdk/completion.zsh.inc"
+if [ -n "$HOMEBREW_PREFIX" ]; then
+  [ -f "$HOMEBREW_PREFIX/share/google-cloud-sdk/path.zsh.inc" ] && source "$HOMEBREW_PREFIX/share/google-cloud-sdk/path.zsh.inc"
+  [ -f "$HOMEBREW_PREFIX/share/google-cloud-sdk/completion.zsh.inc" ] && source "$HOMEBREW_PREFIX/share/google-cloud-sdk/completion.zsh.inc"
+fi
 
 # --- AWS CLI ---
 alias awsn='aws --no-cli-pager'

internal/installer/cloud_cli.go

@@ -27,8 +27,6 @@ func Dispatch(kind registry.ToolKind) Installer {
 		return &DirectDownloadInstaller{}
 	case registry.SystemPackage:
 		return &SystemPackageInstaller{}
-	case registry.CloudCLI:
-		return &CloudCLIInstaller{}
 	case registry.LanguageRuntime:
 		return &LanguageRuntimeInstaller{}
 	case registry.ConfigFile:

internal/installer/installer.go

@@ -60,7 +60,8 @@ func (l *LanguageRuntimeInstaller) installNeovim(p platform.Platform, gh *github
 
 	url := fmt.Sprintf("https://github.com/neovim/neovim/releases/download/stable/nvim-%s-%s.tar.gz", osStr, archStr)
 
-	tmpDir, err := os.MkdirTemp("", "cps-neovim-*")
+	// Temp dir inside p.ShellDir() so os.Rename stays on the same filesystem (avoids EXDEV on Linux tmpfs /tmp).
+	tmpDir, err := os.MkdirTemp(p.ShellDir(), "cps-neovim-*")
 	if err != nil {
 		return Result{Tool: "neovim", Err: err}
 	}
@@ -154,7 +155,8 @@ func (l *LanguageRuntimeInstaller) installGo(p platform.Platform, st *state.Stat
 		return Result{Tool: "go-sdk", Err: fmt.Errorf("no Go download found for %s/%s", p.OS, p.Arch)}
 	}
 
-	tmpDir, err := os.MkdirTemp("", "cps-go-*")
+	// Temp dir inside p.ShellDir() so os.Rename stays on the same filesystem (avoids EXDEV on Linux tmpfs /tmp).
+	tmpDir, err := os.MkdirTemp(p.ShellDir(), "cps-go-*")
 	if err != nil {
 		return Result{Tool: "go-sdk", Err: err}
 	}

internal/installer/language_runtime.go

@@ -13,33 +13,7 @@ import (
 
 type SystemPackageInstaller struct{}
 
-func (s *SystemPackageInstaller) Install(tool *registry.Tool, p platform.Platform, _ *github.Client, st *state.State) Result {
-	switch p.OS {
-	case platform.Linux:
-		return s.installApt(tool, st)
-	case platform.Darwin:
-		return s.installBrew(tool, st)
-	default:
-		return Result{Tool: tool.Name, Err: fmt.Errorf("unsupported OS")}
-	}
-}
-
-func (s *SystemPackageInstaller) installApt(tool *registry.Tool, st *state.State) Result {
-	if len(tool.AptPkgs) == 0 {
-		return Result{Tool: tool.Name, Skipped: true}
-	}
-
-	args := append([]string{"apt-get", "install", "-y"}, tool.AptPkgs...)
-	cmd := exec.Command("sudo", args...)
-	if err := utils.RunCmd(cmd); err != nil {
-		return Result{Tool: tool.Name, Err: fmt.Errorf("apt install failed: %w", err)}
-	}
-
-	st.SetToolVersion(tool.Name, "system-managed")
-	return Result{Tool: tool.Name, Version: "system-managed"}
-}
-
-func (s *SystemPackageInstaller) installBrew(tool *registry.Tool, st *state.State) Result {
+func (s *SystemPackageInstaller) Install(tool *registry.Tool, _ platform.Platform, _ *github.Client, st *state.State) Result {
 	if len(tool.BrewPkgs) == 0 && len(tool.BrewCasks) == 0 {
 		return Result{Tool: tool.Name, Skipped: true}
 	}
@@ -61,6 +35,6 @@ func (s *SystemPackageInstaller) installBrew(tool *registry.Tool, st *state.Stat
 		}
 	}
 
-	st.SetToolVersion(tool.Name, "system-managed")
-	return Result{Tool: tool.Name, Version: "system-managed"}
+	st.SetToolVersion(tool.Name, "brew-managed")
+	return Result{Tool: tool.Name, Version: "brew-managed"}
 }

internal/installer/system_package.go

@@ -163,14 +163,12 @@ var AllTools = []Tool{
 	{
 		Name: "core-utils", Kind: SystemPackage, Category: System,
 		Description: "Core system utilities",
-		AptPkgs:     []string{"git", "wget", "curl", "zip", "unzip", "file"},
-		BrewPkgs:    []string{"git", "wget", "curl"},
+		BrewPkgs:    []string{"git", "wget", "curl", "zip", "unzip", "file"},
 	},
 	{
 		Name: "shell-base", Kind: SystemPackage, Category: System,
 		Description: "Shell and terminal essentials",
-		AptPkgs:     []string{"tmux", "zsh", "htop"},
-		BrewPkgs:    []string{"tmux", "htop"},
+		BrewPkgs:    []string{"tmux", "zsh", "htop"},
 	},
 
 	// ========== Language Runtimes (base only) ==========

internal/registry/manifest.go

@@ -450,18 +450,16 @@ var extensionPacks = []ExtensionPack{
 				Name: "dev-tools", Kind: SystemPackage, Category: ExtSystem, Extension: true,
 				Description: "Development build tools",
 				Platforms:   []string{"linux"},
-				AptPkgs:     []string{"cmake", "gcc", "make", "ninja-build", "gettext"},
+				BrewPkgs:    []string{"cmake", "gcc", "make", "ninja", "gettext"},
 			},
 			{
 				Name: "network-tools", Kind: SystemPackage, Category: ExtSystem, Extension: true,
 				Description: "Network utilities",
-				AptPkgs:     []string{"nmap", "ncat", "openssl"},
-				BrewPkgs:    []string{"openssl", "nmap"},
+				BrewPkgs:    []string{"nmap", "openssl"},
 			},
 			{
 				Name: "media-tools", Kind: SystemPackage, Category: ExtSystem, Extension: true,
 				Description: "Media and monitoring tools",
-				AptPkgs:     []string{"ffmpeg"},
 				BrewPkgs:    []string{"ffmpeg"},
 			},
 			{
@@ -478,16 +476,19 @@ var extensionPacks = []ExtensionPack{
 		Category:    ExtCloud,
 		Tools: []Tool{
 			{
-				Name: "aws-cli", Kind: CloudCLI, Category: ExtCloud, Extension: true,
+				Name: "aws-cli", Kind: SystemPackage, Category: ExtCloud, Extension: true,
 				Description: "AWS CLI v2",
+				BrewPkgs:    []string{"awscli"},
 			},
 			{
-				Name: "azure-cli", Kind: CloudCLI, Category: ExtCloud, Extension: true,
+				Name: "azure-cli", Kind: SystemPackage, Category: ExtCloud, Extension: true,
 				Description: "Azure CLI",
+				BrewPkgs:    []string{"azure-cli"},
 			},
 			{
-				Name: "gcloud-cli", Kind: CloudCLI, Category: ExtCloud, Extension: true,
+				Name: "gcloud-cli", Kind: SystemPackage, Category: ExtCloud, Extension: true,
 				Description: "Google Cloud CLI",
+				BrewCasks:   []string{"gcloud-cli"},
 			},
 		},
 	},