refactor(wsl): use Windows op.exe via interop instead of native 1password-cli

home/default.nix

@@ -1,5 +1,6 @@
 {
   inputs,
+  lib,
   username,
   pkgs,
   ...
@@ -20,7 +21,9 @@
   };
 
   # ── User-level packages ────────────────────────────
-  home.packages = with pkgs; [
+  home.packages =
+    with pkgs;
+    [
       # Modern CLI replacements
       dust # du
       duf # df
@@ -44,9 +47,12 @@
       nh # nix helper
       just
 
-    # Secrets management
+      # Secrets management (WSL uses Windows op.exe via interop)
+    ]
+    ++ lib.optionals pkgs.stdenv.isDarwin [
       _1password-cli
-
+    ]
+    ++ (with pkgs; [
       # AI coding agent
       opencode
       comment-checker
@@ -54,7 +60,7 @@
       # Misc
       ffmpeg
       pandoc
-  ];
+    ]);
 
   # XDG directories
   xdg.enable = true;

home/shell/fish.nix

@@ -52,6 +52,7 @@
       if set -q WSL_DISTRO_NAME
         alias pbcopy clip.exe
         alias pbpaste "powershell.exe -noprofile -c Get-Clipboard"
+        alias op op.exe
       end
 
       # User-local overrides