diff --git a/.github/actions/clone/action.yml b/.github/actions/clone/action.yml
index cdcea6bfce..3a847d54c8 100644
--- a/.github/actions/clone/action.yml
+++ b/.github/actions/clone/action.yml
@@ -36,6 +36,7 @@ runs:
       run: |
         node -e "console.log('ROLLDOWN_HASH=' + require('./packages/tools/.upstream-versions.json').rolldown.hash)" >> $GITHUB_OUTPUT
         node -e "console.log('ROLLDOWN_VITE_HASH=' + require('./packages/tools/.upstream-versions.json')['vite'].hash)" >> $GITHUB_OUTPUT
+        node -e "console.log('OXC_NODE_HASH=' + require('./packages/tools/.upstream-versions.json')['oxc-node'].hash)" >> $GITHUB_OUTPUT
 
     - name: Output ecosystem ci project hash
       shell: bash
@@ -62,6 +63,19 @@ runs:
         ref: ${{ steps.upstream-versions.outputs.ROLLDOWN_VITE_HASH }}
         persist-credentials: false
 
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      with:
+        repository: oxc-project/oxc-node
+        path: oxc-node
+        ref: ${{ steps.upstream-versions.outputs.OXC_NODE_HASH }}
+        persist-credentials: false
+
+    # oxc-node compiles into the native binding, and Cargo.lock records the
+    # patched manifest, so patch it before any cargo command reads it.
+    - name: Patch vendored oxc-node
+      shell: bash
+      run: node packages/tools/src/patch-oxc-node.ts
+
     # Match the manifests used by sync-remote when it generated the root lockfile.
     # The later dependency installation uses --frozen-lockfile, so alignment must run first.
     - name: Align vendored Vite's Vitest dependencies
diff --git a/.github/actions/compute-native-cache-input-hash/action.yml b/.github/actions/compute-native-cache-input-hash/action.yml
index f89222f2b6..445bb83df5 100644
--- a/.github/actions/compute-native-cache-input-hash/action.yml
+++ b/.github/actions/compute-native-cache-input-hash/action.yml
@@ -30,6 +30,8 @@ runs:
           ${{
             hashFiles(
               'packages/tools/.upstream-versions.json',
+              'packages/tools/src/patch-oxc-node.ts',
+              'packages/tools/src/cargo-toml.ts',
               'rust-toolchain.toml',
               'Cargo.lock',
               'Cargo.toml',
diff --git a/.github/scripts/__tests__/upgrade-deps.spec.ts b/.github/scripts/__tests__/upgrade-deps.spec.ts
index 1569855728..14f9bb88e0 100644
--- a/.github/scripts/__tests__/upgrade-deps.spec.ts
+++ b/.github/scripts/__tests__/upgrade-deps.spec.ts
@@ -50,7 +50,16 @@ test.each([false, true])(
     vi.spyOn(process, 'cwd').mockReturnValue(tempDir);
     vi.spyOn(console, 'log').mockImplementation(() => {});
     vi.stubEnv('UPGRADE_DEPS_META_DIR', metaDir);
+    // Each run also covers one side of the oxc-node pin guard: a release that does not
+    // contain the pinned commit leaves the pin alone.
+    const pinnedOxcNode = JSON.parse(
+      readFileSync(join(tempDir, 'packages/tools/.upstream-versions.json'), 'utf8'),
+    )['oxc-node'].hash;
     vi.stubGlobal('fetch', async (url: string) => {
+      if (url.startsWith('https://api.github.com/repos/oxc-project/oxc-node/compare/')) {
+        expect(url).toContain(`/compare/${pinnedOxcNode}...`);
+        return Response.json({ status: failInstall ? 'diverged' : 'ahead' });
+      }
       if (url.startsWith('https://api.github.com/repos/')) {
         return Response.json([{ name: 'v1.2.3', commit: { sha: 'a'.repeat(40) } }]);
       }
@@ -121,6 +130,11 @@ test.each([false, true])(
     expect(versions['@oxlint/plugins'].new).toBe('1.88.0');
     expect(versions['@oxlint/plugins'].new).toBe(versions.oxlint.new);
     expect(versions['oxlint-tsgolint'].new).toBe('7.0.2004');
+    expect(versions['oxc-node']).toEqual(
+      failInstall
+        ? { old: pinnedOxcNode, new: pinnedOxcNode }
+        : { old: pinnedOxcNode, new: 'a'.repeat(40), tag: 'v1.2.3' },
+    );
     if (!failInstall) {
       expect(versions['yuku-parser']).toEqual({ old: '^0.9.3', new: '0.11.2' });
     }
diff --git a/.github/scripts/upgrade-deps.ts b/.github/scripts/upgrade-deps.ts
index bb6c2d1a21..71285474f7 100644
--- a/.github/scripts/upgrade-deps.ts
+++ b/.github/scripts/upgrade-deps.ts
@@ -48,6 +48,9 @@ type UpstreamVersions = {
   vite: {
     hash: string;
   };
+  'oxc-node': {
+    hash: string;
+  };
 };
 
 type PnpmWorkspaceVersions = {
@@ -106,21 +109,22 @@ function recordChange(
 }
 
 // ============ GitHub API ============
+function fetchGitHubRepo(owner: string, repo: string, endpoint: string): Promise<Response> {
+  return fetch(`https://api.github.com/repos/${owner}/${repo}/${endpoint}`, {
+    headers: {
+      Authorization: `token ${process.env.GITHUB_TOKEN}`,
+      Accept: 'application/vnd.github.v3+json',
+    },
+  });
+}
+
 async function getLatestTag(
   owner: string,
   repo: string,
   options: LatestTagOptions = {},
 ): Promise<LatestTag> {
   const perPage = options.stableOnly ? 100 : 1;
-  const res = await fetch(
-    `https://api.github.com/repos/${owner}/${repo}/tags?per_page=${perPage}`,
-    {
-      headers: {
-        Authorization: `token ${process.env.GITHUB_TOKEN}`,
-        Accept: 'application/vnd.github.v3+json',
-      },
-    },
-  );
+  const res = await fetchGitHubRepo(owner, repo, `tags?per_page=${perPage}`);
   if (!res.ok) {
     throw new Error(`Failed to fetch tags for ${owner}/${repo}: ${res.status} ${res.statusText}`);
   }
@@ -141,6 +145,25 @@ async function getLatestTag(
   return { sha: latest.commit.sha, tag: latest.name };
 }
 
+// Whether `head` contains every commit of `base`, so moving a pin from `base` to `head`
+// drops nothing.
+async function containsCommit(
+  owner: string,
+  repo: string,
+  base: string,
+  head: string,
+): Promise<boolean> {
+  if (base === head) {
+    return true;
+  }
+  const res = await fetchGitHubRepo(owner, repo, `compare/${base}...${head}`);
+  if (!res.ok) {
+    throw new Error(`Failed to compare ${owner}/${repo} ${base}...${head}: ${res.status}`);
+  }
+  const { status } = (await res.json()) as { status?: unknown };
+  return status === 'ahead' || status === 'identical';
+}
+
 // ============ npm Registry ============
 async function fetchNpmLatest(packageName: string): Promise<NpmLatestResponse> {
   const res = await fetch(`https://registry.npmjs.org/${packageName}/latest`);
@@ -197,14 +220,24 @@ async function updateUpstreamVersions(): Promise<void> {
 
   const oldRolldownHash = data.rolldown.hash;
   const oldViteHash = data.vite.hash;
-  const [rolldown, vite] = await Promise.all([
+  const oldOxcNodeHash = data['oxc-node'].hash;
+  const [rolldown, vite, oxcNode] = await Promise.all([
     getLatestTag('rolldown', 'rolldown'),
     getLatestTag('vitejs', 'vite', { stableOnly: true }),
+    // Vendored into the native binding; `sync-remote` re-applies its patch.
+    getLatestTag('oxc-project', 'oxc-node', { stableOnly: true }),
   ]);
   data.rolldown.hash = rolldown.sha;
   data.vite.hash = vite.sha;
   recordChange('rolldown', oldRolldownHash, rolldown.sha, rolldown.tag);
   recordChange('vite', oldViteHash, vite.sha, vite.tag);
+  // A pin to an unreleased fix on oxc-node's main stays until a release contains it.
+  if (await containsCommit('oxc-project', 'oxc-node', oldOxcNodeHash, oxcNode.sha)) {
+    data['oxc-node'].hash = oxcNode.sha;
+    recordChange('oxc-node', oldOxcNodeHash, oxcNode.sha, oxcNode.tag);
+  } else {
+    recordChange('oxc-node', oldOxcNodeHash, oldOxcNodeHash);
+  }
 
   fs.writeFileSync(filePath, JSON.stringify(data, null, 2) + '\n');
   console.log('Updated .upstream-versions.json');
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 50088f681c..247e2622f9 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -32,7 +32,9 @@ jobs:
       - name: Output rolldown hash
         id: upstream-versions
         shell: bash
-        run: node -e "console.log('ROLLDOWN_HASH=' + require('./packages/tools/.upstream-versions.json').rolldown.hash)" >> $GITHUB_OUTPUT
+        run: |
+          node -e "console.log('ROLLDOWN_HASH=' + require('./packages/tools/.upstream-versions.json').rolldown.hash)" >> $GITHUB_OUTPUT
+          node -e "console.log('OXC_NODE_HASH=' + require('./packages/tools/.upstream-versions.json')['oxc-node'].hash)" >> $GITHUB_OUTPUT
 
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
@@ -41,6 +43,25 @@ jobs:
           ref: ${{ steps.upstream-versions.outputs.ROLLDOWN_HASH }}
           persist-credentials: false
 
+      # The binding's `oxc-node` path dependency must resolve against the
+      # patched manifest recorded in Cargo.lock.
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          repository: oxc-project/oxc-node
+          path: oxc-node
+          ref: ${{ steps.upstream-versions.outputs.OXC_NODE_HASH }}
+          persist-credentials: false
+
+      # Run the patch script with native TypeScript support instead of unpinned `npx tsx`.
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version-file: .node-version
+          package-manager-cache: false
+
+      - name: Patch vendored oxc-node
+        shell: bash
+        run: node packages/tools/src/patch-oxc-node.ts
+
       - name: Clear git origin for nested checkout
         shell: bash
         run: git remote remove origin
diff --git a/.gitignore b/.gitignore
index c904cdf975..9c4ece5b47 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,6 +8,7 @@ dist
 rolldown
 rolldown-vite
 vite
+oxc-node
 /crates/vp_global_cli/vp
 .void/
 .direnv
diff --git a/Cargo.lock b/Cargo.lock
index 8db7bc4ff6..ed41b934b1 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4228,6 +4228,25 @@ dependencies = [
  "thiserror 2.0.21",
 ]
 
+[[package]]
+name = "oxc-node"
+version = "0.0.0"
+dependencies = [
+ "idna",
+ "memchr",
+ "napi",
+ "napi-build",
+ "napi-derive",
+ "oxc",
+ "oxc_resolver",
+ "oxc_sourcemap",
+ "phf 0.14.0",
+ "serde_json",
+ "simdutf8",
+ "tracing",
+ "tracing-subscriber",
+]
+
 [[package]]
 name = "oxc_allocator"
 version = "0.154.0"
@@ -8309,6 +8328,7 @@ dependencies = [
  "napi",
  "napi-build",
  "napi-derive",
+ "oxc-node",
  "petgraph",
  "pretty_assertions",
  "rolldown_binding",
@@ -8362,6 +8382,7 @@ dependencies = [
  "shell-escape",
  "tempfile",
  "toml",
+ "url",
  "vt_pty_terminal_test",
  "vt_pty_terminal_test_client",
  "vt_snapshot_test",
@@ -8435,6 +8456,7 @@ dependencies = [
  "thiserror 2.0.21",
  "tokio",
  "tracing",
+ "url",
  "uuid",
  "vp_cli_help",
  "vp_command",
diff --git a/Cargo.toml b/Cargo.toml
index ddddc9472c..bff72dcfb4 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -5,7 +5,9 @@ members = ["bench", "crates/*", "packages/cli/binding"]
 # It needs a separate release profile and a crate-local build-std config.
 # Cargo ignores `panic` in per-package profile overrides.
 # See crates/vp_trampoline/Cargo.toml.
-exclude = ["crates/vp_trampoline"]
+# oxc-node is vendored upstream source (see packages/tools/src/patch-oxc-node.ts);
+# excluding it keeps it out of workspace lints, like the nested rolldown workspace.
+exclude = ["crates/vp_trampoline", "oxc-node"]
 
 [workspace.metadata.cargo-shear]
 ignored = [
@@ -354,6 +356,13 @@ oxc_resolver = { version = "11.24.3", features = ["yarn_pnp"] }
 oxc_resolver_napi = { version = "11.24.3", default-features = false, features = ["yarn_pnp"] }
 oxc_sourcemap = "9.0.0"
 
+# vendored oxc-node, compiled into the native binding for `vpx <script>`; without its
+# `napi` feature it registers no exports and declares no global allocator, and
+# `packages/cli/binding/src/oxc_node.rs` forwards what the loader uses. `yarn_pnp`
+# matches the `oxc_resolver` feature the workspace enables, which changes oxc-node's
+# file system signature.
+oxc-node = { path = "./oxc-node", default-features = false, features = ["yarn_pnp"] }
+
 # rolldown crates
 rolldown = { path = "./rolldown/crates/rolldown" }
 rolldown_binding = { path = "./rolldown/crates/rolldown_binding" }
diff --git a/README.md b/README.md
index c99536e355..3524e7bf45 100644
--- a/README.md
+++ b/README.md
@@ -121,7 +121,7 @@ Use `vp migrate` to migrate to Vite+. It merges tool-specific config files such
 
 - **run** - Run monorepo tasks
 - **exec** - Execute a command from local `node_modules/.bin`
-- **node** - Run a Node.js script with the resolved Vite+ environment
+- **node** - Run a Node.js script with the resolved Vite+ environment; use `vpx <file>` for TypeScript
 - **dlx** - Execute a package binary without installing it as a dependency
 - **cache** - Manage the task cache
 
diff --git a/bench/vpx-script.ts b/bench/vpx-script.ts
new file mode 100644
index 0000000000..c123805fd9
--- /dev/null
+++ b/bench/vpx-script.ts
@@ -0,0 +1,273 @@
+/**
+ * Startup benchmark for `vpx <script>` against tsx, behind the numbers in
+ * rfcs/vpx-script-execution.md (Performance).
+ *
+ *   pnpm --filter vite-plus build-ts
+ *   node bench/vpx-script.ts --node /path/to/node22/bin/node --node /path/to/node24/bin/node
+ *
+ * Every scenario runs on each `--node` binary (default: the running one). The
+ * scenarios are generated in the OS temp directory, outside any tsconfig.json or
+ * package.json that would change how either loader treats them. `packages/cli/dist`
+ * is the loader under test, and tsx is the copy `packages/core` depends on. A run
+ * fails when the commands of a scenario disagree on output, exit with an error, or
+ * warn.
+ *
+ * `--vpx <path>` also measures a global `vpx`: a `vpx` symlink to a `vp` built from
+ * this checkout (`cargo build -p vp_global_cli --release`). It runs the Rust shim
+ * itself, with `VP_NODE_VERSION` set to the `--node` binary's version, so the row
+ * includes the shim's startup and Node.js resolution. The scenarios link
+ * `node_modules/vite-plus` to `packages/cli`, so it resolves the loader from the
+ * project, as in a real project.
+ *
+ * Options: `--runs <n>` (default 20) and `--warmup <n>` (default 3) per command,
+ * and `--json <file>` to keep every measurement.
+ */
+
+import { spawnSync } from 'node:child_process';
+import { mkdirSync, readFileSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+import { parseArgs } from 'node:util';
+
+const repo = path.join(path.dirname(fileURLToPath(import.meta.url)), '..');
+const fixtures = path.join(tmpdir(), 'vite-plus-bench-vpx-script');
+const dist = path.join(repo, 'packages/cli/dist');
+const modules = 300;
+
+const { values } = parseArgs({
+  options: {
+    node: { type: 'string', multiple: true, default: [process.execPath] },
+    vpx: { type: 'string' },
+    runs: { type: 'string', default: '20' },
+    warmup: { type: 'string', default: '3' },
+    json: { type: 'string' },
+  },
+});
+const runs = Number(values.runs);
+const warmup = Number(values.warmup);
+
+const tsxPackage = createRequire(path.join(repo, 'packages/core/package.json')).resolve(
+  'tsx/package.json',
+);
+const tsxDir = path.dirname(tsxPackage);
+const tsxVersion = (JSON.parse(readFileSync(tsxPackage, 'utf8')) as { version: string }).version;
+
+function write(file: string, content: string): void {
+  mkdirSync(path.dirname(path.join(fixtures, file)), { recursive: true });
+  writeFileSync(path.join(fixtures, file), content);
+}
+
+function moduleSource(i: number): string {
+  return `export interface Item${i} {
+  id: number;
+  name: string;
+}
+
+export enum Kind${i} {
+  A = 'a${i}',
+  B = 'b${i}',
+}
+
+export class Store${i} {
+  items: Item${i}[] = [];
+
+  constructor(private readonly prefix: string) {}
+
+  add(id: number): Item${i} {
+    const item = { id, name: \`\${this.prefix}-\${id}\` };
+    this.items.push(item);
+    return item;
+  }
+}
+
+export function run${i}(): number {
+  return new Store${i}(Kind${i}.A).add(${i}).id;
+}
+`;
+}
+
+function generateFixtures(): void {
+  rmSync(fixtures, { recursive: true, force: true });
+  // The global `vpx` resolves the loader from the project's `vite-plus` first.
+  mkdirSync(path.join(fixtures, 'node_modules'), { recursive: true });
+  symlinkSync(
+    path.join(repo, 'packages/cli'),
+    path.join(fixtures, 'node_modules/vite-plus'),
+    'dir',
+  );
+  // One erasable file, so Node.js type stripping can run it too.
+  write('hello/package.json', '{ "type": "module" }\n');
+  write('hello/hello.ts', "const message: string = 'hello';\nconsole.log(message);\n");
+
+  // Many modules with enums and parameter properties (not erasable), as an ES module
+  // package and as a package without `"type"`.
+  const index = [
+    ...Array.from({ length: modules }, (_, i) => `import { run${i} } from './mod${i}.ts';`),
+    'let total = 0;',
+    ...Array.from({ length: modules }, (_, i) => `total += run${i}();`),
+    "console.log('total', total);",
+  ].join('\n');
+  for (const [name, packageJson] of [
+    ['esm-app', '{ "type": "module" }\n'],
+    ['cjs-app', '{ "name": "cjs-app" }\n'],
+  ]) {
+    write(`${name}/package.json`, packageJson);
+    write(`${name}/index.ts`, `${index}\n`);
+    for (let i = 0; i < modules; i++) {
+      write(`${name}/mod${i}.ts`, moduleSource(i));
+    }
+  }
+
+  // One 1.8 MB file without import/export, as CommonJS and as an ES module.
+  let large = '';
+  for (let i = 0; i < 12000; i++) {
+    large +=
+      `interface Shape${i} { id: number; label: string }\n` +
+      `function make${i}(id: number): Shape${i} { return { id, label: 'shape-${i}-' + id.toString(16) }; }\n`;
+  }
+  large +=
+    "let total: number = 0;\nfor (let i = 0; i < 100; i++) total += make0(i).id;\nconsole.log('total', total);\n";
+  write('large-cjs/package.json', '{ "name": "large-cjs" }\n');
+  write('large-cjs/main.ts', large);
+  write('large-esm/package.json', '{ "type": "module" }\n');
+  write('large-esm/main.ts', large);
+}
+
+const scenarios = [
+  { name: 'hello', entry: 'hello.ts' },
+  { name: 'esm-app', entry: 'index.ts' },
+  { name: 'cjs-app', entry: 'index.ts' },
+  { name: 'large-cjs', entry: 'main.ts' },
+  { name: 'large-esm', entry: 'main.ts' },
+];
+
+interface Command {
+  label: string;
+  /** The executable; the `--node` binary when absent. */
+  program?: string;
+  args: string[];
+  env: NodeJS.ProcessEnv;
+}
+
+function commands(scenario: string, entry: string, nodeVersion: string): Command[] {
+  // `VP_HOME` stays, so a global `vpx` finds its managed runtimes.
+  const env = Object.fromEntries(
+    Object.entries(process.env).filter(([key]) => key === 'VP_HOME' || !/^(VP|TSX|OXC)_/.test(key)),
+  );
+  const noCache = { ...env, TSX_DISABLE_CACHE: '1' };
+  const loader = [
+    '--require',
+    path.join(dist, 'script-preload.cjs'),
+    '--import',
+    pathToFileURL(path.join(dist, 'script-register.js')).href,
+  ];
+  const tsxLoader = pathToFileURL(path.join(tsxDir, 'dist/loader.mjs')).href;
+  const tsxCli = path.join(tsxDir, 'dist/cli.mjs');
+  const vpxBin = path.join(repo, 'packages/cli/bin/vpx');
+  return [
+    // The global `vpx`: the Rust shim resolves Node.js and the loader, then execs it.
+    ...(values.vpx
+      ? [
+          {
+            label: 'global `vpx` (1 process)',
+            program: values.vpx,
+            args: [entry],
+            env: { ...env, VP_NODE_VERSION: nodeVersion },
+          },
+        ]
+      : []),
+    // What the global `vpx` execs in place, without the Rust shim's own startup.
+    { label: '`vpx` loader (1 process)', args: [...loader, entry], env },
+    { label: '`node --import tsx` (1 process)', args: ['--import', tsxLoader, entry], env },
+    { label: '`node --import tsx`, no cache', args: ['--import', tsxLoader, entry], env: noCache },
+    // Both start the script in a child Node.js process.
+    { label: '`vpx` local bin (exec on Unix)', args: [vpxBin, entry], env },
+    { label: '`tsx` CLI (2 processes)', args: [tsxCli, entry], env },
+    { label: '`tsx` CLI, no cache', args: [tsxCli, entry], env: noCache },
+    ...(scenario === 'hello' ? [{ label: '`node` type stripping', args: [entry], env }] : []),
+  ];
+}
+
+function time(node: string, command: Command, cwd: string) {
+  const start = performance.now();
+  const result = spawnSync(command.program ?? node, command.args, { cwd, env: command.env });
+  return {
+    ms: performance.now() - start,
+    status: result.status,
+    stdout: result.stdout.toString().trim(),
+    stderr: result.stderr.toString().trim(),
+  };
+}
+
+function median(sorted: number[]): number {
+  const middle = Math.floor(sorted.length / 2);
+  return sorted.length % 2 ? sorted[middle] : (sorted[middle - 1] + sorted[middle]) / 2;
+}
+
+generateFixtures();
+
+const nodes = values.node.map((node) => ({
+  node,
+  version: spawnSync(node, ['-p', 'process.versions.node']).stdout.toString().trim(),
+}));
+const results: {
+  node: string;
+  scenario: string;
+  command: string;
+  median: number;
+  samples: number[];
+}[] = [];
+for (const { node, version } of nodes) {
+  for (const { name, entry } of scenarios) {
+    const cwd = path.join(fixtures, name);
+    let expected: string | undefined;
+    for (const command of commands(name, entry, version)) {
+      const first = time(node, command, cwd);
+      expected ??= first.stdout;
+      if (first.status !== 0 || first.stdout !== expected || first.stderr.includes('Warning')) {
+        throw new Error(
+          `${version} ${name} ${command.label}: exit ${first.status}, stdout ${JSON.stringify(first.stdout)}\n${first.stderr}`,
+        );
+      }
+      for (let i = 1; i < warmup; i++) {
+        time(node, command, cwd);
+      }
+      const samples = Array.from({ length: runs }, () => time(node, command, cwd).ms).toSorted(
+        (a, b) => a - b,
+      );
+      results.push({
+        node: version,
+        scenario: name,
+        command: command.label,
+        median: median(samples),
+        samples,
+      });
+      console.error(
+        `${version} ${name.padEnd(9)} ${command.label.padEnd(36)} ${median(samples).toFixed(1)} ms`,
+      );
+    }
+  }
+}
+
+if (values.json) {
+  writeFileSync(values.json, `${JSON.stringify({ tsx: tsxVersion, results }, null, 2)}\n`);
+}
+
+const versions = nodes.map(({ version }) => version);
+console.log(`tsx ${tsxVersion}; median of ${runs} runs after ${warmup} warmup runs\n`);
+console.log(`| Scenario | Command | ${versions.map((v) => `Node.js ${v}`).join(' | ')} |`);
+console.log(`| --- | --- | ${versions.map(() => '--:').join(' | ')} |`);
+for (const { name } of scenarios) {
+  const labels = [...new Set(results.filter((r) => r.scenario === name).map((r) => r.command))];
+  for (const label of labels) {
+    const cells = versions.map((version) => {
+      const row = results.find(
+        (r) => r.node === version && r.scenario === name && r.command === label,
+      );
+      return row ? `${row.median.toFixed(0)} ms` : '';
+    });
+    console.log(`| \`${name}\` | ${label} | ${cells.join(' | ')} |`);
+  }
+}
diff --git a/crates/vp_cli_snapshots/Cargo.toml b/crates/vp_cli_snapshots/Cargo.toml
index e654ad6fce..db059b89de 100644
--- a/crates/vp_cli_snapshots/Cargo.toml
+++ b/crates/vp_cli_snapshots/Cargo.toml
@@ -31,6 +31,7 @@ serde = { workspace = true }
 shell-escape = { workspace = true }
 tempfile = { workspace = true }
 toml = { workspace = true }
+url = { workspace = true }
 vt_pty_terminal_test = { workspace = true }
 vt_snapshot_test = { workspace = true }
 which = { workspace = true }
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/cli_helper_message/snapshots/cli_helper_message.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/cli_helper_message/snapshots/cli_helper_message.md
index 1829c4ad14..f126a62eb0 100644
--- a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/cli_helper_message/snapshots/cli_helper_message.md
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/cli_helper_message/snapshots/cli_helper_message.md
@@ -28,7 +28,7 @@ Develop:
 Execute:
   run    Run tasks (also available as standalone `vpr`)
   exec   Execute a command from local node_modules/.bin
-  node   Run a Node.js script (shorthand for `env exec node`)
+  node   Run plain Node.js (`env exec node`); `vpx <file>` runs TypeScript
   dlx    Execute a package binary without installing it as a dependency
   cache  Manage the task cache
 
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_toolchain/snapshots/toolchain_full_global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_toolchain/snapshots/toolchain_full_global.md
index cd9ab043ce..209b74891e 100644
--- a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_toolchain/snapshots/toolchain_full_global.md
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_toolchain/snapshots/toolchain_full_global.md
@@ -21,5 +21,8 @@ vite-plus@<version>
 ├── depends on oxlint@<version>
 ├── depends on oxlint-tsgolint@<version>
 ├── depends on oxfmt@<version>
-└── compiles vite-task (built <build-time>, revision <revision>)
+├── compiles vite-task (built <build-time>, revision <revision>)
+└── compiles oxc-node@<version> (<revision>)
+    ├── compiles oxc@<version>
+    └── compiles oxc-resolver@<version>
 ```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_toolchain/snapshots/toolchain_full_local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_toolchain/snapshots/toolchain_full_local.md
index 6a10c025d5..a983347b5a 100644
--- a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_toolchain/snapshots/toolchain_full_local.md
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_toolchain/snapshots/toolchain_full_local.md
@@ -21,5 +21,8 @@ vite-plus@<version>
 ├── depends on oxlint@<version>
 ├── depends on oxlint-tsgolint@<version>
 ├── depends on oxfmt@<version>
-└── compiles vite-task (built <build-time>, revision <revision>)
+├── compiles vite-task (built <build-time>, revision <revision>)
+└── compiles oxc-node@<version> (<revision>)
+    ├── compiles oxc@<version>
+    └── compiles oxc-resolver@<version>
 ```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_toolchain/snapshots/toolchain_old_local_routing.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_toolchain/snapshots/toolchain_old_local_routing.md
index c824922b03..b98a86b6cb 100644
--- a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_toolchain/snapshots/toolchain_old_local_routing.md
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_toolchain/snapshots/toolchain_old_local_routing.md
@@ -50,7 +50,10 @@ vite-plus@<version>
 ├── depends on oxlint@<version>
 ├── depends on oxlint-tsgolint@<version>
 ├── depends on oxfmt@<version>
-└── compiles vite-task (built <build-time>, revision <revision>)
+├── compiles vite-task (built <build-time>, revision <revision>)
+└── compiles oxc-node@<version> (<revision>)
+    ├── compiles oxc@<version>
+    └── compiles oxc-resolver@<version>
 ```
 
 ## `vp why vite`
@@ -84,5 +87,8 @@ vite-plus@<version>
 ├── depends on oxlint@<version>
 ├── depends on oxlint-tsgolint@<version>
 ├── depends on oxfmt@<version>
-└── compiles vite-task (built <build-time>, revision <revision>)
+├── compiles vite-task (built <build-time>, revision <revision>)
+└── compiles oxc-node@<version> (<revision>)
+    ├── compiles oxc@<version>
+    └── compiles oxc-resolver@<version>
 ```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_pnpm10/snapshots/command_vpx_pnpm10.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_pnpm10/snapshots/command_vpx_pnpm10.md
index af4515f852..e98e076675 100644
--- a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_pnpm10/snapshots/command_vpx_pnpm10.md
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_pnpm10/snapshots/command_vpx_pnpm10.md
@@ -5,25 +5,31 @@
 should show vpx help message
 
 ```
-Execute a command from a local or remote npm package
+Execute a command from a local or remote npm package, or run a script file
 
 Usage: vpx [OPTIONS] <pkg[@version]> [args...]
+       vpx [OPTIONS] [NODE_OPTIONS] <script> [args...]
 
 Arguments:
   <pkg[@version]>  Package binary to execute
-  [args...]        Arguments to pass to the command
+  <script>         Script file to run (.ts, .mts, .cts, .tsx, .js, .mjs, .cjs, .jsx)
+  [args...]        Arguments to pass to the command or script
 
 Options:
   -p, --package <NAME>  Package(s) to install if not found locally
   -c, --shell-mode      Execute the command within a shell environment
   -s, --silent          Suppress all output except the command's output
+      --tsconfig <PATH> tsconfig.json to use when running a script
+  -v, --version         Print the Vite+ version
   -h, --help            Print help
 
 Examples:
-  vpx eslint .                                           # Run local eslint (or download)
-  vpx create-vue my-app                                  # Download and run create-vue
-  vpx oxlint@1.85.0 --version                             # Run specific version
-  vpx -p cowsay -c 'echo "hi" | cowsay'                  # Shell mode with package
+  vpx eslint .                           # Run local eslint (or download)
+  vpx create-vue my-app                  # Download and run create-vue
+  vpx oxlint@1.85.0 --version            # Run specific version
+  vpx -p cowsay -c 'echo "hi" | cowsay'  # Shell mode with package
+  vpx ./scripts/seed.ts --dry-run        # Run a TypeScript script
+  vpx --watch ./server.ts                # Pass Node.js options before the script
 ```
 
 ## `vpx -s vp-test-echo hello`
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_pnpm11/snapshots/command_vpx_pnpm11.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_pnpm11/snapshots/command_vpx_pnpm11.md
index f050d86079..d3f340daf3 100644
--- a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_pnpm11/snapshots/command_vpx_pnpm11.md
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_pnpm11/snapshots/command_vpx_pnpm11.md
@@ -5,25 +5,31 @@
 should show vpx help message
 
 ```
-Execute a command from a local or remote npm package
+Execute a command from a local or remote npm package, or run a script file
 
 Usage: vpx [OPTIONS] <pkg[@version]> [args...]
+       vpx [OPTIONS] [NODE_OPTIONS] <script> [args...]
 
 Arguments:
   <pkg[@version]>  Package binary to execute
-  [args...]        Arguments to pass to the command
+  <script>         Script file to run (.ts, .mts, .cts, .tsx, .js, .mjs, .cjs, .jsx)
+  [args...]        Arguments to pass to the command or script
 
 Options:
   -p, --package <NAME>  Package(s) to install if not found locally
   -c, --shell-mode      Execute the command within a shell environment
   -s, --silent          Suppress all output except the command's output
+      --tsconfig <PATH> tsconfig.json to use when running a script
+  -v, --version         Print the Vite+ version
   -h, --help            Print help
 
 Examples:
-  vpx eslint .                                           # Run local eslint (or download)
-  vpx create-vue my-app                                  # Download and run create-vue
-  vpx oxlint@1.85.0 --version                             # Run specific version
-  vpx -p cowsay -c 'echo "hi" | cowsay'                  # Shell mode with package
+  vpx eslint .                           # Run local eslint (or download)
+  vpx create-vue my-app                  # Download and run create-vue
+  vpx oxlint@1.85.0 --version            # Run specific version
+  vpx -p cowsay -c 'echo "hi" | cowsay'  # Shell mode with package
+  vpx ./scripts/seed.ts --dry-run        # Run a TypeScript script
+  vpx --watch ./server.ts                # Pass Node.js options before the script
 ```
 
 ## `vpx -s vp-test-echo hello`
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/.env b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/.env
new file mode 100644
index 0000000000..6babf3983a
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/.env
@@ -0,0 +1 @@
+GREETING=from-env-file
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/alt/greet.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/alt/greet.ts
new file mode 100644
index 0000000000..139d2bfdcb
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/alt/greet.ts
@@ -0,0 +1 @@
+export const greet = (name: string): string => `hello ${name} from alt`;
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/bin/commonjs/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/bin/commonjs/package.json
new file mode 100644
index 0000000000..02fc370435
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/bin/commonjs/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "commonjs-bin",
+  "private": true
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/bin/commonjs/tool b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/bin/commonjs/tool
new file mode 100644
index 0000000000..49f5c7b915
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/bin/commonjs/tool
@@ -0,0 +1,4 @@
+#!/usr/bin/env vpx
+import { basename } from 'node:path';
+
+console.log(`hello from ${basename(import.meta.filename)}, an extensionless ES module`);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/bin/tool b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/bin/tool
new file mode 100644
index 0000000000..b656f7f10c
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/bin/tool
@@ -0,0 +1,2 @@
+#!/usr/bin/env vpx
+console.log('hello from an extensionless file');
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/bin/tool.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/bin/tool.ts
new file mode 100644
index 0000000000..d541671c94
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/bin/tool.ts
@@ -0,0 +1,5 @@
+#!/usr/bin/env vpx
+enum Greeting {
+  Hello = 'hello from an executable .ts file',
+}
+console.log(Greeting.Hello);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/ipc/child.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/ipc/child.ts
new file mode 100644
index 0000000000..b332c000a8
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/ipc/child.ts
@@ -0,0 +1,16 @@
+enum Reply {
+  Echo = 'echo',
+}
+
+process.on('message', (message: unknown) => {
+  if (message === 'burst') {
+    // Sent right before exiting: vpx must deliver every one before it exits.
+    for (let i = 0; i < 100; i++) {
+      process.send!({ n: i });
+    }
+    process.exitCode = 3;
+    process.disconnect();
+    return;
+  }
+  process.send!({ [Reply.Echo]: message });
+});
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/ipc/parent.mjs b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/ipc/parent.mjs
new file mode 100644
index 0000000000..4e31421ef7
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/ipc/parent.mjs
@@ -0,0 +1,33 @@
+// Starts `vpx ./child.ts` with an IPC channel, as tools that fork a TypeScript runner do,
+// and checks that messages reach the script and come back.
+import { spawn } from 'node:child_process';
+import { once } from 'node:events';
+
+const child = spawn('vpx', ['./child.ts'], { stdio: ['inherit', 'inherit', 'inherit', 'ipc'] });
+const timer = setTimeout(() => {
+  console.log('timeout: no IPC message');
+  child.kill();
+  process.exit(1);
+}, 20_000);
+
+child.send('ping');
+const [reply] = await once(child, 'message');
+console.log('reply', JSON.stringify(reply));
+
+let received = 0;
+child.on('message', () => received++);
+child.send('burst');
+const [code] = await once(child, 'exit');
+await new Promise((resolve) => setImmediate(resolve));
+console.log('messages before exit', received, 'exit code', code);
+
+// The parent closes the channel first; the script's exit code still comes back.
+const second = spawn('vpx', ['./wait-for-disconnect.ts'], {
+  stdio: ['inherit', 'inherit', 'inherit', 'ipc'],
+});
+second.send('ping');
+await once(second, 'message');
+second.disconnect();
+const [secondCode] = await once(second, 'exit');
+console.log('exit code after the parent disconnects', secondCode);
+clearTimeout(timer);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/ipc/wait-for-disconnect.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/ipc/wait-for-disconnect.ts
new file mode 100644
index 0000000000..1aea7a13ff
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/ipc/wait-for-disconnect.ts
@@ -0,0 +1,7 @@
+// Exits with a code of its own once the process that started vpx closes the channel.
+process.on('message', (message: unknown) => {
+  process.send!({ echo: message });
+});
+process.on('disconnect', () => {
+  process.exit(4);
+});
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-automatic/main.tsx b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-automatic/main.tsx
new file mode 100644
index 0000000000..0bc842c5dc
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-automatic/main.tsx
@@ -0,0 +1 @@
+console.log('automatic:', <p>{'hello'}</p>);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-automatic/runtime.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-automatic/runtime.ts
new file mode 100644
index 0000000000..01ba9fd790
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-automatic/runtime.ts
@@ -0,0 +1,5 @@
+export function jsx(tag: string, props: { children?: unknown }): string {
+  return `<${tag}>${String(props.children ?? '')}</${tag}>`;
+}
+export const jsxs = jsx;
+export const Fragment = 'fragment';
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-automatic/tsconfig.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-automatic/tsconfig.json
new file mode 100644
index 0000000000..6aef54b5ee
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-automatic/tsconfig.json
@@ -0,0 +1,7 @@
+{
+  "compilerOptions": {
+    "jsx": "react-jsx",
+    "jsxImportSource": "tiny-jsx",
+    "paths": { "tiny-jsx/jsx-runtime": ["./runtime.ts"] }
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-classic/main.tsx b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-classic/main.tsx
new file mode 100644
index 0000000000..2795426557
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-classic/main.tsx
@@ -0,0 +1,7 @@
+function h(tag: string, props: Record<string, unknown> | null, ...children: unknown[]): string {
+  const id = props?.id ? ` id="${String(props.id)}"` : '';
+  return `<${tag}${id}>${children.join('')}</${tag}>`;
+}
+const Fragment = 'fragment';
+
+console.log('classic:', <div id="greeting">{'hello'}</div>, <>{'fragment child'}</>);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-classic/tsconfig.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-classic/tsconfig.json
new file mode 100644
index 0000000000..386e8842c4
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-classic/tsconfig.json
@@ -0,0 +1,7 @@
+{
+  "compilerOptions": {
+    "jsx": "react",
+    "jsxFactory": "h",
+    "jsxFragmentFactory": "Fragment"
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-cjs/main.tsx b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-cjs/main.tsx
new file mode 100644
index 0000000000..71e42f420e
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-cjs/main.tsx
@@ -0,0 +1,3 @@
+console.log('format', typeof require === 'function' ? 'CommonJS' : 'ESM');
+const Card = (props: { title: string; children?: unknown }) => <section title={props.title}>{props.children}</section>;
+console.log(<Card title="t"><b>bold</b><>frag</></Card>);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-cjs/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-cjs/package.json
new file mode 100644
index 0000000000..eca2517afb
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-cjs/package.json
@@ -0,0 +1,3 @@
+{
+  "name": "automatic-cjs"
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-cjs/tsconfig.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-cjs/tsconfig.json
new file mode 100644
index 0000000000..373c224e60
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-cjs/tsconfig.json
@@ -0,0 +1,6 @@
+{
+  "compilerOptions": {
+    "jsx": "react-jsx",
+    "jsxImportSource": "mini-jsx"
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-dev/main.tsx b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-dev/main.tsx
new file mode 100644
index 0000000000..75799508de
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-dev/main.tsx
@@ -0,0 +1,2 @@
+const Card = (props: { title: string; children?: unknown }) => <section title={props.title}>{props.children}</section>;
+console.log(<Card title="t"><b>bold</b><>frag</></Card>);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-dev/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-dev/package.json
new file mode 100644
index 0000000000..79ca988291
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-dev/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "automatic-dev",
+  "type": "module"
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-dev/tsconfig.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-dev/tsconfig.json
new file mode 100644
index 0000000000..18f46fd327
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-dev/tsconfig.json
@@ -0,0 +1,6 @@
+{
+  "compilerOptions": {
+    "jsx": "react-jsxdev",
+    "jsxImportSource": "mini-jsx"
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-package/main.tsx b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-package/main.tsx
new file mode 100644
index 0000000000..75799508de
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-package/main.tsx
@@ -0,0 +1,2 @@
+const Card = (props: { title: string; children?: unknown }) => <section title={props.title}>{props.children}</section>;
+console.log(<Card title="t"><b>bold</b><>frag</></Card>);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-package/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-package/package.json
new file mode 100644
index 0000000000..7356b5ba02
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-package/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "automatic-package",
+  "type": "module"
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-package/tsconfig.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-package/tsconfig.json
new file mode 100644
index 0000000000..373c224e60
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/automatic-package/tsconfig.json
@@ -0,0 +1,6 @@
+{
+  "compilerOptions": {
+    "jsx": "react-jsx",
+    "jsxImportSource": "mini-jsx"
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/classic-import/main.tsx b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/classic-import/main.tsx
new file mode 100644
index 0000000000..58fa7425f8
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/classic-import/main.tsx
@@ -0,0 +1,3 @@
+import { h, Fragment } from 'mini-jsx';
+const Card = (props: { title: string; children?: unknown }) => <section title={props.title}>{props.children}</section>;
+console.log(<Card title="t"><b>bold</b><>frag</></Card>);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/classic-import/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/classic-import/package.json
new file mode 100644
index 0000000000..43fbb49790
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/classic-import/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "classic-import",
+  "type": "module"
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/classic-import/tsconfig.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/classic-import/tsconfig.json
new file mode 100644
index 0000000000..386e8842c4
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/classic-import/tsconfig.json
@@ -0,0 +1,7 @@
+{
+  "compilerOptions": {
+    "jsx": "react",
+    "jsxFactory": "h",
+    "jsxFragmentFactory": "Fragment"
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/jsx-allowjs/main.jsx b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/jsx-allowjs/main.jsx
new file mode 100644
index 0000000000..860f12702a
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/jsx-allowjs/main.jsx
@@ -0,0 +1,3 @@
+import { h, Fragment } from 'mini-jsx';
+const Card = (props) => <section title={props.title}>{props.children}</section>;
+console.log(<Card title="t"><b>bold</b><>frag</></Card>);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/jsx-allowjs/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/jsx-allowjs/package.json
new file mode 100644
index 0000000000..be87d25a36
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/jsx-allowjs/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "jsx-allowjs",
+  "type": "module"
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/jsx-allowjs/tsconfig.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/jsx-allowjs/tsconfig.json
new file mode 100644
index 0000000000..b5038ea369
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/jsx-allowjs/tsconfig.json
@@ -0,0 +1,8 @@
+{
+  "compilerOptions": {
+    "allowJs": true,
+    "jsx": "react",
+    "jsxFactory": "h",
+    "jsxFragmentFactory": "Fragment"
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/mini-jsx/index.js b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/mini-jsx/index.js
new file mode 100644
index 0000000000..a2c5eda314
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/mini-jsx/index.js
@@ -0,0 +1,22 @@
+// A tiny JSX runtime that renders to strings: classic `h`, automatic `jsx`/`jsxs`, and
+// development `jsxDEV`. The snapshot case copies it into jsx-custom/node_modules.
+function render(tag, props, children) {
+  const list = children.flat().map((child) => (typeof child === 'string' ? child : String(child)));
+  if (tag === Fragment) return list.join('');
+  if (typeof tag === 'function') return tag({ ...props, children: list });
+  const attrs = Object.entries(props ?? {})
+    .filter(([key]) => key !== 'children' && key !== '__self' && key !== '__source')
+    .map(([key, value]) => ` ${key}="${value}"`)
+    .join('');
+  return `<${tag}${attrs}>${list.join('')}</${tag}>`;
+}
+export const Fragment = Symbol.for('mini.fragment');
+export function h(tag, props, ...children) { return render(tag, props, children); }
+export function jsx(tag, props) {
+  const { children = [] } = props;
+  return render(tag, props, Array.isArray(children) ? children : [children]);
+}
+export const jsxs = jsx;
+export function jsxDEV(tag, props, key, isStatic, source) {
+  return `${jsx(tag, props)} @${source ? source.lineNumber : '?'}`;
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/mini-jsx/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/mini-jsx/package.json
new file mode 100644
index 0000000000..c1611713fa
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/mini-jsx/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "mini-jsx",
+  "type": "module",
+  "exports": {
+    ".": "./index.js",
+    "./jsx-runtime": "./index.js",
+    "./jsx-dev-runtime": "./index.js"
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-automatic/main.tsx b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-automatic/main.tsx
new file mode 100644
index 0000000000..8096db1a9a
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-automatic/main.tsx
@@ -0,0 +1,3 @@
+/** @jsxImportSource mini-jsx */
+const Card = (props: { title: string; children?: unknown }) => <section title={props.title}>{props.children}</section>;
+console.log(<Card title="t"><b>bold</b><>frag</></Card>);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-automatic/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-automatic/package.json
new file mode 100644
index 0000000000..1d8378c23c
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-automatic/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "pragma-automatic",
+  "type": "module"
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-classic/main.tsx b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-classic/main.tsx
new file mode 100644
index 0000000000..8678693646
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-classic/main.tsx
@@ -0,0 +1,6 @@
+/** @jsxRuntime classic */
+/** @jsx h */
+/** @jsxFrag Fragment */
+import { h, Fragment } from 'mini-jsx';
+const Card = (props: { title: string; children?: unknown }) => <section title={props.title}>{props.children}</section>;
+console.log(<Card title="t"><b>bold</b><>frag</></Card>);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-classic/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-classic/package.json
new file mode 100644
index 0000000000..ec77a0cf7d
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-classic/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "pragma-classic",
+  "type": "module"
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-mixed/main.tsx b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-mixed/main.tsx
new file mode 100644
index 0000000000..d36f4ef807
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-mixed/main.tsx
@@ -0,0 +1,6 @@
+/** @jsx jsx */
+/** @jsxImportSource mini-jsx */
+// The pragma pair Hono documents. The import source pragma selects the automatic
+// runtime, so the factory pragma is ignored and no `jsx` import is needed.
+const Card = (props: { title: string; children?: unknown }) => <section title={props.title}>{props.children}</section>;
+console.log(<Card title="t"><b>bold</b><>frag</></Card>);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-mixed/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-mixed/package.json
new file mode 100644
index 0000000000..bb0776f1cf
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/jsx-custom/pragma-mixed/package.json
@@ -0,0 +1,4 @@
+{
+  "name": "pragma-mixed",
+  "type": "module"
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/a#b.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/a#b.ts
new file mode 100644
index 0000000000..229e2e40fb
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/a#b.ts
@@ -0,0 +1 @@
+console.log('WRONG FILE: a#b.ts');
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/a.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/a.ts
new file mode 100644
index 0000000000..112a3caac3
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/a.ts
@@ -0,0 +1 @@
+console.log('loaded a.ts: in an import, #b.ts is a fragment');
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/fragment.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/fragment.ts
new file mode 100644
index 0000000000..ecb5b80013
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/fragment.ts
@@ -0,0 +1,2 @@
+// In an ES module import, # starts a URL fragment, as in Node.js.
+import './a#b.ts';
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/hash#dir/main.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/hash#dir/main.ts
new file mode 100644
index 0000000000..76add26378
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/hash#dir/main.ts
@@ -0,0 +1 @@
+console.log('ran hash#dir/main.ts');
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/main b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/main
new file mode 100644
index 0000000000..25a3e4b022
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/main
@@ -0,0 +1 @@
+console.log('WRONG FILE: main');
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/main#hash.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/main#hash.ts
new file mode 100644
index 0000000000..57ea8ff2b9
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/main#hash.ts
@@ -0,0 +1 @@
+console.log('ran main#hash.ts');
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/main%41.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/main%41.ts
new file mode 100644
index 0000000000..fcc582a6c5
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/main%41.ts
@@ -0,0 +1 @@
+console.log('ran main%41.ts');
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/main%file.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/main%file.ts
new file mode 100644
index 0000000000..749dc4f145
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/main%file.ts
@@ -0,0 +1 @@
+console.log('ran main%file.ts');
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/mainA.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/mainA.ts
new file mode 100644
index 0000000000..82e9d9b7e2
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/names/mainA.ts
@@ -0,0 +1 @@
+console.log('WRONG FILE: mainA.ts');
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/order/dep.js b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/order/dep.js
new file mode 100644
index 0000000000..2c7d49acc0
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/order/dep.js
@@ -0,0 +1 @@
+export const from = 'dep.js, compiled output';
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/order/dep.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/order/dep.ts
new file mode 100644
index 0000000000..3cafbf7337
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/order/dep.ts
@@ -0,0 +1 @@
+export const from: string = 'dep.ts';
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/order/main.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/order/main.ts
new file mode 100644
index 0000000000..0fcd237b9a
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/order/main.ts
@@ -0,0 +1,4 @@
+import { from as withExtension } from './dep.js';
+import { from as extensionless } from './dep';
+
+console.log('./dep.js ->', withExtension, '| ./dep ->', extensionless);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/outside-include/scripts/seed.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/outside-include/scripts/seed.ts
new file mode 100644
index 0000000000..4843b6ddc7
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/outside-include/scripts/seed.ts
@@ -0,0 +1,4 @@
+// scripts/ is outside the tsconfig include, so only the alias fallback resolves @app.
+import { name } from '@app/name';
+
+console.log('alias from scripts/:', name);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/outside-include/src/name.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/outside-include/src/name.ts
new file mode 100644
index 0000000000..54dde8f0e8
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/outside-include/src/name.ts
@@ -0,0 +1 @@
+export const name: string = 'src/name.ts';
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/outside-include/tsconfig.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/outside-include/tsconfig.json
new file mode 100644
index 0000000000..bc3813d4ff
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/outside-include/tsconfig.json
@@ -0,0 +1,4 @@
+{
+  "compilerOptions": { "baseUrl": ".", "paths": { "@app/*": ["src/*"] } },
+  "include": ["src"]
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/package.json
new file mode 100644
index 0000000000..e5f29e7c90
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "command-vpx-script",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "engines": {
+    "node": "22.18.0"
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/plain/decorators.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/plain/decorators.ts
new file mode 100644
index 0000000000..4e0103f3f3
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/plain/decorators.ts
@@ -0,0 +1,8 @@
+function logged(value: unknown) {
+  return value;
+}
+
+@logged
+class Service {}
+
+console.log(new Service());
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/plain/main.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/plain/main.ts
new file mode 100644
index 0000000000..f07ec75e14
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/plain/main.ts
@@ -0,0 +1,16 @@
+// No legacy decorators here: class features run natively, and an import whose
+// bindings are unused at runtime stays because of verbatimModuleSyntax.
+import { unused } from './side.ts';
+
+class Counter {
+  count = 0;
+  #step = 1;
+  bump(): number {
+    this.count += this.#step;
+    return this.count;
+  }
+}
+
+const native = Counter.toString().includes('count = 0');
+console.log('native class fields:', native, new Counter().bump());
+void (0 as unknown as typeof unused);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/plain/side.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/plain/side.ts
new file mode 100644
index 0000000000..8a6b4aec70
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/plain/side.ts
@@ -0,0 +1,2 @@
+console.log('side effect kept by verbatimModuleSyntax');
+export const unused = 1;
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/plain/tsconfig.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/plain/tsconfig.json
new file mode 100644
index 0000000000..fffa0027ec
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/plain/tsconfig.json
@@ -0,0 +1 @@
+{ "compilerOptions": { "verbatimModuleSyntax": true } }
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/signals/graceful.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/signals/graceful.ts
new file mode 100644
index 0000000000..8115f97b52
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/signals/graceful.ts
@@ -0,0 +1,7 @@
+const timer = setInterval(() => {}, 1000);
+process.on('SIGINT', () => {
+  console.log('cleaned up after SIGINT');
+  clearInterval(timer);
+});
+const pid: number = process.pid;
+console.log(`ready ${pid}`);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/signals/parent.mjs b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/signals/parent.mjs
new file mode 100644
index 0000000000..ce10b1330e
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/signals/parent.mjs
@@ -0,0 +1,29 @@
+// Starts `vpx` the way a tool does and sends SIGINT to the PID it got back. Both CLIs
+// exec Node.js in place on Unix, so that PID is the script's and the script receives it.
+import { spawn } from 'node:child_process';
+import { once } from 'node:events';
+import { createInterface } from 'node:readline';
+
+async function interrupt(script) {
+  const child = spawn('vpx', [script], { stdio: ['inherit', 'pipe', 'inherit'] });
+  const exited = once(child, 'exit');
+  for await (const line of createInterface({ input: child.stdout })) {
+    const pid = /^ready (\d+)$/.exec(line)?.[1];
+    if (pid === undefined) {
+      console.log(`${script}: ${line}`);
+      continue;
+    }
+    console.log(`${script}: the script runs in the vpx process: ${Number(pid) === child.pid}`);
+    child.kill('SIGINT');
+  }
+  const [code, signal] = await exited;
+  console.log(`${script}: exit code ${code}, signal ${signal}`);
+}
+
+const timer = setTimeout(() => {
+  console.log('timeout: the script kept running');
+  process.exit(1);
+}, 20_000);
+await interrupt('./wait.ts');
+await interrupt('./graceful.ts');
+clearTimeout(timer);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/signals/wait.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/signals/wait.ts
new file mode 100644
index 0000000000..5d4cf9316e
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/signals/wait.ts
@@ -0,0 +1,3 @@
+const pid: number = process.pid;
+console.log(`ready ${pid}`);
+setInterval(() => {}, 1000);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots.toml b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots.toml
new file mode 100644
index 0000000000..de2e6c509a
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots.toml
@@ -0,0 +1,191 @@
+[[case]]
+name = "vpx_script_ts_syntax"
+vp = ["local", "global"]
+comment = "TypeScript syntax that Node.js type stripping rejects runs through the oxc-node loader."
+steps = [
+  { argv = ["vpx", "./src/syntax.ts"], comment = "Enums, namespaces, parameter properties, decorators, and a lowered class field" },
+  { argv = ["vpx", "./src/bom-shebang.ts"], comment = "A byte order mark before a shebang, as Windows editors save it" },
+]
+
+[[case]]
+name = "vpx_script_resolution"
+vp = ["local", "global"]
+comment = "Module resolution matches tsx: tsconfig paths, .js to .ts, extensionless imports, JSON, and CommonJS."
+steps = [
+  { argv = ["vpx", "src/resolution.ts"], comment = "A bare relative path runs when the file exists" },
+  { argv = ["vpx", "--tsconfig", "tsconfig.alt.json", "src/resolution.ts"], comment = "--tsconfig replaces per-file tsconfig selection" },
+  { argv = ["vpx", "--no-warnings", "--tsconfig=tsconfig.alt.json", "src/resolution.ts"], comment = "--tsconfig is also recognized among Node.js options" },
+  { argv = ["vpx", "./main.ts"], cwd = "order", comment = "A .ts next to its compiled .js wins for ./dep.js and ./dep, as with tsc and tsx" },
+  { argv = ["vpx", "./scripts/seed.ts"], cwd = "outside-include", comment = "A file outside every tsconfig include resolves paths through the nearest tsconfig" },
+]
+
+[[case]]
+name = "vpx_script_args_and_options"
+vp = ["local", "global"]
+comment = "Script arguments, Node.js options, and the exit code pass through unchanged."
+steps = [
+  { argv = ["vpx", "./src/args.ts", "a", "--", "--flag"], comment = "Arguments after the script belong to it; exit code 7 propagates", continue-on-failure = true },
+  { argv = ["vpx", "--env-file", ".env", "--import", "./src/setup.ts", "./src/args.ts"], comment = "Node.js options before the script, including a TypeScript --import preload", continue-on-failure = true },
+  { argv = ["vpx", "--import", "./src/setup", "./src/args.ts"], comment = "An extensionless --import preload resolves from the working directory", continue-on-failure = true },
+  { argv = ["vpx", "--eval", "console.log('eval without a script')"], comment = "Node.js invocations without a script still run Node.js" },
+  { argv = ["vpx", "--eval", "console.log(process.argv.slice(1))", "./src/missing.ts"], comment = "After --eval code, a path is an argument, not a script to check" },
+]
+
+[[case]]
+name = "vpx_script_errors"
+vp = ["local", "global"]
+comment = "Script paths never fall back to a remote package download."
+steps = [
+  { argv = ["vpx", "./src/missing.ts"], comment = "Missing explicit path", continue-on-failure = true },
+  { argv = ["vpx", "seed.ts"], comment = "Missing bare name with a TypeScript extension", continue-on-failure = true },
+  { argv = ["vpx", "--tsconfig", "missing.json", "./src/syntax.ts"], comment = "Missing tsconfig", continue-on-failure = true },
+  { argv = ["vpx", "--tsconfig"], comment = "--tsconfig without a path, as a vpx option", continue-on-failure = true },
+  { argv = ["vpx", "-p", "cowsay", "./src/syntax.ts"], comment = "--package selects package mode", continue-on-failure = true },
+  { argv = ["vpx", "-p", "cowsay", "./src/missing.ts"], comment = "A missing explicit path never falls through to a package download, even with --package", continue-on-failure = true },
+  { argv = ["vpx", "-p", "cowsay", "seed.ts"], comment = "Nor does a missing bare name with a TypeScript extension", continue-on-failure = true },
+  { argv = ["vpx", "./bin/missing"], comment = "Nor a missing explicit path without an extension", continue-on-failure = true },
+  { argv = ["vpx"], comment = "Without a command, both CLIs print the same usage", continue-on-failure = true },
+]
+
+[[case]]
+name = "vpx_script_module_formats"
+vp = ["local", "global"]
+comment = "CommonJS and ESM interop, preloads, child processes, and node:test."
+steps = [
+  { argv = ["vpx", "./src/both.cts"], comment = "A .cts that uses export is CommonJS with ES module syntax; it fails with a clear error", continue-on-failure = true },
+  { argv = ["vpx", "./src/import-cts.ts"], comment = "Importing it reports the same error", continue-on-failure = true },
+  { argv = ["vpx", "--require", "./src/setup.cts", "./src/print-setup.ts"], comment = "A TypeScript --require preload runs after the loader" },
+  { argv = ["vpx", "./src/fork.ts"], comment = "fork() and Worker inherit the loader" },
+  { argv = ["vpx", "--test", "--test-reporter=dot", "./tests/enum.test.ts"], comment = "node:test runs .ts test files" },
+  { argv = ["vpx", "--test", "--test-reporter=dot", "./tests/**/*.test.ts"], comment = "A test glob reaches node:test as a pattern, not a script path" },
+  { argv = ["vpx", "./src/data-url.ts"], comment = "data: URL imports keep Node.js' handling" },
+  { argv = ["vpx", "./src/require-tla.cts"], comment = "require() of a module with top-level await reports Node.js' error code" },
+]
+
+[[case]]
+name = "vpx_script_ts_dependency"
+vp = ["local", "global"]
+comment = "TypeScript published in node_modules is transformed, which Node.js type stripping refuses."
+steps = [
+  { argv = ["vpt", "mkdir", "-p", "node_modules/ts-dep"], snapshot = false },
+  { argv = ["vpt", "write-file", "node_modules/ts-dep/package.json", "{ \"name\": \"ts-dep\", \"type\": \"module\", \"exports\": \"./index.ts\" }\n"], snapshot = false },
+  { argv = ["vpt", "write-file", "node_modules/ts-dep/index.ts", "export enum Level { High = 'high' }\nexport const level: Level = Level.High;\n"], snapshot = false },
+  { argv = ["vpt", "mkdir", "-p", "node_modules/ts-cjs-dep"], snapshot = false },
+  { argv = ["vpt", "write-file", "node_modules/ts-cjs-dep/package.json", "{ \"name\": \"ts-cjs-dep\", \"main\": \"./index.ts\" }\n"], snapshot = false },
+  { argv = ["vpt", "write-file", "node_modules/ts-cjs-dep/index.ts", "enum Kind { Cjs = 'cjs' }\nconst kind: Kind = Kind.Cjs;\nmodule.exports = { kind };\n"], snapshot = false },
+  { argv = ["vpx", "./src/ts-dependency.ts"] },
+  { argv = ["vpx", "./src/require-ts-dependency.cts"], comment = "A CommonJS TypeScript dependency loaded with require()" },
+]
+
+[[case]]
+name = "vpx_script_tsconfig_transforms"
+vp = ["local", "global"]
+comment = "tsconfig options that change the transform, and the decorator error."
+steps = [
+  { argv = ["vpx", "./main.tsx"], cwd = "jsx-classic", comment = "\"jsx\": \"react\" with jsxFactory and jsxFragmentFactory" },
+  { argv = ["vpx", "./main.tsx"], cwd = "jsx-automatic", comment = "\"jsx\": \"react-jsx\" with a jsxImportSource mapped by paths" },
+  { argv = ["vpx", "./main.ts"], cwd = "plain", comment = "Native class fields without legacy decorators; verbatimModuleSyntax keeps the side-effect import" },
+  { argv = ["vpx", "./decorators.ts"], cwd = "plain", comment = "Decorators without experimentalDecorators fail with a clear error", continue-on-failure = true },
+]
+
+[[case]]
+name = "vpx_script_jsx_custom"
+vp = ["local", "global"]
+comment = "JSX customizations with a runtime installed as a package: classic and automatic runtimes, the development runtime, pragma comments, .jsx with allowJs, and JSX in a CommonJS package."
+steps = [
+  { argv = ["vpt", "mkdir", "-p", "jsx-custom/node_modules"], snapshot = false },
+  { argv = ["vpt", "cp", "-r", "jsx-custom/mini-jsx", "jsx-custom/node_modules/mini-jsx"], snapshot = false },
+  { argv = ["vpx", "./main.tsx"], cwd = "jsx-custom/classic-import", comment = "\"jsx\": \"react\" with jsxFactory and jsxFragmentFactory imported from the package; the import is kept" },
+  { argv = ["vpx", "./main.tsx"], cwd = "jsx-custom/automatic-package", comment = "\"jsx\": \"react-jsx\" with the package as jsxImportSource" },
+  { argv = ["vpx", "./main.tsx"], cwd = "jsx-custom/automatic-dev", comment = "\"jsx\": \"react-jsxdev\": jsxDEV from the package's jsx-dev-runtime, with source line numbers" },
+  { argv = ["vpx", "./main.tsx"], cwd = "jsx-custom/pragma-automatic", comment = "A @jsxImportSource pragma comment" },
+  { argv = ["vpx", "./main.tsx"], cwd = "jsx-custom/pragma-classic", comment = "@jsxRuntime classic, @jsx, and @jsxFrag pragma comments" },
+  { argv = ["vpx", "./main.tsx"], cwd = "jsx-custom/pragma-mixed", comment = "Hono's @jsx plus @jsxImportSource pair: the automatic runtime applies and @jsx is ignored" },
+  { argv = ["vpx", "./main.jsx"], cwd = "jsx-custom/jsx-allowjs", comment = "A .jsx file gets the tsconfig's JSX options when allowJs is on" },
+  { argv = ["vpx", "./main.tsx"], cwd = "jsx-custom/automatic-cjs", comment = "A .tsx in a package without \"type\" runs as CommonJS and requires the runtime" },
+]
+
+[[case]]
+name = "vpx_script_shebang"
+vp = ["local", "global"]
+skip-platforms = ["windows"]
+requires = ["sh"]
+comment = "#!/usr/bin/env vpx works for executable script files."
+steps = [
+  { argv = ["vpt", "chmod", "+x", "bin/tool.ts"], snapshot = false },
+  { argv = ["vpt", "chmod", "+x", "bin/tool"], snapshot = false },
+  { argv = ["vpt", "chmod", "+x", "bin/commonjs/tool"], snapshot = false },
+  { argv = ["sh", "-c", "./bin/tool.ts"], comment = "An executable .ts file" },
+  { argv = ["sh", "-c", "./bin/tool"], comment = "An extensionless file runs as JavaScript instead of re-entering vpx" },
+  { argv = ["sh", "-c", "./bin/commonjs/tool"], comment = "In a package without type, an extensionless file with ES module syntax runs as an ES module" },
+]
+
+[[case]]
+name = "vpx_script_file_names"
+vp = ["local", "global"]
+cwd = "names"
+comment = "File names with # and % run the named file, even when the name cut at the # or decoded at the % also exists."
+steps = [
+  { argv = ["vpx", "./main#hash.ts"], comment = "./main also exists" },
+  { argv = ["vpx", "./main%41.ts"], comment = "./mainA.ts also exists" },
+  { argv = ["vpx", "./main%file.ts"], comment = "Not a valid percent escape" },
+  { argv = ["vpx", "./hash#dir/main.ts"], comment = "A # in a directory name" },
+  { argv = ["vpx", "./fragment.ts"], comment = "In an import, # starts a URL fragment, even when a#b.ts exists" },
+]
+
+[[case]]
+name = "vpx_script_ipc"
+vp = ["local", "global"]
+skip-platforms = ["windows"]
+cwd = "ipc"
+comment = "An IPC channel from the process that starts vpx reaches the script in both directions, including messages sent right before it exits."
+steps = [["node", "parent.mjs"]]
+
+[[case]]
+name = "vpx_script_signals"
+vp = ["local", "global"]
+skip-platforms = ["windows"]
+cwd = "signals"
+comment = "A signal sent to the PID of vpx reaches the script, as tools that stop a TypeScript runner send it."
+steps = [["node", "parent.mjs"]]
+
+[[case]]
+name = "vpx_package_installed"
+vp = ["local", "global"]
+skip-platforms = ["windows"]
+comment = "A package binary installed in node_modules/.bin runs from the project or a subdirectory, with its arguments and exit code."
+steps = [
+  { argv = ["vpt", "mkdir", "-p", "node_modules/.bin"], snapshot = false },
+  { argv = ["vpt", "write-file", "node_modules/.bin/fake-tool", "#!/bin/sh\necho \"fake-tool: $*\"\nexit 3\n"], snapshot = false },
+  { argv = ["vpt", "chmod", "+x", "node_modules/.bin/fake-tool"], snapshot = false },
+  { argv = ["vpx", "fake-tool", "a", "--help"], comment = "Arguments, including --help, belong to the binary; exit code 3 propagates", continue-on-failure = true },
+  { argv = ["vpx", "fake-tool", "b"], cwd = "src", comment = "node_modules/.bin is found from a subdirectory", continue-on-failure = true },
+]
+
+[[case]]
+name = "vpx_package_installed_windows"
+vp = ["local", "global"]
+skip-platforms = ["linux", "macos"]
+comment = "On Windows, a cmd-shim style .cmd binary in node_modules/.bin runs through cmd.exe and passes its arguments and exit code through."
+steps = [
+  { argv = ["vpt", "mkdir", "-p", "node_modules/.bin"], snapshot = false },
+  { argv = ["vpt", "cp", "win-tools/fake-tool.cmd", "node_modules/.bin/fake-tool.cmd"], snapshot = false },
+  { argv = ["vpt", "cp", "win-tools/fake-tool.js", "node_modules/.bin/fake-tool.js"], snapshot = false },
+  { argv = ["vpx", "fake-tool", "a", "--help", "b c"], comment = "Arguments, including --help and one with a space, reach the program unchanged; exit code 3 propagates", continue-on-failure = true },
+]
+
+[[case]]
+name = "vpx_package_not_installed"
+vp = "local"
+comment = "The project-local vpx, which package.json scripts run, searches only node_modules/.bin, never global packages or PATH. A binary that is not installed is an error with a hint, not a download."
+steps = [
+  { argv = ["vpx", "fake-missing-tool", "."], continue-on-failure = true },
+]
+
+[[case]]
+name = "vpx_script_watch"
+vp = ["local", "global"]
+skip-platforms = ["windows"]
+cwd = "watch"
+comment = "Node.js --watch restarts when an imported .ts file changes."
+steps = [["node", "verify-watch.mjs"]]
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_installed.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_installed.global.md
new file mode 100644
index 0000000000..be5a962353
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_installed.global.md
@@ -0,0 +1,35 @@
+# vpx_package_installed
+
+A package binary installed in node_modules/.bin runs from the project or a subdirectory, with its arguments and exit code.
+
+## `vpt mkdir -p node_modules/.bin`
+
+
+## `vpt write-file node_modules/.bin/fake-tool '#'\!'/bin/sh
+echo "fake-tool: $*"
+exit 3
+'`
+
+
+## `vpt chmod +x node_modules/.bin/fake-tool`
+
+
+## `vpx fake-tool a --help`
+
+Arguments, including --help, belong to the binary; exit code 3 propagates
+
+**Exit code:** 3
+
+```
+fake-tool: a --help
+```
+
+## `cd src && vpx fake-tool b`
+
+node_modules/.bin is found from a subdirectory
+
+**Exit code:** 3
+
+```
+fake-tool: b
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_installed.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_installed.local.md
new file mode 100644
index 0000000000..be5a962353
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_installed.local.md
@@ -0,0 +1,35 @@
+# vpx_package_installed
+
+A package binary installed in node_modules/.bin runs from the project or a subdirectory, with its arguments and exit code.
+
+## `vpt mkdir -p node_modules/.bin`
+
+
+## `vpt write-file node_modules/.bin/fake-tool '#'\!'/bin/sh
+echo "fake-tool: $*"
+exit 3
+'`
+
+
+## `vpt chmod +x node_modules/.bin/fake-tool`
+
+
+## `vpx fake-tool a --help`
+
+Arguments, including --help, belong to the binary; exit code 3 propagates
+
+**Exit code:** 3
+
+```
+fake-tool: a --help
+```
+
+## `cd src && vpx fake-tool b`
+
+node_modules/.bin is found from a subdirectory
+
+**Exit code:** 3
+
+```
+fake-tool: b
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_installed_windows.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_installed_windows.global.md
new file mode 100644
index 0000000000..5eb4da72f4
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_installed_windows.global.md
@@ -0,0 +1,22 @@
+# vpx_package_installed_windows
+
+On Windows, a cmd-shim style .cmd binary in node_modules/.bin runs through cmd.exe and passes its arguments and exit code through.
+
+## `vpt mkdir -p node_modules/.bin`
+
+
+## `vpt cp win-tools/fake-tool.cmd node_modules/.bin/fake-tool.cmd`
+
+
+## `vpt cp win-tools/fake-tool.js node_modules/.bin/fake-tool.js`
+
+
+## `vpx fake-tool a --help 'b c'`
+
+Arguments, including --help and one with a space, reach the program unchanged; exit code 3 propagates
+
+**Exit code:** 3
+
+```
+fake-tool: ["a","--help","b c"]
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_installed_windows.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_installed_windows.local.md
new file mode 100644
index 0000000000..5eb4da72f4
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_installed_windows.local.md
@@ -0,0 +1,22 @@
+# vpx_package_installed_windows
+
+On Windows, a cmd-shim style .cmd binary in node_modules/.bin runs through cmd.exe and passes its arguments and exit code through.
+
+## `vpt mkdir -p node_modules/.bin`
+
+
+## `vpt cp win-tools/fake-tool.cmd node_modules/.bin/fake-tool.cmd`
+
+
+## `vpt cp win-tools/fake-tool.js node_modules/.bin/fake-tool.js`
+
+
+## `vpx fake-tool a --help 'b c'`
+
+Arguments, including --help and one with a space, reach the program unchanged; exit code 3 propagates
+
+**Exit code:** 3
+
+```
+fake-tool: ["a","--help","b c"]
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_not_installed.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_not_installed.md
new file mode 100644
index 0000000000..f6d7160d3e
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_package_not_installed.md
@@ -0,0 +1,12 @@
+# vpx_package_not_installed
+
+The project-local vpx, which package.json scripts run, searches only node_modules/.bin, never global packages or PATH. A binary that is not installed is an error with a hint, not a download.
+
+## `vpx fake-missing-tool .`
+
+**Exit code:** 1
+
+```
+error: vpx: 'fake-missing-tool' is not installed in node_modules
+note: Add it to devDependencies, or run `vp dlx fake-missing-tool` to download and run it.
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_args_and_options.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_args_and_options.global.md
new file mode 100644
index 0000000000..64628ff15a
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_args_and_options.global.md
@@ -0,0 +1,55 @@
+# vpx_script_args_and_options
+
+Script arguments, Node.js options, and the exit code pass through unchanged.
+
+## `vpx ./src/args.ts a -- --flag`
+
+Arguments after the script belong to it; exit code 7 propagates
+
+**Exit code:** 7
+
+```
+args ["a","--","--flag"]
+greeting (unset)
+setup ran false
+```
+
+## `vpx --env-file .env --import ./src/setup.ts ./src/args.ts`
+
+Node.js options before the script, including a TypeScript --import preload
+
+**Exit code:** 7
+
+```
+args []
+greeting from-env-file
+setup ran true
+```
+
+## `vpx --import ./src/setup ./src/args.ts`
+
+An extensionless --import preload resolves from the working directory
+
+**Exit code:** 7
+
+```
+args []
+greeting (unset)
+setup ran true
+```
+
+## `vpx --eval 'console.log('\''eval without a script'\'')'`
+
+Node.js invocations without a script still run Node.js
+
+```
+eval without a script
+```
+
+## `vpx --eval console.log(process.argv.slice(1)) ./src/missing.ts`
+
+After --eval code, a path is an argument, not a script to check
+
+```
+[ './src/missing.ts' ]
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_args_and_options.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_args_and_options.local.md
new file mode 100644
index 0000000000..64628ff15a
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_args_and_options.local.md
@@ -0,0 +1,55 @@
+# vpx_script_args_and_options
+
+Script arguments, Node.js options, and the exit code pass through unchanged.
+
+## `vpx ./src/args.ts a -- --flag`
+
+Arguments after the script belong to it; exit code 7 propagates
+
+**Exit code:** 7
+
+```
+args ["a","--","--flag"]
+greeting (unset)
+setup ran false
+```
+
+## `vpx --env-file .env --import ./src/setup.ts ./src/args.ts`
+
+Node.js options before the script, including a TypeScript --import preload
+
+**Exit code:** 7
+
+```
+args []
+greeting from-env-file
+setup ran true
+```
+
+## `vpx --import ./src/setup ./src/args.ts`
+
+An extensionless --import preload resolves from the working directory
+
+**Exit code:** 7
+
+```
+args []
+greeting (unset)
+setup ran true
+```
+
+## `vpx --eval 'console.log('\''eval without a script'\'')'`
+
+Node.js invocations without a script still run Node.js
+
+```
+eval without a script
+```
+
+## `vpx --eval console.log(process.argv.slice(1)) ./src/missing.ts`
+
+After --eval code, a path is an argument, not a script to check
+
+```
+[ './src/missing.ts' ]
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_errors.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_errors.global.md
new file mode 100644
index 0000000000..b49d4198d6
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_errors.global.md
@@ -0,0 +1,101 @@
+# vpx_script_errors
+
+Script paths never fall back to a remote package download.
+
+## `vpx ./src/missing.ts`
+
+Missing explicit path
+
+**Exit code:** 1
+
+```
+error: vpx: Script not found: ./src/missing.ts
+```
+
+## `vpx seed.ts`
+
+Missing bare name with a TypeScript extension
+
+**Exit code:** 1
+
+```
+error: vpx: Script not found: seed.ts
+```
+
+## `vpx --tsconfig missing.json ./src/syntax.ts`
+
+Missing tsconfig
+
+**Exit code:** 1
+
+```
+error: vpx: tsconfig not found: missing.json
+```
+
+## `vpx --tsconfig`
+
+--tsconfig without a path, as a vpx option
+
+**Exit code:** 1
+
+```
+error: vpx: --tsconfig requires a path
+```
+
+## `vpx -p cowsay ./src/syntax.ts`
+
+--package selects package mode
+
+**Exit code:** 1
+
+```
+error: vpx: --package cannot be used when running a script
+```
+
+## `vpx -p cowsay ./src/missing.ts`
+
+A missing explicit path never falls through to a package download, even with --package
+
+**Exit code:** 1
+
+```
+error: vpx: Script not found: ./src/missing.ts
+```
+
+## `vpx -p cowsay seed.ts`
+
+Nor does a missing bare name with a TypeScript extension
+
+**Exit code:** 1
+
+```
+error: vpx: Script not found: seed.ts
+```
+
+## `vpx ./bin/missing`
+
+Nor a missing explicit path without an extension
+
+**Exit code:** 1
+
+```
+error: vpx: Script not found: ./bin/missing
+```
+
+## `vpx`
+
+Without a command, both CLIs print the same usage
+
+**Exit code:** 1
+
+```
+error: vpx requires a command to run
+
+Usage: vpx <pkg[@version]> [args...]
+       vpx <script> [args...]
+
+Examples:
+  vpx eslint .
+  vpx create-vue my-app
+  vpx ./scripts/seed.ts
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_errors.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_errors.local.md
new file mode 100644
index 0000000000..b49d4198d6
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_errors.local.md
@@ -0,0 +1,101 @@
+# vpx_script_errors
+
+Script paths never fall back to a remote package download.
+
+## `vpx ./src/missing.ts`
+
+Missing explicit path
+
+**Exit code:** 1
+
+```
+error: vpx: Script not found: ./src/missing.ts
+```
+
+## `vpx seed.ts`
+
+Missing bare name with a TypeScript extension
+
+**Exit code:** 1
+
+```
+error: vpx: Script not found: seed.ts
+```
+
+## `vpx --tsconfig missing.json ./src/syntax.ts`
+
+Missing tsconfig
+
+**Exit code:** 1
+
+```
+error: vpx: tsconfig not found: missing.json
+```
+
+## `vpx --tsconfig`
+
+--tsconfig without a path, as a vpx option
+
+**Exit code:** 1
+
+```
+error: vpx: --tsconfig requires a path
+```
+
+## `vpx -p cowsay ./src/syntax.ts`
+
+--package selects package mode
+
+**Exit code:** 1
+
+```
+error: vpx: --package cannot be used when running a script
+```
+
+## `vpx -p cowsay ./src/missing.ts`
+
+A missing explicit path never falls through to a package download, even with --package
+
+**Exit code:** 1
+
+```
+error: vpx: Script not found: ./src/missing.ts
+```
+
+## `vpx -p cowsay seed.ts`
+
+Nor does a missing bare name with a TypeScript extension
+
+**Exit code:** 1
+
+```
+error: vpx: Script not found: seed.ts
+```
+
+## `vpx ./bin/missing`
+
+Nor a missing explicit path without an extension
+
+**Exit code:** 1
+
+```
+error: vpx: Script not found: ./bin/missing
+```
+
+## `vpx`
+
+Without a command, both CLIs print the same usage
+
+**Exit code:** 1
+
+```
+error: vpx requires a command to run
+
+Usage: vpx <pkg[@version]> [args...]
+       vpx <script> [args...]
+
+Examples:
+  vpx eslint .
+  vpx create-vue my-app
+  vpx ./scripts/seed.ts
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_file_names.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_file_names.global.md
new file mode 100644
index 0000000000..b127d8a28f
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_file_names.global.md
@@ -0,0 +1,43 @@
+# vpx_script_file_names
+
+File names with # and % run the named file, even when the name cut at the # or decoded at the % also exists.
+
+## `vpx ./main#hash.ts`
+
+./main also exists
+
+```
+ran main#hash.ts
+```
+
+## `vpx ./main%41.ts`
+
+./mainA.ts also exists
+
+```
+ran main%41.ts
+```
+
+## `vpx ./main%file.ts`
+
+Not a valid percent escape
+
+```
+ran main%file.ts
+```
+
+## `vpx ./hash#dir/main.ts`
+
+A # in a directory name
+
+```
+ran hash#dir/main.ts
+```
+
+## `vpx ./fragment.ts`
+
+In an import, # starts a URL fragment, even when a#b.ts exists
+
+```
+loaded a.ts: in an import, #b.ts is a fragment
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_file_names.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_file_names.local.md
new file mode 100644
index 0000000000..b127d8a28f
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_file_names.local.md
@@ -0,0 +1,43 @@
+# vpx_script_file_names
+
+File names with # and % run the named file, even when the name cut at the # or decoded at the % also exists.
+
+## `vpx ./main#hash.ts`
+
+./main also exists
+
+```
+ran main#hash.ts
+```
+
+## `vpx ./main%41.ts`
+
+./mainA.ts also exists
+
+```
+ran main%41.ts
+```
+
+## `vpx ./main%file.ts`
+
+Not a valid percent escape
+
+```
+ran main%file.ts
+```
+
+## `vpx ./hash#dir/main.ts`
+
+A # in a directory name
+
+```
+ran hash#dir/main.ts
+```
+
+## `vpx ./fragment.ts`
+
+In an import, # starts a URL fragment, even when a#b.ts exists
+
+```
+loaded a.ts: in an import, #b.ts is a fragment
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ipc.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ipc.global.md
new file mode 100644
index 0000000000..846044bca3
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ipc.global.md
@@ -0,0 +1,11 @@
+# vpx_script_ipc
+
+An IPC channel from the process that starts vpx reaches the script in both directions, including messages sent right before it exits.
+
+## `node parent.mjs`
+
+```
+reply {"echo":"ping"}
+messages before exit 100 exit code 3
+exit code after the parent disconnects 4
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ipc.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ipc.local.md
new file mode 100644
index 0000000000..846044bca3
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ipc.local.md
@@ -0,0 +1,11 @@
+# vpx_script_ipc
+
+An IPC channel from the process that starts vpx reaches the script in both directions, including messages sent right before it exits.
+
+## `node parent.mjs`
+
+```
+reply {"echo":"ping"}
+messages before exit 100 exit code 3
+exit code after the parent disconnects 4
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_jsx_custom.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_jsx_custom.global.md
new file mode 100644
index 0000000000..648efc5f74
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_jsx_custom.global.md
@@ -0,0 +1,74 @@
+# vpx_script_jsx_custom
+
+JSX customizations with a runtime installed as a package: classic and automatic runtimes, the development runtime, pragma comments, .jsx with allowJs, and JSX in a CommonJS package.
+
+## `vpt mkdir -p jsx-custom/node_modules`
+
+
+## `vpt cp -r jsx-custom/mini-jsx jsx-custom/node_modules/mini-jsx`
+
+
+## `cd jsx-custom/classic-import && vpx ./main.tsx`
+
+"jsx": "react" with jsxFactory and jsxFragmentFactory imported from the package; the import is kept
+
+```
+<section title="t"><b>bold</b>frag</section>
+```
+
+## `cd jsx-custom/automatic-package && vpx ./main.tsx`
+
+"jsx": "react-jsx" with the package as jsxImportSource
+
+```
+<section title="t"><b>bold</b>frag</section>
+```
+
+## `cd jsx-custom/automatic-dev && vpx ./main.tsx`
+
+"jsx": "react-jsxdev": jsxDEV from the package's jsx-dev-runtime, with source line numbers
+
+```
+<section title="t"><b>bold</b> @2frag @2</section> @1 @2
+```
+
+## `cd jsx-custom/pragma-automatic && vpx ./main.tsx`
+
+A @jsxImportSource pragma comment
+
+```
+<section title="t"><b>bold</b>frag</section>
+```
+
+## `cd jsx-custom/pragma-classic && vpx ./main.tsx`
+
+@jsxRuntime classic, @jsx, and @jsxFrag pragma comments
+
+```
+<section title="t"><b>bold</b>frag</section>
+```
+
+## `cd jsx-custom/pragma-mixed && vpx ./main.tsx`
+
+Hono's @jsx plus @jsxImportSource pair: the automatic runtime applies and @jsx is ignored
+
+```
+<section title="t"><b>bold</b>frag</section>
+```
+
+## `cd jsx-custom/jsx-allowjs && vpx ./main.jsx`
+
+A .jsx file gets the tsconfig's JSX options when allowJs is on
+
+```
+<section title="t"><b>bold</b>frag</section>
+```
+
+## `cd jsx-custom/automatic-cjs && vpx ./main.tsx`
+
+A .tsx in a package without "type" runs as CommonJS and requires the runtime
+
+```
+format CommonJS
+<section title="t"><b>bold</b>frag</section>
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_jsx_custom.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_jsx_custom.local.md
new file mode 100644
index 0000000000..648efc5f74
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_jsx_custom.local.md
@@ -0,0 +1,74 @@
+# vpx_script_jsx_custom
+
+JSX customizations with a runtime installed as a package: classic and automatic runtimes, the development runtime, pragma comments, .jsx with allowJs, and JSX in a CommonJS package.
+
+## `vpt mkdir -p jsx-custom/node_modules`
+
+
+## `vpt cp -r jsx-custom/mini-jsx jsx-custom/node_modules/mini-jsx`
+
+
+## `cd jsx-custom/classic-import && vpx ./main.tsx`
+
+"jsx": "react" with jsxFactory and jsxFragmentFactory imported from the package; the import is kept
+
+```
+<section title="t"><b>bold</b>frag</section>
+```
+
+## `cd jsx-custom/automatic-package && vpx ./main.tsx`
+
+"jsx": "react-jsx" with the package as jsxImportSource
+
+```
+<section title="t"><b>bold</b>frag</section>
+```
+
+## `cd jsx-custom/automatic-dev && vpx ./main.tsx`
+
+"jsx": "react-jsxdev": jsxDEV from the package's jsx-dev-runtime, with source line numbers
+
+```
+<section title="t"><b>bold</b> @2frag @2</section> @1 @2
+```
+
+## `cd jsx-custom/pragma-automatic && vpx ./main.tsx`
+
+A @jsxImportSource pragma comment
+
+```
+<section title="t"><b>bold</b>frag</section>
+```
+
+## `cd jsx-custom/pragma-classic && vpx ./main.tsx`
+
+@jsxRuntime classic, @jsx, and @jsxFrag pragma comments
+
+```
+<section title="t"><b>bold</b>frag</section>
+```
+
+## `cd jsx-custom/pragma-mixed && vpx ./main.tsx`
+
+Hono's @jsx plus @jsxImportSource pair: the automatic runtime applies and @jsx is ignored
+
+```
+<section title="t"><b>bold</b>frag</section>
+```
+
+## `cd jsx-custom/jsx-allowjs && vpx ./main.jsx`
+
+A .jsx file gets the tsconfig's JSX options when allowJs is on
+
+```
+<section title="t"><b>bold</b>frag</section>
+```
+
+## `cd jsx-custom/automatic-cjs && vpx ./main.tsx`
+
+A .tsx in a package without "type" runs as CommonJS and requires the runtime
+
+```
+format CommonJS
+<section title="t"><b>bold</b>frag</section>
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_module_formats.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_module_formats.global.md
new file mode 100644
index 0000000000..4d72b21182
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_module_formats.global.md
@@ -0,0 +1,94 @@
+# vpx_script_module_formats
+
+CommonJS and ESM interop, preloads, child processes, and node:test.
+
+## `vpx ./src/both.cts`
+
+A .cts that uses export is CommonJS with ES module syntax; it fails with a clear error
+
+**Exit code:** 1
+
+```
+
+node:internal/modules/run_main:123
+    triggerUncaughtException(
+    ^
+Error: Failed to transform <workspace>/src/both.cts: a `.cts` file is CommonJS, but this one uses ES module syntax (`import`, `export` or `import.meta`), which oxc-node does not compile to CommonJS. Rename it to `.mts` to run it as an ES module, or write it as CommonJS with `import x = require("...")` and `export =`.
+    at async nextLoad (node:internal/modules/esm/hooks:748:22)
+    at async Hooks.load (node:internal/modules/esm/hooks:385:20)
+    at async handleMessage (node:internal/modules/esm/worker:199:18) {
+  code: 'GenericFailure'
+}
+
+Node.js <version>
+```
+
+## `vpx ./src/import-cts.ts`
+
+Importing it reports the same error
+
+**Exit code:** 1
+
+```
+
+node:internal/modules/run_main:123
+    triggerUncaughtException(
+    ^
+Error: Failed to transform <workspace>/src/both.cts: a `.cts` file is CommonJS, but this one uses ES module syntax (`import`, `export` or `import.meta`), which oxc-node does not compile to CommonJS. Rename it to `.mts` to run it as an ES module, or write it as CommonJS with `import x = require("...")` and `export =`.
+    at async nextLoad (node:internal/modules/esm/hooks:748:22)
+    at async Hooks.load (node:internal/modules/esm/hooks:385:20)
+    at async handleMessage (node:internal/modules/esm/worker:199:18) {
+  code: 'GenericFailure'
+}
+
+Node.js <version>
+```
+
+## `vpx --require ./src/setup.cts ./src/print-setup.ts`
+
+A TypeScript --require preload runs after the loader
+
+```
+required preload ran
+```
+
+## `vpx ./src/fork.ts`
+
+fork() and Worker inherit the loader
+
+```
+fork: enum from child.ts
+worker: enum from worker.ts
+```
+
+## `vpx --test --test-reporter=dot ./tests/enum.test.ts`
+
+node:test runs .ts test files
+
+```
+.
+```
+
+## `vpx --test --test-reporter=dot ./tests/**/*.test.ts`
+
+A test glob reaches node:test as a pattern, not a script path
+
+```
+.
+```
+
+## `vpx ./src/data-url.ts`
+
+data: URL imports keep Node.js' handling
+
+```
+data: URL import: 7
+```
+
+## `vpx ./src/require-tla.cts`
+
+require() of a module with top-level await reports Node.js' error code
+
+```
+require() of top-level await: ERR_REQUIRE_ASYNC_MODULE
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_module_formats.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_module_formats.local.md
new file mode 100644
index 0000000000..4d72b21182
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_module_formats.local.md
@@ -0,0 +1,94 @@
+# vpx_script_module_formats
+
+CommonJS and ESM interop, preloads, child processes, and node:test.
+
+## `vpx ./src/both.cts`
+
+A .cts that uses export is CommonJS with ES module syntax; it fails with a clear error
+
+**Exit code:** 1
+
+```
+
+node:internal/modules/run_main:123
+    triggerUncaughtException(
+    ^
+Error: Failed to transform <workspace>/src/both.cts: a `.cts` file is CommonJS, but this one uses ES module syntax (`import`, `export` or `import.meta`), which oxc-node does not compile to CommonJS. Rename it to `.mts` to run it as an ES module, or write it as CommonJS with `import x = require("...")` and `export =`.
+    at async nextLoad (node:internal/modules/esm/hooks:748:22)
+    at async Hooks.load (node:internal/modules/esm/hooks:385:20)
+    at async handleMessage (node:internal/modules/esm/worker:199:18) {
+  code: 'GenericFailure'
+}
+
+Node.js <version>
+```
+
+## `vpx ./src/import-cts.ts`
+
+Importing it reports the same error
+
+**Exit code:** 1
+
+```
+
+node:internal/modules/run_main:123
+    triggerUncaughtException(
+    ^
+Error: Failed to transform <workspace>/src/both.cts: a `.cts` file is CommonJS, but this one uses ES module syntax (`import`, `export` or `import.meta`), which oxc-node does not compile to CommonJS. Rename it to `.mts` to run it as an ES module, or write it as CommonJS with `import x = require("...")` and `export =`.
+    at async nextLoad (node:internal/modules/esm/hooks:748:22)
+    at async Hooks.load (node:internal/modules/esm/hooks:385:20)
+    at async handleMessage (node:internal/modules/esm/worker:199:18) {
+  code: 'GenericFailure'
+}
+
+Node.js <version>
+```
+
+## `vpx --require ./src/setup.cts ./src/print-setup.ts`
+
+A TypeScript --require preload runs after the loader
+
+```
+required preload ran
+```
+
+## `vpx ./src/fork.ts`
+
+fork() and Worker inherit the loader
+
+```
+fork: enum from child.ts
+worker: enum from worker.ts
+```
+
+## `vpx --test --test-reporter=dot ./tests/enum.test.ts`
+
+node:test runs .ts test files
+
+```
+.
+```
+
+## `vpx --test --test-reporter=dot ./tests/**/*.test.ts`
+
+A test glob reaches node:test as a pattern, not a script path
+
+```
+.
+```
+
+## `vpx ./src/data-url.ts`
+
+data: URL imports keep Node.js' handling
+
+```
+data: URL import: 7
+```
+
+## `vpx ./src/require-tla.cts`
+
+require() of a module with top-level await reports Node.js' error code
+
+```
+require() of top-level await: ERR_REQUIRE_ASYNC_MODULE
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_resolution.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_resolution.global.md
new file mode 100644
index 0000000000..81e2bb9570
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_resolution.global.md
@@ -0,0 +1,46 @@
+# vpx_script_resolution
+
+Module resolution matches tsx: tsconfig paths, .js to .ts, extensionless imports, JSON, and CommonJS.
+
+## `vpx src/resolution.ts`
+
+A bare relative path runs when the file exists
+
+```
+hello vpx from src/lib
+4 6 42 cts counter=1
+```
+
+## `vpx --tsconfig tsconfig.alt.json src/resolution.ts`
+
+--tsconfig replaces per-file tsconfig selection
+
+```
+hello vpx from alt
+4 6 42 cts counter=1
+```
+
+## `vpx --no-warnings --tsconfig=tsconfig.alt.json src/resolution.ts`
+
+--tsconfig is also recognized among Node.js options
+
+```
+hello vpx from alt
+4 6 42 cts counter=1
+```
+
+## `cd order && vpx ./main.ts`
+
+A .ts next to its compiled .js wins for ./dep.js and ./dep, as with tsc and tsx
+
+```
+./dep.js -> dep.ts | ./dep -> dep.ts
+```
+
+## `cd outside-include && vpx ./scripts/seed.ts`
+
+A file outside every tsconfig include resolves paths through the nearest tsconfig
+
+```
+alias from scripts/: src/name.ts
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_resolution.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_resolution.local.md
new file mode 100644
index 0000000000..81e2bb9570
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_resolution.local.md
@@ -0,0 +1,46 @@
+# vpx_script_resolution
+
+Module resolution matches tsx: tsconfig paths, .js to .ts, extensionless imports, JSON, and CommonJS.
+
+## `vpx src/resolution.ts`
+
+A bare relative path runs when the file exists
+
+```
+hello vpx from src/lib
+4 6 42 cts counter=1
+```
+
+## `vpx --tsconfig tsconfig.alt.json src/resolution.ts`
+
+--tsconfig replaces per-file tsconfig selection
+
+```
+hello vpx from alt
+4 6 42 cts counter=1
+```
+
+## `vpx --no-warnings --tsconfig=tsconfig.alt.json src/resolution.ts`
+
+--tsconfig is also recognized among Node.js options
+
+```
+hello vpx from alt
+4 6 42 cts counter=1
+```
+
+## `cd order && vpx ./main.ts`
+
+A .ts next to its compiled .js wins for ./dep.js and ./dep, as with tsc and tsx
+
+```
+./dep.js -> dep.ts | ./dep -> dep.ts
+```
+
+## `cd outside-include && vpx ./scripts/seed.ts`
+
+A file outside every tsconfig include resolves paths through the nearest tsconfig
+
+```
+alias from scripts/: src/name.ts
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_shebang.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_shebang.global.md
new file mode 100644
index 0000000000..6ff0839c9e
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_shebang.global.md
@@ -0,0 +1,36 @@
+# vpx_script_shebang
+
+#!/usr/bin/env vpx works for executable script files.
+
+## `vpt chmod +x bin/tool.ts`
+
+
+## `vpt chmod +x bin/tool`
+
+
+## `vpt chmod +x bin/commonjs/tool`
+
+
+## `sh -c ./bin/tool.ts`
+
+An executable .ts file
+
+```
+hello from an executable .ts file
+```
+
+## `sh -c ./bin/tool`
+
+An extensionless file runs as JavaScript instead of re-entering vpx
+
+```
+hello from an extensionless file
+```
+
+## `sh -c ./bin/commonjs/tool`
+
+In a package without type, an extensionless file with ES module syntax runs as an ES module
+
+```
+hello from tool, an extensionless ES module
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_shebang.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_shebang.local.md
new file mode 100644
index 0000000000..6ff0839c9e
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_shebang.local.md
@@ -0,0 +1,36 @@
+# vpx_script_shebang
+
+#!/usr/bin/env vpx works for executable script files.
+
+## `vpt chmod +x bin/tool.ts`
+
+
+## `vpt chmod +x bin/tool`
+
+
+## `vpt chmod +x bin/commonjs/tool`
+
+
+## `sh -c ./bin/tool.ts`
+
+An executable .ts file
+
+```
+hello from an executable .ts file
+```
+
+## `sh -c ./bin/tool`
+
+An extensionless file runs as JavaScript instead of re-entering vpx
+
+```
+hello from an extensionless file
+```
+
+## `sh -c ./bin/commonjs/tool`
+
+In a package without type, an extensionless file with ES module syntax runs as an ES module
+
+```
+hello from tool, an extensionless ES module
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_signals.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_signals.global.md
new file mode 100644
index 0000000000..15f08cbd9a
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_signals.global.md
@@ -0,0 +1,13 @@
+# vpx_script_signals
+
+A signal sent to the PID of vpx reaches the script, as tools that stop a TypeScript runner send it.
+
+## `node parent.mjs`
+
+```
+./wait.ts: the script runs in the vpx process: true
+./wait.ts: exit code null, signal SIGINT
+./graceful.ts: the script runs in the vpx process: true
+./graceful.ts: cleaned up after SIGINT
+./graceful.ts: exit code 0, signal null
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_signals.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_signals.local.md
new file mode 100644
index 0000000000..15f08cbd9a
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_signals.local.md
@@ -0,0 +1,13 @@
+# vpx_script_signals
+
+A signal sent to the PID of vpx reaches the script, as tools that stop a TypeScript runner send it.
+
+## `node parent.mjs`
+
+```
+./wait.ts: the script runs in the vpx process: true
+./wait.ts: exit code null, signal SIGINT
+./graceful.ts: the script runs in the vpx process: true
+./graceful.ts: cleaned up after SIGINT
+./graceful.ts: exit code 0, signal null
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ts_dependency.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ts_dependency.global.md
new file mode 100644
index 0000000000..ebfaddbfb6
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ts_dependency.global.md
@@ -0,0 +1,42 @@
+# vpx_script_ts_dependency
+
+TypeScript published in node_modules is transformed, which Node.js type stripping refuses.
+
+## `vpt mkdir -p node_modules/ts-dep`
+
+
+## `vpt write-file node_modules/ts-dep/package.json '{ "name": "ts-dep", "type": "module", "exports": "./index.ts" }
+'`
+
+
+## `vpt write-file node_modules/ts-dep/index.ts 'export enum Level { High = '\''high'\'' }
+export const level: Level = Level.High;
+'`
+
+
+## `vpt mkdir -p node_modules/ts-cjs-dep`
+
+
+## `vpt write-file node_modules/ts-cjs-dep/package.json '{ "name": "ts-cjs-dep", "main": "./index.ts" }
+'`
+
+
+## `vpt write-file node_modules/ts-cjs-dep/index.ts 'enum Kind { Cjs = '\''cjs'\'' }
+const kind: Kind = Kind.Cjs;
+module.exports = { kind };
+'`
+
+
+## `vpx ./src/ts-dependency.ts`
+
+```
+ts-dep: high
+```
+
+## `vpx ./src/require-ts-dependency.cts`
+
+A CommonJS TypeScript dependency loaded with require()
+
+```
+ts-cjs-dep: cjs
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ts_dependency.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ts_dependency.local.md
new file mode 100644
index 0000000000..ebfaddbfb6
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ts_dependency.local.md
@@ -0,0 +1,42 @@
+# vpx_script_ts_dependency
+
+TypeScript published in node_modules is transformed, which Node.js type stripping refuses.
+
+## `vpt mkdir -p node_modules/ts-dep`
+
+
+## `vpt write-file node_modules/ts-dep/package.json '{ "name": "ts-dep", "type": "module", "exports": "./index.ts" }
+'`
+
+
+## `vpt write-file node_modules/ts-dep/index.ts 'export enum Level { High = '\''high'\'' }
+export const level: Level = Level.High;
+'`
+
+
+## `vpt mkdir -p node_modules/ts-cjs-dep`
+
+
+## `vpt write-file node_modules/ts-cjs-dep/package.json '{ "name": "ts-cjs-dep", "main": "./index.ts" }
+'`
+
+
+## `vpt write-file node_modules/ts-cjs-dep/index.ts 'enum Kind { Cjs = '\''cjs'\'' }
+const kind: Kind = Kind.Cjs;
+module.exports = { kind };
+'`
+
+
+## `vpx ./src/ts-dependency.ts`
+
+```
+ts-dep: high
+```
+
+## `vpx ./src/require-ts-dependency.cts`
+
+A CommonJS TypeScript dependency loaded with require()
+
+```
+ts-cjs-dep: cjs
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ts_syntax.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ts_syntax.global.md
new file mode 100644
index 0000000000..dffa164db9
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ts_syntax.global.md
@@ -0,0 +1,20 @@
+# vpx_script_ts_syntax
+
+TypeScript syntax that Node.js type stripping rejects runs through the oxc-node loader.
+
+## `vpx ./src/syntax.ts`
+
+Enums, namespaces, parameter properties, decorators, and a lowered class field
+
+```
+decorated sum
+green 3 4 private field
+```
+
+## `vpx ./src/bom-shebang.ts`
+
+A byte order mark before a shebang, as Windows editors save it
+
+```
+with a byte order mark before the shebang
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ts_syntax.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ts_syntax.local.md
new file mode 100644
index 0000000000..dffa164db9
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_ts_syntax.local.md
@@ -0,0 +1,20 @@
+# vpx_script_ts_syntax
+
+TypeScript syntax that Node.js type stripping rejects runs through the oxc-node loader.
+
+## `vpx ./src/syntax.ts`
+
+Enums, namespaces, parameter properties, decorators, and a lowered class field
+
+```
+decorated sum
+green 3 4 private field
+```
+
+## `vpx ./src/bom-shebang.ts`
+
+A byte order mark before a shebang, as Windows editors save it
+
+```
+with a byte order mark before the shebang
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_tsconfig_transforms.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_tsconfig_transforms.global.md
new file mode 100644
index 0000000000..3ee792b3e8
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_tsconfig_transforms.global.md
@@ -0,0 +1,49 @@
+# vpx_script_tsconfig_transforms
+
+tsconfig options that change the transform, and the decorator error.
+
+## `cd jsx-classic && vpx ./main.tsx`
+
+"jsx": "react" with jsxFactory and jsxFragmentFactory
+
+```
+classic: <div id="greeting">hello</div> <fragment>fragment child</fragment>
+```
+
+## `cd jsx-automatic && vpx ./main.tsx`
+
+"jsx": "react-jsx" with a jsxImportSource mapped by paths
+
+```
+automatic: <p>hello</p>
+```
+
+## `cd plain && vpx ./main.ts`
+
+Native class fields without legacy decorators; verbatimModuleSyntax keeps the side-effect import
+
+```
+side effect kept by verbatimModuleSyntax
+native class fields: true 1
+```
+
+## `cd plain && vpx ./decorators.ts`
+
+Decorators without experimentalDecorators fail with a clear error
+
+**Exit code:** 1
+
+```
+
+node:internal/modules/run_main:123
+    triggerUncaughtException(
+    ^
+Error: Failed to transform file://<workspace>/plain/decorators.ts: decorators require `"experimentalDecorators": true` in a tsconfig.json that includes this file; standard (TC39) decorators are not supported yet
+    at async nextLoad (node:internal/modules/esm/hooks:748:22)
+    at async Hooks.load (node:internal/modules/esm/hooks:385:20)
+    at async handleMessage (node:internal/modules/esm/worker:199:18) {
+  code: 'GenericFailure'
+}
+
+Node.js <version>
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_tsconfig_transforms.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_tsconfig_transforms.local.md
new file mode 100644
index 0000000000..3ee792b3e8
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_tsconfig_transforms.local.md
@@ -0,0 +1,49 @@
+# vpx_script_tsconfig_transforms
+
+tsconfig options that change the transform, and the decorator error.
+
+## `cd jsx-classic && vpx ./main.tsx`
+
+"jsx": "react" with jsxFactory and jsxFragmentFactory
+
+```
+classic: <div id="greeting">hello</div> <fragment>fragment child</fragment>
+```
+
+## `cd jsx-automatic && vpx ./main.tsx`
+
+"jsx": "react-jsx" with a jsxImportSource mapped by paths
+
+```
+automatic: <p>hello</p>
+```
+
+## `cd plain && vpx ./main.ts`
+
+Native class fields without legacy decorators; verbatimModuleSyntax keeps the side-effect import
+
+```
+side effect kept by verbatimModuleSyntax
+native class fields: true 1
+```
+
+## `cd plain && vpx ./decorators.ts`
+
+Decorators without experimentalDecorators fail with a clear error
+
+**Exit code:** 1
+
+```
+
+node:internal/modules/run_main:123
+    triggerUncaughtException(
+    ^
+Error: Failed to transform file://<workspace>/plain/decorators.ts: decorators require `"experimentalDecorators": true` in a tsconfig.json that includes this file; standard (TC39) decorators are not supported yet
+    at async nextLoad (node:internal/modules/esm/hooks:748:22)
+    at async Hooks.load (node:internal/modules/esm/hooks:385:20)
+    at async handleMessage (node:internal/modules/esm/worker:199:18) {
+  code: 'GenericFailure'
+}
+
+Node.js <version>
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_watch.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_watch.global.md
new file mode 100644
index 0000000000..4547a6fe25
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_watch.global.md
@@ -0,0 +1,9 @@
+# vpx_script_watch
+
+Node.js --watch restarts when an imported .ts file changes.
+
+## `node verify-watch.mjs`
+
+```
+vpx --watch restarted after an imported .ts file changed
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_watch.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_watch.local.md
new file mode 100644
index 0000000000..4547a6fe25
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/snapshots/vpx_script_watch.local.md
@@ -0,0 +1,9 @@
+# vpx_script_watch
+
+Node.js --watch restarts when an imported .ts file changes.
+
+## `node verify-watch.mjs`
+
+```
+vpx --watch restarted after an imported .ts file changed
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/args.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/args.ts
new file mode 100644
index 0000000000..29aea0495f
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/args.ts
@@ -0,0 +1,4 @@
+console.log('args', JSON.stringify(process.argv.slice(2)));
+console.log('greeting', process.env.GREETING ?? '(unset)');
+console.log('setup ran', (globalThis as { setupRan?: boolean }).setupRan === true);
+process.exitCode = 7;
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/bom-shebang.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/bom-shebang.ts
new file mode 100644
index 0000000000..349c29c3f5
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/bom-shebang.ts
@@ -0,0 +1,3 @@
+#!/usr/bin/env vpx
+const saved: string = "with a byte order mark before the shebang";
+console.log(saved);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/both.cts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/both.cts
new file mode 100644
index 0000000000..75b1d1f3a3
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/both.cts
@@ -0,0 +1,7 @@
+class Counter {
+  count = 1;
+}
+
+export function describe(): string {
+  return `cts with export, counter=${new Counter().count}`;
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/child.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/child.ts
new file mode 100644
index 0000000000..9b0dc07914
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/child.ts
@@ -0,0 +1,4 @@
+enum Source {
+  Child = 'enum from child.ts',
+}
+process.send?.(Source.Child);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/data-url.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/data-url.ts
new file mode 100644
index 0000000000..33b731ec85
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/data-url.ts
@@ -0,0 +1,2 @@
+const mod = await import('data:text/javascript,export const value = 7');
+console.log('data: URL import:', mod.value);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/data.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/data.json
new file mode 100644
index 0000000000..6e887fd6ab
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/data.json
@@ -0,0 +1 @@
+{ "answer": 42 }
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/fork.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/fork.ts
new file mode 100644
index 0000000000..2743e57d9b
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/fork.ts
@@ -0,0 +1,13 @@
+// Child processes and workers inherit the loader through `process.execArgv`.
+import { fork } from 'node:child_process';
+import { once } from 'node:events';
+import { Worker } from 'node:worker_threads';
+
+const child = fork(new URL('./child.ts', import.meta.url));
+const [fromChild] = await once(child, 'message');
+console.log('fork:', fromChild);
+
+const worker = new Worker(new URL('./worker.ts', import.meta.url));
+const [fromWorker] = await once(worker, 'message');
+console.log('worker:', fromWorker);
+await worker.terminate();
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/import-cts.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/import-cts.ts
new file mode 100644
index 0000000000..f78cf2e86b
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/import-cts.ts
@@ -0,0 +1,4 @@
+// A `.cts` with ES module syntax fails with the same error when imported.
+import { describe } from './both.cts';
+
+console.log(describe());
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/legacy.cts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/legacy.cts
new file mode 100644
index 0000000000..a02b45e2dc
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/legacy.cts
@@ -0,0 +1,10 @@
+// A CommonJS `.cts`: TypeScript's `export =` compiles to `module.exports`.
+class Counter {
+  count = 1;
+}
+
+function describe(): string {
+  return `cts counter=${new Counter().count}`;
+}
+
+export = { describe };
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/lib/greet.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/lib/greet.ts
new file mode 100644
index 0000000000..6f372246e0
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/lib/greet.ts
@@ -0,0 +1 @@
+export const greet = (name: string): string => `hello ${name} from src/lib`;
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/math.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/math.ts
new file mode 100644
index 0000000000..574ace87f7
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/math.ts
@@ -0,0 +1,7 @@
+export function double(n: number): number {
+  return n * 2;
+}
+
+export function triple(n: number): number {
+  return n * 3;
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/print-setup.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/print-setup.ts
new file mode 100644
index 0000000000..e9ce5b210b
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/print-setup.ts
@@ -0,0 +1 @@
+console.log((globalThis as { setupMode?: string }).setupMode ?? 'no preload');
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/require-tla.cts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/require-tla.cts
new file mode 100644
index 0000000000..7c7882865a
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/require-tla.cts
@@ -0,0 +1,5 @@
+try {
+  require('./tla.mts');
+} catch (error) {
+  console.log('require() of top-level await:', (error as NodeJS.ErrnoException).code);
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/require-ts-dependency.cts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/require-ts-dependency.cts
new file mode 100644
index 0000000000..fd99c2e28e
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/require-ts-dependency.cts
@@ -0,0 +1,4 @@
+// A published TypeScript dependency loaded with require(), through the CommonJS hook.
+const { kind } = require('ts-cjs-dep');
+
+console.log('ts-cjs-dep:', kind);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/resolution.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/resolution.ts
new file mode 100644
index 0000000000..d68c3d6f2a
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/resolution.ts
@@ -0,0 +1,14 @@
+// tsconfig `paths`, `.js` -> `.ts`, extensionless imports, JSON, and CommonJS.
+import { createRequire } from 'node:module';
+
+import { greet } from '@lib/greet';
+
+import data from './data.json' with { type: 'json' };
+import { double } from './math.js';
+import { triple } from './math';
+
+const require = createRequire(import.meta.url);
+const legacy = require('./legacy.cts');
+
+console.log(greet('vpx'));
+console.log(double(2), triple(2), data.answer, legacy.describe());
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/setup.cts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/setup.cts
new file mode 100644
index 0000000000..ce324c5179
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/setup.cts
@@ -0,0 +1,5 @@
+// Preloaded with `--require`, which runs before the loader's `--import`.
+enum Mode {
+  Required = 'required preload ran',
+}
+(globalThis as { setupMode?: string }).setupMode = Mode.Required;
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/setup.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/setup.ts
new file mode 100644
index 0000000000..256a8e36e3
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/setup.ts
@@ -0,0 +1,3 @@
+// Preloaded with `--import`; TypeScript works here too.
+const marker: { setupRan?: boolean } = globalThis;
+marker.setupRan = true;
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/syntax.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/syntax.ts
new file mode 100644
index 0000000000..98881410d9
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/syntax.ts
@@ -0,0 +1,36 @@
+// Syntax Node.js type stripping rejects: enums, namespaces, parameter
+// properties, and legacy decorators. The class field is lowered to a runtime
+// helper that must resolve from vite-plus, not from this project.
+enum Color {
+  Red = 'red',
+  Green = 'green',
+}
+
+namespace Config {
+  export const retries = 3;
+}
+
+function logged(_target: object, key: string) {
+  console.log(`decorated ${key}`);
+}
+
+class Point {
+  count = 1;
+  #secret = 'private field';
+  constructor(
+    private readonly x: number,
+    public y: number,
+  ) {}
+
+  @logged
+  sum(): number {
+    return this.x + this.y + this.count;
+  }
+
+  reveal(): string {
+    return this.#secret;
+  }
+}
+
+const point = new Point(1, 2);
+console.log(Color.Green, Config.retries, point.sum(), point.reveal());
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/tla.mts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/tla.mts
new file mode 100644
index 0000000000..9beb955a8d
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/tla.mts
@@ -0,0 +1,2 @@
+await Promise.resolve();
+export const value = 1;
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/ts-dependency.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/ts-dependency.ts
new file mode 100644
index 0000000000..00b0a0937d
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/ts-dependency.ts
@@ -0,0 +1,4 @@
+// A published TypeScript dependency, which Node.js refuses to strip.
+import { level } from 'ts-dep';
+
+console.log('ts-dep:', level);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/worker.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/worker.ts
new file mode 100644
index 0000000000..cbcc5ae0be
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/src/worker.ts
@@ -0,0 +1,6 @@
+import { parentPort } from 'node:worker_threads';
+
+enum Source {
+  Worker = 'enum from worker.ts',
+}
+parentPort?.postMessage(Source.Worker);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/tests/enum.test.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/tests/enum.test.ts
new file mode 100644
index 0000000000..dee473b82b
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/tests/enum.test.ts
@@ -0,0 +1,10 @@
+import assert from 'node:assert/strict';
+import { test } from 'node:test';
+
+enum Sign {
+  Plus = '+',
+}
+
+test('enum in a node:test file', () => {
+  assert.equal(Sign.Plus, '+');
+});
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/tsconfig.alt.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/tsconfig.alt.json
new file mode 100644
index 0000000000..ad4ceca8bb
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/tsconfig.alt.json
@@ -0,0 +1,7 @@
+{
+  "compilerOptions": {
+    "module": "nodenext",
+    "baseUrl": ".",
+    "paths": { "@lib/*": ["alt/*"] }
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/tsconfig.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/tsconfig.json
new file mode 100644
index 0000000000..e799a2fbd6
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/tsconfig.json
@@ -0,0 +1,11 @@
+{
+  "compilerOptions": {
+    "target": "es2022",
+    "module": "nodenext",
+    "experimentalDecorators": true,
+    "baseUrl": ".",
+    "paths": { "@lib/*": ["src/lib/*"] }
+  },
+  // outside-include/ is a separate project whose scripts no config claims.
+  "exclude": ["node_modules", "outside-include"]
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/watch/dep.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/watch/dep.ts
new file mode 100644
index 0000000000..78e58d777b
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/watch/dep.ts
@@ -0,0 +1 @@
+export const value: string = 'first';
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/watch/main.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/watch/main.ts
new file mode 100644
index 0000000000..8164e640ce
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/watch/main.ts
@@ -0,0 +1,6 @@
+import { value } from './dep.ts';
+
+enum Label {
+  Value = 'value',
+}
+console.log(Label.Value, value);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/watch/verify-watch.mjs b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/watch/verify-watch.mjs
new file mode 100644
index 0000000000..642bcc9713
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/watch/verify-watch.mjs
@@ -0,0 +1,52 @@
+// Drives `vpx --watch`: edit an imported .ts file and wait for the restart.
+import { spawn } from 'node:child_process';
+import { writeFile } from 'node:fs/promises';
+
+const child = spawn('vpx', ['--watch', './main.ts'], { stdio: ['ignore', 'pipe', 'pipe'] });
+let logs = '';
+const waiters = [];
+const onData = (data) => {
+  logs += data;
+  for (const waiter of waiters) {
+    waiter();
+  }
+};
+child.stdout.on('data', onData);
+child.stderr.on('data', onData);
+
+function waitFor(text) {
+  return new Promise((resolve, reject) => {
+    const timer = setTimeout(() => reject(new Error(`timed out waiting for ${text}`)), 20000);
+    const check = () => {
+      if (logs.includes(text)) {
+        clearTimeout(timer);
+        resolve();
+      }
+    };
+    waiters.push(check);
+    check();
+  });
+}
+
+try {
+  await waitFor('value first');
+  // Node.js watches dep.ts only once the child reports it, which can be after its first
+  // output, and macOS drops a change made before the watcher is ready. Keep rewriting
+  // the file until the restart shows up.
+  const restarted = waitFor('value second');
+  const rewrite = () => writeFile('dep.ts', "export const value: string = 'second';\n");
+  await rewrite();
+  const timer = setInterval(() => rewrite().catch(() => {}), 500);
+  try {
+    await restarted;
+  } finally {
+    clearInterval(timer);
+  }
+  console.log('vpx --watch restarted after an imported .ts file changed');
+} catch (error) {
+  console.error(logs);
+  throw error;
+} finally {
+  await writeFile('dep.ts', "export const value: string = 'first';\n");
+  child.kill();
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/win-tools/fake-tool.cmd b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/win-tools/fake-tool.cmd
new file mode 100644
index 0000000000..85a94b9d19
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/win-tools/fake-tool.cmd
@@ -0,0 +1,3 @@
+@echo off
+node "%~dp0fake-tool.js" %*
+exit /b %ERRORLEVEL%
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/win-tools/fake-tool.js b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/win-tools/fake-tool.js
new file mode 100644
index 0000000000..9e62d9e183
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script/win-tools/fake-tool.js
@@ -0,0 +1,3 @@
+// The program a cmd-shim style .cmd forwards its arguments to.
+console.log('fake-tool:', JSON.stringify(process.argv.slice(2)));
+process.exitCode = 3;
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/both.cts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/both.cts
new file mode 100644
index 0000000000..de34b958e5
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/both.cts
@@ -0,0 +1,7 @@
+class Counter {
+  count = 1;
+}
+
+export function describe(): string {
+  return `cts counter=${new Counter().count}`;
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/cjs/deco.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/cjs/deco.ts
new file mode 100644
index 0000000000..b1faa9367f
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/cjs/deco.ts
@@ -0,0 +1,13 @@
+// No import or export in a package without "type": CommonJS output, which require()s
+// the runtime helpers for the legacy decorator and the private field.
+function logged(_target: object, key: string) {
+  console.log(`decorated ${key}`);
+}
+class Service {
+  #count = 1;
+  @logged
+  run() {
+    return this.#count;
+  }
+}
+console.log(`commonjs ${typeof module}, count ${new Service().run()}`);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/cjs/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/cjs/package.json
new file mode 100644
index 0000000000..897d9a9bd1
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/cjs/package.json
@@ -0,0 +1,7 @@
+{
+  "name": "command_vpx_script_node22-cjs",
+  "private": true,
+  "engines": {
+    "node": "22.23.2"
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/cjs/tsconfig.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/cjs/tsconfig.json
new file mode 100644
index 0000000000..71136281c0
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/cjs/tsconfig.json
@@ -0,0 +1 @@
+{ "compilerOptions": { "experimentalDecorators": true } }
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/import-both.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/import-both.ts
new file mode 100644
index 0000000000..579fb9a73d
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/import-both.ts
@@ -0,0 +1,6 @@
+// The in-thread hooks report the same error for a `.cts` with ES module syntax.
+try {
+  await import('./both.cts');
+} catch (error) {
+  console.log((error as Error).message);
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/import-cjs.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/import-cjs.ts
new file mode 100644
index 0000000000..259573107c
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/import-cjs.ts
@@ -0,0 +1,3 @@
+import nested from './nested.cts';
+
+console.log(nested.name);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/legacy.cts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/legacy.cts
new file mode 100644
index 0000000000..4e1da84c4f
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/legacy.cts
@@ -0,0 +1,4 @@
+class Named {
+  name = 'commonjs .cts';
+}
+module.exports = new Named();
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/main.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/main.ts
new file mode 100644
index 0000000000..907ecbcebf
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/main.ts
@@ -0,0 +1,22 @@
+// Node.js 22.22.3+ runs the hooks in-thread through module.registerHooks(), and lowers `using`.
+import { createRequire } from 'node:module';
+
+enum Path {
+  Sync = 'registerHooks',
+}
+
+class Resource {
+  disposed = false;
+  [Symbol.dispose]() {
+    this.disposed = true;
+  }
+}
+
+const resource = new Resource();
+{
+  using held = resource;
+  void held;
+}
+
+const require = createRequire(import.meta.url);
+console.log(Path.Sync, require('./legacy.cts').name, resource.disposed);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/nested.cts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/nested.cts
new file mode 100644
index 0000000000..a6410ac6e5
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/nested.cts
@@ -0,0 +1,4 @@
+// CommonJS that require()s another CommonJS file, imported from ESM.
+const legacy = require('./legacy.cts');
+
+module.exports = { name: `nested ${legacy.name}` };
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/package.json
new file mode 100644
index 0000000000..665e48e7b0
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "command-vpx-script-node22",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "engines": {
+    "node": "22.23.2"
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/snapshots.toml b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/snapshots.toml
new file mode 100644
index 0000000000..a4748c02a6
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/snapshots.toml
@@ -0,0 +1,10 @@
+[[case]]
+name = "vpx_script_node22"
+vp = ["local", "global"]
+comment = "Node.js 22.22.3+ uses the in-thread module.registerHooks() too, without nodejs/node#62920, and lowers `using` to a runtime helper."
+steps = [
+  { argv = ["vpx", "./main.ts"] },
+  { argv = ["vpx", "./import-cjs.ts"], comment = "An imported CommonJS module can require() other files" },
+  { argv = ["vpx", "./import-both.ts"], comment = "A .cts with ES module syntax fails with the same error on the in-thread path" },
+  { argv = ["vpx", "./deco.ts"], cwd = "cjs", comment = "CommonJS output require()s runtime helpers that the project cannot resolve itself" },
+]
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/snapshots/vpx_script_node22.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/snapshots/vpx_script_node22.global.md
new file mode 100644
index 0000000000..f15c3c5ca8
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/snapshots/vpx_script_node22.global.md
@@ -0,0 +1,34 @@
+# vpx_script_node22
+
+Node.js 22.22.3+ uses the in-thread module.registerHooks() too, without nodejs/node#62920, and lowers `using` to a runtime helper.
+
+## `vpx ./main.ts`
+
+```
+registerHooks commonjs .cts true
+```
+
+## `vpx ./import-cjs.ts`
+
+An imported CommonJS module can require() other files
+
+```
+nested commonjs .cts
+```
+
+## `vpx ./import-both.ts`
+
+A .cts with ES module syntax fails with the same error on the in-thread path
+
+```
+Failed to transform <workspace>/both.cts: a `.cts` file is CommonJS, but this one uses ES module syntax (`import`, `export` or `import.meta`), which oxc-node does not compile to CommonJS. Rename it to `.mts` to run it as an ES module, or write it as CommonJS with `import x = require("...")` and `export =`.
+```
+
+## `cd cjs && vpx ./deco.ts`
+
+CommonJS output require()s runtime helpers that the project cannot resolve itself
+
+```
+decorated run
+commonjs object, count 1
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/snapshots/vpx_script_node22.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/snapshots/vpx_script_node22.local.md
new file mode 100644
index 0000000000..f15c3c5ca8
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node22/snapshots/vpx_script_node22.local.md
@@ -0,0 +1,34 @@
+# vpx_script_node22
+
+Node.js 22.22.3+ uses the in-thread module.registerHooks() too, without nodejs/node#62920, and lowers `using` to a runtime helper.
+
+## `vpx ./main.ts`
+
+```
+registerHooks commonjs .cts true
+```
+
+## `vpx ./import-cjs.ts`
+
+An imported CommonJS module can require() other files
+
+```
+nested commonjs .cts
+```
+
+## `vpx ./import-both.ts`
+
+A .cts with ES module syntax fails with the same error on the in-thread path
+
+```
+Failed to transform <workspace>/both.cts: a `.cts` file is CommonJS, but this one uses ES module syntax (`import`, `export` or `import.meta`), which oxc-node does not compile to CommonJS. Rename it to `.mts` to run it as an ES module, or write it as CommonJS with `import x = require("...")` and `export =`.
+```
+
+## `cd cjs && vpx ./deco.ts`
+
+CommonJS output require()s runtime helpers that the project cannot resolve itself
+
+```
+decorated run
+commonjs object, count 1
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/both.cts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/both.cts
new file mode 100644
index 0000000000..de34b958e5
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/both.cts
@@ -0,0 +1,7 @@
+class Counter {
+  count = 1;
+}
+
+export function describe(): string {
+  return `cts counter=${new Counter().count}`;
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/cjs/deco.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/cjs/deco.ts
new file mode 100644
index 0000000000..b1faa9367f
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/cjs/deco.ts
@@ -0,0 +1,13 @@
+// No import or export in a package without "type": CommonJS output, which require()s
+// the runtime helpers for the legacy decorator and the private field.
+function logged(_target: object, key: string) {
+  console.log(`decorated ${key}`);
+}
+class Service {
+  #count = 1;
+  @logged
+  run() {
+    return this.#count;
+  }
+}
+console.log(`commonjs ${typeof module}, count ${new Service().run()}`);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/cjs/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/cjs/package.json
new file mode 100644
index 0000000000..d563898f3d
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/cjs/package.json
@@ -0,0 +1,7 @@
+{
+  "name": "command_vpx_script_node24-cjs",
+  "private": true,
+  "engines": {
+    "node": "24.12.0"
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/cjs/tsconfig.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/cjs/tsconfig.json
new file mode 100644
index 0000000000..71136281c0
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/cjs/tsconfig.json
@@ -0,0 +1 @@
+{ "compilerOptions": { "experimentalDecorators": true } }
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/import-both.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/import-both.ts
new file mode 100644
index 0000000000..579fb9a73d
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/import-both.ts
@@ -0,0 +1,6 @@
+// The in-thread hooks report the same error for a `.cts` with ES module syntax.
+try {
+  await import('./both.cts');
+} catch (error) {
+  console.log((error as Error).message);
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/import-cjs.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/import-cjs.ts
new file mode 100644
index 0000000000..259573107c
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/import-cjs.ts
@@ -0,0 +1,3 @@
+import nested from './nested.cts';
+
+console.log(nested.name);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/legacy.cts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/legacy.cts
new file mode 100644
index 0000000000..4e1da84c4f
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/legacy.cts
@@ -0,0 +1,4 @@
+class Named {
+  name = 'commonjs .cts';
+}
+module.exports = new Named();
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/main.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/main.ts
new file mode 100644
index 0000000000..93dade7a68
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/main.ts
@@ -0,0 +1,22 @@
+// Node.js 24.11.1+ runs the hooks in-thread through module.registerHooks().
+import { createRequire } from 'node:module';
+
+enum Path {
+  Sync = 'registerHooks',
+}
+
+class Resource {
+  disposed = false;
+  [Symbol.dispose]() {
+    this.disposed = true;
+  }
+}
+
+const resource = new Resource();
+{
+  using held = resource;
+  void held;
+}
+
+const require = createRequire(import.meta.url);
+console.log(Path.Sync, require('./legacy.cts').name, resource.disposed);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/nested.cts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/nested.cts
new file mode 100644
index 0000000000..a6410ac6e5
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/nested.cts
@@ -0,0 +1,4 @@
+// CommonJS that require()s another CommonJS file, imported from ESM.
+const legacy = require('./legacy.cts');
+
+module.exports = { name: `nested ${legacy.name}` };
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/package.json
new file mode 100644
index 0000000000..c4cdd20421
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "command-vpx-script-node24",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "engines": {
+    "node": "24.12.0"
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/snapshots.toml b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/snapshots.toml
new file mode 100644
index 0000000000..d2e5833785
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/snapshots.toml
@@ -0,0 +1,10 @@
+[[case]]
+name = "vpx_script_node24"
+vp = ["local", "global"]
+comment = "From Node.js 24.11.1 (and 22.22.3) the loader uses in-thread module.registerHooks() instead of a module.register() hooks thread."
+steps = [
+  { argv = ["vpx", "./main.ts"] },
+  { argv = ["vpx", "./import-cjs.ts"], comment = "An imported CommonJS module can require() other files" },
+  { argv = ["vpx", "./import-both.ts"], comment = "A .cts with ES module syntax fails with the same error on the in-thread path" },
+  { argv = ["vpx", "./deco.ts"], cwd = "cjs", comment = "CommonJS output require()s runtime helpers that the project cannot resolve itself" },
+]
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/snapshots/vpx_script_node24.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/snapshots/vpx_script_node24.global.md
new file mode 100644
index 0000000000..fd92b461ae
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/snapshots/vpx_script_node24.global.md
@@ -0,0 +1,34 @@
+# vpx_script_node24
+
+From Node.js 24.11.1 (and 22.22.3) the loader uses in-thread module.registerHooks() instead of a module.register() hooks thread.
+
+## `vpx ./main.ts`
+
+```
+registerHooks commonjs .cts true
+```
+
+## `vpx ./import-cjs.ts`
+
+An imported CommonJS module can require() other files
+
+```
+nested commonjs .cts
+```
+
+## `vpx ./import-both.ts`
+
+A .cts with ES module syntax fails with the same error on the in-thread path
+
+```
+Failed to transform <workspace>/both.cts: a `.cts` file is CommonJS, but this one uses ES module syntax (`import`, `export` or `import.meta`), which oxc-node does not compile to CommonJS. Rename it to `.mts` to run it as an ES module, or write it as CommonJS with `import x = require("...")` and `export =`.
+```
+
+## `cd cjs && vpx ./deco.ts`
+
+CommonJS output require()s runtime helpers that the project cannot resolve itself
+
+```
+decorated run
+commonjs object, count 1
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/snapshots/vpx_script_node24.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/snapshots/vpx_script_node24.local.md
new file mode 100644
index 0000000000..fd92b461ae
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node24/snapshots/vpx_script_node24.local.md
@@ -0,0 +1,34 @@
+# vpx_script_node24
+
+From Node.js 24.11.1 (and 22.22.3) the loader uses in-thread module.registerHooks() instead of a module.register() hooks thread.
+
+## `vpx ./main.ts`
+
+```
+registerHooks commonjs .cts true
+```
+
+## `vpx ./import-cjs.ts`
+
+An imported CommonJS module can require() other files
+
+```
+nested commonjs .cts
+```
+
+## `vpx ./import-both.ts`
+
+A .cts with ES module syntax fails with the same error on the in-thread path
+
+```
+Failed to transform <workspace>/both.cts: a `.cts` file is CommonJS, but this one uses ES module syntax (`import`, `export` or `import.meta`), which oxc-node does not compile to CommonJS. Rename it to `.mts` to run it as an ES module, or write it as CommonJS with `import x = require("...")` and `export =`.
+```
+
+## `cd cjs && vpx ./deco.ts`
+
+CommonJS output require()s runtime helpers that the project cannot resolve itself
+
+```
+decorated run
+commonjs object, count 1
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/both.cts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/both.cts
new file mode 100644
index 0000000000..de34b958e5
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/both.cts
@@ -0,0 +1,7 @@
+class Counter {
+  count = 1;
+}
+
+export function describe(): string {
+  return `cts counter=${new Counter().count}`;
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/import-both.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/import-both.ts
new file mode 100644
index 0000000000..579fb9a73d
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/import-both.ts
@@ -0,0 +1,6 @@
+// The in-thread hooks report the same error for a `.cts` with ES module syntax.
+try {
+  await import('./both.cts');
+} catch (error) {
+  console.log((error as Error).message);
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/legacy.cts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/legacy.cts
new file mode 100644
index 0000000000..4e1da84c4f
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/legacy.cts
@@ -0,0 +1,4 @@
+class Named {
+  name = 'commonjs .cts';
+}
+module.exports = new Named();
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/main.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/main.ts
new file mode 100644
index 0000000000..7e31bd195f
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/main.ts
@@ -0,0 +1,22 @@
+// Node.js 26 runs the hooks in-thread through module.registerHooks().
+import { createRequire } from 'node:module';
+
+enum Path {
+  Sync = 'registerHooks',
+}
+
+class Resource {
+  disposed = false;
+  [Symbol.dispose]() {
+    this.disposed = true;
+  }
+}
+
+const resource = new Resource();
+{
+  using held = resource;
+  void held;
+}
+
+const require = createRequire(import.meta.url);
+console.log(Path.Sync, require('./legacy.cts').name, resource.disposed);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/package.json
new file mode 100644
index 0000000000..259665436d
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/package.json
@@ -0,0 +1,9 @@
+{
+  "name": "command-vpx-script-node26",
+  "version": "1.0.0",
+  "private": true,
+  "type": "module",
+  "engines": {
+    "node": "26.5.0"
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/snapshots.toml b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/snapshots.toml
new file mode 100644
index 0000000000..b7159b45c7
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/snapshots.toml
@@ -0,0 +1,8 @@
+[[case]]
+name = "vpx_script_node26"
+vp = ["local", "global"]
+comment = "On Node.js 26 the loader uses in-thread module.registerHooks(), without the DEP0205 warning module.register() prints."
+steps = [
+  { argv = ["vpx", "./main.ts"] },
+  { argv = ["vpx", "./import-both.ts"], comment = "A .cts with ES module syntax fails with the same error on the in-thread path" },
+]
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/snapshots/vpx_script_node26.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/snapshots/vpx_script_node26.global.md
new file mode 100644
index 0000000000..28e60fd5e2
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/snapshots/vpx_script_node26.global.md
@@ -0,0 +1,17 @@
+# vpx_script_node26
+
+On Node.js 26 the loader uses in-thread module.registerHooks(), without the DEP0205 warning module.register() prints.
+
+## `vpx ./main.ts`
+
+```
+registerHooks commonjs .cts true
+```
+
+## `vpx ./import-both.ts`
+
+A .cts with ES module syntax fails with the same error on the in-thread path
+
+```
+Failed to transform <workspace>/both.cts: a `.cts` file is CommonJS, but this one uses ES module syntax (`import`, `export` or `import.meta`), which oxc-node does not compile to CommonJS. Rename it to `.mts` to run it as an ES module, or write it as CommonJS with `import x = require("...")` and `export =`.
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/snapshots/vpx_script_node26.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/snapshots/vpx_script_node26.local.md
new file mode 100644
index 0000000000..28e60fd5e2
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_node26/snapshots/vpx_script_node26.local.md
@@ -0,0 +1,17 @@
+# vpx_script_node26
+
+On Node.js 26 the loader uses in-thread module.registerHooks(), without the DEP0205 warning module.register() prints.
+
+## `vpx ./main.ts`
+
+```
+registerHooks commonjs .cts true
+```
+
+## `vpx ./import-both.ts`
+
+A .cts with ES module syntax fails with the same error on the in-thread path
+
+```
+Failed to transform <workspace>/both.cts: a `.cts` file is CommonJS, but this one uses ES module syntax (`import`, `export` or `import.meta`), which oxc-node does not compile to CommonJS. Rename it to `.mts` to run it as an ES module, or write it as CommonJS with `import x = require("...")` and `export =`.
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/a.ts b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/a.ts
new file mode 100644
index 0000000000..1d93395633
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/a.ts
@@ -0,0 +1,2 @@
+const message: string = 'unreachable on Node.js 20';
+console.log(message);
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/package.json b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/package.json
new file mode 100644
index 0000000000..e97ac8e090
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/package.json
@@ -0,0 +1,8 @@
+{
+  "name": "command-vpx-script-old-node",
+  "version": "1.0.0",
+  "private": true,
+  "engines": {
+    "node": "20.18.0"
+  }
+}
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/snapshots.toml b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/snapshots.toml
new file mode 100644
index 0000000000..1ed1ac2135
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/snapshots.toml
@@ -0,0 +1,7 @@
+[[case]]
+name = "vpx_script_unsupported_node"
+vp = ["local", "global"]
+comment = "Script mode explains the supported Node.js range instead of failing inside the loader."
+steps = [
+  { argv = ["vpx", "./a.ts"], continue-on-failure = true },
+]
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/snapshots/vpx_script_unsupported_node.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/snapshots/vpx_script_unsupported_node.global.md
new file mode 100644
index 0000000000..d5b5274fd3
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/snapshots/vpx_script_unsupported_node.global.md
@@ -0,0 +1,11 @@
+# vpx_script_unsupported_node
+
+Script mode explains the supported Node.js range instead of failing inside the loader.
+
+## `vpx ./a.ts`
+
+**Exit code:** 1
+
+```
+error: Running scripts with vpx requires Node.js ^22.18.0 || ^24.11.0 || >=26.0.0 (current: <version>)
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/snapshots/vpx_script_unsupported_node.local.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/snapshots/vpx_script_unsupported_node.local.md
new file mode 100644
index 0000000000..d5b5274fd3
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/command_vpx_script_old_node/snapshots/vpx_script_unsupported_node.local.md
@@ -0,0 +1,11 @@
+# vpx_script_unsupported_node
+
+Script mode explains the supported Node.js range instead of failing inside the loader.
+
+## `vpx ./a.ts`
+
+**Exit code:** 1
+
+```
+error: Running scripts with vpx requires Node.js ^22.18.0 || ^24.11.0 || >=26.0.0 (current: <version>)
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/shim_system_first_fallback/snapshots.toml b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/shim_system_first_fallback/snapshots.toml
index 5975e30399..e5e6cc407a 100644
--- a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/shim_system_first_fallback/snapshots.toml
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/shim_system_first_fallback/snapshots.toml
@@ -91,3 +91,18 @@ requires = ["bash"]
 steps = [
   { argv = ["bash", "placement.sh"], comment = "Reloading env is idempotent; mode changes invalidate Bash command paths." },
 ]
+
+[[case]]
+name = "vpx_script_follows_vp_node"
+vp = "global"
+cwd = "vpx-project"
+comment = "vpx script mode runs on the Node.js that vp node selects, including system-first mode."
+steps = [
+  { argv = ["node", "../setup-system-node.cjs"], snapshot = false },
+  { argv = ["vp", "env", "on"], snapshot = false },
+  { argv = ["vp", "env", "off", "node"], snapshot = false },
+  { argv = ["vpx", "--print", "process.execPath.includes('system-bin')"], envs = [["PATH", "${VP_HOME}/bin${PATH_SEPARATOR}${workspace}/system-bin${PATH_SEPARATOR}${PATH}"]], comment = "System-first: the system Node.js found on PATH, as vp node selects." },
+  { argv = ["vpx", "--print", "process.execPath.includes('system-bin')"], envs = [["PATH", "${VP_HOME}/fallback-bin${PATH_SEPARATOR}${workspace}/system-bin${PATH_SEPARATOR}${PATH}"]], comment = "A Vite+ shim before system Node.js selects managed Node.js." },
+  ["vp", "env", "on", "node"],
+  { argv = ["vpx", "--print", "process.execPath.includes('system-bin')"], envs = [["PATH", "${VP_HOME}/bin${PATH_SEPARATOR}${workspace}/system-bin${PATH_SEPARATOR}${PATH}"]], comment = "Managed mode ignores system Node.js." },
+]
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/shim_system_first_fallback/snapshots/vpx_script_follows_vp_node.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/shim_system_first_fallback/snapshots/vpx_script_follows_vp_node.md
new file mode 100644
index 0000000000..07da40c3d9
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/shim_system_first_fallback/snapshots/vpx_script_follows_vp_node.md
@@ -0,0 +1,48 @@
+# vpx_script_follows_vp_node
+
+vpx script mode runs on the Node.js that vp node selects, including system-first mode.
+
+## `node ../setup-system-node.cjs`
+
+
+## `vp env on`
+
+
+## `vp env off node`
+
+
+## `PATH=${VP_HOME}/bin${PATH_SEPARATOR}${workspace}/system-bin${PATH_SEPARATOR}${PATH} vpx --print process.execPath.includes('system-bin')`
+
+System-first: the system Node.js found on PATH, as vp node selects.
+
+```
+true
+```
+
+## `PATH=${VP_HOME}/fallback-bin${PATH_SEPARATOR}${workspace}/system-bin${PATH_SEPARATOR}${PATH} vpx --print process.execPath.includes('system-bin')`
+
+A Vite+ shim before system Node.js selects managed Node.js.
+
+```
+false
+```
+
+## `vp env on node`
+
+```
+VITE+ - The Unified Toolchain for the Web
+
+✓ Node.js management set to managed.
+
+Selected commands and shims will now use Vite+ managed tools.
+
+Run `vp env off` to prefer system tools instead.
+```
+
+## `PATH=${VP_HOME}/bin${PATH_SEPARATOR}${workspace}/system-bin${PATH_SEPARATOR}${PATH} vpx --print process.execPath.includes('system-bin')`
+
+Managed mode ignores system Node.js.
+
+```
+false
+```
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/shim_system_first_fallback/vpx-project/.node-version b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/shim_system_first_fallback/vpx-project/.node-version
new file mode 100644
index 0000000000..91d5f6ff8e
--- /dev/null
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/shim_system_first_fallback/vpx-project/.node-version
@@ -0,0 +1 @@
+22.18.0
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/vp_help/snapshots/help.global.md b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/vp_help/snapshots/help.global.md
index 2308149db8..f10214320d 100644
--- a/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/vp_help/snapshots/help.global.md
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/vp_help/snapshots/help.global.md
@@ -28,7 +28,7 @@ Develop:
 Execute:
   run    Run tasks (also available as standalone `vpr`)
   exec   Execute a command from local node_modules/.bin
-  node   Run a Node.js script (shorthand for `env exec node`)
+  node   Run plain Node.js (`env exec node`); `vpx <file>` runs TypeScript
   dlx    Execute a package binary without installing it as a dependency
   cache  Manage the task cache
 
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/main.rs b/crates/vp_cli_snapshots/tests/cli_snapshots/main.rs
index ddbcf8c39b..690c8e2fda 100644
--- a/crates/vp_cli_snapshots/tests/cli_snapshots/main.rs
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/main.rs
@@ -692,8 +692,15 @@ impl CaseHome {
         let bin_dir = package_dir.join("bin");
         std::fs::create_dir_all(shim_dir)
             .map_err(|e| format!("failed to create local package shim dir: {e}"))?;
-        for name in ["vp", "vpr", "oxfmt", "oxlint"] {
-            let script = bin_dir.join(name);
+        // One shim per file in `bin/`, as Unix flavors put the whole directory on PATH.
+        let entries = std::fs::read_dir(&bin_dir)
+            .map_err(|e| format!("failed to read local package bin dir: {e}"))?;
+        for entry in entries {
+            let script =
+                entry.map_err(|e| format!("failed to read local package bin dir: {e}"))?.path();
+            let Some(name) = script.file_name().and_then(|name| name.to_str()) else {
+                continue;
+            };
             if !script.is_file() {
                 continue;
             }
diff --git a/crates/vp_cli_snapshots/tests/cli_snapshots/redact.rs b/crates/vp_cli_snapshots/tests/cli_snapshots/redact.rs
index f5c4609828..b3c5ddddc0 100644
--- a/crates/vp_cli_snapshots/tests/cli_snapshots/redact.rs
+++ b/crates/vp_cli_snapshots/tests/cli_snapshots/redact.rs
@@ -483,11 +483,19 @@ fn path_variants(path: &str, label: &'static str) -> Vec<(String, &'static str)>
         .into_iter()
         .flatten()
         .flat_map(|p| {
-            [
-                p.to_owned(),
-                p.cow_replace('\\', r"\\").into_owned(),
-                p.cow_replace('\\', "/").into_owned(),
-            ]
+            let forward = p.cow_replace('\\', "/").into_owned();
+            // A file URL keeps the slash before a drive letter (`file:///D:/ws`) and
+            // percent-encodes its path, so also redact that spelling: the URL becomes
+            // `file://<label>` on every platform. Set as a string, so Windows-style paths
+            // work on Unix too; the setter encodes `#` and `?`, and `%` is encoded first,
+            // as `pathToFileURL` does.
+            let url_path = url::Url::parse("file:///").ok().map(|mut url| {
+                url.set_path(&forward.cow_replace('%', "%25"));
+                url.path().to_owned()
+            });
+            [p.to_owned(), p.cow_replace('\\', r"\\").into_owned(), forward]
+                .into_iter()
+                .chain(url_path)
         })
         .collect();
     variants.sort_by_key(|v| std::cmp::Reverse(v.len()));
diff --git a/crates/vp_cli_snapshots/tests/redact_unit.rs b/crates/vp_cli_snapshots/tests/redact_unit.rs
index 716139bf89..40b9c4c3a4 100644
--- a/crates/vp_cli_snapshots/tests/redact_unit.rs
+++ b/crates/vp_cli_snapshots/tests/redact_unit.rs
@@ -674,10 +674,32 @@ fn redacts_forward_slash_windows_path_variants() {
     let input = "at file:///E:/Temp/ws/src/main.ts\n".to_owned();
     assert_eq!(
         redact_output(input, &[("E:\\Temp\\ws", "<workspace>")], true),
-        "at file:///<workspace>/src/main.ts\n"
+        "at file://<workspace>/src/main.ts\n"
     );
 }
 
+#[test]
+fn file_urls_redact_to_one_spelling_on_every_platform() {
+    // The slash before a Windows drive letter is part of the URL, not the path.
+    let windows = "Failed to transform file:///D:/a/ws/main.ts\n".to_owned();
+    let unix = "Failed to transform file:///tmp/ws/main.ts\n".to_owned();
+    let expected = "Failed to transform file://<workspace>/main.ts\n";
+    assert_eq!(redact_output(windows, &[("D:\\a\\ws", "<workspace>")], true), expected);
+    assert_eq!(redact_output(unix, &[("/tmp/ws", "<workspace>")], true), expected);
+}
+
+#[test]
+fn file_urls_with_percent_encoded_paths_redact() {
+    let windows = "at file:///C:/Users/First%20Last/ws/main.ts\n".to_owned();
+    let unix = "at file:///home/first%20last/ws/main.ts\n".to_owned();
+    let expected = "at file://<workspace>/main.ts\n";
+    assert_eq!(
+        redact_output(windows, &[("C:\\Users\\First Last\\ws", "<workspace>")], true),
+        expected
+    );
+    assert_eq!(redact_output(unix, &[("/home/first last/ws", "<workspace>")], true), expected);
+}
+
 #[cfg(windows)]
 #[test]
 fn formatted_mode_preserves_escape_renderings() {
diff --git a/crates/vp_global_cli/Cargo.toml b/crates/vp_global_cli/Cargo.toml
index 5769afc058..db86da75db 100644
--- a/crates/vp_global_cli/Cargo.toml
+++ b/crates/vp_global_cli/Cargo.toml
@@ -48,6 +48,7 @@ vp_shared = { workspace = true }
 vp_toolchain = { workspace = true }
 vt_str = { workspace = true }
 vt_workspace = { workspace = true }
+url = { workspace = true }
 uuid = { workspace = true, features = ["v4"] }
 
 [dev-dependencies]
diff --git a/crates/vp_global_cli/src/commands/mod.rs b/crates/vp_global_cli/src/commands/mod.rs
index d2e5b743d2..c135f19bb4 100644
--- a/crates/vp_global_cli/src/commands/mod.rs
+++ b/crates/vp_global_cli/src/commands/mod.rs
@@ -191,6 +191,7 @@ pub mod shell;
 // Standalone binary commands
 pub mod vpr;
 pub mod vpx;
+pub mod vpx_script;
 
 // Self-Management
 pub mod implode;
diff --git a/crates/vp_global_cli/src/commands/vpx.rs b/crates/vp_global_cli/src/commands/vpx.rs
index 4728799ab4..3c78cc39dd 100644
--- a/crates/vp_global_cli/src/commands/vpx.rs
+++ b/crates/vp_global_cli/src/commands/vpx.rs
@@ -6,10 +6,14 @@
 //! 2. Global vp packages (installed via `vp install -g`)
 //! 3. System PATH (excluding vite-plus bin directory)
 //! 4. Remote download via `vp dlx`
+//!
+//! A script file (`vpx ./seed.ts`) or leading Node.js options run Node.js with
+//! the script loader instead; see [`super::vpx_script`].
 
 use vp_shared::{PrependOptions, ToolPathEnv, exit_code_from_status, output};
 use vt_path::{AbsolutePath, AbsolutePathBuf};
 
+use super::vpx_script;
 use crate::{commands::env::config, shim::dispatch};
 
 /// Parsed vpx flags.
@@ -21,31 +25,41 @@ pub struct VpxFlags {
     pub shell_mode: bool,
     /// Suppress output (-s/--silent)
     pub silent: bool,
+    /// tsconfig for script mode (--tsconfig)
+    pub tsconfig: Option<String>,
     /// Show help (-h/--help)
     pub help: bool,
+    /// Show the Vite+ version (-v/--version)
+    pub version: bool,
 }
 
 /// Help text for vpx.
 const VPX_HELP: &str = "\
-Execute a command from a local or remote npm package
+Execute a command from a local or remote npm package, or run a script file
 
 Usage: vpx [OPTIONS] <pkg[@version]> [args...]
+       vpx [OPTIONS] [NODE_OPTIONS] <script> [args...]
 
 Arguments:
   <pkg[@version]>  Package binary to execute
-  [args...]        Arguments to pass to the command
+  <script>         Script file to run (.ts, .mts, .cts, .tsx, .js, .mjs, .cjs, .jsx)
+  [args...]        Arguments to pass to the command or script
 
 Options:
   -p, --package <NAME>  Package(s) to install if not found locally
   -c, --shell-mode      Execute the command within a shell environment
   -s, --silent          Suppress all output except the command's output
+      --tsconfig <PATH> tsconfig.json to use when running a script
+  -v, --version         Print the Vite+ version
   -h, --help            Print help
 
 Examples:
-  vpx eslint .                                           # Run local eslint (or download)
-  vpx create-vue my-app                                  # Download and run create-vue
-  vpx oxlint@1.85.0 --version                             # Run specific version
-  vpx -p cowsay -c 'echo \"hi\" | cowsay'                  # Shell mode with package";
+  vpx eslint .                           # Run local eslint (or download)
+  vpx create-vue my-app                  # Download and run create-vue
+  vpx oxlint@1.85.0 --version            # Run specific version
+  vpx -p cowsay -c 'echo \"hi\" | cowsay'  # Shell mode with package
+  vpx ./scripts/seed.ts --dry-run        # Run a TypeScript script
+  vpx --watch ./server.ts                # Pass Node.js options before the script";
 
 /// A globally installed binary found via `vp install -g`.
 struct GlobalBinary {
@@ -66,33 +80,83 @@ pub async fn execute_vpx(args: &[String], cwd: &AbsolutePath) -> i32 {
         return 0;
     }
 
+    // Same report as `vp --version`; `vp node --version` prints the Node.js version.
+    if flags.version {
+        return match super::version::execute(cwd.to_absolute_path_buf()).await {
+            Ok(status) => exit_code_from_status(status),
+            Err(e) => {
+                output::error(&e.to_string());
+                1
+            }
+        };
+    }
+
     // No command specified
     if positional.is_empty() {
         output::error("vpx requires a command to run");
         eprintln!();
         eprintln!("Usage: vpx <pkg[@version]> [args...]");
+        eprintln!("       vpx <script> [args...]");
         eprintln!();
         eprintln!("Examples:");
         eprintln!("  vpx eslint .");
         eprintln!("  vpx create-vue my-app");
+        eprintln!("  vpx ./scripts/seed.ts");
         return 1;
     }
 
     let cmd_spec = &positional[0];
 
+    // Script mode is decided before package-spec parsing: script paths can contain `@`.
+    let package_flags = !flags.packages.is_empty() || flags.shell_mode;
+    if !package_flags || !cmd_spec.starts_with('-') {
+        match vpx_script::detect(&positional, cwd) {
+            Ok(Some(_)) if package_flags => {
+                let flag = if flags.shell_mode { "--shell-mode" } else { "--package" };
+                output::error(&format!("vpx: {flag} cannot be used when running a script"));
+                return 1;
+            }
+            Ok(Some(invocation)) => {
+                return vpx_script::execute(invocation, flags.tsconfig, cwd).await;
+            }
+            // A missing script never falls through to `dlx`, `--package` or not. With
+            // `--shell-mode` the token is a shell command, not a path.
+            Err(error) if !flags.shell_mode => {
+                output::error(&format!("vpx: {error}"));
+                return 1;
+            }
+            _ => {}
+        }
+    }
+    if flags.tsconfig.is_some() {
+        output::error("vpx: --tsconfig can only be used when running a script");
+        return 1;
+    }
+
     // Extract the command name (binary to look for in node_modules/.bin)
     let cmd_name = extract_command_name(cmd_spec);
 
     // If no version spec and no --package flag, try local → global → PATH lookup
-    if !has_version_spec(cmd_spec) && flags.packages.is_empty() && !flags.shell_mode {
+    if !has_version_spec(cmd_spec) && !package_flags {
+        // An explicit path runs as a program; fail clearly here rather than in `dlx`.
+        if let Err(error) = vpx_script::check_explicit_program(cmd_spec, cwd) {
+            output::error(&format!("vpx: {}", error.error));
+            if let Some(note) = &error.note {
+                output::note(note);
+            }
+            return 1;
+        }
+
         // 1. Try local node_modules/.bin
         if let Some(local_bin) = find_local_binary(cwd, &cmd_name) {
             tracing::debug!("vpx: found local binary at {}", local_bin.as_path().display());
-            let mut child_env = ToolPathEnv::from_env();
-            if let Err(error) = prepend_node_modules_bin_to_path(cwd, &mut child_env) {
-                output::error(&format!("vpx: {error}"));
-                return 1;
-            }
+            let child_env = match local_bin_env(cwd) {
+                Ok(env) => env,
+                Err(error) => {
+                    output::error(&format!("vpx: {error}"));
+                    return 1;
+                }
+            };
             let cmd_args: Vec<String> = positional[1..].to_vec();
             return crate::shim::exec::exec_tool(&local_bin, &cmd_args, child_env);
         }
@@ -106,11 +170,13 @@ pub async fn execute_vpx(args: &[String], cwd: &AbsolutePath) -> i32 {
         // 3. Try system PATH (excluding vite-plus bin dir)
         if let Some(path_bin) = find_on_path(&cmd_name) {
             tracing::debug!("vpx: found on PATH at {}", path_bin.as_path().display());
-            let mut child_env = ToolPathEnv::from_env();
-            if let Err(error) = prepend_node_modules_bin_to_path(cwd, &mut child_env) {
-                output::error(&format!("vpx: {error}"));
-                return 1;
-            }
+            let child_env = match local_bin_env(cwd) {
+                Ok(env) => env,
+                Err(error) => {
+                    output::error(&format!("vpx: {error}"));
+                    return 1;
+                }
+            };
             let cmd_args: Vec<String> = positional[1..].to_vec();
             return crate::shim::exec::exec_tool(&path_bin, &cmd_args, child_env);
         }
@@ -222,6 +288,14 @@ fn find_on_path(cmd: &str) -> Option<AbsolutePathBuf> {
 ///
 /// Walks up from cwd and prepends each existing `node_modules/.bin` directory
 /// to PATH so that sub-processes also resolve local binaries first.
+/// This process's environment with every `node_modules/.bin` from `cwd` up first on
+/// `PATH`, nearest first.
+pub(crate) fn local_bin_env(cwd: &AbsolutePath) -> std::io::Result<ToolPathEnv> {
+    let mut env = ToolPathEnv::from_env();
+    prepend_node_modules_bin_to_path(cwd, &mut env)?;
+    Ok(env)
+}
+
 fn prepend_node_modules_bin_to_path(
     cwd: &AbsolutePath,
     env: &mut ToolPathEnv,
@@ -352,15 +426,30 @@ pub fn parse_vpx_args(args: &[String]) -> (VpxFlags, Vec<String>) {
             "-s" | "--silent" => {
                 flags.silent = true;
             }
+            // Without a value, `--tsconfig` stays positional, where script detection
+            // reports the missing path as it does after Node.js options.
+            "--tsconfig" if i + 1 == args.len() => {
+                positional.extend_from_slice(&args[i..]);
+                break;
+            }
+            "--tsconfig" => {
+                i += 1;
+                flags.tsconfig = Some(args[i].clone());
+            }
             "-h" | "--help" => {
                 flags.help = true;
             }
+            "-v" | "--version" => {
+                flags.version = true;
+            }
             other => {
                 // Handle --package=VALUE
                 if let Some(value) = other.strip_prefix("--package=") {
                     flags.packages.push(value.to_string());
                 } else if let Some(value) = other.strip_prefix("-p=") {
                     flags.packages.push(value.to_string());
+                } else if let Some(value) = other.strip_prefix("--tsconfig=") {
+                    flags.tsconfig = Some(value.to_string());
                 } else {
                     // Unknown flag — treat as start of positional args
                     positional.extend_from_slice(&args[i..]);
@@ -381,6 +470,21 @@ mod tests {
 
     use super::*;
 
+    /// `packageSpecs` in `vpx_script_cases.json`, which
+    /// `packages/cli/src/__tests__/vpx-script.spec.ts` checks against the project-local
+    /// bin's port of these two functions.
+    #[test]
+    fn shared_package_specs() {
+        let table = super::vpx_script::shared_table();
+        let specs = table["packageSpecs"].as_array().unwrap();
+        assert!(!specs.is_empty());
+        for case in specs {
+            let spec = case["spec"].as_str().unwrap();
+            assert_eq!(has_version_spec(spec), case["versioned"].as_bool().unwrap(), "{spec}");
+            assert_eq!(extract_command_name(spec), case["command"].as_str().unwrap(), "{spec}");
+        }
+    }
+
     // =========================================================================
     // has_version_spec tests
     // =========================================================================
@@ -522,6 +626,34 @@ mod tests {
         assert!(positional.is_empty());
     }
 
+    #[test]
+    fn test_parse_vpx_args_version() {
+        for flag in ["-v", "--version"] {
+            let args: Vec<String> = vec![flag.into()];
+            let (flags, positional) = parse_vpx_args(&args);
+            assert!(flags.version, "{flag}");
+            assert!(positional.is_empty());
+        }
+        // After the script, `--version` belongs to the script.
+        let args: Vec<String> = vec!["./a.ts".into(), "--version".into()];
+        let (flags, positional) = parse_vpx_args(&args);
+        assert!(!flags.version);
+        assert_eq!(positional, args);
+    }
+
+    #[test]
+    fn test_parse_vpx_args_tsconfig() {
+        let args: Vec<String> =
+            vec!["--tsconfig".into(), "a.json".into(), "--tsconfig=b.json".into(), "./a.ts".into()];
+        let (flags, positional) = parse_vpx_args(&args);
+        assert_eq!(flags.tsconfig.as_deref(), Some("b.json"));
+        assert_eq!(positional, vec!["./a.ts".to_string()]);
+
+        let (flags, positional) = parse_vpx_args(&["--tsconfig".to_string()]);
+        assert_eq!(flags.tsconfig, None);
+        assert_eq!(positional, vec!["--tsconfig".to_string()]);
+    }
+
     #[test]
     fn test_parse_vpx_args_no_args() {
         let args: Vec<String> = vec![];
@@ -535,10 +667,10 @@ mod tests {
 
     #[test]
     fn test_parse_vpx_args_unknown_flag_becomes_positional() {
-        let args: Vec<String> = vec!["--version".into()];
+        let args: Vec<String> = vec!["--inspect".into()];
         let (flags, positional) = parse_vpx_args(&args);
         assert!(!flags.help);
-        assert_eq!(positional, vec!["--version"]);
+        assert_eq!(positional, vec!["--inspect"]);
     }
 
     // =========================================================================
diff --git a/crates/vp_global_cli/src/commands/vpx_script.rs b/crates/vp_global_cli/src/commands/vpx_script.rs
new file mode 100644
index 0000000000..bcb5825e45
--- /dev/null
+++ b/crates/vp_global_cli/src/commands/vpx_script.rs
@@ -0,0 +1,616 @@
+//! `vpx <script>`: run a script file on the project's Node.js with the oxc-node
+//! loader that is compiled into the Vite+ native binding.
+//!
+//! See `rfcs/vpx-script-execution.md`. The CLI/loader contract is
+//! `node --require <dist/script-preload.cjs> --import <file URL of dist/script-register.js>`
+//! plus the `VP_SCRIPT_TSCONFIG` environment variable; keep it stable, because the
+//! global `vp` may run a newer or older project-local `vite-plus` loader.
+
+use std::io::Read as _;
+
+use vp_shared::{env_vars, output};
+use vt_path::{AbsolutePath, AbsolutePathBuf};
+
+use crate::js_executor::JsExecutor;
+
+/// `vite-plus/dist` entries: the CommonJS `--require` preload and the `--import`.
+const PRELOAD_ENTRY: &str = "script-preload.cjs";
+const IMPORT_ENTRY: &str = "script-register.js";
+
+/// Extensions that make a token a script.
+const SCRIPT_EXTENSIONS: &[&str] = &[".ts", ".mts", ".cts", ".tsx", ".js", ".mjs", ".cjs", ".jsx"];
+
+/// A missing file with one of these is an error, never a package name.
+const TS_EXTENSIONS: &[&str] = &[".ts", ".mts", ".cts", ".tsx"];
+
+/// Node.js options that take a required value, which may come as the next argument:
+/// those `node --help` lists as `--option=...` on Node.js 22, 24, and 26. Best effort:
+/// a missing entry only moves the missing-file check for the script to Node.js.
+const NODE_OPTIONS_WITH_VALUE: &[&str] = &[
+    "-C",
+    "-e",
+    "-p",
+    "-pe",
+    "-r",
+    "--allow-fs-read",
+    "--allow-fs-write",
+    "--build-sea",
+    "--build-snapshot-config",
+    "--conditions",
+    "--cpu-prof-dir",
+    "--cpu-prof-interval",
+    "--cpu-prof-name",
+    "--debug-port",
+    "--diagnostic-dir",
+    "--disable-proto",
+    "--disable-warning",
+    "--dns-result-order",
+    "--env-file",
+    "--env-file-if-exists",
+    "--eval",
+    "--experimental-config-file",
+    "--experimental-default-type",
+    "--experimental-loader",
+    "--experimental-package-map",
+    "--experimental-sea-config",
+    "--experimental-test-isolation",
+    "--experimental-test-tag-filter",
+    "--heap-prof-dir",
+    "--heap-prof-interval",
+    "--heap-prof-name",
+    "--heapsnapshot-near-heap-limit",
+    "--heapsnapshot-signal",
+    "--icu-data-dir",
+    "--import",
+    "--input-type",
+    "--inspect-port",
+    "--inspect-publish-uid",
+    "--loader",
+    "--localstorage-file",
+    "--max-http-header-size",
+    "--max-old-space-size-percentage",
+    "--network-family-autoselection-attempt-timeout",
+    "--openssl-config",
+    "--print",
+    "--redirect-warnings",
+    "--report-dir",
+    "--report-directory",
+    "--report-filename",
+    "--report-signal",
+    "--require",
+    "--run",
+    "--secure-heap",
+    "--secure-heap-min",
+    "--snapshot-blob",
+    "--test-concurrency",
+    "--test-coverage-branches",
+    "--test-coverage-exclude",
+    "--test-coverage-functions",
+    "--test-coverage-include",
+    "--test-coverage-lines",
+    "--test-global-setup",
+    "--test-isolation",
+    "--test-name-pattern",
+    "--test-random-seed",
+    "--test-reporter",
+    "--test-reporter-destination",
+    "--test-rerun-failures",
+    "--test-shard",
+    "--test-skip-pattern",
+    "--test-timeout",
+    "--title",
+    "--tls-cipher-list",
+    "--tls-keylog",
+    "--trace-event-categories",
+    "--trace-event-file-pattern",
+    "--trace-require-module",
+    "--unhandled-rejections",
+    "--use-largepages",
+    "--v8-pool-size",
+    "--watch-kill-signal",
+    "--watch-path",
+];
+
+/// Node.js options after which positionals are not an entry file: the code of `--eval` /
+/// `--print` or the package script of `--run` runs instead, and `--test` takes test files
+/// and globs.
+const NODE_OPTIONS_WITHOUT_ENTRY: &[&str] =
+    &["-e", "--eval", "-p", "-pe", "--print", "--run", "--test"];
+
+/// Whether `options` lists the option `name` (an argument without `=value`). Node.js
+/// accepts `_` for `-` in long option names, as in `--redirect_warnings`.
+fn lists_option(options: &[&str], name: &str) -> bool {
+    options.iter().any(|option| {
+        option.len() == name.len()
+            && option.bytes().zip(name.bytes()).enumerate().all(|(index, (expected, actual))| {
+                expected == actual || (index >= 2 && expected == b'-' && actual == b'_')
+            })
+    })
+}
+
+/// A `vpx` invocation that runs Node.js with the script loader.
+#[derive(Debug, PartialEq, Eq)]
+pub struct ScriptInvocation {
+    /// Node.js options, the script, and its arguments, in the order given.
+    pub node_args: Vec<String>,
+    /// `--tsconfig` given among the Node.js options.
+    pub tsconfig: Option<String>,
+}
+
+#[derive(Debug, PartialEq, Eq)]
+pub enum ScriptError {
+    NotFound(String),
+    IsDirectory(String),
+    MissingTsconfigValue,
+}
+
+impl std::fmt::Display for ScriptError {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        match self {
+            Self::NotFound(script) => write!(f, "Script not found: {script}"),
+            Self::IsDirectory(script) => write!(f, "Script is a directory: {script}"),
+            Self::MissingTsconfigValue => write!(f, "--tsconfig requires a path"),
+        }
+    }
+}
+
+/// Decide whether `positional` (the arguments after the `vpx` options) runs a
+/// script. Returns `None` for package mode. Never rewrites the arguments except
+/// for removing `--tsconfig`.
+pub fn detect(
+    positional: &[String],
+    cwd: &AbsolutePath,
+) -> Result<Option<ScriptInvocation>, ScriptError> {
+    let Some(first) = positional.first() else {
+        return Ok(None);
+    };
+
+    if !first.starts_with('-') {
+        return Ok(is_script(first, cwd)?
+            .then(|| ScriptInvocation { node_args: positional.to_vec(), tsconfig: None }));
+    }
+
+    // A leading option never named a package bin, so this always runs Node.js.
+    // The first non-option token is the script (or `-` for stdin); everything
+    // from it on belongs to the script.
+    let mut node_args = Vec::with_capacity(positional.len());
+    let mut tsconfig = None;
+    let mut entry = true;
+    let mut index = 0;
+    while let Some(arg) = positional.get(index) {
+        if arg == "--" || arg == "-" || !arg.starts_with('-') {
+            let script = if arg == "--" { positional.get(index + 1) } else { Some(arg) };
+            if let Some(script) = script.filter(|_| entry) {
+                check_script_after_options(script, cwd)?;
+            }
+            node_args.extend_from_slice(&positional[index..]);
+            break;
+        }
+        if arg == "--tsconfig" {
+            tsconfig =
+                Some(positional.get(index + 1).ok_or(ScriptError::MissingTsconfigValue)?.clone());
+            index += 2;
+            continue;
+        }
+        if let Some(value) = arg.strip_prefix("--tsconfig=") {
+            tsconfig = Some(value.to_owned());
+            index += 1;
+            continue;
+        }
+        let name = arg.split_once('=').map_or(arg.as_str(), |(name, _)| name);
+        entry &= !lists_option(NODE_OPTIONS_WITHOUT_ENTRY, name);
+        node_args.push(arg.clone());
+        if name.len() == arg.len()
+            && lists_option(NODE_OPTIONS_WITH_VALUE, name)
+            && let Some(value) = positional.get(index + 1)
+        {
+            node_args.push(value.clone());
+            index += 1;
+        }
+        index += 1;
+    }
+
+    Ok(Some(ScriptInvocation { node_args, tsconfig }))
+}
+
+/// After Node.js options, only a missing explicit path is an error. A bare name may
+/// be the value of an option missing from `NODE_OPTIONS_WITH_VALUE`, such as a
+/// coverage glob, and this position never falls back to a package, so Node.js
+/// reports a missing one itself.
+fn check_script_after_options(token: &str, cwd: &AbsolutePath) -> Result<(), ScriptError> {
+    if is_explicit_path(token)
+        && SCRIPT_EXTENSIONS.iter().any(|extension| token.ends_with(extension))
+        && !cwd.join(token).as_path().is_file()
+    {
+        return Err(missing_script(token, &cwd.join(token)));
+    }
+    Ok(())
+}
+
+/// The error for a script path that is not a file.
+fn missing_script(token: &str, path: &AbsolutePath) -> ScriptError {
+    if path.as_path().is_dir() {
+        ScriptError::IsDirectory(token.to_owned())
+    } else {
+        ScriptError::NotFound(token.to_owned())
+    }
+}
+
+/// Why package mode cannot run an explicit path as a program.
+#[derive(Debug, PartialEq, Eq)]
+pub struct ProgramError {
+    pub error: String,
+    pub note: Option<String>,
+}
+
+/// Package mode runs an explicit path as a program. An existing file must be
+/// executable, and a directory needs a `package.json` for `vp dlx`, so either fails
+/// here with a clear error instead of in `vp dlx`. Mirrors `checkExplicitProgram` in
+/// `packages/cli/src/vpx-script.ts`.
+pub fn check_explicit_program(token: &str, cwd: &AbsolutePath) -> Result<(), ProgramError> {
+    if !is_explicit_path(token) {
+        return Ok(());
+    }
+    let path = cwd.join(token);
+    let Ok(metadata) = std::fs::metadata(path.as_path()) else {
+        return Ok(());
+    };
+    if metadata.is_dir() && !path.join("package.json").as_path().is_file() {
+        return Err(ProgramError {
+            error: format!("'{token}' is a directory without a package.json"),
+            note: None,
+        });
+    }
+    if metadata.is_file() && !is_executable(&metadata) {
+        return Err(ProgramError {
+            error: format!("'{token}' is not executable"),
+            note: Some(format!("Make it executable with `chmod +x {token}`.")),
+        });
+    }
+    Ok(())
+}
+
+/// An executable mode bit; always true on Windows.
+#[cfg(unix)]
+fn is_executable(metadata: &std::fs::Metadata) -> bool {
+    use std::os::unix::fs::PermissionsExt;
+    metadata.permissions().mode() & 0o111 != 0
+}
+
+#[cfg(not(unix))]
+fn is_executable(_metadata: &std::fs::Metadata) -> bool {
+    true
+}
+
+/// Whether `token` names a script. A missing explicit path, or a missing file
+/// with a TypeScript extension, is an error: it must never fall through to a
+/// remote package download.
+fn is_script(token: &str, cwd: &AbsolutePath) -> Result<bool, ScriptError> {
+    let path = cwd.join(token);
+    if let Some(extension) = SCRIPT_EXTENSIONS.iter().find(|extension| token.ends_with(**extension))
+    {
+        if path.as_path().is_file() {
+            return Ok(true);
+        }
+        if is_explicit_path(token) || TS_EXTENSIONS.contains(extension) {
+            return Err(missing_script(token, &path));
+        }
+        return Ok(false);
+    }
+    if !is_explicit_path(token) {
+        return Ok(false);
+    }
+    // A missing explicit path never falls through to a package download.
+    if !path.as_path().exists() {
+        return Err(ScriptError::NotFound(token.to_owned()));
+    }
+    // `#!/usr/bin/env vpx` in an extensionless file. Without this, the `PATH`
+    // lookup would exec the file, which re-enters `vpx` forever.
+    Ok(path.as_path().is_file() && has_vpx_shebang(&path))
+}
+
+fn is_explicit_path(token: &str) -> bool {
+    if token.starts_with("./") || token.starts_with("../") || token.starts_with('/') {
+        return true;
+    }
+    if cfg!(windows) {
+        let bytes = token.as_bytes();
+        return token.starts_with(".\\")
+            || token.starts_with("..\\")
+            || token.starts_with("\\\\")
+            || (bytes.len() >= 3
+                && bytes[0].is_ascii_alphabetic()
+                && bytes[1] == b':'
+                && (bytes[2] == b'\\' || bytes[2] == b'/'));
+    }
+    false
+}
+
+fn has_vpx_shebang(path: &AbsolutePath) -> bool {
+    let mut head = [0_u8; 256];
+    let Ok(read) = std::fs::File::open(path.as_path()).and_then(|mut file| file.read(&mut head))
+    else {
+        return false;
+    };
+    let head = &head[..read];
+    let Some(line) = head.strip_prefix(b"#!") else {
+        return false;
+    };
+    let line = line.split(|byte| *byte == b'\n').next().unwrap_or_default();
+    String::from_utf8_lossy(line).split_whitespace().any(|word| {
+        let name = word.rsplit(['/', '\\']).next().unwrap_or(word);
+        name == "vpx" || name == "vpx.exe"
+    })
+}
+
+/// Find the `vite-plus/dist` directory holding the loader entries: the project's
+/// `vite-plus` first, so teams run the loader version pinned in their lockfile, then
+/// the global install.
+fn resolve_loader_dir(cwd: &AbsolutePath) -> Option<AbsolutePathBuf> {
+    choose_loader_dir(JsExecutor::resolve_local_vite_plus_package_dir(cwd), || {
+        JsExecutor::new(None).get_scripts_dir().ok()
+    })
+    .map(real_dir)
+}
+
+/// `dir` with symlinks resolved. pnpm links `vite-plus` into its store, where the native
+/// binding package sits next to it; under `--preserve-symlinks` Node.js would resolve the
+/// binding from the link instead and not find it.
+fn real_dir(dir: AbsolutePathBuf) -> AbsolutePathBuf {
+    dunce::canonicalize(dir.as_path()).ok().and_then(AbsolutePathBuf::new).unwrap_or(dir)
+}
+
+/// The project's `vite-plus/dist` when it ships both loader entries, else the global
+/// one. A project `vite-plus` too old for `vpx <script>` falls back to the global
+/// install; a change to the CLI/loader contract gets new entry names the same way.
+fn choose_loader_dir(
+    local_package_dir: Option<AbsolutePathBuf>,
+    global_dist: impl FnOnce() -> Option<AbsolutePathBuf>,
+) -> Option<AbsolutePathBuf> {
+    let has_loader = |dir: &AbsolutePathBuf| {
+        dir.join(PRELOAD_ENTRY).as_path().is_file() && dir.join(IMPORT_ENTRY).as_path().is_file()
+    };
+    local_package_dir
+        .map(|dir| dir.join("dist"))
+        .filter(has_loader)
+        .or_else(|| global_dist().filter(has_loader))
+}
+
+/// Run Node.js with the script loader through the core `node` shim, so the
+/// script gets the same runtime selection as `vp node`.
+pub async fn execute(
+    invocation: ScriptInvocation,
+    tsconfig: Option<String>,
+    cwd: &AbsolutePath,
+) -> i32 {
+    let Some(loader_dir) = resolve_loader_dir(cwd) else {
+        output::error(
+            "vpx: The script loader was not found. Upgrade vite-plus to run script files with vpx.",
+        );
+        return 1;
+    };
+    let preload = loader_dir.join(PRELOAD_ENTRY);
+    let Ok(import_url) = url::Url::from_file_path(loader_dir.join(IMPORT_ENTRY).as_path()) else {
+        output::error(&format!("vpx: Invalid loader path: {}", loader_dir.as_path().display()));
+        return 1;
+    };
+
+    let tsconfig = invocation.tsconfig.or(tsconfig);
+    if let Some(tsconfig) = &tsconfig {
+        let path = cwd.join(tsconfig);
+        if !path.as_path().is_file() {
+            output::error(&format!("vpx: tsconfig not found: {tsconfig}"));
+            return 1;
+        }
+        // SAFETY: Setting env vars at this point before exec is safe.
+        unsafe {
+            std::env::set_var(env_vars::VP_SCRIPT_TSCONFIG, path.as_path());
+        }
+    } else {
+        // Each `vpx` run selects its own tsconfig; forked children keep it.
+        // SAFETY: Removing env vars at this point before exec is safe.
+        unsafe {
+            std::env::remove_var(env_vars::VP_SCRIPT_TSCONFIG);
+        }
+    }
+
+    let env = match super::vpx::local_bin_env(cwd) {
+        Ok(env) => env,
+        Err(error) => {
+            output::error(&format!("vpx: {error}"));
+            return 1;
+        }
+    };
+
+    let mut args = Vec::with_capacity(invocation.node_args.len() + 4);
+    // The preload registers the hooks before any user `--require`; the `--import`
+    // registers the off-thread hooks on older Node.js and routes the entry point
+    // through the ESM loader.
+    args.push("--require".to_owned());
+    args.push(preload.as_path().display().to_string());
+    args.push("--import".to_owned());
+    args.push(import_url.to_string());
+    args.extend(invocation.node_args);
+
+    // stdout belongs to the script; route vp's own output to stderr.
+    output::route_user_output_to_stderr();
+    // As `vp node` does: dispatch assumes the shell's PATH lookup already preferred a
+    // system-first Node.js, so repeat that lookup here.
+    if let Ok(config) = super::env::config::load_config().await
+        && config.shim_mode_for_tool("node") == super::env::config::ShimMode::SystemFirst
+        && let Some(node) = crate::shim::dispatch::find_system_tool("node")
+    {
+        return crate::shim::exec::exec_tool(&node, &args, env);
+    }
+    // Boxed: shim dispatch is also what routes `vpx` here.
+    Box::pin(crate::shim::dispatch("node", &args, env)).await
+}
+
+/// The cases both CLIs run, from `vpx_script_cases.json`.
+#[cfg(test)]
+pub(crate) fn shared_table() -> serde_json::Value {
+    serde_json::from_str(include_str!("vpx_script_cases.json")).unwrap()
+}
+
+#[cfg(test)]
+mod tests {
+    use serde_json::Value;
+    use tempfile::TempDir;
+
+    use super::*;
+
+    /// A temporary project holding a shared case's `files`; the project directory is the cwd.
+    fn case_project(case: &Value) -> (TempDir, AbsolutePathBuf) {
+        let files: Vec<(String, String)> = case
+            .get("files")
+            .and_then(Value::as_object)
+            .map(|files| {
+                files
+                    .iter()
+                    .map(|(name, content)| (name.clone(), content.as_str().unwrap().to_owned()))
+                    .collect()
+            })
+            .unwrap_or_default();
+        project(&files)
+    }
+
+    fn project(files: &[(String, String)]) -> (TempDir, AbsolutePathBuf) {
+        let dir = TempDir::new().unwrap();
+        for (name, content) in files {
+            let path = dir.path().join(name);
+            std::fs::create_dir_all(path.parent().unwrap()).unwrap();
+            std::fs::write(path, content).unwrap();
+        }
+        let cwd = AbsolutePathBuf::new(dir.path().to_path_buf()).unwrap();
+        (dir, cwd)
+    }
+
+    fn dist(files: &[&str]) -> (TempDir, AbsolutePathBuf) {
+        let files: Vec<(String, String)> =
+            files.iter().map(|file| (format!("dist/{file}"), String::new())).collect();
+        project(&files)
+    }
+
+    #[test]
+    fn loader_comes_from_the_project_when_it_ships_both_entries() {
+        let (_local, local) = dist(&[PRELOAD_ENTRY, IMPORT_ENTRY]);
+        let (_global, global) = dist(&[PRELOAD_ENTRY, IMPORT_ENTRY]);
+        let global = global.join("dist");
+        assert_eq!(
+            choose_loader_dir(Some(local.clone()), || Some(global)),
+            Some(local.join("dist"))
+        );
+    }
+
+    #[test]
+    fn loader_falls_back_to_the_global_install_for_an_older_project() {
+        // A project vite-plus from before `vpx <script>`, or with only one entry.
+        let (_global, global) = dist(&[PRELOAD_ENTRY, IMPORT_ENTRY]);
+        let global = global.join("dist");
+        for local_files in [&[][..], &[PRELOAD_ENTRY][..], &[IMPORT_ENTRY][..]] {
+            let (_local, local) = dist(local_files);
+            assert_eq!(
+                choose_loader_dir(Some(local), || Some(global.clone())),
+                Some(global.clone())
+            );
+        }
+        assert_eq!(choose_loader_dir(None, || Some(global.clone())), Some(global.clone()));
+    }
+
+    #[cfg(unix)]
+    #[test]
+    fn loader_dir_resolves_symlinks() {
+        let (_store, store) = dist(&[PRELOAD_ENTRY, IMPORT_ENTRY]);
+        let (_project, project) = project(&[]);
+        let link = project.join("vite-plus");
+        std::os::unix::fs::symlink(store.as_path(), link.as_path()).unwrap();
+        let real = AbsolutePathBuf::new(dunce::canonicalize(store.as_path()).unwrap()).unwrap();
+        assert_eq!(real_dir(link.join("dist")), real.join("dist"));
+    }
+
+    #[test]
+    fn loader_is_missing_when_neither_install_ships_it() {
+        let (_local, local) = dist(&[]);
+        let (_global, global) = dist(&[PRELOAD_ENTRY]);
+        assert_eq!(choose_loader_dir(Some(local), || Some(global.join("dist"))), None);
+        assert_eq!(choose_loader_dir(None, || None), None);
+    }
+
+    /// `explicitPrograms` in `vpx_script_cases.json`, which the project-local bin's
+    /// `checkExplicitProgram` runs too.
+    #[test]
+    fn shared_explicit_programs() {
+        let table = shared_table();
+        for case in table["explicitPrograms"].as_array().unwrap() {
+            let name = case["name"].as_str().unwrap();
+            if cfg!(not(unix)) && case.get("unixOnly").and_then(Value::as_bool) == Some(true) {
+                continue;
+            }
+            let (_dir, cwd) = case_project(case);
+            #[cfg(unix)]
+            for file in case.get("executable").and_then(Value::as_array).into_iter().flatten() {
+                use std::os::unix::fs::PermissionsExt;
+                let path = cwd.join(file.as_str().unwrap());
+                std::fs::set_permissions(path.as_path(), std::fs::Permissions::from_mode(0o755))
+                    .unwrap();
+            }
+            let expected = match &case["expect"] {
+                Value::String(ok) if ok == "ok" => Ok(()),
+                expect => Err(ProgramError {
+                    error: expect["error"].as_str().unwrap().to_owned(),
+                    note: expect.get("note").and_then(Value::as_str).map(str::to_owned),
+                }),
+            };
+            let actual = check_explicit_program(case["token"].as_str().unwrap(), &cwd);
+            assert_eq!(actual, expected, "{name}");
+        }
+    }
+
+    /// `vpx_script_cases.json` also lists what `packages/cli/src/vpx-script.ts` must
+    /// declare, so the TypeScript port checks the same lists without parsing Rust.
+    #[test]
+    fn lists_match_the_shared_table() {
+        let table = shared_table();
+        let list = |key: &str| -> Vec<&str> {
+            table[key].as_array().unwrap().iter().map(|item| item.as_str().unwrap()).collect()
+        };
+        assert_eq!(SCRIPT_EXTENSIONS, list("scriptExtensions"));
+        assert_eq!(NODE_OPTIONS_WITH_VALUE, list("nodeOptionsWithValue"));
+        assert_eq!(NODE_OPTIONS_WITHOUT_ENTRY, list("nodeOptionsWithoutEntry"));
+    }
+
+    /// The cases in `vpx_script_cases.json`, which
+    /// `packages/cli/src/__tests__/vpx-script.spec.ts` runs against the project-local
+    /// bin's detection, so the two implementations cannot drift apart.
+    #[test]
+    fn shared_detection_cases() {
+        let table = shared_table();
+        let cases = table["cases"].as_array().unwrap();
+        assert!(cases.len() > 20);
+        for case in cases {
+            let name = case["name"].as_str().unwrap();
+            let (_dir, cwd) = case_project(case);
+            let root = cwd.as_path().display().to_string();
+            let strings = |value: &Value| -> Vec<String> {
+                value
+                    .as_array()
+                    .unwrap()
+                    .iter()
+                    .map(|item| item.as_str().unwrap().replace("{cwd}", &root))
+                    .collect()
+            };
+            let expected = match &case["expect"] {
+                Value::String(mode) if mode == "package" => Ok(None),
+                expect if expect.get("error").is_some() => {
+                    Err(expect["error"].as_str().unwrap().to_owned())
+                }
+                expect => Ok(Some(ScriptInvocation {
+                    node_args: strings(&expect["script"]),
+                    tsconfig: expect.get("tsconfig").and_then(Value::as_str).map(str::to_owned),
+                })),
+            };
+            let actual = detect(&strings(&case["args"]), &cwd).map_err(|error| error.to_string());
+            assert_eq!(actual, expected, "{name}");
+        }
+    }
+}
diff --git a/crates/vp_global_cli/src/commands/vpx_script_cases.json b/crates/vp_global_cli/src/commands/vpx_script_cases.json
new file mode 100644
index 0000000000..ec72d4034c
--- /dev/null
+++ b/crates/vp_global_cli/src/commands/vpx_script_cases.json
@@ -0,0 +1,479 @@
+{
+  "$comment": "Script detection cases shared by crates/vp_global_cli/src/commands/vpx_script.rs and packages/cli/src/__tests__/vpx-script.spec.ts, so the global vpx and the project-local bin decide the same way. `files` are created in a temporary project directory that is the cwd; `{cwd}` in `args` and `script` stands for that directory. `expect` is \"package\", { \"error\": message }, or { \"script\": Node.js arguments, \"tsconfig\": path }. `scriptExtensions`, `nodeOptionsWithValue`, and `nodeOptionsWithoutEntry` are the lists both implementations must declare. `packageSpecs` gives, for a package spec, whether it names a version and which binary it runs. `explicitPrograms` checks an explicit path that package mode runs as a program: `executable` lists the files made executable, `expect` is \"ok\" or { \"error\", \"note\" }, and `unixOnly` cases depend on mode bits.",
+  "scriptExtensions": [".ts", ".mts", ".cts", ".tsx", ".js", ".mjs", ".cjs", ".jsx"],
+  "nodeOptionsWithValue": [
+    "-C",
+    "-e",
+    "-p",
+    "-pe",
+    "-r",
+    "--allow-fs-read",
+    "--allow-fs-write",
+    "--build-sea",
+    "--build-snapshot-config",
+    "--conditions",
+    "--cpu-prof-dir",
+    "--cpu-prof-interval",
+    "--cpu-prof-name",
+    "--debug-port",
+    "--diagnostic-dir",
+    "--disable-proto",
+    "--disable-warning",
+    "--dns-result-order",
+    "--env-file",
+    "--env-file-if-exists",
+    "--eval",
+    "--experimental-config-file",
+    "--experimental-default-type",
+    "--experimental-loader",
+    "--experimental-package-map",
+    "--experimental-sea-config",
+    "--experimental-test-isolation",
+    "--experimental-test-tag-filter",
+    "--heap-prof-dir",
+    "--heap-prof-interval",
+    "--heap-prof-name",
+    "--heapsnapshot-near-heap-limit",
+    "--heapsnapshot-signal",
+    "--icu-data-dir",
+    "--import",
+    "--input-type",
+    "--inspect-port",
+    "--inspect-publish-uid",
+    "--loader",
+    "--localstorage-file",
+    "--max-http-header-size",
+    "--max-old-space-size-percentage",
+    "--network-family-autoselection-attempt-timeout",
+    "--openssl-config",
+    "--print",
+    "--redirect-warnings",
+    "--report-dir",
+    "--report-directory",
+    "--report-filename",
+    "--report-signal",
+    "--require",
+    "--run",
+    "--secure-heap",
+    "--secure-heap-min",
+    "--snapshot-blob",
+    "--test-concurrency",
+    "--test-coverage-branches",
+    "--test-coverage-exclude",
+    "--test-coverage-functions",
+    "--test-coverage-include",
+    "--test-coverage-lines",
+    "--test-global-setup",
+    "--test-isolation",
+    "--test-name-pattern",
+    "--test-random-seed",
+    "--test-reporter",
+    "--test-reporter-destination",
+    "--test-rerun-failures",
+    "--test-shard",
+    "--test-skip-pattern",
+    "--test-timeout",
+    "--title",
+    "--tls-cipher-list",
+    "--tls-keylog",
+    "--trace-event-categories",
+    "--trace-event-file-pattern",
+    "--trace-require-module",
+    "--unhandled-rejections",
+    "--use-largepages",
+    "--v8-pool-size",
+    "--watch-kill-signal",
+    "--watch-path"
+  ],
+  "nodeOptionsWithoutEntry": ["-e", "--eval", "-p", "-pe", "--print", "--run", "--test"],
+  "packageSpecs": [
+    { "spec": "eslint", "versioned": false, "command": "eslint" },
+    { "spec": "eslint@9", "versioned": true, "command": "eslint" },
+    { "spec": "eslint@", "versioned": true, "command": "eslint" },
+    { "spec": "create-vue@latest", "versioned": true, "command": "create-vue" },
+    { "spec": "@vue/cli", "versioned": false, "command": "cli" },
+    { "spec": "@vue/cli@5.0.0", "versioned": true, "command": "cli" },
+    { "spec": "@scope", "versioned": false, "command": "@scope" }
+  ],
+  "explicitPrograms": [
+    {
+      "name": "an executable file",
+      "files": { "deploy.sh": "#!/bin/sh\n" },
+      "executable": ["deploy.sh"],
+      "token": "./deploy.sh",
+      "expect": "ok"
+    },
+    {
+      "name": "a file that is not executable",
+      "files": { "notes.txt": "hi\n" },
+      "token": "./notes.txt",
+      "unixOnly": true,
+      "expect": {
+        "error": "'./notes.txt' is not executable",
+        "note": "Make it executable with `chmod +x ./notes.txt`."
+      }
+    },
+    {
+      "name": "a package directory",
+      "files": { "tools/package.json": "{}" },
+      "token": "./tools",
+      "expect": "ok"
+    },
+    {
+      "name": "a directory without a package.json",
+      "files": { "empty/.keep": "" },
+      "token": "./empty",
+      "expect": { "error": "'./empty' is a directory without a package.json" }
+    },
+    {
+      "name": "a bare name is not a path",
+      "token": "eslint",
+      "expect": "ok"
+    }
+  ],
+  "cases": [
+    {
+      "name": "explicit path with a script extension",
+      "files": {
+        "scripts/seed.ts": ""
+      },
+      "args": ["./scripts/seed.ts", "--dry-run"],
+      "expect": {
+        "script": ["./scripts/seed.ts", "--dry-run"]
+      }
+    },
+    {
+      "name": "bare relative path to an existing file",
+      "files": {
+        "scripts/seed.ts": ""
+      },
+      "args": ["scripts/seed.ts"],
+      "expect": {
+        "script": ["scripts/seed.ts"]
+      }
+    },
+    {
+      "name": "missing bare TypeScript file",
+      "args": ["seed.ts"],
+      "expect": {
+        "error": "Script not found: seed.ts"
+      }
+    },
+    {
+      "name": "missing explicit path",
+      "args": ["./missing.js"],
+      "expect": {
+        "error": "Script not found: ./missing.js"
+      }
+    },
+    {
+      "name": "missing explicit path without an extension",
+      "args": ["./bin/missing"],
+      "expect": {
+        "error": "Script not found: ./bin/missing"
+      }
+    },
+    {
+      "name": "explicit path to a directory",
+      "files": {
+        "tools/package.json": "{}"
+      },
+      "args": ["./tools"],
+      "expect": "package"
+    },
+    {
+      "name": "script extension on a directory",
+      "files": {
+        "tools.ts/index.ts": ""
+      },
+      "args": ["./tools.ts"],
+      "expect": {
+        "error": "Script is a directory: ./tools.ts"
+      }
+    },
+    {
+      "name": "script extension on a directory after Node.js options",
+      "files": {
+        "tools.ts/index.ts": ""
+      },
+      "args": ["--watch", "./tools.ts"],
+      "expect": {
+        "error": "Script is a directory: ./tools.ts"
+      }
+    },
+    {
+      "name": "bare name with a JavaScript extension and no file",
+      "args": ["highlight.js"],
+      "expect": "package"
+    },
+    {
+      "name": "scoped path, not a version spec",
+      "files": {
+        "@scope/tool.ts": ""
+      },
+      "args": ["./@scope/tool.ts"],
+      "expect": {
+        "script": ["./@scope/tool.ts"]
+      }
+    },
+    {
+      "name": "package name",
+      "args": ["eslint", "."],
+      "expect": "package"
+    },
+    {
+      "name": "package with a version",
+      "args": ["oxlint@1.85.0", "--version"],
+      "expect": "package"
+    },
+    {
+      "name": "scoped package with a version",
+      "args": ["@vue/cli@5.0.0"],
+      "expect": "package"
+    },
+    {
+      "name": "shell script without a vpx shebang",
+      "files": {
+        "deploy.sh": "#!/bin/sh\necho hi\n"
+      },
+      "args": ["./deploy.sh"],
+      "expect": "package"
+    },
+    {
+      "name": "extensionless file with a vpx shebang",
+      "files": {
+        "bin/tool": "#!/usr/bin/env vpx\nconsole.log(1)\n"
+      },
+      "args": ["{cwd}/bin/tool"],
+      "expect": {
+        "script": ["{cwd}/bin/tool"]
+      }
+    },
+    {
+      "name": "extensionless file with a vpx shebang that passes options",
+      "files": {
+        "bin/tool": "#!/usr/bin/env -S vpx --tsconfig x.json\n"
+      },
+      "args": ["{cwd}/bin/tool"],
+      "expect": {
+        "script": ["{cwd}/bin/tool"]
+      }
+    },
+    {
+      "name": "leading Node.js options stay before the script",
+      "files": {
+        "server.ts": ""
+      },
+      "args": ["--watch", "./server.ts", "--port", "3000"],
+      "expect": {
+        "script": ["--watch", "./server.ts", "--port", "3000"]
+      }
+    },
+    {
+      "name": "the value of --import is not the script",
+      "files": {
+        "main.ts": ""
+      },
+      "args": ["--import", "./setup.ts", "./main.ts"],
+      "expect": {
+        "script": ["--import", "./setup.ts", "./main.ts"]
+      }
+    },
+    {
+      "name": "the value of --env-file is not the script",
+      "files": {
+        "main.ts": "",
+        ".env": ""
+      },
+      "args": ["--env-file", ".env", "./main.ts"],
+      "expect": {
+        "script": ["--env-file", ".env", "./main.ts"]
+      }
+    },
+    {
+      "name": "missing script after Node.js options",
+      "args": ["--watch", "./missing.ts"],
+      "expect": {
+        "error": "Script not found: ./missing.ts"
+      }
+    },
+    {
+      "name": "the value of a listed option is not the script, even as a glob",
+      "files": {
+        "a.test.ts": ""
+      },
+      "args": ["--test", "--test-coverage-include", "src/**/*.ts", "./a.test.ts"],
+      "expect": {
+        "script": ["--test", "--test-coverage-include", "src/**/*.ts", "./a.test.ts"]
+      }
+    },
+    {
+      "name": "the value of an unlisted option is left to Node.js",
+      "files": {
+        "a.test.ts": ""
+      },
+      "args": ["--unlisted-option", "src/**/*.ts", "./a.test.ts"],
+      "expect": {
+        "script": ["--unlisted-option", "src/**/*.ts", "./a.test.ts"]
+      }
+    },
+    {
+      "name": "a missing bare name after Node.js options is left to Node.js",
+      "args": ["--watch", "seed.ts"],
+      "expect": {
+        "script": ["--watch", "seed.ts"]
+      }
+    },
+    {
+      "name": "--eval without a script runs Node.js",
+      "args": ["--eval", "console.log(1)"],
+      "expect": {
+        "script": ["--eval", "console.log(1)"]
+      }
+    },
+    {
+      "name": "arguments after --eval code are not an entry file",
+      "args": ["--eval", "console.log(process.argv)", "./missing.ts"],
+      "expect": {
+        "script": ["--eval", "console.log(process.argv)", "./missing.ts"]
+      }
+    },
+    {
+      "name": "arguments after -e code are not an entry file",
+      "args": ["-e", "1", "./missing.ts"],
+      "expect": {
+        "script": ["-e", "1", "./missing.ts"]
+      }
+    },
+    {
+      "name": "arguments after -p code and -- are not an entry file",
+      "args": ["--no-warnings", "-p", "1", "--", "./missing.ts"],
+      "expect": {
+        "script": ["--no-warnings", "-p", "1", "--", "./missing.ts"]
+      }
+    },
+    {
+      "name": "-pe takes code like --print",
+      "args": ["-pe", "./missing.ts", "./other.ts"],
+      "expect": {
+        "script": ["-pe", "./missing.ts", "./other.ts"]
+      }
+    },
+    {
+      "name": "arguments after --print= code are not an entry file",
+      "args": ["--print=process.argv.length", "./missing.ts"],
+      "expect": {
+        "script": ["--print=process.argv.length", "./missing.ts"]
+      }
+    },
+    {
+      "name": "arguments after a --run package script are not an entry file",
+      "args": ["--run", "build", "./missing.ts"],
+      "expect": {
+        "script": ["--run", "build", "./missing.ts"]
+      }
+    },
+    {
+      "name": "--test files and globs are not an entry file",
+      "args": ["--test", "./tests/**/*.test.ts"],
+      "expect": {
+        "script": ["--test", "./tests/**/*.test.ts"]
+      }
+    },
+    {
+      "name": "an underscore spelling of an option takes its value",
+      "files": { "main.ts": "" },
+      "args": ["--redirect_warnings", "./warnings.ts", "./main.ts"],
+      "expect": {
+        "script": ["--redirect_warnings", "./warnings.ts", "./main.ts"]
+      }
+    },
+    {
+      "name": "an underscore spelling of an option with = takes no value",
+      "args": ["--redirect_warnings=w.log", "./missing.ts"],
+      "expect": {
+        "error": "Script not found: ./missing.ts"
+      }
+    },
+    {
+      "name": "--check still checks its entry file",
+      "args": ["--check", "./missing.ts"],
+      "expect": {
+        "error": "Script not found: ./missing.ts"
+      }
+    },
+    {
+      "name": "--inspect without a script runs Node.js",
+      "args": ["--inspect"],
+      "expect": {
+        "script": ["--inspect"]
+      }
+    },
+    {
+      "name": "stdin runs Node.js",
+      "args": ["-"],
+      "expect": {
+        "script": ["-"]
+      }
+    },
+    {
+      "name": "stdin with a value-taking option runs Node.js",
+      "args": ["--input-type", "module", "-"],
+      "expect": {
+        "script": ["--input-type", "module", "-"]
+      }
+    },
+    {
+      "name": "--tsconfig among the Node.js options is extracted",
+      "files": {
+        "a.ts": ""
+      },
+      "args": ["--watch", "--tsconfig", "tsconfig.scripts.json", "./a.ts"],
+      "expect": {
+        "script": ["--watch", "./a.ts"],
+        "tsconfig": "tsconfig.scripts.json"
+      }
+    },
+    {
+      "name": "--tsconfig= is extracted, and one after the script belongs to the script",
+      "files": {
+        "a.ts": ""
+      },
+      "args": ["--watch", "--tsconfig=x.json", "./a.ts", "--tsconfig", "y"],
+      "expect": {
+        "script": ["--watch", "./a.ts", "--tsconfig", "y"],
+        "tsconfig": "x.json"
+      }
+    },
+    {
+      "name": "--tsconfig without a value",
+      "files": {
+        "a.ts": ""
+      },
+      "args": ["--watch", "--tsconfig"],
+      "expect": {
+        "error": "--tsconfig requires a path"
+      }
+    },
+    {
+      "name": "arguments after the script belong to the script",
+      "files": {
+        "a.ts": ""
+      },
+      "args": ["./a.ts", "--", "--watch", "b.ts"],
+      "expect": {
+        "script": ["./a.ts", "--", "--watch", "b.ts"]
+      }
+    },
+    {
+      "name": "-- before the script is passed through",
+      "files": {
+        "a.ts": ""
+      },
+      "args": ["--", "./a.ts", "x"],
+      "expect": {
+        "script": ["--", "./a.ts", "x"]
+      }
+    }
+  ]
+}
diff --git a/crates/vp_global_cli/src/help.rs b/crates/vp_global_cli/src/help.rs
index c0dadeb24e..c667906945 100644
--- a/crates/vp_global_cli/src/help.rs
+++ b/crates/vp_global_cli/src/help.rs
@@ -284,7 +284,10 @@ pub fn top_level_help_doc() -> HelpDoc {
                 vec![
                     row("run", "Run tasks (also available as standalone `vpr`)"),
                     row("exec", "Execute a command from local node_modules/.bin"),
-                    row("node", "Run a Node.js script (shorthand for `env exec node`)"),
+                    row(
+                        "node",
+                        "Run plain Node.js (`env exec node`); `vpx <file>` runs TypeScript",
+                    ),
                     row("dlx", "Execute a package binary without installing it as a dependency"),
                     row("cache", "Manage the task cache"),
                 ],
diff --git a/crates/vp_shared/src/env_vars.rs b/crates/vp_shared/src/env_vars.rs
index 9d421c7e11..7b9a5bfe6d 100644
--- a/crates/vp_shared/src/env_vars.rs
+++ b/crates/vp_shared/src/env_vars.rs
@@ -136,6 +136,9 @@ pub const VP_BYPASS: &str = "VP_BYPASS";
 /// Comma-separated tools whose real binary directories have been injected into PATH.
 pub const VP_PATH_INJECTED_TOOLS: &str = "VP_PATH_INJECTED_TOOLS";
 
+/// Explicit tsconfig for the `vpx <script>` loader hooks, set from `vpx --tsconfig`.
+pub const VP_SCRIPT_TSCONFIG: &str = "VP_SCRIPT_TSCONFIG";
+
 /// Set by shim dispatch to record the active Node.js version.
 pub const VP_ACTIVE_NODE: &str = "VP_ACTIVE_NODE";
 
diff --git a/docs/guide/env.md b/docs/guide/env.md
index a62e36e70e..0f91011abf 100644
--- a/docs/guide/env.md
+++ b/docs/guide/env.md
@@ -196,7 +196,7 @@ The global CLI supports Tab completion in Bash, Zsh, Fish, Nushell, and PowerShe
 - `vp env uninstall` removes the Node.js version resolved from an explicit version or selector, such as `22` or `lts`. Package managers require a qualified exact version, such as `pnpm@10.18.0`.
 - `vp env clean` removes unused installs. Use `clean node`, `clean pm`, or a concrete manager. Current and configured-default versions are preserved.
 - `vp env exec` runs a command in the resolved environment. Use `--node` and `--package-manager`; `--npm` is an alias for `--package-manager npm@…`.
-- `vp node` uses the resolved Node.js runtime and exposes the selected package-manager path to child processes.
+- `vp node` uses the resolved Node.js runtime and exposes the selected package-manager path to child processes. It runs Node.js as is, so TypeScript files get Node.js type stripping only; [`vpx <file>`](/guide/vpx#running-scripts) runs them on the same runtime with full TypeScript support.
 
 ### Inspect
 
diff --git a/docs/guide/vpx.md b/docs/guide/vpx.md
index 278b4aea81..f077b18388 100644
--- a/docs/guide/vpx.md
+++ b/docs/guide/vpx.md
@@ -1,25 +1,29 @@
 # Running Binaries
 
-Use `vpx`, `vp exec`, and `vp dlx` to run binaries without switching between local installs, downloaded packages, and project-specific tools.
+Use `vpx`, `vp exec`, and `vp dlx` to run package binaries and scripts without switching between local installs, downloaded packages, and project-specific tools.
 
 ## Overview
 
-`vpx` executes a command from a local or remote npm package. It can run a package that is already available locally, download a package on demand, or target an explicit package version.
+`vpx` does one of two things, depending on its first argument:
 
-Use the other binary commands when you need stricter control:
+- [`vpx <package>`](#running-package-binaries) runs a binary from a local or remote npm package, like `npx`.
+- [`vpx <file>`](#running-scripts) runs a TypeScript or JavaScript file, like `tsx`.
 
-- `vpx` looks for a binary in local `node_modules/.bin` directories, Vite+-managed global packages, and system `PATH`, in that order, then falls back to `vp dlx`. With `pkg@version`, `--package/-p`, or `--shell-mode`, it runs via `vp dlx` directly.
-- `vp exec` runs a command from local `node_modules/.bin` directories, falling back to `PATH` if not found
-- `vp dlx` runs a package binary without adding it as a dependency
+The other commands give stricter control over where a binary comes from:
 
-## `vpx`
+- [`vp exec`](#vp-exec) runs a command from local `node_modules/.bin` directories, falling back to `PATH`.
+- [`vp dlx`](#vp-dlx) runs a package binary without adding it as a dependency.
 
-Use `vpx` for running any local or remote binary:
+`vpx -v` or `vpx --version` prints the Vite+ version, like `vp --version`. In `package.json` scripts, `vpx` prints the version of the project's `vite-plus` package.
+
+## Running Package Binaries
 
 ```bash
-vpx <pkg[@version]> [args...]
+vpx [options] <pkg[@version]> [args...]
 ```
 
+`vpx` looks for the binary in local `node_modules/.bin` directories, Vite+-managed global packages, and the system `PATH`, in that order. If none has it, `vpx` downloads the package and runs it via `vp dlx`. With `pkg@version`, `--package/-p`, or `--shell-mode`, it runs via `vp dlx` directly.
+
 ### Options
 
 - `-p, --package <name>` installs one or more additional packages before running the command
@@ -35,6 +39,137 @@ vpx oxlint@1.85.0 --version
 vpx -p cowsay -c 'echo "hi" | cowsay'
 ```
 
+Package managers and `vp run` put `node_modules/.bin` first on `PATH`, so `package.json` scripts run the `vpx` bin of the project's `vite-plus` package. That bin does not need the global CLI, and it looks only in local `node_modules/.bin` directories. It runs an installed binary directly, as the global `vpx` does, and `pkg@version`, `--package/-p`, or `--shell-mode` via `vp dlx`. A binary that is not installed is an error, so a script never downloads a package by accident:
+
+```
+error: vpx: 'eslint' is not installed in node_modules
+note: Add it to devDependencies, or run `vp dlx eslint` to download and run it.
+```
+
+## Running Scripts
+
+```bash
+vpx [--tsconfig <path>] [node options] <file> [args...]
+```
+
+`vpx` runs TypeScript and JavaScript files directly, without a `tsx` or `ts-node` dependency. Scripts run on the project's Node.js version, the same one [`vp node`](/guide/env) selects, with the [oxc-node](https://github.com/oxc-project/oxc-node) loader that ships with Vite+.
+
+```bash
+vpx ./scripts/seed.ts --dry-run
+vpx scripts/build.mts
+vpx --watch ./server.ts
+vpx --env-file=.env ./scripts/migrate.ts
+vpx --tsconfig tsconfig.scripts.json ./tools/gen.ts
+```
+
+### Files and Package Names
+
+`vpx` runs its argument as a file when it is:
+
+- a path (starting with `./`, `../`, or `/`; on Windows also `.\`, `..\`, a drive such as `C:\`, or `\\`) ending in `.ts`, `.mts`, `.cts`, `.tsx`, `.js`, `.mjs`, `.cjs`, or `.jsx`
+- a name with one of those extensions that exists as a file, such as `scripts/seed.ts`
+- a path to a file whose shebang runs `vpx` (see [Shebang Scripts](#shebang-scripts))
+
+A missing path, or a missing name with a TypeScript extension, is an error: `vpx` never downloads a package for it. After Node.js options, such as `vpx --watch seed.ts`, only a missing path is reported by `vpx`; Node.js reports a missing name itself. A name with a JavaScript extension that is not a file, such as `highlight.js`, runs the package of that name.
+
+### Supported Syntax
+
+- TypeScript syntax that Node.js type stripping rejects: enums, namespaces, parameter properties, and JSX
+- Decorators with `"experimentalDecorators": true`, including `emitDecoratorMetadata`; standard decorators and `accessor` fields are not supported yet
+- tsconfig `paths` for `import`, `.js` imports that point at `.ts` files, and extensionless imports
+- ESM and CommonJS, including `require()` of `.ts` files; a `.cts` file is CommonJS, so it uses `import x = require('...')` and `export =`, and `import`/`export` declarations there fail with an error that suggests renaming the file to `.mts`
+- TypeScript published in `node_modules`
+- tsconfig `jsx`, `jsxImportSource`, `jsxFactory`, `jsxFragmentFactory`, `useDefineForClassFields`, and `verbatimModuleSyntax`; see [JSX](#jsx) and [tsconfig](#tsconfig) for the defaults
+
+`vpx` does not type-check. Run [`vp check`](/guide/check) for that.
+
+### Options
+
+- `--tsconfig <path>` applies one tsconfig to every file (see [tsconfig](#tsconfig))
+- Node.js options before the file, such as `--watch`, `--inspect`, `--test`, `--env-file`, `--require`, and `--import`, are passed to Node.js; `--require` and `--import` preloads can be TypeScript too
+- Everything after the file, including `--`, is passed to the script
+
+### Shebang Scripts
+
+Scripts can use `vpx` as their interpreter. Make the file executable and keep its extension:
+
+```ts
+#!/usr/bin/env vpx
+// scripts/release.ts
+```
+
+### In `package.json` Scripts
+
+The `vpx` bin of the `vite-plus` package runs scripts on its own, so `"seed": "vpx ./scripts/seed.ts"` works in `package.json` scripts without the global CLI. It runs them on the Node.js that started it, which inside `vp run` and package manager scripts is the project's version.
+
+### tsconfig
+
+`vpx` reads compiler options from a tsconfig but does not type-check with it. Each file uses the nearest `tsconfig.json` above it that includes it through `files`, `include`, `exclude`, or project `references`, as `tsc` does, and `extends` is followed. Files in `node_modules` use no tsconfig, and neither does a file that no tsconfig includes, so it gets the defaults below. Such a file still resolves `paths` aliases through the nearest `tsconfig.json` above it, as tsx does: with a root tsconfig whose `include` is `["src"]`, a script in `scripts/` can import the same aliases as `src/`. Because the config depends on the file's location, not on the working directory, `vpx` compiles a file the same way wherever it runs from.
+
+`--tsconfig <path>` applies one config to every file instead, including files that config does not include. Without `--tsconfig`, an `OXC_TSCONFIG_PATH` or `TS_NODE_PROJECT` environment variable does the same. If it names a file that does not exist, or a tsconfig fails to parse, `vpx` prints a warning and runs without that config.
+
+A file that no tsconfig applies to runs as if its `compilerOptions` were empty:
+
+| Option                            | Without a tsconfig                                                                                                                                                                                                                                                                                                                                       |
+| --------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `module`                          | The module format comes from `package.json` `"type"`: ESM with `"module"`, CommonJS otherwise. `.mts` is always ESM and `.cts` always CommonJS. With a tsconfig `module` of `node16`, `node18`, `nodenext`, `es2015`, or later, `.ts` and `.tsx` files run as ESM regardless of `"type"`; for the `node*` values, `tsc` and tsx follow `"type"` instead. |
+| `paths`, `baseUrl`                | None. Imports resolve as in Node.js, plus `.js` to `.ts` or `.tsx`, `.mjs` to `.mts`, `.cjs` to `.cts`, and extensionless imports.                                                                                                                                                                                                                       |
+| `useDefineForClassFields`         | `true`: class fields have `[[Define]]` semantics and run natively, as with a `target` of `ES2022` or later. A lower `target` switches to `[[Set]]` semantics, as in `tsc`.                                                                                                                                                                               |
+| `experimentalDecorators`          | `false`: a decorator fails with an error that asks for this option.                                                                                                                                                                                                                                                                                      |
+| `emitDecoratorMetadata`           | `false`.                                                                                                                                                                                                                                                                                                                                                 |
+| `jsx`, `jsxImportSource`          | The automatic runtime, importing `react/jsx-runtime` (see [JSX](#jsx)).                                                                                                                                                                                                                                                                                  |
+| `verbatimModuleSyntax`            | `false`: imports whose bindings are unused at runtime are removed, with their side effects.                                                                                                                                                                                                                                                              |
+| `rewriteRelativeImportExtensions` | `false`. `./file.ts` imports work either way.                                                                                                                                                                                                                                                                                                            |
+
+Types are removed, and enums, namespaces, and parameter properties are compiled, whatever the tsconfig says. `strict`, `lib`, and other type-checking options have no effect, and `target` only changes the class field default.
+
+### JSX
+
+`.jsx` and `.tsx` files compile to calls into a JSX runtime, React's by default. Install the runtime they use, `react` or the package named by `jsxImportSource`; Vite+ does not ship one. tsconfig options select the runtime:
+
+| tsconfig `jsx`                 | Output                                                                                                                             |
+| ------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------- |
+| not set, or `"react-jsx"`      | The automatic runtime: `jsx()` and `jsxs()` from `<jsxImportSource>/jsx-runtime`, with `jsxImportSource` defaulting to `react`     |
+| `"react-jsxdev"`               | The development runtime: `jsxDEV()` from `<jsxImportSource>/jsx-dev-runtime`, with the file name, line, and column of each element |
+| `"react"`                      | The classic runtime: `React.createElement()`, or `jsxFactory`, with fragments as `React.Fragment`, or `jsxFragmentFactory`         |
+| `"preserve"`, `"react-native"` | The automatic runtime, because Node.js cannot run JSX                                                                              |
+
+A classic factory that the file imports, such as `import { h, Fragment } from 'my-jsx'`, is kept even though only JSX uses it.
+
+Pragma comments override the tsconfig for that file:
+
+```tsx
+/** @jsxImportSource my-jsx */
+```
+
+```tsx
+/** @jsxRuntime classic */
+/** @jsx h */
+/** @jsxFrag Fragment */
+import { h, Fragment } from 'my-jsx';
+```
+
+When a file has both `@jsx` and `@jsxImportSource`, `@jsxImportSource` selects the automatic runtime and `@jsx` is ignored. Pragmas are read from every comment in the file, so prose such as `// @jsxImportSource is set above` in an ordinary comment changes the runtime too.
+
+A `.jsx` file gets a tsconfig's JSX options only when that tsconfig sets `"allowJs": true`, as in `tsc` and tsx. Otherwise it uses the defaults above.
+
+JSX that depends on a compiler plugin is not supported. `vpx` compiles JSX only into calls to a runtime's `jsx()`, `jsxs()`, and `jsxDEV()` exports or to a classic factory. A setup that relies on a Babel or bundler plugin to transform JSX, usually with `"jsx": "preserve"`, fails at runtime or loses what that plugin adds.
+
+### Coming from tsx
+
+Most scripts that run with tsx run with `vpx` unchanged. These differences can need a change:
+
+- **JSX default**: without a tsconfig `jsx` option, tsx compiles JSX to `React.createElement()`, which needs `React` in scope, while `vpx` uses the automatic runtime. Set `"jsx": "react"` to keep the classic output. Because of its default, tsx also ignores a lone `/** @jsxImportSource … */` comment unless the file has `/** @jsxRuntime automatic */` or the tsconfig sets `"jsx": "react-jsx"`; `vpx` applies the comment on its own.
+- **`.cts` files with `import` or `export`**: tsx compiles them to CommonJS, and `vpx` reports an error. Rename the file to `.mts`, or write it with `import x = require()` and `export =`.
+- **`import` in a CommonJS package**: in a package without `"type": "module"`, tsx compiles a `.ts` or `.js` file that uses `import`, `export`, or `import.meta` to CommonJS, so `__filename`, `__dirname`, and `require` still work. `vpx` runs such a file as an ES module, as Node.js does, so they are not defined, and a default import of it from an ES module gets its default export rather than the whole module. Use `import.meta.filename`, `import.meta.dirname`, and `createRequire(import.meta.url)` instead.
+- **`require()` resolution**: tsx maps `require('./a.js')` to `a.ts` and applies tsconfig `paths` to `require()`. `vpx` resolves `require()` as Node.js does, so write the `.ts` extension, and use `paths` aliases only with `import`.
+- **Signals**: tsx turns `SIGINT` and `SIGTERM` into exit codes 130 and 143 and runs `process.on('exit')` handlers first. Under `vpx` the signal ends the script, as it does under Node.js, so clean up in a `process.on('SIGINT')` or `process.on('SIGTERM')` handler.
+- **Node.js version**: `vpx` needs Node.js `^22.18.0 || ^24.11.0 || >=26.0.0`, while tsx also runs on older releases.
+- **Watch mode**: `tsx watch` becomes `vpx --watch`, which is Node.js `--watch`. It has no `--include`, `--exclude`, or `--clear-screen` options and no rerun on Enter; use `--watch-path` to watch more files. Node.js waits for a script that ignores `SIGTERM` to exit before it restarts, where tsx kills it after a few seconds; pass `--watch-kill-signal=SIGKILL` to restart at once.
+- **Eval, REPL, and `--check`**: `vpx --eval`, the REPL, and `vpx --check` do not transform TypeScript.
+- **`node --import tsx`**: `vpx` has no equivalent for tools that must start `node` themselves.
+- **Other loaders**: remove `--import tsx` from `NODE_OPTIONS`. Two loaders registered together compete for the same files.
+
 ## `vp exec`
 
 Use `vp exec` to run tools already installed in your project or available in your environment.
diff --git a/packages/cli/AGENTS.md b/packages/cli/AGENTS.md
index e9e6326519..3548eeda31 100644
--- a/packages/cli/AGENTS.md
+++ b/packages/cli/AGENTS.md
@@ -10,6 +10,10 @@ Docs are local at `node_modules/vite-plus/docs` or online at https://viteplus.de
 
 `vp <name>` runs a built-in command. `vp run <name>` runs a `package.json` script or a `vite.config.ts` task. Scripts cannot overwrite built-ins, so `vp dev` and `vp run dev` may do different things. Check `package.json` and `vite.config.ts` first, and run `vp run <name>` when the project defines a script or task with that name.
 
+## Running Scripts
+
+Run TypeScript and JavaScript files with `vpx <file>`, for example `vpx ./scripts/seed.ts --dry-run`. It handles enums, decorators, JSX, and tsconfig `paths`, so do not add `tsx` or `ts-node` to run scripts. `vp node <file>` runs plain Node.js.
+
 ## Tool Versions
 
 Run `vp toolchain` to show versions and relationships in the active Vite+
diff --git a/packages/cli/BUNDLING.md b/packages/cli/BUNDLING.md
index 9e85463322..514b3f2e6f 100644
--- a/packages/cli/BUNDLING.md
+++ b/packages/cli/BUNDLING.md
@@ -254,29 +254,30 @@ pub extern crate rolldown_binding;
 
 ### Build-Time Feature Activation
 
-The rolldown feature is only enabled during release builds:
+`build.ts` enables the `rolldown` and `oxc-node` features for every binding build:
 
 ```typescript
 // In build.ts
+const bindingFeatures = ['rolldown', 'oxc-node'];
 await cli.build({
-  features: process.env.RELEASE_BUILD ? ['rolldown'] : void 0,
+  // napi-rs passes each entry as a separate cargo argument after one `--features`.
+  features: [bindingFeatures.join(',')],
   release: process.env.VP_CLI_DEBUG !== '1',
 });
 ```
 
-**When `RELEASE_BUILD=1`**:
+With the features enabled, the build:
 
-1. Enables the `rolldown` Cargo feature
-2. Compiles `rolldown_binding` into the `.node` file
-3. Extracts `napi.dtsHeader` from rolldown's package.json for type definitions
-4. Prepends custom type definitions to the generated `.d.ts` file
+1. Compiles `rolldown_binding` and the vendored `oxc-node` crate into the `.node` file
+2. Extracts `napi.dtsHeader` from rolldown's package.json for type definitions
+3. Prepends custom type definitions to the generated `.d.ts` file
 
 ### Why Conditional Compilation?
 
-| Build Type                  | rolldown Feature | Use Case                                |
-| --------------------------- | ---------------- | --------------------------------------- |
-| Development (`pnpm build`)  | Disabled         | Faster builds, smaller binaries         |
-| Release (`RELEASE_BUILD=1`) | Enabled          | Full distribution with bundled rolldown |
+| Build Type                                    | Features            | Use Case                                     |
+| --------------------------------------------- | ------------------- | -------------------------------------------- |
+| `cargo check` / `cargo test -p vite-plus-cli` | None                | Faster Rust iteration without Rolldown       |
+| `pnpm build` (debug or release)               | `rolldown,oxc-node` | Full binding with bundled Rolldown and hooks |
 
 ### Module Specifier Rewriting
 
@@ -298,12 +299,22 @@ This means:
 
 ### Native Binding Contents
 
-When compiled with `RELEASE_BUILD=1`, the `.node` file contains:
+A binding built by `pnpm build` contains:
 
-| Component          | Source                             | Purpose                        |
-| ------------------ | ---------------------------------- | ------------------------------ |
-| `vt`               | `packages/cli/binding/src/lib.rs`  | Task runner session management |
-| `rolldown_binding` | `rolldown/crates/rolldown_binding` | Rolldown bundler NAPI bindings |
+| Component          | Source                             | Purpose                                     |
+| ------------------ | ---------------------------------- | ------------------------------------------- |
+| `vt`               | `packages/cli/binding/src/lib.rs`  | Task runner session management              |
+| `rolldown_binding` | `rolldown/crates/rolldown_binding` | Rolldown bundler NAPI bindings              |
+| `oxc_node`         | `oxc-node/src/lib.rs`              | `vpx <script>` loader hooks, as `oxcNode.*` |
+
+### oxc-node Script Loader
+
+`vpx <script>` runs TypeScript through [oxc-node](https://github.com/oxc-project/oxc-node), vendored like Rolldown (see [the RFC](../../rfcs/vpx-script-execution.md)):
+
+- `sync-remote` clones it into `oxc-node/` at the hash in `packages/tools/.upstream-versions.json`; CI checks it out in `.github/actions/clone`.
+- The source stays unpatched. The root `Cargo.toml` links it with `default-features = false`, so it registers no NAPI exports and declares no global allocator, and excludes `oxc-node/` from the workspace, so upstream code is not held to workspace lints. `binding/src/oxc_node.rs` forwards the functions the loader uses under an `oxcNode` namespace, so nothing collides with Rolldown's `transform`. `packages/tools/src/patch-oxc-node.ts` only sets oxc-node's `oxc` dependency to the workspace version.
+- `src/script-preload.ts` (the `--require` entry), `src/script-register.ts` (the `--import` entry), and `src/script-esm-hooks.ts` are adapted from oxc-node's `register.mjs` and `esm.mjs`. They load the hooks from this binding, pass `vpx --tsconfig` through `setTsconfigPath()`, and resolve oxc-node's runtime helpers from `@oxc-project/runtime`, a `vite-plus` dependency.
+- `pirates`, the CommonJS hook, is bundled into `dist`.
 
 ### Export Chain
 
diff --git a/packages/cli/README.md b/packages/cli/README.md
index 5b483da4c5..b70e87a3ea 100644
--- a/packages/cli/README.md
+++ b/packages/cli/README.md
@@ -115,7 +115,7 @@ Use `vp migrate` to migrate to Vite+. It merges tool-specific config files such
 
 - **run** - Run monorepo tasks
 - **exec** - Execute a command from local `node_modules/.bin`
-- **node** - Run a Node.js script with the resolved Vite+ environment
+- **node** - Run a Node.js script with the resolved Vite+ environment; use `vpx <file>` for TypeScript
 - **dlx** - Execute a package binary without installing it as a dependency
 - **cache** - Manage the task cache
 
diff --git a/packages/cli/bin/vpx b/packages/cli/bin/vpx
new file mode 100755
index 0000000000..b32e746501
--- /dev/null
+++ b/packages/cli/bin/vpx
@@ -0,0 +1,9 @@
+#!/usr/bin/env node
+
+import module from 'node:module';
+if (module.enableCompileCache) {
+  module.enableCompileCache();
+}
+// Script files run with the loader in this package; package binaries run from
+// node_modules/.bin or with this package's `vp dlx`. See src/vpx-bin.ts.
+await import('../dist/vpx-bin.js');
diff --git a/packages/cli/binding/Cargo.toml b/packages/cli/binding/Cargo.toml
index ada567fdff..8c3614b148 100644
--- a/packages/cli/binding/Cargo.toml
+++ b/packages/cli/binding/Cargo.toml
@@ -8,6 +8,7 @@ publish = false
 rust-version.workspace = true
 
 [features]
+oxc-node = ["dep:oxc-node"]
 rolldown = ["dep:rolldown_binding"]
 
 [dependencies]
@@ -42,6 +43,7 @@ vt = { workspace = true }
 vt_casefold = { workspace = true }
 vt_workspace = { workspace = true }
 rolldown_binding = { workspace = true, optional = true, features = ["disable_panic_hook"] }
+oxc-node = { workspace = true, optional = true }
 
 [build-dependencies]
 napi-build = { workspace = true }
diff --git a/packages/cli/binding/index.cjs b/packages/cli/binding/index.cjs
index 518d09686d..b293a22463 100644
--- a/packages/cli/binding/index.cjs
+++ b/packages/cli/binding/index.cjs
@@ -1071,3 +1071,4 @@ module.exports.shouldPrintVitePlusHeader = nativeBinding.shouldPrintVitePlusHead
 module.exports.upsertJsonConfig = nativeBinding.upsertJsonConfig;
 module.exports.vitePlusHeader = nativeBinding.vitePlusHeader;
 module.exports.wrapLazyPlugins = nativeBinding.wrapLazyPlugins;
+module.exports.oxcNode = nativeBinding.oxcNode;
diff --git a/packages/cli/binding/index.d.cts b/packages/cli/binding/index.d.cts
index bd09dc1ae7..c310cd4509 100644
--- a/packages/cli/binding/index.d.cts
+++ b/packages/cli/binding/index.d.cts
@@ -1669,6 +1669,46 @@ export interface TypeScriptOptions {
   rewriteImportExtensions?: 'rewrite' | 'remove' | boolean;
 }
 
+export interface LoadContext {
+  /** Export conditions of the relevant `package.json` */
+  conditions?: Array<string>;
+  /**
+   * The format optionally supplied by the `resolve` hook chain. Node.js passes it as
+   * `undefined`, not `null`, when the chain reported none — a `.node` or `.wasm` file
+   * resolved without its flag, any extension Node.js does not know — and a required
+   * field would reject the whole context with "Missing field `format`" instead of
+   * letting Node.js raise its own `ERR_UNKNOWN_FILE_EXTENSION`.
+   */
+  format?: string | null;
+  /** An object whose key-value pairs represent the assertions for the module to import */
+  importAttributes: Record<string, string>;
+}
+
+export interface LoadFnOutput {
+  format: string;
+  source?: string | Uint8Array | Buffer | null;
+  responseURL?: string;
+}
+
+export interface OxcResolveOptions {
+  getCurrentDirectory?: () => string;
+}
+
+export interface ResolveContext {
+  /** Export conditions of the relevant `package.json` */
+  conditions: Array<string>;
+  /** An object whose key-value pairs represent the assertions for the module to import */
+  importAttributes: Record<string, string>;
+  parentURL?: string;
+}
+
+export interface ResolveFnOutput {
+  format?: string | null;
+  shortCircuit?: boolean;
+  url: string;
+  importAttributes?: Record<string, string> | null;
+}
+
 export declare class BindingBundleEndEventData {
   output: string;
   duration: number;
@@ -4145,3 +4185,36 @@ export interface VpDirsJs {
  * `vite-plus` when needed.
  */
 export declare function wrapLazyPlugins(viteConfigPath: string): MergeJsonConfigResult;
+
+export declare namespace oxcNode {
+  export class OxcTransformer {
+    constructor(cwd?: string | undefined | null, helperModuleName?: string | undefined | null);
+    transform(path: string, source: string | Uint8Array): oxcNode.TransformOutput;
+  }
+  export function createResolve(
+    specifier: string,
+    context: ResolveContext,
+    nextResolve: (
+      arg0: string,
+      arg1?: ResolveContext | undefined | null,
+    ) => ResolveFnOutput | Promise<ResolveFnOutput>,
+  ): ResolveFnOutput | Promise<ResolveFnOutput>;
+  export function load(
+    url: string,
+    context: LoadContext,
+    nextLoad: (
+      arg0: string,
+      arg1?: LoadContext | undefined | null,
+    ) => LoadFnOutput | Promise<LoadFnOutput>,
+    helperModuleName?: string | undefined | null,
+  ): LoadFnOutput | Promise<LoadFnOutput>;
+  export function setTransformDeps(mode?: string | undefined | null): void;
+  export function setTsconfigPath(path?: string | undefined | null): void;
+  /** A file transformed for the CommonJS loader. */
+  export interface TransformOutput {
+    source: string;
+    /** The source map as a JSON string. */
+    sourceMap?: string;
+  }
+  export function transformsDep(path: string): boolean;
+}
diff --git a/packages/cli/binding/src/lib.rs b/packages/cli/binding/src/lib.rs
index e19cd84cf3..49d01ea6d7 100644
--- a/packages/cli/binding/src/lib.rs
+++ b/packages/cli/binding/src/lib.rs
@@ -16,6 +16,12 @@
 #[cfg(feature = "rolldown")]
 pub extern crate rolldown_binding;
 
+// Script loader hooks for `vpx <script>`, exported under the `oxcNode` namespace. Like the
+// modules below, only JavaScript calls them, so the test target sees them as dead code.
+#[cfg(feature = "oxc-node")]
+#[allow(dead_code)]
+mod oxc_node;
+
 mod check;
 mod cli;
 mod exec;
diff --git a/packages/cli/binding/src/oxc_node.rs b/packages/cli/binding/src/oxc_node.rs
new file mode 100644
index 0000000000..5c1697ca47
--- /dev/null
+++ b/packages/cli/binding/src/oxc_node.rs
@@ -0,0 +1,96 @@
+//! The `oxcNode` namespace: thin forwarders to the vendored oxc-node, which the binding
+//! links with `default-features = false`, so it registers no NAPI exports of its own.
+//! Only what the `vpx <script>` loader in `packages/cli/src/script-*.ts` uses is exported.
+
+use ::oxc_node::{LoadContext, LoadFnOutput, OxcResolveOptions, ResolveContext, ResolveFnOutput};
+use napi::{
+    Either, Env, Result,
+    bindgen_prelude::{FnArgs, Function, Object, PromiseRaw},
+};
+use napi_derive::napi;
+
+/// What oxc-node's own module hooks do, which `default-features = false` leaves to the
+/// host: honor `OXC_LOG`, and keep `using` native on Node.js 24 and later.
+#[napi(module_exports)]
+pub fn init_oxc_node(exports: Object, env: Env) -> Result<()> {
+    ::oxc_node::init_tracing();
+    ::oxc_node::detect_runtime_syntax(exports, env)
+}
+
+#[napi(namespace = "oxcNode")]
+pub fn set_tsconfig_path(path: Option<String>) -> Result<()> {
+    ::oxc_node::set_tsconfig_path(path)
+}
+
+#[napi(namespace = "oxcNode")]
+pub fn set_transform_deps(mode: Option<String>) -> Result<()> {
+    ::oxc_node::set_transform_deps(mode)
+}
+
+#[napi(namespace = "oxcNode")]
+pub fn transforms_dep(path: String) -> bool {
+    ::oxc_node::transforms_dep(path)
+}
+
+#[napi(namespace = "oxcNode")]
+#[allow(clippy::type_complexity)]
+pub fn create_resolve<'env>(
+    env: &'env Env,
+    specifier: String,
+    context: ResolveContext,
+    next_resolve: Function<
+        'env,
+        FnArgs<(String, Option<ResolveContext>)>,
+        Either<ResolveFnOutput, PromiseRaw<'env, ResolveFnOutput>>,
+    >,
+) -> Result<Either<ResolveFnOutput, PromiseRaw<'env, ResolveFnOutput>>> {
+    // Only oxc-node's WASI build reads the options, so this addon passes none.
+    let options = OxcResolveOptions { get_current_directory: None };
+    ::oxc_node::create_resolve(env, options, specifier, context, next_resolve)
+}
+
+#[napi(namespace = "oxcNode")]
+#[allow(clippy::type_complexity)]
+pub fn load<'env>(
+    url: String,
+    context: LoadContext,
+    next_load: Function<
+        'env,
+        FnArgs<(String, Option<LoadContext>)>,
+        Either<LoadFnOutput, PromiseRaw<'env, LoadFnOutput>>,
+    >,
+    helper_module_name: Option<String>,
+) -> Result<Either<LoadFnOutput, PromiseRaw<'env, LoadFnOutput>>> {
+    ::oxc_node::load(url, context, next_load, helper_module_name)
+}
+
+/// A file transformed for the CommonJS loader.
+#[napi(object, namespace = "oxcNode")]
+pub struct TransformOutput {
+    pub source: String,
+    /// The source map as a JSON string.
+    pub source_map: Option<String>,
+}
+
+#[napi(namespace = "oxcNode")]
+pub struct OxcTransformer {
+    inner: ::oxc_node::OxcTransformer,
+}
+
+#[napi(namespace = "oxcNode")]
+impl OxcTransformer {
+    #[napi(constructor)]
+    pub fn new(cwd: Option<String>, helper_module_name: Option<String>) -> Self {
+        Self { inner: ::oxc_node::OxcTransformer::new(cwd, helper_module_name) }
+    }
+
+    #[napi]
+    pub fn transform(
+        &self,
+        path: String,
+        source: Either<String, &[u8]>,
+    ) -> Result<TransformOutput> {
+        let output = self.inner.transform(path, source)?;
+        Ok(TransformOutput { source: output.source(), source_map: output.source_map() })
+    }
+}
diff --git a/packages/cli/build.ts b/packages/cli/build.ts
index 4cf1c2e855..54eedabbc7 100644
--- a/packages/cli/build.ts
+++ b/packages/cli/build.ts
@@ -146,7 +146,7 @@ async function buildNapiBinding() {
 
   const cli = new NapiCli();
 
-  const bindingFeatures = ['rolldown'];
+  const bindingFeatures = ['rolldown', 'oxc-node'];
   const { dtsHeader } = (
     await import('../../rolldown/packages/rolldown/package.json', { with: { type: 'json' } })
   ).default.napi;
@@ -160,7 +160,8 @@ async function buildNapiBinding() {
     jsBinding: 'index.cjs',
     dts: 'index.d.cts',
     release: !passedInOptions.profile && process.env.VP_CLI_DEBUG !== '1',
-    features: bindingFeatures,
+    // napi-rs passes each entry as a separate cargo argument after one `--features`.
+    features: [bindingFeatures.join(',')],
   });
 
   const outputs = await task;
@@ -624,7 +625,10 @@ type ToolchainVersionSource =
   | { type: 'core-package' }
   | { type: 'core-bundled'; key: string }
   | { type: 'npm-dependency'; package: string }
-  | { type: 'cargo'; package: string; revision?: boolean; builtAt?: boolean };
+  | { type: 'cargo'; package: string; revision?: boolean; builtAt?: boolean }
+  // Upstream source vendored by `sync-remote` and compiled into the binding: the version
+  // comes from its package.json, the revision from `.upstream-versions.json`.
+  | { type: 'vendored'; upstream: string; packageJson: string };
 
 interface ToolchainConfigNode {
   id: string;
@@ -817,6 +821,18 @@ async function resolveToolchainNode(
       }
       break;
     }
+    case 'vendored': {
+      const repoRoot = join(projectDir, '..', '..');
+      const upstreamVersions = JSON.parse(
+        await readFile(join(repoRoot, 'packages', 'tools', '.upstream-versions.json'), 'utf8'),
+      ) as Record<string, { hash?: string }>;
+      revision = upstreamVersions[source.upstream]?.hash;
+      if (!revision) {
+        throw new Error(`Missing ${source.upstream} in packages/tools/.upstream-versions.json`);
+      }
+      version = await readPackageVersion(join(repoRoot, source.packageJson), source.packageJson);
+      break;
+    }
   }
 
   if (!version && !builtAt && !revision) {
diff --git a/packages/cli/package.json b/packages/cli/package.json
index ebd12550f1..185b900ed6 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -15,7 +15,8 @@
   },
   "bin": {
     "vp": "./bin/vp",
-    "vpr": "./bin/vpr"
+    "vpr": "./bin/vpr",
+    "vpx": "./bin/vpx"
   },
   "files": [
     "AGENTS.md",
@@ -345,6 +346,7 @@
     "test": "vitest run"
   },
   "dependencies": {
+    "@oxc-project/runtime": "catalog:",
     "@oxc-project/types": "catalog:",
     "@oxlint/plugins": "catalog:",
     "@vitest/browser": "catalog:",
@@ -381,6 +383,7 @@
     "minimatch": "catalog:",
     "nanotar": "catalog:",
     "picocolors": "catalog:",
+    "pirates": "catalog:",
     "tinyglobby": "catalog:",
     "tsdown": "catalog:",
     "validate-npm-package-name": "catalog:",
diff --git a/packages/cli/src/__tests__/toolchain.spec.ts b/packages/cli/src/__tests__/toolchain.spec.ts
index 2760da0820..659ee1cd59 100644
--- a/packages/cli/src/__tests__/toolchain.spec.ts
+++ b/packages/cli/src/__tests__/toolchain.spec.ts
@@ -43,6 +43,7 @@ describe('toolchain export', () => {
       'vite-task',
       'oxc',
       'oxc-resolver',
+      'oxc-node',
     ]);
     for (const node of nodes.values()) {
       if (node.id === 'vite-task') {
@@ -50,6 +51,7 @@ describe('toolchain export', () => {
       }
       expect(node.version, `${node.id} should have an exact version`).toMatch(/^\d+\.\d+\.\d+/);
     }
+    expect(nodes.get('oxc-node')?.revision).toMatch(/^[0-9a-f]{40}$/);
     expect(nodes.get('vite-task')?.version).toBeUndefined();
     expect(nodes.get('vite-task')?.revision).toMatch(/^[0-9a-f]{40}$/);
     const nativeBuildTimePath = path.join(cliPkgDir, 'binding', 'vite-plus.build-time');
diff --git a/packages/cli/src/__tests__/vpx-script.spec.ts b/packages/cli/src/__tests__/vpx-script.spec.ts
new file mode 100644
index 0000000000..dd701d565f
--- /dev/null
+++ b/packages/cli/src/__tests__/vpx-script.spec.ts
@@ -0,0 +1,336 @@
+import { chmodSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import path from 'node:path';
+
+import { satisfies } from 'verkit';
+import { afterEach, describe, expect, it } from 'vitest';
+
+import { oxcNode } from '../../binding/index.js';
+import {
+  canRegisterSyncHooks,
+  HELPER_MODULE_NAME,
+  isSupportedNodeVersion,
+  routeHelperRequires,
+  withRequireAsyncModuleCode,
+  runtimeHelperSpecifier,
+  SUPPORTED_NODE_RANGE,
+} from '../script-hooks.ts';
+import {
+  canExecDirectly,
+  checkExplicitProgram,
+  commandName,
+  detectScript,
+  hasVersionSpec,
+  NODE_OPTIONS_WITH_VALUE,
+  NODE_OPTIONS_WITHOUT_ENTRY,
+  packageInvocation,
+  parseVpxArgs,
+  SCRIPT_EXTENSIONS,
+  ScriptError,
+} from '../vpx-script.ts';
+
+const dirs: string[] = [];
+
+function project(files: Record<string, string>): string {
+  const dir = mkdtempSync(path.join(tmpdir(), 'vpx-script-'));
+  dirs.push(dir);
+  for (const [name, content] of Object.entries(files)) {
+    const file = path.join(dir, name);
+    mkdirSync(path.dirname(file), { recursive: true });
+    writeFileSync(file, content);
+  }
+  return dir;
+}
+
+afterEach(() => {
+  for (const dir of dirs.splice(0)) {
+    rmSync(dir, { recursive: true, force: true });
+  }
+});
+
+interface DetectionCase {
+  name: string;
+  files?: Record<string, string>;
+  args: string[];
+  expect: 'package' | { error: string } | { script: string[]; tsconfig?: string };
+}
+
+const detectionTable: {
+  scriptExtensions: string[];
+  nodeOptionsWithValue: string[];
+  nodeOptionsWithoutEntry: string[];
+  packageSpecs: { spec: string; versioned: boolean; command: string }[];
+  explicitPrograms: {
+    name: string;
+    files?: Record<string, string>;
+    executable?: string[];
+    token: string;
+    unixOnly?: boolean;
+    expect: 'ok' | { error: string; note?: string };
+  }[];
+  cases: DetectionCase[];
+} = JSON.parse(
+  readFileSync(
+    path.join(
+      import.meta.dirname,
+      '../../../../crates/vp_global_cli/src/commands/vpx_script_cases.json',
+    ),
+    'utf8',
+  ),
+);
+
+describe('detectScript', () => {
+  // The global CLI runs the same cases (`vpx_script.rs`), so both decide the same way.
+  it.each(detectionTable.cases)('$name', ({ files = {}, args, expect: expected }) => {
+    const cwd = project(files);
+    const fill = (values: string[]) => values.map((value) => value.replaceAll('{cwd}', cwd));
+    if (expected === 'package') {
+      expect(detectScript(fill(args), cwd)).toBeUndefined();
+    } else if ('error' in expected) {
+      expect(() => detectScript(fill(args), cwd)).toThrow(new ScriptError(expected.error));
+    } else {
+      const result = detectScript(fill(args), cwd);
+      expect({ nodeArgs: result?.nodeArgs, tsconfig: result?.tsconfig }).toEqual({
+        nodeArgs: fill(expected.script),
+        tsconfig: expected.tsconfig,
+      });
+    }
+  });
+
+  it('declares the lists the global CLI declares', () => {
+    // vpx_script_cases.json holds the lists; vpx_script.rs checks its own against it too.
+    expect(SCRIPT_EXTENSIONS).toEqual(detectionTable.scriptExtensions);
+    expect([...NODE_OPTIONS_WITH_VALUE]).toEqual(detectionTable.nodeOptionsWithValue);
+    expect([...NODE_OPTIONS_WITHOUT_ENTRY]).toEqual(detectionTable.nodeOptionsWithoutEntry);
+  });
+});
+
+describe('parseVpxArgs', () => {
+  it('stops at the first positional or unknown option', () => {
+    expect(parseVpxArgs(['--tsconfig=t.json', '-s', '--watch', './a.ts'])).toEqual({
+      flags: {
+        packages: [],
+        shellMode: false,
+        silent: true,
+        help: false,
+        version: false,
+        tsconfig: 't.json',
+      },
+      positional: ['--watch', './a.ts'],
+    });
+    expect(parseVpxArgs(['-p', 'cowsay', '-c', 'echo hi | cowsay']).flags).toMatchObject({
+      packages: ['cowsay'],
+      shellMode: true,
+    });
+    expect(parseVpxArgs(['-v']).flags.version).toBe(true);
+    expect(parseVpxArgs(['--tsconfig'])).toMatchObject({ positional: ['--tsconfig'] });
+    expect(parseVpxArgs(['--tsconfig']).flags.tsconfig).toBeUndefined();
+    expect(parseVpxArgs(['./a.ts', '--version'])).toMatchObject({
+      flags: { version: false },
+      positional: ['./a.ts', '--version'],
+    });
+  });
+});
+
+function runPackage(args: string[], cwd: string) {
+  const { flags, positional } = parseVpxArgs(args);
+  return packageInvocation(flags, positional as [string, ...string[]], cwd);
+}
+
+describe('checkExplicitProgram', () => {
+  // The global CLI runs the same cases (`vpx_script.rs`).
+  it.each(detectionTable.explicitPrograms)(
+    '$name',
+    ({ files = {}, executable = [], token, unixOnly, expect: expected }) => {
+      if (unixOnly && process.platform === 'win32') {
+        return;
+      }
+      const cwd = project(files);
+      for (const file of executable) {
+        chmodSync(path.join(cwd, file), 0o755);
+      }
+      expect(checkExplicitProgram(token, cwd)).toEqual(expected === 'ok' ? undefined : expected);
+    },
+  );
+});
+
+describe.skipIf(process.platform === 'win32')('canExecDirectly', () => {
+  it('runs a native binary or a script with a native interpreter without the shell', () => {
+    const dir = project({
+      'sh.sh': '#!/bin/sh\nexit 0\n',
+      'env.js': '#!/usr/bin/env node\n',
+      'spaced.sh': '#! /bin/sh -e\n',
+      'plain.js': 'console.log(1);\n',
+      'missing.sh': '#!/missing/interpreter\n',
+      'relative.sh': '#!sh\n',
+      'crlf.sh': '#!/bin/sh\r\nexit 0\r\n',
+      'mode.sh': '#!/bin/sh\n',
+    });
+    writeFileSync(path.join(dir, 'nested.sh'), `#!${path.join(dir, 'sh.sh')}\n`);
+    const file = (name: string) => path.join(dir, name);
+    // Every file but `mode.sh` has the execute bit.
+    for (const name of [
+      'sh.sh',
+      'env.js',
+      'spaced.sh',
+      'plain.js',
+      'missing.sh',
+      'relative.sh',
+      'crlf.sh',
+      'nested.sh',
+    ]) {
+      chmodSync(file(name), 0o755);
+    }
+
+    expect(canExecDirectly(process.execPath)).toBe(true);
+    expect(['sh.sh', 'env.js', 'spaced.sh'].filter((name) => canExecDirectly(file(name)))).toEqual([
+      'sh.sh',
+      'env.js',
+      'spaced.sh',
+    ]);
+    // The shell reports these, as a terminal does: no `#!` line, an interpreter that does
+    // not exist, is relative, keeps the `\r` the kernel reads, or is itself a script,
+    // and a file without the execute bit.
+    const viaShell = ['plain.js', 'missing.sh', 'relative.sh', 'crlf.sh', 'nested.sh', 'mode.sh'];
+    expect(viaShell.filter((name) => canExecDirectly(file(name)))).toEqual([]);
+  });
+});
+
+describe('packageInvocation', () => {
+  const bin =
+    process.platform === 'win32' ? 'node_modules/.bin/eslint.cmd' : 'node_modules/.bin/eslint';
+
+  it.each(detectionTable.packageSpecs)(
+    'parses $spec the way the global CLI does',
+    ({ spec, versioned, command }) => {
+      expect(hasVersionSpec(spec)).toBe(versioned);
+      expect(commandName(spec)).toBe(command);
+    },
+  );
+
+  it('runs the nearest binary in node_modules/.bin, from a parent directory too', () => {
+    const dir = project({ [bin]: '', 'packages/app/src/.keep': '', [`packages/lib/${bin}`]: '' });
+    chmodSync(path.join(dir, bin), 0o755);
+    chmodSync(path.join(dir, 'packages/lib', bin), 0o755);
+    expect(runPackage(['eslint', '.'], path.join(dir, 'packages/app/src'))).toEqual({
+      command: 'run',
+      file: path.join(dir, bin),
+      args: ['.'],
+    });
+    // `packages/lib` has no package.json, so `vp exec eslint` would not search it.
+    expect(runPackage(['eslint'], path.join(dir, 'packages/lib'))).toEqual({
+      command: 'run',
+      file: path.join(dir, 'packages/lib', bin),
+      args: [],
+    });
+  });
+
+  it.skipIf(process.platform === 'win32')(
+    'reports an installed binary that is not executable',
+    () => {
+      expect(runPackage(['eslint'], project({ [bin]: '' }))).toEqual({
+        error: `'${bin}' is not executable`,
+        note: `Reinstall dependencies with \`vp install\`, or make it executable with \`chmod +x ${bin}\`.`,
+      });
+    },
+  );
+
+  it('reports a binary that is not installed instead of downloading it', () => {
+    expect(runPackage(['eslint', '.'], project({}))).toEqual({
+      error: "'eslint' is not installed in node_modules",
+      note: 'Add it to devDependencies, or run `vp dlx eslint` to download and run it.',
+    });
+  });
+
+  it('downloads a versioned package, and anything with --package or --shell-mode', () => {
+    const dir = project({ [bin]: '' });
+    expect(runPackage(['eslint@9', '.'], dir)).toEqual({ command: 'dlx', args: ['eslint@9', '.'] });
+    expect(runPackage(['-s', '-p', 'cowsay', '-c', 'echo hi | cowsay'], dir)).toEqual({
+      command: 'dlx',
+      args: ['--package', 'cowsay', '--shell-mode', '--silent', 'echo hi | cowsay'],
+    });
+  });
+
+  it('runs an existing executable file and hands a local package directory to dlx', () => {
+    const dir = project({ 'deploy.sh': '', 'tools/package.json': '{}' });
+    chmodSync(path.join(dir, 'deploy.sh'), 0o755);
+    expect(runPackage(['./deploy.sh', 'x'], dir)).toEqual({
+      command: 'run',
+      file: path.join(dir, 'deploy.sh'),
+      args: ['x'],
+    });
+    expect(runPackage(['./tools'], dir)).toEqual({ command: 'dlx', args: ['./tools'] });
+  });
+});
+
+describe('script hooks', () => {
+  it('keeps the supported Node.js range in sync with engines.node', () => {
+    const pkg = JSON.parse(
+      readFileSync(path.join(import.meta.dirname, '../../package.json'), 'utf8'),
+    );
+    expect(SUPPORTED_NODE_RANGE).toBe(pkg.engines.node);
+    // The startup check is hand-written to keep a range parser out of the preload.
+    for (const major of [20, 21, 22, 23, 24, 25, 26, 27]) {
+      for (const minor of [0, 10, 11, 17, 18, 19, 22, 23]) {
+        const version = `${major}.${minor}.0`;
+        expect(isSupportedNodeVersion(version), version).toBe(satisfies(version, pkg.engines.node));
+      }
+    }
+  });
+
+  it('uses in-thread hooks where registerHooks() has the fixes the hooks need', () => {
+    expect(canRegisterSyncHooks('22.18.0')).toBe(false);
+    expect(canRegisterSyncHooks('22.22.2')).toBe(false);
+    expect(canRegisterSyncHooks('22.22.3')).toBe(true);
+    expect(canRegisterSyncHooks('22.23.0')).toBe(true);
+    expect(canRegisterSyncHooks('24.11.0')).toBe(false);
+    expect(canRegisterSyncHooks('24.11.1')).toBe(true);
+    expect(canRegisterSyncHooks('24.12.0')).toBe(true);
+    expect(canRegisterSyncHooks('26.0.0')).toBe(true);
+  });
+
+  it('maps oxc-node runtime helpers to @oxc-project/runtime', () => {
+    expect(runtimeHelperSpecifier(`${HELPER_MODULE_NAME}/helpers/defineProperty`)).toBe(
+      '@oxc-project/runtime/helpers/defineProperty',
+    );
+    // Helper imports another oxc-node copy emitted keep their own resolution.
+    expect(runtimeHelperSpecifier('@oxc-node/core/helpers/defineProperty')).toBeUndefined();
+    expect(runtimeHelperSpecifier(HELPER_MODULE_NAME)).toBeUndefined();
+    expect(runtimeHelperSpecifier('./helpers/defineProperty')).toBeUndefined();
+  });
+
+  it('keeps `using` native where Node.js runs it, which the binding detects when it loads', () => {
+    // `detect_runtime_syntax` runs from the binding's `module_exports` hook; without it,
+    // `using` would be lowered to a helper on every version.
+    const transformer = new oxcNode.OxcTransformer(process.cwd(), HELPER_MODULE_NAME);
+    const { source } = transformer.transform(
+      path.join(tmpdir(), 'using.ts'),
+      '{ using x = { [Symbol.dispose]() {} }; }',
+    );
+    const major = Number(process.versions.node.split('.')[0]);
+    expect(source.includes(`${HELPER_MODULE_NAME}/helpers/usingCtx`)).toBe(major < 24);
+  });
+
+  it('resolves helper requires from this package and leaves other requests alone', () => {
+    /* oxlint-disable no-underscore-dangle -- Node.js' CommonJS resolver */
+    const Module = { _resolveFilename: (request: string) => `original:${request}` };
+    routeHelperRequires(Module);
+    const helper = Module._resolveFilename(`${HELPER_MODULE_NAME}/helpers/defineProperty`);
+    expect(helper).toMatch(/@oxc-project[\\/]runtime[\\/]/);
+    expect(path.isAbsolute(helper)).toBe(true);
+    expect(Module._resolveFilename('./local')).toBe('original:./local');
+    expect(Module._resolveFilename('@oxc-node/core/helpers/defineProperty')).toBe(
+      'original:@oxc-node/core/helpers/defineProperty',
+    );
+    /* oxlint-enable no-underscore-dangle */
+  });
+
+  it("gives require() of a module with top-level await Node.js' error code", () => {
+    const tla = new Error(
+      'require() cannot be used on an ESM graph with top-level await. Use import() instead.\n  /x/dep.mts:1:1',
+    );
+    expect(withRequireAsyncModuleCode(tla)).toMatchObject({ code: 'ERR_REQUIRE_ASYNC_MODULE' });
+    const other = new Error('Failed to parse /x/a.ts');
+    expect((withRequireAsyncModuleCode(other) as NodeJS.ErrnoException).code).toBeUndefined();
+  });
+});
diff --git a/packages/cli/src/script-esm-hooks.ts b/packages/cli/src/script-esm-hooks.ts
new file mode 100644
index 0000000000..81c303ac28
--- /dev/null
+++ b/packages/cli/src/script-esm-hooks.ts
@@ -0,0 +1,28 @@
+/**
+ * Off-thread ESM hooks for `vpx <script>`, registered by `script-register.ts` through
+ * `module.register()` where `canRegisterSyncHooks` rules out the in-thread hooks.
+ * Adapted from oxc-node's `packages/core/esm.mjs`.
+ */
+
+import type { LoadHook, ResolveHook } from 'node:module';
+import { isMainThread, MessageChannel } from 'node:worker_threads';
+
+import { HELPER_MODULE_NAME, loadOxcNode, resolveWithOxcNode } from './script-hooks.ts';
+
+const oxcNode = loadOxcNode();
+
+// Keep the loader worker alive, as upstream does.
+if (!isMainThread) {
+  new MessageChannel().port1.ref();
+}
+
+export const resolve: ResolveHook = (specifier, context, nextResolve) =>
+  resolveWithOxcNode(oxcNode, specifier, context, nextResolve);
+
+export const load: LoadHook = (url, context, nextLoad) =>
+  oxcNode.load(
+    url,
+    context as never,
+    nextLoad as never,
+    HELPER_MODULE_NAME,
+  ) as ReturnType<LoadHook>;
diff --git a/packages/cli/src/script-hooks.ts b/packages/cli/src/script-hooks.ts
new file mode 100644
index 0000000000..e975bab098
--- /dev/null
+++ b/packages/cli/src/script-hooks.ts
@@ -0,0 +1,162 @@
+/**
+ * Shared pieces of the `vpx <script>` loader (see `script-preload.ts`).
+ */
+
+import { createRequire } from 'node:module';
+
+type OxcNodeBinding = typeof import('../binding/index.js').oxcNode;
+
+/**
+ * The oxc-node hooks compiled into the Vite+ binding. Required, not imported: importing
+ * `index.js` makes a `module.register()` hooks thread translate the whole CommonJS
+ * binding for ESM, and `module.register()` waits for that (5-13 ms).
+ */
+export function loadOxcNode(): OxcNodeBinding {
+  const binding = createRequire(import.meta.url)(
+    '../binding/index.cjs',
+  ) as typeof import('../binding/index.js');
+  return binding.oxcNode;
+}
+
+/** Must match `engines.node` in package.json; `__tests__/vpx-script.spec.ts` checks it. */
+export const SUPPORTED_NODE_RANGE = '^22.18.0 || ^24.11.0 || >=26.0.0';
+
+export function isSupportedNodeVersion(version: string): boolean {
+  const [major = 0, minor = 0] = version.split('.').map(Number);
+  if (major === 22) {
+    return minor >= 18;
+  }
+  if (major === 24) {
+    return minor >= 11;
+  }
+  return major >= 26;
+}
+
+/**
+ * Whether to use the in-thread `module.registerHooks()` instead of the off-thread
+ * `module.register()`, which needs a hooks thread (about twice the startup time) and
+ * which Node.js deprecates from 25.9 (DEP0205).
+ *
+ * The in-thread hooks need two fixes: a sync resolve hook had its `conditions`
+ * overridden (nodejs/node#59011, in 22.19 and 24.5), and a sync load hook could not
+ * return a null source for CommonJS (nodejs/node#59929, in 22.22.3 and 24.11.1). tsx
+ * switches at the same releases. Upstream oxc-node waits for 26.2 for a third fix,
+ * nodejs/node#62920 (also in 24.18.0), which only matters when a load hook returns
+ * CommonJS source. These hooks return it only for source another hook supplied, so
+ * without that fix `require()` inside such a module can fail.
+ */
+export function canRegisterSyncHooks(version: string): boolean {
+  const [major = 0, minor = 0, patch = 0] = version.split('.').map(Number);
+  if (major === 22) {
+    return minor > 22 || (minor === 22 && patch >= 3);
+  }
+  if (major === 24) {
+    return minor > 11 || (minor === 11 && patch >= 1);
+  }
+  return major >= 26;
+}
+
+/**
+ * The module name oxc-node gives the runtime helpers it injects, passed to its transformer
+ * and load hook. Only these hooks emit it, so they redirect only their own helper imports,
+ * not `@oxc-node/core/helpers/*` imports that another oxc-node copy produced.
+ */
+export const HELPER_MODULE_NAME = 'vite-plus:oxc-node';
+
+const OXC_NODE_HELPERS = `${HELPER_MODULE_NAME}/helpers/`;
+const RUNTIME_HELPERS = '@oxc-project/runtime/helpers/';
+
+/**
+ * oxc-node lowers class fields, static blocks, `using`, and legacy decorators to
+ * helper imports. The same helpers ship in `@oxc-project/runtime`, a dependency of
+ * `vite-plus`; the hooks resolve them from here, because the user's project usually
+ * does not have it.
+ */
+export function runtimeHelperSpecifier(specifier: string): string | undefined {
+  return specifier.startsWith(OXC_NODE_HELPERS)
+    ? RUNTIME_HELPERS + specifier.slice(OXC_NODE_HELPERS.length)
+    : undefined;
+}
+
+/** URL that runtime helper imports resolve from: this package. */
+const HELPERS_PARENT_URL = import.meta.url;
+
+interface CommonJsModule {
+  _resolveFilename: (
+    this: unknown,
+    request: string,
+    parent: unknown,
+    isMain: boolean,
+    options?: unknown,
+  ) => string;
+}
+
+/**
+ * CommonJS output (a file without `import`/`export`) loads helpers with `require()`,
+ * which never reaches the `module.register()` hooks, while `registerHooks()` hands it
+ * to Node.js' CommonJS resolution. Both go through `Module._resolveFilename`, so this
+ * wraps it to resolve the helpers from this package, as upstream's `register.mjs` does.
+ * The mapped specifier is not a helper specifier, so resolving it falls through.
+ */
+export function routeHelperRequires(Module: CommonJsModule): void {
+  /* oxlint-disable no-underscore-dangle -- Node.js' CommonJS resolver */
+  const resolveFilename = Module._resolveFilename;
+  const requireFromHere = createRequire(HELPERS_PARENT_URL);
+  Module._resolveFilename = function (request, parent, isMain, options) {
+    const helper = runtimeHelperSpecifier(request);
+    return helper
+      ? requireFromHere.resolve(helper)
+      : resolveFilename.call(this, request, parent, isMain, options);
+  };
+  /* oxlint-enable no-underscore-dangle */
+}
+
+/**
+ * The first line of oxc-node's error for `require()` of an ES module with top-level
+ * await, worded as Node.js words it.
+ */
+const REQUIRE_ASYNC_MODULE_MESSAGE =
+  'require() cannot be used on an ESM graph with top-level await. Use import() instead.';
+
+/**
+ * Give oxc-node's `require()`-with-top-level-await error the code Node.js uses, which
+ * code catches to fall back to `import()`; the binding can only report `GenericFailure`.
+ * Mirrors upstream's `register.mjs` (oxc-project/oxc-node#842).
+ */
+export function withRequireAsyncModuleCode(error: unknown): unknown {
+  if (error instanceof Error && error.message.startsWith(REQUIRE_ASYNC_MODULE_MESSAGE)) {
+    (error as NodeJS.ErrnoException).code = 'ERR_REQUIRE_ASYNC_MODULE';
+  }
+  return error;
+}
+
+/**
+ * Whether this request comes from `require()`. Only `module.registerHooks()` shows
+ * `require()` to the hooks; those requests stay on Node.js' CommonJS resolution and
+ * the `pirates` hook. A CommonJS context never carries `importAttributes`.
+ */
+export function isCommonJsRequire(context: { importAttributes?: unknown } | undefined): boolean {
+  return context?.importAttributes === undefined;
+}
+
+/**
+ * The resolve hook for both hook paths: `require()` stays on Node.js' resolution, where
+ * `routeHelperRequires` maps runtime helpers (it resolves from the requiring file and
+ * ignores a `parentURL`), runtime helper imports resolve from this package, and
+ * everything else goes through oxc-node.
+ */
+export function resolveWithOxcNode<Context extends { importAttributes?: unknown }, Result>(
+  oxcNode: OxcNodeBinding,
+  specifier: string,
+  context: Context,
+  nextResolve: (specifier: string, context?: Context) => Result,
+): Result {
+  if (isCommonJsRequire(context)) {
+    return nextResolve(specifier, context);
+  }
+  const helper = runtimeHelperSpecifier(specifier);
+  if (helper) {
+    return nextResolve(helper, { ...context, parentURL: HELPERS_PARENT_URL });
+  }
+  return oxcNode.createResolve(specifier, context as never, nextResolve as never) as Result;
+}
diff --git a/packages/cli/src/script-preload.ts b/packages/cli/src/script-preload.ts
new file mode 100644
index 0000000000..98ae7b8714
--- /dev/null
+++ b/packages/cli/src/script-preload.ts
@@ -0,0 +1,115 @@
+/**
+ * `--require` entry for `vpx <script>`, built to `dist/script-preload.cjs`.
+ *
+ * The CLIs pass `--require <dist/script-preload.cjs> --import <dist/script-register.js>`.
+ * This preload runs first, before any user `--require` or `--import`, so a
+ * `--require ./setup.ts` preload works too. It checks the Node.js version, installs the
+ * CommonJS hook, and registers the in-thread ESM hooks where `canRegisterSyncHooks`
+ * allows; elsewhere `script-register.js` registers off-thread ESM hooks instead.
+ *
+ * It uses the oxc-node hooks compiled into the Vite+ native binding (exported as
+ * `oxcNode`). Adapted from oxc-node's `packages/core/register.mjs`; keep them in sync
+ * when bumping the vendored oxc-node in `.upstream-versions.json`.
+ */
+
+import type { LoadFnOutput, LoadHookSync, ResolveHookSync } from 'node:module';
+import Module, { registerHooks, setSourceMapsSupport } from 'node:module';
+import path from 'node:path';
+
+import { addHook } from 'pirates';
+
+import {
+  canRegisterSyncHooks,
+  HELPER_MODULE_NAME,
+  isCommonJsRequire,
+  isSupportedNodeVersion,
+  loadOxcNode,
+  resolveWithOxcNode,
+  routeHelperRequires,
+  SUPPORTED_NODE_RANGE,
+  withRequireAsyncModuleCode,
+} from './script-hooks.ts';
+
+if (!isSupportedNodeVersion(process.versions.node)) {
+  process.stderr.write(
+    `error: Running scripts with vpx requires Node.js ${SUPPORTED_NODE_RANGE} (current: ${process.version})\n`,
+  );
+  process.exit(1);
+}
+
+// Loaded after the version check so the native addon never loads on an
+// unsupported Node.js.
+const oxcNode = loadOxcNode();
+
+// `vpx --tsconfig` pins one config for every file. It must be set before the first
+// transform or resolve; the off-thread hooks load the same native library, so they
+// see it too. Without it, each file uses its nearest tsconfig.
+oxcNode.setTsconfigPath(process.env.VP_SCRIPT_TSCONFIG);
+// Dependencies run as published, except TypeScript, which Node.js refuses to strip
+// under `node_modules`. Set the same way, before the first transform or resolve.
+oxcNode.setTransformDeps('typescript');
+
+setSourceMapsSupport(true, { nodeModules: true, generatedCode: true });
+routeHelperRequires(Module as never);
+
+const EXTENSIONS = ['.js', '.jsx', '.ts', '.tsx', '.mjs', '.mts', '.cjs', '.cts', '.es6', '.es'];
+const NODE_MODULES = `${path.sep}node_modules${path.sep}`;
+const SOURCEMAP_PREFIX = '\n//# sourceMappingURL=data:application/json;charset=utf-8;base64,';
+
+const transformer = new oxcNode.OxcTransformer(process.cwd(), HELPER_MODULE_NAME);
+
+addHook(
+  (code, filename) => {
+    let output;
+    try {
+      output = transformer.transform(filename, code);
+    } catch (error) {
+      throw withRequireAsyncModuleCode(error);
+    }
+    const source = output.source;
+    const sourceMap = output.sourceMap;
+    return sourceMap
+      ? source + SOURCEMAP_PREFIX + Buffer.from(sourceMap, 'utf8').toString('base64')
+      : source;
+  },
+  {
+    exts: EXTENSIONS,
+    // oxc-node decides which dependencies to transform, as for `import`.
+    ignoreNodeModules: false,
+    matcher: (filename) => !filename.includes(NODE_MODULES) || oxcNode.transformsDep(filename),
+  },
+);
+
+const resolve: ResolveHookSync = (specifier, context, nextResolve) =>
+  resolveWithOxcNode(oxcNode, specifier, context, nextResolve);
+
+const load: LoadHookSync = (url, context, nextLoad) => {
+  if (isCommonJsRequire(context)) {
+    return nextLoad(url, context);
+  }
+  const result = oxcNode.load(
+    url,
+    context as never,
+    nextLoad as never,
+    HELPER_MODULE_NAME,
+  ) as LoadFnOutput & {
+    responseURL?: string;
+  };
+  // oxc-node returns no source for a CommonJS file it leaves to the CommonJS loader,
+  // which compiles it through `pirates` with an accurate source map; source that
+  // another hook supplied is transformed and kept. A null source keeps `require()`
+  // inside such a module working on every runtime (nodejs/node#62920).
+  if (result.format === 'commonjs' && result.source == null) {
+    // `@types/node` does not model the null source Node.js accepts for CommonJS.
+    return {
+      format: 'commonjs',
+      source: null,
+      responseURL: result.responseURL ?? url,
+    } as unknown as LoadFnOutput;
+  }
+  return result;
+};
+
+if (canRegisterSyncHooks(process.versions.node)) {
+  registerHooks({ resolve, load });
+}
diff --git a/packages/cli/src/script-register.ts b/packages/cli/src/script-register.ts
new file mode 100644
index 0000000000..f706aebc93
--- /dev/null
+++ b/packages/cli/src/script-register.ts
@@ -0,0 +1,21 @@
+/**
+ * `--import` entry for `vpx <script>`; `script-preload.ts` (the `--require` entry) runs
+ * first and does the rest.
+ *
+ * Where `canRegisterSyncHooks` rules out the in-thread hooks, it registers the off-thread
+ * ESM hooks through `module.register()`, which Node.js 22 cannot run from a `--require`.
+ * On every version, an `--import` makes Node.js run the entry point through the ESM
+ * loader, where the hooks decide each file's module format.
+ */
+
+import * as NodeModule from 'node:module';
+
+import { canRegisterSyncHooks } from './script-hooks.ts';
+
+// Look `register` up on the namespace: a named import would fail to link on every
+// version once Node.js removes the deprecated API (DEP0205), even where it is unused.
+const { register } = NodeModule as Partial<typeof NodeModule>;
+
+if (!canRegisterSyncHooks(process.versions.node)) {
+  register!(new URL('./script-esm-hooks.js', import.meta.url));
+}
diff --git a/packages/cli/src/utils/command.ts b/packages/cli/src/utils/command.ts
index ee1061e3e5..43d290d999 100644
--- a/packages/cli/src/utils/command.ts
+++ b/packages/cli/src/utils/command.ts
@@ -23,7 +23,7 @@ export interface RunCommandResult extends ExecutionResult {
   stderr: Buffer;
 }
 
-function exitCodeFromClose(code: number | null, signal: NodeJS.Signals | null) {
+export function exitCodeFromClose(code: number | null, signal: NodeJS.Signals | null) {
   if (code !== null) {
     return code;
   }
diff --git a/packages/cli/src/vpx-bin.ts b/packages/cli/src/vpx-bin.ts
new file mode 100644
index 0000000000..ab1f5a9f04
--- /dev/null
+++ b/packages/cli/src/vpx-bin.ts
@@ -0,0 +1,317 @@
+/**
+ * Project-local `vpx` bin (`node_modules/.bin/vpx`).
+ *
+ * Package managers and `vp run` put `node_modules/.bin` first on `PATH`, so this bin,
+ * not the global `vpx`, runs in package.json scripts. It never hands off to the global
+ * CLI. Script files run with the loader shipped in this package. A binary installed in
+ * `node_modules/.bin` runs directly; a versioned package, `--package`, or
+ * `--shell-mode` runs with this package's `vp dlx`. See `packageInvocation`.
+ *
+ * Only `vp dlx` loads the CLI bundle and the native binding. A script's own Node.js
+ * process loads the binding through `script-preload.cjs`.
+ */
+
+import type { Serializable } from 'node:child_process';
+import { statSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { styleText } from 'node:util';
+
+import spawn from 'cross-spawn';
+
+import { exitCodeFromClose } from './utils/command.ts';
+import {
+  canExecDirectly,
+  detectScript,
+  isFile,
+  nodeModulesBinPaths,
+  packageInvocation,
+  parseVpxArgs,
+  ScriptError,
+} from './vpx-script.ts';
+
+function errorMsg(message: string) {
+  /* oxlint-disable-next-line no-console */
+  console.error(styleText(['red', 'bold'], 'error:'), message);
+}
+
+/** This process's environment with every existing `node_modules/.bin` from `cwd` up first on PATH, nearest first, like the global CLI. */
+function childEnv(cwd: string): NodeJS.ProcessEnv {
+  const env = { ...process.env };
+  const key = Object.keys(env).find((name) => name.toUpperCase() === 'PATH') ?? 'PATH';
+  const entries = (env[key] ?? '').split(path.delimiter).filter(Boolean);
+  const bins = nodeModulesBinPaths(cwd).filter(
+    (bin) => !entries.includes(bin) && statSync(bin, { throwIfNoEntry: false })?.isDirectory(),
+  );
+  env[key] = [...bins, ...entries].join(path.delimiter);
+  return env;
+}
+
+/** Signals Node.js ignores; an ignored signal stays ignored across exec. */
+const IGNORED_SIGNALS = ['SIGPIPE', 'SIGXFSZ'] as const;
+const ignoreSignal = () => {};
+
+interface StdioStream {
+  _handle?: { setBlocking?: (blocking: boolean) => number };
+}
+
+/**
+ * Replace this process with `command`, as the global `vpx` does on Unix, so the caller's
+ * PID, every signal sent to it, and the exit status belong to the script or binary.
+ * Returns on Windows, which has no exec, so the caller spawns instead.
+ *
+ * The new program starts as a spawned child would: libuv gives a child blocking stdio
+ * and default signal dispositions, while Node.js ignores SIGPIPE and makes a pipe it
+ * opened for stdio non-blocking (loading `node:util` opens stderr), which
+ * `process.execve()` passes on (nodejs/node#66824). Removing a signal listener restores
+ * the default disposition.
+ */
+function execInPlace(command: string, args: string[], env: NodeJS.ProcessEnv): void {
+  if (process.platform === 'win32' || typeof process.execve !== 'function') {
+    return;
+  }
+  for (const signal of IGNORED_SIGNALS) {
+    process.on(signal, ignoreSignal).off(signal, ignoreSignal);
+  }
+  for (const stream of [process.stdin, process.stdout, process.stderr]) {
+    /* oxlint-disable-next-line no-underscore-dangle -- Node.js has no public API for this */
+    (stream as StdioStream)._handle?.setBlocking?.(true);
+  }
+  // A failed exec aborts most supported Node.js versions instead of throwing, so a
+  // binary `canExecDirectly` cannot vouch for execs through `/bin/sh`, which reports one
+  // it cannot run as a terminal does. Skipping the shell saves its startup.
+  const [file, argv] =
+    command === process.execPath || canExecDirectly(command)
+      ? [command, [command, ...args]]
+      : ['/bin/sh', ['/bin/sh', '-c', 'exec "$0" "$@"', command, ...args]];
+  try {
+    process.execve(file, argv, env);
+  } catch {
+    for (const signal of IGNORED_SIGNALS) {
+      process.on(signal, ignoreSignal);
+    }
+  }
+}
+
+/**
+ * Run `command` with inherited stdio and exit the way it exited. On Unix, it execs
+ * `command` in place unless this bin has an IPC channel, which exec would close.
+ * cross-spawn runs a Windows `.cmd` shim from `node_modules/.bin`, which Node.js refuses
+ * to spawn directly.
+ *
+ * With `relayIpc`, an IPC channel this bin was started with (by `fork()`, or with an
+ * `ipc` stdio entry) is relayed to the child in both directions, as tsx does, so
+ * `process.send()` in a script reaches the process that started `vpx`. Messages use the
+ * default JSON serialization; a message it cannot serialize, or a handle, is not relayed.
+ */
+function runAndExit(
+  command: string,
+  args: string[],
+  env: NodeJS.ProcessEnv,
+  { relayIpc = false } = {},
+): void {
+  if (process.send === undefined) {
+    execInPlace(command, args, env);
+  }
+  const ipc = relayIpc && process.send !== undefined;
+  const child = spawn(command, args, {
+    stdio: ipc ? ['inherit', 'inherit', 'inherit', 'ipc'] : 'inherit',
+    env,
+  });
+  // Exit once the child has exited and, with IPC, its channel has closed and every
+  // message it sent has been relayed. `close` alone is not enough: it never fires when
+  // this side disconnects the channel first.
+  let exited: { code: number | null; signal: NodeJS.Signals | null } | undefined;
+  let channelClosed = !ipc;
+  let pendingSends = 0;
+  const exitWhenDone = () => {
+    if (!exited || !channelClosed || pendingSends > 0) {
+      return;
+    }
+    const { code, signal } = exited;
+    if (signal && process.platform !== 'win32') {
+      // Die by the same signal. Removing every listener, and the one added and removed
+      // here, restores its default action, which also covers SIGPIPE and SIGXFSZ, which
+      // Node.js ignores. The exit below runs only if the signal still does not end us.
+      process.removeAllListeners(signal);
+      process.on(signal, ignoreSignal).off(signal, ignoreSignal);
+      process.kill(process.pid, signal);
+    }
+    process.exit(exitCodeFromClose(code, signal));
+  };
+  if (ipc) {
+    child.on('message', (message) => {
+      pendingSends++;
+      process.send!(message, undefined, undefined, () => {
+        pendingSends--;
+        exitWhenDone();
+      });
+    });
+    // Node.js emits a channel's messages before its `disconnect`, whichever side closed it.
+    child.on('disconnect', () => {
+      channelClosed = true;
+      exitWhenDone();
+    });
+    process.on('message', (message) => {
+      if (!child.connected) {
+        return;
+      }
+      try {
+        child.send(message as Serializable);
+      } catch (error) {
+        errorMsg(`vpx: Failed to relay an IPC message to the script: ${(error as Error).message}`);
+      }
+    });
+    process.on('disconnect', () => {
+      if (child.connected) {
+        child.disconnect();
+      }
+    });
+  }
+  // Terminal Ctrl+C reaches the child through the process group; wait for it.
+  process.on('SIGINT', () => {});
+  for (const signal of ['SIGTERM', 'SIGHUP'] as const) {
+    process.on(signal, () => child.kill(signal));
+  }
+  child.on('error', (error) => {
+    errorMsg(`vpx: Failed to run ${command}: ${error.message}`);
+    process.exit(1);
+  });
+  child.on('exit', (code, signal) => {
+    exited = { code, signal };
+    exitWhenDone();
+  });
+}
+
+const LOCAL_HELP = `Execute a binary from node_modules/.bin or a remote npm package, or run a script file
+
+Usage: vpx [OPTIONS] <pkg[@version]> [args...]
+       vpx [OPTIONS] [NODE_OPTIONS] <script> [args...]
+
+Arguments:
+  <pkg[@version]>  Package binary to execute
+  <script>         Script file to run (.ts, .mts, .cts, .tsx, .js, .mjs, .cjs, .jsx)
+  [args...]        Arguments to pass to the command or script
+
+Options:
+  -p, --package <NAME>  Package(s) to download
+  -c, --shell-mode      Execute the command within a shell environment
+  -s, --silent          Suppress all output except the command's output
+      --tsconfig <PATH> tsconfig.json to use when running a script
+  -v, --version         Print the Vite+ version
+  -h, --help            Print help
+
+This project-local vpx runs in package.json scripts. It runs binaries installed in
+node_modules/.bin, and downloads a package only for a version, --package, or --shell-mode.
+
+Examples:
+  vpx eslint .                           # Run eslint from node_modules/.bin
+  vpx create-vue@latest my-app           # Download and run create-vue
+  vpx -p cowsay -c 'echo "hi" | cowsay'  # Shell mode with package
+  vpx ./scripts/seed.ts --dry-run        # Run a TypeScript script
+  vpx --watch ./server.ts                # Pass Node.js options before the script
+`;
+
+function fail(message: string, note?: string): never {
+  errorMsg(message);
+  if (note) {
+    /* oxlint-disable-next-line no-console */
+    console.error(styleText(['dim', 'bold'], 'note:'), note);
+  }
+  process.exit(1);
+}
+
+const args = process.argv.slice(2);
+const cwd = process.cwd();
+const { flags, positional } = parseVpxArgs(args);
+
+if (flags.help) {
+  process.stdout.write(LOCAL_HELP);
+  process.exit(0);
+}
+if (flags.version) {
+  const { version } = createRequire(import.meta.url)('../package.json') as { version: string };
+  process.stdout.write(`vite-plus v${version}\n`);
+  process.exit(0);
+}
+const [first, ...rest] = positional;
+if (first === undefined) {
+  errorMsg('vpx requires a command to run');
+  process.stderr.write(
+    '\nUsage: vpx <pkg[@version]> [args...]\n       vpx <script> [args...]\n\n' +
+      'Examples:\n  vpx eslint .\n  vpx create-vue my-app\n  vpx ./scripts/seed.ts\n',
+  );
+  process.exit(1);
+}
+
+// Script mode is decided before package-spec parsing: script paths can contain `@`.
+const packageFlags = flags.packages.length > 0 || flags.shellMode;
+let invocation;
+if (!packageFlags || !first.startsWith('-')) {
+  try {
+    invocation = detectScript(positional, cwd);
+  } catch (error) {
+    if (!(error instanceof ScriptError)) {
+      throw error;
+    }
+    // A missing script never falls through to `dlx`, `--package` or not. With
+    // `--shell-mode` the token is a shell command, not a path.
+    if (!flags.shellMode) {
+      fail(`vpx: ${error.message}`);
+    }
+  }
+  if (invocation && packageFlags) {
+    fail(
+      `vpx: ${flags.shellMode ? '--shell-mode' : '--package'} cannot be used when running a script`,
+    );
+  }
+}
+
+if (invocation) {
+  const env = childEnv(cwd);
+  const tsconfig = invocation.tsconfig ?? flags.tsconfig;
+  if (tsconfig === undefined) {
+    delete env.VP_SCRIPT_TSCONFIG;
+  } else {
+    const file = path.resolve(cwd, tsconfig);
+    if (!isFile(file)) {
+      fail(`vpx: tsconfig not found: ${tsconfig}`);
+    }
+    env.VP_SCRIPT_TSCONFIG = file;
+  }
+  // The preload registers the hooks before any user `--require`; the `--import`
+  // registers the off-thread hooks on older Node.js and routes the entry point
+  // through the ESM loader.
+  runAndExit(
+    process.execPath,
+    [
+      '--require',
+      fileURLToPath(new URL('./script-preload.cjs', import.meta.url)),
+      '--import',
+      new URL('./script-register.js', import.meta.url).href,
+      ...invocation.nodeArgs,
+    ],
+    env,
+    { relayIpc: true },
+  );
+} else {
+  if (flags.tsconfig !== undefined) {
+    fail('vpx: --tsconfig can only be used when running a script');
+  }
+  const result = packageInvocation(flags, [first, ...rest], cwd);
+  if ('error' in result) {
+    fail(`vpx: ${result.error}`, result.note);
+  }
+  if (result.command === 'run') {
+    // As the global CLI runs a local binary: the file itself, with every
+    // `node_modules/.bin` from the cwd up first on PATH.
+    runAndExit(result.file, result.args, childEnv(cwd));
+  } else {
+    // Hand off to this package's `vp dlx` in this process. A computed specifier
+    // keeps the CLI bundle and the native binding out of this entry.
+    process.argv = [...process.argv.slice(0, 2), 'dlx', ...result.args];
+    const cliEntry = new URL('./bin.js', import.meta.url).href;
+    await import(cliEntry);
+  }
+}
diff --git a/packages/cli/src/vpx-script.ts b/packages/cli/src/vpx-script.ts
new file mode 100644
index 0000000000..a7dc51f6ee
--- /dev/null
+++ b/packages/cli/src/vpx-script.ts
@@ -0,0 +1,502 @@
+/**
+ * Script detection for the project-local `vpx` bin. Mirrors the global CLI in
+ * `crates/vp_global_cli/src/commands/vpx_script.rs`; keep the two in sync.
+ */
+
+import {
+  accessSync,
+  closeSync,
+  constants,
+  openSync,
+  readSync,
+  type Stats,
+  statSync,
+} from 'node:fs';
+import path from 'node:path';
+
+export const SCRIPT_EXTENSIONS = ['.ts', '.mts', '.cts', '.tsx', '.js', '.mjs', '.cjs', '.jsx'];
+const TS_EXTENSIONS = new Set(['.ts', '.mts', '.cts', '.tsx']);
+
+/** Node.js options that take a required value, which may come as the next argument (best effort). */
+export const NODE_OPTIONS_WITH_VALUE = new Set([
+  '-C',
+  '-e',
+  '-p',
+  '-pe',
+  '-r',
+  '--allow-fs-read',
+  '--allow-fs-write',
+  '--build-sea',
+  '--build-snapshot-config',
+  '--conditions',
+  '--cpu-prof-dir',
+  '--cpu-prof-interval',
+  '--cpu-prof-name',
+  '--debug-port',
+  '--diagnostic-dir',
+  '--disable-proto',
+  '--disable-warning',
+  '--dns-result-order',
+  '--env-file',
+  '--env-file-if-exists',
+  '--eval',
+  '--experimental-config-file',
+  '--experimental-default-type',
+  '--experimental-loader',
+  '--experimental-package-map',
+  '--experimental-sea-config',
+  '--experimental-test-isolation',
+  '--experimental-test-tag-filter',
+  '--heap-prof-dir',
+  '--heap-prof-interval',
+  '--heap-prof-name',
+  '--heapsnapshot-near-heap-limit',
+  '--heapsnapshot-signal',
+  '--icu-data-dir',
+  '--import',
+  '--input-type',
+  '--inspect-port',
+  '--inspect-publish-uid',
+  '--loader',
+  '--localstorage-file',
+  '--max-http-header-size',
+  '--max-old-space-size-percentage',
+  '--network-family-autoselection-attempt-timeout',
+  '--openssl-config',
+  '--print',
+  '--redirect-warnings',
+  '--report-dir',
+  '--report-directory',
+  '--report-filename',
+  '--report-signal',
+  '--require',
+  '--run',
+  '--secure-heap',
+  '--secure-heap-min',
+  '--snapshot-blob',
+  '--test-concurrency',
+  '--test-coverage-branches',
+  '--test-coverage-exclude',
+  '--test-coverage-functions',
+  '--test-coverage-include',
+  '--test-coverage-lines',
+  '--test-global-setup',
+  '--test-isolation',
+  '--test-name-pattern',
+  '--test-random-seed',
+  '--test-reporter',
+  '--test-reporter-destination',
+  '--test-rerun-failures',
+  '--test-shard',
+  '--test-skip-pattern',
+  '--test-timeout',
+  '--title',
+  '--tls-cipher-list',
+  '--tls-keylog',
+  '--trace-event-categories',
+  '--trace-event-file-pattern',
+  '--trace-require-module',
+  '--unhandled-rejections',
+  '--use-largepages',
+  '--v8-pool-size',
+  '--watch-kill-signal',
+  '--watch-path',
+]);
+
+/**
+ * Node.js options after which positionals are not an entry file: the code of `--eval` /
+ * `--print` or the package script of `--run` runs instead, and `--test` takes test files
+ * and globs.
+ */
+export const NODE_OPTIONS_WITHOUT_ENTRY = new Set([
+  '-e',
+  '--eval',
+  '-p',
+  '-pe',
+  '--print',
+  '--run',
+  '--test',
+]);
+
+/**
+ * The option an argument names, without `=value`. Node.js accepts `_` for `-` in long
+ * option names, as in `--redirect_warnings`.
+ */
+function nodeOptionName(arg: string): string {
+  const name = arg.split('=', 1)[0];
+  return name.startsWith('--') ? `--${name.slice(2).replaceAll('_', '-')}` : name;
+}
+
+export interface VpxFlags {
+  packages: string[];
+  shellMode: boolean;
+  silent: boolean;
+  tsconfig?: string;
+  help: boolean;
+  version: boolean;
+}
+
+/** npx-style: flags come before the first positional or unknown flag. */
+export function parseVpxArgs(args: string[]): { flags: VpxFlags; positional: string[] } {
+  const flags: VpxFlags = {
+    packages: [],
+    shellMode: false,
+    silent: false,
+    help: false,
+    version: false,
+  };
+  let index = 0;
+  for (; index < args.length; index++) {
+    const arg = args[index];
+    if (arg === '-p' || arg === '--package') {
+      index++;
+      if (index < args.length) {
+        flags.packages.push(args[index]);
+      }
+    } else if (arg.startsWith('--package=') || arg.startsWith('-p=')) {
+      flags.packages.push(arg.slice(arg.indexOf('=') + 1));
+    } else if (arg === '-c' || arg === '--shell-mode') {
+      flags.shellMode = true;
+    } else if (arg === '-s' || arg === '--silent') {
+      flags.silent = true;
+    } else if (arg === '-h' || arg === '--help') {
+      flags.help = true;
+    } else if (arg === '-v' || arg === '--version') {
+      flags.version = true;
+    } else if (arg === '--tsconfig' && index + 1 < args.length) {
+      // Without a value it stays positional, where `detectScript` reports the missing path.
+      flags.tsconfig = args[++index];
+    } else if (arg.startsWith('--tsconfig=')) {
+      flags.tsconfig = arg.slice('--tsconfig='.length);
+    } else {
+      break;
+    }
+  }
+  return { flags, positional: args.slice(index) };
+}
+
+export interface ScriptInvocation {
+  /** Node.js options, the script, and its arguments, in the order given. */
+  nodeArgs: string[];
+  /** `--tsconfig` given among the Node.js options. */
+  tsconfig?: string;
+}
+
+export class ScriptError extends Error {}
+
+/**
+ * Decide whether `positional` runs a script; `undefined` means package mode.
+ * Throws {@link ScriptError} for a missing script, which must never fall
+ * through to a remote package download.
+ */
+export function detectScript(positional: string[], cwd: string): ScriptInvocation | undefined {
+  const [first] = positional;
+  if (first === undefined) {
+    return undefined;
+  }
+  if (!first.startsWith('-')) {
+    return isScript(first, cwd) ? { nodeArgs: [...positional] } : undefined;
+  }
+
+  // A leading option never named a package bin, so this always runs Node.js.
+  const nodeArgs: string[] = [];
+  let tsconfig: string | undefined;
+  let entry = true;
+  for (let index = 0; index < positional.length; index++) {
+    const arg = positional[index];
+    if (arg === '--' || arg === '-' || !arg.startsWith('-')) {
+      const script = arg === '--' ? positional[index + 1] : arg;
+      if (script !== undefined && entry) {
+        checkScriptAfterOptions(script, cwd);
+      }
+      nodeArgs.push(...positional.slice(index));
+      break;
+    }
+    if (arg === '--tsconfig') {
+      if (positional[index + 1] === undefined) {
+        throw new ScriptError('--tsconfig requires a path');
+      }
+      tsconfig = positional[++index];
+      continue;
+    }
+    if (arg.startsWith('--tsconfig=')) {
+      tsconfig = arg.slice('--tsconfig='.length);
+      continue;
+    }
+    const name = nodeOptionName(arg);
+    entry &&= !NODE_OPTIONS_WITHOUT_ENTRY.has(name);
+    nodeArgs.push(arg);
+    if (
+      !arg.includes('=') &&
+      NODE_OPTIONS_WITH_VALUE.has(name) &&
+      positional[index + 1] !== undefined
+    ) {
+      nodeArgs.push(positional[++index]);
+    }
+  }
+  return { nodeArgs, tsconfig };
+}
+
+/**
+ * After Node.js options, only a missing explicit path is an error. A bare name may be
+ * the value of an option missing from `NODE_OPTIONS_WITH_VALUE`, such as a coverage
+ * glob, and this position never falls back to a package, so Node.js reports a missing
+ * one itself.
+ */
+function checkScriptAfterOptions(token: string, cwd: string): void {
+  if (
+    isExplicitPath(token) &&
+    SCRIPT_EXTENSIONS.some((extension) => token.endsWith(extension)) &&
+    !isFile(path.resolve(cwd, token))
+  ) {
+    throw missingScript(token, path.resolve(cwd, token));
+  }
+}
+
+/** The error for a script path that is not a file. */
+function missingScript(token: string, file: string): ScriptError {
+  return new ScriptError(
+    statSync(file, { throwIfNoEntry: false })?.isDirectory()
+      ? `Script is a directory: ${token}`
+      : `Script not found: ${token}`,
+  );
+}
+
+function isScript(token: string, cwd: string): boolean {
+  const file = path.resolve(cwd, token);
+  const extension = SCRIPT_EXTENSIONS.find((candidate) => token.endsWith(candidate));
+  if (extension) {
+    if (isFile(file)) {
+      return true;
+    }
+    if (isExplicitPath(token) || TS_EXTENSIONS.has(extension)) {
+      throw missingScript(token, file);
+    }
+    return false;
+  }
+  if (!isExplicitPath(token)) {
+    return false;
+  }
+  // A missing explicit path never falls through to a package download.
+  const stats = statSync(file, { throwIfNoEntry: false });
+  if (!stats) {
+    throw new ScriptError(`Script not found: ${token}`);
+  }
+  return stats.isFile() && hasVpxShebang(file);
+}
+
+function isExplicitPath(token: string): boolean {
+  if (token.startsWith('./') || token.startsWith('../') || token.startsWith('/')) {
+    return true;
+  }
+  return (
+    process.platform === 'win32' &&
+    (token.startsWith('.\\') || token.startsWith('..\\') || /^(?:[a-zA-Z]:[\\/]|\\\\)/.test(token))
+  );
+}
+
+export function isFile(file: string): boolean {
+  return statSync(file, { throwIfNoEntry: false })?.isFile() ?? false;
+}
+
+/** The first `length` bytes of `file`, or none when it cannot be read. */
+function readHead(file: string, length: number): Buffer {
+  const head = Buffer.alloc(length);
+  try {
+    const fd = openSync(file, 'r');
+    try {
+      return head.subarray(0, readSync(fd, head, 0, length, 0));
+    } finally {
+      closeSync(fd);
+    }
+  } catch {
+    return head.subarray(0, 0);
+  }
+}
+
+function hasVpxShebang(file: string): boolean {
+  const text = readHead(file, 256).toString('utf8');
+  if (!text.startsWith('#!')) {
+    return false;
+  }
+  return text
+    .slice(2)
+    .split('\n', 1)[0]
+    .split(/\s+/)
+    .some((word) => {
+      const name = word.split(/[\\/]/).pop();
+      return name === 'vpx' || name === 'vpx.exe';
+    });
+}
+
+/** The magic numbers of executables the kernel runs: Mach-O (thin and fat) on macOS, ELF elsewhere. */
+const NATIVE_MAGIC =
+  process.platform === 'darwin'
+    ? ['feedface', 'feedfacf', 'cefaedfe', 'cffaedfe', 'cafebabe', 'bebafeca']
+    : ['7f454c46'];
+
+function isExecutableFile(file: string): boolean {
+  try {
+    accessSync(file, constants.X_OK);
+  } catch {
+    return false;
+  }
+  return isFile(file);
+}
+
+function isNativeExecutable(file: string): boolean {
+  return isExecutableFile(file) && NATIVE_MAGIC.includes(readHead(file, 4).toString('hex'));
+}
+
+/**
+ * Whether exec can run `file` itself: an executable native binary, or an executable
+ * script whose `#!` interpreter is one. A failed `process.execve()` aborts most supported
+ * Node.js versions instead of throwing, so the project-local bin runs anything else
+ * through `/bin/sh`, which reports a file it cannot run as a terminal does. The
+ * interpreter keeps a trailing `\r`, as the kernel reads it.
+ */
+export function canExecDirectly(file: string): boolean {
+  if (!isExecutableFile(file)) {
+    return false;
+  }
+  const head = readHead(file, 256);
+  if (head.subarray(0, 2).toString('latin1') !== '#!') {
+    return isNativeExecutable(file);
+  }
+  const line = head.subarray(2).toString('utf8').split('\n', 1)[0];
+  const interpreter = line.replace(/^[ \t]+/, '').split(/[ \t]/, 1)[0];
+  return path.isAbsolute(interpreter) && isNativeExecutable(interpreter);
+}
+
+/** Whether a package spec names a version, as in `eslint@9` or `@vue/cli@5`. */
+export function hasVersionSpec(spec: string): boolean {
+  if (spec.startsWith('@')) {
+    const slash = spec.indexOf('/');
+    return slash !== -1 && spec.slice(slash + 1).includes('@');
+  }
+  return spec.includes('@');
+}
+
+/** The binary name a package spec runs: `eslint@9` → `eslint`, `@vue/cli@5` → `cli`. */
+export function commandName(spec: string): string {
+  if (spec.startsWith('@')) {
+    const slash = spec.indexOf('/');
+    return slash === -1 ? spec : spec.slice(slash + 1).split('@')[0];
+  }
+  return spec.split('@')[0];
+}
+
+/** Every `node_modules/.bin` path from `cwd` up to the root, nearest first, whether or not it exists. */
+export function nodeModulesBinPaths(cwd: string): string[] {
+  const paths: string[] = [];
+  for (let dir = cwd; ; dir = path.dirname(dir)) {
+    paths.push(path.join(dir, 'node_modules', '.bin'));
+    if (path.dirname(dir) === dir) {
+      return paths;
+    }
+  }
+}
+
+/** The nearest `node_modules/.bin/<name>` from `cwd` up (`.cmd` on Windows), like the global CLI's `find_local_binary`. */
+function findLocalBin(name: string, cwd: string): { file: string; stats: Stats } | undefined {
+  const fileName = process.platform === 'win32' ? `${name}.cmd` : name;
+  for (const dir of nodeModulesBinPaths(cwd)) {
+    const file = path.join(dir, fileName);
+    const stats = statSync(file, { throwIfNoEntry: false });
+    if (stats?.isFile()) {
+      return { file, stats };
+    }
+  }
+  return undefined;
+}
+
+/** An executable mode bit, as the global CLI checks; always true on Windows. */
+function isExecutable(stats: Stats): boolean {
+  return process.platform === 'win32' || (stats.mode & 0o111) !== 0;
+}
+
+export interface ProgramError {
+  error: string;
+  note?: string;
+}
+
+/**
+ * Package mode runs an explicit path as a program. An existing file must be executable,
+ * and a directory needs a package.json for `vp dlx`, so either fails here with a clear
+ * error instead of in `vp dlx`. Mirrors `check_explicit_program` in the global CLI.
+ */
+export function checkExplicitProgram(token: string, cwd: string): ProgramError | undefined {
+  if (!isExplicitPath(token)) {
+    return undefined;
+  }
+  const file = path.resolve(cwd, token);
+  const stats = statSync(file, { throwIfNoEntry: false });
+  if (stats?.isDirectory() && !isFile(path.join(file, 'package.json'))) {
+    return { error: `'${token}' is a directory without a package.json` };
+  }
+  if (stats?.isFile() && !isExecutable(stats)) {
+    return {
+      error: `'${token}' is not executable`,
+      note: `Make it executable with \`chmod +x ${token}\`.`,
+    };
+  }
+  return undefined;
+}
+
+export type PackageInvocation =
+  | { command: 'run'; file: string; args: string[] }
+  | { command: 'dlx'; args: string[] }
+  | ProgramError;
+
+/**
+ * How the project-local bin runs `vpx <pkg> [args...]`. The nearest binary in
+ * `node_modules/.bin`, or an existing executable file, runs directly, as the global CLI
+ * execs the path it finds. A versioned package, `--package`, `--shell-mode`, or a local
+ * package directory runs with this package's `vp dlx`. Global packages and `PATH` are
+ * not searched, so a binary that is not installed is an error rather than a download.
+ */
+export function packageInvocation(
+  flags: VpxFlags,
+  [spec, ...rest]: [string, ...string[]],
+  cwd: string,
+): PackageInvocation {
+  const silent = flags.silent ? ['--silent'] : [];
+  if (flags.packages.length > 0 || flags.shellMode || hasVersionSpec(spec)) {
+    return {
+      command: 'dlx',
+      args: [
+        ...flags.packages.flatMap((name) => ['--package', name]),
+        ...(flags.shellMode ? ['--shell-mode'] : []),
+        ...silent,
+        spec,
+        ...rest,
+      ],
+    };
+  }
+  if (isExplicitPath(spec)) {
+    const problem = checkExplicitProgram(spec, cwd);
+    if (problem) {
+      return problem;
+    }
+    const file = path.resolve(cwd, spec);
+    return isFile(file)
+      ? { command: 'run', file, args: rest }
+      : { command: 'dlx', args: [...silent, spec, ...rest] };
+  }
+  const name = commandName(spec);
+  const bin = findLocalBin(name, cwd);
+  if (bin) {
+    if (!isExecutable(bin.stats)) {
+      const relative = path.relative(cwd, bin.file);
+      return {
+        error: `'${relative}' is not executable`,
+        note: `Reinstall dependencies with \`vp install\`, or make it executable with \`chmod +x ${relative}\`.`,
+      };
+    }
+    return { command: 'run', file: bin.file, args: rest };
+  }
+  return {
+    error: `'${name}' is not installed in node_modules`,
+    note: `Add it to devDependencies, or run \`vp dlx ${spec}\` to download and run it.`,
+  };
+}
diff --git a/packages/cli/toolchain.config.json b/packages/cli/toolchain.config.json
index b683853d57..d71c335087 100644
--- a/packages/cli/toolchain.config.json
+++ b/packages/cli/toolchain.config.json
@@ -141,6 +141,18 @@
         "type": "cargo",
         "package": "oxc_resolver"
       }
+    },
+    {
+      "id": "oxc-node",
+      "name": "oxc-node",
+      "kind": "engine",
+      "delivery": ["compiled"],
+      "aliases": [],
+      "versionSource": {
+        "type": "vendored",
+        "upstream": "oxc-node",
+        "packageJson": "oxc-node/packages/core/package.json"
+      }
     }
   ],
   "edges": [
@@ -203,6 +215,21 @@
       "from": "vite-plus",
       "to": "vite-task",
       "relationship": "compiles"
+    },
+    {
+      "from": "vite-plus",
+      "to": "oxc-node",
+      "relationship": "compiles"
+    },
+    {
+      "from": "oxc-node",
+      "to": "oxc",
+      "relationship": "compiles"
+    },
+    {
+      "from": "oxc-node",
+      "to": "oxc-resolver",
+      "relationship": "compiles"
     }
   ]
 }
diff --git a/packages/cli/tsdown.config.ts b/packages/cli/tsdown.config.ts
index 8a27711e6a..203444c9b6 100644
--- a/packages/cli/tsdown.config.ts
+++ b/packages/cli/tsdown.config.ts
@@ -64,6 +64,12 @@ export default defineConfig([
       'config/bin': './src/config/bin.ts',
       'hooks/bin': './src/hooks/bin.ts',
       'staged/bin': './src/staged/bin.ts',
+      // `vpx <script>` loader: `--import` entry and its off-thread ESM hooks
+      // (the `--require` preload is built as CommonJS below).
+      'script-register': './src/script-register.ts',
+      'script-esm-hooks': './src/script-esm-hooks.ts',
+      // Project-local `vpx` bin; kept apart from bin.js so it loads no binding.
+      'vpx-bin': './src/vpx-bin.ts',
     },
     outDir: 'dist',
     format: 'esm',
@@ -84,6 +90,25 @@ export default defineConfig([
     plugins: [fixVersionsPathPlugin, inlineLintStagedVersionPlugin],
   },
 
+  // `vpx <script>` `--require` preload. CommonJS, so it loads before any user
+  // `--require` without going through `require(esm)`; see src/script-preload.ts.
+  {
+    name: 'script-preload',
+    entry: {
+      'script-preload': './src/script-preload.ts',
+    },
+    outDir: 'dist',
+    format: 'cjs',
+    fixedExtension: true,
+    shims: true,
+    dts: false,
+    clean: false,
+    deps: { neverBundle: [/\.\.\/binding\/index\.(js|cjs)/] },
+    outputOptions: {
+      codeSplitting: false,
+    },
+  },
+
   // Standalone machine protocol shipped with the prebuilt `vp` archive.
   // Keep this as one self-contained file so Containerbase can extract the
   // verified release asset without installing npm dependencies.
diff --git a/packages/tools/.upstream-versions.json b/packages/tools/.upstream-versions.json
index b6f52e0328..3db51ff356 100644
--- a/packages/tools/.upstream-versions.json
+++ b/packages/tools/.upstream-versions.json
@@ -8,5 +8,10 @@
     "repo": "https://github.com/vitejs/vite.git",
     "branch": "main",
     "hash": "b6c20f6a8126d8561891e5fb9368e8fc9da37538"
+  },
+  "oxc-node": {
+    "repo": "https://github.com/oxc-project/oxc-node.git",
+    "branch": "main",
+    "hash": "ce22828c84d6fde2c5270141c135f1944e35c4e3"
   }
 }
diff --git a/packages/tools/src/__tests__/patch-oxc-node.spec.ts b/packages/tools/src/__tests__/patch-oxc-node.spec.ts
new file mode 100644
index 0000000000..c14aeb06d3
--- /dev/null
+++ b/packages/tools/src/__tests__/patch-oxc-node.spec.ts
@@ -0,0 +1,23 @@
+import { describe, expect, test } from 'vitest';
+
+import { setOxcVersion } from '../patch-oxc-node.ts';
+
+describe('setOxcVersion', () => {
+  const cargoToml = `[dependencies]
+oxc = { version = "0.153.0", features = [
+  "codegen",
+] }
+oxc_resolver = { version = "11.24.3" }
+`;
+
+  test('follows the workspace oxc version and leaves other crates alone', () => {
+    const patched = setOxcVersion(cargoToml, '0.152.0');
+    expect(patched).toContain('oxc = { version = "0.152.0", features = [');
+    expect(patched).toContain('oxc_resolver = { version = "11.24.3" }');
+    expect(setOxcVersion(patched, '0.152.0')).toBe(patched);
+  });
+
+  test('fails without an oxc dependency', () => {
+    expect(() => setOxcVersion('[dependencies]\n', '0.152.0')).toThrow(/`oxc` dependency/);
+  });
+});
diff --git a/packages/tools/src/cargo-toml.ts b/packages/tools/src/cargo-toml.ts
new file mode 100644
index 0000000000..12ef0fa675
--- /dev/null
+++ b/packages/tools/src/cargo-toml.ts
@@ -0,0 +1,39 @@
+// Cargo.toml version helpers shared by `sync-remote` and `patch-oxc-node`. Keep this
+// module free of package imports: CI runs `patch-oxc-node` before installing dependencies.
+
+function escapeRegExp(value: string): string {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+
+// Parse every `oxc*` crate version from a Cargo.toml in a single pass, keyed by
+// crate name. Handles both the bare `oxc_x = "X"` form and the inline-table
+// `oxc = { version = "X", features = [...] }` form (which may span lines, but
+// always lists `version` before its `[...]` feature array, so `[^}]*?` reaches
+// it without crossing the closing `}`).
+export function parseCargoOxcVersions(src: string): Map<string, string> {
+  const versions = new Map<string, string>();
+  const re = /^\s*(oxc[\w-]*)\s*=\s*(?:"([^"]+)"|\{[^}]*?version\s*=\s*"([^"]+)")/gm;
+  for (let m = re.exec(src); m; m = re.exec(src)) {
+    versions.set(m[1], m[2] ?? m[3]);
+  }
+  return versions;
+}
+
+// Replace the version of a single crate entry in-place, preserving features,
+// formatting, and surrounding text. Only the first matching entry is rewritten.
+export function replaceCargoCrateVersion(src: string, key: string, newVersion: string): string {
+  const escaped = escapeRegExp(key);
+  const bareRe = new RegExp(`^(\\s*${escaped}\\s*=\\s*")[^"]+(")`, 'm');
+  if (bareRe.test(src)) {
+    return src.replace(bareRe, `$1${newVersion}$2`);
+  }
+  const tableStart = new RegExp(`^\\s*${escaped}\\s*=\\s*\\{`, 'm').exec(src);
+  if (!tableStart) {
+    return src;
+  }
+  const start = tableStart.index;
+  const close = src.indexOf('}', start);
+  const end = close >= 0 ? close : src.length;
+  const table = src.slice(start, end).replace(/(version\s*=\s*")[^"]+(")/, `$1${newVersion}$2`);
+  return src.slice(0, start) + table + src.slice(end);
+}
diff --git a/packages/tools/src/patch-oxc-node.ts b/packages/tools/src/patch-oxc-node.ts
new file mode 100644
index 0000000000..abaaeef257
--- /dev/null
+++ b/packages/tools/src/patch-oxc-node.ts
@@ -0,0 +1,59 @@
+/**
+ * Prepare the vendored oxc-node source for compilation into the Vite+ native binding.
+ *
+ * `sync-remote` clones oxc-node into `oxc-node/`, and CI checks it out at the hash in
+ * `.upstream-versions.json`. The binding links it with `default-features = false`, so it
+ * registers no NAPI exports of its own; `packages/cli/binding/src/oxc_node.rs` forwards
+ * the ones the loader uses under an `oxcNode` namespace. The source stays unpatched.
+ *
+ * This script points the `oxc` dependency at the workspace version, so the binding links
+ * one copy of oxc. It is idempotent. Keep it free of package imports: CI runs it right
+ * after checkout, before dependencies are installed.
+ */
+
+import { existsSync, readFileSync, realpathSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import { parseCargoOxcVersions, replaceCargoCrateVersion } from './cargo-toml.ts';
+
+export const OXC_NODE_DIR = 'oxc-node';
+
+function log(message: string) {
+  console.log(`[patch-oxc-node] ${message}`);
+}
+
+function oxcVersion(cargoToml: string, file: string): string {
+  const version = parseCargoOxcVersions(cargoToml).get('oxc');
+  if (!version) {
+    throw new Error(`[patch-oxc-node] Could not find the \`oxc\` dependency in ${file}`);
+  }
+  return version;
+}
+
+/** Point oxc-node's `oxc` dependency at `version`. */
+export function setOxcVersion(cargoToml: string, version: string): string {
+  if (!parseCargoOxcVersions(cargoToml).has('oxc')) {
+    throw new Error('[patch-oxc-node] Could not find the `oxc` dependency in oxc-node/Cargo.toml');
+  }
+  return replaceCargoCrateVersion(cargoToml, 'oxc', version);
+}
+
+export function patchOxcNode(rootDir: string = process.cwd()): void {
+  const version = oxcVersion(readFileSync(join(rootDir, 'Cargo.toml'), 'utf-8'), 'Cargo.toml');
+  const cargoTomlPath = join(rootDir, OXC_NODE_DIR, 'Cargo.toml');
+  const cargoToml = readFileSync(cargoTomlPath, 'utf-8');
+  const patched = setOxcVersion(cargoToml, version);
+  if (patched !== cargoToml) {
+    writeFileSync(cargoTomlPath, patched, 'utf-8');
+    log(`✓ Cargo.toml: oxc ${version}`);
+  }
+}
+
+if (
+  process.argv[1] &&
+  existsSync(process.argv[1]) &&
+  fileURLToPath(import.meta.url) === realpathSync(process.argv[1])
+) {
+  patchOxcNode();
+}
diff --git a/packages/tools/src/sync-remote-deps.ts b/packages/tools/src/sync-remote-deps.ts
index 9f56d8e820..f30a1d1fee 100755
--- a/packages/tools/src/sync-remote-deps.ts
+++ b/packages/tools/src/sync-remote-deps.ts
@@ -4,6 +4,8 @@ import { join } from 'node:path';
 import { parseArgs } from 'node:util';
 
 import upstreamVersions from '../.upstream-versions.json' with { type: 'json' };
+import { parseCargoOxcVersions, replaceCargoCrateVersion } from './cargo-toml.ts';
+import { OXC_NODE_DIR, patchOxcNode } from './patch-oxc-node.ts';
 import {
   alignVendoredVitestDependencies,
   REMOVED_VITEST_PACKAGES,
@@ -705,43 +707,6 @@ export function mergeWorkspaceYaml(
   return mainDoc.toString(stringifyOptions);
 }
 
-function escapeRegExp(value: string): string {
-  return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
-
-// Parse every `oxc*` crate version from a Cargo.toml in a single pass, keyed by
-// crate name. Handles both the bare `oxc_x = "X"` form and the inline-table
-// `oxc = { version = "X", features = [...] }` form (which may span lines, but
-// always lists `version` before its `[...]` feature array, so `[^}]*?` reaches
-// it without crossing the closing `}`).
-function parseCargoOxcVersions(src: string): Map<string, string> {
-  const versions = new Map<string, string>();
-  const re = /^\s*(oxc[\w-]*)\s*=\s*(?:"([^"]+)"|\{[^}]*?version\s*=\s*"([^"]+)")/gm;
-  for (let m = re.exec(src); m; m = re.exec(src)) {
-    versions.set(m[1], m[2] ?? m[3]);
-  }
-  return versions;
-}
-
-// Replace the version of a single crate entry in-place, preserving features,
-// formatting, and surrounding text. Only the first matching entry is rewritten.
-function replaceCargoCrateVersion(src: string, key: string, newVersion: string): string {
-  const escaped = escapeRegExp(key);
-  const bareRe = new RegExp(`^(\\s*${escaped}\\s*=\\s*")[^"]+(")`, 'm');
-  if (bareRe.test(src)) {
-    return src.replace(bareRe, `$1${newVersion}$2`);
-  }
-  const tableStart = new RegExp(`^\\s*${escaped}\\s*=\\s*\\{`, 'm').exec(src);
-  if (!tableStart) {
-    return src;
-  }
-  const start = tableStart.index;
-  const close = src.indexOf('}', start);
-  const end = close >= 0 ? close : src.length;
-  const table = src.slice(start, end).replace(/(version\s*=\s*")[^"]+(")/, `$1${newVersion}$2`);
-  return src.slice(0, start) + table + src.slice(end);
-}
-
 export interface CargoOxcChange {
   key: string;
   from: string;
@@ -846,19 +811,20 @@ export async function syncRemote() {
 
   // Get the root directory (assuming script is run from root)
   const rootDir = process.cwd();
+  // Each upstream checkout and its pin in `.upstream-versions.json`.
+  const upstreamRepos = [
+    [ROLLDOWN_DIR, upstreamVersions.rolldown],
+    [VITE_DIR, upstreamVersions.vite],
+    [OXC_NODE_DIR, upstreamVersions['oxc-node']],
+  ] as const;
 
   if (values.clean) {
     log('Cleaning existing repositories...');
-    if (existsSync(join(rootDir, ROLLDOWN_DIR))) {
-      rmSync(join(rootDir, ROLLDOWN_DIR), { recursive: true, force: true });
-      log(`Removed ${ROLLDOWN_DIR}`);
-    }
-    if (existsSync(join(rootDir, VITE_DIR))) {
-      rmSync(join(rootDir, VITE_DIR), {
-        recursive: true,
-        force: true,
-      });
-      log(`Removed ${VITE_DIR}`);
+    for (const [dir] of upstreamRepos) {
+      if (existsSync(join(rootDir, dir))) {
+        rmSync(join(rootDir, dir), { recursive: true, force: true });
+        log(`Removed ${dir}`);
+      }
     }
     // Clean up legacy 'rolldown-vite' directory (renamed to 'vite')
     const legacyViteDir = join(rootDir, 'rolldown-vite');
@@ -868,19 +834,9 @@ export async function syncRemote() {
     }
   }
 
-  // Clone or reset repos
-  cloneOrResetRepo(
-    upstreamVersions.rolldown.repo,
-    join(rootDir, ROLLDOWN_DIR),
-    upstreamVersions.rolldown.branch,
-    upstreamVersions.rolldown.hash,
-  );
-  cloneOrResetRepo(
-    upstreamVersions['vite'].repo,
-    join(rootDir, VITE_DIR),
-    upstreamVersions['vite'].branch,
-    upstreamVersions['vite'].hash,
-  );
+  for (const [dir, { repo, branch, hash }] of upstreamRepos) {
+    cloneOrResetRepo(repo, join(rootDir, dir), branch, hash);
+  }
 
   // Dynamically import dependencies after git clone. Capture the whole `yaml`
   // module (we need `yaml.parseDocument` to preserve comments).
@@ -939,6 +895,10 @@ export async function syncRemote() {
   log('Syncing Cargo.toml oxc versions with rolldown...');
   syncCargoOxcWithRolldown(rootDir);
 
+  // oxc-node compiles into the native binding; it follows the oxc pins above.
+  log('Patching vendored oxc-node...');
+  patchOxcNode(rootDir);
+
   // Merge package.json exports
   log('Merging package.json exports...');
 
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 495796a6a9..d182bfb605 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -356,6 +356,9 @@ catalogs:
     picomatch:
       specifier: ^4.0.2
       version: 4.0.7
+    pirates:
+      specifier: ^4.0.7
+      version: 4.0.7
     playwright:
       specifier: ^1.57.0
       version: 1.62.1
@@ -484,6 +487,9 @@ importers:
 
   packages/cli:
     dependencies:
+      '@oxc-project/runtime':
+        specifier: 'catalog:'
+        version: 0.155.0
       '@oxc-project/types':
         specifier: 'catalog:'
         version: 0.155.0
@@ -590,6 +596,9 @@ importers:
       picocolors:
         specifier: 'catalog:'
         version: 1.1.1
+      pirates:
+        specifier: 'catalog:'
+        version: 4.0.7
       tinyglobby:
         specifier: 'catalog:'
         version: 0.2.17
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 3886744d9f..577b026a03 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -100,6 +100,7 @@ catalog:
   pathe: ^2.0.3
   picocolors: ^1.1.1
   picomatch: ^4.0.2
+  pirates: ^4.0.7
   playwright: ^1.57.0
   react: ^19.1.0
   react-dom: ^19.1.0
diff --git a/rfcs/vpx-script-execution.md b/rfcs/vpx-script-execution.md
new file mode 100644
index 0000000000..888f0c535f
--- /dev/null
+++ b/rfcs/vpx-script-execution.md
@@ -0,0 +1,350 @@
+# RFC: Run TypeScript Scripts with `vpx`
+
+- Status: Implemented in [#2936](https://github.com/voidzero-dev/vite-plus/pull/2936); CI covers Linux, macOS, and Windows on Node.js 22, 24, and 26
+- Related: [`vpx` command](./vpx-command.md), [JavaScript runtime management](./js-runtime.md), [CLI bundling](../packages/cli/BUNDLING.md), [Core binding resolution](./core-binding-resolution.md)
+- Upstream: [oxc-node](https://github.com/oxc-project/oxc-node) at `ce22828`, a `main` commit after v0.1.7 with fixes not yet released, vendored unpatched and compiled into the Vite+ native binding, as Rolldown is
+- Prior art: [tsx](https://github.com/privatenumber/tsx) 4.23.15
+
+## Summary
+
+`vpx` runs a script file directly:
+
+```bash
+vpx ./scripts/seed.ts --dry-run
+```
+
+When the command names a script, `vpx` runs it on the project's managed Node.js with the oxc-node loader preloaded, instead of resolving a package binary:
+
+```
+vpx ./seed.ts args  ──►  node --require …/vite-plus/dist/script-preload.cjs
+                              --import file:///…/vite-plus/dist/script-register.js ./seed.ts args
+```
+
+The loader's native half is compiled into the Vite+ binding; its JavaScript half ships in `vite-plus/dist`. TypeScript syntax that Node.js cannot strip (enums, namespaces, parameter properties, legacy decorators, JSX) works without a `tsx` dependency, as do tsconfig `paths`, `.js` → `.ts` imports, TypeScript dependencies, and ESM/CJS interop. Package-binary execution (`vpx eslint .`) is unchanged. A project-local `vpx` bin makes it work in `package.json` scripts without the global CLI.
+
+## Motivation
+
+Repositories use `tsx` to run `scripts/*.ts`. Vite+ manages the Node.js version and ships the rest of the toolchain, but running a TypeScript file meant adding `tsx` (esbuild, two processes), downloading it through `vpx tsx`, or settling for `vp node` and Node.js type stripping, which only erases syntax: no enums, decorators, JSX, tsconfig `paths`, or TypeScript in `node_modules`. VoidZero maintains oxc-node, an Oxc-based loader that this repository and Rolldown already use for their own scripts. Exposing it through `vpx` gives users a tsx equivalent with no extra dependency, on the project-pinned Node.js.
+
+## Goals
+
+1. `vpx <script>` runs `.ts .mts .cts .tsx .js .mjs .cjs .jsx` files with full TypeScript syntax, tsconfig `paths`, `.js` → `.ts` imports, and both module systems.
+2. Scripts run on the Node.js that `vp node` would select; the project-local bin runs them on the Node.js that started it.
+3. On Unix, one process: exit codes, signals, stdio, and `process.ppid` behave as with `node`.
+4. Node.js options (`--watch`, `--inspect`, `--env-file=`, `--test`, `--import`) are forwarded.
+5. `#!/usr/bin/env vpx` works for files that keep a script extension.
+6. The loader ships inside `vite-plus`: no new npm package, no user dependency.
+7. `vpx <script>` works from a project-local `vite-plus` without the global CLI.
+8. Package-binary behavior of the global `vpx` is unchanged.
+
+## Non-Goals
+
+Type checking (`vp check`); a TypeScript REPL or TypeScript in `-e`/`-p` or `--check`; a tsx-style `watch` subcommand here (use Node.js `--watch` and `--watch-path`; [#3141](https://github.com/voidzero-dev/vite-plus/issues/3141) plans `vpx watch` on oxc-node's watcher); a programmatic API or public `node --import vite-plus/…` entry (see [Future Enhancements](#future-enhancements)); an on-disk transform cache; `target` downleveling; Bun and Deno.
+
+## Command Syntax
+
+```bash
+vpx [VPX_OPTIONS] [NODE_OPTIONS] <script> [args...]
+```
+
+- `VPX_OPTIONS`: the existing `vpx` options plus `--tsconfig <path>` and `-v/--version`. `-p/--package` and `-c/--shell-mode` select package mode, so combining them with a script is an error. `-s/--silent` is accepted; script mode prints no Vite+ output either way.
+- `NODE_OPTIONS`: tokens starting with `-` between the `vpx` options and the script, forwarded to Node.js verbatim. `--tsconfig` is also recognized here (`vpx --watch --tsconfig x.json ./a.ts`).
+- `<script>` and `[args...]`: passed to Node.js unchanged. Tokens after the script, including `--`, belong to the script.
+
+`vpx` options are parsed first, so `-p`, `-c`, `-h`, and `-v` keep their `vpx` meaning; Node.js has the long forms, and `vp node --version` prints the Node.js version. `vpx --version` prints the same report as `vp --version`.
+
+When the first positional token starts with `-` and no script follows, `vpx` forwards the arguments to Node.js with the loader: `--eval`, `--print`, `--check ./a.ts`, `-` (stdin), `--inspect` (REPL). The loader does not transform eval or REPL input, and Node.js reads a `--check` file without it, as with tsx. The help text lives in `VPX_HELP` in `crates/vp_global_cli/src/commands/vpx.rs` and the `command_vpx_pnpm*` snapshots.
+
+## Script Detection
+
+Detection runs before package-spec parsing, because script paths can contain `@`. It decides the mode and which token gets the missing-file check; it never rewrites the arguments except to remove `--tsconfig`.
+
+```text
+after parsing vpx options, let T = positional[0]
+
+if T starts with '-':                      # Node.js invocation; a leading option never named a package bin
+    script = first token after the Node.js options (the token after `--`, or `-` for stdin),
+             skipping the value of options that take one (every `--option=...` that
+             `node --help` lists on 22, 24, and 26: --import, --require, --env-file, -r, …)
+    after -e, --eval, -p, -pe, --print, --run, or --test, no token is a script: Node.js
+             runs that code or package script, or takes test files and globs
+    option names match with `_` for `-` (--redirect_warnings), as Node.js accepts
+    script is a missing explicit path with a script extension → error
+    otherwise → forward to Node.js as-is
+elif is_script(T):
+    script = T
+else:
+    package mode (existing lookup chain, unchanged)
+
+is_script(token):
+    explicit = token starts with ./ ../ / (Windows: .\ ..\ X:\ \\)
+    ext      = token ends with .ts .mts .cts .tsx .js .mjs .cjs .jsx
+    ext && cwd/token is a regular file   → script
+    ext && (explicit || TS extension)    → error (never a package)
+    explicit && cwd/token does not exist → error "Script not found"
+    explicit && regular file whose shebang line invokes vpx → script
+    otherwise                            → not a script
+
+an error is "Script is a directory" when cwd/token is a directory, else "Script not found"
+```
+
+After Node.js options, only a missing explicit path is an error: a bare name may be the value of an option the skip list lacks, and that position never falls back to a package, so a wrong guess only moves the check to Node.js. Both CLIs declare the same lists and run the shared cases in `crates/vp_global_cli/src/commands/vpx_script_cases.json`.
+
+| Invocation                                 | Mode    | Reason                                                     |
+| ------------------------------------------ | ------- | ---------------------------------------------------------- |
+| `vpx ./scripts/seed.ts`                    | script  | Explicit path with a script extension                      |
+| `vpx scripts/seed.ts`                      | script  | The file exists                                            |
+| `vpx seed.ts` (no such file)               | error   | TypeScript extension; never a package name                 |
+| `vpx ./bin/missing` (no such path)         | error   | Explicit path, even without an extension                   |
+| `vpx ./tools.ts` (a directory)             | error   | "Script is a directory"                                    |
+| `vpx highlight.js` (no such file)          | package | Bare name with a JS extension and no file                  |
+| `vpx ./@scope/tool.ts`                     | script  | Detection runs before `@version` parsing                   |
+| `vpx --import ./setup.ts ./main.ts`        | script  | `./setup.ts` is the value of `--import`                    |
+| `vpx --eval 'console.log(1)'`              | node    | No script token; forwarded with the loader                 |
+| `vpx --eval '…' ./missing.ts`              | node    | After `--eval`, `./missing.ts` is an argument              |
+| `vpx /abs/bin/tool` (`#!/usr/bin/env vpx`) | script  | Shebang guard; otherwise `vpx` would exec itself in a loop |
+| `vpx ./deploy.sh`                          | package | No script extension; runs as a program, without the loader |
+
+## Execution Model
+
+```text
+vpx ./scripts/seed.ts --dry-run
+ ├─ parse vpx options (--tsconfig, -s, -v, -h; -p/-c select package mode)
+ ├─ detect script ── package ──► existing chain: node_modules/.bin → global → PATH → dlx
+ ├─ resolve loader: <project vite-plus>/dist, else <global vite-plus>/dist
+ ├─ env: prepend every node_modules/.bin (cwd → root); set or clear VP_SCRIPT_TSCONFIG
+ └─ core `node` shim dispatch (same runtime selection as `vp node`)
+        └─ execve: node --require <dist/script-preload.cjs> --import <file URL of dist/script-register.js>
+                        [NODE_OPTIONS] ./scripts/seed.ts --dry-run
+```
+
+### Runtime and Process
+
+Script mode hands the argv to the core `node` shim path (`crates/vp_global_cli/src/shim/dispatch.rs`), which `vp node` also uses: project version resolution, `VP_BYPASS`, and inherited runtimes inside `vp run`. In system-first mode it first repeats the shell's PATH lookup, as `vp node` does, and runs the system Node.js found before any Vite+ shim.
+
+On Unix, `exec_tool` replaces the `vpx` process with `node` through `execve`; no parent remains, so no IPC, signal relay, or exit-code translation is needed. On Windows, the `vpx.exe` trampoline starts `vp.exe`, which spawns `node` and waits, as for every shim; exit codes and Ctrl+C follow the existing `node` shim behavior.
+
+### Loader Entries
+
+Two entries in `vite-plus/dist`, passed together:
+
+1. `--require <dist/script-preload.cjs>` (CommonJS, from `packages/cli/src/script-preload.ts`). It runs before any user `--require` or `--import`, so `--require ./setup.ts` preloads work. It checks the Node.js version and exits with a Vite+ error outside `^22.18.0 || ^24.11.0 || >=26.0.0` (the `engines.node` range), loads the native binding through `packages/cli/binding/index.cjs`, calls `setTsconfigPath()` and `setTransformDeps('typescript')`, turns on source maps, installs the pirates CommonJS hook, and on Node.js 22.22.3+, 24.11.1+, and 26 registers the in-thread ESM hooks with `module.registerHooks()`.
+2. `--import <file URL of dist/script-register.js>` (ESM). On older 22.x and 24.x it registers the off-thread hooks (`dist/script-esm-hooks.js`) with `module.register()`, which Node.js 22 cannot call while a `--require` is loading. On every version, an `--import` also routes the entry point through the ESM loader, where the hooks decide each file's module format.
+
+The in-thread hooks start about twice as fast as a hooks thread, and Node.js 25.9+ deprecates `module.register()` (DEP0205). They need nodejs/node#59011 (22.19, 24.5) and nodejs/node#59929 (22.22.3, 24.11.1); tsx switches at the same releases. Upstream oxc-node waits for 26.2 for nodejs/node#62920, which only affects load hooks that return CommonJS source; these hooks do that only when another hook supplied it (see [Known Limitations](#known-limitations)).
+
+### CLI/Loader Contract
+
+The contract is the two flags plus the `VP_SCRIPT_TSCONFIG` environment variable. The global `vp` may be newer or older than the project's `vite-plus`, so it stays stable: new behavior goes into the loader entries, not into new argv. A contract change gets new entry file names, so a `vp` that does not know them falls back to the global loader, as it does for a project too old to ship them. `vpx_script.rs` points readers here for this.
+
+The loader is resolved from the project's `vite-plus` first (`JsExecutor::resolve_local_vite_plus_package_dir`), when its `dist/` has both entries, and from the global install second (`JsExecutor::get_scripts_dir()`), following the global CLI's JS-entry delegation. Teams and CI then run the loader and binding pinned in their lockfile.
+
+### Environment
+
+- Every `node_modules/.bin` from the cwd up is prepended to `PATH` (`prepend_node_modules_bin_to_path`), as for local binaries, so scripts can spawn project tools by name.
+- `--tsconfig <path>` is resolved against the cwd and must exist. `vpx` passes it as `VP_SCRIPT_TSCONFIG` and clears an inherited value when the flag is absent. Without the flag, each file uses the nearest tsconfig that includes it, as tsc does; with it, one config applies to every file in the process, for resolution and transform. The preload passes it to `setTsconfigPath()`, which wins over upstream's `TS_NODE_PROJECT` and `OXC_TSCONFIG_PATH`; without the flag those variables apply as for `oxnode`. A missing file named by them, or a tsconfig that fails to parse, prints a warning instead of being skipped silently. The [guide](../docs/guide/vpx.md#tsconfig) lists the defaults when no tsconfig applies.
+- The loader goes in argv, not `NODE_OPTIONS`: `process.execArgv` carries it into `child_process.fork('./worker.ts')` and `new Worker('./worker.ts')`, while unrelated processes the script spawns (`vp build`, `npm`) do not load it.
+- Other loaders are unsupported. A `NODE_OPTIONS=--import tsx` or a user `--import tsx` registers a second set of hooks, and the result depends on which loader claims each file.
+
+## Project-Local `vpx` Bin
+
+`vite-plus` ships `"vpx": "./bin/vpx"` next to `vp` and `vpr` (`packages/cli/src/vpx-bin.ts`, `vpx-script.ts`). Package managers and `vp run` put `node_modules/.bin` first on `PATH`, so this bin runs in `package.json` scripts. Without it, `"seed": "vpx ./scripts/seed.ts"` would work on a developer machine and fail in CI that only runs `npm i -D vite-plus`; tsx has no such gap, and `vp migrate` can only rewrite `tsx` to `vpx` if the result works wherever `tsx` did.
+
+- **Script mode**: the same detection rules, then Node.js with `['--require', preload, '--import', registerUrl, ...nodeArgs]`. On Unix, the bin execs it in place with `process.execve()`, as the global `vpx` does, so the PID its caller holds, every signal sent to it, and the exit status belong to the script. The new process starts as a spawned child would: the bin restores the default `SIGPIPE` and `SIGXFSZ` dispositions, which Node.js ignores, and blocking stdio, which `process.execve()` leaves non-blocking once Node.js has opened a pipe (nodejs/node#66824).
+- On Windows, and when the bin itself has an IPC channel, as when a tool `fork()`s it, the bin spawns the script instead, since exec would close the channel. It ignores `SIGINT`, which reaches the child through the process group, forwards `SIGTERM` and `SIGHUP`, and exits the way the child did (re-raising its signal on Unix, so callers see `128 + signal`). With an IPC channel, it opens one to the script and relays messages both ways, as tsx does, and exits with the script's code once the script has exited and the channel has closed, whichever side closed it. The global `vpx` passes the channel on through exec. On Windows, only a `fork()` of the bin file carries a channel; a `.cmd` shim cannot.
+- **Package mode never hands off to the global `vpx`**, so delegation stays one-directional: the global CLI delegates to the project's `vite-plus`, never the reverse. An earlier design forwarded to the global `vpx` on `PATH`, and two copies of the local bin on `PATH` spawned each other forever.
+- The nearest `node_modules/.bin/<name>` from the cwd up runs directly, with every `node_modules/.bin` first on `PATH`, like the global CLI. On Unix, the bin execs it in place: directly when it is a native binary or a script whose `#!` interpreter is one, and otherwise through `/bin/sh -c 'exec "$0" "$@"'`, because a failed `process.execve()` aborts most supported Node.js versions and sh reports a file it cannot run as a terminal does. On Windows, `cross-spawn` runs it, including `.cmd` shims. So does an explicit path to an existing executable file (`./deploy.sh`). It does not use `vp exec`, which needs a `package.json` above the cwd and installs the project's runtime first.
+- `pkg@version`, `--package`, `--shell-mode`, and a package directory go to this package's `vp dlx` in-process, by importing `dist/bin.js` with the argv rewritten, as `vpr` does. Only that path loads the CLI bundle and the native binding.
+- Global packages and `PATH` are never searched. A binary that is not installed is an error with a hint (add it to `devDependencies`, or run `vp dlx`), never a download. An installed binary without an executable bit is an error with a hint to reinstall.
+- In both CLIs, an explicit path to a non-executable file, or to a directory without a `package.json`, is an error (`check_explicit_program`, `checkExplicitProgram`) instead of a `vp dlx` failure.
+- `--help` prints the local bin's own help; `--version` prints `vite-plus v<version>`.
+- Both CLIs run the shared case table `vpx_script_cases.json`: detection `cases`, `packageSpecs`, and `explicitPrograms`. A unit test checks that their extension, value-taking-option, and no-entry-option lists are identical.
+
+For a script, the local bin and the global shim resolve the same loader and Node.js; the difference is the local bin's own Node.js startup before it execs the script, about 23–30 ms against the global shim's 5–10 ms ([Performance](#performance)).
+
+## Native Side
+
+oxc-node is vendored the way Rolldown is:
+
+- `packages/tools/.upstream-versions.json` pins `ce22828`, a `main` commit after v0.1.7 that has fixes not yet released. The daily `upgrade-deps` workflow bumps it to the latest stable tag, but only to one that contains the pinned commit, so the pin stays until a release has those fixes.
+- `sync-remote` clones it into the gitignored `oxc-node/` and runs `packages/tools/src/patch-oxc-node.ts`. CI checks it out in the shared clone action and the security workflow and runs the script before any cargo command, because `Cargo.lock` records the rewritten manifest.
+- `patch-oxc-node.ts` only points oxc-node's `oxc` dependency at the workspace version, so the binding links one copy of oxc; the source is not patched. oxc-node's `main` asks for oxc 0.155.0 and builds unchanged with the workspace's 0.154.0, which Rolldown pins.
+- The root `Cargo.toml` adds `oxc-node = { path = "./oxc-node", default-features = false, features = ["yarn_pnp"] }` and excludes `oxc-node/` from the workspace lints. `yarn_pnp` matches the `oxc_resolver` feature the workspace enables, which changes oxc-node's file system signature. Without its `napi` feature, oxc-node links as a plain library with no NAPI exports and no global allocator, so nothing collides with the `transform` export that `rolldown_binding` links.
+- The binding's `oxc-node` feature compiles `packages/cli/binding/src/oxc_node.rs`; `build.ts` enables `rolldown,oxc-node` for every build, so dev builds compile it too, at no extra crate cost.
+
+`oxc_node.rs` forwards what the loader uses under an `oxcNode` namespace: `createResolve`, `load`, `OxcTransformer` (returning a plain `{ source, sourceMap }`), `setTsconfigPath`, `setTransformDeps`, and `transformsDep`. Its `module_exports` hook calls `init_tracing()` (so `OXC_LOG` works; the subscriber stays off otherwise and never replaces `VP_LOG`'s) and `detect_runtime_syntax()` (so `using` stays native on Node.js 24+), which oxc-node's own module hooks do when its `napi` feature is on. An upstream signature change is a compile error in the forwarders. oxc-node's watch reporting (`enable_watch_report`, `take_watch_dependencies`) is not forwarded yet ([#3141](https://github.com/voidzero-dev/vite-plus/issues/3141)).
+
+Issues found during this work were fixed upstream: in v0.1.5 to v0.1.7, including the `napi` feature, `setTsconfigPath()`, `setTransformDeps("typescript")`, and single-transform CommonJS loading, and on `main` since, all the ones found in end-to-end testing against tsx ([oxc-node#835](https://github.com/oxc-project/oxc-node/issues/835), [#837](https://github.com/oxc-project/oxc-node/issues/837), [#839](https://github.com/oxc-project/oxc-node/issues/839) to [#846](https://github.com/oxc-project/oxc-node/issues/846), and [#856](https://github.com/oxc-project/oxc-node/issues/856)), and the one from the final round, [#862](https://github.com/oxc-project/oxc-node/issues/862) (a parent URL ending in `/`, the working directory Node.js resolves the entry point and `--import` against, was resolved as a file). The vendored copy carries no patch. Two oxc transformer issues found in that testing are still open; see [Known Limitations](#known-limitations).
+
+## Loader JavaScript
+
+Files: `packages/cli/src/script-preload.ts`, `script-register.ts`, `script-esm-hooks.ts`, `script-hooks.ts`.
+
+- The entries are adapted from oxc-node's `register.mjs` and `esm.mjs`, using `oxcNode` from the binding. `script-preload.ts` has its own tsdown block: one CommonJS file with `import.meta.url` shimmed and the binding never bundled. `pirates` is a devDependency bundled into `dist`. The off-thread hooks `require()` the binding; importing it would make the hooks thread translate the CommonJS binding for ESM (5–13 ms).
+- **Helper mapping.** Lowered code imports runtime helpers. The loader passes oxc-node its own helper module name, `vite-plus:oxc-node`, so it redirects only helpers these hooks emitted, and maps `vite-plus:oxc-node/helpers/<name>` to `@oxc-project/runtime/helpers/<name>`, resolved from `vite-plus` itself: `nextResolve(helper, { parentURL: <vite-plus dist URL> })`. `@oxc-project/runtime` is a dependency of `vite-plus`, so it resolves under strict layouts such as pnpm; `upgrade-deps` keeps its catalog pin at the latest oxc release, never older than the oxc version the binding transforms with, so every helper the transformer emits exists.
+- **CommonJS `require` of helpers.** Output without `import`/`export` loads helpers with `require("vite-plus:oxc-node/helpers/…")`, which never reaches the off-thread hooks, while the `registerHooks()` resolve hook passes every `require()` on unchanged to Node.js' CommonJS resolution, which resolves from the requiring file and ignores a `parentURL`. The preload wraps `Module._resolveFilename`, which both go through, to resolve those specifiers from `vite-plus`, as upstream's `register.mjs` does, so a project without `@oxc-project/runtime` (pnpm, or a script outside any project) still finds them.
+- `require()` requests (no `importAttributes` in the context) stay on Node.js resolution and the pirates hook. The in-thread load hook returns a null source for a CommonJS file oxc-node left to the CommonJS loader, so `require()` inside it works on every runtime.
+- The CommonJS hook gives oxc-node's error for `require()` of an ES module with top-level await Node.js's `ERR_REQUIRE_ASYNC_MODULE` code, which the binding cannot set, as upstream's `register.mjs` does.
+- `setTransformDeps('typescript')` transforms `.ts .mts .cts .tsx` under `node_modules`, which Node.js refuses to strip, and leaves other dependencies as published; `transformsDep()` gives the pirates matcher the same answer. `OXC_TRANSFORM_ALL` has no effect under `vpx`.
+- Source maps are on for `node_modules` too (`setSourceMapsSupport(true, { nodeModules: true, generatedCode: true })`), as tsx and upstream do, so stack traces in transformed dependencies point at their source. Node.js then reads the `.map` of every dependency that has one.
+
+## Comparison with tsx
+
+| Capability                     | tsx 4.23                                              | `vpx`                                                                                                                              | Node.js type stripping |
+| ------------------------------ | ----------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------- | ---------------------- |
+| `.tsx` / `.jsx`                | ✓ (classic runtime by default)                        | ✓ (automatic runtime by default; classic via tsconfig or pragma)                                                                   | ✗                      |
+| Enums, namespaces, param props | ✓                                                     | ✓                                                                                                                                  | ✗                      |
+| Legacy decorators              | ✓                                                     | ✓, plus `emitDecoratorMetadata`                                                                                                    | ✗                      |
+| TC39 decorators, `accessor`    | ✓ (esbuild lowers)                                    | ✗ (decorators: clear error)                                                                                                        | ✗                      |
+| `SIGINT` / `SIGTERM`           | Exit code 130 / 143, `exit` handlers run              | The signal ends the process, as in Node.js                                                                                         | Same as `vpx`          |
+| tsconfig `paths`               | ✓                                                     | ✓ for `import`; not for `require()`                                                                                                | ✗                      |
+| tsconfig selection             | One per process, from the cwd; `paths` for every file | Nearest config that includes the file (tsc rules); a file no config includes gets default options and the nearest config's `paths` | n/a                    |
+| `.js` → `.ts`, extensionless   | ✓                                                     | ✓ for `import`; not for `require()`                                                                                                | ✗                      |
+| `require()` of `.ts`, interop  | ✓ (compiles ESM to CJS if needed)                     | ✓ (`.cts` with ESM syntax is an error)                                                                                             | Partial                |
+| TypeScript in `node_modules`   | ✓                                                     | ✓                                                                                                                                  | ✗                      |
+| Class fields, `using`          | Lowered to `target`                                   | Native unless `[[Set]]` fields or legacy decorators; `using` lowered on 22.x                                                       | Native                 |
+| Watch                          | `tsx watch` (chokidar)                                | Node.js `--watch`                                                                                                                  | `--watch`              |
+| TypeScript REPL / `-e`         | ✓                                                     | ✗                                                                                                                                  | Erasable syntax only   |
+| Transform cache                | On disk, about 8 days                                 | None ([Performance](#performance))                                                                                                 | n/a                    |
+
+## Known Limitations
+
+- `require()` uses Node.js' CommonJS resolution, as upstream: it applies no tsconfig `paths` and does not map `.js` to `.ts`. tsx does both.
+- A `.ts` or `.js` file with `import`, `export`, or `import.meta` in a package without `"type"` runs as an ES module, as in Node.js, so `__filename`, `__dirname`, and `require` are undefined. tsx compiles it to CommonJS.
+- `SIGINT` and `SIGTERM` end the script as they end Node.js. tsx turns them into exit codes 130 and 143 and runs `exit` handlers first.
+- On the off-thread releases (22.18 to 22.22.2, 24.11.0), a `--require` preload also runs in the `module.register()` hooks thread, so it runs twice. tsx has the same behavior.
+- On the off-thread releases, starting the hooks thread makes Node.js open stdout and stderr, which sets a pipe non-blocking, so `fs.writeSync(1, …)` to a slow reader can fail with `EAGAIN`. `process.stdout.write()` is not affected. tsx has the same behavior.
+- A `--require` or `--import` in `NODE_OPTIONS` also runs in the local bin's own Node.js before it execs the script, so it runs twice, as under the `tsx` CLI. The global `vpx` runs it once.
+- `vpx --watch` is Node.js watch mode: it restarts on imported files, not on a tsconfig edit or a file created after the first run, which tsx watch misses too ([#3141](https://github.com/voidzero-dev/vite-plus/issues/3141)).
+- On in-thread releases without nodejs/node#62920 (22.22.3+, 24.11.1 to 24.17, 26.0, 26.1), `require()` inside a CommonJS module whose source another load hook supplied can fail. That needs a second loader, which is unsupported.
+- When a tool `fork()`s the local bin, the bin spawns the script and ignores `SIGINT`, so `kill -INT <bin pid>` does not stop the script; Ctrl+C does, through the process group. Forwarding it would deliver Ctrl+C twice; tsx avoids that with its own IPC channel.
+- On Windows, the local bin runs a `.cmd` binary from `node_modules/.bin` through `cmd.exe`, so Ctrl+C there can end with the "Terminate batch job (Y/N)?" prompt. The global `vpx` avoids it by running the binary's `.ps1` sibling, when one exists and stdin is a terminal.
+- A tsconfig `module` of `node16`, `node18`, or `nodenext` makes `.ts` and `.tsx` files ES modules even without `"type": "module"`, as upstream does; `tsc` and tsx follow `package.json` `"type"`.
+- A `.cts` file with `import`/`export` fails with one error on every load path, suggesting `.mts` or `import x = require()` / `export =`. tsc and tsx compile it to CommonJS, which needs an ESM-to-CommonJS transform oxc lacks.
+- An extensionless `#!/usr/bin/env vpx` file runs as JavaScript, because oxc-node picks the parser by extension; its syntax decides its module kind, as in Node.js. Shebang scripts keep their `.ts` extension. Options in a shebang need `#!/usr/bin/env -S vpx --tsconfig …`.
+
+These oxc transformer issues found in end-to-end testing against tsx are still open:
+
+| Issue                                                        | Effect under `vpx`                                                                         |
+| ------------------------------------------------------------ | ------------------------------------------------------------------------------------------ |
+| [oxc#27741](https://github.com/oxc-project/oxc/issues/27741) | `accessor` fields are not lowered, so Node.js rejects them                                 |
+| [oxc#27742](https://github.com/oxc-project/oxc/issues/27742) | Legacy decorators on static members run before those on later instance members, unlike tsc |
+
+## Errors
+
+```bash
+$ vpx ./scripts/missing.ts
+error: vpx: Script not found: ./scripts/missing.ts
+
+$ vpx -p cowsay ./a.ts
+error: vpx: --package cannot be used when running a script
+
+$ vpx --tsconfig x.json eslint .
+error: vpx: --tsconfig can only be used when running a script
+
+$ vpx ./a.ts          # engines.node pins 20.18.0
+error: Running scripts with vpx requires Node.js ^22.18.0 || ^24.11.0 || >=26.0.0 (current: v20.18.0)
+```
+
+Other errors, including transform errors, come from Node.js and oxc-node unchanged; source maps point stack traces at the TypeScript source.
+
+## Design Decisions
+
+1. **Extend `vpx`; leave `vp node` as plain Node.js.** `vpx ./a.ts` reads like `npx tsx ./a.ts`, the shebang is short and already on `PATH`, and `vp node` stays the escape hatch for exact Node.js semantics.
+2. **oxc-node** covers the syntax and resolution scripts rely on, shares Oxc with the rest of the toolchain, and is maintained in the same organization. See [Alternatives](#alternatives-considered).
+3. **Exec Node.js in place.** The global shim is native, so it can `execve` after runtime resolution: `node`'s exact exit codes, signals, and TTY handling, no IPC, one Node.js startup saved. The local bin execs too on Unix (`process.execve()`), so a caller holding its PID holds the script's; it spawns only on Windows and when it has an IPC channel to relay.
+4. **Vite+-owned loader entries** instead of `--import @oxc-node/core/register`: one place for the version check, helper mapping, and binding loading; the oxc-node version follows the pinned `vite-plus`; the hooks can change without changing the CLI contract; and the entries can later become a public `node --import vite-plus/register`. Why two entries: [Loader Entries](#loader-entries).
+5. **Loader in argv, not `NODE_OPTIONS`**, so `fork()` and workers inherit it and unrelated processes do not; tsx does the same.
+6. **Explicit paths and bare TypeScript names never download.** `vpx ./sed.ts` must report a missing file, not run remote code under an unexpected name.
+7. **Loader from the project first, global second**, as the global CLI already delegates JS entries; teams run the pinned `vite-plus`, at the cost of the version-skew contract.
+8. **A project-local `vpx` bin**, so `package.json` scripts work without the global CLI ([Project-Local `vpx` Bin](#project-local-vpx-bin)).
+9. **Compile oxc-node into the binding** rather than depend on `@oxc-node/core`. The binding already links the same crates through `rolldown_binding` (oxc-node is about 3,600 lines of glue), so no new platform packages and one oxc version for the whole toolchain. Cost: a new oxc-node tag must compile against the workspace's oxc, and a forwarded signature change needs a matching change in `oxc_node.rs`; either fails the build loudly, and a tag that needs a newer oxc than Rolldown's keeps the daily upgrade PR failing until Rolldown catches up.
+10. **Script mode requires the `engines.node` range**, not everything with `module.register()`; Node.js 20 is end of life.
+11. **JavaScript files get the loader too**, so `.js` can import `.ts`.
+12. **No experimental label.** The vendored copy is pinned to a known commit and covered by Vite+'s own tests.
+
+## Alternatives Considered
+
+| Alternative                                        | Why not                                                                                                                                    |
+| -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------ |
+| Node.js type stripping only                        | No enums, decorators, JSX, `paths`, or `.js` → `.ts`; adds nothing over `vp node`                                                          |
+| Bundle tsx                                         | esbuild as a second transformer in an Oxc toolchain; two processes and a signal relay; runs on whatever Node.js starts it                  |
+| Pre-bundle with Rolldown                           | Changes `import.meta.url` and `__dirname`, breaks computed dynamic imports, writes temp files                                              |
+| Depend on `@oxc-node/core` from npm                | A second native addon with its own 17-target matrix (about 4 MB each); helper mapping still needed; oxc version floats independently       |
+| Use the `oxnode` CLI                               | Spawns `node` from `PATH`, ignoring the managed runtime, and stays as a parent process that relays signals                                 |
+| Reimplement the hooks in TypeScript on the binding | Reimplements format detection, ESM-in-CommonJS re-parse, JSON modules, and Windows file URLs that oxc-node tests; more NAPI calls per file |
+
+## Testing
+
+- Unit tests in `vpx_script.rs`, `vpx.rs`, and `packages/cli/src/__tests__/vpx-script.spec.ts` run the shared case table, check that the Rust and TypeScript lists match, and cover the local bin's package-mode decision and which binaries it execs without `/bin/sh` (`canExecDirectly`), the loader fallback to the global install and its real path, the Node.js range (equal to `engines.node`), the sync-hooks cutoff, and the helper mapping. `patch-oxc-node.spec.ts`, `sync-remote-deps.spec.ts`, and `toolchain.spec.ts` cover the vendoring.
+- Snapshot fixtures under `crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/` run in both flavors, except one local-only case for a binary that is not installed, and the global shim and the local bin record identical snapshots. `command_vpx_script` pins Node.js 22.18.0 (the `module.register()` path) and covers syntax, resolution and `--tsconfig`, arguments and Node.js options, errors, module formats with `fork()`, `Worker`, and `--test`, TypeScript dependencies, tsconfig-driven transforms and JSX, shebangs, `--watch`, IPC, and signals sent to the PID of `vpx` (Unix), file names with `#` and `%`, and package mode. `command_vpx_script_node22` (22.23.2), `_node24` (24.12.0), and `_node26` (26.5.0) cover the `registerHooks()` path, including CommonJS output that requires runtime helpers the project cannot resolve; `_old_node` (20.18.0) covers the version error. `shim_system_first_fallback` checks that script mode follows `vp node` in system-first mode. Windows runs every case except watch mode, shebangs, IPC, and signals, which a `.cmd` shim cannot carry, and runs its own installed-binary case with a `.cmd` binary.
+
+## Performance
+
+Startup against tsx 4.23.15 on an Apple M4 Pro, median of 20 runs; `bench/vpx-script.ts --vpx <path>` generates the scenarios and the numbers. Scenarios: `hello` (one erasable `.ts` file), `esm-app` and `cjs-app` (an entry importing 300 modules with an enum, a class field, and a parameter property, in a `"type": "module"` package and in one without `"type"`), `large-cjs` and `large-esm` (one 1.8 MB `.ts` file in each package kind). "No cache" sets `TSX_DISABLE_CACHE=1`.
+
+Each cell is `vpx` / tsx with a warm cache / tsx without a cache, in ms. The global `vpx` runs as one process, so it is compared with `node --import tsx`:
+
+| Scenario    |   Node.js 22.18 |  Node.js 24.12 |   Node.js 26.5 |
+| ----------- | --------------: | -------------: | -------------: |
+| `hello`     |    51 / 68 / 75 |   34 / 46 / 63 |   37 / 38 / 61 |
+| `esm-app`   |  94 / 124 / 141 |  75 / 94 / 217 |  77 / 92 / 216 |
+| `cjs-app`   |  94 / 143 / 289 | 75 / 116 / 261 | 77 / 113 / 257 |
+| `large-cjs` | 121 / 122 / 229 | 100 / 90 / 273 |  93 / 76 / 258 |
+| `large-esm` | 103 / 107 / 200 |  84 / 75 / 177 |  86 / 69 / 173 |
+
+The project-local `vpx`, which `package.json` scripts run, starts its own Node.js before it execs the script, as the `tsx` CLI starts a parent process, so it is compared with the `tsx` CLI:
+
+| Scenario    |   Node.js 22.18 |   Node.js 24.12 |    Node.js 26.5 |
+| ----------- | --------------: | --------------: | --------------: |
+| `hello`     |  66 / 103 / 110 |    52 / 83 / 96 |    57 / 72 / 94 |
+| `esm-app`   | 113 / 165 / 177 |  93 / 134 / 250 |  98 / 134 / 249 |
+| `cjs-app`   | 112 / 184 / 327 |  93 / 155 / 296 |  99 / 155 / 291 |
+| `large-cjs` | 139 / 155 / 265 | 118 / 122 / 305 | 113 / 111 / 294 |
+| `large-esm` | 122 / 139 / 232 | 103 / 108 / 210 | 107 / 104 / 206 |
+
+- The global shim's startup, Node.js resolution, and loader lookup take 5–10 ms, usually 8. The local bin's own Node.js startup adds 23–30 ms before it execs the script, against 32–42 ms for the `tsx` CLI's parent process. Exec in place keeps startup within 2 ms of spawning the script; it saves the second process, not time.
+- On `hello`, `esm-app`, and `cjs-app`, `vpx` beats tsx's warm cache on every version: by 4–36% through the global shim and 22–40% through the local bin.
+- Without tsx's cache, `vpx` takes 33–71% less time everywhere.
+- tsx's cache wins only on the 1.8 MB files through the global shim on 24.12 and 26.5, by 9–17 ms, because `vpx` transforms them on every run; a persistent transform cache would only help such files. Against the `tsx` CLI, the local bin is faster or level.
+- On `hello`, the loader alone beats plain `node` type stripping on every version (26–41 against 44–48 ms). With the shim, the global `vpx` is 3 ms slower on 22.18 and 10–11 ms faster on 24.12 and 26.5.
+- Compiling oxc-node into the binding adds about 150 KB (0.3%) to the release `libvite_plus_cli.dylib` on macOS arm64, against about 4.2 MB for a separate `@oxc-node/core` platform package; its load cost is within the noise above.
+
+## Security Considerations
+
+1. **No remote fallback for files**: explicit paths, and bare names with TypeScript extensions, never reach `vp dlx`.
+2. **Trusted loader**: the hooks are compiled into the `vite-plus` binding and its `dist`; runtime helpers resolve from `vite-plus`'s own `@oxc-project/runtime`, never from the project's `node_modules`.
+3. **Shebang recursion guard** for extensionless `#!/usr/bin/env vpx` files.
+4. **Project code provides the loader**, and every `node_modules/.bin` is prepended to `PATH`: the trust model `vp` already uses when it delegates to a project-local `vite-plus`.
+5. **No new environment surface**: `VP_SCRIPT_TSCONFIG` is set only with `--tsconfig` (and cleared otherwise) and reaches oxc-node through `setTsconfigPath()`, not through `TS_NODE_PROJECT` or `OXC_TSCONFIG_PATH`, which other tools read.
+
+## Backward Compatibility
+
+Package mode through the global `vpx` is unchanged. What changes:
+
+- `vpx <existing file with a script extension>` runs the file. Previously an executable file with a shebang was exec'd through the `PATH` lookup, and a non-executable file fell through to `vp dlx`, which failed. A bare name matching both a file and a package (`vpx highlight.js` with `./highlight.js` present) runs the file.
+- A first token starting with `-` runs Node.js. Previously it reached `vp dlx` as the package name and never ran a package; `vpx --version` printed the package manager's version.
+- An explicit path to a non-executable file, or to a directory without a `package.json`, fails with a `vpx` error instead of a package manager error from `vp dlx`.
+- `vite-plus` gains a `vpx` bin. A project with a different `vpx` in `node_modules/.bin` (the npm `vpx` package is a 0.0.1 placeholder without a bin) would see a bin conflict warning.
+- In `package.json` scripts and `vp run`, that bin shadows the global shim: `vpx <name>` runs only binaries in `node_modules/.bin`. A name found only in global packages or on `PATH` fails with a hint, and a name found nowhere fails instead of being downloaded; `pkg@version`, `--package`, and `--shell-mode` still download. `vpx --version` there prints `vite-plus v<version>`.
+- `vite-plus` gains `@oxc-project/runtime` (pure JavaScript) as a dependency; `pirates` is bundled. No new platform packages.
+
+## Open Items
+
+- Windows Ctrl+C through the `vp.exe` spawn-and-wait path is not verified.
+
+## Future Enhancements
+
+- **`vp migrate` support**: rewrite `tsx` invocations in `package.json` scripts to `vpx`, only when the project's Node.js satisfies the script-mode range and for the cases under "Coming from tsx" in the guide, and remove the devDependency. `ts-node` (which type-checks by default), `esno`, and `jiti` need their own rules.
+- **Public loader entry**: `node --import vite-plus/register ./a.ts`, for tools that must start `node` themselves.
+- **TypeScript eval and REPL**, once oxc-node transforms eval input.
+- **Watch** ([#3141](https://github.com/voidzero-dev/vite-plus/issues/3141)): forward oxc-node's watch reporting so `vpx --watch` restarts on tsconfig edits and new files, and add `vpx watch` on oxc-node's watcher (include and exclude globs, screen clearing, rerun on Enter, polling) once [oxc-node#871](https://github.com/oxc-project/oxc-node/issues/871) lets an embedder run it with its own loader.
+- **Opt-in transform cache**, keyed like tsx's.
+- **Programmatic API**: a `tsImport()` equivalent exported from `vite-plus`.
+
+## References
+
+- tsx source (v4.23.15): https://github.com/privatenumber/tsx/tree/v4.23.15/src; docs: https://tsx.is
+- oxc-node source: https://github.com/oxc-project/oxc-node (`packages/core/register.mjs`, `packages/core/esm.mjs`, `src/lib.rs`); docs: https://oxc.rs/docs/guide/usage/oxc-node.html
+- Rolldown vendoring in this repository: `packages/tools/src/sync-remote-deps.ts`, `packages/tools/.upstream-versions.json`, `packages/cli/BUNDLING.md`
+- Node.js TypeScript support: https://nodejs.org/api/typescript.html; module customization hooks: https://nodejs.org/api/module.html#customization-hooks
diff --git a/tsconfig.json b/tsconfig.json
index 10c3bbddff..aad1e3b8a3 100644
--- a/tsconfig.json
+++ b/tsconfig.json
@@ -23,6 +23,7 @@
     "packages/core/build.ts",
     "vite",
     "rolldown",
+    "oxc-node",
     "target"
   ]
 }
diff --git a/vite.config.ts b/vite.config.ts
index f25b997d27..aa15207bb2 100644
--- a/vite.config.ts
+++ b/vite.config.ts
@@ -77,6 +77,7 @@ export default defineConfig({
       './ecosystem-ci/**',
       './vite/**',
       './rolldown/**',
+      './oxc-node/**',
       '**/node_modules/**',
       // PTY snapshot fixtures; also excluded in lint/fmt here and tsconfig.json
       'crates/vp_cli_snapshots/tests/cli_snapshots/fixtures/**',