Summary

Three intertwined improvements landing together because they share the same shell layer rewrite:

1. @vlandoss/clibuddy (minor, breaking pre-1.0): replace zx with tinyexec. New ShellService API:

   • run(cmd, args, opts?) — verbose, streams stdio, prints $ <cmd> <args> prefix.
   • runCaptured(cmd, args, opts?) — silent, returns Output { stdout, stderr, exitCode }.
   • Both throw NonZeroExitError on non-zero exit by default; opt out with { throwOnError: false }.
   • at(cwd) / child(opts) for inherited config.
   • New resolvePackageBin(pkg, { from, binName? }) async helper that finds an installed package's bin even when exports is restrictive (oxlint) or absent (@biomejs/biome). Built on pkg-types (already a dep) + a one-line fallback for packages without main/exports. Memoised per (pkg, from, binName) via memoize (new dep, version aligned with run-run).
   • isNonZeroExitError replaces isProcessOutput.
   • Removed: $\...`template-literal API,quote/isRaw/defaultQuote, getPreferLocal/localBaseBinPath, mute()/quiet(), ./test-helpers` export.
   • tinyexec auto-prepends every parent node_modules/.bin to PATH, so localBaseBinPath is no longer needed.

2. @vlandoss/run-run (patch):

   • ToolService now carries bin resolution via constructor metadata: subclasses declare { pkg, bin?, ui } and the base provides a concrete getBinDir() that calls resolvePackageBin. Each subclass (biome, oxlint, oxfmt, tsdown, tsc) is just a super(...) plus its tool-specific operations — no per-subclass override getBinDir. The absolute path bypasses the node_modules/.bin/<bin> shims that run-run itself publishes (tools/biome etc.), which would otherwise loop back through rr tools <bin> indefinitely.
   • ToolService.exec accepts only string[]. tscheck runs pretsc/pretypecheck with shell: true so they can use &&, pipes, env-var substitution.
   • Bump tsdown 0.21.10 → 0.22.0. 0.21.x pulled in a broken unrun@0.2.38 tarball (missing dist/) producing WARN Failed to create bin … unrun on every install; 0.22 dropped the dep entirely.
   • End-user CLI behaviour unchanged.

3. @vlandoss/vland (minor): vland init prompts (default-yes) for installing dependencies and initialising git when --install/--no-install/--git/--no-git aren't passed. Non-interactive defaults: both true. Also: the git-commit-failure (pathspec 'initial' did not match) caused by the old custom quote() not wrapping whitespace strings is gone — array-based exec makes each token survive. The pnpm install spinner is now silent (was leaking deprecation + ENOENT warnings). Project-name prompt placeholder and outro pnpm <script> line are template-aware (my-lib + pnpm test for library; my-api + pnpm dev for backend; my-mono + pnpm dev for monorepo).

Tests reorganised

• Dropped clibuddy/test-helpers (the zx mock). e2e is the strategy now.
• run-run integration suite split into one file per command: cli, jsc, lint, format, tsc, build-lib. Each spawns the real rr binary against a temp fixture (makeFixture helper) and asserts on observable output.
• vland init split similarly: init-templates, init-git, init-install.

Test plan

• pnpm test — 23 tests across all integration suites
• pnpm test:types — 4/4 packages clean
• Manual smoke from packages/vland: rr jsc, rr lint, rr format, rr tsc all exit 0 with each flag separated in the verbose trace
• Manual smoke: vland init my-app -t library --git --no-install produces a single chore: initial commit from vland; vland init --git (with install) shows clean spinner with no pnpm leak
• Confirmed unrun ENOENT and DEP0169 warnings are gone after tsdown bump
• CI green
• Bot opens the Version PR with the expected bumps:
  • @vlandoss/clibuddy 0.5.0 → 0.6.0 (minor, breaking pre-1.0)
  • @vlandoss/vland 0.1.1 → 0.2.0 (minor)
  • @vlandoss/run-run 0.5.2 → 0.5.3 (patch)

🤖 Generated with Claude Code