toolfactory 0.1.2 → 0.2.0

package/src/surfaces/hermes-native.ts

@@ -25,8 +25,6 @@
  * support. The fake-ctx test gets the same behavioural coverage with no Hermes import at all.
  */
 import { join } from "node:path";
-import { stringify as toml } from "smol-toml";
-import { stringify as yaml } from "yaml";
 import { KERNEL_DIR } from "../bindings/typescript.js";
 import { projectName } from "../identity/name.js";
 import { isPortable, type Operation, type Project, type Surface, type Verdict } from "../model.js";
@@ -72,6 +70,8 @@ export function hermesInstall(): string {
 }
 
 const HEADER = "# Generated by toolfactory. Do not edit; run `toolfactory build` to regenerate.\n";
+const INIT_BEGIN = "# tf:init";
+const INIT_END = "# /tf:init";
 
 /**
  * The plugin package. It is a sibling of the author's own package rather than part of it: a
@@ -251,7 +251,7 @@ def test_register_adds_every_declared_tool() -> None:
 `;
 }
 
-function manifest(project: Project, operations: Operation[]): string {
+function manifest(project: Project, operations: Operation[]): Record<string, unknown> {
   const { identity } = project;
   const { required, optional } = envDeclarations(project);
   const shim = project.tool.binding !== "python";
@@ -278,10 +278,10 @@ function manifest(project: Project, operations: Operation[]): string {
     optional_env: optional.length ? optional : undefined,
     python_dependencies: core ? [core] : undefined,
   });
-  return `${HEADER}${yaml(document)}`;
+  return document as Record<string, unknown>;
 }
 
-function pyproject(project: Project): string {
+function pyproject(project: Project): Record<string, unknown> {
   const core = pinnedCore(project) ?? pypiName(project);
   const python = project.tool.binding === "python";
   const document = compact({
@@ -306,7 +306,7 @@ function pyproject(project: Project): string {
         : undefined,
     }),
   });
-  return `${toml(document)}\n`;
+  return document as Record<string, unknown>;
 }
 
 /** isort order: plain `import` before `from`, alphabetical within each. */
@@ -406,7 +406,7 @@ def _handler(name: str) -> Callable[..., str]:
   };
 }
 
-function initPy(project: Project, operations: Operation[]): string {
+function initRegion(project: Project, operations: Operation[]): string {
   const core = project.tool.binding === "python" ? pythonCore(project) : typescriptCore(project);
   const names = envDeclarations(project).required.map((entry) => entry.name);
   return `${HEADER}"""Hermes plugin for ${project.identity.name}, registered through PluginContext.
@@ -434,7 +434,7 @@ def _ready() -> bool:
 ${core.body}
 
 
-def register(ctx: Any) -> None:
+def _register_generated(ctx: Any) -> None:
     # Hermes' own per-plugin data directory, through the variable every host uses.
     os.environ.setdefault(${JSON.stringify(dataDirEnvName(project))}, str(ctx.state.data_dir))
     for schema in TOOLS:
@@ -447,6 +447,21 @@ def register(ctx: Any) -> None:
             requires_env=list(REQUIRES_ENV),
             description=schema["description"],
         )
+
+
+def register(ctx: Any) -> None:
+    _register_generated(ctx)
+    register_native(ctx)
+`;
+}
+
+function initTemplate(): string {
+  return `${INIT_BEGIN}${INIT_END}
+
+
+# Yours: use the full PluginContext here. This hook runs after Toolfactory's generated tools.
+def register_native(ctx: Any) -> None:
+    pass
 `;
 }
 
@@ -552,9 +567,24 @@ export const surface: Surface = {
     const operations = includedOperations(project, surface);
     const dir = pluginDir(project);
     return [
-      { kind: "file", path: `${dir}/plugin.yaml`, content: manifest(project, operations) },
-      { kind: "file", path: `${dir}/__init__.py`, content: initPy(project, operations) },
-      { kind: "file", path: `${HOST_DIR}/pyproject.toml`, content: pyproject(project) },
+      {
+        kind: "merge",
+        path: `${dir}/plugin.yaml`,
+        format: "yaml",
+        patch: manifest(project, operations),
+      },
+      {
+        kind: "region",
+        path: `${dir}/__init__.py`,
+        regions: [{ begin: INIT_BEGIN, end: INIT_END, content: initRegion(project, operations) }],
+        template: initTemplate(),
+      },
+      {
+        kind: "merge",
+        path: `${HOST_DIR}/pyproject.toml`,
+        format: "toml",
+        patch: pyproject(project),
+      },
       { kind: "file", path: `${HOST_DIR}/README.md`, content: readme(project, operations) },
       {
         kind: "file",

package/src/surfaces/mcp-registry.test.ts

@@ -65,6 +65,13 @@ describe("mcp-registry Dockerfile", () => {
 
     const py = files(project({ tool: { ...project().tool, binding: "python" } }));
     expect(py.Dockerfile).toContain('ENTRYPOINT ["python","-m","hello.toolfactory.mcp"]');
+    expect(py.Dockerfile).toContain("COPY . .\nRUN uv sync --no-dev");
+    expect(py.Dockerfile).not.toContain("COPY pyproject.toml ./");
+    expect(py.Dockerfile).toContain(
+      'for path in README README.md README.rst LICENSE LICENSE.md LICENSE.txt NOTICE NOTICE.md NOTICE.txt; do if [ -f "$path" ]; then cp "$path" /app/runtime/; fi; done',
+    );
+    expect(py.Dockerfile).toContain("COPY --from=build /app/runtime/ ./");
+    expect(py.Dockerfile).not.toContain("COPY --from=build /app .");
 
     const pythonWeb = files(
       project({
@@ -74,6 +81,19 @@ describe("mcp-registry Dockerfile", () => {
     expect(pythonWeb.Dockerfile).toContain("FROM node:24-alpine AS web");
     expect(pythonWeb.Dockerfile).toContain("COPY --from=web /app/web/dist ./src/hello/web");
   });
+
+  it("ships an author-extensible Docker ignore region without excluding source metadata", () => {
+    const ignore = surface.plan(project()).find((file) => file.path === ".dockerignore");
+    if (ignore?.kind !== "region") throw new Error("expected a Docker ignore region");
+    expect(ignore.template).toContain("# tf:dockerignore\n# /tf:dockerignore");
+    expect(ignore.regions[0]?.content).toContain(".git/");
+    expect(ignore.regions[0]?.content).toContain(".env.*");
+    expect(ignore.regions[0]?.content).toContain("!.env.example");
+    expect(ignore.regions[0]?.content).toContain("**/node_modules/");
+    expect(ignore.regions[0]?.content).toContain("**/.venv/");
+    expect(ignore.regions[0]?.content).not.toContain("README");
+    expect(ignore.regions[0]?.content).not.toContain("web/");
+  });
 });
 
 describe("mcp-registry server.json oci package", () => {

package/src/surfaces/mcp-registry.ts

@@ -6,7 +6,7 @@
 import { pythonPackage } from "../bindings/python.js";
 import { KERNEL_DIR } from "../bindings/typescript.js";
 import { githubOwner, projectName } from "../identity/name.js";
-import type { Project, Surface } from "../model.js";
+import type { PlannedFile, Project, Surface } from "../model.js";
 import {
   compact,
   configProperties,
@@ -88,6 +88,44 @@ const DOCKER_PACKAGE_MANAGERS: Record<
   },
 };
 
+const DOCKERIGNORE_BEGIN = "# tf:dockerignore";
+const DOCKERIGNORE_END = "# /tf:dockerignore";
+
+/** Build context hygiene is generated, while the rest of `.dockerignore` stays author-owned. */
+function dockerignore(): PlannedFile {
+  return {
+    kind: "region",
+    path: ".dockerignore",
+    regions: [
+      {
+        begin: DOCKERIGNORE_BEGIN,
+        end: DOCKERIGNORE_END,
+        content: `
+.git/
+.env
+.env.*
+!.env.example
+node_modules/
+**/node_modules/
+.venv/
+**/.venv/
+dist/
+coverage/
+test-results/
+playwright-report/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+__pycache__/
+**/__pycache__/
+.vscode-test/
+`,
+      },
+    ],
+    template: `${DOCKERIGNORE_BEGIN}\n${DOCKERIGNORE_END}\n\n# Add local build inputs to exclude below.\n`,
+  };
+}
+
 /**
  * The root `Dockerfile`, stdio only (§4.1: no `--host` flag exists to bind past loopback), one
  * multi-stage build per binding. `label` is `server.json`'s own `name`, byte for byte — the MCP
@@ -110,16 +148,17 @@ RUN npm -C web run build
     : ""
 }FROM ${UV_IMAGE} AS build
 WORKDIR /app
-COPY pyproject.toml ./
-COPY src ./src
-RUN uv sync --no-dev
+# pyproject metadata can name README, license, and other package assets; copy the project without
+# assuming optional metadata files exist.
+COPY . .
+${web ? "COPY --from=web /app/web/dist ./web/dist\n" : ""}RUN uv sync --no-dev
+RUN mkdir /app/runtime && cp pyproject.toml /app/runtime/ && cp -R src /app/runtime/src && for path in README README.md README.rst LICENSE LICENSE.md LICENSE.txt NOTICE NOTICE.md NOTICE.txt; do if [ -f "$path" ]; then cp "$path" /app/runtime/; fi; done
 
 FROM ${PYTHON_IMAGE}
 LABEL io.modelcontextprotocol.server.name="${label}"
 WORKDIR /app
 COPY --from=build /app/.venv ./.venv
-COPY --from=build /app/src ./src
-COPY --from=build /app/pyproject.toml ./
+COPY --from=build /app/runtime/ ./
 ${
   web
     ? `COPY --from=web /app/web/dist ./src/${pythonPackage(project)}/${WEB_DIR}
@@ -203,6 +242,7 @@ export const surface: Surface = {
     return [
       { kind: "file", path: "server.json", content: json(server) },
       { kind: "file", path: "Dockerfile", content: dockerfileTemplate(project, name) },
+      dockerignore(),
     ];
   },
 };

package/src/surfaces/openclaw-native.test.ts

@@ -1,7 +1,11 @@
 import { execFileSync } from "node:child_process";
+import { mkdtempSync, readFileSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
 import { describe, expect, it } from "vitest";
 import { scaffoldDrift } from "../hosts/openclaw.js";
 import type { Operation, Project } from "../model.js";
+import { apply } from "../project/apply.js";
 import { computeCoverage, renderCoverageMarkdown } from "../report/coverage.js";
 import { HOST_DIR, OPENCLAW_ADDITIONS, OPENCLAW_SCAFFOLD, surface } from "./openclaw-native.js";
 
@@ -82,6 +86,39 @@ function emitted(target: Project): Record<string, string> {
 }
 
 describe("openclaw-native", () => {
+  it("keeps hand-authored package and manifest extensions through regeneration", () => {
+    const root = mkdtempSync(join(tmpdir(), "toolfactory-openclaw-"));
+    const target = { ...project(), root };
+    apply(root, surface.plan(target), "0.1.0");
+    const packagePath = join(root, HOST_DIR, "package.json");
+    const manifestPath = join(root, HOST_DIR, "openclaw.plugin.json");
+    writeFileSync(
+      packagePath,
+      JSON.stringify({
+        ...JSON.parse(readFileSync(packagePath, "utf8")),
+        scripts: { custom: "node custom.mjs" },
+        exports: { "./native": "./src/native.ts" },
+      }),
+    );
+    writeFileSync(
+      manifestPath,
+      JSON.stringify({
+        ...JSON.parse(readFileSync(manifestPath, "utf8")),
+        contracts: { customProviders: ["native"] },
+        nativeField: true,
+      }),
+    );
+    apply(root, surface.plan(target), "0.1.0");
+    expect(JSON.parse(readFileSync(packagePath, "utf8"))).toMatchObject({
+      scripts: { custom: "node custom.mjs" },
+      exports: { "./native": "./src/native.ts" },
+    });
+    expect(JSON.parse(readFileSync(manifestPath, "utf8"))).toMatchObject({
+      contracts: { customProviders: ["native"] },
+      nativeField: true,
+    });
+  });
+
   it("projects only the operations OpenClaw can run and pins the scaffold in one place", () => {
     const files = emitted(project());
     const manifest = JSON.parse(files[`${HOST_DIR}/openclaw.plugin.json`] ?? "{}");

package/src/surfaces/openclaw-native.ts

@@ -238,7 +238,11 @@ function pluginInspector(project: Project, operations: Operation[]): Record<stri
   };
 }
 
-function packageJson(project: Project, operations: Operation[], kase?: E2eCase): string {
+function packageJson(
+  project: Project,
+  operations: Operation[],
+  kase?: E2eCase,
+): Record<string, unknown> {
   // The core is imported in-process only when an operation reaches this surface.
   const core =
     project.tool.binding === "typescript" && operations.length
@@ -246,32 +250,30 @@ function packageJson(project: Project, operations: Operation[], kase?: E2eCase):
       : undefined;
   const extra = project.tool.openclaw;
   const e2e = kase ? { "test:e2e": OPENCLAW_ADDITIONS.e2eScript } : undefined;
-  return json(
-    compact({
-      name: projectName.openclawPackage(project.identity.name),
-      version: project.identity.version ?? "0.0.0",
-      description: pluginDescription(project),
-      type: "module",
-      private: OPENCLAW_SCAFFOLD.private,
-      scripts: { ...OPENCLAW_SCAFFOLD.scripts, ...e2e },
-      files: OPENCLAW_SCAFFOLD.files,
-      peerDependencies: { openclaw: pluginApi(project), ...extra?.peerDependencies },
-      dependencies: { ...OPENCLAW_SCAFFOLD.dependencies, ...core, ...extra?.dependencies },
-      devDependencies: {
-        ...OPENCLAW_SCAFFOLD.devDependencies,
-        ...(kase ? { "@copilotkit/aimock": OPENCLAW_ADDITIONS.aimock } : {}),
-        ...extra?.devDependencies,
-      },
-      openclaw: {
-        extensions: [OPENCLAW_SCAFFOLD.entry],
-        compat: { pluginApi: pluginApi(project) },
-        build: { openclawVersion: OPENCLAW_SCAFFOLD.openclawVersion },
-      },
-      pluginInspector: expectedRegistrations(project, operations).length
-        ? pluginInspector(project, operations)
-        : undefined,
-    }),
-  );
+  return compact({
+    name: projectName.openclawPackage(project.identity.name),
+    version: project.identity.version ?? "0.0.0",
+    description: pluginDescription(project),
+    type: "module",
+    private: OPENCLAW_SCAFFOLD.private,
+    scripts: { ...OPENCLAW_SCAFFOLD.scripts, ...e2e },
+    files: OPENCLAW_SCAFFOLD.files,
+    peerDependencies: { openclaw: pluginApi(project), ...extra?.peerDependencies },
+    dependencies: { ...OPENCLAW_SCAFFOLD.dependencies, ...core, ...extra?.dependencies },
+    devDependencies: {
+      ...OPENCLAW_SCAFFOLD.devDependencies,
+      ...(kase ? { "@copilotkit/aimock": OPENCLAW_ADDITIONS.aimock } : {}),
+      ...extra?.devDependencies,
+    },
+    openclaw: {
+      extensions: [OPENCLAW_SCAFFOLD.entry],
+      compat: { pluginApi: pluginApi(project) },
+      build: { openclawVersion: OPENCLAW_SCAFFOLD.openclawVersion },
+    },
+    pluginInspector: expectedRegistrations(project, operations).length
+      ? pluginInspector(project, operations)
+      : undefined,
+  }) as Record<string, unknown>;
 }
 
 /**
@@ -281,7 +283,7 @@ function packageJson(project: Project, operations: Operation[], kase?: E2eCase):
  * config UI learns which keys to mask, from the same `x-toolfactory.sensitive` declaration every
  * other surface reads.
  */
-function pluginManifest(project: Project, operations: Operation[]): string {
+function pluginManifest(project: Project, operations: Operation[]): Record<string, unknown> {
   const sensitive = Object.entries(configProperties(project))
     .filter(([, property]) => isSensitive(property))
     .map(([key]) => [key, { sensitive: true }]);
@@ -289,21 +291,19 @@ function pluginManifest(project: Project, operations: Operation[]): string {
     registration.contract,
     registration.ids,
   ]);
-  return json(
-    compact({
-      id: project.identity.name,
-      name: displayName(project.identity.name),
-      description: pluginDescription(project),
-      version: project.identity.version ?? "0.0.0",
-      configSchema: configSchema(project),
-      uiHints: sensitive.length ? Object.fromEntries(sensitive) : undefined,
-      activation: activation(project),
-      contracts: {
-        tools: operations.map((operation) => operation.name),
-        ...Object.fromEntries(declared),
-      },
-    }),
-  );
+  return compact({
+    id: project.identity.name,
+    name: displayName(project.identity.name),
+    description: pluginDescription(project),
+    version: project.identity.version ?? "0.0.0",
+    configSchema: configSchema(project),
+    uiHints: sensitive.length ? Object.fromEntries(sensitive) : undefined,
+    activation: activation(project),
+    contracts: {
+      tools: operations.map((operation) => operation.name),
+      ...Object.fromEntries(declared),
+    },
+  }) as Record<string, unknown>;
 }
 
 function executeBody(project: Project, operation: Operation): string {
@@ -933,9 +933,10 @@ export const surface: Surface = {
     const kase = e2eCase(project, operations);
     return [
       {
-        kind: "file",
+        kind: "merge",
         path: `${HOST_DIR}/package.json`,
-        content: packageJson(project, operations, kase),
+        format: "json",
+        patch: packageJson(project, operations, kase),
       },
       {
         kind: "file",
@@ -955,9 +956,10 @@ export const surface: Surface = {
         content: OPENCLAW_SCAFFOLD.vitestConfig,
       },
       {
-        kind: "file",
+        kind: "merge",
         path: `${HOST_DIR}/openclaw.plugin.json`,
-        content: pluginManifest(project, operations),
+        format: "json",
+        patch: pluginManifest(project, operations),
       },
       {
         kind: "region",

package/src/surfaces/readme.ts

@@ -14,6 +14,9 @@
  * `cursor.com/en/install-mcp`), both computed from the exact same `{command, args, env}` launch
  * the plain-text line renders — a badge can never point somewhere the text line does not.
  */
+
+import { nativeInstallLines } from "../distribution/native.js";
+import { systemInstallLines } from "../distribution/system.js";
 import { githubSlug } from "../hosts/github.js";
 import { projectName } from "../identity/name.js";
 import type { Project, Surface } from "../model.js";
@@ -22,6 +25,7 @@ import { HOST_DIR as DSH_HOST_DIR, dshTarball } from "./dsh.js";
 import { pluginDir as hermesPluginDir } from "./hermes-native.js";
 import { HOST_DIR as OPENCLAW_HOST_DIR } from "./openclaw-native.js";
 import { envName, has, npmName, pypiName, requiredConfig } from "./shared.js";
+import { vsixName } from "./vscode-extension.js";
 
 export const README_PATH = "README.md";
 export const INSTALL_BEGIN = "<!-- tf:install -->";
@@ -83,6 +87,12 @@ function installLines(project: Project): string[] {
   const { identity } = project;
   const slug = githubSlug(identity.repository);
   const lines: string[] = [];
+  lines.push(...nativeInstallLines(project).map((line) => `- **Native package** — ${line}`));
+  lines.push(...systemInstallLines(project).map((line) => `- **System package** — ${line}`));
+  if (has(project, "vscode-extension"))
+    lines.push(
+      `- **VS Code extension** — download \`${vsixName(project)}\` from the release, then \`code --install-extension ${vsixName(project)}\``,
+    );
   if (has(project, "skill") && slug) {
     lines.push(`- **Agent Skill** — \`npx skills add ${slug}\``);
   }

package/src/surfaces/registry.ts

@@ -1,3 +1,5 @@
+import { nativePackageSurfaces } from "../distribution/native.js";
+import { systemPackageSurfaces } from "../distribution/system.js";
 import type { Surface, SurfaceId } from "../model.js";
 import { surface as agentPlugins } from "./agent-plugins.js";
 import { surface as agents } from "./agents.js";
@@ -17,10 +19,13 @@ import { surface as openclawNative } from "./openclaw-native.js";
 import { surface as pypi } from "./pypi.js";
 import { surface as readme } from "./readme.js";
 import { surface as skill } from "./skill.js";
+import { surface as vscodeExtension } from "./vscode-extension.js";
 import { surface as web } from "./web.js";
 import { surface as workflows } from "./workflows.js";
 
 const registry: Partial<Record<SurfaceId, Surface>> = {
+  ...Object.fromEntries(nativePackageSurfaces.map((surface) => [surface.id, surface])),
+  ...Object.fromEntries(systemPackageSurfaces.map((surface) => [surface.id, surface])),
   "agent-plugins": agentPlugins,
   agents,
   "browser-extension": { ...browserExtension, requires: ["mcp"] },
@@ -48,6 +53,7 @@ const registry: Partial<Record<SurfaceId, Surface>> = {
   pypi,
   readme,
   web: { ...web, requires: ["mcp"] },
+  "vscode-extension": { ...vscodeExtension, requires: ["mcp", "cli"] },
   workflows,
 };
 

package/src/surfaces/vscode-extension.test.ts

@@ -0,0 +1,89 @@
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { afterEach, expect, it } from "vitest";
+import { type Project, ToolConfigSchema } from "../model.js";
+import { apply, check } from "../project/apply.js";
+import { packageSteps, registries } from "../project/gate.js";
+import { surface } from "./vscode-extension.js";
+
+const roots: string[] = [];
+afterEach(() => {
+  for (const root of roots.splice(0)) rmSync(root, { recursive: true, force: true });
+});
+
+function fixture(): Project {
+  const root = mkdtempSync(join(tmpdir(), "tf-vscode-"));
+  roots.push(root);
+  return {
+    root,
+    tool: ToolConfigSchema.parse({
+      schemaVersion: 1,
+      identity: "plugin.json",
+      binding: "typescript",
+      surfaces: ["mcp", "cli", "npm", "vscode-extension"],
+      vscode: { publisher: "octo" },
+    }),
+    identity: { name: "hello.tool", version: "1.0.0", repository: "https://github.com/octo/hello" },
+    identityExtra: {},
+    operations: [
+      { name: "echo", inputSchema: { type: "object" }, requires: [] },
+      { name: "native", inputSchema: { type: "object" }, requires: ["model"] },
+    ],
+    toolfactoryVersion: "0.1.2",
+  };
+}
+
+it("keeps native contributions, activation, build settings and command details across operation changes", () => {
+  const project = fixture();
+  apply(project.root, surface.plan(project), "0.1.2");
+  const path = join(project.root, "hosts/vscode/package.json");
+  const pkg = JSON.parse(readFileSync(path, "utf8"));
+  pkg.contributes.commands[0].icon = "$(beaker)";
+  pkg.contributes.commands.push({ command: "hello.tool.custom", title: "Custom native command" });
+  pkg.contributes.views = { explorer: [{ id: "native-view", name: "Native view" }] };
+  pkg.scripts.custom = "node custom.js";
+  writeFileSync(path, JSON.stringify(pkg));
+  const entry = join(project.root, "hosts/vscode/src/extension.ts");
+  writeFileSync(entry, `${readFileSync(entry, "utf8")}\nexport const authored = true;\n`);
+  expect(check(project.root, surface.plan(project), "0.1.2")).toEqual([]);
+  const echo = project.operations[0];
+  if (!echo) throw new Error("fixture must contain echo");
+  echo.title = "New title";
+  apply(project.root, surface.plan(project), "0.1.2");
+  const rebuilt = JSON.parse(readFileSync(path, "utf8"));
+  expect(rebuilt.contributes.commands).toContainEqual({
+    command: "hello-tool.echo",
+    title: "New title",
+    category: "Hello Tool",
+    icon: "$(beaker)",
+  });
+  expect(rebuilt.contributes.commands).toContainEqual({
+    command: "hello.tool.custom",
+    title: "Custom native command",
+  });
+  expect(rebuilt.contributes.commands).not.toContainEqual(
+    expect.objectContaining({ command: "hello-tool.native" }),
+  );
+  expect(rebuilt.contributes.views).toEqual(pkg.contributes.views);
+  expect(rebuilt.scripts.custom).toBe("node custom.js");
+  expect(readFileSync(entry, "utf8")).toContain("export const authored = true;");
+  expect(check(project.root, surface.plan(project), "0.1.2")).toEqual([]);
+});
+
+it("packages a VSIX independently of registry credentials and permits each registry to be deselected", () => {
+  const project = fixture();
+  expect(packageSteps(project).some((step) => step.run.includes("hello-tool-1.0.0.vsix"))).toBe(
+    true,
+  );
+  expect(registries(project).map((row) => row.id)).toEqual(
+    expect.arrayContaining(["vscode-marketplace", "open-vsx"]),
+  );
+  project.tool.vscode = { publisher: "octo", marketplace: false, openvsx: true };
+  expect(registries(project).map((row) => row.id)).not.toContain("vscode-marketplace");
+  project.tool.binding = "python";
+  expect(() => surface.plan(project)).toThrow("requires pypi");
+  project.tool.surfaces = ["mcp", "cli", "pypi", "vscode-extension"];
+  const runtime = surface.plan(project).find((file) => file.path.endsWith("/generated.ts"));
+  expect(runtime?.kind === "file" && runtime.content).toContain('"command":"uvx"');
+});