toolfactory 0.1.2 → 0.2.0

package/dist/surfaces/vscode-scaffold.d.ts

@@ -0,0 +1,43 @@
+/** Captured by running generator-code@1.12.0 (TypeScript/esbuild); hosts/vscode.ts verifies it. */
+export declare const VSCODE_GENERATOR = "1.12.0";
+export declare const GITIGNORE = "out\ndist\nnode_modules\n.vscode-test/\n*.vsix\n";
+export declare const VSCODE_SCAFFOLD: {
+    readonly engines: {
+        readonly vscode: "^1.136.0";
+    };
+    readonly scripts: {
+        readonly "vscode:prepublish": "npm run package";
+        readonly compile: "npm run check-types && npm run lint && node esbuild.js";
+        readonly watch: "npm-run-all -p watch:*";
+        readonly "watch:esbuild": "node esbuild.js --watch";
+        readonly "watch:tsc": "tsc --noEmit --watch --project tsconfig.json";
+        readonly package: "npm run check-types && npm run lint && node esbuild.js --production";
+        readonly "compile-tests": "tsc -p . --outDir out";
+        readonly "watch-tests": "tsc -p . -w --outDir out";
+        readonly pretest: "npm run compile-tests && npm run compile && npm run lint";
+        readonly "check-types": "tsc --noEmit";
+        readonly lint: "eslint src";
+        readonly test: "vscode-test";
+    };
+    readonly devDependencies: {
+        readonly "@types/vscode": "^1.136.0";
+        readonly "@types/mocha": "^10.0.10";
+        readonly "@types/node": "24.x";
+        readonly "typescript-eslint": "^8.61.1";
+        readonly eslint: "^10.5.0";
+        readonly esbuild: "^0.28.1";
+        readonly "npm-run-all": "^4.1.5";
+        readonly typescript: "^6.0.3";
+        readonly "@vscode/test-cli": "^0.0.15";
+        readonly "@vscode/test-electron": "^3.0.0";
+    };
+    readonly overrides: {
+        readonly diff: "^8.0.4";
+        readonly "serialize-javascript": "^7.0.6";
+    };
+};
+export declare const ESBUILD = "const esbuild = require(\"esbuild\");\n\nconst production = process.argv.includes('--production');\nconst watch = process.argv.includes('--watch');\n\n/**\n * @type {import('esbuild').Plugin}\n */\nconst esbuildProblemMatcherPlugin = {\n\tname: 'esbuild-problem-matcher',\n\n\tsetup(build) {\n\t\tbuild.onStart(() => {\n\t\t\tconsole.log('[watch] build started');\n\t\t});\n\t\tbuild.onEnd((result) => {\n\t\t\tresult.errors.forEach(({ text, location }) => {\n\t\t\t\tconsole.error(`\u2718 [ERROR] ${text}`);\n\t\t\t\tconsole.error(`    ${location.file}:${location.line}:${location.column}:`);\n\t\t\t});\n\t\t\tconsole.log('[watch] build finished');\n\t\t});\n\t},\n};\n\nasync function main() {\n\tconst ctx = await esbuild.context({\n\t\tentryPoints: [\n\t\t\t'src/extension.ts'\n\t\t],\n\t\tbundle: true,\n\t\tformat: 'cjs',\n\t\tminify: production,\n\t\tsourcemap: !production,\n\t\tsourcesContent: false,\n\t\tplatform: 'node',\n\t\toutfile: 'dist/extension.js',\n\t\texternal: ['vscode'],\n\t\tlogLevel: 'silent',\n\t\tplugins: [\n\t\t\t/* add to the end of plugins array */\n\t\t\tesbuildProblemMatcherPlugin,\n\t\t],\n\t});\n\tif (watch) {\n\t\tawait ctx.watch();\n\t} else {\n\t\tawait ctx.rebuild();\n\t\tawait ctx.dispose();\n\t}\n}\n\nmain().catch(e => {\n\tconsole.error(e);\n\tprocess.exit(1);\n});\n";
+export declare const ESLINT = "import typescriptEslint from \"typescript-eslint\";\n\nexport default [{\n    files: [\"**/*.ts\"],\n}, {\n    plugins: {\n        \"@typescript-eslint\": typescriptEslint.plugin,\n    },\n\n    languageOptions: {\n        parser: typescriptEslint.parser,\n        ecmaVersion: 2022,\n        sourceType: \"module\",\n    },\n\n    rules: {\n        \"@typescript-eslint/naming-convention\": [\"warn\", {\n            selector: \"import\",\n            format: [\"camelCase\", \"PascalCase\"],\n        }],\n\n        curly: \"warn\",\n        eqeqeq: \"warn\",\n        \"no-throw-literal\": \"warn\",\n        semi: \"warn\",\n    },\n}];";
+export declare const IGNORE = ".vscode/**\n.vscode-test/**\nout/**\nnode_modules/**\nsrc/**\n.gitignore\n.yarnrc\nesbuild.js\nvsc-extension-quickstart.md\n**/tsconfig.json\n**/eslint.config.mjs\n**/*.map\n**/*.ts\n**/.vscode-test.*\n";
+export declare const LAUNCH = "// A launch configuration that compiles the extension and then opens it inside a new window\n// Use IntelliSense to learn about possible attributes.\n// Hover to view descriptions of existing attributes.\n// For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387\n{\n\t\"version\": \"0.2.0\",\n\t\"configurations\": [\n\t\t{\n\t\t\t\"name\": \"Run Extension\",\n\t\t\t\"type\": \"extensionHost\",\n\t\t\t\"request\": \"launch\",\n\t\t\t\"args\": [\n\t\t\t\t\"--extensionDevelopmentPath=${workspaceFolder}\"\n\t\t\t],\n\t\t\t\"outFiles\": [\n\t\t\t\t\"${workspaceFolder}/dist/**/*.js\"\n\t\t\t],\n\t\t\t\"preLaunchTask\": \"${defaultBuildTask}\"\n\t\t}\n\t]\n}\n";
+export declare const TASKS = "// See https://go.microsoft.com/fwlink/?LinkId=733558\n// for the documentation about the tasks.json format\n{\n\t\"version\": \"2.0.0\",\n\t\"tasks\": [\n\t\t{\n            \"label\": \"watch\",\n            \"dependsOn\": [\n                \"npm: watch:tsc\",\n                \"npm: watch:esbuild\"\n            ],\n            \"presentation\": {\n                \"reveal\": \"never\"\n            },\n            \"group\": {\n                \"kind\": \"build\",\n                \"isDefault\": true\n            }\n        },\n        {\n            \"type\": \"npm\",\n            \"script\": \"watch:esbuild\",\n            \"group\": \"build\",\n            \"problemMatcher\": \"$esbuild-watch\",\n            \"isBackground\": true,\n            \"label\": \"npm: watch:esbuild\",\n            \"presentation\": {\n                \"group\": \"watch\",\n                \"reveal\": \"never\"\n            }\n        },\n\t\t{\n            \"type\": \"npm\",\n            \"script\": \"watch:tsc\",\n            \"group\": \"build\",\n            \"problemMatcher\": \"$tsc-watch\",\n            \"isBackground\": true,\n            \"label\": \"npm: watch:tsc\",\n            \"presentation\": {\n                \"group\": \"watch\",\n                \"reveal\": \"never\"\n            }\n        },\n\t\t{\n\t\t\t\"type\": \"npm\",\n\t\t\t\"script\": \"watch-tests\",\n\t\t\t\"problemMatcher\": \"$tsc-watch\",\n\t\t\t\"isBackground\": true,\n\t\t\t\"presentation\": {\n\t\t\t\t\"reveal\": \"never\",\n\t\t\t\t\"group\": \"watchers\"\n\t\t\t},\n\t\t\t\"group\": \"build\"\n\t\t},\n\t\t{\n\t\t\t\"label\": \"tasks: watch-tests\",\n\t\t\t\"dependsOn\": [\n\t\t\t\t\"npm: watch\",\n\t\t\t\t\"npm: watch-tests\"\n\t\t\t],\n\t\t\t\"problemMatcher\": []\n\t\t}\n\t]\n}\n";

package/dist/surfaces/vscode-scaffold.js

@@ -0,0 +1,43 @@
+/** Captured by running generator-code@1.12.0 (TypeScript/esbuild); hosts/vscode.ts verifies it. */
+export const VSCODE_GENERATOR = "1.12.0";
+export const GITIGNORE = "out\ndist\nnode_modules\n.vscode-test/\n*.vsix\n";
+export const VSCODE_SCAFFOLD = {
+    engines: {
+        vscode: "^1.136.0",
+    },
+    scripts: {
+        "vscode:prepublish": "npm run package",
+        compile: "npm run check-types && npm run lint && node esbuild.js",
+        watch: "npm-run-all -p watch:*",
+        "watch:esbuild": "node esbuild.js --watch",
+        "watch:tsc": "tsc --noEmit --watch --project tsconfig.json",
+        package: "npm run check-types && npm run lint && node esbuild.js --production",
+        "compile-tests": "tsc -p . --outDir out",
+        "watch-tests": "tsc -p . -w --outDir out",
+        pretest: "npm run compile-tests && npm run compile && npm run lint",
+        "check-types": "tsc --noEmit",
+        lint: "eslint src",
+        test: "vscode-test",
+    },
+    devDependencies: {
+        "@types/vscode": "^1.136.0",
+        "@types/mocha": "^10.0.10",
+        "@types/node": "24.x",
+        "typescript-eslint": "^8.61.1",
+        eslint: "^10.5.0",
+        esbuild: "^0.28.1",
+        "npm-run-all": "^4.1.5",
+        typescript: "^6.0.3",
+        "@vscode/test-cli": "^0.0.15",
+        "@vscode/test-electron": "^3.0.0",
+    },
+    overrides: {
+        diff: "^8.0.4",
+        "serialize-javascript": "^7.0.6",
+    },
+};
+export const ESBUILD = "const esbuild = require(\"esbuild\");\n\nconst production = process.argv.includes('--production');\nconst watch = process.argv.includes('--watch');\n\n/**\n * @type {import('esbuild').Plugin}\n */\nconst esbuildProblemMatcherPlugin = {\n\tname: 'esbuild-problem-matcher',\n\n\tsetup(build) {\n\t\tbuild.onStart(() => {\n\t\t\tconsole.log('[watch] build started');\n\t\t});\n\t\tbuild.onEnd((result) => {\n\t\t\tresult.errors.forEach(({ text, location }) => {\n\t\t\t\tconsole.error(`\u2718 [ERROR] ${text}`);\n\t\t\t\tconsole.error(`    ${location.file}:${location.line}:${location.column}:`);\n\t\t\t});\n\t\t\tconsole.log('[watch] build finished');\n\t\t});\n\t},\n};\n\nasync function main() {\n\tconst ctx = await esbuild.context({\n\t\tentryPoints: [\n\t\t\t'src/extension.ts'\n\t\t],\n\t\tbundle: true,\n\t\tformat: 'cjs',\n\t\tminify: production,\n\t\tsourcemap: !production,\n\t\tsourcesContent: false,\n\t\tplatform: 'node',\n\t\toutfile: 'dist/extension.js',\n\t\texternal: ['vscode'],\n\t\tlogLevel: 'silent',\n\t\tplugins: [\n\t\t\t/* add to the end of plugins array */\n\t\t\tesbuildProblemMatcherPlugin,\n\t\t],\n\t});\n\tif (watch) {\n\t\tawait ctx.watch();\n\t} else {\n\t\tawait ctx.rebuild();\n\t\tawait ctx.dispose();\n\t}\n}\n\nmain().catch(e => {\n\tconsole.error(e);\n\tprocess.exit(1);\n});\n";
+export const ESLINT = 'import typescriptEslint from "typescript-eslint";\n\nexport default [{\n    files: ["**/*.ts"],\n}, {\n    plugins: {\n        "@typescript-eslint": typescriptEslint.plugin,\n    },\n\n    languageOptions: {\n        parser: typescriptEslint.parser,\n        ecmaVersion: 2022,\n        sourceType: "module",\n    },\n\n    rules: {\n        "@typescript-eslint/naming-convention": ["warn", {\n            selector: "import",\n            format: ["camelCase", "PascalCase"],\n        }],\n\n        curly: "warn",\n        eqeqeq: "warn",\n        "no-throw-literal": "warn",\n        semi: "warn",\n    },\n}];';
+export const IGNORE = ".vscode/**\n.vscode-test/**\nout/**\nnode_modules/**\nsrc/**\n.gitignore\n.yarnrc\nesbuild.js\nvsc-extension-quickstart.md\n**/tsconfig.json\n**/eslint.config.mjs\n**/*.map\n**/*.ts\n**/.vscode-test.*\n";
+export const LAUNCH = '// A launch configuration that compiles the extension and then opens it inside a new window\n// Use IntelliSense to learn about possible attributes.\n// Hover to view descriptions of existing attributes.\n// For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387\n{\n\t"version": "0.2.0",\n\t"configurations": [\n\t\t{\n\t\t\t"name": "Run Extension",\n\t\t\t"type": "extensionHost",\n\t\t\t"request": "launch",\n\t\t\t"args": [\n\t\t\t\t"--extensionDevelopmentPath=${workspaceFolder}"\n\t\t\t],\n\t\t\t"outFiles": [\n\t\t\t\t"${workspaceFolder}/dist/**/*.js"\n\t\t\t],\n\t\t\t"preLaunchTask": "${defaultBuildTask}"\n\t\t}\n\t]\n}\n';
+export const TASKS = '// See https://go.microsoft.com/fwlink/?LinkId=733558\n// for the documentation about the tasks.json format\n{\n\t"version": "2.0.0",\n\t"tasks": [\n\t\t{\n            "label": "watch",\n            "dependsOn": [\n                "npm: watch:tsc",\n                "npm: watch:esbuild"\n            ],\n            "presentation": {\n                "reveal": "never"\n            },\n            "group": {\n                "kind": "build",\n                "isDefault": true\n            }\n        },\n        {\n            "type": "npm",\n            "script": "watch:esbuild",\n            "group": "build",\n            "problemMatcher": "$esbuild-watch",\n            "isBackground": true,\n            "label": "npm: watch:esbuild",\n            "presentation": {\n                "group": "watch",\n                "reveal": "never"\n            }\n        },\n\t\t{\n            "type": "npm",\n            "script": "watch:tsc",\n            "group": "build",\n            "problemMatcher": "$tsc-watch",\n            "isBackground": true,\n            "label": "npm: watch:tsc",\n            "presentation": {\n                "group": "watch",\n                "reveal": "never"\n            }\n        },\n\t\t{\n\t\t\t"type": "npm",\n\t\t\t"script": "watch-tests",\n\t\t\t"problemMatcher": "$tsc-watch",\n\t\t\t"isBackground": true,\n\t\t\t"presentation": {\n\t\t\t\t"reveal": "never",\n\t\t\t\t"group": "watchers"\n\t\t\t},\n\t\t\t"group": "build"\n\t\t},\n\t\t{\n\t\t\t"label": "tasks: watch-tests",\n\t\t\t"dependsOn": [\n\t\t\t\t"npm: watch",\n\t\t\t\t"npm: watch-tests"\n\t\t\t],\n\t\t\t"problemMatcher": []\n\t\t}\n\t]\n}\n';

package/dist/surfaces/workflows.js

@@ -19,6 +19,8 @@
  */
 import { stringify as yamlStringify } from "yaml";
 import { LIVE_TEST_COMMAND } from "../bindings/python.js";
+import { nativePublishJobs } from "../distribution/native.js";
+import { systemPackageJobs, systemPublishJobs } from "../distribution/system.js";
 import { githubOwner } from "../identity/name.js";
 import { isInstructionOnly, } from "../model.js";
 import { bootstrapSteps, gateSteps, gateVariable, MCP_PUBLISHER_FETCH, npmTarball, openclawTarball, outputsStep, PACKAGE_MANAGER_COMMANDS, packageSteps, RELEASE_DIR, RELEASE_SECRET_NAMES, registries, tagVersionAssert, toolfactoryCli, unpublishStep, WEB_BUILD, } from "../project/gate.js";
@@ -28,6 +30,7 @@ import { ociImage, registryName } from "./mcp-registry.js";
 import { HOST_DIR as OPENCLAW_HOST_DIR } from "./openclaw-native.js";
 import { compact, configProperties, envName, has, isSensitive, liveCredentials, npmName, requiredConfig, } from "./shared.js";
 import { skillPath } from "./skill.js";
+import { OVSX_VERSION, VSCE_VERSION, vsixName } from "./vscode-extension.js";
 const YAML_HEADER = "# Generated by toolfactory. Do not edit; run `toolfactory build` to regenerate.\n\n";
 /** The one artifact the `package` job uploads and every later job reads. */
 const RELEASE_ARTIFACT = "release-assets";
@@ -182,6 +185,7 @@ function ciDocument(project) {
     const node = typescript ? "${{ matrix.node-version }}" : "24";
     const job = compact({
         "runs-on": "ubuntu-latest",
+        env: { TOOLFACTORY_SYSTEM_NATIVE_JOBS: "true" },
         strategy: typescript ? { matrix: { "node-version": ["22", "24"] } } : undefined,
         steps: [
             ...toolchainSteps(project, node),
@@ -199,7 +203,7 @@ function ciDocument(project) {
             workflow_dispatch: live ? {} : undefined,
         }),
         permissions: { contents: "read" },
-        jobs: compact({ test: job, live }),
+        jobs: compact({ test: job, live, ...systemPackageJobs(project, "${{ github.sha }}") }),
     };
 }
 // ---------------------------------------------------------------------------------------------
@@ -362,11 +366,15 @@ function releaseDocument(project) {
     };
     const cli = toolfactoryCli(project);
     const assert = tagVersionAssert(project);
+    const systemJobs = systemPackageJobs(project, RELEASE_SHA);
+    for (const job of Object.values(systemJobs))
+        job.needs = "gate";
     const jobs = {
+        ...systemJobs,
         gate: compact({
             "runs-on": "ubuntu-latest",
             permissions: compact({ contents: "read", pages: has(project, "web") ? "read" : undefined }),
-            env: { RELEASE_TAG: TAG_NAME },
+            env: { RELEASE_TAG: TAG_NAME, TOOLFACTORY_SYSTEM_NATIVE_JOBS: "true" },
             outputs: { sha: "${{ steps.tag.outputs.sha }}", ...presenceOutputs(rows) },
             steps: [
                 // The whole history: the tag may exist (a re-run) or not yet (a dispatch cuts it), and
@@ -385,7 +393,7 @@ function releaseDocument(project) {
             ],
         }),
         package: compact({
-            needs: "gate",
+            needs: needsOf(["gate", ...Object.keys(systemJobs)]),
             "runs-on": "ubuntu-latest",
             permissions: { contents: "read" },
             // The Firefox self-hosted xpi packageSteps emits (gate.ts) is opt-in on this pair: present,
@@ -398,7 +406,11 @@ function releaseDocument(project) {
                 : undefined,
             steps: [
                 ...toolchainSteps(project, "24", RELEASE_SHA),
-                ...packageSteps(project).map((step) => actionStep(step, false)),
+                ...packageSteps(project, { system: false }).map((step) => actionStep(step, false)),
+                ...Object.keys(systemJobs).map((name) => ({
+                    uses: "actions/download-artifact@v8",
+                    with: { name, path: `${RELEASE_DIR}/system/${name.replace(/^system-/, "")}` },
+                })),
                 {
                     uses: "actions/upload-artifact@v7",
                     with: { name: RELEASE_ARTIFACT, path: `${RELEASE_DIR}/` },
@@ -406,7 +418,10 @@ function releaseDocument(project) {
             ],
         }),
     };
-    const priorLegs = [];
+    Object.assign(jobs, systemPublishJobs(project, RELEASE_ARTIFACT, RELEASE_SHA));
+    const nativeJobs = nativePublishJobs(project, RELEASE_ARTIFACT, RELEASE_SHA);
+    Object.assign(jobs, nativeJobs);
+    const priorLegs = Object.keys(nativeJobs);
     if (npmSelected) {
         // npm treats a slash-containing bare operand as a Git spec; make the downloaded archive a
         // filesystem path explicitly.
@@ -457,7 +472,7 @@ function releaseDocument(project) {
                 {
                     name: "Publish package distributions to PyPI",
                     uses: "pypa/gh-action-pypi-publish@release/v1",
-                    with: { "packages-dir": `${RELEASE_ARTIFACT}/pypi/` },
+                    with: { "packages-dir": `${RELEASE_ARTIFACT}/pypi/`, "skip-existing": true },
                 },
             ],
         });
@@ -585,6 +600,33 @@ function releaseDocument(project) {
             comments.push("", "publish-browser-ext-safari (opt-in, tool.json browserExtension.safari) is the macOS", "host-native leg: xcrun safari-web-extension-converter, then an Xcode archive/export", "signed with an App Store Connect API key. Runs on macos-latest, needs only `gate`, and", "does not gate the release — it submits to App Store Connect, not dist/release/.");
         }
     }
+    for (const id of ["vscode-marketplace", "open-vsx"]) {
+        const row = rows.find((entry) => entry.id === id);
+        if (!row)
+            continue;
+        const file = `./${RELEASE_ARTIFACT}/${vsixName(project)}`;
+        const publish = id === "vscode-marketplace"
+            ? `npx --yes @vscode/vsce@${VSCE_VERSION} publish --packagePath ${file} --skip-duplicate`
+            : `npx --yes ovsx@${OVSX_VERSION} publish ${file} --skip-duplicate`;
+        const job = `publish-${id}`;
+        const runtimeJob = project.tool.binding === "python" ? "publish-pypi" : "publish-npm";
+        jobs[job] = {
+            needs: ["gate", "package", runtimeJob],
+            if: `!cancelled() && !contains(needs.*.result, 'failure') && ${gated(id)}`,
+            "runs-on": "ubuntu-latest",
+            permissions: { contents: "read" },
+            env: Object.fromEntries(row.secrets.map((key) => [key, `\${{ secrets.${key} }}`])),
+            steps: [
+                { uses: "actions/setup-node@v7", with: { "node-version": "24" } },
+                {
+                    uses: "actions/download-artifact@v8",
+                    with: { name: RELEASE_ARTIFACT, path: RELEASE_ARTIFACT },
+                },
+                { name: `Publish ${id}`, run: publish },
+            ],
+        };
+        priorLegs.push(job);
+    }
     jobs.release = {
         // The tag's own release, after every leg: the assets are the same ones the registries got.
         // Skipped legs must not skip it, only failed ones; hence the explicit condition.
@@ -620,10 +662,7 @@ function releaseDocument(project) {
                     // A tag the dispatch is cutting does not exist yet: the Release creates it here.
                     target_commitish: RELEASE_SHA,
                     generate_release_notes: true,
-                    // PyPI distributions live one level below the other release assets.
-                    files: has(project, "pypi")
-                        ? `${RELEASE_ARTIFACT}/*\n${RELEASE_ARTIFACT}/pypi/*`
-                        : `${RELEASE_ARTIFACT}/*`,
+                    files: `${RELEASE_ARTIFACT}/**/*`,
                     fail_on_unmatched_files: true,
                 },
             },

package/dist/surfaces/workflows.test.js

@@ -164,10 +164,10 @@ describe("workflows", () => {
             {
                 name: "Publish package distributions to PyPI",
                 uses: "pypa/gh-action-pypi-publish@release/v1",
-                with: { "packages-dir": "release-assets/pypi/" },
+                with: { "packages-dir": "release-assets/pypi/", "skip-existing": true },
             },
         ]);
-        expect(release.jobs.release.steps.at(-1)?.with.files).toBe("release-assets/*\nrelease-assets/pypi/*");
+        expect(release.jobs.release.steps.at(-1)?.with.files).toBe("release-assets/**/*");
         expect(packageSteps(python).find((step) => step.name === "web build")).toBeDefined();
         expect(packageSteps(python).find((step) => step.name === "python distributions")?.run).toBe("uv build --out-dir dist/release/pypi");
         const mcpbPython = project(["pypi", "mcp", "mcpb", "web"], {
@@ -532,6 +532,7 @@ describe("gate", () => {
             "toolfactory validate",
             "author checks",
             "author tests",
+            "author integration tests",
             "openclaw end-to-end (scripted model, no LLM key)",
         ]);
         // `npm ci` and a global CLI install are the runner's job, not a checkout's: `toolfactory gate`

package/dist/toolfactory/cli.js

@@ -11,7 +11,7 @@ const operations = [...authored, web];
 const program = new Command()
     .name("toolfactory")
     .description("Build an agent tool once; ship it as Agent Skills, MCP servers, Agent Plugins / Claude / Codex / Cursor bundles, OpenClaw and Hermes plugins, CLIs, and packages, with the tests and releases to match.")
-    .version("0.1.2");
+    .version("0.2.0");
 for (const op of operations) {
     if (!serves(op, "cli"))
         continue;

package/dist/toolfactory/mcp.js

@@ -30,7 +30,7 @@ const operations = [...authored, web];
 const introspecting = Boolean(process.env.TOOLFACTORY_INTROSPECT);
 /** Builds one server instance with every servable operation registered; called once for stdio, once per HTTP request. */
 function createServer() {
-    const server = new McpServer({ name: "toolfactory", version: "0.1.2" });
+    const server = new McpServer({ name: "toolfactory", version: "0.2.0" });
     for (const op of operations) {
         if (!introspecting && !serves(op, "mcp"))
             continue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolfactory",
-  "version": "0.1.2",
+  "version": "0.2.0",
   "description": "Build an agent tool once; ship it as Agent Skills, MCP servers, Agent Plugins / Claude / Codex / Cursor bundles, OpenClaw and Hermes plugins, CLIs, and packages, with the tests and releases to match.",
   "license": "MIT",
   "repository": {
@@ -17,6 +17,7 @@
     "check": "biome check . && tsc -p tsconfig.json --noEmit",
     "format": "biome format --write .",
     "test": "vitest run --passWithNoTests",
+    "test:integration": "node --import tsx scripts/check-vscode.mjs",
     "toolfactory": "node --import tsx src/toolfactory/cli.ts",
     "vendor:template": "node --import tsx src/hosts/template.ts --write"
   },

package/src/distribution/native.test.ts

@@ -0,0 +1,161 @@
+import { describe, expect, it } from "vitest";
+import type { Project } from "../model.js";
+import {
+  nativeInstallLines,
+  nativePackageConfigSchema,
+  nativePackageSteps,
+  nativePublishJobs,
+  nativeRegistryRows,
+} from "./native.js";
+
+function project(
+  entries: unknown[],
+  surfaces = entries.map((entry) => (entry as { id: string }).id),
+): Project {
+  return {
+    root: "/repo",
+    tool: {
+      schemaVersion: 1,
+      identity: "package.json",
+      binding: "typescript",
+      surfaces: surfaces as unknown as Project["tool"]["surfaces"],
+      bundle: { runtime: "package" },
+      tests: { examples: {} },
+      nativePackages: entries,
+    } as unknown as Project["tool"],
+    identity: { name: "tool", version: "1.2.3", repository: "https://github.com/acme/tool" },
+    identityExtra: {},
+    operations: [],
+    toolfactoryVersion: "0.1.0",
+  };
+}
+const cargo = {
+  id: "cargo",
+  path: "native/cli",
+  identity: "Cargo.toml",
+  name: "acme-cli",
+  versionCommand: "cargo pkgid | sed 's/.*@//'",
+};
+
+describe("native package configuration", () => {
+  it("requires the package path, authored identity, and registry identity", () => {
+    expect(() => nativePackageConfigSchema.parse({ id: "cargo", path: "native" })).toThrow();
+    expect(nativePackageConfigSchema.parse(cargo)).toEqual(cargo);
+  });
+
+  it("rejects a selected registry with no config or duplicate configuration", () => {
+    expect(() => nativePackageSteps(project([], ["cargo"]))).toThrow(/requires exactly one/);
+    expect(() => nativePackageSteps(project([cargo, cargo]))).toThrow(/repeats/);
+  });
+
+  it("packages authored crates and checks their version against the release", () => {
+    const steps = nativePackageSteps(project([cargo]));
+    expect(steps.map((step) => step.name)).toEqual([
+      "cargo version matches release",
+      "Cargo crate",
+    ]);
+    expect(steps[0]?.run).toContain("= '1.2.3'");
+    expect(steps[1]?.run).toContain("cargo package --manifest-path 'native/cli/Cargo.toml'");
+    expect(steps[1]?.run).toContain("--target-dir 'dist/native-build/cargo'");
+    expect(steps[1]?.run).not.toContain("/repo");
+  });
+
+  it("reads structured Cargo metadata and the raw MSBuild version", () => {
+    const cargoDefault = {
+      id: "cargo",
+      path: "native/cli",
+      identity: "Cargo.toml",
+      name: "acme-cli",
+    };
+    const nuget = {
+      id: "nuget",
+      path: "dotnet",
+      identity: "Tool.csproj",
+      name: "Acme.Tool",
+    };
+    const steps = nativePackageSteps(project([cargoDefault, nuget]));
+    expect(steps[0]?.run).toContain(
+      "cargo metadata --no-deps --format-version 1 --manifest-path 'Cargo.toml'",
+    );
+    expect(steps[0]?.run).toContain("JSON.parse(s).packages.find");
+    expect(steps[2]?.run).toContain("dotnet msbuild 'Tool.csproj' -nologo -getProperty:Version");
+    expect(steps[2]?.run).not.toContain("sed -n");
+  });
+
+  it("leaves VCS-discovered Packagist and Go modules for the final release tag", () => {
+    const entries = [
+      {
+        id: "packagist",
+        path: ".",
+        identity: "composer.json",
+        name: "acme/tool",
+      },
+      {
+        id: "go-module",
+        path: ".",
+        identity: "go.mod",
+        name: "github.com/acme/tool",
+      },
+    ];
+    expect(nativePackageSteps(project(entries))).toEqual([]);
+    expect(nativeInstallLines(project(entries))).toEqual([
+      "`composer require acme/tool`",
+      "`go get github.com/acme/tool@v1.2.3`",
+    ]);
+  });
+
+  it("uses direct upstream publishing commands and exposes only their actual credentials", () => {
+    const entries = [
+      cargo,
+      {
+        id: "nuget",
+        path: "dotnet",
+        identity: "Tool.csproj",
+        name: "Acme.Tool",
+        versionCommand: "dotnet msbuild -getProperty:Version Tool.csproj",
+      },
+    ];
+    const jobs = nativePublishJobs(
+      project(entries),
+      "release-assets",
+      "${{ needs.gate.outputs.sha }}",
+    );
+    expect(jobs["publish-cargo"]?.steps).toContainEqual(
+      expect.objectContaining({ run: expect.stringContaining("cargo publish") }),
+    );
+    expect(jobs["publish-nuget"]?.steps).toContainEqual(
+      expect.objectContaining({ run: expect.stringContaining("dotnet nuget push") }),
+    );
+    expect(jobs["publish-nuget"]?.steps).toContainEqual(
+      expect.objectContaining({
+        uses: "actions/setup-dotnet@v5",
+        with: { "dotnet-version": "8.0.x" },
+      }),
+    );
+    expect(nativeRegistryRows(project(entries)).map((row) => row.secrets)).toEqual([
+      ["CARGO_REGISTRY_TOKEN"],
+      ["NUGET_API_KEY"],
+    ]);
+    expect(jobs["publish-cargo"]?.needs).toEqual(["gate", "package"]);
+    expect(jobs["publish-cargo"]?.if).toBe("needs.gate.outputs.cargo == 'true'");
+    expect(jobs["publish-cargo"]?.steps).not.toContainEqual(
+      expect.objectContaining({ uses: "dtolnay/rust-toolchain@stable" }),
+    );
+  });
+
+  it("builds a gem from its package directory before moving the resulting asset", () => {
+    const steps = nativePackageSteps(
+      project([
+        {
+          id: "rubygems",
+          path: "native/ruby",
+          identity: "acme.gemspec",
+          name: "acme",
+          versionCommand: "ruby -e 'puts 1.2.3'",
+        },
+      ]),
+    );
+    expect(steps[1]?.run).toContain("(cd 'native/ruby' && gem build --strict 'acme.gemspec')");
+    expect(steps[1]?.run).toContain("mv 'native/ruby/acme-1.2.3.gem'");
+  });
+});