chore(vscode-ext): migrate vsce -> @vscode/vsce; correct build status

[hyperpolymath]

Follow-up to #58/#60. With the source fixed (#60) the extension compiles; vsce package then failed because the repo pins the deprecated vsce 2.15.0, which predates .cjs-entrypoint support (it looks for src/index.cjs.js).

Changes

• devDependencies: vsce ^2.15.0 → @vscode/vsce ^3.2.0 (renamed, maintained package; same vsce binary so "package": "vsce package" is unchanged).
• README "Status" block corrected — fix(vscode-ext): correct affinescript compile invocation + document build #58 left it claiming fix(#34): resolve Hypatia backlog at source; finalize baseline #35 P2 blocks the build; that's false (proven by fix(vscode-ext): pass real callbacks to registerCommand (affinescript#35 P2) #60: stdlib bindings type-check on affinescript main; the bug was my-lang's extension.affine). Now states reality + that packaging needs a registry-reachable env (WSL npm unreachable → run on CI / non-WSL host) and that .vsix needs no Azure PAT.

Honest limitation

I could not produce the .vsix in this environment: WSL's npm registry is unreachable, so @vscode/vsce can't be npm installed here. The repo is now correct for packaging on CI or any registry-reachable host; the artifact build itself must happen there.

Refs affinescript#35

🤖 Generated with Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 35 issues detected

Severity	Count
🔴 Critical	6
🟠 High	11
🟡 Medium	18

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Issue in quality.yml",
    "type": "missing_workflow",
    "file": "quality.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "Issue in security-policy.yml",
    "type": "missing_workflow",
    "file": "security-policy.yml",
    "action": "create",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action hyperpolymath/standards/.github/workflows/governance-reusable.yml@main needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "high"
  },
  {
    "reason": "unwrap_or(0) with dangerous default (1 occurrences, CWE-754)",
    "type": "unwrap_dangerous_default",
    "file": "/home/runner/work/my-lang/my-lang/_exploratory/me-scaffolding/crates/parser/src/lib.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "critical"
  },
  {
    "reason": "expect() in hot path (80 occurrences, CWE-754)",
    "type": "expect_in_hot_path",
    "file": "/home/runner/work/my-lang/my-lang/_exploratory/me-scaffolding/crates/parser/src/lib.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  },
  {
    "reason": "unwrap() without prior check -- DoS via panic (1 occurrences, CWE-754)",
    "type": "unwrap_without_check",
    "file": "/home/runner/work/my-lang/my-lang/my-ssg/src/generator.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "expect() in hot path (5 occurrences, CWE-754)",
    "type": "expect_in_hot_path",
    "file": "/home/runner/work/my-lang/my-lang/crates/my-mir/src/lib.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "medium"
  },
  {
    "reason": "unwrap() without prior check -- DoS via panic (26 occurrences, CWE-754)",
    "type": "unwrap_without_check",
    "file": "/home/runner/work/my-lang/my-lang/crates/my-fmt/src/lib.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "unwrap() without prior check -- DoS via panic (1 occurrences, CWE-754)",
    "type": "unwrap_without_check",
    "file": "/home/runner/work/my-lang/my-lang/crates/my-hir/src/lib.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  },
  {
    "reason": "unwrap() without prior check -- DoS via panic (3 occurrences, CWE-754)",
    "type": "unwrap_without_check",
    "file": "/home/runner/work/my-lang/my-lang/crates/my-llvm/src/lib.rs",
    "action": "flag",
    "rule_module": "code_safety",
    "severity": "high"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence