feat: add verification script for production bundle and update build process to include new dependencies

Author: MichaelWeissDEV

.vscodeignore

@@ -16,9 +16,14 @@ node_modules/**
 !node_modules/@alexaltea/capstone-js/package.json
 !node_modules/@alexaltea/capstone-js/dist/capstone.js
 !node_modules/@alexaltea/capstone-js/dist/capstone.wasm
+!node_modules/@blu3r4y/lzma/package.json
+!node_modules/@blu3r4y/lzma/index.js
+!node_modules/@blu3r4y/lzma/src/lzma_worker.js
 !node_modules/jq-web/package.json
 !node_modules/jq-web/jq.js
 !node_modules/jq-web/jq.wasm
+!node_modules/node-md6/package.json
+!node_modules/node-md6/md6.js
 
 # TypeScript config
 tsconfig*.json

CHANGELOG.md

@@ -21,6 +21,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Fixed MD6 and LM hashing, OpenPGP imports and keyring ordering, asynchronous jq execution, user-agent parsing, image decoding, and cross-realm ArrayBuffer/Promise handling in pipelines.
 - Replaced the x86 disassembly placeholder with the Capstone backend and packaged the required Capstone, jq, and Bzip2 WebAssembly runtime files.
 - Ensure OCR workers are terminated on success and failure, and reject unsupported OCR engine modes before worker creation.
+- Prevent extension activation from failing on bundled dependencies that resolve runtime worker files or require non-strict CommonJS execution.
 
 ## [0.8.0] - 2026-07-17
 

package.json

@@ -457,8 +457,9 @@
   },
   "scripts": {
     "vscode:prepublish": "npm run build",
-    "compile": "esbuild src/extension.ts --bundle --outfile=dist/extension.js --external:vscode --external:libbzip2-wasm --external:@alexaltea/capstone-js --external:jq-web --platform=node --format=cjs --sourcemap",
-    "build": "npm run compile",
+    "compile": "esbuild src/extension.ts --bundle --outfile=dist/extension.js --external:vscode --external:libbzip2-wasm --external:@alexaltea/capstone-js --external:@blu3r4y/lzma --external:jq-web --external:node-md6 --platform=node --format=cjs --sourcemap --define:require.resolve=false",
+    "verify:bundle": "node scripts/verify-bundle.cjs",
+    "build": "npm run compile && npm run verify:bundle",
     "watch": "npm run compile -- --watch",
     "test": "jest",
     "test:watch": "jest --watch",

scripts/verify-bundle.cjs

@@ -0,0 +1,77 @@
+/**
+ * Loads the production bundle with a permissive VS Code API stand-in.
+ * This catches top-level module resolution failures before a VSIX is built.
+ */
+
+"use strict";
+
+const Module = require("module");
+const path = require("path");
+
+let vscodeValue;
+vscodeValue = new Proxy(function vscodeApiValue() {
+  return vscodeValue;
+}, {
+  get(_target, property) {
+    if (property === Symbol.toPrimitive) return () => 0;
+    if (property === "then") return undefined;
+    return vscodeValue;
+  },
+  construct() {
+    return vscodeValue;
+  },
+  apply() {
+    return vscodeValue;
+  },
+});
+
+const vscodeNames = [
+  "window",
+  "workspace",
+  "commands",
+  "languages",
+  "env",
+  "Uri",
+  "Position",
+  "Range",
+  "Selection",
+  "MarkdownString",
+  "Hover",
+  "CodeLens",
+  "EventEmitter",
+  "TreeItem",
+  "ThemeIcon",
+  "ThemeColor",
+  "ViewColumn",
+  "TreeItemCollapsibleState",
+  "OverviewRulerLane",
+  "ConfigurationTarget",
+  "StatusBarAlignment",
+  "ProgressLocation",
+  "TextEditorRevealType",
+  "ExtensionMode",
+];
+const vscode = Object.fromEntries(
+  vscodeNames.map((name) => [name, vscodeValue]),
+);
+
+const projectRoot = path.resolve(__dirname, "..");
+const bundlePath = process.argv[2]
+  ? path.resolve(process.argv[2])
+  : path.join(projectRoot, "dist", "extension.js");
+const originalLoad = Module._load;
+
+try {
+  Module._load = function loadWithVscodeMock(request) {
+    if (request === "vscode") return vscode;
+    return originalLoad.apply(this, arguments);
+  };
+  const extension = require(bundlePath);
+  if (typeof extension.activate !== "function") {
+    throw new Error("Production bundle does not export activate().");
+  }
+} finally {
+  Module._load = originalLoad;
+}
+
+console.log("Production bundle activation import verified.");