docs+ci: mirror hypatia#378 TS carve-out extension (linguist + /deps/ + /vscode/) (#238)

## Summary

Mirrors hypatia#378 across the three standards enforcement files so the
hypatia rule, governance-reusable CI gate, and prose policy stay in
lockstep on the 9-class TS carve-out canon.

## Changes

- **\`.claude/CLAUDE.md\`** TypeScript Exemptions table — adds 3 rows
(linguist fork inline, \`**/deps/**\` vendored Mix dirs,
\`**/vscode/**\` editor-host extensions blocked on AS-bindings).
- **\`LANGUAGE-POLICY.adoc\`** TypeScript banned-row prose — class count
5 → 9 with rationale for each new class.
- **\`language-policy.yml\`** grep-chain — adds \`linguist/\`,
\`/deps/\`, \`/vscode/\` to the carve-out grep -v chain.

## Why

Inventory pass 2026-05-28 surfaced three asymmetries between the hypatia
rule's path_allow_prefixes (post hypatia#375) and the standards
enforcement files: 5 estate repos with \`vscode/extension.ts\` would be
policy-gate violations until VSCode-extension API bindings ship;
\`linguist/\` ships \`samples/TypeScript/*.ts\` as ML training data;
\`tma-mark2/deps/phoenix_live_view/\` is vendored Phoenix LiveView TS.

## Test plan

- [x] hypatia#378 contains the rule-side change and tests
- [x] grep-chain extended consistently
- [x] prose class count synced
- [ ] CI green

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Author: hyperpolymath

.claude/CLAUDE.md

@@ -139,7 +139,9 @@ Existing pre-2026-04-30 `.ts`/`.tsx` outside these carve-outs is grandfathered w
 | `avow-protocol/telegram-bot/avow-telegram-bot/**` | PERMANENT | Telegraf / node-telegram-bot-api are the canonical TS-native libraries for the Bot API; no AffineScript binding planned. | AffineScript Telegram-bot bindings (no scheduled issue). |
 | `**/vite.config.ts`, `**/vitest.config.ts`, `**/tsup.config.ts`, `**/tsconfig.json` | tooling | Build orchestration, not application code. | When AffineScript ships native equivalents. |
 | `affinescript-deno-test/**`, `affinescript-cli/**` | bootstrap shim | TS/JS shims used to bootstrap the AffineScript test runner / CLI. | When AffineScript self-hosts these. |
-| `rescript/**`, `servers/**`, `repos-monorepo/**` | upstream fork | Not estate-authored — vendored upstream code (ReScript compiler, third-party MCP servers, mass aggregator). | Never — upstream fork. |
+| `rescript/**`, `servers/**`, `repos-monorepo/**`, `linguist/**` | upstream fork | Not estate-authored — vendored upstream code (ReScript compiler, third-party MCP servers, mass aggregator, GitHub linguist with `samples/TypeScript/*.ts` as ML training fixtures). | Never — upstream fork. |
 | `hyperpolymath-archive/**` | archived | GitHub-archived repos cannot accept PRs; TS is dormant. | Never — archived. |
+| `**/deps/**` | vendored package-manager dep | Elixir Mix vendored-dep directory (also adopted by other tools). Exemplar: `tma-mark2/deps/phoenix_live_view/assets/js/phoenix_live_view/*.ts` ships Phoenix LiveView's authored TS. | Never — vendored upstream. |
+| `**/vscode/**` (covers `editors/vscode/`, `extensions/vscode/`, `clients/vscode/`) | editor-host extension | VSCode extension entry points target the `vscode` extension-host API. Five estate repos (`universal-language-server-plugin`, `reposystem`, `proof-burrower`, `phronesis`, `bofj-kitt`) have a single `vscode/extension.ts`. | When AffineScript ships the VSCode-extension API binding (top-50 roadmap, unshipped). |
 
 Adding to this list requires explicit user approval and an unblock condition (except the structural classes above, which are estate-wide policy). The detection rule and its `path_allow_prefixes` field are the single source of truth; this table mirrors that for human readability.

rhodium-standard-repositories/.github/workflows/language-policy.yml

@@ -52,8 +52,10 @@ jobs:
           #   avow-protocol/telegram-bot/avow-telegram-bot/  Telegraf PERMANENT exemption
           #   *.config.ts / vite.config.ts / vitest.config.ts / tsup.config.ts  tooling
           #   affinescript-deno-test/ + affinescript-cli/  bootstrap shims
-          #   rescript/ + servers/ + repos-monorepo/  upstream forks
+          #   rescript/ + servers/ + repos-monorepo/ + linguist/  upstream forks
           #   hyperpolymath-archive/  archived repos
+          #   **/deps/                        Mix-style vendored package-manager deps
+          #   **/vscode/                      VSCode extension entry points (blocked on AS bindings)
           NEW_TS=$(git diff --name-only --diff-filter=A HEAD~1 2>/dev/null \
             | grep -E '\.tsx?$' \
             | grep -vE '\.d\.ts$' \
@@ -62,7 +64,9 @@ jobs:
             | grep -vE '(^|/)(vite|vitest|tsup)\.config\.ts$' \
             | grep -vE '\.config\.ts$' \
             | grep -vE '^(affinescript-deno-test|affinescript-cli)/' \
-            | grep -vE '^(rescript|servers|repos-monorepo|hyperpolymath-archive)/' \
+            | grep -vE '^(rescript|servers|repos-monorepo|linguist|hyperpolymath-archive)/' \
+            | grep -vE '/deps/' \
+            | grep -vE '/vscode/' \
             || true)
           if [ -n "$NEW_TS" ]; then
             echo "❌ New TypeScript files detected (banned 2026-04-30). Use AffineScript instead."

rhodium-standard-repositories/spec/LANGUAGE-POLICY.adoc

@@ -129,7 +129,7 @@ NOTE: For full rationale and migration guides, see the link:{source-repo}[CCCP r
   (see project tracker
   `project_estate_ts_to_affinescript_2026_05_28.md`). Detection is
   the hypatia rule `cicd_rules/typescript_detected` (matches `*.ts`)
-  with `path_allow_prefixes` covering five carve-out classes:
+  with `path_allow_prefixes` covering nine carve-out classes:
   (1) `*.d.ts` declaration files (FFI/library type definitions —
   these are headers, not implementation); (2) `*/bindings/deno/`,
   `*/bindings/typescript/`, `*/bindings/ts/` interop targets where
@@ -140,10 +140,21 @@ NOTE: For full rationale and migration guides, see the link:{source-repo}[CCCP r
   binding planned (PERMANENT exemption); (4) tooling configs
   (`vite.config.ts`, `vitest.config.ts`, `tsup.config.ts`,
   `tsconfig.json`) — these are build orchestration, not application
-  code; (5) upstream forks not estate-authored (`rescript/`,
-  `servers/`, `repos-monorepo/`) and `hyperpolymath-archive/**`
-  (archived repos with dormant TS). Unsound gradual typing is the
-  underlying technical objection; AffineScript provides affine/linear
+  code; (5) bootstrap shims (`affinescript-deno-test/`, `affinescript-cli/`)
+  — TS/JS that bootstraps the AS toolchain itself;
+  (6) upstream forks not estate-authored (`rescript/` ReScript
+  compiler, `servers/` third-party MCP servers, `repos-monorepo/`
+  mass aggregator, `linguist/` GitHub language classifier whose
+  `samples/TypeScript/*.ts` are ML training fixtures);
+  (7) `hyperpolymath-archive/**` archived repos with dormant TS;
+  (8) `**/deps/**` Elixir Mix vendored package-manager directory
+  (exemplar: `tma-mark2/deps/phoenix_live_view/assets/js/phoenix_live_view/*.ts`
+  ships Phoenix LiveView's authored TS, vendored as a hex-mix dep);
+  (9) `**/vscode/**` editor-host extensions (covers `editors/vscode/`,
+  `extensions/vscode/`, `clients/vscode/`) — five estate repos have
+  a `vscode/extension.ts` blocked on AffineScript's VSCode-extension
+  API binding (top-50 roadmap, unshipped). Unsound gradual typing is
+  the underlying technical objection; AffineScript provides affine/linear
   types plus typed-wasm output.
 
 | *Node.js*