Completely remove require by hardcoding paths

Author: Mrtenz

packages/snaps-execution-environments/lavamoat/build-system/policy.json

@@ -359,9 +359,11 @@
     "@lavamoat/node>lavamoat-core>merge-deep>clone-deep": {
       "packages": {
         "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>for-own": true,
+        "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>shallow-clone>is-extendable": true,
+        "webpack-merge>clone-deep>is-plain-object": true,
+        "@lavamoat/node>lavamoat-core>merge-deep>kind-of": true,
         "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>lazy-cache": true,
-        "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>shallow-clone": true,
-        "webpack-merge>clone-deep>is-plain-object": true
+        "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>shallow-clone": true
       }
     },
     "webpack-merge>clone-deep": {
@@ -726,6 +728,11 @@
         "@lavamoat/node>lavamoat-core>merge-deep>kind-of>is-buffer": true
       }
     },
+    "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>shallow-clone>kind-of": {
+      "packages": {
+        "@lavamoat/node>lavamoat-core>merge-deep>kind-of>is-buffer": true
+      }
+    },
     "@lavamoat/node>lavamoat-core": {
       "builtin": {
         "node:events": true,
@@ -760,6 +767,11 @@
         "process.env.UNLAZY": true
       }
     },
+    "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>shallow-clone>lazy-cache": {
+      "globals": {
+        "process.env": true
+      }
+    },
     "webpack>loader-runner": {
       "builtin": {
         "fs": true,
@@ -811,6 +823,12 @@
         "webpack>mime-types>mime-db": true
       }
     },
+    "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>shallow-clone>mixin-object": {
+      "packages": {
+        "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>shallow-clone>mixin-object>for-in": true,
+        "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>shallow-clone>is-extendable": true
+      }
+    },
     "webpack>neo-async": {
       "globals": {
         "clearTimeout": true,
@@ -946,6 +964,14 @@
         "@lavamoat/webpack>json-stable-stringify>call-bind>set-function-length>has-property-descriptors": true
       }
     },
+    "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>shallow-clone": {
+      "packages": {
+        "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>shallow-clone>is-extendable": true,
+        "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>shallow-clone>kind-of": true,
+        "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>shallow-clone>lazy-cache": true,
+        "@lavamoat/node>lavamoat-core>merge-deep>clone-deep>shallow-clone>mixin-object": true
+      }
+    },
     "webpack-merge>clone-deep>shallow-clone": {
       "globals": {
         "Buffer.allocUnsafe": true,
@@ -1301,4 +1327,4 @@
       }
     }
   }
-}
+}

packages/snaps-execution-environments/webpack.config.mjs

@@ -6,7 +6,6 @@ import { LavaMoatPlugin } from '@lavamoat/webpack';
 import { readFileSync } from 'fs';
 import HtmlWebpackPlugin from 'html-webpack-plugin';
 import { isBuiltin } from 'module';
-import { createRequire } from 'node:module';
 import { dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { resolve } from 'path';
@@ -31,16 +30,29 @@ const IS_PRODUCTION =
   // eslint-disable-next-line n/no-process-env
   process.env.NODE_ENV !== 'development' && process.env.NODE_ENV !== 'test';
 
-// eslint-disable-next-line no-shadow
-const require = createRequire(import.meta.url);
+/**
+ * The path to the root `node_modules` directory.
+ *
+ * @type {string}
+ */
+const NODE_MODULES_PATH = resolve(
+  fileURLToPath(import.meta.url),
+  '..',
+  '..',
+  '..',
+  'node_modules',
+);
 
 /**
  * The SES bundle used for the lockdown script.
  *
  * @type {string}
  */
 // eslint-disable-next-line n/no-sync
-const SES_BUNDLE = readFileSync(require.resolve('ses'), 'utf-8');
+const SES_BUNDLE = readFileSync(
+  resolve(NODE_MODULES_PATH, 'ses', 'dist', 'ses.cjs'),
+  'utf-8',
+);
 
 /**
  * @typedef {import('webpack').Configuration} Configuration
@@ -193,7 +205,7 @@ const baseConfig = {
       // safely ignore it if it's not available.
       crypto: false,
 
-      stream: require.resolve('stream-browserify'),
+      stream: resolve(NODE_MODULES_PATH, 'stream-browserify', 'index.js'),
     },
 
     plugins: [