feat: lavamoat

.github/workflows/e2e.yml

@@ -27,6 +27,10 @@ jobs:
         uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af
         with:
           node-version: ${{ matrix.node-version }}
+      - name: Install system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libusb-1.0-0-dev libudev-dev
       # Install NPM dependencies, cache them correctly
       # and run all Cypress tests
       - name: Cypress run
@@ -37,3 +41,4 @@ jobs:
           wait-on: 'http://localhost:3000'
           wait-on-timeout: 120
           browser: chrome
+          install-command: npm ci

.github/workflows/main.yml

@@ -27,8 +27,14 @@ jobs:
       uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b
       with:
         node-version: ${{ matrix.node-version }}
+    - name: Install system dependencies
+      run: |
+        sudo apt-get update
+        sudo apt-get install -y libusb-1.0-0-dev libudev-dev
     - name: Install dependencies
       run: npm install
+    - name: Install ttag-cli globally
+      run: npm install -g ttag-cli
     - name: Install gettext
       run: sudo apt-get install gettext
     - name: Check version

config-overrides.js

@@ -2,6 +2,7 @@ const webpack = require('webpack');
 const LavaMoatPlugin = require('@lavamoat/webpack')
 const fs = require('fs');
 const path = require('path');
+const stdLibBrowser = require('node-stdlib-browser');
 
 module.exports = function override(config, env) {
   // Enable source maps for better debugging
@@ -17,21 +18,14 @@ module.exports = function override(config, env) {
   config.resolve = {
     ...config.resolve,
     fallback: {
-      url: require.resolve('url'),
-      fs: false,
-      assert: require.resolve('assert'),
-      crypto: require.resolve('crypto-browserify'),
-      http: require.resolve('stream-http'),
-      https: require.resolve('https-browserify'),
-      os: require.resolve('os-browserify/browser'),
-      buffer: require.resolve('buffer'),
-      stream: require.resolve('stream-browserify'),
-      vm: require.resolve('vm-browserify'),
-      path: require.resolve("path-browserify"),
-      worker_threads: false,
-      perf_hooks: false,
-      tls: false,
-      net: false
+      buffer: require.resolve('buffer/'),
+      assert: stdLibBrowser.assert,
+      crypto: stdLibBrowser.crypto,
+      path: stdLibBrowser.path,
+      process: stdLibBrowser.process,
+      stream: stdLibBrowser.stream,
+      os: stdLibBrowser.os,
+      vm: false,
     },
     mainFields: ['browser', 'module', 'main'],
     conditionNames: ['import', 'require', 'node', 'default'],
@@ -60,6 +54,9 @@ module.exports = function override(config, env) {
     }
   });
 
+  // Allow importing of .mjs files without specifying the extension
+  // This is needed because Node.js requires the .mjs extension for ES modules,
+  // but webpack can handle them automatically
   config.module.rules.push({
     test: /\.m?js/,
     resolve: {
@@ -77,9 +74,9 @@ module.exports = function override(config, env) {
   const basePlugins = [
     ...config.plugins.filter(p => !(p instanceof webpack.ProvidePlugin)),
     new webpack.ProvidePlugin({
-      process: 'process/browser',
-      Buffer: ['buffer-shim', 'default']
-    }),
+      Buffer: ['buffer', 'Buffer'],
+      process: stdLibBrowser.process
+    })
   ];
 
   // Only add LavaMoat in production because LavaMoat does not work with the

lavamoat/webpack/policy-override.json

@@ -254,9 +254,6 @@
         "console": true,
         "Error": true,
         "Object": true,
-        "XMLHttpRequest": true,
-        "FormData": true,
-        "Blob": true,
         "window": true,
         "document": true,
         "navigator": true,