fix(lavamoat): allow prefixed builtins

Closes #652

packages/node/src/parseForPolicy.js

@@ -1,6 +1,6 @@
 const path = require('path')
 const { promises: fs } = require('fs')
-const { builtinModules: builtinPackages } = require('module')
+const { builtinModules } = require('module')
 const resolve = require('resolve')
 const bindings = require('bindings')
 const gypBuild = require('node-gyp-build')
@@ -19,6 +19,11 @@ const { checkForResolutionOverride } = require('./resolutions')
 const commonjsExtensions = ['', '.js', '.cjs']
 const resolutionOmittedExtensions = ['.js', '.json']
 
+/**
+ * Allow use of `node:` prefixed builtins.
+ */
+const builtinPackages = [...builtinModules].concat(builtinModules.map(id => `node:${id}`))
+
 // approximate polyfill for node builtin
 const createRequire = (url) => {
   return {

packages/node/test/index.js

@@ -83,6 +83,21 @@ test('parseForPolicy - indirectly used packages are included in parent\'s allowl
   })
 })
 
+test('parseForPolicy - find node:-prefixed builtins', async (t) => {
+  const projectRoot = `${__dirname}/projects/6`;
+  const entryId = `${projectRoot}/index.js`;
+  const policy = await parseForPolicy({ entryId, projectRoot });
+  t.deepEqual(policy, {
+    resources: {
+      a: {
+        builtin: {
+          'node:events.EventEmitter': true
+        }
+      }
+    }
+  });
+})
+
 // run lavamoat-node
 test('execute - resolutions', async (t) => {
   const projectRoot = `${__dirname}/projects/1`

packages/node/test/projects/6/index.js

@@ -0,0 +1 @@
+require('a');

packages/node/test/projects/6/lavamoat/node/policy.json

@@ -0,0 +1,9 @@
+{
+  "resources": {
+    "a": {
+      "builtin": {
+        "node:events.EventEmitter": true
+      }
+    }
+  }
+}

packages/node/test/projects/6/package.json

@@ -0,0 +1,9 @@
+{
+  "name": "test-6",
+  "scripts": {
+    "setup": "npm install"
+  },
+  "dependencies": {
+    "a": "file:./fake_node_modules/a"
+  }
+}