feat: US-186 - Add node-fetch project-matrix fixture

Author: NathanFlurry

docs/nodejs-compatibility.mdx

@@ -71,6 +71,7 @@ The [project-matrix test suite](https://github.com/rivet-dev/secure-exec/tree/ma
 | [astro](https://npmjs.com/package/astro) | Web Framework | Island architecture, SSR, multi-framework |
 | [hono](https://npmjs.com/package/hono) | Web Framework | ESM imports, lightweight HTTP |
 | [axios](https://npmjs.com/package/axios) | HTTP Client | HTTP client requests via fetch adapter, JSON APIs |
+| [node-fetch](https://npmjs.com/package/node-fetch) | HTTP Client | Fetch polyfill using http module, stream piping |
 | [dotenv](https://npmjs.com/package/dotenv) | Configuration | Environment variable loading, fs reads |
 | [semver](https://npmjs.com/package/semver) | Utility | Version parsing and comparison |
 | [ssh2](https://npmjs.com/package/ssh2) | Networking | SSH client/server, crypto, streams, events |

packages/secure-exec-core/isolate-runtime/src/inject/require-setup.ts

@@ -1042,6 +1042,34 @@
           return result;
         }
 
+        // Fix stream prototype chain broken by esbuild's circular-dep resolution.
+        // stream-browserify → readable-stream → require('stream') creates a cycle;
+        // esbuild gives Readable a stale Stream ref, so Readable extends EventEmitter
+        // directly instead of Stream. Insert Stream.prototype into the chain so
+        // `passThrough instanceof Stream` works (node-fetch, undici, etc. depend on this).
+        if (name === 'stream') {
+          if (
+            typeof result === 'function' &&
+            result.prototype &&
+            typeof result.Readable === 'function'
+          ) {
+            var readableProto = result.Readable.prototype;
+            var streamProto = result.prototype;
+            // Only patch if Stream.prototype is not already in the chain
+            if (
+              readableProto &&
+              streamProto &&
+              !(readableProto instanceof result)
+            ) {
+              // Insert Stream.prototype between Readable.prototype and its current parent
+              var currentParent = Object.getPrototypeOf(readableProto);
+              Object.setPrototypeOf(streamProto, currentParent);
+              Object.setPrototypeOf(readableProto, streamProto);
+            }
+          }
+          return result;
+        }
+
         if (name === 'path') {
           if (result.win32 === null || result.win32 === undefined) {
             result.win32 = result.posix || result;

packages/secure-exec-core/src/generated/isolate-runtime.ts

@@ -0,0 +1,4 @@
+{
+	"entry": "src/index.js",
+	"expectation": "pass"
+}

packages/secure-exec/tests/projects/node-fetch-pass/fixture.json

@@ -0,0 +1,8 @@
+{
+	"name": "project-matrix-node-fetch-pass",
+	"private": true,
+	"type": "commonjs",
+	"dependencies": {
+		"node-fetch": "2.7.0"
+	}
+}

packages/secure-exec/tests/projects/node-fetch-pass/package.json

@@ -0,0 +1,59 @@
+"use strict";
+
+const http = require("http");
+const fetch = require("node-fetch");
+
+const server = http.createServer((req, res) => {
+	if (req.method === "GET" && req.url === "/hello") {
+		res.writeHead(200, { "Content-Type": "application/json" });
+		res.end(JSON.stringify({ message: "hello" }));
+	} else if (req.method === "GET" && req.url === "/users/42") {
+		res.writeHead(200, { "Content-Type": "application/json" });
+		res.end(JSON.stringify({ id: "42", name: "test-user" }));
+	} else if (req.method === "POST" && req.url === "/data") {
+		let body = "";
+		req.on("data", (chunk) => (body += chunk));
+		req.on("end", () => {
+			res.writeHead(200, { "Content-Type": "application/json" });
+			res.end(JSON.stringify({ method: "POST", received: JSON.parse(body) }));
+		});
+	} else {
+		res.writeHead(404);
+		res.end();
+	}
+});
+
+async function main() {
+	await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
+	const port = server.address().port;
+	const base = "http://127.0.0.1:" + port;
+
+	try {
+		const results = [];
+
+		const r1 = await fetch(base + "/hello");
+		const b1 = await r1.json();
+		results.push({ route: "GET /hello", status: r1.status, body: b1 });
+
+		const r2 = await fetch(base + "/users/42");
+		const b2 = await r2.json();
+		results.push({ route: "GET /users/42", status: r2.status, body: b2 });
+
+		const r3 = await fetch(base + "/data", {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body: JSON.stringify({ key: "value" }),
+		});
+		const b3 = await r3.json();
+		results.push({ route: "POST /data", status: r3.status, body: b3 });
+
+		console.log(JSON.stringify(results));
+	} finally {
+		await new Promise((resolve) => server.close(resolve));
+	}
+}
+
+main().catch((err) => {
+	console.error(err.message);
+	process.exit(1);
+});