fix(ai): replace raw require(node:fs) with loadNodeBuiltinModule in getProcEnv (#102947)

wm0018 · steipete · web-flow · commit 50cb0d66b8e6 · 2026-07-10T00:14:58.000+01:00
* fix(ai): replace raw require(node:fs) with loadNodeBuiltinModule in getProcEnv

* test(ai): cover browser-safe env key bundle

---------

Co-authored-by: Peter Steinberger &lt;steipete@gmail.com&gt;
diff --git a/packages/ai/src/env-api-keys.browser-bundle.test.ts b/packages/ai/src/env-api-keys.browser-bundle.test.ts
@@ -0,0 +1,19 @@
+import { fileURLToPath } from "node:url";
+import { build } from "esbuild";
+import { describe, expect, it } from "vitest";
+
+describe("env API key browser bundle", () => {
+  it("does not emit a static node:fs require", async () => {
+    const result = await build({
+      entryPoints: [fileURLToPath(new URL("./env-api-keys.ts", import.meta.url))],
+      bundle: true,
+      format: "esm",
+      logLevel: "silent",
+      platform: "browser",
+      write: false,
+    });
+
+    const output = result.outputFiles[0]?.text ?? "";
+    expect(output).not.toMatch(/(?:__)?require\(\s*["']node:fs["']\s*\)/u);
+  });
+});
diff --git a/packages/ai/src/env-api-keys.ts b/packages/ai/src/env-api-keys.ts
@@ -89,8 +89,11 @@ function getProcEnv(key: string): string | undefined {
   if (procEnvCache === null) {
     procEnvCache = new Map();
     try {
-      const { readFileSync } = require("node:fs") as typeof import("node:fs");
-      const data = readFileSync("/proc/self/environ", "utf-8");
+      const fsModule = loadNodeBuiltinModule(NODE_FS_SPECIFIER) as typeof import("node:fs") | null;
+      if (!fsModule) {
+        return undefined;
+      }
+      const data = fsModule.readFileSync("/proc/self/environ", "utf-8");
       for (const entry of data.split("\0")) {
         const idx = entry.indexOf("=");
         if (idx > 0) {
