[Bug]: node:fs/promises is not patched, leading to sandbox/runfiles escape

[matthewjh]

What happened?

Hi, I noticed that the fs patches apply to node:fs but not to node:fs/promises. This causes problems with sandbox escape in some tools.

Version

Development (host) and target OS/architectures:

Output of bazel --version:

Version of the Aspect rules, or other relevant rules from your
WORKSPACE or MODULE.bazel file:

rules_js 1.41.1

Language(s) and/or frameworks involved:
node v18.16

How to reproduce

No response

Any other information?

No response

[devversion]

For example, this is happening with rollup, which uses fs/promises (capturing for history)

[thesayyn]

fs-patching is really brittle and probably does not work with new nodejs modules due to how the internal js files are imported. eg const fs = require("internal/fs") versus const {readDir} = require("internal/fs") where latter does not allow us to monkey patch things and have it propagate up the import chain. I am not sure what the right fix here would be.