feat(ses): add SES version to lockdown shim

[leotm]

closes: #1853

Description

Prepends the ses package.json > version as a comment to the bundled lockdown file

Security Considerations

Scaling Considerations

Documentation Considerations

Possibly worth mentioning the version number is now included in the SES lockdown shim

Testing Considerations

Possibly add a unit test to check the version number is present at the head of the file

Manually tested locally:

git clean -fdx

nvm use 16 # or 18 or 20

npm i --force # https://github.com/endojs/endo/assets/1881059/72a4079c-fe00-4de8-ac2d-fb13406edbad

cd packages/ses
npm run build

head dist/ses.cjs # ensure correct version present as comment on line 1

npm run test

on Node

• v14.20.1
  • ❌ CI errors
  • now fixed
• v16.20.0
• v18.17.1

Upgrade Considerations

[kriskowal]

Feedback for your consideration. If you are unable to merge this, please reply when it’s ready to merge.

[boneskull]

Looks fine, but had a question or two

[boneskull]

Can we not do this:

Suggested change

	const bytes = await fs.promises.readFile(
	fileURLToPath(`${root}/package.json`),
	);
	const text = textDecoder.decode(bytes);
	const text = await fs.promises.readFile(
	fileURLToPath(`${root}/package.json`),
	'utf8'
	);

and drop the TextDecoder? Is this an Endo convention?

[leotm]

nice the 2nd arg w utf8 cleans up the need for TextDecoder ^
spotted utf-8 is also used, but don't think it matters? (same result)
if not, then RE convention i favour our suggestion (the default)

---

edit: i guess the same change could be made as follow-up in packages/check-bundle/index.js
and possibly deeper in various other parts the codebase

---

edit: just realised could do this aswell 🤷‍♂️

  const bytes = await fs.promises.readFile(
    fileURLToPath(`${root}/package.json`),
  );
  const packageJson = JSON.parse(bytes);

[leotm]

Feedback for your consideration. If you are unable to merge this, please reply when it’s ready to merge.

Changes made, re-ready 2 merge @kriskowal (i'm not authorized to merge)