@socketsecurity/lib 6.0.9 → 6.0.10

package/dist/smol/http.js

@@ -23,6 +23,8 @@ let smolHttpProbed = false;
 /**
 * Returns `node:smol-http` when running on the smol Node binary, otherwise
 * `undefined`. Result is cached across calls.
+*
+* @unused No internal or Socket consumers (exercised only by its unit tests).
 */
 function getSmolHttp() {
 	if (!smolHttpProbed) {

package/dist/smol/https.d.ts

@@ -55,5 +55,7 @@ export interface SmolHttpsBinding {
 /**
  * Returns `node:smol-https` when running on the smol Node binary, otherwise
  * `undefined`. Result is cached across calls.
+ *
+ * @unused No internal or Socket consumers (exercised only by its unit tests).
  */
 export declare function getSmolHttps(): SmolHttpsBinding | undefined;

package/dist/smol/https.js

@@ -21,6 +21,8 @@ let smolHttpsProbed = false;
 /**
 * Returns `node:smol-https` when running on the smol Node binary, otherwise
 * `undefined`. Result is cached across calls.
+*
+* @unused No internal or Socket consumers (exercised only by its unit tests).
 */
 function getSmolHttps() {
 	if (!smolHttpsProbed) {

package/dist/sorts/_internal.d.ts

@@ -3,6 +3,5 @@
  *   fast-sort + semver, and the cached Intl.Collator instances. Used by the
  *   locale / natural / semver comparison entrypoints.
  */
-import type * as fastSortType from '../external/fast-sort';
-export { getSemver } from '../versions/_internal';
-export declare function getFastSort(): typeof fastSortType;
+import type { default as FastSort } from '../external/fast-sort';
+export declare function getFastSort(): typeof FastSort;

package/dist/sorts/_internal.js

@@ -1,7 +1,6 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_versions__internal = require('../versions/_internal.js');
 
 //#region src/sorts/_internal.ts
 let fastSort;
@@ -11,5 +10,4 @@ function getFastSort() {
 }
 
 //#endregion
-exports.getFastSort = getFastSort;
-exports.getSemver = require_versions__internal.getSemver;
+exports.getFastSort = getFastSort;

package/dist/spinner/format.js

@@ -1,10 +1,8 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_runtime = require('../_virtual/_rolldown/runtime.js');
 const require_primordials_math = require('../primordials/math.js');
-let src_external_yoctocolors_cjs = require("../external/yoctocolors-cjs");
-src_external_yoctocolors_cjs = require_runtime.__toESM(src_external_yoctocolors_cjs);
+const require_logger_colors = require('../logger/colors.js');
 
 //#region src/spinner/format.ts
 /**
@@ -86,7 +84,7 @@ function renderProgressBar(percentage, width = 20) {
 	const filled = require_primordials_math.MathMax(0, Math.min(width, Math.round(percentage / 100 * width)));
 	const empty = require_primordials_math.MathMax(0, width - filled);
 	const bar = "█".repeat(filled) + "░".repeat(empty);
-	return src_external_yoctocolors_cjs.default.cyan(bar);
+	return require_logger_colors.getYoctocolors().cyan(bar);
 }
 
 //#endregion

package/dist/stdio/footer.js

@@ -1,14 +1,11 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_runtime = require('../_virtual/_rolldown/runtime.js');
 const require_primordials_array = require('../primordials/array.js');
 const require_primordials_date = require('../primordials/date.js');
 const require_logger_symbols = require('../logger/symbols.js');
 const require_strings_format = require('../strings/format.js');
 const require_logger_default = require('../logger/default.js');
-let src_external_yoctocolors_cjs = require("../external/yoctocolors-cjs");
-src_external_yoctocolors_cjs = require_runtime.__toESM(src_external_yoctocolors_cjs);
 
 //#region src/stdio/footer.ts
 /**
@@ -44,16 +41,17 @@ function createFooter(message, options) {
 		__proto__: null,
 		...options
 	};
+	const colors = require("../external/yoctocolors-cjs");
 	const border = require_strings_format.repeatString(borderChar, width);
 	const lines = [];
-	if (message) require_primordials_array.ArrayPrototypePush(lines, (color && src_external_yoctocolors_cjs.default[color] ? src_external_yoctocolors_cjs.default[color] : (s) => s)(message));
+	if (message) require_primordials_array.ArrayPrototypePush(lines, (color && colors[color] ? colors[color] : (s) => s)(message));
 	if (showTimestamp) {
 		const timestamp = new require_primordials_date.DateCtor().toISOString();
-		require_primordials_array.ArrayPrototypePush(lines, src_external_yoctocolors_cjs.default.gray(`Completed at: ${timestamp}`));
+		require_primordials_array.ArrayPrototypePush(lines, colors.gray(`Completed at: ${timestamp}`));
 	}
 	if (showDuration && startTime) {
 		const seconds = ((require_primordials_date.DateNow() - startTime) / 1e3).toFixed(2);
-		require_primordials_array.ArrayPrototypePush(lines, src_external_yoctocolors_cjs.default.gray(`Duration: ${seconds}s`));
+		require_primordials_array.ArrayPrototypePush(lines, colors.gray(`Duration: ${seconds}s`));
 	}
 	require_primordials_array.ArrayPrototypePush(lines, border);
 	return lines.join("\n");
@@ -114,7 +112,10 @@ function createSummaryFooter(stats, options) {
 function printFooter(message) {
 	const border = require_strings_format.repeatString("─", 55);
 	logger.log(border);
-	if (message) logger.log(src_external_yoctocolors_cjs.default.green(message));
+	if (message) {
+		const colors = require("../external/yoctocolors-cjs");
+		logger.log(colors.green(message));
+	}
 }
 
 //#endregion

package/dist/stdio/prompts.d.ts

@@ -2,17 +2,10 @@
  * @file User prompt utilities for interactive scripts. Provides inquirer.js
  *   integration with spinner support, context handling, and theming.
  */
-import checkboxRaw from '../external/@inquirer/checkbox';
-import confirmRaw from '../external/@inquirer/confirm';
-import inputRaw from '../external/@inquirer/input';
-import passwordRaw from '../external/@inquirer/password';
 import type { Remap } from '../objects/types';
 import type { SpinnerInstance } from '../spinner/types';
 import type { ThemeName } from '../themes/themes';
 import type { Theme } from '../themes/types';
-declare const searchRaw: any;
-declare const selectRaw: any;
-declare const ActualSeparator: any;
 /**
  * Choice option for select and search prompts.
  *
@@ -135,7 +128,7 @@ export declare function createInquirerTheme(theme: Theme | ThemeName | unknown):
  *
  * @returns Separator instance
  */
-export declare function createSeparator(text?: string): InstanceType<typeof ActualSeparator>;
+export declare function createSeparator(text?: string): Separator;
 /**
  * Check if value is a Socket Theme object.
  *
@@ -183,7 +176,7 @@ export declare function wrapPrompt<T = unknown>(inquirerPrompt: (...args: unknow
  *     ],
  *   })
  */
-export declare const checkbox: typeof checkboxRaw;
+export declare const checkbox: (...args: unknown[]) => Promise<unknown>;
 /**
  * Prompt for a yes/no confirmation. Wrapped with spinner handling and abort
  * signal support.
@@ -192,7 +185,7 @@ export declare const checkbox: typeof checkboxRaw;
  *   const answer = await confirm({ message: 'Continue?' })
  *   if (answer) { // user confirmed }
  */
-export declare const confirm: typeof confirmRaw;
+export declare const confirm: (...args: unknown[]) => Promise<unknown>;
 /**
  * Prompt for text input. Wrapped with spinner handling and abort signal
  * support. Result is automatically trimmed.
@@ -200,7 +193,7 @@ export declare const confirm: typeof confirmRaw;
  * @example
  *   const name = await input({ message: 'Enter your name:' })
  */
-export declare const input: typeof inputRaw;
+export declare const input: (...args: unknown[]) => Promise<unknown>;
 /**
  * Prompt for password input (hidden characters). Wrapped with spinner handling
  * and abort signal support.
@@ -208,7 +201,7 @@ export declare const input: typeof inputRaw;
  * @example
  *   const token = await password({ message: 'Enter API token:' })
  */
-export declare const password: typeof passwordRaw;
+export declare const password: (...args: unknown[]) => Promise<unknown>;
 /**
  * Prompt with searchable/filterable choices. Wrapped with spinner handling and
  * abort signal support.
@@ -219,7 +212,7 @@ export declare const password: typeof passwordRaw;
  *     source: async input => fetchPackages(input),
  *   })
  */
-export declare const search: typeof searchRaw;
+export declare const search: (...args: unknown[]) => Promise<unknown>;
 /**
  * Prompt to select from a list of choices. Wrapped with spinner handling and
  * abort signal support.
@@ -233,5 +226,5 @@ export declare const search: typeof searchRaw;
  *     ],
  *   })
  */
-export declare const select: typeof selectRaw;
-export { ActualSeparator as Separator };
+export declare const select: (...args: unknown[]) => Promise<unknown>;
+export declare const Separator: typeof SeparatorType;

package/dist/stdio/prompts.js

@@ -1,37 +1,18 @@
 "use strict";
 /* Socket Lib - Built with rolldown */
 Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
-const require_runtime = require('../_virtual/_rolldown/runtime.js');
 const require_process_abort = require('../process/abort.js');
 const require_themes_themes = require('../themes/themes.js');
 const require_themes_context = require('../themes/context.js');
 const require_logger_colors = require('../logger/colors.js');
 const require_themes_resolve = require('../themes/resolve.js');
 const require_spinner_default = require('../spinner/default.js');
-let src_external__inquirer_checkbox = require("../external/@inquirer/checkbox");
-src_external__inquirer_checkbox = require_runtime.__toESM(src_external__inquirer_checkbox);
-let src_external__inquirer_confirm = require("../external/@inquirer/confirm");
-src_external__inquirer_confirm = require_runtime.__toESM(src_external__inquirer_confirm);
-let src_external__inquirer_input = require("../external/@inquirer/input");
-src_external__inquirer_input = require_runtime.__toESM(src_external__inquirer_input);
-let src_external__inquirer_password = require("../external/@inquirer/password");
-src_external__inquirer_password = require_runtime.__toESM(src_external__inquirer_password);
-let src_external__inquirer_search = require("../external/@inquirer/search");
-src_external__inquirer_search = require_runtime.__toESM(src_external__inquirer_search);
-let src_external__inquirer_select = require("../external/@inquirer/select");
-src_external__inquirer_select = require_runtime.__toESM(src_external__inquirer_select);
 
 //#region src/stdio/prompts.ts
 /**
 * @file User prompt utilities for interactive scripts. Provides inquirer.js
 *   integration with spinner support, context handling, and theming.
 */
-const abortSignal = require_process_abort.getAbortSignal();
-const spinner = require_spinner_default.getDefaultSpinner();
-const searchRaw = src_external__inquirer_search.default;
-const selectModule = src_external__inquirer_select;
-const selectRaw = selectModule.default;
-const ActualSeparator = selectModule.Separator;
 /**
 * Convert Socket theme to @inquirer theme format. Maps our theme colors to
 * inquirer's style functions. Handles theme names, Theme objects, and passes
@@ -102,7 +83,7 @@ function createInquirerTheme(theme) {
 * @returns Separator instance
 */
 function createSeparator(text) {
-	return new ActualSeparator(text);
+	return new (require("../external/@inquirer/select")).Separator(text);
 }
 /**
 * Check if value is a Socket Theme object.
@@ -144,8 +125,8 @@ function wrapPrompt(inquirerPrompt) {
 	return async (...args) => {
 		const origContext = args.length > 1 ? args[1] : void 0;
 		const { spinner: contextSpinner, ...contextWithoutSpinner } = origContext ?? {};
-		const spinnerInstance = contextSpinner !== void 0 ? contextSpinner : spinner;
-		const signal = abortSignal;
+		const spinnerInstance = contextSpinner !== void 0 ? contextSpinner : require_spinner_default.getDefaultSpinner();
+		const signal = require_process_abort.getAbortSignal();
 		const config = args[0];
 		if (config && typeof config === "object") if (!config["theme"]) config["theme"] = createInquirerTheme(require_themes_context.getTheme());
 		else config["theme"] = createInquirerTheme(config["theme"]);
@@ -180,7 +161,7 @@ function wrapPrompt(inquirerPrompt) {
 *     ],
 *   })
 */
-const checkbox = wrapPrompt(src_external__inquirer_checkbox.default);
+const checkbox = wrapPrompt((...args) => require("../external/@inquirer/checkbox").default(...args));
 /**
 * Prompt for a yes/no confirmation. Wrapped with spinner handling and abort
 * signal support.
@@ -189,7 +170,7 @@ const checkbox = wrapPrompt(src_external__inquirer_checkbox.default);
 *   const answer = await confirm({ message: 'Continue?' })
 *   if (answer) { // user confirmed }
 */
-const confirm = wrapPrompt(src_external__inquirer_confirm.default);
+const confirm = wrapPrompt((...args) => require("../external/@inquirer/confirm").default(...args));
 /**
 * Prompt for text input. Wrapped with spinner handling and abort signal
 * support. Result is automatically trimmed.
@@ -197,7 +178,7 @@ const confirm = wrapPrompt(src_external__inquirer_confirm.default);
 * @example
 *   const name = await input({ message: 'Enter your name:' })
 */
-const input = wrapPrompt(src_external__inquirer_input.default);
+const input = wrapPrompt((...args) => require("../external/@inquirer/input").default(...args));
 /**
 * Prompt for password input (hidden characters). Wrapped with spinner handling
 * and abort signal support.
@@ -205,7 +186,7 @@ const input = wrapPrompt(src_external__inquirer_input.default);
 * @example
 *   const token = await password({ message: 'Enter API token:' })
 */
-const password = wrapPrompt(src_external__inquirer_password.default);
+const password = wrapPrompt((...args) => require("../external/@inquirer/password").default(...args));
 /**
 * Prompt with searchable/filterable choices. Wrapped with spinner handling and
 * abort signal support.
@@ -216,7 +197,7 @@ const password = wrapPrompt(src_external__inquirer_password.default);
 *     source: async input => fetchPackages(input),
 *   })
 */
-const search = wrapPrompt(searchRaw);
+const search = wrapPrompt((...args) => require("../external/@inquirer/search").default(...args));
 /**
 * Prompt to select from a list of choices. Wrapped with spinner handling and
 * abort signal support.
@@ -230,10 +211,18 @@ const search = wrapPrompt(searchRaw);
 *     ],
 *   })
 */
-const select = wrapPrompt(selectRaw);
+const select = wrapPrompt((...args) => require("../external/@inquirer/select").default(...args));
+const Separator = new Proxy(function() {}, {
+	construct(_target, args) {
+		return Reflect.construct(require("../external/@inquirer/select").Separator, args);
+	},
+	get(_target, prop, receiver) {
+		return Reflect.get(require("../external/@inquirer/select").Separator, prop, receiver);
+	}
+});
 
 //#endregion
-exports.Separator = ActualSeparator;
+exports.Separator = Separator;
 exports.checkbox = checkbox;
 exports.confirm = confirm;
 exports.createInquirerTheme = createInquirerTheme;

package/dist/strings/predicates.d.ts

@@ -3,7 +3,7 @@
  *   TypeScript type guards so callers can narrow `unknown` → `string` (or
  *   `BlankString` / non-empty string) without an extra cast.
  */
-import type { BlankString, EmptyString } from './types';
+import type { BlankString, NonEmptyString } from './types';
 /**
  * Check if a value is a blank string (empty or only whitespace).
  *
@@ -49,4 +49,4 @@ export declare function isBlankString(value: unknown): value is BlankString;
  *
  * @returns `true` if the value is a non-empty string, `false` otherwise
  */
-export declare function isNonEmptyString(value: unknown): value is Exclude<string, EmptyString>;
+export declare function isNonEmptyString(value: unknown): value is NonEmptyString;

package/dist/strings/search.js

@@ -43,7 +43,7 @@ function search(str, regexp, options) {
 		...options
 	};
 	const { length } = str;
-	if (fromIndex >= length) return -1;
+	if (fromIndex > length) return -1;
 	if (fromIndex === 0) return require_primordials_string.StringPrototypeSearch(str, regexp);
 	const offset = fromIndex < 0 ? require_primordials_math.MathMax(length + fromIndex, 0) : fromIndex;
 	const result = require_primordials_string.StringPrototypeSlice(str, offset).search(regexp);

package/dist/strings/types.d.ts

@@ -10,6 +10,10 @@ declare const EmptyStringBrand: unique symbol;
 export type EmptyString = string & {
     [EmptyStringBrand]: true;
 };
+declare const NonEmptyStringBrand: unique symbol;
+export type NonEmptyString = string & {
+    [NonEmptyStringBrand]: true;
+};
 export interface ApplyLinePrefixOptions {
     /**
      * The prefix to add to each line.

package/dist/strings/width.d.ts

@@ -14,6 +14,7 @@
  */
 import type { eastAsianWidth as eastAsianWidthType } from '../external/get-east-asian-width';
 export declare function getEastAsianWidth(): typeof eastAsianWidthType;
+export declare function getSegmenter(): Intl.Segmenter;
 /**
  * Get the visual width of a string in terminal columns.
  *

package/dist/strings/width.js

@@ -26,7 +26,11 @@ function getEastAsianWidth() {
 	if (cachedEastAsianWidth === void 0) cachedEastAsianWidth = (/* @__PURE__ */ require("../external/get-east-asian-width")).eastAsianWidth;
 	return cachedEastAsianWidth;
 }
-const segmenter = new require_primordials_intl.IntlSegmenter();
+let segmenter;
+function getSegmenter() {
+	if (segmenter === void 0) segmenter = new require_primordials_intl.IntlSegmenter();
+	return segmenter;
+}
 let zeroWidthClusterRegex;
 let leadingNonPrintingRegex;
 let emojiRegex;
@@ -73,7 +77,7 @@ function stringWidth(text) {
 	let width = 0;
 	const eastAsianWidthOptions = { ambiguousAsWide: false };
 	const eastAsianWidth = getEastAsianWidth();
-	for (const { segment } of segmenter.segment(plainText)) {
+	for (const { segment } of getSegmenter().segment(plainText)) {
 		if (require_primordials_regexp.RegExpPrototypeTest(zeroWidthClusterRegex, segment)) continue;
 		if (require_primordials_regexp.RegExpPrototypeTest(emojiRegex, segment)) {
 			width += 2;
@@ -83,13 +87,17 @@ function stringWidth(text) {
 		if (codePoint === void 0) continue;
 		/* c8 ignore next - External eastAsianWidth call */
 		width += eastAsianWidth(codePoint, eastAsianWidthOptions);
-		if (segment.length > 1) for (const char of segment.slice(1)) {
-			const charCode = require_primordials_string.StringPrototypeCharCodeAt(char, 0);
-			if (charCode >= 65280 && charCode <= 65519) {
-				const trailingCodePoint = require_primordials_string.StringPrototypeCodePointAt(char, 0);
-				if (trailingCodePoint !== void 0)
+		if (segment.length > 1) {
+			const trailingChars = segment.slice(1);
+			for (let i = 0, { length } = trailingChars; i < length; i += 1) {
+				const char = trailingChars[i];
+				const charCode = require_primordials_string.StringPrototypeCharCodeAt(char, 0);
+				if (charCode >= 65280 && charCode <= 65519) {
+					const trailingCodePoint = require_primordials_string.StringPrototypeCodePointAt(char, 0);
+					if (trailingCodePoint !== void 0)
  /* c8 ignore next - External eastAsianWidth call */
-				width += eastAsianWidth(trailingCodePoint, eastAsianWidthOptions);
+					width += eastAsianWidth(trailingCodePoint, eastAsianWidthOptions);
+				}
 			}
 		}
 	}
@@ -98,4 +106,5 @@ function stringWidth(text) {
 
 //#endregion
 exports.getEastAsianWidth = getEastAsianWidth;
+exports.getSegmenter = getSegmenter;
 exports.stringWidth = stringWidth;

package/dist/themes/context.d.ts

@@ -2,6 +2,7 @@
  * @file Elegant theme context management. Async-aware theming with automatic
  *   context isolation via AsyncLocalStorage.
  */
+import type { AsyncLocalStorage } from 'node:async_hooks';
 import type { Theme } from './types';
 import type { ThemeName } from './themes';
 import { getNodeAsyncHooks } from '../node/async-hooks';
@@ -35,6 +36,18 @@ export declare const getAsyncHooks: typeof getNodeAsyncHooks;
  * @returns Current theme
  */
 export declare function getTheme(): Theme;
+/**
+ * Get the process-scoped AsyncLocalStorage used for theme context isolation.
+ *
+ * Constructed LAZILY (memoized) rather than at module-eval: an
+ * AsyncLocalStorage holds a live native handle, and constructing it at import
+ * time pins that handle into every module transitively importing this leaf —
+ * aborting V8 --build-snapshot serialization. Deferring to first use keeps the
+ * single-store semantics while leaving module import snapshot-safe.
+ *
+ * @private
+ */
+export declare function getThemeStorage(): AsyncLocalStorage<Theme>;
 /**
  * Subscribe to theme change events.
  *

package/dist/themes/context.js

@@ -22,11 +22,7 @@ function emitThemeChange(theme) {
 * @private
 */
 const getAsyncHooks = require_node_async_hooks.getNodeAsyncHooks;
-/**
-* AsyncLocalStorage for theme context isolation.
-*/
-const { AsyncLocalStorage } = getAsyncHooks();
-const themeStorage = new AsyncLocalStorage();
+let themeStorage;
 /**
 * Fallback theme for global context.
 */
@@ -47,7 +43,25 @@ const listeners = new require_primordials_map_set.SetCtor();
 * @returns Current theme
 */
 function getTheme() {
-	return themeStorage.getStore() ?? fallbackTheme;
+	return getThemeStorage().getStore() ?? fallbackTheme;
+}
+/**
+* Get the process-scoped AsyncLocalStorage used for theme context isolation.
+*
+* Constructed LAZILY (memoized) rather than at module-eval: an
+* AsyncLocalStorage holds a live native handle, and constructing it at import
+* time pins that handle into every module transitively importing this leaf —
+* aborting V8 --build-snapshot serialization. Deferring to first use keeps the
+* single-store semantics while leaving module import snapshot-safe.
+*
+* @private
+*/
+function getThemeStorage() {
+	if (themeStorage === void 0) {
+		const { AsyncLocalStorage } = getAsyncHooks();
+		themeStorage = new AsyncLocalStorage();
+	}
+	return themeStorage;
 }
 /**
 * Subscribe to theme change events.
@@ -106,7 +120,7 @@ function setTheme(theme) {
 */
 async function withTheme(theme, fn) {
 	const resolvedTheme = typeof theme === "string" ? require_themes_themes.THEMES[theme] ?? fallbackTheme : theme;
-	return await themeStorage.run(resolvedTheme, async () => {
+	return await getThemeStorage().run(resolvedTheme, async () => {
 		emitThemeChange(resolvedTheme);
 		return await fn();
 	});
@@ -131,7 +145,7 @@ async function withTheme(theme, fn) {
 */
 function withThemeSync(theme, fn) {
 	const resolvedTheme = typeof theme === "string" ? require_themes_themes.THEMES[theme] ?? fallbackTheme : theme;
-	return themeStorage.run(resolvedTheme, () => {
+	return getThemeStorage().run(resolvedTheme, () => {
 		emitThemeChange(resolvedTheme);
 		return fn();
 	});
@@ -141,6 +155,7 @@ function withThemeSync(theme, fn) {
 exports.emitThemeChange = emitThemeChange;
 exports.getAsyncHooks = getAsyncHooks;
 exports.getTheme = getTheme;
+exports.getThemeStorage = getThemeStorage;
 exports.onThemeChange = onThemeChange;
 exports.setTheme = setTheme;
 exports.withTheme = withTheme;

package/dist/versions/_internal.d.ts

@@ -1,24 +1,54 @@
 /**
- * @file Private internals for `versions/*` modules — eagerly picks the right
- *   implementation at module load. On socket-btm's smol Node binary, prefers
+ * @file Private internals for `versions/*` modules — lazily picks the right
+ *   implementation at FIRST USE. On socket-btm's smol Node binary, prefers
  *   `node:smol-versions` (C++-accelerated via
  *   `internalBinding('smol_versions_native')`); on stock Node, falls through to
  *   the vendored JS `semver`. Both expose a strict-superset surface for the ops
- *   `versions/*` calls, so leaves can forward to `impl.<op>` directly without
- *   per-call branching. `getMajorVersion`-style helpers need the parsed object
- *   shape (`{major, minor, patch}`) which only `semver.parse` exposes — those
- *   leaves use `getSemver()` directly instead of going through `impl`.
+ *   `versions/*` calls, so leaves can forward to `getImpl().<op>` directly
+ *   without per-call branching. `getMajorVersion`-style helpers need the parsed
+ *   object shape (`{major, minor, patch}`) which only `semver.parse` exposes —
+ *   those leaves use `getSemver()` directly instead of going through the impl.
+ *   Snapshot safety: the vendored `semver` resolves through the npm-pack
+ *   bundle, whose module-eval constructs a live native `[Foreign]` handle
+ *   (cacache/pacote/make-fetch-happen). Requiring it at module load pins that
+ *   handle and aborts `node --build-snapshot`. So both the `require` and the
+ *   smol-vs-semver pick are deferred to first call and memoized.
  */
-import type * as semverType from '../external/semver';
+import type { coerce, compare, diff, eq, gt, gte, inc, lt, lte, maxSatisfying, minSatisfying, parse, rsort, satisfies, sort, valid } from '../external/semver';
 import type { SmolVersionsBinding } from '../smol/versions';
 /**
- * The vendored `semver` JS implementation. Always available — used directly by
- * the leaves that need the parsed `{major, minor, patch}` shape (which
- * smol-versions doesn't expose).
+ * The surface of the vendored `semver` module the `versions/*` leaves call.
+ * Built from named imports (vs. `import * as`) so the used surface stays
+ * explicit and greppable.
  */
-export declare function getSemver(): typeof semverType;
+export interface Semver {
+    coerce: typeof coerce;
+    compare: typeof compare;
+    diff: typeof diff;
+    eq: typeof eq;
+    gt: typeof gt;
+    gte: typeof gte;
+    inc: typeof inc;
+    lt: typeof lt;
+    lte: typeof lte;
+    maxSatisfying: typeof maxSatisfying;
+    minSatisfying: typeof minSatisfying;
+    parse: typeof parse;
+    rsort: typeof rsort;
+    satisfies: typeof satisfies;
+    sort: typeof sort;
+    valid: typeof valid;
+}
 /**
  * Resolved version implementation: smol-versions on the smol Node binary,
- * otherwise the vendored `semver`. Bound once at module load.
+ * otherwise the vendored `semver`. Resolved once on first call and memoized —
+ * deferred from module load so importing a `versions/*` leaf is handle-free.
+ */
+export declare function getImpl(): SmolVersionsBinding | Semver;
+/**
+ * The vendored `semver` JS implementation. Always available — used directly by
+ * the leaves that need the parsed `{major, minor, patch}` shape (which
+ * smol-versions doesn't expose). Required lazily on first call so importing a
+ * `versions/*` leaf does not pull in the native-handle-bearing npm-pack bundle.
  */
-export declare const impl: SmolVersionsBinding | typeof semverType;
+export declare function getSemver(): Semver;

package/dist/versions/_internal.js

@@ -5,31 +5,43 @@ const require_smol_versions = require('../smol/versions.js');
 
 //#region src/versions/_internal.ts
 /**
-* @file Private internals for `versions/*` modules — eagerly picks the right
-*   implementation at module load. On socket-btm's smol Node binary, prefers
+* @file Private internals for `versions/*` modules — lazily picks the right
+*   implementation at FIRST USE. On socket-btm's smol Node binary, prefers
 *   `node:smol-versions` (C++-accelerated via
 *   `internalBinding('smol_versions_native')`); on stock Node, falls through to
 *   the vendored JS `semver`. Both expose a strict-superset surface for the ops
-*   `versions/*` calls, so leaves can forward to `impl.<op>` directly without
-*   per-call branching. `getMajorVersion`-style helpers need the parsed object
-*   shape (`{major, minor, patch}`) which only `semver.parse` exposes — those
-*   leaves use `getSemver()` directly instead of going through `impl`.
+*   `versions/*` calls, so leaves can forward to `getImpl().<op>` directly
+*   without per-call branching. `getMajorVersion`-style helpers need the parsed
+*   object shape (`{major, minor, patch}`) which only `semver.parse` exposes —
+*   those leaves use `getSemver()` directly instead of going through the impl.
+*   Snapshot safety: the vendored `semver` resolves through the npm-pack
+*   bundle, whose module-eval constructs a live native `[Foreign]` handle
+*   (cacache/pacote/make-fetch-happen). Requiring it at module load pins that
+*   handle and aborts `node --build-snapshot`. So both the `require` and the
+*   smol-vs-semver pick are deferred to first call and memoized.
 */
-const semver = require("../external/semver");
+let impl;
+/**
+* Resolved version implementation: smol-versions on the smol Node binary,
+* otherwise the vendored `semver`. Resolved once on first call and memoized —
+* deferred from module load so importing a `versions/*` leaf is handle-free.
+*/
+function getImpl() {
+	if (impl === void 0) impl = require_smol_versions.getSmolVersions() ?? getSemver();
+	return impl;
+}
+let semver;
 /**
 * The vendored `semver` JS implementation. Always available — used directly by
 * the leaves that need the parsed `{major, minor, patch}` shape (which
-* smol-versions doesn't expose).
+* smol-versions doesn't expose). Required lazily on first call so importing a
+* `versions/*` leaf does not pull in the native-handle-bearing npm-pack bundle.
 */
 function getSemver() {
+	if (semver === void 0) semver = require("../external/semver");
 	return semver;
 }
-/**
-* Resolved version implementation: smol-versions on the smol Node binary,
-* otherwise the vendored `semver`. Bound once at module load.
-*/
-const impl = require_smol_versions.getSmolVersions() ?? semver;
 
 //#endregion
-exports.getSemver = getSemver;
-exports.impl = impl;
+exports.getImpl = getImpl;
+exports.getSemver = getSemver;