poe-code 14.0.83 → 14.0.84

package/dist/index.js

@@ -50271,8 +50271,8 @@ function assertNonNegativeInteger3(value, keyword) {
 }
 function validateSchemaObject(schema, dialect) {
   if (schema.type !== void 0) {
-    const types8 = Array.isArray(schema.type) ? schema.type : [schema.type];
-    if (types8.length === 0 || !types8.every((type) => typeof type === "string" && draftTypeSet.has(type)) || new Set(types8).size !== types8.length) {
+    const types9 = Array.isArray(schema.type) ? schema.type : [schema.type];
+    if (types9.length === 0 || !types9.every((type) => typeof type === "string" && draftTypeSet.has(type)) || new Set(types9).size !== types9.length) {
       throw new Error("type must be a JSON Schema type or a unique array of JSON Schema types.");
     }
   }
@@ -50991,9 +50991,9 @@ function evaluateValidationKeywords(node, schema, value, path193) {
   if (schema.nullable === true && value === null) {
     return results;
   }
-  const types8 = typeof schema.type === "string" ? [schema.type] : Array.isArray(schema.type) ? schema.type : [];
-  if (types8.length > 0 && !types8.some((type) => typeof type === "string" && typeMatches(type, value))) {
-    results.push(invalidResult(issue(path193, types8.join(","), value, `must be ${types8.join(",")}`)));
+  const types9 = typeof schema.type === "string" ? [schema.type] : Array.isArray(schema.type) ? schema.type : [];
+  if (types9.length > 0 && !types9.some((type) => typeof type === "string" && typeMatches(type, value))) {
+    results.push(invalidResult(issue(path193, types9.join(","), value, `must be ${types9.join(",")}`)));
     return results;
   }
   if (schema.const !== void 0 && !deepEqual(schema.const, value)) {
@@ -126534,6 +126534,45 @@ var init_otel2 = __esm({
   }
 });
 
+// packages/safe-js/src/interp/array-buffer.ts
+import { types } from "node:util";
+function isSandboxArrayBuffer(value) {
+  return types.isArrayBuffer(value) && Object.getPrototypeOf(value) === ArrayBuffer.prototype;
+}
+function arrayBufferLength(value) {
+  return Reflect.apply(readLength, value, []);
+}
+function arrayBufferOptions(value) {
+  return readResizable !== void 0 && Reflect.apply(readResizable, value, []) ? { maxByteLength: Reflect.apply(readMaxLength, value, []) } : void 0;
+}
+function copyArrayBufferStorage(value, state) {
+  state.float32Buffers ??= /* @__PURE__ */ new WeakMap();
+  let copy = state.float32Buffers.get(value);
+  if (copy === void 0) {
+    copy = Reflect.construct(ArrayBuffer, [arrayBufferLength(value), arrayBufferOptions(value)]);
+    new Uint8Array(copy).set(new Uint8Array(value));
+    state.float32Buffers.set(value, copy);
+  }
+  return copy;
+}
+function arrayBufferDataProperties(value) {
+  return Reflect.ownKeys(value).map((key3) => {
+    const descriptor = Object.getOwnPropertyDescriptor(value, key3);
+    if (!("value" in descriptor)) throw new TypeError("ArrayBuffer accessors cannot be copied as data.");
+    return [key3, descriptor];
+  });
+}
+var readLength, readResizable, readMaxLength, arrayBufferPrototypes;
+var init_array_buffer = __esm({
+  "packages/safe-js/src/interp/array-buffer.ts"() {
+    "use strict";
+    readLength = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "byteLength").get;
+    readResizable = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "resizable")?.get;
+    readMaxLength = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "maxByteLength")?.get;
+    arrayBufferPrototypes = /* @__PURE__ */ new WeakMap();
+  }
+});
+
 // packages/safe-js/src/interp/internal-symbols.ts
 var internalSymbols;
 var init_internal_symbols = __esm({
@@ -126877,7 +126916,7 @@ var init_regexp_iterator = __esm({
 });
 
 // packages/safe-js/src/interp/date.ts
-import { types } from "node:util";
+import { types as types2 } from "node:util";
 function isSandboxDate(value) {
   return typeof value === "object" && value !== null && dates.has(value);
 }
@@ -126890,7 +126929,7 @@ function dateTime(value) {
   return Reflect.apply(readTime, value, []);
 }
 function copyNativeDate(value) {
-  if (!types.isDate(value)) return void 0;
+  if (!types2.isDate(value)) return void 0;
   if (Object.getPrototypeOf(value) !== NativeDate.prototype)
     throw new TypeError("Date subclasses are not supported.");
   return createSandboxDate(dateTime(value));
@@ -127071,13 +127110,13 @@ var init_arguments = __esm({
 });
 
 // packages/safe-js/src/interp/boxed.ts
-import { types as types2 } from "node:util";
+import { types as types3 } from "node:util";
 function nativeBoxedValue(value) {
-  if (types2.isNumberObject(value)) return Reflect.apply(numberValue2, value, []);
-  if (types2.isStringObject(value)) return Reflect.apply(stringValue2, value, []);
-  if (types2.isBooleanObject(value)) return Reflect.apply(booleanValue, value, []);
-  if (types2.isSymbolObject(value)) return Reflect.apply(symbolValue, value, []);
-  if (types2.isBigIntObject(value)) return Reflect.apply(bigintValue, value, []);
+  if (types3.isNumberObject(value)) return Reflect.apply(numberValue2, value, []);
+  if (types3.isStringObject(value)) return Reflect.apply(stringValue2, value, []);
+  if (types3.isBooleanObject(value)) return Reflect.apply(booleanValue, value, []);
+  if (types3.isSymbolObject(value)) return Reflect.apply(symbolValue, value, []);
+  if (types3.isBigIntObject(value)) return Reflect.apply(bigintValue, value, []);
   return void 0;
 }
 function createSandboxBox(value) {
@@ -127296,9 +127335,9 @@ var init_resources = __esm({
 });
 
 // packages/safe-js/src/extensions.ts
-import { types as types3 } from "node:util";
+import { types as types4 } from "node:util";
 function readDataRecord(value, label) {
-  if (typeof value !== "object" || value === null || types3.isProxy(value)) {
+  if (typeof value !== "object" || value === null || types4.isProxy(value)) {
     throw new TypeError(`${label} must be a plain data record.`);
   }
   const prototype = Object.getPrototypeOf(value);
@@ -127318,7 +127357,7 @@ function readDataRecord(value, label) {
   return result;
 }
 function readStringList(value, label) {
-  if (!Array.isArray(value) || types3.isProxy(value) || value.length > 4096) {
+  if (!Array.isArray(value) || types4.isProxy(value) || value.length > 4096) {
     throw new TypeError(`${label} must be a bounded string array.`);
   }
   const result = [];
@@ -127349,7 +127388,7 @@ var init_extensions = __esm({
 });
 
 // packages/safe-js/src/interp/host-capabilities.ts
-import { types as types4 } from "node:util";
+import { types as types5 } from "node:util";
 function createGuestReference(root, owner, assertActive) {
   const reference = Object.freeze(/* @__PURE__ */ Object.create(null));
   guestReferences.set(reference, { root, owner, assertActive });
@@ -127397,7 +127436,7 @@ function createLiveHostObject(definition, controller) {
     for (const name of ["keys", "get", "set", "delete"]) {
       const operation = data[name];
       if (operation === void 0 && (name === "set" || name === "delete")) continue;
-      if (typeof operation !== "function" || types4.isProxy(operation) || types4.isAsyncFunction(operation) || types4.isGeneratorFunction(operation))
+      if (typeof operation !== "function" || types5.isProxy(operation) || types5.isAsyncFunction(operation) || types5.isGeneratorFunction(operation))
         throw new TypeError(`Named ${name} must be a synchronous non-generator function, not a proxy.`);
     }
     if (typeof data.maxKeys !== "number" || !Number.isInteger(data.maxKeys) || data.maxKeys < 1 || data.maxKeys > MAX_NAMED_KEYS)
@@ -127652,7 +127691,7 @@ function namedMutationKeys(state, key3, create) {
 function namedKeys2(state) {
   const named = state.named;
   return state.controller.read(named.keys, (value) => {
-    if (!Array.isArray(value) || types4.isProxy(value))
+    if (!Array.isArray(value) || types5.isProxy(value))
       throw new TypeError("Named keys must be a dense own-data array of strings, not a proxy.");
     const length = Object.getOwnPropertyDescriptor(value, "length").value;
     if (length > named.maxKeys) throw new RangeError("Named keys exceed maxKeys.");
@@ -127709,18 +127748,39 @@ var init_error_prototypes = __esm({
 });
 
 // packages/safe-js/src/interp/float32.ts
+function restoreFloat32View(buffer, byteOffset2, length, budget) {
+  const originalLength = arrayBufferLength(buffer);
+  const required = byteOffset2 + (length ?? 0) * 4;
+  const options = arrayBufferOptions(buffer);
+  const grow = required > originalLength;
+  if (grow) {
+    if (options === void 0 || required > options.maxByteLength)
+      throw new RangeError("Float32Array layout exceeds backing capacity.");
+    budget?.allocateArrayLength(Math.ceil(required / 4));
+    budget?.provisionDataUsage(required - originalLength)();
+    Reflect.apply(resizeBuffer, buffer, [required]);
+  }
+  try {
+    const view = new Float32Array(buffer, byteOffset2, length);
+    if (options !== void 0) float32ViewLayouts.set(view, { byteOffset: byteOffset2, ...length === void 0 ? {} : { length } });
+    return view;
+  } finally {
+    if (grow) Reflect.apply(resizeBuffer, buffer, [originalLength]);
+  }
+}
 function isFloat32Array(value) {
   return ArrayBuffer.isView(value) && Object.getPrototypeOf(value) === Float32Array.prototype && Reflect.apply(readTag, value, []) === "Float32Array";
 }
-function float32Storage(value) {
+function float32Storage(value, requireInBounds = false) {
+  if (requireInBounds) Reflect.apply(createValuesIterator, value, []);
   const buffer = Reflect.apply(readBuffer, value, []);
-  if (Object.getPrototypeOf(buffer) !== ArrayBuffer.prototype || bufferResizable !== void 0 && Reflect.apply(bufferResizable, buffer, [])) {
-    throw new TypeError("Float32Array requires a fixed, non-shared ArrayBuffer.");
+  if (Object.getPrototypeOf(buffer) !== ArrayBuffer.prototype) {
+    throw new TypeError("Float32Array requires a non-shared ArrayBuffer.");
   }
   return {
     buffer,
     byteOffset: Reflect.apply(readOffset, value, []),
-    length: Reflect.apply(readLength, value, []),
+    length: Reflect.apply(readLength2, value, []),
     byteLength: Reflect.apply(bufferLength, buffer, [])
   };
 }
@@ -127761,26 +127821,29 @@ function checkFloat32Allocation(length, budget) {
 }
 function copyFloat32Storage(value, state) {
   const storage2 = float32Storage(value);
-  state.float32Buffers ??= /* @__PURE__ */ new WeakMap();
-  let buffer = state.float32Buffers.get(storage2.buffer);
-  if (buffer === void 0) {
-    buffer = new ArrayBuffer(storage2.byteLength);
-    new Uint8Array(buffer).set(new Uint8Array(storage2.buffer));
-    state.float32Buffers.set(storage2.buffer, buffer);
+  const buffer = copyArrayBufferStorage(storage2.buffer, state);
+  if (bufferResizable !== void 0 && Reflect.apply(bufferResizable, storage2.buffer, [])) {
+    const layout = float32ViewLayouts.get(value);
+    if (layout === void 0) throw new TypeError("Resizable Float32Array copies require known view layout.");
+    return restoreFloat32View(buffer, layout.byteOffset, layout.length);
   }
   return new Float32Array(buffer, storage2.byteOffset, storage2.length);
 }
-var typedArrayPrototype, readLength, readOffset, readBuffer, readTag, bufferLength, bufferResizable;
+var typedArrayPrototype, readLength2, readOffset, readBuffer, readTag, createValuesIterator, bufferLength, bufferResizable, float32ViewLayouts, resizeBuffer;
 var init_float32 = __esm({
   "packages/safe-js/src/interp/float32.ts"() {
     "use strict";
+    init_array_buffer();
     typedArrayPrototype = Object.getPrototypeOf(Float32Array.prototype);
-    readLength = Object.getOwnPropertyDescriptor(typedArrayPrototype, "length").get;
+    readLength2 = Object.getOwnPropertyDescriptor(typedArrayPrototype, "length").get;
     readOffset = Object.getOwnPropertyDescriptor(typedArrayPrototype, "byteOffset").get;
     readBuffer = Object.getOwnPropertyDescriptor(typedArrayPrototype, "buffer").get;
     readTag = Object.getOwnPropertyDescriptor(typedArrayPrototype, Symbol.toStringTag).get;
+    createValuesIterator = Object.getOwnPropertyDescriptor(typedArrayPrototype, "values").value;
     bufferLength = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "byteLength").get;
     bufferResizable = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "resizable")?.get;
+    float32ViewLayouts = /* @__PURE__ */ new WeakMap();
+    resizeBuffer = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "resize").value;
   }
 });
 
@@ -128000,11 +128063,13 @@ function releaseObjectPrototype(budget) {
   generatorPrototypes.delete(budget);
   errorPrototypes.delete(budget);
   float32Prototypes.delete(budget);
+  arrayBufferPrototypes.delete(budget);
   initialRegexDescriptors.delete(budget);
   intrinsicPrototypes.delete(budget);
 }
 function getSandboxPrototype(value, budget) {
   if (prototypes.has(value)) return prototypes.get(value) ?? null;
+  if (isSandboxArrayBuffer(value)) return budget === void 0 ? null : arrayBufferPrototypes.get(budget) ?? null;
   if (isFloat32Array(value)) return budget === void 0 ? null : float32Prototypes.get(budget) ?? null;
   const errorType = sandboxErrorTypes.get(value);
   if (budget !== void 0 && errorType !== void 0) {
@@ -128115,6 +128180,7 @@ function setSandboxPrototype(value, prototype, budget) {
   prototypes.set(value, prototype);
 }
 function isPrototypeRecord(value) {
+  if (isSandboxArrayBuffer(value)) return true;
   if (isFloat32Array(value)) return true;
   if (isGuestClosure(value)) return true;
   if (isGuestHostObject(value)) return false;
@@ -128155,6 +128221,7 @@ var init_object_model = __esm({
     init_error_prototypes();
     init_float32();
     init_float32_prototypes();
+    init_array_buffer();
     init_shape();
     init_boxed();
     init_values();
@@ -128835,18 +128902,20 @@ var init_symbols3 = __esm({
 });
 
 // packages/safe-js/src/snapshot/float32array.ts
-function encodeFloat32Storage(value, id, buffers, reference) {
+function encodeFloat32Layout(value) {
   const storage2 = float32Storage(value);
-  const existing = buffers.get(storage2.buffer);
-  if (existing === void 0) buffers.set(storage2.buffer, id);
+  if (arrayBufferOptions(storage2.buffer) === void 0) return { byteOffset: storage2.byteOffset, length: storage2.length };
+  const layout = float32ViewLayouts.get(value);
+  if (layout === void 0) throw new TypeError("Resizable Float32Array snapshots require known view layout.");
   return {
-    kind: "float32array",
-    byteOffset: storage2.byteOffset,
-    length: storage2.length,
-    ...existing === void 0 ? { bytes: Array.from(new Uint8Array(storage2.buffer)) } : { buffer: reference(existing) }
+    byteOffset: layout.byteOffset,
+    length: layout.length ?? 0,
+    ...layout.length === void 0 ? { lengthTracking: true } : {}
   };
 }
 function validateFloat32Storage(value) {
+  if (Object.hasOwn(value, "lengthTracking") && (value.lengthTracking !== true || value.length !== 0 || Object.hasOwn(value, "bytes")))
+    throw new TypeError("Invalid Float32Array length-tracking layout.");
   if (!Number.isSafeInteger(value.length) || Number(value.length) < 0 || !Number.isSafeInteger(value.byteOffset) || Number(value.byteOffset) < 0 || Number(value.byteOffset) % 4 !== 0)
     throw new TypeError("Invalid Float32Array view dimensions.");
   if (Object.hasOwn(value, "bytes") === Object.hasOwn(value, "buffer"))
@@ -128856,7 +128925,7 @@ function validateFloat32Storage(value) {
       throw new TypeError("Invalid Float32Array backing bytes.");
   }
 }
-function decodeFloat32Storage(value, resolve16) {
+function decodeFloat32Storage(value, resolve16, budget) {
   validateFloat32Storage(value);
   let buffer;
   if (Array.isArray(value.bytes)) {
@@ -128864,10 +128933,13 @@ function decodeFloat32Storage(value, resolve16) {
     new Uint8Array(buffer).set(value.bytes);
   } else {
     const referenced = resolve16(value.buffer);
-    if (!isFloat32Array(referenced)) throw new TypeError("Invalid Float32Array backing reference.");
-    buffer = float32Storage(referenced).buffer;
+    if (isSandboxArrayBuffer(referenced)) buffer = referenced;
+    else if (isFloat32Array(referenced)) buffer = float32Storage(referenced).buffer;
+    else throw new TypeError("Invalid Float32Array backing reference.");
   }
-  return new Float32Array(buffer, Number(value.byteOffset), Number(value.length));
+  if (value.lengthTracking === true && arrayBufferOptions(buffer) === void 0)
+    throw new TypeError("Length-tracking layout requires resizable backing storage.");
+  return restoreFloat32View(buffer, Number(value.byteOffset), value.lengthTracking === true ? void 0 : Number(value.length), budget);
 }
 var init_float32array = __esm({
   "packages/safe-js/src/snapshot/float32array.ts"() {
@@ -128875,6 +128947,53 @@ var init_float32array = __esm({
     init_float32();
     init_object_model();
     init_property_descriptors();
+    init_array_buffer();
+  }
+});
+
+// packages/safe-js/src/snapshot/array-buffer.ts
+function captureArrayBufferState(value, encode) {
+  return {
+    properties: serializePropertyDescriptors(value, encode),
+    ...hasExplicitSandboxPrototype(value) ? { prototype: encode(getSandboxPrototype(value)) } : {}
+  };
+}
+function encodeArrayBufferStorage(value, id, buffers, reference) {
+  arrayBufferLength(value);
+  const existing = buffers.get(value);
+  if (existing === void 0) buffers.set(value, id);
+  return { kind: "arraybuffer", ...existing === void 0 ? { bytes: Array.from(new Uint8Array(value)), ...arrayBufferOptions(value) } : { buffer: reference(existing) } };
+}
+function validateArrayBufferStorage(value) {
+  if (Object.hasOwn(value, "bytes") === Object.hasOwn(value, "buffer"))
+    throw new TypeError("ArrayBuffer requires one backing storage description.");
+  if (Object.hasOwn(value, "bytes") && (!Array.isArray(value.bytes) || value.bytes.some((byte) => !Number.isInteger(byte) || byte < 0 || byte > 255)))
+    throw new TypeError("Invalid ArrayBuffer bytes.");
+  if (Object.hasOwn(value, "maxByteLength") && (!Array.isArray(value.bytes) || !Number.isSafeInteger(value.maxByteLength) || Number(value.maxByteLength) < value.bytes.length))
+    throw new TypeError("Invalid ArrayBuffer maximum length.");
+}
+function decodeArrayBufferStorage(value, resolve16) {
+  validateArrayBufferStorage(value);
+  if (Array.isArray(value.bytes)) {
+    const buffer = Reflect.construct(ArrayBuffer, [
+      value.bytes.length,
+      Object.hasOwn(value, "maxByteLength") ? { maxByteLength: value.maxByteLength } : void 0
+    ]);
+    new Uint8Array(buffer).set(value.bytes);
+    return buffer;
+  }
+  const referenced = resolve16(value.buffer);
+  if (isSandboxArrayBuffer(referenced)) return referenced;
+  if (isFloat32Array(referenced)) return float32Storage(referenced).buffer;
+  throw new TypeError("Invalid ArrayBuffer backing reference.");
+}
+var init_array_buffer2 = __esm({
+  "packages/safe-js/src/snapshot/array-buffer.ts"() {
+    "use strict";
+    init_array_buffer();
+    init_float32();
+    init_object_model();
+    init_property_descriptors();
   }
 });
 
@@ -129039,11 +129158,24 @@ function encodeReplayData(value, options = {}) {
         ...symbolProperties.length === 0 ? {} : { symbolProperties },
         ...Object.isExtensible(entry) ? {} : { extensible: false }
       };
+    } else if (isSandboxArrayBuffer(entry)) {
+      const storage2 = encodeArrayBufferStorage(entry, id, float32Buffers, (id2) => ({ tag: "ref", id: id2 }));
+      const properties = /* @__PURE__ */ Object.create(null);
+      for (const [key3, descriptor] of arrayBufferDataProperties(entry)) {
+        if (typeof key3 === "symbol") continue;
+        properties[key3] = {
+          value: child(descriptor.value, key3),
+          configurable: descriptor.configurable === true,
+          enumerable: descriptor.enumerable === true,
+          writable: descriptor.writable === true
+        };
+      }
+      let symbolIndex = 0;
+      const symbolEntries = serializeSymbolProperties(entry, (value2) => encode(value2, depth + 1, [...path193, { symbol: Math.floor(symbolIndex++ / 2) }]));
+      nodes[id] = { ...storage2, properties, extensible: Object.isExtensible(entry), symbolEntries };
     } else if (isFloat32Array(entry)) {
-      const storage2 = encodeFloat32Storage(entry, id, float32Buffers, (id2) => ({
-        tag: "ref",
-        id: id2
-      }));
+      const backing = float32Storage(entry);
+      const storage2 = { kind: "float32array", ...encodeFloat32Layout(entry), buffer: child(backing.buffer, "<buffer>") };
       const properties = /* @__PURE__ */ Object.create(null);
       for (const [key3, descriptor] of float32DataProperties(entry)) {
         properties[key3] = {
@@ -129146,7 +129278,7 @@ function decodeReplayData(input, options = {}, parent) {
     const graph = record2(input);
     const nodes = list(own(graph, "nodes"));
     const restored = /* @__PURE__ */ new Map();
-    const initializeIterators = [];
+    const initializeValues = [];
     const decode = (entry, depth = 0) => {
       if (depth > MAX_DATA_DEPTH) throw new TypeError("Replay data exceeds the nesting limit.");
       if (entry === null || typeof entry === "boolean" || typeof entry === "string") return entry;
@@ -129271,10 +129403,20 @@ function decodeReplayData(input, options = {}, parent) {
         if (node.extensible === false) Object.preventExtensions(result3);
         return result3;
       }
+      if (kind === "arraybuffer") {
+        if (typeof node.extensible !== "boolean") throw new TypeError("Invalid ArrayBuffer extensibility.");
+        const result3 = decodeArrayBufferStorage(node, child);
+        restored.set(id, result3);
+        initializeValues.push(() => {
+          defineProperties(result3, record2(own(node, "properties")), child, node.symbolEntries);
+          if (!node.extensible) Object.preventExtensions(result3);
+        });
+        return result3;
+      }
       if (kind === "float32array") {
         if (typeof node.extensible !== "boolean")
           throw new TypeError("Invalid Float32Array extensibility.");
-        const result3 = decodeFloat32Storage(node, child);
+        const result3 = decodeFloat32Storage(node, child, compilation.owner?.budget);
         restored.set(id, result3);
         defineProperties(result3, record2(own(node, "properties")), child);
         if (!node.extensible) Object.preventExtensions(result3);
@@ -129310,7 +129452,7 @@ function decodeReplayData(input, options = {}, parent) {
         restored.set(id, result3);
         const collection = child(own(node, "collection"));
         if (collection !== void 0 && !isSandboxMap(collection) && !isSandboxSet(collection)) throw new TypeError("Invalid replay collection iterator source.");
-        initializeIterators.push(() => {
+        initializeValues.push(() => {
           restoreSandboxCollectionIterator({ collection, collectionKind, method, index, exhausted }, result3);
         });
         defineProperties(result3, record2(own(node, "properties")), child);
@@ -129381,7 +129523,7 @@ function decodeReplayData(input, options = {}, parent) {
       return result2;
     };
     const result = decode(own(graph, "root"));
-    for (const initialize of initializeIterators) initialize();
+    for (const initialize of initializeValues) initialize();
     if (parent !== void 0) compilation.forward(compilation.tickets, parent);
     return result;
   } finally {
@@ -129462,6 +129604,8 @@ var init_replay_data = __esm({
     init_compile_guard();
     init_float32();
     init_float32array();
+    init_array_buffer();
+    init_array_buffer2();
     init_date();
     init_raw_json();
     init_boxed();
@@ -129697,8 +129841,29 @@ function normalize2(value, seen) {
   try {
     const date = copyNativeDate(value);
     if (date !== void 0) return Object.assign(/* @__PURE__ */ Object.create(null), { $type: "date", time: serializedDateTime(date) });
+    if (isSandboxArrayBuffer(value)) {
+      arrayBufferLength(value);
+      const properties = /* @__PURE__ */ Object.create(null);
+      const entries = [];
+      for (const [key3, descriptor] of arrayBufferDataProperties(value)) {
+        if (typeof key3 === "symbol") throw new TypeError("ArrayBuffer symbol properties require an explicit host-call identity.");
+        entries.push([key3, descriptor]);
+      }
+      for (const [key3, descriptor] of entries.sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0))
+        defineOwnDataProperty(properties, key3, normalize2(descriptor.value, seen));
+      return Object.assign(/* @__PURE__ */ Object.create(null), {
+        $type: "arraybuffer",
+        bytes: normalize2(Array.from(new Uint8Array(value)), seen),
+        ...arrayBufferOptions(value),
+        properties
+      });
+    }
     if (isFloat32Array(value)) {
       const storage2 = float32Storage(value);
+      const resizable = arrayBufferOptions(storage2.buffer) !== void 0;
+      const layout = resizable ? float32ViewLayouts.get(value) : void 0;
+      if (resizable && layout === void 0)
+        throw new TypeError("Resizable Float32Array host-call identity requires known view layout.");
       const properties = /* @__PURE__ */ Object.create(null);
       for (const [key3, descriptor] of float32DataProperties(value).sort(
         ([left], [right]) => left < right ? -1 : left > right ? 1 : 0
@@ -129710,7 +129875,12 @@ function normalize2(value, seen) {
         bytes: normalize2(Array.from(new Uint8Array(storage2.buffer)), seen),
         byteOffset: storage2.byteOffset,
         length: storage2.length,
-        properties
+        properties,
+        ...resizable || Reflect.ownKeys(storage2.buffer).length > 0 ? { buffer: normalize2(storage2.buffer, seen) } : {},
+        ...layout === void 0 ? {} : { viewLayout: {
+          byteOffset: layout.byteOffset,
+          length: layout.length ?? null
+        } }
       });
     }
     if (Array.isArray(value)) {
@@ -129745,6 +129915,7 @@ var init_host_call = __esm({
   "packages/safe-js/src/interp/host-call.ts"() {
     "use strict";
     init_float32();
+    init_array_buffer();
     init_date();
     init_values();
     init_compile_guard();
@@ -132248,7 +132419,7 @@ async function nextArrayIterator(value, budget, context) {
   const read = (key3) => context?.getProperty !== void 0 ? context.getProperty(source, key3) : readPropertyDescriptor((isFloat32Array(source) ? Object.getOwnPropertyDescriptor(source, key3) : void 0) ?? getSandboxPropertyDescriptor(source, key3, budget) ?? { value: void 0 }, source, context);
   try {
     budget.visitNode();
-    const number = isFloat32Array(source) ? float32Storage(source).length : await sandboxNumber(await read("length"), budget, context);
+    const number = isFloat32Array(source) ? float32Storage(source, true).length : await sandboxNumber(await read("length"), budget, context);
     const length = Number.isNaN(number) || number <= 0 ? 0 : Math.min(Math.trunc(number), Number.MAX_SAFE_INTEGER);
     if (index >= length) {
       state.source = void 0;
@@ -132617,7 +132788,7 @@ var init_string_locale = __esm({
 });
 
 // packages/safe-js/src/interp/methods/string.ts
-import { types as types5 } from "node:util";
+import { types as types6 } from "node:util";
 function getStringMember(value, property, budget) {
   const index = getStringIndex(property);
   if (index !== void 0) {
@@ -132687,7 +132858,7 @@ function callStringMethod(value, methodName, args, budget, callClosure = async (
   };
   const symbol2 = methodName === "match" ? Symbol.match : methodName === "search" ? Symbol.search : methodName === "matchAll" ? Symbol.matchAll : methodName === "replace" || methodName === "replaceAll" ? Symbol.replace : methodName === "split" ? Symbol.split : void 0;
   const pattern = args[0];
-  if (symbol2 !== void 0 && types5.isRegExp(pattern))
+  if (symbol2 !== void 0 && types6.isRegExp(pattern))
     throw new TypeError(`String#${methodName} does not accept unbranded host RegExp values.`);
   if (symbol2 === void 0 || pattern === null || pattern === void 0) return fallback();
   const readProperty = (key3) => context?.getProperty !== void 0 ? context.getProperty(pattern, key3) : key3 === "flags" && isSandboxRegex(pattern) && getSandboxPropertyDescriptor(pattern, key3, budget) === void 0 ? getRegexMember(pattern, key3, budget, context) : getSandboxDataProperty(pattern, key3, budget);
@@ -136368,6 +136539,31 @@ function createFloat32ArrayGlobal(budget, nativePrototype = false) {
         const prototype = candidate !== null && typeof candidate === "object" ? candidate : float32Prototypes.get(budget);
         const release2 = retainValues(budget, () => [prototype, ...args]);
         try {
+          if (isSandboxArrayBuffer(args[0])) {
+            const buffer = args[0];
+            const number = await sandboxNumber(args[1], budget, context);
+            const offset = Number.isNaN(number) ? 0 : Math.trunc(number);
+            if (!Number.isSafeInteger(offset) || offset < 0 || offset % 4 !== 0)
+              throw new RangeError("Invalid Float32Array buffer offset.");
+            const bytes = arrayBufferLength(buffer);
+            let length;
+            if (args[2] === void 0) {
+              if (arrayBufferOptions(buffer) === void 0 && bytes % 4 !== 0 || offset > bytes)
+                throw new RangeError("Invalid Float32Array buffer length.");
+              length = Math.floor((bytes - offset) / 4);
+            } else {
+              const size = await sandboxNumber(args[2], budget, context);
+              length = Number.isNaN(size) ? 0 : Math.trunc(size);
+              if (!Number.isSafeInteger(length) || length < 0 || offset + length * 4 > arrayBufferLength(buffer))
+                throw new RangeError("Invalid Float32Array view length.");
+            }
+            budget.allocateArrayLength(length);
+            const result2 = new Float32Array(buffer, offset, args[2] === void 0 ? void 0 : length);
+            if (arrayBufferOptions(buffer) !== void 0)
+              float32ViewLayouts.set(result2, { byteOffset: offset, ...args[2] === void 0 ? {} : { length } });
+            setSandboxPrototype(result2, prototype, budget);
+            return result2;
+          }
           const result = args[0] !== null && typeof args[0] === "object" && !isFloat32Array(args[0]) ? await allocateFloat32Input(args[0], budget, context) : allocateFloat32Array(args[0], budget);
           setSandboxPrototype(result, prototype, budget);
           return result;
@@ -136582,7 +136778,19 @@ function createFloat32ArrayPrototypes(budget, constructor) {
   setSandboxPrototype(prototype, shared);
   setSandboxPrototype(shared, getSandboxPrototype(/* @__PURE__ */ Object.create(null), budget));
   const getters = [];
-  for (const key3 of ["length", "byteLength", "byteOffset"]) {
+  const species = createSandboxClosure({
+    guest: true,
+    sandbox: true,
+    name: "get [Symbol.species]",
+    length: 0,
+    call: (_args, context) => context?.thisValue
+  });
+  getters.push(species);
+  Object.defineProperty(materializeFunctionProperties(typedArray), Symbol.species, {
+    get: accessorAdapter(species, "get"),
+    configurable: true
+  });
+  for (const key3 of ["length", "byteLength", "byteOffset", "buffer"]) {
     const getter = createSandboxClosure({
       guest: true,
       sandbox: true,
@@ -136598,7 +136806,7 @@ function createFloat32ArrayPrototypes(budget, constructor) {
     Object.defineProperty(shared, key3, { get: accessorAdapter(getter, "get"), configurable: true });
   }
   for (const key3 of ["set", "slice", "subarray"])
-    Object.defineProperty(shared, key3, { value: getFloat32Member(new Float32Array(0), key3, budget), writable: true, configurable: true });
+    Object.defineProperty(shared, key3, { value: getFloat32Member(new Float32Array(0), key3, budget, constructor), writable: true, configurable: true });
   const arrayPrototype = resolveIntrinsicIdentity(budget, '["Array","prototype"]');
   Object.defineProperty(shared, "toString", { value: getSandboxDataProperty(arrayPrototype, "toString", budget), writable: true, configurable: true });
   Object.defineProperty(shared, "join", {
@@ -136612,7 +136820,7 @@ function createFloat32ArrayPrototypes(budget, constructor) {
       call: async (args, context) => {
         if (!isFloat32Array(context?.thisValue)) throw new TypeError("TypedArray join requires a typed array receiver.");
         const receiver = context.thisValue;
-        const length = float32Storage(receiver).length;
+        const length = float32Storage(receiver, true).length;
         let separator = ",";
         let text5 = "";
         const release2 = retainValues(budget, () => [receiver, separator, text5, ...args]);
@@ -136620,7 +136828,8 @@ function createFloat32ArrayPrototypes(budget, constructor) {
           if (args[0] !== void 0) separator = await sandboxString(args[0], budget, context);
           for (let index = 0; index < length; index++) {
             budget.visitNode();
-            text5 = budget.allocateString(text5 + (index === 0 ? "" : separator) + String(receiver[index]));
+            const value = receiver[index];
+            text5 = budget.allocateString(text5 + (index === 0 ? "" : separator) + (value === void 0 ? "" : String(value)));
           }
           return text5;
         } finally {
@@ -136647,6 +136856,7 @@ function createFloat32ArrayPrototypes(budget, constructor) {
       length: 0,
       call: (args, context) => {
         if (!isFloat32Array(context?.thisValue)) throw new TypeError(`TypedArray ${key3} requires a typed array receiver.`);
+        float32Storage(context.thisValue, true);
         return invokeBuiltinClosure(method, args, budget, context, context.thisValue);
       }
     });
@@ -136664,7 +136874,7 @@ function createFloat32ArrayPrototypes(budget, constructor) {
 function isFloat32ArrayConstructor(value) {
   return typeof value === "object" && value !== null && constructors.has(value);
 }
-function getFloat32Member(value, property, budget) {
+function getFloat32Member(value, property, budget, defaultConstructor) {
   const key3 = String(property);
   const descriptor = Object.getOwnPropertyDescriptor(value, key3);
   if (descriptor !== void 0) {
@@ -136687,7 +136897,7 @@ function getFloat32Member(value, property, budget) {
       const receiver = context?.thisValue;
       if (!isFloat32Array(receiver))
         throw new TypeError(`Float32Array#${key3} requires a Float32Array receiver.`);
-      const storage3 = float32Storage(receiver);
+      const storage3 = float32Storage(receiver, key3 === "slice");
       const bridge = {
         ...context,
         stack: context?.stack ?? [],
@@ -136708,16 +136918,17 @@ function getFloat32Member(value, property, budget) {
             const number = await sandboxNumber(offsetValue, budget, bridge);
             const offset = Number.isNaN(number) ? 0 : Math.trunc(number);
             if (offset < 0) throw new RangeError("Float32Array#set offset is out of bounds.");
+            const targetStorage = float32Storage(receiver, true);
             if (source === null || source === void 0) throw new TypeError("Float32Array#set requires a non-null source.");
             let length;
-            if (isFloat32Array(source)) length = float32Storage(source).length;
+            if (isFloat32Array(source)) length = float32Storage(source, true).length;
             else {
               sourceObject = typeof source === "object" ? source : createSandboxBox(source);
               current = await bridge.getProperty(sourceObject, "length");
               const size = await sandboxNumber(current, budget, bridge);
               length = Number.isNaN(size) || size <= 0 ? 0 : Math.min(Math.trunc(size), Number.MAX_SAFE_INTEGER);
             }
-            if (offset + length > storage3.length) throw new RangeError("Float32Array#set source is out of bounds.");
+            if (offset + length > targetStorage.length) throw new RangeError("Float32Array#set source is out of bounds.");
             if (isFloat32Array(source)) Float32Array.prototype.set.call(receiver, source, offset);
             else for (let index = 0; index < length; index++) {
               budget.visitNode();
@@ -136731,18 +136942,62 @@ function getFloat32Member(value, property, budget) {
         })();
       }
       return (async () => {
-        const release2 = retainValues(budget, () => [receiver, ...args]);
+        let candidate;
+        let result;
+        const release2 = retainValues(budget, () => [receiver, candidate, result, ...args]);
         try {
           const start = relativeIndex(await sandboxNumber(args[0], budget, bridge), storage3.length);
           const end = args[1] === void 0 ? storage3.length : relativeIndex(await sandboxNumber(args[1], budget, bridge), storage3.length);
           const length = Math.max(end - start, 0);
-          if (key3 === "subarray")
-            return new Float32Array(storage3.buffer, storage3.byteOffset + start * 4, length);
-          checkFloat32Allocation(length, budget);
-          const result = new Float32Array(length);
-          new Uint8Array(result.buffer).set(
-            new Uint8Array(storage3.buffer, storage3.byteOffset + start * 4, length * 4)
-          );
+          const layout = float32ViewLayouts.get(receiver);
+          const offset = (layout?.byteOffset ?? storage3.byteOffset) + start * 4;
+          const tracking = layout !== void 0 && layout.length === void 0 && args[1] === void 0;
+          if (defaultConstructor !== void 0) {
+            candidate = await bridge.getProperty(receiver, "constructor");
+            if (candidate !== void 0) {
+              if (candidate === null || typeof candidate !== "object")
+                throw new TypeError("TypedArray constructor must be an object.");
+              candidate = await bridge.getProperty(candidate, Symbol.species);
+              if (candidate !== void 0 && candidate !== null && (!isSandboxClosure(candidate) || candidate.construct === void 0))
+                throw new TypeError("TypedArray species must be a constructor.");
+            }
+          }
+          if (candidate !== void 0 && candidate !== null && candidate !== defaultConstructor) {
+            const values = key3 === "slice" ? [length] : [storage3.buffer, offset, tracking ? void 0 : length];
+            result = await invokeBuiltinClosure(candidate, values, budget, bridge, void 0, true);
+            if (!isFloat32Array(result)) throw new TypeError("TypedArray species must return typed storage.");
+            const target = float32Storage(result, key3 === "slice");
+            if (key3 === "slice" && target.length < length)
+              throw new TypeError("TypedArray species returned insufficient storage.");
+          }
+          if (key3 === "subarray") {
+            if (result === void 0) {
+              result = new Float32Array(storage3.buffer, offset, tracking ? void 0 : length);
+              if (arrayBufferOptions(storage3.buffer) !== void 0)
+                float32ViewLayouts.set(result, { byteOffset: offset, ...tracking ? {} : { length } });
+            }
+            return result;
+          }
+          if (result === void 0) {
+            checkFloat32Allocation(length, budget);
+            result = new Float32Array(length);
+          }
+          if (!isFloat32Array(result)) throw new TypeError("TypedArray species must return typed storage.");
+          if (length > 0) {
+            const current = float32Storage(receiver, true);
+            const target = float32Storage(result, true);
+            const count = Math.min(length, Math.max(current.length - start, 0));
+            if (count > 0) {
+              const sourceBytes = new Uint8Array(current.buffer, current.byteOffset + start * 4, count * 4);
+              const targetBytes = new Uint8Array(target.buffer, target.byteOffset, count * 4);
+              if (current.buffer === target.buffer && targetBytes.byteOffset > sourceBytes.byteOffset && targetBytes.byteOffset < sourceBytes.byteOffset + sourceBytes.length) {
+                for (let index = 0; index < sourceBytes.length; index++) {
+                  budget.visitNode();
+                  targetBytes[index] = sourceBytes[index];
+                }
+              } else targetBytes.set(sourceBytes);
+            }
+          }
           return result;
         } finally {
           release2();
@@ -136789,6 +137044,7 @@ var init_float32array2 = __esm({
     init_iteration();
     init_data_checkpoint();
     init_boxed();
+    init_array_buffer();
     constructors = /* @__PURE__ */ new WeakSet();
   }
 });
@@ -143224,12 +143480,10 @@ function measureSandboxData(values, options = {}) {
     }
     const prototype = getSandboxPrototype(value);
     if (prototype !== null) visit(prototype, depth + 1);
+    if (isSandboxArrayBuffer(value)) usage += arrayBufferLength(value);
     if (isFloat32Array(value)) {
       const storage2 = float32Storage(value);
-      if (!seen.has(storage2.buffer)) {
-        seen.add(storage2.buffer);
-        usage += storage2.byteLength;
-      }
+      visit(storage2.buffer, depth + 1);
       for (const [key3, descriptor] of float32Properties(value)) {
         usage += 1;
         if (typeof key3 === "string") usage += key3.length;
@@ -143368,7 +143622,7 @@ function measureSandboxData(values, options = {}) {
       const descriptor = Object.getOwnPropertyDescriptor(value, key3);
       if (descriptor !== void 0) descriptors2.push([key3, descriptor]);
     }
-    const includeNonEnumerable = isSandboxDate(value) || sandboxErrorTypes.has(value) || hasManagedDescriptors(value);
+    const includeNonEnumerable = isSandboxDate(value) || isSandboxArrayBuffer(value) || sandboxErrorTypes.has(value) || hasManagedDescriptors(value);
     for (const [key3, descriptor] of descriptors2) {
       if (!descriptor.enumerable && !includeNonEnumerable) continue;
       usage += 1 + key3.length;
@@ -143564,6 +143818,20 @@ function copyToSandbox(value, state, path193 = "<root>", cloneSandboxCollections
     }
     return sandboxPromise;
   }
+  if (isSandboxArrayBuffer(value)) {
+    const existing = state.seen.get(value);
+    if (existing !== void 0) return existing;
+    const copy = copyArrayBufferStorage(value, state);
+    state.seen.set(value, copy);
+    for (const [key3, descriptor] of arrayBufferDataProperties(value)) {
+      Object.defineProperty(copy, key3, {
+        ...descriptor,
+        value: copyToSandbox(descriptor.value, state, joinPath(path193, key3), cloneSandboxCollections, depth + 1)
+      });
+    }
+    if (!Object.isExtensible(value)) Object.preventExtensions(copy);
+    return copy;
+  }
   if (nodeTypes.isDate(value)) {
     const existing = state.seen.get(value);
     if (existing !== void 0) return existing;
@@ -143582,6 +143850,7 @@ function copyToSandbox(value, state, path193 = "<root>", cloneSandboxCollections
     if (existing !== void 0) return existing;
     const copy = copyFloat32Storage(value, state);
     state.seen.set(value, copy);
+    copyToSandbox(float32Storage(value).buffer, state, `${path193}.buffer`, cloneSandboxCollections, depth + 1);
     for (const [key3, descriptor] of float32DataProperties(value)) {
       Object.defineProperty(copy, key3, {
         ...descriptor,
@@ -143803,6 +144072,7 @@ function copyFromSandbox(value, state, path193 = "<root>", options, depth = 0) {
     if (existing !== void 0) return existing;
     const copy = copyFloat32Storage(value, state);
     state.seen.set(value, copy);
+    copyFromSandbox(float32Storage(value).buffer, state, `${path193}.buffer`, options, depth + 1);
     for (const [key3, descriptor] of float32DataProperties(value)) {
       Object.defineProperty(copy, key3, {
         ...descriptor,
@@ -143812,6 +144082,20 @@ function copyFromSandbox(value, state, path193 = "<root>", options, depth = 0) {
     if (!Object.isExtensible(value)) Object.preventExtensions(copy);
     return copy;
   }
+  if (isSandboxArrayBuffer(value)) {
+    const existing = state.seen.get(value);
+    if (existing !== void 0) return existing;
+    const copy = copyArrayBufferStorage(value, state);
+    state.seen.set(value, copy);
+    for (const [key3, descriptor] of arrayBufferDataProperties(value)) {
+      Object.defineProperty(copy, key3, {
+        ...descriptor,
+        value: copyFromSandbox(descriptor.value, state, joinPath(path193, key3), options, depth + 1)
+      });
+    }
+    if (!Object.isExtensible(value)) Object.preventExtensions(copy);
+    return copy;
+  }
   if (isSandboxDate(value)) {
     const existing = state.seen.get(value);
     if (existing !== void 0) return existing;
@@ -143973,6 +144257,16 @@ function allocateSandboxValue2(value, budget, seen) {
     budget.allocateString(value);
     return;
   }
+  if (isSandboxArrayBuffer(value)) {
+    if (seen.has(value)) return;
+    seen.add(value);
+    budget.allocateArrayLength(arrayBufferLength(value));
+    for (const [key3, descriptor] of arrayBufferDataProperties(value)) {
+      if (typeof key3 === "string") budget.allocateString(key3);
+      allocateSandboxValue2(descriptor.value, budget, seen);
+    }
+    return;
+  }
   if (isSandboxBox(value)) {
     if (seen.has(value)) return;
     seen.add(value);
@@ -144133,6 +144427,7 @@ var init_values = __esm({
   "packages/safe-js/src/interp/values.ts"() {
     "use strict";
     init_otel2();
+    init_array_buffer();
     init_internal_symbols();
     init_intrinsics();
     init_generator_properties();
@@ -144601,7 +144896,7 @@ function serializeDumpValue(value, path193, state) {
   if (hasGuestObjectState(value) && !(state.trustedRunReplay && (isSandboxDate(value) || isSandboxPromise(value) || isPromiseResolvingFunction(value)))) {
     throw new TypeError("Guest function properties and prototype links cannot be serialized.");
   }
-  if (isSandboxRegExpIterator(value) || isSandboxRegex(value) && hasCustomRegexProperties(value) || isSandboxBox(value) || isSandboxDate(value) || isFloat32Array(value)) return serializeHeapReference(value, path193, state);
+  if (isSandboxArrayBuffer(value) || isSandboxRegExpIterator(value) || isSandboxRegex(value) && hasCustomRegexProperties(value) || isSandboxBox(value) || isSandboxDate(value) || isFloat32Array(value)) return serializeHeapReference(value, path193, state);
   if (Array.isArray(value)) {
     const reference2 = serializeHeapReference(value, path193, state);
     if (reference2 !== void 0) {
@@ -144673,11 +144968,21 @@ function serializeHeapReference(value, path193, state) {
         const serialized = serializeDumpValue(entry, `${path193}.<date-property>`, state);
         return serialized === SKIP_VALUE ? { kind: "undefined" } : serialized;
       });
+    } else if (isSandboxArrayBuffer(value)) {
+      state.heap[String(id)] = {
+        ...encodeArrayBufferStorage(value, id, state.float32Buffers, (id2) => ({ kind: "ref", id: id2 })),
+        state: captureArrayBufferState(value, (entry) => {
+          const serialized = serializeDumpValue(entry, `${path193}.<buffer>`, state);
+          return serialized === SKIP_VALUE ? { kind: "undefined" } : serialized;
+        })
+      };
     } else if (isFloat32Array(value)) {
-      const storage2 = encodeFloat32Storage(value, id, state.float32Buffers, (id2) => ({
-        kind: "ref",
-        id: id2
-      }));
+      const backing = float32Storage(value);
+      const storage2 = {
+        kind: "float32array",
+        ...encodeFloat32Layout(value),
+        buffer: serializeHeapReference(backing.buffer, `${path193}.buffer`, state)
+      };
       const entries = /* @__PURE__ */ Object.create(null);
       state.heap[String(id)] = { ...storage2, entries };
       for (const [key3, descriptor] of float32DataProperties(value)) {
@@ -144743,7 +145048,7 @@ function indexHeapContainers(snapshot2) {
   const heapIds = /* @__PURE__ */ new Map();
   let nextId = 1;
   for (const [value, stat35] of stats2.entries()) {
-    if (stat35.count > 1 || stat35.forceHeap === true || guestValues.has(value) || stat35.cyclic || hasNullObjectPrototype(value) || ownSerializableSymbolKeys(value).length > 0 || isSandboxBox(value) || isSandboxRegExpIterator(value) || isSandboxRegex(value) && hasCustomRegexProperties(value) || isSandboxDate(value) || isFloat32Array(value) || Array.isArray(value) && requiresArrayEntries(value) || isSandboxArguments(value) || sandboxErrorTypes.has(value)) {
+    if (stat35.count > 1 || stat35.forceHeap === true || guestValues.has(value) || stat35.cyclic || hasNullObjectPrototype(value) || ownSerializableSymbolKeys(value).length > 0 || isSandboxBox(value) || isSandboxRegExpIterator(value) || isSandboxRegex(value) && hasCustomRegexProperties(value) || isSandboxDate(value) || isFloat32Array(value) || isSandboxArrayBuffer(value) || Array.isArray(value) && requiresArrayEntries(value) || isSandboxArguments(value) || sandboxErrorTypes.has(value)) {
       heapIds.set(value, nextId);
       nextId += 1;
     }
@@ -144775,12 +145080,16 @@ function collectContainerStats(value, stats2, ancestors, guestValues, depth = 0)
   stat35.expanded = true;
   ancestors.add(value);
   const guestEntries = [];
-  const guest = captureGuestHeapNode(value, (entry) => {
+  if (isFloat32Array(value)) guestEntries.push(float32Storage(value).buffer);
+  const guest = isSandboxArrayBuffer(value) ? { kind: "arraybuffer", state: captureArrayBufferState(value, (entry) => {
+    guestEntries.push(entry);
+    return null;
+  }) } : captureGuestHeapNode(value, (entry) => {
     guestEntries.push(entry);
     return null;
   });
   if (guest !== void 0) {
-    guestValues.add(value);
+    if (!isSandboxArrayBuffer(value)) guestValues.add(value);
     for (const entry of guestEntries) {
       collectContainerStats(entry, stats2, ancestors, guestValues, depth + 1);
       if (entry !== null && typeof entry === "object") stats2.get(entry).forceHeap = true;
@@ -144788,6 +145097,7 @@ function collectContainerStats(value, stats2, ancestors, guestValues, depth = 0)
     ancestors.delete(value);
     return;
   }
+  for (const entry of guestEntries) collectContainerStats(entry, stats2, ancestors, guestValues, depth + 1);
   if (!Array.isArray(value) && !isPlainObject10(value) && !isFloat32Array(value) && !isSandboxDate(value)) {
     ancestors.delete(value);
     return;
@@ -144854,6 +145164,8 @@ var init_dump_format = __esm({
     init_arrays();
     init_float32();
     init_float32array();
+    init_array_buffer();
+    init_array_buffer2();
     init_date();
     init_date_properties();
     init_boxed();
@@ -145770,12 +146082,43 @@ function copyHostValueToSandbox(value, stackFrames, options, state, path193) {
     state.seen.set(value, date);
     return date;
   }
+  if (isSandboxArrayBuffer(value)) {
+    const existing = state.seen.get(value);
+    if (existing !== void 0) return existing;
+    const length = arrayBufferLength(value);
+    budget.allocateArrayLength(length);
+    budget.provisionDataUsage(length + 1)();
+    const copy = copyArrayBufferStorage(value, state);
+    state.seen.set(value, copy);
+    for (const [key3, descriptor] of arrayBufferDataProperties(value)) {
+      if (typeof key3 === "symbol") throw new TypeError("Host ArrayBuffer symbol properties require an explicit capability path.");
+      Object.defineProperty(copy, key3, {
+        ...descriptor,
+        value: copyHostValueToSandbox(
+          descriptor.value,
+          stackFrames,
+          { ...options, capabilityPath: [...options.capabilityPath ?? [], key3] },
+          state,
+          joinPath2(path193, key3)
+        )
+      });
+    }
+    if (!Object.isExtensible(value)) Object.preventExtensions(copy);
+    return copy;
+  }
   if (isFloat32Array(value)) {
     const existing = state.seen.get(value);
     if (existing !== void 0) return existing;
     checkFloat32Allocation(Math.ceil(float32Storage(value).byteLength / 4), budget);
     const copy = copyFloat32Storage(value, state);
     state.seen.set(value, copy);
+    copyHostValueToSandbox(
+      float32Storage(value).buffer,
+      stackFrames,
+      { ...options, capabilityPath: [...options.capabilityPath ?? [], "buffer"] },
+      state,
+      `${path193}.buffer`
+    );
     for (const [key3, descriptor] of float32DataProperties(value)) {
       Object.defineProperty(copy, key3, {
         ...descriptor,
@@ -146057,6 +146400,7 @@ var init_host_bridge = __esm({
     init_shape();
     init_budget2();
     init_compile_guard();
+    init_array_buffer();
     init_float32();
     init_exceptions();
     init_otel2();
@@ -148010,6 +148354,142 @@ var init_bigint2 = __esm({
   }
 });
 
+// packages/safe-js/src/interp/globals/array-buffer.ts
+function createArrayBufferGlobal(budget) {
+  const prototype = /* @__PURE__ */ Object.create(null);
+  const constructor = createSandboxClosure({
+    guest: true,
+    sandbox: true,
+    name: "ArrayBuffer",
+    length: 1,
+    call: () => {
+      throw new TypeError("ArrayBuffer requires new.");
+    },
+    construct: async (args, context) => {
+      let selected;
+      let current;
+      const bridge = {
+        ...context,
+        stack: context?.stack ?? [],
+        thisValue: void 0,
+        getProperty: context?.getProperty ?? ((value, key3) => {
+          const descriptor = getSandboxPropertyDescriptor(value, key3, budget);
+          return descriptor === void 0 ? getSandboxDataProperty(value, key3, budget) : readPropertyDescriptor(descriptor, value, bridge);
+        }),
+        invokeClosure: context?.invokeClosure ?? ((callee, values, receiver, construct) => invokeBuiltinClosure(callee, values, budget, context, receiver, construct))
+      };
+      const release2 = retainValues(budget, () => [selected, current, ...args]);
+      try {
+        const number = await sandboxNumber(args[0], budget, bridge);
+        const length = Number.isNaN(number) ? 0 : Math.trunc(number);
+        if (length < 0 || !Number.isSafeInteger(length)) throw new RangeError("Invalid ArrayBuffer length.");
+        let maxByteLength;
+        if (args[1] !== null && typeof args[1] === "object") {
+          current = await bridge.getProperty(args[1], "maxByteLength");
+          if (current !== void 0) {
+            const maximum = await sandboxNumber(current, budget, bridge);
+            maxByteLength = Number.isNaN(maximum) ? 0 : Math.trunc(maximum);
+            if (!Number.isSafeInteger(maxByteLength) || maxByteLength < length)
+              throw new RangeError("Invalid ArrayBuffer maximum length.");
+          }
+        }
+        const target = context?.newTarget ?? constructor;
+        selected = await bridge.getProperty(target, "prototype");
+        budget.allocateArrayLength(maxByteLength ?? length);
+        budget.provisionDataUsage(length + 1)();
+        const result = Reflect.construct(ArrayBuffer, [length, maxByteLength === void 0 ? void 0 : { maxByteLength }]);
+        setSandboxPrototype(result, selected !== null && typeof selected === "object" ? selected : prototype, budget);
+        return result;
+      } finally {
+        release2();
+      }
+    }
+  });
+  Object.defineProperty(materializeFunctionProperties(constructor), "prototype", { value: prototype, writable: false });
+  Object.defineProperty(materializeFunctionProperties(constructor), "isView", {
+    writable: true,
+    configurable: true,
+    value: createSandboxClosure({
+      guest: true,
+      sandbox: true,
+      name: "isView",
+      length: 1,
+      call: (args) => ArrayBuffer.isView(args[0])
+    })
+  });
+  Object.defineProperties(prototype, {
+    constructor: { value: constructor, writable: true, configurable: true },
+    [Symbol.toStringTag]: { value: "ArrayBuffer", configurable: true }
+  });
+  const getters = [];
+  Object.defineProperty(prototype, "resize", {
+    writable: true,
+    configurable: true,
+    value: createSandboxClosure({
+      guest: true,
+      sandbox: true,
+      name: "resize",
+      length: 1,
+      call: async (args, context) => {
+        const receiver = context?.thisValue;
+        if (!isSandboxArrayBuffer(receiver) || arrayBufferOptions(receiver) === void 0)
+          throw new TypeError("ArrayBuffer resize requires a resizable buffer receiver.");
+        const release2 = retainValues(budget, () => [receiver, ...args]);
+        try {
+          const number = await sandboxNumber(args[0], budget, context);
+          const length = Number.isNaN(number) ? 0 : Math.trunc(number);
+          if (!Number.isSafeInteger(length) || length < 0 || length > arrayBufferOptions(receiver).maxByteLength)
+            throw new RangeError("Invalid ArrayBuffer resize length.");
+          budget.allocateArrayLength(length);
+          budget.provisionDataUsage(Math.max(length - arrayBufferLength(receiver), 0))();
+          Reflect.apply(resizeBuffer2, receiver, [length]);
+          return void 0;
+        } finally {
+          release2();
+        }
+      }
+    })
+  });
+  for (const key3 of ["byteLength", "maxByteLength", "resizable"]) {
+    const getter = createSandboxClosure({
+      guest: true,
+      sandbox: true,
+      name: `get ${key3}`,
+      length: 0,
+      call: (_args, context) => {
+        if (!isSandboxArrayBuffer(context?.thisValue)) throw new TypeError(`ArrayBuffer ${key3} requires a buffer receiver.`);
+        if (key3 === "byteLength") return arrayBufferLength(context.thisValue);
+        const options = arrayBufferOptions(context.thisValue);
+        return key3 === "resizable" ? options !== void 0 : options?.maxByteLength ?? arrayBufferLength(context.thisValue);
+      }
+    });
+    Object.defineProperty(prototype, key3, { get: accessorAdapter(getter, "get"), configurable: true });
+    getters.push(getter);
+  }
+  setSandboxPrototype(prototype, getSandboxPrototype(/* @__PURE__ */ Object.create(null), budget));
+  arrayBufferPrototypes.set(budget, prototype);
+  registerBuiltinIdentities(budget, { ArrayBuffer: constructor });
+  registerIntrinsicFunction(budget, constructor);
+  for (const getter of getters) registerIntrinsicFunction(budget, getter);
+  registerIntrinsicObject(budget, prototype);
+  return constructor;
+}
+var resizeBuffer2;
+var init_array_buffer3 = __esm({
+  "packages/safe-js/src/interp/globals/array-buffer.ts"() {
+    "use strict";
+    init_array_buffer();
+    init_accessors();
+    init_values();
+    init_object_model();
+    init_builtin_call();
+    init_intrinsics();
+    init_string_coercion();
+    init_resources();
+    resizeBuffer2 = Object.getOwnPropertyDescriptor(ArrayBuffer.prototype, "resize").value;
+  }
+});
+
 // packages/safe-js/src/interp/globals.ts
 function createBuiltinBindings(options) {
   const bindings = {
@@ -148022,6 +148502,7 @@ function createBuiltinBindings(options) {
     ...createErrorGlobals({ ...options, errorPrototypes: options.errorPrototypes !== false }),
     ...createMathGlobals({ random: options.random, budget: options.budget }),
     ...createObjectArrayGlobals(options),
+    ArrayBuffer: createArrayBufferGlobal(options.budget),
     ...createMiscGlobals(options),
     ...createUriGlobals(options.budget),
     ...createPromiseGlobals(options),
@@ -148052,6 +148533,7 @@ var init_globals = __esm({
     init_date2();
     init_symbol();
     init_bigint2();
+    init_array_buffer3();
     init_intrinsics();
   }
 });
@@ -148701,7 +149183,7 @@ var init_template_validation = __esm({
 });
 
 // packages/safe-js/src/snapshot/validation.ts
-import { types as types6 } from "node:util";
+import { types as types7 } from "node:util";
 function validateSnapshotData(value) {
   validateGenericValue(value, "$", 0, {
     allowFunctions: false,
@@ -148773,6 +149255,11 @@ function validateDumpHeap(root, state) {
       validateDateRecord(entry, path193);
       continue;
     }
+    if (entry.kind === "arraybuffer") {
+      validateArrayBufferStorage(entry);
+      validateGuestHeapNode({ kind: "guest-object", state: entry.state }, heap, state.limits.maxEntries);
+      continue;
+    }
     if (entry.kind === "float32array") {
       validateFloat32Storage(entry);
       requireRecord3(entry.entries, `${path193}.entries`);
@@ -148996,7 +149483,7 @@ function validateHeapValue(value, path193, state, heap) {
     fail2("invalidValue", path193, String(error3));
   }
   validateErrorType(record4, path193);
-  if (!["symbol", "arguments", "array", "object", "map", "set", "float32array", "date", "boxed", "collection-iterator", "regexp-iterator", "regex-object"].includes(String(record4.kind)))
+  if (!["symbol", "arguments", "array", "object", "map", "set", "float32array", "arraybuffer", "date", "boxed", "collection-iterator", "regexp-iterator", "regex-object"].includes(String(record4.kind)))
     fail2("unknownTag", `${path193}.kind`, "unknown heap tag");
   validateValue(record4, path193, 1, state);
   if (record4.kind === "symbol") validateSymbolRecord(record4, path193, state);
@@ -149005,6 +149492,10 @@ function validateHeapValue(value, path193, state, heap) {
   if (record4.kind === "object") requireRecord3(record4.entries, `${path193}.entries`);
   if (record4.kind === "boxed") validateBoxedRecord(record4, path193, heap);
   if (record4.kind === "date") validateDateRecord(record4, path193);
+  if (record4.kind === "arraybuffer") {
+    validateArrayBufferStorage(record4);
+    validateGuestHeapNode({ kind: "guest-object", state: record4.state }, heap, state.limits.maxEntries);
+  }
   if (record4.kind === "float32array") {
     validateFloat32Storage(record4);
     requireRecord3(record4.entries, `${path193}.entries`);
@@ -149201,7 +149692,7 @@ function validateGenericValue(value, path193, depth, state) {
   if (typeof value === "object" && value !== null && hasGuestObjectState(value)) {
     fail2("invalidState", path193, "guest function properties, prototype links and custom descriptors cannot be restored");
   }
-  if (state.dataPropertiesOnly && types6.isProxy(value)) {
+  if (state.dataPropertiesOnly && types7.isProxy(value)) {
     fail2("invalidType", path193, "proxy objects are not snapshot data");
   }
   if (depth > state.limits.maxDepth)
@@ -149338,6 +149829,7 @@ var init_validation = __esm({
     init_dump_format();
     init_graph_depth();
     init_float32array();
+    init_array_buffer2();
     init_date();
     init_boxed2();
     init_object_model();
@@ -150248,6 +150740,7 @@ var init_known_globals = __esm({
     KNOWN_RUNTIME_GLOBALS = [
       "AggregateError",
       "Array",
+      "ArrayBuffer",
       "Boolean",
       "BigInt",
       "Date",
@@ -161007,10 +161500,10 @@ var init_random = __esm({
 
 // packages/safe-js/src/realm.ts
 import { AsyncLocalStorage as AsyncLocalStorage9 } from "node:async_hooks";
-import { types as types7 } from "node:util";
+import { types as types8 } from "node:util";
 function readModules(input) {
   const entries = (value, label) => {
-    if (types7.isMap(value) && !types7.isProxy(value)) {
+    if (types8.isMap(value) && !types8.isProxy(value)) {
       const result = [...Map.prototype.entries.call(value)];
       if (result.length > 4096 || result.some(([key3]) => typeof key3 !== "string" || key3.length === 0))
         throw new TypeError(`${label} requires bounded string keys.`);
@@ -161124,7 +161617,7 @@ var init_realm = __esm({
             throw new TypeError("Realm limits must be positive safe integers with supported names.");
           this.limits[name] = Number(value);
         }
-        if (options.extensions !== void 0 && (!Array.isArray(options.extensions) || types7.isProxy(options.extensions)))
+        if (options.extensions !== void 0 && (!Array.isArray(options.extensions) || types8.isProxy(options.extensions)))
           throw new TypeError("Extensions must be a registration array.");
         const registrations = options.extensions ?? [];
         const extensions = [];
@@ -161359,7 +161852,7 @@ var init_realm = __esm({
         return this.phase.run(phase, () => {
           try {
             const result = call();
-            if (types7.isPromise(result) || phase.pending.size > 0 || phase.failure !== void 0) {
+            if (types8.isPromise(result) || phase.pending.size > 0 || phase.failure !== void 0) {
               return Promise.resolve(result).then(
                 async (value) => {
                   await Promise.allSettled(phase.pending);
@@ -161428,7 +161921,7 @@ var init_realm = __esm({
           },
           read: (operation, validate2) => {
             const value = this.invokeHost(operation, operation);
-            if (types7.isPromise(value)) {
+            if (types8.isPromise(value)) {
               void Promise.resolve(value).catch(() => void 0);
               throw new TypeError("Live property operations must be synchronous.");
             }
@@ -161436,7 +161929,7 @@ var init_realm = __esm({
           },
           write: (operation, value) => {
             const result = this.invokeHost(operation, () => operation(this.exportValue(value)));
-            if (types7.isPromise(result)) {
+            if (types8.isPromise(result)) {
               void Promise.resolve(result).catch(() => void 0);
               throw new TypeError("Live property setters must be synchronous.");
             }
@@ -161645,7 +162138,7 @@ var init_realm = __esm({
             }
           });
           const output = getExtensionSetup(extension)(context);
-          if (types7.isPromise(output)) {
+          if (types8.isPromise(output)) {
             void Promise.resolve(output).catch(() => void 0);
             throw new TypeError("Extension setup must be synchronous.");
           }
@@ -162279,6 +162772,8 @@ var init_serialize = __esm({
     init_arrays();
     init_float32();
     init_float32array();
+    init_array_buffer();
+    init_array_buffer2();
     init_date();
     init_date_properties();
     init_boxed();