@visactor/vseed 0.4.1 → 0.4.3

package/dist/esm/pipeline/utils/sandbox/execute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline/utils/sandbox/execute.js","sources":["webpack://@visactor/vseed/./src/pipeline/utils/sandbox/execute.ts"],"sourcesContent":["/* eslint-disable no-console */\n/**\n * 增强的安全代码执行器\n * @description 专为 AI 生成代码设计的安全沙箱\n * @module enhancedSecureCodeExecutor\n */\n\nimport type { CodeExecutionOptions, CodeExecutionResult } from 'src/types/sandbox'\nimport { BUILTIN_UTILS_SOURCE } from './builtin-utils'\n\n/**\n * Worker 池管理器\n * @description 复用 Worker 实例，避免重复创建开销\n */\nclass WorkerPool {\n  private workers: Worker[] = []\n  private availableWorkers: Worker[] = []\n  private readonly maxSize: number\n  private isInitialized = false\n\n  constructor(maxSize = 2) {\n    this.maxSize = maxSize\n  }\n\n  async initialize(): Promise<void> {\n    if (this.isInitialized) return\n\n    for (let i = 0; i < this.maxSize; i++) {\n      try {\n        const worker = await this.createSecureWorker()\n        this.workers.push(worker)\n        this.availableWorkers.push(worker)\n      } catch (error) {\n        // 某个 Worker 初始化失败时，清理已创建的 Worker\n        this.workers.forEach((w) => w.terminate())\n        this.workers = []\n        this.availableWorkers = []\n        throw new Error(`Failed to initialize Worker pool: ${error instanceof Error ? error.message : String(error)}`)\n      }\n    }\n\n    this.isInitialized = true\n  }\n\n  private createSecureWorker(): Promise<Worker> {\n    // 直接使用内置工具库\n    const libraryLoadCode = `// 内置工具库（lodash/Ramda 兼容 API）\\n${BUILTIN_UTILS_SOURCE}`\n\n    const workerCode = `\n      // ============================================\n      // 阶段 1: 立即执行安全加固 (IIFE)\n      // ============================================\n      (function initSecureSandbox() {\n        'use strict';\n        \n        // 1.1 保存必要的原生引用（在被删除前）\n        const nativeImportScripts = self.importScripts;\n        const nativePostMessage = self.postMessage.bind(self);\n        \n        // 1.2 立即删除危险 API\n        delete self.importScripts;\n        delete self.fetch;\n        delete self.XMLHttpRequest;\n        delete self.WebSocket;\n        \n        // 1.3 冻结关键原型链（防止污染和篡改）\n        Object.freeze(Object.prototype);\n        Object.freeze(Array.prototype);\n        Object.freeze(Function.prototype);\n        Object.freeze(String.prototype);\n        Object.freeze(Number.prototype);\n        Object.freeze(Boolean.prototype);\n        \n        // ============================================\n        // 阶段 2: 加载工具库\n        // ============================================\n        try {\n          ${libraryLoadCode}\n        } catch (error) {\n          nativePostMessage({ \n            initError: 'Failed to load utility library: ' + error.message \n          });\n          return;\n        }\n        \n        // 验证库是否加载成功\n        const utilityLib = self._;\n        if (!utilityLib) {\n          nativePostMessage({ \n            initError: 'Builtin utility library (_ or R) not found after loading' \n          });\n          return;\n        }\n        \n        // ============================================\n        // 阶段 3: 创建安全上下文\n        // ============================================\n        const createSafeContext = (lib) => {\n          const allowedGlobals = {\n            // 工具库\n            _: lib,\n            R: lib,\n            \n            // 基础类型构造函数（只读）\n            Array: Array,\n            Object: Object,\n            String: String,\n            Number: Number,\n            Boolean: Boolean,\n            Date: Date,\n            \n            // 数学和工具\n            Math: Math,\n            JSON: JSON,\n            \n            // 类型检查\n            parseInt: parseInt,\n            parseFloat: parseFloat,\n            isNaN: isNaN,\n            isFinite: isFinite,\n            \n            // 错误类型（用于调试）\n            Error: Error,\n            TypeError: TypeError,\n            RangeError: RangeError,\n            \n            // 只读的数据引用\n            data: null,\n          };\n          \n          // 使用 Proxy 严格控制访问\n          return new Proxy(allowedGlobals, {\n            get(target, prop) {\n              if (prop === Symbol.unscopables) {\n                return undefined;\n              }\n              \n              if (prop in target) {\n                return target[prop];\n              }\n              \n              // 拒绝访问任何未定义的属性\n              throw new ReferenceError(\n                \\`'\\${String(prop)}' is not defined. \\\\n\\` +\n                \\`Only these globals are available: \\${Object.keys(allowedGlobals).join(', ')}\\`\n              );\n            },\n            \n            set(target, prop, value) {\n              // 只允许设置 data 属性（用于传递执行数据）\n              if (prop === 'data') {\n                target[prop] = value;\n                return true;\n              }\n              \n              // 拒绝设置其他属性\n              throw new TypeError(\n                \\`Cannot set property '\\${String(prop)}' on global context\\`\n              );\n            },\n            \n            has(target, prop) {\n              return prop in target;\n            },\n            \n            // 防止 getOwnPropertyDescriptor 等元编程操作\n            getOwnPropertyDescriptor(target, prop) {\n              if (prop in target) {\n                return Object.getOwnPropertyDescriptor(target, prop);\n              }\n              return undefined;\n            }\n          });\n        };\n        \n        const safeContext = createSafeContext(utilityLib);\n        \n        // ============================================\n        // 阶段 4: 代码执行引擎\n        // ============================================\n        const executeUserCodeSafely = (code, data, timeout) => {\n          // 设置超时保护（内层防御）\n          let timeoutId = null;\n          let isTimedOut = false;\n          \n          if (timeout > 0) {\n            timeoutId = setTimeout(() => {\n              isTimedOut = true;\n            }, timeout);\n          }\n          \n          try {\n            // 超时检查函数\n            // ⚠️ 注意：这只能防御\"合作式\"的代码（包含 I/O、迭代、递归）\n            // 对于纯计算死循环（while(true){}），只有外层 worker.terminate() 能终止\n            const checkTimeout = () => {\n              if (isTimedOut) {\n                throw new Error(\\`Execution timeout (exceeded \\${timeout}ms)\\`);\n              }\n            };\n            \n            // 更新安全上下文中的数据\n            safeContext.data = data;\n            \n            // 提取安全上下文的所有变量名和值\n            const contextKeys = Object.keys(safeContext);\n            const contextValues = contextKeys.map(key => safeContext[key]);\n            \n            // 显式遮蔽 Worker 全局对象中的危险变量（设为 undefined）\n            const shadowedGlobals = [\n              'self',           // Worker 全局对象本身\n              'postMessage',    // 通信通道（防止滥用）\n              'close',          // Worker 终止方法\n              'importScripts',  // 动态加载脚本（已删除，但显式遮蔽更安全）\n              'addEventListener', // 事件监听器\n              'removeEventListener',\n              'dispatchEvent',\n              'onmessage',      // 消息处理器\n              'onerror',        // 错误处理器\n              'onmessageerror',\n              'setTimeout',     // ⚠️ 遮蔽定时器，防止资源泄漏\n              'clearTimeout',\n              'setInterval',    // ⚠️ 防止用户创建大量定时器\n              'clearInterval',\n            ];\n            \n            // 包装用户代码：在严格模式下执行，通过参数注入变量\n            const wrappedCode = \\`\n              \"use strict\";\n              // 用户代码在这里执行，可以直接访问注入的变量（_, R, data, Math, etc.）\n              \\${code}\n            \\`;\n            \n            // 创建函数：参数是上下文变量名 + checkTimeout + 遮蔽的全局变量名\n            const userFunction = new Function(\n              ...contextKeys,        // 安全上下文变量\n              'checkTimeout',        // 超时检查函数（用户可选调用）\n              ...shadowedGlobals,    // 显式遮蔽的危险全局变量\n              wrappedCode\n            );\n            \n            // 执行并获取结果\n            const result = userFunction(\n              ...contextValues,                          // 安全上下文的值\n              checkTimeout,                              // 超时检查函数\n              ...shadowedGlobals.map(() => undefined)   // 所有危险全局变量设为 undefined\n            );\n            \n            // 清除超时\n            if (timeoutId) {\n              clearTimeout(timeoutId);\n            }\n            \n            // 验证返回值（只检查危险类型，不限制结构）\n            const validateResultType = (result) => {\n              const type = typeof result\n              \n              // 禁止返回函数、Symbol\n              if (type === 'function' || type === 'symbol') {\n                throw new TypeError(\n                  \\`Code must not return \\${type}. Returned types must be serializable.\\`\n                );\n              }\n              \n              // 禁止返回 Promise\n              if (result && typeof result.then === 'function') {\n                throw new TypeError(\n                  \\`Code must not return a Promise. Async operations are not allowed.\\`\n                );\n              }\n              \n              // 如果是数组，检查元素的危险类型\n              if (Array.isArray(result)) {\n                for (let i = 0; i < result.length; i++) {\n                  const item = result[i];\n                  const itemType = typeof item;\n                  \n                  if (itemType === 'function' || itemType === 'symbol') {\n                    throw new TypeError(\n                      \\`Array element at index \\${i} has forbidden type: \\${itemType}\\`\n                    );\n                  }\n                  \n                  if (item && typeof item.then === 'function') {\n                    throw new TypeError(\n                      \\`Array element at index \\${i} is a Promise. Async operations are not allowed.\\`\n                    );\n                  }\n                }\n              }\n            };\n            \n            validateResultType(result);\n            \n            return result;\n            \n          } catch (error) {\n            throw error;\n          } finally {\n            // 清理数据引用（防止内存泄漏）\n            safeContext.data = null;\n          }\n        };\n        \n        // ============================================\n        // 阶段 5: 消息处理\n        // ============================================\n        self.onmessage = function(event) {\n          // ⚠️ 防御性检查：确保消息格式正确\n          if (!event || !event.data) {\n            nativePostMessage({ \n              taskId: 'unknown',\n              success: false,\n              error: 'Invalid message format: event.data is null or undefined'\n            });\n            return;\n          }\n          \n          const { code, data, timeout, taskId } = event.data;\n          \n          // 验证必需字段\n          if (!taskId) {\n            nativePostMessage({ \n              taskId: 'unknown',\n              success: false,\n              error: 'Invalid message: taskId is required'\n            });\n            return;\n          }\n          \n          try {\n            const result = executeUserCodeSafely(code, data, timeout);\n            \n            nativePostMessage({ \n              taskId,\n              success: true,\n              result: result \n            });\n            \n          } catch (error) {\n            nativePostMessage({ \n              taskId,\n              success: false,\n              error: error.message || String(error),\n              errorType: error.constructor.name\n            });\n          }\n        };\n        \n        // 错误捕获\n        self.onerror = function(event) {\n          nativePostMessage({ \n            globalError: event.message || 'Unknown worker error'\n          });\n        };\n        \n        // 发送初始化成功消息\n        nativePostMessage({ initialized: true });\n        \n      })(); // 立即执行\n    `\n\n    const blob = new Blob([workerCode], { type: 'application/javascript' })\n    const blobURL = URL.createObjectURL(blob)\n\n    const worker = new Worker(blobURL)\n\n    // Worker 构造函数同步加载脚本，立即回收 Blob URL 防止内存泄漏\n    URL.revokeObjectURL(blobURL)\n\n    // 等待初始化消息\n    return new Promise<Worker>((resolve, reject) => {\n      let isSettled = false\n\n      const cleanup = () => {\n        if (!isSettled) {\n          isSettled = true\n          worker.onmessage = null // ⚠️ 清理监听器防止内存泄漏\n          worker.onerror = null\n        }\n      }\n\n      const timeout = setTimeout(() => {\n        cleanup()\n        worker.terminate()\n        reject(new Error('Worker initialization timeout'))\n      }, 10000)\n\n      worker.onmessage = (e) => {\n        if (e.data.initialized) {\n          clearTimeout(timeout)\n          cleanup()\n          resolve(worker)\n        } else if (e.data.initError) {\n          clearTimeout(timeout)\n          cleanup()\n          worker.terminate()\n          reject(new Error(e.data.initError))\n        }\n      }\n\n      worker.onerror = (errorEvent: ErrorEvent) => {\n        clearTimeout(timeout)\n        cleanup()\n        worker.terminate()\n        const errorMessage = errorEvent.message || errorEvent.error?.message || 'Unknown worker initialization error'\n        reject(new Error(`Worker initialization failed: ${errorMessage}`))\n      }\n    })\n  }\n\n  async acquire(): Promise<Worker> {\n    if (!this.isInitialized) {\n      await this.initialize()\n    }\n\n    if (this.availableWorkers.length === 0) {\n      // 创建临时 Worker 时需要等待初始化完成\n      try {\n        const tempWorker = await this.createSecureWorker()\n        return tempWorker\n      } catch (error) {\n        throw new Error(`Failed to create temporary Worker: ${error instanceof Error ? error.message : String(error)}`)\n      }\n    }\n\n    return this.availableWorkers.pop()!\n  }\n\n  release(worker: Worker): void {\n    if (this.workers.includes(worker)) {\n      this.availableWorkers.push(worker)\n    } else {\n      // 临时创建的 Worker，直接终止\n      worker.terminate()\n    }\n  }\n\n  terminate(): void {\n    this.workers.forEach((worker) => worker.terminate())\n    this.workers = []\n    this.availableWorkers = []\n    this.isInitialized = false\n  }\n}\n\n// 全局 Worker 池实例\nlet globalWorkerPool: WorkerPool | null = null\n// 添加初始化锁，防止并发创建多个 pool\nlet poolInitPromise: Promise<WorkerPool> | null = null\n// Worker 池配置\nlet poolConfig = { poolSize: 2 }\n\n/**\n * 获取或创建全局 Worker 池（线程安全）\n */\nfunction getOrCreateWorkerPool(): Promise<WorkerPool> {\n  if (globalWorkerPool) {\n    return Promise.resolve(globalWorkerPool)\n  }\n\n  // 如果已经在初始化中，等待现有的初始化完成\n  if (poolInitPromise) {\n    return poolInitPromise\n  }\n\n  // 创建新的 pool 并初始化\n  poolInitPromise = (async () => {\n    try {\n      const pool = new WorkerPool(poolConfig.poolSize)\n      await pool.initialize()\n      globalWorkerPool = pool\n      return pool\n    } catch (error) {\n      // 重置 promise，允许下次重试\n      poolInitPromise = null\n      throw error\n    }\n  })()\n\n  return poolInitPromise\n}\n\n/**\n * 初始化 Worker 池\n * @description 预热 Worker 实例，提升首次执行性能\n *\n * **⚠️ 注意：这是一个可选的性能优化方法**\n *\n * - **懒加载模式**：如果不调用此方法，Worker 池会在首次使用时自动初始化\n * - **推荐场景**：应用启动时预热，避免首次筛选时的冷启动延迟\n * - **配置选项**：\n *   - `poolSize`: Worker 池大小（默认 2）\n *\n * @param options - 初始化选项\n * @param options.poolSize - Worker 池大小，默认为 2\n *\n * @example\n * ```typescript\n * // ✅ 推荐：应用启动时预热（可选）\n * import { initializeWorkerPool } from '@visactor/vseed'\n *\n * // 在 main.ts 或入口文件中\n * await initializeWorkerPool({ poolSize: 2 })\n *\n * // ✅ 也可以：不做任何事，让 Worker 池自动初始化\n * // 首次调用 dynamicFilter 时会自动创建\n * ```\n */\nexport async function initializeWorkerPool(\n  options: {\n    utilityLibUrl?: string\n    utilityLibSource?: string\n    poolSize?: number\n  } = {},\n): Promise<void> {\n  // 设置配置（必须在创建 pool 之前）\n  poolConfig = {\n    poolSize: options.poolSize ?? 2,\n  }\n\n  // 使用统一的 getOrCreateWorkerPool 确保状态一致\n  await getOrCreateWorkerPool()\n}\n\n/**\n * 销毁 Worker 池\n * @description 终止所有 Worker 实例并清理全局状态\n *\n * **⚠️ 注意：大多数情况下不需要手动调用此方法**\n *\n * - **一般使用**：浏览器会在页面卸载时自动清理 Worker 资源\n * - **建议场景**：\n *   - 单元测试的清理阶段（`afterAll` 钩子）\n *   - 开发环境热重载时清理旧实例\n *   - 动态卸载整个图表库模块（极少见）\n *\n * @example\n * ```typescript\n * // ✅ 推荐：测试环境\n * afterAll(() => {\n *   terminateWorkerPool()\n * })\n *\n * // ❌ 不推荐：组件卸载时（Worker 池是全局的，其他组件可能还在使用）\n * onUnmounted(() => {\n *   terminateWorkerPool() // 不要这样做！\n * })\n * ```\n */\nexport function terminateWorkerPool(): void {\n  if (globalWorkerPool) {\n    globalWorkerPool.terminate()\n    globalWorkerPool = null\n  }\n  // 重置初始化 Promise，避免状态不一致\n  poolInitPromise = null\n}\n\n/**\n * 增强的安全验证\n * @description 针对 AI 生成代码的特定模式检查\n */\nexport function validateCodeSafety(code: string): void {\n  // 1. 基础检查\n  if (!code || code.trim().length === 0) {\n    throw new Error('Code cannot be empty')\n  }\n\n  if (code.length > 50000) {\n    throw new Error('Code is too long (max 50KB)')\n  }\n\n  // 2. 必须包含 return\n  if (!/\\breturn\\b/.test(code)) {\n    throw new Error('Code must contain a return statement')\n  }\n\n  // 3. 增强的黑名单检查\n  const forbiddenPatterns = [\n    // 原有的基础黑名单\n    { pattern: /\\beval\\b/gi, description: 'eval()' },\n    { pattern: /\\bFunction\\s*\\(/gi, description: 'Function constructor' },\n    { pattern: /\\bnew\\s+Function\\b/gi, description: 'new Function()' },\n    { pattern: /\\bimportScripts\\b/gi, description: 'importScripts()' },\n    { pattern: /\\bfetch\\b/gi, description: 'fetch()' },\n    { pattern: /\\bXMLHttpRequest\\b/gi, description: 'XMLHttpRequest' },\n    { pattern: /\\bWebSocket\\b/gi, description: 'WebSocket' },\n    { pattern: /\\blocalStorage\\b/gi, description: 'localStorage' },\n    { pattern: /\\bsessionStorage\\b/gi, description: 'sessionStorage' },\n    { pattern: /\\bindexedDB\\b/gi, description: 'indexedDB' },\n    { pattern: /\\bwindow\\b/gi, description: 'window' },\n    { pattern: /\\bdocument\\b/gi, description: 'document' },\n    { pattern: /\\bnavigator\\b/gi, description: 'navigator' },\n    { pattern: /\\blocation\\b/gi, description: 'location' },\n    { pattern: /\\brequire\\b/gi, description: 'require()' },\n    { pattern: /\\bimport\\s+/gi, description: 'import statement' },\n    { pattern: /\\bexport\\s+/gi, description: 'export statement' },\n\n    // 增强：Constructor 访问（绕过检测的常见方式）\n    { pattern: /\\bconstructor\\b/gi, description: 'constructor access' },\n    { pattern: /\\[['\"]constructor['\"]\\]/gi, description: 'constructor via bracket notation' },\n    { pattern: /\\['constructor'\\]/gi, description: 'constructor string access' },\n\n    // 增强：原型链操作\n    { pattern: /\\b__proto__\\b/gi, description: '__proto__' },\n    { pattern: /\\bprototype\\b/gi, description: 'prototype manipulation' },\n    { pattern: /Object\\.setPrototypeOf/gi, description: 'Object.setPrototypeOf()' },\n    { pattern: /Object\\.getPrototypeOf/gi, description: 'Object.getPrototypeOf()' },\n    { pattern: /Object\\.create\\s*\\(\\s*null\\s*\\)/gi, description: 'Object.create(null)' },\n\n    // 增强：反射和元编程\n    { pattern: /\\bReflect\\./gi, description: 'Reflect API' },\n    { pattern: /\\bProxy\\b/gi, description: 'Proxy constructor' },\n\n    // 增强：全局对象访问\n    { pattern: /\\bglobal\\b/gi, description: 'global object' },\n    { pattern: /\\bglobalThis\\b/gi, description: 'globalThis' },\n    { pattern: /\\bself\\s*\\[/gi, description: 'self[] access' },\n    { pattern: /\\bthis\\s*\\.\\s*constructor/gi, description: 'this.constructor' },\n\n    // 增强：异步操作（容易被滥用）\n    { pattern: /\\basync\\s+function/gi, description: 'async function' },\n    { pattern: /\\bawait\\b/gi, description: 'await keyword' },\n    { pattern: /\\bnew\\s+Promise\\b/gi, description: 'new Promise()' },\n    { pattern: /\\.then\\s*\\(/gi, description: 'Promise.then()' },\n\n    // 增强：生成器（可能导致难以控制的执行）\n    { pattern: /\\bfunction\\s*\\*/gi, description: 'generator function' },\n    { pattern: /\\byield\\b/gi, description: 'yield keyword' },\n\n    // 增强：动态代码生成\n    { pattern: /\\.apply\\s*\\(/gi, description: 'Function.apply()' },\n    { pattern: /\\.call\\s*\\(/gi, description: 'Function.call()' },\n    { pattern: /\\.bind\\s*\\(/gi, description: 'Function.bind()' },\n\n    // 增强：Worker 相关\n    { pattern: /\\bWorker\\b/gi, description: 'Worker constructor' },\n    { pattern: /\\bSharedWorker\\b/gi, description: 'SharedWorker' },\n    { pattern: /\\bServiceWorker\\b/gi, description: 'ServiceWorker' },\n  ]\n\n  for (const { pattern, description } of forbiddenPatterns) {\n    if (pattern.test(code)) {\n      throw new Error(\n        `Security violation: Code contains forbidden pattern \"${description}\". ` +\n          `For AI-generated code, please regenerate without this pattern.`,\n      )\n    }\n  }\n\n  // 4. 检查可疑的字符串拼接（用于绕过检测）\n  const suspiciousPatterns = [\n    /['\"]con['\"] *\\+ *['\"]structor['\"]/gi, // \"con\" + \"structor\"\n    /['\"]ev['\"] *\\+ *['\"]al['\"]/gi, // \"ev\" + \"al\"\n    /['\"]__pro['\"] *\\+ *['\"]to__['\"]/gi, // \"__pro\" + \"to__\"\n    /\\b(self|window|global)\\s*\\[\\s*['\"][a-z]+['\"]\\s*\\+\\s*['\"][a-z]+['\"]\\s*\\]/gi, // self[\"x\" + \"y\"]\n  ]\n\n  for (const pattern of suspiciousPatterns) {\n    if (pattern.test(code)) {\n      throw new Error(\n        'Security violation: Code contains suspicious string concatenation that may bypass security checks.',\n      )\n    }\n  }\n\n  // 5. AI 代码特定检查\n  // AI 生成的代码通常比较规范，不应该包含过于 tricky 的写法\n  const aiCodeWarnings = [\n    { pattern: /\\[['\"][a-z_$]+['\"]\\]/gi, count: 0, threshold: 10, description: 'excessive bracket notation' },\n    { pattern: /\\s*\\+\\s*['\"]/gi, count: 0, threshold: 5, description: 'excessive string concatenation' },\n  ]\n\n  for (const warning of aiCodeWarnings) {\n    const matches = code.match(warning.pattern)\n    if (matches && matches.length > warning.threshold) {\n      throw new Error(\n        `Security warning: Code contains ${matches.length} instances of ${warning.description}, ` +\n          `which is unusual for AI-generated code. Please regenerate.`,\n      )\n    }\n  }\n}\n\n/**\n * 代码执行函数\n * @description 使用 Worker 池和增强安全检查\n */\nexport async function executeFilterCode(options: CodeExecutionOptions): Promise<CodeExecutionResult> {\n  const { code, data, timeout = 2000 } = options\n\n  // 1. 环境检查（返回失败结果而不是抛出异常）\n  if (typeof Worker === 'undefined') {\n    return {\n      success: false,\n      data: [],\n      error: 'Web Worker is not supported in this environment',\n    }\n  }\n\n  try {\n    // 2. 增强的安全验证\n    validateCodeSafety(code)\n\n    // 3. 验证输入数据\n    if (!Array.isArray(data)) {\n      throw new Error('Input data must be an array')\n    }\n\n    // 数据大小限制（防止 OOM）\n    if (data.length > 100000) {\n      console.warn(`[vseed] Large dataset detected: ${data.length} items. Consider pagination for better performance.`)\n    }\n\n    // ⚠️ 数据内存大小估算（粗略）\n    const dataSize = JSON.stringify(data).length\n    if (dataSize > 10 * 1024 * 1024) {\n      // 10MB\n      throw new Error(`Input data is too large (${(dataSize / 1024 / 1024).toFixed(1)}MB). Maximum allowed is 10MB.`)\n    }\n\n    // 4. 初始化或获取 Worker 池（线程安全）\n    const pool = await getOrCreateWorkerPool()\n    const worker = await pool.acquire()\n    const taskId = `task_${Date.now()}_${Math.random().toString(36).substring(7)}`\n\n    // 标记 Worker 是否应该被归还到池中（超时/错误时应该终止而不是归还）\n    let shouldReleaseWorker = true\n\n    try {\n      const result = await new Promise<any[]>((resolve, reject) => {\n        // 使用 AbortController 和 cleanup 确保监听器总是被清理\n        let isSettled = false\n        const cleanup = () => {\n          if (!isSettled) {\n            isSettled = true\n            worker.removeEventListener('message', messageHandler)\n            worker.removeEventListener('error', errorHandler)\n          }\n        }\n\n        // 外层超时保护（比内层多 1 秒）\n        const outerTimeoutId = setTimeout(() => {\n          cleanup()\n          shouldReleaseWorker = false // ⚠️ 超时时不归还 Worker\n          worker.terminate() // ⚠️ 立即终止 Worker，防止继续消耗 CPU\n          reject(new Error(`Execution timeout (exceeded ${timeout}ms) - outer guard`))\n        }, timeout + 1000)\n\n        // 消息处理\n        const messageHandler = (e: MessageEvent) => {\n          if (e.data.taskId !== taskId) return\n\n          clearTimeout(outerTimeoutId)\n          cleanup()\n\n          if (e.data.success) {\n            resolve(e.data.result)\n          } else {\n            reject(new Error(`Execution failed: ${e.data.error}${e.data.errorType ? ` (${e.data.errorType})` : ''}`))\n          }\n        }\n\n        // 错误处理\n        const errorHandler = (errorEvent: ErrorEvent) => {\n          clearTimeout(outerTimeoutId)\n          cleanup()\n          shouldReleaseWorker = false // ⚠️ Worker 内部错误，不归还\n          worker.terminate() // ⚠️ 终止异常的 Worker\n          // ✅ 正确提取 ErrorEvent 中的错误信息\n          const errorMessage = errorEvent.message || errorEvent.error?.message || 'Unknown worker error'\n          reject(new Error(`Worker error: ${errorMessage}`))\n        }\n\n        worker.addEventListener('message', messageHandler)\n        worker.addEventListener('error', errorHandler)\n\n        worker.postMessage({\n          taskId,\n          code,\n          data,\n          timeout,\n        })\n      })\n\n      return {\n        success: true,\n        data: result,\n      }\n    } finally {\n      // 只有在正常完成时才归还 Worker\n      // 超时或错误时 Worker 已被 terminate()，不应该归还到池中\n      if (shouldReleaseWorker && globalWorkerPool) {\n        globalWorkerPool.release(worker)\n      }\n    }\n  } catch (error) {\n    return {\n      success: false,\n      data: [],\n      error: error instanceof Error ? error.message : String(error),\n    }\n  }\n}\n"],"names":["WorkerPool","maxSize","i","worker","error","w","Error","String","libraryLoadCode","BUILTIN_UTILS_SOURCE","workerCode","blob","Blob","blobURL","URL","Worker","Promise","resolve","reject","isSettled","cleanup","timeout","setTimeout","e","clearTimeout","errorEvent","errorMessage","tempWorker","globalWorkerPool","poolInitPromise","poolConfig","getOrCreateWorkerPool","pool","initializeWorkerPool","options","terminateWorkerPool","validateCodeSafety","code","forbiddenPatterns","pattern","description","suspiciousPatterns","aiCodeWarnings","warning","matches","executeFilterCode","data","Array","console","dataSize","JSON","taskId","Date","Math","shouldReleaseWorker","result","messageHandler","errorHandler","outerTimeoutId"],"mappings":";AAcA,MAAMA;IACI,UAAoB,EAAE;IACtB,mBAA6B,EAAE;IACtB,QAAe;IACxB,gBAAgB,MAAK;IAE7B,YAAYC,UAAU,CAAC,CAAE;QACvB,IAAI,CAAC,OAAO,GAAGA;IACjB;IAEA,MAAM,aAA4B;QAChC,IAAI,IAAI,CAAC,aAAa,EAAE;QAExB,IAAK,IAAIC,IAAI,GAAGA,IAAI,IAAI,CAAC,OAAO,EAAEA,IAChC,IAAI;YACF,MAAMC,SAAS,MAAM,IAAI,CAAC,kBAAkB;YAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,CAACA;YAClB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAACA;QAC7B,EAAE,OAAOC,OAAO;YAEd,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAACC,IAAMA,EAAE,SAAS;YACvC,IAAI,CAAC,OAAO,GAAG,EAAE;YACjB,IAAI,CAAC,gBAAgB,GAAG,EAAE;YAC1B,MAAM,IAAIC,MAAM,CAAC,kCAAkC,EAAEF,iBAAiBE,QAAQF,MAAM,OAAO,GAAGG,OAAOH,QAAQ;QAC/G;QAGF,IAAI,CAAC,aAAa,GAAG;IACvB;IAEQ,qBAAsC;QAE5C,MAAMI,kBAAkB,CAAC,+BAA+B,EAAEC,sBAAsB;QAEhF,MAAMC,aAAa,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA6Bd,EAAEF,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IA2RxB,CAAC;QAED,MAAMG,OAAO,IAAIC,KAAK;YAACF;SAAW,EAAE;YAAE,MAAM;QAAyB;QACrE,MAAMG,UAAUC,IAAI,eAAe,CAACH;QAEpC,MAAMR,SAAS,IAAIY,OAAOF;QAG1BC,IAAI,eAAe,CAACD;QAGpB,OAAO,IAAIG,QAAgB,CAACC,SAASC;YACnC,IAAIC,YAAY;YAEhB,MAAMC,UAAU;gBACd,IAAI,CAACD,WAAW;oBACdA,YAAY;oBACZhB,OAAO,SAAS,GAAG;oBACnBA,OAAO,OAAO,GAAG;gBACnB;YACF;YAEA,MAAMkB,UAAUC,WAAW;gBACzBF;gBACAjB,OAAO,SAAS;gBAChBe,OAAO,IAAIZ,MAAM;YACnB,GAAG;YAEHH,OAAO,SAAS,GAAG,CAACoB;gBAClB,IAAIA,EAAE,IAAI,CAAC,WAAW,EAAE;oBACtBC,aAAaH;oBACbD;oBACAH,QAAQd;gBACV,OAAO,IAAIoB,EAAE,IAAI,CAAC,SAAS,EAAE;oBAC3BC,aAAaH;oBACbD;oBACAjB,OAAO,SAAS;oBAChBe,OAAO,IAAIZ,MAAMiB,EAAE,IAAI,CAAC,SAAS;gBACnC;YACF;YAEApB,OAAO,OAAO,GAAG,CAACsB;gBAChBD,aAAaH;gBACbD;gBACAjB,OAAO,SAAS;gBAChB,MAAMuB,eAAeD,WAAW,OAAO,IAAIA,WAAW,KAAK,EAAE,WAAW;gBACxEP,OAAO,IAAIZ,MAAM,CAAC,8BAA8B,EAAEoB,cAAc;YAClE;QACF;IACF;IAEA,MAAM,UAA2B;QAC/B,IAAI,CAAC,IAAI,CAAC,aAAa,EACrB,MAAM,IAAI,CAAC,UAAU;QAGvB,IAAI,AAAiC,MAAjC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAE9B,IAAI;YACF,MAAMC,aAAa,MAAM,IAAI,CAAC,kBAAkB;YAChD,OAAOA;QACT,EAAE,OAAOvB,OAAO;YACd,MAAM,IAAIE,MAAM,CAAC,mCAAmC,EAAEF,iBAAiBE,QAAQF,MAAM,OAAO,GAAGG,OAAOH,QAAQ;QAChH;QAGF,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG;IAClC;IAEA,QAAQD,MAAc,EAAQ;QAC5B,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,CAACA,SACxB,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAACA;aAG3BA,OAAO,SAAS;IAEpB;IAEA,YAAkB;QAChB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAACA,SAAWA,OAAO,SAAS;QACjD,IAAI,CAAC,OAAO,GAAG,EAAE;QACjB,IAAI,CAAC,gBAAgB,GAAG,EAAE;QAC1B,IAAI,CAAC,aAAa,GAAG;IACvB;AACF;AAGA,IAAIyB,mBAAsC;AAE1C,IAAIC,kBAA8C;AAElD,IAAIC,aAAa;IAAE,UAAU;AAAE;AAK/B,SAASC;IACP,IAAIH,kBACF,OAAOZ,QAAQ,OAAO,CAACY;IAIzB,IAAIC,iBACF,OAAOA;IAITA,kBAAmB;QACjB,IAAI;YACF,MAAMG,OAAO,IAAIhC,WAAW8B,WAAW,QAAQ;YAC/C,MAAME,KAAK,UAAU;YACrBJ,mBAAmBI;YACnB,OAAOA;QACT,EAAE,OAAO5B,OAAO;YAEdyB,kBAAkB;YAClB,MAAMzB;QACR;IACF;IAEA,OAAOyB;AACT;AA4BO,eAAeI,qBACpBC,UAII,CAAC,CAAC;IAGNJ,aAAa;QACX,UAAUI,QAAQ,QAAQ,IAAI;IAChC;IAGA,MAAMH;AACR;AA2BO,SAASI;IACd,IAAIP,kBAAkB;QACpBA,iBAAiB,SAAS;QAC1BA,mBAAmB;IACrB;IAEAC,kBAAkB;AACpB;AAMO,SAASO,mBAAmBC,IAAY;IAE7C,IAAI,CAACA,QAAQA,AAAuB,MAAvBA,KAAK,IAAI,GAAG,MAAM,EAC7B,MAAM,IAAI/B,MAAM;IAGlB,IAAI+B,KAAK,MAAM,GAAG,OAChB,MAAM,IAAI/B,MAAM;IAIlB,IAAI,CAAC,aAAa,IAAI,CAAC+B,OACrB,MAAM,IAAI/B,MAAM;IAIlB,MAAMgC,oBAAoB;QAExB;YAAE,SAAS;YAAc,aAAa;QAAS;QAC/C;YAAE,SAAS;YAAqB,aAAa;QAAuB;QACpE;YAAE,SAAS;YAAwB,aAAa;QAAiB;QACjE;YAAE,SAAS;YAAuB,aAAa;QAAkB;QACjE;YAAE,SAAS;YAAe,aAAa;QAAU;QACjD;YAAE,SAAS;YAAwB,aAAa;QAAiB;QACjE;YAAE,SAAS;YAAmB,aAAa;QAAY;QACvD;YAAE,SAAS;YAAsB,aAAa;QAAe;QAC7D;YAAE,SAAS;YAAwB,aAAa;QAAiB;QACjE;YAAE,SAAS;YAAmB,aAAa;QAAY;QACvD;YAAE,SAAS;YAAgB,aAAa;QAAS;QACjD;YAAE,SAAS;YAAkB,aAAa;QAAW;QACrD;YAAE,SAAS;YAAmB,aAAa;QAAY;QACvD;YAAE,SAAS;YAAkB,aAAa;QAAW;QACrD;YAAE,SAAS;YAAiB,aAAa;QAAY;QACrD;YAAE,SAAS;YAAiB,aAAa;QAAmB;QAC5D;YAAE,SAAS;YAAiB,aAAa;QAAmB;QAG5D;YAAE,SAAS;YAAqB,aAAa;QAAqB;QAClE;YAAE,SAAS;YAA6B,aAAa;QAAmC;QACxF;YAAE,SAAS;YAAuB,aAAa;QAA4B;QAG3E;YAAE,SAAS;YAAmB,aAAa;QAAY;QACvD;YAAE,SAAS;YAAmB,aAAa;QAAyB;QACpE;YAAE,SAAS;YAA4B,aAAa;QAA0B;QAC9E;YAAE,SAAS;YAA4B,aAAa;QAA0B;QAC9E;YAAE,SAAS;YAAqC,aAAa;QAAsB;QAGnF;YAAE,SAAS;YAAiB,aAAa;QAAc;QACvD;YAAE,SAAS;YAAe,aAAa;QAAoB;QAG3D;YAAE,SAAS;YAAgB,aAAa;QAAgB;QACxD;YAAE,SAAS;YAAoB,aAAa;QAAa;QACzD;YAAE,SAAS;YAAiB,aAAa;QAAgB;QACzD;YAAE,SAAS;YAA+B,aAAa;QAAmB;QAG1E;YAAE,SAAS;YAAwB,aAAa;QAAiB;QACjE;YAAE,SAAS;YAAe,aAAa;QAAgB;QACvD;YAAE,SAAS;YAAuB,aAAa;QAAgB;QAC/D;YAAE,SAAS;YAAiB,aAAa;QAAiB;QAG1D;YAAE,SAAS;YAAqB,aAAa;QAAqB;QAClE;YAAE,SAAS;YAAe,aAAa;QAAgB;QAGvD;YAAE,SAAS;YAAkB,aAAa;QAAmB;QAC7D;YAAE,SAAS;YAAiB,aAAa;QAAkB;QAC3D;YAAE,SAAS;YAAiB,aAAa;QAAkB;QAG3D;YAAE,SAAS;YAAgB,aAAa;QAAqB;QAC7D;YAAE,SAAS;YAAsB,aAAa;QAAe;QAC7D;YAAE,SAAS;YAAuB,aAAa;QAAgB;KAChE;IAED,KAAK,MAAM,EAAEC,OAAO,EAAEC,WAAW,EAAE,IAAIF,kBACrC,IAAIC,QAAQ,IAAI,CAACF,OACf,MAAM,IAAI/B,MACR,CAAC,qDAAqD,EAAEkC,YAAY,iEAAG,CAAC;IAO9E,MAAMC,qBAAqB;QACzB;QACA;QACA;QACA;KACD;IAED,KAAK,MAAMF,WAAWE,mBACpB,IAAIF,QAAQ,IAAI,CAACF,OACf,MAAM,IAAI/B,MACR;IAON,MAAMoC,iBAAiB;QACrB;YAAE,SAAS;YAA0B,OAAO;YAAG,WAAW;YAAI,aAAa;QAA6B;QACxG;YAAE,SAAS;YAAkB,OAAO;YAAG,WAAW;YAAG,aAAa;QAAiC;KACpG;IAED,KAAK,MAAMC,WAAWD,eAAgB;QACpC,MAAME,UAAUP,KAAK,KAAK,CAACM,QAAQ,OAAO;QAC1C,IAAIC,WAAWA,QAAQ,MAAM,GAAGD,QAAQ,SAAS,EAC/C,MAAM,IAAIrC,MACR,CAAC,gCAAgC,EAAEsC,QAAQ,MAAM,CAAC,cAAc,EAAED,QAAQ,WAAW,CAAC,4DAAE,CAAC;IAI/F;AACF;AAMO,eAAeE,kBAAkBX,OAA6B;IACnE,MAAM,EAAEG,IAAI,EAAES,IAAI,EAAEzB,UAAU,IAAI,EAAE,GAAGa;IAGvC,IAAI,AAAkB,eAAlB,OAAOnB,QACT,OAAO;QACL,SAAS;QACT,MAAM,EAAE;QACR,OAAO;IACT;IAGF,IAAI;QAEFqB,mBAAmBC;QAGnB,IAAI,CAACU,MAAM,OAAO,CAACD,OACjB,MAAM,IAAIxC,MAAM;QAIlB,IAAIwC,KAAK,MAAM,GAAG,QAChBE,QAAQ,IAAI,CAAC,CAAC,gCAAgC,EAAEF,KAAK,MAAM,CAAC,mDAAmD,CAAC;QAIlH,MAAMG,WAAWC,KAAK,SAAS,CAACJ,MAAM,MAAM;QAC5C,IAAIG,WAAW,UAEb,MAAM,IAAI3C,MAAM,CAAC,yBAAyB,EAAG2C,AAAAA,CAAAA,WAAW,OAAO,IAAG,EAAG,OAAO,CAAC,GAAG,6BAA6B,CAAC;QAIhH,MAAMjB,OAAO,MAAMD;QACnB,MAAM5B,SAAS,MAAM6B,KAAK,OAAO;QACjC,MAAMmB,SAAS,CAAC,KAAK,EAAEC,KAAK,GAAG,GAAG,CAAC,EAAEC,KAAK,MAAM,GAAG,QAAQ,CAAC,IAAI,SAAS,CAAC,IAAI;QAG9E,IAAIC,sBAAsB;QAE1B,IAAI;YACF,MAAMC,SAAS,MAAM,IAAIvC,QAAe,CAACC,SAASC;gBAEhD,IAAIC,YAAY;gBAChB,MAAMC,UAAU;oBACd,IAAI,CAACD,WAAW;wBACdA,YAAY;wBACZhB,OAAO,mBAAmB,CAAC,WAAWqD;wBACtCrD,OAAO,mBAAmB,CAAC,SAASsD;oBACtC;gBACF;gBAGA,MAAMC,iBAAiBpC,WAAW;oBAChCF;oBACAkC,sBAAsB;oBACtBnD,OAAO,SAAS;oBAChBe,OAAO,IAAIZ,MAAM,CAAC,4BAA4B,EAAEe,QAAQ,iBAAiB,CAAC;gBAC5E,GAAGA,UAAU;gBAGb,MAAMmC,iBAAiB,CAACjC;oBACtB,IAAIA,EAAE,IAAI,CAAC,MAAM,KAAK4B,QAAQ;oBAE9B3B,aAAakC;oBACbtC;oBAEA,IAAIG,EAAE,IAAI,CAAC,OAAO,EAChBN,QAAQM,EAAE,IAAI,CAAC,MAAM;yBAErBL,OAAO,IAAIZ,MAAM,CAAC,kBAAkB,EAAEiB,EAAE,IAAI,CAAC,KAAK,GAAGA,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,EAAEA,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI;gBAE3G;gBAGA,MAAMkC,eAAe,CAAChC;oBACpBD,aAAakC;oBACbtC;oBACAkC,sBAAsB;oBACtBnD,OAAO,SAAS;oBAEhB,MAAMuB,eAAeD,WAAW,OAAO,IAAIA,WAAW,KAAK,EAAE,WAAW;oBACxEP,OAAO,IAAIZ,MAAM,CAAC,cAAc,EAAEoB,cAAc;gBAClD;gBAEAvB,OAAO,gBAAgB,CAAC,WAAWqD;gBACnCrD,OAAO,gBAAgB,CAAC,SAASsD;gBAEjCtD,OAAO,WAAW,CAAC;oBACjBgD;oBACAd;oBACAS;oBACAzB;gBACF;YACF;YAEA,OAAO;gBACL,SAAS;gBACT,MAAMkC;YACR;QACF,SAAU;YAGR,IAAID,uBAAuB1B,kBACzBA,iBAAiB,OAAO,CAACzB;QAE7B;IACF,EAAE,OAAOC,OAAO;QACd,OAAO;YACL,SAAS;YACT,MAAM,EAAE;YACR,OAAOA,iBAAiBE,QAAQF,MAAM,OAAO,GAAGG,OAAOH;QACzD;IACF;AACF"}

package/dist/esm/pipeline/utils/sandbox/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * 安全代码执行器
+ * @description 在 Web Worker 沙箱中安全执行动态筛选代码
+ * @module secureCodeExecutor
+ */
+export { executeFilterCode, validateCodeSafety, initializeWorkerPool, terminateWorkerPool } from './execute';
+export { BUILTIN_UTILS_SOURCE, HAS_BUILTIN_UTILS } from './builtin-utils';

package/dist/esm/pipeline/utils/sandbox/index.js

@@ -0,0 +1,3 @@
+import { executeFilterCode, initializeWorkerPool, terminateWorkerPool, validateCodeSafety } from "./execute.js";
+import { BUILTIN_UTILS_SOURCE, HAS_BUILTIN_UTILS } from "./builtin-utils.js";
+export { BUILTIN_UTILS_SOURCE, HAS_BUILTIN_UTILS, executeFilterCode, initializeWorkerPool, terminateWorkerPool, validateCodeSafety };

package/dist/esm/types/builder/builder.d.ts

@@ -4,6 +4,7 @@ import type { VSeed } from '../vseed';
 import type { AdvancedPipeline, SpecPipeline } from '../pipeline';
 import type { AdvancedVSeed } from '../advancedVSeed';
 export declare abstract class VSeedBuilder {
+    abstract prepare: () => Promise<void>;
     abstract build: () => Spec;
     abstract buildAdvanced: () => AdvancedVSeed | null;
     abstract buildSpec: (advancedVSeed: AdvancedVSeed) => Spec;

package/dist/esm/types/builder/builder.js.map

@@ -1 +1 @@
-{"version":3,"file":"types/builder/builder.js","sources":["webpack://@visactor/vseed/./src/types/builder/builder.ts"],"sourcesContent":["import type { Spec } from 'src/types'\nimport type { ChartType, CustomThemeConfig } from '../properties'\nimport type { VSeed } from '../vseed'\nimport type { AdvancedPipeline, SpecPipeline } from '../pipeline'\nimport type { AdvancedVSeed } from '../advancedVSeed'\n\nexport abstract class VSeedBuilder {\n  abstract build: () => Spec\n  abstract buildAdvanced: () => AdvancedVSeed | null\n  abstract buildSpec: (advancedVSeed: AdvancedVSeed) => Spec\n\n  static getAdvancedPipeline: (chartType: ChartType) => AdvancedPipeline\n  static getSpecPipeline: (chartType: ChartType) => SpecPipeline\n  static getTheme: (themeKey: string) => CustomThemeConfig\n  static getThemeMap: () => Record<string, CustomThemeConfig>\n\n  abstract getColorItems: () => { id: string; alias: string }[]\n  abstract getColorIdMap: () => Record<string, { id: string; alias: string }>\n\n  abstract get spec(): Spec | null\n  abstract set spec(value: Spec | null)\n  abstract get vseed(): VSeed\n  abstract set vseed(value: VSeed)\n  abstract get advancedVSeed(): AdvancedVSeed | null\n  abstract set advancedVSeed(value: AdvancedVSeed | null)\n}\n"],"names":["VSeedBuilder"],"mappings":"AAMO,MAAeA;IAKpB,OAAO,oBAA+D;IACtE,OAAO,gBAAuD;IAC9D,OAAO,SAAiD;IACxD,OAAO,YAAoD;AAW7D"}
+{"version":3,"file":"types/builder/builder.js","sources":["webpack://@visactor/vseed/./src/types/builder/builder.ts"],"sourcesContent":["import type { Spec } from 'src/types'\nimport type { ChartType, CustomThemeConfig } from '../properties'\nimport type { VSeed } from '../vseed'\nimport type { AdvancedPipeline, SpecPipeline } from '../pipeline'\nimport type { AdvancedVSeed } from '../advancedVSeed'\n\nexport abstract class VSeedBuilder {\n  abstract prepare: () => Promise<void>\n  abstract build: () => Spec\n  abstract buildAdvanced: () => AdvancedVSeed | null\n  abstract buildSpec: (advancedVSeed: AdvancedVSeed) => Spec\n\n  static getAdvancedPipeline: (chartType: ChartType) => AdvancedPipeline\n  static getSpecPipeline: (chartType: ChartType) => SpecPipeline\n  static getTheme: (themeKey: string) => CustomThemeConfig\n  static getThemeMap: () => Record<string, CustomThemeConfig>\n\n  abstract getColorItems: () => { id: string; alias: string }[]\n  abstract getColorIdMap: () => Record<string, { id: string; alias: string }>\n\n  abstract get spec(): Spec | null\n  abstract set spec(value: Spec | null)\n  abstract get vseed(): VSeed\n  abstract set vseed(value: VSeed)\n  abstract get advancedVSeed(): AdvancedVSeed | null\n  abstract set advancedVSeed(value: AdvancedVSeed | null)\n}\n"],"names":["VSeedBuilder"],"mappings":"AAMO,MAAeA;IAMpB,OAAO,oBAA+D;IACtE,OAAO,gBAAuD;IAC9D,OAAO,SAAiD;IACxD,OAAO,YAAoD;AAW7D"}