opc-agent 1.1.0 → 1.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (142) hide show
  1. package/CHANGELOG.md +51 -51
  2. package/CONTRIBUTING.md +75 -75
  3. package/README.md +341 -101
  4. package/README.zh-CN.md +382 -55
  5. package/dist/channels/web.js +256 -256
  6. package/dist/cli.js +1 -32
  7. package/dist/deploy/hermes.js +22 -22
  8. package/dist/deploy/openclaw.js +31 -31
  9. package/dist/i18n/index.js +60 -9
  10. package/dist/templates/code-reviewer.js +5 -5
  11. package/dist/templates/customer-service.js +2 -2
  12. package/dist/templates/data-analyst.js +5 -5
  13. package/dist/templates/knowledge-base.js +2 -2
  14. package/dist/templates/sales-assistant.js +4 -4
  15. package/dist/templates/teacher.js +6 -6
  16. package/docs/.vitepress/config.ts +103 -92
  17. package/docs/api/cli.md +48 -48
  18. package/docs/api/oad-schema.md +64 -64
  19. package/docs/api/sdk.md +80 -80
  20. package/docs/guide/concepts.md +51 -51
  21. package/docs/guide/configuration.md +79 -79
  22. package/docs/guide/deployment.md +42 -42
  23. package/docs/guide/getting-started.md +44 -44
  24. package/docs/guide/templates.md +28 -28
  25. package/docs/guide/testing.md +84 -84
  26. package/docs/index.md +27 -27
  27. package/docs/zh/api/cli.md +54 -0
  28. package/docs/zh/api/oad-schema.md +87 -3
  29. package/docs/zh/api/sdk.md +102 -0
  30. package/docs/zh/guide/concepts.md +104 -28
  31. package/docs/zh/guide/configuration.md +135 -39
  32. package/docs/zh/guide/deployment.md +81 -3
  33. package/docs/zh/guide/getting-started.md +82 -58
  34. package/docs/zh/guide/templates.md +84 -22
  35. package/docs/zh/guide/testing.md +88 -18
  36. package/docs/zh/index.md +27 -27
  37. package/examples/customer-service-demo/README.md +90 -90
  38. package/examples/customer-service-demo/oad.yaml +107 -107
  39. package/package.json +1 -1
  40. package/src/analytics/index.ts +66 -66
  41. package/src/channels/discord.ts +192 -192
  42. package/src/channels/email.ts +177 -177
  43. package/src/channels/feishu.ts +236 -236
  44. package/src/channels/index.ts +15 -15
  45. package/src/channels/slack.ts +160 -160
  46. package/src/channels/telegram.ts +90 -90
  47. package/src/channels/voice.ts +106 -106
  48. package/src/channels/web.ts +596 -596
  49. package/src/channels/webhook.ts +199 -199
  50. package/src/channels/websocket.ts +87 -87
  51. package/src/channels/wechat.ts +149 -149
  52. package/src/cli.ts +1 -35
  53. package/src/core/a2a.ts +143 -143
  54. package/src/core/agent.ts +152 -152
  55. package/src/core/analytics-engine.ts +186 -186
  56. package/src/core/auth.ts +57 -57
  57. package/src/core/cache.ts +141 -141
  58. package/src/core/compose.ts +77 -77
  59. package/src/core/config.ts +14 -14
  60. package/src/core/errors.ts +148 -148
  61. package/src/core/hitl.ts +138 -138
  62. package/src/core/knowledge.ts +210 -210
  63. package/src/core/logger.ts +57 -57
  64. package/src/core/orchestrator.ts +215 -215
  65. package/src/core/performance.ts +187 -187
  66. package/src/core/rate-limiter.ts +128 -128
  67. package/src/core/room.ts +109 -109
  68. package/src/core/runtime.ts +152 -152
  69. package/src/core/sandbox.ts +101 -101
  70. package/src/core/security.ts +171 -171
  71. package/src/core/types.ts +68 -68
  72. package/src/core/versioning.ts +106 -106
  73. package/src/core/watch.ts +178 -178
  74. package/src/core/workflow.ts +235 -235
  75. package/src/deploy/hermes.ts +156 -156
  76. package/src/deploy/openclaw.ts +200 -200
  77. package/src/dtv/data.ts +29 -29
  78. package/src/dtv/trust.ts +43 -43
  79. package/src/dtv/value.ts +47 -47
  80. package/src/i18n/index.ts +216 -165
  81. package/src/index.ts +110 -110
  82. package/src/marketplace/index.ts +223 -223
  83. package/src/memory/deepbrain.ts +108 -108
  84. package/src/memory/index.ts +34 -34
  85. package/src/plugins/index.ts +208 -208
  86. package/src/providers/index.ts +183 -183
  87. package/src/schema/oad.ts +155 -155
  88. package/src/skills/base.ts +16 -16
  89. package/src/skills/document.ts +100 -100
  90. package/src/skills/http.ts +35 -35
  91. package/src/skills/index.ts +27 -27
  92. package/src/skills/scheduler.ts +80 -80
  93. package/src/skills/webhook-trigger.ts +59 -59
  94. package/src/templates/code-reviewer.ts +34 -34
  95. package/src/templates/customer-service.ts +80 -80
  96. package/src/templates/data-analyst.ts +70 -70
  97. package/src/templates/executive-assistant.ts +71 -71
  98. package/src/templates/financial-advisor.ts +60 -60
  99. package/src/templates/knowledge-base.ts +31 -31
  100. package/src/templates/legal-assistant.ts +71 -71
  101. package/src/templates/sales-assistant.ts +79 -79
  102. package/src/templates/teacher.ts +79 -79
  103. package/src/testing/index.ts +181 -181
  104. package/src/tools/calculator.ts +73 -73
  105. package/src/tools/datetime.ts +149 -149
  106. package/src/tools/json-transform.ts +187 -187
  107. package/src/tools/mcp.ts +76 -76
  108. package/src/tools/text-analysis.ts +116 -116
  109. package/templates/Dockerfile +15 -15
  110. package/templates/code-reviewer/README.md +27 -27
  111. package/templates/code-reviewer/oad.yaml +41 -41
  112. package/templates/customer-service/README.md +22 -22
  113. package/templates/customer-service/oad.yaml +36 -36
  114. package/templates/docker-compose.yml +21 -21
  115. package/templates/knowledge-base/README.md +28 -28
  116. package/templates/knowledge-base/oad.yaml +38 -38
  117. package/templates/sales-assistant/README.md +26 -26
  118. package/templates/sales-assistant/oad.yaml +43 -43
  119. package/tests/a2a.test.ts +66 -66
  120. package/tests/agent.test.ts +72 -72
  121. package/tests/analytics.test.ts +50 -50
  122. package/tests/channel.test.ts +39 -39
  123. package/tests/e2e.test.ts +134 -134
  124. package/tests/errors.test.ts +83 -83
  125. package/tests/hitl.test.ts +71 -71
  126. package/tests/i18n.test.ts +41 -41
  127. package/tests/mcp.test.ts +54 -54
  128. package/tests/oad.test.ts +68 -68
  129. package/tests/performance.test.ts +115 -115
  130. package/tests/plugin.test.ts +74 -74
  131. package/tests/room.test.ts +106 -106
  132. package/tests/runtime.test.ts +42 -42
  133. package/tests/sandbox.test.ts +46 -46
  134. package/tests/security.test.ts +60 -60
  135. package/tests/templates.test.ts +77 -77
  136. package/tests/v070.test.ts +76 -76
  137. package/tests/versioning.test.ts +75 -75
  138. package/tests/voice.test.ts +61 -61
  139. package/tests/webhook.test.ts +29 -29
  140. package/tests/workflow.test.ts +143 -143
  141. package/tsconfig.json +19 -19
  142. package/vitest.config.ts +9 -9
@@ -1,181 +1,181 @@
1
- /**
2
- * Agent Testing Framework - Define test cases in OAD, run with `opc test`.
3
- * Supports assertions on response content, tool calls, and latency.
4
- */
5
- import * as fs from 'fs';
6
- import * as path from 'path';
7
- import * as yaml from 'js-yaml';
8
- import { AgentRuntime } from '../core/runtime';
9
-
10
- export interface TestCase {
11
- name: string;
12
- input: string;
13
- expect?: {
14
- contains?: string[];
15
- notContains?: string[];
16
- toolCalled?: string[];
17
- maxLatencyMs?: number;
18
- };
19
- }
20
-
21
- export interface TestResult {
22
- name: string;
23
- passed: boolean;
24
- durationMs: number;
25
- response?: string;
26
- failures: string[];
27
- }
28
-
29
- export interface TestReport {
30
- total: number;
31
- passed: number;
32
- failed: number;
33
- duration: number;
34
- results: TestResult[];
35
- }
36
-
37
- /**
38
- * Load test cases from OAD spec.testing or a separate test file.
39
- */
40
- export function loadTestCases(oadPath: string): TestCase[] {
41
- const raw = fs.readFileSync(oadPath, 'utf-8');
42
- const config = yaml.load(raw) as any;
43
-
44
- // Check spec.testing.cases
45
- if (config?.spec?.testing?.cases) {
46
- return config.spec.testing.cases;
47
- }
48
-
49
- // Check for companion test file
50
- const dir = path.dirname(oadPath);
51
- const testFile = path.join(dir, 'tests.yaml');
52
- if (fs.existsSync(testFile)) {
53
- const testRaw = fs.readFileSync(testFile, 'utf-8');
54
- const testConfig = yaml.load(testRaw) as any;
55
- return testConfig?.cases ?? testConfig ?? [];
56
- }
57
-
58
- return [];
59
- }
60
-
61
- /**
62
- * Run all test cases against an agent.
63
- */
64
- export async function runTests(oadPath: string): Promise<TestReport> {
65
- const cases = loadTestCases(oadPath);
66
- const results: TestResult[] = [];
67
- const startTime = Date.now();
68
-
69
- if (cases.length === 0) {
70
- // Generate default smoke test
71
- cases.push({
72
- name: 'smoke-test',
73
- input: 'Hello! What can you help me with?',
74
- expect: { maxLatencyMs: 30000 },
75
- });
76
- }
77
-
78
- const runtime = new AgentRuntime();
79
- await runtime.loadConfig(oadPath);
80
- const agent = await runtime.initialize();
81
-
82
- for (const tc of cases) {
83
- const result: TestResult = {
84
- name: tc.name,
85
- passed: true,
86
- durationMs: 0,
87
- failures: [],
88
- };
89
-
90
- const t0 = Date.now();
91
- try {
92
- const response = await agent.handleMessage({
93
- id: `test_${Date.now()}`,
94
- role: 'user',
95
- content: tc.input,
96
- timestamp: Date.now(),
97
- });
98
- result.durationMs = Date.now() - t0;
99
- result.response = response.content;
100
-
101
- if (tc.expect) {
102
- // Check contains
103
- if (tc.expect.contains) {
104
- for (const s of tc.expect.contains) {
105
- if (!response.content.toLowerCase().includes(s.toLowerCase())) {
106
- result.failures.push(`Expected response to contain "${s}"`);
107
- }
108
- }
109
- }
110
- // Check notContains
111
- if (tc.expect.notContains) {
112
- for (const s of tc.expect.notContains) {
113
- if (response.content.toLowerCase().includes(s.toLowerCase())) {
114
- result.failures.push(`Expected response NOT to contain "${s}"`);
115
- }
116
- }
117
- }
118
- // Check latency
119
- if (tc.expect.maxLatencyMs && result.durationMs > tc.expect.maxLatencyMs) {
120
- result.failures.push(`Latency ${result.durationMs}ms exceeded max ${tc.expect.maxLatencyMs}ms`);
121
- }
122
- // Check tool calls (from metadata if available)
123
- if (tc.expect.toolCalled && (response as any).toolsCalled) {
124
- for (const tool of tc.expect.toolCalled) {
125
- if (!(response as any).toolsCalled.includes(tool)) {
126
- result.failures.push(`Expected tool "${tool}" to be called`);
127
- }
128
- }
129
- }
130
- }
131
-
132
- result.passed = result.failures.length === 0;
133
- } catch (err) {
134
- result.durationMs = Date.now() - t0;
135
- result.passed = false;
136
- result.failures.push(`Error: ${err instanceof Error ? err.message : String(err)}`);
137
- }
138
-
139
- results.push(result);
140
- }
141
-
142
- const totalDuration = Date.now() - startTime;
143
- const passed = results.filter(r => r.passed).length;
144
-
145
- return {
146
- total: results.length,
147
- passed,
148
- failed: results.length - passed,
149
- duration: totalDuration,
150
- results,
151
- };
152
- }
153
-
154
- /**
155
- * Format test report for console output.
156
- */
157
- export function formatReport(report: TestReport): string {
158
- const lines: string[] = [];
159
- lines.push('');
160
- lines.push('═══════════════════════════════════════════');
161
- lines.push(' OPC Agent Test Report');
162
- lines.push('═══════════════════════════════════════════');
163
- lines.push('');
164
-
165
- for (const r of report.results) {
166
- const icon = r.passed ? '✔' : '✘';
167
- const status = r.passed ? 'PASS' : 'FAIL';
168
- lines.push(` ${icon} [${status}] ${r.name} (${r.durationMs}ms)`);
169
- for (const f of r.failures) {
170
- lines.push(` → ${f}`);
171
- }
172
- }
173
-
174
- lines.push('');
175
- lines.push('───────────────────────────────────────────');
176
- lines.push(` Total: ${report.total} Passed: ${report.passed} Failed: ${report.failed} Duration: ${report.duration}ms`);
177
- lines.push('───────────────────────────────────────────');
178
- lines.push('');
179
-
180
- return lines.join('\n');
181
- }
1
+ /**
2
+ * Agent Testing Framework - Define test cases in OAD, run with `opc test`.
3
+ * Supports assertions on response content, tool calls, and latency.
4
+ */
5
+ import * as fs from 'fs';
6
+ import * as path from 'path';
7
+ import * as yaml from 'js-yaml';
8
+ import { AgentRuntime } from '../core/runtime';
9
+
10
+ export interface TestCase {
11
+ name: string;
12
+ input: string;
13
+ expect?: {
14
+ contains?: string[];
15
+ notContains?: string[];
16
+ toolCalled?: string[];
17
+ maxLatencyMs?: number;
18
+ };
19
+ }
20
+
21
+ export interface TestResult {
22
+ name: string;
23
+ passed: boolean;
24
+ durationMs: number;
25
+ response?: string;
26
+ failures: string[];
27
+ }
28
+
29
+ export interface TestReport {
30
+ total: number;
31
+ passed: number;
32
+ failed: number;
33
+ duration: number;
34
+ results: TestResult[];
35
+ }
36
+
37
+ /**
38
+ * Load test cases from OAD spec.testing or a separate test file.
39
+ */
40
+ export function loadTestCases(oadPath: string): TestCase[] {
41
+ const raw = fs.readFileSync(oadPath, 'utf-8');
42
+ const config = yaml.load(raw) as any;
43
+
44
+ // Check spec.testing.cases
45
+ if (config?.spec?.testing?.cases) {
46
+ return config.spec.testing.cases;
47
+ }
48
+
49
+ // Check for companion test file
50
+ const dir = path.dirname(oadPath);
51
+ const testFile = path.join(dir, 'tests.yaml');
52
+ if (fs.existsSync(testFile)) {
53
+ const testRaw = fs.readFileSync(testFile, 'utf-8');
54
+ const testConfig = yaml.load(testRaw) as any;
55
+ return testConfig?.cases ?? testConfig ?? [];
56
+ }
57
+
58
+ return [];
59
+ }
60
+
61
+ /**
62
+ * Run all test cases against an agent.
63
+ */
64
+ export async function runTests(oadPath: string): Promise<TestReport> {
65
+ const cases = loadTestCases(oadPath);
66
+ const results: TestResult[] = [];
67
+ const startTime = Date.now();
68
+
69
+ if (cases.length === 0) {
70
+ // Generate default smoke test
71
+ cases.push({
72
+ name: 'smoke-test',
73
+ input: 'Hello! What can you help me with?',
74
+ expect: { maxLatencyMs: 30000 },
75
+ });
76
+ }
77
+
78
+ const runtime = new AgentRuntime();
79
+ await runtime.loadConfig(oadPath);
80
+ const agent = await runtime.initialize();
81
+
82
+ for (const tc of cases) {
83
+ const result: TestResult = {
84
+ name: tc.name,
85
+ passed: true,
86
+ durationMs: 0,
87
+ failures: [],
88
+ };
89
+
90
+ const t0 = Date.now();
91
+ try {
92
+ const response = await agent.handleMessage({
93
+ id: `test_${Date.now()}`,
94
+ role: 'user',
95
+ content: tc.input,
96
+ timestamp: Date.now(),
97
+ });
98
+ result.durationMs = Date.now() - t0;
99
+ result.response = response.content;
100
+
101
+ if (tc.expect) {
102
+ // Check contains
103
+ if (tc.expect.contains) {
104
+ for (const s of tc.expect.contains) {
105
+ if (!response.content.toLowerCase().includes(s.toLowerCase())) {
106
+ result.failures.push(`Expected response to contain "${s}"`);
107
+ }
108
+ }
109
+ }
110
+ // Check notContains
111
+ if (tc.expect.notContains) {
112
+ for (const s of tc.expect.notContains) {
113
+ if (response.content.toLowerCase().includes(s.toLowerCase())) {
114
+ result.failures.push(`Expected response NOT to contain "${s}"`);
115
+ }
116
+ }
117
+ }
118
+ // Check latency
119
+ if (tc.expect.maxLatencyMs && result.durationMs > tc.expect.maxLatencyMs) {
120
+ result.failures.push(`Latency ${result.durationMs}ms exceeded max ${tc.expect.maxLatencyMs}ms`);
121
+ }
122
+ // Check tool calls (from metadata if available)
123
+ if (tc.expect.toolCalled && (response as any).toolsCalled) {
124
+ for (const tool of tc.expect.toolCalled) {
125
+ if (!(response as any).toolsCalled.includes(tool)) {
126
+ result.failures.push(`Expected tool "${tool}" to be called`);
127
+ }
128
+ }
129
+ }
130
+ }
131
+
132
+ result.passed = result.failures.length === 0;
133
+ } catch (err) {
134
+ result.durationMs = Date.now() - t0;
135
+ result.passed = false;
136
+ result.failures.push(`Error: ${err instanceof Error ? err.message : String(err)}`);
137
+ }
138
+
139
+ results.push(result);
140
+ }
141
+
142
+ const totalDuration = Date.now() - startTime;
143
+ const passed = results.filter(r => r.passed).length;
144
+
145
+ return {
146
+ total: results.length,
147
+ passed,
148
+ failed: results.length - passed,
149
+ duration: totalDuration,
150
+ results,
151
+ };
152
+ }
153
+
154
+ /**
155
+ * Format test report for console output.
156
+ */
157
+ export function formatReport(report: TestReport): string {
158
+ const lines: string[] = [];
159
+ lines.push('');
160
+ lines.push('═══════════════════════════════════════════');
161
+ lines.push(' OPC Agent Test Report');
162
+ lines.push('═══════════════════════════════════════════');
163
+ lines.push('');
164
+
165
+ for (const r of report.results) {
166
+ const icon = r.passed ? '✔' : '✘';
167
+ const status = r.passed ? 'PASS' : 'FAIL';
168
+ lines.push(` ${icon} [${status}] ${r.name} (${r.durationMs}ms)`);
169
+ for (const f of r.failures) {
170
+ lines.push(` → ${f}`);
171
+ }
172
+ }
173
+
174
+ lines.push('');
175
+ lines.push('───────────────────────────────────────────');
176
+ lines.push(` Total: ${report.total} Passed: ${report.passed} Failed: ${report.failed} Duration: ${report.duration}ms`);
177
+ lines.push('───────────────────────────────────────────');
178
+ lines.push('');
179
+
180
+ return lines.join('\n');
181
+ }
@@ -1,73 +1,73 @@
1
- import type { MCPTool, MCPToolResult } from './mcp';
2
-
3
- /**
4
- * Calculator Tool — v0.8.0
5
- * Safe math expression evaluation as an LLM function tool.
6
- */
7
- export const CalculatorTool: MCPTool = {
8
- name: 'calculator',
9
- description: 'Evaluate a mathematical expression. Supports basic arithmetic, powers, sqrt, abs, min, max, round, ceil, floor, PI, E.',
10
- inputSchema: {
11
- type: 'object',
12
- properties: {
13
- expression: {
14
- type: 'string',
15
- description: 'Mathematical expression to evaluate, e.g. "2 + 3 * 4" or "sqrt(144) + PI"',
16
- },
17
- },
18
- required: ['expression'],
19
- },
20
-
21
- async execute(input: Record<string, unknown>): Promise<MCPToolResult> {
22
- const expr = String(input.expression ?? '');
23
- try {
24
- const result = safeEval(expr);
25
- return { content: String(result) };
26
- } catch (err) {
27
- return { content: `Error: ${(err as Error).message}`, isError: true };
28
- }
29
- },
30
- };
31
-
32
- /** Safe math evaluator — no eval(), no arbitrary code */
33
- function safeEval(expr: string): number {
34
- // Whitelist: digits, operators, parens, dots, commas, spaces, and known functions
35
- const sanitized = expr.replace(/\s+/g, '');
36
- const allowed = /^[0-9+\-*/().,%^a-zA-Z_]+$/;
37
- if (!allowed.test(sanitized)) {
38
- throw new Error('Invalid characters in expression');
39
- }
40
-
41
- // Replace known math functions/constants
42
- const prepared = sanitized
43
- .replace(/\bPI\b/gi, String(Math.PI))
44
- .replace(/\bE\b/g, String(Math.E))
45
- .replace(/\bsqrt\b/gi, 'Math.sqrt')
46
- .replace(/\babs\b/gi, 'Math.abs')
47
- .replace(/\bmin\b/gi, 'Math.min')
48
- .replace(/\bmax\b/gi, 'Math.max')
49
- .replace(/\bround\b/gi, 'Math.round')
50
- .replace(/\bceil\b/gi, 'Math.ceil')
51
- .replace(/\bfloor\b/gi, 'Math.floor')
52
- .replace(/\bpow\b/gi, 'Math.pow')
53
- .replace(/\blog\b/gi, 'Math.log')
54
- .replace(/\blog10\b/gi, 'Math.log10')
55
- .replace(/\bsin\b/gi, 'Math.sin')
56
- .replace(/\bcos\b/gi, 'Math.cos')
57
- .replace(/\btan\b/gi, 'Math.tan')
58
- .replace(/\^/g, '**');
59
-
60
- // Block anything that isn't math
61
- if (/[a-zA-Z_]/.test(prepared.replace(/Math\.\w+/g, ''))) {
62
- throw new Error('Unsupported function or variable in expression');
63
- }
64
-
65
- // Use Function constructor with restricted scope
66
- const fn = new Function('Math', `"use strict"; return (${prepared});`);
67
- const result = fn(Math);
68
-
69
- if (typeof result !== 'number' || !isFinite(result)) {
70
- throw new Error('Expression did not evaluate to a finite number');
71
- }
72
- return result;
73
- }
1
+ import type { MCPTool, MCPToolResult } from './mcp';
2
+
3
+ /**
4
+ * Calculator Tool — v0.8.0
5
+ * Safe math expression evaluation as an LLM function tool.
6
+ */
7
+ export const CalculatorTool: MCPTool = {
8
+ name: 'calculator',
9
+ description: 'Evaluate a mathematical expression. Supports basic arithmetic, powers, sqrt, abs, min, max, round, ceil, floor, PI, E.',
10
+ inputSchema: {
11
+ type: 'object',
12
+ properties: {
13
+ expression: {
14
+ type: 'string',
15
+ description: 'Mathematical expression to evaluate, e.g. "2 + 3 * 4" or "sqrt(144) + PI"',
16
+ },
17
+ },
18
+ required: ['expression'],
19
+ },
20
+
21
+ async execute(input: Record<string, unknown>): Promise<MCPToolResult> {
22
+ const expr = String(input.expression ?? '');
23
+ try {
24
+ const result = safeEval(expr);
25
+ return { content: String(result) };
26
+ } catch (err) {
27
+ return { content: `Error: ${(err as Error).message}`, isError: true };
28
+ }
29
+ },
30
+ };
31
+
32
+ /** Safe math evaluator — no eval(), no arbitrary code */
33
+ function safeEval(expr: string): number {
34
+ // Whitelist: digits, operators, parens, dots, commas, spaces, and known functions
35
+ const sanitized = expr.replace(/\s+/g, '');
36
+ const allowed = /^[0-9+\-*/().,%^a-zA-Z_]+$/;
37
+ if (!allowed.test(sanitized)) {
38
+ throw new Error('Invalid characters in expression');
39
+ }
40
+
41
+ // Replace known math functions/constants
42
+ const prepared = sanitized
43
+ .replace(/\bPI\b/gi, String(Math.PI))
44
+ .replace(/\bE\b/g, String(Math.E))
45
+ .replace(/\bsqrt\b/gi, 'Math.sqrt')
46
+ .replace(/\babs\b/gi, 'Math.abs')
47
+ .replace(/\bmin\b/gi, 'Math.min')
48
+ .replace(/\bmax\b/gi, 'Math.max')
49
+ .replace(/\bround\b/gi, 'Math.round')
50
+ .replace(/\bceil\b/gi, 'Math.ceil')
51
+ .replace(/\bfloor\b/gi, 'Math.floor')
52
+ .replace(/\bpow\b/gi, 'Math.pow')
53
+ .replace(/\blog\b/gi, 'Math.log')
54
+ .replace(/\blog10\b/gi, 'Math.log10')
55
+ .replace(/\bsin\b/gi, 'Math.sin')
56
+ .replace(/\bcos\b/gi, 'Math.cos')
57
+ .replace(/\btan\b/gi, 'Math.tan')
58
+ .replace(/\^/g, '**');
59
+
60
+ // Block anything that isn't math
61
+ if (/[a-zA-Z_]/.test(prepared.replace(/Math\.\w+/g, ''))) {
62
+ throw new Error('Unsupported function or variable in expression');
63
+ }
64
+
65
+ // Use Function constructor with restricted scope
66
+ const fn = new Function('Math', `"use strict"; return (${prepared});`);
67
+ const result = fn(Math);
68
+
69
+ if (typeof result !== 'number' || !isFinite(result)) {
70
+ throw new Error('Expression did not evaluate to a finite number');
71
+ }
72
+ return result;
73
+ }