@scanton/phase2s 1.0.0 → 1.8.0

package/dist/src/providers/gemini.js

@@ -0,0 +1,47 @@
+import OpenAI from "openai";
+import { OpenAIProvider } from "./openai.js";
+/**
+ * Google Gemini provider.
+ *
+ * Gemini exposes an OpenAI-compatible REST API at:
+ *   https://generativelanguage.googleapis.com/v1beta/openai/
+ *
+ * This means we can reuse OpenAIProvider's full streaming tool-call logic
+ * — same composition pattern as OpenRouter. No additional SDK dependency.
+ *
+ * Model names are Gemini model slugs without provider prefix:
+ *   gemini-2.0-flash (default), gemini-2.5-pro, gemini-1.5-pro
+ *
+ * Get an API key (including free tier) at: https://aistudio.google.com/apikey
+ * Keys start with "AIza".
+ *
+ * Set GEMINI_API_KEY environment variable or geminiApiKey in .phase2s.yaml.
+ * Optional: override base URL with geminiBaseUrl for custom endpoints.
+ */
+export class GeminiProvider {
+    name = "gemini";
+    inner;
+    constructor(config, client) {
+        if (!client && !config.geminiApiKey) {
+            throw new Error("Gemini API key is required for the gemini provider. " +
+                "Set GEMINI_API_KEY environment variable or geminiApiKey in .phase2s.yaml. " +
+                "Get a free key at https://aistudio.google.com/apikey");
+        }
+        // Ensure baseURL has a trailing slash — OpenAI SDK path joins require it.
+        const rawBaseURL = config.geminiBaseUrl ?? "https://generativelanguage.googleapis.com/v1beta/openai/";
+        const baseURL = rawBaseURL.endsWith("/") ? rawBaseURL : `${rawBaseURL}/`;
+        const resolvedClient = client ??
+            new OpenAI({
+                apiKey: config.geminiApiKey,
+                baseURL,
+            });
+        // OpenAIProvider is always given an already-constructed client here, so its
+        // config.apiKey validation guard (!client && !config.apiKey) never fires.
+        // Pass config as-is — no need to alias the Gemini key into the OpenAI field.
+        this.inner = new OpenAIProvider(config, resolvedClient);
+    }
+    async *chatStream(messages, tools, options) {
+        yield* this.inner.chatStream(messages, tools, options);
+    }
+}
+//# sourceMappingURL=gemini.js.map

package/dist/src/providers/gemini.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini.js","sourceRoot":"","sources":["../../../src/providers/gemini.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,cAAc,EAAyB,MAAM,aAAa,CAAC;AAEpE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,cAAc;IACzB,IAAI,GAAG,QAAQ,CAAC;IACR,KAAK,CAAiB;IAE9B,YAAY,MAAc,EAAE,MAAyB;QACnD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,sDAAsD;gBACpD,4EAA4E;gBAC5E,sDAAsD,CACzD,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,MAAM,UAAU,GACd,MAAM,CAAC,aAAa,IAAI,0DAA0D,CAAC;QACrF,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,GAAG,CAAC;QAEzE,MAAM,cAAc,GAClB,MAAM;YACL,IAAI,MAAM,CAAC;gBACV,MAAM,EAAE,MAAM,CAAC,YAAY;gBAC3B,OAAO;aACR,CAAiC,CAAC;QAErC,4EAA4E;QAC5E,0EAA0E;QAC1E,6EAA6E;QAC7E,IAAI,CAAC,KAAK,GAAG,IAAI,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,CAAC,UAAU,CACf,QAAmB,EACnB,KAA0B,EAC1B,OAA2B;QAE3B,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/src/providers/index.d.ts

@@ -3,4 +3,6 @@ import type { Provider } from "./types.js";
 export declare function createProvider(config: Config): Provider;
 export type { Provider, Message, ToolCall, ProviderEvent } from "./types.js";
 export type { OpenAIClientLike } from "./openai.js";
+export { OpenRouterProvider } from "./openrouter.js";
+export { GeminiProvider } from "./gemini.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/src/providers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAM3C,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAavD;AAED,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC7E,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAQ3C,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,QAAQ,CAiBvD;AAED,YAAY,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC7E,YAAY,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

package/dist/src/providers/index.js

@@ -2,6 +2,8 @@ import { CodexProvider } from "./codex.js";
 import { OpenAIProvider } from "./openai.js";
 import { AnthropicProvider } from "./anthropic.js";
 import { createOllamaProvider } from "./ollama.js";
+import { OpenRouterProvider } from "./openrouter.js";
+import { GeminiProvider } from "./gemini.js";
 export function createProvider(config) {
     switch (config.provider) {
         case "codex-cli":
@@ -12,8 +14,14 @@ export function createProvider(config) {
             return new AnthropicProvider(config);
         case "ollama":
             return createOllamaProvider(config);
+        case "openrouter":
+            return new OpenRouterProvider(config);
+        case "gemini":
+            return new GeminiProvider(config);
         default:
             throw new Error(`Unknown provider: ${config.provider}`);
     }
 }
+export { OpenRouterProvider } from "./openrouter.js";
+export { GeminiProvider } from "./gemini.js";
 //# sourceMappingURL=index.js.map

package/dist/src/providers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/providers/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,WAAW;YACd,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QACnC,KAAK,YAAY;YACf,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,WAAW;YACd,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,QAAQ;YACX,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACtC;YACE,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/providers/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,WAAW;YACd,OAAO,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC;QACnC,KAAK,YAAY;YACf,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QACpC,KAAK,WAAW;YACd,OAAO,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,QAAQ;YACX,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;QACtC,KAAK,YAAY;YACf,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC;QACxC,KAAK,QAAQ;YACX,OAAO,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;QACpC;YACE,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5D,CAAC;AACH,CAAC;AAID,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC"}

package/dist/src/providers/openrouter.d.ts

@@ -0,0 +1,25 @@
+import type { Config } from "../core/config.js";
+import type { Provider, Message, ProviderEvent, ChatStreamOptions } from "./types.js";
+import type { OpenAIFunctionDef } from "../tools/types.js";
+import { type OpenAIClientLike } from "./openai.js";
+/**
+ * OpenRouter provider.
+ *
+ * OpenRouter is an OpenAI-compatible API gateway that routes requests to
+ * 50+ models including Claude, GPT-4o, Gemini, and Llama — all under a
+ * single API key. Model names use provider-prefixed slugs:
+ *   openai/gpt-4o, anthropic/claude-3-5-sonnet, google/gemini-pro-1.5
+ *
+ * Implemented via composition with OpenAIProvider: the same streaming
+ * tool-call logic applies, just pointed at a different base URL.
+ *
+ * Set OPENROUTER_API_KEY or openrouterApiKey in .phase2s.yaml.
+ * Optional: override the base URL with openrouterBaseUrl for custom deployments.
+ */
+export declare class OpenRouterProvider implements Provider {
+    name: string;
+    private inner;
+    constructor(config: Config, client?: OpenAIClientLike);
+    chatStream(messages: Message[], tools: OpenAIFunctionDef[], options?: ChatStreamOptions): AsyncIterable<ProviderEvent>;
+}
+//# sourceMappingURL=openrouter.d.ts.map

package/dist/src/providers/openrouter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openrouter.d.ts","sourceRoot":"","sources":["../../../src/providers/openrouter.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACtF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAC3D,OAAO,EAAkB,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAEpE;;;;;;;;;;;;;GAaG;AACH,qBAAa,kBAAmB,YAAW,QAAQ;IACjD,IAAI,SAAgB;IACpB,OAAO,CAAC,KAAK,CAAiB;gBAElB,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,gBAAgB;IA4B9C,UAAU,CACf,QAAQ,EAAE,OAAO,EAAE,EACnB,KAAK,EAAE,iBAAiB,EAAE,EAC1B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,aAAa,CAAC,aAAa,CAAC;CAGhC"}

package/dist/src/providers/openrouter.js

@@ -0,0 +1,43 @@
+import OpenAI from "openai";
+import { OpenAIProvider } from "./openai.js";
+/**
+ * OpenRouter provider.
+ *
+ * OpenRouter is an OpenAI-compatible API gateway that routes requests to
+ * 50+ models including Claude, GPT-4o, Gemini, and Llama — all under a
+ * single API key. Model names use provider-prefixed slugs:
+ *   openai/gpt-4o, anthropic/claude-3-5-sonnet, google/gemini-pro-1.5
+ *
+ * Implemented via composition with OpenAIProvider: the same streaming
+ * tool-call logic applies, just pointed at a different base URL.
+ *
+ * Set OPENROUTER_API_KEY or openrouterApiKey in .phase2s.yaml.
+ * Optional: override the base URL with openrouterBaseUrl for custom deployments.
+ */
+export class OpenRouterProvider {
+    name = "openrouter";
+    inner;
+    constructor(config, client) {
+        if (!client && !config.openrouterApiKey) {
+            throw new Error("OpenRouter API key is required for the openrouter provider. " +
+                "Set OPENROUTER_API_KEY environment variable or openrouterApiKey in .phase2s.yaml");
+        }
+        const resolvedClient = client ??
+            new OpenAI({
+                apiKey: config.openrouterApiKey,
+                baseURL: config.openrouterBaseUrl ?? "https://openrouter.ai/api/v1",
+                defaultHeaders: {
+                    // Recommended by OpenRouter for attribution and analytics.
+                    "HTTP-Referer": "https://github.com/scanton/phase-2-s",
+                    "X-Title": "Phase2S",
+                },
+            });
+        // OpenAIProvider validates config.apiKey, so pass the openrouter key there.
+        // The real client is already constructed above — OpenAIProvider uses it directly.
+        this.inner = new OpenAIProvider({ ...config, apiKey: config.openrouterApiKey ?? "" }, resolvedClient);
+    }
+    async *chatStream(messages, tools, options) {
+        yield* this.inner.chatStream(messages, tools, options);
+    }
+}
+//# sourceMappingURL=openrouter.js.map

package/dist/src/providers/openrouter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openrouter.js","sourceRoot":"","sources":["../../../src/providers/openrouter.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAI5B,OAAO,EAAE,cAAc,EAAyB,MAAM,aAAa,CAAC;AAEpE;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,kBAAkB;IAC7B,IAAI,GAAG,YAAY,CAAC;IACZ,KAAK,CAAiB;IAE9B,YAAY,MAAc,EAAE,MAAyB;QACnD,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,8DAA8D;gBAC5D,kFAAkF,CACrF,CAAC;QACJ,CAAC;QAED,MAAM,cAAc,GAClB,MAAM;YACL,IAAI,MAAM,CAAC;gBACV,MAAM,EAAE,MAAM,CAAC,gBAAgB;gBAC/B,OAAO,EAAE,MAAM,CAAC,iBAAiB,IAAI,8BAA8B;gBACnE,cAAc,EAAE;oBACd,2DAA2D;oBAC3D,cAAc,EAAE,sCAAsC;oBACtD,SAAS,EAAE,SAAS;iBACrB;aACF,CAAiC,CAAC;QAErC,4EAA4E;QAC5E,kFAAkF;QAClF,IAAI,CAAC,KAAK,GAAG,IAAI,cAAc,CAC7B,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,gBAAgB,IAAI,EAAE,EAAE,EACpD,cAAc,CACf,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,UAAU,CACf,QAAmB,EACnB,KAA0B,EAC1B,OAA2B;QAE3B,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACzD,CAAC;CACF"}

package/dist/src/tools/registry.d.ts

@@ -12,11 +12,13 @@ export declare class ToolRegistry {
      * allow/deny configuration.
      *
      * Rules (applied in order):
-     *   1. If `allow` is provided, only tools whose names appear in `allow` are kept.
-     *   2. If `deny` is provided, any tool whose name appears in `deny` is removed.
+     *   1. If `allow` is provided, only tools whose names match a pattern in `allow` are kept.
+     *   2. If `deny` is provided, any tool whose name matches a pattern in `deny` is removed.
      *   3. `deny` always overrides `allow` — it is a security control.
      *
-     * Unknown names in either list produce a console warning so typos are visible.
+     * Patterns support `*` as a wildcard: `file_*` matches `file_read` and `file_write`.
+     * Exact names (no `*`) are matched as-is. Patterns that match no registered tools
+     * produce a console warning so typos are visible.
      */
     allowed(allow?: string[], deny?: string[]): ToolRegistry;
     /** Execute a tool by name with parsed arguments */

package/dist/src/tools/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/tools/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAgB,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE9F,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAqC;IAElD,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAIpC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI7C,IAAI,IAAI,cAAc,EAAE;IAIxB,KAAK,IAAI,MAAM,EAAE;IAIjB,mDAAmD;IACnD,QAAQ,IAAI,iBAAiB,EAAE;IAI/B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,YAAY;IA0BxD,mDAAmD;IAC7C,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;CA6BhE"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/tools/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAgB,KAAK,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAuB9F,qBAAa,YAAY;IACvB,OAAO,CAAC,KAAK,CAAqC;IAElD,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,IAAI;IAIpC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAI7C,IAAI,IAAI,cAAc,EAAE;IAIxB,KAAK,IAAI,MAAM,EAAE;IAIjB,mDAAmD;IACnD,QAAQ,IAAI,iBAAiB,EAAE;IAI/B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,YAAY;IA2BxD,mDAAmD;IAE7C,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC;CA6BhE"}

package/dist/src/tools/registry.js

@@ -1,4 +1,24 @@
 import { toolToOpenAI } from "./types.js";
+// ---------------------------------------------------------------------------
+// Glob pattern matching
+// ---------------------------------------------------------------------------
+/**
+ * Returns true if `name` matches `pattern`.
+ * Supports `*` as a wildcard matching any sequence of characters.
+ * With no `*`, falls back to exact string equality.
+ *
+ * Examples:
+ *   matchesPattern("file_read", "file_*") → true
+ *   matchesPattern("shell",     "file_*") → false
+ *   matchesPattern("shell",     "*")      → true
+ *   matchesPattern("shell",     "shell")  → true
+ */
+function matchesPattern(name, pattern) {
+    if (!pattern.includes("*"))
+        return name === pattern;
+    const regex = new RegExp(`^${pattern.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*")}$`);
+    return regex.test(name);
+}
 export class ToolRegistry {
     tools = new Map();
     register(tool) {
@@ -22,32 +42,35 @@ export class ToolRegistry {
      * allow/deny configuration.
      *
      * Rules (applied in order):
-     *   1. If `allow` is provided, only tools whose names appear in `allow` are kept.
-     *   2. If `deny` is provided, any tool whose name appears in `deny` is removed.
+     *   1. If `allow` is provided, only tools whose names match a pattern in `allow` are kept.
+     *   2. If `deny` is provided, any tool whose name matches a pattern in `deny` is removed.
      *   3. `deny` always overrides `allow` — it is a security control.
      *
-     * Unknown names in either list produce a console warning so typos are visible.
+     * Patterns support `*` as a wildcard: `file_*` matches `file_read` and `file_write`.
+     * Exact names (no `*`) are matched as-is. Patterns that match no registered tools
+     * produce a console warning so typos are visible.
      */
     allowed(allow, deny) {
         const allNames = this.names();
-        // Warn on unrecognized names — silent misconfiguration is a security risk
-        for (const name of allow ?? []) {
-            if (!allNames.includes(name)) {
-                console.warn(`Warning: unknown tool '${name}' in tools (allow) list`);
+        // Warn on patterns that match no registered tool — catches typos in both exact
+        // names and glob patterns.
+        for (const pattern of allow ?? []) {
+            if (!allNames.some((n) => matchesPattern(n, pattern))) {
+                console.warn(`Warning: pattern '${pattern}' in tools (allow) list matches no known tools`);
             }
         }
-        for (const name of deny ?? []) {
-            if (!allNames.includes(name)) {
-                console.warn(`Warning: unknown tool '${name}' in deny list`);
+        for (const pattern of deny ?? []) {
+            if (!allNames.some((n) => matchesPattern(n, pattern))) {
+                console.warn(`Warning: pattern '${pattern}' in deny list matches no known tools`);
             }
         }
         const filtered = new ToolRegistry();
         for (const tool of this.list()) {
             // Step 1: apply allow-list (if provided)
-            if (allow && allow.length > 0 && !allow.includes(tool.name))
+            if (allow && allow.length > 0 && !allow.some((p) => matchesPattern(tool.name, p)))
                 continue;
             // Step 2: apply deny-list (deny overrides allow)
-            if (deny && deny.includes(tool.name))
+            if (deny && deny.some((p) => matchesPattern(tool.name, p)))
                 continue;
             filtered.register(tool);
         }

package/dist/src/tools/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/tools/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,YAAY,EAA0B,MAAM,YAAY,CAAC;AAE9F,MAAM,OAAO,YAAY;IACf,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAElD,QAAQ,CAAC,IAAoB;QAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,KAAK;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,mDAAmD;IACnD,QAAQ;QACN,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;;;;;OAUG;IACH,OAAO,CAAC,KAAgB,EAAE,IAAe;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAE9B,0EAA0E;QAC1E,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAI,CAAC,0BAA0B,IAAI,yBAAyB,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,IAAI,CAAC,0BAA0B,IAAI,gBAAgB,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/B,yCAAyC;YACzC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtE,iDAAiD;YACjD,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC/C,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,mDAAmD;IACnD,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,IAAa;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,iBAAiB,IAAI,EAAE;aAC/B,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,yBAAyB,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;aAChE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,QAAQ,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAClF,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/tools/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAA8B,YAAY,EAA0B,MAAM,YAAY,CAAC;AAE9F,8EAA8E;AAC9E,wBAAwB;AACxB,8EAA8E;AAE9E;;;;;;;;;;GAUG;AACH,SAAS,cAAc,CAAC,IAAY,EAAE,OAAe;IACnD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,KAAK,OAAO,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACnG,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,OAAO,YAAY;IACf,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAC;IAElD,QAAQ,CAAC,IAAoB;QAC3B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,KAAK;QACH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,mDAAmD;IACnD,QAAQ;QACN,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,KAAgB,EAAE,IAAe;QACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAE9B,+EAA+E;QAC/E,2BAA2B;QAC3B,KAAK,MAAM,OAAO,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;gBACtD,OAAO,CAAC,IAAI,CAAC,qBAAqB,OAAO,gDAAgD,CAAC,CAAC;YAC7F,CAAC;QACH,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;gBACtD,OAAO,CAAC,IAAI,CAAC,qBAAqB,OAAO,uCAAuC,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,YAAY,EAAE,CAAC;QACpC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/B,yCAAyC;YACzC,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAAE,SAAS;YAC5F,iDAAiD;YACjD,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBAAE,SAAS;YACrE,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,mDAAmD;IAEnD,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,IAAa;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,iBAAiB,IAAI,EAAE;aAC/B,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,yBAAyB,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;aAChE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,QAAQ,IAAI,YAAY,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAClF,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@scanton/phase2s",
-  "version": "1.0.0",
+  "version": "1.8.0",
   "description": "AI coding assistant with 29 built-in skills, ChatGPT subscription support, and autonomous spec execution",
   "author": "Scott Canton",
   "homepage": "https://github.com/scanton/phase-2-s",