opensentinel 2.1.1 → 3.1.1

package/dist/lib.d.ts

@@ -42,8 +42,18 @@ declare const envSchema: z.ZodObject<{
     EMAIL_USER: z.ZodOptional<z.ZodString>;
     EMAIL_PASSWORD: z.ZodOptional<z.ZodString>;
     EMAIL_PROVIDER: z.ZodOptional<z.ZodEnum<["gmail", "outlook", "yahoo", "custom"]>>;
+    EMAIL_MASTER_USER: z.ZodOptional<z.ZodString>;
+    EMAIL_MASTER_PASSWORD: z.ZodOptional<z.ZodString>;
+    EMAIL_LOCAL_IMAP_HOST: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    EMAIL_LOCAL_IMAP_PORT: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    EMAIL_LOCAL_SMTP_HOST: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    EMAIL_LOCAL_SMTP_PORT: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
     GITHUB_TOKEN: z.ZodOptional<z.ZodString>;
     GITHUB_WEBHOOK_SECRET: z.ZodOptional<z.ZodString>;
+    GOOGLE_CLIENT_ID: z.ZodOptional<z.ZodString>;
+    GOOGLE_CLIENT_SECRET: z.ZodOptional<z.ZodString>;
+    GOOGLE_REDIRECT_URI: z.ZodOptional<z.ZodString>;
+    GOOGLE_REFRESH_TOKEN: z.ZodOptional<z.ZodString>;
     GOOGLE_DRIVE_CLIENT_ID: z.ZodOptional<z.ZodString>;
     GOOGLE_DRIVE_CLIENT_SECRET: z.ZodOptional<z.ZodString>;
     GOOGLE_DRIVE_REDIRECT_URI: z.ZodOptional<z.ZodString>;
@@ -52,7 +62,19 @@ declare const envSchema: z.ZodObject<{
     DROPBOX_APP_SECRET: z.ZodOptional<z.ZodString>;
     DROPBOX_ACCESS_TOKEN: z.ZodOptional<z.ZodString>;
     DROPBOX_REFRESH_TOKEN: z.ZodOptional<z.ZodString>;
+    TENOR_API_KEY: z.ZodOptional<z.ZodString>;
+    GIPHY_API_KEY: z.ZodOptional<z.ZodString>;
     ALPHA_VANTAGE_API_KEY: z.ZodOptional<z.ZodString>;
+    COINBASE_API_KEY: z.ZodOptional<z.ZodString>;
+    COINBASE_PRIVATE_KEY: z.ZodOptional<z.ZodString>;
+    BINANCE_API_KEY: z.ZodOptional<z.ZodString>;
+    BINANCE_API_SECRET: z.ZodOptional<z.ZodString>;
+    BINANCE_TESTNET: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    EXCHANGE_REQUIRE_CONFIRMATION: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    DEFILLAMA_API_KEY: z.ZodOptional<z.ZodString>;
+    ETHERSCAN_API_KEY: z.ZodOptional<z.ZodString>;
+    ALCHEMY_API_KEY: z.ZodOptional<z.ZodString>;
+    ALCHEMY_NETWORK: z.ZodDefault<z.ZodOptional<z.ZodString>>;
     HUGGINGFACE_ACCESS_TOKEN: z.ZodOptional<z.ZodString>;
     TWILIO_ACCOUNT_SID: z.ZodOptional<z.ZodString>;
     TWILIO_AUTH_TOKEN: z.ZodOptional<z.ZodString>;
@@ -62,8 +84,46 @@ declare const envSchema: z.ZodObject<{
     SPOTIFY_CLIENT_ID: z.ZodOptional<z.ZodString>;
     SPOTIFY_CLIENT_SECRET: z.ZodOptional<z.ZodString>;
     SPOTIFY_REDIRECT_URI: z.ZodOptional<z.ZodString>;
+    SPOTIFY_REFRESH_TOKEN: z.ZodOptional<z.ZodString>;
+    GOOGLE_CALENDAR_CLIENT_ID: z.ZodOptional<z.ZodString>;
+    GOOGLE_CALENDAR_CLIENT_SECRET: z.ZodOptional<z.ZodString>;
+    GOOGLE_CALENDAR_REDIRECT_URI: z.ZodOptional<z.ZodString>;
+    GOOGLE_CALENDAR_REFRESH_TOKEN: z.ZodOptional<z.ZodString>;
+    OUTLOOK_CLIENT_ID: z.ZodOptional<z.ZodString>;
+    OUTLOOK_CLIENT_SECRET: z.ZodOptional<z.ZodString>;
+    OUTLOOK_REDIRECT_URI: z.ZodOptional<z.ZodString>;
+    OUTLOOK_REFRESH_TOKEN: z.ZodOptional<z.ZodString>;
+    DROPBOX_CLIENT_ID: z.ZodOptional<z.ZodString>;
+    DROPBOX_CLIENT_SECRET: z.ZodOptional<z.ZodString>;
+    DROPBOX_REDIRECT_URI: z.ZodOptional<z.ZodString>;
     MCP_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     MCP_CONFIG_PATH: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    LLM_PROVIDER: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    OPENROUTER_API_KEY: z.ZodOptional<z.ZodString>;
+    OPENROUTER_BASE_URL: z.ZodOptional<z.ZodString>;
+    GROQ_API_KEY: z.ZodOptional<z.ZodString>;
+    MISTRAL_API_KEY: z.ZodOptional<z.ZodString>;
+    OPENAI_LLM_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    OPENAI_COMPATIBLE_API_KEY: z.ZodOptional<z.ZodString>;
+    OPENAI_COMPATIBLE_BASE_URL: z.ZodOptional<z.ZodString>;
+    OPENAI_COMPATIBLE_MODEL: z.ZodOptional<z.ZodString>;
+    OLLAMA_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    OLLAMA_BASE_URL: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    OLLAMA_DEFAULT_MODEL: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    MODEL_ROUTING_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    MODEL_OPUS_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    COMPACTION_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    COMPACTION_TOKEN_THRESHOLD: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    COMPACTION_PRESERVE_RECENT: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    PROMPT_GUARD_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    PROMPT_GUARD_THRESHOLD: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    CIRCUIT_BREAKER_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    TOOL_SANDBOX_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    COST_TRACKING_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    QUALITY_SCORING_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    REQUEST_TRACING_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    LOCAL_INTENT_PARSER_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    UNIFIED_GATEWAY_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     WHATSAPP_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
     WHATSAPP_AUTH_DIR: z.ZodDefault<z.ZodOptional<z.ZodString>>;
     WHATSAPP_ALLOWED_NUMBERS: z.ZodOptional<z.ZodString>;
@@ -76,6 +136,46 @@ declare const envSchema: z.ZodObject<{
     IMESSAGE_BLUEBUBBLES_URL: z.ZodOptional<z.ZodString>;
     IMESSAGE_BLUEBUBBLES_PASSWORD: z.ZodOptional<z.ZodString>;
     IMESSAGE_ALLOWED_NUMBERS: z.ZodOptional<z.ZodString>;
+    TUNNEL_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    TUNNEL_PROVIDER: z.ZodDefault<z.ZodOptional<z.ZodEnum<["cloudflare", "ngrok", "localtunnel"]>>>;
+    TUNNEL_SUBDOMAIN: z.ZodOptional<z.ZodString>;
+    TUNNEL_AUTH_TOKEN: z.ZodOptional<z.ZodString>;
+    AUTONOMY_LEVEL: z.ZodDefault<z.ZodOptional<z.ZodEnum<["readonly", "supervised", "autonomous"]>>>;
+    PROMETHEUS_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    PROMETHEUS_PATH: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    PAIRING_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    PAIRING_CODE_LIFETIME_MINUTES: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    GATEWAY_TOKEN: z.ZodOptional<z.ZodString>;
+    MATRIX_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    MATRIX_HOMESERVER_URL: z.ZodOptional<z.ZodString>;
+    MATRIX_ACCESS_TOKEN: z.ZodOptional<z.ZodString>;
+    MATRIX_USER_ID: z.ZodOptional<z.ZodString>;
+    MATRIX_ALLOWED_ROOM_IDS: z.ZodOptional<z.ZodString>;
+    MATRIX_AUTO_JOIN: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    MATRIX_E2E_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    NEO4J_URI: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    NEO4J_USER: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    NEO4J_PASSWORD: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    NEO4J_DATABASE: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    FEC_API_KEY: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    OPENCORPORATES_API_TOKEN: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    SEC_EDGAR_USER_AGENT: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    OSINT_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    OSINT_RATE_LIMIT_BUFFER_MS: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    EMBEDDING_PROVIDER: z.ZodDefault<z.ZodOptional<z.ZodEnum<["openai", "huggingface", "tfidf"]>>>;
+    EMBEDDING_MODEL: z.ZodOptional<z.ZodString>;
+    EMBEDDING_DIMENSIONS: z.ZodOptional<z.ZodNumber>;
+    EMBEDDING_DB_DIMENSIONS: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    EMBEDDING_BATCH_SIZE: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    HYDE_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    RERANK_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    RERANK_MIN_SCORE: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    MULTISTEP_RAG_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    MULTISTEP_MAX_STEPS: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    RETRIEVAL_CACHE_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    CONTEXTUAL_QUERY_ENABLED: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    ENCRYPTION_MASTER_KEY: z.ZodOptional<z.ZodString>;
+    AUDIT_SIGNING_KEY: z.ZodOptional<z.ZodString>;
     PORT: z.ZodDefault<z.ZodNumber>;
     NODE_ENV: z.ZodDefault<z.ZodEnum<["development", "production", "test"]>>;
 }, "strip", z.ZodTypeAny, {
@@ -93,14 +193,69 @@ declare const envSchema: z.ZodObject<{
     EMAIL_IMAP_SECURE: boolean;
     EMAIL_SMTP_PORT: number;
     EMAIL_SMTP_SECURE: boolean;
+    EMAIL_LOCAL_IMAP_HOST: string;
+    EMAIL_LOCAL_IMAP_PORT: number;
+    EMAIL_LOCAL_SMTP_HOST: string;
+    EMAIL_LOCAL_SMTP_PORT: number;
+    BINANCE_TESTNET: boolean;
+    EXCHANGE_REQUIRE_CONFIRMATION: boolean;
+    ALCHEMY_NETWORK: string;
     MCP_ENABLED: boolean;
     MCP_CONFIG_PATH: string;
+    LLM_PROVIDER: string;
+    OPENAI_LLM_ENABLED: boolean;
+    OLLAMA_ENABLED: boolean;
+    OLLAMA_BASE_URL: string;
+    OLLAMA_DEFAULT_MODEL: string;
+    MODEL_ROUTING_ENABLED: boolean;
+    MODEL_OPUS_ENABLED: boolean;
+    COMPACTION_ENABLED: boolean;
+    COMPACTION_TOKEN_THRESHOLD: number;
+    COMPACTION_PRESERVE_RECENT: number;
+    PROMPT_GUARD_ENABLED: boolean;
+    PROMPT_GUARD_THRESHOLD: number;
+    CIRCUIT_BREAKER_ENABLED: boolean;
+    TOOL_SANDBOX_ENABLED: boolean;
+    COST_TRACKING_ENABLED: boolean;
+    QUALITY_SCORING_ENABLED: boolean;
+    REQUEST_TRACING_ENABLED: boolean;
+    LOCAL_INTENT_PARSER_ENABLED: boolean;
+    UNIFIED_GATEWAY_ENABLED: boolean;
     WHATSAPP_ENABLED: boolean;
     WHATSAPP_AUTH_DIR: string;
     SIGNAL_ENABLED: boolean;
     SIGNAL_CLI_PATH: string;
     IMESSAGE_ENABLED: boolean;
     IMESSAGE_MODE: "bluebubbles" | "applescript";
+    TUNNEL_ENABLED: boolean;
+    TUNNEL_PROVIDER: "cloudflare" | "ngrok" | "localtunnel";
+    AUTONOMY_LEVEL: "readonly" | "supervised" | "autonomous";
+    PROMETHEUS_ENABLED: boolean;
+    PROMETHEUS_PATH: string;
+    PAIRING_ENABLED: boolean;
+    PAIRING_CODE_LIFETIME_MINUTES: number;
+    MATRIX_ENABLED: boolean;
+    MATRIX_AUTO_JOIN: boolean;
+    MATRIX_E2E_ENABLED: boolean;
+    NEO4J_URI: string;
+    NEO4J_USER: string;
+    NEO4J_PASSWORD: string;
+    NEO4J_DATABASE: string;
+    FEC_API_KEY: string;
+    OPENCORPORATES_API_TOKEN: string;
+    SEC_EDGAR_USER_AGENT: string;
+    OSINT_ENABLED: boolean;
+    OSINT_RATE_LIMIT_BUFFER_MS: number;
+    EMBEDDING_PROVIDER: "openai" | "huggingface" | "tfidf";
+    EMBEDDING_DB_DIMENSIONS: number;
+    EMBEDDING_BATCH_SIZE: number;
+    HYDE_ENABLED: boolean;
+    RERANK_ENABLED: boolean;
+    RERANK_MIN_SCORE: number;
+    MULTISTEP_RAG_ENABLED: boolean;
+    MULTISTEP_MAX_STEPS: number;
+    RETRIEVAL_CACHE_ENABLED: boolean;
+    CONTEXTUAL_QUERY_ENABLED: boolean;
     PORT: number;
     NODE_ENV: "development" | "production" | "test";
     DISCORD_BOT_TOKEN?: string | undefined;
@@ -120,8 +275,14 @@ declare const envSchema: z.ZodObject<{
     EMAIL_USER?: string | undefined;
     EMAIL_PASSWORD?: string | undefined;
     EMAIL_PROVIDER?: "gmail" | "outlook" | "yahoo" | "custom" | undefined;
+    EMAIL_MASTER_USER?: string | undefined;
+    EMAIL_MASTER_PASSWORD?: string | undefined;
     GITHUB_TOKEN?: string | undefined;
     GITHUB_WEBHOOK_SECRET?: string | undefined;
+    GOOGLE_CLIENT_ID?: string | undefined;
+    GOOGLE_CLIENT_SECRET?: string | undefined;
+    GOOGLE_REDIRECT_URI?: string | undefined;
+    GOOGLE_REFRESH_TOKEN?: string | undefined;
     GOOGLE_DRIVE_CLIENT_ID?: string | undefined;
     GOOGLE_DRIVE_CLIENT_SECRET?: string | undefined;
     GOOGLE_DRIVE_REDIRECT_URI?: string | undefined;
@@ -130,7 +291,16 @@ declare const envSchema: z.ZodObject<{
     DROPBOX_APP_SECRET?: string | undefined;
     DROPBOX_ACCESS_TOKEN?: string | undefined;
     DROPBOX_REFRESH_TOKEN?: string | undefined;
+    TENOR_API_KEY?: string | undefined;
+    GIPHY_API_KEY?: string | undefined;
     ALPHA_VANTAGE_API_KEY?: string | undefined;
+    COINBASE_API_KEY?: string | undefined;
+    COINBASE_PRIVATE_KEY?: string | undefined;
+    BINANCE_API_KEY?: string | undefined;
+    BINANCE_API_SECRET?: string | undefined;
+    DEFILLAMA_API_KEY?: string | undefined;
+    ETHERSCAN_API_KEY?: string | undefined;
+    ALCHEMY_API_KEY?: string | undefined;
     HUGGINGFACE_ACCESS_TOKEN?: string | undefined;
     TWILIO_ACCOUNT_SID?: string | undefined;
     TWILIO_AUTH_TOKEN?: string | undefined;
@@ -140,12 +310,42 @@ declare const envSchema: z.ZodObject<{
     SPOTIFY_CLIENT_ID?: string | undefined;
     SPOTIFY_CLIENT_SECRET?: string | undefined;
     SPOTIFY_REDIRECT_URI?: string | undefined;
+    SPOTIFY_REFRESH_TOKEN?: string | undefined;
+    GOOGLE_CALENDAR_CLIENT_ID?: string | undefined;
+    GOOGLE_CALENDAR_CLIENT_SECRET?: string | undefined;
+    GOOGLE_CALENDAR_REDIRECT_URI?: string | undefined;
+    GOOGLE_CALENDAR_REFRESH_TOKEN?: string | undefined;
+    OUTLOOK_CLIENT_ID?: string | undefined;
+    OUTLOOK_CLIENT_SECRET?: string | undefined;
+    OUTLOOK_REDIRECT_URI?: string | undefined;
+    OUTLOOK_REFRESH_TOKEN?: string | undefined;
+    DROPBOX_CLIENT_ID?: string | undefined;
+    DROPBOX_CLIENT_SECRET?: string | undefined;
+    DROPBOX_REDIRECT_URI?: string | undefined;
+    OPENROUTER_API_KEY?: string | undefined;
+    OPENROUTER_BASE_URL?: string | undefined;
+    GROQ_API_KEY?: string | undefined;
+    MISTRAL_API_KEY?: string | undefined;
+    OPENAI_COMPATIBLE_API_KEY?: string | undefined;
+    OPENAI_COMPATIBLE_BASE_URL?: string | undefined;
+    OPENAI_COMPATIBLE_MODEL?: string | undefined;
     WHATSAPP_ALLOWED_NUMBERS?: string | undefined;
     SIGNAL_PHONE_NUMBER?: string | undefined;
     SIGNAL_ALLOWED_NUMBERS?: string | undefined;
     IMESSAGE_BLUEBUBBLES_URL?: string | undefined;
     IMESSAGE_BLUEBUBBLES_PASSWORD?: string | undefined;
     IMESSAGE_ALLOWED_NUMBERS?: string | undefined;
+    TUNNEL_SUBDOMAIN?: string | undefined;
+    TUNNEL_AUTH_TOKEN?: string | undefined;
+    GATEWAY_TOKEN?: string | undefined;
+    MATRIX_HOMESERVER_URL?: string | undefined;
+    MATRIX_ACCESS_TOKEN?: string | undefined;
+    MATRIX_USER_ID?: string | undefined;
+    MATRIX_ALLOWED_ROOM_IDS?: string | undefined;
+    EMBEDDING_MODEL?: string | undefined;
+    EMBEDDING_DIMENSIONS?: number | undefined;
+    ENCRYPTION_MASTER_KEY?: string | undefined;
+    AUDIT_SIGNING_KEY?: string | undefined;
 }, {
     CLAUDE_API_KEY: string;
     TELEGRAM_BOT_TOKEN?: string | undefined;
@@ -178,8 +378,18 @@ declare const envSchema: z.ZodObject<{
     EMAIL_USER?: string | undefined;
     EMAIL_PASSWORD?: string | undefined;
     EMAIL_PROVIDER?: "gmail" | "outlook" | "yahoo" | "custom" | undefined;
+    EMAIL_MASTER_USER?: string | undefined;
+    EMAIL_MASTER_PASSWORD?: string | undefined;
+    EMAIL_LOCAL_IMAP_HOST?: string | undefined;
+    EMAIL_LOCAL_IMAP_PORT?: number | undefined;
+    EMAIL_LOCAL_SMTP_HOST?: string | undefined;
+    EMAIL_LOCAL_SMTP_PORT?: number | undefined;
     GITHUB_TOKEN?: string | undefined;
     GITHUB_WEBHOOK_SECRET?: string | undefined;
+    GOOGLE_CLIENT_ID?: string | undefined;
+    GOOGLE_CLIENT_SECRET?: string | undefined;
+    GOOGLE_REDIRECT_URI?: string | undefined;
+    GOOGLE_REFRESH_TOKEN?: string | undefined;
     GOOGLE_DRIVE_CLIENT_ID?: string | undefined;
     GOOGLE_DRIVE_CLIENT_SECRET?: string | undefined;
     GOOGLE_DRIVE_REDIRECT_URI?: string | undefined;
@@ -188,7 +398,19 @@ declare const envSchema: z.ZodObject<{
     DROPBOX_APP_SECRET?: string | undefined;
     DROPBOX_ACCESS_TOKEN?: string | undefined;
     DROPBOX_REFRESH_TOKEN?: string | undefined;
+    TENOR_API_KEY?: string | undefined;
+    GIPHY_API_KEY?: string | undefined;
     ALPHA_VANTAGE_API_KEY?: string | undefined;
+    COINBASE_API_KEY?: string | undefined;
+    COINBASE_PRIVATE_KEY?: string | undefined;
+    BINANCE_API_KEY?: string | undefined;
+    BINANCE_API_SECRET?: string | undefined;
+    BINANCE_TESTNET?: boolean | undefined;
+    EXCHANGE_REQUIRE_CONFIRMATION?: boolean | undefined;
+    DEFILLAMA_API_KEY?: string | undefined;
+    ETHERSCAN_API_KEY?: string | undefined;
+    ALCHEMY_API_KEY?: string | undefined;
+    ALCHEMY_NETWORK?: string | undefined;
     HUGGINGFACE_ACCESS_TOKEN?: string | undefined;
     TWILIO_ACCOUNT_SID?: string | undefined;
     TWILIO_AUTH_TOKEN?: string | undefined;
@@ -198,8 +420,46 @@ declare const envSchema: z.ZodObject<{
     SPOTIFY_CLIENT_ID?: string | undefined;
     SPOTIFY_CLIENT_SECRET?: string | undefined;
     SPOTIFY_REDIRECT_URI?: string | undefined;
+    SPOTIFY_REFRESH_TOKEN?: string | undefined;
+    GOOGLE_CALENDAR_CLIENT_ID?: string | undefined;
+    GOOGLE_CALENDAR_CLIENT_SECRET?: string | undefined;
+    GOOGLE_CALENDAR_REDIRECT_URI?: string | undefined;
+    GOOGLE_CALENDAR_REFRESH_TOKEN?: string | undefined;
+    OUTLOOK_CLIENT_ID?: string | undefined;
+    OUTLOOK_CLIENT_SECRET?: string | undefined;
+    OUTLOOK_REDIRECT_URI?: string | undefined;
+    OUTLOOK_REFRESH_TOKEN?: string | undefined;
+    DROPBOX_CLIENT_ID?: string | undefined;
+    DROPBOX_CLIENT_SECRET?: string | undefined;
+    DROPBOX_REDIRECT_URI?: string | undefined;
     MCP_ENABLED?: boolean | undefined;
     MCP_CONFIG_PATH?: string | undefined;
+    LLM_PROVIDER?: string | undefined;
+    OPENROUTER_API_KEY?: string | undefined;
+    OPENROUTER_BASE_URL?: string | undefined;
+    GROQ_API_KEY?: string | undefined;
+    MISTRAL_API_KEY?: string | undefined;
+    OPENAI_LLM_ENABLED?: boolean | undefined;
+    OPENAI_COMPATIBLE_API_KEY?: string | undefined;
+    OPENAI_COMPATIBLE_BASE_URL?: string | undefined;
+    OPENAI_COMPATIBLE_MODEL?: string | undefined;
+    OLLAMA_ENABLED?: boolean | undefined;
+    OLLAMA_BASE_URL?: string | undefined;
+    OLLAMA_DEFAULT_MODEL?: string | undefined;
+    MODEL_ROUTING_ENABLED?: boolean | undefined;
+    MODEL_OPUS_ENABLED?: boolean | undefined;
+    COMPACTION_ENABLED?: boolean | undefined;
+    COMPACTION_TOKEN_THRESHOLD?: number | undefined;
+    COMPACTION_PRESERVE_RECENT?: number | undefined;
+    PROMPT_GUARD_ENABLED?: boolean | undefined;
+    PROMPT_GUARD_THRESHOLD?: number | undefined;
+    CIRCUIT_BREAKER_ENABLED?: boolean | undefined;
+    TOOL_SANDBOX_ENABLED?: boolean | undefined;
+    COST_TRACKING_ENABLED?: boolean | undefined;
+    QUALITY_SCORING_ENABLED?: boolean | undefined;
+    REQUEST_TRACING_ENABLED?: boolean | undefined;
+    LOCAL_INTENT_PARSER_ENABLED?: boolean | undefined;
+    UNIFIED_GATEWAY_ENABLED?: boolean | undefined;
     WHATSAPP_ENABLED?: boolean | undefined;
     WHATSAPP_AUTH_DIR?: string | undefined;
     WHATSAPP_ALLOWED_NUMBERS?: string | undefined;
@@ -212,18 +472,58 @@ declare const envSchema: z.ZodObject<{
     IMESSAGE_BLUEBUBBLES_URL?: string | undefined;
     IMESSAGE_BLUEBUBBLES_PASSWORD?: string | undefined;
     IMESSAGE_ALLOWED_NUMBERS?: string | undefined;
+    TUNNEL_ENABLED?: boolean | undefined;
+    TUNNEL_PROVIDER?: "cloudflare" | "ngrok" | "localtunnel" | undefined;
+    TUNNEL_SUBDOMAIN?: string | undefined;
+    TUNNEL_AUTH_TOKEN?: string | undefined;
+    AUTONOMY_LEVEL?: "readonly" | "supervised" | "autonomous" | undefined;
+    PROMETHEUS_ENABLED?: boolean | undefined;
+    PROMETHEUS_PATH?: string | undefined;
+    PAIRING_ENABLED?: boolean | undefined;
+    PAIRING_CODE_LIFETIME_MINUTES?: number | undefined;
+    GATEWAY_TOKEN?: string | undefined;
+    MATRIX_ENABLED?: boolean | undefined;
+    MATRIX_HOMESERVER_URL?: string | undefined;
+    MATRIX_ACCESS_TOKEN?: string | undefined;
+    MATRIX_USER_ID?: string | undefined;
+    MATRIX_ALLOWED_ROOM_IDS?: string | undefined;
+    MATRIX_AUTO_JOIN?: boolean | undefined;
+    MATRIX_E2E_ENABLED?: boolean | undefined;
+    NEO4J_URI?: string | undefined;
+    NEO4J_USER?: string | undefined;
+    NEO4J_PASSWORD?: string | undefined;
+    NEO4J_DATABASE?: string | undefined;
+    FEC_API_KEY?: string | undefined;
+    OPENCORPORATES_API_TOKEN?: string | undefined;
+    SEC_EDGAR_USER_AGENT?: string | undefined;
+    OSINT_ENABLED?: boolean | undefined;
+    OSINT_RATE_LIMIT_BUFFER_MS?: number | undefined;
+    EMBEDDING_PROVIDER?: "openai" | "huggingface" | "tfidf" | undefined;
+    EMBEDDING_MODEL?: string | undefined;
+    EMBEDDING_DIMENSIONS?: number | undefined;
+    EMBEDDING_DB_DIMENSIONS?: number | undefined;
+    EMBEDDING_BATCH_SIZE?: number | undefined;
+    HYDE_ENABLED?: boolean | undefined;
+    RERANK_ENABLED?: boolean | undefined;
+    RERANK_MIN_SCORE?: number | undefined;
+    MULTISTEP_RAG_ENABLED?: boolean | undefined;
+    MULTISTEP_MAX_STEPS?: number | undefined;
+    RETRIEVAL_CACHE_ENABLED?: boolean | undefined;
+    CONTEXTUAL_QUERY_ENABLED?: boolean | undefined;
+    ENCRYPTION_MASTER_KEY?: string | undefined;
+    AUDIT_SIGNING_KEY?: string | undefined;
     PORT?: number | undefined;
     NODE_ENV?: "development" | "production" | "test" | undefined;
 }>;
 type Env = z.infer<typeof envSchema>;
-/**
- * Programmatic configuration for library use.
- * Call this before any module accesses `env`.
- * Config values are merged with process.env (config takes precedence).
- */
 declare function configure(config: Partial<Env> & {
     CLAUDE_API_KEY: string;
 }): Env;
+/**
+ * Wait for provider initialization to complete.
+ * Call after configure() if you need providers ready before first API call.
+ */
+declare function ready(): Promise<void>;
 /**
  * The env accessor. Lazy — loads from process.env on first access
  * if configure() was not called first.
@@ -232,7 +532,16 @@ declare function configure(config: Partial<Env> & {
  */
 declare const env: Env;
 
-declare const SYSTEM_PROMPT = "You are OpenSentinel, a personal AI assistant with a JARVIS-like personality. You are helpful, efficient, and have a subtle sense of humor. You speak in a professional yet friendly manner.\n\nYou have access to various tools and capabilities:\n- Execute shell commands on the user's system\n- Manage files (read, write, search)\n- Browse the web and search for information\n- Remember important facts about the user and their preferences\n- Spawn background agents for complex tasks\n- Generate documents, spreadsheets, charts, and diagrams\n- Analyze images and extract text with OCR\n- Take and analyze screenshots\n\nAlways be concise but thorough. When executing tasks, explain what you're doing briefly. If you encounter errors, suggest solutions.\n\nThe user is your principal. Assist them with whatever they need while being mindful of security and privacy.";
+/**
+ * Provider initialization and re-exports
+ */
+/**
+ * Initialize all configured LLM providers from environment variables.
+ * Called once during application startup.
+ */
+declare function initializeProviders(): Promise<void>;
+
+declare const SYSTEM_PROMPT = "You are OpenSentinel, a personal AI assistant with a JARVIS-like personality. You are helpful, efficient, and have a subtle sense of humor. You speak in a professional yet friendly manner.\n\nYou have access to 120+ tools spanning many domains. ALWAYS check your available tools before telling the user you cannot do something. Key capabilities include:\n\n**System & Productivity**\n- Execute shell commands, manage files, browse the web, search for information\n- Remember facts about the user, spawn background agents for complex tasks\n- Generate documents, spreadsheets, charts, diagrams, reports\n- Analyze images, take screenshots, OCR\n\n**Communication & Social**\n- Send/read Telegram, Discord, Slack, WhatsApp, Signal, iMessage, Matrix messages\n- Send/read emails (Gmail, IMAP/SMTP), SMS/phone calls via Twilio\n\n**Entertainment & Media**\n- Control Spotify playback (play, pause, skip, volume, queue, search, playlists, recommendations)\n- Search for GIFs (Tenor, Giphy, web fallback)\n- Generate images, text-to-speech, speech-to-text\n\n**Smart Home & Location**\n- Control Home Assistant devices (lights, switches, climate, cameras)\n- Search places, geocode addresses, find nearby POIs, get driving directions\n- Camera capture from webcams, RTSP streams, and HA cameras\n\n**Google Workspace**\n- Gmail (list, read, send, search, reply emails)\n- Google Calendar (list, create, update, delete events)\n- Google Drive (list, search, upload, download, share files)\n\n**Finance & Data**\n- Cryptocurrency prices, stock data, currency conversion\n- OSINT research, web scraping\n\n**DevOps & Code**\n- GitHub (repos, issues, PRs, code search)\n- Notion (pages, databases, search)\n- Terminal command execution (local or remote via WebSocket bridge)\n- Token usage dashboard with cost tracking\n\nIMPORTANT: When the user asks you to do something, USE YOUR TOOLS. Do not say \"I cannot do that\" if a matching tool exists. If a tool requires credentials that are not configured, tell the user what credentials are needed rather than refusing outright.\n\nAlways be concise but thorough. When executing tasks, explain what you're doing briefly. If you encounter errors, suggest solutions.\n\nThe user is your principal. Assist them with whatever they need while being mindful of security and privacy.";
 interface Message {
     role: "user" | "assistant";
     content: string;
@@ -244,7 +553,15 @@ interface BrainResponse {
     toolsUsed?: string[];
 }
 declare function chat(messages: Message[], systemPrompt?: string): Promise<BrainResponse>;
-declare function chatWithTools(messages: Message[], userId?: string, onToolUse?: (toolName: string, input: unknown) => void): Promise<BrainResponse>;
+interface ChatOptions {
+    appType?: string;
+}
+type ExecuteToolOverride = (toolName: string, input: Record<string, unknown>) => Promise<{
+    success: boolean;
+    result?: unknown;
+    error?: string;
+}>;
+declare function chatWithTools(messages: Message[], userId?: string, onToolUse?: (toolName: string, input: unknown) => void, options?: ChatOptions, executeToolOverride?: ExecuteToolOverride): Promise<BrainResponse>;
 declare function streamChat(messages: Message[], systemPrompt?: string, onChunk?: (text: string) => void): Promise<BrainResponse>;
 interface StreamEvent {
     type: "chunk" | "tool_start" | "tool_result" | "complete" | "error";
@@ -260,7 +577,7 @@ interface StreamEvent {
         error?: string;
     };
 }
-declare function streamChatWithTools(messages: Message[], userId?: string): AsyncGenerator<StreamEvent, BrainResponse, undefined>;
+declare function streamChatWithTools(messages: Message[], userId?: string, executeToolOverride?: ExecuteToolOverride): AsyncGenerator<StreamEvent, BrainResponse, undefined>;
 
 /**
  * OpenSentinel - Programmatic API
@@ -413,6 +730,25 @@ declare const memories: drizzle_orm_pg_core.PgTableWithColumns<{
         }, {}, {
             dimensions: 1536;
         }>;
+        searchVector: drizzle_orm_pg_core.PgColumn<{
+            name: "search_vector";
+            tableName: "memories";
+            dataType: "custom";
+            columnType: "PgCustomColumn";
+            data: string;
+            driverParam: unknown;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {
+            pgColumnBuilderBrand: "PgCustomColumnBuilderBrand";
+        }>;
         importance: drizzle_orm_pg_core.PgColumn<{
             name: "importance";
             tableName: "memories";
@@ -447,6 +783,23 @@ declare const memories: drizzle_orm_pg_core.PgTableWithColumns<{
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        provenance: drizzle_orm_pg_core.PgColumn<{
+            name: "provenance";
+            tableName: "memories";
+            dataType: "string";
+            columnType: "PgText";
+            data: string;
+            driverParam: string;
+            notNull: false;
+            hasDefault: false;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: [string, ...string[]];
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         metadata: drizzle_orm_pg_core.PgColumn<{
             name: "metadata";
             tableName: "memories";
@@ -464,6 +817,23 @@ declare const memories: drizzle_orm_pg_core.PgTableWithColumns<{
             identity: undefined;
             generated: undefined;
         }, {}, {}>;
+        encrypted: drizzle_orm_pg_core.PgColumn<{
+            name: "encrypted";
+            tableName: "memories";
+            dataType: "boolean";
+            columnType: "PgBoolean";
+            data: boolean;
+            driverParam: boolean;
+            notNull: true;
+            hasDefault: true;
+            isPrimaryKey: false;
+            isAutoincrement: false;
+            hasRuntimeDefault: false;
+            enumValues: undefined;
+            baseColumn: never;
+            identity: undefined;
+            generated: undefined;
+        }, {}, {}>;
         lastAccessed: drizzle_orm_pg_core.PgColumn<{
             name: "last_accessed";
             tableName: "memories";
@@ -507,10 +877,13 @@ type NewMemory = typeof memories.$inferInsert;
 declare const db: ReturnType<typeof drizzle<typeof schema>>;
 
 declare function generateEmbedding(text: string): Promise<number[]>;
-declare function storeMemory(memory: Omit<NewMemory, "embedding">): Promise<Memory>;
+declare function storeMemory(memory: Omit<NewMemory, "embedding" | "searchVector">): Promise<Memory>;
 declare function searchMemories(query: string, userId?: string, limit?: number): Promise<Memory[]>;
 declare function extractMemories(content: string, userId?: string): Promise<Memory[]>;
-declare function buildMemoryContext(query: string, userId?: string): Promise<string>;
+declare function buildMemoryContext(query: string, userId?: string, conversationHistory?: Array<{
+    role: "user" | "assistant";
+    content: string;
+}>): Promise<string>;
 
 declare const TOOLS: Tool[];
 declare function executeTool(name: string, input: Record<string, unknown>): Promise<{
@@ -852,4 +1225,223 @@ declare class iMessageBot {
     get running(): boolean;
 }
 
-export { type BrainResponse, DiscordBot, type Env, type Message, OpenSentinel, type OpenSentinelConfig, SYSTEM_PROMPT, SignalBot, SlackBot, type StreamEvent, TOOLS, WhatsAppBot, app as apiApp, buildMemoryContext, cancelTask, chat, chatWithTools, configure, createBot as createTelegramBot, db, env, executeTool, extractMemories, generateBriefing, generateEmbedding, iMessageBot, scheduleReminder, scheduleTask, searchMemories, storeMemory, streamChat, streamChatWithTools };
+declare function generateEncryptionKey(): string;
+declare function reEncryptValue(encryptedData: string, oldKey: string, newKey: string): string;
+declare function getRotationInfo(): {
+    hasEncryptionKey: boolean;
+    hasAuditKey: boolean;
+    keyHashPrefix: string | null;
+};
+
+/**
+ * Text Transform Tool
+ * Text manipulation utilities: word count, language detection, keyword extraction, etc.
+ */
+interface TextTransformResult {
+    success: boolean;
+    result?: unknown;
+    error?: string;
+}
+declare function countText(text: string): {
+    characters: number;
+    words: number;
+    sentences: number;
+    paragraphs: number;
+    lines: number;
+};
+declare function detectLanguage(text: string): string;
+declare function extractKeywords(text: string, count?: number): string[];
+declare function changeCase(text: string, targetCase: "upper" | "lower" | "title" | "sentence" | "camel" | "snake" | "kebab"): string;
+declare function transformText(text: string, action: string, options?: Record<string, unknown>): Promise<TextTransformResult>;
+
+/**
+ * JSON Tool
+ * Validate, format, flatten, diff, query, and schema-validate JSON
+ */
+interface JsonToolResult {
+    success: boolean;
+    result?: unknown;
+    error?: string;
+}
+declare function validateJson(input: string): {
+    valid: boolean;
+    error?: string;
+};
+declare function formatJson(input: string | object, indent?: number): string;
+declare function flattenJson(obj: Record<string, unknown>, prefix?: string, separator?: string): Record<string, unknown>;
+declare function diffJson(a: unknown, b: unknown, path?: string): Array<{
+    path: string;
+    type: "added" | "removed" | "changed";
+    oldValue?: unknown;
+    newValue?: unknown;
+}>;
+declare function queryJson(obj: unknown, path: string): unknown;
+declare function jsonTool(action: string, input: string, options?: Record<string, unknown>): Promise<JsonToolResult>;
+
+/**
+ * Cron Explain Tool
+ * Parse cron expressions to natural language and vice versa
+ */
+interface CronResult {
+    success: boolean;
+    result?: unknown;
+    error?: string;
+}
+declare function explainCron(expression: string): string;
+declare function getNextRuns(expression: string, count?: number, fromDate?: Date): Date[];
+declare function validateCron(expression: string): {
+    valid: boolean;
+    error?: string;
+};
+declare function cronTool(action: string, expression: string, options?: Record<string, unknown>): Promise<CronResult>;
+
+/**
+ * Hash Tool
+ * Compute hashes, compare values, generate tokens
+ */
+interface HashResult {
+    success: boolean;
+    result?: unknown;
+    error?: string;
+}
+declare function hashString(input: string, algorithm?: "md5" | "sha1" | "sha256" | "sha512"): string;
+declare function compareHashes(hash1: string, hash2: string): boolean;
+declare function generateToken(length?: number, encoding?: "hex" | "base64" | "base64url"): string;
+declare function hashTool(action: string, input: string, options?: Record<string, unknown>): Promise<HashResult>;
+
+/**
+ * Regex Tool
+ * Build, test, explain, and apply regular expressions
+ */
+interface RegexResult {
+    success: boolean;
+    result?: unknown;
+    error?: string;
+}
+declare function testRegex(pattern: string, text: string, flags?: string): {
+    matches: Array<{
+        match: string;
+        index: number;
+        groups?: Record<string, string>;
+    }>;
+    count: number;
+};
+declare function replaceWithRegex(pattern: string, text: string, replacement: string, flags?: string): {
+    result: string;
+    replacements: number;
+};
+declare function extractCaptures(pattern: string, text: string, flags?: string): string[][];
+declare function regexTool(action: string, pattern: string, text: string, options?: Record<string, unknown>): Promise<RegexResult>;
+
+/**
+ * Unit Converter Tool
+ * Convert between units of measurement
+ */
+interface ConversionResult {
+    success: boolean;
+    result?: {
+        value: number;
+        from: string;
+        to: string;
+        formatted: string;
+    };
+    error?: string;
+}
+declare function convert(value: number, from: string, to: string): ConversionResult;
+declare function unitConverter(action: string, value: number, from: string, to: string): Promise<ConversionResult>;
+
+/**
+ * QR Code Generator
+ * Generate QR codes as SVG (no external dependencies)
+ */
+interface QRResult {
+    success: boolean;
+    svg?: string;
+    filePath?: string;
+    error?: string;
+}
+declare function generateQRSvg(data: string, options?: {
+    size?: number;
+    margin?: number;
+    darkColor?: string;
+    lightColor?: string;
+}): string;
+declare function qrCodeTool(action: string, data: string, options?: Record<string, unknown>): Promise<QRResult>;
+
+/**
+ * Clipboard Manager
+ * Named clipboard entries with history and search
+ */
+interface ClipboardEntry {
+    name: string;
+    content: string;
+    type: "text" | "code" | "url" | "json" | "other";
+    createdAt: Date;
+    accessCount: number;
+}
+interface ClipboardResult {
+    success: boolean;
+    entry?: ClipboardEntry;
+    entries?: ClipboardEntry[];
+    error?: string;
+}
+declare function clipboardTool(action: string, name: string, content?: string, options?: Record<string, unknown>): Promise<ClipboardResult>;
+
+/**
+ * Backup & Restore Module
+ * Database backup, restore, and scheduling
+ */
+interface BackupResult {
+    success: boolean;
+    filePath?: string;
+    size?: number;
+    timestamp?: string;
+    error?: string;
+}
+interface BackupOptions {
+    outputDir?: string;
+    compress?: boolean;
+    includeRedis?: boolean;
+    maxBackups?: number;
+}
+interface BackupInfo {
+    filename: string;
+    path: string;
+    size: number;
+    created: Date;
+}
+declare function createDatabaseBackup(options?: BackupOptions): Promise<BackupResult>;
+declare function restoreDatabase(backupPath: string): Promise<BackupResult>;
+declare function listBackups(backupDir?: string): Promise<BackupInfo[]>;
+
+/**
+ * Heartbeat Monitor
+ * Track service health with periodic heartbeats
+ */
+interface HeartbeatService {
+    id: string;
+    name: string;
+    intervalMs: number;
+    lastBeat: number | null;
+    status: "healthy" | "degraded" | "down" | "unknown";
+    consecutiveMisses: number;
+    metadata?: Record<string, unknown>;
+}
+interface HeartbeatResult {
+    success: boolean;
+    service?: HeartbeatService;
+    services?: HeartbeatService[];
+    error?: string;
+}
+declare function registerService(id: string, name: string, intervalMs?: number, metadata?: Record<string, unknown>): HeartbeatResult;
+declare function recordBeat(id: string): HeartbeatResult;
+declare function checkHeartbeats(): HeartbeatResult;
+declare function getHeartbeatSummary(): {
+    total: number;
+    healthy: number;
+    degraded: number;
+    down: number;
+    unknown: number;
+};
+
+export { type BrainResponse, DiscordBot, type Env, type Message, OpenSentinel, type OpenSentinelConfig, SYSTEM_PROMPT, SignalBot, SlackBot, type StreamEvent, TOOLS, WhatsAppBot, app as apiApp, buildMemoryContext, cancelTask, changeCase, chat, chatWithTools, checkHeartbeats, clipboardTool, compareHashes, configure, convert, countText, createDatabaseBackup, createBot as createTelegramBot, cronTool, db, detectLanguage, diffJson, env, executeTool, explainCron, extractCaptures, extractKeywords, extractMemories, flattenJson, formatJson, generateBriefing, generateEmbedding, generateEncryptionKey, generateQRSvg, generateToken, getHeartbeatSummary, getNextRuns, getRotationInfo, hashString, hashTool, iMessageBot, initializeProviders, jsonTool, listBackups, qrCodeTool, queryJson, reEncryptValue, ready, recordBeat, regexTool, registerService, replaceWithRegex, restoreDatabase, scheduleReminder, scheduleTask, searchMemories, storeMemory, streamChat, streamChatWithTools, testRegex, transformText, unitConverter, validateCron, validateJson };