agent-working-memory 0.11.0 → 0.12.3

package/src/engine/eval.ts

@@ -86,7 +86,12 @@ export class EvalEngine {
       promotedCount: stagingMetrics.promoted,
       discardedCount: stagingMetrics.discarded,
       promotionPrecision,
-      discardRegret: 0, // Requires tracking discarded-then-rediscovered items
+      // D12 (2026-07-30): discarded writes persist as 'low-salience'-tagged
+      // engrams (confidence 0.25). Regret = the filter demoted something the
+      // agent later actually needed — measured as low-salience engrams that
+      // were subsequently accessed at least once.
+      discardRegret: activeEngrams.filter(e =>
+        e.tags.includes('low-salience') && e.accessCount > 0).length,
 
       activeEngramCount: activeEngrams.length,
       stagingEngramCount: stagingEngrams.length,

package/src/hooks/sidecar.ts

@@ -28,6 +28,28 @@ export interface SidecarDeps {
   secret: string | null;
   port: number;
   onConsolidate?: (agentId: string, reason: string) => void;
+  /**
+   * 0.12.2: warm recall for hooks. The sidecar runs in the same process as
+   * the MCP server's activation engine and its loaded ML models, so exposing
+   * recall here gives Claude Code hooks (e.g. a UserPromptSubmit PRIME hook)
+   * warm-latency recall with no standing server — the process lifecycle is
+   * owned by the session that spawned it. Optional so older callers and
+   * tests keep working unchanged.
+   */
+  activate?: (q: {
+    context: string;
+    limit?: number;
+    requireConfidence?: number;
+    granularity?: 'full' | 'compact' | 'auto';
+  }) => Promise<Array<{
+    engram: {
+      id: string; concept: string; content: string;
+      createdAt?: string; memoryClass?: string; validTo?: string | null;
+    };
+    score: number;
+    summary?: string;
+    confidence?: number;
+  }>>;
 }
 
 interface HookInput {
@@ -187,6 +209,39 @@ export function startSidecar(deps: SidecarDeps): { close: () => void } {
       return;
     }
 
+    // POST /memory/activate — warm recall for hooks (0.12.2). Behind the auth
+    // gate above. Returns a trimmed subset of the HTTP API's response shape
+    // ({results: [{engram, score, summary, confidence}]}) so a hook written
+    // against either endpoint needs no branching.
+    if (req.url === '/memory/activate' && req.method === 'POST') {
+      if (!deps.activate) {
+        json(res, 501, { error: 'activate not wired on this sidecar' });
+        return;
+      }
+      try {
+        const body = JSON.parse((await readBody(req)) || '{}') as {
+          context?: string; query?: string; limit?: number;
+          requireConfidence?: number; granularity?: 'full' | 'compact' | 'auto';
+        };
+        const context = body.context ?? body.query;
+        if (!context) {
+          json(res, 400, { error: 'context (or query) is required' });
+          return;
+        }
+        const results = await deps.activate({
+          context,
+          limit: body.limit,
+          requireConfidence: body.requireConfidence,
+          granularity: body.granularity,
+        });
+        log(agentId, 'hook:recall', `"${context.slice(0, 80)}" → ${results.length} results (sidecar)`);
+        json(res, 200, { results });
+      } catch (err) {
+        json(res, 500, { error: (err as Error).message });
+      }
+      return;
+    }
+
     // POST /hooks/checkpoint — auto-checkpoint from hook events
     if (req.url === '/hooks/checkpoint' && req.method === 'POST') {
       try {

package/src/index.ts

@@ -1,227 +1,248 @@
-// Copyright 2026 Robert Winter / Complete Ideas
-// SPDX-License-Identifier: Apache-2.0
-import { readFileSync, copyFileSync, existsSync, mkdirSync, readdirSync, unlinkSync } from 'node:fs';
-import { resolve, dirname, basename } from 'node:path';
-import Fastify from 'fastify';
-import { VERSION } from './version.js';
-
-// Load .env file if present (no external dependency)
-try {
-  const envPath = resolve(process.cwd(), '.env');
-  const envContent = readFileSync(envPath, 'utf-8');
-  for (const line of envContent.split('\n')) {
-    const trimmed = line.trim();
-    if (!trimmed || trimmed.startsWith('#')) continue;
-    const eqIdx = trimmed.indexOf('=');
-    if (eqIdx === -1) continue;
-    const key = trimmed.slice(0, eqIdx).trim();
-    const val = trimmed.slice(eqIdx + 1).trim().replace(/^["']|["']$/g, '');
-    if (!process.env[key]) process.env[key] = val; // Don't override existing env
-  }
-} catch { /* No .env file — that's fine */ }
-import { EngramStore } from './storage/sqlite.js';
-import { ActivationEngine } from './engine/activation.js';
-import { ConnectionEngine } from './engine/connections.js';
-import { StagingBuffer } from './engine/staging.js';
-import { EvictionEngine } from './engine/eviction.js';
-import { RetractionEngine } from './engine/retraction.js';
-import { EvalEngine } from './engine/eval.js';
-import { ConsolidationEngine } from './engine/consolidation.js';
-import { ConsolidationScheduler } from './engine/consolidation-scheduler.js';
-import { registerRoutes } from './api/routes.js';
-import { DEFAULT_AGENT_CONFIG } from './types/agent.js';
-import { getEmbedder } from './core/embeddings.js';
-import { getReranker } from './core/reranker.js';
-import { getExpander } from './core/query-expander.js';
-import { initLogger } from './core/logger.js';
-import { openStore, getConfiguredBackend, type StoreBackend } from './storage/factory.js';
-import type { IEngramStore } from './storage/store.js';
-
-const PORT = parseInt(process.env.AWM_PORT ?? '8400', 10);
-const BACKEND: StoreBackend = getConfiguredBackend();
-const DB_PATH = process.env.AWM_DB_PATH ?? (BACKEND === 'pglite' ? 'memory-pglite' : 'memory.db');
-const API_KEY = process.env.AWM_API_KEY ?? null;
-
-async function main() {
-  // Auto-backup: copy DB to backups/ on startup (SQLite-only; PGlite is a
-  // directory and is backed up by snapshot/replication at the OS level).
-  if (BACKEND === 'sqlite' && existsSync(DB_PATH)) {
-    const dbDir = dirname(resolve(DB_PATH));
-    const backupDir = resolve(dbDir, 'backups');
-    mkdirSync(backupDir, { recursive: true });
-    const ts = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19);
-    const backupPath = resolve(backupDir, `${basename(DB_PATH, '.db')}-${ts}.db`);
-    try {
-      copyFileSync(resolve(DB_PATH), backupPath);
-      console.log(`Backup: ${backupPath}`);
-    } catch (err) {
-      console.log(`Backup skipped: ${(err as Error).message}`);
-    }
-  }
-
-  // Logger — write activity to awm.log alongside the DB
-  initLogger(DB_PATH);
-
-  // Storage — backend-agnostic open via the factory.
-  // Some routes (export, coordination health) are still SQLite-only and
-  // gracefully return 501 / skip when running on PGlite.
-  const { store: storeAny } = await openStore();
-  const store = storeAny as unknown as EngramStore;
-
-  // Integrity check — SQLite-only. PGlite has its own consistency model.
-  const integrity = BACKEND === 'sqlite'
-    ? store.integrityCheck()
-    : { ok: true, result: 'pglite: skipped' };
-  if (!integrity.ok) {
-    console.error(`DB integrity check FAILED: ${integrity.result}`);
-    // Close corrupt DB, restore from backup, and exit for process manager to restart
-    store.close();
-    const dbDir = dirname(resolve(DB_PATH));
-    const backupDir = resolve(dbDir, 'backups');
-    if (existsSync(backupDir)) {
-      const backups = readdirSync(backupDir)
-        .filter(f => f.endsWith('.db'))
-        .sort()
-        .reverse();
-      if (backups.length > 0) {
-        const restorePath = resolve(backupDir, backups[0]);
-        console.error(`Attempting restore from: ${restorePath}`);
-        try {
-          copyFileSync(restorePath, resolve(DB_PATH));
-          console.error('Restore complete — exiting for restart with restored DB');
-          process.exit(1);
-        } catch (restoreErr) {
-          console.error(`Restore failed: ${(restoreErr as Error).message}`);
-        }
-      }
-    }
-    console.error('No backup available — continuing with potentially corrupt DB');
-  } else {
-    console.log('  DB integrity check: ok');
-  }
-
-  // Engines
-  const activationEngine = new ActivationEngine(store);
-  const connectionEngine = new ConnectionEngine(store, activationEngine);
-  const stagingBuffer = new StagingBuffer(store, activationEngine);
-  const evictionEngine = new EvictionEngine(store);
-  const retractionEngine = new RetractionEngine(store);
-  const evalEngine = new EvalEngine(store);
-  const consolidationEngine = new ConsolidationEngine(store, connectionEngine);
-  const consolidationScheduler = new ConsolidationScheduler(store, consolidationEngine);
-
-  // API — disable Fastify's default request logging (too noisy for hive polling)
-  // bodyLimit: 512KB to prevent Content-Length mismatch errors with large task payloads
-  const app = Fastify({ logger: false, bodyLimit: 512_000 });
-
-  // Bearer token auth — only enforced when AWM_API_KEY is explicitly set and non-empty
-  if (API_KEY && API_KEY !== 'NONE' && API_KEY.length > 1) {
-    app.addHook('onRequest', async (req, reply) => {
-      if (req.url === '/health') return; // Health check is always public
-      const bearer = req.headers.authorization;
-      const xApiKey = req.headers['x-api-key'] as string | undefined;
-      if (bearer === `Bearer ${API_KEY}` || xApiKey === API_KEY) return;
-      reply.code(401).send({ error: 'Unauthorized' });
-    });
-    console.log('API key auth enabled (AWM_API_KEY set)');
-  }
-
-  registerRoutes(app, {
-    store, activationEngine, connectionEngine,
-    evictionEngine, retractionEngine, evalEngine,
-    consolidationEngine, consolidationScheduler,
-  });
-
-  // Coordination module (opt-in via AWM_COORDINATION=true) — SQLite-only.
-  const { isCoordinationEnabled, initCoordination, stopCoordinationCleanup } = await import('./coordination/index.js');
-  if (isCoordinationEnabled() && BACKEND === 'sqlite') {
-    initCoordination(app, store.getDb(), store);
-  } else if (isCoordinationEnabled()) {
-    console.log(`  Coordination requested but disabled — requires SQLite backend (current: ${BACKEND})`);
-  } else {
-    console.log('  Coordination module disabled (set AWM_COORDINATION=true to enable)');
-  }
-
-  // Background tasks
-  stagingBuffer.start(DEFAULT_AGENT_CONFIG.stagingTtlMs);
-  consolidationScheduler.start();
-
-  // Periodic hot backup every 10 minutes (keep last 6 = 1hr coverage)
-  const dbDir = dirname(resolve(DB_PATH));
-  const backupDir = resolve(dbDir, 'backups');
-  mkdirSync(backupDir, { recursive: true });
-
-  // Cleanup old backups on startup (older than 2 hours)
-  try {
-    const TWO_HOURS_MS = 2 * 60 * 60 * 1000;
-    const now = Date.now();
-    for (const f of readdirSync(backupDir).filter(f => f.endsWith('.db'))) {
-      const match = f.match(/(\d{4})-(\d{2})-(\d{2})T(\d{2})-(\d{2})-(\d{2})/);
-      if (match) {
-        const fileDate = new Date(`${match[1]}-${match[2]}-${match[3]}T${match[4]}:${match[5]}:${match[6]}Z`);
-        if (now - fileDate.getTime() > TWO_HOURS_MS) {
-          unlinkSync(resolve(backupDir, f));
-        }
-      }
-    }
-  } catch { /* cleanup is non-fatal */ }
-
-  // Periodic hot backup — SQLite-only. PGlite directory backups are an OS-level concern.
-  const backupTimer: ReturnType<typeof setInterval> | null = BACKEND === 'sqlite' ? setInterval(() => {
-    try {
-      const ts = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19);
-      const backupPath = resolve(backupDir, `${basename(DB_PATH, '.db')}-${ts}.db`);
-      store.backup(backupPath);
-      // Prune: keep only last 6 backups
-      const backups = readdirSync(backupDir).filter(f => f.endsWith('.db')).sort();
-      while (backups.length > 6) {
-        const old = backups.shift()!;
-        try { unlinkSync(resolve(backupDir, old)); } catch { /* non-fatal */ }
-      }
-    } catch (err) {
-      console.warn(`[backup] failed: ${(err as Error).message}`);
-    }
-  }, 10 * 60_000) : null;
-
-  // Pre-load ML models (downloads on first run: embeddings ~22MB, reranker ~22MB, expander ~80MB)
-  getEmbedder().catch(err => console.warn('Embedding model unavailable:', err.message));
-  getReranker().catch(err => console.warn('Reranker model unavailable:', err.message));
-  getExpander().catch(err => console.warn('Query expander model unavailable:', err.message));
-
-  if (BACKEND === 'sqlite') {
-    setImmediate(() => {
-      try {
-        const t0 = Date.now();
-        store.warmSlimCache();
-        const stats = store.getSlimCacheStats();
-        console.log(`  Slim cache warmed: ${stats.size} entries in ${Date.now() - t0}ms`);
-      } catch (err) {
-        console.warn(`  Slim cache warm failed: ${(err as Error).message}`);
-      }
-    });
-  }
-
-  // Start server
-  await app.listen({ port: PORT, host: '0.0.0.0' });
-  console.log(`AgentWorkingMemory v${VERSION} listening on port ${PORT}`);
-
-  // Graceful shutdown
-  const shutdown = async () => {
-    if (backupTimer) clearInterval(backupTimer);
-    await stopCoordinationCleanup();
-    consolidationScheduler.stop();
-    stagingBuffer.stop();
-    if (BACKEND === 'sqlite') {
-      try { store.walCheckpoint(); } catch { /* non-fatal */ }
-    }
-    try { await (store as any).close?.(); } catch { /* best-effort */ }
-    process.exit(0);
-  };
-  process.on('SIGINT', shutdown);
-  process.on('SIGTERM', shutdown);
-}
-
-main().catch(err => {
-  console.error('Failed to start:', err);
-  process.exit(1);
-});
+// Copyright 2026 Robert Winter / Complete Ideas
+// SPDX-License-Identifier: Apache-2.0
+import { readFileSync, copyFileSync, existsSync, mkdirSync, readdirSync, unlinkSync } from 'node:fs';
+import { resolve, dirname, basename } from 'node:path';
+import Fastify from 'fastify';
+import { VERSION } from './version.js';
+
+// Load .env file if present (no external dependency)
+try {
+  const envPath = resolve(process.cwd(), '.env');
+  const envContent = readFileSync(envPath, 'utf-8');
+  for (const line of envContent.split('\n')) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith('#')) continue;
+    const eqIdx = trimmed.indexOf('=');
+    if (eqIdx === -1) continue;
+    const key = trimmed.slice(0, eqIdx).trim();
+    const val = trimmed.slice(eqIdx + 1).trim().replace(/^["']|["']$/g, '');
+    if (!process.env[key]) process.env[key] = val; // Don't override existing env
+  }
+} catch { /* No .env file — that's fine */ }
+import { EngramStore } from './storage/sqlite.js';
+import { ActivationEngine } from './engine/activation.js';
+import { ConnectionEngine } from './engine/connections.js';
+import { StagingBuffer } from './engine/staging.js';
+import { startLoopLagMonitor } from './core/write-telemetry.js';
+import { EvictionEngine } from './engine/eviction.js';
+import { RetractionEngine } from './engine/retraction.js';
+import { EvalEngine } from './engine/eval.js';
+import { ConsolidationEngine } from './engine/consolidation.js';
+import { ConsolidationScheduler } from './engine/consolidation-scheduler.js';
+import { registerRoutes } from './api/routes.js';
+import { DEFAULT_AGENT_CONFIG } from './types/agent.js';
+import { getEmbedder } from './core/embeddings.js';
+import { getReranker } from './core/reranker.js';
+import { getExpander } from './core/query-expander.js';
+import { initLogger } from './core/logger.js';
+import { openStore, getConfiguredBackend, type StoreBackend } from './storage/factory.js';
+import type { IEngramStore } from './storage/store.js';
+
+const PORT = parseInt(process.env.AWM_PORT ?? '8400', 10);
+const BACKEND: StoreBackend = getConfiguredBackend();
+const DB_PATH = process.env.AWM_DB_PATH ?? (BACKEND === 'pglite' ? 'memory-pglite' : 'memory.db');
+const API_KEY = process.env.AWM_API_KEY ?? null;
+
+// D2 (2026-07-30) security defaults: bind loopback unless AWM_BIND widens it.
+// Widening without an API key is refused (fail-closed) — a local-first store
+// on hotel Wi-Fi must not be one env var away from an open network listener.
+// Escape hatch for trusted networks: AWM_ALLOW_INSECURE=1.
+const HOST = process.env.AWM_BIND ?? '127.0.0.1';
+const LOOPBACK_HOSTS = new Set(['127.0.0.1', 'localhost', '::1']);
+if (!LOOPBACK_HOSTS.has(HOST)
+  && !(API_KEY && API_KEY !== 'NONE' && API_KEY.length > 1)
+  && process.env.AWM_ALLOW_INSECURE !== '1') {
+  console.error(
+    `AWM refusing to start: AWM_BIND=${HOST} exposes the API beyond loopback with no AWM_API_KEY set. ` +
+    'Set AWM_API_KEY, or AWM_ALLOW_INSECURE=1 to override on a trusted network.',
+  );
+  process.exit(1);
+}
+
+async function main() {
+  // Auto-backup: copy DB to backups/ on startup (SQLite-only; PGlite is a
+  // directory and is backed up by snapshot/replication at the OS level).
+  if (BACKEND === 'sqlite' && existsSync(DB_PATH)) {
+    const dbDir = dirname(resolve(DB_PATH));
+    const backupDir = resolve(dbDir, 'backups');
+    mkdirSync(backupDir, { recursive: true });
+    const ts = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19);
+    const backupPath = resolve(backupDir, `${basename(DB_PATH, '.db')}-${ts}.db`);
+    try {
+      copyFileSync(resolve(DB_PATH), backupPath);
+      console.log(`Backup: ${backupPath}`);
+    } catch (err) {
+      console.log(`Backup skipped: ${(err as Error).message}`);
+    }
+  }
+
+  // Logger — write activity to awm.log alongside the DB
+  initLogger(DB_PATH);
+
+  // Storage — backend-agnostic open via the factory.
+  // Some routes (export, coordination health) are still SQLite-only and
+  // gracefully return 501 / skip when running on PGlite.
+  const { store: storeAny } = await openStore();
+  const store = storeAny as unknown as EngramStore;
+
+  // Integrity check — SQLite-only. PGlite has its own consistency model.
+  const integrity = BACKEND === 'sqlite'
+    ? store.integrityCheck()
+    : { ok: true, result: 'pglite: skipped' };
+  if (!integrity.ok) {
+    console.error(`DB integrity check FAILED: ${integrity.result}`);
+    // Close corrupt DB, restore from backup, and exit for process manager to restart
+    store.close();
+    const dbDir = dirname(resolve(DB_PATH));
+    const backupDir = resolve(dbDir, 'backups');
+    if (existsSync(backupDir)) {
+      const backups = readdirSync(backupDir)
+        .filter(f => f.endsWith('.db'))
+        .sort()
+        .reverse();
+      if (backups.length > 0) {
+        const restorePath = resolve(backupDir, backups[0]);
+        console.error(`Attempting restore from: ${restorePath}`);
+        try {
+          copyFileSync(restorePath, resolve(DB_PATH));
+          console.error('Restore complete — exiting for restart with restored DB');
+          process.exit(1);
+        } catch (restoreErr) {
+          console.error(`Restore failed: ${(restoreErr as Error).message}`);
+        }
+      }
+    }
+    console.error('No backup available — continuing with potentially corrupt DB');
+  } else {
+    console.log('  DB integrity check: ok');
+  }
+
+  // Engines
+  const activationEngine = new ActivationEngine(store);
+  const connectionEngine = new ConnectionEngine(store, activationEngine);
+  const stagingBuffer = new StagingBuffer(store, activationEngine);
+  const evictionEngine = new EvictionEngine(store);
+  const retractionEngine = new RetractionEngine(store);
+  const evalEngine = new EvalEngine(store);
+  const consolidationEngine = new ConsolidationEngine(store, connectionEngine);
+  const consolidationScheduler = new ConsolidationScheduler(store, consolidationEngine);
+
+  // API — disable Fastify's default request logging (too noisy for hive polling)
+  // bodyLimit: 512KB to prevent Content-Length mismatch errors with large task payloads
+  const app = Fastify({ logger: false, bodyLimit: 512_000 });
+
+  // Bearer token auth — only enforced when AWM_API_KEY is explicitly set and non-empty
+  if (API_KEY && API_KEY !== 'NONE' && API_KEY.length > 1) {
+    app.addHook('onRequest', async (req, reply) => {
+      if (req.url === '/health') return; // Health check is always public
+      const bearer = req.headers.authorization;
+      const xApiKey = req.headers['x-api-key'] as string | undefined;
+      if (bearer === `Bearer ${API_KEY}` || xApiKey === API_KEY) return;
+      reply.code(401).send({ error: 'Unauthorized' });
+    });
+    console.log('API key auth enabled (AWM_API_KEY set)');
+  }
+
+  registerRoutes(app, {
+    store, activationEngine, connectionEngine,
+    evictionEngine, retractionEngine, evalEngine,
+    consolidationEngine, consolidationScheduler,
+  });
+
+  // Coordination module (opt-in via AWM_COORDINATION=true) — SQLite-only.
+  const { isCoordinationEnabled, initCoordination, stopCoordinationCleanup } = await import('./coordination/index.js');
+  if (isCoordinationEnabled() && BACKEND === 'sqlite') {
+    initCoordination(app, store.getDb(), store);
+    if (process.env.AWM_COORD_REQUIRE_TOKENS !== '1') {
+      console.log('  Coordination: session tokens optional (set AWM_COORD_REQUIRE_TOKENS=1 to require them)');
+    }
+  } else if (isCoordinationEnabled()) {
+    console.log(`  Coordination requested but disabled — requires SQLite backend (current: ${BACKEND})`);
+  } else {
+    console.log('  Coordination module disabled (set AWM_COORDINATION=true to enable)');
+  }
+
+  // Background tasks
+  stagingBuffer.start(DEFAULT_AGENT_CONFIG.stagingTtlMs);
+  consolidationScheduler.start();
+  startLoopLagMonitor();
+
+  // Periodic hot backup every 10 minutes (keep last 6 = 1hr coverage)
+  const dbDir = dirname(resolve(DB_PATH));
+  const backupDir = resolve(dbDir, 'backups');
+  mkdirSync(backupDir, { recursive: true });
+
+  // Cleanup old backups on startup (older than 2 hours)
+  try {
+    const TWO_HOURS_MS = 2 * 60 * 60 * 1000;
+    const now = Date.now();
+    for (const f of readdirSync(backupDir).filter(f => f.endsWith('.db'))) {
+      const match = f.match(/(\d{4})-(\d{2})-(\d{2})T(\d{2})-(\d{2})-(\d{2})/);
+      if (match) {
+        const fileDate = new Date(`${match[1]}-${match[2]}-${match[3]}T${match[4]}:${match[5]}:${match[6]}Z`);
+        if (now - fileDate.getTime() > TWO_HOURS_MS) {
+          unlinkSync(resolve(backupDir, f));
+        }
+      }
+    }
+  } catch { /* cleanup is non-fatal */ }
+
+  // Periodic hot backup — SQLite-only. PGlite directory backups are an OS-level concern.
+  const backupTimer: ReturnType<typeof setInterval> | null = BACKEND === 'sqlite' ? setInterval(() => {
+    try {
+      const ts = new Date().toISOString().replace(/[:.]/g, '-').slice(0, 19);
+      const backupPath = resolve(backupDir, `${basename(DB_PATH, '.db')}-${ts}.db`);
+      store.backup(backupPath);
+      // Prune: keep only last 6 backups
+      const backups = readdirSync(backupDir).filter(f => f.endsWith('.db')).sort();
+      while (backups.length > 6) {
+        const old = backups.shift()!;
+        try { unlinkSync(resolve(backupDir, old)); } catch { /* non-fatal */ }
+      }
+    } catch (err) {
+      console.warn(`[backup] failed: ${(err as Error).message}`);
+    }
+  }, 10 * 60_000) : null;
+
+  // Pre-load ML models (downloads on first run: embeddings ~22MB, reranker ~22MB, expander ~80MB)
+  getEmbedder().catch(err => console.warn('Embedding model unavailable:', err.message));
+  getReranker().catch(err => console.warn('Reranker model unavailable:', err.message));
+  getExpander().catch(err => console.warn('Query expander model unavailable:', err.message));
+
+  if (BACKEND === 'sqlite') {
+    setImmediate(() => {
+      try {
+        const t0 = Date.now();
+        store.warmSlimCache();
+        const stats = store.getSlimCacheStats();
+        console.log(`  Slim cache warmed: ${stats.size} entries in ${Date.now() - t0}ms`);
+      } catch (err) {
+        console.warn(`  Slim cache warm failed: ${(err as Error).message}`);
+      }
+    });
+  }
+
+  // Start server
+  await app.listen({ port: PORT, host: HOST });
+  console.log(`AgentWorkingMemory v${VERSION} listening on ${HOST}:${PORT}`);
+
+  // Graceful shutdown
+  const shutdown = async () => {
+    if (backupTimer) clearInterval(backupTimer);
+    await stopCoordinationCleanup();
+    consolidationScheduler.stop();
+    stagingBuffer.stop();
+    if (BACKEND === 'sqlite') {
+      try { store.walCheckpoint(); } catch { /* non-fatal */ }
+    }
+    try { await (store as any).close?.(); } catch { /* best-effort */ }
+    process.exit(0);
+  };
+  process.on('SIGINT', shutdown);
+  process.on('SIGTERM', shutdown);
+}
+
+main().catch(err => {
+  console.error('Failed to start:', err);
+  process.exit(1);
+});