feat(memory): port the memory engine behind the TinyMemory module

.github/workflows/ci-lite.yml

@@ -478,6 +478,13 @@ jobs:
         # (#5022). This step executes the gate-contract test modules so that class of
         # regression fails CI, not just a local pre-push.
         #
+        # `memory::people::address_book::tests` used to be here and was removed: the
+        # address-book tests moved into the tinycortex dependency crate with the code
+        # they cover, and a dependency's unit tests are not collected by this crate's
+        # `--lib` harness — so the filter matched zero tests while reading like
+        # coverage. `contacts_gate_tests` is the live replacement (its off-macOS arm
+        # compiles on Linux, which is where this lane runs).
+        #
         # Scope is deliberate: the full gates-off `--lib` run aborts on a pre-existing
         # task_local stack overflow (`agent::harness::session::tests::
         # turn_dispatches_spawn_subagent_through_full_path`) that reproduces in the
@@ -486,7 +493,7 @@ jobs:
         run: |
           bash scripts/ci-cancel-aware.sh cargo test --manifest-path Cargo.toml \
             --no-default-features --lib -- \
-            core::all:: core::cli:: core::jsonrpc:: core::legacy_aliases:: core::runtime:: agent::registry::agents::loader:: memory::people::address_book::tests:: openhuman::config:: openhuman::platform::socket::event_handlers:: tools::schemas:: tools::ops::tests::
+            core::all:: core::cli:: core::jsonrpc:: core::legacy_aliases:: core::runtime:: agent::registry::agents::loader:: memory::people::contacts_gate_tests:: openhuman::config:: openhuman::platform::socket::event_handlers:: tools::schemas:: tools::ops::tests::
           bash scripts/ci-cancel-aware.sh cargo test --manifest-path Cargo.toml \
             --no-default-features --features mcp --lib -- \
             mcp::server::resources::
@@ -540,6 +547,7 @@ jobs:
           openhuman/agent/registry/agents/loader.rs
           openhuman/config/migrations/retire_local_whisper_stt_tests.rs
           openhuman/mcp/server/resources.rs
+          openhuman/memory/people/mod.rs
           openhuman/platform/socket/event_handlers.rs
           openhuman/platform/socket/ops.rs
           openhuman/tinyplace/manifest.rs

Cargo.toml

@@ -542,15 +542,6 @@ windows-sys = { version = "0.61", features = [
 # default. Avoids pulling OpenSSL as a runtime dep on Linux.
 tokio-tungstenite = { version = "0.29", default-features = false, features = ["connect", "handshake", "rustls-tls-webpki-roots"] }
 
-[target.'cfg(target_os = "macos")'.dependencies]
-# Contacts framework bindings for address book seeding. Exclusive to
-# `memory::people::address_book` (verified: no other file in src/ names any of
-# the four), so the default-ON `contacts` feature sheds the whole cohort.
-objc2 = { version = "0.6", optional = true }
-objc2-foundation = { version = "0.3", features = ["NSArray", "NSError", "NSObject", "NSString", "NSPredicate"], optional = true }
-objc2-contacts = { version = "0.3.2", features = ["CNContact", "CNContactFetchRequest", "CNContactStore", "CNLabeledValue", "CNPhoneNumber"], optional = true }
-block2 = { version = "0.6", optional = true }
-
 [target.'cfg(target_os = "linux")'.dependencies]
 landlock = { version = "0.4", optional = true }
 rppal = { version = "0.22", optional = true }
@@ -854,7 +845,21 @@ runtime-node = ["dep:xz2"]
 # Verify the shed cross-target from any host:
 #   cargo tree --target aarch64-apple-darwin -e normal -i objc2-contacts \
 #     --no-default-features
-contacts = ["dep:objc2", "dep:objc2-foundation", "dep:objc2-contacts", "dep:block2"]
+#
+# ── This gate is FORWARDED, and it was silently broken before it was ─────────
+# The reader has never lived in this crate. It sits in the memory engine, and
+# this feature used to enable four `objc2` crates *here* — which no file in
+# `src/` names — while never reaching the crate that holds the `#[cfg]`. So the
+# macOS arm of `address_book.rs` was always compiled out: `SystemContactsSource`
+# returned the empty stub, `people.refresh_address_book` reported success having
+# seeded nothing, and macOS paid to compile four unused crates for the trouble.
+#
+# That is the exact soft-failure shape as `voice` (#4901) and
+# `tokenjuice-treesitter` (#4918): a gate that is not forwarded does not fail
+# the build, it just quietly does nothing. Hence the forward below, and
+# `contacts_feature_reaches_the_engine_reader` in `memory/people/mod.rs`, which
+# fails if this is ever flattened back into local `dep:` entries.
+contacts = ["tinymemory-core/contacts"]
 # Media-generation + image domains: the `media_generate_*` agent tools
 # (image/video via GMI through the backend) and the `openhuman::image` tool
 # contracts scaffold. Default-ON. Slim builds opt out via