Enforce the contract crate's dependency rule, and the minimal build (#18 §D3/§D4)

.github/workflows/ci.yml

@@ -49,6 +49,62 @@ jobs:
       - name: Test default features
         run: cargo test
 
+      # The adapter's `memory-git` feature gates the diff family, and the test
+      # that the family is *withheld* without it is `#[cfg(not(feature =
+      # "memory-git"))]`. Both the `--all-features` and default runs above
+      # compile that test out, so without this step it would be checked by
+      # nothing — a feature-gated test whose default fate is to be built by one
+      # job and executed by none.
+      #
+      # This is also the configuration that keeps the promise the feature
+      # exists for: no `git2` / `libgit2-sys` in the graph.
+      # `api/Cargo.toml` spells out this exact command in a comment and asks
+      # that the contract crate never link a storage engine, a native library,
+      # an HTTP client, or an async runtime. It was left as a comment, so
+      # nothing checked it — and a forbidden dependency arrives transitively,
+      # through a feature someone enabled two crates away, which is precisely
+      # the way nobody notices.
+      #
+      # The FORWARD form is required. `cargo tree -i <crate> -p tinymemory-api`
+      # discards the `-p` scope, prints the whole-workspace inverse tree, and
+      # exits 0 looking clean even when this crate is the one at fault. The
+      # manifest says so; this runs what it says.
+      - name: Assert the contract crate stays free of heavy dependencies
+        run: |
+          forbidden="$(cargo tree -p tinymemory-api -e normal,build --prefix none \
+            | grep -Ei 'rusqlite|libsqlite|git2|reqwest|regex|tokio' || true)"
+          if [ -n "$forbidden" ]; then
+            echo "tinymemory-api pulled in a dependency its manifest forbids:" >&2
+            echo "$forbidden" >&2
+            echo >&2
+            echo "The contract is what hosts compile against. It must stay free of" >&2
+            echo "storage engines, native libraries, HTTP clients and async runtimes." >&2
+            exit 1
+          fi
+
+      # The minimal build has to stay genuinely usable, not merely compile:
+      # a host that wants the ports wired and nothing retained must be able to
+      # bind the null driver without pulling an engine in behind it.
+      - name: Build and bind the minimal configuration
+        run: |
+          cargo build -p tinymemory --no-default-features
+          cargo test -p tinymemory --no-default-features --test null_provider
+
+      - name: Lint and test the adapter without its optional engine features
+        run: |
+          cargo clippy -p tinymemory-tinycortex --all-targets --no-default-features -- -D warnings
+          cargo test -p tinymemory-tinycortex --no-default-features
+
+      - name: Assert the default adapter build links no native git
+        run: |
+          linked="$(cargo tree -p tinymemory-tinycortex --no-default-features \
+            -e normal --prefix none | grep -cE '^(git2|libgit2-sys)' || true)"
+          if [ "$linked" -ne 0 ]; then
+            echo "the default adapter build linked $linked native-git crate(s);" >&2
+            echo "the memory-git feature exists to keep them out" >&2
+            exit 1
+          fi
+
   # The module crate is its own workspace root (see the `exclude` note in the
   # root Cargo.toml), so NONE of the steps above touch it: `--all-targets`,
   # `--all-features` and `--workspace` all stop at the workspace boundary and

.gitignore

@@ -6,6 +6,12 @@ target/
 **/*.rs.bk
 *.pdb
 
+# Stray build artifacts. Two 3.6 MB Linux ELF executables with debug info were
+# committed at the repository root before this entry existed; both were produced
+# by an ad-hoc build, referenced by nothing, and carried in every clone.
+/rust_out
+/tmp
+
 # Coverage output
 /coverage/
 *.profraw

Cargo.toml

@@ -1,6 +1,6 @@
 [workspace]
-members = [".", "api", "core", "adapters/tinycortex", "adapters/remote"]
-default-members = [".", "api", "core", "adapters/tinycortex", "adapters/remote"]
+members = [".", "api", "core", "adapters/tinycortex", "adapters/remote", "conformance"]
+default-members = [".", "api", "core", "adapters/tinycortex", "adapters/remote", "conformance"]
 # `vendor/` holds engine submodules (tinycortex, tinybus, tinyagents), each of
 # which is its own workspace with its own lockfile. Same exclusion
 # `vendor/tinycortex` uses for its own nested vendor directory.
@@ -72,6 +72,13 @@ serde = { version = "1", features = ["derive"] }
 [dev-dependencies]
 # The mandatory-family tests are async.
 tokio = { version = "1", features = ["macros", "rt-multi-thread"] }
+# `TestHostConfig`, for the driver-selection tests. A dev-dependency: the
+# facade must not carry a test double into a consumer's graph.
+tinymemory-api = { path = "api", features = ["test-support"] }
+# The reference driver and the behavioural suite, for the workspace-level
+# integration tests. A dev-dependency only: the facade must not carry a test
+# harness into a consumer's dependency graph.
+tinymemory-conformance = { path = "conformance" }
 
 [features]
 default = []

README.md

@@ -21,14 +21,30 @@ src/
 │                       binds as, and the fail-closed external-driver gate
 └── mandatory/          the three mandatory capability families, composed once
                         over the `Memory` storage trait
+core/                   tinymemory-core — the substance: ingestion, the summary
+                        tree, chunk storage, entities, the graph, the diff
+                        ledger, goals, tool-memory, and the Composio sync layer.
+                        The largest crate here by a wide margin, and the one a
+                        real host actually depends on. Unlike `api/` it is not
+                        dependency-light: today it links the TinyCortex engine,
+                        a bundled SQLite, and an HTTP stack unconditionally.
 adapters/
 ├── tinycortex/         the TinyCortex engine seen through the contract
 └── remote/             native HTTP dialects for Supermemory, Mem0, and Cognee
+crates/
+└── tinymemory-module/  the TinyBus loadable-module driver. Excluded from the
+                        workspace on purpose — see the note in `Cargo.toml`.
 vendor/
 ├── tinycortex/         the engine, pinned as a submodule
+├── tinyagents/         pinned TinyAgents submodule
 └── tinybus/            pinned TinyBus submodule
 ```
 
+Run `git submodule update --init --recursive` after cloning. Nothing in the
+workspace builds without it — `core` names `tinyagents` and `tinycortex` by
+path through `vendor/`, so an uninitialized checkout fails at manifest
+resolution rather than at compile time, which reads as a confusing error.
+
 ## The contract
 
 `MemoryProvider` is an object-safe trait with **three mandatory** capability

adapters/remote/Cargo.toml

@@ -3,7 +3,7 @@ name = "tinymemory-remote"
 publish = false
 version = "0.1.0"
 edition = "2021"
-rust-version = "1.85"
+rust-version = "1.96"
 license = "MIT"
 description = "HTTP adapters for self-hosted Supermemory, Mem0, and Cognee"
 repository = "https://github.com/tinyhumansai/tinymemory"

adapters/tinycortex/Cargo.toml

@@ -6,7 +6,7 @@ name = "tinymemory-tinycortex"
 publish = false
 version = "0.1.0"
 edition = "2021"
-rust-version = "1.85"
+rust-version = "1.96"
 license = "MIT"
 description = "TinyCortex engine adapter for the TinyMemory contract"
 repository = "https://github.com/tinyhumansai/tinymemory"
@@ -22,6 +22,28 @@ tinymemory-api = { path = "../../api" }
 # would defeat that and give a host two TinyCortex crates with two incompatible
 # `Memory` traits.
 tinycortex = { version = "0.1", default-features = false }
+# The optional capability families lifted here in issue #18 §C3 delegate to
+# `tinymemory-core` on a blocking thread — that is where the summary tree,
+# chunk store, entities, graph and diff ledger actually live. Depending on it
+# makes this adapter heavier than the mandatory-only version it replaces; §D
+# feature-gates that weight once §A3 has removed the direct engine call sites
+# core still has.
+tinymemory-core = { path = "../../core" }
+# `spawn_blocking`: every family method runs synchronous engine work off the
+# async executor rather than blocking it.
+tokio = { version = "1", features = ["rt"] }
+# Timestamps on ingest and diff records.
+chrono = { version = "0.4", features = ["serde"] }
+# The provider crosses a few value types by round-tripping them through JSON
+# where the engine and the contract describe the same shape under two names —
+# the duplication issue #18 §A1 exists to delete.
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+# Person ids are UUIDs on the engine side.
+uuid = { version = "1", features = ["v4"] }
+# The engine reports a failed profile write through the `log` facade rather
+# than returning it, so the host can decide what to do about it.
+log = "0.4"
 
 # `Memory` is an object-safe async trait.
 async-trait = "0.1"
@@ -43,3 +65,16 @@ unwrap_used = "warn"
 expect_used = "warn"
 panic = "warn"
 missing_errors_doc = "warn"
+
+[features]
+default = []
+# Git-backed diff snapshots, forwarded to `tinymemory-core`'s own gate. Off by
+# default because it is what drags `git2` / `libgit2-sys` / `libz-sys` — a
+# native build — into the graph. This adapter had no such dependency before
+# issue #18 §C3 lifted the diff family here, and making it unconditional would
+# hand every consumer a libgit2 build they never asked for.
+#
+# The gate reaches `capabilities()`: with the feature off the `Diff` family is
+# neither advertised nor reachable, so `audit_provider` still passes. Advertising
+# a family the build cannot serve is exactly what that audit exists to catch.
+memory-git = ["tinymemory-core/memory-git"]