api modified

brain/tests/test_login_routes.py

@@ -164,3 +164,9 @@ def test_health_says_whether_login_is_configured():
 
 def test_login_is_unavailable_when_no_service_is_wired():
     assert build(sessions=False).post("/auth/google", json=google_body()).status_code == 503
+
+
+def test_the_api_schema_and_docs_are_not_published():
+    client = build()
+    for path in ("/openapi.json", "/docs", "/redoc"):
+        assert client.get(path).status_code == 404

brain/tests/test_store_supabase.py

@@ -0,0 +1,59 @@
+"""SupabaseStore against a stand-in PostgREST: what it sends, and what it does with the answers."""
+
+import json
+from datetime import date
+
+import httpx
+
+from brain.persona.types import Mode, Scope
+from brain.store.supabase import SupabaseStore
+
+
+def store_with(handler):
+    client = httpx.AsyncClient(transport=httpx.MockTransport(handler))
+    return SupabaseStore("https://x.supabase.co", "service-key", client=client)
+
+
+async def test_a_function_that_returns_nothing_is_not_an_error():
+    # bump_usage and touch_memories return void, so PostgREST answers 204 with no body. Reading
+    # that as JSON raised on every chat turn: usage was never counted, and touching memories
+    # would have failed the reply itself.
+    seen: list[str] = []
+
+    def handler(request: httpx.Request) -> httpx.Response:
+        seen.append(request.url.path)
+        return httpx.Response(204)
+
+    store = store_with(handler)
+    await store.bump_usage("u1", date(2026, 9, 27), "chat", "gemini-3.5-flash-lite", 1)
+    await store.touch_memories("u1", ["m1", "m2"])
+    assert seen == ["/rest/v1/rpc/bump_usage", "/rest/v1/rpc/touch_memories"]
+
+
+async def test_touching_memories_sends_the_user_and_the_ids():
+    bodies: list[dict] = []
+
+    def handler(request: httpx.Request) -> httpx.Response:
+        bodies.append(json.loads(request.content))
+        return httpx.Response(204)
+
+    await store_with(handler).touch_memories("u1", ["m1"])
+    assert bodies == [{"p_user": "u1", "ids": ["m1"]}]
+
+
+async def test_touching_no_memories_makes_no_request():
+    calls: list[str] = []
+
+    def handler(request: httpx.Request) -> httpx.Response:
+        calls.append(request.url.path)
+        return httpx.Response(204)
+
+    await store_with(handler).touch_memories("u1", [])
+    assert calls == []
+
+
+async def test_a_function_that_returns_rows_is_still_read_as_json():
+    rows = [{"id": "m1", "content": "Karnak likes tea.", "scope": "shared", "score": 0.83}]
+    store = store_with(lambda request: httpx.Response(200, json=rows))
+    hits = await store.match_memories("u1", [0.1, 0.2], Mode.NORMAL, 5, 0.55)
+    assert [(h.id, h.scope, h.score) for h in hits] == [("m1", Scope.SHARED, 0.83)]