Fix empty RPC bodies (usage and memory touches); stop publishing the API schema

brain/app.py

@@ -57,8 +57,15 @@ def create_app(deps: Deps | None = None) -> FastAPI:
         yield
         await app.state.deps.aclose()
 
+    # No docs pages and no published schema: scanners request /openapi.json within hours of a
+    # Space going public, and the list of routes is theirs to guess, not ours to hand over.
     app = FastAPI(
-        title="Prova brain", version=__version__, lifespan=lifespan, docs_url=None, redoc_url=None
+        title="Prova brain",
+        version=__version__,
+        lifespan=lifespan,
+        docs_url=None,
+        redoc_url=None,
+        openapi_url=None,
     )
     app.state.deps = deps
 

brain/store/supabase.py

@@ -103,7 +103,8 @@ class SupabaseStore:
 
     async def _rpc(self, function: str, args: Row) -> Any:
         response = await self._request("POST", f"rpc/{function}", json=args)
-        return response.json()
+        # A function that returns nothing (bump_usage, touch_memories) answers 204 with no body.
+        return response.json() if response.content else None
 
     # --- Login sessions -----------------------------------------------------