infra: migrate postgres to shared openbrain_brain-db instance

Remove the dedicated stack-postgres service and postgres_data volume.
Instead join the openbrain_brain-internal overlay network and connect
to openbrain_brain-db for all database operations.

- Add mosaic-db-init service to provision mosaic user/db in openbrain's postgres
- Update synapse-db-init to use BRAIN_DB_ADMIN_* credentials and openbrain_brain-db host
- Update api DATABASE_URL to openbrain_brain-db:5432
- Add openbrain-brain-internal as external network

Required new Portainer env vars:
  BRAIN_DB_ADMIN_USER (default: openbrain)
  BRAIN_DB_ADMIN_PASSWORD (openbrain stack's POSTGRES_PASSWORD)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.woodpecker/ci.yml

@@ -338,43 +338,41 @@ steps:
       - security-trivy-orchestrator
       - security-trivy-web
 
-  # ─── Deploy to Docker Swarm via Portainer API (main only) ─────────────────────
+  # ─── Deploy to Docker Swarm (main only) ─────────────────────
+
+  # ─── Deploy to Docker Swarm via Portainer (main only) ─────────────────────
 
   deploy-swarm:
     image: alpine:3
     environment:
+      SSH_PRIVATE_KEY:
+        from_secret: ssh_private_key
+      SSH_KNOWN_HOSTS:
+        from_secret: ssh_known_hosts
       PORTAINER_URL:
         from_secret: portainer_url
       PORTAINER_API_KEY:
         from_secret: portainer_api_key
-      PORTAINER_STACK_ID: "121"
     commands:
-      - apk add --no-cache curl
+      - apk add --no-cache curl openssh-client
       - |
         set -e
-        echo "🚀 Deploying to Docker Swarm via Portainer API..."
+        echo "🚀 Deploying to Docker Swarm..."
 
-        # Use Portainer API to update the stack (forces pull of new images)
-        RESPONSE=$(curl -s -w "\n%{http_code}" -X POST \
-          -H "X-API-Key: $PORTAINER_API_KEY" \
-          -H "Content-Type: application/json" \
-          "$PORTAINER_URL/api/stacks/$PORTAINER_STACK_ID/git/redeploy")
+        # Setup SSH for fallback
+        mkdir -p ~/.ssh
+        echo "$SSH_KNOWN_HOSTS" > ~/.ssh/known_hosts
+        chmod 600 ~/.ssh/known_hosts
+        echo "$SSH_PRIVATE_KEY" > ~/.ssh/id_ed25519
+        chmod 600 ~/.ssh/id_ed25519
 
-        HTTP_CODE=$(echo "$RESPONSE" | tail -1)
-        BODY=$(echo "$RESPONSE" | head -n -1)
-
-        if [ "$HTTP_CODE" = "200" ] || [ "$HTTP_CODE" = "202" ]; then
-          echo "✅ Stack update triggered successfully"
-        else
-          echo "❌ Stack update failed (HTTP $HTTP_CODE)"
-          echo "$BODY"
-          exit 1
-        fi
-
-        # Wait for services to converge
-        echo "⏳ Waiting for services to converge..."
-        sleep 30
-        echo "✅ Deploy complete"
+        # Force service updates (images are pulled from public registry)
+        ssh -o StrictHostKeyChecking=no localadmin@10.1.1.45 \
+          "docker service update --with-registry-auth --force mosaic-stack-api && \
+           docker service update --with-registry-auth --force mosaic-stack-web && \
+           docker service update --with-registry-auth --force mosaic-stack-orchestrator && \
+           docker service update --with-registry-auth --force mosaic-stack-coordinator && \
+           echo '✅ All services updated'"
     when:
       - branch: [main]
         event: [push, manual, tag]

.woodpecker/ci.yml.new

@@ -1,46 +0,0 @@
-# Add this at the end of the file, replacing the deploy-swarm section
-
-  deploy-swarm:
-    image: alpine:3
-    environment:
-      SSH_PRIVATE_KEY:
-        from_secret: ssh_private_key
-      SSH_KNOWN_HOSTS:
-        from_secret: ssh_known_hosts
-      PORTAINER_URL:
-        from_secret: portainer_url
-      PORTAINER_API_KEY:
-        from_secret: portainer_api_key
-    commands:
-      - apk add --no-cache curl
-      - |
-        set -e
-        echo "🚀 Deploying via Portainer API..."
-        
-        # Redeploy mosaic-stack (ID 121)
-        curl -sk -X POST \
-          -H "X-API-Key: $PORTAINER_API_KEY" \
-          "$PORTAINER_URL/api/stacks/121/git/redeploy" \
-          -H "Content-Type: application/json" \
-          -d '{"prune": false}' || \
-        
-        # Fallback: Force service updates via SSH
-        echo "Trying SSH fallback..."
-        apk add --no-cache openssh-client
-        mkdir -p ~/.ssh
-        echo "$SSH_KNOWN_HOSTS" > ~/.ssh/known_hosts
-        chmod 600 ~/.ssh/known_hosts
-        echo "$SSH_PRIVATE_KEY" > ~/.ssh/id_ed25519
-        chmod 600 ~/.ssh/id_ed25519
-        
-        ssh -o StrictHostKeyChecking=no localadmin@10.1.1.45 \
-          "docker service update --force mosaic_api && \
-           docker service update --force mosaic_web && \
-           docker service update --force mosaic_orchestrator && \
-           docker service update --force mosaic_coordinator && \
-           echo '✅ Services updated'"
-    when:
-      - branch: [main]
-        event: [push, manual, tag]
-    depends_on:
-      - link-packages

apps/api/prisma/migrations/20260303000001_ms21_user_auth_fields/migration.sql

@@ -1,13 +0,0 @@
--- MS21: Add admin, local auth, and invitation fields to users table
--- These columns were added to schema.prisma but never captured in a migration.
-
-ALTER TABLE "users"
-  ADD COLUMN IF NOT EXISTS "deactivated_at" TIMESTAMPTZ,
-  ADD COLUMN IF NOT EXISTS "is_local_auth" BOOLEAN NOT NULL DEFAULT false,
-  ADD COLUMN IF NOT EXISTS "password_hash" TEXT,
-  ADD COLUMN IF NOT EXISTS "invited_by" UUID,
-  ADD COLUMN IF NOT EXISTS "invitation_token" TEXT,
-  ADD COLUMN IF NOT EXISTS "invited_at" TIMESTAMPTZ;
-
--- CreateIndex
-CREATE UNIQUE INDEX IF NOT EXISTS "users_invitation_token_key" ON "users"("invitation_token");

apps/api/src/chat-proxy/chat-proxy.controller.ts

@@ -1,79 +1,31 @@
-import { Body, Controller, HttpException, Logger, Post, Req, Res, UseGuards } from "@nestjs/common";
+import {
+  Body,
+  Controller,
+  HttpException,
+  Logger,
+  Post,
+  Req,
+  Res,
+  UnauthorizedException,
+  UseGuards,
+} from "@nestjs/common";
 import type { Response } from "express";
 import { AuthGuard } from "../auth/guards/auth.guard";
-import { SkipCsrf } from "../common/decorators/skip-csrf.decorator";
 import type { MaybeAuthenticatedRequest } from "../auth/types/better-auth-request.interface";
 import { ChatStreamDto } from "./chat-proxy.dto";
 import { ChatProxyService } from "./chat-proxy.service";
 
 @Controller("chat")
+@UseGuards(AuthGuard)
 export class ChatProxyController {
   private readonly logger = new Logger(ChatProxyController.name);
 
   constructor(private readonly chatProxyService: ChatProxyService) {}
 
-  // POST /api/chat/guest
-  // Guest chat endpoint - no authentication required
-  // Uses a shared LLM configuration for unauthenticated users
-  @SkipCsrf()
-  @Post("guest")
-  async guestChat(
-    @Body() body: ChatStreamDto,
-    @Req() req: MaybeAuthenticatedRequest,
-    @Res() res: Response
-  ): Promise<void> {
-    const abortController = new AbortController();
-    req.once("close", () => {
-      abortController.abort();
-    });
-
-    res.setHeader("Content-Type", "text/event-stream");
-    res.setHeader("Cache-Control", "no-cache");
-    res.setHeader("Connection", "keep-alive");
-    res.setHeader("X-Accel-Buffering", "no");
-
-    try {
-      const upstreamResponse = await this.chatProxyService.proxyGuestChat(
-        body.messages,
-        abortController.signal
-      );
-
-      const upstreamContentType = upstreamResponse.headers.get("content-type");
-      if (upstreamContentType) {
-        res.setHeader("Content-Type", upstreamContentType);
-      }
-
-      if (!upstreamResponse.body) {
-        throw new Error("LLM response did not include a stream body");
-      }
-
-      for await (const chunk of upstreamResponse.body as unknown as AsyncIterable<Uint8Array>) {
-        if (res.writableEnded || res.destroyed) {
-          break;
-        }
-
-        res.write(Buffer.from(chunk));
-      }
-    } catch (error: unknown) {
-      this.logStreamError(error);
-
-      if (!res.writableEnded && !res.destroyed) {
-        res.write("event: error\n");
-        res.write(`data: ${JSON.stringify({ error: this.toSafeClientMessage(error) })}\n\n`);
-      }
-    } finally {
-      if (!res.writableEnded && !res.destroyed) {
-        res.end();
-      }
-    }
-  }
-
   // POST /api/chat/stream
   // Request: { messages: Array<{role, content}> }
   // Response: SSE stream of chat completion events
-  // Requires authentication - uses user's personal OpenClaw container
   @Post("stream")
-  @UseGuards(AuthGuard)
   async streamChat(
     @Body() body: ChatStreamDto,
     @Req() req: MaybeAuthenticatedRequest,
@@ -81,8 +33,7 @@ export class ChatProxyController {
   ): Promise<void> {
     const userId = req.user?.id;
     if (!userId) {
-      this.logger.warn("streamChat called without user ID after AuthGuard");
-      throw new HttpException("Authentication required", 401);
+      throw new UnauthorizedException("No authenticated user found on request");
     }
 
     const abortController = new AbortController();

apps/api/src/chat-proxy/chat-proxy.module.ts

@@ -1,5 +1,4 @@
 import { Module } from "@nestjs/common";
-import { ConfigModule } from "@nestjs/config";
 import { AuthModule } from "../auth/auth.module";
 import { AgentConfigModule } from "../agent-config/agent-config.module";
 import { ContainerLifecycleModule } from "../container-lifecycle/container-lifecycle.module";
@@ -8,7 +7,7 @@ import { ChatProxyController } from "./chat-proxy.controller";
 import { ChatProxyService } from "./chat-proxy.service";
 
 @Module({
-  imports: [AuthModule, PrismaModule, ContainerLifecycleModule, AgentConfigModule, ConfigModule],
+  imports: [AuthModule, PrismaModule, ContainerLifecycleModule, AgentConfigModule],
   controllers: [ChatProxyController],
   providers: [ChatProxyService],
   exports: [ChatProxyService],

apps/api/src/chat-proxy/chat-proxy.service.ts

@@ -4,14 +4,11 @@ import {
   Logger,
   ServiceUnavailableException,
 } from "@nestjs/common";
-import { ConfigService } from "@nestjs/config";
 import { ContainerLifecycleService } from "../container-lifecycle/container-lifecycle.service";
 import { PrismaService } from "../prisma/prisma.service";
 import type { ChatMessage } from "./chat-proxy.dto";
 
 const DEFAULT_OPENCLAW_MODEL = "openclaw:default";
-const DEFAULT_GUEST_LLM_URL = "http://10.1.1.42:11434/v1";
-const DEFAULT_GUEST_LLM_MODEL = "llama3.2";
 
 interface ContainerConnection {
   url: string;
@@ -24,8 +21,7 @@ export class ChatProxyService {
 
   constructor(
     private readonly prisma: PrismaService,
-    private readonly containerLifecycle: ContainerLifecycleService,
-    private readonly config: ConfigService
+    private readonly containerLifecycle: ContainerLifecycleService
   ) {}
 
   // Get the user's OpenClaw container URL and mark it active.
@@ -83,65 +79,6 @@ export class ChatProxyService {
     }
   }
 
-  /**
-   * Proxy guest chat request to configured LLM endpoint.
-   * Uses environment variables for configuration:
-   * - GUEST_LLM_URL: OpenAI-compatible endpoint URL
-   * - GUEST_LLM_API_KEY: API key (optional, for cloud providers)
-   * - GUEST_LLM_MODEL: Model name to use
-   */
-  async proxyGuestChat(messages: ChatMessage[], signal?: AbortSignal): Promise<Response> {
-    const llmUrl = this.config.get<string>("GUEST_LLM_URL") ?? DEFAULT_GUEST_LLM_URL;
-    const llmApiKey = this.config.get<string>("GUEST_LLM_API_KEY");
-    const llmModel = this.config.get<string>("GUEST_LLM_MODEL") ?? DEFAULT_GUEST_LLM_MODEL;
-
-    const headers: Record<string, string> = {
-      "Content-Type": "application/json",
-    };
-
-    if (llmApiKey) {
-      headers.Authorization = `Bearer ${llmApiKey}`;
-    }
-
-    const requestInit: RequestInit = {
-      method: "POST",
-      headers,
-      body: JSON.stringify({
-        messages,
-        model: llmModel,
-        stream: true,
-      }),
-    };
-
-    if (signal) {
-      requestInit.signal = signal;
-    }
-
-    try {
-      this.logger.debug(`Guest chat proxying to ${llmUrl} with model ${llmModel}`);
-      const response = await fetch(`${llmUrl}/chat/completions`, requestInit);
-
-      if (!response.ok) {
-        const detail = await this.readResponseText(response);
-        const status = `${String(response.status)} ${response.statusText}`.trim();
-        this.logger.warn(
-          detail ? `Guest LLM returned ${status}: ${detail}` : `Guest LLM returned ${status}`
-        );
-        throw new BadGatewayException(`Guest LLM returned ${status}`);
-      }
-
-      return response;
-    } catch (error: unknown) {
-      if (error instanceof BadGatewayException) {
-        throw error;
-      }
-
-      const message = error instanceof Error ? error.message : String(error);
-      this.logger.warn(`Failed to proxy guest chat request: ${message}`);
-      throw new ServiceUnavailableException("Failed to proxy guest chat to LLM");
-    }
-  }
-
   private async getContainerConnection(userId: string): Promise<ContainerConnection> {
     const connection = await this.containerLifecycle.ensureRunning(userId);
     await this.containerLifecycle.touch(userId);

apps/web/src/components/chat/Chat.tsx

@@ -352,7 +352,7 @@ export const Chat = forwardRef<ChatRef, ChatProps>(function Chat(
         <div className="mx-auto max-w-4xl px-4 py-4 lg:px-8">
           <ChatInput
             onSend={handleSendMessage}
-            disabled={isChatLoading}
+            disabled={isChatLoading || !user}
             inputRef={inputRef}
             isStreaming={isStreaming}
             onStopStreaming={abortStream}

apps/web/src/hooks/useChat.ts

@@ -7,7 +7,6 @@ import { useState, useCallback, useRef } from "react";
 import {
   sendChatMessage,
   streamChatMessage,
-  streamGuestChat,
   type ChatMessage as ApiChatMessage,
 } from "@/lib/api/chat";
 import { createConversation, updateConversation, getIdea, type Idea } from "@/lib/api/ideas";
@@ -279,131 +278,68 @@ export function useChat(options: UseChatOptions = {}): UseChatReturn {
           return;
         }
 
-        // Streaming failed - check if auth error, try guest mode
-        const isAuthError =
-          err instanceof Error &&
-          (err.message.includes("403") ||
-            err.message.includes("401") ||
-            err.message.includes("auth") ||
-            err.message.includes("Forbidden"));
+        // Streaming failed — fall back to non-streaming
+        console.warn("Streaming failed, falling back to non-streaming", {
+          error: err instanceof Error ? err : new Error(String(err)),
+        });
 
-        if (isAuthError) {
-          console.warn("Auth failed, trying guest chat mode");
+        setMessages((prev) => {
+          const withoutPlaceholder = prev.filter((m) => m.id !== assistantMessageId);
+          messagesRef.current = withoutPlaceholder;
+          return withoutPlaceholder;
+        });
+        setIsStreaming(false);
 
-          // Try guest chat streaming
-          try {
-            await new Promise<void>((guestResolve, guestReject) => {
-              let hasReceivedData = false;
+        try {
+          const response = await sendChatMessage(request);
 
-              streamGuestChat(
-                request,
-                (chunk: string) => {
-                  if (!hasReceivedData) {
-                    hasReceivedData = true;
-                    setIsLoading(false);
-                    setIsStreaming(true);
-                    setMessages((prev) => {
-                      const updated = [...prev, { ...placeholderMessage }];
-                      messagesRef.current = updated;
-                      return updated;
-                    });
-                  }
-
-                  setMessages((prev) => {
-                    const updated = prev.map((msg) =>
-                      msg.id === assistantMessageId ? { ...msg, content: msg.content + chunk } : msg
-                    );
-                    messagesRef.current = updated;
-                    return updated;
-                  });
-                },
-                () => {
-                  streamingSucceeded = true;
-                  setIsStreaming(false);
-                  guestResolve();
-                },
-                (guestErr: Error) => {
-                  guestReject(guestErr);
-                },
-                controller.signal
-              );
-            });
-          } catch (guestErr: unknown) {
-            // Guest also failed
-            setMessages((prev) => {
-              const withoutPlaceholder = prev.filter((m) => m.id !== assistantMessageId);
-              messagesRef.current = withoutPlaceholder;
-              return withoutPlaceholder;
-            });
-            const errorMsg = guestErr instanceof Error ? guestErr.message : "Chat unavailable";
-            setError(`Unable to connect to chat: ${errorMsg}`);
-            setIsLoading(false);
-            return;
-          }
-        } else {
-          // Streaming failed — fall back to non-streaming
-          console.warn("Streaming failed, falling back to non-streaming", {
-            error: err instanceof Error ? err : new Error(String(err)),
-          });
+          const assistantMessage: Message = {
+            id: `assistant-${Date.now().toString()}`,
+            role: "assistant",
+            content: response.message.content,
+            createdAt: new Date().toISOString(),
+            model: response.model,
+            promptTokens: response.promptEvalCount ?? 0,
+            completionTokens: response.evalCount ?? 0,
+            totalTokens: (response.promptEvalCount ?? 0) + (response.evalCount ?? 0),
+          };
 
           setMessages((prev) => {
-            const withoutPlaceholder = prev.filter((m) => m.id !== assistantMessageId);
-            messagesRef.current = withoutPlaceholder;
-            return withoutPlaceholder;
+            const updated = [...prev, assistantMessage];
+            messagesRef.current = updated;
+            return updated;
           });
-          setIsStreaming(false);
 
-          try {
-            const response = await sendChatMessage(request);
+          streamingSucceeded = true;
+        } catch (fallbackErr: unknown) {
+          const errorMsg =
+            fallbackErr instanceof Error ? fallbackErr.message : "Failed to send message";
+          setError("Unable to send message. Please try again.");
+          onError?.(fallbackErr instanceof Error ? fallbackErr : new Error(errorMsg));
+          console.error("Failed to send chat message", {
+            error: fallbackErr,
+            errorType: "LLM_ERROR",
+            conversationId: conversationIdRef.current,
+            messageLength: content.length,
+            messagePreview: content.substring(0, 50),
+            model,
+            messageCount: messagesRef.current.length,
+            timestamp: new Date().toISOString(),
+          });
 
-            const assistantMessage: Message = {
-              id: `assistant-${Date.now().toString()}`,
-              role: "assistant",
-              content: response.message.content,
-              createdAt: new Date().toISOString(),
-              model: response.model,
-              promptTokens: response.promptEvalCount ?? 0,
-              completionTokens: response.evalCount ?? 0,
-              totalTokens: (response.promptEvalCount ?? 0) + (response.evalCount ?? 0),
-            };
-
-            setMessages((prev) => {
-              const updated = [...prev, assistantMessage];
-              messagesRef.current = updated;
-              return updated;
-            });
-
-            streamingSucceeded = true;
-          } catch (fallbackErr: unknown) {
-            const errorMsg =
-              fallbackErr instanceof Error ? fallbackErr.message : "Failed to send message";
-            setError("Unable to send message. Please try again.");
-            onError?.(fallbackErr instanceof Error ? fallbackErr : new Error(errorMsg));
-            console.error("Failed to send chat message", {
-              error: fallbackErr,
-              errorType: "LLM_ERROR",
-              conversationId: conversationIdRef.current,
-              messageLength: content.length,
-              messagePreview: content.substring(0, 50),
-              model,
-              messageCount: messagesRef.current.length,
-              timestamp: new Date().toISOString(),
-            });
-
-            const errorMessage: Message = {
-              id: `error-${String(Date.now())}`,
-              role: "assistant",
-              content: "Something went wrong. Please try again.",
-              createdAt: new Date().toISOString(),
-            };
-            setMessages((prev) => {
-              const updated = [...prev, errorMessage];
-              messagesRef.current = updated;
-              return updated;
-            });
-            setIsLoading(false);
-            return;
-          }
+          const errorMessage: Message = {
+            id: `error-${String(Date.now())}`,
+            role: "assistant",
+            content: "Something went wrong. Please try again.",
+            createdAt: new Date().toISOString(),
+          };
+          setMessages((prev) => {
+            const updated = [...prev, errorMessage];
+            messagesRef.current = updated;
+            return updated;
+          });
+          setIsLoading(false);
+          return;
         }
       }
 

apps/web/src/lib/api/chat.ts

@@ -92,141 +92,6 @@ async function ensureCsrfTokenForStream(): Promise<string> {
   return fetchCsrfToken();
 }
 
-/**
- * Stream a guest chat message (no authentication required).
- * Uses /api/chat/guest endpoint with shared LLM configuration.
- *
- * @param request - Chat request
- * @param onChunk - Called with each token string as it arrives
- * @param onComplete - Called when the stream finishes successfully
- * @param onError - Called if the stream encounters an error
- * @param signal - Optional AbortSignal for cancellation
- */
-export function streamGuestChat(
-  request: ChatRequest,
-  onChunk: (chunk: string) => void,
-  onComplete: () => void,
-  onError: (error: Error) => void,
-  signal?: AbortSignal
-): void {
-  void (async (): Promise<void> => {
-    try {
-      const response = await fetch(`${API_BASE_URL}/api/chat/guest`, {
-        method: "POST",
-        headers: {
-          "Content-Type": "application/json",
-        },
-        credentials: "include",
-        body: JSON.stringify({ messages: request.messages, stream: true }),
-        signal: signal ?? null,
-      });
-
-      if (!response.ok) {
-        const errorText = await response.text().catch(() => response.statusText);
-        throw new Error(`Guest chat failed: ${errorText}`);
-      }
-
-      if (!response.body) {
-        throw new Error("Response body is not readable");
-      }
-
-      const reader = response.body.getReader();
-      const decoder = new TextDecoder("utf-8");
-      let buffer = "";
-
-      let readerDone = false;
-      while (!readerDone) {
-        const { done, value } = await reader.read();
-        readerDone = done;
-        if (done) {
-          break;
-        }
-
-        buffer += decoder.decode(value, { stream: true });
-
-        // SSE messages are separated by double newlines
-        const parts = buffer.split("\n\n");
-        buffer = parts.pop() ?? "";
-
-        for (const part of parts) {
-          const trimmed = part.trim();
-          if (!trimmed) continue;
-
-          // Handle event: error format
-          const eventMatch = /^event:\s*(\S+)\n/i.exec(trimmed);
-          const dataMatch = /^data:\s*(.+)$/im.exec(trimmed);
-
-          if (eventMatch?.[1] === "error" && dataMatch?.[1]) {
-            try {
-              const errorData = JSON.parse(dataMatch[1].trim()) as {
-                error?: string;
-              };
-              throw new Error(errorData.error ?? "Stream error occurred");
-            } catch (parseErr) {
-              if (parseErr instanceof SyntaxError) {
-                throw new Error("Stream error occurred");
-              }
-              throw parseErr;
-            }
-          }
-
-          // Standard SSE format: data: {...}
-          for (const line of trimmed.split("\n")) {
-            if (!line.startsWith("data: ")) continue;
-
-            const data = line.slice("data: ".length).trim();
-
-            if (data === "[DONE]") {
-              onComplete();
-              return;
-            }
-
-            try {
-              const parsed: unknown = JSON.parse(data);
-
-              // Handle OpenAI format
-              const openAiChunk = parsed as OpenAiSseChunk;
-              if (openAiChunk.choices?.[0]?.delta?.content) {
-                onChunk(openAiChunk.choices[0].delta.content);
-                continue;
-              }
-
-              // Handle simple token format
-              const simpleChunk = parsed as SimpleTokenChunk;
-              if (simpleChunk.token) {
-                onChunk(simpleChunk.token);
-                continue;
-              }
-
-              if (simpleChunk.done === true) {
-                onComplete();
-                return;
-              }
-
-              const error = openAiChunk.error ?? simpleChunk.error;
-              if (error) {
-                throw new Error(error);
-              }
-            } catch (parseErr) {
-              if (parseErr instanceof SyntaxError) {
-                continue;
-              }
-              throw parseErr;
-            }
-          }
-        }
-      }
-
-      onComplete();
-    } catch (err: unknown) {
-      if (err instanceof DOMException && err.name === "AbortError") {
-        return;
-      }
-      onError(err instanceof Error ? err : new Error(String(err)));
-    }
-  })();
-}
-
 /**
  * Stream a chat message from the LLM using SSE over fetch.
  *

docker-compose.swarm.portainer.yml

@@ -91,10 +91,6 @@ services:
         psql -h openbrain_brain-db -U $${PGUSER} -tc "SELECT 1 FROM pg_database WHERE datname='$${MOSAIC_DB}'" | grep -q 1 || \
           psql -h openbrain_brain-db -U $${PGUSER} -c "CREATE DATABASE $${MOSAIC_DB} OWNER $${MOSAIC_USER} ENCODING 'UTF8' LC_COLLATE='C' LC_CTYPE='C' TEMPLATE template0;"
 
-        echo "Enabling required extensions in $${MOSAIC_DB}..."
-        psql -h openbrain_brain-db -U $${PGUSER} -d $${MOSAIC_DB} -c "CREATE EXTENSION IF NOT EXISTS vector;"
-        psql -h openbrain_brain-db -U $${PGUSER} -d $${MOSAIC_DB} -c "CREATE EXTENSION IF NOT EXISTS \"uuid-ossp\";"
-
         echo "Mosaic database ready: $${MOSAIC_DB}"
     networks:
       - openbrain-brain-internal