brainlayer 1.5.43__tar.gz → 1.5.45__tar.gz

{brainlayer-1.5.43 → brainlayer-1.5.45}/.gitignore

@@ -86,6 +86,8 @@ eval_results/*.jsonl
 
 # Generated local eval/graph outputs
 eval_results/
+results/
+artifacts/
 graphify-out/
 *.bak-*
 *.json.lock

{brainlayer-1.5.43 → brainlayer-1.5.45}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: brainlayer
-Version: 1.5.43
+Version: 1.5.45
 Summary: Persistent memory MCP server for AI agents — 17 tools, semantic search, knowledge graph, on-device SQLite
 Project-URL: Homepage, https://brainlayer.etanheyman.com
 Project-URL: Repository, https://github.com/EtanHey/brainlayer
@@ -23,6 +23,7 @@ Requires-Dist: abydos>=0.5.0
 Requires-Dist: apsw>=3.45.0
 Requires-Dist: deprecation>=2.1.0
 Requires-Dist: google-api-python-client>=2.0.0
+Requires-Dist: google-auth-oauthlib>=1.1.0
 Requires-Dist: google-auth>=2.0.0
 Requires-Dist: idna<4,>=2.5
 Requires-Dist: jsonschema>=4.20.0
@@ -53,10 +54,12 @@ Requires-Dist: deepchecks>=0.19.1; extra == 'dev'
 Requires-Dist: google-genai>=1.0.0; extra == 'dev'
 Requires-Dist: numpy<2; extra == 'dev'
 Requires-Dist: pytest-asyncio>=0.21.0; extra == 'dev'
+Requires-Dist: pytest-timeout>=2.3.1; extra == 'dev'
 Requires-Dist: pytest>=7.0.0; extra == 'dev'
 Requires-Dist: ruff>=0.1.0; extra == 'dev'
 Requires-Dist: scikit-learn<1.6; extra == 'dev'
 Requires-Dist: setuptools<81,>=70.0.0; extra == 'dev'
+Requires-Dist: threadpoolctl>=3.0.0; extra == 'dev'
 Requires-Dist: tiktoken>=0.7.0; extra == 'dev'
 Requires-Dist: umap-learn>=0.5.0; extra == 'dev'
 Provides-Extra: docs
@@ -368,6 +371,12 @@ BRAINLAYER_ENRICH_BACKEND=groq brainlayer enrich   # Force Groq
 
 ## CLI Reference
 
+### Backups
+
+Run `brainlayer backup auth` once to authorize BrainLayer's Drive backups in your browser.
+The private token lives at `~/.config/brainlayer/drive-tokens.json`; `BRAINLAYER_DRIVE_TOKEN_PATH` overrides it.
+BrainBar uses `brainlayer backup auth --status --json` to check and `brainlayer backup auth --json` to authorize.
+
 ```bash
 brainlayer setup              # Create ~/.config/brainlayer/brainlayer.env
 brainlayer setup --launchd    # Create config and install launchd agents

{brainlayer-1.5.43 → brainlayer-1.5.45}/README.md

@@ -293,6 +293,12 @@ BRAINLAYER_ENRICH_BACKEND=groq brainlayer enrich   # Force Groq
 
 ## CLI Reference
 
+### Backups
+
+Run `brainlayer backup auth` once to authorize BrainLayer's Drive backups in your browser.
+The private token lives at `~/.config/brainlayer/drive-tokens.json`; `BRAINLAYER_DRIVE_TOKEN_PATH` overrides it.
+BrainBar uses `brainlayer backup auth --status --json` to check and `brainlayer backup auth --json` to authorize.
+
 ```bash
 brainlayer setup              # Create ~/.config/brainlayer/brainlayer.env
 brainlayer setup --launchd    # Create config and install launchd agents

{brainlayer-1.5.43 → brainlayer-1.5.45}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "brainlayer"
-version = "1.5.43"
+version = "1.5.45"
 description = "Persistent memory MCP server for AI agents — 17 tools, semantic search, knowledge graph, on-device SQLite"
 license = {text = "Apache-2.0"}
 readme = "README.md"
@@ -34,6 +34,7 @@ dependencies = [
     "idna>=2.5,<4",  # Imported through requests by backup and hook entrypoints
     "google-api-python-client>=2.0.0",  # Daily DB backup upload to Google Drive
     "google-auth>=2.0.0",  # OAuth refresh for Google Drive backups
+    "google-auth-oauthlib>=1.1.0",  # Installed-app Drive consent for BrainLayer-owned backup tokens
     "ranx>=0.3.20",  # IR evaluation metrics + significance testing
     "abydos>=0.5.0",  # Beider-Morse phonetic matching for cross-script entity aliases
     "deprecation>=2.1.0",  # Imported by abydos phonetic modules used by prompt hooks
@@ -82,10 +83,12 @@ dev = [
     "numpy<2",
     "pytest>=7.0.0",
     "pytest-asyncio>=0.21.0",
+    "pytest-timeout>=2.3.1",
     "ruff>=0.1.0",
     "scikit-learn<1.6",
     "setuptools>=70.0.0,<81",
     "tiktoken>=0.7.0",
+    "threadpoolctl>=3.0.0",
     "umap-learn>=0.5.0",
 ]
 docs = [
@@ -121,6 +124,7 @@ pythonpath = ["src"]
 markers = [
     "engine: pure-library engine tests (excludes CLI, dashboard, BrainBar, launchd, and root orchestration surfaces)",
     "embedding_model: tests that deliberately load a real embedding model (deselected by scripts/run_tests.sh)",
+    "timeout: maximum duration for an individual test",
     "integration: tests that need the real production DB (268K+ chunks)",
     "live: tests that need the live production DB or mutable local hooks state",
     "slow: tests that load ML models or take >30s",

{brainlayer-1.5.43 → brainlayer-1.5.45}/scripts/launchd/install.sh

@@ -11,7 +11,7 @@
 #   ./scripts/launchd/install.sh load enrichment
 #   ./scripts/launchd/install.sh unload enrichment
 #   ./scripts/launchd/install.sh checkpoint   # Install WAL checkpoint only
-#   ./scripts/launchd/install.sh repair-fts   # Install weekly explicit FTS repair
+#   ./scripts/launchd/install.sh repair-fts   # Install weekly read-only FTS check
 #   ./scripts/launchd/install.sh backup       # Install daily DB backup only
 #   ./scripts/launchd/install.sh jsonl-backup # Install daily JSONL backup only
 #   ./scripts/launchd/install.sh maintenance  # Install recurring maintenance jobs

{brainlayer-1.5.43 → brainlayer-1.5.45}/server.json

@@ -3,7 +3,7 @@
   "name": "io.github.etanhey/brainlayer",
   "title": "BrainLayer",
   "description": "Persistent memory for AI agents \u2014 local-first semantic search, knowledge graph, and 17 MCP tools with ToolAnnotations. One SQLite file, no cloud, no API keys.",
-  "version": "1.5.43",
+  "version": "1.5.45",
   "websiteUrl": "https://brainlayer.etanheyman.com",
   "repository": {
     "url": "https://github.com/EtanHey/brainlayer",
@@ -14,7 +14,7 @@
       "registryType": "pypi",
       "registryBaseUrl": "https://pypi.org",
       "identifier": "brainlayer",
-      "version": "1.5.43",
+      "version": "1.5.45",
       "runtimeHint": "pipx",
       "transport": {
         "type": "stdio"

{brainlayer-1.5.43 → brainlayer-1.5.45}/src/brainlayer/__init__.py

@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-__version__ = "1.5.43"
+__version__ = "1.5.45"
 # Git sha the distributed package was built from; stamped by the release build, None in a source tree.
 # scripts/sprint_gate.py reads it in "keg" mode to prove the served package is the code under test.
 # No runtime `str | None` annotation: launchd/install.sh imports this under /usr/bin/python3 (3.9).

brainlayer-1.5.45/src/brainlayer/_build.py

@@ -0,0 +1 @@
+BUILD_SHA = "d3d00b64768a53e7c534ee82dc9f9938aab65f81"

{brainlayer-1.5.43 → brainlayer-1.5.45}/src/brainlayer/backup_daily.py

@@ -36,13 +36,14 @@ from typing import Any
 
 import requests
 
+from . import drive_credentials
 from .paths import get_db_path
 from .socket_hygiene import refuse_production_brainbar_socket
 
 _sleep = time.sleep
 
-DEFAULT_TOKEN_PATH = Path.home() / ".config" / "google-drive-mcp" / "tokens.json"
-DEFAULT_CLIENT_PATH = Path.home() / ".config" / "google-drive-mcp" / "gcp-oauth.keys.json"
+DEFAULT_TOKEN_PATH = drive_credentials.DEFAULT_TOKEN_PATH
+DEFAULT_CLIENT_PATH = drive_credentials.DEFAULT_CLIENT_PATH
 CANONICAL_MACHINE_ID = "MacBook-Pro"
 CANONICAL_FOLDER_PARTS = ["Brain Drive", "06_ARCHIVE", "backups", "brainlayer-db"]
 # Compatibility alias for callers that explicitly target the legacy M4 folder.
@@ -61,6 +62,7 @@ BACKUP_ATTEMPT_MAX_AGE_ENV = "BRAINLAYER_BACKUP_ATTEMPT_MAX_AGE_SECONDS"
 BACKUP_FULL_VERIFY_ENV = "BRAINLAYER_BACKUP_FULL_VERIFY"
 BACKUP_LOG_PATH_ENV = "BRAINLAYER_BACKUP_LOG_PATH"
 BACKUP_LOG_PROVENANCE_ENV = "BRAINLAYER_BACKUP_LOG_PROVENANCE"
+BACKUP_REUSE_VERIFIED_MAX_AGE_HOURS_ENV = "BRAINLAYER_BACKUP_REUSE_VERIFIED_MAX_AGE_HOURS"
 BACKUP_SUPERVISED_CHILD_ENV = "BRAINLAYER_BACKUP_SUPERVISED_CHILD"
 BACKUP_SQLITE_CHECK_TIMEOUT_ENV = "BRAINLAYER_BACKUP_SQLITE_CHECK_TIMEOUT_SECONDS"
 BACKUP_DRIVE_RETENTION_ENV = "BRAINLAYER_BACKUP_DRIVE_RETENTION"
@@ -68,7 +70,7 @@ DRIVE_UPLOAD_DEADLINE_FLOOR_ENV = "BRAINLAYER_DRIVE_UPLOAD_DEADLINE_FLOOR_SECOND
 DRIVE_UPLOAD_MIN_BYTES_PER_SECOND_ENV = "BRAINLAYER_DRIVE_UPLOAD_MIN_BYTES_PER_SECOND"
 DRIVE_UPLOAD_STALL_MAX_ATTEMPTS_ENV = "BRAINLAYER_DRIVE_UPLOAD_STALL_MAX_ATTEMPTS"
 DRIVE_FOLDER_MIME = "application/vnd.google-apps.folder"
-DRIVE_SCOPES = ["https://www.googleapis.com/auth/drive"]
+DRIVE_SCOPES = drive_credentials.DRIVE_SCOPES
 DEFAULT_LOCAL_COMPRESSED_KEEP = 3
 DEFAULT_LOCAL_UNCOMPRESSED_KEEP = 1
 DEFAULT_DRIVE_KEEP = 7
@@ -101,6 +103,10 @@ DAILY_RETENTION = DriveRetentionPolicy(keep_latest=DEFAULT_DRIVE_KEEP)
 WEEKLY_RETENTION = DriveRetentionPolicy(keep_latest=DEFAULT_DRIVE_KEEP)
 
 
+class BackupAlreadyRunningError(RuntimeError):
+    """The shared backup staging lock is held by another backup."""
+
+
 @dataclass(frozen=True)
 class SQLiteBackupArtifact:
     gzip_path: Path
@@ -981,65 +987,12 @@ def _send_brainbar_json_request(
     return json.loads(data.decode("utf-8"))
 
 
-def _atomic_write_text(path: Path, content: str) -> None:
-    temp_path = path.with_name(f".{path.name}.{os.getpid()}.tmp")
-    try:
-        temp_path.write_text(content)
-        os.replace(temp_path, path)
-    finally:
-        temp_path.unlink(missing_ok=True)
-
-
-def get_drive_credentials(token_path: Path = DEFAULT_TOKEN_PATH, client_path: Path = DEFAULT_CLIENT_PATH):
-    """Load and refresh Google Drive OAuth credentials from the existing MCP auth files."""
-    from google.auth.transport.requests import Request
-    from google.oauth2.credentials import Credentials
-
-    token_path = Path(token_path).expanduser()
-    client_path = Path(client_path).expanduser()
-    if not token_path.exists():
-        raise FileNotFoundError(f"Google Drive token file not found: {token_path}")
-    if not client_path.exists():
-        raise FileNotFoundError(f"Google OAuth client file not found: {client_path}")
-
-    lock_path = token_path.with_suffix(token_path.suffix + ".lock")
-    with lock_path.open("w") as lock_file:
-        fcntl.flock(lock_file, fcntl.LOCK_EX)
-        token_data = json.loads(token_path.read_text())
-        client_data = json.loads(client_path.read_text())["installed"]
-
-        expiry = token_data.get("expiry")
-        if not expiry and token_data.get("expiry_date"):
-            expiry = dt.datetime.fromtimestamp(int(token_data["expiry_date"]) / 1000, tz=dt.UTC).isoformat()
-
-        parsed_expiry = dt.datetime.fromisoformat(expiry.replace("Z", "+00:00")) if expiry else None
-        if parsed_expiry and parsed_expiry.tzinfo:
-            parsed_expiry = parsed_expiry.astimezone(dt.UTC).replace(tzinfo=None)
-        elif parsed_expiry:
-            parsed_expiry = parsed_expiry.replace(tzinfo=None)
-
-        creds = Credentials(
-            token=token_data.get("access_token"),
-            refresh_token=token_data.get("refresh_token"),
-            token_uri=client_data["token_uri"],
-            client_id=client_data["client_id"],
-            client_secret=client_data["client_secret"],
-            scopes=token_data.get("scope", " ".join(DRIVE_SCOPES)).split(),
-            expiry=parsed_expiry,
-        )
-
-        # google-auth Credentials.expired compares against a naive UTC helper, so keep expiry comparisons naive UTC.
-        refresh_before = dt.datetime.now(dt.UTC).replace(tzinfo=None) + dt.timedelta(hours=2)
-        if creds.expired or not creds.valid or (creds.expiry and creds.expiry < refresh_before):
-            creds.refresh(Request())
-            token_data["access_token"] = creds.token
-            token_data["expiry"] = creds.expiry.isoformat() if creds.expiry else None
-            _atomic_write_text(token_path, json.dumps(token_data, indent=2, sort_keys=True) + "\n")
-
-    return creds
+def get_drive_credentials(token_path: Path | None = None, client_path: Path | None = None):
+    """Use BrainLayer-owned credentials for both database and JSONL backups."""
+    return drive_credentials.load_credentials(token_path=token_path, client_path=client_path)
 
 
-def build_drive_service(token_path: Path = DEFAULT_TOKEN_PATH, client_path: Path = DEFAULT_CLIENT_PATH):
+def build_drive_service(token_path: Path | None = None, client_path: Path | None = None):
     from googleapiclient.discovery import build
 
     return build("drive", "v3", credentials=get_drive_credentials(token_path, client_path))
@@ -1568,6 +1521,37 @@ def prune_drive_backups(
     return trashed
 
 
+def _recent_verified_backup_for_reuse(
+    log_path: Path, db_path: Path, *, now: dt.datetime, max_age_hours: float
+) -> dict[str, Any] | None:
+    try:
+        lines = log_path.read_text(encoding="utf-8").splitlines()
+    except FileNotFoundError:
+        return None
+    now = now.astimezone(dt.UTC)
+    for line in reversed(lines):
+        try:
+            receipt = json.loads(line)
+            attempted = dt.datetime.fromisoformat(receipt["attempted_at"])
+        except (ValueError, KeyError, TypeError):
+            continue
+        if attempted.tzinfo is None:
+            continue
+        age = now - attempted.astimezone(dt.UTC)
+        drive_file = receipt.get("drive_file")
+        if (
+            receipt.get("db") == str(db_path)
+            and receipt.get("uploaded") is True
+            and receipt.get("verified") is True
+            and "error_type" not in receipt
+            and isinstance(drive_file, dict)
+            and isinstance(drive_file.get("id"), str)
+            and dt.timedelta(0) <= age <= dt.timedelta(hours=max_age_hours)
+        ):
+            return receipt
+    return None
+
+
 def _serialized_backup_run(func: Callable[..., dict[str, Any]]) -> Callable[..., dict[str, Any]]:
     @functools.wraps(func)
     def wrapped(*args: Any, **kwargs: Any) -> dict[str, Any]:
@@ -1592,8 +1576,22 @@ def _serialized_backup_run(func: Callable[..., dict[str, Any]]) -> Callable[...,
                         "error": error,
                     },
                 )
-                raise RuntimeError(error) from exc
+                raise BackupAlreadyRunningError(error) from exc
             try:
+                # Weekly maintenance's first receipt check precedes this lock. A daily
+                # backup can finish in that gap, so recheck before copying the DB.
+                reuse_age = os.environ.get(BACKUP_REUSE_VERIFIED_MAX_AGE_HOURS_ENV)
+                if reuse_age is not None:
+                    hours = float(reuse_age)
+                    if not math.isfinite(hours) or hours < 0:
+                        raise ValueError(f"{BACKUP_REUSE_VERIFIED_MAX_AGE_HOURS_ENV} must be finite and nonnegative")
+                    db_path = Path(bound.arguments.get("db_path") or get_db_path())
+                    log_path = _backup_log_path(bound.arguments.get("log_path"), db_path=db_path)
+                    receipt = _recent_verified_backup_for_reuse(
+                        log_path, db_path, now=dt.datetime.now(dt.UTC), max_age_hours=hours
+                    )
+                    if receipt is not None:
+                        return receipt
                 return func(*args, **kwargs)
             finally:
                 fcntl.flock(lock, fcntl.LOCK_UN)
@@ -1904,7 +1902,15 @@ def main() -> int:
     timeout_seconds = _configured_backup_timeout_seconds()
     if _env_flag_enabled(BACKUP_SUPERVISED_CHILD_ENV):
         return _run_backup_process(timeout_seconds)
-    return _supervise_backup_process(timeout_seconds)
+    from .job_alerts import report
+
+    try:
+        code = _supervise_backup_process(timeout_seconds)
+    except Exception:
+        report("backup-daily", "Database backup failed; check the backup log")
+        raise
+    report("backup-daily", None if code == 0 else "Database backup failed; check the backup log")
+    return code
 
 
 if __name__ == "__main__":

{brainlayer-1.5.43 → brainlayer-1.5.45}/src/brainlayer/brainbar_hybrid_helper.py

@@ -13,6 +13,7 @@ import hashlib
 import json
 import logging
 import os
+import re
 import signal
 import socket
 import sys
@@ -23,6 +24,9 @@ from typing import Any, Callable
 
 from . import search_profile
 
+# A profile id is only ever the shape search_profile.new_query_id() (and BrainBar's
+# SearchProfileLogger.newQueryID()) generates; anything else is client-chosen text.
+_PROFILE_QUERY_ID_RE = re.compile(r"q-[0-9A-Fa-f]{12}")
 _ACCEPT_TIMEOUT_SECONDS = 0.25
 _CONNECTION_TIMEOUT_SECONDS = 5.0
 
@@ -217,7 +221,9 @@ class HybridSearchHelper:
             request = json.loads(raw.decode("utf-8"))
             response = self._dispatch_with_deadline(request)
         except Exception as exc:
-            response = {"ok": False, "error": str(exc)}
+            # The class name only: BrainBar logs this field, and an exception message
+            # can carry the query or file contents (PR #993 review, B3).
+            response = {"ok": False, "error": type(exc).__name__}
 
         payload = json.dumps(_json_safe(response), separators=(",", ":")).encode("utf-8") + b"\n"
         try:
@@ -225,6 +231,12 @@ class HybridSearchHelper:
         except OSError:
             return
 
+    @staticmethod
+    def _accepted_profile_query_id(raw: object) -> str | None:
+        if isinstance(raw, str) and _PROFILE_QUERY_ID_RE.fullmatch(raw):
+            return raw
+        return None
+
     @staticmethod
     def _read_line(conn: socket.socket) -> bytes:
         chunks: list[bytes] = []
@@ -269,7 +281,7 @@ class HybridSearchHelper:
     async def _search(self, arguments: dict[str, Any]) -> tuple[str, dict[str, Any] | None, bool]:
         from brainlayer.mcp.search_handler import _brain_search
 
-        query_id = str(arguments.get("_profile_query_id") or "") or None
+        query_id = self._accepted_profile_query_id(arguments.get("_profile_query_id"))
         if search_profile.enabled() and query_id is None:
             query_id = search_profile.new_query_id()
         source = arguments.get("source")

{brainlayer-1.5.43 → brainlayer-1.5.45}/src/brainlayer/cli/__init__.py

@@ -50,6 +50,25 @@ sandbox_app = typer.Typer(help="Manage isolated sandbox BrainLayer databases")
 app.add_typer(sandbox_app, name="sandbox")
 jobs_app = typer.Typer(help="Inspect and restart installed BrainLayer LaunchAgents")
 app.add_typer(jobs_app, name="jobs")
+backup_app = typer.Typer(help="Manage BrainLayer backup authorization")
+app.add_typer(backup_app, name="backup")
+
+
+@backup_app.command("auth")
+def backup_auth_command(
+    status: bool = typer.Option(False, "--status", help="Check authorization without changing the token."),
+    json_output: bool = typer.Option(False, "--json", help="Print one JSON result for BrainBar."),
+) -> None:
+    """Authorize the BrainLayer-owned Google Drive token in the system browser."""
+    from .. import drive_credentials
+
+    result = drive_credentials.credential_status() if status else drive_credentials.authorize()
+    if json_output:
+        typer.echo(json.dumps(result, sort_keys=True))
+    else:
+        typer.echo(result["reason"])
+    if not status and result["status"] != "ok":
+        raise typer.Exit(1)
 
 
 @jobs_app.command("restart")
@@ -2804,6 +2823,7 @@ def wal_checkpoint(
     quiet: bool = typer.Option(False, "--quiet", help="Silent unless error"),
 ) -> None:
     """Run a SQLite WAL checkpoint through the BrainLayer CLI."""
+    from ..job_alerts import report as report_job_alert
     from ..wal_checkpoint import run_wal_checkpoint
 
     normalized_mode = mode.upper()
@@ -2815,12 +2835,14 @@ def wal_checkpoint(
             run_wal_checkpoint(normalized_mode, retry_busy=True) if retry_busy else run_wal_checkpoint(normalized_mode)
         )
     except FileNotFoundError as e:
+        report_job_alert("wal-checkpoint", "BrainLayer WAL checkpoint failed; check the job log")
         if json_output:
             console.print_json(data={"error": str(e)})
         elif not quiet:
             rprint(f"[bold red]Error:[/] {e}")
         raise typer.Exit(1)
     except Exception as e:
+        report_job_alert("wal-checkpoint", "BrainLayer WAL checkpoint failed; check the job log")
         if json_output:
             console.print_json(data={"error": str(e)})
         elif not quiet:
@@ -2838,25 +2860,36 @@ def wal_checkpoint(
         )
 
     if result["busy"]:
+        report_job_alert("wal-checkpoint", "BrainLayer WAL checkpoint was busy; check the job log")
         raise typer.Exit(1)
+    report_job_alert("wal-checkpoint", None)
 
 
 @app.command("repair-fts")
 def repair_fts(
-    db_path: Path = typer.Argument(..., help="Explicit offline database copy to repair."),
+    db_path: Path | None = typer.Argument(None, help="Offline database copy; omitted means read-only FTS count check."),
 ) -> None:
-    """Rebuild FTS maintenance tables on an offline copy only."""
-    from ..runtime_store import OfflineMigrator
+    """Check live FTS counts read-only, or rebuild an explicit offline copy."""
+    from ..job_alerts import report as report_job_alert
+    from ..runtime_store import OfflineMigrator, check_fts_counts
 
     try:
-        store = OfflineMigrator(db_path)
-        try:
-            result = store.repair_fts(rebuild_trigram=True)
-        finally:
-            store.close()
+        if db_path is None:
+            result = check_fts_counts(get_db_path())
+        else:
+            store = OfflineMigrator(db_path)
+            try:
+                result = store.repair_fts(rebuild_trigram=True)
+            finally:
+                store.close()
     except PermissionError as exc:
+        report_job_alert("repair-fts", "BrainLayer FTS repair failed; check the job log")
         rprint(f"[bold red]Repair refused:[/] {exc}")
         raise typer.Exit(1) from exc
+    except Exception:
+        report_job_alert("repair-fts", "BrainLayer FTS repair failed; check the job log")
+        raise
+    report_job_alert("repair-fts", None)
     console.print_json(data=result)
 
 

{brainlayer-1.5.43 → brainlayer-1.5.45}/src/brainlayer/content_class.py

@@ -68,12 +68,14 @@ _PERSONAL_RE = re.compile(
     r")",
     re.IGNORECASE,
 )
-_PERSON_NAME_RE = re.compile(
-    r"(\betan\b|etan@heyman\.net|heyman\.net|\bYuval Rapoport\b|"
-    r"\bGal Rava\b|\bSamantha Cerqueira\b|\bDaniel Munk\b|\bOren Efraim\b|"
-    r"\bOren Ephraim\b|\bAvi Simon\b|\bMichal Cohen\b|\bChase\b)",
-    re.IGNORECASE,
+_NAME_WORD = r"[A-Z][a-z]{1,30}(?:[-'][A-Z][a-z]{1,30})?"
+_CONTEXTUAL_PERSON_NAME_RE = re.compile(
+    rf"\b(?i:met|spoke with|talked to|called|contacted|introduced|client|friend|person named)\s+"
+    rf"{_NAME_WORD}\s+{_NAME_WORD}\b"
 )
+_EMAIL_ADDRESS_RE = re.compile(r"\b[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}\b")
+
+
 _PERSONAL_RISK_RE = re.compile(
     r"("
     r"\betan\b|etan@heyman\.net|heyman\.net|\bjournal\b|\bpersonal\b|\bmy life\b|\bfamily\b|"
@@ -145,8 +147,8 @@ def has_personal_risk_signal(content: str | None) -> bool:
 
 
 def has_person_name_signal(content: str | None) -> bool:
-    """Return true for known personal-name signals in Etan's corpus."""
-    return bool(content and _PERSON_NAME_RE.search(content))
+    """Recognize a contextual full name or email without bundled identities."""
+    return bool(content and (_CONTEXTUAL_PERSON_NAME_RE.search(content) or _EMAIL_ADDRESS_RE.search(content)))
 
 
 def has_hebrew_signal(content: str | None) -> bool: