six-degrees 0.2.0

package/README.md

@@ -0,0 +1,265 @@
+<h1 align="center">Six Degrees</h1>
+
+<p align="center">
+  <em>Map your LinkedIn network as a galaxy — see who bridges you to everyone else,<br />
+  and find the shortest path to someone you haven't met.</em>
+</p>
+
+<p align="center">
+  <a href="https://github.com/blakeb056/six-degrees/releases/latest/download/Six-Degrees-Mac-Apple-Silicon.dmg"><img src="https://img.shields.io/badge/Download-Apple%20Silicon%20(M1%20or%20newer)-2ea44f?style=for-the-badge&logo=apple&logoColor=white" alt="Download for a Mac with Apple Silicon (M1 or newer)"></a>
+  &nbsp;
+  <a href="https://github.com/blakeb056/six-degrees/releases/latest/download/Six-Degrees-Mac-Intel.dmg"><img src="https://img.shields.io/badge/Download-Intel%20Mac-555555?style=for-the-badge&logo=apple&logoColor=white" alt="Download for a Mac with an Intel processor"></a>
+</p>
+
+<p align="center"><sub>Free Mac app · macOS 13.5 or later · <a href="#install-it">how to install</a> · <a href="https://github.com/blakeb056/six-degrees/releases/latest">what's new</a></sub></p>
+
+<p align="center">
+  <img src="docs/img/app-window.png" alt="Six Degrees on a Mac: your network drawn as circles around you, the most powerful people closest" width="100%">
+</p>
+
+<p align="center"><sub>Every person shown in this README is invented — see <a href="scripts/gen-synthetic.mjs"><code>gen-synthetic.mjs</code></a>.</sub></p>
+
+---
+
+Your network has a shape, and you can't see it. Six Degrees draws it: everyone you
+know placed on rings by how much they can open up for you, the handful of people
+whose own circles reach the furthest, and the shortest chain from you to a stranger
+worth meeting.
+
+It's a Mac app. It runs on your computer, against your own data, with no account and
+no server. (Inside the app the logo reads *6 Degrees*; in Applications it's **Six
+Degrees**.)
+
+## Install it
+
+**Which download?** Apple menu → **About This Mac**. If it says "Chip: Apple M…", take
+**Apple Silicon**. If it says "Processor: …Intel…", take **Intel**. It needs **macOS 13.5
+(Ventura) or later**, and it's about 185 MB.
+
+**The first time you open it**, macOS stops it, because the app isn't signed with a
+paid Apple certificate yet:
+
+1. Open the file you downloaded (**Six-Degrees-Mac-….dmg**, in your Downloads folder).
+   In the window that opens, drag **Six Degrees** onto the **Applications** folder.
+2. Open **Six Degrees** from Applications. macOS says it can't check the app for
+   malware. Close that message with **Done** (on macOS 13 or 14 it may say **OK** or
+   **Cancel**). Anything except *Move to Trash*.
+3. Open **System Settings → Privacy & Security**, scroll down to *"Six Degrees" was
+   blocked*, and click **Open Anyway**. Confirm with **Open** (and your password if
+   asked).
+
+That's once per download; after that it opens like any app.
+
+**Or install it from Terminal** (no approval step). Press ⌘ Space, type *Terminal* and
+press Return. Paste this line into the window that opens and press Return:
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/blakeb056/six-degrees/main/install.sh | bash
+```
+
+It downloads the right version for your Mac, checks the file is exactly the one
+published here, puts **Six Degrees** in Applications and opens it.
+[Read the script](install.sh) first if you like.
+
+**Updating.** Choose *Six Degrees → Check for Updates…*, scroll to **Updates** at the
+bottom of the page that opens, and click **Check for updates**. Nothing checks by
+itself. If there's a newer version, it gives you the Terminal line to paste, which
+replaces the app even while it's running. Downloading the new `.dmg` works too; you'll
+repeat step 3 once for it.
+
+Your network isn't stored in the app. It's in a hidden folder in your home folder,
+`.six-degrees` (open it any time with *Help → Show the Data Folder*), so updates never
+touch it. Each new version also copies your data into its `backups` folder before it
+first opens it.
+
+**Linux:** run it from source (below); it's tested on Ubuntu.
+**Windows:** not yet. A Windows app is planned; nothing is released.
+
+<details>
+<summary>Run it from source (Linux, or a Mac without the app)</summary>
+
+Needs **Node 22.13 or later** and git.
+
+```bash
+git clone https://github.com/blakeb056/six-degrees.git
+cd six-degrees
+npm ci
+npm run build
+npm run start:packaged      # opens http://127.0.0.1:6363 in your browser
+```
+
+To update later: stop it (Ctrl-C), then
+`git pull && npm ci && npm run build && npm run start:packaged`.
+Scanning LinkedIn also needs Python 3.9+ and Google Chrome (see below).
+</details>
+
+## Before you scan LinkedIn
+
+> [!WARNING]
+> **Scanning drives your own LinkedIn account, and LinkedIn may restrict accounts that
+> do this.** Automating LinkedIn may break its User Agreement. It has happened twice
+> while building this:
+> - The account was temporarily restricted after about 20 profile views in one sitting
+>   (2026-09-09); it was lifted the same evening.
+> - Search was blocked after results were read too fast (2026-09-24).
+>
+> The scanner now reads slowly and keeps to a search budget (by default 50 a day and 250
+> a month; you can change it on the Scan page). It locks itself during a cooldown, and
+> stops at the first sign of push-back. The risk is still yours.
+>
+> **The CSV import and the sample network carry no LinkedIn risk at all.** Details:
+> [`docs/SCRAPING.md`](docs/SCRAPING.md).
+
+## First run
+
+The app opens on a welcome screen with three ways in, and asks nothing about you:
+
+- **Scan my LinkedIn**: a guided page that ticks each step off as it goes. It sets up
+  the scanner in one click, you sign into LinkedIn yourself in a Chrome window, and then
+  it scans. Needs Google Chrome (in Applications) and Python 3.9+; the page checks that
+  both are installed and says what's missing. The app marks this *Recommended* because
+  it's the only way to Degrees and Outlink. Read the warning above first.
+- **Import my LinkedIn CSV**: LinkedIn's official export, read on your machine. On
+  LinkedIn: **Settings & Privacy → Data privacy → Get a copy of your data →
+  Connections**. LinkedIn emails a link in about ten minutes; unzip it and drop
+  `Connections.csv` into the app.
+- **Explore a sample network**: 150 invented connections and the 598 invented people
+  they know. Click through before deciding anything.
+
+|  | Your scan | Your `Connections.csv` | Sample network |
+|---|---|---|---|
+| Setup | Python + Chrome, once | ~10 min (LinkedIn emails the file) | none |
+| Network Circle, Paths | ✅ | ✅ | ✅ |
+| **Degrees** (people you *haven't* met) | ✅ | — | ✅ |
+| **Outlink** (getting introduced) | ✅ | — | — |
+| Profile photos | ✅ | initials | initials |
+| LinkedIn account risk | **yes**, see above | none | none |
+
+**The CSV is the safe path, and deliberately the shallower one.** LinkedIn's export only
+contains people you're already connected to, so Degrees and Outlink, the views about
+people you *haven't* met, have nothing to draw. That data exists in no official export;
+the scanner is the only way to it, and it's opt-in for that reason.
+
+While the sample or a CSV is loaded, the top bar shows *Sample network ×* or *Your CSV
+×* (click × to go back), and Outlink and Scan are hidden. Neither is ever added to your
+network: they last as long as the app's window is open.
+
+## What it does
+
+**Network Circle.** Everyone you know, on rings by tier, the most powerful closest to
+you. Switch the drawing between **Galaxy**, **Orbit**, **Pyramid** and **List** in the
+panel on the left.
+
+**Degrees** *(needs a scan or the sample)*. The people two steps away. **Separation**
+ranks every one of them with every way in: which of your connections knows them, and
+how many do. **Orbit**, **Bridge Chains**, **Revolver**, **Pyramid** and **List** draw
+the same people differently.
+
+<img src="docs/img/degrees.png" alt="Degrees → Separation: people two steps away, ranked, each with the connection who can introduce you" width="100%">
+
+**Paths.** Your network by company and industry, in the spirit of LinkedIn's old
+InMaps:
+- **Map**: your companies as bubbles (the 140 largest), grouped by industry and linked
+  where your connections at one know people at another.
+- **Industries**: a card per industry.
+- **Companies**: pick one to see its people level by level, up to the top.
+- **Scores**: every scanned company's score, which you can change.
+
+Click a company for its analyzer: who you know there, who you can reach, the warmest way
+in, and its most powerful people.
+
+<img src="docs/img/paths.png" alt="Paths → Map with the company analyzer open: companies grouped by industry, and one company's people by level and ways in" width="100%">
+
+**Outlink** *(needs a scan)*. Getting introduced, as a game. Each mapped connection's
+circle offers its best five people at a time; mark invites as sent to fill the ring and
+unlock the next five. It also shows the next best moves, levels and points (from
+invites sent and people who accepted, never from browsing).
+
+**Scan.** The guided scanner. It shows progress, the budget that's left, the cooldown
+lock, and a **Paused** list you can carry on from.
+
+## How scoring works
+
+```
+power = title × (0.45 + 0.055 × company score) + reach bonus + bridge boost
+tiers:  S ≥ 7.5   A ≥ 5.5   B ≥ 4.0   C ≥ 2.5   D < 2.5
+```
+
+- **Title (1–10)** comes from someone's current role in their headline, with former
+  roles at 70%; current students are capped.
+- **Company score (1–10)** is the one you set (Paths → Scores) if there is one. Otherwise
+  it comes from a list of well-known companies, or from how many of your people work
+  there.
+- Multiplying means seniority counts for more at a bigger company. A VP at a company
+  scored 10 gets 9.0; a founder at an unknown company, 6.7.
+- **Reach bonus (up to 1.5)**: investor, YC, an audience in the millions. It counts half
+  at an unknown company, because headlines are self-written.
+- **Bridge boost (up to 1)**: someone whose mapped circle is unusually strong.
+
+Scanned and sample people show the working ("VP / Partner / GM (9) · Snap (9/10) · +0.7
+strong circle"). A CSV import shows the score only, and uses the built-in company list
+rather than your own scores. The model is [`lib/scoring.js`](lib/scoring.js), explained
+in [`docs/brain/SCORING.md`](docs/brain/SCORING.md).
+
+It estimates **network position**, not what anyone is worth as a person.
+
+## Privacy
+
+- Your network is stored on your computer and nowhere else. No account, no server, no
+  telemetry, no analytics, no crash reporting.
+- A CSV import is read on your machine and never added to your network. It's held only
+  in the app window's own storage, and you import it again next time.
+- The app contacts only these, and only when you act:
+  - **LinkedIn**, while you scan. Also, until a profile photo has been saved to your
+    computer, the app shows it straight from LinkedIn's image server.
+  - **PyPI** (the Python package library), once, to download the scanner's add-ons.
+  - **GitHub**, only when you click *Check for updates*, to read the newest version
+    number.
+  
+  Nothing about you is sent, and nothing checks on its own.
+- The web framework's own anonymous usage stats are turned off.
+
+See [SECURITY.md](SECURITY.md) for the threat model.
+
+## How your data is stored
+
+```
+.six-degrees/               in your home folder (hidden)
+├── six-degrees.sqlite      your network: connections, scores, tiers, queue
+├── backups/                a copy of the database before each new version touches it
+├── avatars/                profile photos, if you scan
+├── chrome-profile/         the scanner's Chrome sign-in, if you scan (see below)
+├── venv/                   the scanner's Python add-ons, if you set it up
+├── pushback/               what LinkedIn's page said if it ever pushed back
+└── *.json                  the scanner's budget, cooldown, progress and skip lists
+```
+
+**To remove everything:** quit the app and drag **Six Degrees** from Applications to the
+Trash. Then in Finder choose **Go → Go to Folder…** (⇧⌘G), paste `~/.six-degrees` and
+move that folder to the Trash. Do the same for
+`~/Library/Application Support/Six Degrees`, the app window's own storage and cache
+(it can include a CSV you imported).
+
+> [!WARNING]
+> `chrome-profile/` holds a **real, signed-in LinkedIn session**. It's the one thing here
+> that grants access to your account. Never copy it, sync it or share it. Deleting it
+> just means signing in again.
+
+## Configuration (for developers)
+
+Nothing to configure. Two optional environment variables exist:
+
+| Variable | Purpose |
+|---|---|
+| `SIX_DEGREES_HOME` | Where your data lives. Defaults to `~/.six-degrees`. It's read at launch, so it applies when you run from source, not when the Mac app is opened from the Dock or Finder. |
+| `ADMIN_TOKEN` | Not needed on your own computer. The app listens only on 127.0.0.1 and isn't built to be exposed: don't put it behind a tunnel or bind it to another address ([SECURITY.md](SECURITY.md)). If it's ever bound elsewhere, the six routes that delete data, run the scanner or update a copy run from source refuse every caller without this token, including the app's own buttons. Everything else, including reading your whole network, stays open. |
+
+## Contributing
+
+See [CONTRIBUTING.md](CONTRIBUTING.md). The rule that matters most: **never commit real
+network data**. That means no exported CSVs, no avatars, and no screenshots of real
+people.
+
+## License
+
+MIT © Blake Burford — see [LICENSE](LICENSE).

package/SECURITY.md

@@ -0,0 +1,46 @@
+# Security Policy
+
+## Reporting a vulnerability
+
+Please report security issues privately through
+[GitHub Security Advisories](https://github.com/blakeb056/six-degrees/security/advisories/new)
+rather than opening a public issue. Expect an initial response within a week.
+
+## Threat model
+
+This app is designed to run **on your own machine, against your own network**.
+
+- The web UI binds to localhost. It is not hardened for exposure to the
+  internet, and it has no multi-user authentication or per-user authorization.
+- Four API routes (`admin-delete`, `admin-update`, `delete-cluster`,
+  `setup-profile`) can irreversibly destroy or rewrite data. On localhost they
+  are allowed without a token — anyone who can reach 127.0.0.1 can already open
+  the database file directly, so a token there adds friction rather than
+  safety. Reached from any other host they require `ADMIN_TOKEN` as a bearer,
+  and refuse to run when it is unset.
+- A localhost-bound service is still reachable by any web page you visit — the
+  binding keeps other machines out, not your own browser. Every mutating API
+  request is therefore refused when the browser reports it came from another
+  site (`Sec-Fetch-Site`, with `Origin` as a fallback). Command-line callers
+  such as the scraper send neither header and are unaffected.
+- Values stored in the database are treated as untrusted text and escaped
+  before rendering. Do not reintroduce `innerHTML` (including d3's `.html()`)
+  for anything data-bearing.
+- Do not bind this app to `0.0.0.0` or expose it through a tunnel.
+
+## Your data
+
+Everything stays local:
+
+- A CSV import is parsed in the browser and held for that tab only. It is never
+  uploaded and never written to a database.
+- Scraped data and cached avatars are written to your machine and are gitignored.
+- There is no telemetry, no analytics, and no crash reporting.
+
+If you run the scraper, `chrome-profile/` in the data directory holds a live
+logged-in LinkedIn session. Never copy, sync, or commit it.
+
+Never commit `public/avatars/` or any exported CSV — they contain real people.
+`public/demo-data.json` is committed, but only ever as the generated synthetic
+sample; CI fails the build if it appears without its `"synthetic":true` marker,
+or if avatars or a raw export show up.

package/bin/six-degrees.mjs

@@ -0,0 +1,149 @@
+#!/usr/bin/env node
+/**
+ * Launcher for the published package: `npx six-degrees`.
+ *
+ * Starts the prebuilt server on this machine, opens a browser at it, and stays
+ * in the foreground so Ctrl-C stops it. Nothing is installed globally and
+ * nothing is written outside the data directory.
+ */
+import { createServer } from 'node:net';
+import { spawn } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { existsSync, mkdirSync } from 'node:fs';
+import { homedir, platform } from 'node:os';
+import path from 'node:path';
+
+const HERE = path.dirname(fileURLToPath(import.meta.url));
+const ROOT = path.join(HERE, '..');
+
+// node:sqlite is the database driver and is only available unflagged from
+// 22.13. engines is advisory, so check before anything can fail obscurely.
+const MIN_NODE = [22, 13, 0];
+function checkNode() {
+  const parts = process.versions.node.split('.').map(Number);
+  for (let i = 0; i < MIN_NODE.length; i++) {
+    if ((parts[i] || 0) > MIN_NODE[i]) return;
+    if ((parts[i] || 0) < MIN_NODE[i]) {
+      console.error(
+        `\n  six-degrees needs Node ${MIN_NODE.join('.')} or newer (this is ${process.versions.node}).` +
+        `\n  It uses node:sqlite, which older versions do not provide.\n`
+      );
+      process.exit(1);
+    }
+  }
+}
+
+function parseArgs(argv) {
+  const out = { port: Number(process.env.PORT) || 6363, open: true };
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === '--port' || a === '-p') out.port = Number(argv[++i]);
+    else if (a === '--no-open') out.open = false;
+    else if (a === '--data-dir') process.env.SIX_DEGREES_HOME = argv[++i];
+    else if (a === '--help' || a === '-h') out.help = true;
+    else if (a === '--version' || a === '-v') out.version = true;
+  }
+  return out;
+}
+
+const HELP = `
+  six-degrees — map your professional network as a galaxy, on your own machine
+
+  Usage
+    npx six-degrees [options]
+
+  Options
+    -p, --port <n>      port to listen on (default 6363)
+        --data-dir <p>  where to keep the database (default ~/.six-degrees)
+        --no-open       do not open a browser
+    -h, --help          show this
+    -v, --version       print the version
+
+  Your data stays on this machine. Nothing is uploaded.
+`;
+
+// Walk upward from the requested port rather than failing when it is taken —
+// a port collision is the most common way a local tool wastes someone's time.
+function freePort(start, attempts = 20) {
+  return new Promise((resolve, reject) => {
+    let port = start;
+    const tryPort = () => {
+      const srv = createServer();
+      srv.once('error', () => {
+        srv.close();
+        if (++port - start >= attempts) reject(new Error('no free port found'));
+        else tryPort();
+      });
+      srv.once('listening', () => srv.close(() => resolve(port)));
+      srv.listen(port, '127.0.0.1');
+    };
+    tryPort();
+  });
+}
+
+function openBrowser(url) {
+  const cmd = platform() === 'darwin' ? 'open' : platform() === 'win32' ? 'start' : 'xdg-open';
+  const args = platform() === 'win32' ? ['', url] : [url];
+  try {
+    spawn(cmd, args, { stdio: 'ignore', detached: true, shell: platform() === 'win32' }).unref();
+  } catch {
+    /* a browser that will not open is not worth failing over */
+  }
+}
+
+async function main() {
+  const args = parseArgs(process.argv.slice(2));
+
+  if (args.help) { console.log(HELP); return; }
+  if (args.version) {
+    const { default: pkg } = await import(path.join(ROOT, 'package.json'), { with: { type: 'json' } });
+    console.log(pkg.version);
+    return;
+  }
+
+  checkNode();
+
+  const dataDir = process.env.SIX_DEGREES_HOME || path.join(homedir(), '.six-degrees');
+  if (!existsSync(dataDir)) mkdirSync(dataDir, { recursive: true });
+
+  const server = path.join(ROOT, '.next', 'standalone', 'server.js');
+  if (!existsSync(server)) {
+    console.error(
+      '\n  This package is missing its build output.' +
+      '\n  If you are running from a clone, build it first:  npm run build\n'
+    );
+    process.exit(1);
+  }
+
+  const port = await freePort(args.port);
+  const url = `http://127.0.0.1:${port}`;
+
+  process.env.PORT = String(port);
+  process.env.HOSTNAME = '127.0.0.1';
+  process.env.SIX_DEGREES_BIND = '127.0.0.1';   // read by the destructive-route gate
+  // Tells the Updates panel how to update: a git checkout run from source
+  // updates with git; the npm package (once published) with npx.
+  process.env.SIX_DEGREES_INSTALL = existsSync(path.join(ROOT, '.git')) ? 'source' : 'npm';
+  process.env.SIX_DEGREES_HOME = dataDir;
+  process.env.NEXT_TELEMETRY_DISABLED = '1';
+
+  console.log(`
+  six-degrees
+
+  ▸ Running at   ${url}
+  ▸ Data         ${dataDir}
+
+  Nothing leaves this machine. Press Ctrl-C to stop.
+`);
+
+  // The standalone server resolves its assets relative to its own directory.
+  process.chdir(path.join(ROOT, '.next', 'standalone'));
+  await import(server);
+
+  if (args.open) setTimeout(() => openBrowser(url), 600);
+}
+
+main().catch((err) => {
+  console.error('\n  Failed to start:', err?.message || err, '\n');
+  process.exit(1);
+});

package/db/schema.js

@@ -0,0 +1,160 @@
+// The database schema, kept as a module rather than a .sql file on disk.
+//
+// It used to be read with fs from process.cwd() + 'db/schema.sql', which
+// works when the app is started from its own directory and fails everywhere
+// else — including from an installed package, which is the whole point of
+// shipping this. Bundlers follow an import; they do not follow a runtime
+// file read.
+//
+// Every statement is CREATE ... IF NOT EXISTS, so applying it is both
+// first-run setup and a no-op on every later boot.
+
+export const SCHEMA_SQL = `-- 6 Degrees — local SQLite schema.
+--
+-- Ported from the Postgres schema this project ran on before it went
+-- local-first. Type mapping: uuid -> TEXT (generated in JS), jsonb and
+-- text[] -> TEXT holding JSON, boolean -> INTEGER 0/1, timestamptz and date
+-- -> TEXT holding ISO-8601. lib/db.js encodes and decodes these so route
+-- code sees the same shapes it always did.
+
+PRAGMA journal_mode = WAL;
+PRAGMA foreign_keys = ON;
+
+CREATE TABLE IF NOT EXISTS users (
+  id                      TEXT PRIMARY KEY,
+  name                    TEXT NOT NULL,
+  headline                TEXT,
+  role                    TEXT,
+  company                 TEXT,
+  industry                TEXT,
+  sectors                 TEXT,            -- JSON array
+  goals                   TEXT,            -- JSON array
+  linkedin_url            TEXT,
+  company_prestige_config TEXT,            -- JSON object
+  created_at              TEXT DEFAULT (datetime('now'))
+);
+
+CREATE TABLE IF NOT EXISTS linkedin_connections (
+  id                      TEXT PRIMARY KEY,
+  degree                  INTEGER NOT NULL DEFAULT 1,
+  source_connection_id    TEXT,
+  name                    TEXT NOT NULL,
+  headline                TEXT,
+  company                 TEXT,
+  role                    TEXT,
+  profile_url             TEXT NOT NULL,
+  profile_image_url       TEXT,
+  connected_date          TEXT,
+  power_score             REAL DEFAULT 0,
+  seniority_score         REAL DEFAULT 0,
+  company_prestige_score  REAL DEFAULT 0,
+  influence_signals       TEXT DEFAULT '{}',   -- JSON
+  tier                    TEXT,
+  is_catalyst             INTEGER DEFAULT 0,   -- boolean
+  catalyst_score          REAL DEFAULT 0,
+  circle_power            REAL DEFAULT 0,
+  circle_s_count          INTEGER DEFAULT 0,
+  circle_a_count          INTEGER DEFAULT 0,
+  circle_elite_pct        REAL DEFAULT 0,
+  unlock_status           TEXT DEFAULT 'locked',
+  unlocked_from_bridge_id TEXT,
+  unlocked_from_name      TEXT,
+  outreach_status         TEXT,
+  scanned_company         TEXT,
+  score_why               TEXT,
+  user_id                 TEXT,
+  image_refreshed_at      TEXT,
+  created_at              TEXT DEFAULT (datetime('now')),
+  updated_at              TEXT DEFAULT (datetime('now'))
+);
+
+-- Mirrors the Postgres uniqueness rule: one row per person, per bridge, per
+-- user. COALESCE keeps NULLs from defeating the constraint the way they would
+-- in a plain UNIQUE index.
+CREATE UNIQUE INDEX IF NOT EXISTS idx_connections_unique_per_user_bridge
+  ON linkedin_connections (
+    profile_url,
+    COALESCE(source_connection_id, ''),
+    COALESCE(user_id, '')
+  );
+
+CREATE INDEX IF NOT EXISTS idx_connections_degree      ON linkedin_connections(degree);
+CREATE INDEX IF NOT EXISTS idx_connections_user        ON linkedin_connections(user_id);
+CREATE INDEX IF NOT EXISTS idx_connections_power       ON linkedin_connections(power_score DESC);
+CREATE INDEX IF NOT EXISTS idx_connections_source      ON linkedin_connections(source_connection_id);
+CREATE INDEX IF NOT EXISTS idx_connections_tier        ON linkedin_connections(tier);
+
+CREATE TABLE IF NOT EXISTS user_stats (
+  id             TEXT PRIMARY KEY,
+  xp             INTEGER DEFAULT 0,
+  level          INTEGER DEFAULT 1,
+  streak_weeks   INTEGER DEFAULT 0,
+  last_scrape_at TEXT,
+  last_active_at TEXT DEFAULT (datetime('now')),
+  created_at     TEXT DEFAULT (datetime('now'))
+);
+
+CREATE TABLE IF NOT EXISTS notifications (
+  id         TEXT PRIMARY KEY,
+  user_id    TEXT,
+  type       TEXT NOT NULL,
+  title      TEXT NOT NULL,
+  message    TEXT,
+  icon       TEXT,
+  seen       INTEGER DEFAULT 0,   -- boolean
+  data       TEXT DEFAULT '{}',   -- JSON
+  created_at TEXT DEFAULT (datetime('now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_notifications_user ON notifications(user_id, created_at DESC);
+
+CREATE TABLE IF NOT EXISTS queue_items (
+  id            TEXT PRIMARY KEY,
+  connection_id TEXT,
+  profile_url   TEXT NOT NULL UNIQUE,
+  name          TEXT NOT NULL,
+  status        TEXT DEFAULT 'suggested',
+  xp_reward     INTEGER DEFAULT 10,
+  bridge_name   TEXT,
+  created_at    TEXT DEFAULT (datetime('now')),
+  sent_at       TEXT,
+  accepted_at   TEXT,
+  scanned_at    TEXT
+);
+
+-- Company scores you set yourself (lib/scoring.js): they win over the curated
+-- list and over the network estimate. One row per canonical company name.
+CREATE TABLE IF NOT EXISTS company_scores (
+  id          TEXT PRIMARY KEY,
+  name        TEXT NOT NULL UNIQUE,
+  score       REAL NOT NULL,
+  updated_at  TEXT DEFAULT (datetime('now'))
+);
+
+-- Small key/value facts about this install, e.g. which scoring model the
+-- stored scores were computed with.
+CREATE TABLE IF NOT EXISTS app_meta (
+  key    TEXT PRIMARY KEY,
+  value  TEXT
+);
+
+-- Referenced by app/api/setup-profile but absent from the old cloud schema,
+-- so it is created here rather than inherited.
+CREATE TABLE IF NOT EXISTS user_profile (
+  id                      TEXT PRIMARY KEY,
+  user_id                 TEXT,
+  name                    TEXT,
+  headline                TEXT,
+  role                    TEXT,
+  company                 TEXT,
+  industry                TEXT,
+  sectors                 TEXT,   -- JSON array
+  goals                   TEXT,   -- JSON array
+  linkedin_url            TEXT,
+  company_prestige_config TEXT,   -- JSON object
+  created_at              TEXT DEFAULT (datetime('now')),
+  updated_at              TEXT DEFAULT (datetime('now'))
+);
+`;
+
+export default SCHEMA_SQL;

package/lib/app-version.js

@@ -0,0 +1,7 @@
+// This build's version, from package.json, for code that runs on the server.
+// An import attribute rather than a file read: a read resolves against the
+// caller's folder and breaks once the app is installed (TRAPS §4), while an
+// import is resolved at build time and works in the tests too.
+import pkg from '../package.json' with { type: 'json' };
+
+export const APP_VERSION = pkg.version;