six-degrees 0.3.0 → 0.4.0

package/.next/standalone/CHANGELOG.md

@@ -6,6 +6,292 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.4.0] - 2026-09-28
+
+### Added
+- **A cap on profile views.** A circle scan opens the person's profile once, and profile
+  views are what LinkedIn restricted an account for. They now have a cap of their own: 50
+  in any 24 hours by default. The Scan page offers 10, 25, 50 or 100, and there is no "no
+  limit".
+  - **A minute apart:** at least 60 seconds pass between any two profile opens. It's timed
+    from the last one written down, so scans started back to back can't open profiles back
+    to back. The log counts down while it waits, and Stop ends the wait.
+  - **Checked before the profile opens:** at the cap, a scan opens nothing and records
+    nothing about that person. Auto-Bridge stops, as it does at the search budget, and the
+    next run starts with the same person.
+  - **On the Scan page:** "3 of 50 profile views today", with a bar and the picker.
+  - **Re-mapping someone** checks it before deleting their circle. A damaged record counts
+    the day's views as used. An import brings the other computer's setting only when this
+    one has none, like the search budget.
+- **The Scan page asks what field you're in, before your first scan.** One optional step,
+  with the same picks as *Scores → Your sector*: tech, government and defense, dental, and
+  the rest. Companies in your field count for more, so your first scores already use it.
+  *Skip for now* carries on without one. Both stay at the bottom of the window while you
+  look through the list. It's asked once, and never if you already have a network or picked
+  a sector. Change it anytime on the Scores tab.
+- **Bridge Chains opens any circle, as far as your scans reach.** Click someone in a
+  bridge's circle and their own circle opens in place: the people found in it once you
+  connected and scanned it (3rd degree, counted along the chain), and on from there. A
+  trail at the top, and Esc, go back. An empty circle says why and what gets it: connect,
+  then scan their circle. While one is being scanned, it fills in as the scan saves.
+  Someone ready for a scan goes to the Scan page with them picked instead, since their
+  circle is empty until then.
+- **A soft glow on people ready for a scan.** In Bridge Chains, someone you added through
+  a circle whose own circle isn't scanned yet has a soft breathing halo, and their bridge
+  says how many are "ready". A hidden list is greyed with a lock instead. The halo stays
+  still with Reduce Motion on. The old rainbow glow is gone: it looked for them inside the
+  circle they came from, which accepting takes them out of, so it never showed.
+- **Ready to scan (N), in the Degrees panel.** It replaces *Auto-Bridge Next*, which
+  started a scan in one click, by name, with no cost shown, and offered hidden lists again
+  and again. The list is everyone you added through a circle whose circle can be scanned,
+  strongest first, with the circle you found them in and what a scan costs. Hidden lists
+  stay in view, greyed with a lock.
+- **Scan one circle, on the Scan page.** A ready person, from the list or Bridge Chains,
+  opens the Scan page with them picked: the cost (a profile view, then a search a page, up
+  to 100), what's left of the day's budget, how deep to read, and a button. Nothing starts
+  until it's pressed.
+- **A release checks the website's version lines.** Before building anything, the release
+  workflow runs `scripts/check-site-version.mjs`: the site's `softwareVersion` and
+  `llms.txt` must name the version, and its `dateModified` and sitemap `lastmod` can't be
+  older than the release's date in the changelog. A stale site stops the release with a
+  line for each thing to change. A pre-release skips it. Anyone can run it before tagging.
+
+### Changed
+- **A big circle spreads out.** A bridge's circle used to sit on one ring, so a few hundred
+  people were almost a solid line. It now fills rings from the inside out, as many as it
+  needs, with the highest tiers nearest the middle; drag to move, scroll or +/− to zoom.
+  Lots of bridges spread the same way, and so does the preview on hover.
+- **The map picks up a finished scan by itself.** No refresh needed.
+- **One rule for "ready".** Bridge Chains, the Degrees panel, Outlink's new doors and the
+  profile page's mapping bar now agree on who can be scanned next, and all leave hidden
+  lists out.
+- **Photos stay on your Mac.** The app shows a profile photo only from the copy saved on
+  your computer, so looking at your network never contacts LinkedIn. It used to load a
+  photo from LinkedIn until a scan had saved it, and a rescan could put LinkedIn's link
+  back in place of a saved photo. Every page now also tells the browser to load pictures
+  from the app alone, and the scanner fetches photos from LinkedIn's image servers only.
+- **Photos an older version kept as links are saved once.** Until then those people show
+  initials. The next scan saves them at its end, or *Save photos* on the Scan page does it
+  now, without opening a browser. A link more than a few weeks old has expired: that
+  person's photo comes back when they're next scanned. Offline, or with LinkedIn's image
+  server busy, nothing is forgotten, and *Save photos* stops and says why.
+- **Government and military titles are read.** A senator, a governor, a mayor and a cabinet
+  secretary score like a C-suite; their deputies, state legislators, commissioners,
+  ambassadors and judges like a VP; a city councilmember or a sheriff like a director.
+  Officers by rank: a 3–4 star general or admiral 10, a 1–2 star 9, a colonel 7.5, a
+  lieutenant colonel 6.5, a major 5, and a commander by their unit. "(Ret.)" and
+  "Retired" make a role former. They count only where a title is written, and only where
+  their own organization is a government's or a service's: a staffer in an Office of the
+  Secretary, a veteran's civilian job, a city manager at Uber, a Rotary district governor,
+  a team captain or a Kentucky colonel isn't one. A title that doesn't say whose it is
+  ("Mayor", "Police Chief", "Ambassador") needs its government named, or stays "Title
+  unclear": a missed official is a neutral 4, a realtor read as a mayor would be an A.
+  Until now all of them were "Title unclear" (a U.S. senator scored 2.9, C).
+- **One name: Six Degrees.** The header, the welcome screen, the loading and launch pages,
+  the side panel and the Terminal installer said "6 Degrees". They now say Six Degrees, as
+  the window title and the app in Applications already did.
+- **Contributor docs and `.gitignore`.** CONTRIBUTING says npm releases go out through
+  trusted publishing, with no token to set, and that `npm run build:desktop` builds the app
+  releases ship (`build:app` is the old launcher). `.gitignore` keeps a LinkedIn export, a
+  database, a saved copy of a network and the scanner's signed-in browser profile out of a
+  commit, wherever they sit in the tree. A local build keeps them out of the app too, and
+  its list of uncommitted files inside the app now names ignored ones as well.
+- **0.4.0-beta.1, promoted: this is now the Mac app and npm package everyone gets.** It adds:
+  - **Their circle, on every card,** with rarity beside the tier and LinkedIn's own mutual count.
+  - **One scan at a time,** and *Resume* beside *Rescan*.
+  - **Tiers on your own network's curve,** with unknown companies at a neutral 5.
+  - **631 public organizations** the built-in list leaves off, and **scoring 6.**
+  - **Scores, a tab of its own.**
+
+  The details are under 0.4.0-beta.1 below.
+- **The download page** says what's new in 0.4.0.
+- **Degrees' corner toggle says Orbit, which is what it shows.** It said "Galaxy", but
+  the Galaxy is a Network Circle view, so Degrees fell back to Orbit. It switches
+  between Orbit and Bridge Chains, and it's on whenever Orbit is showing.
+
+### Removed
+- **About 630 lines of Galaxy code that never ran:** a Degrees drawing from before Orbit
+  and Bridge Chains. Nothing could open it. The Galaxy draws Network Circle only.
+
+### Fixed
+- **A one-person scan notes a hidden list.** A card's Scan or Rescan that found someone's
+  list hidden said so and noted nothing, so they stayed "not scanned yet" and were offered
+  again forever. Only a batch noted it. Now every read from page 1 does.
+- **A scan reads the list of the person you picked.** A card's Scan and Rescan went by
+  name, so with two connections of the same name the scanner could read the other one's
+  list. Every Scan button now goes by that person's profile, as Resume already did.
+- **A company's name after "at" is no longer read as a title.** "Server at President Hotel"
+  scored as a C-suite (7.3, A), and so did an IT specialist in an "Office of the Chief
+  Information Officer". "Executive Assistant to the General Manager" scored as a VP.
+- **↻ asks before it scans.** The round button in the header started *Check for new* the
+  moment it was clicked. It now says what it will do (open Chrome on your connections list
+  and read it until it reaches people already saved) and what it costs (no search budget,
+  but it is LinkedIn traffic from your account), and waits for OK.
+- **No Scan buttons on the sample or a CSV import.** Every card there offered a scan of
+  that person's circle, and Degrees offered *Auto-Bridge Next*, but both networks live
+  only in the window, so the scan could only fail ("Bridge '…' not found in database").
+  In their place a line says scanning needs your own network.
+- **A CSV import's dates are the day LinkedIn says.** Anywhere east of London, each "Connected
+  On" date landed a day early (28 Sep 2026 became 27 Sep). The import now reads it as the
+  calendar date it is, the way a scan already did, and a date it can't read is left blank
+  rather than guessed.
+- **Opening a panel no longer rebuilds the Galaxy.** Opening or closing the side panel or
+  the Filter panel used to draw the Galaxy again from scratch: the layout started over,
+  the selection ring vanished, and a big network stalled the page. Now the view slides
+  over at the same zoom, so what was in the middle stays in the middle.
+- **The selection ring stays on the person you picked.** It is tied to their dot, and it
+  comes back after a tier filter that still shows them. It used to follow the first dot
+  it found near its old spot, which could be someone else, even You. *Back to list*
+  clears it.
+- **The selection ring pulses gently, as it was always meant to.** Its animation had only
+  ever been written in code that never ran. With Reduce Motion on, it holds still.
+- **Hovering a dot eases it up to 1.5 times its size,** instead of jumping. With Reduce
+  Motion on, it still changes at once.
+- **The Galaxy draws faster on a big network.** Colouring its lines searched every person
+  for every line: about 1.4 s at 30,000 people, on every draw. It now takes under a
+  millisecond.
+- **The main screen no longer stalls when nothing is selected on a big network.** The
+  side panel's Power Rankings counted every tier again for each person in the list, even
+  with the panel closed. At 30,000 people that took about 20 s each time the screen
+  redrew, opening the Filter panel included.
+- **On a laptop, the Galaxy keeps its usual layout with a panel open.** Its fixed phone
+  layout used to switch on whenever the graph was under 768 pixels wide, which a tier
+  filter picked with a panel open could do. It now follows the window, as the page does.
+
+## [0.4.0-beta.1] - 2026-09-28 (beta: a pre-release, never installed automatically)
+
+### Added
+- **Their circle, on every card.** Open one of your connections and the top of their card
+  is a small map of their circle. Their scanned connections sit round them (D2). Anyone
+  you connected with from it gets a green ring, and their own circle fans out behind
+  them (D3), on out to D6. A request you've sent and they haven't accepted is a dotted
+  dot. Tap the map for the large one, where any dot opens that person. It's built from
+  what the app already keeps (whose circle someone was found in, and who introduced
+  you), so it needs no extra scanning. Not scanned yet? It says so, and points at the
+  scan below.
+- **Rarity, beside the tier.** How many mutual connections lead to someone, in five
+  bands: *Only way in* (1), *Rare* (2–3), *Uncommon* (4–10), *Common* (11–30) and
+  *Warm* (31+). It's a distinction, never a score: tiers and power are untouched.
+  Rarity and the tier filter together, in the circle and in Separation, so "S" and
+  "Only way in" is exactly the rare finds, and "S" and "Warm" the easy wins. Until a
+  scan saves LinkedIn's own count, it's counted from the circles you've scanned, which
+  can only go up as you scan more, and everywhere it shows says so.
+- **Resume beside Rescan on a profile card.** When someone's list was only partly read (a
+  page limit, a stop, LinkedIn pushing back), their card offers *Resume from page N* next
+  to *Rescan from the start*: the same carry-on as the Scan page's Paused list, for that
+  one person. LinkedIn lists other people's connections in its own order, with no dates,
+  so anyone new can be on any page: Rescan reads the whole list again from page 1, and
+  Resume picks up where the last read stopped. A list read to the end says so instead.
+- **LinkedIn's own mutual count, from circle scans.** Everyone a circle scan finds now
+  carries LinkedIn's count of the mutual connections you share with them, read from the
+  line under their result card ("Maya Chen and 23 other mutual connections" is 24).
+  - **No extra page views:** the line was already on the pages the scanner reads.
+  - **One count per person:** every copy of the person, one per bridge that knows them,
+    keeps the newest count read. A scan that doesn't see the line leaves the count alone.
+  - **Used by rarity** in place of the count from your scans, which could only be a floor.
+  - **Not yet tried against live LinkedIn,** and it reads English wording only. The first
+    real circle scan is the check. Any other wording reads as no count, never a wrong one.
+- **A public company dataset: 631 organizations the built-in list leaves off,** scored 6
+  to 8 from public facts on one published scale, each with its source beside it (an exchange
+  listing, a reported valuation, a U.S. News rank, a federal department's size).
+  - **The Fortune 500 (2025):** 376 companies, and the brands their staff write as their
+    employer (KeyBank, Alaska Airlines, VMware, The Wall Street Journal…).
+  - **The U.S. federal government:** 114 entries. The departments and military branches
+    are 8; agencies and national labs 7. Each is matched only by forms that say which one
+    it is: "US Army", never "Army" alone.
+  - **Universities ranked 21–100 by U.S. News:** 77 of them.
+  - **64 more, researched one by one,** among them Anduril, CoreWeave, MLB, WWE, UF and UCF.
+
+  Someone there is scored from those facts, not as an unknown company, and the Scores tab
+  labels the score *public data*. The list is built from public sources only, never from
+  anyone's scan, and grows each release. The built-in list itself is unchanged: household
+  names only, 7 and up.
+- **A card says when a score is a guess, and what would firm it up.** When someone's headline
+  gives the app no title to read, or no company it knows, the top of their card says so
+  ("Their score is a guess. The app couldn't find where they work.") and offers *Scan their
+  circle*, which brings the scan button into view. Who you can reach through them is what the
+  score can read instead, and a strong circle adds up to +2.
+
+### Fixed
+- **A request you send shows everywhere, at once.**
+  - **Before:** *Connect to Unlock Path* marked one bridge's copy of the person and told
+    nothing else on the page.
+    - The card kept offering the link.
+    - Separation, Orbit and the circle never showed it, even after a reload.
+    - Every click awarded XP again.
+    - Undo took back only half of it.
+  - **Now:** a request belongs to the person, in one list every view reads, so the
+    card, Separation, Orbit, the new circle, the Outlink queue and the Pending badge
+    all change the moment you click.
+  - **The details:**
+    - The bridge whose circle you found them in is kept, so once they accept, their
+      card and circle say who introduced you.
+    - XP comes once per person.
+    - *Didn't send it? Undo* on the card takes all of it back, the XP too.
+- **One scan at a time, and every Scan button knows it.** A scan started on one profile
+  card left the Scan button on every other card clickable, and *Auto-Bridge Next*, the ↻
+  refresh and Paths' company scan too. Pressing one was refused, and the card then said
+  *"Scan failed — connections may be private"* about a scan that had never started. Now
+  they all grey out while anything runs and say what does ("Ada Park's circle is being
+  scanned. One scan at a time…"), even a scan started on the Scan page or in another
+  window. Close a card mid-scan and open it again and its progress is still there; when it
+  ends, the card says so. The page asks the scanner once for all of them
+  (`/api/scraper?job=1`, which reads only memory), not once per button.
+- **Company names written in styled letters or with a logo are read.** "𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁",
+  "Apple " (with Apple's logo) and "Snapchat｜ex-L'Oréal" (a full-width bar) used to read
+  as unknown companies. So did "Meta Superintelligence Labs" and "Snapchat MENA Region",
+  and a class year ("UCF ’26") hid the school.
+- **"President's Club" is a sales award, not a president.** A title's possessive read as
+  the title, so "Account Executive at Oracle | 3x President's Club" scored 7.3 (A) as a
+  C-suite, and so did "Chairman's Award" and "Chief of Staff, CEO's Office". It's the
+  title's own: 3.6 (C), and a chief of staff is a director again (5.4, B).
+
+### Changed
+- **Tiers are graded on your own network's curve** (new: *Scores → Tiers*, and the default).
+  Your top 3% of connections are S, the next 12% A, the next 25% B and the next 30% C, so
+  the first scan of any network has a top, not only a network full of companies the app
+  knows. The curve only lifts: nobody drops a tier because their network is strong, and
+  nobody under 4 is lifted into S or A. People tied at a line all come in or all stay out.
+  Choose *On the fixed scale* for the lines as they were (S ≥ 7.5, A ≥ 5.5, B ≥ 4, C ≥ 2.5).
+  A LinkedIn CSV import opened in the app is always graded on its own curve.
+- **A company the app doesn't know is neutral.** It counts as 5, the middle of the scale
+  (it was 4, and 3 when no company was found), so the people the built-in list doesn't
+  know aren't pushed down a tier for it. A founder at an unknown company scores 7.3 (was
+  6.7), a director 5.4 (was 5.0). Claims in their headlines still count half. Your network
+  is rescored once, the first time the map loads after updating.
+- **The power score reads more of who someone is.** A review of the score found kinds of
+  people it ranked too low:
+  - A title's company written without "at" counts: "Global Category President | The
+    Coca-Cola Company" scores 9.5 (S), not 7.3 (A), and so does "Corporate VP, Samsung".
+    Only a company the app knows, and not after a founder's, an owner's or a CEO's title,
+    not a program or a degree ("AWS Community Builder", "Harvard MBA"), and not a school
+    after a title that isn't an academic's.
+  - "MD @ J.P. Morgan", "MD, Investment Banking", "Head of Country" and "Country Head" are
+    senior, like a managing director; "MD, MBA" and "Physician, MD" aren't.
+  - Universities have their own ladder: an assistant professor 5, an associate professor
+    6.5, a professor 7.5 (was 4, an entry-level job), a dean 9, a provost or a chancellor 10.
+  - An audience of their own counts like a title: 100K+ followers like a manager's, 1M+ a
+    director's, 10M+ a VP's. A creator with 2.5M followers scores 5.8 (A), not 3.3 (C).
+  - A title the app can't read counts as an individual contributor's (4, was 3), so a
+    founder whose headline names no title or company isn't put below every job.
+  - A strong circle counts by how many strong people are in it, not only by their share:
+    +1 for every 25 at A or S, up to +2 (was up to +1). A vague title at a big company with
+    72 of them in a circle of 600 scores 5.6 (A), not 3.6 (C).
+
+  Your network is rescored once, the first time the map loads after updating. The sample
+  network's tiers don't change.
+- **Scores has a tab of its own.** How a power score is worked out and the three things you
+  can change about it are in one place: your field (*Your sector*), how tiers are graded
+  (*Tiers*) and every company's score. Company scores used to be a tab inside Paths, and the
+  other two were in Settings. Old links (*Paths → Scores*, *Settings → Your sector*,
+  *Settings → Tiers*) forward there, and Settings says where they went.
+- **Separation's map is "who to ask next".** It skips anyone you've already asked or
+  already know. Send requests to its ten and the next ten come up. The list below
+  still shows everyone, marked *Request sent* or *Connected*, with their rarity.
+
+### Removed
+- **The Revolver view.** Degrees keeps Separation, Orbit, Bridge Chains, Pyramid and List.
+
 ## [0.3.0] - 2026-09-26
 
 ### Changed

package/.next/standalone/CONTRIBUTING.md

@@ -42,16 +42,27 @@ run `node scripts/pin-python-packages.mjs`.
 
 Bump the version, tag it, push the tag. `.github/workflows/release.yml` builds the
 Mac app for Apple Silicon and Intel, publishes both `.dmg` files and a `SHA256SUMS`
-file on a GitHub Release (which is what `install.sh` downloads), and publishes to
-npm when an `NPM_TOKEN` secret is set.
+file on a GitHub Release (which is what `install.sh` downloads), and publishes the npm
+package through npm's trusted publishing: npm accepts this repository's
+`release.yml`, and GitHub vouches for each run, so there is no npm token to set or
+keep. A tag with a hyphen (`v0.4.0-beta.1`) is a pre-release on GitHub and goes to npm
+under `next`, so neither `install.sh` nor `npx six-degrees` picks it up.
+
+A full release also bumps the download website's version lines (`docs/SEO.md`, "Release
+checklist"). `node scripts/check-site-version.mjs` says whether they match
+`package.json` and the release's date in `CHANGELOG.md`; the release workflow runs it
+before building anything and stops if they don't. A pre-release skips it.
 
 ```bash
 npm version 0.2.0 --no-git-tag-version
+node scripts/check-site-version.mjs
 git commit -am "Release 0.2.0" && git tag v0.2.0 && git push --follow-tags
 ```
 
-To try a packaged build locally: `npm run build:app`, then
-`SIX_DEGREES_DMG=dist/Six-Degrees-<version>-arm64.dmg bash install.sh`.
+To try a packaged build locally: `npm run build:desktop`, then
+`SIX_DEGREES_DMG=dist/Six-Degrees-<version>-arm64.dmg bash install.sh`. That is the
+Electron app releases ship. `npm run build:app` builds the older classic launcher, kept
+only as a fallback.
 
 The picture behind the `.dmg` window is `scripts/dmg/background.html`. After changing
 it, run `node scripts/make-dmg-background.mjs` (needs Google Chrome) and commit the

package/.next/standalone/README.md

@@ -1,5 +1,5 @@
 <p align="center">
-  <a href="https://blakeb056.github.io/six-degrees/"><img src="desktop/icon/icon.svg" width="128" height="128" alt="Six Degrees website"></a>
+  <a href="https://sixdegreesapp.com/"><img src="desktop/icon/icon.svg" width="128" height="128" alt="Six Degrees website"></a>
 </p>
 
 <h1 align="center">Six Degrees</h1>
@@ -18,7 +18,7 @@
   <a href="https://github.com/blakeb056/six-degrees/releases/latest/download/Six-Degrees-Mac-Intel.dmg"><img src="docs/img/download-intel.png" width="346" alt="Download Six Degrees for a Mac with an Intel chip"></a>
 </p>
 
-<p align="center"><sub>Free Mac app · macOS 13.5 or later · <a href="https://blakeb056.github.io/six-degrees/">website</a> · <a href="https://github.com/blakeb056/six-degrees/releases/latest">what's new</a></sub></p>
+<p align="center"><sub>Free Mac app · macOS 13.5 or later · <a href="https://sixdegreesapp.com/">website</a> · <a href="https://github.com/blakeb056/six-degrees/releases/latest">what's new</a></sub></p>
 
 **Which download?** Apple menu → **About This Mac**. If it says "Chip: Apple M…", take
 **Apple Silicon**. If it says "Processor: …Intel…", take **Intel**. It needs **macOS 13.5
@@ -123,8 +123,7 @@ whose own circles reach the furthest, and the shortest chain from you to a stran
 worth meeting.
 
 It's a Mac app (or `npx six-degrees` on Linux). It runs on your computer, against your own data, with no account and
-no server. (Inside the app the logo reads *6 Degrees*; in Applications it's **Six
-Degrees**.)
+no server.
 
 ## Before you scan LinkedIn
 
@@ -137,8 +136,9 @@ Degrees**.)
 > - Search was blocked after results were read too fast (2026-09-24).
 >
 > The scanner now reads slowly and keeps to a search budget (by default 50 a day and 250
-> a month; you can change it on the Scan page). It locks itself during a cooldown, and
-> stops at the first sign of push-back. The risk is still yours.
+> a month) and a cap on profile views (50 a day, at least a minute apart). You can change
+> both on the Scan page. It locks itself during a cooldown, and stops at the first sign of
+> push-back. The risk is still yours.
 >
 > **The CSV import and the sample network carry no LinkedIn risk at all.** Details:
 > [how scanning works and what it risks](docs/SCRAPING.md).
@@ -147,12 +147,13 @@ Degrees**.)
 
 The app opens on a welcome screen with three ways in, and asks nothing about you:
 
-- **Scan my LinkedIn**: a guided page that ticks each step off as it goes. It sets up
-  the scanner in one click, you sign into LinkedIn yourself in a Chrome window, and then
-  it scans. Needs Google Chrome. The Mac app brings its own Python; with `npx six-degrees`
-  the page uses yours, or sets up a private one with a click. It checks and says what's
-  missing. The app marks this *Recommended* because it's the only way to Degrees and
-  Outlink. Read the warning above first.
+- **Scan my LinkedIn**: a guided page that ticks each step off as it goes. It first asks
+  one optional question, what field you're in (see *Your sector* below), and *Skip for
+  now* is fine. Then it sets up the scanner in one click, you sign into LinkedIn yourself
+  in a Chrome window, and then it scans. Needs Google Chrome. The Mac app brings its own
+  Python; with `npx six-degrees` the page uses yours, or sets up a private one with a
+  click. It checks and says what's missing. The app marks this *Recommended* because
+  it's the only way to Degrees and Outlink. Read the warning above first.
 - **Import my LinkedIn CSV**: LinkedIn's official export, read on your machine. On
   LinkedIn: **Settings & Privacy → Data privacy → Get a copy of your data →
   Connections**. LinkedIn emails a link in about ten minutes; unzip it and drop
@@ -186,8 +187,8 @@ panel on the left.
 
 **Degrees** *(needs a scan or the sample)*. The people two steps away. **Separation**
 ranks every one of them with every way in: which of your connections knows them, and
-how many do. **Orbit**, **Bridge Chains**, **Revolver**, **Pyramid** and **List** draw
-the same people differently.
+how many do. **Orbit**, **Bridge Chains**, **Pyramid** and **List** draw the same people
+differently.
 
 <img src="docs/img/degrees.png" alt="Degrees → Separation: people two steps away, ranked, each with the connection who can introduce you" width="100%">
 
@@ -197,13 +198,16 @@ InMaps:
   where your connections at one know people at another.
 - **Industries**: a card per industry.
 - **Companies**: pick one to see its people level by level, up to the top.
-- **Scores**: every scanned company's score, which you can change.
 
 Click a company for its analyzer: who you know there, who you can reach, the warmest way
 in, and its most powerful people.
 
 <img src="docs/img/paths.png" alt="Paths → Map with the company analyzer open: companies grouped by industry, and one company's people by level and ways in" width="100%">
 
+**Scores.** How a power score is worked out, and the three things you can change about
+it, in one place: your field (the sectors you work in), how tiers are graded (on your
+network's curve or the fixed scale), and every scanned company's score.
+
 **Outlink** *(needs a scan)*. Getting introduced, as a game. Each mapped connection's
 circle offers its best five people at a time; mark invites as sent to fill the ring and
 unlock the next five. It also shows the next best moves, levels and points (from
@@ -216,20 +220,28 @@ lock, and a **Paused** list you can carry on from.
 
 ```
 power = title × (0.45 + 0.055 × company score) + reach bonus + bridge boost
-tiers:  S ≥ 7.5   A ≥ 5.5   B ≥ 4.0   C ≥ 2.5   D < 2.5
+tiers, on your network's curve (the default):  your top 3% S, then A to 15%, B to 40%, C to 70%
+tiers, on the fixed scale:                     S ≥ 7.5   A ≥ 5.5   B ≥ 4.0   C ≥ 2.5   D < 2.5
 ```
 
-- **Title (1–10)** comes from someone's current role in their headline, with former
-  roles at 70%; current students are capped.
-- **Company score (1–10)** is the one you set (Paths → Scores) if there is one. Otherwise
+- **Title (1–10)** comes from someone's roles in their headline, with former roles at
+  70%; current students are capped. Academics have their own ladder (an assistant
+  professor 5 up to a dean 9), and so do government and the services (a city
+  councilmember or a colonel 7.5 up to a senator or a four-star general 10), read only
+  where a title is written. An audience of their own counts like a title (100K+
+  followers 6.5, 1M+ 7.5, 10M+ 9), and a title it can't read counts as an individual
+  contributor's (4).
+- **Company score (1–10)** is the one you set (the Scores tab) if there is one. Otherwise
   it comes from a built-in list of well-known companies, or from how many of your people
   work there. The built-in list is the same for everyone and follows one rule: only
   companies most US professionals would recognise (household names, the largest companies,
   top investment, consulting, law and accounting firms, frontier AI labs, top universities),
-  scored 7 to 10. Anything else is estimated from your network. If you scanned with an
-  earlier version, Paths → Scores offers once to keep its old scores for the companies in
+  scored 7 to 10. Anything else is estimated from your network: a company it doesn't
+  know counts as 5, the middle of the scale, a little more when several of your people
+  work there. If you scanned with an
+  earlier version, the Scores tab offers once to keep its old scores for the companies in
   your network whose score changed.
-- **Your sector (Settings, optional):** pick up to three sectors you work in, and companies
+- **Your sector (Scores, optional):** pick up to three sectors you work in, and companies
   in them get +1 ("lean") or +2 ("strong") on that score, once, never above 10 and never on
   a score you set. A pick is one of twelve broad industries or a narrower sector from a
   built-in list of about fifty (Dental, Real Estate, Software & SaaS…). A sector matches by a
@@ -237,19 +249,26 @@ tiers:  S ≥ 7.5   A ≥ 5.5   B ≥ 4.0   C ≥ 2.5   D < 2.5
   people you know there, where a job every kind of company has (recruiter, accountant,
   software engineer) doesn't count. An industry includes its sectors, and a company's one
   industry when the known list or the company's name gives it, not when only its people's
-  job titles do. Settings suggests the sectors your network is in and shows what would
-  change before you save.
+  job titles do. Scores suggests the sectors your network is in and shows what would
+  change before you save. The Scan page asks for it once, before your first scan, so your
+  first scores already use it; you can skip it and pick later.
 - Multiplying means seniority counts for more at a bigger company. A VP at a company
-  scored 10 gets 9.0; a founder at an unknown company, 6.7.
+  scored 10 gets 9.0; a founder at an unknown company, 7.3.
 - **Reach bonus (up to 1.5)**: investor, YC, an audience in the millions, the top award
   of any field (a Nobel, a Pulitzer, an Oscar, an Olympic medal…). It counts half
   at an unknown company, because headlines are self-written (your sector doesn't change
   that).
-- **Bridge boost (up to 1)**: someone whose mapped circle is unusually strong.
+- **Bridge boost (up to 2)**: someone whose mapped circle is unusually strong: a high
+  share of it at A or S (up to +1), or many people there (+1 for every 25, up to +2).
+- **Tiers (Scores):** graded on your own network's curve by default, so any network has a
+  top: your top 3% of connections are S, the next 12% A, the next 25% B and the next 30% C.
+  The curve only lifts, so a network full of well-known companies keeps its tiers, and it
+  never lifts anyone under 4 into S or A. People tied at a line all come in or all stay out.
+  Choose the fixed scale instead for the same lines as everyone else.
 
 Scanned and sample people show the working ("VP / Partner / GM (9) · Adobe (8/10) · +0.7
 strong circle"). A CSV import shows the score only, and uses the built-in company list
-rather than your own scores or sectors; the sample network keeps its own. The model is
+rather than your own scores or sectors, graded on its own curve; the sample network keeps its own. The model is
 [`lib/scoring.js`](lib/scoring.js), explained in
 [`docs/brain/SCORING.md`](docs/brain/SCORING.md).
 
@@ -262,8 +281,10 @@ It estimates **network position**, not what anyone is worth as a person.
 - A CSV import is read on your machine and never added to your network. It's held only
   in the app window's own storage, and you import it again next time.
 - The app contacts only these, and only when you act:
-  - **LinkedIn**, while you scan. Also, until a profile photo has been saved to your
-    computer, the app shows it straight from LinkedIn's image server.
+  - **LinkedIn**, while you scan. Each profile photo is saved on your computer as the
+    scan reads it, and the app shows photos only from there, so looking at your network
+    never contacts LinkedIn. (Photos an older version kept as links to LinkedIn show
+    initials until the next scan, or *Save photos* on the Scan page, saves them.)
   - Only without the Mac app (which carries the scanner's Python and add-ons inside it),
     once, when you set the scanner up: **PyPI** (the Python package library) for the
     scanner's add-ons, and, if the computer has no Python the scanner can use, **GitHub**

package/.next/standalone/SECURITY.md

@@ -99,6 +99,14 @@ This app is designed to run **on your own machine, against your own network**.
 - Values stored in the database are treated as untrusted text and escaped
   before rendering. Do not reintroduce `innerHTML` (including d3's `.html()`)
   for anything data-bearing.
+- **Profile photos come from this computer only.** A page shows a photo only
+  from a file saved in the data folder (`/avatars/<name>`, `lib/photos.js`),
+  never from a link, and every page carries
+  `Content-Security-Policy: img-src 'self' data: blob:`, so the browser won't
+  load a picture from anywhere else. The scanner fetches photos only from
+  LinkedIn's image servers (`*.licdn.com`, over https): while it scans, and
+  once each for links older versions stored, which a crafted import could also
+  carry.
 - Do not bind this app to `0.0.0.0` or expose it through a tunnel.
 
 ## Your data
@@ -108,6 +116,8 @@ Everything stays local:
 - A CSV import is parsed in the browser and held for that tab only. It is never
   uploaded and never written to a database.
 - Scanned data and cached avatars are written to your machine and are gitignored.
+  The app shows photos only from those files, so looking at your network never
+  contacts LinkedIn.
 - There is no telemetry, no analytics, and no crash reporting.
 
 If you run the scanner, `chrome-profile/` in the data directory holds a live

package/.next/standalone/app/api/company-scores/legacy/route.js

@@ -1,6 +1,6 @@
 import { legacyOffer, answerLegacyOffer, parseLegacyAnswer } from '../../../../lib/legacy-offer';
 
-// Paths → Scores' one-time offer to keep the curated list's old scores as your
+// the Scores tab's one-time offer to keep the curated list's old scores as your
 // own, after the list was made neutral (lib/legacy-offer.js). GET says what is
 // offered: {offer: null} or {offer: {companies}}. POST answers it:
 // {keep: [names]} keeps those old scores, {keep: []} is No thanks, and either

package/.next/standalone/app/api/company-scores/route.js

@@ -6,7 +6,7 @@ import { industryByKey } from '../../../lib/companies';
 // Every company in your network with the score it gets and where that score
 // comes from — and the one place to set your own. Setting or clearing a score
 // rescores everyone, since a person's power depends on their company's.
-// Industries and the sector lean (Settings → Your sector) come from the same
+// Industries and the sector lean (Scores → Your sector) come from the same
 // read rescoring uses (lib/rpc.js readForScoring), so a score here is the one
 // people carry.
 

package/.next/standalone/app/api/ingest/route.js

@@ -1,6 +1,7 @@
 import { db as supabase } from '../../../lib/db';
-import { uniqueByProfile, splitAlreadyConnected, toIsoDate, refreshNotifications } from '../../../lib/ingest';
+import { uniqueByProfile, splitAlreadyConnected, toIsoDate, refreshNotifications, mutualCountOf } from '../../../lib/ingest';
 import { promoteToFirstDegree } from '../../../lib/promote';
+import { localPhoto } from '../../../lib/photos';
 
 function parseHeadline(h) {
   if (!h) return { role: '', company: '' };
@@ -29,8 +30,14 @@ export async function POST(request) {
         company: (company || (type === 'company' ? companyName : '') || '').substring(0, 100),
         role: role.substring(0, 100),
         profile_url: c.profileUrl?.trim(),
-        profile_image_url: c.imageUrl || null,
+        // Only a photo already saved on this computer. The scanner sends
+        // LinkedIn's link here, then saves the picture and attaches its file
+        // through /api/update-images; kept, the link would replace a saved
+        // photo on every rescan, and the app never shows one (lib/photos.js).
+        profile_image_url: localPhoto(c.imageUrl),
         connected_date: toIsoDate(c.connectedDate),
+        // LinkedIn's own count, read off a circle's result card; nothing else sends one.
+        mutual_count: degree === 2 ? mutualCountOf(c.mutualCount) : null,
       };
       if (degree === 2 && bridgeId) {
         rec.source_connection_id = bridgeId;
@@ -164,6 +171,20 @@ export async function POST(request) {
       return Response.json({ error: insertError.message }, { status: 500 });
     }
 
+    // How many mutual connections you share with someone is one fact about
+    // the two of you, whichever bridge's circle turned them up. Every copy of
+    // them gets the newest count read (a re-scan brings it up to date), and a
+    // scan that didn't read one leaves the count alone.
+    if (degree === 2) {
+      for (const rec of records) {
+        if (rec.mutual_count == null) continue;
+        let q = supabase.from('linkedin_connections').update({ mutual_count: rec.mutual_count })
+          .eq('profile_url', rec.profile_url).eq('degree', 2);
+        if (userId) q = q.eq('user_id', userId);
+        await q;
+      }
+    }
+
     // Image updates handled separately via /api/update-images (avoids timeout)
 
     // Rescore everyone (lib/scoring.js): a new circle changes company headcounts