six-degrees 0.7.0 → 1.0.0

package/.next/standalone/.next/static/chunks/403dpflln8ah5.js

@@ -0,0 +1 @@
+(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,94657,e=>{"use strict";var t=e.i(43476),n=e.i(71645),r=e.i(7837);let o=e=>`${e.name} ${e.was} → ${e.estimated?"estimated":e.now}`,l=e=>({padding:"6px 12px",borderRadius:7,cursor:"pointer",fontSize:12,fontWeight:700,border:e?"none":"1px solid rgba(var(--sd-ink, 255, 255, 255), 0.15)",background:e?"linear-gradient(135deg, #00ff88, #3498DB)":"transparent",color:e?"#000":"var(--sd-fg-2, #cfd8d8)"});function s({onAnswered:e}){var a;let i,c,[d,u]=(0,n.useState)(null),[f,p]=(0,n.useState)(!1),[m,g]=(0,n.useState)(()=>new Set),[h,y]=(0,n.useState)(!1),[b,x]=(0,n.useState)(null);if((0,n.useEffect)(()=>{let e=!1;return(0,r.csvNetworkSource)().then(t=>t||e?null:fetch("/api/company-scores/legacy").then(e=>e.json())).then(t=>{!e&&t?.offer?.companies?.length&&(u(t.offer),g(new Set(t.offer.companies.map(e=>e.name))))}).catch(()=>{}),()=>{e=!0}},[]),!d)return null;let v=async t=>{y(!0),x(null);try{let n=await fetch("/api/company-scores/legacy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({keep:t})}),r=await n.json();if(!n.ok&&!r.kept)throw Error(r.error||"Could not save your answer.");u(null),e?.({kept:r.kept||[],scored:r.scored||0,error:n.ok?null:r.error})}catch(e){x(e.message)}finally{y(!1)}};return(0,t.jsxs)("section",{"aria-label":"Built-in scores changed",style:{marginBottom:14,padding:14,borderRadius:10,border:"1px solid rgba(255,215,0,0.35)",background:"rgba(255,215,0,0.06)",fontSize:12.5,color:"var(--sd-fg-2, #cfd8d8)",lineHeight:1.6},children:[(0,t.jsx)("b",{style:{color:"var(--sd-fg-1, #fff)"},children:"Built-in scores changed in this version:"})," ",(i=(a=d.companies).slice(0,3).map(o).join(", "),(c=a.length-3)>0?`${i} and ${c} more`:i),"."," ","Keep any of the old ones as your own?",(0,t.jsx)("div",{style:{marginTop:4,color:"var(--sd-fg-3, #8b9a9a)"},children:"The built-in list now holds only companies most professionals would recognise, scored the same for everyone; anything else is estimated from your network. A score you keep is yours, like one you set below, and Auto hands it back."}),f&&(0,t.jsx)("ul",{style:{listStyle:"none",padding:0,margin:"10px 0 0",display:"grid",gap:4},children:d.companies.map(e=>(0,t.jsx)("li",{children:(0,t.jsxs)("label",{style:{display:"flex",gap:8,alignItems:"baseline",cursor:"pointer"},children:[(0,t.jsx)("input",{type:"checkbox",checked:m.has(e.name),disabled:h,onChange:()=>{let t;return t=e.name,g(e=>{let n=new Set(e);return n.has(t)?n.delete(t):n.add(t),n})}}),(0,t.jsxs)("span",{children:[(0,t.jsx)("b",{style:{color:"var(--sd-fg-1, #fff)"},children:e.name})," ",e.was," → ",e.estimated?`estimated (${e.now})`:e.now,(0,t.jsxs)("span",{style:{color:"var(--sd-fg-4, #778)"},children:[` \xb7 ${e.people} ${1===e.people?"person":"people"} there now`,e.names.length>1&&` \xb7 for ${e.names.join(", ")}`]})]})]})},e.name))}),(0,t.jsxs)("div",{style:{display:"flex",gap:8,marginTop:10,flexWrap:"wrap"},children:[f?(0,t.jsxs)(t.Fragment,{children:[(0,t.jsxs)("button",{disabled:h||!m.size,onClick:()=>v([...m]),style:{...l(!0),opacity:h||!m.size?.5:1},children:["Keep ",m.size," ",1===m.size?"score":"scores"]}),(0,t.jsx)("button",{disabled:h,onClick:()=>p(!1),style:l(!1),children:"Back"})]}):(0,t.jsxs)(t.Fragment,{children:[(0,t.jsx)("button",{disabled:h,onClick:()=>v(d.companies.map(e=>e.name)),style:l(!0),children:"Keep all"}),(0,t.jsx)("button",{disabled:h,onClick:()=>p(!0),style:l(!1),children:"Choose…"})]}),(0,t.jsx)("button",{disabled:h,onClick:()=>v([]),style:l(!1),children:"No thanks"})]}),b&&(0,t.jsx)("div",{role:"alert",style:{marginTop:8,color:"#e74c3c"},children:b})]})}let a="1px solid rgba(var(--sd-ink, 255, 255, 255), 0.1)",i={yours:{label:"your score",color:"var(--sd-green, #00ff88)"},known:{label:"known list",color:"var(--sd-blue, #3498DB)"},data:{label:"public data",color:"#1abc9c"},network:{label:"estimated: many of your people",color:"var(--sd-orange, #FF6B35)"},default:{label:"unknown company",color:"var(--sd-fg-4, #778)"}};async function c(){let e=await fetch("/api/company-scores"),t=await e.json();if(!e.ok)throw Error(t.error||"Could not load company scores");return t.companies}function d(){let[e,t]=(0,n.useState)(null),[r,o]=(0,n.useState)(null);return(0,n.useEffect)(()=>{let e=!1;return c().then(n=>{e||t(n)}).catch(t=>{e||o(t.message)}),()=>{e=!0}},[]),{companies:e,error:r,setScore:(0,n.useCallback)(async(e,n)=>{let r=await fetch("/api/company-scores",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({name:e,score:n})}),o=await r.json();if(!r.ok)throw Error(o.error||"Could not save");return t(await c()),o},[]),reload:(0,n.useCallback)(async()=>t(await c()),[])}}function u({company:e,onSet:r,compact:o}){let[l,s]=(0,n.useState)(!1),i=async t=>{s(!0);try{await r(e.name,"auto"===t?null:Number(t))}finally{s(!1)}};return(0,t.jsxs)("select",{disabled:l,value:"yours"===e.source?String(e.score):"auto",onChange:e=>i(e.target.value),title:"Set this company's score. Auto uses the known list or an estimate.",style:{padding:o?"2px 4px":"4px 6px",borderRadius:6,border:a,background:"var(--sd-card, #11131c)",color:"var(--sd-fg-1, #dfe6e9)",fontSize:12},children:[(0,t.jsxs)("option",{value:"auto",children:["Auto (","yours"===e.source?e.suggested??"est.":e.score,")"]}),[10,9,8,7,6,5,4,3,2,1].map(e=>(0,t.jsx)("option",{value:e,children:e},e))]})}e.s(["ScorePicker",0,u,"default",0,function({onRescored:e,version:r=0}){let{companies:o,error:l,setScore:c,reload:f}=d();(0,n.useEffect)(()=>{r&&f().catch(()=>{})},[r,f]);let[p,m]=(0,n.useState)(""),[g,h]=(0,n.useState)("all"),[y,b]=(0,n.useState)(150),[x,v]=(0,n.useState)(null),w=e=>{v(e),setTimeout(()=>v(null),3500)},S=async(t,n)=>{let r=await c(t,n);w(`${t}: ${null==n?"back to auto":`set to ${n}`} \xb7 rescored ${r.scored} people`),e?.()},k=async({kept:t,scored:n,error:r})=>{if(!t.length)return w("Keeping the new built-in scores.");w(r||`Kept ${t.length} old ${1===t.length?"score":"scores"} as your own \xb7 rescored ${n} people`),await f().catch(()=>{}),e?.()},j=(0,n.useMemo)(()=>{if(!o)return[];let e=p.trim().toLowerCase();return o.filter(t=>(!e||t.name.toLowerCase().includes(e))&&("all"===g||t.source===g))},[o,p,g]);if(l)return(0,t.jsx)("div",{style:{padding:24,color:"#e74c3c"},children:l});if(!o)return(0,t.jsx)("div",{style:{padding:24,color:"var(--sd-fg-4, #778)"},children:"Loading companies…"});let C=e=>o.filter(t=>t.source===e).length;return(0,t.jsxs)("div",{style:{flex:1,overflow:"auto",padding:16},children:[(0,t.jsxs)("div",{style:{maxWidth:980,margin:"0 auto"},children:[(0,t.jsx)(s,{onAnswered:k}),(0,t.jsxs)("div",{style:{padding:14,borderRadius:10,border:a,background:"rgba(var(--sd-ink, 255, 255, 255), 0.03)",fontSize:12.5,color:"var(--sd-fg-2, #cfd8d8)",lineHeight:1.6},children:[(0,t.jsx)("b",{style:{color:"var(--sd-fg-1, #fff)"},children:"How a power score works."})," power = ",(0,t.jsx)("b",{children:"title"})," × ",(0,t.jsx)("b",{children:"company weight"})," + bonus. The title (student 1 … founder or C-suite 10) comes from someone’s roles, with former roles at 70%; an audience of their own counts like a title (1M+ followers like a director). The company weight runs from 0.725 for a company we don’t know (or none found), the middle of the scale, to 1.0 (a company scored 10), so seniority counts for more at a bigger company. The bonus is at most +1.5, for investor, YC, an audience in the millions or the top award of any field, and counts half at an unknown company. A 1st-degree person whose circle is unusually strong gets up to +2 more: up to +1 for a high share of it at A or S, or +1 for every 25 people there. Tiers are graded on your network’s curve unless you choose the fixed scale (",(0,t.jsx)("a",{href:"#tiers",style:{color:"var(--sd-blue, #3498DB)"},children:"Tiers"}),", above): your top 3% are S, the next 12% A, the next 25% B (it only lifts, and never lifts anyone under 4 into S or A). On the fixed scale, S ≥ 7.5 · A ≥ 5.5 · B ≥ 4 · C ≥ 2.5.",(0,t.jsxs)("div",{style:{marginTop:6,color:"var(--sd-fg-3, #8b9a9a)"},children:["So a VP at a 10 scores 9.0, a founder at an unknown company 7.3, a director at an unknown company 5.4, and an intern at a 10 scores 2.0. Set a company’s score below and everyone there is rescored. Companies in the sectors you pick (",(0,t.jsx)("a",{href:"#sector",style:{color:"var(--sd-blue, #3498DB)"},children:"Your sector"}),", above) get +1 or +2; a score you set is never changed."]})]}),(0,t.jsxs)("div",{style:{display:"flex",gap:8,alignItems:"center",flexWrap:"wrap",margin:"14px 0 10px"},children:[(0,t.jsx)("input",{value:p,onChange:e=>m(e.target.value),placeholder:"Find a company",style:{padding:"6px 10px",borderRadius:7,border:a,background:"rgba(var(--sd-ink, 255, 255, 255), 0.05)",color:"var(--sd-fg-1, #fff)",fontSize:13,minWidth:180}}),[["all",`All ${o.length}`],["known",`Known list ${C("known")}`],["data",`Public data ${C("data")}`],["yours",`Yours ${C("yours")}`],["network",`Estimated ${C("network")}`],["default",`Unknown ${C("default")}`]].map(([e,n])=>(0,t.jsx)("button",{onClick:()=>h(e),style:{padding:"5px 10px",borderRadius:7,border:a,cursor:"pointer",fontSize:11.5,fontWeight:600,background:g===e?"rgba(52,152,219,0.25)":"transparent",color:g===e?"var(--sd-fg-1, #cfe6f7)":"var(--sd-fg-3, #8b9a9a)"},children:n},e))]}),(0,t.jsxs)("div",{style:{borderRadius:10,border:a,overflow:"hidden"},children:[(0,t.jsxs)("div",{style:{display:"grid",gridTemplateColumns:"1fr 70px 70px 70px 60px 180px 110px",gap:8,padding:"8px 12px",fontSize:10.5,letterSpacing:.6,color:"var(--sd-fg-3, #8b9a9a)",background:"rgba(var(--sd-ink, 255, 255, 255), 0.04)"},children:[(0,t.jsx)("span",{children:"COMPANY"}),(0,t.jsx)("span",{style:{textAlign:"right"},children:"PEOPLE"}),(0,t.jsx)("span",{style:{textAlign:"right"},children:"YOU KNOW"}),(0,t.jsx)("span",{style:{textAlign:"right"},children:"DIRECTOR+"}),(0,t.jsx)("span",{style:{textAlign:"right"},children:"SCORE"}),(0,t.jsx)("span",{children:"SOURCE"}),(0,t.jsx)("span",{children:"SET"})]}),j.slice(0,y).map(e=>(0,t.jsxs)("div",{style:{display:"grid",gridTemplateColumns:"1fr 70px 70px 70px 60px 180px 110px",gap:8,padding:"7px 12px",alignItems:"center",borderTop:"1px solid rgba(var(--sd-ink, 255, 255, 255), 0.05)",fontSize:12.5},children:[(0,t.jsxs)("span",{style:{display:"flex",alignItems:"center",gap:8,minWidth:0},children:[(0,t.jsx)("span",{title:`${e.industry.label} (inferred)`,style:{width:8,height:8,borderRadius:"50%",background:e.industry.color,flexShrink:0}}),(0,t.jsx)("span",{style:{overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap"},children:e.name})]}),(0,t.jsx)("span",{style:{textAlign:"right"},children:e.people}),(0,t.jsx)("span",{style:{textAlign:"right",color:e.d1?"var(--sd-green, #00ff88)":"var(--sd-fg-5, #556)"},children:e.d1}),(0,t.jsx)("span",{style:{textAlign:"right",color:e.senior?"var(--sd-gold, #FFD700)":"var(--sd-fg-5, #556)"},children:e.senior}),(0,t.jsx)("b",{style:{textAlign:"right",fontSize:15},children:e.score}),(0,t.jsxs)("span",{style:{fontSize:11,color:i[e.source]?.color},children:[i[e.source]?.label,e.sectorBonus>0&&(0,t.jsxs)("span",{style:{color:"var(--sd-green, #00ff88)"},children:[" + ",e.sectorBonus," your sector"]})]}),(0,t.jsx)(u,{company:e,onSet:S,compact:!0})]},e.name))]}),j.length>y&&(0,t.jsxs)("button",{onClick:()=>b(e=>e+300),style:{marginTop:10,padding:"7px 14px",borderRadius:8,border:a,background:"rgba(var(--sd-ink, 255, 255, 255), 0.05)",color:"var(--sd-fg-1, #dfe6e9)",cursor:"pointer",fontSize:12},children:["Show more (",j.length-y," left)"]})]}),x&&(0,t.jsx)("div",{role:"status",style:{position:"fixed",bottom:24,left:"50%",transform:"translateX(-50%)",padding:"10px 18px",borderRadius:24,background:"linear-gradient(135deg, #00ff88, #3498DB)",color:"#000",fontWeight:800,fontSize:13,zIndex:50},children:x})]})},"useCompanyScores",0,d],94657)},39160,84278,e=>{"use strict";var t=e.i(7214),n=e.i(7837);function r(e){let t=String(e||"").trim();if(!t)return null;let n=t.match(/^(\d{4})-(\d{2})-(\d{2})[ T](\d{2}):(\d{2})(?::(\d{2}))?(?:\s*UTC)?$/);if(n)return Date.UTC(+n[1],n[2]-1,+n[3],+n[4],+n[5],+(n[6]||0));if(n=t.match(/^(\d{1,2})\/(\d{1,2})\/(\d{2,4}),?\s+(\d{1,2}):(\d{2})\s*(AM|PM)?$/i)){let e=100>+n[3]?2e3+ +n[3]:+n[3],t=n[4]%12;return"PM"===(n[6]||"").toUpperCase()&&(t+=12),Date.UTC(e,n[1]-1,+n[2],t,+n[5])}if(n=t.match(/^([A-Za-z]{3,9})\s+(\d{4})$/)){let e=Date.parse(`1 ${n[1]} ${n[2]} UTC`);return Number.isNaN(e)?null:e}let r=Date.parse(/\d{4}$/.test(t)?`${t} UTC`:t);return Number.isNaN(r)?null:r}let o=e=>(0,t.keyFor)({profile_url:e});function l(e=[]){let t=new Map;for(let n of e){let e=o(n["sender profile url"]),r=n["conversation id"];r&&e&&(t.has(e)||t.set(e,new Set),t.get(e).add(r))}let n=null;for(let[e,r]of t)(!n||r.size>t.get(n).size)&&(n=e);return n}let s=e=>{let t=f(e);return t?`name:${t}`:null},a=/sponsored/i,i=/in\s?mail/i,c=/linkedin\.com\/(company|showcase|school)\//i,d=e=>/^(yes|true|1)$/i.test(String(e||"").trim());function u(e,t){if(!e||!e.total)return"never";let n=t-e.last;return n<=2592e6||e.recent>=3?"warm":n<=31536e6?"cool":"dormant"}let f=e=>String(e||"").split(",")[0].normalize("NFD").replace(/[̀-ͯ]/g,"").toLowerCase().replace(/[^a-z0-9 ]+/g," ").replace(/\s+/g," ").trim();e.s(["buildConversations",0,function(e=[],{keepText:t=!1}={}){let n=l(e),u=new Map;for(let t of e)n&&o(t["sender profile url"])===n&&t.from&&u.set(t.from,(u.get(t.from)||0)+1);let p=f([...u].sort((e,t)=>t[1]-e[1])[0]?.[0]||""),m=e=>!!e&&(e===n||!!p&&e===`name:${p}`),g={},h=new Map,y=0,b=0;for(let n of e){let e=n["conversation id"],l=r(n.date);if(!e||null==l){b+=1;continue}if(d(n["is message draft"])){y+=1;continue}let u=o(n["sender profile url"])||s(n.from);u&&n.from&&!g[u]&&(g[u]=String(n.from).trim());let f=String(n["recipient profile urls"]||"").split(/[,;\s]+/).filter(Boolean).map(o),p=String(n.to||"").split(",").map(e=>e.trim()).filter(Boolean),x=f.length?f:p.map(s).filter(Boolean);f.length&&f.length===p.length&&f.forEach((e,t)=>{g[e]||(g[e]=p[t])}),f.length||p.forEach(e=>{let t=s(e);t&&!g[t]&&(g[t]=e)}),h.has(e)||h.set(e,{id:e,title:"",everyone:new Set,messages:[],kind:null,folder:"",newest:-1/0});let v=h.get(e);u&&v.everyone.add(u),x.forEach(e=>v.everyone.add(e)),v.kind=v.kind||function(e){let t=String(e.folder||""),n=String(e["conversation title"]||"");return a.test(t)||a.test(n)||c.test(String(e["sender profile url"]||""))?"sponsored":i.test(t)||i.test(n)?"inmail":null}(n),l>=v.newest&&(v.newest=l,v.folder=String(n.folder||"").trim().toLowerCase().slice(0,30));let w={t:l,fromMe:m(u)};t&&(w.text=[n.subject,n.content].map(e=>String(e||"").trim()).filter(Boolean).join("\n\n"),!v.title&&n["conversation title"]&&(v.title=String(n["conversation title"]).trim())),v.messages.push(w)}let x=[];for(let e of h.values()){let n=[...e.everyone].filter(e=>e&&!m(e)).sort();e.messages.sort((e,t)=>e.t-t.t);let r={id:e.id,people:n,group:n.length>1,kind:e.kind,folder:e.folder,messages:e.messages};t&&(r.title=e.title),x.push(r)}for(let e of Object.keys(g))m(e)&&delete g[e];return{self:n,conversations:x,names:g,drafts:y,skipped:b}},"buildInvitations",0,function(e=[],{keepText:t=!1}={}){let n=[];for(let l of e){let e=String(l.direction||"").toUpperCase();if("INCOMING"!==e&&"OUTGOING"!==e)continue;let a="INCOMING"===e?"in":"out",i=String(("in"===a?l.from:l.to)||"").trim(),c=o("in"===a?l.inviterprofileurl:l.inviteeprofileurl),d=(c&&/\/in\//.test(c)?c:null)||s(i);if(!d)continue;let u=r(l["sent at"]),f={id:`${a}|${d}|${u??""}`,dir:a,key:d,name:i.slice(0,120),t:u};t&&String(l.message||"").trim()&&(f.note=String(l.message).trim().slice(0,2e3)),n.push(f)}return n.sort((e,t)=>(t.t||0)-(e.t||0))},"careerChapters",0,function(e=[],t=[],n=Date.now()){let l=e.map(e=>({company:e["company name"]||"",title:e.title||"",from:r(e["started on"]),to:r(e["finished on"])})).filter(e=>e.company&&null!=e.from).sort((e,t)=>e.from-t.from),s=t.map(e=>({url:o(e.url||e.profile_url),t:r(e["connected on"]||e.connected_on)})).filter(e=>null!=e.t);return l.map(e=>{let t=e.to??n,r=s.filter(n=>n.t>=e.from&&n.t<t);return{...e,to:e.to,made:r.length,people:r.map(e=>e.url)}})},"conversationSummary",0,function(e){let t=e.messages[e.messages.length-1];return{id:e.id,people:e.people,group:e.group,kind:e.kind||null,folder:e.folder||"",last:t?t.t:null,lastFromThem:t?!t.fromMe:null,count:e.messages.length,mine:e.messages.filter(e=>e.fromMe).length}},"invitationSplit",0,function(e=[]){let t=0,n=0;for(let r of e){let e=String(r.direction||"").toUpperCase();"INCOMING"===e?t+=1:"OUTGOING"===e&&(n+=1)}return{incoming:t,outgoing:n,total:t+n}},"messageStats",0,function(e=[]){let t=l(e),n=new Map;for(let t of e){let e=o(t["sender profile url"]),l=t["conversation id"];if(!l||!e)continue;let s=String(t["recipient profile urls"]||"").split(/[,;\s]+/).filter(Boolean).map(o),a=r(t.date);if(null==a)continue;n.has(l)||n.set(l,{people:new Set,msgs:[]});let i=n.get(l);i.people.add(e),s.forEach(e=>i.people.add(e)),i.msgs.push({from:e,t:a})}let s=0,a=new Map;for(let e of n.values()){let n=[...e.people].filter(e=>e!==t);if(1!==n.length||!e.people.has(t))continue;let r=n[0],o=a.get(r)||{last:0,lastFromThem:!1,total:0,times:[]};for(let n of e.msgs)o.total+=1,o.times.push(n.t),n.t>=o.last&&(o.last=n.t,o.lastFromThem=n.from!==t),n.t>s&&(s=n.t);a.set(r,o)}for(let e of a.values())e.recent=e.times.filter(e=>e>s-7776e6).length,delete e.times;return{self:t,asOf:s||null,people:a}},"nameKey",0,f,"postingEffect",0,function(e=[],t=[]){let n=e.map(e=>({t:r(e.date),link:e.sharelink||e["share link"]||""})).filter(e=>null!=e.t).sort((e,t)=>e.t-t.t),o=t.map(e=>r(e["connected on"]||e.connected_on)).filter(e=>null!=e).sort((e,t)=>e-t);if(!o.length)return{posts:[],usualWeek:0,afterPosts:0};let l=Math.max(6048e5,o[o.length-1]-o[0]),s=o.length/l*6048e5,a=n.map(e=>({...e,week:o.filter(t=>t>=e.t&&t<e.t+6048e5).length})),i=a.length?a.reduce((e,t)=>e+t.week,0)/a.length:0;return{posts:a,usualWeek:s,afterPosts:i}},"readTable",0,function(e,t){let r=(0,n.parseCsv)(String(e||"")),o=r.findIndex(e=>e.some(e=>e.trim().toLowerCase()===t.toLowerCase()));if(o<0)return[];let l=r[o].map(e=>e.trim().toLowerCase());return r.slice(o+1).filter(e=>e.some(e=>e.trim())).map(e=>Object.fromEntries(l.map((t,n)=>[t,(e[n]??"").trim()])))},"warmthOf",0,u],84278);let p=["gravity","rings","push","pull","distance","orbit","dotSize","lines","sizeBy","names","branch","colourBy","speed","loop"],m=e=>"boolean"==typeof e||"number"==typeof e&&Number.isFinite(e)&&1e3>=Math.abs(e)||"string"==typeof e&&/^[a-z]{1,20}$/i.test(e);function g(e){if(!Array.isArray(e))return[];let t=new Map;for(let n of e){let e="string"==typeof n?.name?n.name.trim().slice(0,40):"";if(!e||!n.settings||"object"!=typeof n.settings||Array.isArray(n.settings))continue;let r={};for(let e of p)Object.hasOwn(n.settings,e)&&m(n.settings[e])&&(r[e]=n.settings[e]);t.set(e,{name:e,settings:r})}return[...t.values()].slice(0,50)}var h=e.i(56899),y=e.i(40827);let b="six-degrees-galaxy-lab",x="six-degrees-galaxy-layouts",v=Object.freeze({on:!0,gravity:0,rings:1,push:15,pull:1,distance:1,dotSize:1,lines:1,sizeBy:"power",orbit:0,names:"key",branch:!1,colourBy:"tier",speed:15,loop:!1,labels:!0,v:2}),w=["gravity","rings","push","pull","distance"],S=Object.freeze({gravity:.8,rings:0,push:6,pull:6,distance:.15,sizeBy:"links"}),k=Object.freeze({rings:{lines:1},orbit:{lines:1},clusters:{lines:3}}),j=Object.freeze({gravity:0,rings:3,push:6,pull:4,distance:.22,sizeBy:"power"}),C=new Set,O=null;function T(){return O||(O=function(){try{let e=JSON.parse(localStorage.getItem(b)||"null");if(!e||"object"!=typeof e)return v;return{...v,...e,...e.v===v.v?{}:{branch:!1},v:v.v,on:!0}}catch{return v}}()),O}function F(e){O=null===e?{...v,labels:T().labels}:{...T(),...e,on:!0};try{localStorage.setItem(b,JSON.stringify(O))}catch{}C.forEach(e=>e())}let A=null,N=new Set;function M(){if(!A){try{A=JSON.parse(localStorage.getItem(x)||"[]")}catch{A=[]}Array.isArray(A)||(A=[])}return A}function $(e,{save:t=!0}={}){A=e;try{localStorage.setItem(x,JSON.stringify(e))}catch{}N.forEach(e=>e()),t&&(0,h.saveSettings)({galaxyLayouts:e})}let B=new Set,E={at:null,playing:!1,min:null,max:null,of:0,find:"",fly:0,found:0,fit:0,social:void 0},z=null;function L(e){let t={...E,...e};Object.keys(e).every(e=>Object.is(t[e],E[e]))||(E=t,B.forEach(e=>e()))}function D(){cancelAnimationFrame(z),z=null,L({playing:!1})}let I=null;function R(e){let n=new Map;for(let[r,o]of Object.entries(e?.people||{}))n.set((0,t.keyFor)({profile_url:r}),{...o});for(let[r,o]of Object.entries(e?.live||{})){let e=(0,t.keyFor)({profile_url:r}),l=n.get(e)||{total:0,recent:0};o.last&&(!l.last||o.last>l.last)&&(l.last=o.last,"boolean"==typeof o.lastFromThem&&(l.lastFromThem=o.lastFromThem)),l.unread=o.unread,l.total=Math.max(l.total||0,1),n.set(e,l)}let r=Math.max(e?.asOf||0,e?.liveAt&&Date.parse(e.liveAt)||0);for(let e of n.values())(e.last||0)>r&&(r=e.last);return{merged:n,asOf:r,chapters:e?.chapters||[],posts:e?.posts?.posts||[]}}let U={1:"#4FC3F7",2:"#BA68C8",3:"#FFB74D"},P=["#FF6B6B","#4ECDC4","#FFD93D","#A29BFE","#00B894","#FD79A8","#74B9FF","#E17055"],K={warm:"#FF7043",cool:"#4FC3F7",dormant:"#8D6E63",never:"#546E7A"},W="#4a5568",_=["#2b1b6b","#6a1b9a","#c2185b","#f4511e","#ffb300","#fff3b0"];function J(e){let t=Math.max(0,Math.min(1,Number(e)||0))*(_.length-1),n=Math.min(_.length-2,Math.floor(t)),r=t-n,o=_[n],l=_[n+1];return`#${[1,3,5].map(e=>Math.round(parseInt(o.slice(e,e+2),16)*(1-r)+parseInt(l.slice(e,e+2),16)*r).toString(16).padStart(2,"0")).join("")}`}function Y(e=[],t=()=>0){let n=[...new Set(e.map(t))].sort((e,t)=>e-t),r=new Map(n.map((e,t)=>[e,n.length>1?t/(n.length-1):1]));return e=>r.get(t(e))??0}let G=e=>String(e||"").trim().toLowerCase();e.s(["CLUSTERS",0,S,"FORCE_KEYS",0,w,"LAB_DEFAULTS",0,v,"LAYOUT_LOOKS",0,k,"ORBIT",0,j,"adoptSavedLayouts",0,function(e){let t=g(M()),{use:n,save:r,changed:o}=(0,y.reconcileSaved)({saved:null==e?null:g(e),cached:t,isDefault:e=>0===e.length,same:(e,t)=>JSON.stringify(e)===JSON.stringify(t)});r&&(0,h.saveSettings)({galaxyLayouts:t}),o&&$(n,{save:!1})},"applyLayout",0,function(e){let t=M().find(t=>t.name===e);t&&F(Object.fromEntries(p.filter(e=>e in t.settings).map(e=>[e,t.settings[e]])))},"bornTimes",0,function(e,t){let n=new Map(e.map(e=>[e.id,e])),r=new Map,o=(e,l=0)=>{if(r.has(e.id))return r.get(e.id);let s=-1/0,a=t.get(e.id);if(1===e.degree||null==a||l>6){let t=e.connected_date?Date.parse(e.connected_date):NaN;s=Number.isNaN(t)?-1/0:t}return null!=a&&n.has(a)&&l<=6&&(s=Math.max(s,o(n.get(a),l+1))),r.set(e.id,s),s};return e.map(e=>o(e))},"chapterAt",0,function(e,t){let n=null;for(let r of e?.chapters||[])Number.isFinite(r.from)&&r.from<=t&&(!n||r.from>n.from)&&(n=r);return n&&(!Number.isFinite(n.to)||n.to>t)?n:null},"clockNow",0,()=>E,"colourScheme",0,function(e,n,r,o){if("degree"===e)return{of:e=>U[Math.min(e.degree||1,3)],legend:[["1st",U[1]],["2nd",U[2]],["3rd+",U[3]]]};if("company"===e){let e=new Map;for(let t of n){let n=G(t.company);if(!n)continue;let r=e.get(n)||{name:String(t.company).trim(),n:0};r.n+=1,e.set(n,r)}let t=[...e.entries()].filter(([,e])=>e.n>1).sort((e,t)=>t[1].n-e[1].n).slice(0,P.length),r=new Map(t.map(([e],t)=>[e,P[t]]));return{of:e=>r.get(G(e.company))||W,legend:[...t.map(([,e],t)=>[e.name,P[t]]),["Other",W]]}}if("heat"===e){let e=function(e=[]){return Y(e,t.score)}(n);return{of:t=>J(e(t)),heat:e,legend:[["Cold",J(.1)],["Warm",J(.45)],["Hot",J(.75)],["Hottest",J(1)]]}}return"warmth"===e&&o?{of:e=>1===(e.degree||1)?K[u(o.merged.get((0,t.keyFor)(e)),o.asOf)]:"#2d3748",legend:[["Warm",K.warm],["Cool",K.cool],["Dormant",K.dormant],["Never messaged",K.never]]}:{of:e=>r[e.tier]||"#666",legend:Object.entries(r)}},"effectiveLab",0,e=>e.on?e:e.labels===v.labels?v:{...v,labels:e.labels},"findMatches",0,function(e,t){let n=String(t||"").trim().toLowerCase();if(n.length<2)return null;let r=new Set;for(let t of e)[t.name,t.company,t.role,t.headline].some(e=>e&&String(e).toLowerCase().includes(n))&&r.add(t.id);return r},"forgetLayout",0,function(e){$(M().filter(t=>t.name!==e))},"heatBy",0,Y,"heatColour",0,J,"labNow",0,T,"layoutOf",0,function(e){let t=t=>Object.entries(t).every(([t,n])=>e[t]===n);return w.every(t=>e[t]===v[t])?"rings":t(S)?"clusters":t(j)?"orbit":null},"layoutsNow",0,M,"loadSocial",0,function(){return I||(I=fetch("/api/social").then(e=>e.ok?e.json():{}).then(e=>{L({social:e.social?R(e.social):null})}).catch(()=>L({social:null}))),I},"mergeSocial",0,R,"milestones",0,function(e){let t=[];for(let n of e?.chapters||[])Number.isFinite(n.from)&&t.push({t:n.from,kind:"job",label:n.company});for(let n of e?.posts||[])Number.isFinite(n.t)&&t.push({t:n.t,kind:"post",label:"You posted"});return t.sort((e,t)=>e.t-t.t)},"pause",0,D,"play",0,function e(){if(null==E.min||null==E.max||E.max<=E.min)return;let t=E.max-E.min,n=1e3*Math.max(1,Number(T().speed)||15),r=null==E.at||E.at>=E.max?E.min:E.at,o=performance.now()-(r-E.min)/t*n;L({at:r,playing:!0});let l=r=>{let s=Math.min(E.max,E.min+(r-o)/n*t);if(L({at:s}),s>=E.max){z=null,L({playing:!1}),T().loop&&setTimeout(()=>{z||E.at!==E.max||(L({at:E.min}),e())},1200);return}z=requestAnimationFrame(l)};cancelAnimationFrame(z),z=requestAnimationFrame(l)},"reachCounts",0,function(e,t){let n=new Map(e.map(e=>[e.id,0]));for(let r of e){let e=t.get(r.id);for(let r=0;null!=e&&r<7;r++)n.set(e,(n.get(e)||0)+1),e=t.get(e)}return n},"saveLayout",0,function(e){let t=String(e||"").trim().slice(0,40);if(!t)return;let n=T(),r=Object.fromEntries(p.map(e=>[e,n[e]]));$([...M().filter(e=>e.name!==t),{name:t,settings:r}])},"setClock",0,L,"setLab",0,F,"stopReplay",0,function(){D(),L({at:null})},"watchClock",0,function(e){return B.add(e),()=>B.delete(e)},"watchLab",0,function(e){C.add(e);let t=t=>{t.key===b&&(O=null,e())};return window.addEventListener("storage",t),()=>{C.delete(e),window.removeEventListener("storage",t)}},"watchLayouts",0,function(e){return N.add(e),()=>N.delete(e)}],39160)}]);

package/.next/standalone/CHANGELOG.md

@@ -6,6 +6,89 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.0.0] - 2026-10-04
+
+### Added
+- **On a Mac, the Scan page offers App Management once, so macOS stops asking while you scan.**
+  When the scanner starts Google Chrome, Chrome's own updater may try to update Chrome, and macOS
+  asks whether Six Degrees can manage apps. A new item under step 1 says what that is and opens
+  System Settings → Privacy & Security → App Management with one button (the right pane for macOS
+  13 and 14 too); Done or Skip puts it away for good. It's optional and never holds the step up:
+  scanning works either way, and Chrome updates itself the next time you open it. Now that the app
+  is signed, allowing it once lasts across updates. The docs page's questions and the README say
+  the same.
+
+### Changed
+- **The Mac app is signed by Blake Burford and notarized by Apple: no more Open Anyway.**
+  Download it, drag it to Applications and open it like any Mac app; macOS only asks once
+  whether to open an app from the internet. Every program inside it (the app, the server, the
+  scanner's Python and its parts) carries the signature, and Apple has checked the app and the
+  disk image. Updating from inside the app works the same from an unsigned copy (0.8.0 and
+  earlier) to a signed one, and from one signed version to the next. The website, the README,
+  the release notes and the picture in the disk image's window say so now. From 1.0.0 on, a
+  Mac release can't go out unsigned. The Windows app isn't signed yet: SmartScreen still asks
+  the first time.
+
+## [0.8.0] - 2026-10-03
+
+### Added
+- **Insights: your network ranked by power.** A new tab between Paths and Outlink. The Power
+  Index ranks everyone within two steps of you, each person once, with shared ranks for ties and
+  a line saying why a big tie shares its score; filter by degree, tier and rarity, search by name,
+  company or who knows them, and from any row open their circle, scan it, or ask (their LinkedIn
+  profile opens and the request is marked sent, as on their card). Beside it: Untapped (S and A
+  in your 2nd degree with no request out), Kingmakers (the connections with the most S and A
+  behind them), Gatekeepers (who your S and A reach hangs on), Hidden giants (S-tier with one way
+  in), Company power, How sure (how much of the ranking rests on a guess), and Richest?, which
+  says plainly that the app never sees money. Kingmakers, Gatekeepers, Companies, Industries and
+  a scrolling Report are views of their own in the notch. Every number says where it came from;
+  a CSV import gets the boards that need no circles, and says so for the rest. On your own network every 2nd-degree row offers Auto beside Ask.
+- **Auto: one press sends someone a connection request for you.** Next to every Connect (a person's
+  card, and Outlink's lists and next best moves) there's now an Auto button, the bright one. Press it
+  and the scanner's Chrome opens their profile, presses Connect and sends the request without a note,
+  then shows "Request sent" and marks it pending everywhere in the app. Connect still opens their
+  profile for you to do it yourself. One press is one person: never a batch, never on a timer, and it
+  waits while a scan runs. It asks once before the first one. When LinkedIn wants their email address
+  first, Auto closes that and sends nothing ("Use Connect to add them yourself"); when LinkedIn offers
+  a personal note (Premium), it sends without one. It only calls a request sent once their profile
+  shows it pending, and says so plainly when it can't tell. It stops at 15 requests in any 24 hours and
+  80 in any 7 days (LinkedIn doesn't publish its limit; about 100 a week is commonly reported), opens
+  their profile once like a scan does, holds during a pause after LinkedIn pushed back, and shows in
+  Settings → LinkedIn usage as Connection requests (Auto).
+
+### Changed
+- **A scan that stopped partway says so, on the person's card and on the Scan page.** Open someone
+  whose circle scan didn't finish and a line by their name says which page it stopped after, with
+  Resume right there; their scan box now reads Scan in progress, with Resume from page N as its main
+  button, instead of Cluster active. The card's Insights offer Resume for them too, not a scan that
+  reads the list again from page 1, and an empty circle in Bridge Chains whose scan stopped partway
+  says so, with Resume from page N, instead of saying their list has been read. On the Scan page, everyone stopped partway is in a new In progress
+  card right after step 4, with Resume for each person and Resume all, and each name opens their circle
+  on the map. It used to be folded away under Fine-tune the scanner.
+- **The tabs sit on the header's line, and the notch hangs from them.** On a computer the row of
+  tabs rests on the line under the header, so a page's own buttons in the notch below join onto
+  it. The header is the same height on every tab: the Pending count that added a row on Degrees
+  and Separation is gone (sent requests are still under Outlink → Pending).
+- **Separation starts with its slider.** The line counting people two steps away and the tier
+  strip under it are gone; the search box stays at the top.
+- **The notch comes with the page.** Switching tabs, it waits for the next page to appear instead
+  of hanging over a blank screen while it loads.
+
+### Fixed
+- **A company called "Foods" or "Beverages" is in Retail, Consumer & Hospitality.** The word list
+  had "food" and "beverage" but not the plurals, so a company like Northwind Foods took its
+  industry from its people's headlines instead (tech, on a test network). Scores are worked out
+  again once after the update, since a company's industry can change its estimate and your sector.
+- **Scan dots are whole on Paths.** The dots along the header's line while a scan runs were cut in
+  half above Paths' left panel; they also stop short of the tabs now that the tabs sit on the line.
+- **The 3rd-degree dot in Degrees and Separation says why it can't be tapped.** It said "No one at
+  3rd degree yet" even with people found by company scans; it now says those are drawn on Network
+  Circle.
+- **The ring round a scanned connection's dot shows how much of their list was read.** It showed 2
+  of 5 bars, "partly read", for everyone scanned, even when their whole list was in, and the card's
+  Insights offered to finish lists that were finished. The app now takes in how far each list was
+  read, which the scanner had been noting all along.
+
 ## [0.7.0] - 2026-10-03
 
 ### Added

package/.next/standalone/README.md

@@ -10,6 +10,10 @@
   someone you haven't met. Free, open source, and it runs on your own computer.
 </p>
 
+<p align="center">
+  <strong>1.0:</strong> complete, signed and notarized by Apple, and maintained. New features come slowly.
+</p>
+
 <p align="center">
   <a href="https://github.com/blakeb056/six-degrees/releases/latest"><img src="https://img.shields.io/github/v/release/blakeb056/six-degrees?label=release&color=ffd700" alt="Latest release"></a>
   <a href="https://github.com/blakeb056/six-degrees/releases/latest"><img src="https://img.shields.io/github/release-date/blakeb056/six-degrees?label=released&color=3ee08f" alt="Release date"></a>
@@ -71,21 +75,17 @@ The links above always fetch the newest release.</sub>
 (Ventura) or later**, and it's about 210 MB. Everything the scanner needs except Google
 Chrome is inside, Python included, so there's nothing else to install.
 
-**The first time you open it**, macOS stops it, because the app isn't signed with a
-paid Apple certificate yet:
-
 1. Open the file you downloaded (**Six-Degrees-Mac-….dmg**, in your Downloads folder).
    In the window that opens, drag **Six Degrees** onto the **Applications** folder.
-2. Open **Six Degrees** from Applications. macOS says it can't check the app for
-   malware. Close that message with **Done** (on macOS 13 or 14 it may say **OK** or
-   **Cancel**). Anything except *Move to Trash*.
-3. Open **System Settings → Privacy & Security**, scroll down to *"Six Degrees" was
-   blocked*, and click **Open Anyway**. Confirm with **Open Anyway** again (on macOS
-   13 or 14 the button says **Open**), and enter your password if asked.
+2. Open **Six Degrees** from Applications. Signed by Blake Burford and notarized by
+   Apple: it opens like any Mac app. The first time, macOS asks whether to open an app
+   downloaded from the internet: click **Open**.
 
-That's once per download; after that it opens like any app.
+(A copy of 0.8.0 or earlier wasn't signed yet: if macOS says it can't check it for
+malware, close that message, not *Move to Trash*, then **System Settings → Privacy &
+Security → Open Anyway**. Or update it, below.)
 
-**Or install it from Terminal** (no approval step). Press ⌘ Space, type *Terminal* and
+**Or install it from Terminal.** Press ⌘ Space, type *Terminal* and
 press Return. Paste this line into the window that opens and press Return:
 
 ```bash
@@ -108,7 +108,7 @@ misbehaves later, unzip it and drag the app into Applications to go back. When t
 can't update itself (for example, it's running from the disk image), it says why and what
 to do, usually with a Terminal line to paste and what that line will do. Copies of 0.2.1
 and older don't have the button yet, so they take the Terminal line once more.
-Downloading the new `.dmg` works too; you'll repeat step 3 once for it.
+Downloading the new `.dmg` and dragging it to Applications works too.
 
 Your network isn't stored in the app. It's in a hidden folder in your home folder,
 `.six-degrees` (open it any time with *Help → Show the Data Folder*), so updates never
@@ -193,6 +193,16 @@ in, and its most powerful people.
 
 <img src="docs/img/paths.png" alt="Paths → Map with the company analyzer open: companies grouped by industry, and one company's people by level and ways in" width="100%">
 
+**Insights.** Everyone within two steps of you in one table, ranked by power, each person
+once: the **Power Index**, with filters for degree, tier and rarity, and Open circle, Scan
+circle or Ask on every row. Beside it, and each a board of its own in the notch:
+**Kingmakers** (your connections with the most S and A people behind them), **Gatekeepers**
+(who your S and A reach hangs on), **Hidden giants** (S-tier with one way in), **Untapped**
+(S and A with no request out), **Company power** and **Industries**. **Report** is the same
+numbers as a page you scroll. Every number says where it came from, and nothing is about
+money: *Richest?* says plainly that the app never sees it. Power ranks reachability, not
+people.
+
 **Scores.** How a power score is worked out, and the three things you can change about
 it, in one place: your field (the sectors you work in), how tiers are graded (on your
 network's curve or the fixed scale), and every scanned company's score.
@@ -202,6 +212,15 @@ circle offers its best five people at a time; mark invites as sent to fill the r
 unlock the next five. It also shows the next best moves, levels and points (from
 invites sent and people who accepted, never from browsing).
 
+**Auto** *(needs a scan)*. Next to every Connect (a person's card, Outlink), Auto sends
+that one person a connection request for you, from the scanner's Chrome, without a note.
+One press, one person: never a batch, never on a timer. It asks once before the first one.
+If LinkedIn wants their email address first, Auto closes that and sends nothing (use
+Connect to add them yourself); if it offers a personal note (Premium), Auto sends without
+one. It calls a request sent only once their profile shows it pending. It stops at 15 in
+any 24 hours and 80 in any 7 days, opens their profile once (a profile view), and counts in
+Settings → LinkedIn usage.
+
 **Scan.** The guided scanner. It shows progress, the budget that's left, the cooldown
 lock, and a **Paused** list you can carry on from.
 
@@ -287,6 +306,10 @@ Something out of date, or unfair to another tool? [Open an issue](https://github
 >
 > The app asks for an explicit "I understand" once, before the first scan.
 >
+> **The scanner reads; the one thing it ever sends is a connection request, and only when
+> you press Auto** on a person (one each press, without a note, at most 15 a day and 80 a
+> week). Auto asks once before its first request.
+>
 > Six Degrees is not affiliated with or endorsed by LinkedIn.
 
 ## First run
@@ -299,7 +322,9 @@ The app opens on a welcome screen with three ways in, and asks nothing about you
   in a Chrome window, and then it scans. Needs Google Chrome. The Mac app brings its own
   Python; with `npx six-degrees` the page uses yours, or sets up a private one with a
   click. It checks and says what's missing. The app marks this *Recommended* because
-  it's the only way to Degrees and Outlink. Read the warning above first.
+  it's the only way to Degrees and Outlink. Read the warning above first. On a Mac,
+  macOS may ask whether Six Degrees can manage apps while you scan: that's Chrome
+  updating itself, and scanning works either way (step 1 has a button to allow it once).
 - **Import my LinkedIn CSV**: LinkedIn's official export, read on your machine. On
   LinkedIn: **Settings & Privacy → Data privacy → Get a copy of your data →
   Connections**. LinkedIn emails a link in about ten minutes; unzip it and drop
@@ -395,7 +420,8 @@ It estimates **network position**, not what anyone is worth as a person.
   data folder as `csv-network.json` (names, positions, companies, profile links and when
   you connected; never email addresses) until you click × beside *Your CSV*.
 - The app contacts only these, and only when you act:
-  - **LinkedIn**, while you scan. Each profile photo is saved on your computer as the
+  - **LinkedIn**, while you scan, and when you press **Auto** (one connection request,
+    sent from the scanner's Chrome). Each profile photo is saved on your computer as the
     scan reads it, and the app shows photos only from there, so looking at your network
     never contacts LinkedIn. (Photos an older version kept as links to LinkedIn show
     initials until the next scan, or *Save photos* on the Scan page, saves them.)

package/.next/standalone/SECURITY.md

@@ -56,8 +56,11 @@ This app is designed to run **on your own machine, against your own network**.
   and has no link pointing outside itself. The checksums come from the same
   release, so they catch a corrupted, truncated or swapped download, not a
   compromised GitHub account; that is the same trust as the Terminal
-  installer. The app is only signed ad hoc, so the signature proves it is
-  whole, not who made it. The swap is done by a script shipped inside the app
+  installer. Releases from the first signed one on are signed with Blake
+  Burford's Developer ID and notarized by Apple (docs/brain/DESKTOP.md D4), but
+  the updater checks only that the signature is intact, not who made it (0.8.0
+  and earlier were signed ad hoc, and have nobody to compare against), so the
+  trust is still the release's. The swap is done by a script shipped inside the app
   (`scripts/apply-update.sh`), started with a clean environment, and it moves
   only the app: the data folder is never read, moved or written. It stops only
   the app's own processes, the ones the server names and those whose
@@ -71,8 +74,10 @@ This app is designed to run **on your own machine, against your own network**.
   scanner's packages installed from PyPI when the app is built. Those packages
   are pinned in `scripts/requirements.txt`: an exact version and the SHA-256 of
   every file pip may install, wheels only, so pip refuses any other file and
-  nothing is built from source. The Python is signed ad hoc like the rest of the
-  app and sealed into its signature, which `codesign --verify --deep --strict`
+  nothing is built from source. The Python is signed like the rest of the app
+  (in releases with the Developer ID and the hardened runtime, each program and
+  library on its own; ad hoc in a build without the certificate) and sealed into
+  the app's signature, which `codesign --verify --deep --strict`
   checks (in CI, and before the in-app updater uses a download). It runs
   isolated from the user's Python settings (`-E -s`: no `PYTHON*` variable and
   no user site-packages count), so nothing of the user's can stand in for its
@@ -129,6 +134,14 @@ Everything stays local:
 If you run the scanner, `chrome-profile/` in the data directory holds a live
 logged-in LinkedIn session. Never copy, sync, or commit it.
 
+The scanner reads LinkedIn. The one thing it ever sends there is a connection request,
+and only when you press **Auto** on a person: one request per press, without a note, at
+most 15 in any 24 hours and 80 in any 7 days. The app looks the person up by the id the
+page sends and passes the scanner their profile URL from the database, never a URL or name
+from the request, and refuses before anything starts during a cooldown, past those caps,
+or before Auto's one-time question has been answered (`app/api/scraper/route.js`,
+`lib/auto-connect.js`).
+
 ### Moving your data (Settings → Your data)
 
 - **An export** is one `.sixdegrees` file the user saves and carries. It is

package/.next/standalone/app/api/outreach/route.js

@@ -1,6 +1,7 @@
-import { db as supabase } from '../../../lib/db';
 import { getDb, decodeRow } from '../../../lib/db-client';
-import { resolveProfile } from '../../../lib/profile';
+import {
+  XP_SEND, XP_ACCEPT, awardXP, whose, copiesOf, inList, bestTier, markSent,
+} from '../../../lib/requests';
 
 // Requests you've sent, kept per PERSON.
 //
@@ -13,56 +14,8 @@ import { resolveProfile } from '../../../lib/profile';
 // asked through is kept (so once they accept, their card and circle say who
 // introduced you: lib/promote.js keeps it), XP comes once per person, and Undo
 // takes back all of it. lib/requests-client.js is the one way the pages call this.
-
-// XP rewards by tier
-const XP_SEND = { S: 25, A: 15, B: 10, C: 5, D: 2 };
-const XP_ACCEPT = { S: 100, A: 60, B: 35, C: 15, D: 5 };
-const TIER_ORDER = ['S', 'A', 'B', 'C', 'D'];
-
-async function awardXP(userId, amount) {
-  if (!userId || !amount) return;
-  // Upsert: create if not exists, change if exists. Never below zero: an Undo
-  // takes back what a send gave, including sends from before sends gave any.
-  const { data: existing } = await supabase.from('user_stats').select('xp').eq('id', userId).single();
-  if (existing) {
-    await supabase.from('user_stats').update({ xp: Math.max(0, (existing.xp || 0) + amount) }).eq('id', userId);
-  } else if (amount > 0) {
-    await supabase.from('user_stats').insert([{ id: userId, xp: amount, level: 1 }]).catch(() => {});
-  }
-}
-
-/** The profile a request belongs to: the one sent, else this machine's. */
-function whose(userId) {
-  if (userId) return String(userId);
-  try { return resolveProfile({ create: false })?.id || null; } catch { return null; }
-}
-
-/** Every copy of one person: by the clicked row's profile URL, or the URL given. */
-function copiesOf(db, { connectionId, profileUrl, userId }) {
-  let url = profileUrl ? String(profileUrl) : null;
-  let user = userId ? String(userId) : null;
-  let clicked = null;
-  if (connectionId != null) {
-    clicked = db.prepare('SELECT id, profile_url, user_id FROM linkedin_connections WHERE id = ?').get(String(connectionId)) || null;
-    if (clicked) {
-      url = clicked.profile_url || url;
-      user = user || clicked.user_id || null;
-    }
-  }
-  const cols = 'id, degree, tier, outreach_status, unlock_status, unlocked_from_bridge_id';
-  let rows = [];
-  if (url) {
-    rows = user
-      ? db.prepare(`SELECT ${cols} FROM linkedin_connections WHERE profile_url = ? AND user_id = ?`).all(url, user)
-      : db.prepare(`SELECT ${cols} FROM linkedin_connections WHERE profile_url = ?`).all(url);
-  } else if (clicked) {
-    rows = db.prepare(`SELECT ${cols} FROM linkedin_connections WHERE id = ?`).all(clicked.id);
-  }
-  return { url, user, rows };
-}
-
-const inList = (ids) => ids.map(() => '?').join(', ');
-const bestTier = (rows) => TIER_ORDER.find((t) => rows.some((r) => r.tier === t)) || 'D';
+// The marking itself is lib/requests.js markSent, which Auto's sends use too
+// (app/api/scraper/route.js).
 
 export async function POST(request) {
   try {
@@ -72,33 +25,20 @@ export async function POST(request) {
       return Response.json({ error: 'Unknown action' }, { status: 400 });
     }
     const db = getDb();
+
+    if (action === 'mark-sent') {
+      const { saved, xp, already } = await markSent(db, { connectionId, profileUrl, userId, bridgeId });
+      // Nobody on file (the sample network lives in the browser): nothing to keep.
+      if (!saved) return Response.json({ success: true, saved: 0, xp: 0 });
+      return Response.json({ success: true, saved, xp, already });
+    }
+
     const { user, rows } = copiesOf(db, { connectionId, profileUrl, userId });
     // Nobody on file (the sample network lives in the browser): nothing to keep.
     if (!rows.length) return Response.json({ success: true, saved: 0, xp: 0 });
     const ids = rows.map((r) => r.id);
     const now = new Date().toISOString();
 
-    if (action === 'mark-sent') {
-      const already = rows.some((r) => r.outreach_status === 'sent' || r.outreach_status === 'accepted');
-      db.prepare(`UPDATE linkedin_connections SET outreach_status = 'sent', updated_at = ?
-        WHERE id IN (${inList(ids)}) AND (outreach_status IS NULL OR outreach_status NOT IN ('sent', 'accepted'))`).run(now, ...ids);
-      db.prepare(`UPDATE linkedin_connections SET unlock_status = 'pending', updated_at = ?
-        WHERE id IN (${inList(ids)}) AND (unlock_status IS NULL OR unlock_status = 'locked')`).run(now, ...ids);
-      // Who you asked through: one of your own connections, or nothing.
-      if (bridgeId != null) {
-        const bridge = db.prepare(
-          `SELECT id, name FROM linkedin_connections WHERE id = ? AND degree = 1${user ? ' AND user_id = ?' : ''}`,
-        ).get(...[String(bridgeId), ...(user ? [user] : [])]);
-        if (bridge) {
-          db.prepare(`UPDATE linkedin_connections SET unlocked_from_bridge_id = ?, unlocked_from_name = ?, updated_at = ?
-            WHERE id IN (${inList(ids)}) AND degree = 2 AND unlocked_from_bridge_id IS NULL`).run(bridge.id, bridge.name, now, ...ids);
-        }
-      }
-      const xp = already ? 0 : XP_SEND[bestTier(rows)] || 2;
-      await awardXP(whose(user), xp);
-      return Response.json({ success: true, saved: ids.length, xp, already });
-    }
-
     if (action === 'mark-accepted') {
       db.prepare(`UPDATE linkedin_connections SET outreach_status = 'accepted', updated_at = ? WHERE id IN (${inList(ids)})`).run(now, ...ids);
       return Response.json({ success: true, saved: ids.length, xp: 0, accepts: XP_ACCEPT[bestTier(rows)] || 5 });