six-degrees 0.7.0 → 1.0.0

package/.next/static/chunks/403dpflln8ah5.js

@@ -0,0 +1 @@
+(globalThis.TURBOPACK||(globalThis.TURBOPACK=[])).push(["object"==typeof document?document.currentScript:void 0,94657,e=>{"use strict";var t=e.i(43476),n=e.i(71645),r=e.i(7837);let o=e=>`${e.name} ${e.was} → ${e.estimated?"estimated":e.now}`,l=e=>({padding:"6px 12px",borderRadius:7,cursor:"pointer",fontSize:12,fontWeight:700,border:e?"none":"1px solid rgba(var(--sd-ink, 255, 255, 255), 0.15)",background:e?"linear-gradient(135deg, #00ff88, #3498DB)":"transparent",color:e?"#000":"var(--sd-fg-2, #cfd8d8)"});function s({onAnswered:e}){var a;let i,c,[d,u]=(0,n.useState)(null),[f,p]=(0,n.useState)(!1),[m,g]=(0,n.useState)(()=>new Set),[h,y]=(0,n.useState)(!1),[b,x]=(0,n.useState)(null);if((0,n.useEffect)(()=>{let e=!1;return(0,r.csvNetworkSource)().then(t=>t||e?null:fetch("/api/company-scores/legacy").then(e=>e.json())).then(t=>{!e&&t?.offer?.companies?.length&&(u(t.offer),g(new Set(t.offer.companies.map(e=>e.name))))}).catch(()=>{}),()=>{e=!0}},[]),!d)return null;let v=async t=>{y(!0),x(null);try{let n=await fetch("/api/company-scores/legacy",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({keep:t})}),r=await n.json();if(!n.ok&&!r.kept)throw Error(r.error||"Could not save your answer.");u(null),e?.({kept:r.kept||[],scored:r.scored||0,error:n.ok?null:r.error})}catch(e){x(e.message)}finally{y(!1)}};return(0,t.jsxs)("section",{"aria-label":"Built-in scores changed",style:{marginBottom:14,padding:14,borderRadius:10,border:"1px solid rgba(255,215,0,0.35)",background:"rgba(255,215,0,0.06)",fontSize:12.5,color:"var(--sd-fg-2, #cfd8d8)",lineHeight:1.6},children:[(0,t.jsx)("b",{style:{color:"var(--sd-fg-1, #fff)"},children:"Built-in scores changed in this version:"})," ",(i=(a=d.companies).slice(0,3).map(o).join(", "),(c=a.length-3)>0?`${i} and ${c} more`:i),"."," ","Keep any of the old ones as your own?",(0,t.jsx)("div",{style:{marginTop:4,color:"var(--sd-fg-3, #8b9a9a)"},children:"The built-in list now holds only companies most professionals would recognise, scored the same for everyone; anything else is estimated from your network. A score you keep is yours, like one you set below, and Auto hands it back."}),f&&(0,t.jsx)("ul",{style:{listStyle:"none",padding:0,margin:"10px 0 0",display:"grid",gap:4},children:d.companies.map(e=>(0,t.jsx)("li",{children:(0,t.jsxs)("label",{style:{display:"flex",gap:8,alignItems:"baseline",cursor:"pointer"},children:[(0,t.jsx)("input",{type:"checkbox",checked:m.has(e.name),disabled:h,onChange:()=>{let t;return t=e.name,g(e=>{let n=new Set(e);return n.has(t)?n.delete(t):n.add(t),n})}}),(0,t.jsxs)("span",{children:[(0,t.jsx)("b",{style:{color:"var(--sd-fg-1, #fff)"},children:e.name})," ",e.was," → ",e.estimated?`estimated (${e.now})`:e.now,(0,t.jsxs)("span",{style:{color:"var(--sd-fg-4, #778)"},children:[` \xb7 ${e.people} ${1===e.people?"person":"people"} there now`,e.names.length>1&&` \xb7 for ${e.names.join(", ")}`]})]})]})},e.name))}),(0,t.jsxs)("div",{style:{display:"flex",gap:8,marginTop:10,flexWrap:"wrap"},children:[f?(0,t.jsxs)(t.Fragment,{children:[(0,t.jsxs)("button",{disabled:h||!m.size,onClick:()=>v([...m]),style:{...l(!0),opacity:h||!m.size?.5:1},children:["Keep ",m.size," ",1===m.size?"score":"scores"]}),(0,t.jsx)("button",{disabled:h,onClick:()=>p(!1),style:l(!1),children:"Back"})]}):(0,t.jsxs)(t.Fragment,{children:[(0,t.jsx)("button",{disabled:h,onClick:()=>v(d.companies.map(e=>e.name)),style:l(!0),children:"Keep all"}),(0,t.jsx)("button",{disabled:h,onClick:()=>p(!0),style:l(!1),children:"Choose…"})]}),(0,t.jsx)("button",{disabled:h,onClick:()=>v([]),style:l(!1),children:"No thanks"})]}),b&&(0,t.jsx)("div",{role:"alert",style:{marginTop:8,color:"#e74c3c"},children:b})]})}let a="1px solid rgba(var(--sd-ink, 255, 255, 255), 0.1)",i={yours:{label:"your score",color:"var(--sd-green, #00ff88)"},known:{label:"known list",color:"var(--sd-blue, #3498DB)"},data:{label:"public data",color:"#1abc9c"},network:{label:"estimated: many of your people",color:"var(--sd-orange, #FF6B35)"},default:{label:"unknown company",color:"var(--sd-fg-4, #778)"}};async function c(){let e=await fetch("/api/company-scores"),t=await e.json();if(!e.ok)throw Error(t.error||"Could not load company scores");return t.companies}function d(){let[e,t]=(0,n.useState)(null),[r,o]=(0,n.useState)(null);return(0,n.useEffect)(()=>{let e=!1;return c().then(n=>{e||t(n)}).catch(t=>{e||o(t.message)}),()=>{e=!0}},[]),{companies:e,error:r,setScore:(0,n.useCallback)(async(e,n)=>{let r=await fetch("/api/company-scores",{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({name:e,score:n})}),o=await r.json();if(!r.ok)throw Error(o.error||"Could not save");return t(await c()),o},[]),reload:(0,n.useCallback)(async()=>t(await c()),[])}}function u({company:e,onSet:r,compact:o}){let[l,s]=(0,n.useState)(!1),i=async t=>{s(!0);try{await r(e.name,"auto"===t?null:Number(t))}finally{s(!1)}};return(0,t.jsxs)("select",{disabled:l,value:"yours"===e.source?String(e.score):"auto",onChange:e=>i(e.target.value),title:"Set this company's score. Auto uses the known list or an estimate.",style:{padding:o?"2px 4px":"4px 6px",borderRadius:6,border:a,background:"var(--sd-card, #11131c)",color:"var(--sd-fg-1, #dfe6e9)",fontSize:12},children:[(0,t.jsxs)("option",{value:"auto",children:["Auto (","yours"===e.source?e.suggested??"est.":e.score,")"]}),[10,9,8,7,6,5,4,3,2,1].map(e=>(0,t.jsx)("option",{value:e,children:e},e))]})}e.s(["ScorePicker",0,u,"default",0,function({onRescored:e,version:r=0}){let{companies:o,error:l,setScore:c,reload:f}=d();(0,n.useEffect)(()=>{r&&f().catch(()=>{})},[r,f]);let[p,m]=(0,n.useState)(""),[g,h]=(0,n.useState)("all"),[y,b]=(0,n.useState)(150),[x,v]=(0,n.useState)(null),w=e=>{v(e),setTimeout(()=>v(null),3500)},S=async(t,n)=>{let r=await c(t,n);w(`${t}: ${null==n?"back to auto":`set to ${n}`} \xb7 rescored ${r.scored} people`),e?.()},k=async({kept:t,scored:n,error:r})=>{if(!t.length)return w("Keeping the new built-in scores.");w(r||`Kept ${t.length} old ${1===t.length?"score":"scores"} as your own \xb7 rescored ${n} people`),await f().catch(()=>{}),e?.()},j=(0,n.useMemo)(()=>{if(!o)return[];let e=p.trim().toLowerCase();return o.filter(t=>(!e||t.name.toLowerCase().includes(e))&&("all"===g||t.source===g))},[o,p,g]);if(l)return(0,t.jsx)("div",{style:{padding:24,color:"#e74c3c"},children:l});if(!o)return(0,t.jsx)("div",{style:{padding:24,color:"var(--sd-fg-4, #778)"},children:"Loading companies…"});let C=e=>o.filter(t=>t.source===e).length;return(0,t.jsxs)("div",{style:{flex:1,overflow:"auto",padding:16},children:[(0,t.jsxs)("div",{style:{maxWidth:980,margin:"0 auto"},children:[(0,t.jsx)(s,{onAnswered:k}),(0,t.jsxs)("div",{style:{padding:14,borderRadius:10,border:a,background:"rgba(var(--sd-ink, 255, 255, 255), 0.03)",fontSize:12.5,color:"var(--sd-fg-2, #cfd8d8)",lineHeight:1.6},children:[(0,t.jsx)("b",{style:{color:"var(--sd-fg-1, #fff)"},children:"How a power score works."})," power = ",(0,t.jsx)("b",{children:"title"})," × ",(0,t.jsx)("b",{children:"company weight"})," + bonus. The title (student 1 … founder or C-suite 10) comes from someone’s roles, with former roles at 70%; an audience of their own counts like a title (1M+ followers like a director). The company weight runs from 0.725 for a company we don’t know (or none found), the middle of the scale, to 1.0 (a company scored 10), so seniority counts for more at a bigger company. The bonus is at most +1.5, for investor, YC, an audience in the millions or the top award of any field, and counts half at an unknown company. A 1st-degree person whose circle is unusually strong gets up to +2 more: up to +1 for a high share of it at A or S, or +1 for every 25 people there. Tiers are graded on your network’s curve unless you choose the fixed scale (",(0,t.jsx)("a",{href:"#tiers",style:{color:"var(--sd-blue, #3498DB)"},children:"Tiers"}),", above): your top 3% are S, the next 12% A, the next 25% B (it only lifts, and never lifts anyone under 4 into S or A). On the fixed scale, S ≥ 7.5 · A ≥ 5.5 · B ≥ 4 · C ≥ 2.5.",(0,t.jsxs)("div",{style:{marginTop:6,color:"var(--sd-fg-3, #8b9a9a)"},children:["So a VP at a 10 scores 9.0, a founder at an unknown company 7.3, a director at an unknown company 5.4, and an intern at a 10 scores 2.0. Set a company’s score below and everyone there is rescored. Companies in the sectors you pick (",(0,t.jsx)("a",{href:"#sector",style:{color:"var(--sd-blue, #3498DB)"},children:"Your sector"}),", above) get +1 or +2; a score you set is never changed."]})]}),(0,t.jsxs)("div",{style:{display:"flex",gap:8,alignItems:"center",flexWrap:"wrap",margin:"14px 0 10px"},children:[(0,t.jsx)("input",{value:p,onChange:e=>m(e.target.value),placeholder:"Find a company",style:{padding:"6px 10px",borderRadius:7,border:a,background:"rgba(var(--sd-ink, 255, 255, 255), 0.05)",color:"var(--sd-fg-1, #fff)",fontSize:13,minWidth:180}}),[["all",`All ${o.length}`],["known",`Known list ${C("known")}`],["data",`Public data ${C("data")}`],["yours",`Yours ${C("yours")}`],["network",`Estimated ${C("network")}`],["default",`Unknown ${C("default")}`]].map(([e,n])=>(0,t.jsx)("button",{onClick:()=>h(e),style:{padding:"5px 10px",borderRadius:7,border:a,cursor:"pointer",fontSize:11.5,fontWeight:600,background:g===e?"rgba(52,152,219,0.25)":"transparent",color:g===e?"var(--sd-fg-1, #cfe6f7)":"var(--sd-fg-3, #8b9a9a)"},children:n},e))]}),(0,t.jsxs)("div",{style:{borderRadius:10,border:a,overflow:"hidden"},children:[(0,t.jsxs)("div",{style:{display:"grid",gridTemplateColumns:"1fr 70px 70px 70px 60px 180px 110px",gap:8,padding:"8px 12px",fontSize:10.5,letterSpacing:.6,color:"var(--sd-fg-3, #8b9a9a)",background:"rgba(var(--sd-ink, 255, 255, 255), 0.04)"},children:[(0,t.jsx)("span",{children:"COMPANY"}),(0,t.jsx)("span",{style:{textAlign:"right"},children:"PEOPLE"}),(0,t.jsx)("span",{style:{textAlign:"right"},children:"YOU KNOW"}),(0,t.jsx)("span",{style:{textAlign:"right"},children:"DIRECTOR+"}),(0,t.jsx)("span",{style:{textAlign:"right"},children:"SCORE"}),(0,t.jsx)("span",{children:"SOURCE"}),(0,t.jsx)("span",{children:"SET"})]}),j.slice(0,y).map(e=>(0,t.jsxs)("div",{style:{display:"grid",gridTemplateColumns:"1fr 70px 70px 70px 60px 180px 110px",gap:8,padding:"7px 12px",alignItems:"center",borderTop:"1px solid rgba(var(--sd-ink, 255, 255, 255), 0.05)",fontSize:12.5},children:[(0,t.jsxs)("span",{style:{display:"flex",alignItems:"center",gap:8,minWidth:0},children:[(0,t.jsx)("span",{title:`${e.industry.label} (inferred)`,style:{width:8,height:8,borderRadius:"50%",background:e.industry.color,flexShrink:0}}),(0,t.jsx)("span",{style:{overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap"},children:e.name})]}),(0,t.jsx)("span",{style:{textAlign:"right"},children:e.people}),(0,t.jsx)("span",{style:{textAlign:"right",color:e.d1?"var(--sd-green, #00ff88)":"var(--sd-fg-5, #556)"},children:e.d1}),(0,t.jsx)("span",{style:{textAlign:"right",color:e.senior?"var(--sd-gold, #FFD700)":"var(--sd-fg-5, #556)"},children:e.senior}),(0,t.jsx)("b",{style:{textAlign:"right",fontSize:15},children:e.score}),(0,t.jsxs)("span",{style:{fontSize:11,color:i[e.source]?.color},children:[i[e.source]?.label,e.sectorBonus>0&&(0,t.jsxs)("span",{style:{color:"var(--sd-green, #00ff88)"},children:[" + ",e.sectorBonus," your sector"]})]}),(0,t.jsx)(u,{company:e,onSet:S,compact:!0})]},e.name))]}),j.length>y&&(0,t.jsxs)("button",{onClick:()=>b(e=>e+300),style:{marginTop:10,padding:"7px 14px",borderRadius:8,border:a,background:"rgba(var(--sd-ink, 255, 255, 255), 0.05)",color:"var(--sd-fg-1, #dfe6e9)",cursor:"pointer",fontSize:12},children:["Show more (",j.length-y," left)"]})]}),x&&(0,t.jsx)("div",{role:"status",style:{position:"fixed",bottom:24,left:"50%",transform:"translateX(-50%)",padding:"10px 18px",borderRadius:24,background:"linear-gradient(135deg, #00ff88, #3498DB)",color:"#000",fontWeight:800,fontSize:13,zIndex:50},children:x})]})},"useCompanyScores",0,d],94657)},39160,84278,e=>{"use strict";var t=e.i(7214),n=e.i(7837);function r(e){let t=String(e||"").trim();if(!t)return null;let n=t.match(/^(\d{4})-(\d{2})-(\d{2})[ T](\d{2}):(\d{2})(?::(\d{2}))?(?:\s*UTC)?$/);if(n)return Date.UTC(+n[1],n[2]-1,+n[3],+n[4],+n[5],+(n[6]||0));if(n=t.match(/^(\d{1,2})\/(\d{1,2})\/(\d{2,4}),?\s+(\d{1,2}):(\d{2})\s*(AM|PM)?$/i)){let e=100>+n[3]?2e3+ +n[3]:+n[3],t=n[4]%12;return"PM"===(n[6]||"").toUpperCase()&&(t+=12),Date.UTC(e,n[1]-1,+n[2],t,+n[5])}if(n=t.match(/^([A-Za-z]{3,9})\s+(\d{4})$/)){let e=Date.parse(`1 ${n[1]} ${n[2]} UTC`);return Number.isNaN(e)?null:e}let r=Date.parse(/\d{4}$/.test(t)?`${t} UTC`:t);return Number.isNaN(r)?null:r}let o=e=>(0,t.keyFor)({profile_url:e});function l(e=[]){let t=new Map;for(let n of e){let e=o(n["sender profile url"]),r=n["conversation id"];r&&e&&(t.has(e)||t.set(e,new Set),t.get(e).add(r))}let n=null;for(let[e,r]of t)(!n||r.size>t.get(n).size)&&(n=e);return n}let s=e=>{let t=f(e);return t?`name:${t}`:null},a=/sponsored/i,i=/in\s?mail/i,c=/linkedin\.com\/(company|showcase|school)\//i,d=e=>/^(yes|true|1)$/i.test(String(e||"").trim());function u(e,t){if(!e||!e.total)return"never";let n=t-e.last;return n<=2592e6||e.recent>=3?"warm":n<=31536e6?"cool":"dormant"}let f=e=>String(e||"").split(",")[0].normalize("NFD").replace(/[̀-ͯ]/g,"").toLowerCase().replace(/[^a-z0-9 ]+/g," ").replace(/\s+/g," ").trim();e.s(["buildConversations",0,function(e=[],{keepText:t=!1}={}){let n=l(e),u=new Map;for(let t of e)n&&o(t["sender profile url"])===n&&t.from&&u.set(t.from,(u.get(t.from)||0)+1);let p=f([...u].sort((e,t)=>t[1]-e[1])[0]?.[0]||""),m=e=>!!e&&(e===n||!!p&&e===`name:${p}`),g={},h=new Map,y=0,b=0;for(let n of e){let e=n["conversation id"],l=r(n.date);if(!e||null==l){b+=1;continue}if(d(n["is message draft"])){y+=1;continue}let u=o(n["sender profile url"])||s(n.from);u&&n.from&&!g[u]&&(g[u]=String(n.from).trim());let f=String(n["recipient profile urls"]||"").split(/[,;\s]+/).filter(Boolean).map(o),p=String(n.to||"").split(",").map(e=>e.trim()).filter(Boolean),x=f.length?f:p.map(s).filter(Boolean);f.length&&f.length===p.length&&f.forEach((e,t)=>{g[e]||(g[e]=p[t])}),f.length||p.forEach(e=>{let t=s(e);t&&!g[t]&&(g[t]=e)}),h.has(e)||h.set(e,{id:e,title:"",everyone:new Set,messages:[],kind:null,folder:"",newest:-1/0});let v=h.get(e);u&&v.everyone.add(u),x.forEach(e=>v.everyone.add(e)),v.kind=v.kind||function(e){let t=String(e.folder||""),n=String(e["conversation title"]||"");return a.test(t)||a.test(n)||c.test(String(e["sender profile url"]||""))?"sponsored":i.test(t)||i.test(n)?"inmail":null}(n),l>=v.newest&&(v.newest=l,v.folder=String(n.folder||"").trim().toLowerCase().slice(0,30));let w={t:l,fromMe:m(u)};t&&(w.text=[n.subject,n.content].map(e=>String(e||"").trim()).filter(Boolean).join("\n\n"),!v.title&&n["conversation title"]&&(v.title=String(n["conversation title"]).trim())),v.messages.push(w)}let x=[];for(let e of h.values()){let n=[...e.everyone].filter(e=>e&&!m(e)).sort();e.messages.sort((e,t)=>e.t-t.t);let r={id:e.id,people:n,group:n.length>1,kind:e.kind,folder:e.folder,messages:e.messages};t&&(r.title=e.title),x.push(r)}for(let e of Object.keys(g))m(e)&&delete g[e];return{self:n,conversations:x,names:g,drafts:y,skipped:b}},"buildInvitations",0,function(e=[],{keepText:t=!1}={}){let n=[];for(let l of e){let e=String(l.direction||"").toUpperCase();if("INCOMING"!==e&&"OUTGOING"!==e)continue;let a="INCOMING"===e?"in":"out",i=String(("in"===a?l.from:l.to)||"").trim(),c=o("in"===a?l.inviterprofileurl:l.inviteeprofileurl),d=(c&&/\/in\//.test(c)?c:null)||s(i);if(!d)continue;let u=r(l["sent at"]),f={id:`${a}|${d}|${u??""}`,dir:a,key:d,name:i.slice(0,120),t:u};t&&String(l.message||"").trim()&&(f.note=String(l.message).trim().slice(0,2e3)),n.push(f)}return n.sort((e,t)=>(t.t||0)-(e.t||0))},"careerChapters",0,function(e=[],t=[],n=Date.now()){let l=e.map(e=>({company:e["company name"]||"",title:e.title||"",from:r(e["started on"]),to:r(e["finished on"])})).filter(e=>e.company&&null!=e.from).sort((e,t)=>e.from-t.from),s=t.map(e=>({url:o(e.url||e.profile_url),t:r(e["connected on"]||e.connected_on)})).filter(e=>null!=e.t);return l.map(e=>{let t=e.to??n,r=s.filter(n=>n.t>=e.from&&n.t<t);return{...e,to:e.to,made:r.length,people:r.map(e=>e.url)}})},"conversationSummary",0,function(e){let t=e.messages[e.messages.length-1];return{id:e.id,people:e.people,group:e.group,kind:e.kind||null,folder:e.folder||"",last:t?t.t:null,lastFromThem:t?!t.fromMe:null,count:e.messages.length,mine:e.messages.filter(e=>e.fromMe).length}},"invitationSplit",0,function(e=[]){let t=0,n=0;for(let r of e){let e=String(r.direction||"").toUpperCase();"INCOMING"===e?t+=1:"OUTGOING"===e&&(n+=1)}return{incoming:t,outgoing:n,total:t+n}},"messageStats",0,function(e=[]){let t=l(e),n=new Map;for(let t of e){let e=o(t["sender profile url"]),l=t["conversation id"];if(!l||!e)continue;let s=String(t["recipient profile urls"]||"").split(/[,;\s]+/).filter(Boolean).map(o),a=r(t.date);if(null==a)continue;n.has(l)||n.set(l,{people:new Set,msgs:[]});let i=n.get(l);i.people.add(e),s.forEach(e=>i.people.add(e)),i.msgs.push({from:e,t:a})}let s=0,a=new Map;for(let e of n.values()){let n=[...e.people].filter(e=>e!==t);if(1!==n.length||!e.people.has(t))continue;let r=n[0],o=a.get(r)||{last:0,lastFromThem:!1,total:0,times:[]};for(let n of e.msgs)o.total+=1,o.times.push(n.t),n.t>=o.last&&(o.last=n.t,o.lastFromThem=n.from!==t),n.t>s&&(s=n.t);a.set(r,o)}for(let e of a.values())e.recent=e.times.filter(e=>e>s-7776e6).length,delete e.times;return{self:t,asOf:s||null,people:a}},"nameKey",0,f,"postingEffect",0,function(e=[],t=[]){let n=e.map(e=>({t:r(e.date),link:e.sharelink||e["share link"]||""})).filter(e=>null!=e.t).sort((e,t)=>e.t-t.t),o=t.map(e=>r(e["connected on"]||e.connected_on)).filter(e=>null!=e).sort((e,t)=>e-t);if(!o.length)return{posts:[],usualWeek:0,afterPosts:0};let l=Math.max(6048e5,o[o.length-1]-o[0]),s=o.length/l*6048e5,a=n.map(e=>({...e,week:o.filter(t=>t>=e.t&&t<e.t+6048e5).length})),i=a.length?a.reduce((e,t)=>e+t.week,0)/a.length:0;return{posts:a,usualWeek:s,afterPosts:i}},"readTable",0,function(e,t){let r=(0,n.parseCsv)(String(e||"")),o=r.findIndex(e=>e.some(e=>e.trim().toLowerCase()===t.toLowerCase()));if(o<0)return[];let l=r[o].map(e=>e.trim().toLowerCase());return r.slice(o+1).filter(e=>e.some(e=>e.trim())).map(e=>Object.fromEntries(l.map((t,n)=>[t,(e[n]??"").trim()])))},"warmthOf",0,u],84278);let p=["gravity","rings","push","pull","distance","orbit","dotSize","lines","sizeBy","names","branch","colourBy","speed","loop"],m=e=>"boolean"==typeof e||"number"==typeof e&&Number.isFinite(e)&&1e3>=Math.abs(e)||"string"==typeof e&&/^[a-z]{1,20}$/i.test(e);function g(e){if(!Array.isArray(e))return[];let t=new Map;for(let n of e){let e="string"==typeof n?.name?n.name.trim().slice(0,40):"";if(!e||!n.settings||"object"!=typeof n.settings||Array.isArray(n.settings))continue;let r={};for(let e of p)Object.hasOwn(n.settings,e)&&m(n.settings[e])&&(r[e]=n.settings[e]);t.set(e,{name:e,settings:r})}return[...t.values()].slice(0,50)}var h=e.i(56899),y=e.i(40827);let b="six-degrees-galaxy-lab",x="six-degrees-galaxy-layouts",v=Object.freeze({on:!0,gravity:0,rings:1,push:15,pull:1,distance:1,dotSize:1,lines:1,sizeBy:"power",orbit:0,names:"key",branch:!1,colourBy:"tier",speed:15,loop:!1,labels:!0,v:2}),w=["gravity","rings","push","pull","distance"],S=Object.freeze({gravity:.8,rings:0,push:6,pull:6,distance:.15,sizeBy:"links"}),k=Object.freeze({rings:{lines:1},orbit:{lines:1},clusters:{lines:3}}),j=Object.freeze({gravity:0,rings:3,push:6,pull:4,distance:.22,sizeBy:"power"}),C=new Set,O=null;function T(){return O||(O=function(){try{let e=JSON.parse(localStorage.getItem(b)||"null");if(!e||"object"!=typeof e)return v;return{...v,...e,...e.v===v.v?{}:{branch:!1},v:v.v,on:!0}}catch{return v}}()),O}function F(e){O=null===e?{...v,labels:T().labels}:{...T(),...e,on:!0};try{localStorage.setItem(b,JSON.stringify(O))}catch{}C.forEach(e=>e())}let A=null,N=new Set;function M(){if(!A){try{A=JSON.parse(localStorage.getItem(x)||"[]")}catch{A=[]}Array.isArray(A)||(A=[])}return A}function $(e,{save:t=!0}={}){A=e;try{localStorage.setItem(x,JSON.stringify(e))}catch{}N.forEach(e=>e()),t&&(0,h.saveSettings)({galaxyLayouts:e})}let B=new Set,E={at:null,playing:!1,min:null,max:null,of:0,find:"",fly:0,found:0,fit:0,social:void 0},z=null;function L(e){let t={...E,...e};Object.keys(e).every(e=>Object.is(t[e],E[e]))||(E=t,B.forEach(e=>e()))}function D(){cancelAnimationFrame(z),z=null,L({playing:!1})}let I=null;function R(e){let n=new Map;for(let[r,o]of Object.entries(e?.people||{}))n.set((0,t.keyFor)({profile_url:r}),{...o});for(let[r,o]of Object.entries(e?.live||{})){let e=(0,t.keyFor)({profile_url:r}),l=n.get(e)||{total:0,recent:0};o.last&&(!l.last||o.last>l.last)&&(l.last=o.last,"boolean"==typeof o.lastFromThem&&(l.lastFromThem=o.lastFromThem)),l.unread=o.unread,l.total=Math.max(l.total||0,1),n.set(e,l)}let r=Math.max(e?.asOf||0,e?.liveAt&&Date.parse(e.liveAt)||0);for(let e of n.values())(e.last||0)>r&&(r=e.last);return{merged:n,asOf:r,chapters:e?.chapters||[],posts:e?.posts?.posts||[]}}let U={1:"#4FC3F7",2:"#BA68C8",3:"#FFB74D"},P=["#FF6B6B","#4ECDC4","#FFD93D","#A29BFE","#00B894","#FD79A8","#74B9FF","#E17055"],K={warm:"#FF7043",cool:"#4FC3F7",dormant:"#8D6E63",never:"#546E7A"},W="#4a5568",_=["#2b1b6b","#6a1b9a","#c2185b","#f4511e","#ffb300","#fff3b0"];function J(e){let t=Math.max(0,Math.min(1,Number(e)||0))*(_.length-1),n=Math.min(_.length-2,Math.floor(t)),r=t-n,o=_[n],l=_[n+1];return`#${[1,3,5].map(e=>Math.round(parseInt(o.slice(e,e+2),16)*(1-r)+parseInt(l.slice(e,e+2),16)*r).toString(16).padStart(2,"0")).join("")}`}function Y(e=[],t=()=>0){let n=[...new Set(e.map(t))].sort((e,t)=>e-t),r=new Map(n.map((e,t)=>[e,n.length>1?t/(n.length-1):1]));return e=>r.get(t(e))??0}let G=e=>String(e||"").trim().toLowerCase();e.s(["CLUSTERS",0,S,"FORCE_KEYS",0,w,"LAB_DEFAULTS",0,v,"LAYOUT_LOOKS",0,k,"ORBIT",0,j,"adoptSavedLayouts",0,function(e){let t=g(M()),{use:n,save:r,changed:o}=(0,y.reconcileSaved)({saved:null==e?null:g(e),cached:t,isDefault:e=>0===e.length,same:(e,t)=>JSON.stringify(e)===JSON.stringify(t)});r&&(0,h.saveSettings)({galaxyLayouts:t}),o&&$(n,{save:!1})},"applyLayout",0,function(e){let t=M().find(t=>t.name===e);t&&F(Object.fromEntries(p.filter(e=>e in t.settings).map(e=>[e,t.settings[e]])))},"bornTimes",0,function(e,t){let n=new Map(e.map(e=>[e.id,e])),r=new Map,o=(e,l=0)=>{if(r.has(e.id))return r.get(e.id);let s=-1/0,a=t.get(e.id);if(1===e.degree||null==a||l>6){let t=e.connected_date?Date.parse(e.connected_date):NaN;s=Number.isNaN(t)?-1/0:t}return null!=a&&n.has(a)&&l<=6&&(s=Math.max(s,o(n.get(a),l+1))),r.set(e.id,s),s};return e.map(e=>o(e))},"chapterAt",0,function(e,t){let n=null;for(let r of e?.chapters||[])Number.isFinite(r.from)&&r.from<=t&&(!n||r.from>n.from)&&(n=r);return n&&(!Number.isFinite(n.to)||n.to>t)?n:null},"clockNow",0,()=>E,"colourScheme",0,function(e,n,r,o){if("degree"===e)return{of:e=>U[Math.min(e.degree||1,3)],legend:[["1st",U[1]],["2nd",U[2]],["3rd+",U[3]]]};if("company"===e){let e=new Map;for(let t of n){let n=G(t.company);if(!n)continue;let r=e.get(n)||{name:String(t.company).trim(),n:0};r.n+=1,e.set(n,r)}let t=[...e.entries()].filter(([,e])=>e.n>1).sort((e,t)=>t[1].n-e[1].n).slice(0,P.length),r=new Map(t.map(([e],t)=>[e,P[t]]));return{of:e=>r.get(G(e.company))||W,legend:[...t.map(([,e],t)=>[e.name,P[t]]),["Other",W]]}}if("heat"===e){let e=function(e=[]){return Y(e,t.score)}(n);return{of:t=>J(e(t)),heat:e,legend:[["Cold",J(.1)],["Warm",J(.45)],["Hot",J(.75)],["Hottest",J(1)]]}}return"warmth"===e&&o?{of:e=>1===(e.degree||1)?K[u(o.merged.get((0,t.keyFor)(e)),o.asOf)]:"#2d3748",legend:[["Warm",K.warm],["Cool",K.cool],["Dormant",K.dormant],["Never messaged",K.never]]}:{of:e=>r[e.tier]||"#666",legend:Object.entries(r)}},"effectiveLab",0,e=>e.on?e:e.labels===v.labels?v:{...v,labels:e.labels},"findMatches",0,function(e,t){let n=String(t||"").trim().toLowerCase();if(n.length<2)return null;let r=new Set;for(let t of e)[t.name,t.company,t.role,t.headline].some(e=>e&&String(e).toLowerCase().includes(n))&&r.add(t.id);return r},"forgetLayout",0,function(e){$(M().filter(t=>t.name!==e))},"heatBy",0,Y,"heatColour",0,J,"labNow",0,T,"layoutOf",0,function(e){let t=t=>Object.entries(t).every(([t,n])=>e[t]===n);return w.every(t=>e[t]===v[t])?"rings":t(S)?"clusters":t(j)?"orbit":null},"layoutsNow",0,M,"loadSocial",0,function(){return I||(I=fetch("/api/social").then(e=>e.ok?e.json():{}).then(e=>{L({social:e.social?R(e.social):null})}).catch(()=>L({social:null}))),I},"mergeSocial",0,R,"milestones",0,function(e){let t=[];for(let n of e?.chapters||[])Number.isFinite(n.from)&&t.push({t:n.from,kind:"job",label:n.company});for(let n of e?.posts||[])Number.isFinite(n.t)&&t.push({t:n.t,kind:"post",label:"You posted"});return t.sort((e,t)=>e.t-t.t)},"pause",0,D,"play",0,function e(){if(null==E.min||null==E.max||E.max<=E.min)return;let t=E.max-E.min,n=1e3*Math.max(1,Number(T().speed)||15),r=null==E.at||E.at>=E.max?E.min:E.at,o=performance.now()-(r-E.min)/t*n;L({at:r,playing:!0});let l=r=>{let s=Math.min(E.max,E.min+(r-o)/n*t);if(L({at:s}),s>=E.max){z=null,L({playing:!1}),T().loop&&setTimeout(()=>{z||E.at!==E.max||(L({at:E.min}),e())},1200);return}z=requestAnimationFrame(l)};cancelAnimationFrame(z),z=requestAnimationFrame(l)},"reachCounts",0,function(e,t){let n=new Map(e.map(e=>[e.id,0]));for(let r of e){let e=t.get(r.id);for(let r=0;null!=e&&r<7;r++)n.set(e,(n.get(e)||0)+1),e=t.get(e)}return n},"saveLayout",0,function(e){let t=String(e||"").trim().slice(0,40);if(!t)return;let n=T(),r=Object.fromEntries(p.map(e=>[e,n[e]]));$([...M().filter(e=>e.name!==t),{name:t,settings:r}])},"setClock",0,L,"setLab",0,F,"stopReplay",0,function(){D(),L({at:null})},"watchClock",0,function(e){return B.add(e),()=>B.delete(e)},"watchLab",0,function(e){C.add(e);let t=t=>{t.key===b&&(O=null,e())};return window.addEventListener("storage",t),()=>{C.delete(e),window.removeEventListener("storage",t)}},"watchLayouts",0,function(e){return N.add(e),()=>N.delete(e)}],39160)}]);

package/CHANGELOG.md

@@ -6,6 +6,89 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.0.0] - 2026-10-04
+
+### Added
+- **On a Mac, the Scan page offers App Management once, so macOS stops asking while you scan.**
+  When the scanner starts Google Chrome, Chrome's own updater may try to update Chrome, and macOS
+  asks whether Six Degrees can manage apps. A new item under step 1 says what that is and opens
+  System Settings → Privacy & Security → App Management with one button (the right pane for macOS
+  13 and 14 too); Done or Skip puts it away for good. It's optional and never holds the step up:
+  scanning works either way, and Chrome updates itself the next time you open it. Now that the app
+  is signed, allowing it once lasts across updates. The docs page's questions and the README say
+  the same.
+
+### Changed
+- **The Mac app is signed by Blake Burford and notarized by Apple: no more Open Anyway.**
+  Download it, drag it to Applications and open it like any Mac app; macOS only asks once
+  whether to open an app from the internet. Every program inside it (the app, the server, the
+  scanner's Python and its parts) carries the signature, and Apple has checked the app and the
+  disk image. Updating from inside the app works the same from an unsigned copy (0.8.0 and
+  earlier) to a signed one, and from one signed version to the next. The website, the README,
+  the release notes and the picture in the disk image's window say so now. From 1.0.0 on, a
+  Mac release can't go out unsigned. The Windows app isn't signed yet: SmartScreen still asks
+  the first time.
+
+## [0.8.0] - 2026-10-03
+
+### Added
+- **Insights: your network ranked by power.** A new tab between Paths and Outlink. The Power
+  Index ranks everyone within two steps of you, each person once, with shared ranks for ties and
+  a line saying why a big tie shares its score; filter by degree, tier and rarity, search by name,
+  company or who knows them, and from any row open their circle, scan it, or ask (their LinkedIn
+  profile opens and the request is marked sent, as on their card). Beside it: Untapped (S and A
+  in your 2nd degree with no request out), Kingmakers (the connections with the most S and A
+  behind them), Gatekeepers (who your S and A reach hangs on), Hidden giants (S-tier with one way
+  in), Company power, How sure (how much of the ranking rests on a guess), and Richest?, which
+  says plainly that the app never sees money. Kingmakers, Gatekeepers, Companies, Industries and
+  a scrolling Report are views of their own in the notch. Every number says where it came from;
+  a CSV import gets the boards that need no circles, and says so for the rest. On your own network every 2nd-degree row offers Auto beside Ask.
+- **Auto: one press sends someone a connection request for you.** Next to every Connect (a person's
+  card, and Outlink's lists and next best moves) there's now an Auto button, the bright one. Press it
+  and the scanner's Chrome opens their profile, presses Connect and sends the request without a note,
+  then shows "Request sent" and marks it pending everywhere in the app. Connect still opens their
+  profile for you to do it yourself. One press is one person: never a batch, never on a timer, and it
+  waits while a scan runs. It asks once before the first one. When LinkedIn wants their email address
+  first, Auto closes that and sends nothing ("Use Connect to add them yourself"); when LinkedIn offers
+  a personal note (Premium), it sends without one. It only calls a request sent once their profile
+  shows it pending, and says so plainly when it can't tell. It stops at 15 requests in any 24 hours and
+  80 in any 7 days (LinkedIn doesn't publish its limit; about 100 a week is commonly reported), opens
+  their profile once like a scan does, holds during a pause after LinkedIn pushed back, and shows in
+  Settings → LinkedIn usage as Connection requests (Auto).
+
+### Changed
+- **A scan that stopped partway says so, on the person's card and on the Scan page.** Open someone
+  whose circle scan didn't finish and a line by their name says which page it stopped after, with
+  Resume right there; their scan box now reads Scan in progress, with Resume from page N as its main
+  button, instead of Cluster active. The card's Insights offer Resume for them too, not a scan that
+  reads the list again from page 1, and an empty circle in Bridge Chains whose scan stopped partway
+  says so, with Resume from page N, instead of saying their list has been read. On the Scan page, everyone stopped partway is in a new In progress
+  card right after step 4, with Resume for each person and Resume all, and each name opens their circle
+  on the map. It used to be folded away under Fine-tune the scanner.
+- **The tabs sit on the header's line, and the notch hangs from them.** On a computer the row of
+  tabs rests on the line under the header, so a page's own buttons in the notch below join onto
+  it. The header is the same height on every tab: the Pending count that added a row on Degrees
+  and Separation is gone (sent requests are still under Outlink → Pending).
+- **Separation starts with its slider.** The line counting people two steps away and the tier
+  strip under it are gone; the search box stays at the top.
+- **The notch comes with the page.** Switching tabs, it waits for the next page to appear instead
+  of hanging over a blank screen while it loads.
+
+### Fixed
+- **A company called "Foods" or "Beverages" is in Retail, Consumer & Hospitality.** The word list
+  had "food" and "beverage" but not the plurals, so a company like Northwind Foods took its
+  industry from its people's headlines instead (tech, on a test network). Scores are worked out
+  again once after the update, since a company's industry can change its estimate and your sector.
+- **Scan dots are whole on Paths.** The dots along the header's line while a scan runs were cut in
+  half above Paths' left panel; they also stop short of the tabs now that the tabs sit on the line.
+- **The 3rd-degree dot in Degrees and Separation says why it can't be tapped.** It said "No one at
+  3rd degree yet" even with people found by company scans; it now says those are drawn on Network
+  Circle.
+- **The ring round a scanned connection's dot shows how much of their list was read.** It showed 2
+  of 5 bars, "partly read", for everyone scanned, even when their whole list was in, and the card's
+  Insights offered to finish lists that were finished. The app now takes in how far each list was
+  read, which the scanner had been noting all along.
+
 ## [0.7.0] - 2026-10-03
 
 ### Added

package/README.md

@@ -10,6 +10,10 @@
   someone you haven't met. Free, open source, and it runs on your own computer.
 </p>
 
+<p align="center">
+  <strong>1.0:</strong> complete, signed and notarized by Apple, and maintained. New features come slowly.
+</p>
+
 <p align="center">
   <a href="https://github.com/blakeb056/six-degrees/releases/latest"><img src="https://img.shields.io/github/v/release/blakeb056/six-degrees?label=release&color=ffd700" alt="Latest release"></a>
   <a href="https://github.com/blakeb056/six-degrees/releases/latest"><img src="https://img.shields.io/github/release-date/blakeb056/six-degrees?label=released&color=3ee08f" alt="Release date"></a>
@@ -71,21 +75,17 @@ The links above always fetch the newest release.</sub>
 (Ventura) or later**, and it's about 210 MB. Everything the scanner needs except Google
 Chrome is inside, Python included, so there's nothing else to install.
 
-**The first time you open it**, macOS stops it, because the app isn't signed with a
-paid Apple certificate yet:
-
 1. Open the file you downloaded (**Six-Degrees-Mac-….dmg**, in your Downloads folder).
    In the window that opens, drag **Six Degrees** onto the **Applications** folder.
-2. Open **Six Degrees** from Applications. macOS says it can't check the app for
-   malware. Close that message with **Done** (on macOS 13 or 14 it may say **OK** or
-   **Cancel**). Anything except *Move to Trash*.
-3. Open **System Settings → Privacy & Security**, scroll down to *"Six Degrees" was
-   blocked*, and click **Open Anyway**. Confirm with **Open Anyway** again (on macOS
-   13 or 14 the button says **Open**), and enter your password if asked.
+2. Open **Six Degrees** from Applications. Signed by Blake Burford and notarized by
+   Apple: it opens like any Mac app. The first time, macOS asks whether to open an app
+   downloaded from the internet: click **Open**.
 
-That's once per download; after that it opens like any app.
+(A copy of 0.8.0 or earlier wasn't signed yet: if macOS says it can't check it for
+malware, close that message, not *Move to Trash*, then **System Settings → Privacy &
+Security → Open Anyway**. Or update it, below.)
 
-**Or install it from Terminal** (no approval step). Press ⌘ Space, type *Terminal* and
+**Or install it from Terminal.** Press ⌘ Space, type *Terminal* and
 press Return. Paste this line into the window that opens and press Return:
 
 ```bash
@@ -108,7 +108,7 @@ misbehaves later, unzip it and drag the app into Applications to go back. When t
 can't update itself (for example, it's running from the disk image), it says why and what
 to do, usually with a Terminal line to paste and what that line will do. Copies of 0.2.1
 and older don't have the button yet, so they take the Terminal line once more.
-Downloading the new `.dmg` works too; you'll repeat step 3 once for it.
+Downloading the new `.dmg` and dragging it to Applications works too.
 
 Your network isn't stored in the app. It's in a hidden folder in your home folder,
 `.six-degrees` (open it any time with *Help → Show the Data Folder*), so updates never
@@ -193,6 +193,16 @@ in, and its most powerful people.
 
 <img src="docs/img/paths.png" alt="Paths → Map with the company analyzer open: companies grouped by industry, and one company's people by level and ways in" width="100%">
 
+**Insights.** Everyone within two steps of you in one table, ranked by power, each person
+once: the **Power Index**, with filters for degree, tier and rarity, and Open circle, Scan
+circle or Ask on every row. Beside it, and each a board of its own in the notch:
+**Kingmakers** (your connections with the most S and A people behind them), **Gatekeepers**
+(who your S and A reach hangs on), **Hidden giants** (S-tier with one way in), **Untapped**
+(S and A with no request out), **Company power** and **Industries**. **Report** is the same
+numbers as a page you scroll. Every number says where it came from, and nothing is about
+money: *Richest?* says plainly that the app never sees it. Power ranks reachability, not
+people.
+
 **Scores.** How a power score is worked out, and the three things you can change about
 it, in one place: your field (the sectors you work in), how tiers are graded (on your
 network's curve or the fixed scale), and every scanned company's score.
@@ -202,6 +212,15 @@ circle offers its best five people at a time; mark invites as sent to fill the r
 unlock the next five. It also shows the next best moves, levels and points (from
 invites sent and people who accepted, never from browsing).
 
+**Auto** *(needs a scan)*. Next to every Connect (a person's card, Outlink), Auto sends
+that one person a connection request for you, from the scanner's Chrome, without a note.
+One press, one person: never a batch, never on a timer. It asks once before the first one.
+If LinkedIn wants their email address first, Auto closes that and sends nothing (use
+Connect to add them yourself); if it offers a personal note (Premium), Auto sends without
+one. It calls a request sent only once their profile shows it pending. It stops at 15 in
+any 24 hours and 80 in any 7 days, opens their profile once (a profile view), and counts in
+Settings → LinkedIn usage.
+
 **Scan.** The guided scanner. It shows progress, the budget that's left, the cooldown
 lock, and a **Paused** list you can carry on from.
 
@@ -287,6 +306,10 @@ Something out of date, or unfair to another tool? [Open an issue](https://github
 >
 > The app asks for an explicit "I understand" once, before the first scan.
 >
+> **The scanner reads; the one thing it ever sends is a connection request, and only when
+> you press Auto** on a person (one each press, without a note, at most 15 a day and 80 a
+> week). Auto asks once before its first request.
+>
 > Six Degrees is not affiliated with or endorsed by LinkedIn.
 
 ## First run
@@ -299,7 +322,9 @@ The app opens on a welcome screen with three ways in, and asks nothing about you
   in a Chrome window, and then it scans. Needs Google Chrome. The Mac app brings its own
   Python; with `npx six-degrees` the page uses yours, or sets up a private one with a
   click. It checks and says what's missing. The app marks this *Recommended* because
-  it's the only way to Degrees and Outlink. Read the warning above first.
+  it's the only way to Degrees and Outlink. Read the warning above first. On a Mac,
+  macOS may ask whether Six Degrees can manage apps while you scan: that's Chrome
+  updating itself, and scanning works either way (step 1 has a button to allow it once).
 - **Import my LinkedIn CSV**: LinkedIn's official export, read on your machine. On
   LinkedIn: **Settings & Privacy → Data privacy → Get a copy of your data →
   Connections**. LinkedIn emails a link in about ten minutes; unzip it and drop
@@ -395,7 +420,8 @@ It estimates **network position**, not what anyone is worth as a person.
   data folder as `csv-network.json` (names, positions, companies, profile links and when
   you connected; never email addresses) until you click × beside *Your CSV*.
 - The app contacts only these, and only when you act:
-  - **LinkedIn**, while you scan. Each profile photo is saved on your computer as the
+  - **LinkedIn**, while you scan, and when you press **Auto** (one connection request,
+    sent from the scanner's Chrome). Each profile photo is saved on your computer as the
     scan reads it, and the app shows photos only from there, so looking at your network
     never contacts LinkedIn. (Photos an older version kept as links to LinkedIn show
     initials until the next scan, or *Save photos* on the Scan page, saves them.)

package/SECURITY.md

@@ -56,8 +56,11 @@ This app is designed to run **on your own machine, against your own network**.
   and has no link pointing outside itself. The checksums come from the same
   release, so they catch a corrupted, truncated or swapped download, not a
   compromised GitHub account; that is the same trust as the Terminal
-  installer. The app is only signed ad hoc, so the signature proves it is
-  whole, not who made it. The swap is done by a script shipped inside the app
+  installer. Releases from the first signed one on are signed with Blake
+  Burford's Developer ID and notarized by Apple (docs/brain/DESKTOP.md D4), but
+  the updater checks only that the signature is intact, not who made it (0.8.0
+  and earlier were signed ad hoc, and have nobody to compare against), so the
+  trust is still the release's. The swap is done by a script shipped inside the app
   (`scripts/apply-update.sh`), started with a clean environment, and it moves
   only the app: the data folder is never read, moved or written. It stops only
   the app's own processes, the ones the server names and those whose
@@ -71,8 +74,10 @@ This app is designed to run **on your own machine, against your own network**.
   scanner's packages installed from PyPI when the app is built. Those packages
   are pinned in `scripts/requirements.txt`: an exact version and the SHA-256 of
   every file pip may install, wheels only, so pip refuses any other file and
-  nothing is built from source. The Python is signed ad hoc like the rest of the
-  app and sealed into its signature, which `codesign --verify --deep --strict`
+  nothing is built from source. The Python is signed like the rest of the app
+  (in releases with the Developer ID and the hardened runtime, each program and
+  library on its own; ad hoc in a build without the certificate) and sealed into
+  the app's signature, which `codesign --verify --deep --strict`
   checks (in CI, and before the in-app updater uses a download). It runs
   isolated from the user's Python settings (`-E -s`: no `PYTHON*` variable and
   no user site-packages count), so nothing of the user's can stand in for its
@@ -129,6 +134,14 @@ Everything stays local:
 If you run the scanner, `chrome-profile/` in the data directory holds a live
 logged-in LinkedIn session. Never copy, sync, or commit it.
 
+The scanner reads LinkedIn. The one thing it ever sends there is a connection request,
+and only when you press **Auto** on a person: one request per press, without a note, at
+most 15 in any 24 hours and 80 in any 7 days. The app looks the person up by the id the
+page sends and passes the scanner their profile URL from the database, never a URL or name
+from the request, and refuses before anything starts during a cooldown, past those caps,
+or before Auto's one-time question has been answered (`app/api/scraper/route.js`,
+`lib/auto-connect.js`).
+
 ### Moving your data (Settings → Your data)
 
 - **An export** is one `.sixdegrees` file the user saves and carries. It is

package/lib/auto-connect.js

@@ -0,0 +1,145 @@
+// Auto: one connection request, sent for you from the scanner's Chrome.
+//
+// Blake, 2026-10-03: "auto add and basically adds the person for them in the
+// card or wherever its available. now this will count in scans obviously for
+// usage and one thing to prevent problems is that sometimes when adding it'll
+// prompt the user to have a email from their work or to send a personal note
+// if they have premium so if thats the case then have it close out of that in
+// the scanner for adding but it should be seamless." Then: "i just want it next
+// to connect button but say auto and makes it the better pick visually".
+//
+// That reverses the standing rule against automated LinkedIn actions, for this
+// one action only: one press, one person. Never a batch, never on a timer. The
+// scanner does the pressing (scripts/scrape.py --connect, connect_person); the
+// app looks the person up by id and refuses before anything opens
+// (app/api/scraper/route.js); this file holds what both sides must agree on:
+// the caps, the result names the scanner prints, and the words the page shows.
+//
+// No Node imports: the page, the route and the tests all read it.
+
+// Invitations in any 24 hours and in any 7 days (scripts/scrape.py
+// INVITE_DAY_CAP, INVITE_WEEK_CAP; tests/auto-connect.test.mjs checks they
+// match). LinkedIn doesn't publish its invitation limit; people commonly report
+// about 100 a week, so the week stays well under that, and the day keeps a
+// whole week from going in one sitting.
+export const INVITE_CAPS = { day: 15, week: 80 };
+
+// The weekly number people report, shown as a range people report, never as LinkedIn's.
+export const REPORTED_WEEKLY_INVITES = 100;
+
+export const AUTO_EXPLAIN = 'Sends the request for you from the scanner’s Chrome, without a note. Counts toward your LinkedIn usage.';
+
+export const AUTO_CONFIRM = 'Auto sends connection requests from your LinkedIn account, one each time you press it. '
+  + 'LinkedIn limits how many invitations an account can send, and may restrict accounts that send many.';
+
+// The server's answer until the one-time yes is given (the page then asks it).
+export const AUTO_REFUSAL = 'Auto asks once before its first request. Press Auto again and confirm.';
+
+/** When Auto's one-time question was answered yes (ISO time), or null. Saved in Settings (lib/settings.js). */
+export const AUTO_ACCEPTED_SETTING = {
+  default: null,
+  parse(value) {
+    if (value === null) return null;
+    if (typeof value !== 'string' || Number.isNaN(Date.parse(value))) {
+      throw new Error('When Auto was first allowed is a date and time.');
+    }
+    return new Date(value).toISOString();
+  },
+};
+
+// The one line the scanner prints to say how a request went (scrape.py
+// connect_result), read by the route as the job's log arrives.
+export const CONNECT_RESULT = /^Connect result: ([a-z-]+)$/;
+
+/** The result named on a log line, or null. */
+export function connectResultIn(line) {
+  const m = String(line ?? '').trim().match(CONNECT_RESULT);
+  return m && Object.hasOwn(OUTCOMES, m[1]) ? m[1] : null;
+}
+
+const day = INVITE_CAPS.day;
+const week = INVITE_CAPS.week;
+
+// Every result the scanner can print (scrape.py CONNECT_RESULTS; the test
+// checks both lists are the same). `marks`: the request is marked as sent here,
+// everywhere at once. Only a send the profile then showed as Pending, or one
+// that was already pending, does that; anything unclear does not (TRAPS §7).
+export const OUTCOMES = {
+  sent: { ok: true, marks: true, text: 'Request sent' },
+  'already-pending': { ok: true, marks: true, text: 'A request to them was already pending on LinkedIn, so nothing new was sent. It’s marked as sent here.' },
+  'email-needed': { text: 'LinkedIn wants their email address before it sends this one. Use Connect to add them yourself.' },
+  'no-connect': { text: 'LinkedIn shows no Connect for them here, only Follow or Message, or a request is already out. Nothing was sent.' },
+  'not-sent': { text: 'LinkedIn asked something Auto doesn’t answer for you, so it closed that and sent nothing. Use Connect to add them yourself.' },
+  unclear: { text: 'Auto pressed Send but couldn’t see the request go through, so it isn’t marked as sent. Use Connect to check their profile.' },
+  'not-loaded': { text: 'Their profile didn’t load, so nothing was sent. Try again in a while.' },
+  unavailable: { text: 'LinkedIn says their profile isn’t available, so nothing was sent.' },
+  'linkedin-limit': { text: 'LinkedIn says this account has reached its invitation limit for now. Nothing was sent.' },
+  pushback: { text: 'LinkedIn pushed back, so scanning and Auto are paused for a day. Settings, LinkedIn usage says when it ends.' },
+  stopped: { text: 'Stopped before anything was sent.' },
+  'not-signed-in': { text: 'LinkedIn isn’t signed in in the scanner’s Chrome. Sign in on the Scan page (step 2), then try again.' },
+  cooldown: { text: 'Scanning is paused after LinkedIn pushed back, and Auto waits with it. Nothing was sent.' },
+  'invites-day': { text: `Auto has sent ${day} requests in the last 24 hours, its limit. Nothing was sent.` },
+  'invites-week': { text: `Auto has sent ${week} requests in the last 7 days, its limit. Nothing was sent.` },
+  profiles: { text: 'Today’s profile views are used, and Auto opens their profile to send. Nothing was sent.' },
+  'not-found': { text: 'That person isn’t in your network on this computer, so nothing was sent.' },
+};
+
+export const RESULT_NAMES = Object.keys(OUTCOMES);
+
+/** Does this result mark the request as sent? */
+export const connectMarks = (result) => Boolean(OUTCOMES[result]?.marks);
+
+/**
+ * What the page says once an Auto job has ended: { result, ok, marks, text }.
+ * `end` is how the job ended (lib/scraper-client.js runScrape): its `outcome`
+ * (the route's reading of the result line), else its failure, else a plain
+ * "couldn't finish". Never says sent without the scanner saying so.
+ */
+export function connectOutcome(end) {
+  const result = end?.outcome && Object.hasOwn(OUTCOMES, end.outcome) ? end.outcome : null;
+  if (result) {
+    const o = OUTCOMES[result];
+    return { result, ok: Boolean(o.ok), marks: Boolean(o.marks), text: o.text };
+  }
+  const why = Array.isArray(end?.failure) ? end.failure.filter(Boolean).slice(-2).join(' ') : '';
+  return {
+    result: null, ok: false, marks: false,
+    text: why ? `Auto couldn’t finish, and nothing is marked as sent: ${why}` : 'Auto couldn’t finish, and nothing is marked as sent.',
+  };
+}
+
+/**
+ * Why the route won't start an Auto request because of a cap, or null.
+ * `li` is lib/linkedin-limits.js linkedinState: invitesToday, invitesWeek,
+ * invitesFreeAt / invitesWeekFreeAt (ms) and profilesLeftToday. `when` turns a
+ * time into words.
+ */
+export function inviteRefusal(li, when = (ms) => new Date(ms).toLocaleString()) {
+  if (!li) return null;
+  if (li.unreadable) return 'The record of what Six Degrees has asked of LinkedIn couldn’t be read, so Auto waits until it can.';
+  if (li.invitesToday >= day) {
+    return `Auto has sent ${day} requests in the last 24 hours, its limit.${li.invitesFreeAt ? ` The next one frees up ${when(li.invitesFreeAt)}.` : ''}`;
+  }
+  if (li.invitesWeek >= week) {
+    return `Auto has sent ${week} requests in the last 7 days, its limit.${li.invitesWeekFreeAt ? ` The next one frees up ${when(li.invitesWeekFreeAt)}.` : ''}`;
+  }
+  if (li.profilesLeftToday === 0) {
+    return 'Today’s profile views are used, and Auto opens their profile to send the request. Try again once one frees up (Settings, LinkedIn usage).';
+  }
+  return null;
+}
+
+/**
+ * Why this person can't be sent a request from here, or null when they can.
+ * `person` is their row; `connected` is true when they're one of your own
+ * connections (any copy of them at degree 1); `requested` when a request to
+ * them is already out (any copy marked sent or pending).
+ */
+export function personRefusal(person, { connected = false, requested = false, accepted = false } = {}) {
+  if (!person) return { status: 400, error: 'That person could not be found.' };
+  const name = person.name || 'They';
+  if (connected || accepted || person.degree === 1) return { status: 409, error: `${name} is already one of your connections.` };
+  if (requested) return { status: 409, error: `A request to ${name} is already out.` };
+  if (!person.profile_url) return { status: 400, error: `There is no LinkedIn profile on file for ${name}.` };
+  return null;
+}

package/lib/companies.js

@@ -52,7 +52,7 @@ export const INDUSTRIES = [
   { key: 'realestate', label: 'Real Estate & Construction', color: '#d35400',
     words: /\b(real estate|realtor|realty|property|properties|construction|architecture|architect|mortgage|homes|housing|builders?)\b/i },
   { key: 'consumer', label: 'Retail, Consumer & Hospitality', color: '#ff79c6',
-    words: /\b(retail|e-?commerce|shopify|consumer|cpg|fashion|apparel|beauty|cosmetics|food|beverage|restaurant|hospitality|hotel|travel|tourism|coca-cola|nike|store|shop)\b/i },
+    words: /\b(retail|e-?commerce|shopify|consumer|cpg|fashion|apparel|beauty|cosmetics|foods?|beverages?|restaurant|hospitality|hotel|travel|tourism|coca-cola|nike|store|shop)\b/i },
   { key: 'industry', label: 'Manufacturing, Energy & Logistics', color: '#95a5a6',
     words: /\b(manufacturing|energy|oil|gas|solar|utilities|automotive|tesla|siemens|ge|general electric|honeywell|3m|logistics|supply chain|shipping|freight|fedex|ups|industrial|mining|chemicals?)\b/i },
   { key: 'nonprofit', label: 'Nonprofit & Community', color: '#bdc3c7',

package/lib/in-progress.js

@@ -0,0 +1,46 @@
+// What the app says about a circle scan that stopped partway. Blake,
+// 2026-10-03: "if someone was scanned but not finished it needs to show that in
+// their profile card if clicked showing resume scanner in that actual card as we
+// need to have some sort of in progress ones in the scanner as well to see all
+// the ones they stopped and would like to resume".
+//
+// The person card (app/components/Sidebar.js) and the Scan page's In progress
+// card (app/components/LinkedInLimits.js PausedList) both word it from here, so
+// the two never say it differently. Who is stopped partway, and where Resume
+// carries on, is lib/paused.js's to decide; this only says it. No Node imports:
+// the browser loads it.
+
+/** The scan box's heading on a person card: a read that stopped partway says so first. */
+export function scanBoxTitle({ resume, hasCluster }) {
+  if (resume) return 'SCAN IN PROGRESS';
+  return hasCluster ? 'CLUSTER ACTIVE' : 'CREATE CLUSTER';
+}
+
+/**
+ * The line by their name on the card, from GET /api/scraper?resume=<id>
+ * ({ nextPage, pagesRead, legacy }). null when there is nothing to carry on with.
+ */
+export function stoppedLine(resume) {
+  if (!resume) return null;
+  const read = Number(resume.pagesRead) || 0;
+  return read > 0 ? `Scan stopped after page ${read}` : 'Scan stopped before its first page';
+}
+
+/**
+ * The In progress card's line on the Scan page, from the status answer's
+ * `paused` (lib/paused.js pausedList). null when nobody is. People mapped
+ * before 0.1.6 kept notes (`legacy`) were read to page 10 and no further, which
+ * is why they're here at all, so it says so.
+ */
+export function inProgressSummary(paused = []) {
+  const list = Array.isArray(paused) ? paused : [];
+  const n = list.length;
+  if (!n) return null;
+  const legacy = list.filter((p) => p?.legacy).length;
+  const line = n === 1
+    ? '1 person stopped partway. Resume carries on from the page they stopped at.'
+    : `${n} people stopped partway. Resume carries on from the page each one stopped at.`;
+  if (!legacy) return line;
+  const old = n === 1 ? 'Their list was' : legacy === 1 ? '1 of them was' : `${legacy} of them were`;
+  return `${line} ${old} read to page 10, before whole lists were read.`;
+}