Scope app to /thermograph, free the domain root for a portfolio (#10)

- Drop the app-level "/" redirect so the FastAPI app no longer claims the
  domain root; it stays scoped to THERMOGRAPH_BASE (/thermograph). Root now
  404s at the app, leaving it for another service behind the proxy.
- Caddyfile: serve a static portfolio at / and reverse-proxy /thermograph* to
  uvicorn, on emigriffith.dev with automatic Let's Encrypt TLS.
- Default THERMOGRAPH_BASE to /thermograph in the env example to match. (#11)

* Add dev CI/CD pipeline deploying to a LAN server (#6)

* Weekly page: no-rain visuals adopt the dry-streak look

On the Weekly page, no-rain (0") days now warm with the dry-streak ramp
(tan→red, deepening to a 14-day cap) instead of a flat blue/tan, matching
the Dry chart and calendar's dry-period language:

- Precip trend chart: no-rain day dots colored by drynessColor(dsr).
- "Daily, graded" timeline strip: Rain-row dry cells tinted by dsr via a
  new optional color override on rdCell.

Rain days keep their intensity-tier colors; unknown streaks fall back to
the prior flat color, so nothing regresses.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019VP23wKmjS2ozk1g5a9g1Z

* Calendar totals: compact per-category status lines

Replace the stacked share bar + labeled percentage chips above the
calendar grid with a compact deviation strip: one thin status-colored
line per category (height scaled to the tallest non-median category),
with each share printed above it in that category's own status color.

The median tier — the neutral "Normal" center of the diverging
temperature scale — draws no line, just a faint baseline tick, so it
reads as the reference the other categories deviate from. Precip and
dry-streak have no natural median, so every category there keeps a line.

Percentage text is lifted toward the theme text color (color-mix) so
even the darkest/lightest tiers stay legible in both light and dark.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* Calendar totals strip: wider bars, 0.1%-precision small shares (#5)

Widen the per-category deviation bars (3px→10px) so each reads
clearly, and print sub-1% shares as e.g. "0.4%" instead of "<1%".


Claude-Session: https://claude.ai/code/session_019VP23wKmjS2ozk1g5a9g1Z

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

* Weekly timeline: label dry streak instead of a dot

On the precip row of the recent/forecast timeline, dry days now show the
running dry-streak count ("3d" = 3 days since measurable rain), tinted by
the same dryness ramp as the chart, rather than a bare "·".

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

* Add dev CI/CD pipeline deploying to a LAN server

PRs into dev run a build + boot/health check, auto-merge on green, and
deploy the merged branch to a self-hosted runner on the LAN box, which
runs the app as a sudo-free systemd --user service on 0.0.0.0:8137.

- ci-cd.yml: build -> auto-merge -> deploy (self-hosted)
- deploy-dev.yml: deploy on direct pushes / manual dispatch
- deploy-dev.sh + thermograph-dev.service + provision-dev-lan.sh
- CLAUDE.md: dev is the PR base branch; commit/PR message conventions
- DEPLOY-DEV.md: pipeline docs

* Match runner service name in docs to the installed user unit

* Pin CI Python to 3.12 for prebuilt pyarrow/pandas wheels

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

* Build LAN dev venv on pinned Python 3.12 via uv (#7)

This machine's default python3 is 3.14, which has no prebuilt pyarrow/pandas
wheels, so plain venv + pip fell back to a failing source build. Use uv to pin
the interpreter (fetching a managed CPython 3.12 if needed), independent of the
runner's PATH and pyenv state.

* Add comfort-temperature compare view; simplify Feels calendar filter (#9)

Compare page (frontend/compare.{html,js} + /thermograph/compare route):
line up several places over a date range and rank which best matches a
comfort temperature. Per location it pulls the same daily record the
Calendar uses and, per day, takes a chosen temperature (daytime high /
daily mean / overnight low / feels-like) against the comfort target. A
day "hits comfort" when it lands within an adjustable band; otherwise it
counts as colder or warmer and the average miss is tracked. Results are
ranked by comfort-day share (tie-broken by the smaller typical miss),
with a diverging below/comfort/above bar and per-bucket stats. Comfort,
band and judged temperature re-rank instantly client-side; only the
location set or date range trigger a data load (shared calendar cache).

Feels calendar filter: drop the comfort-temperature slider and the
client-side felt-high/felt-low re-pick. The Feels metric now colors by
the server's combined feels-like value like the other metrics, so its
tab matches the rest of the metric selector.

* Scope app to /thermograph, free the domain root for a portfolio (#10)

- Drop the app-level "/" redirect so the FastAPI app no longer claims the
  domain root; it stays scoped to THERMOGRAPH_BASE (/thermograph). Root now
  404s at the app, leaving it for another service behind the proxy.
- Caddyfile: serve a static portfolio at / and reverse-proxy /thermograph* to
  uvicorn, on emigriffith.dev with automatic Let's Encrypt TLS.
- Default THERMOGRAPH_BASE to /thermograph in the env example to match.

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>

deploy/Caddyfile

@@ -1,24 +1,40 @@
 # /etc/caddy/Caddyfile on the VPS.
-# Replace thermograph.example.com with your real hostname. Its A/AAAA record
-# must already point at this VPS — Caddy provisions a Let's Encrypt cert on
-# first request and auto-renews. Nothing else to do for TLS.
+# The domain's A/AAAA record must already point at this VPS — Caddy provisions a
+# Let's Encrypt cert on first request and auto-renews. Nothing else to do for TLS
+# (just make sure ports 80 and 443 are open).
+#
+# Layout on this domain:
+#   /                -> static portfolio site (served straight from disk)
+#   /thermograph/*   -> reverse-proxied to the Thermograph uvicorn (loopback)
+#
+# Thermograph must run with THERMOGRAPH_BASE=/thermograph (see /etc/thermograph.env)
+# so the app serves itself under that prefix. The app no longer claims "/", so the
+# root is free for the portfolio.
 
-thermograph.example.com {
+emigriffith.dev {
 	encode zstd gzip
 
-	# Reverse-proxy to the loopback uvicorn (see thermograph.service).
-	reverse_proxy 127.0.0.1:8137
+	# Thermograph — the app serves all pages, assets, and API under /thermograph.
+	# Match both the bare prefix and everything beneath it; the app redirects the
+	# bare /thermograph to /thermograph/.
+	handle /thermograph /thermograph/* {
+		reverse_proxy 127.0.0.1:8137
+	}
+
+	# Portfolio at the root. Point `root` at the built static site (for the Astro
+	# portfolio that's its `dist/` output). file_server serves index.html for
+	# directories and returns a real 404 for missing paths.
+	handle {
+		root * /var/www/emigriffith
+		file_server
+	}
 
 	log {
-		output file /var/log/caddy/thermograph.log
+		output file /var/log/caddy/emigriffith.log
 	}
 }
 
-# If you keep THERMOGRAPH_BASE=/thermograph instead of serving at the root,
-# use this block instead of the one above:
-#
-# thermograph.example.com {
-# 	encode zstd gzip
-# 	reverse_proxy /thermograph/* 127.0.0.1:8137
-# 	redir / /thermograph/
+# Optional: redirect www -> apex. Add a www CNAME/A record first, then uncomment.
+# www.emigriffith.dev {
+# 	redir https://emigriffith.dev{uri} permanent
 # }

deploy/thermograph-dev.service

@@ -0,0 +1,20 @@
+# systemd --user unit for the Thermograph LAN dev server.
+# Installed by deploy/deploy-dev.sh into ~/.config/systemd/user/ with the
+# @PLACEHOLDER@ tokens substituted for this machine's paths/port.
+# Runs sudo-free as your own user; linger keeps it up across logout/reboot.
+[Unit]
+Description=Thermograph (dev, LAN) - FastAPI/uvicorn
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=exec
+WorkingDirectory=@APP_DIR@/backend
+Environment=THERMOGRAPH_BASE=@BASE@
+# Bind all interfaces so other devices on the LAN (e.g. your phone) can reach it.
+ExecStart=@APP_DIR@/.venv/bin/uvicorn app:app --host 0.0.0.0 --port @PORT@
+Restart=on-failure
+RestartSec=2
+
+[Install]
+WantedBy=default.target

deploy/thermograph.env.example

@@ -5,6 +5,7 @@
 PORT=8137
 
 # Base path the app is served under.
-#   /            -> app at the domain root  (recommended on a dedicated domain)
-#   /thermograph -> app under a sub-path     (if sharing the host with other apps)
-THERMOGRAPH_BASE=/
+#   /thermograph -> app under a sub-path  (share the host with other apps, e.g. a
+#                   portfolio at the root — this is what the Caddyfile expects)
+#   /            -> app at the domain root (only if Thermograph owns the whole domain)
+THERMOGRAPH_BASE=/thermograph