Thermograph monorepo: graded-climate API + SSR frontend + infra, domain-specific containerized deploys

Find a file

emi 52cfe5b77a All checks were successful secrets-guard / encrypted (push) Successful in 6s Details PR build (required check) / changes (pull_request) Successful in 11s Details shell-lint / shellcheck (push) Successful in 13s Details secrets-guard / encrypted (pull_request) Successful in 9s Details PR build (required check) / build-backend (pull_request) Has been skipped Details shell-lint / shellcheck (pull_request) Successful in 11s Details PR build (required check) / build-frontend (pull_request) Has been skipped Details PR build (required check) / validate-observability (pull_request) Has been skipped Details PR build (required check) / gate (pull_request) Successful in 1s Details Merge pull request 'Merge main back into dev to reconcile the squash-promotion divergence' (#91 ) from sync/main-into-dev into dev		2026-07-25 08:45:51 +00:00
.claude	guardrails: enforce live-host and secrets policy with hooks (#82 )	2026-07-25 07:09:11 +00:00
.forgejo/workflows	ci: collapse the eight deploy and build-push workflows into two (#87 )	2026-07-25 07:48:49 +00:00
backend	docs: rewrite the agent context layer to match the live system (#81 )	2026-07-25 07:08:54 +00:00
frontend	docs: rewrite the agent context layer to match the live system (#81 )	2026-07-25 07:08:54 +00:00
infra	ci: collapse the eight deploy and build-push workflows into two (#87 )	2026-07-25 07:48:49 +00:00
observability	docs: rewrite the agent context layer to match the live system (#81 )	2026-07-25 07:08:54 +00:00
.gitignore	Drop accidentally-committed worktrees; ignore .claude/worktrees	2026-07-24 15:57:34 -07:00
CLAUDE.md	ci: collapse the eight deploy and build-push workflows into two (#87 )	2026-07-25 07:48:49 +00:00
CUTOVER-NOTES.md	ci: collapse the eight deploy and build-push workflows into two (#87 )	2026-07-25 07:48:49 +00:00
README.md	ci: collapse the eight deploy and build-push workflows into two (#87 )	2026-07-25 07:48:49 +00:00

README.md

thermograph

The Thermograph monorepo — the split repos reunified (2026-07-22) with full history via subtree merges, while keeping everything the split was actually for: per-domain images, per-domain deploys, and an async FE/BE contract.

Domains

Dir	What	CI
`backend/`	FastAPI graded-climate API, accounts, notifications (Discord bot, push, mail), data pipeline	`build-push` → image `emi/thermograph/backend`; `deploy`
`frontend/`	Public client: static JS/CSS + SSR pages	same `build-push` / `deploy` workflows, matrixed by domain; image `emi/thermograph/frontend`
`infra/`	Compose (beta, LAN dev) + the Swarm stack (prod), deploy scripts, terraform, SOPS secrets vault, ops cron	`infra-sync` (host checkout + secrets render), `secrets-guard`, `ops-cron`
`observability/`	Loki + Grafana + Alloy stack	`observability-validate`

thermograph-docs deliberately stays its own repo (ADRs + runbooks, no build artifacts, different change cadence).

How CI stays decoupled

Every workflow in .forgejo/workflows/ is path-filtered to its domain: a push touching only frontend/** builds/deploys nothing else. Images stay separate (emi/thermograph/backend, emi/thermograph/frontend, each tagged sha-<12hex>), deploys stay per-service (infra/deploy/deploy.sh SERVICE=backend|frontend|all), and the API version contract (GET /api/version, PAYLOAD_VER) still lets FE and BE ship out of lockstep. The one intentionally coupled piece is pr-build.yml: a single always-running gate required check that builds only the domains a PR touches (a path-filtered required check would deadlock auto-merge).

Branch model (unchanged from the split era): PRs → dev, main → beta, release → prod; infra tracked via main on all hosts.

Before pointing anything live at this repo, read CUTOVER-NOTES.md.