feat: promote Watch reference data, sleep-stage rules, biometrics calibration, saved curves and presence auto-on

[ng]

Promotes dev to main with Apple Watch reference data, configurable sleep-stage classification, biometrics calibration, saved and annotated curves, experimental presence auto-on, and Host/Origin hardening for the pod API.

Changes

• Import Apple Watch sleep stages and heart rate, overlay reference heart rate on the vitals chart, explore vitals, and build datasets for classifier calibration (feat: sleep-stage dataset builder joining Watch stages with pod vitals #802, feat: ingest Apple Watch reference sleep stages for classifier calibration #803, feat: import Apple Watch heart rate into the pod and overlay it on the vitals chart #814, feat(biometrics): explore vitals and import Apple Watch data #821, fix(biometrics): accept same-origin Watch uploads and use a button for the export picker #826).
• Add per-side sleep-stage rules, written as sentences with quick adjust, preview and a change log, and respect piezo calibration quality, including unknown calibration in the week view (fix(sleep): classify stages with the side's piezo calibration quality #815, feat(sleep): let users define the sleep stage classification rules #816, fix(sleep): do not classify the week view at full quality while calibration is unknown #817, feat(sleep): sleep stage rules as sentences with quick adjust, preview and change log #822).
• Add biometrics calibration: versioned profiles and references, a shared Python runtime, a retained backtest replay engine, a prospective shadow runtime with a calibration API, and the calibration UI (feat(biometrics): add versioned calibration profiles, references and shared Python runtime #828–feat(biometrics): add calibration UI, browser tests and docs #831).
• MCP tools to inspect, preview and apply sleep-stage rules against the Watch reference, and to build and save a sleep curve from pod data (feat(mcp): sleep-stage rule inspection, dry-run preview and apply against Apple Watch reference #823, feat(mcp): build and save a sleep curve from pod data #825).
• Save named curves on the pod and add optional notes to curves (feat(curves): save named curves on the pod #827, feat(schedule): optional notes on curves #832).
• Experimental per-side presence auto-on with person-vs-pet occupancy classification; auto-off now ignores light loads such as pets (feat: experimental presence auto-on with person-vs-pet occupancy classification #810).
• Reject unknown Host headers so DNS-rebinding pages cannot reach the unauthenticated pod API, and apply the same Host/Origin allowlist to the sensor WebSocket handshake (fix(security): reject unknown Host headers so DNS-rebinding pages cannot reach the unauthenticated pod API #833, fix(stream): gate the sensor WebSocket handshake on the Host/Origin allowlist #834).
• Improve session endings, movement scoring during Pod 5 pump operation, and vitals continuity for quiet sleepers (fix: end sessions when the bed empties to a new level and score movement while the Pod 5 pump runs #804, fix: let cap-sense occupancy relax piezo presence re-entry so quiet sleepers keep their vitals #813).
• Add away-mode toggles to the side card and Stage panel, move Settings to per-section side tabs, improve the scheduled label contrast, and prevent premature stalled-pipeline banners (fix: stop flashing the stalled-pipeline banner before the latest vital loads #805–feat: away mode toggle in the side card and Stage panel #808).
• Update dependencies and pin Babel runtime to fix the Turbopack MQTT build (chore(deps): Update @lingui/swc-plugin dependency @lingui/swc-plugin to v6 #811, chore(deps): Update @semantic-release/git dependency @semantic-release/git to v11 #812, chore(deps): Update @base-ui/react all non-major dependencies #818, fix(build): pin @babel/runtime to 7.29.7 so Turbopack resolves mqtt's regenerator import #819).

Migrations

• Configuration DB: side stage classifier, stage classifier changes, curve templates, schedule notes and presence auto-on columns (0022–0027).
• Biometrics DB: Watch reference stages and vitals, and calibration tables (0017–0030).

Test plan

• GitHub checks on the dev head: build, lint, typecheck, unit tests, browser tests and all Python test jobs.
• After merge, wait for "Analyze & Release" on the main merge commit, then sudo sp-update main once on a pod and confirm the service starts and migrations apply.

🤖 Generated with Claude Code

🛏️ Beam this PR onto a sleepypod ✨

Pick the snippet that matches your pod. Already-installed pods can't use the curl bootstraps below — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use sp-update instead; it's on disk and opens WAN as its first step.

🔄 Already on a sleepypod (most common — review a PR on a running pod):

sudo sp-update dev

🚀 Fresh pod / first install — bootstraps from GitHub, rebuilds every push:

curl -fsSL https://raw.githubusercontent.com/sleepypod/core/dev/scripts/install \
  | sudo bash -s -- --branch dev

🎯 Pin to this exact build (run 38534055336 · cbc5387) — fresh-pod path, locked to one CI artifact for reproducible review:

curl -fsSL https://raw.githubusercontent.com/sleepypod/core/cbc5387997b042436c4679c87c1e1bc1ddd8d47a/scripts/install \
  | sudo bash -s -- \
      --branch dev \
      --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/38534055336/sleepypod-core.zip'

🧊 Artifact: sleepypod-core · self-destructs in 30 days 💥

[github-actions]

🎉 This PR is included in version 3.4.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀