Fix workflow permissions, expander flickering, and column KeyError

- Add permissions: contents: write to workflow (fixes 403 on git push)

- Replace border/padding CSS on expanders and metrics with box-shadow (no layout impact)

- Guard working_df against missing columns from stale QueryChat filter

.github/workflows/keep_alive.yml

@@ -5,6 +5,9 @@ on:
     - cron: '0 5 * * *'   # Daily at 05:00 UTC
   workflow_dispatch:       # Allow manual trigger
 
+permissions:
+  contents: write
+
 jobs:
   heartbeat:
     runs-on: ubuntu-latest

app.py

@@ -392,7 +392,9 @@ if cleaned_df is None or not y_cols:
 # If QueryChat is active, use its filtered df
 if st.session_state.qc is not None:
     working_df = get_filtered_pandas_df(st.session_state.qc)
-    if working_df.empty:
+    # Fall back if filtered df is empty or missing expected columns
+    required = {date_col} | set(y_cols)
+    if working_df.empty or not required.issubset(working_df.columns):
         working_df = cleaned_df
 else:
     working_df = cleaned_df

src/ui_theme.py

@@ -72,11 +72,10 @@ def apply_miami_theme() -> None:
             box-shadow: none;
         }}
 
-        /* ---- Expander card borders ---- */
+        /* ---- Expander card borders (box-shadow to avoid layout shift) ---- */
         div[data-testid="stExpander"] {{
-            border: 1px solid {_BORDER_GRAY};
+            box-shadow: 0 0 0 1px {_BORDER_GRAY};
             border-radius: 8px;
-            padding: 0.75rem;
         }}
 
         /* ---- Sidebar header accent ---- */
@@ -89,12 +88,11 @@ def apply_miami_theme() -> None:
             color: {MIAMI_RED};
         }}
 
-        /* ---- Metric cards ---- */
+        /* ---- Metric cards (inset shadow for left accent, no layout impact) ---- */
         div[data-testid="stMetric"] {{
             background-color: {_LIGHT_GRAY};
-            border-left: 4px solid {MIAMI_RED};
+            box-shadow: inset 4px 0 0 0 {MIAMI_RED};
             border-radius: 6px;
-            padding: 0.75rem 1rem;
         }}
         div[data-testid="stMetric"] label {{
             color: {_BLACK};