fix: switch liveboard name from change to blur to prevent queue flooding

Per-keystroke change events were queuing behind long-running deploy
generators, causing Gradio to show the queue wait timer directly on
the liveboard name textbox — the "flashy and freaky" concurrent
session behavior. Switching to blur eliminates the per-keystroke
queue churn; outputs=[] removes the unnecessary round-trip since
send_message always reads the live UI value at submit time.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

chat_interface.py

@@ -5079,16 +5079,18 @@ def create_chat_tab(chat_controller_state, settings, current_stage, current_mode
             outputs=[current_model, chatbot]
         )
 
-        # Liveboard name change — update controller settings in real-time
+        # Liveboard name blur — update controller settings when user leaves the field.
+        # Using blur (not change) avoids per-keystroke queue events that cause the
+        # Gradio progress spinner/timer to appear on this component while a deploy runs.
+        # No output needed — the value is already in the textbox; we only update the dict.
         def update_liveboard_name(name, controller):
             if controller is not None:
                 controller.settings['liveboard_name'] = name
-            return name
 
-        liveboard_name_input.change(
+        liveboard_name_input.blur(
             fn=update_liveboard_name,
             inputs=[liveboard_name_input, chat_controller_state],
-            outputs=[liveboard_name_input]
+            outputs=[]
         )
 
         # TS environment change — update controller settings in real-time

sprint_2026_03.md

@@ -171,6 +171,16 @@ This sprint covers hardening, settings, and new capabilities before that happens
 
 ## Done
 
+### Session: March 26, 2026 — HF Deployment Fixes + Auth + Settings
+
+- [x] **HF Blank Page After Login — Root Cause Found** ✅
+  - Cause: users were accessing via `huggingface.co/spaces/thoughtspot-dp/demoprep` (HF wrapper)
+  - The wrapper embeds the app in an iframe; modern browsers block third-party iframe cookies → auth cookie not sent back → stays on login page
+  - Fix: use the **direct URL** `https://thoughtspot-dp-demoprep.hf.space` — first-party cookies work fine
+  - Also fixed during investigation: pinned `starlette==0.50.0` (Starlette 1.0 broke TemplateResponse) and `fastapi==0.128.0` (prevents surprise upgrades on HF rebuild)
+- [x] **Logout button added** ✅ — "Sign Out →" link in header, wired to Gradio's `/logout` route
+- [x] **Change Password** ✅ — accordion in Settings tab; requires current password to confirm identity
+
 ### Session: March 26, 2026 — Liveboard Name Fix + Settings Reorganization
 
 - [x] **Liveboard Name Bug Fixed** ✅ — UI field value now takes priority over DB-loaded default