feat(portal): one Space, many portals — one CORS entry per cluster forever

Merge remote-tracking branch 'hf-mcp-test/main' into deploy/mcp

Merge remote-tracking branch 'hf-mcp-test/main' into fix/blank-tiles-secondary-axis

fix(liveboard): a rejected TML import no longer reports success

feat(portal): validate generated specs against upstream's interview contract

chore(portal): re-vendor template at 040928d; drop our dangling-import patch

fix(portal): act-as user, and a real error when a model is unreadable

docs: single state-of-play snapshot + HF_TOKEN in the test-secrets script

feat(mcp): build_portal tool — portals inside the automated pipeline

feat(portal): one-command portal build from a deployed liveboard

feat(portal): bring portal builder into the codebase

fix(liveboard): KPI tiles average rates instead of summing them

fix(liveboard): KPI tiles ship with a sparkline and a period comparison

fix(data): differentiate dimension performance so measures can carry a story

fix(liveboard): demoted heatmaps keep a chart type their axis config allows

fix(mcp): URL is the env-table sentinel, not the cosmetic label

feat(mcp): config_check — read back what the Space actually has

fix(dataset): demoted formulas keep their sign range; repairs logged once

fix(quality): one semantic-check call site, not two

test(mcp): preflight — refuse to queue a test build against a busy Space

fix(data): stop the generator silently writing zeros; gate repairs instead of vetoing

feat(mcp): TS_AUTH_KEY for single-instance; surface duplicate-host config

fix(dataset): derived formulas fail loudly instead of generating zeros

feat(quality): semantic checks — bounded rates, month buckets, panel density

fix(harness): quality runner must not report success over failure

fix(dataset): explicit-prompt facts honour the user's Data Size

fix(liveboard): 4th KPI never converted — one NUM_KPIS constant

fix(mcp): create writable runtime dirs in the image

hotfix(mcp): logging must never fail a build (PermissionError outage)

fix(mcp): resolve Data Size from owner settings — row-count parity with App path

fix(model): omit join-key columns instead of hiding them (ISS-8 follow-up)

feat(mcp): create run loggers + log full payload for MCP builds

feat(logging): capture full run payload in session_logs on every run

Merge branch 'develop' into deploy/mcp

Merge branch 'claude/admiring-panini-2a1990' into develop

feat(liveboard): validate search queries against model facts

Merge remote-tracking branch 'hf-test/main' into develop

Merge branch 'claude/youthful-lederberg-e31760' into develop

feat: post-load data-quality gate for zero/null measure columns

fix(model): galaxy joins preserved, DIM_/FACT_ naming banned, keys hidden, agg defaults

feat(pipeline): semantic data gate — never chart dead measures

fix(mcp): durable build-result logging + varchar-safe payload rows

Merge branch 'develop_dg' into deploy/mcp

merge: Space cluster-map hotfix into unified TS_ENV resolver

feat(mcp): KEY_VAR ENV: indirection + scheme-less/port-tolerant host matching

Merge branch 'develop_dg' into deploy/mcp

refactor(mcp): resolve trusted-auth keys from the shared TS_ENV_<n> table

feat(liveboard): 4 KPIs per liveboard (was 2)

fix(mcp): explicit cluster->key map + techpartners support

test(mcp): retry brief fetch on network errors + --brief-file escape hatch