debug: add load handler logging + auth_message removed

- Wrap load_settings_on_startup and load_session_state_on_startup in
try/except with print logging so HF logs show the actual error
- Both handlers now return safe defaults on failure instead of crashing
- Removed auth_message from launch()

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

app.py

@@ -49,5 +49,6 @@ app.launch(
     share=False,
     inbrowser=False,
     auth=authenticate_user,
+
     show_api=False,
 )

chat_interface.py

@@ -4265,11 +4265,27 @@ def create_chat_interface():
         current_usecase = gr.State(default_settings['use_case'])
         current_liveboard_name = gr.State(default_settings.get('liveboard_name', ''))
         
-        # Header
-        gr.Markdown("""
-        # 💬 ThoughtSpot Demo Builder
-        ### AI-Powered Conversational Demo Creation
-        """)
+        # Header with logout link
+        with gr.Row(equal_height=True):
+            gr.Markdown("""
+            # 💬 ThoughtSpot Demo Builder
+            ### AI-Powered Conversational Demo Creation
+            """)
+            gr.HTML("""
+            <div style="display:flex; align-items:center; justify-content:flex-end; padding:8px 0;">
+                <a href="/logout" style="
+                    color: #6b7280;
+                    text-decoration: none;
+                    font-size: 14px;
+                    padding: 6px 14px;
+                    border: 1px solid #d1d5db;
+                    border-radius: 6px;
+                    white-space: nowrap;
+                " onmouseover="this.style.background='#f3f4f6'" onmouseout="this.style.background='transparent'">
+                    Sign Out →
+                </a>
+            </div>
+            """)
         
         # Additional state for new tabs
         ai_feedback_state = gr.State("")
@@ -4752,31 +4768,53 @@ def create_chat_interface():
         # Load settings from Supabase on startup (uses SETTINGS_SCHEMA)
         def load_settings_on_startup(request: gr.Request = None):
             """Load saved settings from Supabase - uses schema-driven helper"""
-            user_email = require_authenticated_email(request)
-            settings = load_gradio_settings(user_email)
-            return load_settings_values(settings, user_email)
+            try:
+                user_email = require_authenticated_email(request)
+                print(f"[LOAD] load_settings_on_startup for {user_email}")
+                settings = load_gradio_settings(user_email)
+                result = load_settings_values(settings, user_email)
+                print(f"[LOAD] load_settings_on_startup OK — {len(result)} values")
+                return result
+            except Exception as e:
+                import traceback
+                print(f"[LOAD ERROR] load_settings_on_startup failed: {e}\n{traceback.format_exc()}")
+                # Return schema-length list of defaults so Gradio doesn't crash
+                return [default for _, _, default, _ in SETTINGS_SCHEMA]
 
         def load_session_state_on_startup(request: gr.Request = None):
             """Initialize chat/session state from the same authenticated user settings."""
-            user_email = require_authenticated_email(request)
-            settings = load_gradio_settings(user_email)
-
-            company = (str(settings.get("default_company_url", "")).strip() or "Amazon.com")
-            use_case = (str(settings.get("default_use_case", "")).strip() or "Sales Analytics")
-            model = (str(settings.get("default_llm", "")).strip() or DEFAULT_LLM_MODEL)
-            liveboard_name = str(settings.get("liveboard_name", "")).strip()
-            initial_message = build_initial_chat_message(company, use_case)
+            try:
+                user_email = require_authenticated_email(request)
+                print(f"[LOAD] load_session_state_on_startup for {user_email}")
+            except Exception as e:
+                print(f"[LOAD ERROR] load_session_state_on_startup auth failed: {e}")
+                user_email = ""
+            try:
+                settings = load_gradio_settings(user_email)
 
-            return (
-                "initialization",
-                model,
-                company,
-                use_case,
-                liveboard_name,
-                gr.update(value=model),
-                gr.update(value=liveboard_name),
-                initial_message,
-            )
+                company = (str(settings.get("default_company_url", "")).strip() or "Amazon.com")
+                use_case = (str(settings.get("default_use_case", "")).strip() or "Sales Analytics")
+                model = (str(settings.get("default_llm", "")).strip() or DEFAULT_LLM_MODEL)
+                liveboard_name = str(settings.get("liveboard_name", "")).strip()
+                initial_message = build_initial_chat_message(company, use_case)
+                print(f"[LOAD] load_session_state_on_startup OK — model={model}, company={company}")
+                return (
+                    "initialization",
+                    model,
+                    company,
+                    use_case,
+                    liveboard_name,
+                    gr.update(value=model),
+                    gr.update(value=liveboard_name),
+                    initial_message,
+                )
+            except Exception as e:
+                import traceback
+                print(f"[LOAD ERROR] load_session_state_on_startup failed: {e}\n{traceback.format_exc()}")
+                return (
+                    "initialization", DEFAULT_LLM_MODEL, "Amazon.com", "Sales Analytics", "",
+                    gr.update(value=DEFAULT_LLM_MODEL), gr.update(value=""), "",
+                )
 
         # Wire up load handler - outputs follow SETTINGS_SCHEMA order
         interface.load(
@@ -5412,7 +5450,54 @@ def create_settings_tab():
         inputs=[],
         outputs=[settings_status]
     )
-    
+
+    # -----------------------------------------------------------------------
+    # Change Password
+    # -----------------------------------------------------------------------
+    gr.Markdown("---")
+    with gr.Accordion("🔒 Change Password", open=False):
+        with gr.Row():
+            with gr.Column(scale=1):
+                cp_current = gr.Textbox(label="Current Password", type="password", placeholder="Your current password")
+                cp_new = gr.Textbox(label="New Password", type="password", placeholder="At least 8 characters")
+                cp_confirm = gr.Textbox(label="Confirm New Password", type="password", placeholder="Repeat new password")
+                cp_btn = gr.Button("Change Password", variant="primary")
+                cp_status = gr.Markdown("")
+            with gr.Column(scale=1):
+                gr.Markdown("""
+                **Password requirements:**
+                - At least 8 characters
+                - Current password required to confirm identity
+
+                *Forgot your password? Ask an admin to reset it via the Admin tab, then change it here after signing in.*
+                """)
+
+    def change_password_handler(current, new_pw, confirm, request: gr.Request = None):
+        if not current or not new_pw or not confirm:
+            return "❌ All fields are required."
+        if new_pw != confirm:
+            return "❌ New passwords don't match."
+        if len(new_pw) < 8:
+            return "❌ New password must be at least 8 characters."
+        try:
+            user_email = require_authenticated_email(request)
+            from supabase_client import UserManager
+            um = UserManager()
+            if not um.enabled:
+                return "⚠️ Supabase not configured — password change unavailable."
+            if not um.authenticate(user_email, current):
+                return "❌ Current password is incorrect."
+            um.reset_password(user_email, new_pw)
+            return "✅ Password changed successfully. Use your new password next time you sign in."
+        except Exception as e:
+            return f"❌ Error: {e}"
+
+    cp_btn.click(
+        fn=change_password_handler,
+        inputs=[cp_current, cp_new, cp_confirm],
+        outputs=[cp_status]
+    )
+
     # Return components dict for loading (follows schema order)
     return all_components
 
@@ -5474,6 +5559,7 @@ if __name__ == "__main__":
         inbrowser=False,
         debug=True,
         auth=auth_fn,
+
         max_threads=20  # Allow multiple threads for concurrent requests
     )