phase: 115_doc_draft_discard

All green — this was the final verification pass; everything from the four completed tasks was already in the working tree and verified.

**Phase 115 — Doc drafts: Discard + DELETE route + title fix — verification report**

- Verified all 4 task deliverables present: DELETE route (`app/api/doc_drafts.py`), Discard UI (`doc-edit.html` + `doc-edit.js` + `.discard-draft` CSS), title fix (`defaultDocTitle(wrap)` pairing + `saveAsDoc` call site), and all test pins (integration, frontend unit, E2E). No code changes needed.
- **Completion criteria:**
  1. ✅ Orphaned draft discardable from edit screen; row gone — `test_delete_removes_row_and_invalidates_token` (204 → GET 404), unknown-token 404, admin-gate 403 on all routes, E2E `test_discard_draft_from_edit_screen` all pass.
  2. ✅ Title after retry redo = redone answer's own question — E2E `test_save_title_is_the_redo_question_after_retry` passes.
  3. ✅ Push flow byte-identical — `git diff` shows only the new DELETE route + module docstring; all 7 existing push tests green.
  4. ✅ `uv run pytest --cov=app` → **2457 passed**, app coverage **99%** (>90%); `uv run pytest tests/e2e/test_save_doc_session.py -v --no-cov` → **4 passed**; `uv run ruff check .` → clean; `uv run pyright` → 0 errors.
  5. ⏳ Commit + phase-dir move left to the harness (per executor rules, no `git` run; all changes left in the working tree).
- No defects found; no deviations.
- Next pending phase: none in `todo/` other than this one (`115_doc_draft_discard` is the last).

frontend/doc-edit.html

@@ -90,6 +90,20 @@
 
           <div class="doc-edit-actions">
             <button type="submit" id="push-doc-btn">Push to docs branch</button>
+
+            <!-- Phase 115 (task 02): the Discard control — this page's
+                 one destructive action. Without it an orphaned draft is
+                 un-deletable forever (the screen's only other action
+                 is the push). confirm() →
+                 DELETE /api/doc-drafts/<token> (admin-gated like the
+                 whole router; the uuid4 token is the screen's
+                 credential) → 204 → back to the chat (the draft has no
+                 other home — no drafts list exists). doc-edit.js owns
+                 the handler; a non-204 outcome lands the #push-error
+                 banner and does NOT navigate. -->
+            <button type="button" id="discard-draft" class="discard-draft"
+                    title="Delete this draft permanently — this cannot be undone">Discard draft</button>
+
             <a class="doc-edit-back" href="/">
               <svg aria-hidden="true" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M19 12H5"/><path d="m12 19-7-7 7-7"/></svg>
               <span>Back to chat</span>