phase: 91_admin_theme_tab

All verification is complete — this pass needed no code changes. Final report:

**Phase 91 — Admin Theme tab: final verification pass (all 6 tasks already in `complete/`)**

- Verified pre-paint theming end-to-end: `ui_settings` store + resolver, admin `GET/PUT /api/ui-settings`, `CachingMiddleware` inline-`<style id="bor-theme">` injection before `</head>` (incl. `/shared/<token>` prefix branch, unit-pinned), CSP sha256 exemption for the inline tag, Theme tab shell + `theme.js` editor, CSS-file theming fully retired.
- No defects found; zero changes made — working tree left exactly as the task executors left it.
- Tests: `uv run pytest --cov=app` → 1841 passed, 0 failed (TOTAL coverage **99%**; theming/ui_settings/caching all 100%); `uv run pytest tests/e2e/test_admin_theme_tab.py -v --no-cov` → **5 passed** in isolation.
- Lint/types: `uv run ruff check .` → All checks passed; `uv run pyright` → 0 errors, 0 warnings.
- Criteria: (1) unset deployment byte-identical, no `#bor-theme` anywhere — ✓ (unit no-op test + E2E reset byte-compare); `rg "BOR_THEME|themes/"` → single hit is the permitted doc-history comment in `frontend/index.html`. (2) admin-only gate + 403s for anonymous and token users — ✓ (E2E test 3). (3) saved theme inline before `</head>` on every page incl. `/shared/<token>`, computed `--brand` on first paint for admin + anonymous — ✓ (E2E test 2 + unit). (4) reset → byte-identical; 5 contrast pairs warn <4.5:1, non-blocking — ✓ (E2E tests 4–5). (5) suite green, >90% coverage, lint clean — ✓. (6) commit deferred to harness per rules.
- Notable: `.agents/PLAN.md` is absent from the repo — the phase overview's Design section was used as the binding spec; no deviation resulted.
- Next pending phase: **none** — 91 is the last phase in `todo/`.

frontend/assets/router.js

@@ -1,7 +1,7 @@
 /* Brain of Reese — shell router (phase 76, task 01).
  *
- * The five navbar views are views of ONE HTML shell (index.html), not
- * five documents: this module makes a navbar click a CLIENT-SIDE view
+ * The seven navbar views are views of ONE HTML shell (index.html), not
+ * seven documents: this module makes a navbar click a CLIENT-SIDE view
  * switch — history.pushState + show/hide — never a document load, so
  * the in-flight chat stream in the hidden view keeps streaming
  * through any switch and completes when the user returns to Chat.
@@ -62,8 +62,10 @@
  * (module — this file). No CDN, no framework, no bundler dependency:
  * a plain ES module whose dynamic imports (./tuning.js, task 01;
  * ./sources.js + ./git-sources.js, task 02; ./history.js in task 03;
- * ./tokens.js in phase 79 task 06) resolve relatively in dev and are
- * inlined by the Containerfile's esbuild stage in the image.
+ * ./tokens.js in phase 79 task 06; ./theme.js in phase 91 task 04 —
+ * the wiring lands there, the editor fills it in task 05) resolve
+ * relatively in dev and are inlined by the Containerfile's esbuild
+ * stage in the image.
  */
 
 /* ---------- the view map (pathname → view name) ----------
@@ -79,6 +81,7 @@ const VIEW = {
   "/git-sources.html": "git-sources", // phase 76 task 02: the Sources view
   "/history.html": "history", // phase 76 task 03: the History view (saved chats)
   "/tokens.html": "tokens", // phase 79 task 06: the Tokens view (access tokens)
+  "/theme.html": "theme", // phase 91 task 04: the Theme view (admin palette + branding)
 };
 
 /* The nav-link href the router stamps active for each view (the
@@ -90,6 +93,7 @@ const VIEW_PATH = {
   "git-sources": "/git-sources.html",
   history: "/history.html",
   tokens: "/tokens.html",
+  theme: "/theme.html", // phase 91 task 04: the Theme view (admin-only)
 };
 
 /* The lazy view modules — ONLY the non-chat views (chat needs no
@@ -103,6 +107,7 @@ const VIEW_MODULES = {
   "git-sources": () => import("./git-sources.js"), // phase 76 task 02
   history: () => import("./history.js"), // phase 76 task 03
   tokens: () => import("./tokens.js"), // phase 79 task 06
+  theme: () => import("./theme.js"), // phase 91 task 04 (wiring) + task 05 (editor)
 };
 
 /* Per-view document.head values, carried over from the old pages'
@@ -116,6 +121,7 @@ const TITLES = {
   "git-sources": "Git sources · Brain of Reese", // old git-sources.html <title>
   history: "Saved chats · Brain of Reese", // old history.html <title>
   tokens: "Access tokens · Brain of Reese",
+  theme: "Theme · Brain of Reese", // phase 91 task 04: no old page — the view is new
 };
 const DESCRIPTIONS = {
   chat:
@@ -128,6 +134,7 @@ const DESCRIPTIONS = {
   history:
     "Saved chats — every conversation is saved automatically, one click back.", // old history.html meta
   tokens: "Generate and revoke the API tokens that let people use the app.",
+  theme: "Set the palette and branding — the theme is baked into every served page, live on the first paint.",
 };
 
 /* The brand-resolved display name (phase 39 — brand.js is the single