[davior]

Summary

GAM now wears the theme its person chose for it in Gecko Suite (suite plan M7, SA-8). The suite keeps the theme library and each app's choice, so GAM can wear a different theme from Notes.

• Palette in the header: picks GAM's theme. "Create and edit themes" opens the suite's Themes page.
• No theme chosen, or the suite unreachable: GAM looks exactly as before. It redraws the last theme it wore on load, so a reload doesn't flash the plain look, and the picker hides itself while the suite can't be reached.
• Theme code copied from the suite (with APP='gam'): api/themes.ts, theme/, stores/appTheme.ts and the picker.
  • The browser calls the suite directly, signed in as the same person with GAM's token.
  • It uses its own HTTP client, separate from GAM's, so a refusal from the suite can never sign anyone out of GAM.
• Light/dark toggle: hidden while a theme is worn, because the theme sets its own mode.
• CSP:
  • connect-src gains ${SUITE_BASE_URL}, filled in at container start like ${NOTES_BASE_URL}.
  • img-src allows https images, because a theme background is any address and CSS draws it.
• Header icon: the favicon graphic replaces the 🦎 emoji (requested).

Needs gecko-suite#14 for the suite side.

Test plan

• cd frontend && npm run lint && npm test && npm run build: lint clean, 484 tests pass, build succeeds. The tests cover:
  • wearing the suite's choice for gam and caching it;
  • keeping the cached theme while the suite is unreachable;
  • choosing under GAM's name, and choosing none to go back to plain;
  • sign-out clearing the theme;
  • the CSP test: suite in connect-src, https in img-src, and the existing hash and template checks.
• cd backend && pytest -q: 1544 passed. There's no backend change.
• Not run: against a real suite cross-origin. That needs suite feat(providers): configure Claude and DeepSeek, which nothing could do #14 deployed with CORS_ORIGIN.

Deployment

1. Before pulling: deploy gecko-suite#14 first, with CORS_ORIGIN listing GAM's address (https://assets.geckopico.com). Without it, GAM still works; it just has no themes.
2. Configuration: SUITE_BASE_URL (already in .env for the AI) is now also passed to the frontend container for the CSP. The default is https://suite.geckopico.com, so set it only if the suite lives elsewhere.
3. Deploy. This rebuilds the frontend.

   git pull origin main
   docker compose up --build -d

   Then hard-refresh (Ctrl/Cmd+Shift+R).
4. Verify:
   • A palette icon appears in GAM's header, listing your themes.
   • Pick one: GAM redraws, and Notes is unaffected.
   • Reload in another browser: GAM still wears it.
   • The browser console shows no CSP errors.
5. Roll back: redeploy the previous commit.

---

Generated by Claude Code