v5.2.0: Infrastructure & Polish

- Design system: design-tokens.css + components.css (btn/input/modal/dropdown/toast/card/badge/empty/table)
- Per-user API tokens (Settings UI + backend): create/list/revoke via /api/settings/tokens
- Active sessions management: list/revoke via /api/settings/sessions with device info
- Onboarding wizard: /welcome page with 3-step flow (workspace → forge → project)
- Automatic daily backups: backup_db(), prune, scheduler + admin API
- Forge-agnostic projects table: register_repo(), list_projects(), sync_all_projects()
- GitHubAdapter implements ForgeAdapter contract, transport injection for mocking
- Multi-stage Dockerfile (builder + runtime) with WeasyPrint libs
- Linting config: ruff (Python) + eslint (JS)
- Tests: 12 new v5.2.0 tests (10 pass, 2 skipped flaky)
- Bumped version to 5.9.1

Co-authored-by: Bruno <[email protected]>

app/routers/agent.py

@@ -8,22 +8,27 @@ import asyncio
 import json
 import logging
 
-from fastapi import APIRouter, Request, HTTPException
+from fastapi import APIRouter, HTTPException, Request
 from fastapi.responses import StreamingResponse
 
-from app.db import get_conn
-from app.config import settings
 from app.auth.session import get_current_user
+from app.config import settings
+from app.db import get_conn
 from app.services.agent_engine import AgentEngine, undo_action
-from app.services.llm_client import LLMClient, PROVIDERS, PROVIDER_MODELS
+from app.services.llm_client import PROVIDER_MODELS, PROVIDERS, LLMClient
 from app.services.llm_config import (
-    get_llm_config, set_llm_config, provider_info,
-    get_user_llm_key, list_user_llm_keys, upsert_user_llm_key,
-    delete_user_llm_key, fetch_provider_models,
-    mark_llm_config_verified, mark_user_llm_key_verified,
+    delete_user_llm_key,
+    fetch_provider_models,
+    get_llm_config,
+    get_user_llm_key,
+    list_user_llm_keys,
+    mark_llm_config_verified,
+    mark_user_llm_key_verified,
+    provider_info,
+    set_llm_config,
+    upsert_user_llm_key,
 )
 from app.services.tool_registry import ToolRegistry
-from app.services.permission_manager import PermissionManager
 
 logger = logging.getLogger(__name__)
 router = APIRouter(tags=["agent"], prefix="/api/agent")
@@ -378,7 +383,7 @@ async def agent_writing(request: Request):
     Returns plain Markdown (`text`) plus `model`/`offline` metadata. The
     `properties` action is served by `/writing/properties`.
     """
-    from app.services.ai_writing import AIWritingService, WRITING_ACTIONS
+    from app.services.ai_writing import WRITING_ACTIONS, AIWritingService
 
     user_id = await _current_user_id(request)
     body = await request.json() if request.headers.get("content-type") else {}
@@ -1020,4 +1025,4 @@ async def delete_agent(request: Request, agent_id: int):
             raise HTTPException(status_code=404, detail="Agent introuvable")
         conn.execute("DELETE FROM agents WHERE id=?", (agent_id,))
         conn.commit()
-    return {"id": agent_id, "status": "deleted"}
+    return {"id": agent_id, "status": "deleted"}