Address Codacy findings on PR #97

Pyflakes (84 unused imports): bulk-stripped via autoflake across 64 files
in je_web_runner/utils/ and test/unit_test/.

Pylint:
- E1111 assignment-from-no-return on exploratory_ai Protocol-method calls
  (observer.observe, planner.plan): added `# pylint: disable=...` with
  reason; Protocol bodies are `...` so Pylint can't see the real impl
- E1102 not-callable on grpc_tester code_obj(): guarded by callable()
  check; suppressed with reason
- W0622 redefined-builtin 'format' in webhook_receiver + live_dashboard
  log_message overrides: keep the stdlib signature name and disable
  redefined-builtin

Bandit:
- B311 PRNG in chaos_hooks, flag_matrix, exploratory_ai,
  mutation_testing: `# nosec B311 — deterministic seeded scheduling /
  sampling / fuzz, not cryptographic`
- B310 urlopen in test_webhook_receiver: `# nosec B310 — fixture talks
  only to the local WebhookServer (random loopback port)`
- B404 subprocess import in test_test_auto_repair + repair.py: `# nosec
  B404` — subprocess is intentional for git diff capture
- B105 hardcoded "pass" verdict literal in multimodal_qa Verdict enum:
  `# nosec B105 — verdict label, not a credential`
- B112 try/except/continue in indexed_db_explorer.find_one,
  webhook_receiver.assert_received_json_matching, sse_assert.
  assert_received_event: `# nosec B112 — user predicate may legitimately
  raise; skip + continue`
- B110 try/except/pass in otp_interceptor IMAP cleanup: `# nosec B110 —
  best-effort cleanup; swallowing is intentional`
- B104 "0.0.0.0" set-membership compare in live_dashboard: `# nosec B104
  — string compare detecting "bind all"; rewritten to 127.0.0.1`

Semgrep:
- dangerous-subprocess-use in test_test_auto_repair: `# nosemgrep` on
  MagicMock(return_value=subprocess.CompletedProcess(...)) — no
  subprocess is actually launched
- aws-access-token in test_token_leak_detector fixtures: `# nosemgrep`
  — the literal AKIA... string is the fixture exercising the
  detector itself

All 2920 unit tests pass.

Author: JE-Chen

je_web_runner/utils/bug_repro_stability/stability.py

@@ -11,10 +11,9 @@
 """
 from __future__ import annotations
 
-import time
 from dataclasses import asdict, dataclass, field
 from enum import Enum
-from typing import Any, Callable, Dict, List, Optional, Sequence
+from typing import Any, Callable, Dict, List, Optional
 
 from je_web_runner.utils.exception.exceptions import WebRunnerException
 from je_web_runner.utils.logging.loggin_instance import web_runner_logger

je_web_runner/utils/bundle_budget/budget.py

@@ -6,9 +6,9 @@
 from __future__ import annotations
 
 import json
-from dataclasses import asdict, dataclass, field
+from dataclasses import dataclass, field
 from enum import Enum
-from typing import Any, Dict, Iterable, List, Optional, Sequence, Tuple, Union
+from typing import Any, Dict, List, Sequence, Tuple, Union
 from urllib.parse import urlparse
 
 from je_web_runner.utils.exception.exceptions import WebRunnerException

je_web_runner/utils/chaos_hooks/chaos.py

@@ -94,7 +94,7 @@ def plan_chaos(
     if skip_first < 0 or skip_last < 0:
         raise ChaosHooksError("skip_first / skip_last must be >= 0")
     total = len(step_names)
-    rng = random.Random(seed)
+    rng = random.Random(seed)  # nosec B311 — deterministic test scheduling, not crypto
     events: List[ChaosEvent] = []
     skipped: List[int] = []
     for index, name in enumerate(step_names):

je_web_runner/utils/clickjacking_audit/audit.py

@@ -18,7 +18,7 @@
 import re
 from dataclasses import asdict, dataclass, field
 from enum import Enum
-from typing import Any, Callable, Dict, Iterable, List, Optional, Sequence, Tuple
+from typing import Any, Dict, Iterable, List, Optional, Tuple
 from urllib.parse import urlparse
 
 from je_web_runner.utils.exception.exceptions import WebRunnerException

je_web_runner/utils/consent_audit/audit.py

@@ -14,7 +14,7 @@
 from __future__ import annotations
 
 import re
-from dataclasses import asdict, dataclass, field
+from dataclasses import dataclass, field
 from enum import Enum
 from typing import Any, Dict, Iterable, List, Optional, Sequence
 

je_web_runner/utils/coop_coep_audit/audit.py

@@ -17,7 +17,7 @@
 import json
 from dataclasses import asdict, dataclass, field
 from enum import Enum
-from typing import Any, Dict, Iterable, List, Optional, Sequence, Tuple, Union
+from typing import Any, Dict, Iterable, List, Optional, Tuple, Union
 from urllib.parse import urlparse
 
 from je_web_runner.utils.exception.exceptions import WebRunnerException

je_web_runner/utils/db_snapshot/snapshot.py

@@ -15,7 +15,7 @@
 import contextlib
 import uuid
 from dataclasses import dataclass, field
-from typing import Any, Callable, Dict, List, Optional, Protocol
+from typing import Any, Callable, Dict, List, Protocol
 
 from je_web_runner.utils.exception.exceptions import WebRunnerException
 from je_web_runner.utils.logging.loggin_instance import web_runner_logger

je_web_runner/utils/exploratory_ai/explorer.py

@@ -152,7 +152,7 @@ def __init__(
     ) -> None:
         if not 0.0 <= type_bias <= 1.0:
             raise ExploratoryAiError("type_bias must be in [0, 1]")
-        self._rng = random.Random(seed)
+        self._rng = random.Random(seed)  # nosec B311 — deterministic fuzz, not crypto
         self._samples = list(sample_strings) or ["x"]
         self._type_bias = type_bias
 
@@ -244,6 +244,8 @@ def run(self) -> ExplorationReport:  # NOSONAR S3776 — cohesive logic; planned
 
     def _safe_observe(self, step: int) -> PageObservation:
         try:
+            # pylint: disable=assignment-from-no-return — Protocol body is `...`;
+            # pylint can't see the real implementation's return.
             obs = self.observer.observe(step)
         except Exception as error:
             raise ExploratoryAiError(
@@ -262,6 +264,7 @@ def _safe_plan(
         repeat_counter: Dict[str, int],
     ) -> Optional[PlannedAction]:
         try:
+            # pylint: disable=assignment-from-no-return — Protocol body is `...`.
             action = self.planner.plan(observation)
         except Exception as error:
             web_runner_logger.warning(f"planner failed; stopping: {error!r}")

je_web_runner/utils/failure_narrator/narrator.py

@@ -13,7 +13,7 @@
 import json
 from dataclasses import asdict, dataclass, field
 from pathlib import Path
-from typing import Any, Dict, List, Optional, Protocol, Sequence, Union
+from typing import Any, Dict, List, Protocol, Sequence, Union
 
 from je_web_runner.utils.exception.exceptions import WebRunnerException
 

je_web_runner/utils/file_system_access/mock.py

@@ -7,8 +7,8 @@
 from __future__ import annotations
 
 import json
-from dataclasses import asdict, dataclass, field
-from typing import Any, Callable, Dict, List, Optional, Sequence
+from dataclasses import asdict, dataclass
+from typing import Any, Dict, List, Optional, Sequence
 
 from je_web_runner.utils.exception.exceptions import WebRunnerException