- Set jinja2 autoescape to select_autoescape(default_for_string=False) in all
template engines to prevent HTML escaping of YAML config values while still
configuring explicit autoescape behavior
- Replace silent try/except/pass with logging.debug in langgraph bridge
- Add logging before try/except/continue in langgraph nodes
- Replace assert with proper if/raise ValueError in reactive config parser
- Add # nosec annotations on intentional eval()/exec()/subprocess uses
with justifications (sandboxed code execution for tool agent)
- Add # nosemgrep annotations for intentional eval()/exec() in sandboxed tools
- Create vulture whitelist for TYPE_CHECKING imports used in string annotations
- Fix unused lambda variables with _ prefix
- Fix bare excepts (replace with except Exception:)
- Remove wildcard star imports from test step files
- Add explicit imports for ConfigurationError, AgentCreationError
- Add 'from err' to raise statements in except blocks
- Fix loop variable binding with default arguments (B023)
- Organize imports, fix trailing whitespace and blank line whitespace
- Bump Python to 3.13 and update tool configurations
CleverThis Engineering