Code Metrics¶

Generated: 2026-07-21 22:57 UTC

Lines of Code¶

	Files	Code	Comment	Blank	Total
Source	109	14 479	3 696	1 376	19 551
Tests	52	14 242	1 354	1 174	16 770
Combined	161	28 721	5 050	2 550	36 321

Comment/code ratio: 26%
Test/source ratio: 98.4%

Source by module (click to expand)

Module	Files	Code	Comment	Blank
`terok_executor/`	109	14 479	3 696	1 376
`terok_executor/_util/`	2	47	12	6
`terok_executor/_util/__init__.py`	—	4	9	3
`terok_executor/_util/_timezone.py`	—	43	3	3
`terok_executor/acp/`	8	1 287	463	81
`terok_executor/acp/__init__.py`	—	54	28	8
`terok_executor/acp/cache.py`	—	58	22	1
`terok_executor/acp/daemon.py`	—	163	79	20
`terok_executor/acp/endpoint.py`	—	20	12	3
`terok_executor/acp/model_options.py`	—	152	49	5
`terok_executor/acp/probe.py`	—	136	30	5
`terok_executor/acp/proxy.py`	—	489	197	24
`terok_executor/acp/roster.py`	—	215	46	15
`terok_executor/container/`	6	2 801	572	175
`terok_executor/container/build.py`	—	925	280	75
`terok_executor/container/cache.py`	—	102	17	8
`terok_executor/container/env.py`	—	649	56	26
`terok_executor/container/inject.py`	—	12	20	9
`terok_executor/container/runner.py`	—	1 113	191	56
`terok_executor/credentials/`	6	1 984	410	170
`terok_executor/credentials/auth.py`	—	948	131	41
`terok_executor/credentials/extractors.py`	—	175	42	19
`terok_executor/credentials/vault_commands.py`	—	159	73	35
`terok_executor/credentials/vault_config.py`	—	521	111	42
`terok_executor/credentials/vendor_files.py`	—	181	44	32
`terok_executor/integrations/`	2	56	92	4
`terok_executor/integrations/__init__.py`	—	1	14	2
`terok_executor/integrations/sandbox.py`	—	55	78	2
`terok_executor/provider/`	5	846	231	112
`terok_executor/provider/agents.py`	—	173	66	42
`terok_executor/provider/instructions.py`	—	103	33	12
`terok_executor/provider/providers.py`	—	407	90	35
`terok_executor/provider/wrappers.py`	—	163	31	22
`terok_executor/resources/`	63	3 556	1 029	450
`terok_executor/resources/agents/`	13	493	174	102
`terok_executor/resources/instructions/`	2	42	3	19
`terok_executor/resources/providers/`	10	141	71	50
`terok_executor/resources/scripts/`	31	2 547	758	265
`terok_executor/resources/scripts/mistral-model-sync.py`	—	269	21	2
`terok_executor/resources/scripts/terok-agents.py`	—	368	15	9
`terok_executor/resources/scripts/terok-trust-workspace.py`	—	77	20	15
`terok_executor/resources/templates/`	2	279	12	5
`terok_executor/resources/tmux/`	1	0	3	1
`terok_executor/resources/toad-agents/`	3	54	5	7
`terok_executor/roster/`	4	1 392	328	154
`terok_executor/roster/__init__.py`	—	29	14	10
`terok_executor/roster/loader.py`	—	636	168	62
`terok_executor/roster/schema.py`	—	445	92	58
`terok_executor/roster/types.py`	—	282	54	24
`terok_executor/__init__.py`	—	164	82	19
`terok_executor/_tree.py`	—	114	2	7
`terok_executor/cli.py`	—	101	19	6
`terok_executor/commands.py`	—	942	155	43
`terok_executor/config.py`	—	16	12	3
`terok_executor/config_schema.py`	—	110	31	9
`terok_executor/doctor.py`	—	198	76	51
`terok_executor/krun.py`	—	281	71	17
`terok_executor/paths.py`	—	47	18	9
`terok_executor/preflight.py`	—	379	59	48
`terok_executor/sandbox.py`	—	29	20	4
`terok_executor/storage.py`	—	96	8	6
`terok_executor/vault_addr.py`	—	33	6	2

Architecture¶

Module Dependency Graph¶

graph TD
    terok_executor.vault_addr --> terok_executor.integrations.sandbox
    terok_executor.config_schema --> terok_executor.config
    terok_executor.config_schema --> terok_executor.integrations.sandbox
    terok_executor.roster.schema --> terok_executor.credentials.auth
    terok_executor.roster.schema --> terok_executor.provider.providers
    terok_executor.roster.schema --> terok_executor.roster.types
    terok_executor.roster.loader --> terok_executor.credentials.auth
    terok_executor.roster.loader --> terok_executor.integrations.sandbox
    terok_executor.roster.loader --> terok_executor.provider.providers
    terok_executor.roster.loader --> terok_executor.roster.schema
    terok_executor.roster.loader --> terok_executor.roster.types
    terok_executor.roster.loader --> terok_executor.doctor
    terok_executor.provider.wrappers --> terok_executor.provider.providers
    terok_executor.provider.instructions --> terok_executor.provider.providers
    terok_executor.provider.agents --> terok_executor.provider.providers
    terok_executor.provider.agents --> terok_executor.provider.wrappers
    terok_executor.container.build --> terok_executor.roster
    terok_executor.container.cache --> terok_executor.integrations.sandbox
    terok_executor.container.env --> terok_executor._util
    terok_executor.container.env --> terok_executor.credentials.extractors
    terok_executor.container.env --> terok_executor.credentials.vault_commands
    terok_executor.container.env --> terok_executor.credentials.vault_config
    terok_executor.container.env --> terok_executor.integrations.sandbox
    terok_executor.container.env --> terok_executor.paths
    terok_executor.container.env --> terok_executor.vault_addr
    terok_executor.container.runner --> terok_executor._util
    terok_executor.container.runner --> terok_executor.container.build
    terok_executor.container.runner --> terok_executor.container.cache
    terok_executor.container.runner --> terok_executor.container.env
    terok_executor.container.runner --> terok_executor.integrations.sandbox
    terok_executor.container.runner --> terok_executor.paths
    terok_executor.container.runner --> terok_executor.provider.agents
    terok_executor.container.runner --> terok_executor.provider.instructions
    terok_executor.container.runner --> terok_executor.roster
    terok_executor.credentials.extractors --> terok_executor.credentials.vendor_files
    terok_executor.credentials.auth --> terok_executor.credentials.extractors
    terok_executor.credentials.auth --> terok_executor.integrations.sandbox
    terok_executor.credentials.auth --> terok_executor.paths
    terok_executor.credentials.vault_config --> terok_executor.integrations.sandbox
    terok_executor.credentials.vault_config --> terok_executor.paths
    terok_executor.credentials.vault_config --> terok_executor.vault_addr
    terok_executor.credentials.vault_config --> terok_executor.roster
    terok_executor.credentials.vault_commands --> terok_executor.credentials.vendor_files
    terok_executor.credentials.vault_commands --> terok_executor.integrations.sandbox
    terok_executor.credentials.vault_commands --> terok_executor.paths
    terok_executor.credentials.vault_commands --> terok_executor.roster
    terok_executor.sandbox --> terok_executor.integrations.sandbox
    terok_executor.sandbox --> terok_executor.roster
    terok_executor.acp --> terok_executor.container.build
    terok_executor.acp --> terok_executor.integrations.sandbox
    terok_executor.preflight --> terok_executor.container.build
    terok_executor.preflight --> terok_executor.credentials.auth
    terok_executor.preflight --> terok_executor.credentials.vault_config
    terok_executor.preflight --> terok_executor.integrations.sandbox
    terok_executor.preflight --> terok_executor.paths
    terok_executor.preflight --> terok_executor.sandbox
    terok_executor.preflight --> terok_executor.roster
    terok_executor.commands --> terok_executor.acp
    terok_executor.commands --> terok_executor.config_schema
    terok_executor.commands --> terok_executor.container.build
    terok_executor.commands --> terok_executor.container.runner
    terok_executor.commands --> terok_executor.credentials.auth
    terok_executor.commands --> terok_executor.credentials.vault_config
    terok_executor.commands --> terok_executor.integrations.sandbox
    terok_executor.commands --> terok_executor.paths
    terok_executor.commands --> terok_executor.preflight
    terok_executor.commands --> terok_executor.roster.loader
    terok_executor.commands --> terok_executor.sandbox
    terok_executor.commands --> terok_executor.roster
    terok_executor.cli --> terok_executor
    terok_executor.cli --> terok_executor._tree
    terok_executor.cli --> terok_executor.integrations.sandbox
    terok_executor.doctor --> terok_executor.integrations.sandbox
    terok_executor.doctor --> terok_executor.vault_addr
    terok_executor --> terok_executor.credentials.auth
    terok_executor --> terok_executor.integrations.sandbox
    terok_executor --> terok_executor.paths
    terok_executor --> terok_executor.provider.providers
    terok_executor --> terok_executor.roster
    terok_executor.integrations.sandbox
    terok_executor.paths
    terok_executor._util
    terok_executor.resources
    terok_executor.config
    terok_executor.roster.types
    terok_executor.roster
    terok_executor.provider.providers
    terok_executor.credentials.vendor_files
    terok_executor._tree

Module Boundaries¶

32 modules, 79 dependency edges — all boundaries validated.

Module Summary¶

32 modules (click to expand)

Module	Deps	Description
`terok_executor.integrations.sandbox`	0	contract enforces that no other module reaches past it.
`terok_executor.paths`	0	Path resolution — standalone XDG/FHS helpers
`terok_executor._util`	0	Vendored utilities — standalone, no internal deps
`terok_executor.resources`	0	Bundled resources — data files
`terok_executor.vault_addr`	1	config patcher, and doctor. Depends on terok_sandbox symbols via the integrations adapter.
`terok_executor.config`	0	module hosts only the path helper they call.
`terok_executor.config_schema`	2	which is why it imports the sandbox YAML writer + the path helper.
`terok_executor.roster.types`	0	Runtime dataclasses — pure data, zero deps
`terok_executor.roster.schema`	3	Pydantic schema — strict YAML validation, projects onto runtime dataclasses
`terok_executor.roster.loader`	6	YAML agent roster — loads bundled + user agent definitions, drives the schema
`terok_executor.roster`	0	Roster package waypoint (re-exports from loader)
`terok_executor.provider.providers`	0	behaviour live together.
`terok_executor.provider.wrappers`	1	Shell wrapper generation
`terok_executor.provider.instructions`	1	Instruction resolution
`terok_executor.provider.agents`	2	Agent config dir preparation + wrapper generation
`terok_executor.container.build`	1	Build resource staging — standalone
`terok_executor.container.cache`	1	Clone-cache workspace seeding — copies cached clone into task workspace
`terok_executor.container.env`	7	Container environment assembly — single source of truth for env + volumes
`terok_executor.container.runner`	9	executor-local writer module exists anymore.
`terok_executor.credentials.vendor_files`	0	Lax (extra="ignore"); zero internal deps.
`terok_executor.credentials.extractors`	1	Credential extractors — per-provider credential file parsers
`terok_executor.credentials.auth`	3	Auth flows
`terok_executor.credentials.vault_config`	4	Post-auth shared config patching (vault URL writes)
`terok_executor.credentials.vault_commands`	4	Credential proxy CLI commands — wraps sandbox lifecycle + route generation
`terok_executor.sandbox`	2	delegation to the sandbox aggregator and doesn't live here.
`terok_executor.acp`	2	pull the runner along by accident.
`terok_executor.preflight`	7	Pre-launch checks + interactive fixers for `terok-executor run`
`terok_executor.commands`	12	Command registry — defines all CLI commands
`terok_executor._tree`	0	dep graph and nothing else may import it.
`terok_executor.cli`	3	CLI entry point — wires command registry to argparse
`terok_executor.doctor`	2	Agent-level container health checks
`terok_executor`	5	Package root — public API re-exports + roster bootstrap

Test Coverage¶

Overall line coverage: 88.7% (4185/4719 statements).

Each rectangle is a source file. Area is proportional to the number of statements; colour encodes the coverage percentage (green = fully covered, red = uncovered). Files are grouped by the first 3 directory levels.

Cognitive Complexity¶

Threshold: 15 (functions above this are listed below)

Functions analyzed: 438
Median complexity: 1.0 · Average: 3.6 · Max: 65
Within threshold (15): 96% (420/438)

    0–  3 │ ██████████████████████████████ 303 (69.2%)
    4–  6 │ ███████                         68 (15.5%)
    7–  9 │ ███                             31 ( 7.1%)
   10– 12 │ █                                8 ( 1.8%)
   13– 15 │ █                               10 ( 2.3%) ◄ threshold
   16– 18 │                                  5 ( 1.1%)
   19– 21 │                                  2 ( 0.5%)
   22– 25 │                                  3 ( 0.7%)
   26+    │ █                                8 ( 1.8%)

18 functions exceeding threshold:

Complexity	Function	File
65	`load_roster`	`src/terok_executor/roster/loader.py`
49	`AgentRunner::_run`	`src/terok_executor/container/runner.py`
45	`_inject_vault_tokens`	`src/terok_executor/container/env.py`
39	`_remove_toml_records`	`src/terok_executor/credentials/vault_config.py`
35	`_write_session_hook`	`src/terok_executor/provider/agents.py`
34	`apply_shared_config_patches`	`src/terok_executor/credentials/vault_config.py`
29	`_make_phantom_token_checks`	`src/terok_executor/doctor.py`
28	`read_config_models`	`src/terok_executor/resources/scripts/mistral-model-sync.py`
24	`_capture_credentials`	`src/terok_executor/credentials/auth.py`
23	`AgentRoster::resolve_selection`	`src/terok_executor/roster/loader.py`
22	`_make_credential_file_checks`	`src/terok_executor/doctor.py`
19	`_handle_run`	`src/terok_executor/commands.py`
19	`_apply_post_capture_state`	`src/terok_executor/credentials/auth.py`
18	`main`	`src/terok_executor/resources/scripts/mistral-model-sync.py`
17	`authenticate`	`src/terok_executor/credentials/auth.py`
17	`_inject_opencode_instructions`	`src/terok_executor/provider/agents.py`
16	`_handle_agents_list`	`src/terok_executor/commands.py`
16	`scan_leaked_credentials`	`src/terok_executor/credentials/vault_commands.py`

Dead Code Analysis¶

No dead code found at 80% confidence threshold.

Docstring Coverage¶

Needed: 8; Found: 7; Missing: 1; Coverage: 87.5%
Needed: 39; Found: 38; Missing: 1; Coverage: 97.4%
Needed: 12; Found: 10; Missing: 2; Coverage: 83.3%
Needed: 23; Found: 22; Missing: 1; Coverage: 95.7%
Needed: 55; Found: 54; Missing: 1; Coverage: 98.2%
Needed: 29; Found: 28; Missing: 1; Coverage: 96.6%
Needed: 38; Found: 34; Missing: 4; Coverage: 89.5%
Needed: 587 - Found: 576 - Missing: 11
Total coverage: 98.1% - Grade: Excellent

Generated by scc, complexipy, vulture, tach, and docstr-coverage.