# Files and state on disk

> Find Code settings, session logs, audit records, agent worktrees and Crew evidence, and configure project file exclusions.

Source: https://kaitoi.io/docs/cli/files-on-disk/
Section: Kaitoi CLI / Getting started
Written for: Code and Crew users inspecting saved state or configuring a repository.
Last reviewed: 2026-10-26

---

> These guides describe CLI 0.9.0, which is not yet released. Check `kaitoi --version` before following them. In older releases, `code acp` and `code serve` can be interpreted as model prompts instead of commands. See [installation and release status](/docs/cli/install/).


Code settings and saved work use different folders. Treat logs and evidence as
private: they can contain prompts, source, tool results and file paths.

| Content | Default location |
| --- | --- |
| Code settings | `~/.config/kaitoi-code/`; `$XDG_CONFIG_HOME/kaitoi-code` when set |
| Windows settings | `%APPDATA%\Kaitoi Code\` |
| User instructions | `AGENTS.md` inside the settings directory |
| User skills and agents | `~/.kaitoi/skills/`, `~/.kaitoi/agents/` |
| Sessions and logs | `~/.kaitoi/code/` |
| Checkpoint snapshots | `~/.kaitoi/code/snapshots/` |
| Automatic approval audit | `~/.kaitoi/code/audit/<session>.jsonl` |
| External/background agent logs | `~/.kaitoi/code/agents/<session>/<id>.jsonl` |
| Isolated agent worktrees | `~/.kaitoi/worktrees/<repository-hash>/<name>` |
| Crew profile | `~/.kaitoi/code/crew-profile.json` |
| Crew run state and evidence | `<repo>/.crew/`, unless `--state-dir` overrides it |
| Local Code server discovery | `~/.kaitoi/code/serve/<pid>.json`; absent with `--token-file` |

Stopped agents can retain uncommitted work in their worktree. Inspect it before
cleanup. Crew's candidate branch and original checkout are separate locations;
see [mirroring and recovery](/docs/cli/crew-results/).

## Project file rules

The trusted repository can contain `.kaitoi-code.json` with `localFiles` deny
and skip rules. Denied paths cannot be accessed through Code's local file
tools. Skipped directories are excluded from discovery and local reads too.
Rules add to the default protections; they do not remove them. For example:

```json
{"localFiles":{"skipDirs":["vendor-cache"],"denyGlobs":["private/**"]}}
```

Inspect the current policy before widening access.

Project hooks, commands and MCP servers have their own files and approvals.
See the [extension locations table](/docs/cli/mcp-skills-and-commands/#extension-locations-and-approval).