Files and state on disk.

These guides describe CLI 0.9.0, which is not yet released. Check kaitoi --version before following them. In older releases, code acp and code serve can be interpreted as model prompts instead of commands. See installation and release status.

Code settings and saved work use different folders. Treat logs and evidence as private: they can contain prompts, source, tool results and file paths.

Content	Default location
Code settings	~/.config/kaitoi-code/; $XDG_CONFIG_HOME/kaitoi-code when set
Windows settings	%APPDATA%\Kaitoi Code\
User instructions	AGENTS.md inside the settings directory
User skills and agents	~/.kaitoi/skills/, ~/.kaitoi/agents/
Sessions and logs	~/.kaitoi/code/
Checkpoint snapshots	~/.kaitoi/code/snapshots/
Automatic approval audit	~/.kaitoi/code/audit/<session>.jsonl
External/background agent logs	~/.kaitoi/code/agents/<session>/<id>.jsonl
Isolated agent worktrees	~/.kaitoi/worktrees/<repository-hash>/<name>
Crew profile	~/.kaitoi/code/crew-profile.json
Crew run state and evidence	<repo>/.crew/, unless --state-dir overrides it
Local Code server discovery	~/.kaitoi/code/serve/<pid>.json; absent with --token-file

Stopped agents can retain uncommitted work in their worktree. Inspect it before cleanup. Crew's candidate branch and original checkout are separate locations; see mirroring and recovery.

#Project file rules

The trusted repository can contain .kaitoi-code.json with localFiles deny and skip rules. Denied paths cannot be accessed through Code's local file tools. Skipped directories are excluded from discovery and local reads too. Rules add to the default protections; they do not remove them. For example:

{"localFiles":{"skipDirs":["vendor-cache"],"denyGlobs":["private/**"]}}

Inspect the current policy before widening access.

Project hooks, commands and MCP servers have their own files and approvals. See the extension locations table.