Skip to content
Commandr

Protected files

Secrets are protected automatically. Add any other files or folders you want agents to leave alone.

Secrets are always protected

Agents can’t read or change environment files, wherever they are in the project: .env, backend/.env, .env.local, .env.production and so on. Templates meant to be shared, like .env.example and .env.sample, aren’t protected.

Checkpoints never store them, and Commandr’s automatic commits never stage them.

Protect your own paths

  1. Open Project settings → Folder.
  2. Under Files agents can’t change, add one path per line, relative to the project folder. End a folder with / — migrations/, for example.
  3. Click Save.

Agents can still read these paths, but not write them, and checkpoints leave them out. If an agent needs one changed, it tells you what it should contain instead.

Outside the project

Agents can only touch paths inside the project folder. A link that points outside it, or at a protected file under another name, is refused too.