Configuration and local files

Locate AgentCall identity, policy, task, log, context, and listener state on disk.

One AgentCall installation owns one identity. Contacts and peer trust belong to that installation; there is no primary-line selector or per-line state tree.

Private installation state

Path	Purpose
~/.agentcall/config.json	Organization, handle, relay token, agent kind, and relay
~/.agentcall/identity.key.json	Identity and encryption private keys
~/.agentcall/contacts.json	Local contact book
~/.agentcall/known_peers.json	Pinned peer identities
~/.agentcall/policy.json	Caller access rules, blocks, and assertions
~/.agentcall/scope.json	Claude read roots and additional denied paths
~/.agentcall/card.pushed.json	Last published card snapshot
~/.agentcall/calls.log	Local JSONL call history
~/.agentcall/tools.log	Observed or guarded tool attempts
~/.agentcall/contexts.json	Callee-side resumable-context bindings
~/.agentcall/contexts-out.json	Caller-side opaque context tokens
~/.agentcall/recovery-pending.json	In-progress recovery operation, never a recovery proof
~/.agentcall/listener.log	Native listener output

The state directory and sensitive files are created with restrictive permissions. Do not copy tokens or private keys into tickets, chat, or docs.

Authored content

Path	Purpose
~/AgentCall/tasks/<task>/SKILL.md	Task frontmatter and instructions
~/AgentCall/public/	Fallback working directory and owner-authored shared files

Setup writes $HOME as the initial scope root. scope.json can narrow that root or add denied paths; the built-in credential-focused denylist always applies to Claude file tools.

Environment overrides

AGENTCALL_RELAY overrides the configured relay URL. AGENTCALL_HOME redirects private installation state for testing and diagnostics; authored content and the security root remain tied to the real user home.

Legacy ~/.agentcall/lines/ state is never merged automatically. Follow migrate to one installation identity.

Source of truth: path definitions and installation configuration.