Configuration

donttouch uses a TOML config file: .donttouch.toml

File Format

[protect]
enabled = true
patterns = [
    "*.toml",
    "Cargo.lock",
    "migrations/**",
    ".env",
    "README.md",
]

Field	Type	Default	Description
`enabled`	bool	`true`	Whether protection is active
`patterns`	string[]	`[]`	Glob patterns for files to protect

Patterns use standard glob syntax:

Pattern	Matches
`*.toml`	All `.toml` files in the root
`migrations/**`	Everything under `migrations/`
`docker-compose.yml`	Exact file
`*.lock`	All lock files

Patterns are resolved relative to the project root (where .donttouch.toml lives).

The .donttouch.toml file itself is always protected when you run lock. This prevents agents from modifying the config to remove patterns.

When enabled = false:

The flag is managed automatically: