pub enum HermeticScope {
Full,
Project,
}Expand description
How far a hermetic seal reaches when sealing the ambient ~/.claude
promptspace (CLAUDE.md, agents, skills, MCP servers).
Chooses the value passed to --setting-sources; the seal itself is
applied by hermetic / hermetic_scoped on
QueryCommand and
DuplexOptions, which also set
--strict-mcp-config and
--exclude-dynamic-system-prompt-sections.
A hermetic seal never touches authentication. It is distinct from
--bare, which forces API-key billing by reading auth strictly from
ANTHROPIC_API_KEY / apiKeyHelper; a seal leaves OAuth and
keychain auth working as normal.
Variants§
Full
Drop every ambient setting source: user, project, and local
(--setting-sources ""). Only the CLI’s built-in agents and
defaults remain; a user-level ~/.claude no longer leaks in.
Project
Seal only the project and local ambient config while keeping the
user’s global ~/.claude (--setting-sources user). A project
CLAUDE.md and project-level agents stop being adopted.
Trait Implementations§
Source§impl Clone for HermeticScope
impl Clone for HermeticScope
Source§fn clone(&self) -> HermeticScope
fn clone(&self) -> HermeticScope
1.0.0 (const: unstable) · Source§fn clone_from(&mut self, source: &Self)
fn clone_from(&mut self, source: &Self)
source. Read more