clash 0.7.1

Command Line Agent Safety Harness — permission policies for coding agents
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35

load("@clash//builtin.star", "builtins")
load("@clash//sandboxes.star", "readonly", "workspace", "git_safe", "git_full")
load("@clash//claude_compat.star", "from_claude_settings")





policy("default", merge(
    from_claude_settings(),




    {
        mode("plan"): {
            glob("**"): allow(sandbox=readonly),
            tool("Bash"): {
                "git": {
                    glob("**"): allow(sandbox=git_safe),
                },
            },
        },
        (mode("edit"), mode("default")): {
            tool("Bash"): {
                "git": {
                    glob("**"): allow(sandbox=git_full),
                },
            },
        },
        mode("unrestricted"): {
            glob("**"): allow(sandbox=workspace),
        },
    },
), doc="Default clash policy: mode-aware sandboxes for plan/edit/unrestricted modes.")