clash_starlark 0.6.2

Starlark policy evaluator for Clash — compiles .star files to JSON policy
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

load("@clash//std.star", "allow", "deny", "match", "sandbox", "domains")

node_sandbox = sandbox(
    name = "node_dev",
    default = deny(),
    fs = {
        "$PWD": allow("rwcx"),
        "$HOME": {
            ".npm": allow(),
            ".config/npm": allow("r"),
        },
        "$TMPDIR": allow(),
    },
    net = [
        domains({
            "registry.npmjs.org": allow(),
            "*.npmjs.org": allow(),
            "github.com": allow(),
        }),
    ],
    doc = "Node.js development: project + npm cache, npm registry network",
)

node = match({"Bash": {("node", "bun", "deno"): allow(sandbox = node_sandbox)}})