clash_starlark 0.6.2

Starlark policy evaluator for Clash — compiles .star files to JSON policy
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

load("@clash//std.star", "allow", "deny", "match", "sandbox", "domains", "regex")

python_sandbox = sandbox(
    name = "python_dev",
    default = deny(),
    fs = {
        "$PWD": allow("rwcx"),
        "$HOME": {
            ".local": allow("rwc"),
            ".cache/pip": allow(),
        },
        "$TMPDIR": allow(),
    },
    net = [
        domains({
            "pypi.org": allow(),
            "files.pythonhosted.org": allow(),
            "github.com": allow(),
        }),
    ],
    doc = "Python development: project + pip cache, PyPI/GitHub network",
)

python = match({"Bash": {regex("python3?"): allow(sandbox = python_sandbox)}})