clash_starlark 0.6.2

Starlark policy evaluator for Clash — compiles .star files to JSON policy
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19

load("@clash//std.star", "allow", "deny", "match", "sandbox", "subpath")

rust_sandbox = sandbox(
    name = "rust_dev",
    default = deny(),
    fs = {
        subpath("$PWD", follow_worktrees = True): allow(),
        "$HOME": {
            ".cargo": allow(),
            ".rustup": allow(),
        },
        "$TMPDIR": allow(),
    },
    net = "allow",
    doc = "Rust development: project + cargo/rustup toolchains, full network",
)


rust = match({"Bash": {("rustc", "cargo"): allow(sandbox = rust_sandbox)}})