clash_starlark 0.7.2

Starlark policy evaluator for Clash — compiles .star files to JSON policy
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

java_full = sandbox(
    name = "java_full",
    default = ask(),
    fs = {
        subpath("$PWD"): allow(FULL),
        "$HOME": {
            glob(".gradle/**"): allow(),
            glob(".m2/**"): allow(),
        },
        glob("$TMPDIR/**"): allow(),
    },
    net = allow(),
    doc = "Java/JVM full: gradle, maven builds. Full project + dependency cache access.",
)

java = {tool("Bash"): {("gradle", "gradlew", "mvn", "mvnw", "java", "javac"): allow(sandbox = java_full)}}