clash_starlark 0.7.2

Starlark policy evaluator for Clash — compiles .star files to JSON policy
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

python_full = sandbox(
    name = "python_full",
    default = ask(),
    fs = {
        subpath("$PWD"): allow(FULL),
        "$HOME": {
            glob(".local/**"): allow(),
            glob(".cache/pip/**"): allow(),
            glob(".virtualenvs/**"): allow(),
            glob(".pyenv/**"): allow("rx"),
        },
        glob("$TMPDIR/**"): allow(),
    },
    net = allow(),
    doc = "Python full: pip install, run scripts, virtualenvs. Full project + package access.",
)

python = {tool("Bash"): {("python", "python3", "pip", "pip3", "uv", "poetry"): allow(sandbox = python_full)}}