clash_starlark 0.7.2

Starlark policy evaluator for Clash — compiles .star files to JSON policy
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

rust_safe = sandbox(
    name = "rust_safe",
    default = ask(),
    fs = {
        subpath("$PWD", follow_worktrees=True): allow("rx"),
        subpath("$PWD/target"): allow(),
        "$HOME": {
            glob(".cargo/**"): allow("rx"),
            glob(".rustup/**"): allow("rx"),
        },
        glob("$TMPDIR/**"): allow(),
    },
    net = deny(),
    doc = "Rust safe: check, clippy, test, doc, bench. Build artifacts writable, source read-only.",
)

rust_full = sandbox(
    name = "rust_full",
    default = ask(),
    fs = {
        subpath("$PWD", follow_worktrees=True): allow(FULL),
        "$HOME": {
            glob(".cargo/**"): allow(),
            glob(".rustup/**"): allow(),
        },
        glob("$TMPDIR/**"): allow(),
    },
    net = allow(),
    doc = "Rust full: add, install, update. Full project + toolchain access, network enabled.",
)

rust = {tool("Bash"): {("cargo", "rustc", "rustup"): allow(sandbox = rust_full)}}