empathic

These capabilities enable the management, validation, and auditing of Clash policy files. Users can generate allow or deny rules, perform dry-run validations of policy changes, and parse audit logs to verify permission decisions within Claude Code environments.

Security engineers and developers managing Claude Code environments benefit from these capabilities. They are designed for technical users who need to enforce strict access controls, maintain policy consistency across environments, and troubleshoot permission denials through structured configuration management.

Implementation requires an existing Claude Code environment and the presence of a policy configuration file located at ~/.clash/policy.yaml. Users must have read and write access to this directory to utilize the editing, migration, and validation functions provided.