# Neovim: the "build" policy, for the language servers it runs and the
# package registries, with its configuration, plugins, cache and state,
# which it can change and which run outside the sandbox later, and
# GitHub's API, which plugin managers and Mason use.
# policies/commands/nvim.policy in blinker's config directory comes first.

# type  access  pattern
include build
file    write   ${XDG_CONFIG_HOME:-~/.config}/nvim
file    write   ${XDG_DATA_HOME:-~/.local/share}/nvim/
file    write   ${XDG_STATE_HOME:-~/.local/state}/nvim/
file    write   ${XDG_CACHE_HOME:-~/.cache}/nvim/

host    allow   api.github.com