name: bun
description: Profile for bun, extending npm-restrictive with bun environment variables
inherits: npm-restrictive

package_managers:
  - bun

environment:
  # Bun authenticates via BUN_AUTH_TOKEN and also reads .npmrc with env
  # interpolation and npm_config_* conventions. Sibling tokens
  # (YARN_NPM_AUTH_*) stay scrubbed.
  allow:
    - BUN_AUTH_TOKEN
    - NPM_TOKEN
    - NPM_AUTH_TOKEN
    - NODE_AUTH_TOKEN
    - npm_config_*
    - NPM_CONFIG_*
    - NODE_EXTRA_CA_CERTS