# pnpm 11 records build-script approval here. esbuild's postinstall materialises
# its CLI shim; the platform binary itself ships as an optional dependency.
# core-js-bundle ships a prebuilt minified.js (we only read that file at build time,
# via vite.config emitPolyfills) and its install script is just a funding banner, so
# it is denied — nothing to build.
allowBuilds:
  core-js-bundle: false
  esbuild: true
  # sharp (via @capacitor/assets) rasterises the launcher icon/splash for the
  # `android:assets` script. It installs a prebuilt binary via prebuild-install —
  # no native toolchain needed — so allow its install script to materialise it.
  sharp: true