diff --git a/bunfig.toml b/bunfig.toml
new file mode 100644
index 0000000..404c27d
--- /dev/null
+++ b/bunfig.toml
@@ -0,0 +1,6 @@
+[install]
+# 24h supply-chain guard: skip package versions published less than a day ago.
+minimumReleaseAge = 86400
+# Each entry bypasses the 24h guard for one package — confirm with the user
+# before adding any.
+minimumReleaseAgeExcludes = ["@lovable.dev/vite-tanstack-config", "@lovable.dev/mcp-js", "@lovable.dev/vite-plugin-dev-server-bridge", "@lovable.dev/vite-plugin-hmr-gate"]