npm · bun-uia
BUN_UIA_PROFILE — Capability profile: 'readonly' (inspect/read only), 'safe' (read + input + window — default), or 'full' (also os + fs tools).
BUN_UIA_OS — Set to '1' to allow OS-level tools (launch_app, run_program, open_path) AND filesystem tools (read_file, write_file, list_dir) regardless of profile.
BUN_UIA_ALLOW — Comma-separated tool names or categories to additionally allow on top of the profile.
BUN_UIA_DENY — Comma-separated tool names or categories to deny, overriding the profile and BUN_UIA_ALLOW.
BUN_UIA_CURSOR — Set to 'never' to forbid the real-cursor fallback entirely (strictly cursor-free). By default clicks/drags are cursor-free but fall back to the real hardware cursor when no cursor-free path exists.
BUN_UIA_FS_ROOT — Sandbox root directory that read_file/write_file/list_dir are confined to when fs tools are enabled.