feat: add input to configure npm registry for air-gapped / enterprise environments

[joan-mtez83]

Problem

In enterprise or air-gapped environments where outbound internet access is blocked,
the Install Dependencies step hangs indefinitely because bun install cannot reach
registry.npmjs.org to download native binary packages (e.g. @img/sharp-linux-x64, esbuild).

The symptom is:
bun install v1.3.6
Clean lockfile: 192 packages - 192 packages in 321.6us
[PackageManager] waiting for 163 tasks
[PackageManager] waiting for 163 tasks
... (repeats until job timeout)

There is currently no action input to redirect bun install to an internal npm mirror
(Artifactory, Nexus, etc.).

Current workaround

Users can add a pre-step to write ~/.npmrc before the action runs, since bun reads it automatically:

• name: Configure npm registry
  run: |
  echo "registry=https://your-internal-artifactory/api/npm/npm-virtual/" >> ~/.npmrc
  echo "//your-internal-artifactory/api/npm/npm-virtual/:_authToken=${{ secrets.TOKEN }}" >> ~/.npmrc

This works but requires knowing the internal implementation detail that the action uses bun and that bun reads ~/.npmrc.

Proposed solution

Add an action input (e.g. npmrc_config) that accepts a multiline string of .npmrc
content and writes it to ~/.npmrc before the Install Dependencies step:

action.yml

inputs:
npmrc_config:
description: "Content to write to ~/.npmrc before installing dependencies.
Useful for configuring private npm registries in air-gapped or enterprise environments."
required: false
default: ""

Usage:

• uses: anthropics/claude-code-action@v1
  with:
  npmrc_config: |
  registry=https://your-internal-artifactory/api/npm/npm-virtual/
  //your-internal-artifactory/api/npm/npm-virtual/:_authToken=${{ secrets.TOKEN }}
  strict-ssl=false

Why this matters

This is a blocker for teams running self-hosted runners in network-restricted environments —
a common enterprise setup where all dependencies must go through an approved internal proxy.

Happy to contribute a PR if the approach looks good to maintainers.