Repository navigation
feat(lua-agent-builder): App Viewers in web apps, and /lua-audit flags their writes without an ownership check; 1.18.0 - #32
Merged
Conversation
…s their writes without an ownership check; 1.18.0
web-apps.md: auth.accessLevel ('full', 'view_only', 'use') and
defineWebApp({ viewers: { write, chat, mode } }) (lua-cli 3.64.0+), with an
example write route that checks the record is the caller's and answers 404.
lua-auditor: lists viewers and accessLevel branches, and finding 14 (always
HIGH): viewers.write with a write route lacking an ownership check.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
lib/knowledge/web-apps.md§3:auth.accessLevel('full','view_only','use') anddefineWebApp({ viewers: { write, chat, mode } })(lua-cli 3.64.0+, lua-core-services #7071, gateway #7084). Withwrite: true, App Viewers (people who sign in by phone or email to use only that app) reach every write route as'use'with empty roles and scopes, so the builder is told, with an example route, that each write checks the record is the caller's (theiruserId, or their scope in the app's own roster) and answers 404 otherwise.chatandmode: 'app'are marked as not honoured yet.agents/lua-auditor.md:viewersandaccessLevelbranches go under custom access control; new finding 14, App Viewer writes without ownership, always HIGH.dist/server.jsversion strings).Checks
npm run lint(incl. the version-consistency lint) andnpm test: 72 suites, 2562 passed.Linear: LUA-1898 (epic LUA-1892)
🤖 Generated with Claude Code