本文へ移動
cccskills
無料GitHub で公開

nauthilus-lua-policy

Use for Nauthilus Lua plugins, Lua callback tests, policy compiler and registry work, Lua environment and subject sources, Lua actions, hooks, backend scripts, policy facts, obligation targets, `server/lualib`, `server/lua-plugins.d`, `server/policy`, and JSON fixtures under `testdata/lua`.

croessner/nauthilus
インストール方法を見る

含まれるファイル（1）

  • SKILL.md2.5 KB

SKILL.md（原文）

インストールする前に、エージェントに与えられる指示の中身を確認できます。

Nauthilus Lua Policy

Expertise Lens

  • Work as a Lua extension-system and policy-engine specialist for authentication pipelines.
  • Optimize for hermetic Lua reproducers, policy-owned decisions, explicit scheduling, registered facts, reusable shared modules, and safe request-local context handling.
  • Treat missing policy fact registration, silent Lua errors, non-hermetic tests, duplicate plugin logic, and action/subject/environment phase confusion as design defects.

Sources To Read

  • AGENTS.md
  • POLICY.md
  • server/lua-plugins.d/README.md
  • relevant plugin README files under server/lua-plugins.d/*/README.md
  • testdata/lua/README.md
  • server/lualib/
  • server/policy/
  • server/testing/luatest/ when Go-hosted Lua tests are involved

Lua And Policy Rules

  • For Lua issues, create a Lua reproducer first, preferably JSON-driven with testdata/lua fixtures.
  • Keep environment sources in pre-auth signal collection, subject sources after backend facts, backends for credential/account lookup, actions as policy-selected obligations, and hooks for explicit lifecycle or HTTP hook points.
  • Policy remains the decision authority. Plugins emit facts, backend results, obligation results, and status details.
  • Register custom Lua-owned policy attributes before using them in policy rules.
  • Use shared Lua modules under share/ for repeated behavior.
  • Keep Lua comments and technical docs in English.
  • Avoid logging secrets or raw credentials from Lua or Go bridges.

Testing Workflow

  1. Build the smallest Lua fixture that reproduces the behavior.
  2. Use --test-lua, callback-specific JSON fixtures, or Go-hosted Lua tests depending on the code path.
  3. Preload all required modules; module names must match definitions.LuaMod... constants.
  4. Validate strict expected_calls when module interaction order matters.
  5. Keep useful fixtures as regression coverage.

Validation

  • Run focused Go tests with GOEXPERIMENT=runtimesecret.
  • Run ./scripts/run-lua-plugin-tests.sh when bundled Lua plugin behavior changes.
  • Run GOEXPERIMENT=runtimesecret make test and git diff --check.
  • Run make guardrails before commit or pull request.

レビュー

まだレビューはありません。使ってみた感想をお寄せください。

ログインしてレビューを書く

同じリポジトリのスキル

概要と使いどころ

nauthilus-api-contracts

無料

Use for Nauthilus OpenAPI, generated management or IdP clients, route contract tests, gRPC protobuf generation, HTTP route registration, management API authentication, public discovery API, `server/openapi`, `server/router`, `server/grpcapi`, `server/grpcclient`, and API-boundary client work.

日本語の概要は準備中です。原文の説明を表示しています。

croessner/nauthilus62026年10月11日 更新

nauthilus-auth-identity

無料

Use for Nauthilus authentication and identity-provider work touching OIDC, OAuth2, SAML, MFA, TOTP, WebAuthn, recovery codes, LDAP-backed identity, browser login and consent flows, token/session/flow state, `private_key_jwt`, introspection, discovery metadata, endpoint-specific client authentication, and security-sensitive auth tests.

日本語の概要は準備中です。原文の説明を表示しています。

croessner/nauthilus62026年10月11日 更新

nauthilus-config-docs

無料

Use for Nauthilus configuration loading, config schema and defaults, Viper-backed config formats, config dump behavior, vim syntax generation, template validation, prompt guideline sync, documentation under README/IDP/server docs, config converters, and generated documentation or syntax artifacts.

日本語の概要は準備中です。原文の説明を表示しています。

croessner/nauthilus62026年10月11日 更新

nauthilus-plugin-api

無料

Use for Nauthilus native Go plugin API design or implementation, `pluginapi/v1`, plugin loader, plugin registry, plugin runtime, reload integration, plugin config, extension-point parity with Lua, capability-based host services, lifecycle semantics, and the working draft under `server/docs/go_plugin_api_working_draft.md`.

日本語の概要は準備中です。原文の説明を表示しています。

croessner/nauthilus62026年10月11日 更新

nauthilus-redis-runtime

無料

Use for Nauthilus Redis client, Redis Cluster/Sentinel/topology behavior, Redis-backed token/session/flow/cache/bruteforce state, Lua Redis scripts, `NOSCRIPT` recovery, script upload/retry behavior, redismock tests, local cache coordination, and fail-closed runtime state changes.

日本語の概要は準備中です。原文の説明を表示しています。

croessner/nauthilus62026年10月11日 更新

nauthilus-release-closeout

無料

Use for Nauthilus validation, guardrails, dependency patch refreshes, vendoring, generated-output checks, `make release-guardrails`, govulncheck-sensitive publishing, structured commits, branch/tag choreography, website-doc side effects, and final clean-state reporting.

日本語の概要は準備中です。原文の説明を表示しています。

croessner/nauthilus62026年10月11日 更新

croessner のスキルをすべて見る

このスキルの問題を報告する