keystonejs/keystone

The main sensitive boundaries are privileged context APIs, authentication/session configuration, external storage, and commands that generate files or alter databases. Source inspection also reveals example/API drift and a Cloudinary metadata mapping concern. These findings are source observations or explicitly labeled hypotheses, not confirmed vulnerabilities or executed defect reproductions.

• sudo() constructs an internal context with permission bypass enabled, while internal() only changes schema scope; direct Prisma access is exposed separately and the actions example explicitly uses it to bypass Keystone access checks.
  packages/core/src/lib/context/createContext.ts#L79-85packages/core/src/lib/context/createContext.ts#L123-132packages/core/src/lib/core/access-control.ts#L93-109examples/actions/schema.ts#L68-81
• Admin UI access defaults to allowed when no session strategy exists; server.cors=true becomes reflected origins with credentials=true. These configuration choices must be assessed independently of list API permissions.
  packages/core/src/schema.ts#L111-114packages/core/src/schema.ts#L128-134packages/core/src/schema.ts#L182-189packages/core/src/lib/express.ts#L64-69
• Hypothesis: omitting a stable session secret can invalidate sessions after strategy reconstruction or across independently initialized instances, because statelessSessions() generates a fresh random default secret. (inferred)
  packages/core/src/session.ts#L73-98packages/core/src/session.ts#L116-133
• Hypothesis: a successful storage.put() followed by validation or database failure can leave an orphaned asset, because upload occurs during input resolution and the inspected cleanup hook addresses replaced/deleted old filenames after persistence. (inferred)
  packages/core/src/fields/types/file/index.ts#L65-81packages/core/src/fields/types/file/index.ts#L95-109packages/core/src/lib/core/mutations/index.ts#L597-619packages/core/src/lib/core/mutations/index.ts#L94-102
• CLI operations have filesystem/database side effects: dev defaults to dbPush=true, Prisma helpers spawn the resolved CLI and use temporary directories, and artifact destinations can be configured through resolved paths.
  packages/core/src/scripts/cli.ts#L76-83packages/core/src/scripts/dev.ts#L150-169packages/core/src/lib/prisma-cli.ts#L11-19packages/core/src/lib/system.ts#L24-43
• The magic-link example reads password.extensions.keystoneSecretField and calls generateHash(), whereas current core exports extensions.keystoneKDF with hash()/compare(); the source names disagree on its token redemption path.
  examples/auth-magic-link/schema.ts#L165-181packages/core/src/fields/types/password/index.ts#L54-57packages/core/src/fields/types/password/index.ts#L218-240
• Cloudinary output maps both width and height from _meta.width, and the field implementation explicitly notes no delete support; dimension reporting and remote asset cleanup warrant focused review.
  packages/cloudinary/src/index.ts#L119-123packages/cloudinary/src/index.ts#L183-192
• The document site can build with TypeScript errors ignored; root tsc excludes docs, and the inspected main types job runs recursive check plus root tsc, while docs/package.json has no check script.
  docs/next.config.mjs#L11-15tsconfig.json#L19-20.github/workflows/tests_ci.yml#L38-50docs/package.json#L7-17