ZenStack – access control at the ORM layer, built for coding agents

What it does

ZenStack is the modern data layer for TypeScript apps - with a type-safe ORM, built-in access control, and automatic query services.

Define a thoughtful data model, and let it power every part of your application. Define a thoughtful data model, and let it power every part of your application. Define a thoughtful data model, and let it power every part of your application. Schema-first data modeling with an intuitive language: terse, expressive, extensible. Compatible with Prisma schema. Use a concise and extensible schema language to define data models. Compared to traditional ORMs, ZenStack reduces scattered configuration and boilerplate, delivering structured and expressive modeling. Schema-first data modeling with an intuitive language: terse, expressive, extensible. Compatible with Prisma schema. A fully typed ORM…from zenstack.framer.website

In the maker’s words, at launch

Hi HN, I'm Jiasheng, co-creator of ZenStack. Access control usually ends up scattered across app code instead of living with the data model — and that's riskier when the code is written by an agent, since it's easy to ship a query with a missing or incomplete authorization check. ZenStack enforces policy…

• 
  ZenStack – DSL to define data and access rules closer to the database2023 · github.com · ▲19

  We're excited to announce the launch of ZenStack V1 after a year of refinement. With ZenStack, we introduce ZModel, a domain-specific language (DSL) that simplifies the definition of data and access rules, bringing it closer to the database level. This eliminates the need for extensive, repetitive coding on the application side. We would love to hear your feedback and opinions on it. Thank you!

• 
  ZenStack V2 – RLS alternative with declarative Auth rules in Prisma2024 · zenstack.dev · ▲14

  Half a year ago, we posed a Show HN about ZenStack V1 as "DSL to define data and access rules closer to the database" Throughout the month, we've attracted quite a few early adopters. Some of them, such as MermaidChart, have successfully launched into production. After talking with them, we realized that many individuals found ZenStack while seeking a cleaner and easier alternative to RLS. As a result, we pivot ourselves to be a “TypeScript toolkit on top of Prisma ORM with a fine-grained Authorization layer, auto-generated type-safe APIs, and frontend hooks”. In V2, besides the more…

• 
  ZenStack2023 · github.com · ▲119

  Build scalable web apps with minimal code

• 
  A Go Library for Better Access Control2017 · github.com · ▲158

  A SDK for access control policies: authorization for the microservice and IoT age. Inspired by AWS IAM policies. Written for Go. - ory/ladon

• 
  Vela - Access Control for the AI Era2025 · vela-access.app · ▲28

  Introducing RBAC for AI-Powered Apps on Postgres/Others

• TB
  Tabstack – Browser infrastructure for AI agents (by Mozilla)Jan 2026 · ▲130

  Hi HN, My team and I are building Tabstack to handle the "web layer" for AI agents. Launch Post: https://tabstack.ai/blog/intro-browsing-infrastructure-ai-ag... Maintaining a complex infrastructure stack for web browsing is one of the biggest bottlenecks in building reliable agents. You start with a simple fetch, but quickly end up managing a complex stack of proxies, handling client-side hydration, and debugging brittle selectors. and writing custom parsing logic for every site. Tabstack is an API that abstracts that infrastructure. You send a URL and an intent; we…

• 
  Spira Maxima▲578

  Video model that turns script into viral social media videos

  AI · 17d ago · spira.ai

• 
  Rill Browser▲540

  The browser where Claude Code and Codex work beside you

  AI · 17d ago · rill.love

• 
  Germany's new sovereign AI model Kolibri▲424

  Kolibri is Aleph Alpha

  AI · 19d ago · tej.as

• 
  Giving Opus 5.5 a simulated paint canvas▲392

  Paintings by AI models: programs run through a simulation of oil paint.

  AI · 20d ago · stillwet.art

• 
  PixVerse R2▲381

  A real-time world model you can explore and change

  AI · 29d ago · world.pixverse.video

• 
  Hemory▲381

  Keep listening. Searchable memory for your AI agents.

  AI · 29d ago · hemory.com

• IR
  I replaced a $120k bowling center system with $1,600 in ESP32s▲2,935

  I might be the only SRE on Earth with his own bowling center. It's a more in-depth gig than you'd think. My family and I bought an abandoned 8-lane bowling center in the rural mid-west. In our small town there weren't many recreation options for families. You've heard of a food desert? This is an R&R desert. It had been abandoned for a good reason. The roof leaks, the electrical system was constantly surging, and my 70-year-old bowling equipment (still) doesn't work perfectly. The system that keeps your score is particularly interesting to me. It's the thing you watch during your game, but…

  Life & fun · Jul 2026

• 
  Elevators▲1,680

  How elevators push your buttons

  Life & fun · Jul 2026 · john.fun

• 
  18 Words▲1,160

  Play 18 Words, the free daily word puzzle. The official home is 18words.com. Tap Play now to open today

  Life & fun · Jul 2026 · 18words.com

• BA
  Bento - An entire PowerPoint in one HTML file (edit+view+data+collab)▲1,033

  Over the past few months, our team has been building more and more slidedecks using web frontend technologies with coding harnesses like Claude Code, but a common complaint is to make even small edits we need to edit the code either manually or via the harness. To avoid this loop, I ended up creating Bento, a single HTML file with everything you need in a slide tool including animations and shared editing. There's no install or cloud login, everything works offline. The default deck is around 560 KB and it doesn't need to fetch anything once you got it. Open it in a browser and then you can…

  Dev tools · Jul 2026 · bento.page

• 
  Getting GLM 5.2 running on my slow computer▲937

  A few days ago I found myself trying out GLM 5.2 and was really positively impressed. The capabilities and security I was getting from this LLM are similar to those I've gotten from models like Claude or GPT, and this really surprised me. But then I thought, "I wonder how it would work on a normal computer like mine," and above all, "I wonder if it would work without going into OOM on a computer like mine." So I started working with the help of agents to test this possibility. I started converting the model to int4, understanding MTP usage, and if possible implementing DSA for long context.…

  AI · Jul 2026 · github.com

• 
  OpenSEO▲928

  Hello! For the last 2 months, I've been building OpenSEO. It's a user friendly UI wrapping the DataForSEO API which has high quality SEO data for keywords, backlinks, AI SEO and competitor research. Instead of paying $100+ per month, you buy DataForSEO credits and pay only for usage. The coolest thing about the project so far has been hearing about what people are building on top of it. People are using coding agents to quickly integrate with Google Search Console, Google Ads and building their own AI SEO and reporting features. Many were already building their own custom solutions around…

  Dev tools · Jul 2026 · openseo.so