A comprehensive RBAC/ABAC/ReBAC authorization component for Convex with O(1) indexed lookups, inspired by Google Zanzibar

A Zanzibar-style relationship-based access control library — an authorization model DSL, a relation-tuple repository contract, and a Check evaluator with per-request metrics.

A flexible, Zanzibar-inspired authorization library for Node.js and TypeScript.

Shared vocabulary for the zanzibar-ts packages — OpenFGA JSON model types, the expand-tree shape, and the error categories

Zanzibar-style authorization plugin for Better Auth (server and client).

A surface-syntax DSL and compiler (pdsl CLI) for @maroonedsoftware/permissions — author Zanzibar-style namespaces in .perm files and generate TypeScript that drives the runtime authorization model.

Fast, zero-dependency in-process authorization engine for Node.js and browsers — ABAC, RBAC and ReBAC (Zanzibar-style relations) with Cerbos-like policies, caveats, OpenTelemetry and pluggable validation/caching

TypeScript-native, Zanzibar-style ReBAC authorization engine — in-process ~µs checks, a typed model builder, conditions (CEL/ABAC), and a D1 store for Cloudflare Workers

OpenFGA DSL → @zanzibar-ts/core model bridge — lower existing OpenFGA DSL text to a validated zanzibar-ts model (a build-time / migration tool, never in the core bundle)

Generic Zanzibar-style Identity and Access Management for the CAGE ecosystem — the Actor Model / Model Layer implementation.

Isomorphic ReBAC Authorization for the Modern Web. Inspired by Google Zanzibar.

Cliente completo OAuth2 + PKCE + Zanzibar + Webhooks para AuthSystem

Lightweight, Zanzibar/ReBAC-inspired hierarchical RBAC for Express + TypeScript. A role granted on a parent resource automatically applies to its children — no heavy infrastructure.

Drizzle ORM adapter for Zanzo ReBAC. Zero-config Zanzibar Tuple Pattern with parameterized SQL.

Relationship-Based Access Control (ReBAC) engine for moon-wave — Zanzibar-style tuple model backed by Cloudflare D1

Four typed, function-style assertions over node:assert/strict — assertEquals, assert (narrowing), assertThrows, assertRejects. Zero dependencies; works in any test runner

Exposes helpful utilities for building authoring experiences of OpenFGA Models.

A parser for Ory Keto relation policies

Search through json data using CSS selectors, using the browser

JavaScript implementation of Dacar, a Decentralized Access Control system for Reticulum