News for hackers. Stuff that matters.

carlual

carlual on Hacker News

Show HN: ZenStack – access control at the ORM layer, built for coding agents

Posted by carlual on Tuesday July 14, 2026 @03:08AM
from the show-hn dept.

https://zenstack.framer.website/

Hi HN, I'm Jiasheng, co-creator of ZenStack.Access control usually ends up scattered across app code instead of living with the data model — and that's riskier when the code is written by an agent, since it's easy to ship a query with a missing or incomplete authorization check. ZenStack enforces policy (RBAC/ABAC/relation-based) directly at the ORM layer, on top of Kysely, so every query gets...

( Read More... | no comments | 3 points | on HN )
Re:Kysely (the type-safe SQL query builder for TypeScript) v0.29 is ou... on Monday May 25, 2026 @06:56AM (#48265460)
As the creator of ZenStack, rewriting our ORM engine for v3 with Kysely was honestly one of the best technical decisions we’ve made. The composability, type safety, and overall architecture fit our use case surprisingly well.
Re:What would a "permissions-first ORM" look like? Looking for spec fe... on Wednesday February 18, 2026 @12:12AM (#47057421)
That's really a honest and thoroughly comparsion, thanks for sharing!

To be clear, what I mean is the goal that it could be consumed by an MCP server, an autonomous agent, or a vibe-coded app are the same.

Re:What would a "permissions-first ORM" look like? Looking for spec fe... on Monday February 16, 2026 @09:53PM (#47043162)
This closely aligns with what I expect ZenStack could help in the AI era, which you could tell from the two demos I created :

-[MCP](https://zenstack.dev/blog/database-to-mcp)

-[Agent](https://zenstack.dev/blog/ai-agen)

From my experience, a declarative and flexible AuthZ layer is the cornerstone of everything.

Show HN: ZenStack – Modern Data Layer for TypeScript Apps

Posted by carlual on Thursday December 25, 2025 @02:07AM
from the show-hn dept.

https://zenstack.dev/

When Prisma 2.0 launched, they also shared their vision for a "uniform data access layer" inspired by Facebook's TAO and Twitter's Strato (https://www.prisma.io/blog/prisma-raises-series-a-saks1zr7ki...). That idea resonated with me.Several years passed, Prisma seemed to have gone in a different direction, but I want to continue it.ZenStack V3 is now GA. It started as a Prisma extension but...

( Read More... | no comments | 2 points | on HN )

Show HN: ZenStack V3 – Modern, AI-Friendly Data Layer for TypeScript App

Posted by carlual on Tuesday September 02, 2025 @08:32AM
from the show-hn dept.

https://zenstack.dev/v3

ZenStack’s goal is to become the unified data layer of the application. It has been advocating a model-first approach, which involves using a rich and coherent schema as the single source of truth of the application and automatically deriving as many workpieces as possible, such as access control, RESTful APIs, frontend hooks, and Zod schemas.ORM is an essential part of it. To avoid reinventing...

( Read More... | no comments | 11 points | on HN )
Re:ORMs Are Good on Saturday August 16, 2025 @10:28PM (#44928424)
Great writing! Always love to see insights from real experiences.

- Declarative over Imperative.

- Schema as the Single source of truth.

I share the same beliefs and created ZenStack(https://zenstack.dev) on top of Prisma.

Re:Vercel Accquired Nuxt on Wednesday July 09, 2025 @01:46AM (#44506678)
Vercel now owns all three major full-stack frameworks: Next.js, Svelte, and Nuxt. Do you think it’s good or bad for the ecosystem?

Show HN: ZenStack V3 – TypeScript ORM Combines Strength of Prisma + Drizzle

Posted by carlual on Friday June 20, 2025 @11:29AM
from the show-hn dept.

https://github.com/zenstackhq/zenstack-v3

We launched ZenStack V2(https://news.ycombinator.com/item?id=40205699) one year ago. It is built on Prisma, adding advanced features like access control, polymorphism, API/Hook generation, etc. But as we added more features, we felt more constrained by our foundation, Prisma(Check out the specific constraints here https://zenstack.dev/blog/next-chapter-1).Therefore, we made a bold decision for...

( Read More... | 1 comment | 6 points | on HN )
Re:How Microsoft Office Moved from Source Depot to Git on Thursday June 12, 2025 @12:10AM (#44254254)
Thank you! Btw, it reminds me of the book "Showstopper" about the journey of releasing Windows NT; highly recommended!
Re:How Microsoft Office Moved from Source Depot to Git on Wednesday June 11, 2025 @11:12PM (#44253969)
> Authenticity mattered more than production value.

Thanks for sharing this authentic story! As an ex-MSFT in a relatively small product line that just started switching to Git from SourceDepot in 2015, right before I left, I can truly empathize with how incredible a job you guys have done!

Older »