permit

Overview

Type-safe, declarative authorization policies with Standard Schema-compatible resources.

When to Use

• Defining permissions for resources and actions
• Modeling role hierarchies or composable access rules
• Replacing ad-hoc if checks with auditable policy rules

When Not to Use

• Simple apps with a single hardcoded allow/deny check

Quick Reference

• Policy: createPolicy
• Rules: allow, deny, when
• Conditions: and, or, not, has, hasRole
• Evaluate: policy.can(ctx, action, resourceName, resource)
• Merge: mergePolicies or mergePoliciesAny

Inputs to Request

• Resource schemas and action lists
• Context shape (user, role, tenancy)
• Required rules and edge cases

Resources

• https://www.zapstudio.dev/packages/permit
• https://www.zapstudio.dev/llms.txt