zenstack-schema-modeling — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited zenstack-schema-modeling (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
ZModel is ZenStack's schema language — a superset of Prisma's schema. The schema lives at zenstack/schema.zmodel by default. For access policies/validation use zenstack-access-control; for queries use zenstack-querying.
After editing the schema:
zen check # only validate the schema for syntax/semantic errors (use --schema <file> for a non-default path)
zen generate # regenerate the database client — also validates the schema as it compilesRun zen check when you just want to confirm the schema is valid; run zen generate when you want to regenerate the client (the normal step after a schema change).
Strings accept both single and double quotes. Every valid Prisma schema is valid ZModel, so existing Prisma knowledge transfers directly — the sections below cover both the basics and the additions ZModel layers on top.
Exactly one datasource block per schema. The ORM runtime doesn't use url (the driver carries the connection); the migration engine does.
datasource db {
provider = 'postgresql' // 'postgresql' | 'mysql' | 'sqlite'
url = env('DATABASE_URL') // or 'file:./dev.db' for SQLite
}ZModel has no `generator` block. Code generation is driven byzen generate; optional behavior is configured withpluginblocks (e.g.plugin policy,plugin prisma).
model User {
id Int @id @default(autoincrement())
email String @unique
name String? // optional
role Role @default(USER)
tags String[] // list
createdAt DateTime @default(now())
updatedAt DateTime @updatedAt
}Scalar types: String, Boolean, Int, BigInt, Float, Decimal, DateTime, Json, Bytes, Unsupported("...").
Modifiers: ? optional, [] list. A field cannot be both optional and a list.
@)@id, @unique, @default(...), @updatedAt, @map('col'), @relation(...), @db.* (native type, e.g. @db.VarChar(64)), @json (typed-JSON field), @computed (virtual field).
@@)@@id([a, b]) (composite PK), @@unique([a, b]), @@index([a, b]), @@map('table'), @@delegate(field) (polymorphism), plus @@allow / @@deny / @@validate (see zenstack-access-control).
model City {
country String
name String
@@id([country, name]) // composite primary key
@@map('cities')
}A model needs an identifier: a @id field, an @@id([...]), or — failing those — a @unique field / @@unique([...]).
autoincrement(), now(), cuid(), uuid() / uuid(4), ulid(), nanoid(), dbgenerated("..."), plus literals and enum values.
Since v3.1.0, string ID generators accept a format with %s:
id String @id @default(uuid(4, "user_%s")) // -> "user_<uuid>"enum Role {
USER
ADMIN
}Enum value names are global and must not collide.
The owner side holds the foreign key (@relation(fields: [...], references: [...])).
One-to-one — FK is @unique; the non-owner side is optional:
model User {
id Int @id
profile Profile?
}
model Profile {
id Int @id
user User @relation(fields: [userId], references: [id])
userId Int @unique
}One-to-many — list on the non-owner side:
model User {
id Int @id
posts Post[]
}
model Post {
id Int @id
author User @relation(fields: [authorId], references: [id])
authorId Int
}Many-to-many (implicit) — list on both sides; the migration engine creates the join table:
model User { id Int @id posts Post[] }
model Post { id Int @id editors User[] }Many-to-many (explicit) — model the join table yourself when it needs extra fields:
model UserPost {
user User @relation(fields: [userId], references: [id])
userId Int
post Post @relation(fields: [postId], references: [id])
postId Int
@@id([userId, postId])
}Named relations disambiguate multiple relations between the same two models (give both ends the same name): @relation('UserPosts', ...).
Self-relations use a named relation, e.g. a one-to-many manager/reports tree:
model Employee {
id Int @id
managerId Int?
manager Employee? @relation('Mgmt', fields: [managerId], references: [id])
subordinates Employee[] @relation('Mgmt')
}Referential actions on the owner side: onDelete / onUpdate with Cascade, Restrict, NoAction, SetNull, SetDefault.
author User @relation(fields: [authorId], references: [id], onDelete: Cascade)A type declaration is not backed by a table. Use it for typed JSON (below) or as a mixin of reusable fields, applied with with:
type BaseFields {
id String @id @default(cuid())
createdAt DateTime @default(now())
updatedAt DateTime @updatedAt
}
model User with BaseFields {
email String @unique
}
model Post with BaseFields {
title String
}Mixin fields are inlined into the model. Multiple mixins are allowed if names don't conflict. This is ZModel's mechanism for sharing fields across models (use it instead of an abstract base model).
A type may even carry relation fields (v3.6.0+), but then it can only be used as a mixin, not as a JSON field:
type AuditMixin {
createdBy User @relation('CreatedBy', fields: [createdById], references: [id])
createdById String
}
model Post with AuditMixin { title String }@@delegateMulti-table inheritance: a base model with a discriminator field and @@delegate, concrete models using extends. Concrete and base rows share the same id; you create concrete models, never the base directly.
model Content {
id Int @id @default(autoincrement())
createdAt DateTime @default(now())
owner User @relation(fields: [ownerId], references: [id])
ownerId Int
type String // discriminator
@@delegate(type)
}
model Post extends Content {
content String
}
model Image extends Content {
data Bytes
}Customize the stored discriminator value with @@delegateMap (v3.7.1+), which also works with enum discriminators:
model Video extends Content {
url String
@@delegateMap("video")
}Define a type, use it as a field type, and mark the field @json. The column is plain JSON in the database, but ZenStack validates writes and returns a typed value.
type Address {
street String
city String
zip Int
}
model User {
id Int @id
address Address @json
}Declare a virtual field with @computed; implement it with a Kysely expression in the client config. It can be selected, filtered, sorted, and referenced in policies.
model User {
id Int @id
postCount Int @computed
}const db = new ZenStackClient(schema, {
dialect,
computedFields: {
User: {
postCount: (eb) =>
eb.selectFrom('Post')
.whereRef('Post.authorId', '=', 'id')
.select(({ fn }) => fn.countAll<number>().as('count')),
},
},
});generator block (use zen generate + plugins).type declarations + with mixins, @@delegate polymorphism, @json typed JSON, and@computed fields are ZenStack additions Prisma lacks.
Full ZenStack documentation for this topic is bundled under references/:
datasource blocktype declarationswith)@@delegate polymorphic models@computed fields~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.