Does anybody know of a Node.js package that offers Zanzibar-esque ReBAC behaviour? E.g. a library to help you implement "lightweight" (e.g. no zookies) ReBAC in a Node.js service where you don't want/need the overhead of a separately hosted authorization service?