import { createCapabilityChecker } from '@amadeni/convex-lib';

const capabilities = createCapabilityChecker({
  registry: {
    'invoice.manage': {
      label: 'Manage invoices',
      category: 'invoices',
      defaultRoles: ['accountant'],
    },
    // ...
  },
  getOverride: async (ctx, key) => {
    return await ctx.db.query('capabilityOverrides')
      .withIndex('by_key', q => q.eq('key', key))
      .first();
  },
  adminRoles: ['admin'],  // optional, default: ['admin']
});

// Check single capability
if (await capabilities.has(ctx, user.role, 'invoice.manage')) { ... }

// Check all capabilities for a role (admin panels)
const all = await capabilities.checkAll(ctx, user.role);
// → { 'invoice.manage': true, 'client.create': false, ... }

// Access registry metadata
capabilities.keys;      // readonly string[]
capabilities.registry;  // full registry for UI rendering