-- Check if user has a specific team permission
SELECT public.has_team_permission(
  'account-uuid'::uuid,
  'projects.create'::app_permissions
);

-- Get all permissions for current user on a team
SELECT * FROM public.get_user_team_permissions('account-uuid'::uuid);

-- Check if user has a specific project permission
SELECT public.has_project_permission(
  'project-uuid'::uuid,
  'assets.create'::project_permissions
);

-- Get all permissions for current user on a project
SELECT * FROM public.get_user_project_permissions('project-uuid'::uuid);

-- Check if user has a role on an account (role is optional)
public.has_role_on_account(account_id, role?)

-- Check if user is the primary owner of the account
public.is_account_owner(account_id)

-- Check if user can perform actions on another member
public.can_action_account_member(account_id, target_user_id)

import type { Database } from '@kit/supabase/database';

// Team account permissions
type AppPermission = Database['public']['Enums']['app_permissions'];

// Project permissions
type ProjectPermission = Database['public']['Enums']['project_permissions'];

// Project roles
type ProjectRole = Database['public']['Enums']['project_role'];

import { useTeamPermission } from '@fw/permissions/hooks';

function CreateProjectButton({ accountId }) {
  const { hasPermission, isLoading } = useTeamPermission(accountId, 'projects.create');
  
  if (isLoading) return <Spinner />;
  if (!hasPermission) return null;
  return <Button>Create Project</Button>;
}

import { checkTeamPermission } from '@fw/permissions/server';
import { getSupabaseServerClient } from '@kit/supabase/server-client';

async function TeamSettingsPage({ params }) {
  const client = getSupabaseServerClient();
  const canManage = await checkTeamPermission(client, params.accountId, 'settings.manage');
  
  if (!canManage) return <AccessDenied />;
  return <SettingsForm />;
}

import { PermissionGuard } from '@fw/permissions/components';

<PermissionGuard accountId={accountId} teamPermission="billing.manage">
  <BillingSettings />
</PermissionGuard>