Convex Authz

This is a Zanzibar-inspired authorization library for Convex that gives you RBAC, ABAC, and ReBAC with O(1) permission checks through pre-computed indexes. You'd reach for it when building multi-tenant apps or anything where "can this user do this thing" needs to be fast and correct at scale. The v2 API unifies everything into a single Authz class with support for role inheritance, relationship traversal, and scoped permissions. It's opinionated about being Convex-native rather than database-agnostic, which means tighter integration but also lock-in. The type safety is solid and the tuple-based relationship model will feel familiar if you've used SpiceDB or similar systems.