Team roles UI

1 · The distinction this ships

Capability (admin / editor / member) is what a member may do — authorization, unchanged. Role (Partner / Senior Advocate / Member …) is the firm-defined professional designation — what a member is called. Before this story the UI showed capability wherever it said "Role"; a Partner read as "Admin". Now both exist side by side, correctly labelled.

2 · Settings → Team → "Team roles" tab

A third SegmentedFilter tab beside Members / Pending lists the firm-roles catalog: add (header PrimaryButton swaps to "Add role" on this tab), rename (name click or kebab → the same sheet, catalog-parity), reorder (kebab Move up / Move down, optimistic displayOrder swap), and soft-delete with a confirm dialog. canDelete from the API disables deleting the last role; the backend's 409 *.last_role conflict is surfaced as a specific toast if it races. Seeded defaults (Partner / Senior Advocate / Member) carry a "Default" hint.

3 · Member assignment + relabelled columns

The members table gains a Role column (member.firmRole.name, em-dash when unassigned) and the old "Role" header is relabelled Capability. The kebab now has two submenus: "Change role" (catalog picker + "No role" to clear, wired to PATCH /app/firm/members/{id}/firm-role) and "Change capability" (the previous admin/editor/member switch). A protected row (self / last admin) still allows designation changes — those carry no authorization weight — while capability and deactivation stay locked.

Invite-time role assignment is intentionally NOT shipped: invitations are Clerk-side objects and Story-1241 only extended the member-update path, so a role picked at invite time would have no persistence path. The invite sheet's capability section is relabelled "Capability"; role assignment happens from the members table once the member joins. Follow-up filed on the issue.

4 · Add-Matter wizard shows role, not capability

FirmMember gains role (designation); toFirmMember maps it from the members response, and the lead-counsel + team-member chips render it in the gray sub-line. This also closes the Bug-1240 stub: live-matters-list-page now feeds findMembers from useAppListMembers (active members) through filterFirmMembers instead of () => [].

5 · i18n split

Team.roles (which held capability labels) split into Team.capabilities / Team.capabilityDescriptions plus a real Team.roles namespace for the catalog tab. Every key exists in both messages/en.json and messages/hi.json; role names themselves come from the catalog data, never from i18n.

6 · Plumbing (ADR-095 / HR-21 / HR-22)

7 · Tests + Storybook

Verification

pnpm lint clean · pnpm test 496 passed · pnpm build compiles, new routes emitted · hardcoded-copy and color-literal scans no hits. Staging acceptance: defaults render on the Team roles tab, last role refuses deletion, member rows show & set role, wizard chips show role.