Capability is derived from the firm role

1 · The inversion this ships

Before ADR-112, capability (Admin / Editor / Member) was set per member and the firm role (designation) was a separate, decorative label. ADR-112 inverts the relationship: the firm role is the single assignable, and capability is derived from it. A firm authors the role→capability binding once (Partner → Admin); assigning a member that role sets their access automatically. The standalone "Change capability" control is therefore retired — there is nothing left to set directly.

2 · Contract sync (the one allowed codegen)

The vendored openapi/app-api.json was synced to pramaan-functions main and pnpm codegen regenerated src/gen (first commit). Cascade absorbed:

3 · Members page — capability read-only, derived

The member "⋯" menu keeps only Change role (designation catalog picker + "No role" to clear) — no capability action. The Role column now renders the firm role name with the derived capability as a muted meta line beneath it (member.role → Team.capabilities.* → Admin / Editor / Member). A member with no firm role shows the firm_member default ("Member") with an em-dash designation. Because capability is propagated server-side, the meta line updates the moment the role changes — no separate write.

4 · Firm-role sheet — where the binding is authored

FirmRoleSheet gains a capability selector (reusing the existing CapabilitySelect radio cards, now generalised with ariaLabel / idPrefix props). Create and rename send capability in the payload. System defaults (Partner / Senior Advocate / Member) are rename-only — ADR-112 locks their capability — so the selector is disabled and the PATCH omits capability for them, with a hint explaining why.

5 · Firm configuration IA + Team roles page

The Settings "Firm configuration" group and the standalone Team roles page (promoted out of the Members tab strip) landed earlier in Story-1251 (#317), which is on this branch's base. This story completes ADR-112 on top of that IA: the Team roles page's roles table now carries the read-only Access column, and the sheet behind it authors the binding.

6 · i18n

Dead keys removed (Team.members.changeCapability, columnCapability, capabilityUpdatedToast). New keys added to both messages/en.json and messages/hi.json: Team.roles.columnCapability, capabilityLabel, capabilityHint, capabilityLockedHint. Per ux-guidelines §17 the raw word "capability" never reaches counsel — it renders as Admin / Editor / Member (column header "Access").

7 · Tests + Storybook

Verification

pnpm lint clean (pre-existing warnings only) · pnpm test 495 passed · pnpm build compiles; the retired …/role route is gone, …/firm-role remains · tsc --noEmit clean · hardcoded-copy and color-literal scans no hits · quality CI green (no src/gen drift after the mirror sync).