Firm profile: rename your firm from a single field

What changed

Contract status (verified against merged functions main)

• Partial PATCH — WIRED. functions Story-1861 made FirmProfileUpdateRequest's six address/contact fields optional. The OpenAPI mirror was synced from functions main HEAD and pnpm codegen regenerated src/gen; the zod request schema now accepts a name-only payload ({ displayName }).
• Trimmed response (Q4) — ENFORCED. The PATCH response is now FirmProfileUpdateResponse (editable fields only; no plan/seat/CSM echo). The firm-profile gateway's update() boundary check was switched from the old full firmProfileResponseSchema to firmProfileUpdateResponseSchema — the stale assert would otherwise (correctly) fail assertContract at the trust boundary now that plan/seats are gone (HR-21).
• First-run honesty. A firm with no saved address renames fine: the partial PATCH carries only displayName, so the empty address is never validated (this was the whole reason for the new contract; staging proof pending on deploy).

Where it lives

• openapi/app-api.json + src/gen/** — mirror synced from functions main HEAD + pnpm codegen: FirmProfileUpdateRequest all-optional, new FirmProfileUpdateResponse type + zod.
• src/lib/firm-profile/gateway.ts — update() asserts the trimmed firmProfileUpdateResponseSchema (Q4 / ADR-099).
• src/app/[locale]/(workspace)/settings/firm/profile/page.tsx — FirmProfileRoute: requireOkAppMe gate, passes name + canWrite + a bound save action; agentSurface (settings.firm-profile).
• src/app/[locale]/(workspace)/settings/firm/profile/actions.ts — updateFirmNameAction: trust-boundary zod, gateway write, layout revalidation, localized typed result.
• src/components/settings/firm-profile/firm-profile-page.tsx (+ *.stories.tsx) — the one-field form / read-only text view; a11y label/aria-invalid/aria-describedby/focus.
• src/components/settings/settings-sidebar.tsx — firm-profile nav item (type + icon + SETTINGS_GROUPS) at the top of the firm group.
• src/lib/surface-registry/route-registry.ts + page-card/catalog.ts — regenerated registry; navigate-only catalog entry (mirrors sibling settings atlas surfaces).
• messages/en.json + messages/hi.json — the orphan FirmProfile namespace (from superseded RFD-FIRM-001) repurposed for this page (no parallel namespace); SettingsNav.firmProfile + AgentSurfaces.settingsFirmProfile; both locales.

Observability

No new instrumentation (pramaan-docs ADR-104 / ADR-065 / ADR-124). The save traverses src/lib/gateway.ts, which already mints/forwards traceparent + x-pramaan-correlation-id — the trace propagates for free. PATCH /app/firm is an existing instrumented domain operation; this Story only changes the request shape. No OTel SDK, spans, or ad-hoc headers added.

Verify

pnpm lint
pnpm typecheck
pnpm test
pnpm build
pnpm check:routes

• Storybook FirmProfilePage → Editable (Save disabled until the name changes) / Read-only (name as text, no input) / Server field error (localized + focus) / Save failure (localized fallback toast).
• Confidentiality the client payload carries only firmName + canWrite — no plan/seat/CSM/address crosses the boundary.
• i18n the repurposed FirmProfile namespace + nav + agent-surface keys present in both en and hi; orphan namespace resolved, no parallel one.
• Tokens no color literals; surfaces/text from semantic tokens only.
• Staging live rename (incl. a no-saved-address firm) + read-only member payload check are deploy-time verifications (functions Story-1861 must be live in the target env).

Files changed

55 file(s), +3348 / -217 lines