Capabilities come from the shared seat rule the servers enforce

Shipped

September 24, 2026 at 6:21 PM UTC

Author

Kamo

Commit

d0981be

EntitlementService reads the seat facts and asks SeatCapabilityRules for the decision, then maps it onto the unchanged MemberCapabilities wire shape, so the console's payload and every server-side seat gate share one rule. The /api/security/entitlements/me payload is unchanged: nine tests that drive the real entitlement read pass on both the old and the new code.