api: expose community edition capabilities

apps/admin-api/src/app.rs

@@ -23,6 +23,7 @@ use crate::{
             update_profile,
         },
         auth_profiles::{create_auth_profile, get_auth_profile, list_auth_profiles},
+        capabilities::get_capabilities,
         observability::{get_agent_usage, get_log, get_operation_usage, get_usage, list_logs},
         operations::{
             archive_operation, create_operation, create_version, delete_operation,
@@ -167,6 +168,7 @@ pub fn build_app(state: AppState) -> Router {
         .route("/async-jobs/{job_id}/result", get(get_async_job_result));
 
     let workspace_root_router = Router::new()
+        .route("/capabilities", get(get_capabilities))
         .route("/workspaces", get(list_workspaces).post(create_workspace))
         .layer(middleware::from_fn_with_state(
             state.clone(),
@@ -999,6 +1001,43 @@ mod tests {
         assert_eq!(delete_status, reqwest::StatusCode::NO_CONTENT);
     }
 
+    #[tokio::test(flavor = "multi_thread")]
+    #[serial]
+    async fn returns_community_capabilities() {
+        let registry = test_registry().await;
+        let storage_root = test_storage_root("community_capabilities");
+        let base_url = spawn_admin_api(build_test_app(registry, storage_root)).await;
+        let client = authorized_client(&base_url).await;
+        let root_url = base_url
+            .as_ref()
+            .split("/api/admin/workspaces/")
+            .next()
+            .unwrap();
+
+        let response = assert_success_json(
+            client
+                .get(format!("{root_url}/api/admin/capabilities"))
+                .send()
+                .await
+                .unwrap(),
+        )
+        .await;
+
+        assert_eq!(response["edition"], "community");
+        assert_eq!(
+            response["supported_protocols"],
+            json!(["rest", "graphql", "grpc"])
+        );
+        assert_eq!(response["supported_security_levels"], json!(["standard"]));
+        assert_eq!(
+            response["machine_access_modes"],
+            json!(["static_agent_key"])
+        );
+        assert_eq!(response["limits"]["max_workspaces"], 1);
+        assert_eq!(response["limits"]["max_users_per_workspace"], 1);
+        assert_eq!(response["limits"]["max_agents_per_workspace"], 1);
+    }
+
     #[tokio::test(flavor = "multi_thread")]
     #[serial]
     async fn manages_workspace_access_lifecycle() {