api: expose community edition capabilities

apps/ui/js/api.js

@@ -172,6 +172,9 @@
     listWorkspaces: function() {
       return get('/workspaces');
     },
+    getCapabilities: function() {
+      return get('/capabilities');
+    },
     createWorkspace: function(payload) {
       return post('/workspaces', payload);
     },

apps/ui/js/i18n.js

@@ -406,6 +406,23 @@ var TRANSLATIONS = {
     'settings.security.capabilities_title': 'More security options',
     'settings.security.capabilities_body': 'Two-factor authentication, passkeys, and multi-session controls will be added later. The current live flow uses password sign-in with one HttpOnly browser session.',
     'settings.security.not_available': 'Available later.',
+    'settings.security.capability_title_community': 'Community build',
+    'settings.security.capability_title_enterprise': 'Enterprise build',
+    'settings.security.capability_title_cloud': 'Cloud build',
+    'settings.security.capability_summary': 'This build supports {protocols}, {access_modes}, and {security_levels} operation security. Limits: {max_workspaces} workspace, {max_users} user, {max_agents} AI agent. Short-lived tokens, one-time tokens, and advanced governance require a commercial edition.',
+    'settings.capability.rest': 'REST / HTTP',
+    'settings.capability.graphql': 'GraphQL',
+    'settings.capability.grpc': 'gRPC unary',
+    'settings.capability.websocket': 'WebSocket',
+    'settings.capability.soap': 'SOAP',
+    'settings.capability.standard': 'standard',
+    'settings.capability.elevated': 'elevated',
+    'settings.capability.strict': 'strict',
+    'settings.capability.static_agent_key': 'static agent keys',
+    'settings.capability.short_lived_token': 'short-lived tokens',
+    'settings.capability.one_time_token': 'one-time tokens',
+    'settings.capability.unlimited': 'unlimited',
+    'settings.capability.none': 'none',
     'settings.session.title': 'Current session',
     'settings.session.browser': 'Browser session',
     'settings.session.current': 'current',
@@ -1433,6 +1450,23 @@ var TRANSLATIONS = {
     'settings.security.capabilities_title': 'Дополнительные параметры безопасности',
     'settings.security.capabilities_body': 'Двухфакторная аутентификация, passkeys и управление несколькими сессиями появятся позже. Сейчас доступен вход по паролю с одной HttpOnly browser session.',
     'settings.security.not_available': 'Появится позже.',
+    'settings.security.capability_title_community': 'Редакция Community',
+    'settings.security.capability_title_enterprise': 'Редакция Enterprise',
+    'settings.security.capability_title_cloud': 'Редакция Cloud',
+    'settings.security.capability_summary': 'В этой сборке доступны {protocols}, {access_modes} и уровень защиты операций {security_levels}. Лимиты: {max_workspaces} воркспейс, {max_users} пользователь, {max_agents} AI-агент. Короткоживущие токены, одноразовые токены и расширенное управление доступом требуют коммерческую редакцию.',
+    'settings.capability.rest': 'REST / HTTP',
+    'settings.capability.graphql': 'GraphQL',
+    'settings.capability.grpc': 'gRPC unary',
+    'settings.capability.websocket': 'WebSocket',
+    'settings.capability.soap': 'SOAP',
+    'settings.capability.standard': 'standard',
+    'settings.capability.elevated': 'elevated',
+    'settings.capability.strict': 'strict',
+    'settings.capability.static_agent_key': 'статические ключи агентов',
+    'settings.capability.short_lived_token': 'короткоживущие токены',
+    'settings.capability.one_time_token': 'одноразовые токены',
+    'settings.capability.unlimited': 'без лимита',
+    'settings.capability.none': 'нет',
     'settings.session.title': 'Текущая сессия',
     'settings.session.browser': 'Сессия браузера',
     'settings.session.current': 'текущая',

apps/ui/js/settings.js

@@ -1,4 +1,5 @@
 var settingsSession = null;
+var settingsCapabilities = null;
 function tKey(key) {
   return typeof t === 'function' ? t(key) : key;
 }
@@ -70,6 +71,33 @@ function populateCurrentSession(session) {
   });
 }
 
+function capabilityLabel(key) {
+  return tKey('settings.capability.' + key);
+}
+
+function populateCapabilities(capabilities) {
+  var title = document.getElementById('settings-security-capability-title');
+  var body = document.getElementById('settings-security-capability-body');
+  if (!title || !body || !capabilities) {
+    return;
+  }
+
+  var protocols = (capabilities.supported_protocols || []).map(capabilityLabel).join(', ');
+  var accessModes = (capabilities.machine_access_modes || []).map(capabilityLabel).join(', ');
+  var securityLevels = (capabilities.supported_security_levels || []).map(capabilityLabel).join(', ');
+  var limits = capabilities.limits || {};
+
+  title.textContent = tKey('settings.security.capability_title_' + capabilities.edition);
+  body.textContent = tfKey('settings.security.capability_summary', {
+    protocols: protocols || capabilityLabel('none'),
+    access_modes: accessModes || capabilityLabel('none'),
+    security_levels: securityLevels || capabilityLabel('none'),
+    max_workspaces: limits.max_workspaces == null ? capabilityLabel('unlimited') : String(limits.max_workspaces),
+    max_users: limits.max_users_per_workspace == null ? capabilityLabel('unlimited') : String(limits.max_users_per_workspace),
+    max_agents: limits.max_agents_per_workspace == null ? capabilityLabel('unlimited') : String(limits.max_agents_per_workspace),
+  });
+}
+
 function populateProfile(session) {
   if (!session || !session.user) {
     return;
@@ -101,6 +129,18 @@ async function loadProfile() {
   populateProfile(settingsSession);
 }
 
+async function loadCapabilities() {
+  if (!window.CrankApi || typeof window.CrankApi.getCapabilities !== 'function') {
+    return;
+  }
+
+  try {
+    settingsCapabilities = await window.CrankApi.getCapabilities();
+    populateCapabilities(settingsCapabilities);
+  } catch (_error) {
+  }
+}
+
 function bindProfileSave() {
   var button = document.getElementById('settings-profile-save-btn');
   if (!button || button.dataset.bound === 'true') {
@@ -330,6 +370,7 @@ document.addEventListener('DOMContentLoaded', function () {
   injectLanguageSwitcher();
   bindSectionNavigation();
   loadProfile();
+  loadCapabilities();
   bindProfileSave();
   bindPasswordSave();
   loadWorkspaceSettings();