feat(api): add GET /api/capabilities to expose myopencre feature flag

MyOpenCRE was fully built but invisible because the frontend
useCapabilities hook calls /api/capabilities, which didn't exist —
the 404 resolved myopencre:false everywhere. Adds the route returning
{myopencre: <bool>} driven by the deployment flag, lighting up the
nav link and /myopencre route.

Author: skypank-coder

application/feature_flags.py

@@ -16,3 +16,7 @@ def is_cre_import_allowed() -> bool:
 
 def is_health_endpoint_enabled() -> bool:
     return os.getenv("CRE_ENABLE_HEALTH", "").strip().lower() in TRUE_VALUES
+
+
+def is_myopencre_enabled() -> bool:
+    return os.getenv("CRE_ENABLE_MYOPENCRE", "").strip().lower() in TRUE_VALUES

application/tests/web_main_test.py

@@ -1525,3 +1525,31 @@ def test_health_db_unreachable_returns_503(self) -> None:
                     self.assertFalse(body["db_reachable"])
         finally:
             os.environ.pop("CRE_ENABLE_HEALTH", None)
+
+    def test_capabilities_endpoint_returns_myopencre_key(self) -> None:
+        os.environ.pop("CRE_ENABLE_MYOPENCRE", None)
+        with self.app.test_client() as client:
+            response = client.get("/api/capabilities")
+            self.assertEqual(200, response.status_code)
+            body = json.loads(response.data.decode())
+            self.assertIn("myopencre", body)
+            self.assertIsInstance(body["myopencre"], bool)
+
+    def test_capabilities_myopencre_false_by_default(self) -> None:
+        os.environ.pop("CRE_ENABLE_MYOPENCRE", None)
+        with self.app.test_client() as client:
+            response = client.get("/api/capabilities")
+            self.assertEqual(200, response.status_code)
+            body = json.loads(response.data.decode())
+            self.assertFalse(body["myopencre"])
+
+    def test_capabilities_myopencre_true_when_flag_set(self) -> None:
+        os.environ["CRE_ENABLE_MYOPENCRE"] = "1"
+        try:
+            with self.app.test_client() as client:
+                response = client.get("/api/capabilities")
+                self.assertEqual(200, response.status_code)
+                body = json.loads(response.data.decode())
+                self.assertTrue(body["myopencre"])
+        finally:
+            os.environ.pop("CRE_ENABLE_MYOPENCRE", None)

application/web/web_main.py

@@ -22,7 +22,11 @@
 from application.cmd import cre_main
 from application.defs import cre_defs as defs
 from application.defs import cre_exceptions
-from application.feature_flags import is_cre_import_allowed, is_health_endpoint_enabled
+from application.feature_flags import (
+    is_cre_import_allowed,
+    is_health_endpoint_enabled,
+    is_myopencre_enabled,
+)
 
 from application.utils import spreadsheet as sheet_utils
 from application.utils import mdutils, redirectors, gap_analysis
@@ -1196,6 +1200,11 @@ def get_config() -> Any:
     return jsonify({"CRE_ALLOW_IMPORT": is_cre_import_allowed()})
 
 
+@app.route("/api/capabilities", methods=["GET"])
+def get_capabilities() -> Any:
+    return jsonify({"myopencre": is_myopencre_enabled()})
+
+
 @app.route("/admin/imports/rerun", methods=["POST"])
 @login_required
 @admin_imports_enabled_required