Add EXTRACTIONS_LOCKED flag to disable manual extractions

When ENV["EXTRACTIONS_LOCKED"] is set, the manual extraction endpoint
returns 403 and the Extract button in the UI is rendered as disabled
(with a tooltip and a muted hint on the ingestion page). Intended for
public demos where we don't want visitors to trigger LLM calls.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: pjurewicz

app/assets/stylesheets/application.css

@@ -903,6 +903,20 @@ a:hover { color: var(--accent-hover); }
   background: var(--accent-hover);
 }
 
+.btn-sm:disabled,
+.btn-sm[disabled] {
+  background: var(--surface-hover);
+  color: var(--text-muted);
+  cursor: not-allowed;
+  opacity: 0.7;
+}
+
+.model-select:disabled,
+.model-select[disabled] {
+  opacity: 0.6;
+  cursor: not-allowed;
+}
+
 .content-search-bar {
   display: flex;
   align-items: center;

app/controllers/ingestions_controller.rb

@@ -1,4 +1,6 @@
 class IngestionsController < ApplicationController
+  before_action :reject_if_extractions_locked, only: :extract
+
   def index
     @ingestions = Ingestion.order(created_at: :desc)
   end
@@ -37,4 +39,16 @@ def extract
       format.html { redirect_to ingestion_path(ingestion), alert: alert_message }
     end
   end
+
+  private
+
+  def reject_if_extractions_locked
+    return unless ENV["EXTRACTIONS_LOCKED"].present?
+
+    alert_message = "Manual extractions are temporarily disabled."
+    respond_to do |format|
+      format.turbo_stream { render turbo_stream: turbo_stream.update("flash", partial: "shared/flash", locals: { alert: alert_message }), status: :forbidden }
+      format.html { redirect_to ingestion_path(params[:id]), alert: alert_message }
+    end
+  end
 end

app/helpers/application_helper.rb

@@ -1,4 +1,8 @@
 module ApplicationHelper
+  def extractions_locked?
+    ENV["EXTRACTIONS_LOCKED"].present?
+  end
+
   def extraction_cost(extraction)
     return nil unless extraction.model_id
 

app/views/ingestions/index.html.erb

@@ -25,8 +25,8 @@
             <span id="ingestion-actions-<%= ing.id %>">
               <% unless status.in?(%w[queued requeued extracting]) %>
                 <%= form_with url: extract_ingestion_path(ing), method: :post, class: "reextract-form" do |f| %>
-                  <%= f.select :model_id, ExtractionPrompt::AVAILABLE_MODELS, {}, class: "model-select" %>
-                  <%= f.submit "Extract", class: "btn btn-sm" %>
+                  <%= f.select :model_id, ExtractionPrompt::AVAILABLE_MODELS, {}, class: "model-select", disabled: extractions_locked? %>
+                  <%= f.submit "Extract", class: "btn btn-sm", disabled: extractions_locked?, title: extractions_locked? ? "Manual extractions are temporarily disabled" : nil %>
                 <% end %>
               <% end %>
             </span>

app/views/ingestions/show.html.erb

@@ -33,8 +33,11 @@
   <% unless @ingestion.status.in?(%w[queued requeued extracting]) %>
     <div style="margin-top: 1.5rem;">
       <%= form_with url: extract_ingestion_path(@ingestion), method: :post, class: "reextract-form" do |f| %>
-        <%= f.select :model_id, ExtractionPrompt::AVAILABLE_MODELS, {}, class: "model-select" %>
-        <%= f.submit "Extract", class: "btn btn-sm" %>
+        <%= f.select :model_id, ExtractionPrompt::AVAILABLE_MODELS, {}, class: "model-select", disabled: extractions_locked? %>
+        <%= f.submit "Extract", class: "btn btn-sm", disabled: extractions_locked?, title: extractions_locked? ? "Manual extractions are temporarily disabled" : nil %>
+      <% end %>
+      <% if extractions_locked? %>
+        <div class="text-muted" style="font-size: 0.75rem; margin-top: 0.4rem;">Manual extractions are temporarily disabled.</div>
       <% end %>
     </div>
   <% end %>