add possibility to disable delete and upload of books

frontend/.env.example

@@ -5,3 +5,9 @@ VITE_API_URL=/api/v1
 
 # Shared password for HTTP Basic auth (must match APP_PASSWORD on the backend).
 VITE_APP_PASSWORD=changeme
+
+# Set to 'false' to hide the upload UI (frontend). Also set UPLOAD_ENABLED=false on the backend to block the endpoint.
+VITE_UPLOAD_ENABLED=true
+
+# Set to 'false' to hide the delete button (frontend). Also set DELETE_ENABLED=false on the backend to block the endpoint.
+VITE_DELETE_ENABLED=true

frontend/src/components/BookCard.vue

@@ -41,6 +41,7 @@
         Read
       </router-link>
       <button
+        v-if="deleteEnabled"
         class="btn btn-danger"
         :disabled="book.status === 'PROCESSING' || deleting"
         @click="$emit('delete', book.id)"
@@ -59,6 +60,7 @@ import type { Book } from '@/stores/bookStore'
 const props = defineProps<{
   book: Book
   deleting?: boolean
+  deleteEnabled?: boolean
 }>()
 
 defineEmits<{

frontend/src/env.d.ts

@@ -3,6 +3,8 @@
 interface ImportMetaEnv {
   readonly VITE_API_URL: string
   readonly VITE_APP_PASSWORD: string
+  readonly VITE_UPLOAD_ENABLED: string
+  readonly VITE_DELETE_ENABLED: string
 }
 
 interface ImportMeta {

frontend/src/views/UploadView.vue

@@ -1,10 +1,10 @@
 <template>
   <div class="upload-view">
     <h1 class="page-title">Book Library</h1>
-    <p class="page-subtitle">Upload medical textbooks (PDF) to build the knowledge base.</p>
+    <p v-if="uploadEnabled" class="page-subtitle">Upload medical textbooks (PDF) to build the knowledge base.</p>
 
     <!-- Upload Section -->
-    <div class="upload-section card">
+    <div v-if="uploadEnabled" class="upload-section card">
       <h2 class="section-title">Upload a Book</h2>
 
       <div
@@ -87,6 +87,7 @@
           :key="book.id"
           :book="book"
           :deleting="deletingId === book.id"
+          :delete-enabled="deleteEnabled"
           @delete="handleDelete"
         />
       </div>
@@ -99,6 +100,9 @@ import { ref, onMounted, onUnmounted, inject } from 'vue'
 import { useBookStore } from '@/stores/bookStore'
 import BookCard from '@/components/BookCard.vue'
 
+const uploadEnabled = import.meta.env.VITE_UPLOAD_ENABLED !== 'false'
+const deleteEnabled = import.meta.env.VITE_DELETE_ENABLED !== 'false'
+
 const bookStore = useBookStore()
 const showToast = inject<(msg: string, type?: 'error' | 'success') => void>('showToast')