Summary

Adds a client-side lockout for long-running report request buttons. When a user fires a report, the button stays disabled for report_lockout_minutes (configured per site under app_settings: in global.yml, set to 90). Lockout is keyed by user id and report type in localStorage so it survives page reloads.
Wraps the trigger in a confirmation modal: "this report can take up to 2 hours to run, do you wish to proceed?" → on OK, swaps the modal body to "you'll receive it by email; the button is now disabled for the next N minutes."
Hover on the locked button shows the local-time expiry ("Available again at 1:33 PM") via a jQuery UI tooltip.
Wired into the three Inventory CSV buttons on the offerings index (Inventory CSV, Inventory Location CSV, Research Locations CSV). Other long-running reports (admin V1Billing / Order, owner-group / billing / invoice downloads) are out of scope for this PR; the helper is reusable from any view via Sidekick.Lib.ReportLockout.

Linear SD-596

Test plan

Modal renders with the warning copy on click

- [x] Cancel dismisses without firing the request - [x] OK fires the AJAX, swaps modal body to the success message with the configured minutes value, and locks the button

- [x] Locked button shows "Requested! Check email." in green and is disabled

- [x] Lockout survives a full page reload (re-applied on render) - [x] Hovering the locked button shows the local-time expiry

- [x] Other report buttons on the same page lock independently - [x] Lockout auto-clears when the timer expires - [x] Locking immediately on OK (rather than after AJAX returns) closes the duplicate-submission window if the modal is dismissed mid-flight - [x] Multi-tab race: a stale modal in tab A no-ops cleanly when tab B already locked

🤖 Generated with Claude Code

Note

Medium Risk
Changes the UX and client-side state for requesting inventory-related CSV reports, which could inadvertently block legitimate requests if the lockout logic or settings are misconfigured. No backend/report-generation logic is changed; risk is primarily around front-end behavior across tabs/reloads.

Overview
Adds a client-side lockout + confirmation flow for long-running inventory report requests on the offerings index: clicking a report button now shows a confirm modal, submits the request, and then disables/stylizes the button until a per-site timeout expires (persisted in localStorage by user + report type, with tooltip showing local-time expiry).

Refactors Offerings collection report methods to return the jqXHR directly (simpler signatures + JSON responses) so the view can manage modal/lockout state, and exposes report_lockout_minutes via Sidekick.settings.reportLockoutMinutes (configured to 90 for lmca and lmny).

^{Reviewed by Cursor Bugbot for commit a147cda. Bugbot is set up for automated code reviews on this repo. Configure here.}

Open Pull Requests

14

3