fix: move ai-enabled endpoint before {upload_id} routes

The /upload/ai-enabled route was defined after /upload/{upload_id},
causing "ai-enabled" to be treated as an upload_id (400 error).

Also simplify ECS button text when AI is enabled to reduce confusion.

Author: TerrifiedBug

backend/app/routers/upload.py

@@ -263,6 +263,12 @@ async def list_ecs_fields(user: dict = Depends(require_auth)):
     return {"fields": get_all_ecs_fields()}
 
 
+@router.get("/upload/ai-enabled")
+async def check_ai_enabled():
+    """Check if AI-assisted mappings are enabled."""
+    return {"enabled": is_ai_enabled()}
+
+
 @router.get("/upload/{upload_id}", response_model=UploadResponse)
 async def get_upload(
     upload_id: str,
@@ -433,12 +439,6 @@ async def suggest_ecs_fields(upload_id: str):
     }
 
 
-@router.get("/upload/ai-enabled")
-async def check_ai_enabled():
-    """Check if AI-assisted mappings are enabled."""
-    return {"enabled": is_ai_enabled()}
-
-
 @router.post("/upload/{upload_id}/suggest-ecs-ai")
 async def suggest_ecs_mappings_ai(
     upload_id: str,

frontend/src/components/Configure.tsx

@@ -913,7 +913,7 @@ export function Configure({ data, onBack, onComplete, onReset }: ConfigureProps)
               disabled={Object.keys(ecsSuggestions).length === 0 || isIngesting}
               className="px-3 py-1.5 text-sm font-medium text-indigo-600 dark:text-indigo-400 border border-indigo-300 dark:border-indigo-600 rounded-md hover:bg-indigo-50 dark:hover:bg-indigo-900/20 disabled:opacity-50 disabled:cursor-not-allowed"
             >
-              Apply ECS Mapping ({Object.keys(ecsSuggestions).length})
+              {aiEnabled ? 'Auto ECS' : `Apply ECS Mapping (${Object.keys(ecsSuggestions).length})`}
             </button>
           </div>
         </div>