feat(server): stop embedding in doc embedding disabled workspace (#11761)

fix AI-33

packages/backend/server/src/base/error/def.ts

@@ -701,6 +701,10 @@ export const USER_FRIENDLY_ERRORS = {
     message: ({ contextId, content, message }) =>
       `Failed to match context ${contextId} with "${escape(content)}": ${message}`,
   },
+  copilot_embedding_disabled: {
+    type: 'action_forbidden',
+    message: `Embedding feature is disabled, please contact the administrator to enable it in the workspace settings.`,
+  },
   copilot_embedding_unavailable: {
     type: 'action_forbidden',
     message: `Embedding feature not available, you may need to install pgvector extension to your database`,

packages/backend/server/src/base/error/errors.gen.ts

@@ -759,6 +759,12 @@ export class CopilotFailedToMatchContext extends UserFriendlyError {
   }
 }
 
+export class CopilotEmbeddingDisabled extends UserFriendlyError {
+  constructor(message?: string) {
+    super('action_forbidden', 'copilot_embedding_disabled', message);
+  }
+}
+
 export class CopilotEmbeddingUnavailable extends UserFriendlyError {
   constructor(message?: string) {
     super('action_forbidden', 'copilot_embedding_unavailable', message);
@@ -1037,6 +1043,7 @@ export enum ErrorNames {
   COPILOT_CONTEXT_FILE_NOT_SUPPORTED,
   COPILOT_FAILED_TO_MODIFY_CONTEXT,
   COPILOT_FAILED_TO_MATCH_CONTEXT,
+  COPILOT_EMBEDDING_DISABLED,
   COPILOT_EMBEDDING_UNAVAILABLE,
   COPILOT_TRANSCRIPTION_JOB_EXISTS,
   COPILOT_TRANSCRIPTION_JOB_NOT_FOUND,

packages/backend/server/src/plugins/copilot/context/job.ts

@@ -77,6 +77,12 @@ export class CopilotContextDocJob {
     contextId?: string
   ) {
     if (!this.supportEmbedding) return;
+    const allowEmbedding = await this.models.workspace.allowEmbedding(
+      docs[0]?.workspaceId
+    );
+    if (!allowEmbedding) {
+      return;
+    }
 
     for (const { workspaceId, docId } of docs) {
       await this.queue.add('copilot.embedding.docs', {

packages/backend/server/src/plugins/copilot/context/resolver.ts

@@ -21,6 +21,7 @@ import GraphQLUpload from 'graphql-upload/GraphQLUpload.mjs';
 import {
   BlobQuotaExceeded,
   CallMetric,
+  CopilotEmbeddingDisabled,
   CopilotEmbeddingUnavailable,
   CopilotFailedToMatchContext,
   CopilotFailedToModifyContext,
@@ -231,6 +232,7 @@ export class CopilotContextRootResolver {
     private readonly db: PrismaClient,
     private readonly ac: AccessController,
     private readonly event: EventBus,
+    private readonly models: Models,
     private readonly mutex: RequestMutex,
     private readonly chatSession: ChatSessionService,
     private readonly context: CopilotContextService
@@ -346,7 +348,10 @@ export class CopilotContextRootResolver {
       .allowLocal()
       .assert('Workspace.Copilot');
 
-    if (this.context.canEmbedding) {
+    if (
+      this.context.canEmbedding &&
+      (await this.models.workspace.allowEmbedding(workspaceId))
+    ) {
       const total = await this.db.snapshot.count({ where: { workspaceId } });
       const embedded = await this.db.snapshot.count({
         where: { workspaceId, embedding: { isNot: null } },
@@ -452,6 +457,13 @@ export class CopilotContextResolver {
     }
     const session = await this.context.get(options.contextId);
 
+    const allowEmbedding = await this.models.workspace.allowEmbedding(
+      session.workspaceId
+    );
+    if (!allowEmbedding) {
+      throw new CopilotEmbeddingDisabled();
+    }
+
     try {
       const records = await session.addCategoryRecord(
         options.type,
@@ -521,6 +533,13 @@ export class CopilotContextResolver {
     }
     const session = await this.context.get(options.contextId);
 
+    const allowEmbedding = await this.models.workspace.allowEmbedding(
+      session.workspaceId
+    );
+    if (!allowEmbedding) {
+      throw new CopilotEmbeddingDisabled();
+    }
+
     try {
       const record = await session.addDocRecord(options.docId);
 
@@ -714,6 +733,12 @@ export class CopilotContextResolver {
       .workspace(session.workspaceId)
       .allowLocal()
       .assert('Workspace.Copilot');
+    const allowEmbedding = await this.models.workspace.allowEmbedding(
+      session.workspaceId
+    );
+    if (!allowEmbedding) {
+      return [];
+    }
 
     try {
       return await session.matchWorkspaceChunks(

packages/backend/server/src/schema.gql

@@ -425,6 +425,7 @@ enum ErrorNames {
   COPILOT_CONTEXT_FILE_NOT_SUPPORTED
   COPILOT_DOCS_NOT_FOUND
   COPILOT_DOC_NOT_FOUND
+  COPILOT_EMBEDDING_DISABLED
   COPILOT_EMBEDDING_UNAVAILABLE
   COPILOT_FAILED_TO_CREATE_MESSAGE
   COPILOT_FAILED_TO_GENERATE_TEXT