feat(server): export title and summary on doc resolver (#13139)

close AF-2732






#### PR Dependency Tree


* **PR #13139** 👈

This tree was auto-generated by
[Charcoal](https://github.com/danerwilliams/charcoal)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **New Features**
* Added support for a document summary field, allowing documents to
include and display an optional summary alongside the title.

* **Bug Fixes**
* Improved access control when retrieving documents, ensuring proper
permission checks are enforced.

* **Tests**
* Expanded test coverage to verify correct handling of document title
and summary fields, including cases where the summary is absent.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->

packages/backend/server/src/core/workspaces/resolvers/doc.ts

@@ -79,6 +79,9 @@ class DocType {
 
   @Field(() => String, { nullable: true })
   title?: string | null;
+
+  @Field(() => String, { nullable: true })
+  summary?: string | null;
 }
 
 @InputType()
@@ -250,10 +253,11 @@ export class WorkspaceDocResolver {
     deprecationReason: 'use [WorkspaceType.doc] instead',
   })
   async publicPage(
+    @CurrentUser() me: CurrentUser,
     @Parent() workspace: WorkspaceType,
     @Args('pageId') pageId: string
   ) {
-    return this.doc(workspace, pageId);
+    return this.doc(me, workspace, pageId);
   }
 
   @ResolveField(() => PaginatedDocType)
@@ -294,11 +298,14 @@ export class WorkspaceDocResolver {
     complexity: 2,
   })
   async doc(
+    @CurrentUser() me: CurrentUser,
     @Parent() workspace: WorkspaceType,
     @Args('docId') docId: string
   ): Promise<DocType> {
     const doc = await this.models.doc.getDocInfo(workspace.id, docId);
     if (doc) {
+      // check if doc is readable
+      await this.ac.user(me.id).doc(workspace.id, docId).assert('Doc.Read');
       return doc;
     }