fix(rest): ADR-0046 — /meta/doc list omits content by default (#1790)

The runtime dispatcher's /metadata/doc route already slims doc list
responses (#1789), but the console reads the REST server's /meta/:type
route, which still returned full bodies. Apply the same rule here:
list responses carry name + label only, ?include=content opts back in,
and GET /meta/doc/:name always returns the full body.

Found during live verification of the console /docs/:name route — the
list endpoint is the path that must stay content-free because manuals
are the one metadata payload that grows unbounded.

Co-authored-by: Jack Zhuang <277994282+os-zhuang@users.noreply.github.com>
Co-authored-by: Claude Fable 5 <noreply@anthropic.com>

Author: 3 people

.changeset/adr-0046-rest-doc-list-slim.md

@@ -0,0 +1,5 @@
+---
+"@objectstack/rest": patch
+---
+
+ADR-0046: `GET /meta/doc` list responses omit `content` by default (`?include=content` opts back in; `GET /meta/doc/:name` always returns the full body). The runtime dispatcher's `/metadata/doc` route already slims docs (#1789) — this applies the same rule on the REST `/meta/:type` route the console actually reads, keeping unbounded manuals off the list surface.

packages/rest/src/rest-server.ts

@@ -1832,6 +1832,29 @@ export class RestServer {
                             }
                         }
 
+                        // ADR-0046: `doc` list responses omit `content` by
+                        // default — manuals are the one metadata payload that
+                        // grows unbounded, and the list surface only needs
+                        // name + label. `?include=content` opts back in; the
+                        // single-item GET /meta/doc/:name always returns the
+                        // full body.
+                        if (req.params.type === 'doc' && req.query?.include !== 'content') {
+                            const raw = visible as unknown;
+                            const list: any[] | null = Array.isArray(raw)
+                                ? (raw as any[])
+                                : (raw && typeof raw === 'object' && Array.isArray((raw as any).items))
+                                    ? ((raw as any).items as any[])
+                                    : null;
+                            if (list) {
+                                const slim = list.map((it: any) => {
+                                    if (!it || typeof it !== 'object') return it;
+                                    const { content: _content, ...rest } = it;
+                                    return rest;
+                                });
+                                visible = Array.isArray(raw) ? slim : { ...(raw as any), items: slim };
+                            }
+                        }
+
                         const translated = await this.translateMetaItems(req, req.params.type, environmentId, visible);
                         res.header('Vary', 'Accept-Language');
                         res.json(translated);