@open-mercato/core 0.7.1-develop.7193.1.910a5b0a1e → 0.7.1-develop.7195.1.b5efd1d51a

package/dist/modules/workflows/api/tasks/[id]/reassign/route.js

@@ -0,0 +1,150 @@
+import { NextResponse } from "next/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { enforceCommandOptimisticLock } from "@open-mercato/shared/lib/crud/optimistic-lock-command";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { gateTaskAction } from "../../../../lib/task-visibility-request.js";
+import { reassignUserTaskSchema } from "../../../../data/validators.js";
+import { serializeUserTask } from "../../serialize.js";
+import {
+  workflowsTag,
+  userTaskReassignResponseSchema,
+  workflowErrorSchema
+} from "../../../openapi.js";
+const logger = createLogger("workflows");
+const REASSIGN_RESOURCE_KIND = "workflows.user_task";
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["workflows.tasks.reassign"]
+};
+async function POST(request, { params }) {
+  try {
+    const container = await createRequestContainer();
+    const em = container.resolve("em");
+    const auth = await getAuthFromRequest(request);
+    if (!auth) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
+    const tenantId = auth.tenantId;
+    const organizationId = scope?.selectedId ?? auth.orgId;
+    if (!tenantId || !organizationId) {
+      return NextResponse.json(
+        { error: "Missing tenant or organization context" },
+        { status: 400 }
+      );
+    }
+    let payload;
+    try {
+      payload = await request.json();
+    } catch {
+      payload = {};
+    }
+    const parsed = reassignUserTaskSchema.safeParse(payload);
+    if (!parsed.success) {
+      return NextResponse.json(
+        { error: "Invalid request body", details: parsed.error.issues },
+        { status: 400 }
+      );
+    }
+    const gate = await gateTaskAction({
+      container,
+      em,
+      auth: { userId: auth.sub, tenantId, roleNames: auth.roles ?? [] },
+      taskId: params.id,
+      organizationId
+    });
+    if (!gate.allowed) {
+      return NextResponse.json(gate.refusal.body, { status: gate.refusal.status });
+    }
+    enforceCommandOptimisticLock({
+      resourceKind: REASSIGN_RESOURCE_KIND,
+      resourceId: gate.task.id,
+      current: gate.task.updatedAt,
+      request
+    });
+    const taskHandler = container.resolve("taskHandler");
+    const task = await taskHandler.reassignUserTask(em, {
+      taskId: params.id,
+      userId: auth.sub,
+      target: {
+        assignedTo: parsed.data.assignedTo,
+        assignedToRoles: parsed.data.assignedToRoles
+      },
+      reason: parsed.data.reason,
+      scope: { tenantId, organizationId }
+    });
+    return NextResponse.json({
+      data: serializeUserTask(task),
+      message: "Task reassigned successfully"
+    });
+  } catch (error) {
+    if (isCrudHttpError(error)) {
+      return NextResponse.json(error.body, { status: error.status });
+    }
+    const code = error?.code;
+    if (code === "TASK_NOT_FOUND") {
+      return NextResponse.json({ error: error.message }, { status: 404 });
+    }
+    if (code === "TASK_NOT_REASSIGNABLE") {
+      return NextResponse.json(
+        { error: error.message, code: "TASK_NOT_REASSIGNABLE" },
+        { status: 409 }
+      );
+    }
+    logger.error("Error reassigning user task", { err: error });
+    return NextResponse.json(
+      {
+        error: "Failed to reassign user task",
+        details: error instanceof Error ? error.message : String(error)
+      },
+      { status: 500 }
+    );
+  }
+}
+const openApi = {
+  tag: workflowsTag,
+  summary: "Reassign user task",
+  methods: {
+    POST: {
+      summary: "Move a task to another assignee or role queue",
+      description: "Records who moved the task, when, and why (`reassignedBy` / `reassignedAt` / `reassignReason`) and logs a `USER_TASK_REASSIGNED` workflow event. Requires `workflows.tasks.reassign`. An in-flight claim is released and an IN_PROGRESS task returns to PENDING; the status vocabulary is unchanged. Honours the optimistic-lock header `x-om-ext-optimistic-lock-expected-updated-at`.",
+      requestBody: { schema: reassignUserTaskSchema },
+      responses: [
+        {
+          status: 200,
+          description: "Task reassigned successfully",
+          schema: userTaskReassignResponseSchema
+        }
+      ],
+      errors: [
+        {
+          status: 400,
+          description: "Missing tenant/organization context, or a body naming neither an assignee nor a role queue",
+          schema: workflowErrorSchema
+        },
+        { status: 401, description: "Unauthorized", schema: workflowErrorSchema },
+        {
+          status: 403,
+          description: "Visible to the caller but refused by the entity gate, with the blocking entity type named",
+          schema: workflowErrorSchema
+        },
+        { status: 404, description: "Task not found, or not visible to the caller", schema: workflowErrorSchema },
+        {
+          status: 409,
+          description: "Task is in a terminal status, or the record changed since it was loaded (optimistic lock)",
+          schema: workflowErrorSchema
+        },
+        { status: 500, description: "Internal server error", schema: workflowErrorSchema }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/tasks/[id]/reassign/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/workflows/api/tasks/%5Bid%5D/reassign/route.ts"],
+  "sourcesContent": ["/**\n * User Task Reassignment API\n *\n * Endpoints:\n * - POST /api/workflows/tasks/[id]/reassign - Move a task to another assignee or role queue\n *\n * This is the act half of \u00A76.4's central asymmetry. `workflows.tasks.view_all`\n * lets an administrator SEE a colleague's task and never lets them finish it, so\n * the sanctioned path to acting on somebody else's work is to take it first \u2014\n * here \u2014 and the taking is permanently recorded on the audit columns plus a\n * `WorkflowEvent`.\n *\n * It is also the documented remedy for the one shape the model leaves\n * uncompletable: a task with no assignee, no claim and no role queue belongs to\n * nobody, so the act routes answer `TASK_NOT_ACTIONABLE` and name this endpoint.\n * The gate below therefore checks VISIBILITY, never ownership \u2014 requiring\n * ownership would make the unrescuable task unrescuable by definition.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { enforceCommandOptimisticLock } from '@open-mercato/shared/lib/crud/optimistic-lock-command'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { TaskHandlerService } from '../../../../lib/task-handler'\nimport { gateTaskAction } from '../../../../lib/task-visibility-request'\nimport { reassignUserTaskSchema } from '../../../../data/validators'\nimport { serializeUserTask } from '../../serialize'\nimport {\n  workflowsTag,\n  userTaskReassignResponseSchema,\n  workflowErrorSchema,\n} from '../../../openapi'\n\nconst logger = createLogger('workflows')\n\n/**\n * `UserTask` is deliberately absent from the curated optimistic-lock entity\n * list, and `optimistic-lock-ui-coverage.test.ts` only matches `PUT`/`PATCH`/\n * `DELETE`, so nothing enforces the header here automatically. The route honours\n * it explicitly: a client that sends `x-om-ext-optimistic-lock-expected-updated-at`\n * gets the same structured 409 every CRUD surface returns, and one that does not\n * is unaffected (the helper is a no-op without the header).\n */\nconst REASSIGN_RESOURCE_KIND = 'workflows.user_task'\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.tasks.reassign'],\n}\n\nexport async function POST(\n  request: NextRequest,\n  { params }: { params: { id: string } },\n) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 },\n      )\n    }\n\n    let payload: unknown\n    try {\n      payload = await request.json()\n    } catch {\n      payload = {}\n    }\n\n    const parsed = reassignUserTaskSchema.safeParse(payload)\n    if (!parsed.success) {\n      return NextResponse.json(\n        { error: 'Invalid request body', details: parsed.error.issues },\n        { status: 400 },\n      )\n    }\n\n    // Visibility only \u2014 see the file header. A `workflows.tasks.reassign` holder\n    // depends on `workflows.tasks.view_all`, so an administrator reaches every\n    // row in scope, including the ownerless one this endpoint exists to rescue.\n    const gate = await gateTaskAction({\n      container,\n      em,\n      auth: { userId: auth.sub, tenantId, roleNames: auth.roles ?? [] },\n      taskId: params.id,\n      organizationId,\n    })\n\n    if (!gate.allowed) {\n      return NextResponse.json(gate.refusal.body, { status: gate.refusal.status })\n    }\n\n    enforceCommandOptimisticLock({\n      resourceKind: REASSIGN_RESOURCE_KIND,\n      resourceId: gate.task.id,\n      current: gate.task.updatedAt,\n      request,\n    })\n\n    const taskHandler = container.resolve<TaskHandlerService>('taskHandler')\n    const task = await taskHandler.reassignUserTask(em, {\n      taskId: params.id,\n      userId: auth.sub,\n      target: {\n        assignedTo: parsed.data.assignedTo,\n        assignedToRoles: parsed.data.assignedToRoles,\n      },\n      reason: parsed.data.reason,\n      scope: { tenantId, organizationId },\n    })\n\n    return NextResponse.json({\n      data: serializeUserTask(task),\n      message: 'Task reassigned successfully',\n    })\n  } catch (error) {\n    if (isCrudHttpError(error)) {\n      return NextResponse.json(error.body, { status: error.status })\n    }\n\n    const code = (error as { code?: unknown } | null)?.code\n    if (code === 'TASK_NOT_FOUND') {\n      return NextResponse.json({ error: (error as Error).message }, { status: 404 })\n    }\n    if (code === 'TASK_NOT_REASSIGNABLE') {\n      return NextResponse.json(\n        { error: (error as Error).message, code: 'TASK_NOT_REASSIGNABLE' },\n        { status: 409 },\n      )\n    }\n\n    logger.error('Error reassigning user task', { err: error })\n    return NextResponse.json(\n      {\n        error: 'Failed to reassign user task',\n        details: error instanceof Error ? error.message : String(error),\n      },\n      { status: 500 },\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Reassign user task',\n  methods: {\n    POST: {\n      summary: 'Move a task to another assignee or role queue',\n      description:\n        'Records who moved the task, when, and why (`reassignedBy` / `reassignedAt` / `reassignReason`) and logs a `USER_TASK_REASSIGNED` workflow event. Requires `workflows.tasks.reassign`. An in-flight claim is released and an IN_PROGRESS task returns to PENDING; the status vocabulary is unchanged. Honours the optimistic-lock header `x-om-ext-optimistic-lock-expected-updated-at`.',\n      requestBody: { schema: reassignUserTaskSchema },\n      responses: [\n        {\n          status: 200,\n          description: 'Task reassigned successfully',\n          schema: userTaskReassignResponseSchema,\n        },\n      ],\n      errors: [\n        {\n          status: 400,\n          description: 'Missing tenant/organization context, or a body naming neither an assignee nor a role queue',\n          schema: workflowErrorSchema,\n        },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        {\n          status: 403,\n          description: 'Visible to the caller but refused by the entity gate, with the blocking entity type named',\n          schema: workflowErrorSchema,\n        },\n        { status: 404, description: 'Task not found, or not visible to the caller', schema: workflowErrorSchema },\n        {\n          status: 409,\n          description: 'Task is in a terminal status, or the record changed since it was loaded (optimistic lock)',\n          schema: workflowErrorSchema,\n        },\n        { status: 500, description: 'Internal server error', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAmBA,SAAsB,oBAAoB;AAE1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,uBAAuB;AAChC,SAAS,oCAAoC;AAC7C,SAAS,oBAAoB;AAE7B,SAAS,sBAAsB;AAC/B,SAAS,8BAA8B;AACvC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW;AAUvC,MAAM,yBAAyB;AAExB,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,0BAA0B;AAC9C;AAEA,eAAsB,KACpB,SACA,EAAE,OAAO,GACT;AACA,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI;AACJ,QAAI;AACF,gBAAU,MAAM,QAAQ,KAAK;AAAA,IAC/B,QAAQ;AACN,gBAAU,CAAC;AAAA,IACb;AAEA,UAAM,SAAS,uBAAuB,UAAU,OAAO;AACvD,QAAI,CAAC,OAAO,SAAS;AACnB,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,wBAAwB,SAAS,OAAO,MAAM,OAAO;AAAA,QAC9D,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAKA,UAAM,OAAO,MAAM,eAAe;AAAA,MAChC;AAAA,MACA;AAAA,MACA,MAAM,EAAE,QAAQ,KAAK,KAAK,UAAU,WAAW,KAAK,SAAS,CAAC,EAAE;AAAA,MAChE,QAAQ,OAAO;AAAA,MACf;AAAA,IACF,CAAC;AAED,QAAI,CAAC,KAAK,SAAS;AACjB,aAAO,aAAa,KAAK,KAAK,QAAQ,MAAM,EAAE,QAAQ,KAAK,QAAQ,OAAO,CAAC;AAAA,IAC7E;AAEA,iCAA6B;AAAA,MAC3B,cAAc;AAAA,MACd,YAAY,KAAK,KAAK;AAAA,MACtB,SAAS,KAAK,KAAK;AAAA,MACnB;AAAA,IACF,CAAC;AAED,UAAM,cAAc,UAAU,QAA4B,aAAa;AACvE,UAAM,OAAO,MAAM,YAAY,iBAAiB,IAAI;AAAA,MAClD,QAAQ,OAAO;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,QAAQ;AAAA,QACN,YAAY,OAAO,KAAK;AAAA,QACxB,iBAAiB,OAAO,KAAK;AAAA,MAC/B;AAAA,MACA,QAAQ,OAAO,KAAK;AAAA,MACpB,OAAO,EAAE,UAAU,eAAe;AAAA,IACpC,CAAC;AAED,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM,kBAAkB,IAAI;AAAA,MAC5B,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,QAAI,gBAAgB,KAAK,GAAG;AAC1B,aAAO,aAAa,KAAK,MAAM,MAAM,EAAE,QAAQ,MAAM,OAAO,CAAC;AAAA,IAC/D;AAEA,UAAM,OAAQ,OAAqC;AACnD,QAAI,SAAS,kBAAkB;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAQ,MAAgB,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AACA,QAAI,SAAS,yBAAyB;AACpC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAQ,MAAgB,SAAS,MAAM,wBAAwB;AAAA,QACjE,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,MAAM,+BAA+B,EAAE,KAAK,MAAM,CAAC;AAC1D,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO;AAAA,QACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAChE;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,aAAa,EAAE,QAAQ,uBAAuB;AAAA,MAC9C,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,MACF;AAAA,MACA,QAAQ;AAAA,QACN;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gDAAgD,QAAQ,oBAAoB;AAAA,QACxG;AAAA,UACE,QAAQ;AAAA,UACR,aAAa;AAAA,UACb,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/api/tasks/[id]/route.js

@@ -4,12 +4,22 @@ import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
 import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
 import { resolveOrganizationScopeFilter } from "@open-mercato/core/modules/directory/utils/organizationScopeFilter";
 import { UserTask } from "../../../data/entities.js";
+import { serializeUserTask } from "../serialize.js";
+import { loadTaskDecisionContext } from "../../../lib/task-decision-context.js";
 import {
   workflowsTag,
   userTaskDetailResponseSchema,
   workflowErrorSchema
 } from "../../openapi.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
+import {
+  collectTaskEntityTypesFromTasks,
+  decideTaskAccess,
+  resolveTaskAffordancesForRequest,
+  resolveTaskRefusal,
+  resolveTaskVisibilityForRequest,
+  TASK_NOT_FOUND_BODY
+} from "../../../lib/task-visibility-request.js";
 const logger = createLogger("workflows");
 const metadata = {
   requireAuth: true,
@@ -38,13 +48,31 @@ async function GET(request, { params }) {
       ...orgFilter.where
     });
     if (!task) {
-      return NextResponse.json(
-        { error: "Task not found" },
-        { status: 404 }
-      );
+      return NextResponse.json(TASK_NOT_FOUND_BODY, { status: 404 });
+    }
+    const visibility = await resolveTaskVisibilityForRequest({
+      container,
+      em,
+      auth: { userId: auth.sub, tenantId, roleNames: auth.roles ?? [] },
+      organizationIds: orgFilter.organizationIds ?? null,
+      aclOrganizationId: orgFilter.rbacOrganizationId,
+      entityTypes: collectTaskEntityTypesFromTasks([task])
+    });
+    const decision = decideTaskAccess(visibility, task);
+    if (!decision.visible) {
+      const refusal = resolveTaskRefusal(visibility, decision);
+      return NextResponse.json(refusal.body, { status: refusal.status });
     }
+    const { decisions, stepId, formKey } = await loadTaskDecisionContext(em, task);
+    const affordances = resolveTaskAffordancesForRequest(visibility, task, decision);
     return NextResponse.json({
-      data: task
+      data: {
+        ...serializeUserTask(task),
+        stepId,
+        decisions,
+        formKey,
+        ...affordances
+      }
     });
   } catch (error) {
     logger.error("Error fetching user task", { err: error });
@@ -70,7 +98,12 @@ const openApi = {
       errors: [
         { status: 400, description: "Missing tenant or organization context", schema: workflowErrorSchema },
         { status: 401, description: "Unauthorized", schema: workflowErrorSchema },
-        { status: 404, description: "Task not found", schema: workflowErrorSchema },
+        {
+          status: 403,
+          description: "The task is bound to an entity type the caller may not view. Returned only to callers holding workflows.tasks.view_all (or a superadmin), who already see the row in a list view; everyone else receives the generic 404.",
+          schema: workflowErrorSchema
+        },
+        { status: 404, description: "Task not found, or not visible to the caller", schema: workflowErrorSchema },
         { status: 500, description: "Internal server error", schema: workflowErrorSchema }
       ]
     }

package/dist/modules/workflows/api/tasks/[id]/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../../src/modules/workflows/api/tasks/%5Bid%5D/route.ts"],
-  "sourcesContent": ["/**\n * User Task Detail API\n *\n * Endpoints:\n * - GET /api/workflows/tasks/[id] - Get task details\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { UserTask } from '../../../data/entities'\nimport {\n  workflowsTag,\n  userTaskDetailResponseSchema,\n  workflowErrorSchema,\n} from '../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.tasks.view'],\n}\n\n/**\n * GET /api/workflows/tasks/[id]\n *\n * Get user task details by ID\n */\nexport async function GET(\n  request: NextRequest,\n  { params }: { params: { id: string } }\n) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json(\n        { error: 'Missing tenant context' },\n        { status: 400 }\n      )\n    }\n\n    const task = await em.findOne(UserTask, {\n      id: params.id,\n      tenantId,\n      ...orgFilter.where,\n    })\n\n    if (!task) {\n      return NextResponse.json(\n        { error: 'Task not found' },\n        { status: 404 }\n      )\n    }\n\n    return NextResponse.json({\n      data: task,\n    })\n  } catch (error) {\n    logger.error('Error fetching user task', { err: error })\n    return NextResponse.json(\n      {\n        error: 'Failed to fetch user task',\n        details: error instanceof Error ? error.message : String(error),\n      },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'User task detail',\n  methods: {\n    GET: {\n      summary: 'Get task details',\n      description: 'Returns complete details of a user task by ID.',\n      responses: [\n        { status: 200, description: 'User task details', schema: userTaskDetailResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Missing tenant or organization context', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 404, description: 'Task not found', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAOA,SAAsB,oBAAoB;AAG1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,gBAAgB;AACzB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,sBAAsB;AAC1C;AAOA,eAAsB,IACpB,SACA,EAAE,OAAO,GACT;AACA,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yBAAyB;AAAA,QAClC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,GAAG,QAAQ,UAAU;AAAA,MACtC,IAAI,OAAO;AAAA,MACX;AAAA,MACA,GAAG,UAAU;AAAA,IACf,CAAC;AAED,QAAI,CAAC,MAAM;AACT,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,iBAAiB;AAAA,QAC1B,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,IACR,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,4BAA4B,EAAE,KAAK,MAAM,CAAC;AACvD,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO;AAAA,QACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAChE;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,6BAA6B;AAAA,MACxF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0CAA0C,QAAQ,oBAAoB;AAAA,QAClG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,kBAAkB,QAAQ,oBAAoB;AAAA,QAC1E,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * User Task Detail API\n *\n * Endpoints:\n * - GET /api/workflows/tasks/[id] - Get task details\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { z } from 'zod'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { UserTask } from '../../../data/entities'\nimport { serializeUserTask } from '../serialize'\nimport { loadTaskDecisionContext } from '../../../lib/task-decision-context'\nimport {\n  workflowsTag,\n  userTaskDetailResponseSchema,\n  workflowErrorSchema,\n} from '../../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport {\n  collectTaskEntityTypesFromTasks,\n  decideTaskAccess,\n  resolveTaskAffordancesForRequest,\n  resolveTaskRefusal,\n  resolveTaskVisibilityForRequest,\n  TASK_NOT_FOUND_BODY,\n} from '../../../lib/task-visibility-request'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.tasks.view'],\n}\n\n/**\n * GET /api/workflows/tasks/[id]\n *\n * Get user task details by ID\n */\nexport async function GET(\n  request: NextRequest,\n  { params }: { params: { id: string } }\n) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json(\n        { error: 'Missing tenant context' },\n        { status: 400 }\n      )\n    }\n\n    const task = await em.findOne(UserTask, {\n      id: params.id,\n      tenantId,\n      ...orgFilter.where,\n    })\n\n    // A cross-tenant id, an organization the caller cannot see and a random uuid\n    // all land here with the SAME body \u2014 existence must not be disclosed by the\n    // shape of the refusal.\n    if (!task) {\n      return NextResponse.json(TASK_NOT_FOUND_BODY, { status: 404 })\n    }\n\n    const visibility = await resolveTaskVisibilityForRequest({\n      container,\n      em,\n      auth: { userId: auth.sub, tenantId, roleNames: auth.roles ?? [] },\n      organizationIds: orgFilter.organizationIds ?? null,\n      aclOrganizationId: orgFilter.rbacOrganizationId,\n      entityTypes: collectTaskEntityTypesFromTasks([task]),\n    })\n\n    const decision = decideTaskAccess(visibility, task)\n    if (!decision.visible) {\n      // 404 for everyone who has no legitimate knowledge that the row exists;\n      // 403-with-reason only for a caller who already sees it in a list view and\n      // needs to know which binding hid its contents.\n      const refusal = resolveTaskRefusal(visibility, decision)\n      return NextResponse.json(refusal.body, { status: refusal.status })\n    }\n\n    // Decision buttons are DERIVED, never stored: the instance pins its\n    // definition version, so re-resolving here always yields the buttons the\n    // author wrote for this step. A task on a step that authored none gets an\n    // empty list and completes through the plain form exactly as before.\n    const { decisions, stepId, formKey } = await loadTaskDecisionContext(em, task)\n\n    // The predicate already answered \"may this caller act on this row\" above.\n    // Sending it is what stops the page offering a Complete button that 409s for\n    // an administrator, and what lets it name the remedy (reassignment) instead.\n    const affordances = resolveTaskAffordancesForRequest(visibility, task, decision)\n\n    return NextResponse.json({\n      data: {\n        ...serializeUserTask(task),\n        stepId,\n        decisions,\n        formKey,\n        ...affordances,\n      },\n    })\n  } catch (error) {\n    logger.error('Error fetching user task', { err: error })\n    return NextResponse.json(\n      {\n        error: 'Failed to fetch user task',\n        details: error instanceof Error ? error.message : String(error),\n      },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'User task detail',\n  methods: {\n    GET: {\n      summary: 'Get task details',\n      description: 'Returns complete details of a user task by ID.',\n      responses: [\n        { status: 200, description: 'User task details', schema: userTaskDetailResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Missing tenant or organization context', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        {\n          status: 403,\n          description:\n            'The task is bound to an entity type the caller may not view. Returned only to callers holding workflows.tasks.view_all (or a superadmin), who already see the row in a list view; everyone else receives the generic 404.',\n          schema: workflowErrorSchema,\n        },\n        { status: 404, description: 'Task not found, or not visible to the caller', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAOA,SAAsB,oBAAoB;AAG1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,gBAAgB;AACzB,SAAS,yBAAyB;AAClC,SAAS,+BAA+B;AACxC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,sBAAsB;AAC1C;AAOA,eAAsB,IACpB,SACA,EAAE,OAAO,GACT;AACA,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yBAAyB;AAAA,QAClC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,GAAG,QAAQ,UAAU;AAAA,MACtC,IAAI,OAAO;AAAA,MACX;AAAA,MACA,GAAG,UAAU;AAAA,IACf,CAAC;AAKD,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,qBAAqB,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/D;AAEA,UAAM,aAAa,MAAM,gCAAgC;AAAA,MACvD;AAAA,MACA;AAAA,MACA,MAAM,EAAE,QAAQ,KAAK,KAAK,UAAU,WAAW,KAAK,SAAS,CAAC,EAAE;AAAA,MAChE,iBAAiB,UAAU,mBAAmB;AAAA,MAC9C,mBAAmB,UAAU;AAAA,MAC7B,aAAa,gCAAgC,CAAC,IAAI,CAAC;AAAA,IACrD,CAAC;AAED,UAAM,WAAW,iBAAiB,YAAY,IAAI;AAClD,QAAI,CAAC,SAAS,SAAS;AAIrB,YAAM,UAAU,mBAAmB,YAAY,QAAQ;AACvD,aAAO,aAAa,KAAK,QAAQ,MAAM,EAAE,QAAQ,QAAQ,OAAO,CAAC;AAAA,IACnE;AAMA,UAAM,EAAE,WAAW,QAAQ,QAAQ,IAAI,MAAM,wBAAwB,IAAI,IAAI;AAK7E,UAAM,cAAc,iCAAiC,YAAY,MAAM,QAAQ;AAE/E,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,QACJ,GAAG,kBAAkB,IAAI;AAAA,QACzB;AAAA,QACA;AAAA,QACA;AAAA,QACA,GAAG;AAAA,MACL;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,4BAA4B,EAAE,KAAK,MAAM,CAAC;AACvD,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO;AAAA,QACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAChE;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,qBAAqB,QAAQ,6BAA6B;AAAA,MACxF;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0CAA0C,QAAQ,oBAAoB;AAAA,QAClG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE;AAAA,UACE,QAAQ;AAAA,UACR,aACE;AAAA,UACF,QAAQ;AAAA,QACV;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,gDAAgD,QAAQ,oBAAoB;AAAA,QACxG,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/api/tasks/[id]/unclaim/route.js

@@ -0,0 +1,100 @@
+import { NextResponse } from "next/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { resolveOrganizationScopeForRequest } from "@open-mercato/core/modules/directory/utils/organizationScope";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { gateTaskAction } from "../../../../lib/task-visibility-request.js";
+import { serializeUserTask } from "../../serialize.js";
+import { UserTask } from "../../../../data/entities.js";
+import {
+  workflowsTag,
+  userTaskClaimResponseSchema,
+  workflowErrorSchema
+} from "../../../openapi.js";
+const logger = createLogger("workflows");
+const metadata = {
+  requireAuth: true,
+  requireFeatures: ["workflows.tasks.claim"]
+};
+async function POST(request, { params }) {
+  try {
+    const container = await createRequestContainer();
+    const em = container.resolve("em");
+    const auth = await getAuthFromRequest(request);
+    if (!auth) {
+      return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+    }
+    const scope = await resolveOrganizationScopeForRequest({ container, auth, request });
+    const tenantId = auth.tenantId;
+    const organizationId = scope?.selectedId ?? auth.orgId;
+    if (!tenantId || !organizationId) {
+      return NextResponse.json(
+        { error: "Missing tenant or organization context" },
+        { status: 400 }
+      );
+    }
+    const gate = await gateTaskAction({
+      container,
+      em,
+      auth: { userId: auth.sub, tenantId, roleNames: auth.roles ?? [] },
+      taskId: params.id,
+      organizationId
+    });
+    if (!gate.allowed) {
+      return NextResponse.json(gate.refusal.body, { status: gate.refusal.status });
+    }
+    const taskHandler = container.resolve("taskHandler");
+    await taskHandler.releaseUserTask(em, params.id, auth.sub, { tenantId, organizationId });
+    const task = await em.findOne(UserTask, { id: params.id, tenantId, organizationId });
+    if (!task) {
+      return NextResponse.json({ error: "Task not found after release" }, { status: 500 });
+    }
+    return NextResponse.json({
+      data: serializeUserTask(task),
+      message: "Task released successfully"
+    });
+  } catch (error) {
+    logger.error("Error releasing user task", { err: error });
+    const code = error?.code;
+    if (code === "TASK_NOT_FOUND") {
+      return NextResponse.json({ error: error.message }, { status: 404 });
+    }
+    if (code === "TASK_ASSIGNED_TO_ANOTHER_USER") {
+      return NextResponse.json({ error: error.message }, { status: 409 });
+    }
+    return NextResponse.json(
+      {
+        error: "Failed to release user task",
+        details: error instanceof Error ? error.message : String(error)
+      },
+      { status: 500 }
+    );
+  }
+}
+const openApi = {
+  tag: workflowsTag,
+  summary: "Release user task",
+  methods: {
+    POST: {
+      summary: "Release a claimed task back to its role queue",
+      description: "Clears the caller's claim and returns the task to PENDING so another holder of the queued role can pick it up. Refused when the task is claimed by somebody else or is no longer in progress.",
+      responses: [
+        { status: 200, description: "Task released successfully", schema: userTaskClaimResponseSchema }
+      ],
+      errors: [
+        { status: 400, description: "Missing tenant or organization context", schema: workflowErrorSchema },
+        { status: 401, description: "Unauthorized", schema: workflowErrorSchema },
+        { status: 403, description: "The task is visible to the caller but is not theirs to act on \u2014 it has no assignee and no role queue, so it must be reassigned first (\xA76.4: administration widens seeing, never acting).", schema: workflowErrorSchema },
+        { status: 404, description: "Task not found, not visible to the caller, or not claimed", schema: workflowErrorSchema },
+        { status: 409, description: "Task claimed by another user", schema: workflowErrorSchema },
+        { status: 500, description: "Internal server error", schema: workflowErrorSchema }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/workflows/api/tasks/[id]/unclaim/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/workflows/api/tasks/%5Bid%5D/unclaim/route.ts"],
+  "sourcesContent": ["/**\n * User Task Unclaim API\n *\n * Endpoints:\n * - POST /api/workflows/tasks/[id]/unclaim - Release a claimed task back to its\n *   role queue\n *\n * The counterpart of `claim`. New route, so purely additive\n * (BACKWARD_COMPATIBILITY.md \u00A77); gated on the same `workflows.tasks.claim`\n * feature, because releasing your own claim is part of claiming rather than a\n * separate authority.\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/core'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport type { TaskHandlerService } from '../../../../lib/task-handler'\nimport { gateTaskAction } from '../../../../lib/task-visibility-request'\nimport { serializeUserTask } from '../../serialize'\nimport { UserTask } from '../../../../data/entities'\nimport {\n  workflowsTag,\n  userTaskClaimResponseSchema,\n  workflowErrorSchema,\n} from '../../../openapi'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.tasks.claim'],\n}\n\nexport async function POST(\n  request: NextRequest,\n  { params }: { params: { id: string } }\n) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve<EntityManager>('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const organizationId = scope?.selectedId ?? auth.orgId\n\n    if (!tenantId || !organizationId) {\n      return NextResponse.json(\n        { error: 'Missing tenant or organization context' },\n        { status: 400 }\n      )\n    }\n\n    // \u00A76.4 first, so a caller with no relationship to the task cannot tell a\n    // claimed task from a nonexistent one. The handler still enforces that the\n    // caller IS the claimant, with the same compare-and-set.\n    const gate = await gateTaskAction({\n      container,\n      em,\n      auth: { userId: auth.sub, tenantId, roleNames: auth.roles ?? [] },\n      taskId: params.id,\n      organizationId,\n    })\n\n    if (!gate.allowed) {\n      return NextResponse.json(gate.refusal.body, { status: gate.refusal.status })\n    }\n\n    const taskHandler = container.resolve<TaskHandlerService>('taskHandler')\n    await taskHandler.releaseUserTask(em, params.id, auth.sub, { tenantId, organizationId })\n\n    const task = await em.findOne(UserTask, { id: params.id, tenantId, organizationId })\n\n    if (!task) {\n      return NextResponse.json({ error: 'Task not found after release' }, { status: 500 })\n    }\n\n    return NextResponse.json({\n      data: serializeUserTask(task),\n      message: 'Task released successfully',\n    })\n  } catch (error) {\n    logger.error('Error releasing user task', { err: error })\n\n    const code = (error as { code?: unknown } | null)?.code\n    if (code === 'TASK_NOT_FOUND') {\n      return NextResponse.json({ error: (error as Error).message }, { status: 404 })\n    }\n    if (code === 'TASK_ASSIGNED_TO_ANOTHER_USER') {\n      return NextResponse.json({ error: (error as Error).message }, { status: 409 })\n    }\n\n    return NextResponse.json(\n      {\n        error: 'Failed to release user task',\n        details: error instanceof Error ? error.message : String(error),\n      },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'Release user task',\n  methods: {\n    POST: {\n      summary: 'Release a claimed task back to its role queue',\n      description:\n        'Clears the caller\\'s claim and returns the task to PENDING so another holder of the queued role can pick it up. Refused when the task is claimed by somebody else or is no longer in progress.',\n      responses: [\n        { status: 200, description: 'Task released successfully', schema: userTaskClaimResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Missing tenant or organization context', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 403, description: 'The task is visible to the caller but is not theirs to act on \u2014 it has no assignee and no role queue, so it must be reassigned first (\u00A76.4: administration widens seeing, never acting).', schema: workflowErrorSchema },\n        { status: 404, description: 'Task not found, not visible to the caller, or not claimed', schema: workflowErrorSchema },\n        { status: 409, description: 'Task claimed by another user', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAaA,SAAsB,oBAAoB;AAG1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,oBAAoB;AAE7B,SAAS,sBAAsB;AAC/B,SAAS,yBAAyB;AAClC,SAAS,gBAAgB;AACzB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,uBAAuB;AAC3C;AAEA,eAAsB,KACpB,SACA,EAAE,OAAO,GACT;AACA,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAuB,IAAI;AAChD,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,iBAAiB,OAAO,cAAc,KAAK;AAEjD,QAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yCAAyC;AAAA,QAClD,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAKA,UAAM,OAAO,MAAM,eAAe;AAAA,MAChC;AAAA,MACA;AAAA,MACA,MAAM,EAAE,QAAQ,KAAK,KAAK,UAAU,WAAW,KAAK,SAAS,CAAC,EAAE;AAAA,MAChE,QAAQ,OAAO;AAAA,MACf;AAAA,IACF,CAAC;AAED,QAAI,CAAC,KAAK,SAAS;AACjB,aAAO,aAAa,KAAK,KAAK,QAAQ,MAAM,EAAE,QAAQ,KAAK,QAAQ,OAAO,CAAC;AAAA,IAC7E;AAEA,UAAM,cAAc,UAAU,QAA4B,aAAa;AACvE,UAAM,YAAY,gBAAgB,IAAI,OAAO,IAAI,KAAK,KAAK,EAAE,UAAU,eAAe,CAAC;AAEvF,UAAM,OAAO,MAAM,GAAG,QAAQ,UAAU,EAAE,IAAI,OAAO,IAAI,UAAU,eAAe,CAAC;AAEnF,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,+BAA+B,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrF;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM,kBAAkB,IAAI;AAAA,MAC5B,SAAS;AAAA,IACX,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,6BAA6B,EAAE,KAAK,MAAM,CAAC;AAExD,UAAM,OAAQ,OAAqC;AACnD,QAAI,SAAS,kBAAkB;AAC7B,aAAO,aAAa,KAAK,EAAE,OAAQ,MAAgB,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AACA,QAAI,SAAS,iCAAiC;AAC5C,aAAO,aAAa,KAAK,EAAE,OAAQ,MAAgB,QAAQ,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IAC/E;AAEA,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO;AAAA,QACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAChE;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,aACE;AAAA,MACF,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,8BAA8B,QAAQ,4BAA4B;AAAA,MAChG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,0CAA0C,QAAQ,oBAAoB;AAAA,QAClG,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,oMAA4L,QAAQ,oBAAoB;AAAA,QACpP,EAAE,QAAQ,KAAK,aAAa,6DAA6D,QAAQ,oBAAoB;AAAA,QACrH,EAAE,QAAQ,KAAK,aAAa,gCAAgC,QAAQ,oBAAoB;AAAA,QACxF,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/workflows/api/tasks/route.js

@@ -11,7 +11,17 @@ import {
   workflowErrorSchema
 } from "../openapi.js";
 import { createLogger } from "@open-mercato/shared/lib/logger";
+import { parseNumberWithDefault } from "@open-mercato/shared/lib/number";
+import { serializeUserTask } from "./serialize.js";
+import {
+  buildTaskVisibilityRequestConditions,
+  collectScopedTaskEntityTypes,
+  partitionTaskPage,
+  resolveTaskVisibilityForRequest
+} from "../../lib/task-visibility-request.js";
 const logger = createLogger("workflows");
+const DEFAULT_TASK_LIST_LIMIT = 50;
+const MAX_TASK_LIST_LIMIT = 100;
 const metadata = {
   requireAuth: true,
   requireFeatures: ["workflows.tasks.view"]
@@ -39,8 +49,11 @@ async function GET(request) {
     const workflowInstanceId = searchParams.get("workflowInstanceId");
     const overdue = searchParams.get("overdue") === "true";
     const myTasks = searchParams.get("myTasks") === "true";
-    const limit = parseInt(searchParams.get("limit") || "50");
-    const offset = parseInt(searchParams.get("offset") || "0");
+    const limit = Math.min(
+      parseNumberWithDefault(searchParams.get("limit"), DEFAULT_TASK_LIST_LIMIT, { min: 1, integer: true }),
+      MAX_TASK_LIST_LIMIT
+    );
+    const offset = parseNumberWithDefault(searchParams.get("offset"), 0, { min: 0, integer: true });
     const where = {
       tenantId,
       ...orgFilter.where
@@ -69,6 +82,21 @@ async function GET(request) {
         { assignedToRoles: { $overlap: auth.roles || [] } }
       ];
     }
+    const visibility = await resolveTaskVisibilityForRequest({
+      container,
+      em,
+      auth: { userId: auth.sub, tenantId, roleNames: auth.roles ?? [] },
+      organizationIds: orgFilter.organizationIds ?? null,
+      aclOrganizationId: orgFilter.rbacOrganizationId,
+      entityTypes: await collectScopedTaskEntityTypes(em, {
+        tenantId,
+        organizationIds: orgFilter.organizationIds ?? null
+      })
+    });
+    const visibilityConditions = buildTaskVisibilityRequestConditions(visibility);
+    if (visibilityConditions.length > 0) {
+      where.$and = [...Array.isArray(where.$and) ? where.$and : [], ...visibilityConditions];
+    }
     const [tasks, total] = await em.findAndCount(
       UserTask,
       where,
@@ -78,15 +106,18 @@ async function GET(request) {
         offset
       }
     );
-    return NextResponse.json({
-      data: tasks,
+    const { visible: visibleTasks, entityHidden } = partitionTaskPage(visibility, tasks);
+    const body = {
+      data: visibleTasks.map(serializeUserTask),
       pagination: {
         total,
         limit,
         offset,
         hasMore: offset + tasks.length < total
-      }
-    });
+      },
+      ...entityHidden.length > 0 ? { diagnostics: { entityHidden, entityHiddenCount: entityHidden.length } } : {}
+    };
+    return NextResponse.json(body);
   } catch (error) {
     logger.error("Error listing user tasks", { err: error });
     return NextResponse.json(

package/dist/modules/workflows/api/tasks/route.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/workflows/api/tasks/route.ts"],
-  "sourcesContent": ["/**\n * User Tasks API\n *\n * Endpoints:\n * - GET /api/workflows/tasks - List user tasks\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { UserTask } from '../../data/entities'\nimport {\n  workflowsTag,\n  userTaskListQuerySchema,\n  userTaskListResponseSchema,\n  workflowErrorSchema,\n} from '../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('workflows')\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.tasks.view'],\n}\n\n/**\n * GET /api/workflows/tasks\n *\n * List user tasks with optional filters\n *\n * Query params:\n * - status: Filter by task status (PENDING, IN_PROGRESS, COMPLETED, CANCELLED)\n * - assignedTo: Filter by assigned user ID\n * - workflowInstanceId: Filter by workflow instance\n * - overdue: Filter overdue tasks (true/false)\n * - myTasks: Show only tasks assigned to or claimable by current user (true/false)\n * - limit: Number of results (default 50)\n * - offset: Pagination offset (default 0)\n */\nexport async function GET(request: NextRequest) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json(\n        { error: 'Missing tenant context' },\n        { status: 400 }\n      )\n    }\n\n    const { searchParams } = new URL(request.url)\n    const status = searchParams.get('status')\n    const assignedTo = searchParams.get('assignedTo')\n    const workflowInstanceId = searchParams.get('workflowInstanceId')\n    const overdue = searchParams.get('overdue') === 'true'\n    const myTasks = searchParams.get('myTasks') === 'true'\n    const limit = parseInt(searchParams.get('limit') || '50')\n    const offset = parseInt(searchParams.get('offset') || '0')\n\n    // Build where clause with tenant scoping\n    const where: any = {\n      tenantId,\n      ...orgFilter.where,\n    }\n\n    if (status) {\n      // Handle comma-separated status values\n      const statusValues = status.split(',').map(s => s.trim()).filter(Boolean)\n      if (statusValues.length === 1) {\n        where.status = statusValues[0]\n      } else if (statusValues.length > 1) {\n        where.status = { $in: statusValues }\n      }\n    }\n\n    if (assignedTo) {\n      where.assignedTo = assignedTo\n    }\n\n    if (workflowInstanceId) {\n      where.workflowInstanceId = workflowInstanceId\n    }\n\n    if (overdue) {\n      where.dueDate = { $lt: new Date() }\n      where.status = { $in: ['PENDING', 'IN_PROGRESS'] }\n    }\n\n    if (myTasks) {\n      // Show tasks assigned to current user or to their roles\n      where.$or = [\n        { assignedTo: auth.sub },\n        { assignedToRoles: { $overlap: auth.roles || [] } },\n      ]\n    }\n\n    const [tasks, total] = await em.findAndCount(\n      UserTask,\n      where,\n      {\n        orderBy: { createdAt: 'DESC' },\n        limit,\n        offset,\n      }\n    )\n\n    return NextResponse.json({\n      data: tasks,\n      pagination: {\n        total,\n        limit,\n        offset,\n        hasMore: offset + tasks.length < total,\n      },\n    })\n  } catch (error) {\n    logger.error('Error listing user tasks', { err: error })\n    return NextResponse.json(\n      {\n        error: 'Failed to list user tasks',\n        details: error instanceof Error ? error.message : String(error),\n      },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'User task management',\n  methods: {\n    GET: {\n      summary: 'List user tasks',\n      description: 'Returns paginated list of user tasks with optional filtering by status, assignee, workflow instance, overdue, and myTasks flags.',\n      query: userTaskListQuerySchema,\n      responses: [\n        { status: 200, description: 'User tasks list with pagination', schema: userTaskListResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid query parameters or missing tenant context', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
-  "mappings": "AAOA,SAAsB,oBAAoB;AAE1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,gBAAgB;AACzB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,WAAW;AAEhC,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,sBAAsB;AAC1C;AAgBA,eAAsB,IAAI,SAAsB;AAC9C,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yBAAyB;AAAA,QAClC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,EAAE,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;AAC5C,UAAM,SAAS,aAAa,IAAI,QAAQ;AACxC,UAAM,aAAa,aAAa,IAAI,YAAY;AAChD,UAAM,qBAAqB,aAAa,IAAI,oBAAoB;AAChE,UAAM,UAAU,aAAa,IAAI,SAAS,MAAM;AAChD,UAAM,UAAU,aAAa,IAAI,SAAS,MAAM;AAChD,UAAM,QAAQ,SAAS,aAAa,IAAI,OAAO,KAAK,IAAI;AACxD,UAAM,SAAS,SAAS,aAAa,IAAI,QAAQ,KAAK,GAAG;AAGzD,UAAM,QAAa;AAAA,MACjB;AAAA,MACA,GAAG,UAAU;AAAA,IACf;AAEA,QAAI,QAAQ;AAEV,YAAM,eAAe,OAAO,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AACxE,UAAI,aAAa,WAAW,GAAG;AAC7B,cAAM,SAAS,aAAa,CAAC;AAAA,MAC/B,WAAW,aAAa,SAAS,GAAG;AAClC,cAAM,SAAS,EAAE,KAAK,aAAa;AAAA,MACrC;AAAA,IACF;AAEA,QAAI,YAAY;AACd,YAAM,aAAa;AAAA,IACrB;AAEA,QAAI,oBAAoB;AACtB,YAAM,qBAAqB;AAAA,IAC7B;AAEA,QAAI,SAAS;AACX,YAAM,UAAU,EAAE,KAAK,oBAAI,KAAK,EAAE;AAClC,YAAM,SAAS,EAAE,KAAK,CAAC,WAAW,aAAa,EAAE;AAAA,IACnD;AAEA,QAAI,SAAS;AAEX,YAAM,MAAM;AAAA,QACV,EAAE,YAAY,KAAK,IAAI;AAAA,QACvB,EAAE,iBAAiB,EAAE,UAAU,KAAK,SAAS,CAAC,EAAE,EAAE;AAAA,MACpD;AAAA,IACF;AAEA,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM,GAAG;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS,EAAE,WAAW,OAAO;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAEA,WAAO,aAAa,KAAK;AAAA,MACvB,MAAM;AAAA,MACN,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,SAAS,MAAM,SAAS;AAAA,MACnC;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,WAAO,MAAM,4BAA4B,EAAE,KAAK,MAAM,CAAC;AACvD,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO;AAAA,QACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAChE;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,2BAA2B;AAAA,MACpG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,sDAAsD,QAAQ,oBAAoB;AAAA,QAC9G,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
+  "sourcesContent": ["/**\n * User Tasks API\n *\n * Endpoints:\n * - GET /api/workflows/tasks - List user tasks\n */\n\nimport { NextRequest, NextResponse } from 'next/server'\nimport type { z } from 'zod'\nimport type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { resolveOrganizationScopeForRequest } from '@open-mercato/core/modules/directory/utils/organizationScope'\nimport { resolveOrganizationScopeFilter } from '@open-mercato/core/modules/directory/utils/organizationScopeFilter'\nimport { UserTask } from '../../data/entities'\nimport {\n  workflowsTag,\n  userTaskListQuerySchema,\n  userTaskListResponseSchema,\n  workflowErrorSchema,\n} from '../openapi'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { parseNumberWithDefault } from '@open-mercato/shared/lib/number'\nimport { serializeUserTask } from './serialize'\nimport {\n  buildTaskVisibilityRequestConditions,\n  collectScopedTaskEntityTypes,\n  partitionTaskPage,\n  resolveTaskVisibilityForRequest,\n} from '../../lib/task-visibility-request'\n\nconst logger = createLogger('workflows')\n\nconst DEFAULT_TASK_LIST_LIMIT = 50\n// The OpenAPI query schema documents `max(100)` and the project rule caps page\n// sizes at 100, but the handler used to `parseInt` whatever arrived.\nconst MAX_TASK_LIST_LIMIT = 100\n\nexport const metadata = {\n  requireAuth: true,\n  requireFeatures: ['workflows.tasks.view'],\n}\n\n/**\n * GET /api/workflows/tasks\n *\n * List user tasks with optional filters\n *\n * Query params:\n * - status: Filter by task status (PENDING, IN_PROGRESS, COMPLETED, CANCELLED)\n * - assignedTo: Filter by assigned user ID\n * - workflowInstanceId: Filter by workflow instance\n * - overdue: Filter overdue tasks (true/false)\n * - myTasks: Show only tasks assigned to or claimable by current user (true/false)\n * - limit: Number of results (default 50)\n * - offset: Pagination offset (default 0)\n */\nexport async function GET(request: NextRequest) {\n  try {\n    const container = await createRequestContainer()\n    const em = container.resolve('em')\n    const auth = await getAuthFromRequest(request)\n\n    if (!auth) {\n      return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n    }\n\n    const scope = await resolveOrganizationScopeForRequest({ container, auth, request })\n    const tenantId = auth.tenantId\n    const orgFilter = resolveOrganizationScopeFilter(scope, auth)\n\n    if (!tenantId) {\n      return NextResponse.json(\n        { error: 'Missing tenant context' },\n        { status: 400 }\n      )\n    }\n\n    const { searchParams } = new URL(request.url)\n    const status = searchParams.get('status')\n    const assignedTo = searchParams.get('assignedTo')\n    const workflowInstanceId = searchParams.get('workflowInstanceId')\n    const overdue = searchParams.get('overdue') === 'true'\n    const myTasks = searchParams.get('myTasks') === 'true'\n    const limit = Math.min(\n      parseNumberWithDefault(searchParams.get('limit'), DEFAULT_TASK_LIST_LIMIT, { min: 1, integer: true }),\n      MAX_TASK_LIST_LIMIT,\n    )\n    const offset = parseNumberWithDefault(searchParams.get('offset'), 0, { min: 0, integer: true })\n\n    // Build where clause with tenant scoping\n    const where: any = {\n      tenantId,\n      ...orgFilter.where,\n    }\n\n    if (status) {\n      // Handle comma-separated status values\n      const statusValues = status.split(',').map(s => s.trim()).filter(Boolean)\n      if (statusValues.length === 1) {\n        where.status = statusValues[0]\n      } else if (statusValues.length > 1) {\n        where.status = { $in: statusValues }\n      }\n    }\n\n    if (assignedTo) {\n      where.assignedTo = assignedTo\n    }\n\n    if (workflowInstanceId) {\n      where.workflowInstanceId = workflowInstanceId\n    }\n\n    if (overdue) {\n      where.dueDate = { $lt: new Date() }\n      where.status = { $in: ['PENDING', 'IN_PROGRESS'] }\n    }\n\n    if (myTasks) {\n      // Show tasks assigned to current user or to their roles\n      where.$or = [\n        { assignedTo: auth.sub },\n        { assignedToRoles: { $overlap: auth.roles || [] } },\n      ]\n    }\n\n    // \u00A76.4: `workflows.tasks.view` admits the caller to this endpoint, the\n    // visibility rule decides which rows they get. Resolved ONCE \u2014 one ACL load,\n    // one classification pass, one tenant-setting read for the whole page.\n    const visibility = await resolveTaskVisibilityForRequest({\n      container,\n      em,\n      auth: { userId: auth.sub, tenantId, roleNames: auth.roles ?? [] },\n      organizationIds: orgFilter.organizationIds ?? null,\n      aclOrganizationId: orgFilter.rbacOrganizationId,\n      entityTypes: await collectScopedTaskEntityTypes(em, {\n        tenantId,\n        organizationIds: orgFilter.organizationIds ?? null,\n      }),\n    })\n\n    const visibilityConditions = buildTaskVisibilityRequestConditions(visibility)\n    if (visibilityConditions.length > 0) {\n      where.$and = [...(Array.isArray(where.$and) ? where.$and : []), ...visibilityConditions]\n    }\n\n    const [tasks, total] = await em.findAndCount(\n      UserTask,\n      where,\n      {\n        orderBy: { createdAt: 'DESC' },\n        limit,\n        offset,\n      }\n    )\n\n    // The `WHERE` above IS the predicate, so for an ordinary caller this drops\n    // nothing and `total` stays the count of what they may see. It runs because\n    // the predicate is the single decision point and because a divergence must\n    // lose a row rather than leak one.\n    //\n    // For a principal entitled to a diagnosis the `WHERE` deliberately omits the\n    // entity gate, so the refused rows arrive here and become MARKERS rather\n    // than an unexplained gap in the page (design \u00A73.6). `hasMore` is computed\n    // from the rows the query returned, not from the ones that survived, so\n    // paging still walks the whole set instead of stopping early on a page whose\n    // every row was hidden.\n    const { visible: visibleTasks, entityHidden } = partitionTaskPage(visibility, tasks)\n\n    const body: z.infer<typeof userTaskListResponseSchema> = {\n      data: visibleTasks.map(serializeUserTask),\n      pagination: {\n        total,\n        limit,\n        offset,\n        hasMore: offset + tasks.length < total,\n      },\n      ...(entityHidden.length > 0\n        ? { diagnostics: { entityHidden, entityHiddenCount: entityHidden.length } }\n        : {}),\n    }\n\n    return NextResponse.json(body)\n  } catch (error) {\n    logger.error('Error listing user tasks', { err: error })\n    return NextResponse.json(\n      {\n        error: 'Failed to list user tasks',\n        details: error instanceof Error ? error.message : String(error),\n      },\n      { status: 500 }\n    )\n  }\n}\n\nexport const openApi: OpenApiRouteDoc = {\n  tag: workflowsTag,\n  summary: 'User task management',\n  methods: {\n    GET: {\n      summary: 'List user tasks',\n      description: 'Returns paginated list of user tasks with optional filtering by status, assignee, workflow instance, overdue, and myTasks flags.',\n      query: userTaskListQuerySchema,\n      responses: [\n        { status: 200, description: 'User tasks list with pagination', schema: userTaskListResponseSchema },\n      ],\n      errors: [\n        { status: 400, description: 'Invalid query parameters or missing tenant context', schema: workflowErrorSchema },\n        { status: 401, description: 'Unauthorized', schema: workflowErrorSchema },\n        { status: 500, description: 'Internal server error', schema: workflowErrorSchema },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAOA,SAAsB,oBAAoB;AAG1C,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,0CAA0C;AACnD,SAAS,sCAAsC;AAC/C,SAAS,gBAAgB;AACzB;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,8BAA8B;AACvC,SAAS,yBAAyB;AAClC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEP,MAAM,SAAS,aAAa,WAAW;AAEvC,MAAM,0BAA0B;AAGhC,MAAM,sBAAsB;AAErB,MAAM,WAAW;AAAA,EACtB,aAAa;AAAA,EACb,iBAAiB,CAAC,sBAAsB;AAC1C;AAgBA,eAAsB,IAAI,SAAsB;AAC9C,MAAI;AACF,UAAM,YAAY,MAAM,uBAAuB;AAC/C,UAAM,KAAK,UAAU,QAAQ,IAAI;AACjC,UAAM,OAAO,MAAM,mBAAmB,OAAO;AAE7C,QAAI,CAAC,MAAM;AACT,aAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,IACrE;AAEA,UAAM,QAAQ,MAAM,mCAAmC,EAAE,WAAW,MAAM,QAAQ,CAAC;AACnF,UAAM,WAAW,KAAK;AACtB,UAAM,YAAY,+BAA+B,OAAO,IAAI;AAE5D,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB,EAAE,OAAO,yBAAyB;AAAA,QAClC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,UAAM,EAAE,aAAa,IAAI,IAAI,IAAI,QAAQ,GAAG;AAC5C,UAAM,SAAS,aAAa,IAAI,QAAQ;AACxC,UAAM,aAAa,aAAa,IAAI,YAAY;AAChD,UAAM,qBAAqB,aAAa,IAAI,oBAAoB;AAChE,UAAM,UAAU,aAAa,IAAI,SAAS,MAAM;AAChD,UAAM,UAAU,aAAa,IAAI,SAAS,MAAM;AAChD,UAAM,QAAQ,KAAK;AAAA,MACjB,uBAAuB,aAAa,IAAI,OAAO,GAAG,yBAAyB,EAAE,KAAK,GAAG,SAAS,KAAK,CAAC;AAAA,MACpG;AAAA,IACF;AACA,UAAM,SAAS,uBAAuB,aAAa,IAAI,QAAQ,GAAG,GAAG,EAAE,KAAK,GAAG,SAAS,KAAK,CAAC;AAG9F,UAAM,QAAa;AAAA,MACjB;AAAA,MACA,GAAG,UAAU;AAAA,IACf;AAEA,QAAI,QAAQ;AAEV,YAAM,eAAe,OAAO,MAAM,GAAG,EAAE,IAAI,OAAK,EAAE,KAAK,CAAC,EAAE,OAAO,OAAO;AACxE,UAAI,aAAa,WAAW,GAAG;AAC7B,cAAM,SAAS,aAAa,CAAC;AAAA,MAC/B,WAAW,aAAa,SAAS,GAAG;AAClC,cAAM,SAAS,EAAE,KAAK,aAAa;AAAA,MACrC;AAAA,IACF;AAEA,QAAI,YAAY;AACd,YAAM,aAAa;AAAA,IACrB;AAEA,QAAI,oBAAoB;AACtB,YAAM,qBAAqB;AAAA,IAC7B;AAEA,QAAI,SAAS;AACX,YAAM,UAAU,EAAE,KAAK,oBAAI,KAAK,EAAE;AAClC,YAAM,SAAS,EAAE,KAAK,CAAC,WAAW,aAAa,EAAE;AAAA,IACnD;AAEA,QAAI,SAAS;AAEX,YAAM,MAAM;AAAA,QACV,EAAE,YAAY,KAAK,IAAI;AAAA,QACvB,EAAE,iBAAiB,EAAE,UAAU,KAAK,SAAS,CAAC,EAAE,EAAE;AAAA,MACpD;AAAA,IACF;AAKA,UAAM,aAAa,MAAM,gCAAgC;AAAA,MACvD;AAAA,MACA;AAAA,MACA,MAAM,EAAE,QAAQ,KAAK,KAAK,UAAU,WAAW,KAAK,SAAS,CAAC,EAAE;AAAA,MAChE,iBAAiB,UAAU,mBAAmB;AAAA,MAC9C,mBAAmB,UAAU;AAAA,MAC7B,aAAa,MAAM,6BAA6B,IAAI;AAAA,QAClD;AAAA,QACA,iBAAiB,UAAU,mBAAmB;AAAA,MAChD,CAAC;AAAA,IACH,CAAC;AAED,UAAM,uBAAuB,qCAAqC,UAAU;AAC5E,QAAI,qBAAqB,SAAS,GAAG;AACnC,YAAM,OAAO,CAAC,GAAI,MAAM,QAAQ,MAAM,IAAI,IAAI,MAAM,OAAO,CAAC,GAAI,GAAG,oBAAoB;AAAA,IACzF;AAEA,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM,GAAG;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS,EAAE,WAAW,OAAO;AAAA,QAC7B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAaA,UAAM,EAAE,SAAS,cAAc,aAAa,IAAI,kBAAkB,YAAY,KAAK;AAEnF,UAAM,OAAmD;AAAA,MACvD,MAAM,aAAa,IAAI,iBAAiB;AAAA,MACxC,YAAY;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA,SAAS,SAAS,MAAM,SAAS;AAAA,MACnC;AAAA,MACA,GAAI,aAAa,SAAS,IACtB,EAAE,aAAa,EAAE,cAAc,mBAAmB,aAAa,OAAO,EAAE,IACxE,CAAC;AAAA,IACP;AAEA,WAAO,aAAa,KAAK,IAAI;AAAA,EAC/B,SAAS,OAAO;AACd,WAAO,MAAM,4BAA4B,EAAE,KAAK,MAAM,CAAC;AACvD,WAAO,aAAa;AAAA,MAClB;AAAA,QACE,OAAO;AAAA,QACP,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAAA,MAChE;AAAA,MACA,EAAE,QAAQ,IAAI;AAAA,IAChB;AAAA,EACF;AACF;AAEO,MAAM,UAA2B;AAAA,EACtC,KAAK;AAAA,EACL,SAAS;AAAA,EACT,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,aAAa;AAAA,MACb,OAAO;AAAA,MACP,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,mCAAmC,QAAQ,2BAA2B;AAAA,MACpG;AAAA,MACA,QAAQ;AAAA,QACN,EAAE,QAAQ,KAAK,aAAa,sDAAsD,QAAQ,oBAAoB;AAAA,QAC9G,EAAE,QAAQ,KAAK,aAAa,gBAAgB,QAAQ,oBAAoB;AAAA,QACxE,EAAE,QAAQ,KAAK,aAAa,yBAAyB,QAAQ,oBAAoB;AAAA,MACnF;AAAA,IACF;AAAA,EACF;AACF;",
   "names": []
 }

package/dist/modules/workflows/api/tasks/serialize.js

@@ -0,0 +1,83 @@
+const USER_TASK_INBOX_KIND = "user_task";
+function asRecord(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return null;
+  return value;
+}
+function readProposalId(task) {
+  for (const source of [task.formSchema, task.formData]) {
+    const record = asRecord(source);
+    const value = record?.proposalId ?? record?.proposal_id;
+    if (typeof value === "string" && value.length > 0) return value;
+  }
+  return null;
+}
+function readPriority(task) {
+  if (typeof task.priority === "string" && task.priority.length > 0) return task.priority;
+  const value = asRecord(task.formSchema)?.priority;
+  if (typeof value === "string" && value.length > 0) return value;
+  if (typeof value === "number" && Number.isFinite(value)) return value;
+  return null;
+}
+function readEntityBindings(task) {
+  if (Array.isArray(task.entityBindings)) return task.entityBindings;
+  const value = asRecord(task.formSchema)?.entityBindings;
+  return Array.isArray(value) ? value : null;
+}
+function readEntityTypes(task) {
+  if (Array.isArray(task.entityTypes)) return task.entityTypes;
+  const bindings = readEntityBindings(task);
+  if (!bindings) return null;
+  const types = /* @__PURE__ */ new Set();
+  for (const binding of bindings) {
+    const entityType = asRecord(binding)?.entityType;
+    if (typeof entityType === "string" && entityType.length > 0) types.add(entityType);
+  }
+  return types.size > 0 ? [...types] : null;
+}
+function toIso(value) {
+  return value ? value.toISOString() : null;
+}
+function serializeUserTask(task) {
+  return {
+    id: task.id,
+    workflowInstanceId: task.workflowInstanceId,
+    stepInstanceId: task.stepInstanceId,
+    branchInstanceId: task.branchInstanceId ?? null,
+    taskName: task.taskName,
+    description: task.description ?? null,
+    status: task.status,
+    formSchema: task.formSchema ?? null,
+    formData: task.formData ?? null,
+    assignedTo: task.assignedTo ?? null,
+    // Defaulted rather than coalesced to null: the column is NOT NULL precisely
+    // so no branch has to handle an absent discriminator, and a row read through
+    // a stale projection is a backoffice task like every row that predates it.
+    assigneeKind: task.assigneeKind ?? "user",
+    assignedToRoles: task.assignedToRoles ?? null,
+    entityTypes: readEntityTypes(task),
+    claimedBy: task.claimedBy ?? null,
+    claimedAt: toIso(task.claimedAt),
+    dueDate: toIso(task.dueDate),
+    escalatedAt: toIso(task.escalatedAt),
+    escalatedTo: task.escalatedTo ?? null,
+    completedBy: task.completedBy ?? null,
+    completedAt: toIso(task.completedAt),
+    comments: task.comments ?? null,
+    reassignedBy: task.reassignedBy ?? null,
+    reassignedAt: toIso(task.reassignedAt),
+    reassignReason: task.reassignReason ?? null,
+    tenantId: task.tenantId,
+    organizationId: task.organizationId,
+    createdAt: task.createdAt.toISOString(),
+    updatedAt: task.updatedAt.toISOString(),
+    kind: USER_TASK_INBOX_KIND,
+    proposalId: readProposalId(task),
+    priority: readPriority(task),
+    entityBindings: readEntityBindings(task)
+  };
+}
+export {
+  USER_TASK_INBOX_KIND,
+  serializeUserTask
+};
+//# sourceMappingURL=serialize.js.map