@stigmer/server 3.15.0 → 3.15.2-dev.20260913223433

package/src/domain/agentexecution/steps.ts

@@ -78,28 +78,21 @@ export function newValidateListRequestStep(): PipelineStep<ListDesc> {
 }
 
 /**
- * QueryAllExecutions — list.go: full scan into the context. With a
- * composed ListReadScope (20260830.01, census lane 4) the scan narrows
- * to the caller's authorized executions ∩ the request's org (the Java
- * AgentExecutionListHandler baseline: org set = one-org view, blank =
- * permission-bounded across orgs; the guest cookie rule rides the
- * driver); no scope = the full scan, org a no-op — byte-identical.
+ * QueryAllExecutions — list.go: full scan into the context. The read
+ * scope no longer runs here: since stigmer-cloud 20260913.04 T02 the scope
+ * is the LAST per-row predicate of the chain (RestrictByReadScope below,
+ * after ApplyPhaseFilter), so a composed driver is offered the request's
+ * org and phase, not the kind (extensions/list-read-scope.ts, the
+ * header's last contract line).
  */
 export function newQueryAllExecutionsStep(
   store: Store,
   logger: Logger,
-  listReadScope: ListReadScope | undefined,
 ): PipelineStep<ListDesc> {
   return {
     name: "QueryAllExecutions",
     async execute(ctx) {
-      const executions = await restrictListByReadScope(
-        listReadScope,
-        ctx.callerIdentity,
-        ApiResourceKind.agent_execution,
-        await loadAllAgentExecutions(store, logger),
-        ctx.input.org,
-      );
+      const executions = await loadAllAgentExecutions(store, logger);
       logger.debug("Successfully queried executions", {
         count: executions.length,
       });
@@ -108,6 +101,37 @@ export function newQueryAllExecutionsStep(
   };
 }
 
+/**
+ * RestrictByReadScope — the list chain's last per-row predicate (census
+ * lane 4). With a composed ListReadScope (20260830.01) the working list
+ * narrows to the caller's authorized executions ∩ the request's org (the
+ * Java AgentExecutionListHandler baseline: org set = one-org view, blank
+ * = permission-bounded across orgs; the guest cookie rule rides the
+ * driver); no scope = the working list unchanged, org a no-op —
+ * byte-identical. Placed after ApplyPhaseFilter so the driver is asked
+ * about the rows the request keeps, never about the whole kind.
+ */
+export function newRestrictByReadScopeStep(
+  listReadScope: ListReadScope | undefined,
+): PipelineStep<ListDesc> {
+  return {
+    name: "RestrictByReadScope",
+    async execute(ctx) {
+      const executions = requireExecutions(ctx.get(EXECUTION_LIST_KEY));
+      ctx.set(
+        EXECUTION_LIST_KEY,
+        await restrictListByReadScope(
+          listReadScope,
+          ctx.callerIdentity,
+          ApiResourceKind.agent_execution,
+          executions,
+          ctx.input.org,
+        ),
+      );
+    },
+  };
+}
+
 /**
  * ApplyPhaseFilter — list.go: status.phase equality filter, skipped when
  * the request carries no phase.
@@ -153,7 +177,8 @@ export function newValidateListBySessionRequestStep(): PipelineStep<ListBySessio
 
 /**
  * QueryExecutionsBySession — list_by_session.go: full scan +
- * spec.session_id equality filter.
+ * spec.session_id equality filter, then the read scope over the session's
+ * executions only (the scope is the last per-row predicate).
  */
 export function newQueryExecutionsBySessionStep(
   store: Store,
@@ -163,19 +188,19 @@ export function newQueryExecutionsBySessionStep(
   return {
     name: "QueryExecutionsBySession",
     async execute(ctx) {
-      // Census lane 5: authorized ids ∩ session filter; the Java handler
+      // Census lane 5: session filter ∩ authorized ids; the Java handler
       // never consults org on this lane (bounded by the session id).
-      const all = await restrictListByReadScope(
+      const ofSession = (await loadAllAgentExecutions(store, logger)).filter(
+        (execution) =>
+          (execution.spec?.sessionId ?? "") === ctx.input.sessionId,
+      );
+      const executions = await restrictListByReadScope(
         listReadScope,
         ctx.callerIdentity,
         ApiResourceKind.agent_execution,
-        await loadAllAgentExecutions(store, logger),
+        ofSession,
         "",
       );
-      const executions = all.filter(
-        (execution) =>
-          (execution.spec?.sessionId ?? "") === ctx.input.sessionId,
-      );
       logger.debug("Successfully queried executions by session", {
         sessionId: ctx.input.sessionId,
         count: executions.length,

package/src/domain/agentinstance/steps.ts

@@ -264,25 +264,21 @@ export function newListByOrgAndLabelsStep(
           continue;
         }
       }
-      const visible = await restrictListByReadScope(
+      // Census lane 14: the org and label filters (contract in both
+      // editions) first, the scope last over the org's rows (the scope is
+      // the last per-row predicate, stigmer-cloud 20260913.04 T02).
+      const instances = await restrictListByReadScope(
         listReadScope,
         ctx.callerIdentity,
         ApiResourceKind.agent_instance,
-        decoded,
+        decoded.filter(
+          (instance) =>
+            (instance.metadata?.org ?? "") === org &&
+            matchesAllLabels(instance.metadata?.labels ?? {}, filterLabels),
+        ),
         "",
       );
 
-      const instances: AgentInstance[] = [];
-      for (const instance of visible) {
-        if ((instance.metadata?.org ?? "") !== org) {
-          continue;
-        }
-        if (!matchesAllLabels(instance.metadata?.labels ?? {}, filterLabels)) {
-          continue;
-        }
-        instances.push(instance);
-      }
-
       instances.sort((a, b) =>
         compareCreatedAtDesc(
           a.status?.audit?.specAudit?.createdAt,
@@ -346,25 +342,20 @@ export function newLoadByAgentStep(
           continue;
         }
       }
-      const visible = await restrictListByReadScope(
+      // Census lane 15: the agent's instances (and the optional org) first,
+      // the scope last.
+      const instances = await restrictListByReadScope(
         listReadScope,
         ctx.callerIdentity,
         ApiResourceKind.agent_instance,
-        decoded,
+        decoded.filter(
+          (instance) =>
+            (instance.spec?.agentId ?? "") === agentId &&
+            (req.org === "" || (instance.metadata?.org ?? "") === req.org),
+        ),
         "",
       );
 
-      const instances: AgentInstance[] = [];
-      for (const instance of visible) {
-        if ((instance.spec?.agentId ?? "") !== agentId) {
-          continue;
-        }
-        if (req.org !== "" && (instance.metadata?.org ?? "") !== req.org) {
-          continue;
-        }
-        instances.push(instance);
-      }
-
       ctx.set(
         INSTANCE_LIST_KEY,
         create(AgentInstanceListSchema, {

package/src/domain/agentshare/controller.ts

@@ -596,28 +596,25 @@ function newLoadSharesByAgentStep(
           continue;
         }
       }
-      // 20260830.01 census lane 17: the scope narrows the decoded scan;
-      // the org/agent filters below are contract parity in both editions.
-      const visible = await restrictListByReadScope(
+      // 20260830.01 census lane 17: the org/agent filters are contract
+      // parity in both editions and run FIRST; the scope narrows the
+      // agent's shares last (the scope is the last per-row predicate,
+      // stigmer-cloud 20260913.04 T02).
+      const shares = await restrictListByReadScope(
         listReadScope,
         ctx.callerIdentity,
         ApiResourceKind.agent_share,
-        decoded,
+        decoded.filter((share) => {
+          const ref = share.spec?.agentRef;
+          return (
+            (ref?.org ?? "") === agentOrg &&
+            (ref?.slug ?? "") === agentSlug &&
+            (req.org === "" || (share.metadata?.org ?? "") === req.org)
+          );
+        }),
         "",
       );
 
-      const shares: AgentShare[] = [];
-      for (const share of visible) {
-        const ref = share.spec?.agentRef;
-        if ((ref?.org ?? "") !== agentOrg || (ref?.slug ?? "") !== agentSlug) {
-          continue;
-        }
-        if (req.org !== "" && (share.metadata?.org ?? "") !== req.org) {
-          continue;
-        }
-        shares.push(share);
-      }
-
       ctx.set(
         SHARE_LIST_KEY,
         create(AgentShareListSchema, {
@@ -700,27 +697,22 @@ function newListByOrgAndLabelsStep(
           continue;
         }
       }
-      // 20260830.01 census lane 16: the scope narrows the decoded scan;
-      // the org equality below already serves the Java handler's org arm.
-      const visible = await restrictListByReadScope(
+      // 20260830.01 census lane 16: the org and label filters serve the
+      // Java handler's arms in both editions and run FIRST; the scope
+      // narrows the org's rows last (the scope is the last per-row
+      // predicate, stigmer-cloud 20260913.04 T02).
+      const shares = await restrictListByReadScope(
         listReadScope,
         ctx.callerIdentity,
         ApiResourceKind.agent_share,
-        decoded,
+        decoded.filter(
+          (share) =>
+            (share.metadata?.org ?? "") === org &&
+            matchesAllLabels(share.metadata?.labels ?? {}, filterLabels),
+        ),
         "",
       );
 
-      const shares: AgentShare[] = [];
-      for (const share of visible) {
-        if ((share.metadata?.org ?? "") !== org) {
-          continue;
-        }
-        if (!matchesAllLabels(share.metadata?.labels ?? {}, filterLabels)) {
-          continue;
-        }
-        shares.push(share);
-      }
-
       shares.sort((a, b) =>
         compareCreatedAtDesc(
           a.status?.audit?.specAudit?.createdAt,

package/src/domain/environment/controller.ts

@@ -797,24 +797,24 @@ function newListByOrgAndLabelsStep(
           continue; // skip malformed rows, as Go does
         }
       }
-      const visible = await restrictListByReadScope(
+      // The request's org and labels first (this lane's contract in both
+      // editions), the read scope last (census lane 10; the scope is the
+      // last per-row predicate): a composed driver is asked about the
+      // org's environments, never every tenant's.
+      const requested = decoded.filter(
+        (env) =>
+          (env.metadata?.org ?? "") === org &&
+          matchesAllLabels(env.metadata?.labels ?? {}, filterLabels),
+      );
+      const environments = await restrictListByReadScope(
         listReadScope,
         ctx.callerIdentity,
         ApiResourceKind.environment,
-        decoded,
+        requested,
         "",
       );
-
-      const environments: Environment[] = [];
-      for (const env of visible) {
-        if ((env.metadata?.org ?? "") !== org) {
-          continue;
-        }
-        if (!matchesAllLabels(env.metadata?.labels ?? {}, filterLabels)) {
-          continue;
-        }
+      for (const env of environments) {
         redactEnvironmentSecrets(env);
-        environments.push(env);
       }
 
       environments.sort((a, b) =>

package/src/domain/memory/steps.ts

@@ -539,24 +539,18 @@ export function newListMemoriesByOrgStep(
           decoded.push(memory);
         }
       }
-      // 20260830.01 census lane 11: the scope narrows the decoded scan;
-      // the org equality below already serves the Java handler's org arm.
-      const visible = await restrictListByReadScope(
+      // 20260830.01 census lane 11: the org equality serves the Java
+      // handler's org arm in both editions and runs FIRST; the scope
+      // narrows the org's rows last (the scope is the last per-row
+      // predicate, stigmer-cloud 20260913.04 T02).
+      const memories = await restrictListByReadScope(
         listReadScope,
         ctx.callerIdentity,
         ApiResourceKind.memory,
-        decoded,
+        decoded.filter((memory) => (memory.metadata?.org ?? "") === org),
         "",
       );
 
-      const memories: Memory[] = [];
-      for (const memory of visible) {
-        if ((memory.metadata?.org ?? "") !== org) {
-          continue;
-        }
-        memories.push(memory);
-      }
-
       memories.sort((a, b) =>
         compareCreatedAtDesc(
           a.status?.audit?.specAudit?.createdAt,

package/src/domain/schedule/controller.ts

@@ -575,35 +575,32 @@ function newLoadSchedulesByAgentStep(
           continue;
         }
       }
-      // 20260830.01 census lane 13: the scope narrows the decoded scan;
-      // the org/agent filters below are contract parity in both editions.
-      const visible = await restrictListByReadScope(
-        listReadScope,
-        ctx.callerIdentity,
-        ApiResourceKind.schedule,
-        decoded,
-        "",
-      );
-
-      const schedules: Schedule[] = [];
-      for (const schedule of visible) {
+      // 20260830.01 census lane 13: the org/agent filters are contract
+      // parity in both editions and run FIRST; the scope narrows the
+      // agent's schedules last (the scope is the last per-row predicate,
+      // stigmer-cloud 20260913.04 T02).
+      const ofAgent = decoded.filter((schedule) => {
         const ref =
           schedule.spec?.target.case === "agent"
             ? schedule.spec.target.value.agentRef
             : undefined;
         if ((ref?.org ?? "") !== agentOrg || (ref?.slug ?? "") !== agentSlug) {
-          continue;
+          return false;
         }
         // Org scope: a multi-org caller asking for one org's schedules
         // must not see another org's schedules of the same agent.
         // (Schedules are same-org by invariant, so today this only
         // excludes rows when the requested org differs from the agent's —
         // kept anyway for contract parity with the sibling RPCs.)
-        if (req.org !== "" && (schedule.metadata?.org ?? "") !== req.org) {
-          continue;
-        }
-        schedules.push(schedule);
-      }
+        return req.org === "" || (schedule.metadata?.org ?? "") === req.org;
+      });
+      const schedules = await restrictListByReadScope(
+        listReadScope,
+        ctx.callerIdentity,
+        ApiResourceKind.schedule,
+        ofAgent,
+        "",
+      );
 
       ctx.set(
         SCHEDULE_LIST_KEY,
@@ -677,27 +674,22 @@ function newListByOrgAndLabelsStep(
           continue;
         }
       }
-      // 20260830.01 census lane 12: the scope narrows the decoded scan;
-      // the org equality below already serves the Java handler's org arm.
-      const visible = await restrictListByReadScope(
+      // 20260830.01 census lane 12: the org and label filters serve the
+      // Java handler's arms in both editions and run FIRST; the scope
+      // narrows the org's rows last (the scope is the last per-row
+      // predicate, stigmer-cloud 20260913.04 T02).
+      const schedules = await restrictListByReadScope(
         listReadScope,
         ctx.callerIdentity,
         ApiResourceKind.schedule,
-        decoded,
+        decoded.filter(
+          (schedule) =>
+            (schedule.metadata?.org ?? "") === req.org &&
+            matchesAllLabels(schedule.metadata?.labels ?? {}, req.labels),
+        ),
         "",
       );
 
-      const schedules: Schedule[] = [];
-      for (const schedule of visible) {
-        if ((schedule.metadata?.org ?? "") !== req.org) {
-          continue;
-        }
-        if (!matchesAllLabels(schedule.metadata?.labels ?? {}, req.labels)) {
-          continue;
-        }
-        schedules.push(schedule);
-      }
-
       schedules.sort((a, b) =>
         compareCreatedAtDesc(
           a.status?.audit?.specAudit?.createdAt,

package/src/domain/session/steps.ts

@@ -725,16 +725,23 @@ export function newFilterByAgentInstanceStep(
         throw invalidArgumentError("agent_instance_id is required");
       }
 
-      const sessions = await restrictListByReadScope(
+      // The instance's sessions first, the scope last (census lane 2): a
+      // composed driver is asked about one instance's rows, not the kind.
+      const sessions = await loadAllSessions(
+        store,
+        logger,
+        ctx.apiResourceKind,
+      );
+      const filtered = await restrictListByReadScope(
         listReadScope,
         ctx.callerIdentity,
         ApiResourceKind.session,
-        await loadAllSessions(store, logger, ctx.apiResourceKind),
+        sessions.filter(
+          (session) =>
+            (session.spec?.agentInstanceId ?? "") === agentInstanceId,
+        ),
         "",
       );
-      const filtered = sessions.filter(
-        (session) => (session.spec?.agentInstanceId ?? "") === agentInstanceId,
-      );
 
       logger.info("Filtered sessions by agent instance", {
         agentInstanceId,
@@ -816,17 +823,23 @@ export function newFilterByChannelStep(
         throw invalidArgumentError("channel_id is required");
       }
 
-      const sessions = await restrictListByReadScope(
+      // The channel's sessions first, the scope last (census lane 3).
+      const sessions = await loadAllSessions(
+        store,
+        logger,
+        ctx.apiResourceKind,
+      );
+      const filtered = await restrictListByReadScope(
         listReadScope,
         ctx.callerIdentity,
         ApiResourceKind.session,
-        await loadAllSessions(store, logger, ctx.apiResourceKind),
+        sessions.filter(
+          (session) =>
+            (session.metadata?.labels ?? {})[CHANNEL_ID_LABEL_KEY] ===
+            channelId,
+        ),
         "",
       );
-      const filtered = sessions.filter(
-        (session) =>
-          (session.metadata?.labels ?? {})[CHANNEL_ID_LABEL_KEY] === channelId,
-      );
 
       logger.info("Filtered sessions by channel", {
         channelId,

package/src/domain/workflowexecution/controller.ts

@@ -230,7 +230,8 @@ export function registerWorkflowExecutionServices(
   router.service(WorkflowExecutionQueryController, {
     get: (id, ctx) => get(deps, id, ctx),
     list: (req, ctx) => list(deps, req, callerIdentityOf(ctx)),
-    listByWorkflow: (req, ctx) => listByWorkflow(deps, req, callerIdentityOf(ctx)),
+    listByWorkflow: (req, ctx) =>
+      listByWorkflow(deps, req, callerIdentityOf(ctx)),
     subscribe: (req, ctx) => subscribeExecution(deps, req, ctx),
     getEventLog: (req, ctx) => getEventLog(deps, req, callerIdentityOf(ctx)),
     subscribeEvents: (req, ctx) => subscribeEvents(deps, req, ctx),
@@ -482,33 +483,37 @@ async function get(
  * filter.phases is absent), structured filter criteria (T13), and the
  * sort default started_at descending. No pagination (total_pages
  * placeholder 1). With a composed ListReadScope (20260830.01, census
- * lane 6) the scan narrows to the caller's authorized executions and the
+ * lane 6) the list narrows to the caller's authorized executions and the
  * request `org` narrows when non-blank (the Java
  * WorkflowExecutionListHandler baseline: blank = permission-bounded
  * across orgs); no scope = the full scan with `org` a deliberate no-op
- * on this single-tenant edition — byte-identical.
+ * on this single-tenant edition — byte-identical. The scope runs AFTER
+ * the phase and criteria filters (stigmer-cloud 20260913.04 T02: the
+ * scope is the last per-row predicate), so a composed driver is asked
+ * about the rows the request keeps, not the kind.
  */
 async function list(
   deps: WorkflowExecutionControllerDeps,
   req: ListWorkflowExecutionsRequest,
   identity: CallerIdentity,
 ): Promise<WorkflowExecutionList> {
-  let executions = await restrictListByReadScope(
-    deps.listReadScope,
-    identity,
-    ApiResourceKind.workflow_execution,
-    await loadAllWorkflowExecutions(
-      deps.store,
-      deps.logger,
-      "failed to list workflow executions",
-    ),
-    req.org,
+  let executions = await loadAllWorkflowExecutions(
+    deps.store,
+    deps.logger,
+    "failed to list workflow executions",
   );
 
   if (req.filter === undefined || req.filter.phases.length === 0) {
     executions = applyLegacyPhaseFilter(executions, req.phase);
   }
   executions = applyFilterCriteria(executions, req.filter);
+  executions = await restrictListByReadScope(
+    deps.listReadScope,
+    identity,
+    ApiResourceKind.workflow_execution,
+    executions,
+    req.org,
+  );
 
   let sortField = req.sortField;
   let ascending = req.sortAscending;
@@ -538,26 +543,27 @@ async function listByWorkflow(
     throw invalidArgumentError("workflow_id is required");
   }
 
-  // Census lane 7: authorized ids ∩ workflow filter; the Java handler
-  // never consults org on this lane (bounded by the workflow id).
-  const all = await restrictListByReadScope(
-    deps.listReadScope,
-    identity,
-    ApiResourceKind.workflow_execution,
-    await loadAllWorkflowExecutions(
-      deps.store,
-      deps.logger,
-      "failed to list workflow executions",
-    ),
-    "",
+  // Census lane 7: workflow filter ∩ criteria ∩ authorized ids, the scope
+  // last (bounded by the workflow id; the Java handler never consults org
+  // on this lane).
+  const all = await loadAllWorkflowExecutions(
+    deps.store,
+    deps.logger,
+    "failed to list workflow executions",
   );
   let executions = all.filter(
     (execution) =>
       execution.spec?.workflowInstanceId === req.workflowId ||
       execution.spec?.workflowId === req.workflowId,
   );
-
   executions = applyFilterCriteria(executions, req.filter);
+  executions = await restrictListByReadScope(
+    deps.listReadScope,
+    identity,
+    ApiResourceKind.workflow_execution,
+    executions,
+    "",
+  );
 
   let sortField = req.sortField;
   let ascending = req.sortAscending;

package/src/domain/workflowexecution/list-pending-approvals.ts

@@ -8,7 +8,11 @@ import { create } from "@bufbuild/protobuf";
 import type { Timestamp } from "@bufbuild/protobuf/wkt";
 import { timestampFromMs } from "@bufbuild/protobuf/wkt";
 
-import { ExecutionPhase, WorkflowTaskStatus } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/enum_pb";
+import type { WorkflowExecution } from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/api_pb";
+import {
+  ExecutionPhase,
+  WorkflowTaskStatus,
+} from "@stigmer/protos/ai/stigmer/agentic/workflowexecution/v1/enum_pb";
 import {
   PendingApprovalSchema,
   PendingApprovalsListSchema,
@@ -46,19 +50,25 @@ export async function listPendingApprovals(
   req: ListPendingApprovalsRequest,
   identity: CallerIdentity,
 ): Promise<PendingApprovalsList> {
-  // Census lane 8 (20260830.01): the scope narrows the EXECUTION scan —
-  // before the approvals projection and its pagination, the Java
+  // Census lane 8 (20260830.01): the scope narrows the EXECUTIONS — before
+  // the approvals projection and its pagination, the Java
   // WorkflowExecutionListPendingApprovalsHandler order — and the request
   // org narrows when non-blank (blank = permission-bounded across orgs).
+  // It runs over the executions that CAN carry a pending approval (in
+  // progress, a task waiting) rather than the org's whole history: the
+  // predicate is per-row, so the scope is last (stigmer-cloud 20260913.04
+  // T02) and a composed driver is asked about a handful of rows.
   const executions = await restrictListByReadScope(
     deps.listReadScope,
     identity,
     ApiResourceKind.workflow_execution,
-    await loadAllWorkflowExecutions(
-      deps.store,
-      deps.logger,
-      "failed to list workflow executions for pending approvals",
-    ),
+    (
+      await loadAllWorkflowExecutions(
+        deps.store,
+        deps.logger,
+        "failed to list workflow executions for pending approvals",
+      )
+    ).filter(mayHavePendingApproval),
     req.org,
   );
 
@@ -72,12 +82,6 @@ export async function listPendingApprovals(
 
   let approvals: PendingApproval[] = [];
   for (const execution of executions) {
-    const phase =
-      execution.status?.phase ?? ExecutionPhase.EXECUTION_PHASE_UNSPECIFIED;
-    if (phase !== ExecutionPhase.EXECUTION_IN_PROGRESS) {
-      continue;
-    }
-
     for (const task of execution.status?.tasks ?? []) {
       if (task.status !== WorkflowTaskStatus.WORKFLOW_TASK_WAITING_APPROVAL) {
         continue;
@@ -90,8 +94,7 @@ export async function listPendingApprovals(
           // would break submitWorkflowTaskApproval, whose runner-side
           // signal is keyed by the plain task name.
           taskName: task.taskName,
-          requester:
-            execution.status?.audit?.specAudit?.createdBy?.id ?? "",
+          requester: execution.status?.audit?.specAudit?.createdBy?.id ?? "",
           requestedAt: parseTimestampString(task.startedAt),
           uiHint: task.uiHint,
         }),
@@ -118,3 +121,21 @@ function parseTimestampString(value: string): Timestamp | undefined {
   }
   return timestampFromMs(ms);
 }
+
+/**
+ * The per-row predicate of the projection above: only an execution in
+ * progress with a task waiting for approval contributes an entry, so only
+ * those are worth a scope check. Same rows kept as the loop's own `continue`
+ * arms, decided once before the scope.
+ */
+function mayHavePendingApproval(execution: WorkflowExecution): boolean {
+  const phase =
+    execution.status?.phase ?? ExecutionPhase.EXECUTION_PHASE_UNSPECIFIED;
+  return (
+    phase === ExecutionPhase.EXECUTION_IN_PROGRESS &&
+    (execution.status?.tasks ?? []).some(
+      (task) =>
+        task.status === WorkflowTaskStatus.WORKFLOW_TASK_WAITING_APPROVAL,
+    )
+  );
+}