feat(api): add staff order detail and compliance eligibility

backend/query-api/test/mobile-routes.test.js

@@ -27,6 +27,7 @@ function createMobileQueryService() {
     getSpendReport: async () => ({ totals: { amountCents: 2000 } }),
     getSpendBreakdown: async () => ([{ category: 'Barista', amountCents: 1000 }]),
     getStaffDashboard: async () => ({ staffName: 'Ana Barista' }),
+    getStaffOrderDetail: async () => ({ orderId: 'order-available-1', eligibility: { isEligible: true, blockers: [] } }),
     getStaffReliabilityStats: async () => ({ totalShifts: 12, reliabilityScore: 96.4 }),
     getStaffProfileCompletion: async () => ({ completed: true }),
     getStaffSession: async () => ({ staff: { staffId: 's1' } }),
@@ -135,6 +136,27 @@ test('GET /query/staff/orders/available returns injected order-level opportuniti
   assert.equal(res.body.items[0].roleId, 'role-catalog-1');
 });
 
+test('GET /query/staff/orders/:orderId returns injected order detail', async () => {
+  const app = createApp({ mobileQueryService: createMobileQueryService() });
+  const res = await request(app)
+    .get('/query/staff/orders/11111111-1111-4111-8111-111111111111')
+    .set('Authorization', 'Bearer test-token');
+
+  assert.equal(res.status, 200);
+  assert.equal(res.body.orderId, 'order-available-1');
+  assert.equal(res.body.eligibility.isEligible, true);
+});
+
+test('GET /query/staff/orders/:orderId validates uuid', async () => {
+  const app = createApp({ mobileQueryService: createMobileQueryService() });
+  const res = await request(app)
+    .get('/query/staff/orders/not-a-uuid')
+    .set('Authorization', 'Bearer test-token');
+
+  assert.equal(res.status, 400);
+  assert.equal(res.body.code, 'VALIDATION_ERROR');
+});
+
 test('GET /query/client/shifts/scheduled returns injected shift timeline items', async () => {
   const app = createApp({ mobileQueryService: createMobileQueryService() });
   const res = await request(app)