Estimate: 25m · Type: code · Depends on: 2.8.2
HTTP layer: DELETE /api/work-items/[id]/route.ts → getSession() → workItemsService.deleteWorkItem → map typed errors to status (403 permission, 404 missing). No business logic in the route.
app/api/work-items/[id]/route.ts (add DELETE); CLAUDE.md route layer