tascan-mcp 3.3.0 → 3.5.0

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "tascan-mcp",
-  "version": "3.3.0",
+  "version": "3.5.0",
   "mcpName": "io.github.snowbikemike/tascan-mcp",
-  "description": "TaScan MCP Server — Closed-loop autonomous operations protocol. 46 tools for projects, tasks, workers, QR codes, NFC tags, geofenced zones, AI condition assessment, worker passports, verification-gated gig payments, AI issue analysis, and autonomous remediation dispatch. 14 patents filed (435+ claims). Task. Scan. Done.",
+  "description": "TaScan MCP Server — Closed-loop autonomous operations protocol. 50 tools for projects, tasks, workers, QR codes, NFC tags, geofenced zones, AI condition assessment, worker passports, verification-gated gig payments, cross-entity search, duplicate-worker detection, AI issue analysis, and autonomous remediation dispatch. 14 patents filed (435+ claims). Task. Scan. Done.",
   "type": "module",
   "main": "index.js",
   "bin": {

package/tools.cjs

@@ -560,7 +560,8 @@ const TOOLS = [
         text += '\n';
         if (args.include_responses && task.responses && task.responses.length > 0) {
           for (const resp of task.responses) {
-            const { value, note } = fmtResponse(resp.response_value, resp.notes);
+            const { value: v0, note } = fmtResponse(resp.response_value, resp.notes);
+            const value = (v0 == null && resp.photo_url) ? '[photo submitted]' : (v0 != null && resp.photo_url) ? v0 + ' [+photo]' : v0;
             text += `    -> ${value != null ? value : '(no value)'}${note ? ' — ' + note : ''} (${resp.worker_name}, ${resp.completed_at})\n`;
           }
         }
@@ -588,7 +589,8 @@ const TOOLS = [
       const r = result.data;
       let text = `Responses for "${r.task}" in project "${r.project_name}" (${r.matched_tasks} matching task(s), ${r.responses.length} response(s), oldest first):\n\n`;
       for (const resp of r.responses) {
-        const { value, note } = fmtResponse(resp.response_value, resp.notes);
+        const { value: v0, note } = fmtResponse(resp.response_value, resp.notes);
+        const value = (v0 == null && resp.photo_url) ? '[photo submitted]' : (v0 != null && resp.photo_url) ? v0 + ' [+photo]' : v0;
         const when = (resp.completed_at || '').slice(0, 16).replace('T', ' ');
         text += `${when} · ${resp.list_name} · ${resp.task_title}: ${value != null ? value : '(no value)'}`;
         if (note) text += ` — ${note}`;
@@ -933,6 +935,11 @@ const TOOLS = [
         project_id: { type: 'string', description: 'Project this zone belongs to' },
         task_list_id: { type: 'string', description: 'Task list the Site Gate routes workers to when they are inside this zone' },
         enforce_on_list: { type: 'boolean', description: 'Zone-lock the task list — it cannot be started from outside the radius' },
+        notify_on_enter: { type: 'boolean', description: 'Email the manager when a worker enters this zone (danger areas)' },
+        notify_on_exit: { type: 'boolean', description: 'Email the manager when a worker leaves this zone (accountability — sign in then disappear)' },
+        auto_clock_in: { type: 'boolean', description: 'Entering the zone writes a shift_start clock-in event' },
+        auto_clock_out: { type: 'boolean', description: 'Leaving the zone writes a shift_end clock-out event' },
+        notify_email: { type: 'string', description: 'Alert recipient override — defaults to all org admins' },
         description: { type: 'string', description: 'Shown to workers on the Site Gate page' }
       },
       required: ['name', 'lat', 'lng']
@@ -941,7 +948,7 @@ const TOOLS = [
     handler: async (args, api) => {
       const result = await api('POST', '/zones', args);
       const z = result.data;
-      let text = `Zone created: ${z.name}\n\nID: ${z.id}\nCenter: ${z.lat}, ${z.lng}\nRadius: ${z.radius_m}m\nRoutes to list: ${z.task_list_id || '(none — set task_list_id to enable Site Gate routing)'}\nZone-locked: ${z.enforce_on_list ? 'YES — list cannot start outside the zone' : 'no'}`;
+      let text = `Zone created: ${z.name}\n\nID: ${z.id}\nCenter: ${z.lat}, ${z.lng}\nRadius: ${z.radius_m}m\nRoutes to list: ${z.task_list_id || '(none — set task_list_id to enable Site Gate routing)'}\nZone-locked: ${z.enforce_on_list ? 'YES — list cannot start outside the zone' : 'no'}\nAlerts: enter=${z.notify_on_enter ? 'ON' : 'off'} exit=${z.notify_on_exit ? 'ON' : 'off'} · Auto-clock: in=${z.auto_clock_in ? 'ON' : 'off'} out=${z.auto_clock_out ? 'ON' : 'off'}`;
       if (z.project_id) text += `\n\nSite Gate URL (print this QR at the site entrance):\nhttps://app.tascan.io/geo.html?project=${z.project_id}`;
       return text;
     }
@@ -961,7 +968,7 @@ const TOOLS = [
       const zones = result.data || [];
       if (!zones.length) return 'No zones configured. Use tascan_create_zone to add one.';
       return zones.map(z =>
-        `${z.name} (${z.id})\n  Center: ${z.lat}, ${z.lng} · Radius: ${z.radius_m}m · ${z.is_active ? 'active' : 'INACTIVE'}\n  Routes to: ${z.task_list_id || '—'} · Zone-locked: ${z.enforce_on_list ? 'yes' : 'no'}`
+        `${z.name} (${z.id})\n  Center: ${z.lat}, ${z.lng} · Radius: ${z.radius_m}m · ${z.is_active ? 'active' : 'INACTIVE'}\n  Routes to: ${z.task_list_id || '—'} · Zone-locked: ${z.enforce_on_list ? 'yes' : 'no'}\n  Alerts: enter=${z.notify_on_enter ? 'ON' : 'off'} exit=${z.notify_on_exit ? 'ON' : 'off'} · Auto-clock: in=${z.auto_clock_in ? 'ON' : 'off'} out=${z.auto_clock_out ? 'ON' : 'off'}`
       ).join('\n\n');
     }
   },
@@ -974,7 +981,10 @@ const TOOLS = [
         zone_id: { type: 'string', description: 'Zone ID' },
         name: { type: 'string' }, lat: { type: 'number' }, lng: { type: 'number' },
         radius_m: { type: 'number' }, task_list_id: { type: 'string' },
-        enforce_on_list: { type: 'boolean' }, is_active: { type: 'boolean' }
+        enforce_on_list: { type: 'boolean' }, is_active: { type: 'boolean' },
+        notify_on_enter: { type: 'boolean' }, notify_on_exit: { type: 'boolean' },
+        auto_clock_in: { type: 'boolean' }, auto_clock_out: { type: 'boolean' },
+        notify_email: { type: 'string' }
       },
       required: ['zone_id']
     },
@@ -1156,6 +1166,91 @@ const TOOLS = [
         `Member since: ${(s.member_since || '').slice(0, 10)}\n\n` +
         `Badges: ${p.badges.length ? p.badges.join(' · ') : 'none yet'}\n\nShareable profile: ${p.profile_url}`;
     }
+  },
+
+  // ─── Read-layer integrity (from the 2026-08-18 MCP audit) ────────
+  {
+    name: 'tascan_server_info',
+    description: 'Identify exactly which TaScan server and schema this MCP session is talking to. Call this FIRST when diagnosing anything — it makes "dev server masquerading as production" and "is my fix deployed yet" one tool call instead of an inference.',
+    inputSchema: { type: 'object', properties: {}, required: [] },
+    annotations: { title: 'Server Info', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    handler: async (args, api) => {
+      let pkgVersion = 'unknown';
+      try { pkgVersion = require('./package.json').version; } catch (e) {}
+      let meta = null;
+      try { meta = (await api('GET', '/meta')).data; } catch (e) { meta = { error: String(e.message || e) }; }
+      return `TaScan MCP Server Info\n\n` +
+        `tascan-mcp package: v${pkgVersion} (${TOOLS.length} tools)\n` +
+        `API service: ${meta?.service || 'UNREACHABLE'}\n` +
+        `Host: ${meta?.host || '?'} · Environment: ${meta?.environment || '?'}\n` +
+        `Org: ${meta?.org_id || '?'}\n` +
+        `DB schema: ${meta?.schema_version || '?'}\n` +
+        `Server time: ${meta?.server_time || '?'}` +
+        (meta?.error ? `\nAPI error: ${meta.error}` : '');
+    }
+  },
+  {
+    name: 'tascan_find',
+    description: 'Cross-entity search: find projects, task lists, tasks, workers, or condition assets by name in one call — with ids and parent context to disambiguate. Use this instead of walking projects→lists→tasks or guessing ids from display names.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        query: { type: 'string', description: 'Search text (min 2 chars, case-insensitive substring)' },
+        type: { type: 'string', enum: ['project', 'list', 'task', 'worker', 'asset'], description: 'Optional: restrict to one entity type' }
+      },
+      required: ['query']
+    },
+    annotations: { title: 'Find Anything', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    handler: async (args, api) => {
+      let path = `/find?q=${encodeURIComponent(args.query)}`;
+      if (args.type) path += `&type=${args.type}`;
+      const result = await api('GET', path);
+      const rows = result.data || [];
+      if (!rows.length) return `No matches for "${args.query}".`;
+      return rows.map(r => `[${r.type}] ${r.name}\n  id: ${r.id}${r.parent_id ? '\n  parent: ' + r.parent_id : ''}${r.context ? '\n  ' + r.context : ''}`).join('\n\n');
+    }
+  },
+  {
+    name: 'tascan_get_worker',
+    description: 'Ungated, plain read of one worker row: name, contact, org, points, streaks, timestamps. (tascan_get_worker_passport is the rich stats view; this is the boring lookup.)',
+    inputSchema: {
+      type: 'object',
+      properties: { worker_id: { type: 'string', description: 'Worker ID' } },
+      required: ['worker_id']
+    },
+    annotations: { title: 'Get Worker', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    handler: async (args, api) => {
+      const result = await api('GET', `/workers/${args.worker_id}`);
+      return JSON.stringify(result.data, null, 2);
+    }
+  },
+  {
+    name: 'tascan_find_duplicate_workers',
+    description: 'Find candidate same-person worker records with per-signal match detail (Patent 4 §6.25(b) signals: phone reuse, name similarity, GPS pattern correlation). Turns identity fragmentation from an accidental discovery into a monitorable metric, and feeds the merge workflow its candidate list.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        worker_id: { type: 'string', description: 'Anchor worker to find duplicates OF (preferred — enables phone + GPS signals)' },
+        name: { type: 'string', description: 'Or: search duplicates by display name' },
+        threshold: { type: 'number', description: 'Min confidence 0-1 (default 0.15)' }
+      },
+      required: []
+    },
+    annotations: { title: 'Find Duplicate Workers', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    handler: async (args, api) => {
+      const qs = [];
+      if (args.worker_id) qs.push(`worker_id=${args.worker_id}`);
+      if (args.name) qs.push(`name=${encodeURIComponent(args.name)}`);
+      if (args.threshold != null) qs.push(`threshold=${args.threshold}`);
+      const result = await api('GET', '/workers/duplicates?' + qs.join('&'));
+      const d = result.data;
+      if (!d.candidates.length) return `No duplicate candidates for ${d.anchor.name || d.anchor.id}.`;
+      let text = `Duplicate candidates for ${d.anchor.name || ''} (${d.anchor.id || 'name search'}):\n`;
+      d.candidates.forEach(c => {
+        text += `\n${c.name} (${c.id}) — confidence ${c.confidence}\n  signals: ${JSON.stringify(c.signals)}\n  created ${String(c.created_at).slice(0, 10)} · last active ${String(c.last_active_at || '').slice(0, 10)} · ${c.total_points} pts`;
+      });
+      return text;
+    }
   }
 ];