tascan-mcp 3.8.0 → 3.10.0

package/README.md

@@ -126,6 +126,14 @@ Add as a custom connector in Claude (Settings > Connectors). When you first use
 | `tascan_apply_template` | Apply a pre-built template to an event | Create |
 | `tascan_list_templates` | List available task templates | Read |
 | `tascan_get_report` | Get completion report for an event (optional `include_responses` returns submitted response data) | Read |
+| `tascan_generate_report` | Mint a shareable Completion / Service (client-branded, acknowledgeable) / Project / Evidence Pack link; optionally text it | Write |
+| `tascan_list_reports` | Existing report links for a list or project with acknowledgment status | Read |
+| `tascan_invite_worker` | Consented intro to a marketplace worker: TaScan texts them, YES adds them to your org + sends the list, NO keeps them anonymous | Write |
+| `tascan_list_invites` | Your marketplace invites and their status; accepted ones carry the worker's contact | Read |
+| `tascan_zone_compliance` | Hazard-zone audit: crossings, AI-verified PPE checkpoint verdicts, breaches, injuries cross-referenced with the last PPE check (zones now carry `kind`, `required_ppe`, `task_list_on_enter`, worker SMS rules) | Read |
+| `tascan_create_invoice` | Create a client invoice from explicit line items OR from verified work (project / lists × hourly or flat rate); returns the share link and, for single-list invoices, a linked client Service Report | Write |
+| `tascan_list_invoices` | List invoices with status, totals, due dates, links; outstanding balance | Read |
+| `tascan_update_invoice` | Mark paid / overdue / cancelled, edit client details, notes, due date | Write |
 | `tascan_query_responses` | One task's responses across every list in a project — chronological progression series | Read |
 
 ### Closed-Loop Autonomous Operations (Patent Pending)

package/index.js

@@ -45,7 +45,7 @@ async function api(method, path, body) {
 }
 
 const server = new Server(
-  { name: 'tascan', version: '3.8.0' },
+  { name: 'tascan', version: '3.10.0' },
   { capabilities: { tools: {} } }
 );
 

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "tascan-mcp",
-  "version": "3.8.0",
+  "version": "3.10.0",
   "mcpName": "io.github.snowbikemike/tascan-mcp",
-  "description": "TaScan MCP Server — Closed-loop autonomous operations protocol. 58 tools for projects, tasks, workers, QR codes, NFC tags, geofenced zones, AI condition assessment, worker passports, verification-gated gig payments, cross-entity search, duplicate-worker detection, AI issue analysis, and autonomous remediation dispatch. 14 patents filed (435+ claims). Task. Scan. Done.",
+  "description": "TaScan MCP Server — Closed-loop autonomous operations protocol. 69 tools for projects, tasks, workers, QR codes, NFC tags, worker marketplace with consented SMS invites, geofenced zones with rules (work site / hazard + AI-verified PPE checkpoints / containment / restricted, breach alerts, zone compliance audit), AI condition assessment, worker passports, verification-gated gig payments, client invoicing from verified work (overtime / day rate / per diem / expenses), shareable report links (completion, client service report, project, evidence pack), cross-entity search, duplicate-worker detection, worker identity merge, AI issue analysis, and autonomous remediation dispatch. 15 patents filed (470+ claims). Task. Scan. Done.",
   "type": "module",
   "main": "index.js",
   "bin": {
-    "tascan-mcp": "./index.js"
+    "tascan-mcp": "index.js"
   },
   "scripts": {
     "start": "node index.js"
@@ -40,7 +40,7 @@
   },
   "repository": {
     "type": "git",
-    "url": "https://github.com/snowbikemike/tascan-mcp.git"
+    "url": "git+https://github.com/snowbikemike/tascan-mcp.git"
   },
   "homepage": "https://tascan.io",
   "bugs": {

package/tools.cjs

@@ -159,7 +159,8 @@ const TOOLS = [
         name: { type: 'string', description: 'Event name' },
         description: { type: 'string', description: 'Event description' },
         team_mode: { type: 'boolean', description: 'Team mode — shared completions' },
-        multi_instance: { type: 'boolean', description: 'Multi-instance — each worker gets isolated copy' }
+        multi_instance: { type: 'boolean', description: 'Multi-instance — each worker gets isolated copy' },
+        assigned_worker_ids: { type: 'array', items: { type: 'string' }, description: 'Worker UUIDs to assign to this event. Each gets a personal tap-to-open link. Note: a worker holds one event assignment per project — assigning moves them.' }
       },
       required: ['project_id', 'name']
     },
@@ -168,8 +169,14 @@ const TOOLS = [
       const body = { name: args.name, description: args.description };
       if (args.team_mode !== undefined) body.team_mode = args.team_mode;
       if (args.multi_instance !== undefined) body.multi_instance = args.multi_instance;
+      if (args.assigned_worker_ids) body.assigned_worker_ids = args.assigned_worker_ids;
       const result = await api('POST', `/projects/${args.project_id}/lists`, body);
-      return `Event created: ${result.data.name} (ID: ${result.data.id})\n\n${JSON.stringify(result.data, null, 2)}`;
+      let text = `Event created: ${result.data.name} (ID: ${result.data.id})\n\n${JSON.stringify(result.data, null, 2)}`;
+      if (result.data.assigned_workers?.length) {
+        text += '\n\nAssigned workers:';
+        for (const w of result.data.assigned_workers) text += `\n  ${w.name}: ${w.worker_link}`;
+      }
+      return text;
     }
   },
   {
@@ -211,7 +218,8 @@ const TOOLS = [
         description: { type: 'string', description: 'New description' },
         team_mode: { type: 'boolean', description: 'Team mode — shared completions' },
         multi_instance: { type: 'boolean', description: 'Multi-instance — each worker gets isolated copy' },
-        timer_mode: { type: 'string', description: 'Timer mode (auto or manual)' }
+        timer_mode: { type: 'string', description: 'Timer mode (auto or manual)' },
+        assigned_worker_ids: { type: 'array', items: { type: 'string' }, description: 'Worker UUIDs to assign to this event (additive — workers not named are left alone). Each gets a personal tap-to-open link. Note: a worker holds one event assignment per project — assigning moves them.' }
       },
       required: ['list_id']
     },
@@ -220,7 +228,12 @@ const TOOLS = [
       const { list_id, ...updates } = args;
       const body = Object.fromEntries(Object.entries(updates).filter(([, v]) => v !== undefined));
       const result = await api('PUT', `/lists/${list_id}`, body);
-      return `Event updated: ${result.data.name}\n\n${JSON.stringify(result.data, null, 2)}`;
+      let text = `Event updated: ${result.data.name}\n\n${JSON.stringify(result.data, null, 2)}`;
+      if (result.data.assigned_workers?.length) {
+        text += '\n\nAssigned workers:';
+        for (const w of result.data.assigned_workers) text += `\n  ${w.name}: ${w.worker_link}`;
+      }
+      return text;
     }
   },
   {
@@ -257,6 +270,7 @@ const TOOLS = [
               requires_photo: { type: 'boolean', description: 'Require photo on completion' },
               sort_order: { type: 'number', description: 'Explicit sort position (defaults to end of list, in array order)' },
               required_equipment: { type: 'string', description: 'Equipment this task depends on (free text, e.g. "88 lb kettlebells")' },
+              assigned_to: { type: 'string', description: 'Worker to assign this task to — pass the worker UUID (validated against your org and stored as the worker\'s name, which is how the worker portal matches "my tasks"). A plain name string is also accepted as-is.' },
               subtasks: {
                 type: 'array',
                 items: {
@@ -407,7 +421,8 @@ const TOOLS = [
         is_safety_checkpoint: { type: 'boolean', description: 'Safety-critical flag' },
         requires_photo: { type: 'boolean', description: 'Require photo' },
         sort_order: { type: 'number', description: 'Sort position' },
-        required_equipment: { type: 'string', description: 'Equipment this task depends on (free text)' }
+        required_equipment: { type: 'string', description: 'Equipment this task depends on (free text)' },
+        assigned_to: { type: 'string', description: 'Worker to assign this task to — pass the worker UUID (validated against your org and stored as the worker\'s name, which is how the worker portal matches "my tasks"). A plain name string is also accepted as-is. Pass null to clear.' }
       },
       required: ['task_id']
     },
@@ -610,11 +625,23 @@ const TOOLS = [
   },
   {
     name: 'tascan_list_workers',
-    description: 'List all workers (taskees) in the organization',
-    inputSchema: { type: 'object', properties: {} },
+    description: 'List workers (taskees) in the organization. Supports filtering by name/email/phone substring, contact-info presence, and last-activity date. Each row includes completion_count (total task completions).',
+    inputSchema: { type: 'object', properties: {
+      query: { type: 'string', description: 'Substring match on name, email, or phone' },
+      has_phone: { type: 'boolean', description: 'true = only workers with a phone on file; false = only without' },
+      has_email: { type: 'boolean', description: 'true/false — same for email' },
+      active_since: { type: 'string', description: 'ISO date/datetime — only workers with last_active_at on/after this' },
+      include_inactive: { type: 'boolean', description: 'true = also include inactive workers (e.g. tombstones left by a merge or delete) — useful for auditing right after tascan_merge_workers / tascan_delete_worker' }
+    } },
     annotations: { title: 'List Workers', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
     handler: async (args, api) => {
-      const result = await api('GET', '/workers');
+      const qs = [];
+      if (args.query !== undefined) qs.push(`query=${encodeURIComponent(args.query)}`);
+      if (args.has_phone !== undefined) qs.push(`has_phone=${args.has_phone}`);
+      if (args.has_email !== undefined) qs.push(`has_email=${args.has_email}`);
+      if (args.active_since !== undefined) qs.push(`active_since=${encodeURIComponent(args.active_since)}`);
+      if (args.include_inactive === true) qs.push('include_inactive=true');
+      const result = await api('GET', '/workers' + (qs.length ? '?' + qs.join('&') : ''));
       return JSON.stringify(result.data, null, 2);
     }
   },
@@ -983,7 +1010,8 @@ const TOOLS = [
         worker_id: { type: 'string', description: 'Worker ID — sends to their phone on file (preferred over raw phone)' },
         phone: { type: 'string', description: 'Raw phone number (e.g. "+17025551234") — used when no worker_id given' },
         message: { type: 'string', description: 'Message text. Transactional and work-related only.' },
-        list_id: { type: 'string', description: 'Optional task list ID — appends a tap-to-open worker checklist link' }
+        list_id: { type: 'string', description: 'Optional task list ID — appends a tap-to-open worker checklist link' },
+        include_link: { type: 'boolean', description: 'When a list_id is given, append the tap-to-open link to the SMS body (default true). Set false to send the message text alone — the link is still returned for you to share another way.' }
       },
       required: ['message']
     },
@@ -993,14 +1021,30 @@ const TOOLS = [
         worker_id: args.worker_id,
         phone: args.phone,
         message: args.message,
-        list_id: args.list_id
+        list_id: args.list_id,
+        include_link: args.include_link
       });
       const d = result.data;
       let text = `SMS sent!\n`;
       text += `  To: ${d.worker_name ? d.worker_name + ' (' + d.to + ')' : d.to}\n`;
-      text += `  Status: ${d.sms_status}\n`;
-      text += `  Message: ${d.message_body}`;
-      if (d.worker_url) text += `\n  Checklist link: ${d.worker_url}`;
+      text += `  Status: ${d.sms_status}`;
+      if (d.twilio_sid) text += `\n  Twilio SID: ${d.twilio_sid}`;
+      text += `\n  Message: ${d.message_body}`;
+      if (d.short_url) text += `\n  Short link: ${d.short_url}`;
+      else if (d.worker_url) text += `\n  Checklist link: ${d.worker_url}`;
+      return text;
+    }
+  },
+  {
+    name: 'tascan_get_sms_status',
+    description: 'Check delivery status of a previously sent TaScan SMS by its Twilio SID (returned by tascan_send_sms). Shows queued/sent/delivered/undelivered/failed plus carrier error codes.',
+    inputSchema: { type: 'object', properties: { twilio_sid: { type: 'string', description: 'Twilio message SID (SM...) from tascan_send_sms' } }, required: ['twilio_sid'] },
+    annotations: { title: 'Get SMS Status', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: true },
+    handler: async (args, api) => {
+      const d = (await api('GET', `/sms/${args.twilio_sid}`)).data;
+      let text = `SMS ${d.twilio_sid}\n  Status: ${d.sms_status}\n  To: ${d.to}\n  Sent: ${d.sent_at || 'not yet'}`;
+      if (d.num_segments) text += `\n  Segments: ${d.num_segments}`;
+      if (d.error_code) text += `\n  Error ${d.error_code}: ${d.error_message || ''}`;
       return text;
     }
   },
@@ -1166,7 +1210,9 @@ const TOOLS = [
       properties: {
         q: { type: 'string', description: 'Skill, category, name, or civilian job title — e.g. "forklift", "LED wall", "AV technician"' },
         min_completions: { type: 'number', description: 'Only workers with at least this many verified completions' },
-        limit: { type: 'number', description: 'Max cards (default 25, max 50)' }
+        limit: { type: 'number', description: 'Max cards (default 25, max 50)' },
+        city: { type: 'string', description: 'Filter by the worker\'s opt-in home city, e.g. "Las Vegas"' },
+        available: { type: 'boolean', description: 'Only workers who marked themselves available on their passport' }
       },
       required: []
     },
@@ -1176,6 +1222,8 @@ const TOOLS = [
       if (args.q) qs.set('q', args.q);
       if (args.min_completions) qs.set('min_completions', String(args.min_completions));
       if (args.limit) qs.set('limit', String(args.limit));
+      if (args.city) qs.set('city', args.city);
+      if (args.available) qs.set('available', 'true');
       const result = await api('GET', '/marketplace' + (qs.toString() ? '?' + qs.toString() : ''));
       const cards = result.data || [];
       if (!cards.length) return 'No discoverable workers match.  Workers appear after opting in on their own passport (profile page → "List me").';
@@ -1184,12 +1232,52 @@ const TOOLS = [
         if (w.skills.length) t += '\n  Skills: ' + w.skills.map(s => `${s.skill} (${s.verified_task_count}×)`).join(', ');
         const civ = [...new Set(w.skills.map(s => s.civilian_equivalent).filter(Boolean))];
         if (civ.length) t += '\n  Civilian equivalent: ' + civ.join(' · ');
-        t += '\n  Passport: ' + w.passport_url;
+        const where = [w.city ? 'Based in ' + w.city : null, w.rate ? 'Rate ' + w.rate : null, w.available ? 'Available' : null].filter(Boolean).join(' · ');
+        if (where) t += '\n  ' + where;
+        t += '\n  Passport: ' + w.passport_url + '\n  worker_id: ' + w.worker_id + ' (use with tascan_invite_worker)';
         return t;
       }).join('\n\n');
     }
   },
 
+  {
+    name: 'tascan_invite_worker',
+    description: 'Invite a marketplace worker to a task list — the consented intro. TaScan texts the worker from its own number ("<Your org> wants you for <list>. Reply YES to share your contact and get the list, or NO to pass."). On YES the worker appears in your org with their name + phone, receives the list link, and you get a text + a thread message. On NO or silence (7 days) you never learn who they were. Use the worker_id from tascan_search_marketplace.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        worker_id: { type: 'string', description: 'worker_id from a marketplace card' },
+        list_id: { type: 'string', description: 'Task list you want them on' },
+        message: { type: 'string', description: 'Optional short intro prepended to the text (max 240 chars)' }
+      },
+      required: ['worker_id', 'list_id']
+    },
+    annotations: { title: 'Invite Marketplace Worker', readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
+    handler: async (args, api) => {
+      const result = await api('POST', '/marketplace/invite', args);
+      const d = result.data;
+      return `Invite sent for "${d.list}" — status ${d.status}, expires ${String(d.expires_at).slice(0, 10)}.\nInvite ID: ${d.invite_id}\n${d.note}`;
+    }
+  },
+  {
+    name: 'tascan_list_invites',
+    description: 'List marketplace invites you have sent and their status (pending / accepted / declined / expired / failed). Accepted invites include the worker\'s name and phone — that is the consent boundary; pending and declined never do.',
+    inputSchema: {
+      type: 'object',
+      properties: { status: { type: 'string', enum: ['pending', 'accepted', 'declined', 'expired', 'failed'] } },
+      required: []
+    },
+    annotations: { title: 'List Marketplace Invites', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    handler: async (args, api) => {
+      const result = await api('GET', '/marketplace/invites' + (args.status ? '?status=' + args.status : ''));
+      const rows = result.data || [];
+      if (!rows.length) return 'No invites yet — search the marketplace, then tascan_invite_worker.';
+      return rows.map(r => `${r.status.toUpperCase()} · "${r.list || '—'}" · sent ${String(r.sent_at).slice(0, 10)}` +
+        (r.worker ? ` · ${r.worker.name} ${r.worker.phone} (worker_id ${r.worker.worker_id})` : '') +
+        (r.status === 'pending' ? ` · expires ${String(r.expires_at).slice(0, 10)}` : '') + `\n   invite ${r.id}`).join('\n');
+    }
+  },
+
   // ─── Geofenced Zones (Patent 7: location-triggered delivery) ─────
   {
     name: 'tascan_create_zone',
@@ -1210,7 +1298,15 @@ const TOOLS = [
         auto_clock_out: { type: 'boolean', description: 'Leaving the zone writes a shift_end clock-out event' },
         notify_email: { type: 'string', description: 'Alert recipient override — defaults to all org admins' },
         polygon: { type: 'array', items: { type: 'array', items: { type: 'number' } }, description: 'Polygon/rectangle zone instead of a circle: vertices as [[lat,lng], ...], at least 3.  lat/lng/radius_m are then computed (centroid + bounding radius) — still pass lat/lng but they are overridden.' },
-        description: { type: 'string', description: 'Shown to workers on the Site Gate page' }
+        description: { type: 'string', description: 'Shown to workers on the Site Gate page' },
+        kind: { type: 'string', enum: ['work_site', 'hazard', 'containment', 'restricted'], description: 'What the fence MEANS. work_site: expected here (auto clock-in, list on enter). hazard: enter allowed under conditions — required_ppe + photo checkpoint verified by AI vision, the OSHA row. containment: must stay inside; leaving = breach. restricted: must stay out; entering = breach. Default work_site.' },
+        required_ppe: { type: 'array', items: { type: 'string', enum: ['hard_hat', 'safety_glasses', 'hi_vis_vest', 'gloves', 'steel_toe_boots', 'hearing_protection', 'harness', 'respirator', 'face_shield'] }, description: 'Hazard zones: PPE the worker must show at entry (pick-list so the audit reads the same words)' },
+        ppe_photo_required: { type: 'boolean', description: 'Hazard zones: pop a photo checkpoint on entry (default true when required_ppe is set)' },
+        task_list_on_enter: { type: 'string', description: 'Task list dispatched to the worker (in-app + SMS) when they cross into the zone' },
+        sms_worker_on_enter: { type: 'boolean', description: 'Text the worker the rule/list on entry, even if the app is closed' },
+        sms_worker_on_exit: { type: 'boolean', description: 'Text the worker on exit' },
+        enter_message: { type: 'string', description: 'What the worker sees / is texted on entry (default is generated from the rule)' },
+        alert_on_breach: { type: 'boolean', description: 'Email + SMS the admin on containment-exit / restricted-enter (default true)' }
       },
       required: ['name', 'lat', 'lng']
     },
@@ -1255,7 +1351,12 @@ const TOOLS = [
         notify_on_enter: { type: 'boolean' }, notify_on_exit: { type: 'boolean' },
         auto_clock_in: { type: 'boolean' }, auto_clock_out: { type: 'boolean' },
         notify_email: { type: 'string' },
-        polygon: { type: 'array', items: { type: 'array', items: { type: 'number' } }, description: 'Replace geometry with a polygon ([[lat,lng],...], ≥3 vertices); pass null to revert to a circle' }
+        polygon: { type: 'array', items: { type: 'array', items: { type: 'number' } }, description: 'Replace geometry with a polygon ([[lat,lng],...], ≥3 vertices); pass null to revert to a circle' },
+        kind: { type: 'string', enum: ['work_site', 'hazard', 'containment', 'restricted'] },
+        required_ppe: { type: 'array', items: { type: 'string', enum: ['hard_hat', 'safety_glasses', 'hi_vis_vest', 'gloves', 'steel_toe_boots', 'hearing_protection', 'harness', 'respirator', 'face_shield'] } },
+        ppe_photo_required: { type: 'boolean' }, task_list_on_enter: { type: 'string' },
+        sms_worker_on_enter: { type: 'boolean' }, sms_worker_on_exit: { type: 'boolean' },
+        enter_message: { type: 'string' }, alert_on_breach: { type: 'boolean' }
       },
       required: ['zone_id']
     },
@@ -1267,6 +1368,34 @@ const TOOLS = [
     }
   },
 
+  {
+    name: 'tascan_zone_compliance',
+    description: 'Hazard-zone compliance audit (OSHA / insurance): every zone crossing, PPE checkpoint verdict (complied / failed with what was missing / skipped), and breach, plus injury reports cross-referenced with the worker\'s last PPE checkpoint before the injury. Scope by project or zone, optionally by worker and date range. Same rows the printable Evidence Pack shows.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        project_id: { type: 'string' }, zone_id: { type: 'string' }, worker_id: { type: 'string' },
+        since: { type: 'string', description: 'ISO date/time lower bound' }, until: { type: 'string', description: 'ISO date/time upper bound' }
+      },
+      required: []
+    },
+    annotations: { title: 'Zone Compliance Audit', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    handler: async (args, api) => {
+      const qs = new URLSearchParams();
+      ['project_id', 'zone_id', 'worker_id', 'since', 'until'].forEach(k => { if (args[k]) qs.set(k, args[k]); });
+      const result = await api('GET', '/zones/compliance' + (qs.toString() ? '?' + qs.toString() : ''));
+      const d = result.data || {};
+      if (!d.zones || !d.zones.length) return 'No zones in scope. Create one with tascan_create_zone (kind: hazard, required_ppe: [...]).';
+      const s = d.summary || {};
+      let text = `Zones: ${d.zones.map(z => `${z.name} (${z.kind}${(z.required_ppe || []).length ? ', PPE: ' + z.required_ppe.join('/') : ''})`).join('; ')}\n` +
+        `Hazard entries ${s.hazard_entries} · PPE checks ${s.ppe_checks} (complied ${s.ppe_complied || 0}, failed/skipped ${s.ppe_failed}) · Breaches ${s.breaches} · Injury reports ${s.injuries}\n`;
+      const ev = (d.events || []).filter(e => e.event === 'ppe_check' || e.event === 'breach');
+      if (ev.length) text += '\nFindings:\n' + ev.slice(-40).map(e => `  ${e.at.slice(0, 16).replace('T', ' ')} · ${e.worker || 'Worker'} · ${e.zone} · ${e.event === 'breach' ? 'BREACH' : 'PPE ' + String(e.verdict).toUpperCase()}${e.missing && e.missing.length ? ' — missing ' + e.missing.join(', ') : ''}${e.confidence != null ? ' (' + Math.round(e.confidence * 100) + '%)' : ''}`).join('\n');
+      if ((d.injuries || []).length) text += '\n\nInjuries:\n' + d.injuries.map(i => `  ${i.at.slice(0, 16).replace('T', ' ')} · ${i.worker || 'Worker'} · ${i.severity || ''} · ${(i.description || '').slice(0, 80)}\n     PPE before injury: ${i.ppe_status_before_injury ? i.ppe_status_before_injury.verdict.toUpperCase() + ' at ' + i.ppe_status_before_injury.zone + ' ' + i.ppe_status_before_injury.at.slice(11, 16) + (i.ppe_status_before_injury.missing.length ? ' (missing ' + i.ppe_status_before_injury.missing.join(', ') + ')' : '') : 'no checkpoint on record'}`).join('\n');
+      return text;
+    }
+  },
+
   // ─── Condition Ledger (Patent 12: longitudinal asset condition) ──
   {
     name: 'tascan_register_asset',
@@ -1370,6 +1499,145 @@ const TOOLS = [
   },
 
   // ─── Gig Payments (verification-gated direct payer→worker) ───────
+  {
+    name: 'tascan_generate_report',
+    description: 'Mint a shareable report and get its link. Types: completion (full proof-of-work for one list: tasks, responses, subtasks, photos, GPS + place names, timing, QR pair), service (client-facing version of a list with YOUR company branding and a Client Acknowledgment button — the ack files into the list thread), project (every list in a project rolled up), evidence (compliance Evidence Pack; admin sign-in required to view). Links are stable — the same list/project returns the same link. Optionally text the link to a phone through the TaScan SMS lane.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        type: { type: 'string', enum: ['completion', 'service', 'project', 'evidence'] },
+        list_id: { type: 'string', description: 'Required for completion / service' },
+        project_id: { type: 'string', description: 'Required for project / evidence' },
+        company_name: { type: 'string', description: 'Service report branding (defaults to the org name)' },
+        message: { type: 'string', description: 'Service report: a note to the client shown under the header' },
+        show_workers: { type: 'boolean', description: 'Service report: show worker names (default true)' },
+        show_issues: { type: 'boolean', description: 'Service report: include reported issues (default false)' },
+        send_to_phone: { type: 'string', description: 'Text the link to this number (E.164 or 10-digit US)' },
+        send_note: { type: 'string', description: 'Short intro for the text, e.g. "Here is your report from Love Productions:"' }
+      },
+      required: ['type']
+    },
+    annotations: { title: 'Generate Report Link', readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    handler: async (args, api) => {
+      const result = await api('POST', '/reports', args);
+      const d = result.data;
+      let text = `${d.type.charAt(0).toUpperCase() + d.type.slice(1)} report ${d.created ? 'created' : 'ready'}:\n${d.url}`;
+      if (d.note) text += `\n(${d.note})`;
+      if (d.sms) text += d.sms.sent ? `\n\nTexted to ${d.sms.to}.` : `\n\nSMS not sent: ${d.sms.error}`;
+      return text;
+    }
+  },
+  {
+    name: 'tascan_list_reports',
+    description: 'List existing report links for a list or project (completion / service / project / evidence), newest first, with client acknowledgment status for service reports.',
+    inputSchema: {
+      type: 'object',
+      properties: { list_id: { type: 'string' }, project_id: { type: 'string' } },
+      required: []
+    },
+    annotations: { title: 'List Report Links', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    handler: async (args, api) => {
+      const qs = new URLSearchParams();
+      if (args.list_id) qs.set('list_id', args.list_id);
+      if (args.project_id) qs.set('project_id', args.project_id);
+      const result = await api('GET', '/reports' + (qs.toString() ? '?' + qs.toString() : ''));
+      const rows = result.data || [];
+      if (!rows.length) return 'No reports yet — use tascan_generate_report.';
+      return rows.map(r => `${r.type.toUpperCase()} · ${r.title || ''} · ${r.created_at.slice(0, 10)}` +
+        (r.acknowledged_at ? ` · ✓ acknowledged by ${r.acknowledged_by || 'client'} ${r.acknowledged_at.slice(0, 10)}` : (r.type === 'service' ? ' · not yet acknowledged' : '')) +
+        (r.url ? `\n   ${r.url}` : '')).join('\n');
+    }
+  },
+  {
+    name: 'tascan_create_invoice',
+    description: 'Create a client invoice and get its shareable link. Two ways to bill: (a) pass explicit line_items, or (b) pass project_id or task_list_ids plus hourly_rate (quarter-hour billing from first→last verified completion per list) or flat_rate_per_list, and TaScan builds one line per list from VERIFIED work ("<list> — 7/7 tasks verified · Sep 1 · 1.25h"); lists with no completions are skipped. A single-list invoice also mints a client-facing Service Report (acknowledge → pay) and links it. Returns invoice number, totals, url, and the work it billed.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        client_name: { type: 'string', description: 'Bill-to name (person or company)' },
+        client_email: { type: 'string' },
+        client_phone: { type: 'string' },
+        project_id: { type: 'string', description: 'Bill every list in this project (auto line items)' },
+        task_list_ids: { type: 'array', items: { type: 'string' }, description: 'Bill just these lists (auto line items)' },
+        hourly_rate: { type: 'number', description: 'Dollars per hour for auto line items' },
+        flat_rate_per_list: { type: 'number', description: 'Dollars per list for auto line items (used when no hourly_rate)' },
+        min_hours: { type: 'number', description: 'Minimum billable hours per list (e.g. 1)' },
+        billing: { type: 'object', description: 'Billing rules for auto line items. mode: hourly (default when hourly_rate given) | day_rate | flat. Overtime/double time are computed PER WORK DAY from verified completions: hours over overtime_after_hours (default 8) bill at overtime_multiplier (1.5×), hours over double_time_after_hours (12) at double_time_multiplier (2×); set overtime:false to disable. per_diem adds one line × work days (or per_diem_days). expenses are pass-through lines.', properties: {
+          mode: { type: 'string', enum: ['hourly', 'day_rate', 'flat'] },
+          hourly_rate: { type: 'number' }, day_rate: { type: 'number' }, flat_rate_per_list: { type: 'number' }, min_hours: { type: 'number' },
+          overtime: { type: 'boolean' }, overtime_after_hours: { type: 'number' }, overtime_multiplier: { type: 'number' },
+          double_time_after_hours: { type: 'number' }, double_time_multiplier: { type: 'number' },
+          per_diem: { type: 'number', description: 'Dollars per work day' }, per_diem_days: { type: 'number' },
+          expenses: { type: 'array', items: { type: 'object', properties: { description: { type: 'string' }, amount: { type: 'number' }, quantity: { type: 'number' } }, required: ['description', 'amount'] } }
+        } },
+        line_items: { type: 'array', description: 'Explicit lines instead of auto-billing', items: { type: 'object', properties: { description: { type: 'string' }, quantity: { type: 'number' }, unit_price: { type: 'number' } }, required: ['description', 'unit_price'] } },
+        tax_rate: { type: 'number', description: 'Fraction, e.g. 0.0825 for 8.25%' },
+        due_date: { type: 'string', description: 'YYYY-MM-DD (default: 30 days out)' },
+        notes: { type: 'string', description: 'Payment terms / thank-you shown on the invoice' },
+        company_name: { type: 'string', description: 'Your company name on the attached Service Report (defaults to the org name)' },
+        attach_service_report: { type: 'boolean', description: 'Mint + link a Service Report for single-list invoices (default true)' },
+        payment_options: { type: 'object', description: 'Pay-how-you-like buttons on the invoice (defaults to the org\'s saved handles). Keys: venmo (@handle), cashapp ($cashtag), paypal (paypal.me name), zelle (phone/email), applecash (phone), other (free text e.g. "cash or check"). Stripe card checkout is separate and only shows when the org has invoice_payments enabled.', properties: { venmo: { type: 'string' }, cashapp: { type: 'string' }, paypal: { type: 'string' }, zelle: { type: 'string' }, applecash: { type: 'string' }, other: { type: 'string' } } },
+        status: { type: 'string', enum: ['draft', 'sent'], description: 'Default sent' }
+      },
+      required: ['client_name']
+    },
+    annotations: { title: 'Create Invoice', readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
+    handler: async (args, api) => {
+      const result = await api('POST', '/invoices', args);
+      const inv = result.data;
+      let text = `Invoice ${inv.invoice_number} — $${Number(inv.total).toFixed(2)} to ${inv.client_name} (${inv.status})\n\nLink: ${inv.url}\n`;
+      if (inv.service_report_url) text += `Service Report (client acknowledges here): ${inv.service_report_url}\n`;
+      text += `\nLines:\n` + (inv.line_items || []).map(li => `  • ${li.description} — ${li.quantity} × $${Number(li.unit_price).toFixed(2)} = $${Number(li.amount).toFixed(2)}`).join('\n');
+      text += `\n\nSubtotal $${Number(inv.subtotal).toFixed(2)}` + (Number(inv.tax_amount) ? ` · Tax $${Number(inv.tax_amount).toFixed(2)}` : '') + ` · Due ${inv.due_date}\nInvoice ID: ${inv.id}`;
+      return text;
+    }
+  },
+  {
+    name: 'tascan_list_invoices',
+    description: 'List invoices for the org (newest first) with status, client, total, due date and share link. Filter by status (draft/sent/paid/overdue/cancelled) or project.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        status: { type: 'string', enum: ['draft', 'sent', 'paid', 'overdue', 'cancelled'] },
+        project_id: { type: 'string' }
+      },
+      required: []
+    },
+    annotations: { title: 'List Invoices', readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    handler: async (args, api) => {
+      const qs = new URLSearchParams();
+      if (args.status) qs.set('status', args.status);
+      if (args.project_id) qs.set('project_id', args.project_id);
+      const result = await api('GET', '/invoices' + (qs.toString() ? '?' + qs.toString() : ''));
+      const rows = result.data || [];
+      if (!rows.length) return 'No invoices yet.';
+      const outstanding = rows.filter(r => r.status === 'sent' || r.status === 'overdue').reduce((s, r) => s + Number(r.total || 0), 0);
+      return rows.map(r => `${r.invoice_number} · ${r.status.toUpperCase()} · $${Number(r.total).toFixed(2)} · ${r.client_name}${r.due_date ? ' · due ' + r.due_date : ''}${r.paid_at ? ' · paid ' + r.paid_at.slice(0, 10) : ''}\n   ${r.url}\n   id ${r.id}`).join('\n') +
+        `\n\nOutstanding: $${outstanding.toFixed(2)} across ${rows.filter(r => r.status === 'sent' || r.status === 'overdue').length} invoice(s)`;
+    }
+  },
+  {
+    name: 'tascan_update_invoice',
+    description: 'Update an invoice: mark it paid (records paid_at), overdue, cancelled, or edit client details / notes / due date.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        invoice_id: { type: 'string' },
+        status: { type: 'string', enum: ['draft', 'sent', 'paid', 'overdue', 'cancelled'] },
+        paid_at: { type: 'string', description: 'ISO timestamp (default now) when status = paid' },
+        client_name: { type: 'string' }, client_email: { type: 'string' }, client_phone: { type: 'string' },
+        notes: { type: 'string' }, due_date: { type: 'string' }
+      },
+      required: ['invoice_id']
+    },
+    annotations: { title: 'Update Invoice', readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false },
+    handler: async (args, api) => {
+      const { invoice_id, ...patch } = args;
+      const result = await api('PUT', `/invoices/${invoice_id}`, patch);
+      const inv = result.data;
+      return `Invoice ${inv.invoice_number} → ${inv.status.toUpperCase()}${inv.paid_at ? ' (paid ' + inv.paid_at.slice(0, 10) + ')' : ''} · $${Number(inv.total).toFixed(2)} · ${inv.client_name}\n${inv.url}`;
+    }
+  },
   {
     name: 'tascan_request_payment',
     description: 'Pledge a payment on a task list: when the list is verified complete (every task done + photo evidence on photo-required tasks), the payer automatically receives a Stripe pay link that routes the money DIRECTLY to the worker (0% TaScan fee). No money moves and no card is stored at pledge time. The worker must have completed payout onboarding (Get Paid on their profile).',
@@ -1503,7 +1771,8 @@ const TOOLS = [
       properties: {
         worker_id: { type: 'string', description: 'Anchor worker to find duplicates OF (preferred — enables phone + GPS signals)' },
         name: { type: 'string', description: 'Or: search duplicates by display name' },
-        threshold: { type: 'number', description: 'Min confidence 0-1 (default 0.15)' }
+        threshold: { type: 'number', description: 'Min confidence 0-1 (default 0.15)' },
+        include_orphans: { type: 'boolean', description: 'Also consider org-less (orphan) worker records — off by default' }
       },
       required: []
     },
@@ -1513,15 +1782,58 @@ const TOOLS = [
       if (args.worker_id) qs.push(`worker_id=${args.worker_id}`);
       if (args.name) qs.push(`name=${encodeURIComponent(args.name)}`);
       if (args.threshold != null) qs.push(`threshold=${args.threshold}`);
+      if (args.include_orphans) qs.push('include_orphans=true');
       const result = await api('GET', '/workers/duplicates?' + qs.join('&'));
       const d = result.data;
       if (!d.candidates.length) return `No duplicate candidates for ${d.anchor.name || d.anchor.id}.`;
       let text = `Duplicate candidates for ${d.anchor.name || ''} (${d.anchor.id || 'name search'}):\n`;
       d.candidates.forEach(c => {
-        text += `\n${c.name} (${c.id}) — confidence ${c.confidence}\n  signals: ${JSON.stringify(c.signals)}\n  created ${String(c.created_at).slice(0, 10)} · last active ${String(c.last_active_at || '').slice(0, 10)} · ${c.total_points} pts`;
+        text += `\n${c.name} (${c.id}) — confidence ${c.confidence}\n  signals: ${JSON.stringify(c.signals)}\n  created ${String(c.created_at).slice(0, 10)} · last active ${String(c.last_active_at || '').slice(0, 10)} · ${c.total_points} pts · ${c.merge_ready ? 'MERGE-READY' : 'blockers: ' + (c.blockers || []).join(',')}`;
       });
+      if (d.suggested_merge) {
+        text += `\n\nNext step: tascan_merge_workers(primary_worker_id=${d.suggested_merge.primary_worker_id}, duplicate_worker_ids=[${d.suggested_merge.duplicate_worker_ids.join(', ')}], dry_run=true)`;
+      }
       return text;
     }
+  },
+  {
+    name: 'tascan_merge_workers',
+    description: 'Merge duplicate worker records into one canonical identity (Patent 4 identity consolidation). Reassigns every reference (completions, timer events, points, payments, rosters — 31 columns across 31 tables), backfills missing phone/email on the primary, sums points, and tombstones the duplicates (merged_into + is_active=false — NEVER hard-deletes). ALWAYS run with dry_run=true first and show Mike the counts; pass dry_run=false only after explicit confirmation.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        primary_worker_id: { type: 'string', description: 'The canonical worker that survives (usually the one with a phone)' },
+        duplicate_worker_ids: { type: 'array', items: { type: 'string' }, description: 'Worker IDs to fold into the primary (max 20)' },
+        dry_run: { type: 'boolean', description: 'true (default) = report reassignment counts only, change nothing. false = execute atomically.' }
+      },
+      required: ['primary_worker_id', 'duplicate_worker_ids']
+    },
+    annotations: { title: 'Merge Workers', readOnlyHint: false, destructiveHint: true, idempotentHint: false, openWorldHint: false },
+    handler: async (args, api) => {
+      const result = await api('POST', '/workers/merge', {
+        primary_worker_id: args.primary_worker_id,
+        duplicate_worker_ids: args.duplicate_worker_ids,
+        dry_run: args.dry_run !== false
+      });
+      const d = result.data;
+      const rows = Object.entries(d.counts || {}).map(([t, n]) => `  ${t}: ${n}`).join('\n') || '  (no references found)';
+      const conf = (d.conflicts || []).length ? `\nConflicts:\n  ${d.conflicts.join('\n  ')}` : '';
+      return `${d.dry_run ? 'DRY RUN — no changes made' : 'MERGE EXECUTED'}\nPrimary: ${d.primary_worker_id}\nDuplicates: ${(d.duplicate_worker_ids || []).join(', ')}\nReassignment counts:\n${rows}${conf}${d.dry_run ? '\n\nTo execute: call again with dry_run=false.' : '\nDuplicates tombstoned (merged_into set, is_active=false). Logged to worker_merge_log.'}`;
+    }
+  },
+  {
+    name: 'tascan_delete_worker',
+    description: 'Tombstone a worker record (is_active=false). REFUSES if the worker has any task/subtask completions or payments — merge those into the real worker with tascan_merge_workers instead. Never hard-deletes.',
+    inputSchema: {
+      type: 'object',
+      properties: { worker_id: { type: 'string', description: 'Worker ID to delete' } },
+      required: ['worker_id']
+    },
+    annotations: { title: 'Delete Worker', readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false },
+    handler: async (args, api) => {
+      const result = await api('DELETE', `/workers/${args.worker_id}`);
+      return `Worker ${args.worker_id} tombstoned (soft delete — record retained for audit).`;
+    }
   }
 ];