zelentsov-dev/asc-mcp

Added

• Added 11 export_compliance_* tools for encryption declarations, document reservations and uploads, build linkage, and export-compliance readiness checks.
• Added an isolated export_compliance worker filter so clients can load the new release-gate surface without enabling unrelated domains.

Changed

• export_compliance_create_document now reserves, transfers, commits, and polls from one immutable snapshot, redacts signed delivery credentials, and returns checksum-bound recovery guidance when Apple retains a precommit reservation.
• export_compliance_upload_document is a resume-only path for exact AWAITING_UPLOAD reservations and requires the lowercase MD5 receipt for the original immutable bytes.
• Build readiness distinguishes exempt encryption from non-exempt declarations and reports only the export-compliance gate; other App Store release requirements remain explicitly not determined.
• Build assignment uses Apple's supported build update operation and verifies the resulting declaration relationship.

Fixed

• Treat ambiguous declaration creation, document reservation, upload commit, and delivery outcomes as unsafe to retry until the resource is reconciled.
• Preserve non-secret recovery states, checksum receipts, and action placeholders through error normalization while continuing to redact credential-like values.
• Confirm declaration and build parents before translating related-resource 404 responses into an absent document or declaration relationship.
• Preserve non-default pagination limits in validated declaration continuation links and reject cross-app, cross-query, empty-cursor, or unexpected continuation data.
• Retain committed or uncertain document reservations instead of suggesting an unsupported child-document delete.

Compatibility

• The public surface grows from 390 to 401 tools and from 32 to 33 worker filter keys; no existing tool was removed or renamed. Safe reservation resume now requires source_file_checksum, while normal document creation completes the upload in one call without a checksum input.
• The operation manifest maps 374 Apple operations, explicitly defers 526, and scopes out 363; all 1,263 pinned Apple 4.4.1 operations remain accounted for without overlap.
• The optional-input pin is fully classified at 2,244 total: 833 bound, 40 internally controlled, 1,371 intentionally omitted, and 0 unclassified.

Verification

• CI passed independently on develop, main, and annotated tag v3.14.0.
• Debug and release builds completed with the release-warning gate enabled.
• 1,222 tests in 108 suites passed.
• Strict Apple App Store Connect OpenAPI 4.4.1 operation, coverage, optional-input, and release contracts passed.