zelentsov-dev/asc-mcp

Highlights

• Added a dedicated build_uploads worker with 10 tools for Build Upload parents, file reservations, direct inspection, resumable transfer, commit recovery, and complete upload workflows.
• Added strict App Store Connect API 4.4.1 coverage for 8 Build Upload and Build Upload File operations.

Reliability and safety

• Upload workflows use an immutable mode-0600 snapshot and preserve one lowercase MD5 fingerprint through reservation, transfer, commit, and recovery.
• Existing completed reservations are accepted only when Apple's file-level MD5 matches the local snapshot.
• Presigned operations retry only for an explicit PUT; redirects, POST, unknown methods, and ambiguous creates are never replayed automatically.
• Exact Apple response statuses and resource ownership are verified before reporting successful mutations.
• Ambiguous outcomes preserve resource IDs and return executable inspection or continuation guidance without exposing upload credentials.
• Build Upload deletion requires an exact confirmation ID.
• Webhook triage keeps crash and screenshot recommendations bound to canonical Apple resource types and IDs.

Compatibility

• Public surface: 451 to 461 tools.
• Worker filter keys: 34 to 35.
• No existing tool was removed or renamed.
• build_uploads is independently selectable and is not enabled implicitly by --workers builds.
• Apple 4.4.1 contract accounting: 429 mapped, 471 explicitly deferred, 363 scoped out, and 0 unclassified optional inputs.

Verification

• Debug and release builds passed without release warnings.
• 1,517 tests across 122 suites passed on develop, main, and the annotated release tag.
• Strict OpenAPI, generated coverage, operation-manifest, and tag-specific release-contract gates passed.