feat: Phase 3 — upload infrastructure + image workers + app availabilities v2 (284 tools)

New infrastructure:
- UploadService: universal file upload helper (read file, MD5 checksum, parallel chunk upload via TaskGroup, presigned URLs without JWT)

New workers (1):
- ReviewAttachmentsWorker (review_attachments_*): 4 tools — upload (full reserve→upload→commit cycle), get, delete, list

Extended workers with upload support (3):
- InAppPurchasesWorker: +3 (iap_upload_image, iap_get_image, iap_delete_image)
- SubscriptionsWorker: +6 (subscription images upload/get/delete, review screenshots upload/get/delete)
- PromotedPurchasesWorker: +3 (promoted_upload_image, promoted_get_image, promoted_delete_image)

Extended workers (1):
- PricingWorker: +3 (app availabilities v2 — create, get, list territory availabilities)

Total: 33 workers, 284 tools, 435 tests

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: zelentsov-dev

CLAUDE.md

@@ -16,7 +16,7 @@ MCP (Model Context Protocol) server for App Store Connect API integration, desig
 # Build the project
 swift build
 
-# Run all unit tests (423 tests)
+# Run all unit tests (435 tests)
 swift test
 
 # Run the MCP server (requires environment variables or companies.json)
@@ -49,7 +49,7 @@ Each company needs: `keyID`, `issuerID`, `privateKeyPath` (path to `.p8` file).
 
 **WorkerManager** (`Workers/MainWorker/WorkerManager.swift`) — central registry, routes tool calls by prefix.
 
-**Workers** (31 workers, 265 tools):
+**Workers** (33 workers, 284 tools):
 
 | Worker | Prefix | Tools | Domain |
 |--------|--------|-------|--------|
@@ -62,15 +62,15 @@ Each company needs: `keyID`, `issuerID`, `privateKeyPath` (path to `.p8` file).
 | AppLifecycleWorker | `app_versions_` | 14 | Versions, submit, release, phased rollout, delete |
 | ReviewsWorker | `reviews_` | 8 | Customer reviews, responses, AI summarizations |
 | BetaGroupsWorker | `beta_groups_` | 9 | TestFlight groups CRUD, testers, builds |
-| InAppPurchasesWorker | `iap_` | 19 | IAP, subscriptions, localizations, prices, screenshots, availability |
+| InAppPurchasesWorker | `iap_` | 22 | IAP, subscriptions, localizations, prices, screenshots, availability, images |
 | ProvisioningWorker | `provisioning_` | 17 | Bundle IDs, devices, certificates, profiles, capabilities |
 | BetaTestersWorker | `beta_testers_` | 12 | Tester management, search, invite, relationships, invitations |
 | AppInfoWorker | `app_info_` | 10 | App info, categories, localizations, EULA |
-| PricingWorker | `pricing_` | 6 | Territories, availability, price points/schedule |
+| PricingWorker | `pricing_` | 9 | Territories, availability, price points/schedule, app availabilities v2 |
 | UsersWorker | `users_` | 10 | Team members, roles, invitations, visible apps |
 | AppEventsWorker | `app_events_` | 9 | In-app events CRUD, localizations |
 | AnalyticsWorker | `analytics_` | 11 | Sales/financial reports, app summary, analytics reports/instances/segments, snapshot status |
-| SubscriptionsWorker | `subscriptions_` | 21 | Subscription CRUD, groups, localizations, prices, submit, group localizations, price delete |
+| SubscriptionsWorker | `subscriptions_` | 27 | Subscription CRUD, groups, localizations, prices, submit, group localizations, images, review screenshots |
 | OfferCodesWorker | `offer_codes_` | 10 | Subscription offer codes, one-time codes, custom codes |
 | WinBackOffersWorker | `winback_` | 5 | Win-back offers for subscriptions |
 | IntroductoryOffersWorker | `intro_offers_` | 4 | Introductory offers (free trial, pay-as-you-go, pay-up-front) |
@@ -82,7 +82,8 @@ Each company needs: `keyID`, `issuerID`, `privateKeyPath` (path to `.p8` file).
 | ScreenshotsWorker | `screenshots_` | 12 | Screenshots, previews, sets, reorder |
 | CustomProductPagesWorker | `custom_pages_` | 10 | Custom product pages, versions, localizations |
 | ProductPageOptimizationWorker | `ppo_` | 9 | A/B test experiments, treatments |
-| PromotedPurchasesWorker | `promoted_` | 5 | Promoted in-app purchases, images |
+| PromotedPurchasesWorker | `promoted_` | 8 | Promoted in-app purchases, images upload |
+| ReviewAttachmentsWorker | `review_attachments_` | 4 | App Store review attachments (upload, get, delete, list) |
 | MetricsWorker | `metrics_` | 4 | Performance/power metrics, diagnostics |
 
 **Services**: HTTPClient (actor, GET/POST/PATCH/PUT/DELETE + retry with 429), JWTService (ES256), CompaniesManager
@@ -109,7 +110,7 @@ Each company needs: `keyID`, `issuerID`, `privateKeyPath` (path to `.p8` file).
 ### Unit Tests (Swift Testing)
 
 ```bash
-swift test    # Run all 423 tests across 31 suites
+swift test    # Run all 435 tests across 31 suites
 ```
 
 Test categories:

README.md

@@ -29,7 +29,7 @@
 
 ## Overview
 
-**asc-mcp** is a Swift-based MCP server that bridges [Claude](https://claude.ai) (or any MCP-compatible host) with the [App Store Connect API](https://developer.apple.com/documentation/appstoreconnectapi). It exposes **265 tools** across 31 workers, enabling you to automate your entire iOS/macOS release workflow through natural language.
+**asc-mcp** is a Swift-based MCP server that bridges [Claude](https://claude.ai) (or any MCP-compatible host) with the [App Store Connect API](https://developer.apple.com/documentation/appstoreconnectapi). It exposes **284 tools** across 33 workers, enabling you to automate your entire iOS/macOS release workflow through natural language.
 
 ### Key capabilities
 
@@ -368,7 +368,7 @@ Add to `~/.codeium/windsurf/mcp_config.json`:
 
 ### Worker Filtering
 
-The server exposes **265 tools** across 31 workers. Some MCP clients impose a tool limit (e.g., Windsurf caps at 100). Use `--workers` to enable only the workers you need:
+The server exposes **284 tools** across 33 workers. Some MCP clients impose a tool limit (e.g., Windsurf caps at 100). Use `--workers` to enable only the workers you need:
 
 ```bash
 # Only load apps, builds, and version lifecycle tools
@@ -432,7 +432,7 @@ For Claude (200K context) ~22K tokens is ~5–7% — negligible. For clients wit
 
 ## Available Tools
 
-**265 tools** organized across 31 workers (use `--workers` to filter — see [Worker Filtering](#worker-filtering)):
+**284 tools** organized across 33 workers (use `--workers` to filter — see [Worker Filtering](#worker-filtering)):
 
 <details>
 <summary><strong>Company Management</strong> — 3 tools</summary>
@@ -887,7 +887,7 @@ Sources/asc-mcp/
 │   ├── HTTPClient.swift            #   Actor-based HTTP with retry logic
 │   ├── JWTService.swift            #   ES256 JWT token generation
 │   └── CompaniesManager.swift      #   Multi-account management
-└── Workers/                        # MCP tool implementations (31 workers)
+└── Workers/                        # MCP tool implementations (33 workers)
     ├── MainWorker/WorkerManager    #   Central tool registry & routing
     ├── CompaniesWorker/            #   company_* tools
     ├── AuthWorker/                 #   auth_* tools

Sources/asc-mcp/Core/Application.swift

@@ -68,6 +68,7 @@ public func runApplication(enabledWorkers: Set<String>? = nil) async throws {
         - ppo_* -- product page optimization (A/B testing)
         - promoted_* -- promoted in-app purchases
         - metrics_* -- performance metrics and diagnostics
+        - review_attachments_* -- app store review attachments (upload, get, delete, list)
         """,
         capabilities: Server.Capabilities(
             tools: Server.Capabilities.Tools(listChanged: true)

Sources/asc-mcp/EntryPoint.swift

@@ -51,7 +51,7 @@ struct ASCMCPApp {
             "subscriptions", "offer_codes", "winback", "intro_offers", "promo_offers",
             "sandbox", "beta_app", "pre_release", "beta_license",
             "screenshots", "custom_pages",
-            "ppo", "promoted", "metrics"
+            "ppo", "promoted", "metrics", "review_attachments"
         ]
 
         let requested = CommandLine.arguments[index + 1]

Sources/asc-mcp/Models/AppLifecycle/ReviewAttachmentModels.swift

@@ -0,0 +1,72 @@
+import Foundation
+
+// MARK: - Review Attachment Models
+
+/// Review attachments list response
+public struct ASCReviewAttachmentsResponse: Codable, Sendable {
+    public let data: [ASCReviewAttachment]
+    public let links: ASCPagedDocumentLinks?
+}
+
+/// Single review attachment response
+public struct ASCReviewAttachmentResponse: Codable, Sendable {
+    public let data: ASCReviewAttachment
+}
+
+/// Review attachment resource
+public struct ASCReviewAttachment: Codable, Sendable {
+    public let type: String
+    public let id: String
+    public let attributes: ReviewAttachmentAttributes?
+}
+
+/// Review attachment attributes
+public struct ReviewAttachmentAttributes: Codable, Sendable {
+    public let fileSize: Int?
+    public let fileName: String?
+    public let sourceFileChecksum: String?
+    public let uploadOperations: [ASCUploadOperation]?
+    public let assetDeliveryState: ASCAssetDeliveryState?
+}
+
+// MARK: - Review Attachment Request Models
+
+/// Create review attachment reservation request
+public struct CreateReviewAttachmentRequest: Codable, Sendable {
+    public let data: CreateData
+
+    public struct CreateData: Codable, Sendable {
+        public let type: String = "appStoreReviewAttachments"
+        public let attributes: Attributes
+        public let relationships: Relationships
+    }
+
+    public struct Attributes: Codable, Sendable {
+        public let fileSize: Int
+        public let fileName: String
+    }
+
+    public struct Relationships: Codable, Sendable {
+        public let appStoreReviewDetail: ReviewDetailRelationship
+    }
+
+    public struct ReviewDetailRelationship: Codable, Sendable {
+        public let data: ASCResourceIdentifier
+    }
+}
+
+/// Commit review attachment request
+public struct CommitReviewAttachmentRequest: Codable, Sendable {
+    public let data: CommitData
+
+    public struct CommitData: Codable, Sendable {
+        public let type: String = "appStoreReviewAttachments"
+        public let id: String
+        public let attributes: Attributes
+    }
+
+    public struct Attributes: Codable, Sendable {
+        public let sourceFileChecksum: String?
+        public let uploaded: Bool?
+    }
+}

Sources/asc-mcp/Models/InAppPurchases/InAppPurchaseModels.swift

@@ -350,6 +350,70 @@ public struct CreateIAPAvailabilityRequest: Codable, Sendable {
     }
 }
 
+// MARK: - IAP Image Models
+
+/// IAP image single response
+public struct ASCIAPImageResponse: Codable, Sendable {
+    public let data: ASCIAPImage
+}
+
+/// IAP image resource
+public struct ASCIAPImage: Codable, Sendable {
+    public let type: String
+    public let id: String
+    public let attributes: IAPImageAttributes?
+}
+
+/// IAP image attributes
+public struct IAPImageAttributes: Codable, Sendable {
+    public let fileSize: Int?
+    public let fileName: String?
+    public let sourceFileChecksum: String?
+    public let imageAsset: ASCImageAsset?
+    public let uploadOperations: [ASCUploadOperation]?
+    public let state: String?
+}
+
+/// Create IAP image reservation request
+public struct CreateIAPImageRequest: Codable, Sendable {
+    public let data: CreateData
+
+    public struct CreateData: Codable, Sendable {
+        public let type: String = "inAppPurchaseImages"
+        public let attributes: Attributes
+        public let relationships: Relationships
+    }
+
+    public struct Attributes: Codable, Sendable {
+        public let fileSize: Int
+        public let fileName: String
+    }
+
+    public struct Relationships: Codable, Sendable {
+        public let inAppPurchase: IAPImageRelationship
+    }
+
+    public struct IAPImageRelationship: Codable, Sendable {
+        public let data: ASCResourceIdentifier
+    }
+}
+
+/// Commit IAP image request
+public struct CommitIAPImageRequest: Codable, Sendable {
+    public let data: CommitData
+
+    public struct CommitData: Codable, Sendable {
+        public let type: String = "inAppPurchaseImages"
+        public let id: String
+        public let attributes: Attributes
+    }
+
+    public struct Attributes: Codable, Sendable {
+        public let sourceFileChecksum: String?
+        public let uploaded: Bool?
+    }
+}
+
 // MARK: - Create IAP Review Screenshot Request
 
 /// Create IAP review screenshot request

Sources/asc-mcp/Models/Marketing/PromotedPurchaseImageModels.swift

@@ -0,0 +1,67 @@
+import Foundation
+
+// MARK: - Promoted Purchase Image Models
+
+/// Single promoted purchase image response
+public struct ASCPromotedPurchaseImageResponse: Codable, Sendable {
+    public let data: ASCPromotedPurchaseImage
+}
+
+/// Promoted purchase image resource
+public struct ASCPromotedPurchaseImage: Codable, Sendable {
+    public let type: String
+    public let id: String
+    public let attributes: PromotedPurchaseImageAttributes?
+}
+
+/// Promoted purchase image attributes
+public struct PromotedPurchaseImageAttributes: Codable, Sendable {
+    public let fileSize: Int?
+    public let fileName: String?
+    public let sourceFileChecksum: String?
+    public let imageAsset: ASCImageAsset?
+    public let uploadOperations: [ASCUploadOperation]?
+    public let state: String?
+}
+
+// MARK: - Request Models
+
+/// Create promoted purchase image request (reserve step)
+public struct CreatePromotedPurchaseImageRequest: Codable, Sendable {
+    public let data: CreateData
+
+    public struct CreateData: Codable, Sendable {
+        public let type: String = "promotedPurchaseImages"
+        public let attributes: Attributes
+        public let relationships: Relationships
+    }
+
+    public struct Attributes: Codable, Sendable {
+        public let fileSize: Int
+        public let fileName: String
+    }
+
+    public struct Relationships: Codable, Sendable {
+        public let promotedPurchase: PromotedPurchaseRelationship
+    }
+
+    public struct PromotedPurchaseRelationship: Codable, Sendable {
+        public let data: ASCResourceIdentifier
+    }
+}
+
+/// Commit promoted purchase image request
+public struct CommitPromotedPurchaseImageRequest: Codable, Sendable {
+    public let data: CommitData
+
+    public struct CommitData: Codable, Sendable {
+        public let type: String = "promotedPurchaseImages"
+        public let id: String
+        public let attributes: Attributes
+    }
+
+    public struct Attributes: Codable, Sendable {
+        public let sourceFileChecksum: String?
+        public let uploaded: Bool?
+    }
+}

Sources/asc-mcp/Models/Pricing/AppAvailabilityModels.swift

@@ -0,0 +1,31 @@
+import Foundation
+
+// MARK: - Create App Availability v2 Request
+
+/// Request body for creating app availability via v2 endpoint
+public struct CreateAppAvailabilityV2Request: Codable, Sendable {
+    public let data: CreateData
+
+    public struct CreateData: Codable, Sendable {
+        public let type: String = "appAvailabilities"
+        public let attributes: Attributes
+        public let relationships: Relationships
+    }
+
+    public struct Attributes: Codable, Sendable {
+        public let availableInNewTerritories: Bool
+    }
+
+    public struct Relationships: Codable, Sendable {
+        public let app: AppRelationship
+        public let territoryAvailabilities: TerritoryAvailabilitiesRelationship
+    }
+
+    public struct AppRelationship: Codable, Sendable {
+        public let data: ASCResourceIdentifier
+    }
+
+    public struct TerritoryAvailabilitiesRelationship: Codable, Sendable {
+        public let data: [ASCResourceIdentifier]
+    }
+}