Releases

Unity plugin + npm server release. Update both: a real vrc_upload needs the server (npm) and the Unity package (VCC) from this release.

Fixed

Real vrc_upload through MCP was always refused in 2.6.7–2.6.8 ("arm file not found"): the server consumed the human arm file before submitting the job while the plugin also required it. The Unity plugin is now the single consumer: it claims the arm under an exclusive lock once the VRChat SDK builder is ready, before anything is changed or built. One arm = one attempt, also across racing attempts and editors.
The server submits real uploads only to plugins that advertise vrcUploadArmClaim (PLUGIN_UPDATE_REQUIRED otherwise), checked on the connection that carries the submit.
Project selection could switch projects while an editor restarted (.../Avatar -> .../Avatar2): absolute paths are exact-only, relative paths match whole folder names, bare names prefer the exact project, and a selector keeps its meaning for the server session.
Creator Console and the upload gate use the same arm file and lifetime (UNITY_MCP_ARM_FILE / UNITY_MCP_ARM_TTL_MIN, capped at 1440 min); leftover claim locks are shown and cleared by Arm/Disarm.
macOS/Linux: server and plugin share the default registry/arm folder ($XDG_DATA_HOME or ~/.local/share).

Unity plugin + npm server release. Supersedes 2.6.7 on npm (2.6.7 shipped to GitHub/VPM only; everything in it is included here).

Added

CI: typecheck + full vitest suite (real-TCP mock plugin) + bundle build + metadata smoke on every push/PR, Ubuntu + Windows.

Fixed (external-audit follow-ups)

Server robustness: length-capped log regex (ReDoS), vpm argument-injection guard, atomic arm consumption, editor_path must be a Unity binary, TCP dial timeout, fail-fast on dead-socket sends, atomic VCC settings.json update, vrc-get discovery no longer accepts unspawnable .cmd/.bat shims.
Plugin robustness: 16-connection cap, ndmf outputDir confined to Assets/, malformed requests answer INVALID_PARAMS instead of killing the session, oversized responses answer an error instead of a silent disconnect, import-callback cleanup, HTTP health no longer discloses the project path, csc diagnostics forced to English (mojibake fix on Japanese Windows).
v2.6.7 (included): token-file permission hardening, in-editor arm gate, POSIX eval probe, safer quit/launch, pidAlive unification, maxBuffer classification, doc corrections.

Navigation Menu