vrc-packages-api-preview 2026.10.6-pre → 2026.10.8-pre

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +58 -43
  2. package/package.json +1 -1
package/README.md CHANGED
@@ -1,63 +1,78 @@
1
- # vrc-packages-api
1
+ <!-- LOCKED DOCUMENTATION - DO NOT CHANGE -->
2
2
 
3
- This package supplies the consumer SDK and schemas for operator, user and application APIs. It does not supply a crawler node or job runner.
3
+ # VRC Packages API
4
4
 
5
- The root exports VRCPackageClient, VRCPackageClientOptions and VRCPApiError. VRC Packages is the canonical project brand. VRCP abbreviates that name, and P already stands for Packages. Use the exact client spelling VRCPackageClient, not VRCPPackageClient or VRCPPackagesClient. Crawler, Worker and Client describe project components, not the overall brand.
5
+ This package supplies the consumer SDK and schemas for operator, user and application APIs. VRC Packages (VRCP) is an open-source discovery and indexing network engine for public VRChat creator packages (Tools, Assets, & Avatars).
6
6
 
7
- One SDK source supplies two npm identities: release `vrc-packages-api` and preview `vrc-packages-api-preview`.
8
- Version configs select their versions. Preview uses CalVer with a `pre` suffix.
9
- Version zero retains no aliases for the old client/options/error names. Package aliases do not add retired API exports.
7
+ ---
10
8
 
11
- The taxonomy subpath exposes the three umbrella values: tools, assets and avatars. It does not supply an indexed tag vocabulary or coordinator-internal evidence schemas. VPM version validation belongs to the crawler. Coordinator-owned tags and classification profiles remain under development.
9
+ ## Using this service
12
10
 
13
- The distribution contains ESM JavaScript and TypeScript declarations. It does not require TypeScript source execution, Bun or another monorepo folder at runtime. Supported imports:
11
+ ### 1. Integration via (`vrc-packages-api`)
14
12
 
15
- - `vrc-packages-api`
16
- - `vrc-packages-api/protocol`
17
- - `vrc-packages-api/types`
18
- - `vrc-packages-api/taxonomy`
19
- - `vrc-packages-api/auth`
13
+ Downstream applications can use the SDK's public contracts. For full documentation, read [docs/source](../docs/source). For agents: See [DELEGATES.md](../DELEGATES.md) for full SDK documentation overview, registration procedures, and keyset pagination guides.
20
14
 
21
- The preview package has the same subpaths under `vrc-packages-api-preview`.
22
- Consumers can keep the release import spelling with an exact npm dependency alias:
15
+ ```typescript
16
+ import { VRCPackageClient } from "vrc-packages-api";
17
+
18
+ // Backend example: supply the issued credential through protected runtime configuration.
19
+ const applicationCredential = process.env.VRCP_APP_TOKEN;
20
+ if (!applicationCredential) throw new Error("Missing application credential");
21
+
22
+ const client = new VRCPackageClient({
23
+ baseUrl: "https://coordinator.example.com",
24
+ appToken: applicationCredential,
25
+ });
26
+
27
+ // Bounded authenticated search. Indexed dynamic tag filtering remains open.
28
+ const results = await client.index.search({
29
+ query: "PhysBones",
30
+ queryOrigin: "user_authored",
31
+ });
32
+
33
+ // Resumable delta synchronization for local caches
34
+ const deltas = await client.index.syncDeltas({
35
+ limit: 100,
36
+ });
37
+ ```
38
+
39
+ **Install API package with npm or with your favorite package manager**
40
+
41
+ ```shell
42
+ # Stable Release
43
+ npm i vrc-packages-api
23
44
 
24
- ```json
25
- {
26
- "dependencies": {
27
- "vrc-packages-api": "npm:vrc-packages-api-preview@2026.10.0-pre"
28
- }
29
- }
45
+ # Unstable Nightly Builds
46
+ npm i vrc-packages-api-preview
30
47
  ```
31
48
 
32
- This is an example alias. Read the preview config for the current milestone version.
49
+ ---
33
50
 
34
- Run `bun run build` to create the distribution. Each build removes the generated `dist` directory before compilation. This prevents deleted source files from leaving stale package exports. Source files remain unchanged.
51
+ To read further, see repository documentation at [docs/applications](../docs/applications/VRCP%20API/).
35
52
 
36
- Run `bun run test` to build and test it. `npm pack` runs the build before it creates a tarball. Runtime dependencies remain declared npm dependencies, not bundled copies.
53
+ ---
37
54
 
38
- Run `npm run test:distribution` before release. This test packs the SDK, installs the tarball in a separate directory and checks all exports with ordinary Node. It also checks strict declarations, an isolated Wrangler build and native Worker execution. Use `npm run test:distribution -- --offline` when npm has cached the runtime dependencies.
55
+ ## Changelogs
39
56
 
40
- The SDK owns its pinned Worker test tools as development dependencies. The distribution test does not use another project directory. It prints and retains the temporary consumer directory for inspection. The packed SDK contains no Worker test tools or crawler source.
57
+ Current changelog lies [here](https://github.com/SlamTheDragon/vrc-packages/blob/main/CHANGELOG.md) <br/>
58
+ Read the full changelog history [here](https://github.com/SlamTheDragon/vrc-packages/tree/main/docs/changelogs/vrcp-packages-api)
41
59
 
42
- The owner authorizes release v0.0.0 and CalVer preview publication after package verification.
43
- The manifest permits publication and declares the existing Apache-2.0 license asset. CI checks the artifact before publication.
44
- The complete owner API route review still gates release v0.1.0, including its prereleases. That milestone declares a stable `/v1/` contract.
45
- Separate preview versions do not waive artifact checks or declare that stable contract.
46
- See [delivery](../docs/source/DELIVERY.md) for config routing and remaining checks.
47
- Packaging this SDK does not relocate crawler-internal Worker dependencies.
48
- The source typecheck excludes installed-consumer fixtures. The distribution gate compiles those fixtures strictly against packed declarations for each identity.
60
+ ---
49
61
 
50
- Operator lead rows use the exact Worker snake-case wire fields. The SDK adds no aliases or missing provenance. Approval and rejection require an explicit reason. Unknown fields fail validation. The grouped source and packed-consumer checks passed. Remaining authorization and report-lifecycle gaps still require review.
62
+ ## Legal & Compliance
51
63
 
52
- ## Public catalog pages
64
+ The Project operates under strict technical and legal covenants to safeguard creator rights and target infrastructure:
53
65
 
54
- `client.index.query` calls GET `/v1/app/index` without authentication. It accepts only `limit` and `cursor`. The default limit is 50. Integer limits from 1 through 100 are valid.
66
+ - **Zero-Binaries**: The crawler never fetches, stores, or mirrors binary archives (e.g. `.unitypackage`, `.zip`, `.rar`, executables, or 3D model files).
67
+ - **Mandatory Outbound Routing**: Downstream APIs and applications must provide direct outbound links to the original creator storefront or repository.
68
+ - **RFC 9309 Robots Compliance**: Honors `robots.txt` directives with conservative origin-wide AIMD rate pacing.
69
+ - **Removal Review**: App-authenticated removal reports are recorded without automatic delisting. DNS/bio ownership verification remains unimplemented.
70
+ - **Anti-AI Model Training Restrictions**: Catalog compilations are restricted from use in training generative AI models.
55
71
 
56
- ```typescript
57
- const first = await client.index.query({ limit: 100 });
58
- if (first.nextCursor !== null) {
59
- const next = await client.index.query({ limit: 100, cursor: first.nextCursor });
60
- }
61
- ```
72
+ Review [LEGAL.md](../LEGAL.md) for full operational covenants, governing law, and public terms of service.
73
+
74
+ ---
75
+
76
+ ## License
62
77
 
63
- The response contains `schemaVersion`, `packages` and `nextCursor`. A null cursor ends the page sequence. It has no total count. Unsupported options, invalid cursors and malformed responses fail validation. Use the authenticated `index.search` method for search filters.
78
+ This package is licensed under the **Apache License v2.0**
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "vrc-packages-api-preview",
3
- "version": "2026.10.6-pre",
3
+ "version": "2026.10.8-pre",
4
4
  "private": false,
5
5
  "license": "Apache-2.0",
6
6
  "repository": {