Tablet System Pro — Changelog

All notable changes to this pack are recorded here.

The format follows Keep a Changelog and the pack follows Semantic Versioning.

The version below must always match the one declared in Runtime/AssemblyInfo.cs — that is the version the FOS Hub shows, and the one the Hub compares against the installed Core.

---

[Unreleased]

Nothing yet.

---

[1.0.0] — 2026-08-20

First release.

Requires FOS Tablet System Standard 2.1.0 and FOS Essentials Core 1.1.0.

Pro adds components beside the Standard ones. It replaces nothing on your prefab, so adopting it costs none of the wiring you already did, and everything keeps working exactly as before until you open the role matrix and change something.

Added

• Role matrix — FOS Essentials > FOS Tablet System Pro > Role Matrix. As many roles as your world needs, each with its own permissions, name, translation key and grant ceiling. One row per role, one column per permission.
• Account roles — FOS Essentials > FOS Tablet System Pro > Account Roles. A list of display names and the role each holds, as a floor: arrived with, restored after a crash, promotable above for one instance, never pushed below. CSV export and import, with search.
• Role gate — a component put on the object itself, ticking the roles that may see it. It never touches its own GameObject: a behaviour on a disabled object stops running and could never switch itself back on. Without an explicit target it drives its direct children.
• Role spawn — one arrival point per role. It waits for the real role rather than sending everyone to the arrival point and correcting itself, which would show as a visible round trip on every staff connection.

Guard rails

The windows refuse or flag what turns against its author. None of these look wrong at the moment they are ticked; all of them only show their consequence in a live instance.

• A role granting above its own rank creates someone more powerful than itself — flagged in red. A role granting its own rank recruits peers without limit — a warning, and only on roles that are not the highest, since that is exactly how a top role delegates.
• No role able to open the staff panel: no moderation possible at all.
• No role able to edit the community settings: rules and adult content locked for everyone.
• Removing a role still held by accounts is refused, since those people would silently fall back to the arrival role.
• A role gate that shows to nobody, or to everybody, is pointed out.
• Only the last role can be removed: a role is an index, and everything that refers to one does so by number.

Known limits

These come from the platform, not from the pack. Both are stated in the windows themselves so nobody meets them in production.

• The account list is baked into the world. Adding or removing someone takes effect only after uploading again. A role granted from inside the game would need to be stored somewhere trustworthy, and VRChat offers a world no such place — player persistence is written by the player’s own client.
• A rename loses the entry. Udon exposes no account identifier, only the display name.