com.robotsquid.squidhub 0.5.1 → 0.5.3

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## 0.5.3
+
+**Compressed builds are now refused in the Editor**, with a message naming the
+setting to change. Player Settings → Publishing Settings → **Compression Format
+→ Disabled**.
+
+SquidHub serves build assets uncompressed and Cloudflare compresses them at the
+edge. A build compressed beforehand cannot be served at all: R2 stores it
+correctly, but the edge either strips `Content-Encoding` or compresses the body
+a second time, and no zone configuration preserves it. `squidhub-release`
+refuses such files at upload too — this check exists so the failure lands in the
+Editor, next to the setting that causes it.
+
+⚠️ **Removes 0.5.2's rewriting of compressed asset URLs.** That pointed
+`web.wasm.br` at the key it was stored under, which was correct for a hosting
+model since disproven. With compressed builds refused outright there is nothing
+left for it to rewrite.
+
+## 0.5.2
+
+⚠️ **Fixes `Unable to load file Build/<name>.br!` — a Unity build that reached
+the portal, rendered the shell and then could not load itself.**
+
+`squidhub-release` stores a precompressed `web.wasm.br` under the key
+`web.wasm` and records `Content-Encoding: br`, so the browser decodes it
+natively. Unity's loader asks for the name as it appears on disk —
+`Build/web.wasm.br` — and gets a 404, because nothing is stored there.
+
+The build step now points those URLs at the key they are actually stored under.
+That is also what makes the loader behave: Unity decides whether to run its own
+JavaScript decompressor by looking for a `.br` or `.gz` on the URL, and with the
+suffix gone it fetches normally and lets the browser decode — which is what the
+stored headers were asking for all along.
+
+⚠️ Not Unity-specific despite the trigger: **any** reference a build makes to a
+file it ships as `X.br` breaks identically, because the upload strips the suffix
+from every one of them. The rewrite covers `.data`, `.wasm`, `.js`, `.json` and
+`.symbols.json` in both `.br` and `.gz` form, and leaves alone a path that
+merely ends in `-br`.
+
 ## 0.5.1
 
 ⚠️ **Fixes an install that logged an error per file on every refresh.** 0.5.0

package/Editor/SquidHubAudit.cs

@@ -87,27 +87,23 @@ namespace SquidHub.Editor
                 AllowThreadsDefine + " to the WebGL scripting define symbols to silence this.");
         }
 
+        // ⚠️ FATAL, not a warning. A precompressed build cannot be served: R2
+        // stores it fine, but Cloudflare either strips Content-Encoding or
+        // compresses the body a second time, and no zone configuration
+        // preserves it. squidhub-release refuses these at upload too — this
+        // check exists so the failure lands in the Editor, next to the setting
+        // that causes it, rather than in a CLI twenty minutes later.
         private static void CheckCompression(List<Finding> findings)
         {
             var format = PlayerSettings.WebGL.compressionFormat;
+            if (format == WebGLCompressionFormat.Disabled) return;
 
-            if (format == WebGLCompressionFormat.Disabled)
-            {
-                Warn(findings,
-                    "Compression is disabled. squidhub-release records Content-Encoding from " +
-                    "the file suffix at upload, so Brotli costs you nothing at runtime and " +
-                    "saves the player most of the download.");
-            }
-
-            // ⚠️ Not an error — just weight. The platform serves the correct
-            // Content-Encoding, so the JS decompressor never has to run.
-            if (PlayerSettings.WebGL.decompressionFallback)
-            {
-                Warn(findings,
-                    "Decompression Fallback is on. squidhub-release strips the .br suffix and " +
-                    "records Content-Encoding: br in R2, so the browser decompresses natively " +
-                    "and the bundled JS decompressor is dead weight. Turning it off is safe here.");
-            }
+            Fatal(findings,
+                "Compression Format is " + format + ". SquidHub serves build assets " +
+                "uncompressed and Cloudflare compresses them at the edge — a build " +
+                "compressed beforehand reaches the browser either undeclared or " +
+                "double-encoded, and the loader fails naming the wrong cause. Set " +
+                "Player Settings > Publishing Settings > Compression Format to Disabled.");
         }
 
         private static bool AllowsThreads()

package/Editor/SquidHubBuildProcessor.cs

@@ -79,6 +79,7 @@ namespace SquidHub.Editor
             if (result.Extracted.Count == 0)
                 log.Append("  · no inline scripts to hoist\n");
 
+
             File.WriteAllText(indexPath, result.Html);
             foreach (var note in result.Notes) log.Append("  ✓ ").Append(note).Append('\n');
 

package/README.md

@@ -103,8 +103,7 @@ The package checks these for you, but for reference:
 | Setting | Value | Why |
 |---|---|---|
 | Native C/C++ Multithreading | **off** | SquidHub's default tier is not cross-origin isolated, so `SharedArrayBuffer` does not exist. A pthreads build cannot start. Ask about the isolated tier if you genuinely need threads — it carries no ads |
-| Compression Format | Brotli | `squidhub-release` strips the `.br` suffix and records `Content-Encoding: br` in R2, so the browser decompresses natively |
-| Decompression Fallback | off | The header is already correct, so the bundled JS decompressor is dead weight |
+| Compression Format | **Disabled** | ⚠️ Required, and the build is refused otherwise. SquidHub stores assets uncompressed and Cloudflare compresses them at the edge, per client. A precompressed build cannot be served correctly at all |
 
 ## Things that will otherwise bite
 
@@ -135,11 +134,14 @@ is discarded. Change a real file and rebuild.
 
 ## ⚠️ Status
 
-**The Unity path has never been run against the platform.** The HTML rewriting
-is unit-tested, the bridge is covered by the SDK's own suite, and the C#
-compiles — but no Unity build has completed a handshake with the portal. The
-JavaScript and Godot paths are tested; this one is not. Expect to shake out
-problems, and tell us what you find.
+**Verified end to end on 2026-09-04.** A real Unity WebGL build completed the
+portal handshake, received its session, read a save, and had `commerce.purchase`
+correctly refused as an ungranted capability.
+
+⚠️ **Upload your build UNCOMPRESSED** — Player Settings → Publishing Settings →
+Compression Format → **Disabled**. Cloudflare compresses at the edge and sets the
+header; a precompressed build cannot be served correctly and fails in the loader
+with a message naming the wrong cause.
 
 ## Support
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "com.robotsquid.squidhub",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "displayName": "SquidHub",
   "description": "Cloud saves, analytics and the coin economy for Unity WebGL games published on SquidHub. Installs the C# wrapper, the .jslib half and the page bridge, and rewrites the exported index.html so it survives the platform's CSP.",
   "unity": "2021.3",