com.robotsquid.squidhub 0.5.2 → 0.5.4

package/CHANGELOG.md

@@ -1,5 +1,42 @@
 # Changelog
 
+## 0.5.4
+
+**No functional change from 0.5.3.**
+
+Published to supersede an accidental blanket deprecation: `npm deprecate` was
+run without a version specifier, which marks *every* published version rather
+than one, so 0.5.0 through 0.5.3 all carry npm's generic "Package no longer
+supported" text — including the version people should have been installing.
+
+Deprecation is per-version and there is no package-level flag, so a new release
+is undeprecated by definition. ⚠️ The older versions keep their misleading
+marking; three of them ought to be deprecated anyway (0.5.0 ships no root
+`.meta` files, 0.5.1 predates the uncompressed-upload model, 0.5.2 rewrites
+compressed asset URLs for a hosting model that no longer exists), just not for
+the reason the text gives.
+
+⚠️ **`npm deprecate <package>` with no `@version` applies to everything.** Always
+write `npm deprecate <package>@<version>`.
+
+## 0.5.3
+
+**Compressed builds are now refused in the Editor**, with a message naming the
+setting to change. Player Settings → Publishing Settings → **Compression Format
+→ Disabled**.
+
+SquidHub serves build assets uncompressed and Cloudflare compresses them at the
+edge. A build compressed beforehand cannot be served at all: R2 stores it
+correctly, but the edge either strips `Content-Encoding` or compresses the body
+a second time, and no zone configuration preserves it. `squidhub-release`
+refuses such files at upload too — this check exists so the failure lands in the
+Editor, next to the setting that causes it.
+
+⚠️ **Removes 0.5.2's rewriting of compressed asset URLs.** That pointed
+`web.wasm.br` at the key it was stored under, which was correct for a hosting
+model since disproven. With compressed builds refused outright there is nothing
+left for it to rewrite.
+
 ## 0.5.2
 
 ⚠️ **Fixes `Unable to load file Build/<name>.br!` — a Unity build that reached

package/Editor/SquidHubAudit.cs

@@ -87,27 +87,23 @@ namespace SquidHub.Editor
                 AllowThreadsDefine + " to the WebGL scripting define symbols to silence this.");
         }
 
+        // ⚠️ FATAL, not a warning. A precompressed build cannot be served: R2
+        // stores it fine, but Cloudflare either strips Content-Encoding or
+        // compresses the body a second time, and no zone configuration
+        // preserves it. squidhub-release refuses these at upload too — this
+        // check exists so the failure lands in the Editor, next to the setting
+        // that causes it, rather than in a CLI twenty minutes later.
         private static void CheckCompression(List<Finding> findings)
         {
             var format = PlayerSettings.WebGL.compressionFormat;
+            if (format == WebGLCompressionFormat.Disabled) return;
 
-            if (format == WebGLCompressionFormat.Disabled)
-            {
-                Warn(findings,
-                    "Compression is disabled. squidhub-release records Content-Encoding from " +
-                    "the file suffix at upload, so Brotli costs you nothing at runtime and " +
-                    "saves the player most of the download.");
-            }
-
-            // ⚠️ Not an error — just weight. The platform serves the correct
-            // Content-Encoding, so the JS decompressor never has to run.
-            if (PlayerSettings.WebGL.decompressionFallback)
-            {
-                Warn(findings,
-                    "Decompression Fallback is on. squidhub-release strips the .br suffix and " +
-                    "records Content-Encoding: br in R2, so the browser decompresses natively " +
-                    "and the bundled JS decompressor is dead weight. Turning it off is safe here.");
-            }
+            Fatal(findings,
+                "Compression Format is " + format + ". SquidHub serves build assets " +
+                "uncompressed and Cloudflare compresses them at the edge — a build " +
+                "compressed beforehand reaches the browser either undeclared or " +
+                "double-encoded, and the loader fails naming the wrong cause. Set " +
+                "Player Settings > Publishing Settings > Compression Format to Disabled.");
         }
 
         private static bool AllowsThreads()

package/Editor/SquidHubBuildProcessor.cs

@@ -79,9 +79,6 @@ namespace SquidHub.Editor
             if (result.Extracted.Count == 0)
                 log.Append("  · no inline scripts to hoist\n");
 
-            if (result.SuffixesStripped > 0)
-                log.Append("  ✓ pointed ").Append(result.SuffixesStripped)
-                   .Append(" compressed asset URL(s) at the key they are stored under\n");
 
             File.WriteAllText(indexPath, result.Html);
             foreach (var note in result.Notes) log.Append("  ✓ ").Append(note).Append('\n');

package/Editor/SquidHubHtml.cs

@@ -25,8 +25,6 @@ namespace SquidHub.Editor
             public readonly List<KeyValuePair<string, string>> Extracted =
                 new List<KeyValuePair<string, string>>();
             public readonly List<string> Notes = new List<string>();
-            /// <summary>How many compressed-asset URLs had their suffix stripped.</summary>
-            public int SuffixesStripped;
         }
 
         private static readonly Regex ScriptTag = new Regex(
@@ -51,36 +49,6 @@ namespace SquidHub.Editor
                 "text/ecmascript", "application/ecmascript",
             };
 
-        // ⚠️ squidhub-release stores `web.wasm.br` at the key `web.wasm` and
-        // records Content-Encoding: br, so the browser decodes it natively. But
-        // Unity's loader asks for the name on disk — `Build/web.wasm.br` — and
-        // gets a 404, because nothing is stored under that key.
-        //
-        // ⚠️ Rewriting the URL is also what makes the loader behave. Unity
-        // decides whether to run its own JS decompressor by looking for a .br
-        // or .gz on the URL; with the suffix gone it fetches normally and lets
-        // the browser decode, which is exactly what the stored headers want.
-        //
-        // ⚠️ Not Unity-specific, despite the trigger. ANY reference a build
-        // makes to a file it ships as `X.br` is broken the same way, because
-        // the upload strips the suffix from every one of them.
-        private static readonly Regex CompressedAssetUrl = new Regex(
-            @"([""'])([^""']+\.(?:data|wasm|js|json|symbols\.json))\.(?:br|gz)\1",
-            RegexOptions.IgnoreCase | RegexOptions.CultureInvariant);
-
-        /// <summary>Points compressed-asset URLs at the key they are actually stored under.</summary>
-        internal static string StripCompressionSuffixes(string source, out int stripped)
-        {
-            var count = 0;
-            var result = CompressedAssetUrl.Replace(source, match =>
-            {
-                count++;
-                return match.Groups[1].Value + match.Groups[2].Value + match.Groups[1].Value;
-            });
-            stripped = count;
-            return result;
-        }
-
         public static Result Apply(string html, string bridgeFileName)
         {
             var result = new Result { Html = html };
@@ -105,9 +73,6 @@ namespace SquidHub.Editor
                 if (!IsExecutable(attrs)) return match.Value;            // data, not code
 
                 var name = "squidhub-inline-" + index++ + ".js";
-                int strippedHere;
-                body = StripCompressionSuffixes(body, out strippedHere);
-                result.SuffixesStripped += strippedHere;
                 result.Extracted.Add(new KeyValuePair<string, string>(name, body));
 
                 // ⚠️ Attributes are carried across verbatim. Dropping a
@@ -117,12 +82,6 @@ namespace SquidHub.Editor
                 return "<script" + carried + " src=\"" + name + "\"></script>";
             });
 
-            // The document itself can carry them too — a template that lists the
-            // build files, or a preload hint.
-            int strippedInHtml;
-            rewritten = StripCompressionSuffixes(rewritten, out strippedInHtml);
-            result.SuffixesStripped += strippedInHtml;
-
             var tag = "<script src=\"" + bridgeFileName + "\"></script>";
             result.Html = InsertBridge(rewritten, tag, result);
             result.Changed = !ReferenceEquals(result.Html, html) && result.Html != html;

package/README.md

@@ -103,8 +103,7 @@ The package checks these for you, but for reference:
 | Setting | Value | Why |
 |---|---|---|
 | Native C/C++ Multithreading | **off** | SquidHub's default tier is not cross-origin isolated, so `SharedArrayBuffer` does not exist. A pthreads build cannot start. Ask about the isolated tier if you genuinely need threads — it carries no ads |
-| Compression Format | Brotli | `squidhub-release` strips the `.br` suffix and records `Content-Encoding: br` in R2, so the browser decompresses natively |
-| Decompression Fallback | off | The header is already correct, so the bundled JS decompressor is dead weight |
+| Compression Format | **Disabled** | ⚠️ Required, and the build is refused otherwise. SquidHub stores assets uncompressed and Cloudflare compresses them at the edge, per client. A precompressed build cannot be served correctly at all |
 
 ## Things that will otherwise bite
 
@@ -135,11 +134,14 @@ is discarded. Change a real file and rebuild.
 
 ## ⚠️ Status
 
-**The Unity path has never been run against the platform.** The HTML rewriting
-is unit-tested, the bridge is covered by the SDK's own suite, and the C#
-compiles — but no Unity build has completed a handshake with the portal. The
-JavaScript and Godot paths are tested; this one is not. Expect to shake out
-problems, and tell us what you find.
+**Verified end to end on 2026-09-04.** A real Unity WebGL build completed the
+portal handshake, received its session, read a save, and had `commerce.purchase`
+correctly refused as an ungranted capability.
+
+⚠️ **Upload your build UNCOMPRESSED** — Player Settings → Publishing Settings →
+Compression Format → **Disabled**. Cloudflare compresses at the edge and sets the
+header; a precompressed build cannot be served correctly and fails in the loader
+with a message naming the wrong cause.
 
 ## Support
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "com.robotsquid.squidhub",
-  "version": "0.5.2",
+  "version": "0.5.4",
   "displayName": "SquidHub",
   "description": "Cloud saves, analytics and the coin economy for Unity WebGL games published on SquidHub. Installs the C# wrapper, the .jslib half and the page bridge, and rewrites the exported index.html so it survives the platform's CSP.",
   "unity": "2021.3",