Merge branch 'dev' into fix/9578

Author: lorenzo-ranciaffi

.claude/skills/code-standards/SKILL.md

@@ -303,6 +303,31 @@ A loop that re-queues unresolved items will spin forever when the upstream sourc
 
 If `X` does nothing useful without `Y`, and there is no second consumer of `X`, merge them. Splits must pay for themselves in polymorphism, reuse, or test isolation.
 
+### 8. Accessing `Option<T>.Value` without checking `Has`
+
+`Option<T>.Value` (`Utility/Types/Result.cs`) is `default` — null for reference types — when `Has` is false. A blind read silently propagates an invalid value far from its source.
+
+```csharp
+// WRONG — Value is default/null when Has is false
+UserId userId = UserId.New(raw).Value;
+
+// WRONG in production — Unwrap() hides the absence case instead of modeling it
+UserId userId = UserId.New(raw).Unwrap();
+
+// RIGHT — branch on Has when the input may be invalid
+Option<UserId> userId = UserId.New(raw);
+if (!userId.Has) return;
+Use(userId.Value);
+
+// RIGHT — a factory that is valid by construction needs no Option at all
+UserId userId = UserId.NewRandom();
+
+// RIGHT in tests only — Unwrap() for known-valid constants; it throws loudly at the source
+UserId userId = UserId.New(KNOWN_CONSTANT).Unwrap();
+```
+
+In production code, handle `None` explicitly (early return, propagation) or use a by-construction-valid factory. `Unwrap()` is a test-only affordance — and in tests, known-valid constants go through `Unwrap()`, never bare `.Value`.
+
 ## PR Standards
 
 - **Branches:** Based on `dev` branch

.claude/skills/diagnostics-and-logging/SKILL.md

@@ -97,7 +97,7 @@ Drop a `.json` file in the build root folder, launch with `--use-log-matrix "fil
 
 ```json
 {
-    "override": true,
+    "isOverride": true,
     "debugLogMatrix": [
         { "category": "VOICE_CHAT", "severity": "Warning" }
     ],
@@ -107,8 +107,10 @@ Drop a `.json` file in the build root folder, launch with `--use-log-matrix "fil
 }
 ```
 
-- `"override": true` — Only use file values (replaces entire matrix)
-- `"override": false` — Merge with existing matrix values
+Keys must match `CategorySeverityMatrixDto` field names — `JsonUtility` ignores unknown ones. `{ "allOverride": true }` enables every category at every severity in the log file only, and takes precedence over `isOverride`/`debugLogMatrix`. A log captured under `allOverride` contains resolved media stream URLs with signed `sig`/`expire` query params — do not attach it to a public issue.
+
+- `"isOverride": true` — Only use file values (replaces entire matrix)
+- `"isOverride": false` — Merge with existing matrix values
 
 ### Use Cases
 

.gitattributes

@@ -14,6 +14,28 @@ Explorer/Assets/StreamingAssets/AssetBundles/**/*.meta -filter=lfs -diff=lfs -me
 *.glb filter=lfs diff=lfs merge=lfs -text
 *.png filter=lfs diff=lfs merge=lfs -text
 *.dll filter=lfs diff=lfs merge=lfs -text
+*.dylib filter=lfs diff=lfs merge=lfs -text
+Explorer/Assets/Plugins/UUAV/Packages/UUAV/Runtime/Plugins/x86_64/uuav-helper.exe filter=lfs diff=lfs merge=lfs -text
+Explorer/Assets/Plugins/UUAV/Packages/UUAV/Runtime/Plugins/macOS/uuav-helper filter=lfs diff=lfs merge=lfs -text
+
+##############################################################################
+# UUAV native - hashed bytes, so the line endings are part of the content
+#
+# scripts/uuav/uuav-binaries.lock.json digests these files as raw bytes, and
+# scripts/uuav/build-canonical.sh compiles them with LF forced
+# (-c core.autocrlf=false -c core.eol=lf). Without eol=lf a checkout on a host
+# with core.autocrlf=true holds CRLF copies, so `verify-binaries.py --update`
+# there records digests no other host can reproduce. The shell scripts are here
+# too: bash on the Windows runner does not accept CRLF.
+##############################################################################
+Explorer/Assets/Plugins/UUAV/native/**/*.rs text eol=lf
+Explorer/Assets/Plugins/UUAV/native/**/*.toml text eol=lf
+Explorer/Assets/Plugins/UUAV/native/**/*.lock text eol=lf
+Explorer/Assets/Plugins/UUAV/native/**/*.sb text eol=lf
+Explorer/Assets/Plugins/UUAV/**/*.sh text eol=lf
+scripts/uuav/*.sh text eol=lf
+# --update rewrites the lock, so its own newlines must not depend on the host
+scripts/uuav/uuav-binaries.lock.json text eol=lf
 
 
 ##############################################################################

.github/workflows/build-unitycloud.yml

@@ -92,6 +92,14 @@ on:
           - both
           - windows-only
           - macos-only
+      install_source:
+        description: 'Install source baked into the build'
+        required: true
+        default: 'launcher'
+        type: choice
+        options:
+          - launcher
+          - epic
   workflow_call:
     inputs:
       profile:
@@ -626,6 +634,17 @@ jobs:
           echo "MAIN_EXE=$MAIN_EXE_ABS" >> "$GITHUB_ENV"
           echo "Located: $MAIN_EXE_ABS"
 
+          # the UUAV media helper (deployed by HelperBuildPostprocessor)
+          # is a user-facing executable and must be signed like the game exe
+          HELPER_EXE=$(find build -path '*/Plugins/x86_64/uuav-helper.exe' | head -n1)
+          if [[ -z "$HELPER_EXE" ]]; then
+            echo "::error::uuav-helper.exe not found in build/ (HelperBuildPostprocessor regression?)"
+            exit 1
+          fi
+          HELPER_EXE_ABS=$(readlink -f "$HELPER_EXE")
+          echo "HELPER_EXE=$HELPER_EXE_ABS" >> "$GITHUB_ENV"
+          echo "Located: $HELPER_EXE_ABS"
+
       - name: Sign Windows executable
         if: matrix.target == 'windows64' && (inputs.is_release_build == true || github.event.inputs.force_sign == 'true')
         continue-on-error: true
@@ -641,16 +660,33 @@ jobs:
           malware_block: 'false'
           environment_name: PROD
 
+      - name: Sign UUAV helper executable
+        if: matrix.target == 'windows64' && (inputs.is_release_build == true || github.event.inputs.force_sign == 'true')
+        continue-on-error: true
+        uses: sslcom/esigner-codesign@b7f8ff36fc0de8690fbbab8e5b4421d29802f747 # develop @ 2025-06-23, pinned for supply-chain safety
+        with:
+          command: sign
+          username: ${{ secrets.ES_USERNAME }}
+          password: ${{ secrets.ES_PASSWORD }}
+          credential_id: ${{ secrets.WINDOWS_CREDENTIAL_ID_SIGNER }}
+          totp_secret: ${{ secrets.ES_TOTP_SECRET }}
+          file_path: ${{ env.HELPER_EXE }}
+          override: 'true'
+          malware_block: 'false'
+          environment_name: PROD
+
       - name: Verify Windows signature
         if: matrix.target == 'windows64' && (inputs.is_release_build == true || github.event.inputs.force_sign == 'true')
         continue-on-error: true
         run: |
           set -euo pipefail
           sudo apt-get install -y -qq osslsigncode > /dev/null 2>&1
 
-          echo "Verifying signature on $MAIN_EXE ..."
-          osslsigncode verify -in "$MAIN_EXE"
-          echo "::notice::Signature verified for $MAIN_EXE"
+          for exe in "$MAIN_EXE" "$HELPER_EXE"; do
+            echo "Verifying signature on $exe ..."
+            osslsigncode verify -in "$exe"
+            echo "::notice::Signature verified for $exe"
+          done
 
       - name: 'Tar artifact to maintain original permissions'
         if: matrix.target == 'macos'