# ShipIt Unity Toolkits

> ShipIt is an independent publisher of Unity toolkits with full C# source,
> editor tooling and published verification: three backends (Supabase, AWS,
> Firebase) and a license-compliance tool. No toolkit routes data through a
> ShipIt server. Store status as of 2026-09-29: the Supabase toolkit is on the
> Unity Asset Store; the AWS, Firebase and License toolkits are pre-release.

## Products

- [Unity Supabase Toolkit](https://shipitunity.com/supabase-toolkit.html):
  v1.52.1, Unity 2022.3 LTS and Unity 6, on the Unity Asset Store. Supabase for
  Unity: typed services, 38 RLS-hardened backend packs, an editor suite, a
  multi-provider AI assistant and a self-hostable operator web console. Works
  with any Supabase project, hosted or self-hosted.
  - [Documentation](https://shipitunity.com/documentation.html) · [Live-Ops console](https://shipitunity.com/live-ops.html) · [Asset Store listing](https://assetstore.unity.com/packages/tools/network/shipit-supabase-toolkit-390774)
- [Unity AWS Toolkit](https://shipitunity.com/aws-toolkit.html):
  v0.36.0, Unity 2022.3 LTS, pre-release. AWS for every Unity platform, WebGL
  included: pure-C# Cognito (SRP + MFA), Identity Pools, S3, DynamoDB, Lambda,
  realtime and game systems; no aws-sdk-net DLLs, IL2CPP/AOT-safe.
  - [Documentation](https://shipitunity.com/aws-documentation.html)
  - Agent-ready: the package ships `llms.txt`, an agent guide and five task
    skills (setup, auth, WebGL, data, troubleshooting). With Unity's Pipeline
    package (Unity 6+) eleven `aws_*` Unity CLI commands cover the doctor,
    deploy, verify, generation, provisioning, IAM, cost, release and export;
    mutations require `confirm=true` and `dry_run` previews.
  - v0.36.0 renames the game-systems namespace: `using ShipIt.Aws.GameSystems;`
    becomes `using ShipIt.Aws.Features;`.
- [Unity Firebase Toolkit](https://shipitunity.com/firebase-toolkit.html):
  v0.23.0, Unity 6.3 LTS (6000.3), pre-release. Firebase for every Unity
  platform, WebGL included: pure C# over Firebase's documented REST APIs (Auth,
  Firestore, Storage, callable Functions, Realtime Database over SSE, App
  Check), 25 game services, a 48-screen editor workspace and 19 drop-in runtime
  panels. No native plugins, no JavaScript bridges, no official Firebase SDK.
  - [Documentation](https://shipitunity.com/firebase-documentation.html)
  - Agent-ready: the package ships a generated `llms.txt`, a capability
    manifest, three agent skills and a local, socket-free MCP bridge.
- [Unity License Toolkit](https://shipitunity.com/license-toolkit.html):
  v0.4.0, Unity 2022.3 LTS, pre-release. The editor window is Tools → ShipIt →
  License Auditor (package `com.shipit.licenseaudit`). Scans packages, assets,
  fonts and binaries; seven plain-English verdicts with evidence paths; CREDITS,
  Third-Party Notices, SPDX 2.3 and CycloneDX 1.4 SBOMs, a VEX sidecar and an
  evidence pack; a release gate. Informational only — not legal advice.

## Shared pages

- [Release notes](https://shipitunity.com/updates.html): per-version
  highlights for all four toolkits; each package also ships a full CHANGELOG.md.
- [Where to buy](https://shipitunity.com/store.html): store status and
  Asset Store links for every toolkit.
- [Privacy](https://shipitunity.com/privacy.html): no analytics, no
  cookies, no telemetry to ShipIt.

## Supabase Toolkit — core API surface (C#)

- Initialize: `SupabaseClient.InitializeFromResources();`
- Auth: email/password, magic link, phone OTP, anonymous, OAuth PKCE deep links,
  Apple/Google ID tokens, MFA (TOTP), CAPTCHA, identity linking, GDPR export/delete.
- Database: typed query builder (`From<T>()` with lambda filters), full-text
  search, auto-pagination (`GetAllAsync`), offline cache + mutation replay.
- Realtime: postgres changes, broadcast, presence, private RLS-gated channels,
  native browser WebSocket on WebGL.
- Storage: uploads, resumable TUS with offset recovery, image transforms,
  signed URLs, Texture2D/Sprite/AudioClip loaders, bucket management.
- Edge Functions: typed invoke plus token streaming (`InvokeStreamingAsync`,
  SSE or raw chunks, main-thread callbacks).
- Feature services: QueueService (pgmq), CronService (pg_cron),
  HybridSearchService (RRF fusion), AnalyticsService, CloudSaveService,
  FeatureFlagService, RemoteConfigService, EconomyService, LeaderboardService,
  SecureLeaderboardService, MatchmakingService, TournamentService,
  RankedMatchmakingService, ModerationService, MailboxService, QuestService,
  BattlePassService, SeasonService, WebhookService, ReferralService,
  IdempotencyService, AuditService, RateLimitService, PushTokenService,
  IapValidationService, FriendService, GuildService, InventoryService,
  AchievementService, DailyRewardService, CloudSaveHistoryService,
  SemanticSearchService, RagService, AiChatClient, AiEmbeddingClient.

## AWS Toolkit — core API surface (C#)

- Initialize: `ShipIt.Aws.AwsClient.InitializeFromResources();`
- Auth: password, SRP (the password never leaves the device), MFA/challenge
  continuation, TOTP setup, phone OTP (custom auth), Hosted UI OAuth2 + PKCE.
- Identity: `aws.Credentials.GetAsync()` mints short-lived SigV4 credentials.
- Storage: `aws.Storage` upload/download/head/delete, ListObjectsV2,
  presigned GET/PUT URLs, resumable multipart with progress.
- Data: `aws.Data` typed models, reserved-word-safe expression builders,
  Query/Scan, batch and transactional writes, PartiQL.
- Functions: `aws.Functions` signed invokes, response streaming, Function URLs
  for WebGL.
- Game systems: `aws.Game` leaderboards (server-authoritative option), cloud
  saves, feature flags, analytics and the player economy.
- Realtime: `aws.Realtime` IAM-signed `wss://` with an offline send queue and
  bounded reconnect. Offline: `aws.Offline` durable mutation queue.

## Firebase Toolkit — core API surface (C#)

- Initialize: `FirebaseClient.InitializeFromResources();` (settings in
  `Resources/ShipIt/FirebaseSettings`).
- Auth: `FirebaseClient.Instance.Auth` email/password, anonymous, custom
  tokens, identity-provider sign-in and linking; sessions persist and refresh.
- Services on `FirebaseClient.Instance`: CloudSave, Leaderboard, Economy,
  Inventory, Achievements, DailyRewards, Quests, BattlePass, IapValidation,
  Guilds, Friends, Presence, Chat, Mailbox, Moderation, RemoteConfig,
  Experiments, Announcements, Localization, Analytics, PushTokens,
  Matchmaking, MatchmakingQueue, Lobbies; crash telemetry is constructed by the
  game.

## License Toolkit — core API surface (C#)

- Runtime: `ShipIt.LicenseAudit.AttributionRegistry.FromJson(json)` loads the
  exported CREDITS.json; the `CreditsScreen` component builds a credits UI.
- Release gate (batch mode):
  `-executeMethod ShipIt.LicenseAudit.EditorTools.LicenseReleaseReadiness.VerifyStrict`.

## Security models

- Supabase: ship only the anon/publishable key in clients. Service-role keys
  stay in machine-local editor preferences and are never written to runtime
  assets or builds. Privileged mutations are service-role-only Postgres
  functions. Every bundled pack enables RLS with explicit policies and function
  execute allowlists.
- AWS: no long-lived keys ship in clients; signed calls use temporary Identity
  Pool credentials, player rows are scoped with `dynamodb:LeadingKeys`, and
  scoring moves server-side with the shipped Lambda template.
- Firebase: the Web API key is public by design; authorization lives in
  Security Rules and App Check. Anything of value goes through the shipped
  Cloud Function templates.

## Support

Email shipit.unity@gmail.com for every toolkit.