Releases: cartridge-gg/controller
Releases · cartridge-gg/controller
Release v0.13.10-alpha.1
[0.13.10-alpha.1] - 2026-02-25
✨ New Features
- @cartridge/controller: Added
updateSessionAPI for runtime session policy updates, enabling dynamic modification of session policies during runtime for improved flexibility (#2440) - @cartridge/keychain: Added account parameter support on session page, allowing developers to pass account information directly to session flows (#2439)
- @cartridge/keychain: Enhanced activity tab with comprehensive review functionality for improved user activity tracking (#2413)
🐛 Bug Fixes
- @cartridge/controller: Fixed connect flow to ensure reliable connection establishment and prevent connection failures (#2438)
- @cartridge/controller: Removed console errors for cleaner debugging experience and improved production logging (#2437)
- @cartridge/controller: Fixed disconnect method to properly call
close()and reset iframe state, ensuring clean disconnection and preventing stale iframe issues (#2434) - @cartridge/keychain: Fixed Stripe.js Content Security Policy by adding script-src allowlist entry, enabling proper Stripe integration for payment processing (#2433)
- @cartridge/keychain: Fixed Continue button display on Chrome iOS when automatic session creation fails, ensuring users can still proceed with manual session creation (#2429)
- @cartridge/keychain: Prioritized iOS detection before hasPlatformAuthenticator check for WebAuthn, improving passkey creation reliability on iOS devices (#2428)
🚀 Improvements
- @cartridge/keychain: Enhanced WebAuthn debugging by capturing options via PostHog for iOS troubleshooting and analytics (#2427)
- @cartridge/keychain: Removed WebAuthn debug logging to reduce console noise in production environments (#2430)
🔧 Development
Release v0.13.9
[0.13.9] - 2026-02-16
🚀 Improvements
- @cartridge/controller: Enhanced iOS WebAuthn support with explicit creation options and improved debug logging for more reliable passkey creation on iOS devices (#2421)
- @cartridge/controller: Streamlined build process by removing redundant build script in controller package for improved development workflow (#2423)
🐛 Bug Fixes
- @cartridge/keychain: Fixed quest toast notifications by removing them to prevent user interface clutter and improve user experience (#2425)
- @cartridge/controller: Improved passkey creation flow for Chrome iOS by implementing direct iframe approach instead of popup flow for better mobile compatibility (#2419, #2420)
- @cartridge/controller: Enhanced iOS passkey creation reliability by setting authenticatorAttachment to platform for improved device authentication (#2417)
🔧 Testing
- @cartridge/controller: Added comprehensive Capacitor session redirect E2E tests to prevent regressions in session ingestion and account creation flows (#2424)
- @cartridge/controller: Added regression tests for controller disconnect localStorage cleanup functionality (#2414)
📦 Dependencies
Release v0.13.8
[0.13.8] - 2026-02-13
✨ New Features
- @cartridge/controller: Added new mainnet USDC token support with legacy USDC.e labeling for improved token identification (#94dae94e)
🚀 Improvements
- @cartridge/controller: Enhanced connection policy resolution by fixing preset theme and custom policy override precedence, allowing apps to maintain preset-derived configuration while explicitly overriding preset policies (#2408)
- @cartridge/controller: Improved maintainability by extracting hardcoded "startapp" query parameter into
REDIRECT_QUERY_NAMEconstant following Telegram mini app convention (#2412)
🐛 Bug Fixes
- @cartridge/controller: Fixed
SessionProvider.probe()returning undefined afteringestSessionFromRedirect()by restoring on-demand session retrieval for deep link redirects in Capacitor and mobile apps (#2409) - Token Configuration: Reverted mainnet USDC token support changes to restore legacy behavior for token metadata and mainnet token indexing entries (#2410)
🔧 Testing
- @cartridge/controller: Added comprehensive regression tests for controller disconnect localStorage cleanup functionality (#2414)
Release v0.13.7
[0.13.7] - 2026-02-12
✨ New Features
- @cartridge/controller: Added
lookupUsername(username)method for headless flows, returning account existence status and normalized signer options for the controller's configured chain (#2400) - @cartridge/controller: Added auto-signup functionality for headless connect when a username is missing, while maintaining strict signer matching for existing accounts (#2400)
- @cartridge/connector: Exposed
lookupUsernamehelper method through ControllerConnector for easier integration with starknet-react applications (#2400)
🚀 Improvements
Release v0.13.6
[0.13.6] - 2026-02-12
🚀 Improvements
- @cartridge/controller: Enhanced SessionProvider preset support with automatic policy resolution from
@cartridge/presets, enabling developers to usepreset: "my-game"instead of manually duplicating policies and ensuring consistent policy hashing between SDK and keychain (#2401) - Documentation: Updated project structure documentation with comprehensive provider flows, clarified ControllerProvider (web) and SessionProvider (native) architecture, and improved examples directory guidance (#2404)
🐛 Bug Fixes
- @cartridge/controller: Fixed
session/not-registerederrors by normalizing contract addresses in policy hashing and consolidating async initialization to prevent policy hash divergence between SDK and keychain (#2401) - @cartridge/keychain: Fixed theme copy button visibility in ErrorAlert component by replacing hardcoded black icons with theme-aware styling, ensuring proper visibility on dark backgrounds (#2402)
Release v0.13.5
[0.13.5] - 2026-02-10
✨ New Features
- @cartridge/controller: Added headless mode support to controller SDK for seamless authentication, allowing
connect({ username, signer, password? })with hidden keychain iframe and UI-less authentication flows (#2315) - @cartridge/controller: Added
close()method to ControllerProvider for programmatic cleanup of controller instances (#2373) - @cartridge/controller: Moved
asWalletStandard()method from connector to controller package, enabling wallet standard usage without starknet-react dependency (#2364)
🚀 Improvements
- @cartridge/keychain: Enhanced session management with exposed session GUID fields (
allowedPoliciesRoot,metadataHash,sessionKeyGuid,guardianKeyGuid) in keychain callback payloads for registered sessions (#2396) - @cartridge/keychain: Consolidated policy handling by refactoring
toWasmPoliciesinto single source of truth for improved consistency (#2394) - @cartridge/keychain: Enhanced quests and achievements display to only show tabs when game/application supports them (#2392)
- @cartridge/keychain: Improved starterpack purchase UI to always show quantity in purchase button for better user clarity (#2390)
- @cartridge/connector: Improved disconnect handling to keep
@starknet-react/corestate in sync with controller state (#2315)
🐛 Bug Fixes
- @cartridge/keychain: Fixed session authentication to properly disconnect and re-authenticate when session
rpc_urldiffers from stored controller, ensuring correct chain targeting (#2395) - @cartridge/controller: Enhanced iframe security by hardening keychain iframe loading with URL validation, origin pinning, and reduced feature grants by default (#2384)
- @cartridge/keychain: Added keychain CSP/security headers and removed inline scripts from index.html for improved security posture (#2384)
📦 Dependencies
- controller-rs: Updated to v0.9.3 for improved backend functionality (#2397)
Release v0.13.4
[0.13.4] - 2026-02-06
🐛 Bug Fixes
- CI/CD: Fixed npm publishing with catalog resolution by reverting to pnpm publish, which correctly handles pnpm catalog: protocol that npm publish doesn't support, ensuring proper package resolution in published packages (#77210c65)
🔧 Development
- Agent Tooling: Added standardized agent/dev tooling with
.agents/directory as source of truth, Claude/Cursor skill compatibility symlinks, and enhanced pre-commit hooks for improved development workflow (#2388)
Release v0.13.3
[0.13.3] - 2026-02-06
✨ New Features
- @cartridge/controller: Added starterpack play callback functionality enabling custom game launch behavior and improved gaming integration (#2362)
- @cartridge/controller: Added specialized controller toast notifications with improved messaging and user feedback for iframe-embedded applications (#2358)
🚀 Improvements
- @cartridge/keychain: Enhanced iframe connect flow with automatic Storage Access API request for improved cross-domain authentication in WebView environments (#2374)
- @cartridge/keychain: Tightened Capacitor origin verification to only auto-verify localhost, requiring explicit authorization for custom hostnames in presets for enhanced security (#2375)
- @cartridge/controller: Improved policy handling with canonical sorting before hashing to ensure consistent policy processing and prevent non-deterministic merkle root calculations (#2359)
- @cartridge/controller: Enhanced preset verification for Capacitor environments with better validation and support for capacitor:// scheme (#2369)
🐛 Bug Fixes
- @cartridge/controller: Added ApprovalPolicy support to controller toWasmPolicies for proper merkle root calculation across different connectors, fixing session registration mismatches (#2372)
- @cartridge/controller: Fixed aggregate contracts display on unverified session to properly group methods into "Approve " expendable cards (#2304)
- @cartridge/controller: Fixed controller re-initialization issues by reusing existing controller instances to prevent duplicate iframes and message channels (#2360)
- @cartridge/controller: Fixed chain ID lookup to support non-Cartridge chain configurations for better multi-chain compatibility (#2361)
- @cartridge/keychain: Fixed Coinbase sandbox configuration to ensure proper sandbox environment setup (#2371)
- @cartridge/keychain: Fixed password login button alignment with primary theme for consistent UI styling (#2385)
Release v0.12.2
[0.12.2] - 2026-01-29
✨ New Features
- Examples: Added Capacitor session example with iOS app integration, demonstrating mobile session management and providing comprehensive cross-platform development guidance (#2355)
- @cartridge/keychain: Enhanced Coinbase onramp integration with
createCoinbaseLayerswapOrdermutation for improved order creation and processing (#2354) - @cartridge/keychain: Added comprehensive cost breakdown display for Apple Pay purchases, showing detailed fee structure including Coinbase fees and bridge fees with real-time pricing from Coinbase Onramp API (#2352)
- @cartridge/keychain: Added starterpack Apple Pay checkout functionality for streamlined mobile payments (#2339)
- @cartridge/keychain: Implemented verification autofill functionality for improved user experience during authentication flows (#2342)
- @cartridge/keychain: Added order fetching by IDs capability for enhanced order management and tracking (#2334)
🚀 Improvements
- @cartridge/keychain: Removed supported-platforms feature gate, making platform detection generally available (#2335)
- Development: Migrated skills documentation to centralized
.agents/skillsdirectory for better organization and AI-assisted development workflows (#2353)
🐛 Bug Fixes
- @cartridge/keychain: Fixed 'proceed with caution' warning visibility for slot login flows, improving user experience (#2351)
- @cartridge/keychain: Fixed purchase token layout issues for better visual consistency (#2343)
- @cartridge/keychain: Fixed Layerswap username retrieval from authentication context for proper user identification (#2347)
- @cartridge/keychain: Fixed Coinbase Terms of Service link for proper legal compliance (#2341)
- @cartridge/keychain: Fixed Coinbase query handling for improved API integration (#2338)
📦 Dependencies
Release v0.12.1
[0.12.1] - 2026-01-07
✨ New Features
- @cartridge/controller: Added configurable error display modes with
errorDisplayModeoption, enabling developers to control how transaction errors are presented to users with three modes:modal(default),notification(clickable toast), andsilent(console only) (#2312)
🚀 Improvements
- Development: Enhanced Claude Code integration with structured skill guides for code review, PR management, testing, Storybook snapshots, and release workflows (#2311, #2310)
- Documentation: Expanded CLAUDE.md with detailed technology stack versions, build process explanations, and comprehensive development workflow guidance (#2310)