Releases: cartridge-gg/controller
Releases · cartridge-gg/controller
Release v0.13.11-alpha.2
[0.13.11-alpha.2] - 2026-03-30
✨ New Features
- @cartridge/keychain: Added keychain location prompt functionality with geolocation API via iframe, enabling location-based features and services (#2349)
- @cartridge/keychain: Added starter pack social claim functionality with X (Twitter) account integration, allowing users to follow and share game accounts to claim bundles (#2498)
- @cartridge/keychain: Added date of birth (DOB) verification to Stripe payment flow for enhanced compliance and verification (#2510)
- @cartridge/keychain: Added SMS authentication to signup/login flows, providing phone-based OTP authentication as an alternative to passkeys and social logins (#2500)
- @cartridge/keychain: Added swap detection for AVNU and LayerSwap (LS2) protocols, enabling better transaction recognition and displaying swap review screens (#2493)
🚀 Improvements
- @cartridge/keychain: Improved Safari popup blocked error messaging with user-friendly guidance for enabling popups in browser settings (#2506)
- @cartridge/keychain: Enhanced Coinbase payment flow by renaming "Stripe Checkout" to "Credit Card" for clearer user understanding (#2509)
- @cartridge/keychain: Removed feature gate for Stripe checkout in starterpacks, making credit card payments generally available (#2508)
- @cartridge/keychain: Improved Coinbase phone input format to match Stripe verification with disabled country code dropdown for consistency (#2517)
🐛 Bug Fixes
- @cartridge/keychain: Fixed keychain disconnection issues by ensuring proper disconnect sequence before state changes, preventing users from remaining logged in after disconnect (#2505)
- @cartridge/keychain: Enhanced WASM error handling with structural error message reading for both native Error objects and WASM error-like objects (#2502)
- @cartridge/keychain: Fixed Apple Pay not supported errors in Coinbase checkout by ignoring expected "not supported" messages while preserving real error handling (#2514)
- @cartridge/keychain: Fixed starterpack closure issues for improved stability (#2516)
- @cartridge/keychain: Fixed spending limit loading states and sign-up password form getting stuck, plus miscellaneous controller layout improvements (#2515)
- @cartridge/keychain: Removed Storage Access API console logs to reduce console noise in production environments (#2507)
- @cartridge/keychain: Removed quests functionality to streamline the user interface (#2501)
📦 Dependencies
Release v0.13.11-alpha.1
[0.13.11-alpha.1] - 2026-03-26
✨ New Features
- @cartridge/keychain: Added starter pack social claim functionality for enhanced social integration and reward distribution (#2498)
- @cartridge/keychain: Added SMS authentication to signup/login flows, providing an additional authentication method for improved accessibility (#2500)
- @cartridge/keychain: Added swap detection for AVNU and LayerSwap (LS2) protocols, enabling better transaction recognition and user experience (#2493)
🚀 Improvements
- @cartridge/keychain: Enhanced Safari popup blocked error messaging to provide clearer guidance for Safari users experiencing popup issues (#2506)
- @cartridge/keychain: Improved payment UI by renaming "Stripe Checkout" to "Credit Card" for clearer user understanding (#2509)
- @cartridge/keychain: Removed feature gate for Stripe checkout in starterpacks, making credit card payments generally available (#2508)
🐛 Bug Fixes
- @cartridge/keychain: Fixed keychain disconnection to properly disconnect before emitting state changes, preventing race conditions (#2505)
- @cartridge/keychain: Enhanced WASM error handling and updated controller-wasm to v0.10.0 for improved stability (#2502)
- @cartridge/keychain: Removed Storage Access console logs to reduce console noise in production environments (#2507)
- @cartridge/keychain: Removed quests functionality to streamline the user interface (#2501)
📦 Dependencies
Release v0.13.10
[0.13.10] - 2026-03-19
✨ New Features
- @cartridge/keychain: Added identity verification for Stripe purchases, enabling enhanced security and compliance for payment processing (#2492)
- @cartridge/keychain: Added geofencing for OFAC countries on Vercel, ensuring compliance with international sanctions requirements (#2484)
- @cartridge/keychain: Added Stripe checkout for starterpacks, providing seamless payment integration for starter pack purchases (#2485)
- @cartridge/keychain: Added BroadcastChannel-based communication for Coinbase popup, replacing GraphQL polling for more efficient real-time updates (#2451)
- @cartridge/keychain: Added embedded Coinbase payment in keychain popup with status polling for streamlined payment experience (#2445)
- @cartridge/keychain: Added Apple Pay triple-click functionality on review purchase icon for faster mobile payments (#2457)
- @cartridge/controller: Added
updateSessionAPI for runtime session policy updates, enabling dynamic modification of session policies (#2440) - @cartridge/keychain: Added account parameter support on session page for improved session flow configuration (#2439)
🚀 Improvements
- @cartridge/keychain: Enhanced Stripe payment integration with improved Coinbase popup handling, message validation, and status polling (#2449, #2447, #2453, #2454)
- @cartridge/keychain: Improved token selection with split USDC and USDC.e support in starterpack flows for better token identification (#2470)
- @cartridge/keychain: Enhanced popup authentication for restrictive iframe environments with better fallback handling (#2462)
- @cartridge/keychain: Improved mobile authentication with better Chrome iOS handling and WebAuthn debugging capabilities (#2429, #2428, #2427)
- @cartridge/controller: Enhanced EVM wallet detection and provider discovery for improved multi-wallet compatibility (#2468)
- @cartridge/keychain: Streamlined payment GraphQL migration to controller for better architecture (#2464)
🐛 Bug Fixes
- @cartridge/keychain: Fixed human-readable error messages for FailedPrecondition errors, showing clearer user-facing messages instead of generic service errors (#2496)
- @cartridge/keychain: Fixed back button functionality on verification pages for better navigation experience (#2495)
- @cartridge/keychain: Fixed profile history query performance by adding caps and gating fetches to prevent excessive API calls (#2490)
- @cartridge/keychain: Fixed execute submit error propagation to prevent hanging during transaction execution (#2488)
- @cartridge/keychain: Fixed credits purchase alignment with Stripe GraphQL for consistent payment processing (#2483)
- @cartridge/controller: Fixed WebAuthn permissions in Permissions-Policy header for proper passkey functionality (#2482)
- @cartridge/controller: Fixed custom-scheme redirect_uri preservation in standalone session flows for mobile app compatibility (#2481)
- @cartridge/controller: Fixed domain verification to check both redirect_url and redirect_uri parameters (#2474)
- @cartridge/controller: Fixed unknown signers error handling to prevent error screens (#2472)
- @cartridge/controller: Fixed custom URL scheme verification for mobile app integration (#2471)
- @cartridge/controller: Fixed loading spinner display while preset config loads (#2477)
- @cartridge/controller: Fixed connect flow reliability and removed console errors for cleaner operation (#2438, #2437)
- @cartridge/controller: Fixed disconnect method to properly reset iframe state (#2434)
📦 Dependencies
Release v0.13.10-alpha.1
[0.13.10-alpha.1] - 2026-02-25
✨ New Features
- @cartridge/controller: Added
updateSessionAPI for runtime session policy updates, enabling dynamic modification of session policies during runtime for improved flexibility (#2440) - @cartridge/keychain: Added account parameter support on session page, allowing developers to pass account information directly to session flows (#2439)
- @cartridge/keychain: Enhanced activity tab with comprehensive review functionality for improved user activity tracking (#2413)
🐛 Bug Fixes
- @cartridge/controller: Fixed connect flow to ensure reliable connection establishment and prevent connection failures (#2438)
- @cartridge/controller: Removed console errors for cleaner debugging experience and improved production logging (#2437)
- @cartridge/controller: Fixed disconnect method to properly call
close()and reset iframe state, ensuring clean disconnection and preventing stale iframe issues (#2434) - @cartridge/keychain: Fixed Stripe.js Content Security Policy by adding script-src allowlist entry, enabling proper Stripe integration for payment processing (#2433)
- @cartridge/keychain: Fixed Continue button display on Chrome iOS when automatic session creation fails, ensuring users can still proceed with manual session creation (#2429)
- @cartridge/keychain: Prioritized iOS detection before hasPlatformAuthenticator check for WebAuthn, improving passkey creation reliability on iOS devices (#2428)
🚀 Improvements
- @cartridge/keychain: Enhanced WebAuthn debugging by capturing options via PostHog for iOS troubleshooting and analytics (#2427)
- @cartridge/keychain: Removed WebAuthn debug logging to reduce console noise in production environments (#2430)
🔧 Development
Release v0.13.9
[0.13.9] - 2026-02-16
🚀 Improvements
- @cartridge/controller: Enhanced iOS WebAuthn support with explicit creation options and improved debug logging for more reliable passkey creation on iOS devices (#2421)
- @cartridge/controller: Streamlined build process by removing redundant build script in controller package for improved development workflow (#2423)
🐛 Bug Fixes
- @cartridge/keychain: Fixed quest toast notifications by removing them to prevent user interface clutter and improve user experience (#2425)
- @cartridge/controller: Improved passkey creation flow for Chrome iOS by implementing direct iframe approach instead of popup flow for better mobile compatibility (#2419, #2420)
- @cartridge/controller: Enhanced iOS passkey creation reliability by setting authenticatorAttachment to platform for improved device authentication (#2417)
🔧 Testing
- @cartridge/controller: Added comprehensive Capacitor session redirect E2E tests to prevent regressions in session ingestion and account creation flows (#2424)
- @cartridge/controller: Added regression tests for controller disconnect localStorage cleanup functionality (#2414)
📦 Dependencies
Release v0.13.8
[0.13.8] - 2026-02-13
✨ New Features
- @cartridge/controller: Added new mainnet USDC token support with legacy USDC.e labeling for improved token identification (#94dae94e)
🚀 Improvements
- @cartridge/controller: Enhanced connection policy resolution by fixing preset theme and custom policy override precedence, allowing apps to maintain preset-derived configuration while explicitly overriding preset policies (#2408)
- @cartridge/controller: Improved maintainability by extracting hardcoded "startapp" query parameter into
REDIRECT_QUERY_NAMEconstant following Telegram mini app convention (#2412)
🐛 Bug Fixes
- @cartridge/controller: Fixed
SessionProvider.probe()returning undefined afteringestSessionFromRedirect()by restoring on-demand session retrieval for deep link redirects in Capacitor and mobile apps (#2409) - Token Configuration: Reverted mainnet USDC token support changes to restore legacy behavior for token metadata and mainnet token indexing entries (#2410)
🔧 Testing
- @cartridge/controller: Added comprehensive regression tests for controller disconnect localStorage cleanup functionality (#2414)
Release v0.13.7
[0.13.7] - 2026-02-12
✨ New Features
- @cartridge/controller: Added
lookupUsername(username)method for headless flows, returning account existence status and normalized signer options for the controller's configured chain (#2400) - @cartridge/controller: Added auto-signup functionality for headless connect when a username is missing, while maintaining strict signer matching for existing accounts (#2400)
- @cartridge/connector: Exposed
lookupUsernamehelper method through ControllerConnector for easier integration with starknet-react applications (#2400)
🚀 Improvements
Release v0.13.6
[0.13.6] - 2026-02-12
🚀 Improvements
- @cartridge/controller: Enhanced SessionProvider preset support with automatic policy resolution from
@cartridge/presets, enabling developers to usepreset: "my-game"instead of manually duplicating policies and ensuring consistent policy hashing between SDK and keychain (#2401) - Documentation: Updated project structure documentation with comprehensive provider flows, clarified ControllerProvider (web) and SessionProvider (native) architecture, and improved examples directory guidance (#2404)
🐛 Bug Fixes
- @cartridge/controller: Fixed
session/not-registerederrors by normalizing contract addresses in policy hashing and consolidating async initialization to prevent policy hash divergence between SDK and keychain (#2401) - @cartridge/keychain: Fixed theme copy button visibility in ErrorAlert component by replacing hardcoded black icons with theme-aware styling, ensuring proper visibility on dark backgrounds (#2402)
Release v0.13.5
[0.13.5] - 2026-02-10
✨ New Features
- @cartridge/controller: Added headless mode support to controller SDK for seamless authentication, allowing
connect({ username, signer, password? })with hidden keychain iframe and UI-less authentication flows (#2315) - @cartridge/controller: Added
close()method to ControllerProvider for programmatic cleanup of controller instances (#2373) - @cartridge/controller: Moved
asWalletStandard()method from connector to controller package, enabling wallet standard usage without starknet-react dependency (#2364)
🚀 Improvements
- @cartridge/keychain: Enhanced session management with exposed session GUID fields (
allowedPoliciesRoot,metadataHash,sessionKeyGuid,guardianKeyGuid) in keychain callback payloads for registered sessions (#2396) - @cartridge/keychain: Consolidated policy handling by refactoring
toWasmPoliciesinto single source of truth for improved consistency (#2394) - @cartridge/keychain: Enhanced quests and achievements display to only show tabs when game/application supports them (#2392)
- @cartridge/keychain: Improved starterpack purchase UI to always show quantity in purchase button for better user clarity (#2390)
- @cartridge/connector: Improved disconnect handling to keep
@starknet-react/corestate in sync with controller state (#2315)
🐛 Bug Fixes
- @cartridge/keychain: Fixed session authentication to properly disconnect and re-authenticate when session
rpc_urldiffers from stored controller, ensuring correct chain targeting (#2395) - @cartridge/controller: Enhanced iframe security by hardening keychain iframe loading with URL validation, origin pinning, and reduced feature grants by default (#2384)
- @cartridge/keychain: Added keychain CSP/security headers and removed inline scripts from index.html for improved security posture (#2384)
📦 Dependencies
- controller-rs: Updated to v0.9.3 for improved backend functionality (#2397)
Release v0.13.4
[0.13.4] - 2026-02-06
🐛 Bug Fixes
- CI/CD: Fixed npm publishing with catalog resolution by reverting to pnpm publish, which correctly handles pnpm catalog: protocol that npm publish doesn't support, ensuring proper package resolution in published packages (#77210c65)
🔧 Development
- Agent Tooling: Added standardized agent/dev tooling with
.agents/directory as source of truth, Claude/Cursor skill compatibility symlinks, and enhanced pre-commit hooks for improved development workflow (#2388)