Skip to content

0.13.0

Pre-release
Pre-release

Choose a tag to compare

@github-actions github-actions released this 03 Aug 16:48

Frame Companion 0.13.0

Frame Companion 0.13.0 is the paired browser integration for the modernized Frame desktop wallet. It supports Chrome and Firefox and requires Frame 0.7.0 or newer.

Highlights

  • Authenticated protocol v2 connection to Frame.
  • Six-digit pairing-code confirmation between the browser and desktop.
  • Non-extractable, browser-managed installation credentials.
  • Credential revocation, reset, rotation, and authenticated reconnect support.
  • EIP-6963 provider discovery for coexistence with other installed wallets.
  • Legacy window.ethereum injection when no existing provider owns it.
  • Optional MetaMask compatibility mode with _metamask.isUnlocked().
  • Per-tab and per-document request, response, event, and subscription isolation.
  • Trusted origin metadata supplied by the extension rather than the webpage.
  • Bounded request sizes, queues, timeouts, and reconnect behavior.
  • Chrome Manifest V3 service-worker support.
  • Firefox cross-realm request compatibility.
  • Browser-specific ZIP packages, checksums, CycloneDX SBOM, provenance, and SBOM attestations.

Qualified Browsers

This release was tested with isolated Chrome and Firefox profiles for:

  • Initial pairing and code comparison
  • EIP-6963 discovery
  • Legacy provider injection
  • Account and chain events
  • Multi-tab request isolation
  • Browser and tab restarts
  • Credential revocation and re-pairing
  • Private-key and seed-phrase signing through Frame
  • Trezor Safe 7 and Model One signing through Frame

Installation

Use the browser-specific archive:

  • Chrome: frame-companion-0.13.0-chrome.zip
  • Firefox: frame-companion-0.13.0-firefox.zip

Do not interchange the packages. Verify downloads with the attached SHA256SUMS.

The compatibility artifact identifies the required desktop repository, branch, commit, and protocol version.

Known Limitations

  • The extension authenticates itself to Frame; it does not authenticate the localhost Frame endpoint back to the extension.
  • Another process running as the same OS user could attempt to claim Frame’s local port before Frame starts.
  • These packages are not currently distributed or signed through the Chrome Web Store or Firefox Add-ons.
  • Chrome requires loading the extracted package as an unpacked extension.
  • Firefox requires temporary loading through about:debugging unless the package is separately signed.
  • This release supports EVM browser integration only.

This is an independently maintained community fork. Use at your own risk.