fix: enhance preset verification for Capacitor

[broody]

Summary

• Enhanced preset verification to better support Capacitor applications.
• Added capacitor:// to the automatic verification bypass (alongside localhost) to simplify development for native apps using capacitor://localhost.
• Refactored allowedOrigins calculation in useConnectionValue to reduce redundancy.

Test plan

• Verify that a Capacitor app using capacitor://localhost is automatically verified.
• Verify that verification still works correctly in embedded (iframe) mode.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
controller-example-next	Ready	Preview	Feb 4, 2026 1:17am
keychain	Ready	Preview	Feb 4, 2026 1:17am
keychain-storybook	Ready	Preview	Feb 4, 2026 1:17am

[claude]

---

Code review

No issues found. Checked for bugs and CLAUDE.md compliance.

---

[claude]

Claude finished @broody's task —— View job

---

Documentation Analysis Complete

I've analyzed the merged PR changes and existing documentation in the docs repository.

Task List:

• Analyze the changed files to understand the Capacitor enhancements
• Check existing documentation structure in docs-repo
• Review current Capacitor integration documentation
• Determine what documentation updates are needed
• Update or create appropriate documentation files

Analysis Summary:

The PR enhanced preset verification by adding capacitor:// protocol support alongside localhost for automatic verification bypass. The key changes in /packages/keychain/src/hooks/connection.ts at lines 444-447 and 472-475 now include:

// Always consider localhost and capacitor as verified for development
const isLocalhost = 
  redirectOrigin.includes("localhost") || 
  redirectOrigin.startsWith("capacitor://");

Documentation Assessment:

No documentation updates are needed because:

1. Internal Enhancement: The change is an internal verification bypass that improves the developer experience but doesn't change the public API or user-facing integration patterns.

2. Development Convenience: Adding capacitor:// to the automatic verification bypass (alongside localhost) is a behind-the-scenes improvement that simplifies development for Capacitor apps using capacitor://localhost.

3. Existing Documentation is Complete: The current Capacitor documentation at /docs-repo/src/pages/controller/native/capacitor.md comprehensively covers:

   • Setup and configuration
   • Deep link handling
   • Session management
   • Platform-specific requirements
   • Complete working examples

4. No Breaking Changes: The enhancement is additive and doesn't modify existing integration patterns or require changes to user code.

The existing documentation remains accurate and complete for Capacitor integration. Users will benefit from the improved verification automatically without needing to change their implementation.