feat(networks): 85 of the 87 CLPR networks, 93 mainnets: 9 chain packages, Chainflip, STRATO, Arc (stacked on #12)

.changeset/networks87.md

@@ -0,0 +1,22 @@
+---
+"@clip-wallet/core": minor
+"@clip-wallet/config": minor
+"@clip-wallet/vault": minor
+"@clip-wallet/1mask": minor
+"@clip-wallet/engine": minor
+"@clip-wallet/extension-kit": minor
+"@clip-wallet/ui": minor
+"@clip-wallet/chains-evm": minor
+"@clip-wallet/chains-substrate": minor
+"@clip-wallet/chains-cosmos": minor
+"@clip-wallet/chains-tron": minor
+"@clip-wallet/chains-xrpl": minor
+"@clip-wallet/chains-antelope": minor
+"@clip-wallet/chains-multiversx": minor
+"@clip-wallet/chains-icp": minor
+"@clip-wallet/chains-stacks": minor
+"@clip-wallet/chains-fuel": minor
+"@clip-wallet/chains-bitcoincash": minor
+---
+
+Every CLPR network with a self-custodial key model: twelve new families (Cosmos SDK chains Osmosis, dYdX, ZIGChain, Provenance, THORChain and Initia; TRON; XRP Ledger; Vaulta, Telos and XPR Network; MultiversX; Internet Computer; Stacks; Fuel; Bitcoin Cash), Chainflip in chains-substrate, STRATO and Arc mainnet in chains-evm, and their dapp providers where a standard lets the wallet appear as itself.

.gitleaksignore

@@ -102,3 +102,28 @@ services/backup/test/oidc-fixtures.ts:jwt:20
 services/backup/test/oidc-fixtures.ts:jwt:21
 services/backup/test/oidc-fixtures.ts:jwt:22
 services/backup/test/oidc-fixtures.ts:jwt:23
+
+# packages/chains-antelope/test/fixtures.ts: an Antelope public key (PUB_K1) in a test fixture
+e5aaffa83cc45b83045fa3ab2b1c4514f8aa83f8:packages/chains-antelope/test/fixtures.ts:generic-api-key:53
+packages/chains-antelope/test/fixtures.ts:generic-api-key:53
+# packages/chains-antelope/test/serializer.test.ts: an Antelope public key (PUB_K1) in a serializer test
+e5aaffa83cc45b83045fa3ab2b1c4514f8aa83f8:packages/chains-antelope/test/serializer.test.ts:generic-api-key:44
+packages/chains-antelope/test/serializer.test.ts:generic-api-key:44
+# packages/chains-xrpl/test/codec.test.ts: XRPL NFToken and offer ids (public ledger object ids) in codec tests
+1fb0d0f6ce12beeec2764035960fdba226889570:packages/chains-xrpl/test/codec.test.ts:generic-api-key:27
+1fb0d0f6ce12beeec2764035960fdba226889570:packages/chains-xrpl/test/codec.test.ts:generic-api-key:28
+packages/chains-xrpl/test/codec.test.ts:generic-api-key:27
+packages/chains-xrpl/test/codec.test.ts:generic-api-key:28
+# packages/chains-xrpl/test/xrpl.test.ts: an XRPL NFToken offer id (a public ledger object id)
+1fb0d0f6ce12beeec2764035960fdba226889570:packages/chains-xrpl/test/xrpl.test.ts:generic-api-key:329
+packages/chains-xrpl/test/xrpl.test.ts:generic-api-key:329
+# packages/1mask/src/shared/cosmos.ts: Initia chain feature names (eth key sign, eth secp256k1 initia)
+b96d0e3f552b0471e9f435f9c7d4daa424d978dd:packages/1mask/src/shared/cosmos.ts:generic-api-key:102
+b96d0e3f552b0471e9f435f9c7d4daa424d978dd:packages/1mask/src/shared/cosmos.ts:generic-api-key:103
+packages/1mask/src/shared/cosmos.ts:generic-api-key:102
+packages/1mask/src/shared/cosmos.ts:generic-api-key:103
+# packages/chains-cosmos/test/helpers.ts: a secp256k1 public key (base64) in a test helper
+b96d0e3f552b0471e9f435f9c7d4daa424d978dd:packages/chains-cosmos/test/helpers.ts:generic-api-key:92
+packages/chains-cosmos/test/helpers.ts:generic-api-key:92
+# .gitleaksignore itself: the comment above quoted those feature names in the commit that added it
+ffcd993f6685732a06c3f4d751d75f77f8c1a2dc:.gitleaksignore:generic-api-key:120

.harness/spec.md

@@ -1,7 +1,7 @@
 # Clip Wallet: product spec
 
 Clip Wallet is a **non-custodial** wallet for every CLPR network. One recovery phrase, one set of accounts across
-14 network families, and money that moves to wherever an app needs it. It is also a **kit**: anyone can ship a wallet
+26 network families (85 of the 87 CLPR networks), and money that moves to wherever an app needs it. It is also a **kit**: anyone can ship a wallet
 of their own on the same packages. Pre-release: **test networks only**.
 
 ## Principles

AGENTS.md

@@ -1,6 +1,6 @@
 # AGENTS.md: Clip Wallet
 
-Clip Wallet is a non-custodial wallet for every CLPR network: 14 network families, 1Mask for every dapp, decoded
+Clip Wallet is a non-custodial wallet for the CLPR networks (85 of 87; Canton and Mixin have no self-custodial model, docs/r1/networks87.md): 26 network families, 1Mask for every dapp, decoded
 approvals, a security floor, features (staking, swaps, on-ramps, Secure Trade), social (contacts, Clip handles,
 notifications, Discover), sandboxed Clip Plugins, and route-and-fund / settle-on-Hedera on CLPRouter. It is also a
 kit: the `@clip-wallet/*` packages, `@clip-wallet/extension-kit`, `@clip-wallet/desktop-kit`, `@clip-wallet/mobile-kit`
@@ -32,8 +32,9 @@ Release work (Docker for the last one): `pnpm --filter @clip-wallet/extension pa
 ```
 packages/core            shared types (the contract); additive changes only
 packages/config          clip.config.ts schema (zod): identity, theme, networks, languages, app ids, scheme, route, services, mainnet; /node loader
-packages/vault           phrase, derivation for 14 families, encryption, approval-bound signing, passkey unlock
+packages/vault           phrase, derivation for 26 families, encryption, approval-bound signing, passkey unlock
 packages/chains-*        evm hedera solana bitcoin sui aptos cardano substrate starknet ton near stellar tezos algorand
+                         cosmos (+provenance thorchain initia) tron xrpl antelope multiversx icp stacks fuel bitcoincash
 packages/1mask           dapp connectors for all families + WalletConnect; announces the wallet's identity
 packages/engine          environment-free orchestration (approvals, portfolio, catalog, wiring) shared by extension and mobile
 packages/extension-kit   the browser extension as a library: background, pages, WXT config (clipWallet()), security floor

README.md

@@ -10,15 +10,16 @@
 <h3 align="center">One wallet for every network, and the networks stay out of your way.</h3>
 
 <p align="center">
-  A non-custodial wallet for 14 network families on one recovery phrase. It works with every dapp as it is, and it
-  decodes every request into plain words before you sign. It is also an open kit for launching your own wallet.
+  A non-custodial wallet for 85 of the 87 CLPR networks, 26 network families on one recovery phrase. It works with
+  dapps as they are, and it decodes every request into plain words before you sign. It is also an open kit for
+  launching your own wallet.
 </p>
 
 <p align="center">
   <a href="LICENSE"><img alt="License: Apache-2.0" src="https://img.shields.io/badge/license-Apache--2.0-blue"></a>
   <a href="https://github.com/ColdAI-org/clip-wallet/actions/workflows/ci.yml"><img alt="CI" src="https://github.com/ColdAI-org/clip-wallet/actions/workflows/ci.yml/badge.svg"></a>
   <img alt="Tests: 2,300+ passing" src="https://img.shields.io/badge/tests-2%2C300%2B%20passing-2ea043">
-  <a href="#networks"><img alt="Networks: 14 families" src="https://img.shields.io/badge/networks-14%20families-FF3C00"></a>
+  <a href="#networks"><img alt="Networks: 26 families, 93 mainnets" src="https://img.shields.io/badge/networks-26%20families%20%C2%B7%2093%20mainnets-FF3C00"></a>
   <img alt="Status: testnet preview" src="https://img.shields.io/badge/status-testnet%20preview%20%C2%B7%20pre--audit-orange">
 </p>
 
@@ -59,13 +60,16 @@ mistake loses money. One example is an address that can receive on several netwo
   </tr>
 </table>
 
-- **One seed, 14 families.** EVM (Ethereum, Base, Arbitrum, Optimism, Hedera EVM and any EVM chain by id), Hedera,
-  Solana, Bitcoin, Sui, Aptos, Cardano, Polkadot SDK, Starknet, TON, NEAR, Stellar, Tezos and Algorand, all from one
-  BIP-39 phrase.
-- **Works with every dapp, with no changes to the dapp.** 1Mask speaks each ecosystem's own standard: EIP-1193 with
-  EIP-6963, the Wallet Standard (Solana, Sui, Aptos, Bitcoin), CIP-30, `injectedWeb3`, TON Connect, NEAR Wallet
-  Selector, SEP-43, Beacon, ARC-1, and WalletConnect v2. It is tested against stock wallet pickers and live testnet
-  dapps.
+- **One seed, 26 families.** EVM (Ethereum, Base, Arbitrum, Optimism, Hedera EVM and any EVM chain by id), Hedera,
+  Solana, Bitcoin, Sui, Aptos, Cardano, Polkadot SDK (with Chainflip), Starknet, TON, NEAR, Stellar, Tezos, Algorand,
+  the Cosmos SDK chains (Osmosis, dYdX, ZIGChain, Provenance, THORChain, Initia), TRON, XRP Ledger, Stacks, Fuel,
+  Bitcoin Cash, MultiversX, Internet Computer and Antelope (Vaulta, Telos, XPR Network), all from one BIP-39 phrase:
+  85 of the 87 CLPR networks and 93 mainnets ([the list](https://coldai.org/clip/docs/reference/networks.html)).
+- **Works with dapps as they are.** 1Mask speaks each ecosystem's own standard: EIP-1193 with EIP-6963, the Wallet
+  Standard (Solana, Sui, Aptos, Bitcoin, XRPL's XLS-72d), CIP-30, `injectedWeb3`, TON Connect, NEAR Wallet Selector,
+  SEP-43, Beacon, ARC-1, a Keplr-compatible Cosmos API, TIP-1193 with TIP-6963, SIP-030 with WBIP-004, the
+  FuelConnector, and WalletConnect v2 (including Bitcoin Cash's wc2-bch-bcr). It is tested against stock wallet pickers
+  and live testnet dapps.
 - **Approval screens that decode what you sign.** Every request becomes a plain-words `DecodedRequest` that shows the
   title, balance changes, fee, time and warnings. Unlimited approvals, permits, look-alike tokens and unknown contract
   calls are called out. Requests the wallet can't read are **blocked by default**: no blind signing.
@@ -141,7 +145,9 @@ site gets its own session.
 <a id="networks"></a>
 ## Networks and dapp standards
 
-All 14 families are tested end to end on their public testnets with the real build, in two suites. The
+Clip supports 85 of the 87 CLPR networks: every one except Canton and Mixin, which have no model in which a
+self-custodial key wallet can hold funds ([why, and the full list](https://coldai.org/clip/docs/reference/networks.html)).
+The families are tested on their public testnets with the real build, in two suites. The
 [dapp matrix](docs/r1/dapp-matrix.md) drives each ecosystem's own dapp library (**connect**, **sign** and verify, **send**
 and confirm on chain, **approval** decoded). The [picker matrix](docs/r1/picker-matrix.md) drives the wallet pickers
 dapps actually ship, plus 8 hosted testnet dapps.
@@ -162,6 +168,15 @@ dapps actually ship, plus 8 hosted testnet dapps.
 | Stellar | Testnet | Stellar Wallets Kit module (SEP-43), SEP-53 | connect · sign · send · approval | Stellar Wallets Kit + module |
 | Tezos | Shadownet | Beacon (TZIP-10) | connect · sign · send · approval | Beacon lists Clip; connecting from its modal is a known gap |
 | Algorand | TestNet | use-wallet adapter (ARC-1, ARC-6) | connect · send · approval | use-wallet UI + `@clip-wallet/kit-modules/algorand` |
+| Cosmos SDK | osmo-test-5 | Keplr-compatible API at `window.clipwallet.cosmos` | connect · sign ¹ | cosmjs, with Clip's object in place of `window.keplr` |
+| TRON | Nile | TIP-1193 + TIP-6963 | connect · sign ¹ | TronWeb; the tronwallet adapters don't take TIP-6963 wallets yet |
+| XRP Ledger | Testnet | XLS-72d (Wallet Standard) | connect · send · approval (no message signing in XLS-72d) | Wallet Standard discovery |
+| Stacks | Testnet | SIP-030 + WBIP-004 | connect · sign · send · approval | `@stacks/connect` 8 |
+| Fuel | Testnet | FuelConnector | connect · sign ¹ | fuels-ts `Fuel` |
+| Chainflip (Polkadot SDK) | Perseverance | `injectedWeb3` | connect · sign · approval ¹ | `@polkadot/extension-dapp`, as lp.chainflip.io |
+| MultiversX | Devnet | best effort: sdk-dapp's undocumented custom-provider hook | connect · sign ¹ | sdk-dapp 5, where the dapp keeps `window.multiversx` |
+| Bitcoin Cash | Chipnet | WalletConnect (wc2-bch-bcr) | not run (needs a WalletConnect project id) | Cashonize-style WalletConnect dapps |
+| Internet Computer, Antelope | `icp:test`, Jungle4 | none: send and receive only | n/a | n/a |
 
 <sub>¹ The remaining steps wait for testnet funds in the matrix wallet. Each approval says plainly why it can't go
 ahead, for example "You don't have enough APT to pay the network fee". Bitcoin passed send and approval in an earlier
@@ -358,7 +373,7 @@ screens come from the fixture build. Details: [`packages/route`](packages/route)
 | Path | What |
 | --- | --- |
 | [`packages/core`](packages/core) | The contract: `ChainModule`, `DecodedRequest`, assets, errors |
-| [`packages/vault`](packages/vault) | Phrase, derivation for 14 families, encryption, approval-bound signing, passkeys. The only package that touches keys |
+| [`packages/vault`](packages/vault) | Phrase, derivation for 26 families, encryption, approval-bound signing, passkeys. The only package that touches keys |
 | [`packages/chains-*`](packages) | One `ChainModule` per family |
 | [`packages/1mask`](packages/1mask) | Dapp connectors for every family, the router, WalletConnect |
 | [`packages/engine`](packages/engine) | Orchestration shared by the extension, desktop and mobile |
@@ -389,10 +404,11 @@ screens come from the fixture build. Details: [`packages/route`](packages/route)
 - **Optional services see ciphertext and hashes only.** The threat model is in
   [`services/backup`](services/backup/README.md).
 
-**Audit status.** An internal review in October 2026 covered the vault, the approval path for all 14 families, 1Mask,
-WalletConnect, plugins, hardware signing, the services and the supply chain. It found 47 issues (2 critical, 5 high,
-18 medium, 22 low) and all of them are fixed, each with a regression test: there are no open findings
-([report](docs/audit/internal-audit-2026-10.md)). The **external audit comes before any mainnet build**.
+**Audit status.** An internal review in October 2026 covered the vault, the approval path for the first 14 families,
+1Mask, WalletConnect, plugins, hardware signing, the services and the supply chain. It found 47 issues (2 critical,
+5 high, 18 medium, 22 low) and all of them are fixed, each with a regression test: there are no open findings
+([report](docs/audit/internal-audit-2026-10.md)). The 12 newer families came after that review. The **external
+audit comes before any mainnet build**.
 
 Report vulnerabilities privately: [SECURITY.md](SECURITY.md) (GitHub private reporting, or
 [shayan@coldai.org](mailto:shayan@coldai.org)).
@@ -405,7 +421,7 @@ Report vulnerabilities privately: [SECURITY.md](SECURITY.md) (GitHub private rep
 | Extension (Firefox) | Builds as MV3 and passes `addons-linter`. No Firefox e2e yet, and Clip Plugins are left out |
 | Desktop (macOS, Windows, Linux) | Electron app with a built-in dapp browser. e2e on all three in CI. Unsigned unless signing secrets are set |
 | Mobile (iOS, Android) | Screens and engine tested (vitest and jest-expo). No store builds yet |
-| Networks | 14 families on testnets. **Mainnet is off**, behind a build flag and a checklist |
+| Networks | 26 families (85 of the 87 CLPR networks) on testnets. **Mainnet is off**, behind a build flag and a checklist |
 | Settle on Hedera | Testnet contracts live. The test Connector runs locally |
 | Store listings | Packages, copy, screenshots and permission justifications are ready. **Nothing has been submitted yet** |
 | Security | Internal review done. **External audit pending** |

apps/desktop/clip.config.ts

@@ -19,7 +19,7 @@ export default defineConfig({
   icon: "./icon.svg",
   theme: { accent: "#FF3C00", accentText: "#FFFFFF", font: "Inter", radius: 14 },
   // All 14 families, testnets only (same as the extension).
-  networks: ["evm:*", "hedera", "solana", "bitcoin", "sui", "aptos", "cardano", "substrate", "starknet", "ton", "near", "stellar", "tezos", "algorand"],
+  networks: ["evm:*", "hedera", "solana", "bitcoin", "sui", "aptos", "cardano", "substrate", "starknet", "ton", "near", "stellar", "tezos", "algorand", "cosmos", "provenance", "thorchain", "initia", "tron", "xrpl", "antelope", "multiversx", "icp", "stacks", "fuel", "bitcoincash"],
   passkeys: { enabled: true },
   walletConnect: {},
   services: MAINNET ? {} : TESTNET_SERVICES,

apps/docs/.vitepress/sidebar.ts

@@ -74,6 +74,13 @@ const dapps: Item[] = [
       { text: "Stellar", link: "/dapps/stellar" },
       { text: "Algorand", link: "/dapps/algorand" },
       { text: "Tezos (Beacon)", link: "/dapps/tezos" },
+      { text: "Cosmos SDK (Keplr API)", link: "/dapps/cosmos" },
+      { text: "TRON (TIP-1193)", link: "/dapps/tron" },
+      { text: "XRP Ledger (XLS-72d)", link: "/dapps/xrpl" },
+      { text: "Stacks (SIP-030)", link: "/dapps/stacks" },
+      { text: "Fuel", link: "/dapps/fuel" },
+      { text: "Bitcoin Cash", link: "/dapps/bitcoincash" },
+      { text: "MultiversX (best effort)", link: "/dapps/multiversx" },
       { text: "WalletConnect", link: "/dapps/walletconnect" },
     ],
   },
@@ -174,6 +181,7 @@ const reference = (): Item[] => [
     text: "Reference",
     items: [
       { text: "Overview", link: "/reference/" },
+      { text: "Networks", link: "/reference/networks" },
       { text: "clip.config.ts schema", link: "/reference/config" },
       { text: "Error codes", link: "/reference/errors" },
       { text: "Warning codes", link: "/reference/warnings" },

apps/docs/package.json

@@ -31,19 +31,28 @@
     "@clip-wallet/1mask": "workspace:*",
     "@clip-wallet/backup-client": "workspace:*",
     "@clip-wallet/chains-algorand": "workspace:*",
+    "@clip-wallet/chains-antelope": "workspace:*",
     "@clip-wallet/chains-aptos": "workspace:*",
     "@clip-wallet/chains-bitcoin": "workspace:*",
+    "@clip-wallet/chains-bitcoincash": "workspace:*",
     "@clip-wallet/chains-cardano": "workspace:*",
+    "@clip-wallet/chains-cosmos": "workspace:*",
     "@clip-wallet/chains-evm": "workspace:*",
+    "@clip-wallet/chains-fuel": "workspace:*",
     "@clip-wallet/chains-hedera": "workspace:*",
+    "@clip-wallet/chains-icp": "workspace:*",
+    "@clip-wallet/chains-multiversx": "workspace:*",
     "@clip-wallet/chains-near": "workspace:*",
     "@clip-wallet/chains-solana": "workspace:*",
+    "@clip-wallet/chains-stacks": "workspace:*",
     "@clip-wallet/chains-starknet": "workspace:*",
     "@clip-wallet/chains-stellar": "workspace:*",
     "@clip-wallet/chains-substrate": "workspace:*",
     "@clip-wallet/chains-sui": "workspace:*",
     "@clip-wallet/chains-tezos": "workspace:*",
     "@clip-wallet/chains-ton": "workspace:*",
+    "@clip-wallet/chains-tron": "workspace:*",
+    "@clip-wallet/chains-xrpl": "workspace:*",
     "@clip-wallet/config": "workspace:*",
     "@clip-wallet/connect": "workspace:*",
     "@clip-wallet/core": "workspace:*",