feat: Add Stellar (XLM) chain support

Author: soumyacodes007

bindings/node/README.md

@@ -62,6 +62,7 @@ ows sign tx --wallet agent-treasury --chain evm --tx "deadbeef..."
 | XRPL | secp256k1 | Base58Check (`r...`) | `m/44'/144'/0'/0/0` |
 | Spark (Bitcoin L2) | secp256k1 | spark: prefixed | `m/84'/0'/0'/0/0` |
 | Filecoin | secp256k1 | f1 base32 | `m/44'/461'/0'/0/0` |
+| Stellar | Ed25519 | StrKey Base32 (`G...`) | `m/44'/148'/{index}'` |
 
 ## CLI Reference
 

bindings/node/__test__/index.spec.mjs

@@ -51,18 +51,18 @@ describe('@open-wallet-standard/core', () => {
 
   it('derives addresses for all chains', () => {
     const phrase = generateMnemonic(12);
-    for (const chain of ['evm', 'solana', 'sui', 'bitcoin', 'cosmos', 'tron', 'ton', 'filecoin', 'xrpl']) {
+    for (const chain of ['evm', 'solana', 'sui', 'bitcoin', 'cosmos', 'tron', 'ton', 'filecoin', 'xrpl', 'stellar']) {
       const addr = deriveAddress(phrase, chain);
       assert.ok(addr.length > 0, `address should be non-empty for ${chain}`);
     }
   });
 
   // ---- Universal wallet lifecycle ----
 
-  it('creates a universal wallet with 9 accounts', () => {
+  it('creates a universal wallet with 10 accounts', () => {
     const wallet = createWallet('lifecycle-test', undefined, 12, vaultDir);
     assert.equal(wallet.name, 'lifecycle-test');
-    assert.equal(wallet.accounts.length, 9);
+    assert.equal(wallet.accounts.length, 10);
 
     const chainIds = wallet.accounts.map((a) => a.chainId);
     assert.ok(chainIds.some((c) => c.startsWith('eip155:')));
@@ -74,6 +74,7 @@ describe('@open-wallet-standard/core', () => {
     assert.ok(chainIds.some((c) => c.startsWith('ton:')));
     assert.ok(chainIds.some((c) => c.startsWith('fil:')));
     assert.ok(chainIds.some((c) => c.startsWith('xrpl:')));
+    assert.ok(chainIds.some((c) => c.startsWith('stellar:')));
 
     // List
     const wallets = listWallets(vaultDir);
@@ -107,7 +108,7 @@ describe('@open-wallet-standard/core', () => {
 
     const wallet = importWalletMnemonic('mn-import', phrase, undefined, undefined, vaultDir);
     assert.equal(wallet.name, 'mn-import');
-    assert.equal(wallet.accounts.length, 9);
+    assert.equal(wallet.accounts.length, 10);
 
     const evmAcct = wallet.accounts.find((a) => a.chainId.startsWith('eip155:'));
     assert.equal(evmAcct.address, expectedEvm);
@@ -125,7 +126,7 @@ describe('@open-wallet-standard/core', () => {
     const wallet = importWalletPrivateKey('pk-secp', privkey, undefined, vaultDir, 'evm');
 
     assert.equal(wallet.name, 'pk-secp');
-    assert.equal(wallet.accounts.length, 9, 'should have all 9 chain accounts');
+    assert.equal(wallet.accounts.length, 10, 'should have all 10 chain accounts');
 
     // Sign on EVM (provided key's curve)
     const evmSig = signMessage('pk-secp', 'evm', 'hello', undefined, undefined, undefined, vaultDir);
@@ -149,7 +150,7 @@ describe('@open-wallet-standard/core', () => {
     const privkey = '9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60';
     const wallet = importWalletPrivateKey('pk-ed', privkey, undefined, vaultDir, 'solana');
 
-    assert.equal(wallet.accounts.length, 9);
+    assert.equal(wallet.accounts.length, 10);
 
     // Sign on Solana (provided key)
     const solSig = signMessage('pk-ed', 'solana', 'hello', undefined, undefined, undefined, vaultDir);
@@ -177,7 +178,7 @@ describe('@open-wallet-standard/core', () => {
     );
 
     assert.equal(wallet.name, 'pk-both');
-    assert.equal(wallet.accounts.length, 9, 'should have all 9 chain accounts');
+    assert.equal(wallet.accounts.length, 10, 'should have all 10 chain accounts');
 
     // Sign on EVM (secp256k1 key)
     const evmSig = signMessage('pk-both', 'evm', 'hello', undefined, undefined, undefined, vaultDir);
@@ -216,7 +217,7 @@ describe('@open-wallet-standard/core', () => {
     // Build a minimal tx with 1 sig slot (0x01) + 64 zero bytes + a message.
     const solTxHex = '01' + '00'.repeat(64) + 'deadbeefdeadbeef';
 
-    for (const chain of ['evm', 'solana', 'sui', 'bitcoin', 'cosmos', 'tron', 'ton', 'filecoin', 'xrpl']) {
+    for (const chain of ['evm', 'solana', 'sui', 'bitcoin', 'cosmos', 'tron', 'ton', 'filecoin', 'xrpl', 'stellar']) {
       const hex = chain === 'solana' ? solTxHex : txHex;
       const result = signTransaction('tx-signer', chain, hex, undefined, undefined, vaultDir);
       assert.ok(result.signature.length > 0, `signature should be non-empty for ${chain}`);

bindings/python/README.md

@@ -74,6 +74,7 @@ print(sig["signature"])
 | XRPL | secp256k1 | Base58Check (`r...`) | `m/44'/144'/0'/0/0` |
 | Spark (Bitcoin L2) | secp256k1 | spark: prefixed | `m/84'/0'/0'/0/0` |
 | Filecoin | secp256k1 | f1 base32 | `m/44'/461'/0'/0/0` |
+| Stellar | Ed25519 | StrKey Base32 (`G...`) | `m/44'/148'/{index}'` |
 
 ## Architecture
 

bindings/python/tests/test_bindings.py

@@ -40,7 +40,7 @@ def test_create_and_list_wallets(vault_dir):
     wallet = ows.create_wallet("test-wallet", vault_path_opt=vault_dir)
     assert wallet["name"] == "test-wallet"
     assert isinstance(wallet["accounts"], list)
-    assert len(wallet["accounts"]) == 9
+    assert len(wallet["accounts"]) == 10
 
     # Verify each chain family is present
     chain_ids = [a["chain_id"] for a in wallet["accounts"]]
@@ -53,6 +53,7 @@ def test_create_and_list_wallets(vault_dir):
     assert any(c.startswith("ton:") for c in chain_ids)
     assert any(c.startswith("fil:") for c in chain_ids)
     assert any(c.startswith("xrpl:") for c in chain_ids)
+    assert any(c.startswith("stellar:") for c in chain_ids)
 
     wallets = ows.list_wallets(vault_path_opt=vault_dir)
     assert len(wallets) == 1
@@ -99,7 +100,7 @@ def test_import_wallet_mnemonic(vault_dir):
         "imported", phrase, vault_path_opt=vault_dir
     )
     assert wallet["name"] == "imported"
-    assert len(wallet["accounts"]) == 9
+    assert len(wallet["accounts"]) == 10
 
     # EVM account should match derived address
     evm_account = next(a for a in wallet["accounts"] if a["chain_id"].startswith("eip155:"))

docs/07-supported-chains.md

@@ -39,6 +39,7 @@ OWS groups chains into families that share a cryptographic curve and address der
 | XRPL | secp256k1 | 144 | `m/44'/144'/0'/0/{index}` | Base58Check (`r...`) | `xrpl` |
 | Spark | secp256k1 | 8797555 | `m/84'/0'/0'/0/{index}` | `spark:` + compressed pubkey hex | `spark` |
 | Filecoin | secp256k1 | 461 | `m/44'/461'/0'/0/{index}` | `f1` + base32(blake2b-160) | `fil` |
+| Stellar | ed25519 | 148 | `m/44'/148'/{index}'` | StrKey Base32 (`G...`) | `stellar` |
 
 ## Known Networks
 
@@ -71,6 +72,7 @@ Each network has a canonical chain identifier. Endpoint discovery and transport
 | XRPL | `xrpl:mainnet` |
 | Spark | `spark:mainnet` |
 | Filecoin | `fil:mainnet` |
+| Stellar | `stellar:pubnet` |
 
 Implementations MAY ship convenience endpoint defaults, but those defaults are deployment choices rather than OWS interoperability requirements.
 
@@ -100,6 +102,8 @@ xrpl-testnet  → xrpl:testnet
 xrpl-devnet   → xrpl:devnet
 spark     → spark:mainnet
 filecoin  → fil:mainnet
+stellar   → stellar:pubnet
+stellar-testnet → stellar:testnet
 ```
 
 Aliases MUST be resolved to full CAIP-2 identifiers before any processing. They MUST NOT appear in wallet files, policy files, or audit logs.
@@ -123,7 +127,8 @@ Master Seed (512 bits via PBKDF2)
     ├── m/44'/784'/0'/0'/0' → Sui Account 0
     ├── m/44'/144'/0'/0/0   → XRPL Account 0
     ├── m/84'/0'/0'/0/0     → Spark Account 0
-    └── m/44'/461'/0'/0/0   → Filecoin Account 0
+    ├── m/44'/461'/0'/0/0   → Filecoin Account 0
+    └── m/44'/148'/{index}' → Stellar Account 0
 ```
 
 For mnemonic-based wallets, a single mnemonic derives accounts across all supported chains. Those wallet files store the encrypted mnemonic, and the signer derives the appropriate private key using each chain's coin type and derivation path. Wallets imported from raw private keys instead store encrypted curve-key material directly.

ows/Cargo.lock

@@ -56,7 +56,7 @@ The bindings are **standalone** — they embed the Rust core via native FFI. No
 import { createWallet, signMessage } from "@open-wallet-standard/core";
 
 const wallet = createWallet("my-wallet");
-console.log(wallet.accounts); // addresses for EVM, Solana, Bitcoin, Cosmos, Tron, TON, Filecoin, Sui, and XRPL
+console.log(wallet.accounts); // addresses for EVM, Solana, Bitcoin, Cosmos, Tron, TON, Filecoin, Sui, XRPL, and Stellar
 
 const sig = signMessage("my-wallet", "evm", "hello");
 console.log(sig.signature);
@@ -67,7 +67,7 @@ console.log(sig.signature);
 | Crate | Description |
 |-------|-------------|
 | `ows-core` | Types, CAIP-2/10 parsing, errors, config. Zero crypto dependencies. |
-| `ows-signer` | ChainSigner trait, HD derivation, address derivation for EVM, Solana, XRPL, Sui, Bitcoin, Cosmos, Tron, TON, Spark, and Filecoin. |
+| `ows-signer` | ChainSigner trait, HD derivation, address derivation for EVM, Solana, XRPL, Sui, Bitcoin, Cosmos, Tron, TON, Spark, Filecoin, and Stellar. |
 | `ows-lib` | Library interface used by language bindings and the CLI. |
 | `ows-pay` | x402 payment flows, service discovery, and funding helpers. |
 | `ows-cli` | The `ows` command-line tool. |
@@ -84,6 +84,7 @@ console.log(sig.signature);
 - **Spark** (Bitcoin L2) — secp256k1, spark: prefixed addresses
 - **XRPL** — secp256k1, Base58Check r-addresses
 - **Filecoin** — secp256k1, f1 base32 addresses
+- **Stellar** — Ed25519, StrKey base32 addresses (G...)
 
 ## License
 

ows/README.md

@@ -56,7 +56,7 @@ The bindings are **standalone** — they embed the Rust core via native FFI. No
 import { createWallet, signMessage } from "@open-wallet-standard/core";
 
 const wallet = createWallet("my-wallet");
-console.log(wallet.accounts); // addresses for EVM, Solana, Bitcoin, Cosmos, Tron, TON, Filecoin, Sui, and XRPL
+console.log(wallet.accounts); // addresses for EVM, Solana, Bitcoin, Cosmos, Tron, TON, Filecoin, Sui, XRPL, and Stellar
 
 const sig = signMessage("my-wallet", "evm", "hello");
 console.log(sig.signature);
@@ -67,7 +67,7 @@ console.log(sig.signature);
 | Crate | Description |
 |-------|-------------|
 | `ows-core` | Types, CAIP-2/10 parsing, errors, config. Zero crypto dependencies. |
-| `ows-signer` | ChainSigner trait, HD derivation, address derivation for EVM, Solana, XRPL, Sui, Bitcoin, Cosmos, Tron, TON, Spark, and Filecoin. |
+| `ows-signer` | ChainSigner trait, HD derivation, address derivation for EVM, Solana, XRPL, Sui, Bitcoin, Cosmos, Tron, TON, Spark, Filecoin, and Stellar. |
 | `ows-lib` | Library interface used by language bindings and the CLI. |
 | `ows-pay` | x402 payment flows, service discovery, and funding helpers. |
 | `ows-cli` | The `ows` command-line tool. |
@@ -84,6 +84,7 @@ console.log(sig.signature);
 - **Spark** (Bitcoin L2) — secp256k1, spark: prefixed addresses
 - **XRPL** — secp256k1, Base58Check r-addresses
 - **Filecoin** — secp256k1, f1 base32 addresses
+- **Stellar** — Ed25519, StrKey base32 addresses (G...)
 
 ## License
 

ows/crates/ows-cli/README.md

@@ -8,6 +8,7 @@ fn find_account_for_chain<'a>(
 ) -> Result<&'a AccountInfo, CliError> {
     let chain_prefix = match chain {
         "solana" => "solana:",
+        "stellar" | "stellar-testnet" => "stellar:",
         _ => "eip155:",
     };
 
@@ -34,6 +35,26 @@ pub fn run(wallet_name: &str, chain: Option<&str>, token: Option<&str>) -> Resul
     eprintln!("Creating deposit for wallet \"{wallet_name}\" ({address})");
     eprintln!("Target: {token_name} on {chain_name}");
 
+    if chain_name == "stellar-testnet" {
+        eprintln!("\nfunding via Friendbot is available immediately:");
+        println!("https://friendbot.stellar.org/?addr={address}");
+        
+        #[cfg(target_os = "macos")]
+        {
+            let _ = std::process::Command::new("open")
+                .arg(&format!("https://friendbot.stellar.org/?addr={address}"))
+                .spawn();
+        }
+        #[cfg(target_os = "linux")]
+        {
+            let _ = std::process::Command::new("xdg-open")
+                .arg(&format!("https://friendbot.stellar.org/?addr={address}"))
+                .spawn();
+        }
+        
+        return Ok(());
+    }
+
     let rt =
         tokio::runtime::Runtime::new().map_err(|e| CliError::InvalidArgs(format!("tokio: {e}")))?;
 
@@ -110,3 +131,46 @@ pub fn balance(wallet_name: &str, chain: Option<&str>) -> Result<(), CliError> {
 
     Ok(())
 }
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use ows_lib::types::AccountInfo;
+
+    fn mock_account(chain_id: &str) -> AccountInfo {
+        AccountInfo {
+            chain_id: chain_id.to_string(),
+            address: format!("addr_for_{chain_id}"),
+            derivation_path: String::new(),
+        }
+    }
+
+    #[test]
+    fn test_find_account_for_chain() {
+        let accounts = vec![
+            mock_account("eip155:1"),
+            mock_account("solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp"),
+            mock_account("stellar:pubnet"),
+        ];
+
+        // Should find Solana
+        let acct = find_account_for_chain(&accounts, "solana").unwrap();
+        assert_eq!(acct.chain_id, "solana:5eykt4UsFv8P8NJdTREpY1vzqKqZKvdp");
+
+        // Should find Stellar with 'stellar'
+        let acct = find_account_for_chain(&accounts, "stellar").unwrap();
+        assert_eq!(acct.chain_id, "stellar:pubnet");
+
+        // Should find Stellar with 'stellar-testnet'
+        let acct = find_account_for_chain(&accounts, "stellar-testnet").unwrap();
+        assert_eq!(acct.chain_id, "stellar:pubnet");
+
+        // Should fallback to EVM for unknown / base
+        let acct = find_account_for_chain(&accounts, "base").unwrap();
+        assert_eq!(acct.chain_id, "eip155:1");
+
+        // Should error if chain prefix missing
+        let accounts_no_stellar = vec![mock_account("eip155:1")];
+        assert!(find_account_for_chain(&accounts_no_stellar, "stellar").is_err());
+    }
+}