@propxchain/core-client 0.15.0-canary.53 → 0.16.0-canary.55

package/dist/audit/verifyAuditLog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verifyAuditLog.d.ts","sourceRoot":"","sources":["../../src/audit/verifyAuditLog.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,KAAK,mBAAmB,EAAqB,MAAM,iBAAiB,CAAC;AAiC9E,kEAAkE;AAClE,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,QAAQ,EAAE,UAAU,CAAC;IACrB,WAAW,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,OAAO,EAAE,UAAU,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,uBAAuB,CAAC;IAC7B;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AAiBD,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,YAAY,CAAC,CAkEvB"}
+{"version":3,"file":"verifyAuditLog.d.ts","sourceRoot":"","sources":["../../src/audit/verifyAuditLog.ts"],"names":[],"mappings":"AAyBA,OAAO,EAAE,KAAK,mBAAmB,EAAqB,MAAM,iBAAiB,CAAC;AAiC9E,kEAAkE;AAClE,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,mBAAmB,EAAE,CAAC;IAC9B,QAAQ,EAAE,UAAU,CAAC;IACrB,WAAW,EAAE,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/B,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,+EAA+E;IAC/E,OAAO,EAAE,UAAU,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,GAAG,EAAE,uBAAuB,CAAC;IAC7B;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,CAAC;CACrC;AAkBD,wBAAsB,uBAAuB,CAC3C,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,YAAY,CAAC,CAkEvB"}

package/dist/audit/verifyAuditLog.js

@@ -7,18 +7,20 @@
 //   3. confirm the response's stated head matches the certified head;
 //   4. recompute the chain from the events and confirm it matches.
 //
-// Uses the @dfinity/* family (agent, principal, certificate-verification)
-// throughout — that is the lineage certificate-verification depends on, so the
-// HashTree/Principal types line up. The rest of core-client uses @icp-sdk;
-// this leaf module's boundary is plain Uint8Array/string, so the split is
-// contained.
+// Uses @icp-sdk/core (agent, principal) with @dfinity/certificate-verification
+// 4.x, which depends on it, so the HashTree/Principal types line up. 4.x is
+// required: the IC now publishes a subnet's canister ranges under
+// /canister_ranges/<subnet>/... in the delegation (and drops them from
+// /subnet/<id>/canister_ranges). 3.x only reads the old path and fails with
+// "Could not find canister ranges for subnet" on those certificates; 4.x reads
+// both. This leaf module's boundary is plain Uint8Array/string.
 //
 // Live verification keeps the certificate-freshness window tight. Forensic
 // verification of a sealed historical bundle (ADR 0013, proof model ii)
 // relaxes it by design — the bundle proves a fact as-of the certificate's
 // /time, not a current one.
-import { lookup_path, lookupResultToBuffer } from "@dfinity/agent";
-import { Principal } from "@dfinity/principal";
+import { lookup_path, lookupResultToBuffer } from "@icp-sdk/core/agent";
+import { Principal } from "@icp-sdk/core/principal";
 import { recomputeHeadHash } from "./auditChain.js";
 let cachedVerify;
 async function loadVerifyCertification() {
@@ -33,10 +35,11 @@ async function loadVerifyCertification() {
     return fn;
 }
 const FIVE_MINUTES_MS = 5 * 60 * 1000;
-function toArrayBuffer(u8) {
+/** Detached copy, so a view into a larger buffer never leaks neighbouring bytes. */
+function toBytes(u8) {
     const copy = new Uint8Array(u8.length);
     copy.set(u8);
-    return copy.buffer;
+    return copy;
 }
 function equalBytes(a, b) {
     if (a.length !== b.length)
@@ -58,9 +61,9 @@ export async function verifyCertifiedAuditLog(opts) {
         const verifyCertification = await loadVerifyCertification();
         tree = await verifyCertification({
             canisterId: Principal.fromText(opts.canisterId),
-            encodedCertificate: toArrayBuffer(log.certificate[0]),
-            encodedTree: toArrayBuffer(log.witness),
-            rootKey: toArrayBuffer(opts.rootKey),
+            encodedCertificate: toBytes(log.certificate[0]),
+            encodedTree: toBytes(log.witness),
+            rootKey: toBytes(opts.rootKey),
             maxCertificateTimeOffsetMs: opts.maxCertificateTimeOffsetMs ?? FIVE_MINUTES_MS,
         });
     }
@@ -74,7 +77,7 @@ export async function verifyCertifiedAuditLog(opts) {
     // 2. Read the certified headHash for this transaction from the witness tree.
     // The path segment is the UTF-8 bytes of the transactionId — exactly the key
     // ledger_manager certified (Text.encodeUtf8(transactionId)).
-    const lookup = lookup_path([toArrayBuffer(new TextEncoder().encode(transactionId))], tree);
+    const lookup = lookup_path([new TextEncoder().encode(transactionId)], tree);
     const certifiedBuf = lookupResultToBuffer(lookup);
     if (!certifiedBuf) {
         return {

package/dist/audit/verifyAuditLog.js.map

@@ -1 +1 @@
-{"version":3,"file":"verifyAuditLog.js","sourceRoot":"","sources":["../../src/audit/verifyAuditLog.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,8EAA8E;AAC9E,4CAA4C;AAC5C,uDAAuD;AACvD,8EAA8E;AAC9E,sEAAsE;AACtE,mEAAmE;AACnE,EAAE;AACF,0EAA0E;AAC1E,+EAA+E;AAC/E,2EAA2E;AAC3E,0EAA0E;AAC1E,aAAa;AACb,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,0EAA0E;AAC1E,4BAA4B;AAE5B,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEnE,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAA4B,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAgB9E,IAAI,YAA+C,CAAC;AACpD,KAAK,UAAU,uBAAuB;IACpC,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAG7D,CAAC;IACF,MAAM,EAAE,GAAG,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACvE,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,YAAY,GAAG,EAAE,CAAC;IAClB,OAAO,EAAE,CAAC;AACZ,CAAC;AA8BD,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,SAAS,aAAa,CAAC,EAAc;IACnC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACb,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAmB;IAEnB,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IACpC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;IAErC,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,UAAU,EAAE,CAAC;IAC/E,CAAC;IAED,sEAAsE;IACtE,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,MAAM,uBAAuB,EAAE,CAAC;QAC5D,IAAI,GAAG,MAAM,mBAAmB,CAAC;YAC/B,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;YAC/C,kBAAkB,EAAE,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACrD,WAAW,EAAE,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC;YACvC,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;YACpC,0BAA0B,EACxB,IAAI,CAAC,0BAA0B,IAAI,eAAe;SACrD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,oCAAoC,MAAM,CAAC,GAAG,CAAC,EAAE;YACzD,UAAU;SACX,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,6DAA6D;IAC7D,MAAM,MAAM,GAAG,WAAW,CACxB,CAAC,aAAa,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,EACxD,IAAI,CACL,CAAC;IACF,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,gDAAgD;YACxD,UAAU;SACX,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;IAEnD,gEAAgE;IAChE,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,kDAAkD;YAC1D,UAAU;SACX,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EACJ,uEAAuE;YACzE,UAAU;SACX,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC"}
+{"version":3,"file":"verifyAuditLog.js","sourceRoot":"","sources":["../../src/audit/verifyAuditLog.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,EAAE;AACF,8EAA8E;AAC9E,4CAA4C;AAC5C,uDAAuD;AACvD,8EAA8E;AAC9E,sEAAsE;AACtE,mEAAmE;AACnE,EAAE;AACF,+EAA+E;AAC/E,4EAA4E;AAC5E,kEAAkE;AAClE,uEAAuE;AACvE,4EAA4E;AAC5E,+EAA+E;AAC/E,gEAAgE;AAChE,EAAE;AACF,2EAA2E;AAC3E,wEAAwE;AACxE,0EAA0E;AAC1E,4BAA4B;AAE5B,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAA4B,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAgB9E,IAAI,YAA+C,CAAC;AACpD,KAAK,UAAU,uBAAuB;IACpC,IAAI,YAAY;QAAE,OAAO,YAAY,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,mCAAmC,CAAC,CAG7D,CAAC;IACF,MAAM,EAAE,GAAG,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACvE,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,YAAY,GAAG,EAAE,CAAC;IAClB,OAAO,EAAE,CAAC;AACZ,CAAC;AA8BD,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,oFAAoF;AACpF,SAAS,OAAO,CAAC,EAAc;IAC7B,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACb,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAmB;IAEnB,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,IAAI,CAAC;IACpC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;IAErC,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,4BAA4B,EAAE,UAAU,EAAE,CAAC;IAC/E,CAAC;IAED,sEAAsE;IACtE,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,mBAAmB,GAAG,MAAM,uBAAuB,EAAE,CAAC;QAC5D,IAAI,GAAG,MAAM,mBAAmB,CAAC;YAC/B,UAAU,EAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC;YAC/C,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YAC/C,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;YACjC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAC9B,0BAA0B,EACxB,IAAI,CAAC,0BAA0B,IAAI,eAAe;SACrD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,oCAAoC,MAAM,CAAC,GAAG,CAAC,EAAE;YACzD,UAAU;SACX,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,6EAA6E;IAC7E,6DAA6D;IAC7D,MAAM,MAAM,GAAG,WAAW,CACxB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EACzC,IAAI,CACL,CAAC;IACF,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,gDAAgD;YACxD,UAAU;SACX,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;IAEnD,gEAAgE;IAChE,IAAI,CAAC,UAAU,CAAC,aAAa,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7C,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,kDAAkD;YAC1D,UAAU;SACX,CAAC;IACJ,CAAC;IAED,wEAAwE;IACxE,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,aAAa,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EACJ,uEAAuE;YACzE,UAAU;SACX,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AACxC,CAAC"}

package/dist/canisters/transaction_manager/transaction_manager.did.d.ts

@@ -6,6 +6,28 @@ export type AMLStatus = { 'verified' : null } |
   { 'pending' : null } |
   { 'rejected' : null } |
   { 'not_started' : null };
+export interface AlterationDocument {
+  'kindDetails' : [] | [string],
+  'kind' : [] | [AlterationDocumentKind],
+  'document' : TA6Document,
+  'relatesTo' : [] | [AlterationKind],
+}
+export type AlterationDocumentKind = { 'BuildingRegsCompletion' : null } |
+  { 'ListedBuildingConsent' : null } |
+  { 'CompetentPersonCertificate' : null } |
+  { 'ConservationAreaConsent' : null } |
+  { 'BuildingRegsApproval' : null } |
+  { 'Other' : null } |
+  { 'PlanningPermission' : null };
+export type AlterationKind = { 'InternalWallsRemoved' : null } |
+  { 'ChangeOfUse' : null } |
+  { 'LoftConversion' : null } |
+  { 'Extension' : null } |
+  { 'Other' : null } |
+  { 'StructuralRoofWorks' : null } |
+  { 'Conservatory' : null } |
+  { 'WindowsPost2002' : null } |
+  { 'GarageConversion' : null };
 export interface AlterationTypes {
   'conservatory' : boolean,
   'otherDetails' : [] | [string],
@@ -380,7 +402,7 @@ export interface Section5Alterations {
   'q5_3NonResidentialUse' : TA6Response,
   'q5_8ConservationArea' : TA6Response,
   'q5_9TreePreservationOrder' : TA6Response,
-  'q5_2Documents' : Array<TA6Document>,
+  'q5_2Documents' : Array<AlterationDocument>,
   'q5_4Breaches' : TA6Response,
   'q5_5UnresolvedIssues' : TA6Response,
   'q5_1Alterations' : AlterationTypes,

package/dist/canisters/transaction_manager/transaction_manager.did.js

@@ -558,12 +558,38 @@ export const idlFactory = ({ IDL }) => {
     'garageConversion' : IDL.Bool,
     'extension' : IDL.Bool,
   });
+  const AlterationDocumentKind = IDL.Variant({
+    'BuildingRegsCompletion' : IDL.Null,
+    'ListedBuildingConsent' : IDL.Null,
+    'CompetentPersonCertificate' : IDL.Null,
+    'ConservationAreaConsent' : IDL.Null,
+    'BuildingRegsApproval' : IDL.Null,
+    'Other' : IDL.Null,
+    'PlanningPermission' : IDL.Null,
+  });
+  const AlterationKind = IDL.Variant({
+    'InternalWallsRemoved' : IDL.Null,
+    'ChangeOfUse' : IDL.Null,
+    'LoftConversion' : IDL.Null,
+    'Extension' : IDL.Null,
+    'Other' : IDL.Null,
+    'StructuralRoofWorks' : IDL.Null,
+    'Conservatory' : IDL.Null,
+    'WindowsPost2002' : IDL.Null,
+    'GarageConversion' : IDL.Null,
+  });
+  const AlterationDocument = IDL.Record({
+    'kindDetails' : IDL.Opt(IDL.Text),
+    'kind' : IDL.Opt(AlterationDocumentKind),
+    'document' : TA6Document,
+    'relatesTo' : IDL.Opt(AlterationKind),
+  });
   const Section5Alterations = IDL.Record({
     'q5_6Solar' : IDL.Opt(SolarPower),
     'q5_3NonResidentialUse' : TA6Response,
     'q5_8ConservationArea' : TA6Response,
     'q5_9TreePreservationOrder' : TA6Response,
-    'q5_2Documents' : IDL.Vec(TA6Document),
+    'q5_2Documents' : IDL.Vec(AlterationDocument),
     'q5_4Breaches' : TA6Response,
     'q5_5UnresolvedIssues' : TA6Response,
     'q5_1Alterations' : AlterationTypes,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@propxchain/core-client",
-  "version": "0.15.0-canary.53",
+  "version": "0.16.0-canary.55",
   "description": "Typed TypeScript client for the PropXchain core canisters on the Internet Computer. Includes a deterministic mock mode for local development and tests.",
   "license": "Apache-2.0",
   "type": "module",
@@ -40,10 +40,10 @@
   },
   "dependencies": {
     "@dfinity/agent": "^1.4.0",
-    "@dfinity/certificate-verification": "^3.1.0",
+    "@dfinity/certificate-verification": "^4.0.0",
     "@dfinity/principal": "^1.4.0",
     "@icp-sdk/auth": "^7.0.0",
-    "@icp-sdk/core": "^5.4.0"
+    "@icp-sdk/core": "^6.0.0"
   },
   "devDependencies": {
     "@types/node": "^22.10.2",

package/src/audit/verifyAuditLog.ts

@@ -7,20 +7,22 @@
 //   3. confirm the response's stated head matches the certified head;
 //   4. recompute the chain from the events and confirm it matches.
 //
-// Uses the @dfinity/* family (agent, principal, certificate-verification)
-// throughout — that is the lineage certificate-verification depends on, so the
-// HashTree/Principal types line up. The rest of core-client uses @icp-sdk;
-// this leaf module's boundary is plain Uint8Array/string, so the split is
-// contained.
+// Uses @icp-sdk/core (agent, principal) with @dfinity/certificate-verification
+// 4.x, which depends on it, so the HashTree/Principal types line up. 4.x is
+// required: the IC now publishes a subnet's canister ranges under
+// /canister_ranges/<subnet>/... in the delegation (and drops them from
+// /subnet/<id>/canister_ranges). 3.x only reads the old path and fails with
+// "Could not find canister ranges for subnet" on those certificates; 4.x reads
+// both. This leaf module's boundary is plain Uint8Array/string.
 //
 // Live verification keeps the certificate-freshness window tight. Forensic
 // verification of a sealed historical bundle (ADR 0013, proof model ii)
 // relaxes it by design — the bundle proves a fact as-of the certificate's
 // /time, not a current one.
 
-import { lookup_path, lookupResultToBuffer } from "@dfinity/agent";
-import type { HashTree } from "@dfinity/agent";
-import { Principal } from "@dfinity/principal";
+import { lookup_path, lookupResultToBuffer } from "@icp-sdk/core/agent";
+import type { HashTree } from "@icp-sdk/core/agent";
+import { Principal } from "@icp-sdk/core/principal";
 import { type CertifiedAuditEvent, recomputeHeadHash } from "./auditChain.js";
 
 // @dfinity/certificate-verification ships an ESM .d.ts (named exports, no
@@ -30,9 +32,9 @@ import { type CertifiedAuditEvent, recomputeHeadHash } from "./auditChain.js";
 // verifier works in Node, browser bundlers, and typecheck alike.
 interface VerifyCertificationParams {
   canisterId: Principal;
-  encodedCertificate: ArrayBuffer;
-  encodedTree: ArrayBuffer;
-  rootKey: ArrayBuffer;
+  encodedCertificate: Uint8Array;
+  encodedTree: Uint8Array;
+  rootKey: Uint8Array;
   maxCertificateTimeOffsetMs: number;
 }
 type VerifyCertificationFn = (p: VerifyCertificationParams) => Promise<HashTree>;
@@ -84,10 +86,11 @@ export interface VerifyOptions {
 
 const FIVE_MINUTES_MS = 5 * 60 * 1000;
 
-function toArrayBuffer(u8: Uint8Array): ArrayBuffer {
+/** Detached copy, so a view into a larger buffer never leaks neighbouring bytes. */
+function toBytes(u8: Uint8Array): Uint8Array {
   const copy = new Uint8Array(u8.length);
   copy.set(u8);
-  return copy.buffer;
+  return copy;
 }
 
 function equalBytes(a: Uint8Array, b: Uint8Array): boolean {
@@ -113,9 +116,9 @@ export async function verifyCertifiedAuditLog(
     const verifyCertification = await loadVerifyCertification();
     tree = await verifyCertification({
       canisterId: Principal.fromText(opts.canisterId),
-      encodedCertificate: toArrayBuffer(log.certificate[0]),
-      encodedTree: toArrayBuffer(log.witness),
-      rootKey: toArrayBuffer(opts.rootKey),
+      encodedCertificate: toBytes(log.certificate[0]),
+      encodedTree: toBytes(log.witness),
+      rootKey: toBytes(opts.rootKey),
       maxCertificateTimeOffsetMs:
         opts.maxCertificateTimeOffsetMs ?? FIVE_MINUTES_MS,
     });
@@ -131,7 +134,7 @@ export async function verifyCertifiedAuditLog(
   // The path segment is the UTF-8 bytes of the transactionId — exactly the key
   // ledger_manager certified (Text.encodeUtf8(transactionId)).
   const lookup = lookup_path(
-    [toArrayBuffer(new TextEncoder().encode(transactionId))],
+    [new TextEncoder().encode(transactionId)],
     tree,
   );
   const certifiedBuf = lookupResultToBuffer(lookup);

package/src/canisters/transaction_manager/transaction_manager.did

@@ -364,7 +364,7 @@ type Section6Guarantees =
 type Section5Alterations = 
  record {
    q5_1Alterations: AlterationTypes;
-   q5_2Documents: vec TA6Document;
+   q5_2Documents: vec AlterationDocument;
    q5_3NonResidentialUse: TA6Response;
    q5_4Breaches: TA6Response;
    q5_5UnresolvedIssues: TA6Response;
@@ -878,6 +878,35 @@ type AlterationTypes =
    structuralRoofWorks: bool;
    windowsPost2002: bool;
  };
+type AlterationKind = 
+ variant {
+   ChangeOfUse;
+   Conservatory;
+   Extension;
+   GarageConversion;
+   InternalWallsRemoved;
+   LoftConversion;
+   Other;
+   StructuralRoofWorks;
+   WindowsPost2002;
+ };
+type AlterationDocumentKind = 
+ variant {
+   BuildingRegsApproval;
+   BuildingRegsCompletion;
+   CompetentPersonCertificate;
+   ConservationAreaConsent;
+   ListedBuildingConsent;
+   Other;
+   PlanningPermission;
+ };
+type AlterationDocument = 
+ record {
+   document: TA6Document;
+   kind: opt AlterationDocumentKind;
+   kindDetails: opt text;
+   relatesTo: opt AlterationKind;
+ };
 type AMLStatus = 
  variant {
    not_started;
@@ -1019,6 +1048,7 @@ service : {
   /// create. Counterpart to `removeParty` (which is seller/admin-driven and
   /// gated against primary parties) — this is the "I want out" path for a
   /// joined buyer or any other access-list member.
+  /// 
   /// Gates:
   ///   - Anonymous callers rejected outright.
   ///   - Seller / createdBy cannot leave their own transaction (they
@@ -1026,6 +1056,7 @@ service : {
   ///   - Caller must currently have access to the transaction.
   ///   - Locked after contract exchange (same posture as assignBuyer):
   ///     once the deal is signed nobody walks away by toggling a button.
+  /// 
   /// Effects:
   ///   - Caller is removed from `accessList`.
   ///   - If the caller is the assigned buyer (`txn.buyer == msg.caller`),
@@ -1035,6 +1066,7 @@ service : {
   ///     reusable by a new joiner.
   ///   - Audit event `buyer_left` (or `party_left` for non-buyer leavers)
   ///     is logged via the existing ledger pattern.
+  /// 
   /// Concurrency: uses the same acquireTxLock/finally releaseTxLock
   /// posture as assignBuyer so a leave can't race against an in-flight
   /// stage write.
@@ -1052,6 +1084,7 @@ service : {
   ///   2. Stale-pin txs where the org's pinned principal changed after the
   ///      tx was created (e.g. admin password reset → new ICP key, or org
   ///      ownership transferred to a different admin).
+  /// 
   /// Idempotent over the target: re-running with the same developerPrincipal
   /// returns an error (already at target), so admin-driven backfill scripts
   /// don't silently re-touch state. Always rejects:

package/src/canisters/transaction_manager/transaction_manager.did.d.ts

@@ -6,6 +6,28 @@ export type AMLStatus = { 'verified' : null } |
   { 'pending' : null } |
   { 'rejected' : null } |
   { 'not_started' : null };
+export interface AlterationDocument {
+  'kindDetails' : [] | [string],
+  'kind' : [] | [AlterationDocumentKind],
+  'document' : TA6Document,
+  'relatesTo' : [] | [AlterationKind],
+}
+export type AlterationDocumentKind = { 'BuildingRegsCompletion' : null } |
+  { 'ListedBuildingConsent' : null } |
+  { 'CompetentPersonCertificate' : null } |
+  { 'ConservationAreaConsent' : null } |
+  { 'BuildingRegsApproval' : null } |
+  { 'Other' : null } |
+  { 'PlanningPermission' : null };
+export type AlterationKind = { 'InternalWallsRemoved' : null } |
+  { 'ChangeOfUse' : null } |
+  { 'LoftConversion' : null } |
+  { 'Extension' : null } |
+  { 'Other' : null } |
+  { 'StructuralRoofWorks' : null } |
+  { 'Conservatory' : null } |
+  { 'WindowsPost2002' : null } |
+  { 'GarageConversion' : null };
 export interface AlterationTypes {
   'conservatory' : boolean,
   'otherDetails' : [] | [string],
@@ -380,7 +402,7 @@ export interface Section5Alterations {
   'q5_3NonResidentialUse' : TA6Response,
   'q5_8ConservationArea' : TA6Response,
   'q5_9TreePreservationOrder' : TA6Response,
-  'q5_2Documents' : Array<TA6Document>,
+  'q5_2Documents' : Array<AlterationDocument>,
   'q5_4Breaches' : TA6Response,
   'q5_5UnresolvedIssues' : TA6Response,
   'q5_1Alterations' : AlterationTypes,

package/src/canisters/transaction_manager/transaction_manager.did.js

@@ -558,12 +558,38 @@ export const idlFactory = ({ IDL }) => {
     'garageConversion' : IDL.Bool,
     'extension' : IDL.Bool,
   });
+  const AlterationDocumentKind = IDL.Variant({
+    'BuildingRegsCompletion' : IDL.Null,
+    'ListedBuildingConsent' : IDL.Null,
+    'CompetentPersonCertificate' : IDL.Null,
+    'ConservationAreaConsent' : IDL.Null,
+    'BuildingRegsApproval' : IDL.Null,
+    'Other' : IDL.Null,
+    'PlanningPermission' : IDL.Null,
+  });
+  const AlterationKind = IDL.Variant({
+    'InternalWallsRemoved' : IDL.Null,
+    'ChangeOfUse' : IDL.Null,
+    'LoftConversion' : IDL.Null,
+    'Extension' : IDL.Null,
+    'Other' : IDL.Null,
+    'StructuralRoofWorks' : IDL.Null,
+    'Conservatory' : IDL.Null,
+    'WindowsPost2002' : IDL.Null,
+    'GarageConversion' : IDL.Null,
+  });
+  const AlterationDocument = IDL.Record({
+    'kindDetails' : IDL.Opt(IDL.Text),
+    'kind' : IDL.Opt(AlterationDocumentKind),
+    'document' : TA6Document,
+    'relatesTo' : IDL.Opt(AlterationKind),
+  });
   const Section5Alterations = IDL.Record({
     'q5_6Solar' : IDL.Opt(SolarPower),
     'q5_3NonResidentialUse' : TA6Response,
     'q5_8ConservationArea' : TA6Response,
     'q5_9TreePreservationOrder' : TA6Response,
-    'q5_2Documents' : IDL.Vec(TA6Document),
+    'q5_2Documents' : IDL.Vec(AlterationDocument),
     'q5_4Breaches' : TA6Response,
     'q5_5UnresolvedIssues' : TA6Response,
     'q5_1Alterations' : AlterationTypes,