feat(ckdoge-minter): support ICRC-21 consent messages

[Dfinity-Bjoern]

Summary

Implements the ICRC-21 Canister Call Consent Message standard on the ckDOGE minter so that ICRC-21-aware wallets can display a human-readable description of retrieve_doge_with_approval calls before the user signs.

Both display variants from the standard are supported:

• GenericDisplay — a Markdown message intended for software wallets with a full screen.
• FieldsDisplay — a list of (label, Value) fields tailored for hardware wallets (e.g. Ledger Nano S+).

Also adds an icrc10_supported_standards query that advertises ICRC-10 and ICRC-21.

This mirrors the ckBTC minter implementation from #10093, with the PR-review learnings applied up front rather than as follow-ups.

Implementation

• New module rs/dogecoin/ckdoge/minter/src/updates/icrc21.rs holds the consent-message construction and icrc10_supported_standards.
• main.rs exposes the two new endpoints (icrc21_canister_call_consent_message as update, icrc10_supported_standards as query).
• ckdoge_minter.did declares the ICRC-10 / ICRC-21 types and methods.
• The handler enforces the standard's argument-size limit (reusing MAX_CONSENT_MESSAGE_ARG_SIZE_BYTES from icrc-ledger-types) and returns Icrc21Error::UnsupportedCanisterCall for unknown methods or undecodable args.
• Scope: only retrieve_doge_with_approval produces a consent message; the legacy retrieve_doge flow intentionally returns UnsupportedCanisterCall.
• Network-aware token symbols: Mainnet ⇒ ckDOGE/DOGE, Regtest ⇒ ckTESTDOGE/TESTDOGE, threaded through the GenericDisplay Markdown, the FieldsDisplay intent, the TokenAmount symbol, and the address label.
• No canister-side pagination: long values (Dogecoin address, subaccount hex) are emitted as a single Value::Text per the ICRC-21 spec; wallets handle pagination (cf. the Ledger ICP app).
• Markdown-injection defence: the destination address is parsed via DogecoinAddress::parse before any interpolation. Bad addresses (including newlines/backticks/# payloads or addresses from the wrong network) are rejected with a generic error and never echoed back.
• ICRC-10 / ICRC-21 URLs point at the canonical dfinity/ICRC repo.

Test plan

• 11 new unit tests in updates::tests::icrc21 covering: argument-size limit, unsupported method (incl. explicit retrieve_doge), decode failures, GenericDisplay output (with and without subaccount), FieldsDisplay output (with and without subaccount), regtest token symbols (both display variants), and Markdown-injection / wrong-network address rejection. Tests live in updates/tests.rs (separate from prod code).
• New test_icrc21_endpoints_smoke integration test in tests/tests.rs installs a mainnet minter via Setup::new(Network::Mainnet) and exercises the full Candid path end-to-end: icrc10_supported_standards advertises both standards with the canonical URL; icrc21_canister_call_consent_message returns the expected GenericDisplay markdown and FieldsDisplay structured message; unsupported methods (including retrieve_doge) are rejected.
• cargo clippy --all-features -p ic-ckdoge-minter -p ic-ckdoge-minter-test-utils clean with the workspace lint set.
• bazel test //rs/dogecoin/ckdoge/minter:unit_tests //rs/dogecoin/ckdoge/minter:ckdoge_candid_api_tests //rs/dogecoin/ckdoge/minter:ckdoge_minter_replay_events_tests all pass (the candid API test verifies the .did matches the canister).
• bazel test //rs/dogecoin/ckdoge/minter:integration_tests (Linux x86_64 only — runs in CI; contains the smoke test).
• Try the FieldsDisplay output on an actual Ledger Nano S+ once a ckDOGE app is available.

🤖 Generated with Claude Code

[Copilot]

Pull request overview

Adds ICRC-21 “canister call consent messages” support to the ckDOGE minter so ICRC-21-aware wallets can preview a human-readable description of retrieve_doge_with_approval before signing, and advertises ICRC-10/ICRC-21 support via icrc10_supported_standards.

Changes:

• Implemented ICRC-21 consent message generation (GenericDisplay Markdown + FieldsDisplay fields) for retrieve_doge_with_approval, including network-aware symbols (Mainnet vs Regtest) and address validation.
• Exposed new canister endpoints: icrc21_canister_call_consent_message (update) and icrc10_supported_standards (query), and updated the .did accordingly.
• Added unit + integration smoke tests and updated test utilities to exercise the new endpoints.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
rs/dogecoin/ckdoge/test_utils/src/minter.rs	Adds helper wrappers to call/decode the new ICRC-10/ICRC-21 endpoints in PocketIC-based tests.
rs/dogecoin/ckdoge/minter/tests/tests.rs	Adds an integration smoke test covering supported-standards advertising, both display variants, and unsupported-method behavior.
rs/dogecoin/ckdoge/minter/src/updates/tests.rs	Adds unit tests for argument-size limits, decode failures, both display variants (with/without subaccount), network-aware symbols, and invalid-address rejection.
rs/dogecoin/ckdoge/minter/src/updates/mod.rs	Exposes the new icrc21 updates module.
rs/dogecoin/ckdoge/minter/src/updates/icrc21.rs	Implements ICRC-21 consent message construction + ICRC-10 supported-standards list for ckDOGE.
rs/dogecoin/ckdoge/minter/src/main.rs	Exposes the two new canister endpoints wired to the updates::icrc21 module.
rs/dogecoin/ckdoge/minter/ckdoge_minter.did	Adds ICRC-10/ICRC-21 types and endpoint declarations to the public Candid interface.
rs/dogecoin/ckdoge/minter/BUILD.bazel	Adds the needed icrc-ledger-types dependency for the canister build target.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 8 out of 8 changed files in this pull request and generated no new comments.