feat: migrate @dfinity/* to @icp-sdk/core and icp-cli (#378) (#381)

Migrate the frontend library and backend infrastructure from deprecated
@dfinity/* packages and dfx to @icp-sdk/core and icp-cli.

Frontend library (frontend/ic_vetkeys):
- Replace @dfinity/{agent,principal,candid,identity} with @icp-sdk/core
- Regenerate declarations with @icp-sdk/bindgen@0.3.0
- Replace createActor wrappers with direct Actor.createActor calls
- Update test host ports and add canister ID null guards
- Reformat tsconfig, vite.config, eslint config

Backend infrastructure:
- Replace dfx.json with icp.yaml for all backend canisters
- Update Makefiles for icp-cli compatible builds
- Update test key from dfx_test_key to test_key_1
- Update CI workflows for icp-cli

CI:
- Update frontend.yml and backend-motoko.yml for icp-cli
- Update provision scripts
- Add .icp to .gitignore

Author: andreacerulli

.github/workflows/backend-motoko-format-check.yml

@@ -20,6 +20,9 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - uses: ZenVoich/setup-mops@3e94e453352269b34137b5ce49f09a8df81bed7d # v1.4.1
         with:
           mops-version: 2

.github/workflows/backend-motoko.yml

@@ -24,12 +24,17 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - uses: ZenVoich/setup-mops@3e94e453352269b34137b5ce49f09a8df81bed7d # v1.4.1
         with:
           mops-version: 2
       - name: Provision Linux
         run: bash .github/workflows/provision-linux.sh
       - name: Run MOPS Test Linux
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cd backend/mo/ic_vetkeys
@@ -47,12 +52,17 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - uses: ZenVoich/setup-mops@3e94e453352269b34137b5ce49f09a8df81bed7d # v1.4.1
         with:
           mops-version: 2
       - name: Provision Darwin
         run: bash .github/workflows/provision-darwin.sh
       - name: Run MOPS Test Darwin
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cd backend/mo/ic_vetkeys

.github/workflows/frontend.yml

@@ -11,7 +11,7 @@ on:
       - backend/**/canisters/**
       - package.json
       - package-lock.json
-      - .github/workflows/frontend_ic_vetkeys.yml
+      - .github/workflows/frontend.yml
       - .github/workflows/provision-darwin.sh
       - .github/workflows/provision-linux.sh
 concurrency:
@@ -24,9 +24,14 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Linux
         run: bash .github/workflows/provision-linux.sh
       - name: Frontend Tests and Lint
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           npm install
@@ -40,10 +45,15 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Darwin
         run: |
           bash .github/workflows/provision-darwin.sh
       - name: Frontend Tests and Lint
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           npm install

.github/workflows/provision-darwin.sh

@@ -5,29 +5,8 @@ set -ex
 # Enter temporary directory.
 pushd /tmp
 
-# Install Node.
-brew install nodejs
-
-# Install DFINITY SDK.
-curl --location --output install-dfx.sh "https://raw.githubusercontent.com/dfinity/sdk/master/public/install-dfxvm.sh"
-DFX_VERSION=${DFX_VERSION:=0.26.1} DFXVM_INIT_YES=true bash install-dfx.sh
-rm install-dfx.sh
-echo "$HOME/Library/Application Support/org.dfinity.dfx/bin" >> $GITHUB_PATH
-source "$HOME/Library/Application Support/org.dfinity.dfx/env"
-dfx cache install
-
-# check the current ic-commit found in the main branch, check if it differs from the one in this PR branch
-# if so, update the  dfx cache with the latest ic artifacts
-if [ -f "${GITHUB_WORKSPACE}/.ic-commit" ]; then
-    stable_sha=$(curl https://raw.githubusercontent.com/dfinity/examples/master/.ic-commit)
-    current_sha=$(sed <"$GITHUB_WORKSPACE/.ic-commit" 's/#.*$//' | sed '/^$/d')
-    arch="x86_64-darwin"
-    if [ "$current_sha" != "$stable_sha" ]; then
-      export current_sha
-      export arch
-      sh "$GITHUB_WORKSPACE/.github/workflows/update-dfx-cache.sh"
-    fi
-fi
+# Install icp-cli (requires Node.js >=22, set up via actions/setup-node in the workflow).
+npm install -g @icp-sdk/icp-cli @icp-sdk/ic-wasm ic-mops
 
 # Install rust
 curl --location --output install-rustup.sh "https://sh.rustup.rs"

.github/workflows/provision-linux.sh

@@ -5,32 +5,12 @@ set -ex
 # Enter temporary directory.
 pushd /tmp
 
-# Install Node.
-sudo apt-get install nodejs
-
-# Install DFINITY SDK.
-wget --output-document install-dfx.sh "https://raw.githubusercontent.com/dfinity/sdk/master/public/install-dfxvm.sh"
-DFX_VERSION=${DFX_VERSION:=0.26.1} DFXVM_INIT_YES=true bash install-dfx.sh
-rm install-dfx.sh
-echo "$HOME/.local/share/dfx/bin" >>$GITHUB_PATH
-source "$HOME/.local/share/dfx/env"
-dfx cache install
-# check the current ic-commit found in the main branch, check if it differs from the one in this PR branch
-# if so, update the  dfx cache with the latest ic artifacts
-if [ -f "${GITHUB_WORKSPACE}/.ic-commit" ]; then
-  stable_sha=$(curl https://raw.githubusercontent.com/dfinity/examples/master/.ic-commit)
-  current_sha=$(sed <"$GITHUB_WORKSPACE/.ic-commit" 's/#.*$//' | sed '/^$/d')
-  arch="x86_64-linux"
-  if [ "$current_sha" != "$stable_sha" ]; then
-    export current_sha
-    export arch
-    sh "$GITHUB_WORKSPACE/.github/workflows/update-dfx-cache.sh"
-  fi
-fi
+# Install icp-cli (requires Node.js >=22, set up via actions/setup-node in the workflow).
+npm install -g @icp-sdk/icp-cli @icp-sdk/ic-wasm ic-mops
 
 # Install rust
 wget --output-document install-rustup.sh "https://sh.rustup.rs"
-sudo bash install-rustup.sh -y
+bash install-rustup.sh -y
 rustup target add wasm32-unknown-unknown
 
 # Set environment variables.

.gitignore

@@ -17,6 +17,7 @@ target/
 .idea/
 
 **/.dfx/*
+**/.icp/cache
 **/deps/*
 backend/**/declarations
 examples/**/declarations

backend/mo/canisters/ic_vetkeys_encrypted_maps_canister/dfx.json

@@ -0,0 +1,6 @@
+canisters:
+  - name: ic_vetkeys_encrypted_maps_canister
+    recipe:
+      type: "@dfinity/motoko@v4.1.0"
+      configuration:
+        main: src/Main.mo

backend/mo/canisters/ic_vetkeys_encrypted_maps_canister/icp.yaml

@@ -0,0 +1,6 @@
+canisters:
+  - name: ic_vetkeys_manager_canister
+    recipe:
+      type: "@dfinity/motoko@v4.1.0"
+      configuration:
+        main: src/Main.mo