feat: migrate @dfinity/* to @icp-sdk/core and icp-cli

Migrate the frontend library and backend infrastructure from deprecated
@dfinity/* packages and dfx to @icp-sdk/core and icp-cli.

Frontend library (frontend/ic_vetkeys):
- Replace @dfinity/{agent,principal,candid,identity} with @icp-sdk/core
- Regenerate declarations with @icp-sdk/bindgen@0.3.0
- Replace createActor wrappers with direct Actor.createActor calls
- Update test host ports and add canister ID null guards
- Reformat tsconfig, vite.config, eslint config

Backend infrastructure:
- Replace dfx.json with icp.yaml for all backend canisters
- Update Makefiles for icp-cli compatible builds
- Update test key from dfx_test_key to test_key_1
- Update CI workflows for icp-cli

CI:
- Update frontend.yml and backend-motoko.yml for icp-cli
- Update provision scripts
- Add .icp to .gitignore

Author: andreacerulli

.github/workflows/backend-motoko.yml

@@ -13,8 +13,8 @@ on:
       - backend/rs/canisters/**
       - Cargo.toml
       - Cargo.lock
-      - .github/workflows/provision-linux.sh
-      - .github/workflows/provision-darwin.sh
+      - .github/workflows/provision-frontend-linux.sh
+      - .github/workflows/provision-frontend-darwin.sh
       - .github/workflows/backend-motoko.yml
 
 jobs:
@@ -24,12 +24,17 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - uses: ZenVoich/setup-mops@3e94e453352269b34137b5ce49f09a8df81bed7d # v1.4.1
         with:
           mops-version: 1
       - name: Provision Linux
-        run: bash .github/workflows/provision-linux.sh
+        run: bash .github/workflows/provision-frontend-linux.sh
       - name: Run MOPS Test Linux
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cd backend/mo/ic_vetkeys
@@ -45,12 +50,17 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - uses: ZenVoich/setup-mops@3e94e453352269b34137b5ce49f09a8df81bed7d # v1.4.1
         with:
           mops-version: 1
       - name: Provision Darwin
-        run: bash .github/workflows/provision-darwin.sh
+        run: bash .github/workflows/provision-frontend-darwin.sh
       - name: Run MOPS Test Darwin
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           cd backend/mo/ic_vetkeys

.github/workflows/frontend.yml

@@ -11,9 +11,9 @@ on:
       - backend/**/canisters/**
       - package.json
       - package-lock.json
-      - .github/workflows/frontend_ic_vetkeys.yml
-      - .github/workflows/provision-darwin.sh
-      - .github/workflows/provision-linux.sh
+      - .github/workflows/frontend.yml
+      - .github/workflows/provision-frontend-darwin.sh
+      - .github/workflows/provision-frontend-linux.sh
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
@@ -24,9 +24,14 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Linux
-        run: bash .github/workflows/provision-linux.sh
+        run: bash .github/workflows/provision-frontend-linux.sh
       - name: Frontend Tests and Lint
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           npm install
@@ -40,10 +45,15 @@ jobs:
       - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           persist-credentials: false
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: '22'
       - name: Provision Darwin
         run: |
-          bash .github/workflows/provision-darwin.sh
+          bash .github/workflows/provision-frontend-darwin.sh
       - name: Frontend Tests and Lint
+        env:
+          ICP_CLI_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           set -eExuo pipefail
           npm install

.gitignore

@@ -17,6 +17,7 @@ target/
 .idea/
 
 **/.dfx/*
+**/.icp/cache
 **/deps/*
 backend/**/declarations
 examples/**/declarations

backend/mo/canisters/ic_vetkeys_encrypted_maps_canister/Makefile

@@ -3,11 +3,12 @@ PWD:=$(shell pwd)
 .PHONY: compile-wasm
 .SILENT: compile-wasm
 compile-wasm:
-	dfx build --check
+	icp build
 
 # Test the APIs of this canister using the respective Rust canister tests.
 # This has the advantage that the tests are consistent (less room for bugs by having only one implementation of the tests) and the checked expected behavior is consistent across Rust and Motoko.
 .PHONY: test
 .SILENT: test
 test: compile-wasm
-	CUSTOM_WASM_PATH=$(PWD)/.dfx/local/canisters/ic_vetkeys_encrypted_maps_canister/ic_vetkeys_encrypted_maps_canister.wasm cargo test -p ic-vetkeys-encrypted-maps-canister
+	@echo "Testing Motoko canister WASM: $(PWD)/.icp/cache/artifacts/ic_vetkeys_encrypted_maps_canister"
+	CUSTOM_WASM_PATH=$(PWD)/.icp/cache/artifacts/ic_vetkeys_encrypted_maps_canister cargo test -p ic-vetkeys-encrypted-maps-canister

backend/mo/canisters/ic_vetkeys_encrypted_maps_canister/dfx.json

@@ -0,0 +1,7 @@
+canisters:
+  - name: ic_vetkeys_encrypted_maps_canister
+    recipe:
+      type: "@dfinity/motoko@v4.1.0"
+      configuration:
+        main: src/Main.mo
+        args: --enhanced-orthogonal-persistence

backend/mo/canisters/ic_vetkeys_encrypted_maps_canister/icp.yaml

@@ -1,3 +1,6 @@
+[toolchain]
+moc = "1.5.0"
+
 [package]
 name = "ic-vetkeys-encrypted-maps-canister"
 version = "0.1.0"

backend/mo/canisters/ic_vetkeys_encrypted_maps_canister/mops.toml

@@ -3,11 +3,12 @@ PWD:=$(shell pwd)
 .PHONY: compile-wasm
 .SILENT: compile-wasm
 compile-wasm:
-	dfx build --check
+	icp build
 
 # Test the APIs of this canister using the respective Rust canister tests.
 # This has the advantage that the tests are consistent (less room for bugs by having only one implementation of the tests) and the checked expected behavior is consistent across Rust and Motoko.
 .PHONY: test
 .SILENT: test
 test: compile-wasm
-	CUSTOM_WASM_PATH=$(PWD)/.dfx/local/canisters/ic_vetkeys_manager_canister/ic_vetkeys_manager_canister.wasm cargo test -p ic-vetkeys-manager-canister
+	@echo "Testing Motoko canister WASM: $(PWD)/.icp/cache/artifacts/ic_vetkeys_manager_canister"
+	CUSTOM_WASM_PATH=$(PWD)/.icp/cache/artifacts/ic_vetkeys_manager_canister cargo test -p ic-vetkeys-manager-canister

backend/mo/canisters/ic_vetkeys_manager_canister/Makefile

@@ -0,0 +1,7 @@
+canisters:
+  - name: ic_vetkeys_manager_canister
+    recipe:
+      type: "@dfinity/motoko@v4.1.0"
+      configuration:
+        main: src/Main.mo
+        args: --enhanced-orthogonal-persistence