fix(ci): remove sudo from provision-linux.sh, guard candid-extractor, fix lint

- Remove sudo from provision-linux.sh rustup install so cargo lands in
  the runner user's PATH (same fix already applied to provision-frontend-linux.sh)
- Guard all gen_bindings.sh scripts behind `command -v candid-extractor`
  to prevent bash from truncating the static .did file via shell redirection
  when candid-extractor is absent but the WASM build cache is present
- Fix 4 prettier/eslint violations in password_manager frontend:
  - NewPassword.svelte: break long disabled attribute across lines
  - Vault.svelte: remove unnecessary @ts-ignore (svelte-icons types resolve fine)
  - encrypted_maps.ts: inline canisterEnv lookup onto one line
  - auth.ts: wrap long expirationMs expression

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: marc0olo

.github/workflows/provision-linux.sh

@@ -10,7 +10,7 @@ npm install -g @icp-sdk/icp-cli @icp-sdk/ic-wasm ic-mops
 
 # Install rust
 wget --output-document install-rustup.sh "https://sh.rustup.rs"
-sudo bash install-rustup.sh -y
+bash install-rustup.sh -y
 rustup target add wasm32-unknown-unknown
 
 # Set environment variables.

examples/basic_bls_signing/frontend/scripts/gen_bindings.sh

@@ -2,9 +2,12 @@
 
 # Bindings are always generated from the Rust backend since both backends
 # expose the same Candid interface.
-cd ../../rust/backend && make extract-candid
-
-cd ../..
+if command -v candid-extractor >/dev/null 2>&1; then
+    cd ../../rust/backend && make extract-candid
+    cd ../..
+else
+    cd ../..
+fi
 
 rm -rf frontend/src/declarations/basic_bls_signing
 

examples/basic_ibe/frontend/scripts/gen_bindings.sh

@@ -1,8 +1,11 @@
 #!/bin/bash
 
-cd ../../rust/backend && make extract-candid
-
-cd ../..
+if command -v candid-extractor >/dev/null 2>&1; then
+    cd ../../rust/backend && make extract-candid
+    cd ../..
+else
+    cd ../..
+fi
 
 rm -rf frontend/src/declarations/basic_ibe
 

examples/basic_timelock_ibe/frontend/scripts/gen_bindings.sh

@@ -1,8 +1,11 @@
 #!/bin/bash
 
-cd ../../backend && make extract-candid
-
-cd ..
+if command -v candid-extractor >/dev/null 2>&1; then
+    cd ../../backend && make extract-candid
+    cd ..
+else
+    cd ..
+fi
 
 rm -rf frontend/src/declarations/basic_timelock_ibe
 

examples/encrypted_chat/frontend/scripts/gen_bindings.sh

@@ -5,7 +5,9 @@
 # Resolve the physical path of this script so that navigating up works
 # correctly even when frontend/ is reached via a symlink (e.g. motoko/frontend).
 SCRIPT_DIR=$(cd "$(dirname "$0")" && pwd -P)
-cd "$SCRIPT_DIR/../../rust/backend" && make extract-candid
+if command -v candid-extractor >/dev/null 2>&1; then
+    cd "$SCRIPT_DIR/../../rust/backend" && make extract-candid
+fi
 
 cd "$SCRIPT_DIR/../.."
 rm -rf frontend/src/declarations/encrypted_chat

examples/encrypted_notes_dapp_vetkd/frontend/scripts/gen_bindings.sh

@@ -6,7 +6,9 @@
 # Resolve the physical path of this script so that navigating up works
 # correctly even when frontend/ is reached via a symlink (e.g. motoko/frontend).
 SCRIPT_DIR=$(cd "$(dirname "$0")" && pwd -P)
-cd "$SCRIPT_DIR/../../rust/backend" && make extract-candid
+if command -v candid-extractor >/dev/null 2>&1; then
+    cd "$SCRIPT_DIR/../../rust/backend" && make extract-candid
+fi
 
 cd "$SCRIPT_DIR/../.."
 

examples/password_manager/frontend/scripts/gen_bindings.sh

@@ -5,7 +5,9 @@
 # Resolve the physical path of this script so that navigating up works
 # correctly even when frontend/ is reached via a symlink (e.g. motoko/frontend).
 SCRIPT_DIR=$(cd "$(dirname "$0")" && pwd -P)
-cd "$SCRIPT_DIR/../../rust/backend" && make extract-candid
+if command -v candid-extractor >/dev/null 2>&1; then
+    cd "$SCRIPT_DIR/../../rust/backend" && make extract-candid
+fi
 
 cd "$SCRIPT_DIR/../.."
 rm -rf frontend/src/declarations/ic_vetkeys_encrypted_maps_canister

examples/password_manager/frontend/src/components/NewPassword.svelte

@@ -110,7 +110,9 @@
     <PasswordEditor {editor} class="mb-3" disabled={creating} />
     <button
         class="btn mt-6 btn-primary {creating ? 'loading' : ''}"
-        disabled={creating || vaultName.trim() === "" || passwordName.trim() === ""}
+        disabled={creating ||
+            vaultName.trim() === "" ||
+            passwordName.trim() === ""}
         on:click={add}>{creating ? "Adding..." : "Add password"}</button
     >
 </main>

examples/password_manager/frontend/src/components/Vault.svelte

@@ -6,7 +6,6 @@
     import { Principal } from "@icp-sdk/core/principal";
     import Header from "./Header.svelte";
     import Spinner from "./Spinner.svelte";
-    // @ts-ignore: svelte-icons have no type declarations
     import GiOpenTreasureChest from "svelte-icons/gi/GiOpenTreasureChest.svelte";
     import { auth } from "../store/auth";
     import SharingEditor from "./SharingEditor.svelte";

examples/password_manager/frontend/src/lib/encrypted_maps.ts

@@ -14,9 +14,7 @@ export async function createEncryptedMaps(
     agentOptions?: HttpAgentOptions,
 ): Promise<EncryptedMaps> {
     const canisterId =
-        canisterEnv?.[
-            "PUBLIC_CANISTER_ID:ic_vetkeys_encrypted_maps_canister"
-        ];
+        canisterEnv?.["PUBLIC_CANISTER_ID:ic_vetkeys_encrypted_maps_canister"];
     if (!canisterId) {
         throw new Error(
             "Canister ID for ic_vetkeys_encrypted_maps_canister is not set",