Fix compile blockers and issues across all 12 skills

- ckbtc: Fix Nat.fromNat64 -> Nat64.toNat, add missing import
- icrc-ledger: Add missing Nat8 import, fix icrc1_symbol return format
- internet-identity: mo:base -> mo:core, Debug.trap -> Runtime.trap, persistent actor
- https-outcalls: Add missing Nat64 import
- multi-canister: Fix Principal.fromActor(this), fix std::env::var, fix caller-after-await pitfall
- stable-memory: Fix 64GB -> 500GB limit, remove unused Nat import
- evm-rpc: Add missing Text import, remove dead code, remove unused Cycles import
- sns-launch: Fix YAML pseudo-units to plain numbers, add upgrade warning
- vetkd: Fix Blob/Text type mismatch, add cycles to mgmt calls, replace fabricated frontend API
- certified-variables: Replace nonexistent SHA256 module with mo:sha2, fix Text.toBlob/Blob.concat
- wallet: Add missing Principal import, remove unused CanisterInstallMode
- asset-canister: Fix 2GB -> 4GB limit, remove allow_raw_access on wildcard
- All skills: Update ic-cdk to 0.18, remove unused dependencies

Author: Josh

skills/asset-canister/SKILL.md

@@ -34,7 +34,7 @@ Access patterns:
 
 5. **Deploying to the wrong canister name.** If dfx.json has `"frontend"` but you run `dfx deploy assets`, it creates a new canister instead of updating the existing one.
 
-6. **Exceeding the 2GB canister storage limit.** The asset canister stores all files in a single canister. Large media files (videos, datasets) will exhaust canister storage. Use a dedicated storage solution for large files.
+6. **Exceeding the 4GB Wasm heap memory limit.** The asset canister stores all files in a single canister. Large media files (videos, datasets) will exhaust canister storage. Use a dedicated storage solution for large files.
 
 7. **Not configuring `allow_raw_access` for API responses.** By default, the asset canister serves certified responses through the `ic0.app` domain. If you need raw (uncertified) access for specific assets, configure it in `.ic-assets.json5`.
 
@@ -74,13 +74,11 @@ Recommended approach: place the file in your `public/` or `static/` folder so yo
 ```json5
 [
   {
-    // Rewrite all paths to index.html for SPA routing
+    // Set default cache headers for all paths
     "match": "**/*",
     "headers": {
       "Cache-Control": "public, max-age=0, must-revalidate"
-    },
-    // Enable SPA fallback: any path without a file extension serves index.html
-    "allow_raw_access": true
+    }
   },
   {
     // Cache static assets aggressively (they have content hashes in filenames)
@@ -269,7 +267,7 @@ dfx canister call frontend http_request '(record {
 
 # 6. Get canister ID
 dfx canister id frontend
-# Expected: prints the canister ID (e.g., "rrkah-fqaaa-aaaaa-aaaaq-cai")
+# Expected: prints the canister ID (e.g., "bkyz2-fmaaa-aaaaa-qaaaq-cai")
 
 # 7. Check storage usage
 dfx canister info frontend

skills/certified-variables/SKILL.md

@@ -9,7 +9,7 @@ Query responses on the Internet Computer come from a single replica and are NOT
 
 - `dfx` >= 0.24.0
 - Rust: `ic-certified-map` crate (for Merkle tree), `ic-cdk` (for `set_certified_data` / `data_certificate`)
-- Motoko: `CertifiedData` module (included in mo:core/mo:base)
+- Motoko: `CertifiedData` module (included in mo:core/mo:base), `sha2` package (`mops add sha2`) for hashing
 - Frontend: `@dfinity/certificate-verification` or `@dfinity/agent` (includes verification)
 
 ## Canister IDs
@@ -69,7 +69,7 @@ CLIENT VERIFICATION:
 ```toml
 [dependencies]
 candid = "0.10"
-ic-cdk = "0.16"
+ic-cdk = "0.18"
 ic-certified-map = "0.4"
 serde = { version = "1", features = ["derive"] }
 serde_bytes = "0.11"
@@ -81,7 +81,7 @@ serde_cbor = "0.11"
 ```rust
 use candid::{CandidType, Deserialize};
 use ic_cdk::{init, post_upgrade, query, update};
-use ic_certified_map::{HashTree, RbTree, leaf_hash};
+use ic_certified_map::{HashTree, RbTree};
 use serde_bytes::ByteBuf;
 use std::cell::RefCell;
 
@@ -236,7 +236,8 @@ import Text "mo:core/Text";
 import Map "mo:core/Map";
 import Array "mo:core/Array";
 import Iter "mo:core/Iter";
-import SHA256 "mo:core/SHA256";
+// Requires: mops add sha2
+import Sha256 "mo:sha2/Sha256";
 
 persistent actor {
 
@@ -247,7 +248,7 @@ persistent actor {
   public func setCertifiedValue(value : Text) : async () {
     certifiedValue := value;
     // Hash the value and set as certified data (max 32 bytes)
-    let hash = SHA256.fromBlob(#sha256, Text.toBlob(value));
+    let hash = Sha256.fromBlob(#sha256, Text.encodeUtf8(value));
     CertifiedData.set(hash);
   };
 
@@ -274,31 +275,37 @@ import Blob "mo:core/Blob";
 import Text "mo:core/Text";
 import Map "mo:core/Map";
 import Array "mo:core/Array";
-import SHA256 "mo:core/SHA256";
+// Requires: mops add sha2
+import Sha256 "mo:sha2/Sha256";
 import Nat "mo:core/Nat";
 
 persistent actor {
 
   // Store key-value pairs
   let store = Map.empty<Text, Text>();
 
+  // Concatenate two Blobs (mo:core has no Blob.concat)
+  func blobConcat(a : Blob, b : Blob) : Blob {
+    Blob.fromArray(Array.concat(Blob.toArray(a), Blob.toArray(b)))
+  };
+
   // Compute a root hash over all entries
   // (Simple approach: hash the concatenation of all key-value hashes, sorted)
   func computeRootHash() : Blob {
     let entries = Array.fromIter<(Text, Text)>(Map.entries(store));
     if (entries.size() == 0) {
-      return SHA256.fromBlob(#sha256, "");
+      return Sha256.fromBlob(#sha256, Text.encodeUtf8(""));
     };
 
     // Hash each entry
     let hashes = Array.map<(Text, Text), Blob>(entries, func((k, v)) {
-      SHA256.fromBlob(#sha256, Text.toBlob(k # "=" # v))
+      Sha256.fromBlob(#sha256, Text.encodeUtf8(k # "=" # v))
     });
 
     // Combine all hashes into a single root hash
     var combined : Blob = "";
     for (h in Array.values(hashes)) {
-      combined := SHA256.fromBlob(#sha256, Blob.concat(combined, h));
+      combined := Sha256.fromBlob(#sha256, blobConcat(combined, h));
     };
     combined
   };

skills/ckbtc/SKILL.md

@@ -4,7 +4,7 @@ description: Use when building apps that accept, send, or manage Bitcoin on the
 ---
 
 # Chain-Key Bitcoin (ckBTC) Integration
-> version: 1.0.0 | requires: [dfx >= 0.24.0, mops, ic-cdk >= 0.17]
+> version: 1.0.0 | requires: [dfx >= 0.24.0, mops, ic-cdk >= 0.18]
 
 ## What This Is
 
@@ -128,6 +128,7 @@ import Principal "mo:core/Principal";
 import Blob "mo:core/Blob";
 import Nat "mo:core/Nat";
 import Nat8 "mo:core/Nat8";
+import Nat64 "mo:core/Nat64";
 import Array "mo:core/Array";
 import Result "mo:core/Result";
 import Error "mo:core/Error";
@@ -323,7 +324,7 @@ persistent actor {
         owner = Principal.fromText("mqygn-kiaaa-aaaar-qaadq-cai");
         subaccount = null;
       };
-      amount = Nat.fromNat64(amount);
+      amount = Nat64.toNat(amount);
       fee = ?10;
       memo = null;
       created_at_time = null;
@@ -357,8 +358,8 @@ edition = "2021"
 crate-type = ["cdylib"]
 
 [dependencies]
-ic-cdk = "0.17"
-ic-cdk-timers = "0.11"
+ic-cdk = "0.18"
+ic-cdk-timers = "0.12"
 candid = "0.10"
 serde = { version = "1", features = ["derive"] }
 serde_bytes = "0.11"

skills/evm-rpc/SKILL.md

@@ -4,7 +4,7 @@ description: Use when building apps that read from or write to Ethereum and EVM-
 ---
 
 # EVM RPC Canister — Calling Ethereum from IC
-> version: 1.0.0 | requires: [dfx >= 0.24.0, mops, ic-cdk >= 0.17]
+> version: 1.0.0 | requires: [dfx >= 0.24.0, mops, ic-cdk >= 0.18]
 
 ## What This Is
 
@@ -146,8 +146,8 @@ core = "2.0.0"
 
 ```motoko
 import EvmRpc "canister:evm_rpc";
-import Cycles "mo:core/Cycles";
 import Runtime "mo:core/Runtime";
+import Text "mo:core/Text";
 
 persistent actor {
 
@@ -210,15 +210,6 @@ persistent actor {
 
     // Encode: balanceOf(address) = 0x70a08231 + address padded to 32 bytes
     // walletAddress should be like "0xABC..." — strip 0x and left-pad to 64 hex chars
-    let addressHex = if (walletAddress.size() > 2) {
-      // Simple: assume address is already 0x-prefixed 40-char hex
-      let stripped = switch (walletAddress.chars().next()) {
-        case (?"0") { /* skip 0x prefix handling in real code */ walletAddress };
-        case _ { walletAddress };
-      };
-      stripped
-    } else { walletAddress };
-
     let calldata = "0x70a08231000000000000000000000000" # stripHexPrefix(walletAddress);
 
     let result = await (with cycles = 10_000_000_000) EvmRpc.eth_call(
@@ -383,7 +374,7 @@ edition = "2021"
 crate-type = ["cdylib"]
 
 [dependencies]
-ic-cdk = "0.17"
+ic-cdk = "0.18"
 candid = "0.10"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"

skills/https-outcalls/SKILL.md

@@ -47,6 +47,7 @@ You do not deploy anything extra. The management canister is built into every su
 import Blob "mo:base/Blob";
 import Cycles "mo:base/ExperimentalCycles";
 import Debug "mo:base/Debug";
+import Nat64 "mo:base/Nat64";
 import Text "mo:base/Text";
 
 actor {
@@ -176,8 +177,7 @@ actor {
 ```toml
 # Cargo.toml
 [dependencies]
-ic-cdk = "0.17"
-ic-cdk-macros = "0.17"
+ic-cdk = "0.18"
 candid = "0.10"
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"

skills/icrc-ledger/SKILL.md

@@ -1,13 +1,13 @@
 # ICRC Ledger Standards
-> version: 1.0.0 | requires: [dfx >= 0.24.0, mops, ic-cdk >= 0.17]
+> version: 1.0.0 | requires: [dfx >= 0.24.0, mops, ic-cdk >= 0.18]
 
 ## What This Is
 ICRC-1 is the fungible token standard on Internet Computer, defining transfer, balance, and metadata interfaces. ICRC-2 extends it with approve/transferFrom (allowance) mechanics, enabling third-party spending like ERC-20 on Ethereum.
 
 ## Prerequisites
 - dfx >= 0.24.0
 - For Motoko: mops with `core = "2.0.0"` in mops.toml
-- For Rust: `ic-cdk = "0.17"`, `candid = "0.10"`, `icrc-ledger-types = "0.1"` in Cargo.toml
+- For Rust: `ic-cdk = "0.18"`, `candid = "0.10"`, `icrc-ledger-types = "0.1"` in Cargo.toml
 
 ## Canister IDs
 
@@ -47,6 +47,7 @@ Index canisters (for transaction history):
 ```motoko
 import Principal "mo:core/Principal";
 import Nat "mo:core/Nat";
+import Nat8 "mo:core/Nat8";
 import Nat64 "mo:core/Nat64";
 import Blob "mo:core/Blob";
 import Time "mo:core/Time";
@@ -219,8 +220,7 @@ persistent actor {
 
 ```toml
 [dependencies]
-ic-cdk = "0.17"
-ic-cdk-timers = "0.11"
+ic-cdk = "0.18"
 candid = "0.10"
 icrc-ledger-types = "0.1"
 serde = { version = "1", features = ["derive"] }
@@ -234,7 +234,7 @@ use icrc_ledger_types::icrc1::account::Account;
 use icrc_ledger_types::icrc1::transfer::{TransferArg, TransferError};
 use icrc_ledger_types::icrc2::approve::{ApproveArgs, ApproveError};
 use icrc_ledger_types::icrc2::transfer_from::{TransferFromArgs, TransferFromError};
-use ic_cdk::{update, query};
+use ic_cdk::update;
 
 const ICP_LEDGER: &str = "ryjl3-tyaaa-aaaaa-aaaba-cai";
 const ICP_FEE: u64 = 10_000; // 10000 e8s
@@ -456,7 +456,7 @@ dfx canister call icrc1_ledger icrc1_decimals '()'
 
 # 4. Check symbol
 dfx canister call icrc1_ledger icrc1_symbol '()'
-# Expected: (record { symbol = "TEST" })
+# Expected: ("TEST")
 
 # 5. Transfer to another identity
 dfx identity new test-recipient --storage-mode=plaintext 2>/dev/null
@@ -483,13 +483,13 @@ dfx canister call icrc1_ledger icrc1_balance_of \
 ```bash
 # Verify ICP ledger is reachable
 dfx canister call ryjl3-tyaaa-aaaaa-aaaba-cai icrc1_symbol '()' --network ic
-# Expected: (record { symbol = "ICP" })
+# Expected: ("ICP")
 
 # Verify ckBTC ledger is reachable
 dfx canister call mxzaz-hqaaa-aaaar-qaada-cai icrc1_symbol '()' --network ic
-# Expected: (record { symbol = "ckBTC" })
+# Expected: ("ckBTC")
 
 # Verify ckETH ledger is reachable
 dfx canister call ss2fx-dyaaa-aaaar-qacoq-cai icrc1_symbol '()' --network ic
-# Expected: (record { symbol = "ckETH" })
+# Expected: ("ckETH")
 ```

skills/internet-identity/SKILL.md

@@ -143,16 +143,17 @@ if (isAuthenticated) {
 ### Backend: Motoko
 
 ```motoko
-import Principal "mo:base/Principal";
+import Principal "mo:core/Principal";
+import Runtime "mo:core/Runtime";
 
-actor {
-  // Stable variable to track owner/admin
-  stable var owner : ?Principal = null;
+persistent actor {
+  // Owner/admin principal
+  var owner : ?Principal = null;
 
   // Helper: reject anonymous callers
   func requireAuth(caller : Principal) : () {
     if (Principal.isAnonymous(caller)) {
-      Debug.trap("Anonymous principal not allowed. Please authenticate.");
+      Runtime.trap("Anonymous principal not allowed. Please authenticate.");
     };
   };
 
@@ -176,12 +177,12 @@ actor {
     switch (owner) {
       case (?o) {
         if (o != msg.caller) {
-          Debug.trap("Only the owner can call this function.");
+          Runtime.trap("Only the owner can call this function.");
         };
         "Admin action performed";
       };
       case (null) {
-        Debug.trap("Owner not set. Call initOwner first.");
+        Runtime.trap("Owner not set. Call initOwner first.");
       };
     };
   };
@@ -210,8 +211,7 @@ actor {
 ```toml
 # Cargo.toml
 [dependencies]
-ic-cdk = "0.17"
-ic-cdk-macros = "0.17"
+ic-cdk = "0.18"
 candid = "0.10"
 serde = { version = "1", features = ["derive"] }
 ```
@@ -282,7 +282,7 @@ async fn protected_async_action() -> String {
     let caller = require_auth(); // Capture HERE, before any await
 
     // After this await, ic_cdk::caller() would return wrong principal
-    let _result = some_async_operation().await;
+    let _result = some_async_operation().await; // (pseudocode — replace with your actual async call)
 
     // Use the captured `caller` variable, NOT ic_cdk::caller()
     format!("Action completed by {}", caller)