feat: CRP-2757 implement Motoko backend

.github/workflows/backend-motoko.yml

@@ -0,0 +1,47 @@
+name: Backend Motoko Tests
+
+on:
+  push:
+    branches:
+      - main
+      - master
+  pull_request:
+    paths:
+      - backend/mo/**
+      - Cargo.toml
+      - Cargo.lock
+      - .github/workflows/provision-linux.sh
+      - .github/workflows/provision-darwin.sh
+      - .github/workflows/backend-motoko.yml
+
+jobs:
+  backend-motoko-tests-linux:
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ZenVoich/setup-mops@v1
+        with:
+          mops-version: 1
+      - name: Provision Linux
+        run: bash .github/workflows/provision-linux.sh
+      - name: Run MOPS Test Linux
+        run: |
+          set -eExuo pipefail
+          cd backend/mo/ic_vetkeys
+          mops install
+          mops test
+  backend-motoko-tests-darwin:
+    runs-on: macos-15
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ZenVoich/setup-mops@v1
+        with:
+          mops-version: 1
+      - name: Provision Darwin
+        run: bash .github/workflows/provision-darwin.sh
+      - name: Run MOPS Test Darwin
+        run: |
+          set -eExuo pipefail
+          cd backend/mo/ic_vetkeys
+          mops install
+          mops test

.gitignore

@@ -86,3 +86,6 @@ node_modules
 **/*.njsproj
 **/*.sln
 **/*.sw?
+
+# Motoko
+*.mops

backend/mo/ic_vetkeys/README.md

@@ -0,0 +1,19 @@
+# ic-vetkeys
+
+# TODO
+
+## [Encrypted Maps](./src/encrypted_maps/README.md)
+
+## [Key Manager](./src/key_manager/README.md)
+
+# Install
+```
+mops add ic-vetkeys
+```
+
+# Usage
+```motoko
+import IcVetkeys "mo:ic-vetkeys";
+
+// example...
+```

backend/mo/ic_vetkeys/mops.toml

@@ -0,0 +1,16 @@
+[package]
+name = "ic-vetkeys"
+version = "0.1.0"
+description = "IC VetKeys Library"
+repository = "https://github.com/dfinity/vetkd-devkit"
+keywords = [
+  "vetkeys,vetkd,encryption,privacy,signature,BLS,key ",
+  "derivation,IBE"
+]
+license = "Apache-2.0"
+
+[dependencies]
+base = "0.14.6"
+
+[dev-dependencies]
+test = "2.1.1"

backend/mo/ic_vetkeys/src/Types.mo

@@ -0,0 +1,64 @@
+module {
+	public type AccessControlOperations<T> = {
+		canRead : (t : T) -> Bool;
+		canWrite : (t : T) -> Bool;
+		canGetUserRights : (t : T) -> Bool;
+		canSetUserRights : (t : T) -> Bool;
+		ownerRights : () -> T;
+		toText : (t : T) -> Text;
+	};
+
+	public type AccessRights = {
+		#Read;
+		#ReadWrite;
+		#ReadWriteManage;
+	};
+
+	public func accessRightsOperations() : AccessControlOperations<AccessRights> {
+		{
+			canRead = func(accessRights : AccessRights) : Bool {
+				switch (accessRights) {
+					case (#Read) { true };
+					case (#ReadWrite) { true };
+					case (#ReadWriteManage) { true };
+				};
+			};
+
+			canWrite = func(accessRights : AccessRights) : Bool {
+				switch (accessRights) {
+					case (#Read) { false };
+					case (#ReadWrite) { true };
+					case (#ReadWriteManage) { true };
+				};
+			};
+
+			canGetUserRights = func(accessRights : AccessRights) : Bool {
+				switch (accessRights) {
+					case (#Read) { false };
+					case (#ReadWrite) { false };
+					case (#ReadWriteManage) { true };
+				};
+			};
+
+			canSetUserRights = func(accessRights : AccessRights) : Bool {
+				switch (accessRights) {
+					case (#Read) { false };
+					case (#ReadWrite) { false };
+					case (#ReadWriteManage) { true };
+				};
+			};
+
+			ownerRights = func() : AccessRights {
+				#ReadWriteManage;
+			};
+
+			toText = func(accessRights : AccessRights) : Text {
+				switch (accessRights) {
+					case (#Read) { "Read" };
+					case (#ReadWrite) { "ReadWrite" };
+					case (#ReadWriteManage) { "ReadWriteManage" };
+				};
+			};
+		};
+	};
+};