Cardano Updates

Bumps [golang.org/x/term](https://github.com/golang/term) from 0.43.0 to 0.44.0.
- [Commits](https://github.com/golang/term/compare/v0.43.0...v0.44.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Signed-off-by: hade <[email protected]>

chore: Update TRACE_COMPARE_TARGET_EPOCH to 275

To match new snapshots

Signed-off-by: KtorZ <[email protected]>

chore: add ci for amaru-uplc

Signed-off-by: KtorZ <[email protected]>

Signed-off-by: KtorZ <[email protected]>

Signed-off-by: Jonathan Lim <[email protected]>

Signed-off-by: Jonathan Lim <[email protected]>

Signed-off-by: Jonathan Lim <[email protected]>

Replaces the EKS-backed e2e workflow with one that runs entirely on
github-hosted runners. Each leg runs the release image via `docker run` +
`timeout` and gates on the process exit code; the new WorkStats filter gives
each test a finalization policy so oura self-terminates after N blocks
(exit 0), the Assert sink panics on a bad block (non-zero), and `timeout`
guards a hang (124).

- delete the `prepare` job (EKS kubeconfig / namespace / IRSA service account)
- extract each config from its k8s ConfigMap into .github/e2e/configs/*.toml,
  rewritten for the oura v2 schema (peers/socket_path, top-level
  chain/intersect, LegacyV1 filter for the Assert sink, SplitBlock+ParseCbor
  for cloud sinks, RollbackBuffer for min_depth, WorkStats for finalization)
- AWS creds via aws-actions/configure-aws-credentials (assuming the
  OuraE2ETest role) injected into the container instead of EKS IRSA
- n2c uses a Demeter dmtrcli socket port-forward (placeholder; DMTR_API_KEY
  secret) and is continue-on-error until that path is finalized

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

Move the manual u5c checks into the e2e suite as three `kind: u5c` legs
against the Demeter utxorpc endpoints, using the standard exit-code gate via
a WorkStats finalization policy (3 blocks -> exit 0); a #921-style regression
(reset loop, no apply events) never finalizes -> timeout -> fail.

API keys are parameterized as ${DMTR_UTXORPC_KEY_*} and resolved by envsubst
from GitHub secrets.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

The U5C source connects over TLS via tonic/rustls. In builds that pull more
than one rustls crypto provider (e.g. the `aws` feature brings in aws-lc-rs
alongside ring), rustls has no process-default provider and panics on the
first TLS handshake (`no process-level CryptoProvider available`). Install the
ring provider once at startup, gated on the `u5c` feature.

This only surfaced now because nothing exercised U5C in a multi-provider build;
the manual u5c tests built `--features u5c` alone (single provider).

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

Move the run/dmtrcli logic out of e2e.yaml into .github/e2e/scripts/
(run-test.sh, setup-dmtr-socket.sh, stop-dmtr-tunnel.sh), invoked from the
workflow steps. Scripts read the same env vars the steps already set; committed
with the executable bit so they run after checkout.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

The three relay.cnode-m1.demeter.run endpoints map to different networks:
:3000 = Mainnet, :3001 = PreProd, :3002 = Preview. Mainnet legs use :3000,
preview n2n legs use :3002 (replacing the public IOG/world relays).

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

update CLI EDR and add trace span EDR

fixes #936

Signed-off-by: Roland Kuhn <[email protected]>
Signed-off-by: KtorZ <[email protected]>

fixes #937

Signed-off-by: Roland Kuhn <[email protected]>
Signed-off-by: KtorZ <[email protected]>

feat: custom/short-epoch testnet bootstrap & run support

Bumps gasket 0.7 -> 0.11 and adapts to the new API:

- `Daemon(tethers)` -> `Daemon::new(tethers)`; `block`/`teardown` now consume
  `Daemon` (`dump`/`watch` just call `block`); `console` renders the new
  `StagePhase::Ended(EndCause)`.
- A crashing stage no longer aborts the process (stages are thread-isolated),
  so the daemon must decide the exit code itself.

gasket 0.11 records an `EndCause` at the state-machine event that triggers
termination and exposes `Daemon::stop_reason() -> StopReason`, which classifies
the stop truthfully (graceful finalization vs. crash/stall). `run_daemon`:

- polls `stop_reason()` rather than hand-scanning every tether's `TetherState`
  (the earlier heuristic read `or_panic()` failures as graceful `Ended` and
  would exit 0 on a crash)
- maps `StopReason::is_graceful()` to the exit code, surfacing the reason in
  the log line and the error
- replaces the prometheus/tui abort + `block_on(await)` + `try_unwrap` dance
  with a single `drop(tokio_rt)`, which cancels those tasks and releases their
  `Arc` clones so teardown reclaims sole ownership

This makes the e2e exit-code gate meaningful: a WorkStats finalize exits 0, an
Assert/`or_panic` failure exits non-zero, a hang is caught by `timeout` (124).

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

Signed-off-by: KtorZ <[email protected]>

  Era history is now properly parsed from the snapshot, instead of being inferred from the network.

Signed-off-by: KtorZ <[email protected]>