Fix signer shutdown and native session cleanup on RLN 0.17

.github/docker/runtime-gnu.Dockerfile

@@ -0,0 +1,23 @@
+FROM rust:1.94.0-slim-bookworm AS rust
+FROM ubuntu:22.04
+
+ARG TARGETARCH
+ENV DEBIAN_FRONTEND=noninteractive
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    ca-certificates curl xz-utils build-essential cmake clang libclang-dev \
+    pkg-config libssl-dev git perl binutils && rm -rf /var/lib/apt/lists/*
+COPY --from=rust /usr/local/rustup /usr/local/rustup
+COPY --from=rust /usr/local/cargo /usr/local/cargo
+ENV RUSTUP_HOME=/usr/local/rustup CARGO_HOME=/usr/local/cargo
+ENV PATH=/usr/local/cargo/bin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+RUN test "$(rustc --version | cut -d ' ' -f 2)" = 1.94.0
+RUN set -eu; \
+    case "$TARGETARCH" in arm64) node_arch=arm64;; amd64) node_arch=x64;; *) exit 1;; esac; \
+    file="node-v22.23.0-linux-${node_arch}.tar.xz"; \
+    curl -fsSLO "https://nodejs.org/dist/v22.23.0/$file"; \
+    curl -fsSLo sums.txt https://nodejs.org/dist/v22.23.0/SHASUMS256.txt; \
+    grep "  $file\$" sums.txt | sha256sum -c -; \
+    tar -xJf "$file" --strip-components=1 -C /usr/local; \
+    rm "$file" sums.txt; \
+    test "$(node --version)" = v22.23.0
+WORKDIR /candidate

.github/workflows/ci.yml

@@ -3,59 +3,47 @@ name: CI
 on:
   pull_request:
   push:
-    branches: [main, iris-wallet]
+    branches: [main, release/rln-0.15.0-beta.3]
 
 permissions:
   contents: read
 
-env:
-  RLN_VERSION: v0.11.0-beta.3
-  RUST_TOOLCHAIN: '1.88.0'
-
 jobs:
   contract:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     timeout-minutes: 60
+    env:
+      CARGO_BUILD_JOBS: 2
     steps:
-      - uses: actions/checkout@v4
-
-      - name: Clone pinned rgb-lightning-node source
-        run: |
-          set -euo pipefail
-          RLN_DIR="$GITHUB_WORKSPACE/.native-source"
-          git clone --recurse-submodules --shallow-submodules --depth 1 \
-            --branch "$RLN_VERSION" \
-            https://github.com/UTEXO-Protocol/rgb-lightning-node.git "$RLN_DIR"
-          git -C "$RLN_DIR" apply --check \
-            "$GITHUB_WORKSPACE/patches/c-ffi-utexo-patches-$RLN_VERSION.patch"
-          git -C "$RLN_DIR" apply \
-            "$GITHUB_WORKSPACE/patches/c-ffi-utexo-patches-$RLN_VERSION.patch"
-
-      - uses: actions-rust-lang/setup-rust-toolchain@v1
+      - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: '22'
+          cache: npm
+      - uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1
         with:
-          toolchain: ${{ env.RUST_TOOLCHAIN }}
+          toolchain: '1.94.0'
           components: rustfmt
-          # The native overlay exposes C-FFI-only wallet operations that the
-          # standalone RLN binary does not call. Keep those warnings visible
-          # without promoting feature-specific dead code to build failures.
           rustflags: ''
-
-      - uses: actions/setup-node@v4
+      - name: Install build prerequisites
+        run: sudo apt-get update && sudo apt-get install -y cmake clang pkg-config libssl-dev
+      - run: npm ci --ignore-scripts
+      - run: npm run check:types
+      - run: npm run test:unit
+      - run: rustfmt --edition 2021 --check src/lib.rs build.rs
+      - name: Build exact release graph
+        env:
+          ORG_READ_TOKEN: ${{ secrets.ORG_READ_TOKEN }}
+        run: node scripts/with-source-access.js npm run build:debug
+      - run: npm test
+      - name: Native adapter tests
+        run: node scripts/test-native-adapter.js
+      - name: Pack consumer
+        run: npm pack --ignore-scripts
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
-          node-version: '20'
-          cache: npm
-
-      - name: Install JavaScript dependencies
-        run: npm ci --ignore-scripts
-
-      - name: Verify native patch integrity and contract tests
-        run: |
-          git -C .native-source diff --check
-          cargo test --manifest-path .native-source/bindings/c-ffi/Cargo.toml wallet_snapshot
-          cargo test --manifest-path .native-source/Cargo.toml wallet_sync_mode
-
-      - name: Verify types, build the addon, and run the canary
-        run: |
-          npm run check:types
-          npm run build:debug
-          npm test
+          name: node-contract-${{ github.sha }}
+          path: |
+            *.tgz
+            index-*.provenance.json
+          if-no-files-found: error