chore(shasta): e2e bridging tests

.env.devnet

@@ -1,7 +1,7 @@
 ############################### IMAGES #####################################
 PACAYA_PROTOCOL_IMAGE=nethermind/catalyst-taiko-protocol:taiko-alethia-protocol-v2.3.1-new
 PROTOCOL_IMAGE=nethermind/surge-protocol:sha-b85d39a
-NETHERMIND_CLIENT_IMAGE=nethermindeth/nethermind:master
+NETHERMIND_CLIENT_IMAGE=nethermindeth/nethermind:master-d6befe8
 TAIKO_CLIENT_IMAGE=nethermind/taiko-client:pr-260-3b8a522d
 CATALYST_IMAGE=nethermind/catalyst-node:v1.30.0
 RAIKO_IMAGE=nethermind/surge-raiko-zk:sha-76f481b
@@ -215,6 +215,12 @@ P2P_SYNC_URL=
 # If you want to be a prover who generates and submits zero knowledge proofs of proposed L2 blocks, you need to change
 # `ENABLE_PROVER` to true, set `L1_PROVER_PRIVATE_KEY` and `SGX_RAIKO_HOST`.
 ENABLE_PROVER=true
+# Skip real ZK computation and submit 0xbb...bb dummy bytes as proof (taiko-client only, no raiko call).
+# Only valid if the on-chain verifier explicitly accepts dummy bytes - no current verifier does.
+# With USE_DUMMY_VERIFIER=true, ProofVerifierDummy still requires a valid ECDSA signature,
+# so leave this unset and let raiko run in mock mode (ZK=true, MOCK_KEY) to produce correct signatures.
+#PROVER_DUMMY=
+
 # A L1 account private key (with a balance of TTKOh deposited on TaikoL1) which will be used to sign the bond for proving the block.
 # WARNING: only use a test account, pasting your private key in plain text here is not secure.
 L1_PROVER_PRIVATE_KEY=0x94eb3102993b41ec55c241060f47daa0f6372e2e3ad7e91612ae36c364042e44

.github/workflows/e2e-full-stack.yml

@@ -0,0 +1,96 @@
+name: E2E Full Stack Test
+
+on:
+  pull_request:
+    branches: [main, feat/shasta]
+  workflow_dispatch:
+
+concurrency:
+  group: e2e-${{ github.head_ref || github.ref_name }}
+  cancel-in-progress: true
+
+jobs:
+  e2e-full-stack:
+    name: E2E Full Stack
+    permissions:
+      contents: read
+    runs-on: ubuntu-22.04
+    timeout-minutes: 60
+    env:
+      CI_L2_DEPLOYER_TIMEOUT: "300"
+      CI_HEALTH_MAX_RETRIES: "60"
+      CI_HEALTH_RETRY_INTERVAL: "10"
+      CI_BRIDGE_DELIVERY_TIMEOUT: "1200"
+
+    steps:
+      - name: Checkout simple-surge-node
+        uses: actions/checkout@v4
+        with:
+          submodules: recursive
+          fetch-depth: 0
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435
+
+      - name: Install system dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y curl jq bc
+
+      - name: Install Kurtosis CLI
+        run: |
+          echo "deb [trusted=yes] https://apt.fury.io/kurtosis-tech/ /" | sudo tee /etc/apt/sources.list.d/kurtosis.list
+          sudo apt-get update
+          sudo apt-get install -y kurtosis-cli
+          kurtosis version
+
+      - name: Install Foundry
+        uses: foundry-rs/foundry-toolchain@v1
+
+      - name: Verify prerequisites
+        run: |
+          docker --version
+          docker compose version
+          docker info
+          kurtosis version
+          cast --version
+
+      - name: Run E2E
+        run: ./script/ci-e2e.sh
+
+      - name: Collect logs on failure
+        if: failure()
+        run: |
+          echo "=== Docker Compose Services ==="
+          docker compose ps || true
+          echo "=== Docker Compose Logs (last 200 lines) ==="
+          docker compose logs --tail=200 || true
+          echo "=== Relayer Compose Logs ==="
+          docker compose -f docker-compose-relayer.yml logs --tail=100 || true
+          echo "=== Kurtosis Enclaves ==="
+          kurtosis enclave ls || true
+          echo "=== Kurtosis Inspect ==="
+          kurtosis enclave inspect surge-devnet || true
+
+      - name: Upload artifacts on failure
+        if: failure()
+        uses: actions/upload-artifact@v4
+        with:
+          name: e2e-failure-logs
+          path: |
+            deployment/*.json
+            deployment/*.lock
+            *.log
+          retention-days: 7
+          if-no-files-found: ignore
+
+      - name: Cleanup
+        if: always()
+        run: |
+          docker compose --profile driver --profile proposer --profile spammer --profile prover --profile blockscout down --remove-orphans 2>/dev/null || true
+          docker compose -f docker-compose-protocol.yml down --remove-orphans 2>/dev/null || true
+          docker compose -f docker-compose-relayer.yml down --remove-orphans 2>/dev/null || true
+          docker network rm surge-network 2>/dev/null || true
+          kurtosis enclave rm surge-devnet --force 2>/dev/null || true
+          kurtosis clean -a 2>/dev/null || true
+          docker system prune -af --volumes 2>/dev/null || true

README.md

@@ -4,20 +4,74 @@
 
 This repository is ideal for easy set up operating Layer 2 (L2) solutions, simplifying the process of running Surge node.
 
+## Prerequisites
+
+### Docker and Docker Compose
+
+Docker Engine and Docker Compose v2.1+ are required. Install Docker Desktop or Docker Engine following the [official docs](https://docs.docker.com/engine/install/).
+
+Verify:
+
+```bash
+docker --version
+docker compose version   # must be >= 2.1
+```
+
+### Foundry (cast)
+
+```bash
+curl -L https://foundry.paradigm.xyz | bash
+foundryup
+```
+
+### Node.js (using nvm - recommended)
+
+```bash
+curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.7/install.sh | bash
+source ~/.bashrc  # or ~/.zshrc if using zsh
+nvm install --lts
+```
+
+Or using apt on Ubuntu/Debian:
+
+```bash
+curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash -
+sudo apt-get install -y nodejs
+```
+
+After installation, restart your terminal or run `source ~/.bashrc` or `source ~/.zshrc` to ensure the tools are available in your PATH.
+
 ## Quick Start
 
 ### Deploy Complete Devnet
 
 ```bash
-# Deploy everything with defaults
+# Copy devnet environment (first time only)
+cp .env.devnet .env
+
+# Deploy everything (non-interactive, defaults to devnet + new L1)
+./deploy-surge-full.sh --force
+
+# Or specify options explicitly
 ./deploy-surge-full.sh --environment devnet --deploy-devnet true --force
 ```
 
-### Remove Everything
+Without `--force` the script prompts interactively for environment, deployment mode, and L1 options.
+
+**Options:**
+- `--environment ENV` - Surge environment: `devnet`, `staging`, `testnet` (defaults to `devnet` with `--force`)
+- `--deploy-devnet true` - Deploy a new L1 devnet (default with `--force`)
+- `--deploy-devnet false` - Skip L1 deployment, use existing chain
+- `--deployment local|remote` - Local or remote deployment (defaults to `local` with `--force`)
+
+### Remove Stack
 
 ```bash
-# Remove all components
+# Remove L2 stack, relayers, configs (keeps L1 devnet running)
 ./remove-surge-full.sh --force
+
+# Remove everything including L1 devnet
+./remove-surge-full.sh --remove-l1-devnet true --force
 ```
 
 For detailed deployment and removal instructions, see [DEPLOYMENT.md](./DEPLOYMENT.md).