@distrohelena/canton-typescript-sdk 0.1.5 → 0.1.7

package/node/stop-local.sh

@@ -0,0 +1,200 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd -- "$SCRIPT_DIR/.." && pwd)"
+DOCKER_COMPOSE_CMD=()
+
+load_repo_root_env() {
+  local env_file="$REPO_ROOT/.env"
+  if [[ -f "$env_file" ]]; then
+    local existing_cn_quickstart_dir="${CN_QUICKSTART_DIR:-}"
+    set -a
+    # shellcheck disable=SC1090
+    source "$env_file"
+    set +a
+    if [[ -n "$existing_cn_quickstart_dir" ]]; then
+      CN_QUICKSTART_DIR="$existing_cn_quickstart_dir"
+    fi
+  fi
+}
+
+normalize_quickstart_dir_candidate() {
+  local candidate="$1"
+
+  if [[ -z "$candidate" ]]; then
+    return 1
+  fi
+
+  if [[ -d "$candidate/quickstart" ]]; then
+    candidate="$candidate/quickstart"
+  fi
+
+  if [[ -f "$candidate/compose.yaml" && -d "$candidate/docker/modules" ]]; then
+    cd -- "$candidate" && pwd
+    return 0
+  fi
+
+  return 1
+}
+
+resolve_quickstart_dir() {
+  local candidate
+  for candidate in \
+    "${CN_QUICKSTART_DIR:-}" \
+    "$SCRIPT_DIR/../cn-quickstart/quickstart" \
+    "$SCRIPT_DIR/../../cn-quickstart/quickstart"
+  do
+    if normalize_quickstart_dir_candidate "$candidate"; then
+      return 0
+    fi
+  done
+
+  echo "Unable to locate CN Quickstart. Set CN_QUICKSTART_DIR in $REPO_ROOT/.env or place the checkout in a supported location." >&2
+  return 1
+}
+
+make_target_exists() {
+  local target="$1"
+  make -qp 2>/dev/null | grep -Eq "^${target}:"
+}
+
+read_env_value() {
+  local key="$1"
+  local file
+  for file in .env.local .env; do
+    if [[ -f "$file" ]]; then
+      local line
+      line="$(grep -E "^${key}=" "$file" | tail -n 1 || true)"
+      if [[ -n "$line" ]]; then
+        printf '%s\n' "${line#*=}"
+        return 0
+      fi
+    fi
+  done
+  return 1
+}
+
+generated_dir() {
+  printf '%s\n' "${START_LOCAL_GENERATED_DIR:-$SCRIPT_DIR/.generated/start-local}"
+}
+
+resolve_es256_enabled() {
+  local value="${LOCALNET_ES256_JWT:-0}"
+  if [[ "$value" != "0" && "$value" != "1" ]]; then
+    echo "LOCALNET_ES256_JWT must be 0 or 1." >&2
+    return 1
+  fi
+  printf '%s\n' "$value"
+}
+
+es256_runtime_dir() {
+  printf '%s\n' "${START_LOCAL_ES256_RUNTIME_DIR:-$REPO_ROOT/.generated/localnet-es256}"
+}
+
+append_es256_args() {
+  local -n compose_args_ref="$1"
+  if [[ "$(resolve_es256_enabled)" == "1" ]]; then
+    local compose_file="$(es256_runtime_dir)/compose-es256-jwks.yaml"
+    if [[ -f "$compose_file" ]]; then
+      compose_args_ref+=( -f "$compose_file" )
+    fi
+  fi
+}
+
+resolve_docker_compose_cmd() {
+  if (( ${#DOCKER_COMPOSE_CMD[@]} > 0 )); then
+    return 0
+  fi
+
+  if docker compose version >/dev/null 2>&1; then
+    DOCKER_COMPOSE_CMD=(docker compose)
+    return 0
+  fi
+
+  if docker-compose version >/dev/null 2>&1; then
+    DOCKER_COMPOSE_CMD=(docker-compose)
+    return 0
+  fi
+
+  echo "Unable to find a working Docker Compose command. Install 'docker compose' or 'docker-compose'." >&2
+  return 1
+}
+
+docker_compose() {
+  resolve_docker_compose_cmd
+  "${DOCKER_COMPOSE_CMD[@]}" "$@"
+}
+
+append_existing_extra_participant_args() {
+  local -n compose_args_ref="$1"
+  local output_dir
+  output_dir="$(generated_dir)"
+
+  if [[ -f "$output_dir/compose-extra-participants.yaml" && -f "$output_dir/extra-participants.env" ]]; then
+    compose_args_ref+=(
+      -f "$output_dir/compose-extra-participants.yaml"
+      --env-file "$output_dir/extra-participants.env"
+    )
+  fi
+}
+
+stop_ledger_stack() {
+  local auth_mode="${1:-shared-secret}"
+  local modules_dir="$QUICKSTART_DIR/docker/modules"
+  local localnet_dir="$modules_dir/localnet"
+  local splice_version
+  splice_version="$(read_env_value SPLICE_VERSION || true)"
+  export MODULES_DIR="$modules_dir"
+  export LOCALNET_DIR="$localnet_dir"
+  export LOCALNET_ENV_DIR="$localnet_dir/env"
+  export IMAGE_TAG="${IMAGE_TAG:-$splice_version}"
+  export APP_PROVIDER_PROFILE=on
+  export APP_USER_PROFILE=off
+  export SV_PROFILE=on
+  export PQS_SV_PROFILE=on
+  local compose_args=(
+    -f compose.yaml
+    -f "$localnet_dir/compose.yaml"
+    -f "$modules_dir/splice-onboarding/compose.yaml"
+    -f "$modules_dir/pqs/compose.yaml"
+    --env-file .env
+    --env-file .env.local
+    --env-file "$localnet_dir/compose.env"
+    --env-file "$localnet_dir/env/common.env"
+    --env-file "$modules_dir/pqs/compose.env"
+    --profile app-provider
+    --profile pqs-app-provider
+    --profile pqs-sv
+  )
+
+  if [[ "$auth_mode" == "oauth2" ]]; then
+    compose_args+=(
+      -f "$modules_dir/keycloak/compose.yaml"
+      --env-file "$modules_dir/keycloak/compose.env"
+      --profile keycloak
+    )
+  fi
+
+  append_existing_extra_participant_args compose_args
+  append_es256_args compose_args
+  docker_compose "${compose_args[@]}" down -v --remove-orphans
+}
+
+load_repo_root_env
+QUICKSTART_DIR="$(resolve_quickstart_dir)"
+cd "$QUICKSTART_DIR"
+
+if [[ ! -f .env.local ]]; then
+  echo ".env.local not found. Nothing to stop."
+  exit 0
+fi
+
+if [[ "$(resolve_es256_enabled)" != "1" ]] && make_target_exists stop-local-ledger; then
+  make stop-local-ledger
+else
+  auth_mode="$(read_env_value AUTH_MODE || true)"
+  auth_mode="${auth_mode:-shared-secret}"
+  echo "stop-local-ledger target not found. Stopping ledger-only compose stack directly."
+  stop_ledger_stack "$auth_mode"
+fi

package/node/test-start-local.sh

@@ -0,0 +1,354 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+REPO_ROOT="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." && pwd)"
+SCRIPT_DIR="$REPO_ROOT/node"
+REPO_ENV_FILE="$REPO_ROOT/.env"
+
+tmpdir="$(mktemp -d)"
+root_env_backup="$tmpdir/root-env.backup"
+root_env_exists=0
+if [[ -f "$REPO_ENV_FILE" ]]; then
+  cp "$REPO_ENV_FILE" "$root_env_backup"
+  root_env_exists=1
+fi
+
+cleanup() {
+  if (( root_env_exists )); then
+    cp "$root_env_backup" "$REPO_ENV_FILE"
+  else
+    rm -f "$REPO_ENV_FILE"
+  fi
+  rm -rf "$tmpdir"
+}
+trap cleanup EXIT
+
+run_case() {
+  local makefile_targets="$1"
+  local expected_output="$2"
+  local auth_mode="${3:-shared-secret}"
+  local docker_mode="${4:-default}"
+  local extra_participants="${5:-}"
+  local cn_quickstart_dir_override="${6:-}"
+  local repo_root_env_contents="${7:-}"
+  local es256_enabled="${8:-0}"
+  local quickstart_dir="$tmpdir/quickstart"
+  local quickstart_root_dir="$tmpdir/cn-quickstart"
+  local stubbin="$tmpdir/bin"
+  local generated_dir="$tmpdir/generated"
+
+  rm -rf "$quickstart_dir" "$quickstart_root_dir" "$stubbin" "$generated_dir"
+  mkdir -p \
+    "$quickstart_root_dir" \
+    "$quickstart_dir/docker/modules/localnet/env" \
+    "$quickstart_dir/docker/modules/pqs" \
+    "$quickstart_dir/docker/modules/splice-onboarding" \
+    "$quickstart_dir/docker/modules/keycloak" \
+    "$stubbin" \
+    "$generated_dir"
+  ln -s "$quickstart_dir" "$quickstart_root_dir/quickstart"
+  printf '%s\n' "$makefile_targets" > "$quickstart_dir/Makefile"
+  printf 'DOCKER_NETWORK=quickstart\nSPLICE_VERSION=0.6.5\n' > "$quickstart_dir/.env"
+  printf 'AUTH_MODE=%s\n' "$auth_mode" > "$quickstart_dir/.env.local"
+  : > "$quickstart_dir/compose.yaml"
+  : > "$quickstart_dir/docker/modules/localnet/compose.yaml"
+  : > "$quickstart_dir/docker/modules/localnet/compose.env"
+  : > "$quickstart_dir/docker/modules/localnet/env/common.env"
+  : > "$quickstart_dir/docker/modules/pqs/compose.yaml"
+  : > "$quickstart_dir/docker/modules/pqs/compose.env"
+  : > "$quickstart_dir/docker/modules/splice-onboarding/compose.yaml"
+  : > "$quickstart_dir/docker/modules/keycloak/compose.yaml"
+  : > "$quickstart_dir/docker/modules/keycloak/compose.env"
+
+  cat > "$stubbin/make" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [[ "${1:-}" == "-qp" ]]; then
+  cat Makefile
+  exit 0
+fi
+
+printf 'stub make %s\n' "$*"
+EOF
+  chmod +x "$stubbin/make"
+
+  cat > "$stubbin/docker" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+docker_mode="__DOCKER_MODE__"
+printf 'stub env MODULES_DIR=%s\n' "${MODULES_DIR:-}"
+printf 'stub env LOCALNET_DIR=%s\n' "${LOCALNET_DIR:-}"
+printf 'stub env IMAGE_TAG=%s\n' "${IMAGE_TAG:-}"
+printf 'stub env APP_PROVIDER_PROFILE=%s\n' "${APP_PROVIDER_PROFILE:-}"
+printf 'stub env APP_USER_PROFILE=%s\n' "${APP_USER_PROFILE:-}"
+printf 'stub env SV_PROFILE=%s\n' "${SV_PROFILE:-}"
+printf 'stub env PQS_SV_PROFILE=%s\n' "${PQS_SV_PROFILE:-}"
+if [[ "${1:-}" == "inspect" ]]; then
+  printf 'healthy\n'
+  exit 0
+fi
+  if [[ "${1:-}" == "exec" ]]; then
+    extra_pqs_config_file=""
+    while (( "$#" )); do
+      if [[ "${1:-}" == "-e" && "${2:-}" == EXTRA_PQS_CONFIG_FILE=* ]]; then
+        extra_pqs_config_file="${2#EXTRA_PQS_CONFIG_FILE=}"
+      break
+    fi
+    shift
+  done
+  if [[ -n "$extra_pqs_config_file" && -n "${START_LOCAL_GENERATED_DIR:-}" ]]; then
+    cat > "${START_LOCAL_GENERATED_DIR}/${extra_pqs_config_file}" <<'CONFIG'
+pipeline.datasource=TransactionTreeStream
+pipeline.ledger.start=Oldest
+pipeline.oauth.accessToken="stub-token"
+CONFIG
+  fi
+  exit 0
+fi
+if [[ "${1:-}" == "compose" && "${2:-}" == "version" ]]; then
+  if [[ "$docker_mode" == "compose-v1" ]]; then
+    exit 1
+  fi
+  exit 0
+fi
+printf 'stub docker %s\n' "$*"
+  if [[ "$docker_mode" == "staged-start" ]]; then
+  if [[ "${1:-}" == "compose" && "$*" == *" down -v --remove-orphans"* ]]; then
+    exit 0
+  fi
+  if [[ "${1:-}" == "compose" && "$*" == *" up -d --no-recreate postgres canton"* ]]; then
+    exit 0
+  fi
+  if [[ "$*" == *" up -d --no-recreate splice splice-onboarding pqs-app-provider pqs-sv"* ]]; then
+    exit 0
+  fi
+  exit 1
+fi
+EOF
+  sed -i "s|__DOCKER_MODE__|$docker_mode|" "$stubbin/docker"
+  chmod +x "$stubbin/docker"
+
+  cat > "$stubbin/docker-compose" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+docker_mode="__DOCKER_MODE__"
+if [[ "${1:-}" == "version" ]]; then
+  if [[ "$docker_mode" == "compose-v1" ]]; then
+    exit 0
+  fi
+  exit 1
+fi
+printf 'stub docker-compose %s\n' "$*"
+EOF
+  sed -i "s|__DOCKER_MODE__|$docker_mode|" "$stubbin/docker-compose"
+  chmod +x "$stubbin/docker-compose"
+
+  local output
+  output="$(
+    if [[ -n "$repo_root_env_contents" ]]; then
+      printf '%s\n' "$repo_root_env_contents" > "$REPO_ENV_FILE"
+    else
+      rm -f "$REPO_ENV_FILE"
+    fi
+    cd "$SCRIPT_DIR"
+    if [[ "$cn_quickstart_dir_override" == "__unset__" ]]; then
+      env -i \
+        HOME="$HOME" \
+        TERM="${TERM:-dumb}" \
+        START_LOCAL_GENERATED_DIR="$generated_dir" \
+        START_LOCAL_ES256_RUNTIME_DIR="$tmpdir/es256" \
+        LOCALNET_ES256_JWT="$es256_enabled" \
+        EXTRA_PARTICIPANTS="$extra_participants" \
+        PATH="$stubbin:$PATH" \
+        bash ./start-local.sh
+    else
+      CN_QUICKSTART_DIR="${cn_quickstart_dir_override:-$quickstart_dir}" \
+        START_LOCAL_GENERATED_DIR="$generated_dir" \
+        START_LOCAL_ES256_RUNTIME_DIR="$tmpdir/es256" \
+        LOCALNET_ES256_JWT="$es256_enabled" \
+        EXTRA_PARTICIPANTS="$extra_participants" \
+        PATH="$stubbin:$PATH" \
+        bash ./start-local.sh
+    fi
+  )"
+
+  if ! grep -Fxq "$expected_output" <<<"$output"; then
+    printf 'expected output line %q, got:\n%s\n' "$expected_output" "$output" >&2
+    exit 1
+  fi
+}
+
+assert_file_contains() {
+  local path="$1"
+  local expected="$2"
+
+  if ! grep -Fqx "$expected" "$path"; then
+    printf 'expected file %s to contain line %q, got:\n' "$path" "$expected" >&2
+    cat "$path" >&2
+    exit 1
+  fi
+}
+
+run_repo_root_env_case() {
+  local quickstart_dir="$tmpdir/quickstart"
+  local quickstart_root_dir="$tmpdir/custom-quickstart-root"
+  local stubbin="$tmpdir/bin"
+  local generated_dir="$tmpdir/generated"
+  local isolated_repo_root="$tmpdir/isolated-repo"
+  local isolated_script_dir="$isolated_repo_root/node"
+  local output
+
+  rm -rf "$quickstart_dir" "$quickstart_root_dir" "$tmpdir/cn-quickstart" "$stubbin" "$generated_dir" "$isolated_repo_root"
+  mkdir -p \
+    "$quickstart_root_dir" \
+    "$quickstart_dir/docker/modules/localnet/env" \
+    "$quickstart_dir/docker/modules/pqs" \
+    "$quickstart_dir/docker/modules/splice-onboarding" \
+    "$quickstart_dir/docker/modules/keycloak" \
+    "$stubbin" \
+    "$generated_dir" \
+    "$isolated_script_dir"
+  ln -s "$quickstart_dir" "$quickstart_root_dir/quickstart"
+
+  printf '.PHONY: start\nstart:\n' > "$quickstart_dir/Makefile"
+  printf 'DOCKER_NETWORK=quickstart\nSPLICE_VERSION=0.6.5\n' > "$quickstart_dir/.env"
+  printf 'AUTH_MODE=shared-secret\n' > "$quickstart_dir/.env.local"
+  : > "$quickstart_dir/compose.yaml"
+  : > "$quickstart_dir/docker/modules/localnet/compose.yaml"
+  : > "$quickstart_dir/docker/modules/localnet/compose.env"
+  : > "$quickstart_dir/docker/modules/localnet/env/common.env"
+  : > "$quickstart_dir/docker/modules/pqs/compose.yaml"
+  : > "$quickstart_dir/docker/modules/pqs/compose.env"
+  : > "$quickstart_dir/docker/modules/splice-onboarding/compose.yaml"
+  : > "$quickstart_dir/docker/modules/keycloak/compose.yaml"
+  : > "$quickstart_dir/docker/modules/keycloak/compose.env"
+
+  cat > "$stubbin/make" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [[ "${1:-}" == "-qp" ]]; then
+  cat Makefile
+  exit 0
+fi
+
+printf 'stub make %s\n' "$*"
+EOF
+  chmod +x "$stubbin/make"
+
+  cat > "$stubbin/docker" <<'EOF'
+#!/usr/bin/env bash
+set -euo pipefail
+printf 'stub env MODULES_DIR=%s\n' "${MODULES_DIR:-}"
+printf 'stub env LOCALNET_DIR=%s\n' "${LOCALNET_DIR:-}"
+printf 'stub env IMAGE_TAG=%s\n' "${IMAGE_TAG:-}"
+printf 'stub env APP_PROVIDER_PROFILE=%s\n' "${APP_PROVIDER_PROFILE:-}"
+printf 'stub env APP_USER_PROFILE=%s\n' "${APP_USER_PROFILE:-}"
+printf 'stub env SV_PROFILE=%s\n' "${SV_PROFILE:-}"
+printf 'stub env PQS_SV_PROFILE=%s\n' "${PQS_SV_PROFILE:-}"
+if [[ "${1:-}" == "inspect" ]]; then
+  printf 'healthy\n'
+  exit 0
+fi
+if [[ "${1:-}" == "exec" ]]; then
+  exit 0
+fi
+printf 'stub docker %s\n' "$*"
+EOF
+  chmod +x "$stubbin/docker"
+
+  cp "$SCRIPT_DIR/start-local.sh" "$isolated_script_dir/start-local.sh"
+  chmod +x "$isolated_script_dir/start-local.sh"
+  printf 'CN_QUICKSTART_DIR=%s\n' "$quickstart_root_dir" > "$isolated_repo_root/.env"
+
+  output="$(
+    cd "$isolated_script_dir"
+    env -i \
+      HOME="$HOME" \
+      TERM="${TERM:-dumb}" \
+      START_LOCAL_GENERATED_DIR="$generated_dir" \
+      PATH="$stubbin:$PATH" \
+      bash ./start-local.sh
+  )"
+
+  if ! grep -Fxq "stub env MODULES_DIR=$quickstart_root_dir/quickstart/docker/modules" <<<"$output"; then
+    printf 'expected repo root .env quickstart path to resolve, got:\n%s\n' "$output" >&2
+    exit 1
+  fi
+}
+
+run_case $'.PHONY: start-local-ledger\nstart-local-ledger:\n' 'stub make start-local-ledger'
+run_case $'.PHONY: start\nstart:\n' 'stub env MODULES_DIR='"$tmpdir"'/quickstart/docker/modules'
+run_case $'.PHONY: start\nstart:\n' 'stub env IMAGE_TAG=0.6.5'
+run_case $'.PHONY: start\nstart:\n' 'stub env APP_USER_PROFILE=off'
+run_case $'.PHONY: start\nstart:\n' 'stub env SV_PROFILE=on'
+run_case $'.PHONY: start\nstart:\n' 'stub env PQS_SV_PROFILE=on'
+run_case $'.PHONY: start\nstart:\n' 'stub docker compose -f compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/localnet/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/splice-onboarding/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/pqs/compose.yaml --env-file .env --env-file .env.local --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/compose.env --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/env/common.env --env-file '"$tmpdir"'/quickstart/docker/modules/pqs/compose.env --profile app-provider --profile pqs-app-provider --profile pqs-sv down -v --remove-orphans'
+run_case $'.PHONY: start\nstart:\n' 'stub docker compose -f compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/localnet/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/splice-onboarding/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/pqs/compose.yaml --env-file .env --env-file .env.local --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/compose.env --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/env/common.env --env-file '"$tmpdir"'/quickstart/docker/modules/pqs/compose.env --profile app-provider --profile pqs-app-provider --profile pqs-sv up -d --no-recreate postgres canton'
+run_case $'.PHONY: start\nstart:\n' 'stub docker compose -f compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/localnet/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/splice-onboarding/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/pqs/compose.yaml --env-file .env --env-file .env.local --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/compose.env --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/env/common.env --env-file '"$tmpdir"'/quickstart/docker/modules/pqs/compose.env --profile app-provider --profile pqs-app-provider --profile pqs-sv -f '"$tmpdir"'/quickstart/docker/modules/keycloak/compose.yaml --env-file '"$tmpdir"'/quickstart/docker/modules/keycloak/compose.env --profile keycloak down -v --remove-orphans' oauth2
+run_case $'.PHONY: start\nstart:\n' 'stub docker compose -f compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/localnet/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/splice-onboarding/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/pqs/compose.yaml --env-file .env --env-file .env.local --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/compose.env --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/env/common.env --env-file '"$tmpdir"'/quickstart/docker/modules/pqs/compose.env --profile app-provider --profile pqs-app-provider --profile pqs-sv -f '"$tmpdir"'/quickstart/docker/modules/keycloak/compose.yaml --env-file '"$tmpdir"'/quickstart/docker/modules/keycloak/compose.env --profile keycloak up -d --no-recreate keycloak nginx-keycloak postgres canton' oauth2
+run_case $'.PHONY: start\nstart:\n' 'stub docker compose -f compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/localnet/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/splice-onboarding/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/pqs/compose.yaml --env-file .env --env-file .env.local --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/compose.env --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/env/common.env --env-file '"$tmpdir"'/quickstart/docker/modules/pqs/compose.env --profile app-provider --profile pqs-app-provider --profile pqs-sv up -d --no-recreate splice splice-onboarding pqs-app-provider pqs-sv' shared-secret staged-start
+run_case $'.PHONY: start\nstart:\n' 'stub docker-compose -f compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/localnet/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/splice-onboarding/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/pqs/compose.yaml --env-file .env --env-file .env.local --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/compose.env --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/env/common.env --env-file '"$tmpdir"'/quickstart/docker/modules/pqs/compose.env --profile app-provider --profile pqs-app-provider --profile pqs-sv down -v --remove-orphans' shared-secret compose-v1
+run_case $'.PHONY: start\nstart:\n' 'stub docker compose -f compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/localnet/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/splice-onboarding/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/pqs/compose.yaml --env-file .env --env-file .env.local --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/compose.env --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/env/common.env --env-file '"$tmpdir"'/quickstart/docker/modules/pqs/compose.env --profile app-provider --profile pqs-app-provider --profile pqs-sv -f '"$tmpdir"'/generated/compose-extra-participants.yaml --env-file '"$tmpdir"'/generated/extra-participants.env down -v --remove-orphans' shared-secret default 3
+run_case $'.PHONY: start\nstart:\n' 'stub docker compose -f compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/localnet/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/splice-onboarding/compose.yaml -f '"$tmpdir"'/quickstart/docker/modules/pqs/compose.yaml --env-file .env --env-file .env.local --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/compose.env --env-file '"$tmpdir"'/quickstart/docker/modules/localnet/env/common.env --env-file '"$tmpdir"'/quickstart/docker/modules/pqs/compose.env --profile app-provider --profile pqs-app-provider --profile pqs-sv -f '"$tmpdir"'/generated/compose-extra-participants.yaml --env-file '"$tmpdir"'/generated/extra-participants.env up -d --no-recreate pqs-extra-1 pqs-extra-2 pqs-extra-3' shared-secret default 3
+run_case $'.PHONY: start\nstart:\n' 'ES256 bearer token written to '"$tmpdir"'/es256/ledger-api-user.token' shared-secret default 3 '' '' 1
+assert_file_contains "$tmpdir/es256/canton-es256.conf" 'canton.participants.app-provider.ledger-api.auth-services = ['
+assert_file_contains "$tmpdir/es256/canton-es256.conf" '    type = jwt-es-256-crt'
+assert_file_contains "$tmpdir/es256/canton-es256.conf" '    certificate = "/app/es256-certificate.pem"'
+if grep -Fq 'canton.participants.app-user.ledger-api.auth-services' "$tmpdir/es256/canton-es256.conf"; then
+  echo "unexpected ES256 configuration for inactive app-user participant" >&2
+  exit 1
+fi
+assert_file_contains "$tmpdir/generated/additional-config.extra-participants.conf" 'canton.participants.extra-3.ledger-api.auth-services = ['
+assert_file_contains "$tmpdir/generated/extra-participants.env" 'CREATE_DATABASE_EXTRA_1=participant-extra-1'
+assert_file_contains "$tmpdir/generated/extra-participants.env" 'CREATE_DATABASE_EXTRA_VALIDATOR_1=validator-extra-1'
+assert_file_contains "$tmpdir/generated/extra-participants.env" 'EXTRA_PARTICIPANT_1_ADMIN_API_PORT=5902'
+assert_file_contains "$tmpdir/generated/extra-participants.env" 'EXTRA_PARTICIPANT_3_JSON_API_PORT=7975'
+assert_file_contains "$tmpdir/generated/extra-participants.env" 'EXTRA_VALIDATOR_1_PARTY_HINT=validator_1_quickstart-localparty-1'
+assert_file_contains "$tmpdir/generated/extra-participants.env" 'EXTRA_VALIDATOR_1_ONBOARDING_SECRET=extra-1-validator-onboarding-secret'
+assert_file_contains "$tmpdir/generated/extra-participants.env" 'EXTRA_VALIDATOR_1_ADMIN_API_PORT=5903'
+assert_file_contains "$tmpdir/generated/extra-participants.env" 'EXTRA_VALIDATOR_3_ADMIN_API_PUBLISHED_PORT=7903'
+assert_file_contains "$tmpdir/generated/extra-participants.env" 'EXTRA_VALIDATOR_1_USER_NAME=ledger-api-user'
+assert_file_contains "$tmpdir/generated/extra-participants.env" 'EXTRA_VALIDATOR_1_WALLET_ADMIN_USER_NAME=extra-1'
+assert_file_contains "$tmpdir/generated/extra-participants.env" 'EXTRA_VALIDATOR_1_AUTH_AUDIENCE=https://canton.network.global'
+assert_file_contains "$tmpdir/generated/extra-participants.env" 'CREATE_DATABASE_EXTRA_PQS_1=pqs-extra-1'
+assert_file_contains "$tmpdir/generated/extra-participants.env" 'EXTRA_PQS_1_POSTGRES_PUBLISHED_PORT=5541'
+assert_file_contains "$tmpdir/generated/extra-participants.env" 'EXTRA_PQS_3_POSTGRES_PUBLISHED_PORT=5543'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '      ADDITIONAL_CONFIG_EXTRA_PARTICIPANTS: |'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '        canton.participants.extra-1 = $${_participant} {'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '  splice:'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '      ADDITIONAL_CONFIG_EXTRA_VALIDATORS: |'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '        canton.validator-apps.extra-1-validator_backend = $${_validator_backend} {'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '      - "${EXTRA_VALIDATOR_1_ADMIN_API_PUBLISHED_PORT}:${EXTRA_VALIDATOR_1_ADMIN_API_PORT}"'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '          init {'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '            generate-topology-transactions-and-keys = true'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '            identity.type = auto'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '  postgres-pqs-extra-1:'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '    container_name: postgres-pqs-extra-1'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '      - "${EXTRA_PQS_1_POSTGRES_PUBLISHED_PORT}:5432"'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '  pqs-extra-1:'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '    container_name: pqs-extra-1'
+assert_file_contains "$tmpdir/generated/compose-extra-participants.yaml" '      SCRIBE_CONFIG: /onboarding/extra-1-pqs.conf'
+assert_file_contains "$tmpdir/generated/extra-1-pqs.conf" 'pipeline.datasource=TransactionTreeStream'
+assert_file_contains "$tmpdir/generated/extra-1-pqs.conf" 'pipeline.ledger.start=Oldest'
+assert_file_contains "$tmpdir/generated/extra-1-pqs.conf" 'pipeline.oauth.accessToken="stub-token"'
+assert_file_contains "$tmpdir/generated/additional-config.extra-participants.conf" 'canton.participants.extra-1 = $${_participant} {'
+assert_file_contains "$tmpdir/generated/additional-config.extra-participants.conf" '  storage.config.properties.databaseName = "participant-extra-3"'
+assert_file_contains "$tmpdir/generated/additional-config.extra-participants.conf" '  init {'
+assert_file_contains "$tmpdir/generated/additional-config.extra-participants.conf" '    generate-topology-transactions-and-keys = true'
+assert_file_contains "$tmpdir/generated/additional-config.extra-participants.conf" '    identity.type = auto'
+assert_file_contains "$tmpdir/generated/additional-config.extra-participants.conf" '      type = unsafe-jwt-hmac-256'
+assert_file_contains "$tmpdir/generated/additional-config.extra-participants.conf" '    user-management-service.additional-admin-user-id = "${EXTRA_VALIDATOR_1_USER_NAME}"'
+assert_file_contains "$tmpdir/generated/additional-config.extra-validators.conf" 'canton.validator-apps.extra-1-validator_backend = $${_validator_backend} {'
+assert_file_contains "$tmpdir/generated/additional-config.extra-validators.conf" '  onboarding.secret = "${EXTRA_VALIDATOR_1_ONBOARDING_SECRET}"'
+assert_file_contains "$tmpdir/generated/additional-config.extra-validators.conf" '  domain-migration-dump-path = "/domain-upgrade-dump/domain_migration_dump-extra-1.json"'
+assert_file_contains "$tmpdir/generated/additional-config.extra-validators.conf" '  storage.config.properties.databaseName = "${EXTRA_VALIDATOR_1_DB}"'
+assert_file_contains "$tmpdir/generated/additional-config.extra-validators.conf" '  canton-identifier-config.participant = extra-1'
+assert_file_contains "$tmpdir/generated/additional-config.extra-validators.conf" '        type = "self-signed"'
+assert_file_contains "$tmpdir/generated/additional-config.extra-validators.conf" '  ledger-api-user = "${EXTRA_VALIDATOR_1_USER_NAME}"'
+assert_file_contains "$tmpdir/generated/additional-config.extra-validators.conf" '  validator-wallet-users.0 = "${EXTRA_VALIDATOR_1_WALLET_ADMIN_USER_NAME}"'
+assert_file_contains "$tmpdir/generated/additional-config.extra-validators.conf" '  validator-party-hint = "${EXTRA_VALIDATOR_1_PARTY_HINT}"'
+assert_file_contains "$tmpdir/generated/additional-config.extra-validators.conf" '  domains.global.buy-extra-traffic {'
+assert_file_contains "$tmpdir/generated/additional-config.extra-validators.conf" 'canton.sv-apps.sv.expected-validator-onboardings += { secret = "${EXTRA_VALIDATOR_3_ONBOARDING_SECRET}" }'
+run_repo_root_env_case