include required(file("/app/storage.conf"))

_client_credentials_auth_config {
  type = "client-credentials"
  well-known-config-url = ${?SPLICE_APP_SV_LEDGER_API_AUTH_URL}
  client-id = ${?SPLICE_APP_SV_LEDGER_API_AUTH_CLIENT_ID}
  client-secret = ${?SPLICE_APP_SV_LEDGER_API_AUTH_CLIENT_SECRET}
  # TODO(DACH-NY/canton-network-internal#502) use actual audience of the target participant
  audience = ${SPLICE_APP_SV_LEDGER_API_AUTH_AUDIENCE}
  scope = ${?SPLICE_APP_SV_LEDGER_API_AUTH_SCOPE}
}

_sv_participant_client {
  admin-api = {
    address = ${SPLICE_APP_SV_PARTICIPANT_ADDRESS}
    port = 5002
  }
  ledger-api.client-config = {
    address = ${SPLICE_APP_SV_PARTICIPANT_ADDRESS}
    port = 5001
  }
  ledger-api.auth-config = ${_client_credentials_auth_config}
}

_onboarding {
  type = ${?SPLICE_APP_SV_ONBOARDING_TYPE}
  name = ${?SPLICE_APP_SV_ONBOARDING_NAME}
  first-sv-reward-weight-bps = ${?SPLICE_APP_SV_SV1_REWARD_WEIGHT}
  round-zero-duration = ${?SPLICE_APP_SV_ROUND_ZERO_DURATION}
  initial-tick-duration = ${?SPLICE_APP_SV_INITIAL_TICK_DURATION}
  initial-holding-fee = ${?SPLICE_APP_SV_INITIAL_HOLDING_FEE}
  initial-amulet-price = ${?SPLICE_APP_SV_INITIAL_AMULET_PRICE}
  is-dev-net = ${?SPLICE_APP_SV_IS_DEV_NET}
  public-key = ${?SPLICE_APP_SV_PUBLIC_KEY}
  private-key = ${?SPLICE_APP_SV_PRIVATE_KEY}
  initial-round = ${?SPLICE_APP_SV_INITIAL_ROUND}
}

_comet_bft_config {
  enabled = false
  enabled = ${?SPLICE_APP_SV_COMETBFT_ENABLED}
  connection-uri = ""
  connection-uri = ${?SPLICE_APP_SV_COMETBFT_CONNECTION_URI}
}

canton {
  sv-apps {
    sv {
      storage = ${_storage}
      admin-api = {
        address = "0.0.0.0"
        port = 5014
      }
      participant-client = ${_sv_participant_client}
      ledger-api-user = ${SPLICE_APP_SV_LEDGER_API_AUTH_USER_NAME}
      validator-ledger-api-user = ${SPLICE_APP_VALIDATOR_LEDGER_API_AUTH_USER_NAME}
      auth {
        algorithm = "rs-256"
        audience = ${SPLICE_APP_SV_AUTH_AUDIENCE}
        jwks-url = ${SPLICE_APP_SV_AUTH_JWKS_URL}
        connection-timeout = ${?SPLICE_APP_VALIDATOR_AUTH_JWKS_CONNECTION_TIMEOUT}
        read-timeout = ${?SPLICE_APP_VALIDATOR_AUTH_JWKS_READ_TIMEOUT}
      }
      domains {
        global {
          alias = "global"
          url = ${?SPLICE_APP_SV_GLOBAL_DOMAIN_URL}
        }
      }

      automation {
        paused-triggers = [
          "org.lfdecentralizedtrust.splice.sv.automation.delegatebased.ExpiredAmuletTrigger",
          "org.lfdecentralizedtrust.splice.sv.automation.delegatebased.ExpiredLockedAmuletTrigger",
          "org.lfdecentralizedtrust.splice.sv.automation.delegatebased.ExpiredAnsSubscriptionTrigger"
          "org.lfdecentralizedtrust.splice.sv.automation.delegatebased.ExpiredAnsEntryTrigger",
          "org.lfdecentralizedtrust.splice.sv.automation.delegatebased.ExpireTransferPreapprovalsTrigger",
        ]
      }

      onboarding = ${_onboarding}
      initial-amulet-price-vote = ${?SPLICE_APP_SV_INITIAL_AMULET_PRICE_VOTE}
      comet-bft-config = ${_comet_bft_config}
      contact-point = ${SPLICE_APP_CONTACT_POINT}
      canton-identifier-config = {
        participant = ${SPLICE_APP_SV_PARTICIPANT_IDENTIFIER}
        sequencer = ${SPLICE_APP_SV_SEQUENCER_IDENTIFIER}
        mediator = ${SPLICE_APP_SV_MEDIATOR_IDENTIFIER}
      }

      splice-instance-names {
        network-name = ${SPLICE_APP_UI_NETWORK_NAME}
        network-favicon-url = ${SPLICE_APP_UI_NETWORK_FAVICON_URL}
        amulet-name = ${SPLICE_APP_UI_AMULET_NAME}
        amulet-name-acronym = ${SPLICE_APP_UI_AMULET_NAME_ACRONYM}
        name-service-name = ${SPLICE_APP_UI_NAME_SERVICE_NAME}
        name-service-name-acronym = ${SPLICE_APP_UI_NAME_SERVICE_NAME_ACRONYM}
      }
      delegateless-automation-expected-task-duration = ${?SPLICE_APP_EXPECTED_TASK_DURATION}
      delegateless-automation-expired-reward-coupon-batch-size = ${?SPLICE_APP_EXPIRED_REWARD_COUPON_BATCH_SIZE}
      parameters {
        # TODO(DACH-NY/canton-network-internal#2125) Revisit timeouts on 3.4
        custom-timeouts {
          onboardSvPartyMigrationAuthorize = 20 minutes
          onboardSvSequencer = 5 minutes
        }
      }
    }
  }
  features.enable-testing-commands = yes

  # TODO(DACH-NY/canton-network-internal#2125) Revisit timeouts on 3.4
  # Note: This is the client-side request timeout
  parameters.timeouts.request-timeout = 20 minutes
}