docker-compose-smoke.sh

#!/usr/bin/env bash
# Docker Compose smoke test for production/full profile (F21).
set -euo pipefail

ROOT_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)
cd "$ROOT_DIR"

PROFILE="${1:-full}"
COMPOSE="docker compose --profile ${PROFILE}"

if ! command -v docker >/dev/null 2>&1; then
  echo "SKIP: docker not available" >&2
  exit 0
fi

echo "=== docker-compose smoke (profile=${PROFILE}) ==="

python scripts/check_wiring.py

# Optional: validate documented env keys exist in schema (structural presence).
if [[ -f schemas/pf-env.schema.json ]]; then
  python - <<'PY'
import json, sys
from pathlib import Path
schema = json.loads(Path("schemas/pf-env.schema.json").read_text(encoding="utf-8"))
required_keys = {
    "PF_PROFILE", "PROFILE", "SIDECAR_URL", "LEDGER_URL", "KERNEL_URL", "PORT",
}
missing = required_keys - set(schema.get("properties", {}))
if missing:
    print(f"pf-env.schema.json missing properties: {sorted(missing)}", file=sys.stderr)
    sys.exit(1)
print("pf-env.schema.json: OK")
PY
fi

# Rust service Dockerfiles expect Cargo.lock in their build context (workspace root lockfile).
if [[ -f Cargo.lock ]]; then
  for ctx in runtime/sidecar-watcher runtime/egress-firewall runtime/attestor; do
    if [[ -f "${ctx}/Dockerfile" ]]; then
      cp Cargo.lock "${ctx}/Cargo.lock"
    fi
  done
fi

$COMPOSE config >/dev/null
echo "compose config: OK"

# Long-running services exercised by this smoke (health curls below). Omit batch CLIs,
# demo apps, and platform microservices not required for compose/DB validation.
SMOKE_SERVICES=(
  postgres redis runtime-sidecar ledger retrieval-gateway
)
$COMPOSE up -d --wait --timeout 180 "${SMOKE_SERVICES[@]}"
echo "compose up --wait: OK"

# Health endpoints for core services in full profile
curl -fsS http://localhost:4000/health >/dev/null && echo "ledger /health: OK"
curl -fsS http://localhost:8080/health >/dev/null && echo "retrieval-gateway /health: OK" || true

$COMPOSE down -v
echo "compose down: OK"
echo "=== docker-compose smoke passed ==="