#!/usr/bin/env bash
# No `set -e`: a poll iteration that finds no token yet must not abort the loop.
set -o pipefail

# --since anchors the scrape to this run: `service logs` aggregates every task
# of the service (including the previous, now-shutdown one), so without the
# timestamp `tail -1` could return a token still buffered from the prior run
# before the freshly restarted installer emits its own.
since="$(date -u +%Y-%m-%dT%H:%M:%SZ)"
container service update --force --replicas 1 "${SERVICE_REF}" >/dev/null

deadline=$(($(date +%s) + DEADLINE_S))
while [ "$(date +%s)" -lt "${deadline}" ]; do
	token="$(container service logs --since "${since}" --no-task-ids "${SERVICE_REF}" 2>&1 |
		sed -E 's/^[^|]*\| //' |
		grep -oE '^[a-f0-9]{32,64}$' | tail -1)"
	if [ -n "${token}" ]; then
		printf '%s\n' "${token}"
		exit 0
	fi
	sleep "${POLL_DELAY_S}"
done

container service logs --since "${since}" --no-task-ids --tail 40 "${SERVICE_REF}" 2>&1 |
	sed -E 's/[a-f0-9]{32,64}/<redacted>/g' |
	tail -40 >&2
exit 1