set -euo pipefail
cd /opt/infisical
echo '== scripts =='
ls -l /opt/infisical/bin/backup-infisical.sh /opt/infisical/bin/restore-test-infisical.sh

echo '== run final backup =='
/opt/infisical/bin/backup-infisical.sh

echo '== latest backup =='
LATEST=$(find /opt/infisical/backups -maxdepth 1 -mindepth 1 -type d -name 'infisical-backup-*' -printf '%T@ %p\n' | sort -n | tail -1 | awk '{print $2}')
echo "latest=$LATEST"
stat -c '%y %n' "$LATEST"
ls -la "$LATEST" | sed -E 's/  +/ /g'
echo '== manifest sanitized =='
sed -n '1,120p' "$LATEST/manifest.txt" | sed -E 's/(PASSWORD|SECRET|KEY|TOKEN|AUTH|ENCRYPTION).*/[REDACTED]/I' || true
echo '== sha256 verify =='
(cd "$LATEST" && sha256sum -c SHA256SUMS)

echo '== run isolated restore test =='
/opt/infisical/bin/restore-test-infisical.sh "$LATEST"