these 15 derivations will be built:
  /nix/store/rf1lfdlmmjn0kw3043bj7p6nvf51g4xy-stub-program.drv
  /nix/store/0bzvlamjkz0w3zck2gdgzf5ka2xdj1an-effect-script.sh.drv
  /nix/store/0qgrl2cmllwsa7z2nr9s3ncgcp1f8znh-effect-script.sh.drv
  /nix/store/2yrd53ixgfmkz2p26sdaj67bpi67z5l1-effect-script.sh.drv
  /nix/store/876v9npmp6hccqsjjn7vi0qah54glsjs-effect-script.sh.drv
  /nix/store/8mc63l5n665082k9013vn5nyq2llib9z-effect-script.sh.drv
  /nix/store/bfamnxjiqbbrsw97kayzs5mdggc0rd1m-effect-script.sh.drv
  /nix/store/g9nlf53sm9lipirm1s9lwc8mx1r27r5k-effect-script.sh.drv
  /nix/store/ki56ibb7a1mhfl9ccxnm2p64dlbwh2j5-effect-script.sh.drv
  /nix/store/mf67ic6iq5fp4kpr4nfhw85f8rx6jvs3-effect-script.sh.drv
  /nix/store/mm1z812ydrprm0hh2nzacagpavh8jfi2-effect-script.sh.drv
  /nix/store/p2gyrx6h6cgb5h8q1wqrdg1kx28xl29y-effect-script.sh.drv
  /nix/store/vsra62pdljz22shwbgya7x438cv2gk43-effect-script.sh.drv
  /nix/store/wgnvypiacm9yxmchvfdaz52gy6l1437g-effect-script.sh.drv
  /nix/store/1n08di2496mdgayxsc14a1604yyl1kwa-effects-interpreter.drv
building '/nix/store/rf1lfdlmmjn0kw3043bj7p6nvf51g4xy-stub-program.drv'
stub-program> structuredAttrs is enabled
building '/nix/store/0bzvlamjkz0w3zck2gdgzf5ka2xdj1an-effect-script.sh.drv'
building '/nix/store/0qgrl2cmllwsa7z2nr9s3ncgcp1f8znh-effect-script.sh.drv'
building '/nix/store/2yrd53ixgfmkz2p26sdaj67bpi67z5l1-effect-script.sh.drv'
building '/nix/store/876v9npmp6hccqsjjn7vi0qah54glsjs-effect-script.sh.drv'
building '/nix/store/8mc63l5n665082k9013vn5nyq2llib9z-effect-script.sh.drv'
building '/nix/store/bfamnxjiqbbrsw97kayzs5mdggc0rd1m-effect-script.sh.drv'
building '/nix/store/g9nlf53sm9lipirm1s9lwc8mx1r27r5k-effect-script.sh.drv'
building '/nix/store/ki56ibb7a1mhfl9ccxnm2p64dlbwh2j5-effect-script.sh.drv'
building '/nix/store/mf67ic6iq5fp4kpr4nfhw85f8rx6jvs3-effect-script.sh.drv'
building '/nix/store/mm1z812ydrprm0hh2nzacagpavh8jfi2-effect-script.sh.drv'
building '/nix/store/p2gyrx6h6cgb5h8q1wqrdg1kx28xl29y-effect-script.sh.drv'
building '/nix/store/vsra62pdljz22shwbgya7x438cv2gk43-effect-script.sh.drv'
building '/nix/store/wgnvypiacm9yxmchvfdaz52gy6l1437g-effect-script.sh.drv'
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
building '/nix/store/1n08di2496mdgayxsc14a1604yyl1kwa-effects-interpreter.drv'
effects-interpreter> --- registry secretsMap per trigger
effects-interpreter> --- build_finished registry mapping and defaults
effects-interpreter> --- buildFinished maps to an unguarded event with literal argv and only its own secrets
effects-interpreter> --- buildFinished defaults grant no secrets and append no revision
effects-interpreter> --- buildFinished missing declared secret fails before the program runs
effects-interpreter> error: CLOUDFLARE_API_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- buildFinished missing forge token fails before the program runs
effects-interpreter> error: GITHUB_FORGE_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- main execs the program with --rev and its secrets
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> --- main on a non-main token is skipped
effects-interpreter> EFFECT-GUARD: skipping outside a push to main (event=push ref=refs/heads/gitea-mq/batch/7)
effects-interpreter> --- main on a pull_request token is skipped
effects-interpreter> EFFECT-GUARD: skipping outside a push to main (event=pull_request ref=)
effects-interpreter> --- main without the id-token endpoint is refused
effects-interpreter> EFFECT-GUARD: NIXBOT_ID_TOKEN_REQUEST_URL and NIXBOT_ID_TOKEN_REQUEST_TOKEN are required; declare idTokenAudiences on the effect
effects-interpreter> --- main whose id-token fetch fails is refused
effects-interpreter> EFFECT-GUARD: failed to obtain an id token from nixbot
effects-interpreter> --- missing secret fails before the program runs
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> error: GITHUB_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- null secret fails before the program runs
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> error: GITHUB_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- pullRequest runs unguarded, without --rev, with the forge token
effects-interpreter> --- missing forge token fails before the program runs
effects-interpreter> error: GITHUB_FORGE_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- pullRequestClosed runs unguarded, without --rev, without the forge token
effects-interpreter> --- missing secret fails a pullRequestClosed run before the program runs
effects-interpreter> error: CLOUDFLARE_API_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- pullRequest never receives the main trigger's secrets
effects-interpreter> --- main never receives the pullRequest trigger's secrets or forge token
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> --- registry: release-packages pullRequest runs the plan with the forge token and never GITHUB_TOKEN
effects-interpreter> --- registry: release-packages pullRequest without the forge token fails before the program runs
effects-interpreter> error: GITHUB_FORGE_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- registry: release-packages main receives GITHUB_TOKEN and not the forge token
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> --- registry: docs pullRequestClosed receives Cloudflare and not the forge token
effects-interpreter> --- registry: browser-evidence buildFinished uploads with the R2 secrets and nixbot's API token, without --rev
effects-interpreter> --- registry: browser-evidence buildFinished without an R2 secret fails before the program runs
effects-interpreter> error: R2_EVIDENCE_ACCESS_KEY_ID missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- registry: browser-evidence pullRequest uploads with the R2 secrets and nixbot's API token, without --rev
effects-interpreter> --- registry: browser-evidence pullRequest without an R2 secret fails before the program runs
effects-interpreter> error: R2_EVIDENCE_ACCESS_KEY_ID missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- registry: browser-evidence main appends --rev and receives the R2 secrets and nixbot's API token
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true

upload niks3: ok