these 15 derivations will be built:
  /nix/store/mp5pgwhx2hyigyd2nx2zcc2xcbpja8yh-stub-program.drv
  /nix/store/6mcnpa63f9k8d3d30vqj36lnyjfz0brj-effect-script.sh.drv
  /nix/store/8d0xzpzx4gl6vz3d7wgw7gfcm6xrdavg-effect-script.sh.drv
  /nix/store/ad0a34lf8iqvf0lwrixjfavd8kjjf927-effect-script.sh.drv
  /nix/store/b84rz81z534117m1zlybr9zqwzwjnjjb-effect-script.sh.drv
  /nix/store/dykhyj32r1m2pvh4rqr8cgsmbf87rdm9-effect-script.sh.drv
  /nix/store/jpipdzf348frn5dq1ifjpd779m2zhvjb-effect-script.sh.drv
  /nix/store/kg2qpgs9gls1bjrh94v4jq7c12s37a66-effect-script.sh.drv
  /nix/store/kngh1gi3240g54z9v63fi2d35psv4lbm-effect-script.sh.drv
  /nix/store/ly8ra1bfvckgc5msax2s8j9wf4i2a9ni-effect-script.sh.drv
  /nix/store/pw5glqqbrw1pmc6paqm01x1a8050madj-effect-script.sh.drv
  /nix/store/qjx5wcvs0n102mf59365w8dbxfi99v5j-effect-script.sh.drv
  /nix/store/rfvnx7s4jf9l1win4v4h4v9qjcz9h5rk-effect-script.sh.drv
  /nix/store/ry1k2qafkryinwxa8radgvxz5daxd7dr-effect-script.sh.drv
  /nix/store/834ydjiralxc72176jw0bhsmgr0ivi00-effects-interpreter.drv
this path will be fetched (0.0 KiB download, 1.6 MiB unpacked):
  /nix/store/nzsflqrk0zdljly9jhx82l784hl5rmc4-diffutils-3.12
building '/nix/store/mp5pgwhx2hyigyd2nx2zcc2xcbpja8yh-stub-program.drv'
stub-program> structuredAttrs is enabled
building '/nix/store/6mcnpa63f9k8d3d30vqj36lnyjfz0brj-effect-script.sh.drv'
building '/nix/store/8d0xzpzx4gl6vz3d7wgw7gfcm6xrdavg-effect-script.sh.drv'
building '/nix/store/ad0a34lf8iqvf0lwrixjfavd8kjjf927-effect-script.sh.drv'
building '/nix/store/b84rz81z534117m1zlybr9zqwzwjnjjb-effect-script.sh.drv'
building '/nix/store/dykhyj32r1m2pvh4rqr8cgsmbf87rdm9-effect-script.sh.drv'
building '/nix/store/jpipdzf348frn5dq1ifjpd779m2zhvjb-effect-script.sh.drv'
building '/nix/store/kg2qpgs9gls1bjrh94v4jq7c12s37a66-effect-script.sh.drv'
building '/nix/store/kngh1gi3240g54z9v63fi2d35psv4lbm-effect-script.sh.drv'
building '/nix/store/ly8ra1bfvckgc5msax2s8j9wf4i2a9ni-effect-script.sh.drv'
building '/nix/store/pw5glqqbrw1pmc6paqm01x1a8050madj-effect-script.sh.drv'
building '/nix/store/qjx5wcvs0n102mf59365w8dbxfi99v5j-effect-script.sh.drv'
building '/nix/store/rfvnx7s4jf9l1win4v4h4v9qjcz9h5rk-effect-script.sh.drv'
building '/nix/store/ry1k2qafkryinwxa8radgvxz5daxd7dr-effect-script.sh.drv'
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
building '/nix/store/834ydjiralxc72176jw0bhsmgr0ivi00-effects-interpreter.drv'
effects-interpreter> --- registry secretsMap per trigger
effects-interpreter> --- build_finished registry mapping and defaults
effects-interpreter> --- buildFinished maps to an unguarded event with literal argv and only its own secrets
effects-interpreter> --- buildFinished defaults grant no secrets and append no revision
effects-interpreter> --- buildFinished missing declared secret fails before the program runs
effects-interpreter> error: CLOUDFLARE_API_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- buildFinished missing forge token fails before the program runs
effects-interpreter> error: GITHUB_FORGE_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- main execs the program with --rev and its secrets
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> --- main on a non-main token is skipped
effects-interpreter> EFFECT-GUARD: skipping outside a push to main (event=push ref=refs/heads/gitea-mq/batch/7)
effects-interpreter> --- main on a pull_request token is skipped
effects-interpreter> EFFECT-GUARD: skipping outside a push to main (event=pull_request ref=)
effects-interpreter> --- main without the id-token endpoint is refused
effects-interpreter> EFFECT-GUARD: NIXBOT_ID_TOKEN_REQUEST_URL and NIXBOT_ID_TOKEN_REQUEST_TOKEN are required; declare idTokenAudiences on the effect
effects-interpreter> --- main whose id-token fetch fails is refused
effects-interpreter> EFFECT-GUARD: failed to obtain an id token from nixbot
effects-interpreter> --- missing secret fails before the program runs
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> error: GITHUB_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- null secret fails before the program runs
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> error: GITHUB_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- pullRequest runs unguarded, without --rev, with the forge token
effects-interpreter> --- missing forge token fails before the program runs
effects-interpreter> error: GITHUB_FORGE_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- pullRequestClosed runs unguarded, without --rev, without the forge token
effects-interpreter> --- missing secret fails a pullRequestClosed run before the program runs
effects-interpreter> error: CLOUDFLARE_API_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- pullRequest never receives the main trigger's secrets
effects-interpreter> --- main never receives the pullRequest trigger's secrets or forge token
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> --- registry: release-packages pullRequest runs the plan with the forge token and never GITHUB_TOKEN
effects-interpreter> --- registry: release-packages pullRequest without the forge token fails before the program runs
effects-interpreter> error: GITHUB_FORGE_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- registry: release-packages main receives GITHUB_TOKEN and not the forge token
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> --- registry: docs pullRequestClosed receives Cloudflare and not the forge token
effects-interpreter> --- registry: browser-evidence buildFinished uploads with the R2 secrets and nixbot's API token, without --rev
effects-interpreter> --- registry: browser-evidence buildFinished without an R2 secret fails before the program runs
effects-interpreter> error: R2_EVIDENCE_ACCESS_KEY_ID missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- registry: browser-evidence pullRequest uploads with the R2 secrets and nixbot's API token, without --rev
effects-interpreter> --- registry: browser-evidence pullRequest without an R2 secret fails before the program runs
effects-interpreter> error: R2_EVIDENCE_ACCESS_KEY_ID missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- registry: browser-evidence main appends --rev and receives the R2 secrets and nixbot's API token
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true

upload niks3: ok