these 12 derivations will be built:
  /nix/store/nd07jx5n95yw19nz47sb2kv57asj9jq1-stub-program.drv
  /nix/store/1y5bla7fddj1001jx6gpgdbfda7qjhj7-effect-script.sh.drv
  /nix/store/4b7vgy9ivq1hc7ym99c14sfs7y62cswd-effect-script.sh.drv
  /nix/store/78cc95v91bjn6jacc976yx496qaps7i4-effect-script.sh.drv
  /nix/store/7iq07grcwknav4wx13adwbwm3cr984di-effect-script.sh.drv
  /nix/store/8b2vvcnkln8f513xky1hsf8cvlib9rdq-effect-script.sh.drv
  /nix/store/8h1lx8rhy34hwpqknv7lnpblyph8fhnj-effect-script.sh.drv
  /nix/store/d739221ll414j15xhwy92v065xzc5jwb-effect-script.sh.drv
  /nix/store/glf0y0ij1advs8y830b8zqzil6bi7bch-effect-script.sh.drv
  /nix/store/nij7zmfpvb71b6if87529mq1dhp9pjw7-effect-script.sh.drv
  /nix/store/x71k1zjvrqmyjh0y9xl4discb2abhman-effect-script.sh.drv
  /nix/store/aypg9rzh1z6mf33i2haa4vg2vg7v5a6y-effects-interpreter.drv
this path will be fetched (0.0 KiB download, 1.6 MiB unpacked):
  /nix/store/1jhkxfbnx35m08gv5fyamp6ai5qhbjdh-diffutils-3.12
building '/nix/store/nd07jx5n95yw19nz47sb2kv57asj9jq1-stub-program.drv'
stub-program> structuredAttrs is enabled
building '/nix/store/1y5bla7fddj1001jx6gpgdbfda7qjhj7-effect-script.sh.drv'
building '/nix/store/4b7vgy9ivq1hc7ym99c14sfs7y62cswd-effect-script.sh.drv'
building '/nix/store/78cc95v91bjn6jacc976yx496qaps7i4-effect-script.sh.drv'
building '/nix/store/7iq07grcwknav4wx13adwbwm3cr984di-effect-script.sh.drv'
building '/nix/store/8b2vvcnkln8f513xky1hsf8cvlib9rdq-effect-script.sh.drv'
building '/nix/store/8h1lx8rhy34hwpqknv7lnpblyph8fhnj-effect-script.sh.drv'
building '/nix/store/d739221ll414j15xhwy92v065xzc5jwb-effect-script.sh.drv'
building '/nix/store/glf0y0ij1advs8y830b8zqzil6bi7bch-effect-script.sh.drv'
building '/nix/store/nij7zmfpvb71b6if87529mq1dhp9pjw7-effect-script.sh.drv'
building '/nix/store/x71k1zjvrqmyjh0y9xl4discb2abhman-effect-script.sh.drv'
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
effect-script.sh> structuredAttrs is enabled
building '/nix/store/aypg9rzh1z6mf33i2haa4vg2vg7v5a6y-effects-interpreter.drv'
effects-interpreter> --- registry secretsMap per trigger
effects-interpreter> --- build_finished registry mapping and defaults
effects-interpreter> --- buildFinished maps to an unguarded event with literal argv and only its own secrets
effects-interpreter> --- buildFinished defaults grant no secrets and append no revision
effects-interpreter> --- buildFinished missing declared secret fails before the program runs
effects-interpreter> error: CLOUDFLARE_API_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- buildFinished missing forge token fails before the program runs
effects-interpreter> error: GITHUB_FORGE_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- main execs the program with --rev and its secrets
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> --- main on a non-main token is skipped
effects-interpreter> EFFECT-GUARD: skipping outside a push to main (event=push ref=refs/heads/gitea-mq/batch/7)
effects-interpreter> --- missing secret fails before the program runs
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> error: GITHUB_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- null secret fails before the program runs
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> error: GITHUB_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- pullRequest runs unguarded, without --rev, with the forge token
effects-interpreter> --- missing forge token fails before the program runs
effects-interpreter> error: GITHUB_FORGE_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- pullRequestClosed runs unguarded, without --rev, without the forge token
effects-interpreter> --- missing secret fails a pullRequestClosed run before the program runs
effects-interpreter> error: CLOUDFLARE_API_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- pullRequest never receives the main trigger's secrets
effects-interpreter> --- main never receives the pullRequest trigger's secrets or forge token
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> --- registry: release-packages pullRequest runs the plan with the forge token and never GITHUB_TOKEN
effects-interpreter> --- registry: release-packages pullRequest without the forge token fails before the program runs
effects-interpreter> error: GITHUB_FORGE_TOKEN missing from $HERCULES_CI_SECRETS_JSON
effects-interpreter> --- registry: release-packages main receives GITHUB_TOKEN and not the forge token
effects-interpreter> CI-RUN-CONTEXT: branch=main is_main=true
effects-interpreter> --- registry: docs pullRequestClosed receives Cloudflare and not the forge token

upload niks3: ok