these 2 derivations will be built: /nix/store/y9hzv997lpxxylmjgknfmx719i9ssfdz-ironstar-effect-run-context.drv /nix/store/svpg42clv1l426r882wsb8qqfg2vi2qj-effect-run-context-check.drv these 9 paths will be fetched (0.0 KiB download, 14.4 MiB unpacked): /nix/store/qm39dldnclw4csg7i2zc77zm06y6937j-ShellCheck-0.11.0 /nix/store/969dkwnqy7cr2nyw1mzvbf890q68qjv6-curl-8.21.0-bin /nix/store/3cfcygkbamw4b9snazj1xl4x5snhf62c-elfutils-0.195 /nix/store/jwyskbj2mc7izs67ib2msydsh0vbnwl9-gmp-with-cxx-6.3.0 /nix/store/d91mwgs15hv4ajza7jn6axyiwa07ga7m-jq-1.8.2 /nix/store/xvd6920kffyyshg7mbw5wvfk6lg9wfkl-jq-1.8.2-bin /nix/store/imvc9v7wiw7rh5rrzjdhmrd96s2wszi2-json-c-0.18 /nix/store/s8g1cy79c0rmzvxrj8qqslbzk31jh3a6-numactl-2.0.18 /nix/store/0v7nad1c5ksamzr1rqkvi6dfks7i4pcm-oniguruma-6.9.10-lib building '/nix/store/y9hzv997lpxxylmjgknfmx719i9ssfdz-ironstar-effect-run-context.drv' building '/nix/store/svpg42clv1l426r882wsb8qqfg2vi2qj-effect-run-context-check.drv' effect-run-context-check> case 1: no id token, push to the default branch effect-run-context-check> IRONSTAR_RUN_CONTEXT_SOURCE=branch-name effect-run-context-check> IRONSTAR_EVENT=push effect-run-context-check> IRONSTAR_PR_NUMBER='' effect-run-context-check> IRONSTAR_IS_PRODUCTION=true effect-run-context-check> IRONSTAR_BRANCH=main effect-run-context-check> IRONSTAR_PREVIEW_SLUG=main effect-run-context-check> ok source = branch-name effect-run-context-check> ok event = push effect-run-context-check> ok production = true effect-run-context-check> ok slug = main effect-run-context-check> case 2: no id token, pull request as the current service reports it effect-run-context-check> IRONSTAR_RUN_CONTEXT_SOURCE=branch-name effect-run-context-check> IRONSTAR_EVENT=pull_request effect-run-context-check> IRONSTAR_PR_NUMBER=42 effect-run-context-check> IRONSTAR_IS_PRODUCTION=false effect-run-context-check> IRONSTAR_BRANCH=refs/pull/42/merge effect-run-context-check> IRONSTAR_PREVIEW_SLUG=refs/pull/42/merge effect-run-context-check> ok source = branch-name effect-run-context-check> ok event = pull_request effect-run-context-check> ok pr-number = 42 effect-run-context-check> ok production = false effect-run-context-check> ok slug = refs/pull/42/merge effect-run-context-check> case 3: no id token, tag push (no branch) effect-run-context-check> IRONSTAR_RUN_CONTEXT_SOURCE=branch-name effect-run-context-check> IRONSTAR_EVENT=push effect-run-context-check> IRONSTAR_PR_NUMBER='' effect-run-context-check> IRONSTAR_IS_PRODUCTION=false effect-run-context-check> IRONSTAR_BRANCH='' effect-run-context-check> IRONSTAR_PREVIEW_SLUG=abc1234 effect-run-context-check> ok event = push effect-run-context-check> ok production = false effect-run-context-check> ok slug = abc1234 effect-run-context-check> case 4: id token, push to the default branch effect-run-context-check> IRONSTAR_RUN_CONTEXT_SOURCE=id-token effect-run-context-check> IRONSTAR_EVENT=push effect-run-context-check> IRONSTAR_PR_NUMBER='' effect-run-context-check> IRONSTAR_IS_PRODUCTION=true effect-run-context-check> IRONSTAR_BRANCH=main effect-run-context-check> IRONSTAR_PREVIEW_SLUG=main effect-run-context-check> ok source = id-token effect-run-context-check> ok event = push effect-run-context-check> ok production = true effect-run-context-check> ok branch = main effect-run-context-check> ok slug = main effect-run-context-check> case 5: id token, pull request targeting the default branch effect-run-context-check> (the eval-time branch is 'main' here: that is the defect) effect-run-context-check> IRONSTAR_RUN_CONTEXT_SOURCE=id-token effect-run-context-check> IRONSTAR_EVENT=pull_request effect-run-context-check> IRONSTAR_PR_NUMBER=42 effect-run-context-check> IRONSTAR_IS_PRODUCTION=false effect-run-context-check> IRONSTAR_BRANCH='' effect-run-context-check> IRONSTAR_PREVIEW_SLUG=pr-42 effect-run-context-check> ok source = id-token effect-run-context-check> ok event = pull_request effect-run-context-check> ok pr-number = 42 effect-run-context-check> ok production = false effect-run-context-check> ok branch = effect-run-context-check> ok slug = pr-42 effect-run-context-check> case 6: id token, push to a non-default branch effect-run-context-check> IRONSTAR_RUN_CONTEXT_SOURCE=id-token effect-run-context-check> IRONSTAR_EVENT=push effect-run-context-check> IRONSTAR_PR_NUMBER='' effect-run-context-check> IRONSTAR_IS_PRODUCTION=false effect-run-context-check> IRONSTAR_BRANCH=topic effect-run-context-check> IRONSTAR_PREVIEW_SLUG=topic effect-run-context-check> ok event = push effect-run-context-check> ok production = false effect-run-context-check> ok slug = topic effect-run-context-check> case 7: id token, scheduled run (no ref claim) effect-run-context-check> IRONSTAR_RUN_CONTEXT_SOURCE=id-token effect-run-context-check> IRONSTAR_EVENT=schedule effect-run-context-check> IRONSTAR_PR_NUMBER='' effect-run-context-check> IRONSTAR_IS_PRODUCTION=false effect-run-context-check> IRONSTAR_BRANCH='' effect-run-context-check> IRONSTAR_PREVIEW_SLUG=main effect-run-context-check> ok event = schedule effect-run-context-check> ok production = false effect-run-context-check> case 8: id token requested but refused: fail closed, never fall back effect-run-context-check> curl: (22) The requested URL returned error: 401 effect-run-context-check> ---------------------------------------- effect-run-context-check> Exception occurred during processing of request from ('127.0.0.1', 35336) effect-run-context-check> run-context: id-token request to http://127.0.0.1:45981/api/v1/id-token failed effect-run-context-check> ok refused token request aborted the effect post-build step Upload to niks3: ok time=2026-08-31T09:19:38.926Z level=INFO msg="Uploading 0 paths to niks3.scientistexperience.net (1 already cached)" time=2026-08-31T09:19:39.595Z level=INFO msg="Uploading 1 narinfos" time=2026-08-31T09:19:40.079Z level=INFO msg="Upload complete. (1.268s)"