---

prepare_bundle() {
  local tool_dir="$1"
  local bundle_zip_url="$2"
  local activation_script_rel="$3"
  local run_executable_rel="$4"
  local bundle_platform_id="$5"

  local activation_script_abs
  local run_executable_abs
  local stamp_path="$tool_dir/noir-bundle/.oakb_bundle_source.env"
  activation_script_abs="$(common::join_path "$tool_dir" "$activation_script_rel")"
  run_executable_abs="$(common::join_path "$tool_dir" "$run_executable_rel")"

  # Noir is shipped as a bundle declared in apa_analyzer_config.yaml. Reuse the
  # prepared bundle between builds unless OAKB_FORCE_TOOL_REFRESH=1 is set or
  # the selected bundle URL/platform differs from the prepared bundle stamp.
  if [[ "${OAKB_FORCE_TOOL_REFRESH:-0}" != "1" && -f "$activation_script_abs" && -f "$run_executable_abs" ]]; then
    local stamped_bundle_zip_url
    local stamped_bundle_platform_id
    stamped_bundle_zip_url="$(key_value_file_value "$stamp_path" "bundle_zip_url")"
    stamped_bundle_platform_id="$(key_value_file_value "$stamp_path" "bundle_platform_id")"

    if [[ "$stamped_bundle_zip_url" == "$bundle_zip_url" && "$stamped_bundle_platform_id" == "$bundle_platform_id" ]]; then
      common::log INFO "Reusing prepared noir bundle in $tool_dir"
      return 0
    fi

    common::log INFO "Refreshing prepared noir bundle in $tool_dir because selected bundle changed or stamp is missing"
  fi

  common::ensure_dir "$tool_dir"
  rm -rf "$tool_dir/noir-bundle"
  
  common::log INFO "Downloading noir bundle from $bundle_zip_url"
  common::run curl -ks --user "$TUZ_NAME_FOR_ACCESS_ANALYZER_BINS:$TUZ_PWD_FOR_ACCESS_ANALYZER_BINS" --http1.1  --fail --location --retry 3 --output "$tool_dir/noir-bundle.zip" "$bundle_zip_url"
  # --retry-connrefused <- unsupported by curl on some agents
  common::run unzip -oq "$tool_dir/noir-bundle.zip" -d "$tool_dir"

  [[ -f "$activation_script_abs" ]] || common::die "Activation script missing after unzip: $activation_script_abs"
  [[ -f "$run_executable_abs" ]] || common::die "Noir executable missing after unzip: $run_executable_abs"
  write_bundle_stamp "$stamp_path" "$bundle_zip_url" "$bundle_platform_id"
}



19:48:34  [DEBUG] + chmod +x /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.apa_analyzer/scripts/runners/noir_runner.sh
19:48:34  [DEBUG] + /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.apa_analyzer/scripts/runners/noir_runner.sh --config-file-path /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.apa_analyzer/apa_analyzer_config.yaml --repo-snaps-json /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_tmp/oakb-repo-snaps.TVdVxh.json --source-root-snaps-json /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_tmp/oakb-source-root-snaps.nE23Ba.json --oakb-tool-report-dir-path-no-ts /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_reports/noir --component-code AUTH --component-code-raw AUTH --component-version D-3.3.3-B333 --component-version-raw D-3.3.3-b333 --jenkins-job-name sbt/sbt_acsapa/auth-proxy-oakb_build_cije --jenkins-job-invoke-id 21 --analyzer-repo-url ssh://git@portal.works.prod.sbt:7998/oakbapa/apa_analyzer.git --analyzer-repo-branch main --analyzer-repo-commit 09573c8d47fe37e62ae5b7d60a042e167ed873c1 --analyzer-arguments-json /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_tmp/oakb-analyzer-arguments.8o3um7.json --code-root-git-dir-path /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/sources/auth-proxy-oakb --publish-manifest-path /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_tmp/oakb-noir-publish.SydPx0 --swagger-file-path /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/sources/auth-proxy-oakb/swagger.json
19:48:34  [INFO] noir_runner.sh git --version: git version 2.43.5
19:48:34  [DEBUG] + mkdir -p /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_tmp
19:48:35  [INFO] Noir bundle OS detection: os_release_file=/etc/os-release id=sberlinux version_id=9.5 version_major=9 variant_key=default
19:48:35  [INFO] Using default Noir bundle URL: https://portal.works.prod.sbt/ssd/tools/nexus-ci/repository/sbt_raw/oakbapa/noir-bundle.zip
19:48:35  [DEBUG] + mkdir -p .
19:48:35  [DEBUG] + mkdir -p /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_tools/noir
19:48:35  [INFO] Downloading noir bundle from https://portal.works.prod.sbt/ssd/tools/nexus-ci/repository/sbt_raw/oakbapa/noir-bundle.zip
19:48:35  [DEBUG] + curl -ks --user sa-archcs-apau-as21:**** --http1.1 --fail --location --retry 3 --output /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_tools/noir/noir-bundle.zip https://portal.works.prod.sbt/ssd/tools/nexus-ci/repository/sbt_raw/oakbapa/noir-bundle.zip
19:48:35  [DEBUG] + unzip -oq /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_tools/noir/noir-bundle.zip -d /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_tools/noir
19:48:35  [DEBUG] + mkdir -p /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_reports
19:48:35  [DEBUG] + mkdir -p /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_reports/noir
19:48:35  [DEBUG] + mkdir -p /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_reports/noir/by_partition/y-2026/m-06/ds-11-20/noir_20260615T164835.143Z_26513
19:48:35  [DEBUG] + mkdir -p /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_reports/noir/by_partition/y-2026/m-06/ds-11-20/noir_20260615T164835.143Z_26513/report_data
19:48:35  [DEBUG] + mkdir -p /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_reports/noir/by_partition/y-2026/m-06/ds-11-20/noir_20260615T164835.143Z_26513/report_meta
19:48:35  [INFO] Running noir against 1 root(s)
19:48:35  [DEBUG] + mkdir -p /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_tmp
19:48:35  [DEBUG] + mkdir -p /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_tmp
19:48:35  [DEBUG] + mkdir -p /jenkins_slave/jenkins-portal/workspace/sbt/sbt_acsapa/auth-proxy-oakb_build_cije/.oakb_tmp
19:48:35  python3: error while loading shared libraries: libpython3.6m.so.1.0: cannot open shared object file: No such file or directory
expected to call runPipeline.invokeMethod but wound up catching wrap; see: https://jenkins.io/redirect/pipeline-cps-method-mismatches/
expected to call runPipeline.invokeMethod but wound up catching emailext; see: https://jenkins.io/redirect/pipeline-cps-method-mismatches/