---
Function {
 argument: None,
 arguments: FunctionArguments {
  arguments: [
   FunctionArgument {
    identifier: "lib",
    default: None,
   },
   FunctionArgument {
    identifier: "pkgs",
    default: None,
   },
   FunctionArgument {
    identifier: "config",
    default: None,
   },
  ],
  ellipsis: true,
 },
 definition: With {
  expression: Variable {
   identifier: "lib",
   position: (2, 6),
  },
  target: LetIn {
   bindings: [
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "cfg",
        position: (4, 3),
       },
      ],
     },
     PropertyAccess {
      expression: Variable {
       identifier: "config",
       position: (4, 9),
      },
      attribute_path: AttributePath {
       attributes: [
        Raw {
         content: "services",
         position: (4, 16),
        },
        Raw {
         content: "github-runner",
         position: (4, 25),
        },
       ],
      },
      default: None,
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "svcName",
        position: (5, 3),
       },
      ],
     },
     String {
      parts: [
       Raw {
        content: "github-runner",
       },
      ],
      position: (5, 13),
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "systemdDir",
        position: (6, 3),
       },
      ],
     },
     String {
      parts: [
       Expression {
        expression: Variable {
         identifier: "svcName",
         position: (6, 19),
        },
       },
       Raw {
        content: "/",
       },
       Expression {
        expression: PropertyAccess {
         expression: Variable {
          identifier: "cfg",
          position: (6, 30),
         },
         attribute_path: AttributePath {
          attributes: [
           Raw {
            content: "name",
            position: (6, 34),
           },
          ],
         },
         default: None,
        },
       },
      ],
      position: (6, 16),
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "runtimeDir",
        position: (8, 3),
       },
      ],
     },
     String {
      parts: [
       Raw {
        content: "%t/",
       },
       Expression {
        expression: Variable {
         identifier: "systemdDir",
         position: (8, 22),
        },
       },
      ],
      position: (8, 16),
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "stateDir",
        position: (10, 3),
       },
      ],
     },
     String {
      parts: [
       Raw {
        content: "%S/",
       },
       Expression {
        expression: Variable {
         identifier: "systemdDir",
         position: (10, 20),
        },
       },
      ],
      position: (10, 14),
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "logsDir",
        position: (12, 3),
       },
      ],
     },
     String {
      parts: [
       Raw {
        content: "%L/",
       },
       Expression {
        expression: Variable {
         identifier: "systemdDir",
         position: (12, 19),
        },
       },
      ],
      position: (12, 13),
     },
    ),
    KeyValue(
     AttributePath {
      attributes: [
       Raw {
        content: "currentConfigTokenFilename",
        position: (14, 3),
       },
      ],
     },
     String {
      parts: [
       Raw {
        content: ".current-token",
       },
      ],
      position: (14, 32),
     },
    ),
   ],
   target: Map {
    bindings: [
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "options",
         position: (17, 3),
        },
        Raw {
         content: "services",
         position: (17, 11),
        },
        Raw {
         content: "github-runner",
         position: (17, 20),
        },
       ],
      },
      Map {
       bindings: [
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "enable",
            position: (18, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (18, 14),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (19, 7),
                },
               ],
              },
              Variable {
               identifier: "false",
               position: (19, 17),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "example",
                 position: (20, 7),
                },
               ],
              },
              Variable {
               identifier: "true",
               position: (20, 17),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (21, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Whether to enable GitHub Actions runner.\n\nNote: GitHub recommends using self-hosted runners with private repositories only. Learn more here:\n<link xlink:href=\"https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners\"\n>About self-hosted runners</link>.\n",
                },
               ],
               position: (21, 21),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (28, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "lib",
                position: (28, 14),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "types",
                  position: (28, 18),
                 },
                 Raw {
                  content: "bool",
                  position: (28, 24),
                 },
                ],
               },
               default: None,
              },
             ),
            ],
            recursive: false,
            position: (18, 23),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "url",
            position: (31, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (31, 11),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (32, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (32, 14),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "str",
                  position: (32, 20),
                 },
                ],
               },
               default: None,
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (33, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Repository to add the runner to.\n\nChanging this option triggers a new runner registration.\n\nIMPORTANT: If your token is org-wide (not per repository), you need to\nprovide a github org link, not a single repository, so do it like this\n<literal>https://github.com/nixos</literal>, not like this\n<literal>https://github.com/nixos/nixpkgs</literal>.\nOtherwise, you are going to get a <literal>404 NotFound</literal>\nfrom <literal>POST https://api.github.com/actions/runner-registration</literal>\nin the configure script.\n",
                },
               ],
               position: (33, 21),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "example",
                 position: (46, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "https://github.com/nixos/nixpkgs",
                },
               ],
               position: (46, 17),
              },
             ),
            ],
            recursive: false,
            position: (31, 20),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "tokenFile",
            position: (49, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (49, 17),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (50, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (50, 14),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "path",
                  position: (50, 20),
                 },
                ],
               },
               default: None,
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (51, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "The full path to a file which contains the runner registration token.\nThe file should contain exactly one line with the token without any newline.\nThe token can be used to re-register a runner of the same name but is time-limited.\n\nChanging this option or the file's content triggers a new runner registration.\n",
                },
               ],
               position: (51, 21),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "example",
                 position: (58, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "/run/secrets/github-runner/nixos.token",
                },
               ],
               position: (58, 17),
              },
             ),
            ],
            recursive: false,
            position: (49, 26),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "name",
            position: (61, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (61, 12),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (63, 7),
                },
               ],
              },
              FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "types",
                 position: (63, 14),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "strMatching",
                   position: (63, 20),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "^$|^[[:alnum:]]([[:alnum:]_-]{0,61}[[:alnum:]])?$",
                  },
                 ],
                 position: (63, 32),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (64, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Name of the runner to configure. Defaults to the hostname.\n\nChanging this option triggers a new runner registration.\n",
                },
               ],
               position: (64, 21),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "example",
                 position: (69, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "nixos",
                },
               ],
               position: (69, 17),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (70, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "config",
                position: (70, 17),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "networking",
                  position: (70, 24),
                 },
                 Raw {
                  content: "hostName",
                  position: (70, 35),
                 },
                ],
               },
               default: None,
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "defaultText",
                 position: (71, 7),
                },
               ],
              },
              FunctionApplication {
               function: Variable {
                identifier: "literalExpression",
                position: (71, 21),
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "config.networking.hostName",
                  },
                 ],
                 position: (71, 39),
                },
               ],
              },
             ),
            ],
            recursive: false,
            position: (61, 21),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "runnerGroup",
            position: (74, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (74, 19),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (75, 7),
                },
               ],
              },
              FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "types",
                 position: (75, 14),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "nullOr",
                   position: (75, 20),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "types",
                  position: (75, 27),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "str",
                    position: (75, 33),
                   },
                  ],
                 },
                 default: None,
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (76, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Name of the runner group to add this runner to (defaults to the default runner group).\n\nChanging this option triggers a new runner registration.\n",
                },
               ],
               position: (76, 21),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (81, 7),
                },
               ],
              },
              Variable {
               identifier: "null",
               position: (81, 17),
              },
             ),
            ],
            recursive: false,
            position: (74, 28),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "extraLabels",
            position: (84, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (84, 19),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (85, 7),
                },
               ],
              },
              FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "types",
                 position: (85, 14),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "listOf",
                   position: (85, 20),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "types",
                  position: (85, 27),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "str",
                    position: (85, 33),
                   },
                  ],
                 },
                 default: None,
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (86, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Extra labels in addition to the default (<literal>[\"self-hosted\", \"Linux\", \"X64\"]</literal>).\n\nChanging this option triggers a new runner registration.\n",
                },
               ],
               position: (86, 21),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "example",
                 position: (91, 7),
                },
               ],
              },
              FunctionApplication {
               function: Variable {
                identifier: "literalExpression",
                position: (91, 17),
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "[ \"nixos\" ]",
                  },
                 ],
                 position: (91, 35),
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (92, 7),
                },
               ],
              },
              List {
               elements: [],
               position: (92, 17),
              },
             ),
            ],
            recursive: false,
            position: (84, 28),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "replace",
            position: (95, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (95, 15),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (96, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (96, 14),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "bool",
                  position: (96, 20),
                 },
                ],
               },
               default: None,
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (97, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Replace any existing runner with the same name.\n\nWithout this flag, registering a new runner with the same name fails.\n",
                },
               ],
               position: (97, 21),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (102, 7),
                },
               ],
              },
              Variable {
               identifier: "false",
               position: (102, 17),
              },
             ),
            ],
            recursive: false,
            position: (95, 24),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "extraPackages",
            position: (105, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (105, 21),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (106, 7),
                },
               ],
              },
              FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "types",
                 position: (106, 14),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "listOf",
                   position: (106, 20),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "types",
                  position: (106, 27),
                 },
                 attribute_path: AttributePath {
                  attributes: [
                   Raw {
                    content: "package",
                    position: (106, 33),
                   },
                  ],
                 },
                 default: None,
                },
               ],
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (107, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Extra packages to add to <literal>PATH</literal> of the service to make them available to workflows.\n",
                },
               ],
               position: (107, 21),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (110, 7),
                },
               ],
              },
              List {
               elements: [],
               position: (110, 17),
              },
             ),
            ],
            recursive: false,
            position: (105, 30),
           },
          ],
         },
        ),
        KeyValue(
         AttributePath {
          attributes: [
           Raw {
            content: "package",
            position: (113, 5),
           },
          ],
         },
         FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (113, 15),
          },
          arguments: [
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "type",
                 position: (114, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (114, 14),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "package",
                  position: (114, 20),
                 },
                ],
               },
               default: None,
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (115, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "Which github-runner derivation to use.\n",
                },
               ],
               position: (115, 21),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "default",
                 position: (118, 7),
                },
               ],
              },
              PropertyAccess {
               expression: Variable {
                identifier: "pkgs",
                position: (118, 17),
               },
               attribute_path: AttributePath {
                attributes: [
                 Raw {
                  content: "github-runner",
                  position: (118, 22),
                 },
                ],
               },
               default: None,
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "defaultText",
                 position: (119, 7),
                },
               ],
              },
              FunctionApplication {
               function: Variable {
                identifier: "literalExpression",
                position: (119, 21),
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "pkgs.github-runner",
                  },
                 ],
                 position: (119, 39),
                },
               ],
              },
             ),
            ],
            recursive: false,
            position: (113, 24),
           },
          ],
         },
        ),
       ],
       recursive: false,
       position: (17, 36),
      },
     ),
     KeyValue(
      AttributePath {
       attributes: [
        Raw {
         content: "config",
         position: (123, 3),
        },
       ],
      },
      FunctionApplication {
       function: Variable {
        identifier: "mkIf",
        position: (123, 12),
       },
       arguments: [
        PropertyAccess {
         expression: Variable {
          identifier: "cfg",
          position: (123, 17),
         },
         attribute_path: AttributePath {
          attributes: [
           Raw {
            content: "enable",
            position: (123, 21),
           },
          ],
         },
         default: None,
        },
        Map {
         bindings: [
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "warnings",
              position: (124, 5),
             },
            ],
           },
           FunctionApplication {
            function: Variable {
             identifier: "optionals",
             position: (124, 16),
            },
            arguments: [
             FunctionApplication {
              function: Variable {
               identifier: "isStorePath",
               position: (124, 27),
              },
              arguments: [
               PropertyAccess {
                expression: Variable {
                 identifier: "cfg",
                 position: (124, 39),
                },
                attribute_path: AttributePath {
                 attributes: [
                  Raw {
                   content: "tokenFile",
                   position: (124, 43),
                  },
                 ],
                },
                default: None,
               },
              ],
             },
             List {
              elements: [
               String {
                parts: [
                 Raw {
                  content: "`services.github-runner.tokenFile` points to the Nix store and, therefore, is world-readable.\nConsider using a path outside of the Nix store to keep the token private.\n",
                 },
                ],
                position: (125, 7),
               },
              ],
              position: (124, 54),
             },
            ],
           },
          ),
          KeyValue(
           AttributePath {
            attributes: [
             Raw {
              content: "systemd",
              position: (131, 5),
             },
             Raw {
              content: "services",
              position: (131, 13),
             },
             Expression {
              expression: Variable {
               identifier: "svcName",
               position: (131, 24),
              },
             },
            ],
           },
           Map {
            bindings: [
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "description",
                 position: (132, 7),
                },
               ],
              },
              String {
               parts: [
                Raw {
                 content: "GitHub Actions runner",
                },
               ],
               position: (132, 21),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "wantedBy",
                 position: (134, 7),
                },
               ],
              },
              List {
               elements: [
                String {
                 parts: [
                  Raw {
                   content: "multi-user.target",
                  },
                 ],
                 position: (134, 20),
                },
               ],
               position: (134, 18),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "wants",
                 position: (135, 7),
                },
               ],
              },
              List {
               elements: [
                String {
                 parts: [
                  Raw {
                   content: "network-online.target",
                  },
                 ],
                 position: (135, 17),
                },
               ],
               position: (135, 15),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "after",
                 position: (136, 7),
                },
               ],
              },
              List {
               elements: [
                String {
                 parts: [
                  Raw {
                   content: "network.target",
                  },
                 ],
                 position: (136, 17),
                },
                String {
                 parts: [
                  Raw {
                   content: "network-online.target",
                  },
                 ],
                 position: (136, 34),
                },
               ],
               position: (136, 15),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "environment",
                 position: (138, 7),
                },
               ],
              },
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "HOME",
                    position: (139, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "runtimeDir",
                  position: (139, 16),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RUNNER_ROOT",
                    position: (140, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "runtimeDir",
                  position: (140, 23),
                 },
                ),
               ],
               recursive: false,
               position: (138, 21),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "path",
                 position: (143, 7),
                },
               ],
              },
              BinaryOperation {
               operator: Concatenation,
               operands: [
                With {
                 expression: Variable {
                  identifier: "pkgs",
                  position: (143, 20),
                 },
                 target: List {
                  elements: [
                   Variable {
                    identifier: "bash",
                    position: (144, 9),
                   },
                   Variable {
                    identifier: "coreutils",
                    position: (145, 9),
                   },
                   Variable {
                    identifier: "git",
                    position: (146, 9),
                   },
                   Variable {
                    identifier: "gnutar",
                    position: (147, 9),
                   },
                   Variable {
                    identifier: "gzip",
                    position: (148, 9),
                   },
                  ],
                  position: (143, 26),
                 },
                 position: (143, 15),
                },
                BinaryOperation {
                 operator: Concatenation,
                 operands: [
                  List {
                   elements: [
                    PropertyAccess {
                     expression: Variable {
                      identifier: "config",
                      position: (150, 9),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "nix",
                        position: (150, 16),
                       },
                       Raw {
                        content: "package",
                        position: (150, 20),
                       },
                      ],
                     },
                     default: None,
                    },
                   ],
                   position: (149, 13),
                  },
                  PropertyAccess {
                   expression: Variable {
                    identifier: "cfg",
                    position: (151, 12),
                   },
                   attribute_path: AttributePath {
                    attributes: [
                     Raw {
                      content: "extraPackages",
                      position: (151, 16),
                     },
                    ],
                   },
                   default: None,
                  },
                 ],
                 position: (151, 9),
                },
               ],
               position: (149, 10),
              },
             ),
             KeyValue(
              AttributePath {
               attributes: [
                Raw {
                 content: "serviceConfig",
                 position: (153, 7),
                },
               ],
              },
              Map {
               bindings: [
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ExecStart",
                    position: (154, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Expression {
                    expression: PropertyAccess {
                     expression: Variable {
                      identifier: "cfg",
                      position: (154, 24),
                     },
                     attribute_path: AttributePath {
                      attributes: [
                       Raw {
                        content: "package",
                        position: (154, 28),
                       },
                      ],
                     },
                     default: None,
                    },
                   },
                   Raw {
                    content: "/bin/runsvc.sh",
                   },
                  ],
                  position: (154, 21),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ExecStartPre",
                    position: (163, 9),
                   },
                  ],
                 },
                 LetIn {
                  bindings: [
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "writeScript",
                       position: (172, 13),
                      },
                     ],
                    },
                    Function {
                     argument: Some(
                      "name",
                     ),
                     arguments: FunctionArguments {
                      arguments: [],
                      ellipsis: false,
                     },
                     definition: Function {
                      argument: Some(
                       "lines",
                      ),
                      arguments: FunctionArguments {
                       arguments: [],
                       ellipsis: false,
                      },
                      definition: FunctionApplication {
                       function: PropertyAccess {
                        expression: Variable {
                         identifier: "pkgs",
                         position: (172, 40),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "writeShellScript",
                           position: (172, 45),
                          },
                         ],
                        },
                        default: None,
                       },
                       arguments: [
                        String {
                         parts: [
                          Expression {
                           expression: Variable {
                            identifier: "svcName",
                            position: (172, 65),
                           },
                          },
                          Raw {
                           content: "-",
                          },
                          Expression {
                           expression: Variable {
                            identifier: "name",
                            position: (172, 76),
                           },
                          },
                          Raw {
                           content: ".sh",
                          },
                         ],
                         position: (172, 62),
                        },
                        String {
                         parts: [
                          Raw {
                           content: "set -euo pipefail\n\nSTATE_DIRECTORY=\"$1\"\nRUNTIME_DIRECTORY=\"$2\"\nLOGS_DIRECTORY=\"$3\"\n\n",
                          },
                          Expression {
                           expression: Variable {
                            identifier: "lines",
                            position: (179, 17),
                           },
                          },
                          Raw {
                           content: "\n",
                          },
                         ],
                         position: (172, 86),
                        },
                       ],
                      },
                      position: (172, 33),
                     },
                     position: (172, 27),
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "currentConfigPath",
                       position: (181, 13),
                      },
                     ],
                    },
                    String {
                     parts: [
                      Raw {
                       content: "$STATE_DIRECTORY/.nixos-current-config.json",
                      },
                     ],
                     position: (181, 33),
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "runnerRegistrationConfig",
                       position: (182, 13),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "getAttrs",
                      position: (182, 40),
                     },
                     arguments: [
                      List {
                       elements: [
                        String {
                         parts: [
                          Raw {
                           content: "name",
                          },
                         ],
                         position: (182, 51),
                        },
                        String {
                         parts: [
                          Raw {
                           content: "tokenFile",
                          },
                         ],
                         position: (182, 58),
                        },
                        String {
                         parts: [
                          Raw {
                           content: "url",
                          },
                         ],
                         position: (182, 70),
                        },
                        String {
                         parts: [
                          Raw {
                           content: "runnerGroup",
                          },
                         ],
                         position: (182, 76),
                        },
                        String {
                         parts: [
                          Raw {
                           content: "extraLabels",
                          },
                         ],
                         position: (182, 90),
                        },
                       ],
                       position: (182, 49),
                      },
                      Variable {
                       identifier: "cfg",
                       position: (182, 106),
                      },
                     ],
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "newConfigPath",
                       position: (183, 13),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: PropertyAccess {
                      expression: Variable {
                       identifier: "builtins",
                       position: (183, 29),
                      },
                      attribute_path: AttributePath {
                       attributes: [
                        Raw {
                         content: "toFile",
                         position: (183, 38),
                        },
                       ],
                      },
                      default: None,
                     },
                     arguments: [
                      String {
                       parts: [
                        Expression {
                         expression: Variable {
                          identifier: "svcName",
                          position: (183, 48),
                         },
                        },
                        Raw {
                         content: "-config.json",
                        },
                       ],
                       position: (183, 45),
                      },
                      FunctionApplication {
                       function: PropertyAccess {
                        expression: Variable {
                         identifier: "builtins",
                         position: (183, 71),
                        },
                        attribute_path: AttributePath {
                         attributes: [
                          Raw {
                           content: "toJSON",
                           position: (183, 80),
                          },
                         ],
                        },
                        default: None,
                       },
                       arguments: [
                        Variable {
                         identifier: "runnerRegistrationConfig",
                         position: (183, 87),
                        },
                       ],
                      },
                     ],
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "newConfigTokenFilename",
                       position: (184, 13),
                      },
                     ],
                    },
                    String {
                     parts: [
                      Raw {
                       content: ".new-token",
                      },
                     ],
                     position: (184, 38),
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "runnerCredFiles",
                       position: (185, 13),
                      },
                     ],
                    },
                    List {
                     elements: [
                      String {
                       parts: [
                        Raw {
                         content: ".credentials",
                        },
                       ],
                       position: (186, 15),
                      },
                      String {
                       parts: [
                        Raw {
                         content: ".credentials_rsaparams",
                        },
                       ],
                       position: (187, 15),
                      },
                      String {
                       parts: [
                        Raw {
                         content: ".runner",
                        },
                       ],
                       position: (188, 15),
                      },
                     ],
                     position: (185, 31),
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "unconfigureRunner",
                       position: (190, 13),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "writeScript",
                      position: (190, 33),
                     },
                     arguments: [
                      String {
                       parts: [
                        Raw {
                         content: "unconfigure",
                        },
                       ],
                       position: (190, 45),
                      },
                      String {
                       parts: [
                        Raw {
                         content: "differs=\n# Set `differs = 1` if current and new runner config differ or if `currentConfigPath` does not exist\n",
                        },
                        Expression {
                         expression: PropertyAccess {
                          expression: Variable {
                           identifier: "pkgs",
                           position: (193, 17),
                          },
                          attribute_path: AttributePath {
                           attributes: [
                            Raw {
                             content: "diffutils",
                             position: (193, 22),
                            },
                           ],
                          },
                          default: None,
                         },
                        },
                        Raw {
                         content: "/bin/diff -q ",
                        },
                        Raw {
                         content: "'",
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigPath",
                          position: (193, 48),
                         },
                        },
                        Raw {
                         content: "' \"",
                        },
                        Expression {
                         expression: Variable {
                          identifier: "currentConfigPath",
                          position: (193, 67),
                         },
                        },
                        Raw {
                         content: "\" >/dev/null 2>&1 || differs=1\n# Also trigger a registration if the token content changed\n",
                        },
                        Expression {
                         expression: PropertyAccess {
                          expression: Variable {
                           identifier: "pkgs",
                           position: (195, 17),
                          },
                          attribute_path: AttributePath {
                           attributes: [
                            Raw {
                             content: "diffutils",
                             position: (195, 22),
                            },
                           ],
                          },
                          default: None,
                         },
                        },
                        Raw {
                         content: "/bin/diff -q \\\n  \"$STATE_DIRECTORY\"/",
                        },
                        Expression {
                         expression: Variable {
                          identifier: "currentConfigTokenFilename",
                          position: (196, 38),
                         },
                        },
                        Raw {
                         content: " \\\n  ",
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (197, 19),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (197, 34),
                            },
                            attribute_path: AttributePath {
                             attributes: [
                              Raw {
                               content: "tokenFile",
                               position: (197, 38),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n  >/dev/null 2>&1 || differs=1\n\nif [[ -n \"$differs\" ]]; then\n  echo \"Config has changed, removing old runner state.\"\n  echo \"The old runner will still appear in the GitHub Actions UI.\" \\\n    \"You have to remove it manually.\"\n  find \"$STATE_DIRECTORY/\" -mindepth 1 -delete\n\n  # Copy the configured token file to the state dir and allow the service user to read the file\n  install --mode=666 ",
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (207, 38),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (207, 53),
                            },
                            attribute_path: AttributePath {
                             attributes: [
                              Raw {
                               content: "tokenFile",
                               position: (207, 57),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \"$STATE_DIRECTORY/",
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigTokenFilename",
                          position: (207, 88),
                         },
                        },
                        Raw {
                         content: "\"\n  # Also copy current file to allow for a diff on the next start\n  install --mode=600 ",
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (209, 38),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (209, 53),
                            },
                            attribute_path: AttributePath {
                             attributes: [
                              Raw {
                               content: "tokenFile",
                               position: (209, 57),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \"$STATE_DIRECTORY/",
                        },
                        Expression {
                         expression: Variable {
                          identifier: "currentConfigTokenFilename",
                          position: (209, 88),
                         },
                        },
                        Raw {
                         content: "\"\nfi\n",
                        },
                       ],
                       position: (190, 59),
                      },
                     ],
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "configureRunner",
                       position: (212, 13),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "writeScript",
                      position: (212, 31),
                     },
                     arguments: [
                      String {
                       parts: [
                        Raw {
                         content: "configure",
                        },
                       ],
                       position: (212, 43),
                      },
                      String {
                       parts: [
                        Raw {
                         content: "if [[ -e \"$STATE_DIRECTORY/",
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigTokenFilename",
                          position: (213, 44),
                         },
                        },
                        Raw {
                         content: "\" ]]; then\n  echo \"Configuring GitHub Actions Runner\"\n\n  token=$(< \"$STATE_DIRECTORY\"/",
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigTokenFilename",
                          position: (216, 48),
                         },
                        },
                        Raw {
                         content: ")\n  RUNNER_ROOT=\"$STATE_DIRECTORY\" ",
                        },
                        Expression {
                         expression: PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (217, 50),
                          },
                          attribute_path: AttributePath {
                           attributes: [
                            Raw {
                             content: "package",
                             position: (217, 54),
                            },
                           ],
                          },
                          default: None,
                         },
                        },
                        Raw {
                         content: "/bin/config.sh \\\n    --unattended \\\n    --disableupdate \\\n    --work \"$RUNTIME_DIRECTORY\" \\\n    --url ",
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (221, 27),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (221, 42),
                            },
                            attribute_path: AttributePath {
                             attributes: [
                              Raw {
                               content: "url",
                               position: (221, 46),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n    --token \"$token\" \\\n    --labels ",
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (223, 30),
                          },
                          arguments: [
                           FunctionApplication {
                            function: Variable {
                             identifier: "concatStringsSep",
                             position: (223, 46),
                            },
                            arguments: [
                             String {
                              parts: [
                               Raw {
                                content: ",",
                               },
                              ],
                              position: (223, 63),
                             },
                             PropertyAccess {
                              expression: Variable {
                               identifier: "cfg",
                               position: (223, 67),
                              },
                              attribute_path: AttributePath {
                               attributes: [
                                Raw {
                                 content: "extraLabels",
                                 position: (223, 71),
                                },
                               ],
                              },
                              default: None,
                             },
                            ],
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n    --name ",
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (224, 28),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (224, 43),
                            },
                            attribute_path: AttributePath {
                             attributes: [
                              Raw {
                               content: "name",
                               position: (224, 47),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n    ",
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "optionalString",
                           position: (225, 21),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (225, 36),
                            },
                            attribute_path: AttributePath {
                             attributes: [
                              Raw {
                               content: "replace",
                               position: (225, 40),
                              },
                             ],
                            },
                            default: None,
                           },
                           String {
                            parts: [
                             Raw {
                              content: "--replace",
                             },
                            ],
                            position: (225, 48),
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n    ",
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "optionalString",
                           position: (226, 21),
                          },
                          arguments: [
                           BinaryOperation {
                            operator: NotEqualTo,
                            operands: [
                             PropertyAccess {
                              expression: Variable {
                               identifier: "cfg",
                               position: (226, 37),
                              },
                              attribute_path: AttributePath {
                               attributes: [
                                Raw {
                                 content: "runnerGroup",
                                 position: (226, 41),
                                },
                               ],
                              },
                              default: None,
                             },
                             Variable {
                              identifier: "null",
                              position: (226, 56),
                             },
                            ],
                            position: (226, 53),
                           },
                           String {
                            parts: [
                             Raw {
                              content: "--runnergroup ",
                             },
                             Expression {
                              expression: FunctionApplication {
                               function: Variable {
                                identifier: "escapeShellArg",
                                position: (226, 79),
                               },
                               arguments: [
                                PropertyAccess {
                                 expression: Variable {
                                  identifier: "cfg",
                                  position: (226, 94),
                                 },
                                 attribute_path: AttributePath {
                                  attributes: [
                                   Raw {
                                    content: "runnerGroup",
                                    position: (226, 98),
                                   },
                                  ],
                                 },
                                 default: None,
                                },
                               ],
                              },
                             },
                            ],
                            position: (226, 62),
                           },
                          ],
                         },
                        },
                        Raw {
                         content: "\n\n  # Move the automatically created _diag dir to the logs dir\n  mkdir -p  \"$STATE_DIRECTORY/_diag\"\n  cp    -r  \"$STATE_DIRECTORY/_diag/.\" \"$LOGS_DIRECTORY/\"\n  rm    -rf \"$STATE_DIRECTORY/_diag/\"\n\n  # Cleanup token from config\n  rm \"$STATE_DIRECTORY/",
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigTokenFilename",
                          position: (234, 40),
                         },
                        },
                        Raw {
                         content: "\"\n\n  # Symlink to new config\n  ln -s ",
                        },
                        Raw {
                         content: "'",
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigPath",
                          position: (237, 26),
                         },
                        },
                        Raw {
                         content: "' \"",
                        },
                        Expression {
                         expression: Variable {
                          identifier: "currentConfigPath",
                          position: (237, 45),
                         },
                        },
                        Raw {
                         content: "\"\nfi\n",
                        },
                       ],
                       position: (212, 55),
                      },
                     ],
                    },
                   ),
                   KeyValue(
                    AttributePath {
                     attributes: [
                      Raw {
                       content: "setupRuntimeDir",
                       position: (240, 13),
                      },
                     ],
                    },
                    FunctionApplication {
                     function: Variable {
                      identifier: "writeScript",
                      position: (240, 31),
                     },
                     arguments: [
                      String {
                       parts: [
                        Raw {
                         content: "setup-runtime-dirs",
                        },
                       ],
                       position: (240, 43),
                      },
                      String {
                       parts: [
                        Raw {
                         content: "# Link _diag dir\nln -s \"$LOGS_DIRECTORY\" \"$RUNTIME_DIRECTORY/_diag\"\n\n# Link the runner credentials to the runtime dir\nln -s \"$STATE_DIRECTORY\"/{",
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: PropertyAccess {
                           expression: Variable {
                            identifier: "lib",
                            position: (245, 43),
                           },
                           attribute_path: AttributePath {
                            attributes: [
                             Raw {
                              content: "concatStringsSep",
                              position: (245, 47),
                             },
                            ],
                           },
                           default: None,
                          },
                          arguments: [
                           String {
                            parts: [
                             Raw {
                              content: ",",
                             },
                            ],
                            position: (245, 64),
                           },
                           Variable {
                            identifier: "runnerCredFiles",
                            position: (245, 68),
                           },
                          ],
                         },
                        },
                        Raw {
                         content: "} \"$RUNTIME_DIRECTORY/\"\n",
                        },
                       ],
                       position: (240, 64),
                      },
                     ],
                    },
                   ),
                  ],
                  target: FunctionApplication {
                   function: Variable {
                    identifier: "map",
                    position: (248, 11),
                   },
                   arguments: [
                    Function {
                     argument: Some(
                      "x",
                     ),
                     arguments: FunctionArguments {
                      arguments: [],
                      ellipsis: false,
                     },
                     definition: String {
                      parts: [
                       Expression {
                        expression: Variable {
                         identifier: "x",
                         position: (248, 22),
                        },
                       },
                       Raw {
                        content: " ",
                       },
                       Expression {
                        expression: FunctionApplication {
                         function: Variable {
                          identifier: "escapeShellArgs",
                          position: (248, 27),
                         },
                         arguments: [
                          List {
                           elements: [
                            Variable {
                             identifier: "stateDir",
                             position: (248, 45),
                            },
                            Variable {
                             identifier: "runtimeDir",
                             position: (248, 54),
                            },
                            Variable {
                             identifier: "logsDir",
                             position: (248, 65),
                            },
                           ],
                           position: (248, 43),
                          },
                         ],
                        },
                       },
                      ],
                      position: (248, 19),
                     },
                     position: (248, 16),
                    },
                    List {
                     elements: [
                      String {
                       parts: [
                        Raw {
                         content: "+",
                        },
                        Expression {
                         expression: Variable {
                          identifier: "unconfigureRunner",
                          position: (249, 17),
                         },
                        },
                       ],
                       position: (249, 13),
                      },
                      Variable {
                       identifier: "configureRunner",
                       position: (250, 13),
                      },
                      Variable {
                       identifier: "setupRuntimeDir",
                       position: (251, 13),
                      },
                     ],
                     position: (248, 78),
                    },
                   ],
                  },
                  position: (164, 11),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "LogsDirectory",
                    position: (255, 9),
                   },
                  ],
                 },
                 List {
                  elements: [
                   Variable {
                    identifier: "systemdDir",
                    position: (255, 27),
                   },
                  ],
                  position: (255, 25),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RuntimeDirectory",
                    position: (257, 9),
                   },
                  ],
                 },
                 List {
                  elements: [
                   Variable {
                    identifier: "systemdDir",
                    position: (257, 30),
                   },
                  ],
                  position: (257, 28),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "StateDirectory",
                    position: (259, 9),
                   },
                  ],
                 },
                 List {
                  elements: [
                   Variable {
                    identifier: "systemdDir",
                    position: (259, 28),
                   },
                  ],
                  position: (259, 26),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "StateDirectoryMode",
                    position: (260, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "0700",
                   },
                  ],
                  position: (260, 30),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "WorkingDirectory",
                    position: (261, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "runtimeDir",
                  position: (261, 28),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "InaccessiblePaths",
                    position: (263, 9),
                   },
                  ],
                 },
                 List {
                  elements: [
                   PropertyAccess {
                    expression: Variable {
                     identifier: "cfg",
                     position: (265, 11),
                    },
                    attribute_path: AttributePath {
                     attributes: [
                      Raw {
                       content: "tokenFile",
                       position: (265, 15),
                      },
                     ],
                    },
                    default: None,
                   },
                   String {
                    parts: [
                     Expression {
                      expression: Variable {
                       identifier: "stateDir",
                       position: (267, 14),
                      },
                     },
                     Raw {
                      content: "/",
                     },
                     Expression {
                      expression: Variable {
                       identifier: "currentConfigTokenFilename",
                       position: (267, 26),
                      },
                     },
                    ],
                    position: (267, 11),
                   },
                  ],
                  position: (263, 29),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "DynamicUser",
                    position: (271, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (271, 23),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "KillMode",
                    position: (273, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "process",
                   },
                  ],
                  position: (273, 20),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "KillSignal",
                    position: (274, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "SIGTERM",
                   },
                  ],
                  position: (274, 22),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "AmbientCapabilities",
                    position: (279, 9),
                   },
                  ],
                 },
                 String {
                  parts: [],
                  position: (279, 31),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "CapabilityBoundingSet",
                    position: (280, 9),
                   },
                  ],
                 },
                 String {
                  parts: [],
                  position: (280, 33),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "DeviceAllow",
                    position: (282, 9),
                   },
                  ],
                 },
                 String {
                  parts: [],
                  position: (282, 23),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "LockPersonality",
                    position: (283, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (283, 27),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "NoNewPrivileges",
                    position: (284, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (284, 27),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "PrivateDevices",
                    position: (285, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (285, 26),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "PrivateMounts",
                    position: (286, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (286, 25),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "PrivateTmp",
                    position: (287, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (287, 22),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "PrivateUsers",
                    position: (288, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (288, 24),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectClock",
                    position: (289, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (289, 24),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectControlGroups",
                    position: (290, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (290, 32),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectHome",
                    position: (291, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (291, 23),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectHostname",
                    position: (292, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (292, 27),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectKernelLogs",
                    position: (293, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (293, 29),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectKernelModules",
                    position: (294, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (294, 32),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectKernelTunables",
                    position: (295, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (295, 33),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "ProtectSystem",
                    position: (296, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "strict",
                   },
                  ],
                  position: (296, 25),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RemoveIPC",
                    position: (297, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (297, 21),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RestrictNamespaces",
                    position: (298, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (298, 30),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RestrictRealtime",
                    position: (299, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (299, 28),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "RestrictSUIDSGID",
                    position: (300, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "true",
                  position: (300, 28),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "UMask",
                    position: (301, 9),
                   },
                  ],
                 },
                 String {
                  parts: [
                   Raw {
                    content: "0066",
                   },
                  ],
                  position: (301, 17),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "PrivateNetwork",
                    position: (304, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "false",
                  position: (304, 26),
                 },
                ),
                KeyValue(
                 AttributePath {
                  attributes: [
                   Raw {
                    content: "MemoryDenyWriteExecute",
                    position: (306, 9),
                   },
                  ],
                 },
                 Variable {
                  identifier: "false",
                  position: (306, 34),
                 },
                ),
               ],
               recursive: true,
               position: (153, 23),
              },
             ),
            ],
            recursive: false,
            position: (131, 35),
           },
          ),
         ],
         recursive: false,
         position: (123, 28),
        },
       ],
      },
     ),
    ],
    recursive: false,
    position: (16, 1),
   },
   position: (3, 1),
  },
  position: (2, 1),
 },
 position: (1, 1),
}