---
Function {
 argument: Destructured {
  identifier: None,
  arguments: [
   DestructuredArgument {
    identifier: "config",
    default: None,
   },
   DestructuredArgument {
    identifier: "pkgs",
    default: None,
   },
   DestructuredArgument {
    identifier: "lib",
    default: None,
   },
  ],
  ellipsis: true,
 },
 definition: With {
  expression: Variable {
   identifier: "lib",
   position: (2, 6),
  },
  target: LetIn {
   bindings: [
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "cfg",
        position: (4, 3),
       },
      ],
     },
     to: PropertyAccess {
      expression: Variable {
       identifier: "config",
       position: (4, 9),
      },
      attribute_path: AttributePath {
       parts: [
        Raw {
         content: "services",
         position: (4, 16),
        },
        Raw {
         content: "github-runner",
         position: (4, 25),
        },
       ],
      },
      default: None,
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "svcName",
        position: (5, 3),
       },
      ],
     },
     to: String {
      parts: [
       Raw {
        content: "github-runner",
        position: (5, 14),
       },
      ],
      position: (5, 13),
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "systemdDir",
        position: (6, 3),
       },
      ],
     },
     to: String {
      parts: [
       Expression {
        expression: Variable {
         identifier: "svcName",
         position: (6, 19),
        },
       },
       Raw {
        content: "/",
        position: (6, 27),
       },
       Expression {
        expression: PropertyAccess {
         expression: Variable {
          identifier: "cfg",
          position: (6, 30),
         },
         attribute_path: AttributePath {
          parts: [
           Raw {
            content: "name",
            position: (6, 34),
           },
          ],
         },
         default: None,
        },
       },
      ],
      position: (6, 16),
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "runtimeDir",
        position: (8, 3),
       },
      ],
     },
     to: String {
      parts: [
       Raw {
        content: "%t/",
        position: (8, 17),
       },
       Expression {
        expression: Variable {
         identifier: "systemdDir",
         position: (8, 22),
        },
       },
      ],
      position: (8, 16),
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "stateDir",
        position: (10, 3),
       },
      ],
     },
     to: String {
      parts: [
       Raw {
        content: "%S/",
        position: (10, 15),
       },
       Expression {
        expression: Variable {
         identifier: "systemdDir",
         position: (10, 20),
        },
       },
      ],
      position: (10, 14),
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "logsDir",
        position: (12, 3),
       },
      ],
     },
     to: String {
      parts: [
       Raw {
        content: "%L/",
        position: (12, 14),
       },
       Expression {
        expression: Variable {
         identifier: "systemdDir",
         position: (12, 19),
        },
       },
      ],
      position: (12, 13),
     },
    },
    Binding {
     from: AttributePath {
      parts: [
       Raw {
        content: "currentConfigTokenFilename",
        position: (14, 3),
       },
      ],
     },
     to: String {
      parts: [
       Raw {
        content: ".current-token",
        position: (14, 33),
       },
      ],
      position: (14, 32),
     },
    },
   ],
   target: Map {
    bindings: [
     Binding {
      from: AttributePath {
       parts: [
        Raw {
         content: "options",
         position: (17, 3),
        },
        Raw {
         content: "services",
         position: (17, 11),
        },
        Raw {
         content: "github-runner",
         position: (17, 20),
        },
       ],
      },
      to: Map {
       bindings: [
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "enable",
            position: (18, 5),
           },
          ],
         },
         to: FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (18, 14),
          },
          arguments: [
           Map {
            bindings: [
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "default",
                 position: (19, 7),
                },
               ],
              },
              to: Variable {
               identifier: "false",
               position: (19, 17),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "example",
                 position: (20, 7),
                },
               ],
              },
              to: Variable {
               identifier: "true",
               position: (20, 17),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "description",
                 position: (21, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "Whether to enable GitHub Actions runner.\n\nNote: GitHub recommends using self-hosted runners with private repositories only. Learn more here:\n<link xlink:href=\"https://docs.github.com/en/actions/hosting-your-own-runners/about-self-hosted-runners\"\n>About self-hosted runners</link>.\n",
                 position: (22, 1),
                },
               ],
               position: (21, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "type",
                 position: (28, 7),
                },
               ],
              },
              to: PropertyAccess {
               expression: Variable {
                identifier: "lib",
                position: (28, 14),
               },
               attribute_path: AttributePath {
                parts: [
                 Raw {
                  content: "types",
                  position: (28, 18),
                 },
                 Raw {
                  content: "bool",
                  position: (28, 24),
                 },
                ],
               },
               default: None,
              },
             },
            ],
            recursive: false,
            position: (18, 23),
           },
          ],
         },
        },
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "url",
            position: (31, 5),
           },
          ],
         },
         to: FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (31, 11),
          },
          arguments: [
           Map {
            bindings: [
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "type",
                 position: (32, 7),
                },
               ],
              },
              to: PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (32, 14),
               },
               attribute_path: AttributePath {
                parts: [
                 Raw {
                  content: "str",
                  position: (32, 20),
                 },
                ],
               },
               default: None,
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "description",
                 position: (33, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "Repository to add the runner to.\n\nChanging this option triggers a new runner registration.\n\nIMPORTANT: If your token is org-wide (not per repository), you need to\nprovide a github org link, not a single repository, so do it like this\n<literal>https://github.com/nixos</literal>, not like this\n<literal>https://github.com/nixos/nixpkgs</literal>.\nOtherwise, you are going to get a <literal>404 NotFound</literal>\nfrom <literal>POST https://api.github.com/actions/runner-registration</literal>\nin the configure script.\n",
                 position: (34, 1),
                },
               ],
               position: (33, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "example",
                 position: (46, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "https://github.com/nixos/nixpkgs",
                 position: (46, 18),
                },
               ],
               position: (46, 17),
              },
             },
            ],
            recursive: false,
            position: (31, 20),
           },
          ],
         },
        },
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "tokenFile",
            position: (49, 5),
           },
          ],
         },
         to: FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (49, 17),
          },
          arguments: [
           Map {
            bindings: [
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "type",
                 position: (50, 7),
                },
               ],
              },
              to: PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (50, 14),
               },
               attribute_path: AttributePath {
                parts: [
                 Raw {
                  content: "path",
                  position: (50, 20),
                 },
                ],
               },
               default: None,
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "description",
                 position: (51, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "The full path to a file which contains the runner registration token.\nThe file should contain exactly one line with the token without any newline.\nThe token can be used to re-register a runner of the same name but is time-limited.\n\nChanging this option or the file's content triggers a new runner registration.\n",
                 position: (52, 1),
                },
               ],
               position: (51, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "example",
                 position: (58, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "/run/secrets/github-runner/nixos.token",
                 position: (58, 18),
                },
               ],
               position: (58, 17),
              },
             },
            ],
            recursive: false,
            position: (49, 26),
           },
          ],
         },
        },
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "name",
            position: (61, 5),
           },
          ],
         },
         to: FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (61, 12),
          },
          arguments: [
           Map {
            bindings: [
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "type",
                 position: (63, 7),
                },
               ],
              },
              to: FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "types",
                 position: (63, 14),
                },
                attribute_path: AttributePath {
                 parts: [
                  Raw {
                   content: "strMatching",
                   position: (63, 20),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "^$|^[[:alnum:]]([[:alnum:]_-]{0,61}[[:alnum:]])?$",
                   position: (63, 33),
                  },
                 ],
                 position: (63, 32),
                },
               ],
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "description",
                 position: (64, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "Name of the runner to configure. Defaults to the hostname.\n\nChanging this option triggers a new runner registration.\n",
                 position: (65, 1),
                },
               ],
               position: (64, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "example",
                 position: (69, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "nixos",
                 position: (69, 18),
                },
               ],
               position: (69, 17),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "default",
                 position: (70, 7),
                },
               ],
              },
              to: PropertyAccess {
               expression: Variable {
                identifier: "config",
                position: (70, 17),
               },
               attribute_path: AttributePath {
                parts: [
                 Raw {
                  content: "networking",
                  position: (70, 24),
                 },
                 Raw {
                  content: "hostName",
                  position: (70, 35),
                 },
                ],
               },
               default: None,
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "defaultText",
                 position: (71, 7),
                },
               ],
              },
              to: FunctionApplication {
               function: Variable {
                identifier: "literalExpression",
                position: (71, 21),
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "config.networking.hostName",
                   position: (71, 40),
                  },
                 ],
                 position: (71, 39),
                },
               ],
              },
             },
            ],
            recursive: false,
            position: (61, 21),
           },
          ],
         },
        },
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "runnerGroup",
            position: (74, 5),
           },
          ],
         },
         to: FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (74, 19),
          },
          arguments: [
           Map {
            bindings: [
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "type",
                 position: (75, 7),
                },
               ],
              },
              to: FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "types",
                 position: (75, 14),
                },
                attribute_path: AttributePath {
                 parts: [
                  Raw {
                   content: "nullOr",
                   position: (75, 20),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "types",
                  position: (75, 27),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "str",
                    position: (75, 33),
                   },
                  ],
                 },
                 default: None,
                },
               ],
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "description",
                 position: (76, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "Name of the runner group to add this runner to (defaults to the default runner group).\n\nChanging this option triggers a new runner registration.\n",
                 position: (77, 1),
                },
               ],
               position: (76, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "default",
                 position: (81, 7),
                },
               ],
              },
              to: Variable {
               identifier: "null",
               position: (81, 17),
              },
             },
            ],
            recursive: false,
            position: (74, 28),
           },
          ],
         },
        },
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "extraLabels",
            position: (84, 5),
           },
          ],
         },
         to: FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (84, 19),
          },
          arguments: [
           Map {
            bindings: [
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "type",
                 position: (85, 7),
                },
               ],
              },
              to: FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "types",
                 position: (85, 14),
                },
                attribute_path: AttributePath {
                 parts: [
                  Raw {
                   content: "listOf",
                   position: (85, 20),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "types",
                  position: (85, 27),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "str",
                    position: (85, 33),
                   },
                  ],
                 },
                 default: None,
                },
               ],
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "description",
                 position: (86, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "Extra labels in addition to the default (<literal>[\"self-hosted\", \"Linux\", \"X64\"]</literal>).\n\nChanging this option triggers a new runner registration.\n",
                 position: (87, 1),
                },
               ],
               position: (86, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "example",
                 position: (91, 7),
                },
               ],
              },
              to: FunctionApplication {
               function: Variable {
                identifier: "literalExpression",
                position: (91, 17),
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "[ \"nixos\" ]",
                   position: (91, 37),
                  },
                 ],
                 position: (91, 35),
                },
               ],
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "default",
                 position: (92, 7),
                },
               ],
              },
              to: List {
               elements: [],
               position: (92, 17),
              },
             },
            ],
            recursive: false,
            position: (84, 28),
           },
          ],
         },
        },
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "replace",
            position: (95, 5),
           },
          ],
         },
         to: FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (95, 15),
          },
          arguments: [
           Map {
            bindings: [
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "type",
                 position: (96, 7),
                },
               ],
              },
              to: PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (96, 14),
               },
               attribute_path: AttributePath {
                parts: [
                 Raw {
                  content: "bool",
                  position: (96, 20),
                 },
                ],
               },
               default: None,
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "description",
                 position: (97, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "Replace any existing runner with the same name.\n\nWithout this flag, registering a new runner with the same name fails.\n",
                 position: (98, 1),
                },
               ],
               position: (97, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "default",
                 position: (102, 7),
                },
               ],
              },
              to: Variable {
               identifier: "false",
               position: (102, 17),
              },
             },
            ],
            recursive: false,
            position: (95, 24),
           },
          ],
         },
        },
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "extraPackages",
            position: (105, 5),
           },
          ],
         },
         to: FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (105, 21),
          },
          arguments: [
           Map {
            bindings: [
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "type",
                 position: (106, 7),
                },
               ],
              },
              to: FunctionApplication {
               function: PropertyAccess {
                expression: Variable {
                 identifier: "types",
                 position: (106, 14),
                },
                attribute_path: AttributePath {
                 parts: [
                  Raw {
                   content: "listOf",
                   position: (106, 20),
                  },
                 ],
                },
                default: None,
               },
               arguments: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "types",
                  position: (106, 27),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "package",
                    position: (106, 33),
                   },
                  ],
                 },
                 default: None,
                },
               ],
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "description",
                 position: (107, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "Extra packages to add to <literal>PATH</literal> of the service to make them available to workflows.\n",
                 position: (108, 1),
                },
               ],
               position: (107, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "default",
                 position: (110, 7),
                },
               ],
              },
              to: List {
               elements: [],
               position: (110, 17),
              },
             },
            ],
            recursive: false,
            position: (105, 30),
           },
          ],
         },
        },
        Binding {
         from: AttributePath {
          parts: [
           Raw {
            content: "package",
            position: (113, 5),
           },
          ],
         },
         to: FunctionApplication {
          function: Variable {
           identifier: "mkOption",
           position: (113, 15),
          },
          arguments: [
           Map {
            bindings: [
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "type",
                 position: (114, 7),
                },
               ],
              },
              to: PropertyAccess {
               expression: Variable {
                identifier: "types",
                position: (114, 14),
               },
               attribute_path: AttributePath {
                parts: [
                 Raw {
                  content: "package",
                  position: (114, 20),
                 },
                ],
               },
               default: None,
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "description",
                 position: (115, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "Which github-runner derivation to use.\n",
                 position: (116, 1),
                },
               ],
               position: (115, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "default",
                 position: (118, 7),
                },
               ],
              },
              to: PropertyAccess {
               expression: Variable {
                identifier: "pkgs",
                position: (118, 17),
               },
               attribute_path: AttributePath {
                parts: [
                 Raw {
                  content: "github-runner",
                  position: (118, 22),
                 },
                ],
               },
               default: None,
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "defaultText",
                 position: (119, 7),
                },
               ],
              },
              to: FunctionApplication {
               function: Variable {
                identifier: "literalExpression",
                position: (119, 21),
               },
               arguments: [
                String {
                 parts: [
                  Raw {
                   content: "pkgs.github-runner",
                   position: (119, 40),
                  },
                 ],
                 position: (119, 39),
                },
               ],
              },
             },
            ],
            recursive: false,
            position: (113, 24),
           },
          ],
         },
        },
       ],
       recursive: false,
       position: (17, 36),
      },
     },
     Binding {
      from: AttributePath {
       parts: [
        Raw {
         content: "config",
         position: (123, 3),
        },
       ],
      },
      to: FunctionApplication {
       function: Variable {
        identifier: "mkIf",
        position: (123, 12),
       },
       arguments: [
        PropertyAccess {
         expression: Variable {
          identifier: "cfg",
          position: (123, 17),
         },
         attribute_path: AttributePath {
          parts: [
           Raw {
            content: "enable",
            position: (123, 21),
           },
          ],
         },
         default: None,
        },
        Map {
         bindings: [
          Binding {
           from: AttributePath {
            parts: [
             Raw {
              content: "warnings",
              position: (124, 5),
             },
            ],
           },
           to: FunctionApplication {
            function: Variable {
             identifier: "optionals",
             position: (124, 16),
            },
            arguments: [
             Parentheses {
              expression: FunctionApplication {
               function: Variable {
                identifier: "isStorePath",
                position: (124, 27),
               },
               arguments: [
                PropertyAccess {
                 expression: Variable {
                  identifier: "cfg",
                  position: (124, 39),
                 },
                 attribute_path: AttributePath {
                  parts: [
                   Raw {
                    content: "tokenFile",
                    position: (124, 43),
                   },
                  ],
                 },
                 default: None,
                },
               ],
              },
              position: (124, 26),
             },
             List {
              elements: [
               String {
                parts: [
                 Raw {
                  content: "`services.github-runner.tokenFile` points to the Nix store and, therefore, is world-readable.\nConsider using a path outside of the Nix store to keep the token private.\n",
                  position: (126, 1),
                 },
                ],
                position: (125, 7),
               },
              ],
              position: (124, 54),
             },
            ],
           },
          },
          Binding {
           from: AttributePath {
            parts: [
             Raw {
              content: "systemd",
              position: (131, 5),
             },
             Raw {
              content: "services",
              position: (131, 13),
             },
             Expression {
              expression: Variable {
               identifier: "svcName",
               position: (131, 24),
              },
             },
            ],
           },
           to: Map {
            bindings: [
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "description",
                 position: (132, 7),
                },
               ],
              },
              to: String {
               parts: [
                Raw {
                 content: "GitHub Actions runner",
                 position: (132, 22),
                },
               ],
               position: (132, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "wantedBy",
                 position: (134, 7),
                },
               ],
              },
              to: List {
               elements: [
                String {
                 parts: [
                  Raw {
                   content: "multi-user.target",
                   position: (134, 21),
                  },
                 ],
                 position: (134, 20),
                },
               ],
               position: (134, 18),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "wants",
                 position: (135, 7),
                },
               ],
              },
              to: List {
               elements: [
                String {
                 parts: [
                  Raw {
                   content: "network-online.target",
                   position: (135, 18),
                  },
                 ],
                 position: (135, 17),
                },
               ],
               position: (135, 15),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "after",
                 position: (136, 7),
                },
               ],
              },
              to: List {
               elements: [
                String {
                 parts: [
                  Raw {
                   content: "network.target",
                   position: (136, 18),
                  },
                 ],
                 position: (136, 17),
                },
                String {
                 parts: [
                  Raw {
                   content: "network-online.target",
                   position: (136, 35),
                  },
                 ],
                 position: (136, 34),
                },
               ],
               position: (136, 15),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "environment",
                 position: (138, 7),
                },
               ],
              },
              to: Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "HOME",
                    position: (139, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "runtimeDir",
                  position: (139, 16),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "RUNNER_ROOT",
                    position: (140, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "runtimeDir",
                  position: (140, 23),
                 },
                },
               ],
               recursive: false,
               position: (138, 21),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "path",
                 position: (143, 7),
                },
               ],
              },
              to: BinaryOperation {
               operator: Concatenation,
               operands: [
                Parentheses {
                 expression: With {
                  expression: Variable {
                   identifier: "pkgs",
                   position: (143, 20),
                  },
                  target: List {
                   elements: [
                    Variable {
                     identifier: "bash",
                     position: (144, 9),
                    },
                    Variable {
                     identifier: "coreutils",
                     position: (145, 9),
                    },
                    Variable {
                     identifier: "git",
                     position: (146, 9),
                    },
                    Variable {
                     identifier: "gnutar",
                     position: (147, 9),
                    },
                    Variable {
                     identifier: "gzip",
                     position: (148, 9),
                    },
                   ],
                   position: (143, 26),
                  },
                  position: (143, 15),
                 },
                 position: (143, 14),
                },
                BinaryOperation {
                 operator: Concatenation,
                 operands: [
                  List {
                   elements: [
                    PropertyAccess {
                     expression: Variable {
                      identifier: "config",
                      position: (150, 9),
                     },
                     attribute_path: AttributePath {
                      parts: [
                       Raw {
                        content: "nix",
                        position: (150, 16),
                       },
                       Raw {
                        content: "package",
                        position: (150, 20),
                       },
                      ],
                     },
                     default: None,
                    },
                   ],
                   position: (149, 13),
                  },
                  PropertyAccess {
                   expression: Variable {
                    identifier: "cfg",
                    position: (151, 12),
                   },
                   attribute_path: AttributePath {
                    parts: [
                     Raw {
                      content: "extraPackages",
                      position: (151, 16),
                     },
                    ],
                   },
                   default: None,
                  },
                 ],
                 position: (151, 9),
                },
               ],
               position: (149, 10),
              },
             },
             Binding {
              from: AttributePath {
               parts: [
                Raw {
                 content: "serviceConfig",
                 position: (153, 7),
                },
               ],
              },
              to: Map {
               bindings: [
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ExecStart",
                    position: (154, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Expression {
                    expression: PropertyAccess {
                     expression: Variable {
                      identifier: "cfg",
                      position: (154, 24),
                     },
                     attribute_path: AttributePath {
                      parts: [
                       Raw {
                        content: "package",
                        position: (154, 28),
                       },
                      ],
                     },
                     default: None,
                    },
                   },
                   Raw {
                    content: "/bin/runsvc.sh",
                    position: (154, 36),
                   },
                  ],
                  position: (154, 21),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ExecStartPre",
                    position: (163, 9),
                   },
                  ],
                 },
                 to: LetIn {
                  bindings: [
                   Binding {
                    from: AttributePath {
                     parts: [
                      Raw {
                       content: "writeScript",
                       position: (172, 13),
                      },
                     ],
                    },
                    to: Function {
                     argument: Simple {
                      identifier: "name",
                     },
                     definition: Function {
                      argument: Simple {
                       identifier: "lines",
                      },
                      definition: FunctionApplication {
                       function: PropertyAccess {
                        expression: Variable {
                         identifier: "pkgs",
                         position: (172, 40),
                        },
                        attribute_path: AttributePath {
                         parts: [
                          Raw {
                           content: "writeShellScript",
                           position: (172, 45),
                          },
                         ],
                        },
                        default: None,
                       },
                       arguments: [
                        String {
                         parts: [
                          Expression {
                           expression: Variable {
                            identifier: "svcName",
                            position: (172, 65),
                           },
                          },
                          Raw {
                           content: "-",
                           position: (172, 73),
                          },
                          Expression {
                           expression: Variable {
                            identifier: "name",
                            position: (172, 76),
                           },
                          },
                          Raw {
                           content: ".sh",
                           position: (172, 81),
                          },
                         ],
                         position: (172, 62),
                        },
                        String {
                         parts: [
                          Raw {
                           content: "set -euo pipefail\n\nSTATE_DIRECTORY=\"$1\"\nRUNTIME_DIRECTORY=\"$2\"\nLOGS_DIRECTORY=\"$3\"\n\n",
                           position: (173, 1),
                          },
                          Expression {
                           expression: Variable {
                            identifier: "lines",
                            position: (179, 17),
                           },
                          },
                          Raw {
                           content: "\n",
                           position: (179, 23),
                          },
                         ],
                         position: (172, 86),
                        },
                       ],
                      },
                      position: (172, 33),
                     },
                     position: (172, 27),
                    },
                   },
                   Binding {
                    from: AttributePath {
                     parts: [
                      Raw {
                       content: "currentConfigPath",
                       position: (181, 13),
                      },
                     ],
                    },
                    to: String {
                     parts: [
                      Raw {
                       content: "$STATE_DIRECTORY/.nixos-current-config.json",
                       position: (181, 34),
                      },
                     ],
                     position: (181, 33),
                    },
                   },
                   Binding {
                    from: AttributePath {
                     parts: [
                      Raw {
                       content: "runnerRegistrationConfig",
                       position: (182, 13),
                      },
                     ],
                    },
                    to: FunctionApplication {
                     function: Variable {
                      identifier: "getAttrs",
                      position: (182, 40),
                     },
                     arguments: [
                      List {
                       elements: [
                        String {
                         parts: [
                          Raw {
                           content: "name",
                           position: (182, 52),
                          },
                         ],
                         position: (182, 51),
                        },
                        String {
                         parts: [
                          Raw {
                           content: "tokenFile",
                           position: (182, 59),
                          },
                         ],
                         position: (182, 58),
                        },
                        String {
                         parts: [
                          Raw {
                           content: "url",
                           position: (182, 71),
                          },
                         ],
                         position: (182, 70),
                        },
                        String {
                         parts: [
                          Raw {
                           content: "runnerGroup",
                           position: (182, 77),
                          },
                         ],
                         position: (182, 76),
                        },
                        String {
                         parts: [
                          Raw {
                           content: "extraLabels",
                           position: (182, 91),
                          },
                         ],
                         position: (182, 90),
                        },
                       ],
                       position: (182, 49),
                      },
                      Variable {
                       identifier: "cfg",
                       position: (182, 106),
                      },
                     ],
                    },
                   },
                   Binding {
                    from: AttributePath {
                     parts: [
                      Raw {
                       content: "newConfigPath",
                       position: (183, 13),
                      },
                     ],
                    },
                    to: FunctionApplication {
                     function: PropertyAccess {
                      expression: Variable {
                       identifier: "builtins",
                       position: (183, 29),
                      },
                      attribute_path: AttributePath {
                       parts: [
                        Raw {
                         content: "toFile",
                         position: (183, 38),
                        },
                       ],
                      },
                      default: None,
                     },
                     arguments: [
                      String {
                       parts: [
                        Expression {
                         expression: Variable {
                          identifier: "svcName",
                          position: (183, 48),
                         },
                        },
                        Raw {
                         content: "-config.json",
                         position: (183, 56),
                        },
                       ],
                       position: (183, 45),
                      },
                      Parentheses {
                       expression: FunctionApplication {
                        function: PropertyAccess {
                         expression: Variable {
                          identifier: "builtins",
                          position: (183, 71),
                         },
                         attribute_path: AttributePath {
                          parts: [
                           Raw {
                            content: "toJSON",
                            position: (183, 80),
                           },
                          ],
                         },
                         default: None,
                        },
                        arguments: [
                         Variable {
                          identifier: "runnerRegistrationConfig",
                          position: (183, 87),
                         },
                        ],
                       },
                       position: (183, 70),
                      },
                     ],
                    },
                   },
                   Binding {
                    from: AttributePath {
                     parts: [
                      Raw {
                       content: "newConfigTokenFilename",
                       position: (184, 13),
                      },
                     ],
                    },
                    to: String {
                     parts: [
                      Raw {
                       content: ".new-token",
                       position: (184, 39),
                      },
                     ],
                     position: (184, 38),
                    },
                   },
                   Binding {
                    from: AttributePath {
                     parts: [
                      Raw {
                       content: "runnerCredFiles",
                       position: (185, 13),
                      },
                     ],
                    },
                    to: List {
                     elements: [
                      String {
                       parts: [
                        Raw {
                         content: ".credentials",
                         position: (186, 16),
                        },
                       ],
                       position: (186, 15),
                      },
                      String {
                       parts: [
                        Raw {
                         content: ".credentials_rsaparams",
                         position: (187, 16),
                        },
                       ],
                       position: (187, 15),
                      },
                      String {
                       parts: [
                        Raw {
                         content: ".runner",
                         position: (188, 16),
                        },
                       ],
                       position: (188, 15),
                      },
                     ],
                     position: (185, 31),
                    },
                   },
                   Binding {
                    from: AttributePath {
                     parts: [
                      Raw {
                       content: "unconfigureRunner",
                       position: (190, 13),
                      },
                     ],
                    },
                    to: FunctionApplication {
                     function: Variable {
                      identifier: "writeScript",
                      position: (190, 33),
                     },
                     arguments: [
                      String {
                       parts: [
                        Raw {
                         content: "unconfigure",
                         position: (190, 46),
                        },
                       ],
                       position: (190, 45),
                      },
                      String {
                       parts: [
                        Raw {
                         content: "differs=\n# Set `differs = 1` if current and new runner config differ or if `currentConfigPath` does not exist\n",
                         position: (191, 1),
                        },
                        Expression {
                         expression: PropertyAccess {
                          expression: Variable {
                           identifier: "pkgs",
                           position: (193, 17),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "diffutils",
                             position: (193, 22),
                            },
                           ],
                          },
                          default: None,
                         },
                        },
                        Raw {
                         content: "/bin/diff -q ",
                         position: (193, 32),
                        },
                        Raw {
                         content: "'",
                         position: (193, 45),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigPath",
                          position: (193, 48),
                         },
                        },
                        Raw {
                         content: "' \"",
                         position: (193, 62),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "currentConfigPath",
                          position: (193, 67),
                         },
                        },
                        Raw {
                         content: "\" >/dev/null 2>&1 || differs=1\n# Also trigger a registration if the token content changed\n",
                         position: (193, 85),
                        },
                        Expression {
                         expression: PropertyAccess {
                          expression: Variable {
                           identifier: "pkgs",
                           position: (195, 17),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "diffutils",
                             position: (195, 22),
                            },
                           ],
                          },
                          default: None,
                         },
                        },
                        Raw {
                         content: "/bin/diff -q \\\n  \"$STATE_DIRECTORY\"/",
                         position: (195, 32),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "currentConfigTokenFilename",
                          position: (196, 38),
                         },
                        },
                        Raw {
                         content: " \\\n  ",
                         position: (196, 65),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (197, 19),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (197, 34),
                            },
                            attribute_path: AttributePath {
                             parts: [
                              Raw {
                               content: "tokenFile",
                               position: (197, 38),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n  >/dev/null 2>&1 || differs=1\n\nif [[ -n \"$differs\" ]]; then\n  echo \"Config has changed, removing old runner state.\"\n  echo \"The old runner will still appear in the GitHub Actions UI.\" \\\n    \"You have to remove it manually.\"\n  find \"$STATE_DIRECTORY/\" -mindepth 1 -delete\n\n  # Copy the configured token file to the state dir and allow the service user to read the file\n  install --mode=666 ",
                         position: (197, 48),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (207, 38),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (207, 53),
                            },
                            attribute_path: AttributePath {
                             parts: [
                              Raw {
                               content: "tokenFile",
                               position: (207, 57),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \"$STATE_DIRECTORY/",
                         position: (207, 67),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigTokenFilename",
                          position: (207, 88),
                         },
                        },
                        Raw {
                         content: "\"\n  # Also copy current file to allow for a diff on the next start\n  install --mode=600 ",
                         position: (207, 111),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (209, 38),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (209, 53),
                            },
                            attribute_path: AttributePath {
                             parts: [
                              Raw {
                               content: "tokenFile",
                               position: (209, 57),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \"$STATE_DIRECTORY/",
                         position: (209, 67),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "currentConfigTokenFilename",
                          position: (209, 88),
                         },
                        },
                        Raw {
                         content: "\"\nfi\n",
                         position: (209, 115),
                        },
                       ],
                       position: (190, 59),
                      },
                     ],
                    },
                   },
                   Binding {
                    from: AttributePath {
                     parts: [
                      Raw {
                       content: "configureRunner",
                       position: (212, 13),
                      },
                     ],
                    },
                    to: FunctionApplication {
                     function: Variable {
                      identifier: "writeScript",
                      position: (212, 31),
                     },
                     arguments: [
                      String {
                       parts: [
                        Raw {
                         content: "configure",
                         position: (212, 44),
                        },
                       ],
                       position: (212, 43),
                      },
                      String {
                       parts: [
                        Raw {
                         content: "if [[ -e \"$STATE_DIRECTORY/",
                         position: (213, 1),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigTokenFilename",
                          position: (213, 44),
                         },
                        },
                        Raw {
                         content: "\" ]]; then\n  echo \"Configuring GitHub Actions Runner\"\n\n  token=$(< \"$STATE_DIRECTORY\"/",
                         position: (213, 67),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigTokenFilename",
                          position: (216, 48),
                         },
                        },
                        Raw {
                         content: ")\n  RUNNER_ROOT=\"$STATE_DIRECTORY\" ",
                         position: (216, 71),
                        },
                        Expression {
                         expression: PropertyAccess {
                          expression: Variable {
                           identifier: "cfg",
                           position: (217, 50),
                          },
                          attribute_path: AttributePath {
                           parts: [
                            Raw {
                             content: "package",
                             position: (217, 54),
                            },
                           ],
                          },
                          default: None,
                         },
                        },
                        Raw {
                         content: "/bin/config.sh \\\n    --unattended \\\n    --disableupdate \\\n    --work \"$RUNTIME_DIRECTORY\" \\\n    --url ",
                         position: (217, 62),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (221, 27),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (221, 42),
                            },
                            attribute_path: AttributePath {
                             parts: [
                              Raw {
                               content: "url",
                               position: (221, 46),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n    --token \"$token\" \\\n    --labels ",
                         position: (221, 50),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (223, 30),
                          },
                          arguments: [
                           Parentheses {
                            expression: FunctionApplication {
                             function: Variable {
                              identifier: "concatStringsSep",
                              position: (223, 46),
                             },
                             arguments: [
                              String {
                               parts: [
                                Raw {
                                 content: ",",
                                 position: (223, 64),
                                },
                               ],
                               position: (223, 63),
                              },
                              PropertyAccess {
                               expression: Variable {
                                identifier: "cfg",
                                position: (223, 67),
                               },
                               attribute_path: AttributePath {
                                parts: [
                                 Raw {
                                  content: "extraLabels",
                                  position: (223, 71),
                                 },
                                ],
                               },
                               default: None,
                              },
                             ],
                            },
                            position: (223, 45),
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n    --name ",
                         position: (223, 84),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArg",
                           position: (224, 28),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (224, 43),
                            },
                            attribute_path: AttributePath {
                             parts: [
                              Raw {
                               content: "name",
                               position: (224, 47),
                              },
                             ],
                            },
                            default: None,
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n    ",
                         position: (224, 52),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "optionalString",
                           position: (225, 21),
                          },
                          arguments: [
                           PropertyAccess {
                            expression: Variable {
                             identifier: "cfg",
                             position: (225, 36),
                            },
                            attribute_path: AttributePath {
                             parts: [
                              Raw {
                               content: "replace",
                               position: (225, 40),
                              },
                             ],
                            },
                            default: None,
                           },
                           String {
                            parts: [
                             Raw {
                              content: "--replace",
                              position: (225, 49),
                             },
                            ],
                            position: (225, 48),
                           },
                          ],
                         },
                        },
                        Raw {
                         content: " \\\n    ",
                         position: (225, 60),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "optionalString",
                           position: (226, 21),
                          },
                          arguments: [
                           Parentheses {
                            expression: BinaryOperation {
                             operator: NotEqualTo,
                             operands: [
                              PropertyAccess {
                               expression: Variable {
                                identifier: "cfg",
                                position: (226, 37),
                               },
                               attribute_path: AttributePath {
                                parts: [
                                 Raw {
                                  content: "runnerGroup",
                                  position: (226, 41),
                                 },
                                ],
                               },
                               default: None,
                              },
                              Variable {
                               identifier: "null",
                               position: (226, 56),
                              },
                             ],
                             position: (226, 53),
                            },
                            position: (226, 36),
                           },
                           String {
                            parts: [
                             Raw {
                              content: "--runnergroup ",
                              position: (226, 63),
                             },
                             Expression {
                              expression: FunctionApplication {
                               function: Variable {
                                identifier: "escapeShellArg",
                                position: (226, 79),
                               },
                               arguments: [
                                PropertyAccess {
                                 expression: Variable {
                                  identifier: "cfg",
                                  position: (226, 94),
                                 },
                                 attribute_path: AttributePath {
                                  parts: [
                                   Raw {
                                    content: "runnerGroup",
                                    position: (226, 98),
                                   },
                                  ],
                                 },
                                 default: None,
                                },
                               ],
                              },
                             },
                            ],
                            position: (226, 62),
                           },
                          ],
                         },
                        },
                        Raw {
                         content: "\n\n  # Move the automatically created _diag dir to the logs dir\n  mkdir -p  \"$STATE_DIRECTORY/_diag\"\n  cp    -r  \"$STATE_DIRECTORY/_diag/.\" \"$LOGS_DIRECTORY/\"\n  rm    -rf \"$STATE_DIRECTORY/_diag/\"\n\n  # Cleanup token from config\n  rm \"$STATE_DIRECTORY/",
                         position: (226, 112),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigTokenFilename",
                          position: (234, 40),
                         },
                        },
                        Raw {
                         content: "\"\n\n  # Symlink to new config\n  ln -s ",
                         position: (234, 63),
                        },
                        Raw {
                         content: "'",
                         position: (237, 23),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "newConfigPath",
                          position: (237, 26),
                         },
                        },
                        Raw {
                         content: "' \"",
                         position: (237, 40),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "currentConfigPath",
                          position: (237, 45),
                         },
                        },
                        Raw {
                         content: "\"\nfi\n",
                         position: (237, 63),
                        },
                       ],
                       position: (212, 55),
                      },
                     ],
                    },
                   },
                   Binding {
                    from: AttributePath {
                     parts: [
                      Raw {
                       content: "setupRuntimeDir",
                       position: (240, 13),
                      },
                     ],
                    },
                    to: FunctionApplication {
                     function: Variable {
                      identifier: "writeScript",
                      position: (240, 31),
                     },
                     arguments: [
                      String {
                       parts: [
                        Raw {
                         content: "setup-runtime-dirs",
                         position: (240, 44),
                        },
                       ],
                       position: (240, 43),
                      },
                      String {
                       parts: [
                        Raw {
                         content: "# Link _diag dir\nln -s \"$LOGS_DIRECTORY\" \"$RUNTIME_DIRECTORY/_diag\"\n\n# Link the runner credentials to the runtime dir\nln -s \"$STATE_DIRECTORY\"/{",
                         position: (241, 1),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: PropertyAccess {
                           expression: Variable {
                            identifier: "lib",
                            position: (245, 43),
                           },
                           attribute_path: AttributePath {
                            parts: [
                             Raw {
                              content: "concatStringsSep",
                              position: (245, 47),
                             },
                            ],
                           },
                           default: None,
                          },
                          arguments: [
                           String {
                            parts: [
                             Raw {
                              content: ",",
                              position: (245, 65),
                             },
                            ],
                            position: (245, 64),
                           },
                           Variable {
                            identifier: "runnerCredFiles",
                            position: (245, 68),
                           },
                          ],
                         },
                        },
                        Raw {
                         content: "} \"$RUNTIME_DIRECTORY/\"\n",
                         position: (245, 84),
                        },
                       ],
                       position: (240, 64),
                      },
                     ],
                    },
                   },
                  ],
                  target: FunctionApplication {
                   function: Variable {
                    identifier: "map",
                    position: (248, 11),
                   },
                   arguments: [
                    Parentheses {
                     expression: Function {
                      argument: Simple {
                       identifier: "x",
                      },
                      definition: String {
                       parts: [
                        Expression {
                         expression: Variable {
                          identifier: "x",
                          position: (248, 22),
                         },
                        },
                        Raw {
                         content: " ",
                         position: (248, 24),
                        },
                        Expression {
                         expression: FunctionApplication {
                          function: Variable {
                           identifier: "escapeShellArgs",
                           position: (248, 27),
                          },
                          arguments: [
                           List {
                            elements: [
                             Variable {
                              identifier: "stateDir",
                              position: (248, 45),
                             },
                             Variable {
                              identifier: "runtimeDir",
                              position: (248, 54),
                             },
                             Variable {
                              identifier: "logsDir",
                              position: (248, 65),
                             },
                            ],
                            position: (248, 43),
                           },
                          ],
                         },
                        },
                       ],
                       position: (248, 19),
                      },
                      position: (248, 16),
                     },
                     position: (248, 15),
                    },
                    List {
                     elements: [
                      String {
                       parts: [
                        Raw {
                         content: "+",
                         position: (249, 14),
                        },
                        Expression {
                         expression: Variable {
                          identifier: "unconfigureRunner",
                          position: (249, 17),
                         },
                        },
                       ],
                       position: (249, 13),
                      },
                      Variable {
                       identifier: "configureRunner",
                       position: (250, 13),
                      },
                      Variable {
                       identifier: "setupRuntimeDir",
                       position: (251, 13),
                      },
                     ],
                     position: (248, 78),
                    },
                   ],
                  },
                  position: (164, 11),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "LogsDirectory",
                    position: (255, 9),
                   },
                  ],
                 },
                 to: List {
                  elements: [
                   Variable {
                    identifier: "systemdDir",
                    position: (255, 27),
                   },
                  ],
                  position: (255, 25),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "RuntimeDirectory",
                    position: (257, 9),
                   },
                  ],
                 },
                 to: List {
                  elements: [
                   Variable {
                    identifier: "systemdDir",
                    position: (257, 30),
                   },
                  ],
                  position: (257, 28),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "StateDirectory",
                    position: (259, 9),
                   },
                  ],
                 },
                 to: List {
                  elements: [
                   Variable {
                    identifier: "systemdDir",
                    position: (259, 28),
                   },
                  ],
                  position: (259, 26),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "StateDirectoryMode",
                    position: (260, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "0700",
                    position: (260, 31),
                   },
                  ],
                  position: (260, 30),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "WorkingDirectory",
                    position: (261, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "runtimeDir",
                  position: (261, 28),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "InaccessiblePaths",
                    position: (263, 9),
                   },
                  ],
                 },
                 to: List {
                  elements: [
                   PropertyAccess {
                    expression: Variable {
                     identifier: "cfg",
                     position: (265, 11),
                    },
                    attribute_path: AttributePath {
                     parts: [
                      Raw {
                       content: "tokenFile",
                       position: (265, 15),
                      },
                     ],
                    },
                    default: None,
                   },
                   String {
                    parts: [
                     Expression {
                      expression: Variable {
                       identifier: "stateDir",
                       position: (267, 14),
                      },
                     },
                     Raw {
                      content: "/",
                      position: (267, 23),
                     },
                     Expression {
                      expression: Variable {
                       identifier: "currentConfigTokenFilename",
                       position: (267, 26),
                      },
                     },
                    ],
                    position: (267, 11),
                   },
                  ],
                  position: (263, 29),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "DynamicUser",
                    position: (271, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (271, 23),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "KillMode",
                    position: (273, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "process",
                    position: (273, 21),
                   },
                  ],
                  position: (273, 20),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "KillSignal",
                    position: (274, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "SIGTERM",
                    position: (274, 23),
                   },
                  ],
                  position: (274, 22),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "AmbientCapabilities",
                    position: (279, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [],
                  position: (279, 31),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "CapabilityBoundingSet",
                    position: (280, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [],
                  position: (280, 33),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "DeviceAllow",
                    position: (282, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [],
                  position: (282, 23),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "LockPersonality",
                    position: (283, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (283, 27),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "NoNewPrivileges",
                    position: (284, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (284, 27),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "PrivateDevices",
                    position: (285, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (285, 26),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "PrivateMounts",
                    position: (286, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (286, 25),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "PrivateTmp",
                    position: (287, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (287, 22),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "PrivateUsers",
                    position: (288, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (288, 24),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectClock",
                    position: (289, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (289, 24),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectControlGroups",
                    position: (290, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (290, 32),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectHome",
                    position: (291, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (291, 23),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectHostname",
                    position: (292, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (292, 27),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectKernelLogs",
                    position: (293, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (293, 29),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectKernelModules",
                    position: (294, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (294, 32),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectKernelTunables",
                    position: (295, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (295, 33),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "ProtectSystem",
                    position: (296, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "strict",
                    position: (296, 26),
                   },
                  ],
                  position: (296, 25),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "RemoveIPC",
                    position: (297, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (297, 21),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "RestrictNamespaces",
                    position: (298, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (298, 30),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "RestrictRealtime",
                    position: (299, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (299, 28),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "RestrictSUIDSGID",
                    position: (300, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "true",
                  position: (300, 28),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "UMask",
                    position: (301, 9),
                   },
                  ],
                 },
                 to: String {
                  parts: [
                   Raw {
                    content: "0066",
                    position: (301, 18),
                   },
                  ],
                  position: (301, 17),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "PrivateNetwork",
                    position: (304, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "false",
                  position: (304, 26),
                 },
                },
                Binding {
                 from: AttributePath {
                  parts: [
                   Raw {
                    content: "MemoryDenyWriteExecute",
                    position: (306, 9),
                   },
                  ],
                 },
                 to: Variable {
                  identifier: "false",
                  position: (306, 34),
                 },
                },
               ],
               recursive: true,
               position: (153, 23),
              },
             },
            ],
            recursive: false,
            position: (131, 35),
           },
          },
         ],
         recursive: false,
         position: (123, 28),
        },
       ],
      },
     },
    ],
    recursive: false,
    position: (16, 1),
   },
   position: (3, 1),
  },
  position: (2, 1),
 },
 position: (1, 1),
}