Function( Function { head: Destructured( FunctionHeadDestructured { ellipsis: true, identifier: None, arguments: [ FunctionHeadDestructuredArgument { identifier: "config", default: None, }, FunctionHeadDestructuredArgument { identifier: "lib", default: None, }, FunctionHeadDestructuredArgument { identifier: "pkgs", default: None, }, ], }, ), body: With( With { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 2, column: 6, }, end: Position { line: 2, column: 9, }, }, }, ), target: LetIn( LetIn { bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "cfg", span: Span { start: Position { line: 5, column: 3, }, end: Position { line: 5, column: 6, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "config", span: Span { start: Position { line: 5, column: 9, }, end: Position { line: 5, column: 15, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "environment", span: Span { start: Position { line: 5, column: 16, }, end: Position { line: 5, column: 27, }, }, }, ), Raw( PartRaw { content: "memoryAllocator", span: Span { start: Position { line: 5, column: 28, }, end: Position { line: 5, column: 43, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "providers", span: Span { start: Position { line: 8, column: 3, }, end: Position { line: 8, column: 12, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "graphene-hardened", span: Span { start: Position { line: 9, column: 5, }, end: Position { line: 9, column: 22, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "libPath", span: Span { start: Position { line: 10, column: 7, }, end: Position { line: 10, column: 14, }, }, }, ), ], to: String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 10, column: 20, }, end: Position { line: 10, column: 24, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "graphene-hardened-malloc", span: Span { start: Position { line: 10, column: 25, }, end: Position { line: 10, column: 49, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/lib/libhardened_malloc.so", span: Span { start: Position { line: 10, column: 18, }, end: Position { line: 10, column: 76, }, }, }, ), ], span: Span { start: Position { line: 10, column: 17, }, end: Position { line: 10, column: 77, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 11, column: 7, }, end: Position { line: 11, column: 18, }, }, }, ), ], to: IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "An allocator designed to mitigate memory corruption attacks, such as\nthose caused by use-after-free bugs.\n", span: Span { start: Position { line: 12, column: 1, }, end: Position { line: 14, column: 7, }, }, }, ), ], span: Span { start: Position { line: 11, column: 21, }, end: Position { line: 14, column: 9, }, }, }, ), }, ), ], span: Span { start: Position { line: 9, column: 25, }, end: Position { line: 15, column: 6, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "jemalloc", span: Span { start: Position { line: 17, column: 5, }, end: Position { line: 17, column: 13, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "libPath", span: Span { start: Position { line: 18, column: 7, }, end: Position { line: 18, column: 14, }, }, }, ), ], to: String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 18, column: 20, }, end: Position { line: 18, column: 24, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "jemalloc", span: Span { start: Position { line: 18, column: 25, }, end: Position { line: 18, column: 33, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/lib/libjemalloc.so", span: Span { start: Position { line: 18, column: 18, }, end: Position { line: 18, column: 53, }, }, }, ), ], span: Span { start: Position { line: 18, column: 17, }, end: Position { line: 18, column: 54, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 19, column: 7, }, end: Position { line: 19, column: 18, }, }, }, ), ], to: IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "A general purpose allocator that emphasizes fragmentation avoidance\nand scalable concurrency support.\n", span: Span { start: Position { line: 20, column: 1, }, end: Position { line: 22, column: 7, }, }, }, ), ], span: Span { start: Position { line: 19, column: 21, }, end: Position { line: 22, column: 9, }, }, }, ), }, ), ], span: Span { start: Position { line: 17, column: 16, }, end: Position { line: 23, column: 6, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "scudo", span: Span { start: Position { line: 25, column: 5, }, end: Position { line: 25, column: 10, }, }, }, ), ], to: LetIn( LetIn { bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "platformMap", span: Span { start: Position { line: 26, column: 7, }, end: Position { line: 26, column: 18, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "aarch64-linux", span: Span { start: Position { line: 27, column: 9, }, end: Position { line: 27, column: 22, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "aarch64", span: Span { start: Position { line: 27, column: 26, }, end: Position { line: 27, column: 33, }, }, }, ), ], span: Span { start: Position { line: 27, column: 25, }, end: Position { line: 27, column: 34, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "x86_64-linux", span: Span { start: Position { line: 28, column: 9, }, end: Position { line: 28, column: 21, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "x86_64", span: Span { start: Position { line: 28, column: 26, }, end: Position { line: 28, column: 32, }, }, }, ), ], span: Span { start: Position { line: 28, column: 25, }, end: Position { line: 28, column: 33, }, }, }, ), }, ), ], span: Span { start: Position { line: 26, column: 21, }, end: Position { line: 29, column: 8, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "systemPlatform", span: Span { start: Position { line: 31, column: 7, }, end: Position { line: 31, column: 21, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "platformMap", span: Span { start: Position { line: 31, column: 24, }, end: Position { line: 31, column: 35, }, }, }, ), attribute_path: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 31, column: 38, }, end: Position { line: 31, column: 42, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "stdenv", span: Span { start: Position { line: 31, column: 43, }, end: Position { line: 31, column: 49, }, }, }, ), Raw( PartRaw { content: "hostPlatform", span: Span { start: Position { line: 31, column: 50, }, end: Position { line: 31, column: 62, }, }, }, ), Raw( PartRaw { content: "system", span: Span { start: Position { line: 31, column: 63, }, end: Position { line: 31, column: 69, }, }, }, ), ], default: None, }, ), }, ), ], default: Some( FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "throw", span: Span { start: Position { line: 31, column: 75, }, end: Position { line: 31, column: 80, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "scudo not supported on ", span: Span { start: Position { line: 31, column: 82, }, end: Position { line: 31, column: 139, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 31, column: 107, }, end: Position { line: 31, column: 111, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "stdenv", span: Span { start: Position { line: 31, column: 112, }, end: Position { line: 31, column: 118, }, }, }, ), Raw( PartRaw { content: "hostPlatform", span: Span { start: Position { line: 31, column: 119, }, end: Position { line: 31, column: 131, }, }, }, ), Raw( PartRaw { content: "system", span: Span { start: Position { line: 31, column: 132, }, end: Position { line: 31, column: 138, }, }, }, ), ], default: None, }, ), }, ), ], span: Span { start: Position { line: 31, column: 81, }, end: Position { line: 31, column: 140, }, }, }, ), ], }, ), ), }, ), }, ), ], target: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "libPath", span: Span { start: Position { line: 33, column: 7, }, end: Position { line: 33, column: 14, }, }, }, ), ], to: String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 33, column: 20, }, end: Position { line: 33, column: 24, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "llvmPackages_latest", span: Span { start: Position { line: 33, column: 25, }, end: Position { line: 33, column: 44, }, }, }, ), Raw( PartRaw { content: "compiler-rt", span: Span { start: Position { line: 33, column: 45, }, end: Position { line: 33, column: 56, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/lib/linux/libclang_rt.scudo-", span: Span { start: Position { line: 33, column: 18, }, end: Position { line: 33, column: 86, }, }, }, ), Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "systemPlatform", span: Span { start: Position { line: 33, column: 88, }, end: Position { line: 33, column: 102, }, }, }, ), }, ), Raw( PartRaw { content: ".so", span: Span { start: Position { line: 33, column: 18, }, end: Position { line: 33, column: 106, }, }, }, ), ], span: Span { start: Position { line: 33, column: 17, }, end: Position { line: 33, column: 107, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 34, column: 7, }, end: Position { line: 34, column: 18, }, }, }, ), ], to: IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "A user-mode allocator based on LLVM Sanitizer’s CombinedAllocator,\nwhich aims at providing additional mitigations against heap based\nvulnerabilities, while maintaining good performance.\n", span: Span { start: Position { line: 35, column: 1, }, end: Position { line: 38, column: 7, }, }, }, ), ], span: Span { start: Position { line: 34, column: 21, }, end: Position { line: 38, column: 9, }, }, }, ), }, ), ], span: Span { start: Position { line: 32, column: 8, }, end: Position { line: 39, column: 6, }, }, }, ), span: Span { start: Position { line: 25, column: 13, }, end: Position { line: 39, column: 6, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "mimalloc", span: Span { start: Position { line: 41, column: 5, }, end: Position { line: 41, column: 13, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "libPath", span: Span { start: Position { line: 42, column: 7, }, end: Position { line: 42, column: 14, }, }, }, ), ], to: String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 42, column: 20, }, end: Position { line: 42, column: 24, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mimalloc", span: Span { start: Position { line: 42, column: 25, }, end: Position { line: 42, column: 33, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/lib/libmimalloc.so", span: Span { start: Position { line: 42, column: 18, }, end: Position { line: 42, column: 53, }, }, }, ), ], span: Span { start: Position { line: 42, column: 17, }, end: Position { line: 42, column: 54, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 43, column: 7, }, end: Position { line: 43, column: 18, }, }, }, ), ], to: IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "A compact and fast general purpose allocator, which may\noptionally be built with mitigations against various heap\nvulnerabilities.\n", span: Span { start: Position { line: 44, column: 1, }, end: Position { line: 47, column: 7, }, }, }, ), ], span: Span { start: Position { line: 43, column: 21, }, end: Position { line: 47, column: 9, }, }, }, ), }, ), ], span: Span { start: Position { line: 41, column: 16, }, end: Position { line: 48, column: 6, }, }, }, ), }, ), ], span: Span { start: Position { line: 8, column: 15, }, end: Position { line: 49, column: 4, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "providerConf", span: Span { start: Position { line: 51, column: 3, }, end: Position { line: 51, column: 15, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "providers", span: Span { start: Position { line: 51, column: 18, }, end: Position { line: 51, column: 27, }, }, }, ), attribute_path: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 51, column: 30, }, end: Position { line: 51, column: 33, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "provider", span: Span { start: Position { line: 51, column: 34, }, end: Position { line: 51, column: 42, }, }, }, ), ], default: None, }, ), }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "mallocLib", span: Span { start: Position { line: 55, column: 3, }, end: Position { line: 55, column: 12, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 55, column: 15, }, end: Position { line: 55, column: 19, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "runCommand", span: Span { start: Position { line: 55, column: 20, }, end: Position { line: 55, column: 30, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "malloc-provider-", span: Span { start: Position { line: 55, column: 32, }, end: Position { line: 55, column: 63, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 55, column: 50, }, end: Position { line: 55, column: 53, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "provider", span: Span { start: Position { line: 55, column: 54, }, end: Position { line: 55, column: 62, }, }, }, ), ], default: None, }, ), }, ), ], span: Span { start: Position { line: 55, column: 31, }, end: Position { line: 55, column: 64, }, }, }, ), Map( Map { recursive: true, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "preferLocalBuild", span: Span { start: Position { line: 57, column: 7, }, end: Position { line: 57, column: 23, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 57, column: 26, }, end: Position { line: 57, column: 30, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "allowSubstitutes", span: Span { start: Position { line: 58, column: 7, }, end: Position { line: 58, column: 23, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 58, column: 26, }, end: Position { line: 58, column: 31, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "origLibPath", span: Span { start: Position { line: 59, column: 7, }, end: Position { line: 59, column: 18, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "providerConf", span: Span { start: Position { line: 59, column: 21, }, end: Position { line: 59, column: 33, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "libPath", span: Span { start: Position { line: 59, column: 34, }, end: Position { line: 59, column: 41, }, }, }, ), ], default: None, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "libName", span: Span { start: Position { line: 60, column: 7, }, end: Position { line: 60, column: 14, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "baseNameOf", span: Span { start: Position { line: 60, column: 17, }, end: Position { line: 60, column: 27, }, }, }, ), arguments: [ Identifier( Identifier { id: "origLibPath", span: Span { start: Position { line: 60, column: 28, }, end: Position { line: 60, column: 39, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 56, column: 5, }, end: Position { line: 61, column: 6, }, }, }, ), IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "mkdir -p $out/lib\ncp -L $origLibPath $out/lib/$libName\n", span: Span { start: Position { line: 63, column: 1, }, end: Position { line: 65, column: 5, }, }, }, ), ], span: Span { start: Position { line: 62, column: 5, }, end: Position { line: 65, column: 7, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "providerLibPath", span: Span { start: Position { line: 68, column: 3, }, end: Position { line: 68, column: 18, }, }, }, ), ], to: String( String_ { parts: [ Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "mallocLib", span: Span { start: Position { line: 68, column: 24, }, end: Position { line: 68, column: 33, }, }, }, ), }, ), Raw( PartRaw { content: "/lib/", span: Span { start: Position { line: 68, column: 22, }, end: Position { line: 68, column: 39, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "mallocLib", span: Span { start: Position { line: 68, column: 41, }, end: Position { line: 68, column: 50, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "libName", span: Span { start: Position { line: 68, column: 51, }, end: Position { line: 68, column: 58, }, }, }, ), ], default: None, }, ), }, ), ], span: Span { start: Position { line: 68, column: 21, }, end: Position { line: 68, column: 60, }, }, }, ), }, ), ], target: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "meta", span: Span { start: Position { line: 72, column: 3, }, end: Position { line: 72, column: 7, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "maintainers", span: Span { start: Position { line: 73, column: 5, }, end: Position { line: 73, column: 16, }, }, }, ), ], to: List( List { elements: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "maintainers", span: Span { start: Position { line: 73, column: 21, }, end: Position { line: 73, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "joachifm", span: Span { start: Position { line: 73, column: 33, }, end: Position { line: 73, column: 41, }, }, }, ), ], default: None, }, ), ], span: Span { start: Position { line: 73, column: 19, }, end: Position { line: 73, column: 43, }, }, }, ), }, ), ], span: Span { start: Position { line: 72, column: 10, }, end: Position { line: 74, column: 4, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "options", span: Span { start: Position { line: 76, column: 3, }, end: Position { line: 76, column: 10, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "environment", span: Span { start: Position { line: 77, column: 5, }, end: Position { line: 77, column: 16, }, }, }, ), Raw( PartRaw { content: "memoryAllocator", span: Span { start: Position { line: 77, column: 17, }, end: Position { line: 77, column: 32, }, }, }, ), Raw( PartRaw { content: "provider", span: Span { start: Position { line: 77, column: 33, }, end: Position { line: 77, column: 41, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 77, column: 44, }, end: Position { line: 77, column: 52, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 78, column: 7, }, end: Position { line: 78, column: 11, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 78, column: 14, }, end: Position { line: 78, column: 19, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "enum", span: Span { start: Position { line: 78, column: 20, }, end: Position { line: 78, column: 24, }, }, }, ), ], default: None, }, ), arguments: [ BinaryOperation( BinaryOperation { left: List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "libc", span: Span { start: Position { line: 78, column: 29, }, end: Position { line: 78, column: 33, }, }, }, ), ], span: Span { start: Position { line: 78, column: 28, }, end: Position { line: 78, column: 34, }, }, }, ), ], span: Span { start: Position { line: 78, column: 26, }, end: Position { line: 78, column: 36, }, }, }, ), operator: Concatenation, right: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "attrNames", span: Span { start: Position { line: 78, column: 40, }, end: Position { line: 78, column: 49, }, }, }, ), arguments: [ Identifier( Identifier { id: "providers", span: Span { start: Position { line: 78, column: 50, }, end: Position { line: 78, column: 59, }, }, }, ), ], }, ), }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 79, column: 7, }, end: Position { line: 79, column: 14, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "libc", span: Span { start: Position { line: 79, column: 18, }, end: Position { line: 79, column: 22, }, }, }, ), ], span: Span { start: Position { line: 79, column: 17, }, end: Position { line: 79, column: 23, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 80, column: 7, }, end: Position { line: 80, column: 18, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 80, column: 21, }, end: Position { line: 80, column: 24, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 80, column: 25, }, end: Position { line: 80, column: 30, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "The system-wide memory allocator.\n\nBriefly, the system-wide memory allocator providers are:\n\n- `libc`: the standard allocator provided by libc\n", span: Span { start: Position { line: 81, column: 1, }, end: Position { line: 86, column: 9, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "concatStringsSep", span: Span { start: Position { line: 86, column: 11, }, end: Position { line: 86, column: 27, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "\n", span: Span { start: Position { line: 86, column: 29, }, end: Position { line: 86, column: 31, }, }, }, ), ], span: Span { start: Position { line: 86, column: 28, }, end: Position { line: 86, column: 32, }, }, }, ), FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mapAttrsToList", span: Span { start: Position { line: 86, column: 34, }, end: Position { line: 86, column: 48, }, }, }, ), arguments: [ Function( Function { head: Simple( FunctionHeadSimple { identifier: "name", }, ), body: Function( Function { head: Simple( FunctionHeadSimple { identifier: "value", }, ), body: String( String_ { parts: [ Raw( PartRaw { content: "- `", span: Span { start: Position { line: 87, column: 28, }, end: Position { line: 87, column: 38, }, }, }, ), Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "name", span: Span { start: Position { line: 87, column: 33, }, end: Position { line: 87, column: 37, }, }, }, ), }, ), Raw( PartRaw { content: "`: ", span: Span { start: Position { line: 87, column: 28, }, end: Position { line: 87, column: 41, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "replaceStrings", span: Span { start: Position { line: 87, column: 43, }, end: Position { line: 87, column: 57, }, }, }, ), arguments: [ List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "\n", span: Span { start: Position { line: 87, column: 61, }, end: Position { line: 87, column: 63, }, }, }, ), ], span: Span { start: Position { line: 87, column: 60, }, end: Position { line: 87, column: 64, }, }, }, ), ], span: Span { start: Position { line: 87, column: 58, }, end: Position { line: 87, column: 66, }, }, }, ), List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: " ", span: Span { start: Position { line: 87, column: 70, }, end: Position { line: 87, column: 71, }, }, }, ), ], span: Span { start: Position { line: 87, column: 69, }, end: Position { line: 87, column: 72, }, }, }, ), ], span: Span { start: Position { line: 87, column: 67, }, end: Position { line: 87, column: 74, }, }, }, ), PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "value", span: Span { start: Position { line: 87, column: 75, }, end: Position { line: 87, column: 80, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 87, column: 81, }, end: Position { line: 87, column: 92, }, }, }, ), ], default: None, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 87, column: 27, }, end: Position { line: 87, column: 94, }, }, }, ), span: Span { start: Position { line: 87, column: 20, }, end: Position { line: 87, column: 94, }, }, }, ), span: Span { start: Position { line: 87, column: 14, }, end: Position { line: 87, column: 94, }, }, }, ), Identifier( Identifier { id: "providers", span: Span { start: Position { line: 88, column: 13, }, end: Position { line: 88, column: 22, }, }, }, ), ], }, ), ], }, ), }, ), Raw( PartRaw { content: "\n\n::: {.warning}\nSelecting an alternative allocator (i.e., anything other than\n`libc`) may result in instability, data loss,\nand/or service failure.\n:::\n", span: Span { start: Position { line: 81, column: 1, }, end: Position { line: 95, column: 7, }, }, }, ), ], span: Span { start: Position { line: 80, column: 31, }, end: Position { line: 95, column: 9, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 77, column: 53, }, end: Position { line: 96, column: 6, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 76, column: 13, }, end: Position { line: 97, column: 4, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "config", span: Span { start: Position { line: 99, column: 3, }, end: Position { line: 99, column: 9, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkIf", span: Span { start: Position { line: 99, column: 12, }, end: Position { line: 99, column: 16, }, }, }, ), arguments: [ BinaryOperation( BinaryOperation { left: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 99, column: 18, }, end: Position { line: 99, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "provider", span: Span { start: Position { line: 99, column: 22, }, end: Position { line: 99, column: 30, }, }, }, ), ], default: None, }, ), operator: NotEqualTo, right: String( String_ { parts: [ Raw( PartRaw { content: "libc", span: Span { start: Position { line: 99, column: 35, }, end: Position { line: 99, column: 39, }, }, }, ), ], span: Span { start: Position { line: 99, column: 34, }, end: Position { line: 99, column: 40, }, }, }, ), }, ), Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "environment", span: Span { start: Position { line: 100, column: 5, }, end: Position { line: 100, column: 16, }, }, }, ), Raw( PartRaw { content: "etc", span: Span { start: Position { line: 100, column: 17, }, end: Position { line: 100, column: 20, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "ld-nix.so.preload", span: Span { start: Position { line: 100, column: 22, }, end: Position { line: 100, column: 39, }, }, }, ), ], span: Span { start: Position { line: 100, column: 21, }, end: Position { line: 100, column: 40, }, }, }, ), }, ), Raw( PartRaw { content: "text", span: Span { start: Position { line: 100, column: 41, }, end: Position { line: 100, column: 45, }, }, }, ), ], to: IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "", span: Span { start: Position { line: 101, column: 1, }, end: Position { line: 101, column: 7, }, }, }, ), Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "providerLibPath", span: Span { start: Position { line: 101, column: 9, }, end: Position { line: 101, column: 24, }, }, }, ), }, ), Raw( PartRaw { content: "\n", span: Span { start: Position { line: 101, column: 1, }, end: Position { line: 102, column: 5, }, }, }, ), ], span: Span { start: Position { line: 100, column: 48, }, end: Position { line: 102, column: 7, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 103, column: 5, }, end: Position { line: 103, column: 13, }, }, }, ), Raw( PartRaw { content: "apparmor", span: Span { start: Position { line: 103, column: 14, }, end: Position { line: 103, column: 22, }, }, }, ), Raw( PartRaw { content: "includes", span: Span { start: Position { line: 103, column: 23, }, end: Position { line: 103, column: 31, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "abstractions/base", span: Span { start: Position { line: 104, column: 8, }, end: Position { line: 104, column: 25, }, }, }, ), ], span: Span { start: Position { line: 104, column: 7, }, end: Position { line: 104, column: 26, }, }, }, ), }, ), ], to: IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "r /etc/ld-nix.so.preload,\nr ", span: Span { start: Position { line: 105, column: 1, }, end: Position { line: 106, column: 11, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "config", span: Span { start: Position { line: 106, column: 13, }, end: Position { line: 106, column: 19, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "environment", span: Span { start: Position { line: 106, column: 20, }, end: Position { line: 106, column: 31, }, }, }, ), Raw( PartRaw { content: "etc", span: Span { start: Position { line: 106, column: 32, }, end: Position { line: 106, column: 35, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "ld-nix.so.preload", span: Span { start: Position { line: 106, column: 37, }, end: Position { line: 106, column: 54, }, }, }, ), ], span: Span { start: Position { line: 106, column: 36, }, end: Position { line: 106, column: 55, }, }, }, ), }, ), Raw( PartRaw { content: "source", span: Span { start: Position { line: 106, column: 56, }, end: Position { line: 106, column: 62, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: ",\ninclude \"", span: Span { start: Position { line: 105, column: 1, }, end: Position { line: 107, column: 18, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 107, column: 20, }, end: Position { line: 107, column: 24, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "apparmorRulesFromClosure", span: Span { start: Position { line: 107, column: 25, }, end: Position { line: 107, column: 49, }, }, }, ), ], default: None, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "name", span: Span { start: Position { line: 108, column: 13, }, end: Position { line: 108, column: 17, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "mallocLib", span: Span { start: Position { line: 108, column: 21, }, end: Position { line: 108, column: 30, }, }, }, ), ], span: Span { start: Position { line: 108, column: 20, }, end: Position { line: 108, column: 31, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "baseRules", span: Span { start: Position { line: 109, column: 13, }, end: Position { line: 109, column: 22, }, }, }, ), ], to: List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "mr $path/lib/**.so*", span: Span { start: Position { line: 109, column: 27, }, end: Position { line: 109, column: 46, }, }, }, ), ], span: Span { start: Position { line: 109, column: 26, }, end: Position { line: 109, column: 47, }, }, }, ), ], span: Span { start: Position { line: 109, column: 25, }, end: Position { line: 109, column: 48, }, }, }, ), }, ), ], span: Span { start: Position { line: 107, column: 50, }, end: Position { line: 110, column: 12, }, }, }, ), List( List { elements: [ Identifier( Identifier { id: "mallocLib", span: Span { start: Position { line: 110, column: 15, }, end: Position { line: 110, column: 24, }, }, }, ), ], span: Span { start: Position { line: 110, column: 13, }, end: Position { line: 110, column: 26, }, }, }, ), ], }, ), }, ), Raw( PartRaw { content: "\"\n", span: Span { start: Position { line: 105, column: 1, }, end: Position { line: 111, column: 7, }, }, }, ), ], span: Span { start: Position { line: 104, column: 29, }, end: Position { line: 111, column: 9, }, }, }, ), }, ), ], span: Span { start: Position { line: 103, column: 34, }, end: Position { line: 112, column: 6, }, }, }, ), }, ), ], span: Span { start: Position { line: 99, column: 42, }, end: Position { line: 113, column: 4, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 71, column: 1, }, end: Position { line: 114, column: 2, }, }, }, ), span: Span { start: Position { line: 4, column: 1, }, end: Position { line: 114, column: 2, }, }, }, ), span: Span { start: Position { line: 2, column: 1, }, end: Position { line: 114, column: 2, }, }, }, ), span: Span { start: Position { line: 1, column: 1, }, end: Position { line: 114, column: 2, }, }, }, )