Function( Function { head: Destructured( FunctionHeadDestructured { ellipsis: true, identifier: None, arguments: [ FunctionHeadDestructuredArgument { identifier: "config", default: None, }, FunctionHeadDestructuredArgument { identifier: "lib", default: None, }, FunctionHeadDestructuredArgument { identifier: "pkgs", default: None, }, ], }, ), body: With( With { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 3, column: 6, }, end: Position { line: 3, column: 9, }, }, }, ), target: LetIn( LetIn { bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "cfg", span: Span { start: Position { line: 5, column: 3, }, end: Position { line: 5, column: 6, }, }, }, ), ], to: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "config", span: Span { start: Position { line: 5, column: 9, }, end: Position { line: 5, column: 15, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 5, column: 16, }, end: Position { line: 5, column: 24, }, }, }, ), Raw( PartRaw { content: "doas", span: Span { start: Position { line: 5, column: 25, }, end: Position { line: 5, column: 29, }, }, }, ), ], default: None, }, ), }, ), Inherit( BindingInherit { from: Some( Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 7, column: 12, }, end: Position { line: 7, column: 16, }, }, }, ), ), attributes: [ Raw( PartRaw { content: "doas", span: Span { start: Position { line: 7, column: 18, }, end: Position { line: 7, column: 22, }, }, }, ), ], span: Span { start: Position { line: 4, column: 4, }, end: Position { line: 7, column: 23, }, }, }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "mkUsrString", span: Span { start: Position { line: 9, column: 3, }, end: Position { line: 9, column: 14, }, }, }, ), ], to: Function( Function { head: Simple( FunctionHeadSimple { identifier: "user", }, ), body: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "toString", span: Span { start: Position { line: 9, column: 23, }, end: Position { line: 9, column: 31, }, }, }, ), arguments: [ Identifier( Identifier { id: "user", span: Span { start: Position { line: 9, column: 32, }, end: Position { line: 9, column: 36, }, }, }, ), ], }, ), span: Span { start: Position { line: 9, column: 17, }, end: Position { line: 9, column: 36, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "mkGrpString", span: Span { start: Position { line: 11, column: 3, }, end: Position { line: 11, column: 14, }, }, }, ), ], to: Function( Function { head: Simple( FunctionHeadSimple { identifier: "group", }, ), body: String( String_ { parts: [ Raw( PartRaw { content: ":", span: Span { start: Position { line: 11, column: 25, }, end: Position { line: 11, column: 43, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "toString", span: Span { start: Position { line: 11, column: 28, }, end: Position { line: 11, column: 36, }, }, }, ), arguments: [ Identifier( Identifier { id: "group", span: Span { start: Position { line: 11, column: 37, }, end: Position { line: 11, column: 42, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 11, column: 24, }, end: Position { line: 11, column: 44, }, }, }, ), span: Span { start: Position { line: 11, column: 17, }, end: Position { line: 11, column: 44, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "mkOpts", span: Span { start: Position { line: 13, column: 3, }, end: Position { line: 13, column: 9, }, }, }, ), ], to: Function( Function { head: Simple( FunctionHeadSimple { identifier: "rule", }, ), body: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "concatStringsSep", span: Span { start: Position { line: 13, column: 18, }, end: Position { line: 13, column: 34, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: " ", span: Span { start: Position { line: 13, column: 36, }, end: Position { line: 13, column: 37, }, }, }, ), ], span: Span { start: Position { line: 13, column: 35, }, end: Position { line: 13, column: 38, }, }, }, ), List( List { elements: [ FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "optionalString", span: Span { start: Position { line: 14, column: 6, }, end: Position { line: 14, column: 20, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 14, column: 21, }, end: Position { line: 14, column: 25, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "noPass", span: Span { start: Position { line: 14, column: 26, }, end: Position { line: 14, column: 32, }, }, }, ), ], default: None, }, ), String( String_ { parts: [ Raw( PartRaw { content: "nopass", span: Span { start: Position { line: 14, column: 34, }, end: Position { line: 14, column: 40, }, }, }, ), ], span: Span { start: Position { line: 14, column: 33, }, end: Position { line: 14, column: 41, }, }, }, ), ], }, ), FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "optionalString", span: Span { start: Position { line: 15, column: 6, }, end: Position { line: 15, column: 20, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 15, column: 21, }, end: Position { line: 15, column: 25, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "noLog", span: Span { start: Position { line: 15, column: 26, }, end: Position { line: 15, column: 31, }, }, }, ), ], default: None, }, ), String( String_ { parts: [ Raw( PartRaw { content: "nolog", span: Span { start: Position { line: 15, column: 33, }, end: Position { line: 15, column: 38, }, }, }, ), ], span: Span { start: Position { line: 15, column: 32, }, end: Position { line: 15, column: 39, }, }, }, ), ], }, ), FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "optionalString", span: Span { start: Position { line: 16, column: 6, }, end: Position { line: 16, column: 20, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 16, column: 21, }, end: Position { line: 16, column: 25, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "persist", span: Span { start: Position { line: 16, column: 26, }, end: Position { line: 16, column: 33, }, }, }, ), ], default: None, }, ), String( String_ { parts: [ Raw( PartRaw { content: "persist", span: Span { start: Position { line: 16, column: 35, }, end: Position { line: 16, column: 42, }, }, }, ), ], span: Span { start: Position { line: 16, column: 34, }, end: Position { line: 16, column: 43, }, }, }, ), ], }, ), FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "optionalString", span: Span { start: Position { line: 17, column: 6, }, end: Position { line: 17, column: 20, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 17, column: 21, }, end: Position { line: 17, column: 25, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "keepEnv", span: Span { start: Position { line: 17, column: 26, }, end: Position { line: 17, column: 33, }, }, }, ), ], default: None, }, ), String( String_ { parts: [ Raw( PartRaw { content: "keepenv", span: Span { start: Position { line: 17, column: 35, }, end: Position { line: 17, column: 42, }, }, }, ), ], span: Span { start: Position { line: 17, column: 34, }, end: Position { line: 17, column: 43, }, }, }, ), ], }, ), String( String_ { parts: [ Raw( PartRaw { content: "setenv { SSH_AUTH_SOCK TERMINFO TERMINFO_DIRS ", span: Span { start: Position { line: 18, column: 6, }, end: Position { line: 18, column: 87, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "concatStringsSep", span: Span { start: Position { line: 18, column: 54, }, end: Position { line: 18, column: 70, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: " ", span: Span { start: Position { line: 18, column: 72, }, end: Position { line: 18, column: 73, }, }, }, ), ], span: Span { start: Position { line: 18, column: 71, }, end: Position { line: 18, column: 74, }, }, }, ), PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 18, column: 75, }, end: Position { line: 18, column: 79, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "setEnv", span: Span { start: Position { line: 18, column: 80, }, end: Position { line: 18, column: 86, }, }, }, ), ], default: None, }, ), ], }, ), }, ), Raw( PartRaw { content: " }", span: Span { start: Position { line: 18, column: 6, }, end: Position { line: 18, column: 89, }, }, }, ), ], span: Span { start: Position { line: 18, column: 5, }, end: Position { line: 18, column: 90, }, }, }, ), ], span: Span { start: Position { line: 13, column: 39, }, end: Position { line: 19, column: 4, }, }, }, ), ], }, ), span: Span { start: Position { line: 13, column: 12, }, end: Position { line: 19, column: 4, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "mkArgs", span: Span { start: Position { line: 21, column: 3, }, end: Position { line: 21, column: 9, }, }, }, ), ], to: Function( Function { head: Simple( FunctionHeadSimple { identifier: "rule", }, ), body: IfThenElse( IfThenElse { predicate: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "isNull", span: Span { start: Position { line: 22, column: 9, }, end: Position { line: 22, column: 15, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 22, column: 16, }, end: Position { line: 22, column: 20, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "args", span: Span { start: Position { line: 22, column: 21, }, end: Position { line: 22, column: 25, }, }, }, ), ], default: None, }, ), ], }, ), then: String( String_ { parts: [], span: Span { start: Position { line: 22, column: 32, }, end: Position { line: 22, column: 34, }, }, }, ), else_: IfThenElse( IfThenElse { predicate: BinaryOperation( BinaryOperation { left: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "length", span: Span { start: Position { line: 23, column: 14, }, end: Position { line: 23, column: 20, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 23, column: 21, }, end: Position { line: 23, column: 25, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "args", span: Span { start: Position { line: 23, column: 26, }, end: Position { line: 23, column: 30, }, }, }, ), ], default: None, }, ), ], }, ), operator: EqualTo, right: Integer( Integer { value: "0", span: Span { start: Position { line: 23, column: 34, }, end: Position { line: 23, column: 35, }, }, }, ), }, ), then: String( String_ { parts: [ Raw( PartRaw { content: "args", span: Span { start: Position { line: 23, column: 43, }, end: Position { line: 23, column: 47, }, }, }, ), ], span: Span { start: Position { line: 23, column: 42, }, end: Position { line: 23, column: 48, }, }, }, ), else_: String( String_ { parts: [ Raw( PartRaw { content: "args ", span: Span { start: Position { line: 24, column: 11, }, end: Position { line: 24, column: 49, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "concatStringsSep", span: Span { start: Position { line: 24, column: 18, }, end: Position { line: 24, column: 34, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: " ", span: Span { start: Position { line: 24, column: 36, }, end: Position { line: 24, column: 37, }, }, }, ), ], span: Span { start: Position { line: 24, column: 35, }, end: Position { line: 24, column: 38, }, }, }, ), PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 24, column: 39, }, end: Position { line: 24, column: 43, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "args", span: Span { start: Position { line: 24, column: 44, }, end: Position { line: 24, column: 48, }, }, }, ), ], default: None, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 24, column: 10, }, end: Position { line: 24, column: 50, }, }, }, ), span: Span { start: Position { line: 23, column: 10, }, end: Position { line: 24, column: 50, }, }, }, ), span: Span { start: Position { line: 22, column: 5, }, end: Position { line: 24, column: 50, }, }, }, ), span: Span { start: Position { line: 21, column: 12, }, end: Position { line: 24, column: 50, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "mkRule", span: Span { start: Position { line: 26, column: 3, }, end: Position { line: 26, column: 9, }, }, }, ), ], to: Function( Function { head: Simple( FunctionHeadSimple { identifier: "rule", }, ), body: LetIn( LetIn { bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "opts", span: Span { start: Position { line: 28, column: 7, }, end: Position { line: 28, column: 11, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOpts", span: Span { start: Position { line: 28, column: 14, }, end: Position { line: 28, column: 20, }, }, }, ), arguments: [ Identifier( Identifier { id: "rule", span: Span { start: Position { line: 28, column: 21, }, end: Position { line: 28, column: 25, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "as", span: Span { start: Position { line: 30, column: 7, }, end: Position { line: 30, column: 9, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "optionalString", span: Span { start: Position { line: 30, column: 12, }, end: Position { line: 30, column: 26, }, }, }, ), arguments: [ UnaryOperation( UnaryOperation { operator: Not, operand: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "isNull", span: Span { start: Position { line: 30, column: 29, }, end: Position { line: 30, column: 35, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 30, column: 36, }, end: Position { line: 30, column: 40, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "runAs", span: Span { start: Position { line: 30, column: 41, }, end: Position { line: 30, column: 46, }, }, }, ), ], default: None, }, ), ], }, ), span: Span { start: Position { line: 30, column: 28, }, end: Position { line: 30, column: 46, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "as ", span: Span { start: Position { line: 30, column: 49, }, end: Position { line: 30, column: 65, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 30, column: 54, }, end: Position { line: 30, column: 58, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "runAs", span: Span { start: Position { line: 30, column: 59, }, end: Position { line: 30, column: 64, }, }, }, ), ], default: None, }, ), }, ), ], span: Span { start: Position { line: 30, column: 48, }, end: Position { line: 30, column: 66, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "cmd", span: Span { start: Position { line: 32, column: 7, }, end: Position { line: 32, column: 10, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "optionalString", span: Span { start: Position { line: 32, column: 13, }, end: Position { line: 32, column: 27, }, }, }, ), arguments: [ UnaryOperation( UnaryOperation { operator: Not, operand: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "isNull", span: Span { start: Position { line: 32, column: 30, }, end: Position { line: 32, column: 36, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 32, column: 37, }, end: Position { line: 32, column: 41, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "cmd", span: Span { start: Position { line: 32, column: 42, }, end: Position { line: 32, column: 45, }, }, }, ), ], default: None, }, ), ], }, ), span: Span { start: Position { line: 32, column: 29, }, end: Position { line: 32, column: 45, }, }, }, ), String( String_ { parts: [ Raw( PartRaw { content: "cmd ", span: Span { start: Position { line: 32, column: 48, }, end: Position { line: 32, column: 63, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 32, column: 54, }, end: Position { line: 32, column: 58, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "cmd", span: Span { start: Position { line: 32, column: 59, }, end: Position { line: 32, column: 62, }, }, }, ), ], default: None, }, ), }, ), ], span: Span { start: Position { line: 32, column: 47, }, end: Position { line: 32, column: 64, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "args", span: Span { start: Position { line: 34, column: 7, }, end: Position { line: 34, column: 11, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkArgs", span: Span { start: Position { line: 34, column: 14, }, end: Position { line: 34, column: 20, }, }, }, ), arguments: [ Identifier( Identifier { id: "rule", span: Span { start: Position { line: 34, column: 21, }, end: Position { line: 34, column: 25, }, }, }, ), ], }, ), }, ), ], target: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "optionals", span: Span { start: Position { line: 36, column: 5, }, end: Position { line: 36, column: 14, }, }, }, ), arguments: [ BinaryOperation( BinaryOperation { left: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "length", span: Span { start: Position { line: 36, column: 16, }, end: Position { line: 36, column: 22, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 36, column: 23, }, end: Position { line: 36, column: 26, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "extraRules", span: Span { start: Position { line: 36, column: 27, }, end: Position { line: 36, column: 37, }, }, }, ), ], default: None, }, ), ], }, ), operator: GreaterThan, right: Integer( Integer { value: "0", span: Span { start: Position { line: 36, column: 40, }, end: Position { line: 36, column: 41, }, }, }, ), }, ), List( List { elements: [ FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "optionalString", span: Span { start: Position { line: 38, column: 9, }, end: Position { line: 38, column: 23, }, }, }, ), arguments: [ BinaryOperation( BinaryOperation { left: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "length", span: Span { start: Position { line: 38, column: 25, }, end: Position { line: 38, column: 31, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 38, column: 32, }, end: Position { line: 38, column: 36, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "users", span: Span { start: Position { line: 38, column: 37, }, end: Position { line: 38, column: 42, }, }, }, ), ], default: None, }, ), ], }, ), operator: GreaterThan, right: Integer( Integer { value: "0", span: Span { start: Position { line: 38, column: 45, }, end: Position { line: 38, column: 46, }, }, }, ), }, ), FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "map", span: Span { start: Position { line: 39, column: 12, }, end: Position { line: 39, column: 15, }, }, }, ), arguments: [ Function( Function { head: Simple( FunctionHeadSimple { identifier: "usr", }, ), body: String( String_ { parts: [ Raw( PartRaw { content: "permit ", span: Span { start: Position { line: 39, column: 23, }, end: Position { line: 39, column: 37, }, }, }, ), Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "opts", span: Span { start: Position { line: 39, column: 32, }, end: Position { line: 39, column: 36, }, }, }, ), }, ), Raw( PartRaw { content: " ", span: Span { start: Position { line: 39, column: 23, }, end: Position { line: 39, column: 38, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkUsrString", span: Span { start: Position { line: 39, column: 40, }, end: Position { line: 39, column: 51, }, }, }, ), arguments: [ Identifier( Identifier { id: "usr", span: Span { start: Position { line: 39, column: 52, }, end: Position { line: 39, column: 55, }, }, }, ), ], }, ), }, ), Raw( PartRaw { content: " ", span: Span { start: Position { line: 39, column: 23, }, end: Position { line: 39, column: 57, }, }, }, ), Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "as", span: Span { start: Position { line: 39, column: 59, }, end: Position { line: 39, column: 61, }, }, }, ), }, ), Raw( PartRaw { content: " ", span: Span { start: Position { line: 39, column: 23, }, end: Position { line: 39, column: 63, }, }, }, ), Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "cmd", span: Span { start: Position { line: 39, column: 65, }, end: Position { line: 39, column: 68, }, }, }, ), }, ), Raw( PartRaw { content: " ", span: Span { start: Position { line: 39, column: 23, }, end: Position { line: 39, column: 70, }, }, }, ), Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "args", span: Span { start: Position { line: 39, column: 72, }, end: Position { line: 39, column: 76, }, }, }, ), }, ), ], span: Span { start: Position { line: 39, column: 22, }, end: Position { line: 39, column: 78, }, }, }, ), span: Span { start: Position { line: 39, column: 17, }, end: Position { line: 39, column: 78, }, }, }, ), PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 39, column: 80, }, end: Position { line: 39, column: 84, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "users", span: Span { start: Position { line: 39, column: 85, }, end: Position { line: 39, column: 90, }, }, }, ), ], default: None, }, ), ], }, ), ], }, ), FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "optionalString", span: Span { start: Position { line: 42, column: 9, }, end: Position { line: 42, column: 23, }, }, }, ), arguments: [ BinaryOperation( BinaryOperation { left: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "length", span: Span { start: Position { line: 42, column: 25, }, end: Position { line: 42, column: 31, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 42, column: 32, }, end: Position { line: 42, column: 36, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "groups", span: Span { start: Position { line: 42, column: 37, }, end: Position { line: 42, column: 43, }, }, }, ), ], default: None, }, ), ], }, ), operator: GreaterThan, right: Integer( Integer { value: "0", span: Span { start: Position { line: 42, column: 46, }, end: Position { line: 42, column: 47, }, }, }, ), }, ), FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "map", span: Span { start: Position { line: 43, column: 12, }, end: Position { line: 43, column: 15, }, }, }, ), arguments: [ Function( Function { head: Simple( FunctionHeadSimple { identifier: "grp", }, ), body: String( String_ { parts: [ Raw( PartRaw { content: "permit ", span: Span { start: Position { line: 43, column: 23, }, end: Position { line: 43, column: 37, }, }, }, ), Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "opts", span: Span { start: Position { line: 43, column: 32, }, end: Position { line: 43, column: 36, }, }, }, ), }, ), Raw( PartRaw { content: " ", span: Span { start: Position { line: 43, column: 23, }, end: Position { line: 43, column: 38, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkGrpString", span: Span { start: Position { line: 43, column: 40, }, end: Position { line: 43, column: 51, }, }, }, ), arguments: [ Identifier( Identifier { id: "grp", span: Span { start: Position { line: 43, column: 52, }, end: Position { line: 43, column: 55, }, }, }, ), ], }, ), }, ), Raw( PartRaw { content: " ", span: Span { start: Position { line: 43, column: 23, }, end: Position { line: 43, column: 57, }, }, }, ), Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "as", span: Span { start: Position { line: 43, column: 59, }, end: Position { line: 43, column: 61, }, }, }, ), }, ), Raw( PartRaw { content: " ", span: Span { start: Position { line: 43, column: 23, }, end: Position { line: 43, column: 63, }, }, }, ), Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "cmd", span: Span { start: Position { line: 43, column: 65, }, end: Position { line: 43, column: 68, }, }, }, ), }, ), Raw( PartRaw { content: " ", span: Span { start: Position { line: 43, column: 23, }, end: Position { line: 43, column: 70, }, }, }, ), Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "args", span: Span { start: Position { line: 43, column: 72, }, end: Position { line: 43, column: 76, }, }, }, ), }, ), ], span: Span { start: Position { line: 43, column: 22, }, end: Position { line: 43, column: 78, }, }, }, ), span: Span { start: Position { line: 43, column: 17, }, end: Position { line: 43, column: 78, }, }, }, ), PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "rule", span: Span { start: Position { line: 43, column: 80, }, end: Position { line: 43, column: 84, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "groups", span: Span { start: Position { line: 43, column: 85, }, end: Position { line: 43, column: 91, }, }, }, ), ], default: None, }, ), ], }, ), ], }, ), ], span: Span { start: Position { line: 36, column: 43, }, end: Position { line: 45, column: 6, }, }, }, ), ], }, ), span: Span { start: Position { line: 27, column: 5, }, end: Position { line: 45, column: 6, }, }, }, ), span: Span { start: Position { line: 26, column: 12, }, end: Position { line: 45, column: 6, }, }, }, ), }, ), ], target: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "options", span: Span { start: Position { line: 51, column: 3, }, end: Position { line: 51, column: 10, }, }, }, ), Raw( PartRaw { content: "security", span: Span { start: Position { line: 51, column: 11, }, end: Position { line: 51, column: 19, }, }, }, ), Raw( PartRaw { content: "doas", span: Span { start: Position { line: 51, column: 20, }, end: Position { line: 51, column: 24, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "enable", span: Span { start: Position { line: 53, column: 5, }, end: Position { line: 53, column: 11, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 53, column: 14, }, end: Position { line: 53, column: 22, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 54, column: 7, }, end: Position { line: 54, column: 11, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 54, column: 19, }, end: Position { line: 54, column: 24, }, }, }, ), target: Identifier( Identifier { id: "bool", span: Span { start: Position { line: 54, column: 26, }, end: Position { line: 54, column: 30, }, }, }, ), span: Span { start: Position { line: 54, column: 14, }, end: Position { line: 54, column: 30, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 55, column: 7, }, end: Position { line: 55, column: 14, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 55, column: 17, }, end: Position { line: 55, column: 22, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 56, column: 7, }, end: Position { line: 56, column: 18, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 56, column: 21, }, end: Position { line: 56, column: 24, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 56, column: 25, }, end: Position { line: 56, column: 30, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Whether to enable the {command}`doas` command, which allows\nnon-root users to execute commands as root.\n", span: Span { start: Position { line: 57, column: 1, }, end: Position { line: 59, column: 7, }, }, }, ), ], span: Span { start: Position { line: 56, column: 31, }, end: Position { line: 59, column: 9, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 53, column: 23, }, end: Position { line: 60, column: 6, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "wheelNeedsPassword", span: Span { start: Position { line: 62, column: 5, }, end: Position { line: 62, column: 23, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 62, column: 26, }, end: Position { line: 62, column: 34, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 63, column: 7, }, end: Position { line: 63, column: 11, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 63, column: 19, }, end: Position { line: 63, column: 24, }, }, }, ), target: Identifier( Identifier { id: "bool", span: Span { start: Position { line: 63, column: 26, }, end: Position { line: 63, column: 30, }, }, }, ), span: Span { start: Position { line: 63, column: 14, }, end: Position { line: 63, column: 30, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 64, column: 7, }, end: Position { line: 64, column: 14, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 64, column: 17, }, end: Position { line: 64, column: 21, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 65, column: 7, }, end: Position { line: 65, column: 18, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 65, column: 21, }, end: Position { line: 65, column: 24, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 65, column: 25, }, end: Position { line: 65, column: 30, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Whether users of the `wheel` group must provide a password to\nrun commands as super user via {command}`doas`.\n", span: Span { start: Position { line: 66, column: 1, }, end: Position { line: 68, column: 7, }, }, }, ), ], span: Span { start: Position { line: 65, column: 31, }, end: Position { line: 68, column: 9, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 62, column: 35, }, end: Position { line: 69, column: 6, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "extraRules", span: Span { start: Position { line: 71, column: 5, }, end: Position { line: 71, column: 15, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 71, column: 18, }, end: Position { line: 71, column: 26, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 72, column: 7, }, end: Position { line: 72, column: 14, }, }, }, ), ], to: List( List { elements: [], span: Span { start: Position { line: 72, column: 17, }, end: Position { line: 72, column: 19, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 73, column: 7, }, end: Position { line: 73, column: 18, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 73, column: 21, }, end: Position { line: 73, column: 24, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 73, column: 25, }, end: Position { line: 73, column: 30, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Define specific rules to be set in the\n{file}`/etc/doas.conf` file. More specific rules should\ncome after more general ones in order to yield the expected behavior.\nYou can use `mkBefore` and/or `mkAfter` to ensure\nthis is the case when configuration options are merged.\n", span: Span { start: Position { line: 74, column: 1, }, end: Position { line: 79, column: 7, }, }, }, ), ], span: Span { start: Position { line: 73, column: 31, }, end: Position { line: 79, column: 9, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "example", span: Span { start: Position { line: 80, column: 7, }, end: Position { line: 80, column: 14, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "literalExpression", span: Span { start: Position { line: 80, column: 17, }, end: Position { line: 80, column: 34, }, }, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "[\n # Allow execution of any command by any user in group doas, requiring\n # a password and keeping any previously-defined environment variables.\n { groups = [ \"doas\" ]; noPass = false; keepEnv = true; }\n\n # Allow execution of \"/home/root/secret.sh\" by user `backup` OR user\n # `database` OR any member of the group with GID `1006`, without a\n # password.\n { users = [ \"backup\" \"database\" ]; groups = [ 1006 ];\n cmd = \"/home/root/secret.sh\"; noPass = true; }\n\n # Allow any member of group `bar` to run `/home/baz/cmd1.sh` as user\n # `foo` with argument `hello-doas`.\n { groups = [ \"bar\" ]; runAs = \"foo\";\n cmd = \"/home/baz/cmd1.sh\"; args = [ \"hello-doas\" ]; }\n\n # Allow any member of group `bar` to run `/home/baz/cmd2.sh` as user\n # `foo` with no arguments.\n { groups = [ \"bar\" ]; runAs = \"foo\";\n cmd = \"/home/baz/cmd2.sh\"; args = [ ]; }\n\n # Allow user `abusers` to execute \"nano\" and unset the value of\n # SSH_AUTH_SOCK, override the value of ALPHA to 1, and inherit the\n # value of BETA from the current environment.\n { users = [ \"abusers\" ]; cmd = \"nano\";\n setEnv = [ \"-SSH_AUTH_SOCK\" \"ALPHA=1\" \"BETA\" ]; }\n]\n", span: Span { start: Position { line: 81, column: 1, }, end: Position { line: 108, column: 7, }, }, }, ), ], span: Span { start: Position { line: 80, column: 35, }, end: Position { line: 108, column: 9, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 109, column: 7, }, end: Position { line: 109, column: 11, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 109, column: 19, }, end: Position { line: 109, column: 24, }, }, }, ), target: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "listOf", span: Span { start: Position { line: 109, column: 26, }, end: Position { line: 109, column: 32, }, }, }, ), arguments: [ FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "submodule", span: Span { start: Position { line: 110, column: 9, }, end: Position { line: 110, column: 18, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "options", span: Span { start: Position { line: 111, column: 11, }, end: Position { line: 111, column: 18, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "noPass", span: Span { start: Position { line: 113, column: 13, }, end: Position { line: 113, column: 19, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 113, column: 22, }, end: Position { line: 113, column: 30, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 114, column: 15, }, end: Position { line: 114, column: 19, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 114, column: 27, }, end: Position { line: 114, column: 32, }, }, }, ), target: Identifier( Identifier { id: "bool", span: Span { start: Position { line: 114, column: 34, }, end: Position { line: 114, column: 38, }, }, }, ), span: Span { start: Position { line: 114, column: 22, }, end: Position { line: 114, column: 38, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 115, column: 15, }, end: Position { line: 115, column: 22, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 115, column: 25, }, end: Position { line: 115, column: 30, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 116, column: 15, }, end: Position { line: 116, column: 26, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 116, column: 29, }, end: Position { line: 116, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 116, column: 33, }, end: Position { line: 116, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "If `true`, the user is not required to enter a\npassword.\n", span: Span { start: Position { line: 117, column: 1, }, end: Position { line: 119, column: 15, }, }, }, ), ], span: Span { start: Position { line: 116, column: 39, }, end: Position { line: 119, column: 17, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 113, column: 31, }, end: Position { line: 120, column: 14, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "noLog", span: Span { start: Position { line: 122, column: 13, }, end: Position { line: 122, column: 18, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 122, column: 21, }, end: Position { line: 122, column: 29, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 123, column: 15, }, end: Position { line: 123, column: 19, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 123, column: 27, }, end: Position { line: 123, column: 32, }, }, }, ), target: Identifier( Identifier { id: "bool", span: Span { start: Position { line: 123, column: 34, }, end: Position { line: 123, column: 38, }, }, }, ), span: Span { start: Position { line: 123, column: 22, }, end: Position { line: 123, column: 38, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 124, column: 15, }, end: Position { line: 124, column: 22, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 124, column: 25, }, end: Position { line: 124, column: 30, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 125, column: 15, }, end: Position { line: 125, column: 26, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 125, column: 29, }, end: Position { line: 125, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 125, column: 33, }, end: Position { line: 125, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "If `true`, successful executions will not be logged\nto\n{manpage}`syslogd(8)`.\n", span: Span { start: Position { line: 126, column: 1, }, end: Position { line: 129, column: 15, }, }, }, ), ], span: Span { start: Position { line: 125, column: 39, }, end: Position { line: 129, column: 17, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 122, column: 30, }, end: Position { line: 130, column: 14, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "persist", span: Span { start: Position { line: 132, column: 13, }, end: Position { line: 132, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 132, column: 23, }, end: Position { line: 132, column: 31, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 133, column: 15, }, end: Position { line: 133, column: 19, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 133, column: 27, }, end: Position { line: 133, column: 32, }, }, }, ), target: Identifier( Identifier { id: "bool", span: Span { start: Position { line: 133, column: 34, }, end: Position { line: 133, column: 38, }, }, }, ), span: Span { start: Position { line: 133, column: 22, }, end: Position { line: 133, column: 38, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 134, column: 15, }, end: Position { line: 134, column: 22, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 134, column: 25, }, end: Position { line: 134, column: 30, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 135, column: 15, }, end: Position { line: 135, column: 26, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 135, column: 29, }, end: Position { line: 135, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 135, column: 33, }, end: Position { line: 135, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "If `true`, do not ask for a password again for some\ntime after the user successfully authenticates.\n", span: Span { start: Position { line: 136, column: 1, }, end: Position { line: 138, column: 15, }, }, }, ), ], span: Span { start: Position { line: 135, column: 39, }, end: Position { line: 138, column: 17, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 132, column: 32, }, end: Position { line: 139, column: 14, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "keepEnv", span: Span { start: Position { line: 141, column: 13, }, end: Position { line: 141, column: 20, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 141, column: 23, }, end: Position { line: 141, column: 31, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 142, column: 15, }, end: Position { line: 142, column: 19, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 142, column: 27, }, end: Position { line: 142, column: 32, }, }, }, ), target: Identifier( Identifier { id: "bool", span: Span { start: Position { line: 142, column: 34, }, end: Position { line: 142, column: 38, }, }, }, ), span: Span { start: Position { line: 142, column: 22, }, end: Position { line: 142, column: 38, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 143, column: 15, }, end: Position { line: 143, column: 22, }, }, }, ), ], to: Identifier( Identifier { id: "false", span: Span { start: Position { line: 143, column: 25, }, end: Position { line: 143, column: 30, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 144, column: 15, }, end: Position { line: 144, column: 26, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 144, column: 29, }, end: Position { line: 144, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 144, column: 33, }, end: Position { line: 144, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "If `true`, environment variables other than those\nlisted in\n{manpage}`doas(1)`\nare kept when creating the environment for the new process.\n", span: Span { start: Position { line: 145, column: 1, }, end: Position { line: 149, column: 15, }, }, }, ), ], span: Span { start: Position { line: 144, column: 39, }, end: Position { line: 149, column: 17, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 141, column: 32, }, end: Position { line: 150, column: 14, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "setEnv", span: Span { start: Position { line: 152, column: 13, }, end: Position { line: 152, column: 19, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 152, column: 22, }, end: Position { line: 152, column: 30, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 153, column: 15, }, end: Position { line: 153, column: 19, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 153, column: 27, }, end: Position { line: 153, column: 32, }, }, }, ), target: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "listOf", span: Span { start: Position { line: 153, column: 34, }, end: Position { line: 153, column: 40, }, }, }, ), arguments: [ Identifier( Identifier { id: "str", span: Span { start: Position { line: 153, column: 41, }, end: Position { line: 153, column: 44, }, }, }, ), ], }, ), span: Span { start: Position { line: 153, column: 22, }, end: Position { line: 153, column: 44, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 154, column: 15, }, end: Position { line: 154, column: 22, }, }, }, ), ], to: List( List { elements: [], span: Span { start: Position { line: 154, column: 25, }, end: Position { line: 154, column: 27, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 155, column: 15, }, end: Position { line: 155, column: 26, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 155, column: 29, }, end: Position { line: 155, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 155, column: 33, }, end: Position { line: 155, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Keep or set the specified variables. Variables may also be\nremoved with a leading '-' or set using\n`variable=value`. If the first character of\n`value` is a ", span: Span { start: Position { line: 156, column: 1, }, end: Position { line: 159, column: 30, }, }, }, ), Raw( PartRaw { content: "'", span: Span { start: Position { line: 156, column: 1, }, end: Position { line: 159, column: 31, }, }, }, ), Raw( PartRaw { content: "$", span: Span { start: Position { line: 156, column: 1, }, end: Position { line: 159, column: 32, }, }, }, ), Raw( PartRaw { content: "', the value to be set is taken from\nthe existing environment variable of the indicated name. This\noption is processed after the default environment has been\ncreated.\n\nNOTE: All rules have `setenv { SSH_AUTH_SOCK }` by\ndefault. To prevent `SSH_AUTH_SOCK` from being\ninherited, add `\"-SSH_AUTH_SOCK\"` anywhere in this\nlist.\n", span: Span { start: Position { line: 156, column: 1, }, end: Position { line: 168, column: 15, }, }, }, ), ], span: Span { start: Position { line: 155, column: 39, }, end: Position { line: 168, column: 17, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 152, column: 31, }, end: Position { line: 169, column: 14, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "users", span: Span { start: Position { line: 171, column: 13, }, end: Position { line: 171, column: 18, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 171, column: 21, }, end: Position { line: 171, column: 29, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 172, column: 15, }, end: Position { line: 172, column: 19, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 172, column: 27, }, end: Position { line: 172, column: 32, }, }, }, ), target: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "listOf", span: Span { start: Position { line: 172, column: 34, }, end: Position { line: 172, column: 40, }, }, }, ), arguments: [ FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "either", span: Span { start: Position { line: 172, column: 42, }, end: Position { line: 172, column: 48, }, }, }, ), arguments: [ Identifier( Identifier { id: "str", span: Span { start: Position { line: 172, column: 49, }, end: Position { line: 172, column: 52, }, }, }, ), Identifier( Identifier { id: "int", span: Span { start: Position { line: 172, column: 53, }, end: Position { line: 172, column: 56, }, }, }, ), ], }, ), ], }, ), span: Span { start: Position { line: 172, column: 22, }, end: Position { line: 172, column: 57, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 173, column: 15, }, end: Position { line: 173, column: 22, }, }, }, ), ], to: List( List { elements: [], span: Span { start: Position { line: 173, column: 25, }, end: Position { line: 173, column: 27, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 174, column: 15, }, end: Position { line: 174, column: 26, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 174, column: 29, }, end: Position { line: 174, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 174, column: 33, }, end: Position { line: 174, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "The usernames / UIDs this rule should apply for.", span: Span { start: Position { line: 174, column: 40, }, end: Position { line: 174, column: 88, }, }, }, ), ], span: Span { start: Position { line: 174, column: 39, }, end: Position { line: 174, column: 89, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 171, column: 30, }, end: Position { line: 175, column: 14, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "groups", span: Span { start: Position { line: 177, column: 13, }, end: Position { line: 177, column: 19, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 177, column: 22, }, end: Position { line: 177, column: 30, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 178, column: 15, }, end: Position { line: 178, column: 19, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 178, column: 27, }, end: Position { line: 178, column: 32, }, }, }, ), target: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "listOf", span: Span { start: Position { line: 178, column: 34, }, end: Position { line: 178, column: 40, }, }, }, ), arguments: [ FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "either", span: Span { start: Position { line: 178, column: 42, }, end: Position { line: 178, column: 48, }, }, }, ), arguments: [ Identifier( Identifier { id: "str", span: Span { start: Position { line: 178, column: 49, }, end: Position { line: 178, column: 52, }, }, }, ), Identifier( Identifier { id: "int", span: Span { start: Position { line: 178, column: 53, }, end: Position { line: 178, column: 56, }, }, }, ), ], }, ), ], }, ), span: Span { start: Position { line: 178, column: 22, }, end: Position { line: 178, column: 57, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 179, column: 15, }, end: Position { line: 179, column: 22, }, }, }, ), ], to: List( List { elements: [], span: Span { start: Position { line: 179, column: 25, }, end: Position { line: 179, column: 27, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 180, column: 15, }, end: Position { line: 180, column: 26, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 180, column: 29, }, end: Position { line: 180, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 180, column: 33, }, end: Position { line: 180, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "The groups / GIDs this rule should apply for.", span: Span { start: Position { line: 180, column: 40, }, end: Position { line: 180, column: 85, }, }, }, ), ], span: Span { start: Position { line: 180, column: 39, }, end: Position { line: 180, column: 86, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 177, column: 31, }, end: Position { line: 181, column: 14, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "runAs", span: Span { start: Position { line: 183, column: 13, }, end: Position { line: 183, column: 18, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 183, column: 21, }, end: Position { line: 183, column: 29, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 184, column: 15, }, end: Position { line: 184, column: 19, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 184, column: 27, }, end: Position { line: 184, column: 32, }, }, }, ), target: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "nullOr", span: Span { start: Position { line: 184, column: 34, }, end: Position { line: 184, column: 40, }, }, }, ), arguments: [ Identifier( Identifier { id: "str", span: Span { start: Position { line: 184, column: 41, }, end: Position { line: 184, column: 44, }, }, }, ), ], }, ), span: Span { start: Position { line: 184, column: 22, }, end: Position { line: 184, column: 44, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 185, column: 15, }, end: Position { line: 185, column: 22, }, }, }, ), ], to: Identifier( Identifier { id: "null", span: Span { start: Position { line: 185, column: 25, }, end: Position { line: 185, column: 29, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 186, column: 15, }, end: Position { line: 186, column: 26, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 186, column: 29, }, end: Position { line: 186, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 186, column: 33, }, end: Position { line: 186, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Which user or group the specified command is allowed to run as.\nWhen set to `null` (the default), all users are\nallowed.\n\nA user can be specified using just the username:\n`\"foo\"`. It is also possible to only allow running as\na specific group with `\":bar\"`.\n", span: Span { start: Position { line: 187, column: 1, }, end: Position { line: 194, column: 15, }, }, }, ), ], span: Span { start: Position { line: 186, column: 39, }, end: Position { line: 194, column: 17, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 183, column: 30, }, end: Position { line: 195, column: 14, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "cmd", span: Span { start: Position { line: 197, column: 13, }, end: Position { line: 197, column: 16, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 197, column: 19, }, end: Position { line: 197, column: 27, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 198, column: 15, }, end: Position { line: 198, column: 19, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 198, column: 27, }, end: Position { line: 198, column: 32, }, }, }, ), target: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "nullOr", span: Span { start: Position { line: 198, column: 34, }, end: Position { line: 198, column: 40, }, }, }, ), arguments: [ Identifier( Identifier { id: "str", span: Span { start: Position { line: 198, column: 41, }, end: Position { line: 198, column: 44, }, }, }, ), ], }, ), span: Span { start: Position { line: 198, column: 22, }, end: Position { line: 198, column: 44, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 199, column: 15, }, end: Position { line: 199, column: 22, }, }, }, ), ], to: Identifier( Identifier { id: "null", span: Span { start: Position { line: 199, column: 25, }, end: Position { line: 199, column: 29, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 200, column: 15, }, end: Position { line: 200, column: 26, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 200, column: 29, }, end: Position { line: 200, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 200, column: 33, }, end: Position { line: 200, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "The command the user is allowed to run. When set to\n`null` (the default), all commands are allowed.\n\nNOTE: It is best practice to specify absolute paths. If a\nrelative path is specified, only a restricted PATH will be\nsearched.\n", span: Span { start: Position { line: 201, column: 1, }, end: Position { line: 207, column: 15, }, }, }, ), ], span: Span { start: Position { line: 200, column: 39, }, end: Position { line: 207, column: 17, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 197, column: 28, }, end: Position { line: 208, column: 14, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "args", span: Span { start: Position { line: 210, column: 13, }, end: Position { line: 210, column: 17, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 210, column: 20, }, end: Position { line: 210, column: 28, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 211, column: 15, }, end: Position { line: 211, column: 19, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 211, column: 27, }, end: Position { line: 211, column: 32, }, }, }, ), target: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "nullOr", span: Span { start: Position { line: 211, column: 34, }, end: Position { line: 211, column: 40, }, }, }, ), arguments: [ FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "listOf", span: Span { start: Position { line: 211, column: 42, }, end: Position { line: 211, column: 48, }, }, }, ), arguments: [ Identifier( Identifier { id: "str", span: Span { start: Position { line: 211, column: 49, }, end: Position { line: 211, column: 52, }, }, }, ), ], }, ), ], }, ), span: Span { start: Position { line: 211, column: 22, }, end: Position { line: 211, column: 53, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 212, column: 15, }, end: Position { line: 212, column: 22, }, }, }, ), ], to: Identifier( Identifier { id: "null", span: Span { start: Position { line: 212, column: 25, }, end: Position { line: 212, column: 29, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 213, column: 15, }, end: Position { line: 213, column: 26, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 213, column: 29, }, end: Position { line: 213, column: 32, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 213, column: 33, }, end: Position { line: 213, column: 38, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Arguments that must be provided to the command. When set to\n`[]`, the command must be run without any arguments.\n", span: Span { start: Position { line: 214, column: 1, }, end: Position { line: 216, column: 15, }, }, }, ), ], span: Span { start: Position { line: 213, column: 39, }, end: Position { line: 216, column: 17, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 210, column: 29, }, end: Position { line: 217, column: 14, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 111, column: 21, }, end: Position { line: 218, column: 12, }, }, }, ), }, ), ], span: Span { start: Position { line: 110, column: 19, }, end: Position { line: 219, column: 10, }, }, }, ), ], }, ), ], }, ), span: Span { start: Position { line: 109, column: 14, }, end: Position { line: 220, column: 8, }, }, }, ), }, ), ], span: Span { start: Position { line: 71, column: 27, }, end: Position { line: 221, column: 6, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "extraConfig", span: Span { start: Position { line: 223, column: 5, }, end: Position { line: 223, column: 16, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOption", span: Span { start: Position { line: 223, column: 19, }, end: Position { line: 223, column: 27, }, }, }, ), arguments: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "type", span: Span { start: Position { line: 224, column: 7, }, end: Position { line: 224, column: 11, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "types", span: Span { start: Position { line: 224, column: 19, }, end: Position { line: 224, column: 24, }, }, }, ), target: Identifier( Identifier { id: "lines", span: Span { start: Position { line: 224, column: 26, }, end: Position { line: 224, column: 31, }, }, }, ), span: Span { start: Position { line: 224, column: 14, }, end: Position { line: 224, column: 31, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "default", span: Span { start: Position { line: 225, column: 7, }, end: Position { line: 225, column: 14, }, }, }, ), ], to: String( String_ { parts: [], span: Span { start: Position { line: 225, column: 17, }, end: Position { line: 225, column: 19, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "description", span: Span { start: Position { line: 226, column: 7, }, end: Position { line: 226, column: 18, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lib", span: Span { start: Position { line: 226, column: 21, }, end: Position { line: 226, column: 24, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "mdDoc", span: Span { start: Position { line: 226, column: 25, }, end: Position { line: 226, column: 30, }, }, }, ), ], default: None, }, ), arguments: [ IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "Extra configuration text appended to {file}`doas.conf`.\n", span: Span { start: Position { line: 227, column: 1, }, end: Position { line: 228, column: 7, }, }, }, ), ], span: Span { start: Position { line: 226, column: 31, }, end: Position { line: 228, column: 9, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 223, column: 28, }, end: Position { line: 229, column: 6, }, }, }, ), ], }, ), }, ), ], span: Span { start: Position { line: 51, column: 27, }, end: Position { line: 230, column: 4, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "config", span: Span { start: Position { line: 235, column: 3, }, end: Position { line: 235, column: 9, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkIf", span: Span { start: Position { line: 235, column: 12, }, end: Position { line: 235, column: 16, }, }, }, ), arguments: [ PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 235, column: 17, }, end: Position { line: 235, column: 20, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "enable", span: Span { start: Position { line: 235, column: 21, }, end: Position { line: 235, column: 27, }, }, }, ), ], default: None, }, ), Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 237, column: 5, }, end: Position { line: 237, column: 13, }, }, }, ), Raw( PartRaw { content: "doas", span: Span { start: Position { line: 237, column: 14, }, end: Position { line: 237, column: 18, }, }, }, ), Raw( PartRaw { content: "extraRules", span: Span { start: Position { line: 237, column: 19, }, end: Position { line: 237, column: 29, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "mkOrder", span: Span { start: Position { line: 237, column: 32, }, end: Position { line: 237, column: 39, }, }, }, ), arguments: [ Integer( Integer { value: "600", span: Span { start: Position { line: 237, column: 40, }, end: Position { line: 237, column: 43, }, }, }, ), List( List { elements: [ Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "groups", span: Span { start: Position { line: 239, column: 9, }, end: Position { line: 239, column: 15, }, }, }, ), ], to: List( List { elements: [ String( String_ { parts: [ Raw( PartRaw { content: "wheel", span: Span { start: Position { line: 239, column: 21, }, end: Position { line: 239, column: 26, }, }, }, ), ], span: Span { start: Position { line: 239, column: 20, }, end: Position { line: 239, column: 27, }, }, }, ), ], span: Span { start: Position { line: 239, column: 18, }, end: Position { line: 239, column: 29, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "noPass", span: Span { start: Position { line: 240, column: 9, }, end: Position { line: 240, column: 15, }, }, }, ), ], to: UnaryOperation( UnaryOperation { operator: Not, operand: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 240, column: 19, }, end: Position { line: 240, column: 22, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "wheelNeedsPassword", span: Span { start: Position { line: 240, column: 23, }, end: Position { line: 240, column: 41, }, }, }, ), ], default: None, }, ), span: Span { start: Position { line: 240, column: 18, }, end: Position { line: 240, column: 41, }, }, }, ), }, ), ], span: Span { start: Position { line: 238, column: 7, }, end: Position { line: 241, column: 8, }, }, }, ), ], span: Span { start: Position { line: 237, column: 44, }, end: Position { line: 242, column: 6, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 244, column: 5, }, end: Position { line: 244, column: 13, }, }, }, ), Raw( PartRaw { content: "wrappers", span: Span { start: Position { line: 244, column: 14, }, end: Position { line: 244, column: 22, }, }, }, ), Raw( PartRaw { content: "doas", span: Span { start: Position { line: 244, column: 23, }, end: Position { line: 244, column: 27, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "setuid", span: Span { start: Position { line: 245, column: 9, }, end: Position { line: 245, column: 15, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 245, column: 18, }, end: Position { line: 245, column: 22, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "owner", span: Span { start: Position { line: 246, column: 9, }, end: Position { line: 246, column: 14, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "root", span: Span { start: Position { line: 246, column: 18, }, end: Position { line: 246, column: 22, }, }, }, ), ], span: Span { start: Position { line: 246, column: 17, }, end: Position { line: 246, column: 23, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "group", span: Span { start: Position { line: 247, column: 9, }, end: Position { line: 247, column: 14, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "root", span: Span { start: Position { line: 247, column: 18, }, end: Position { line: 247, column: 22, }, }, }, ), ], span: Span { start: Position { line: 247, column: 17, }, end: Position { line: 247, column: 23, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "source", span: Span { start: Position { line: 248, column: 9, }, end: Position { line: 248, column: 15, }, }, }, ), ], to: String( String_ { parts: [ Interpolation( PartInterpolation { expression: Identifier( Identifier { id: "doas", span: Span { start: Position { line: 248, column: 21, }, end: Position { line: 248, column: 25, }, }, }, ), }, ), Raw( PartRaw { content: "/bin/doas", span: Span { start: Position { line: 248, column: 19, }, end: Position { line: 248, column: 35, }, }, }, ), ], span: Span { start: Position { line: 248, column: 18, }, end: Position { line: 248, column: 36, }, }, }, ), }, ), ], span: Span { start: Position { line: 245, column: 7, }, end: Position { line: 249, column: 8, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "environment", span: Span { start: Position { line: 251, column: 5, }, end: Position { line: 251, column: 16, }, }, }, ), Raw( PartRaw { content: "systemPackages", span: Span { start: Position { line: 251, column: 17, }, end: Position { line: 251, column: 31, }, }, }, ), ], to: List( List { elements: [ Identifier( Identifier { id: "doas", span: Span { start: Position { line: 252, column: 7, }, end: Position { line: 252, column: 11, }, }, }, ), ], span: Span { start: Position { line: 251, column: 34, }, end: Position { line: 253, column: 6, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "security", span: Span { start: Position { line: 255, column: 5, }, end: Position { line: 255, column: 13, }, }, }, ), Raw( PartRaw { content: "pam", span: Span { start: Position { line: 255, column: 14, }, end: Position { line: 255, column: 17, }, }, }, ), Raw( PartRaw { content: "services", span: Span { start: Position { line: 255, column: 18, }, end: Position { line: 255, column: 26, }, }, }, ), Raw( PartRaw { content: "doas", span: Span { start: Position { line: 255, column: 27, }, end: Position { line: 255, column: 31, }, }, }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "allowNullPassword", span: Span { start: Position { line: 256, column: 7, }, end: Position { line: 256, column: 24, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 256, column: 27, }, end: Position { line: 256, column: 31, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "sshAgentAuth", span: Span { start: Position { line: 257, column: 7, }, end: Position { line: 257, column: 19, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 257, column: 22, }, end: Position { line: 257, column: 26, }, }, }, ), }, ), ], span: Span { start: Position { line: 255, column: 34, }, end: Position { line: 258, column: 6, }, }, }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "environment", span: Span { start: Position { line: 260, column: 5, }, end: Position { line: 260, column: 16, }, }, }, ), Raw( PartRaw { content: "etc", span: Span { start: Position { line: 260, column: 17, }, end: Position { line: 260, column: 20, }, }, }, ), Expression( PartExpression { expression: String( String_ { parts: [ Raw( PartRaw { content: "doas.conf", span: Span { start: Position { line: 260, column: 22, }, end: Position { line: 260, column: 31, }, }, }, ), ], span: Span { start: Position { line: 260, column: 21, }, end: Position { line: 260, column: 32, }, }, }, ), }, ), ], to: Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "source", span: Span { start: Position { line: 261, column: 7, }, end: Position { line: 261, column: 13, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 261, column: 16, }, end: Position { line: 261, column: 20, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "runCommand", span: Span { start: Position { line: 261, column: 21, }, end: Position { line: 261, column: 31, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "doas-conf", span: Span { start: Position { line: 261, column: 33, }, end: Position { line: 261, column: 42, }, }, }, ), ], span: Span { start: Position { line: 261, column: 32, }, end: Position { line: 261, column: 43, }, }, }, ), Map( Map { recursive: false, bindings: [ KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "src", span: Span { start: Position { line: 263, column: 11, }, end: Position { line: 263, column: 14, }, }, }, ), ], to: FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 263, column: 17, }, end: Position { line: 263, column: 21, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "writeText", span: Span { start: Position { line: 263, column: 22, }, end: Position { line: 263, column: 31, }, }, }, ), ], default: None, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "doas-conf-in", span: Span { start: Position { line: 263, column: 33, }, end: Position { line: 263, column: 45, }, }, }, ), ], span: Span { start: Position { line: 263, column: 32, }, end: Position { line: 263, column: 46, }, }, }, ), IndentedString( IndentedString { parts: [ Raw( PartRaw { content: "# To modify this file, set the NixOS options\n# `security.doas.extraRules` or `security.doas.extraConfig`. To\n# completely replace the contents of this file, use\n# `environment.etc.\"doas.conf\"`.\n\n# \"root\" is allowed to do anything.\npermit nopass keepenv root\n\n# extraRules\n", span: Span { start: Position { line: 264, column: 1, }, end: Position { line: 273, column: 13, }, }, }, ), Interpolation( PartInterpolation { expression: FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "concatStringsSep", span: Span { start: Position { line: 273, column: 15, }, end: Position { line: 273, column: 31, }, }, }, ), arguments: [ String( String_ { parts: [ Raw( PartRaw { content: "\n", span: Span { start: Position { line: 273, column: 33, }, end: Position { line: 273, column: 35, }, }, }, ), ], span: Span { start: Position { line: 273, column: 32, }, end: Position { line: 273, column: 36, }, }, }, ), FunctionApplication( FunctionApplication { function: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "lists", span: Span { start: Position { line: 273, column: 38, }, end: Position { line: 273, column: 43, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "flatten", span: Span { start: Position { line: 273, column: 44, }, end: Position { line: 273, column: 51, }, }, }, ), ], default: None, }, ), arguments: [ FunctionApplication( FunctionApplication { function: Identifier( Identifier { id: "map", span: Span { start: Position { line: 273, column: 53, }, end: Position { line: 273, column: 56, }, }, }, ), arguments: [ Identifier( Identifier { id: "mkRule", span: Span { start: Position { line: 273, column: 57, }, end: Position { line: 273, column: 63, }, }, }, ), PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 273, column: 64, }, end: Position { line: 273, column: 67, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "extraRules", span: Span { start: Position { line: 273, column: 68, }, end: Position { line: 273, column: 78, }, }, }, ), ], default: None, }, ), ], }, ), ], }, ), ], }, ), }, ), Raw( PartRaw { content: "\n\n# extraConfig\n", span: Span { start: Position { line: 264, column: 1, }, end: Position { line: 276, column: 13, }, }, }, ), Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "cfg", span: Span { start: Position { line: 276, column: 15, }, end: Position { line: 276, column: 18, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "extraConfig", span: Span { start: Position { line: 276, column: 19, }, end: Position { line: 276, column: 30, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "\n", span: Span { start: Position { line: 264, column: 1, }, end: Position { line: 277, column: 11, }, }, }, ), ], span: Span { start: Position { line: 263, column: 47, }, end: Position { line: 277, column: 13, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "preferLocalBuild", span: Span { start: Position { line: 278, column: 11, }, end: Position { line: 278, column: 27, }, }, }, ), ], to: Identifier( Identifier { id: "true", span: Span { start: Position { line: 278, column: 30, }, end: Position { line: 278, column: 34, }, }, }, ), }, ), ], span: Span { start: Position { line: 262, column: 9, }, end: Position { line: 279, column: 10, }, }, }, ), String( String_ { parts: [ Interpolation( PartInterpolation { expression: PropertyAccess( PropertyAccess { expression: Identifier( Identifier { id: "pkgs", span: Span { start: Position { line: 281, column: 12, }, end: Position { line: 281, column: 16, }, }, }, ), attribute_path: [ Raw( PartRaw { content: "buildPackages", span: Span { start: Position { line: 281, column: 17, }, end: Position { line: 281, column: 30, }, }, }, ), Raw( PartRaw { content: "doas", span: Span { start: Position { line: 281, column: 31, }, end: Position { line: 281, column: 35, }, }, }, ), ], default: None, }, ), }, ), Raw( PartRaw { content: "/bin/doas -C $src && cp $src $out", span: Span { start: Position { line: 281, column: 10, }, end: Position { line: 281, column: 69, }, }, }, ), ], span: Span { start: Position { line: 281, column: 9, }, end: Position { line: 281, column: 70, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "mode", span: Span { start: Position { line: 282, column: 7, }, end: Position { line: 282, column: 11, }, }, }, ), ], to: String( String_ { parts: [ Raw( PartRaw { content: "0440", span: Span { start: Position { line: 282, column: 15, }, end: Position { line: 282, column: 19, }, }, }, ), ], span: Span { start: Position { line: 282, column: 14, }, end: Position { line: 282, column: 20, }, }, }, ), }, ), ], span: Span { start: Position { line: 260, column: 35, }, end: Position { line: 283, column: 6, }, }, }, ), }, ), ], span: Span { start: Position { line: 235, column: 28, }, end: Position { line: 285, column: 4, }, }, }, ), ], }, ), }, ), KeyValue( BindingKeyValue { from: [ Raw( PartRaw { content: "meta", span: Span { start: Position { line: 287, column: 3, }, end: Position { line: 287, column: 7, }, }, }, ), Raw( PartRaw { content: "maintainers", span: Span { start: Position { line: 287, column: 8, }, end: Position { line: 287, column: 19, }, }, }, ), ], to: With( With { expression: Identifier( Identifier { id: "maintainers", span: Span { start: Position { line: 287, column: 27, }, end: Position { line: 287, column: 38, }, }, }, ), target: List( List { elements: [ Identifier( Identifier { id: "cole-h", span: Span { start: Position { line: 287, column: 42, }, end: Position { line: 287, column: 48, }, }, }, ), ], span: Span { start: Position { line: 287, column: 40, }, end: Position { line: 287, column: 50, }, }, }, ), span: Span { start: Position { line: 287, column: 22, }, end: Position { line: 287, column: 50, }, }, }, ), }, ), ], span: Span { start: Position { line: 47, column: 1, }, end: Position { line: 288, column: 2, }, }, }, ), span: Span { start: Position { line: 4, column: 1, }, end: Position { line: 288, column: 2, }, }, }, ), span: Span { start: Position { line: 3, column: 1, }, end: Position { line: 288, column: 2, }, }, }, ), span: Span { start: Position { line: 1, column: 1, }, end: Position { line: 288, column: 2, }, }, }, )