anchor.diff:                    --name ${escapeShellArg cfg.name}
                     ${optionalString cfg.replace "--replace"}
                     ${optionalString (cfg.runnerGroup != null) "--runnergroup ${escapeShellArg cfg.runnerGroup}"}
  +                  ${optionalString cfg.ephemeral "--ephemeral"}
                   )
   
                   # If the token file contains a PAT (i.e., it starts with "ghp_"), we have to use the --pat option,
  
positive.code:       default = pkgs.github-runner;
        defaultText = literalExpression "pkgs.github-runner";
      };
    };
  
    config = mkIf cfg.enable {
  
negative.code:               ${lines}
              '';
              currentConfigPath = "$STATE_DIRECTORY/.nixos-current-config.json";
              runnerRegistrationConfig = getAttrs [ "name" "tokenFile" "url" "runnerGroup" "extraLabels" "ephemeral" ] cfg;
              newConfigPath = builtins.toFile "${svcName}-config.json" (builtins.toJSON runnerRegistrationConfig);
              newConfigTokenFilename = ".new-token";
              runnerCredFiles = [
  