anchor.diff:    stateDir = "%S/${systemdDir}";
     # %L: Log directory root (usually /var/log); see systemd.unit(5)
     logsDir = "%L/${systemdDir}";
  +  # Name of file stored in service state directory
  +  currentConfigTokenFilename = ".current-token";
   in
   {
     options.services.github-runner = {
  
positive.code:         ExecStart = "${cfg.package}/bin/runsvc.sh";
  
          # Does the following, sequentially:
          # - Copy the current and the previous `tokenFile` to the $RUNTIME_DIRECTORY
          #   and make it accessible to the service user to allow for a content
          #   comparison.
          # - If the module configuration or the token has changed, clear the state directory.
          # - Configure the runner.
          # - Copy the configured `tokenFile` to the $STATE_DIRECTORY and make it
          #   inaccessible to the service user.
          # - Set up the directory structure by creating the necessary symlinks.
          ExecStartPre =
            let
  
negative.code:             '';
            in
            map (x: "${x} ${escapeShellArgs [ stateDir runtimeDir logsDir ]}") [
              "+${unconfigureRunner}" # runs as root
              configureRunner
              setupRuntimeDir
            ];
  
  