{ depot, pkgs, ... }:
let
  inherit (depot.nix)
    writeExecline
    ;
  inherit (depot.users.Profpatsch.lib)
    debugExec
    ;

  bins = depot.nix.getBins pkgs.coreutils [ "head" "shuf" ]
      // depot.nix.getBins pkgs.jq [ "jq" ]
      // depot.nix.getBins pkgs.findutils [ "xargs" ]
      // depot.nix.getBins pkgs.gnused [ "sed" ]
      ;

  export-json-object = pkgs.writers.writePython3 "export-json-object" {} ''
    import json
    import sys
    import os

    d = json.load(sys.stdin)

    if d == {}:
        sys.exit(0)

    for k, v in d.items():
        os.environ[k] = str(v)

    os.execvp(sys.argv[1], sys.argv[1:])
  '';

  meta-stdenv-lib = pkgs.writers.writeHaskell "meta-stdenv-lib" {
    libraries = [
      pkgs.haskellPackages.hnix
      pkgs.haskellPackages.aeson
    ];
  } ./MetaStdenvLib.hs;

  replace-between-lines = writeExecline "replace-between-lines" { readNArgs = 1; } [
    "importas" "-ui" "file" "fileName"
    "importas" "-ui" "from" "fromLine"
    "importas" "-ui" "to" "toLine"
    "if" [ depot.tools.eprintf "%s-%s\n" "$from" "$to" ]
    (debugExec "adding lib")
    bins.sed
      "-e" "\${from},\${to} \${1}"
      "-i" "$file"
  ];

  add-lib-if-necessary = writeExecline "add-lib-if-necessary" { readNArgs = 1; } [
    "pipeline" [ meta-stdenv-lib "$1" ]
     export-json-object
     # first replace any stdenv.lib mentions in the arg header
     # if this is not done, the replace below kills these.
     # Since we want it anyway ultimately, let’s do it here.
     "if" [ replace-between-lines "s/stdenv\.lib/lib/" ]
     # then add the lib argument
     # (has to be before stdenv, otherwise default arguments might be in the way)
     replace-between-lines "s/stdenv/lib, stdenv/"
  ];

  metaString = ''meta = with stdenv.lib; {'';

  replace-stdenv-lib = pkgs.writers.writeBash "replace-stdenv-lib" ''
    set -euo pipefail
    sourceDir="$1"
    for file in $(
      ${pkgs.ripgrep}/bin/rg \
        --files-with-matches \
        --fixed-strings \
        -e '${metaString}' \
        "$sourceDir"
    )
    do
      echo "replacing stdenv.lib meta in $file" >&2
      ${bins.sed} -e '/${metaString}/ s/stdenv.lib/lib/' \
          -i "$file"
      ${add-lib-if-necessary} "$file"
    done
  '';

  instantiate-nixpkgs-randomly = writeExecline "instantiate-nixpkgs-randomly" { readNArgs = 1; } [
    "export" "NIXPKGS_ALLOW_BROKEN" "1"
    "export" "NIXPKGS_ALLOW_UNFREE" "1"
    "export" "NIXPKGS_ALLOW_INSECURE" "1"
    "export" "NIXPKGS_ALLOW_UNSUPPORTED_SYSTEM" "1"
    "pipeline" [
      "nix"
        "eval"
        "--raw"
        ''(
          let pkgs = import ''${1} {};
          in builtins.toJSON (builtins.attrNames pkgs)
        )''
    ]
    "pipeline" [ bins.jq "-r" ".[]" ]
    "pipeline" [ bins.shuf ]
    "pipeline" [ bins.head "-n" "1000" ]
    bins.xargs "-I" "{}" "-n1"
    "if" [ depot.tools.eprintf "instantiating %s\n" "{}" ]
    "nix-instantiate" "$1" "-A" "{}"
  ];

in depot.nix.readTree.drvTargets {
  inherit
   instantiate-nixpkgs-randomly
  # requires hnix, which we don’t want in tvl for now
  # uncomment manually if you want to use it.
  #   meta-stdenv-lib
  #   replace-stdenv-lib
    ;
}