Shell→dag P5b: the 2 HEAVY srv3 files — srv3_install_diagnostic_checklist (FROZEN/terminal: typed observe effect retires it) + srv3_os_install_actuator_toolchain_ensure → typed extdeps apt/curl/websocat argv effects on host_effect_apply; THEN delete shell_exec_via_bash heredoc runner once no caller

dag/extdeps/bmc/os_install_actuator_toolchain.dag

@@ -31,6 +31,8 @@ data os_install_actuator_toolchain_requirement: ActuatorToolchainRequirement = A
 
 data srv3_os_install_actuator_host_label: NonEmptyStr = "install-actuator-host"
 
+data gunbc_bin_dir: NonEmptyStr = "/var/lib/gunbc/bin"
+
 data srv3_os_install_actuator_toolchain_grant: ActuatorToolchainRequirement = os_install_actuator_toolchain_requirement
 
 fn actuator_toolchain_requirement_includes_tool(

dag/extdeps/package_managers/apt.dag

@@ -30,6 +30,8 @@ data package_socat: NonEmptyStr = "socat"
 data package_websocat: NonEmptyStr = "websocat"
 data package_xorriso: NonEmptyStr = "xorriso"
 
+data apt_get_binary_path: NonEmptyStr = "/usr/bin/apt-get"
+
 data apt_man_url: NonEmptyStr = "https://manpages.debian.org/testing/apt/apt.8.en.html"
 
 

dag/gunbc/fleet_converge_cli.dag

@@ -13,7 +13,28 @@ import gunbc.host_converge {
   fleet_converge_policy,
   find_by_identity,
 }
-import gunbc.host_effect { LocalShell, HostEffectIntent, HostEffect, ConvergePlan, ShellCommand, RedfishAction }
+import gunbc.host_effect {
+  LocalShell,
+  HostEffectIntent,
+  HostEffect,
+  ConvergePlan,
+  ShellCommand,
+  RedfishAction,
+  Srv3InstallDiagnosticObserve,
+  OsInstallActuatorToolchainEnsure,
+  Srv3InstallReconcileObserve,
+  DurableApprovalGrantRecord,
+  DurableApprovalGrantRead,
+  Srv3InstallMediaFetch,
+  Srv3SeededInstallMediaRemaster,
+  Srv3SeededInstallMediaToolchainEnsure,
+  Srv3SolConsoleCapture,
+  Srv3BmcwebSessionLogin,
+  Srv3BmcwebTokenExtract,
+  Srv3NbdProxyServe,
+  Srv3BootOnceReadBackSleep,
+  Srv3ReceiptEmit,
+}
 import gunbc.fleet_converge_apply { converge_apply_for_host }
 import std.realization_reconcile { Converged, NotConverged }
 

dag/gunbc/host_effect.dag

@@ -1,6 +1,6 @@
 module gunbc.host_effect
 
-import std.types { String, Int, NonEmptyStr, List }
+import std.types { String, Int, NonEmptyStr, List, ContentHash }
 import std.access { AccessDecision }
 import std.disposition { Disposition, RealizationDispatch, Scaffold, Terminal }
 import std.decl_ref { DeclarationRef, WholeDeclaration }
@@ -22,6 +22,13 @@ type HostEffect =
     ShellCommand { script: String }
   | RedfishAction { action: RedfishSystemAction }
   | ConvergePlan { policy: HostConverge }
+  | Srv3InstallDiagnosticObserve {
+      bmc: NonEmptyStr,
+      port: Int,
+      iso_path: NonEmptyStr,
+      iso_content_hash: ContentHash,
+    }
+  | OsInstallActuatorToolchainEnsure {}
   | SetHostnameCas { hostnamectl_path: NonEmptyStr, base: DnsLabel, desired: DnsLabel }
   | Srv3InstallReconcileObserve { include_git_meta: Bool }
   | DurableApprovalGrantRecord

dag/gunbc/srv3_host_effect_script.dag

@@ -2,6 +2,8 @@ module gunbc.srv3_host_effect_script
 
 import gunbc.host_effect {
   HostEffect,
+  Srv3InstallDiagnosticObserve,
+  OsInstallActuatorToolchainEnsure,
   Srv3InstallReconcileObserve,
   DurableApprovalGrantRecord,
   DurableApprovalGrantRead,
@@ -19,8 +21,10 @@ import gunbc.host_effect {
   ConvergePlan,
 }
 import gunbc.shell_bash_runner { shell_exec_via_bash, shell_printf_line }
-import gunbc.srv3_install_diagnostic_checklist { srv3_install_diagnostic_observe_script }
-import gunbc.srv3_os_install_diagnostic { srv3_os_install_attempt_intent }
+import gunbc.srv3_os_install_diagnostic {
+  srv3_os_install_attempt_intent,
+  srv3_install_diagnostic_observe_script_for_intent,
+}
 import gunbc.srv3_os_install_reconcile_receipt { srv3_install_record_boot_once_approval_script }
 import gunbc.srv3_os_install_reconcile_types {
   srv3_boot_once_approval_grant_path,
@@ -120,7 +124,7 @@ fn install_media_remaster_toolchain_ensure_script() -> String {
 }
 
 fn srv3_install_reconcile_observe_script(include_git_meta: Bool) -> String {
-  let diagnostic = srv3_install_diagnostic_observe_script(intent: srv3_os_install_attempt_intent)
+  let diagnostic = srv3_install_diagnostic_observe_script_for_intent(intent: srv3_os_install_attempt_intent)
   if include_git_meta {
     concat(diagnostic, srv3_install_reconcile_observe_meta_script())
   } else {
@@ -248,6 +252,8 @@ fn srv3_host_effect_script_for(effect: HostEffect) -> String? {
       }
     Srv3ReceiptEmit { lines: lines } =>
       Present { value: shell_exec_via_bash(body: srv3_receipt_emit_script(lines: lines)) }
+    Srv3InstallDiagnosticObserve { bmc: _, port: _, iso_path: _, iso_content_hash: _ } => Absent
+    OsInstallActuatorToolchainEnsure {} => Absent
     ShellCommand { script: _ } => Absent
     RedfishAction { action: _ } => Absent
     ConvergePlan { policy: _ } => Absent