fix(chroot): pass CARGO_HOME and JAVA_HOME for CI runners

Similar to the GOROOT fix, this adds support for passing CARGO_HOME and
JAVA_HOME environment variables to the chroot environment. These are
needed because:

1. Rust toolchain on GitHub Actions installs cargo/rustc to $CARGO_HOME/bin
   which needs to be added to PATH explicitly
2. Java setup actions set JAVA_HOME but $JAVA_HOME/bin may not be in PATH
   when running through sudo

The fix:
- docker-manager.ts now passes AWF_CARGO_HOME and AWF_JAVA_HOME
- entrypoint.sh adds these directories to PATH in the generated script
- JAVA_HOME is also exported so Java can find its runtime

This fixes the "command not found" errors (exit code 127) for cargo,
rustc, and java commands in chroot mode on GitHub Actions.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Author: Mossaka

containers/agent/entrypoint.sh

@@ -217,6 +217,18 @@ if [ "${AWF_CHROOT_ENABLED}" = "true" ]; then
 # Use the host's actual PATH (passed via AWF_HOST_PATH)
 export PATH="${AWF_HOST_PATH}"
 AWFEOF
+    # Add CARGO_HOME/bin to PATH if provided (for Rust/Cargo on GitHub Actions)
+    if [ -n "${AWF_CARGO_HOME}" ]; then
+      echo "[entrypoint] Adding CARGO_HOME/bin to PATH: ${AWF_CARGO_HOME}/bin"
+      echo "export PATH=\"${AWF_CARGO_HOME}/bin:\$PATH\"" >> "/host${SCRIPT_FILE}"
+      echo "export CARGO_HOME=\"${AWF_CARGO_HOME}\"" >> "/host${SCRIPT_FILE}"
+    fi
+    # Add JAVA_HOME/bin to PATH if provided (for Java on GitHub Actions)
+    if [ -n "${AWF_JAVA_HOME}" ]; then
+      echo "[entrypoint] Adding JAVA_HOME/bin to PATH: ${AWF_JAVA_HOME}/bin"
+      echo "export PATH=\"${AWF_JAVA_HOME}/bin:\$PATH\"" >> "/host${SCRIPT_FILE}"
+      echo "export JAVA_HOME=\"${AWF_JAVA_HOME}\"" >> "/host${SCRIPT_FILE}"
+    fi
     # Add GOROOT if provided (required for Go on GitHub Actions with trimmed binaries)
     if [ -n "${AWF_GOROOT}" ]; then
       echo "[entrypoint] Using host GOROOT for chroot: ${AWF_GOROOT}"

src/docker-manager.ts

@@ -334,8 +334,8 @@ export function generateDockerCompose(
     PATH: '/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin',
   };
 
-  // For chroot mode, pass the host's actual PATH and GOROOT so the entrypoint can use them
-  // This ensures toolcache paths (Python, Node, Go) are correctly resolved
+  // For chroot mode, pass the host's actual PATH and tool directories so the entrypoint can use them
+  // This ensures toolcache paths (Python, Node, Go, Rust, Java) are correctly resolved
   if (config.enableChroot) {
     if (process.env.PATH) {
       environment.AWF_HOST_PATH = process.env.PATH;
@@ -345,6 +345,14 @@ export function generateDockerCompose(
     if (process.env.GOROOT) {
       environment.AWF_GOROOT = process.env.GOROOT;
     }
+    // Rust: Pass CARGO_HOME so entrypoint can add $CARGO_HOME/bin to PATH
+    if (process.env.CARGO_HOME) {
+      environment.AWF_CARGO_HOME = process.env.CARGO_HOME;
+    }
+    // Java: Pass JAVA_HOME so entrypoint can add $JAVA_HOME/bin to PATH and set JAVA_HOME
+    if (process.env.JAVA_HOME) {
+      environment.AWF_JAVA_HOME = process.env.JAVA_HOME;
+    }
   }
 
   // If --env-all is specified, pass through all host environment variables (except excluded ones)