github
diff --git a/‎.github/aw/actions-lock.json‎
Lines changed: 5 additions & 0 deletions b/‎.github/aw/actions-lock.json‎
Lines changed: 5 additions & 0 deletions
diff --git a/‎.github/workflows/smoke-chroot.lock.yml‎
Lines changed: 1098 additions & 0 deletions b/‎.github/workflows/smoke-chroot.lock.yml‎
Lines changed: 1098 additions & 0 deletions
diff --git a/‎.github/workflows/smoke-chroot.md‎
Lines changed: 93 additions & 0 deletions b/‎.github/workflows/smoke-chroot.md‎
Lines changed: 93 additions & 0 deletions
diff --git a/‎.github/workflows/test-chroot.yml‎
Lines changed: 276 additions & 0 deletions b/‎.github/workflows/test-chroot.yml‎
Lines changed: 276 additions & 0 deletions
diff --git a/‎AGENTS.md‎
Lines changed: 1 addition & 0 deletions b/‎AGENTS.md‎
Lines changed: 1 addition & 0 deletions
@@ -40,6 +40,11 @@
       "version": "v0.37.3",
       "sha": "55503f44aef44813947980f65655a67b5ed8702f"
     },
+    "githubnext/gh-aw/actions/setup@v0.38.1": {
+      "repo": "githubnext/gh-aw/actions/setup",
+      "version": "v0.38.1",
+      "sha": "98493c96da3fb6a59dc232e32a7b990a4c4e8969"
+    },
     "softprops/action-gh-release@v1": {
       "repo": "softprops/action-gh-release",
       "version": "v1",
 
@@ -0,0 +1,93 @@
+---
+description: Smoke test workflow that validates the --enable-chroot feature by testing host binary access, network firewall, and security boundaries
+on:
+  workflow_dispatch:
+  pull_request:
+    types: [opened, synchronize, reopened]
+    paths:
+      - 'src/**'
+      - 'containers/**'
+      - 'package.json'
+      - '.github/workflows/smoke-chroot.md'
+  reaction: "rocket"
+roles: all
+permissions:
+  contents: read
+  issues: read
+  pull-requests: read
+
+name: Smoke Chroot
+engine:
+  id: copilot
+strict: true
+network:
+  allowed:
+    - defaults
+    - github
+sandbox:
+  mcp:
+    container: "ghcr.io/githubnext/gh-aw-mcpg"
+tools:
+  github:
+    toolsets: [repos, pull_requests]
+  bash:
+    - "*"
+safe-outputs:
+    add-comment:
+      hide-older-comments: true
+    add-labels:
+      allowed: [smoke-chroot]
+    messages:
+      footer: "> Tested by [{workflow_name}]({run_url})"
+      run-started: "**Testing chroot feature** [{workflow_name}]({run_url}) is validating --enable-chroot functionality..."
+      run-success: "**Chroot tests passed!** [{workflow_name}]({run_url}) - All security and functionality tests succeeded."
+      run-failure: "**Chroot tests failed** [{workflow_name}]({run_url}) {status} - See logs for details."
+timeout-minutes: 20
+steps:
+  - name: Capture host versions for verification
+    run: |
+      echo "=== Capturing host versions for post-verification ==="
+      echo "HOST_PYTHON_VERSION=$(python3 --version 2>&1 | head -1)" >> /tmp/host-versions.env
+      echo "HOST_NODE_VERSION=$(node --version 2>&1 | head -1)" >> /tmp/host-versions.env
+      echo "HOST_GO_VERSION=$(go version 2>&1 | head -1)" >> /tmp/host-versions.env
+      cat /tmp/host-versions.env
+---
+
+# Verify Language Runtimes Match Host
+
+This smoke test validates that `--enable-chroot` provides transparent access to host binaries by comparing versions.
+
+## Step 1: Read Host Versions
+
+First, read the host versions that were captured in the setup step:
+
+```bash
+cat /tmp/host-versions.env
+```
+
+## Step 2: Run Tests via AWF Chroot
+
+Run the same version commands through `awf --enable-chroot` and verify they match:
+
+```bash
+# Test Python version matches host
+sudo awf --enable-chroot --allow-domains localhost -- python3 --version
+
+# Test Node version matches host
+sudo awf --enable-chroot --allow-domains localhost -- node --version
+
+# Test Go version matches host
+sudo awf --enable-chroot --allow-domains localhost -- go version
+```
+
+## Step 3: Verify Versions Match
+
+Compare the versions from chroot with the host versions from `/tmp/host-versions.env`.
+
+Create a summary table showing:
+| Runtime | Host Version | Chroot Version | Match? |
+|---------|--------------|----------------|--------|
+
+If ALL versions match, the test passes. Add a comment to the PR with the comparison table.
+
+If all runtimes match, add the label `smoke-chroot`.
@@ -0,0 +1,276 @@
+name: Chroot Integration Tests
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  test-chroot-languages:
+    name: Test Chroot Language Support
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: '22'
+          cache: 'npm'
+
+      - name: Setup Python
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: '3.12'
+
+      - name: Setup Go
+        uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5
+        with:
+          go-version: '1.22'
+
+      - name: Capture GOROOT for chroot tests
+        id: go-env
+        run: |
+          # Go on GitHub Actions uses trimmed binaries that require GOROOT
+          # Capture it here so we can pass it to chroot tests
+          GOROOT_VALUE=$(go env GOROOT)
+          echo "GOROOT=${GOROOT_VALUE}" >> $GITHUB_OUTPUT
+          echo "GOROOT=${GOROOT_VALUE}" >> $GITHUB_ENV
+          echo "Captured GOROOT: ${GOROOT_VALUE}"
+
+      - name: Verify host tools are available
+        run: |
+          echo "=== Verifying host tools ==="
+          echo "Node.js: $(node --version)"
+          echo "npm: $(npm --version)"
+          echo "Python: $(python3 --version)"
+          echo "pip: $(pip3 --version)"
+          echo "Go: $(go version)"
+          echo "GOROOT: $GOROOT"
+          echo "Git: $(git --version)"
+          echo "curl: $(curl --version | head -1)"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build project
+        run: npm run build
+
+      - name: Build local containers
+        run: |
+          echo "=== Building local containers ==="
+          docker build -t ghcr.io/githubnext/gh-aw-firewall/squid:latest containers/squid/
+          docker build -t ghcr.io/githubnext/gh-aw-firewall/agent:latest containers/agent/
+
+      - name: Pre-test cleanup
+        run: |
+          echo "=== Pre-test cleanup ==="
+          ./scripts/ci/cleanup.sh || true
+
+      - name: Run chroot language tests
+        run: |
+          echo "=== Running chroot language tests ==="
+          npm run test:integration -- --testPathPattern="chroot-languages" --verbose
+        env:
+          JEST_TIMEOUT: 180000
+
+      - name: Post-test cleanup
+        if: always()
+        run: |
+          echo "=== Post-test cleanup ==="
+          ./scripts/ci/cleanup.sh || true
+
+      - name: Collect logs on failure
+        if: failure()
+        run: |
+          echo "=== Collecting failure logs ==="
+          docker ps -a || true
+          docker logs awf-squid 2>&1 || true
+          docker logs awf-agent 2>&1 || true
+          ls -la /tmp/awf-* 2>/dev/null || true
+          sudo cat /tmp/awf-*/squid-logs/access.log 2>/dev/null || true
+
+  test-chroot-package-managers:
+    name: Test Chroot Package Managers
+    runs-on: ubuntu-latest
+    timeout-minutes: 45
+    needs: test-chroot-languages  # Run after language tests pass
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: '22'
+          cache: 'npm'
+
+      - name: Setup Python
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: '3.12'
+
+      - name: Setup Go
+        uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5
+        with:
+          go-version: '1.22'
+
+      - name: Setup Ruby
+        uses: ruby/setup-ruby@a4effe49ee8ee5b8b5091268c473a4628afb5651 # v1
+        with:
+          ruby-version: '3.2'
+
+      - name: Setup Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Setup Java
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4
+        with:
+          distribution: 'temurin'
+          java-version: '21'
+
+      - name: Capture tool paths for chroot tests
+        id: tool-paths
+        run: |
+          # Go on GitHub Actions uses trimmed binaries that require GOROOT
+          # Capture it here so we can pass it to chroot tests
+          GOROOT_VALUE=$(go env GOROOT)
+          echo "GOROOT=${GOROOT_VALUE}" >> $GITHUB_OUTPUT
+          echo "GOROOT=${GOROOT_VALUE}" >> $GITHUB_ENV
+          echo "Captured GOROOT: ${GOROOT_VALUE}"
+
+          # Rust/Cargo: CARGO_HOME is needed so entrypoint can add $CARGO_HOME/bin to PATH
+          # The rust-toolchain action sets CARGO_HOME but sudo may not preserve it
+          if [ -n "$CARGO_HOME" ]; then
+            echo "CARGO_HOME=${CARGO_HOME}" >> $GITHUB_ENV
+            echo "Captured CARGO_HOME: ${CARGO_HOME}"
+          fi
+
+          # Java: JAVA_HOME is needed so entrypoint can add $JAVA_HOME/bin to PATH
+          # The setup-java action sets JAVA_HOME but sudo may not preserve it
+          if [ -n "$JAVA_HOME" ]; then
+            echo "JAVA_HOME=${JAVA_HOME}" >> $GITHUB_ENV
+            echo "Captured JAVA_HOME: ${JAVA_HOME}"
+          fi
+
+      - name: Verify host tools are available
+        run: |
+          echo "=== Verifying host tools ==="
+          echo "Node.js: $(node --version)"
+          echo "npm: $(npm --version)"
+          echo "Python: $(python3 --version)"
+          echo "pip: $(pip3 --version)"
+          echo "Go: $(go version)"
+          echo "GOROOT: $GOROOT"
+          echo "Ruby: $(ruby --version)"
+          echo "Gem: $(gem --version)"
+          echo "Rust: $(rustc --version)"
+          echo "Cargo: $(cargo --version)"
+          echo "CARGO_HOME: $CARGO_HOME"
+          echo "Java: $(java --version 2>&1 | head -1)"
+          echo "JAVA_HOME: $JAVA_HOME"
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build project
+        run: npm run build
+
+      - name: Build local containers
+        run: |
+          echo "=== Building local containers ==="
+          docker build -t ghcr.io/githubnext/gh-aw-firewall/squid:latest containers/squid/
+          docker build -t ghcr.io/githubnext/gh-aw-firewall/agent:latest containers/agent/
+
+      - name: Pre-test cleanup
+        run: |
+          echo "=== Pre-test cleanup ==="
+          ./scripts/ci/cleanup.sh || true
+
+      - name: Run chroot package manager tests
+        run: |
+          echo "=== Running chroot package manager tests ==="
+          npm run test:integration -- --testPathPattern="chroot-package-managers" --verbose
+        env:
+          JEST_TIMEOUT: 300000
+
+      - name: Post-test cleanup
+        if: always()
+        run: |
+          echo "=== Post-test cleanup ==="
+          ./scripts/ci/cleanup.sh || true
+
+      - name: Collect logs on failure
+        if: failure()
+        run: |
+          echo "=== Collecting failure logs ==="
+          docker ps -a || true
+          docker logs awf-squid 2>&1 || true
+          docker logs awf-agent 2>&1 || true
+          ls -la /tmp/awf-* 2>/dev/null || true
+          sudo cat /tmp/awf-*/squid-logs/access.log 2>/dev/null || true
+
+  test-chroot-edge-cases:
+    name: Test Chroot Edge Cases
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    needs: test-chroot-languages  # Run after language tests pass
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: '22'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build project
+        run: npm run build
+
+      - name: Build local containers
+        run: |
+          echo "=== Building local containers ==="
+          docker build -t ghcr.io/githubnext/gh-aw-firewall/squid:latest containers/squid/
+          docker build -t ghcr.io/githubnext/gh-aw-firewall/agent:latest containers/agent/
+
+      - name: Pre-test cleanup
+        run: |
+          echo "=== Pre-test cleanup ==="
+          ./scripts/ci/cleanup.sh || true
+
+      - name: Run chroot edge case tests
+        run: |
+          echo "=== Running chroot edge case tests ==="
+          npm run test:integration -- --testPathPattern="chroot-edge-cases" --verbose
+        env:
+          JEST_TIMEOUT: 180000
+
+      - name: Post-test cleanup
+        if: always()
+        run: |
+          echo "=== Post-test cleanup ==="
+          ./scripts/ci/cleanup.sh || true
+
+      - name: Collect logs on failure
+        if: failure()
+        run: |
+          echo "=== Collecting failure logs ==="
+          docker ps -a || true
+          docker logs awf-squid 2>&1 || true
+          docker logs awf-agent 2>&1 || true
+          ls -la /tmp/awf-* 2>/dev/null || true
+          sudo cat /tmp/awf-*/squid-logs/access.log 2>/dev/null || true
@@ -9,6 +9,7 @@ This is a firewall for GitHub Copilot CLI (package name: `@github/awf`) that pro
 ### Documentation Files
 
 - **[README.md](README.md)** - Main project documentation and usage guide
+- **[docs/chroot-mode.md](docs/chroot-mode.md)** - Chroot mode for transparent host binary access
 - **[LOGGING.md](LOGGING.md)** - Comprehensive logging documentation
 - **[docs/logging_quickref.md](docs/logging_quickref.md)** - Quick reference for log queries and monitoring