From aeb335cbca7edcea40c2fe38d8059e3d88f0ea17 Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 2 Jul 2026 10:26:17 +0000
Subject: [PATCH] fix: propagate config fields to all layers

Add missing container.mounts CLI mapping entry to awf-config-spec.md.

PR #5755 added container.mounts to the JSON schema, TypeScript types,
and config-file.ts mapping, but the Section 5 CLI mapping table in
docs/awf-config-spec.md was not updated.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 docs/awf-config-spec.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/awf-config-spec.md b/docs/awf-config-spec.md
index 08b05764..1c01caa7 100644
--- a/docs/awf-config-spec.md
+++ b/docs/awf-config-spec.md
@@ -180,6 +180,7 @@ AWF settings MAY be supplied via config files, including stdin (`--config -`).
 - `container.dockerHost` → `--docker-host`
 - `container.dockerHostPathPrefix` → `--docker-host-path-prefix`
 - `container.runnerToolCachePath` → *(config-only; checked first for optional read-only runner tool cache mount, before `RUNNER_TOOL_CACHE` and `/home/runner/work/_tool` auto-detection)*
+- `container.mounts[]` → `-v, --mount` *(repeatable; each array entry maps to one Docker volume mount in `host_path:container_path[:ro|rw]` format; in chroot mode, container paths are automatically prefixed with `/host`)*
 - `chroot.binariesSourcePath` → *(config-only; overlays a runner-side binaries directory at `/usr/local/bin` inside chroot mode)*
 - `chroot.identity.home` → *(config-only; forwarded as `AWF_CHROOT_IDENTITY_HOME` and applied after chroot pivot)*
 - `chroot.identity.user` → *(config-only; forwarded as `AWF_CHROOT_IDENTITY_USER` and applied to `USER`/`LOGNAME` after chroot pivot)*