Read the Managed Binaries in /usr/local/bin Under a Minimal PATH in install-tools.sh #2257

What Happens

host-setup/linux/install-tools.sh reads the installed version of jq, uv, and git-restore-mtime by resolving them on PATH. Under a minimal PATH that leaves out /usr/local/bin, which is Debian's default for a cron job (/usr/bin:/bin), the managed copies there are not found. The report then calls uv and git-restore-mtime missing, reads jq as the distro's /usr/bin/jq, and adds a note claiming that the distro jq shadows the managed copy.

Why It Matters

The --json report from #1645 exists for a scheduled reporter, and a scheduled job is exactly where a minimal PATH is the default. A caller can prepend /usr/local/bin itself, but nothing tells it to, and the wrong answer reads as a confident one.

Reproduce

env -i PATH=/usr/bin:/bin host-setup/linux/install-tools.sh --report uv

On a host where uv is installed under /usr/local/bin, this reports it as missing.

Options

1. Have the script add $BIN_DIR to its own PATH when absent, so the managed copies are read wherever the caller's PATH stops.
2. Document the requirement for a scheduled caller and leave the script alone.