## Exec shell snapshots

`OPENCLAW_EXEC_SHELL_SNAPSHOT=1` is an opt-in gateway exec optimization for bash and zsh. Set it in the Gateway

process environment; per-call `exec.env` values cannot enable it or redirect its cache directory. When enabled,

OpenClaw captures sourceable aliases/functions and a small safe environment set from shell startup files into

`$OPENCLAW_STATE_DIR/cache/shell-snapshots/`, then sources that snapshot before each `exec` command. Secret-looking

variables are excluded from the snapshot. Sandbox and node exec do not use it.

On non-Windows Gateway hosts, bash and zsh `exec` commands use a startup snapshot by default.

Set `OPENCLAW_EXEC_SHELL_SNAPSHOT=0` in the Gateway process environment to disable this path.

Values `false`, `no`, and `off` also disable it. Per-call `exec.env` values cannot toggle

snapshots or redirect the snapshot cache.

## Runtime-injected env vars

from `PATH` to avoid fish-incompatible scripts, then falls back to `SHELL` if neither exists.

- On Windows hosts, exec prefers PowerShell 7 (`pwsh`) discovery (Program Files, ProgramW6432, then PATH),

then falls back to Windows PowerShell 5.1.

- On non-Windows gateway hosts, setting `OPENCLAW_EXEC_SHELL_SNAPSHOT=1` in the Gateway process environment

enables an opt-in startup snapshot for bash and zsh. OpenClaw captures sourceable aliases/functions and a small

safe environment set from shell startup files into `$OPENCLAW_STATE_DIR/cache/shell-snapshots/`, then sources

that snapshot before each exec command. Secret-looking variables are excluded; sandbox and node exec do not use

this snapshot.

- On non-Windows gateway hosts, bash and zsh exec commands use a startup snapshot. OpenClaw captures sourceable

aliases/functions and a small safe environment set from shell startup files into

`$OPENCLAW_STATE_DIR/cache/shell-snapshots/`, then sources that snapshot before each exec command.

Secret-looking variables are excluded; sandbox and node exec do not use this snapshot. Set

`OPENCLAW_EXEC_SHELL_SNAPSHOT=0` in the Gateway process environment to disable this snapshot path.

- Host execution (`gateway`/`node`) rejects `env.PATH` and loader overrides (`LD_*`/`DYLD_*`) to

prevent binary hijacking or injected code.

- OpenClaw sets `OPENCLAW_SHELL=exec` in the spawned command environment (including PTY and sandbox execution) so shell/profile rules can detect exec-tool context.

shellArgs,

cwd: opts.workdir,

env: shellRuntimeEnv,

enabled: true,

});

const childArgv = [shell, ...shellArgs, commandWithShellSnapshot];