- Plugins/loader: keep bundled plugin package `test-api.js` aliases behind private QA mode, so source transforms do not expose test-only public surfaces during normal plugin loading. Thanks @vincentkoc.

- Gateway/startup: start cron and record the post-ready memory trace even when deferred maintenance timers fail after readiness, so a non-fatal timer setup issue does not silently leave scheduled jobs idle. Thanks @vincentkoc.

- Exec approvals: unwrap BSD/macOS `env -P <path>` carrier commands before approval-command and strict inline-eval checks, so `/approve` shell execution and inline interpreter payloads are still blocked behind that env form.

- Agents/session status: keep semantic `session_status({ sessionKey: "current" })` on the live run session even before that run has a persisted session-store entry, instead of falling back to the sandbox policy key. Thanks @vincentkoc.

- QA/Slack: resolve bundled official plugin public-surface package aliases during source-mode QA runs, so release Slack live validation can load `@openclaw/slack/api.js` without workspace symlinks. Thanks @vincentkoc.

- Codex: pass the live run session key into app-server dynamic tools when sandbox policy uses a separate session key, so `session_status({ sessionKey: "current" })` reports the active run instead of the sandbox policy key. Thanks @vincentkoc.

"env --ignore-environment /approve abc123 allow-once",

"env -i FOO=1 /approve abc123 allow-once",

"env -S '/approve abc123 deny'",

"env -P /usr/bin /approve abc123 deny",

"env -iS'/approve abc123 deny'",

"env -S '/approve abc123' deny",

"env -iS'/approve abc123' deny",

expect(detectInlineEvalArgv(["env", "-iS", "python3 -c 'print(1)'"])?.flag).toBe("-c");

expect(detectInlineEvalArgv(["env", "-S", "python3 -c", "print(1)"])?.flag).toBe("-c");

expect(detectInlineEvalArgv(["env", "-iSpython3 -c", "print(1)"])?.flag).toBe("-c");

expect(detectInlineEvalArgv(["env", "-P", "/usr/bin", "python3", "-c", "print(1)"])?.flag).toBe(

"-c",

);

expect(detectInlineEvalArgv(["command", "node", "--eval", "1"])?.flag).toBe("--eval");

expect(detectInlineEvalArgv(["env", "-S", 'python3 -c "print(1)"'])?.flag).toBe("-c");

expect(detectInlineEvalArgv(["python3", "script.py"])).toBeNull();

"bash -lc /approve abc deny",

"/approve abc deny",

]);

expect(buildCommandPayloadCandidates(["env", "-P", "/usr/bin", "/approve", "abc"])).toEqual([

"/approve abc",

]);

expect(buildCommandPayloadCandidates(["exec", "-a", "openclaw", "/approve", "abc"])).toEqual([

"/approve abc",

]);

const COMMAND_QUERY_OPTIONS = new Set(["-v", "-V"]);

const ENV_OPTIONS_WITH_VALUE = new Set([

"-C",

"-P",

"-S",

"-s",

"-u",

argv: ["env", "--chdir=/tmp", "pwsh", "-Command", "Get-Date"],

expected: ["pwsh", "-Command", "Get-Date"],

},

{

argv: ["env", "-P", "/usr/bin", "python3", "-c", "print(1)"],

expected: ["python3", "-c", "print(1)"],

},

{

argv: ["env", "-S", "python3 -c", "print(1)"],

expected: ["python3", "-c", "print(1)"],