- `OPENCLAW_LOAD_SHELL_ENV=1`

- `OPENCLAW_SHELL_ENV_TIMEOUT_MS=15000`

## Exec shell snapshots

`OPENCLAW_EXEC_SHELL_SNAPSHOT=1` is an opt-in gateway exec optimization for bash and zsh. Set it in the Gateway

process environment; per-call `exec.env` values cannot enable it or redirect its cache directory. When enabled,

OpenClaw captures sourceable aliases/functions and a small safe environment set from shell startup files into

`$OPENCLAW_STATE_DIR/cache/shell-snapshots/`, then sources that snapshot before each `exec` command. Secret-looking

variables are excluded from the snapshot. Sandbox and node exec do not use it.

## Runtime-injected env vars

OpenClaw also injects context markers into spawned child processes:

from `PATH` to avoid fish-incompatible scripts, then falls back to `SHELL` if neither exists.

- On Windows hosts, exec prefers PowerShell 7 (`pwsh`) discovery (Program Files, ProgramW6432, then PATH),

then falls back to Windows PowerShell 5.1.

- On non-Windows gateway hosts, setting `OPENCLAW_EXEC_SHELL_SNAPSHOT=1` in the Gateway process environment

enables an opt-in startup snapshot for bash and zsh. OpenClaw captures sourceable aliases/functions and a small

safe environment set from shell startup files into `$OPENCLAW_STATE_DIR/cache/shell-snapshots/`, then sources

that snapshot before each exec command. Secret-looking variables are excluded; sandbox and node exec do not use

this snapshot.

- Host execution (`gateway`/`node`) rejects `env.PATH` and loader overrides (`LD_*`/`DYLD_*`) to

prevent binary hijacking or injected code.

- OpenClaw sets `OPENCLAW_SHELL=exec` in the spawned command environment (including PTY and sandbox execution) so shell/profile rules can detect exec-tool context.

readEnvInt,

} from "./bash-tools.shared.js";

import { buildCursorPositionResponse, stripDsrRequests } from "./pty-dsr.js";

import { maybeWrapCommandWithShellSnapshot } from "./shell-snapshot.js";

import { getShellConfig, sanitizeBinaryOutput } from "./shell-utils.js";

export { execSchema } from "./bash-tools.schemas.js";

shellRuntimeEnv,

opts.pathPrepend,

);

const commandWithShellSnapshot = await maybeWrapCommandWithShellSnapshot({

command: commandWithPathPrepend,

shell,

shellArgs,

cwd: opts.workdir,

env: shellRuntimeEnv,

enabled: true,

});

const childArgv = [shell, ...shellArgs, commandWithPathPrepend];

const childArgv = [shell, ...shellArgs, commandWithShellSnapshot];

if (opts.usePty) {

return {

mode: "pty" as const,

ptyCommand: commandWithPathPrepend,

ptyCommand: commandWithShellSnapshot,

childFallbackArgv: childArgv,

env: shellRuntimeEnv,

stdinMode: "pipe-open" as const,

*/

import type { WriteStream } from "node:fs";

import { sanitizeBinaryOutput } from "../shell-utils.js";

import { stripAnsi } from "../utils/ansi.js";

import { sanitizeBinaryOutput } from "../utils/shell.js";

import type { BashOperations } from "./tools/bash-operations.js";

import { createPrivateTempWriteStream } from "./tools/private-temp-file.js";

import { DEFAULT_MAX_BYTES, truncateTail } from "./tools/truncate.js";

*/

import { execSync, spawnSync } from "node:child_process";

import { getShellConfig } from "../utils/shell.js";

import { getBashShellConfig } from "../shell-utils.js";

// Cache for shell command results (persists for process lifetime)

const commandResultCache = new Map<string, string | undefined>();

value: string | undefined;

} {

try {

const { shell, args } = getShellConfig();

const { shell, args } = getBashShellConfig();

const result = spawnSync(shell, [...args, command], {

encoding: "utf-8",

timeout: 10000,

import { truncateToVisualLines } from "../../modes/interactive/components/visual-truncate.js";

import { theme } from "../../modes/interactive/theme/theme.js";

import type { AgentTool } from "../../runtime/index.js";

import { getBashShellConfig, getShellEnv, killProcessTree } from "../../shell-utils.js";

import { waitForChildProcess } from "../../utils/child-process.js";

import { getShellConfig, getShellEnv, killProcessTree } from "../../utils/shell.js";

import type { ToolDefinition, ToolRenderResultOptions } from "../extensions/types.js";

import type { BashOperations } from "./bash-operations.js";

import { OutputAccumulator } from "./output-accumulator.js";

return {

exec: (command, cwd, { onData, signal, timeout, env }) => {

return new Promise((resolve, reject) => {

const { shell, args } = getShellConfig(options?.shellPath);

const { shell, args } = getBashShellConfig(options?.shellPath);

if (!existsSync(cwd)) {

reject(

new Error(`Working directory does not exist: ${cwd}\nCannot execute bash commands.`),

import { getCapabilities, getImageDimensions, imageFallback } from "@earendil-works/pi-tui";

import type { ImageContent, TextContent } from "../../../llm/types.js";

import type { Theme } from "../../modes/interactive/theme/theme.js";

import { sanitizeBinaryOutput } from "../../shell-utils.js";

import { stripAnsi } from "../../utils/ansi.js";

import { sanitizeBinaryOutput } from "../../utils/shell.js";

export function shortenPath(path: unknown): string {

if (typeof path !== "string") {