openclaw - ✅(Solved) Fix Plugin-skill registration uses fs.symlink (EPERM on Windows without admin/Developer Mode); junction would work without elevation [3 pull requests, 2 comments, 3 participants]

openclaw2026-05-05 17:05:07

ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

GitHub issue URL

Helpful · Quick feedback

GitHub stats

openclaw/openclaw#77958•Fetched 2026-05-06 06:18:48

View on GitHub

Comments

Participants

Timeline

Reactions

Author

Participants

Timeline (top)

cross-referenced ×3referenced ×3commented ×2mentioned ×2

Plugin-skill registration uses fs.symlink to expose plugin-shipped skills under ~/.openclaw/plugin-skills/. On Windows, creating a fs.symlink requires either administrator elevation or Windows Developer Mode. For users with neither (the default), every plugin-shipped skill silently fails to register with EPERM: operation not permitted, symlink ....

In my install, this leaves at least three skills undiscovered: browser-automation (from @openclaw/browser-plugin), obsidian-vault-maintainer, and wiki-maintainer (both from @openclaw/memory-wiki). The errors also flood stderr on every openclaw doctor invocation — but the worse impact is that openclaw skills list doesn't show them at all, so users can't easily tell why an installed plugin's skills aren't available.

Error Message

openclaw doctor ... [skills] failed to create plugin skill symlink "C:\Users\jarro.openclaw\plugin-skills\browser-automation" → "C:\Users\jarro\AppData\Roaming\npm\node_modules\openclaw\dist\extensions\browser\skills\browser-automation": Error: EPERM: operation not permitted, symlink 'C:\Users\jarro\AppData\Roaming\npm\node_modules\openclaw\dist\extensions\browser\skills\browser-automation' -> 'C:\Users\jarro.openclaw\plugin-skills\browser-automation' [skills] failed to create plugin skill symlink "C:\Users\jarro.openclaw\plugin-skills\obsidian-vault-maintainer" → "C:\Users\jarro\AppData\Roaming\npm\node_modules\openclaw\dist\extensions\memory-wiki\skills\obsidian-vault-maintainer": Error: EPERM: operation not permitted, symlink ... [skills] failed to create plugin skill symlink "C:\Users\jarro.openclaw\plugin-skills\wiki-maintainer" → "C:\Users\jarro\AppData\Roaming\npm\node_modules\openclaw\dist\extensions\memory-wiki\skills\wiki-maintainer": Error: EPERM: operation not permitted, symlink ...

Root Cause

Fix Action

Fixed

Fixed by PR: fix(skills): use junction symlinks on Windows to avoid EPERM without Developer Mode (#77958) (https://github.com/openclaw/openclaw/pull/77971)
Fixed by PR: fix(daemon): fall back to Startup-folder on localized schtasks access-denied (#77993) (https://github.com/openclaw/openclaw/pull/78006)
Fixed by PR: WORKING: All Microsoft Issues and PRs (refresh) (https://github.com/openclaw/openclaw/pull/74163)

PR fix notes

PR #77971: fix(skills): use junction symlinks on Windows to avoid EPERM without Developer Mode (#77958)

Repository: openclaw/openclaw
Author: hclsys
State: closed | merged: True
Link: https://github.com/openclaw/openclaw/pull/77971

Description (problem / solution / changelog)

Fixes #77958.

Summary

Use Windows junction directory links when publishing plugin-provided skills into the managed plugin-skills directory.
Preserve the existing non-Windows dir symlink behavior.
Treat Windows junction-like generated directories as managed plugin-skill entries during stale cleanup.
Add focused regression coverage and an Unreleased changelog entry.

Verification

pnpm install --frozen-lockfile
pnpm test src/agents/skills/plugin-skills.test.ts — 22 tests passed
pnpm exec oxfmt --check --threads=1 src/agents/skills/plugin-skills.ts src/agents/skills/plugin-skills.test.ts CHANGELOG.md
git diff --check
pnpm check:changed

Maintainer notes

This branch was narrowed during maintainer prep to the #77958 plugin-skills Windows fix only. The unrelated Ollama changes from the original branch were dropped.

Live Windows standard-user proof was not run from this macOS maintainer workspace; the issue is source-backed by the existing fs.symlinkSync(..., "dir") call and covered by focused regression tests. A proof: override label/comment records that maintainer decision.

Changed files

CHANGELOG.md (modified, +1/-0)
src/agents/skills/plugin-skills.test.ts (modified, +50/-2)
src/agents/skills/plugin-skills.ts (modified, +26/-8)

PR #78006: fix(daemon): fall back to Startup-folder on localized schtasks access-denied (#77993)

Repository: openclaw/openclaw
Author: hclsys
State: closed | merged: False
Link: https://github.com/openclaw/openclaw/pull/78006

Description (problem / solution / changelog)

Fixes #77993.

Root cause

shouldFallbackToStartupEntry matched only the English string "Access is denied". On Windows hosts with a non-English locale, schtasks /Create emits the localized equivalent — for example Spanish "Acceso denegado" — which did not match the regex. The fallback to the per-user Startup-folder launcher was skipped and the install threw schtasks create failed: ERROR: Acceso denegado.

Fix

Extend the denial-string check to cover the most common locale variants:

Locale	String
English	`access is denied` (existing)
Spanish	`acceso denegado`
German	`zugriff verweigert`
French	`accès refusé`
Italian	`accesso negato`

All checks are case-insensitive.

Test

New test in schtasks.startup-fallback.test.ts drives installGatewayScheduledTask with stderr: "ERROR: Acceso denegado." and confirms the Startup-folder launcher is created (matching the English coverage added in the existing test).

All 14 startup-fallback tests pass.

Changed files

extensions/codex/src/app-server/run-attempt.ts (modified, +16/-3)
extensions/ollama/provider-discovery.test.ts (modified, +22/-0)
extensions/ollama/src/discovery-shared.ts (modified, +7/-1)
src/agents/skills/plugin-skills.ts (modified, +1/-1)
src/daemon/schtasks.startup-fallback.test.ts (modified, +13/-0)
src/daemon/schtasks.ts (modified, +4/-0)

PR #74163: WORKING: All Microsoft Issues and PRs (refresh)

Repository: openclaw/openclaw
Author: BradGroux
State: open | merged: False
Link: https://github.com/openclaw/openclaw/pull/74163

Description (problem / solution / changelog)

Microsoft Ecosystem Issues & PRs Tracker

Purpose: Living checklist for maintainers to track Microsoft-related issues and PRs (Teams, Windows, WSL, Azure, M365/SharePoint).

How to use:

Mark items resolved by editing this PR body and changing [ ] to [x]; this audit also includes current Status for items that closed or merged.

Claim items by adding your GitHub handle to the Assignee column.

Priority guide: P0 = crash/blocker/security, P1 = significant bug/regression, P2 = minor bug/enhancement, P3 = nice-to-have/stale.

Items marked (stale) have been flagged by the stale bot due to inactivity.

Last updated: 2026-05-06 (maintainer prep/landing pass: opened #78266 for #78159; merged #78171 for #77993 at head a71d439f4b / merge 03e6a029ab; closed superseded #78006; merged #77971 for #77958 at head 2a21a37925 / merge 5f783d7ddd; prepped #62910 at head 87ace89dca; #60678 remains blocked by failed dispatch; #78266 is failing check/check-test-types; #62910 CI is fresh/pending).

Summary

Category	Issues	PRs	Total	Resolved	Remaining
MS Teams (channel plugin)	10	48	58	15	43
Windows platform	73	60	133	36	97
WSL	12	8	20	7	13
Azure	6	9	15	5	10
SharePoint / M365	0	0	0	0	0
Total	101	125	226	63	163

1. MS Teams Channel Plugin — Issues

Bugs / Crashes

Resolved?	Status	Priority	#	Title	Labels
[x]	closed - fixed by #78081	P1	#77674	[Bug]: MS Teams bot fails silently when network paths are blocked — errors are swallowed and logs don't help	`bug` `bug:behavior`
[x]	closed	P1	#67659	[Bug]: MS Teams delegated OAuth launcher uses xdg-open on win32 instead of explorer.exe
[ ]	open	P1	#67177	[msteams] Inbound file attachments silently fail in DMs — file.download.info downloadUrl not rewritten to Graph shares endpoint
[ ]	open	P1	#65329	bug(msteams): DM inline images and file attachments silently dropped
[ ]	open	P1	#62765	msteams dmPolicy=pairing silently drops unpaired senders with HTTP 200, no log line, no auto-reply
[ ]	open	P2	#66771	[Bug]: MSTeams malformed mixed thread session key from old-session reselection
[ ]	open	P2	#42099	fix(plugins): false-positive duplicate plugin ID warning on gateway start (msteams)
[x]	closed	P1	#73754	msteams: v2026.4.26 ships broken JWT validator (jwt.verify is not a function); fix b3bc60ae missed the cut
[x]	closed	P2	#52558	pnpm check fails on main with tsgo errors in irc/mattermost/msteams/nextcloud-talk	`maintainer`

Feature Requests

Resolved?	Status	Priority	#	Title	Labels	Assignee
[ ]	open	P2	#71049	feat(msteams): add option to disable Copilot-style informative stream status in DMs

2. MS Teams Channel Plugin — PRs

Resolved?	Status	Priority	#	Title	Size	Assignee
[ ]	open	P0	#73590	feat: add tool-scoped hooks and fork guard	XL
[ ]	open	P0	#63827	fix(security): preserve dmPolicy settings during wizard runs	XL
[ ]	open	P0	#46423	fix(cron): retry recurring jobs on transient errors with backoff	XL
[ ]	open	P1	#71449	fix(startup): clarify gateway vs channel readiness	XL
[x]	merged	P1	#78081	fix(msteams): surface network errors blocking bot JWT validation and outbound replies (#77674)	S
[x]	closed	P1	#67660	fix(msteams): use explorer.exe for delegated OAuth on win32	S
[ ]	open	P1	#48014	feat(msteams): add DefaultAzureCredential auth type for passwordless Teams auth	L
[ ]	open	P2	#76560	feat(plugins): allow community plugins to use openKeyedStore with man…	L	@vincentkoc
[ ]	open	P2	#76262	fix(msteams): rebase SDK migration onto current main	XL
[ ]	open	P2	#77784	Add Teams delegated auth for plugin tools	XL
[ ]	open	P2	#75043	Add provider-aware automatic TTS emotion mapping	L
[x]	closed	P2	#73456	feat(azure-speech): add realtime transcription provider for voice-call	XL
[ ]	open	P2	#70474	Codex/pr69584 split	XL
[ ]	open	P2	#70287	fix(msteams): drop unsupported $search on msteams:search (AI-assisted)	M
[ ]	open	P2	#69428	fix(msteams): paginate thread replies and keep recent context	S
[ ]	open	P2	#67761	fix: remove truncated preview from inbound system events	XS
[ ]	open	P2	#67460	feat(mention-gating): suppress always-on agent when another agent is explicitly mentioned	M
[ ]	open	P2	#67174	Teams: support separate graphTenantId for cross-tenant Graph API access	M
[ ]	open	P2	#66327	feat(msteams): implement sendPayload for interactive approval cards	M
[ ]	open	P2	#64503	fix(msteams): forward messageBack card actions (Action.Submit) to agent (#60952)	S
[ ]	open	P2	#63347	feat(msteams): support webhook host binding	S
[ ]	open	P2	#61498	build(plugins): enforce extension package root boundaries	XL
[ ]	open	P2	#60643	feat(agents): cognitive processing scaffolding and structured memory prompt	S
[ ]	open	P2	#60630	fix(ci): Windows task tests and Telegram setup promotion surface	L
[ ]	open	P2	#59986	refactor(plugins): add lane-oriented channel interface	XL
[ ]	open	P2	#59485	fix: preserve paperclip runtime env in exec tool defaults	M
[ ]	open	P2	#59314	fix(msteams): preserve channel thread isolation during proactive fallback	M
[ ]	open	P2	#59294	fix(msteams): isolate thread sessions, outbound targeting, and attachment resolution	L
[ ]	open	P2	#57511	feat(msteams): Teams live voice support with .NET media worker	XL
[ ]	open	P2	#57366	fix(msteams): extract emoji unicode from Teams CDN img tags instead of treating as image attachments	S
[ ]	open	P2	#57364	fix(msteams): delete FileConsentCard after user accepts, declines, or upload expires	S
[ ]	open	P2	#55828	feat(msteams): add native plugin interactivity parity	XL
[ ]	open	P2	#55485	Config: plumb opt-in SSRF policy for web fetch, citation redirects, and remote media	L
[ ]	open	P2	#51570	Add OpenClaw User-Agent header to all outbound HTTP requests	S	@SidU
[ ]	open	P2	#50875	feat: add before_identity_resolve plugin hook	M
[ ]	open	P2	#46303	fix: drain inbound debounce buffer and followup queues before SIGUSR1 reload	XL
[ ]	open	P2	#43190	MS Teams: add channel archive persistence and deleted-channel cleanup	XL
[x]	closed	P2	#42400	feat(channels): add neverReply config for group message suppression	L
[ ]	open	P2	#37656	feat: load workspace .env per-agent at exec time	M
[x]	closed	P0	#68077	fix: MS Teams OAuth on Windows and browser.cdpUrl security redaction	XS
[x]	closed	P1	#54803	/status: show usage fetch errors instead of silently hiding	XL
[x]	closed	P2	#66210	feat(msteams): add thread copilot approvals	XL	@vincentkoc
[x]	closed	P2	#59223	fix(ms teams): preserve proactive conversation payload	M
[x]	closed	P2	#55458	Status: surface memory probe errors instead of hiding them	XL
[x]	closed	P2	#40463	fix(msteams): fix image attachment download for channel and DM messages	S	@BradGroux
[x]	closed	P2	#34581	fix(msteams): handle invalid JSON escape sequences in Bot Framework activities	M	@BradGroux
[x]	closed	P2	#32558	MSTeams: add upload session fallback for large files	M	@BradGroux
[x]	closed	P2	#30142	feat(adapters): add sendPayload to batch-b (Discord, Google Chat, Mattermost, MS Teams, Slack, Synology)	L	@BradGroux

3. Windows Platform — Issues

Bugs / Crashes

Resolved?	Status	Priority	#	Title	Labels	Assignee
[ ]	open	P0	#74350	[Security] Windows ACL audit bypass: Anonymous and Guest SIDs are misclassified as "group" instead of "world"
[ ]	open	P1	#77443	[Bug]: WhatsApp event loop blocked (eventLoopDelayMaxMs=12088ms) on first inbound message — 2026.5.3-1 Windows	`bug` `regression`
[ ]	open	P1	#76699	2026.5.x: Telegram media download broken - event loop saturation on Windows
[ ]	open - #74425 fixed/green, pending Windows smoke	P1	#74378	[Bug]: OpenClaw CLI commands remain alive as node.exe processes after execution on Windows	`bug` `regression`
[ ]	open	P1	#73874	Gateway HTTP/WS dispatch deadlock on Windows + Docker Desktop bind-mount setups (regression in 2026.4.24, persists in .25 and .26)
[ ]	open	P1	#77734	Gateway crashes every 3 minutes on Windows - CIAO PROBING CANCELLED (bonjour plugin)	`bug` `bug:crash`
[ ]	open	P1	#71865	Auth login blocked by size-drop guard when openclaw.json was created by PowerShell (verbose/BOM format)
[ ]	open	P1	#71699	[Bug]: Gateway hard-crashes with 0xC0000409 (STATUS_STACK_BUFFER_OVERRUN) on Windows during Mattermost streaming reply; auto-respawn frequently wedges
[ ]	open	P1	#70856	[Bug]: WhatsApp listener repeatedly disconnects/stalls on Windows, causing "No active WhatsApp Web listener" and missed messages	`bug` `regression`
[ ]	open	P1	#70788	fix(windows): suppress startup-folder cmd window flash via wscript silent launcher
[ ]	open	P1	#68493	[Bug]: Editing openclaw.json while gateway is running triggers hot-reload crash loop on Windows (stale lock file + EADDRINUSE)		@vincentkoc
[ ]	open	P1	#67035	[Bug]: 2026.4.14 Windows chat UI regression: input text swallowed, streamed replies often invisible until refresh, typing indicator flashes then blanks
[ ]	open	P1	#63257	Windows Gateway Feishu API timeout 30s at startup
[ ]	open	P1	#62099	EPERM on auth-profiles.json causes full gateway failure cascade (Windows)
[ ]	open	P1	#62055	Windows: CLI crashes with stack overflow / heap OOM on v2026.4.5 (large ESM module graph exceeds V8 default stack)
[ ]	open	P1	#59362	[Bug]: Windows: exec tool causes console window flash when spawning commands	`bug` `regression`
[x]	closed - fixed by #77907	P1	#77785	fix(exec-approvals): fs.renameSync EPERM on Windows blocks all exec calls
[ ]	open	P1	#54669	[Field Report] Chrome 136+ binds CDP to [::1] (IPv6) on Windows — portproxy v4tov4 breaks silently
[x]	closed	P1	#54470	[Bug]: openclaw webhooks gmail setup fails on native Windows with `Error: spawn gcloud ENOENT`	`bug` `bug:crash`
[ ]	open	P1	#47643	[Bug]: Persistent Telegram Channel Issues: Sync Failures, Loops, and Config Changes Not Applying on Windows	`bug` `regression`
[ ]	open	P1	#46378	[Bug]: 安装配置界面windows会卡死	`bug` `regression`
[ ]	open	P1	#42011	[Bug]: Control UI chat can stay stuck on "Stop" after embedded run timeout on Windows	`bug` `bug:crash`
[ ]	open	P1	#39038	[Bug]: OpenClaw节点程序在Windows 11 24H2上启动后卡在PATH信息，无法连接Gateway	`bug` `bug:crash`
[ ]	open - #78266 opened; local gates passed; CI failing `check`/`check-test-types`	P2	#78159	[Windows] execLoginShellEnvZero missing windowsHide:true — console flash on login shell env detection (2026.5.4)
[x]	closed - fixed by #78171	P2	#77993	[Bug]: Windows node install does not fall back when `schtasks` returns Spanish `Acceso denegado`	`bug` `bug:behavior`
[x]	closed - fixed by #77971	P2	#77958	Plugin-skill registration uses fs.symlink (EPERM on Windows without admin/Developer Mode); junction would work without elevation
[ ]	open	P2	#77878	[BUG] openclaw-weixin channel exits with ESM loader error on Windows + Node 24
[ ]	open	P2	#77805	telegram bundled channel setup fails on Windows: plugin module path escapes plugin root or fails alias checks
[ ]	open	P2	#77745	Bug: Feishu image/media download fails with EPERM on Windows due to @larksuiteoapi/node-sdk fsync and writeSavedMediaBuffer handle.sync()
[ ]	open	P2	#77730	[Bug]: file-transfer plugin nodeHostCommands not advertised by Windows node host on live handshake (2026.5.3-1)
[ ]	open	P2	#77263	Windows: native hook relay bridge directory permission check blocks Codex harness
[ ]	open	P2	#76884	[Bug]: OpenClaw on native Windows getting notably slower and slower with each new version???	`bug`
[ ]	open	P2	#76702	Windows + Feishu DM becomes very slow after upgrade to 2026.5.2; latency appears in agent/session processing, likely amplified by large session context
[ ]	open	P2	#76553	[Bug]: Windows: Claude Code not detected by OpenClaw, Gateway in restart loop after PATH workaround	`bug` `bug:behavior`
[x]	closed	P2	#75352	LSP servers fail on Windows with ENOENT: uv_spawn cannot resolve .cmd shims
[ ]	open	P2	#73859	[Bug]: Built-in plugins (minimax, google, talk-voice) fail with RangeError: Maximum call stack size exceeded on Windows
[ ]	open	P2	#73323	[Bug]: Gateway runtime degradation: pricing fetch 60s timeouts, Telegram polling stalls, slow RPC — chronic across 4.23/4.25/4.26 on Windows 11 + Node 24	`bug`
[ ]	open	P2	#73059	[Bug]: Windows linked source install can skip Control UI auto-build through junction-launched scripts/ui.js
[ ]	open	P2	#72922	[Bug]: Sluggish response time and unstable Web GUI and CLI on Windows Server 2022	`bug`
[ ]	open	P2	#71717	exec tool returns EPERM on Windows, all commands fail	`bug`
[ ]	open	P2	#70451	[Bug]: CLI hooks enable times out / SIGKILL on Windows
[ ]	open	P2	#66746	[Bug] Windows memory indexing falls back to FTS-only in 2026.4.14 even though direct node:sqlite + sqlite-vec works
[ ]	open	P2	#66479	Windows: skill not discovered due to UTF-8 BOM injected by PowerShell WriteAllText
[ ]	open	P2	#65164	All outbound HTTP fails inside gateway process on Windows 10 + Node 22 (WebSocket works)
[ ]	open	P2	#64253	Gateway becomes unresponsive under subagent load on Windows - completion announcements timeout
[ ]	open	P2	#63491	[Bug]: Windows Scheduled Task gateway restart/health becomes inconsistent after ready
[x]	closed	P2	#60713	Windows: resolvePreferredOpenClawTmpDir uses C:\tmp instead of proper temp directory
[ ]	open	P2	#59709	Cron scheduled task delivery fails (v2026.3.31)
[ ]	open	P2	#59281	[Bug]: Windows plugin TS source-loading via jiti is pathologically slow in real production call sites	`bug` `bug:behavior`
[ ]	open	P2	#58433	[Bug]: [Windows] Path character loss bug - "system" becomes "ystem" in file paths	`bug` `bug:behavior`
[ ]	open	P2	#58139	[Bug]: memory-lancedb plugin fails with Windows Docker bind mount	`bug` `bug:behavior`
[ ]	open	P2	#56284	Windows: gateway restart does not wait for active tasks and loses session state
[ ]	open	P2	#56106	Transcript JSONL encoding corrupted on Windows (GBK/UTF-8 mix)
[ ]	open	P2	#48780	[Bug]: [Windows] exec() and read() commands corrupted with </arg_value>> suffix	`bug` `bug:behavior`
[ ]	open	P2	#44559	[Bug]: Windows： Gateway 关闭 PowerShell 窗口后断连	`bug` `bug:behavior`
[ ]	open	P2	#44296	Show the actual PowerShell profile path during onboarding shell-completion setup
[ ]	open	P2	#44293	Make `pnpm check:docs` work in native PowerShell
[ ]	open	P2	#44291	Add native PowerShell smoke coverage for contributor commands
[ ]	open	P2	#40694	Browser-opened temporary tabs/windows should close automatically after task completion
[ ]	open	P2	#40540	[Bug]: `openclaw update` command fails with EBUSY error on Windows	`bug` `bug:behavior`
[x]	closed	P1	#77747	[Bug]: Discord gateway remains stuck at awaiting gateway readiness on Windows v2026.5.3-1	`bug` `regression`
[x]	closed	P1	#74086	[Bug]: Regression: Telegram provider fails on Windows after 2026.4.23 (deleteWebhook / setMyCommands errors)	`bug` `regression`
[x]	closed	P1	#70857	[Bug]: Windows startup and reply latency, session lock held for 191s on sessions.json.lock	`bug` `regression`
[x]	closed	P1	#68656	Slow startup on Windows (~39s before ready) with long silent gap before plugin registration	`bug` `regression`	@galiniliev
[x]	closed	P2	#77862	WebChat TTS: audio generated but no playback or attachment on Windows (same as #57296)
[x]	closed	P2	#73831	[Bug]: undici HTTP/2 hang on Windows extends from Telegram polling into the LLM model dispatcher (related to #66885)
[x]	closed	P2	#64187	[Bug]: Windows memory search hits EBUSY during sqlite atomic reindex swap

Feature Requests

Resolved?	Status	Priority	#	Title	Labels
[ ]	open	P2	#72595	[Feature]: Feishu channel needs per-channel proxy bypass for mixed Windows proxy setups	`enhancement`
[ ]	open	P2	#57775	Windows headless node host supports exec approvals via CLI, but nodes describe / Control UI do not advertise system.execApprovals.get/set
[ ]	open	P2	#46590	Feature Request: Add `cron` field to Agent configuration for Agent-owned scheduled tasks
[ ]	open	P2	#18985	[Feature]: Supports Windows 11 MSYS environment and Fishshell.	`enhancement`
[ ]	open	P2	#7057	Flaky tests on Windows/WSL: timeouts and ENOENT in pi-tools workspace-paths & safe-bins	`enhancement`
[ ]	open	P2	#75	Linux/Windows Clawdbot Apps	`enhancement` `help wanted`

4. Windows Platform — PRs

Resolved?	Status	Priority	#	Title	Size	Assignee
[ ]	open	P0	#74383	fix(security): classify broad Windows SIDs as world principals	S
[ ]	open	P0	#63074	fix(security): classify dangerous Windows sandbox binds first	M
[x]	merged	P0	#42174	fix: false error of Windows path when binding the host path to the sandbox.	XS
[ ]	open	P0	#38846	security(windows): enhance command argument validation	S
[x]	merged	P1	#53788	docs(windows): companion app copy and GitHub auth notes	XS
[x]	merged	P1	#77907	fix(exec-approvals): guard Windows rename fallback	M
[x]	merged	P2	#76593	fix(media): use r+ instead of r for fs.open to fix EPERM on fsync on Windows	XS
[ ]	open - maintainer PR; local gates passed; CI failing `check`/`check-test-types`	P2	#78266	fix(shell-env): hide Windows login shell probe	XS	@BradGroux
[x]	merged - fixed #77993 at head `a71d439f4b`, merge `03e6a029ab`	P2	#78171	fix: handle localized schtasks access denied fallback	XS
[x]	closed - superseded by merged #78171	P2	#78006	fix(daemon): fall back to Startup-folder on localized schtasks access-denied (#77993)	S
[x]	merged - fixed #77958 at head `2a21a37925`, merge `5f783d7ddd`	P2	#77971	fix(skills): use junction symlinks on Windows to avoid EPERM without Developer Mode (#77958)	XS
[ ]	open	P2	#76245	[codex] Fallback when Windows gateway task exits early	S
[ ]	open	P2	#75649	fix(windows): preserve staged update handoff	XL
[x]	merged	P2	#75343	fix(lsp): resolve Windows .cmd shims in spawnLspServerProcess	S
[x]	merged	P2	#74881	fix(windows): resolve gcloud/gog/tailscale PATHEXT shims before spawn	S
[ ]	open - fixed/green, pending Windows smoke	P2	#74425	fix: ensure CLI processes exit after command completion on Windows	XS	@BradGroux
[ ]	open	P2	#73889	fix(cli): stabilize Windows scheduled-task restart health after ready	S
[ ]	open	P2	#73751	fix(exec): decode Windows command output with codepage-aware streaming	M
[ ]	open	P2	#73674	fix(memory): resolve QMD Windows cmd shims	M
[x]	merged	P2	#73533	fix(infra): skip POSIX /tmp preferred path on Windows (#60713)	S
[ ]	open	P2	#70341	fix(exec): resolve Windows PowerShell cmdlet allowlist miss	M
[x]	merged	P2	#69701	fix(gateway): skip IPv6 ::1 loopback binding on Windows to prevent HTTP hang	XS
[ ]	open	P2	#69059	fix: retry sqlite-vec load without .dll suffix on Windows	S
[ ]	open	P2	#68819	fix: resolve Windows .cmd shims to underlying .exe before spawn	M
[ ]	open	P2	#68149	feat(daemon): use PowerShell Register-ScheduledTask for Windows auto-start	M
[ ]	open	P2	#67655	fix(exec): fail closed on Windows shell wrappers in allowlist mode	XS
[ ]	open	P2	#64110	feat: Deleting scheduled tasks also clears tasks in the queue.	L
[ ]	open	P2	#63651	fix: remove duplicate restart message on Windows (schtasks)	S
[ ]	open - maintainer-prepped/rebased, proof override, fresh CI pending at `87ace89dca`	P2	#62910	fix(scripts): avoid DEP0190 when spawning .cmd files on Windows (Node.js v24)	XS
[ ]	open - maintainer-prepped/rebased, proof override, blocked by failed `dispatch` at `132e71ff13`	P2	#60678	fix(acpx): add windowsHide to MCP proxy spawn on Windows	XS
[ ]	open	P2	#59705	[codex] improve parallels windows smoke logging	M
[ ]	open	P2	#59013	fix: tolerate EPERM in session write-lock on Windows	S
[ ]	open	P2	#53965	fix: atomic file writes on Windows-mounted Docker volumes	XS
[ ]	open	P2	#52989	fix: use pathToFileURL for Windows path comparison in generate-base-config-schema	XS
[ ]	open	P2	#52487	fix(windows): prevent restart race from duplicate schtasks /Run	XS
[ ]	open	P2	#52200	fix(skills): normalize backslashes in compacted skill paths on Windows	XS
[ ]	open	P2	#51486	fix(daemon): query Windows task runtime directly	S
[ ]	open	P2	#50136	fix(windows): stabilize gateway restart and avoid false stale cleanup [AI-assisted]	M
[ ]	open	P2	#50116	fix: handle Windows-style session paths when running on POSIX	XS
[ ]	open	P2	#48887	Fix/docs format check windows clean	M
[ ]	open	P2	#48320	fix(windows): add windowsHide to all Windows spawn resolution paths	XS
[ ]	open	P2	#48130	fix: correct Windows Chrome executable path extraction regex	XS
[ ]	open	P2	#45870	fix: align windows path tests with runtime behavior	S
[ ]	open	P2	#45380	Make env-prefixed npm scripts work on Windows	S
[ ]	open	P2	#44228	fix(reply): normalize Windows media paths for dedupe	XS
[ ]	open	P2	#44215	fix(path): add Windows PATH bootstrap dirs	S
[ ]	open	P2	#43975	fix(windows): bootstrap UTF-8 before running gateway task script	S
[ ]	open	P2	#42131	fix(doctor): case-insensitive safe-bin trusted dir matching on macOS/Windows	S
[ ]	open	P2	#39644	fix(windows): PowerShell completion install and time-format detection	S
[ ]	open	P2	#38932	docs(gateway): add Windows no-Docker hardening fallback guide	XS
[x]	closed	P0	#72782	fix(security): replace console.warn with structured logger in windows…	XS
[x]	closed	P1	#46371	fix: Windows npm path for Gemini OAuth + feat: WORKING.md bootstrap (#46368, #46367)	S
[x]	merged	P2	#74173	fix: enable native require fast path on Windows for bundled plugins	XS	@galiniliev
[x]	closed	P2	#77757	build: harden runtime deps fingerprint on Windows	S
[x]	closed	P2	#73474	fix(gateway,proxy): bypass Windows proxy for localhost gateway connections	XS
[x]	closed	P2	#71611	fix(memory): retry rename on EBUSY and fall back to copyFile on Windows	XS
[x]	closed	P2	#68853	fix(gateway): SIGUSR1 restart fast path that doesn't break Windows schtasks	M
[x]	closed	P2	#53950	docs: add hypervisorlaunchtype toggle recovery to WSL2+Windows remote CDP guide	XS	@vincentkoc
[x]	closed	P2	#44614	fix(windows): delegate npm global update to detached helper to avoid EBUSY	M
[x]	closed	P2	#44013	feat: add Linux and Windows desktop apps using Tauri	L

5. WSL (Windows Subsystem for Linux) — Issues

Bugs / Crashes

Resolved?	Status	Priority	#	Title	Labels
[ ]	open	P1	#74251	[Bug]: [Bug]: npm install -g openclaw@latest crashes with V8 Fatal error in WSL2 Ubuntu 24.04	`bug`
[ ]	open	P1	#68966	[Bug]: [WSL] openclaw browser command terminated by SIGKILL causing timeout	`bug` `bug:crash`
[ ]	open	P1	#59209	Misleading CDP "Empty reply from server" in WSL2 caused by portproxy self-loop (svchost/iphlpsvc), not Chrome	`bug` `regression`
[ ]	open	P1	#44051	[Bug]: [skills] Skipping skill path error triggered on officially installed skills via clawhub (WSL Environment)	`bug` `regression`
[ ]	open	P2	#73602	[Bug]: WhatsApp flaps and Telegram polling stalls on WSL2 in 2026.4.26
[ ]	open	P2	#73152	Docs/doctor request: clarify gateway reachability for OrbStack/WSL/VM/Tailscale setups
[ ]	open	P2	#61616	[Bug]: [WSL2] Global 30-min gateway stall (:29/:59) affects Telegram + Control UI	`bug`
[x]	closed	P2	#73592	[Bug]: WSL local gateway binds but WebSocket handshake times out on 2026.4.26
[x]	closed	P2	#72693	[Bug] 2026.4.24 on WSL2: Ghost EADDRINUSE loop & systemd split-brain

Feature Requests

Resolved?	Status	Priority	#	Title	Labels
[ ]	open	P1	#67060	[Feature]: Provider requests ignore env proxy by default → causes silent timeout in WSL / proxy environments	`enhancement`
[x]	closed	P2	#62697	feat(whatsapp): Support WhatsApp Channel (Newsletter) messages
[x]	closed	P2	#13417	WhatsApp Newsletter/Channel support in message tool	`enhancement`

6. WSL (Windows Subsystem for Linux) — PRs

Resolved?	Status	Priority	#	Title	Size
[ ]	open	P1	#46698	fix(auth): fix GitHub device flow polling and add --wait flag for WSL…	S
[ ]	open	P2	#68400	daemon/systemd: distinguish WSL user D-Bus socket missing from missing systemctl	S
[ ]	open	P2	#59219	fix[Bug]: [skills] Skipping skill path error triggered on officially installed skills via clawhub (WSL Environment)	M
[ ]	open	P2	#58853	feat(doctor): add WSL environment diagnostics check [AI-assisted]	L
[ ]	open	P2	#44129	fix(skills): exempt managed skills from path escaping checks on WSL (#44051)	S
[x]	merged	P2	#73393	feat(whatsapp): support newsletter targets in message tool	M
[x]	closed	P2	#73227	fix: dashboard command missing token hint in headless/WSL (#72081)	XS
[x]	closed	P2	#59126	docs(contributing): add Development Environment section with WSL2 setup guide	XS

7. Azure (Provider / Infrastructure) — Issues

Bugs / Crashes

Resolved?	Status	Priority	#	Title
[ ]	open	P2	#60546	[Bug]: microsoft-foundry provider selects Claude deployments but routes them through OpenAI Foundry endpoints
[ ]	open	P2	#48793	feat: centralized PluginResourceManager interface for consistent async cleanup across all channel plugins
[ ]	open	P2	#48788	feat: centralized filename encoding utility for multi-encoding Content-Disposition handling
[x]	closed	P2	#64960	Compaction fails permanently when Azure content filter blocks summarization — no model fallback

Feature Requests

Resolved?	Status	Priority	#	Title	Labels	Assignee
[ ]	open	P2	#71058	[Feature]: Support for multiple Azure/Teams bots on a single Openclaw Gateway	`enhancement`
[x]	closed	P1	#51869	[Bug]: onboard-custom hardcodes input: ["text"] for non-Azure custom providers, silently disabling image/vision support

8. Azure (Provider / Infrastructure) — PRs

Resolved?	Status	Priority	#	Title	Size	Assignee
[ ]	open	P1	#55395	fix: centralize plugin command auth requirements	M
[ ]	open	P2	#70922	refactor(whatsapp): centralize account policy	L
[ ]	open	P2	#56705	Config: centralize known plugin ID resolution for validation	M
[ ]	open	P2	#55211	fix: prevent re-entrant loop in internal hook trigger	S
[ ]	open	P2	#47285	feat(memory-lancedb): native Azure OpenAI support	XS
[ ]	open	P2	#47181	feat: add Azure Claude (AI Foundry) onboarding path	L
[x]	closed	P2	#68502	docs: add Azure AI Foundry provider guide	XS	@vincentkoc
[x]	closed	P2	#57468	refactor(models): centralize model metadata and provider-aware resolution	XL	@vincentkoc
[x]	closed	P2	#52555	docs: add Azure Container Apps install guide with managed identity an…	XS	@vincentkoc

9. Microsoft 365 / SharePoint — Issues

Bugs / Crashes

No items found.

Feature Requests

No items found.

10. Microsoft 365 / SharePoint — PRs

No items found.

Appendix: P0 Blockers (Start Here)

Category	Type	Status	Priority	#	Title
MS Teams (channel plugin)	pr	open	P0	#73590	feat: add tool-scoped hooks and fork guard
MS Teams (channel plugin)	pr	open	P0	#63827	fix(security): preserve dmPolicy settings during wizard runs
MS Teams (channel plugin)	pr	open	P0	#46423	fix(cron): retry recurring jobs on transient errors with backoff
Windows platform	pr	open	P0	#74383	fix(security): classify broad Windows SIDs as world principals
Windows platform	issue	open	P0	#74350	[Security] Windows ACL audit bypass: Anonymous and Guest SIDs are misclassified as "group" instead of "world"
Windows platform	pr	open	P0	#63074	fix(security): classify dangerous Windows sandbox binds first
Windows platform	pr	merged	P0	#42174	fix: false error of Windows path when binding the host path to the sandbox.
Windows platform	pr	open	P0	#38846	security(windows): enhance command argument validation

Appendix: High-Priority Open Bugs / Regressions

Category	Type	Status	Priority	#	Title
MS Teams (channel plugin)	pr	open	P1	#71449	fix(startup): clarify gateway vs channel readiness
MS Teams (channel plugin)	pr	open - maintainer-prepped/rebased, proof override, fresh CI pending	P1	#78081	fix(msteams): surface network errors blocking bot JWT validation and outbound replies (#77674)
MS Teams (channel plugin)	pr	closed	P1	#67660	fix(msteams): use explorer.exe for delegated OAuth on win32
MS Teams (channel plugin)	issue	open - #78081 prepared/rebased, proof override, fresh CI pending	P1	#77674	[Bug]: MS Teams bot fails silently when network paths are blocked — errors are swallowed and logs don't help
MS Teams (channel plugin)	issue	closed	P1	#67659	[Bug]: MS Teams delegated OAuth launcher uses xdg-open on win32 instead of explorer.exe
MS Teams (channel plugin)	issue	open	P1	#67177	[msteams] Inbound file attachments silently fail in DMs — file.download.info downloadUrl not rewritten to Graph shares endpoint
MS Teams (channel plugin)	issue	open	P1	#65329	bug(msteams): DM inline images and file attachments silently dropped
MS Teams (channel plugin)	issue	open	P1	#62765	msteams dmPolicy=pairing silently drops unpaired senders with HTTP 200, no log line, no auto-reply
MS Teams (channel plugin)	pr	open	P1	#48014	feat(msteams): add DefaultAzureCredential auth type for passwordless Teams auth
Windows platform	issue	open	P1	#77443	[Bug]: WhatsApp event loop blocked (eventLoopDelayMaxMs=12088ms) on first inbound message — 2026.5.3-1 Windows
Windows platform	issue	open	P1	#76699	2026.5.x: Telegram media download broken - event loop saturation on Windows
Windows platform	issue	open - #74425 fixed/green, pending Windows smoke	P1	#74378	[Bug]: OpenClaw CLI commands remain alive as node.exe processes after execution on Windows
Windows platform	issue	open	P1	#73874	Gateway HTTP/WS dispatch deadlock on Windows + Docker Desktop bind-mount setups (regression in 2026.4.24, persists in .25 and .26)
Windows platform	issue	open	P1	#77734	Gateway crashes every 3 minutes on Windows - CIAO PROBING CANCELLED (bonjour plugin)
Windows platform	issue	open	P1	#71865	Auth login blocked by size-drop guard when openclaw.json was created by PowerShell (verbose/BOM format)
Windows platform	issue	open	P1	#71699	[Bug]: Gateway hard-crashes with 0xC0000409 (STATUS_STACK_BUFFER_OVERRUN) on Windows during Mattermost streaming reply; auto-respawn frequently wedges
Windows platform	issue	open	P1	#70856	[Bug]: WhatsApp listener repeatedly disconnects/stalls on Windows, causing "No active WhatsApp Web listener" and missed messages
Windows platform	issue	open	P1	#70788	fix(windows): suppress startup-folder cmd window flash via wscript silent launcher
Windows platform	issue	open	P1	#68493	[Bug]: Editing openclaw.json while gateway is running triggers hot-reload crash loop on Windows (stale lock file + EADDRINUSE)
Windows platform	issue	open	P1	#67035	[Bug]: 2026.4.14 Windows chat UI regression: input text swallowed, streamed replies often invisible until refresh, typing indicator flashes then blanks
Windows platform	issue	open	P1	#63257	Windows Gateway Feishu API timeout 30s at startup
Windows platform	issue	open	P1	#62099	EPERM on auth-profiles.json causes full gateway failure cascade (Windows)
Windows platform	issue	open	P1	#62055	Windows: CLI crashes with stack overflow / heap OOM on v2026.4.5 (large ESM module graph exceeds V8 default stack)
Windows platform	issue	open	P1	#59362	[Bug]: Windows: exec tool causes console window flash when spawning commands
Windows platform	issue	closed - fixed by #77907	P1	#77785	fix(exec-approvals): fs.renameSync EPERM on Windows blocks all exec calls
Windows platform	pr	merged	P1	#77907	fix(exec-approvals): guard Windows rename fallback
Windows platform	issue	open	P1	#54669	[Field Report] Chrome 136+ binds CDP to [::1] (IPv6) on Windows — portproxy v4tov4 breaks silently
Windows platform	issue	closed	P1	#54470	[Bug]: openclaw webhooks gmail setup fails on native Windows with `Error: spawn gcloud ENOENT`
Windows platform	pr	merged	P1	#53788	docs(windows): companion app copy and GitHub auth notes
Windows platform	issue	open	P1	#47643	[Bug]: Persistent Telegram Channel Issues: Sync Failures, Loops, and Config Changes Not Applying on Windows
Windows platform	issue	open	P1	#46378	[Bug]: 安装配置界面windows会卡死
Windows platform	issue	open	P1	#42011	[Bug]: Control UI chat can stay stuck on "Stop" after embedded run timeout on Windows
Windows platform	issue	open	P1	#39038	[Bug]: OpenClaw节点程序在Windows 11 24H2上启动后卡在PATH信息，无法连接Gateway
WSL	issue	open	P1	#74251	[Bug]: [Bug]: npm install -g openclaw@latest crashes with V8 Fatal error in WSL2 Ubuntu 24.04
WSL	issue	open	P1	#68966	[Bug]: [WSL] openclaw browser command terminated by SIGKILL causing timeout
WSL	issue	open	P1	#67060	[Feature]: Provider requests ignore env proxy by default → causes silent timeout in WSL / proxy environments
WSL	issue	open	P1	#59209	Misleading CDP "Empty reply from server" in WSL2 caused by portproxy self-loop (svchost/iphlpsvc), not Chrome
WSL	pr	open	P1	#46698	fix(auth): fix GitHub device flow polling and add --wait flag for WSL…
WSL	issue	open	P1	#44051	[Bug]: [skills] Skipping skill path error triggered on officially installed skills via clawhub (WSL Environment)
Azure	pr	open	P1	#55395	fix: centralize plugin command auth requirements

Appendix: Resolved Since Last Audit

Category	Type	Status	Priority	#	Title
MS Teams (channel plugin)	pr	closed	P0	#68077	fix: MS Teams OAuth on Windows and browser.cdpUrl security redaction
MS Teams (channel plugin)	issue	closed	P1	#73754	msteams: v2026.4.26 ships broken JWT validator (jwt.verify is not a function); fix b3bc60ae missed the cut
MS Teams (channel plugin)	pr	closed	P1	#54803	/status: show usage fetch errors instead of silently hiding
MS Teams (channel plugin)	pr	closed	P2	#73456	feat(azure-speech): add realtime transcription provider for voice-call
MS Teams (channel plugin)	pr	closed	P2	#66210	feat(msteams): add thread copilot approvals
MS Teams (channel plugin)	pr	closed	P2	#59223	fix(ms teams): preserve proactive conversation payload
MS Teams (channel plugin)	pr	closed	P2	#55458	Status: surface memory probe errors instead of hiding them
MS Teams (channel plugin)	issue	closed	P2	#52558	pnpm check fails on main with tsgo errors in irc/mattermost/msteams/nextcloud-talk
MS Teams (channel plugin)	pr	closed	P2	#42400	feat(channels): add neverReply config for group message suppression
MS Teams (channel plugin)	pr	closed	P2	#40463	fix(msteams): fix image attachment download for channel and DM messages
MS Teams (channel plugin)	pr	closed	P2	#34581	fix(msteams): handle invalid JSON escape sequences in Bot Framework activities
MS Teams (channel plugin)	pr	closed	P2	#32558	MSTeams: add upload session fallback for large files
MS Teams (channel plugin)	pr	closed	P2	#30142	feat(adapters): add sendPayload to batch-b (Discord, Google Chat, Mattermost, MS Teams, Slack, Synology)
Windows platform	pr	closed	P0	#72782	fix(security): replace console.warn with structured logger in windows…
Windows platform	issue	closed	P1	#77747	[Bug]: Discord gateway remains stuck at awaiting gateway readiness on Windows v2026.5.3-1
Windows platform	issue	closed	P1	#74086	[Bug]: Regression: Telegram provider fails on Windows after 2026.4.23 (deleteWebhook / setMyCommands errors)
Windows platform	issue	closed	P1	#70857	[Bug]: Windows startup and reply latency, session lock held for 191s on sessions.json.lock
Windows platform	issue	closed	P1	#68656	Slow startup on Windows (~39s before ready) with long silent gap before plugin registration
Windows platform	pr	closed	P1	#46371	fix: Windows npm path for Gemini OAuth + feat: WORKING.md bootstrap (#46368, #46367)
Windows platform	pr	merged	P2	#74173	fix: enable native require fast path on Windows for bundled plugins
Windows platform	issue	closed	P2	#60713	Windows: resolvePreferredOpenClawTmpDir uses C:\tmp instead of proper temp directory
Windows platform	pr	merged	P2	#73533	fix(infra): skip POSIX /tmp preferred path on Windows (#60713)
Windows platform	pr	merged	P2	#69701	fix(gateway): skip IPv6 ::1 loopback binding on Windows to prevent HTTP hang
Windows platform	issue	closed	P2	#77862	WebChat TTS: audio generated but no playback or attachment on Windows (same as #57296)
Windows platform	pr	closed	P2	#77757	build: harden runtime deps fingerprint on Windows
Windows platform	issue	closed	P2	#73831	[Bug]: undici HTTP/2 hang on Windows extends from Telegram polling into the LLM model dispatcher (related to #66885)
Windows platform	pr	closed	P2	#73474	fix(gateway,proxy): bypass Windows proxy for localhost gateway connections
Windows platform	pr	closed	P2	#71611	fix(memory): retry rename on EBUSY and fall back to copyFile on Windows
Windows platform	pr	closed	P2	#68853	fix(gateway): SIGUSR1 restart fast path that doesn't break Windows schtasks
Windows platform	issue	closed	P2	#64187	[Bug]: Windows memory search hits EBUSY during sqlite atomic reindex swap
Windows platform	pr	closed	P2	#53950	docs: add hypervisorlaunchtype toggle recovery to WSL2+Windows remote CDP guide
Windows platform	pr	closed	P2	#44614	fix(windows): delegate npm global update to detached helper to avoid EBUSY
Windows platform	pr	closed	P2	#44013	feat: add Linux and Windows desktop apps using Tauri
WSL	issue	closed	P2	#73592	[Bug]: WSL local gateway binds but WebSocket handshake times out on 2026.4.26
WSL	pr	merged	P2	#73393	feat(whatsapp): support newsletter targets in message tool
WSL	pr	closed	P2	#73227	fix: dashboard command missing token hint in headless/WSL (#72081)
WSL	issue	closed	P2	#72693	[Bug] 2026.4.24 on WSL2: Ghost EADDRINUSE loop & systemd split-brain
WSL	issue	closed	P2	#62697	feat(whatsapp): Support WhatsApp Channel (Newsletter) messages
WSL	pr	closed	P2	#59126	docs(contributing): add Development Environment section with WSL2 setup guide
WSL	issue	closed	P2	#13417	WhatsApp Newsletter/Channel support in message tool
Azure	issue	closed	P1	#51869	[Bug]: onboard-custom hardcodes input: ["text"] for non-Azure custom providers, silently disabling image/vision support
Azure	pr	closed	P2	#68502	docs: add Azure AI Foundry provider guide
Azure	issue	closed	P2	#64960	Compaction fails permanently when Azure content filter blocks summarization — no model fallback
Azure	pr	closed	P2	#57468	refactor(models): centralize model metadata and provider-aware resolution
Azure	pr	closed	P2	#52555	docs: add Azure Container Apps install guide with managed identity an…

Appendix: New Open Items Added This Audit

Category	Type	Status	Priority	#	Title
MS Teams (channel plugin)	pr	open - maintainer-prepped/rebased, proof override, fresh CI pending	P1	#78081	fix(msteams): surface network errors blocking bot JWT validation and outbound replies (#77674)
MS Teams (channel plugin)	issue	open - #78081 prepared/rebased, proof override, fresh CI pending	P1	#77674	[Bug]: MS Teams bot fails silently when network paths are blocked — errors are swallowed and logs don't help
MS Teams (channel plugin)	pr	open	P2	#77784	Add Teams delegated auth for plugin tools
Windows platform	pr	open - maintainer PR; CI failing `check`/`check-test-types`	P2	#78266	fix(shell-env): hide Windows login shell probe
Windows platform	pr	merged - fixed #77993 at head `a71d439f4b`, merge `03e6a029ab`	P2	#78171	fix: handle localized schtasks access denied fallback
Windows platform	issue	open - #78266 opened; local gates passed; CI failing `check`/`check-test-types`	P2	#78159	[Windows] execLoginShellEnvZero missing windowsHide:true — console flash on login shell env detection (2026.5.4)
Windows platform	pr	closed - superseded by merged #78171	P2	#78006	fix(daemon): fall back to Startup-folder on localized schtasks access-denied (#77993)
Windows platform	issue	closed - fixed by #78171	P2	#77993	[Bug]: Windows node install does not fall back when `schtasks` returns Spanish `Acceso denegado`
Windows platform	pr	merged - fixed #77958 at head `2a21a37925`, merge `5f783d7ddd`	P2	#77971	fix(skills): use junction symlinks on Windows to avoid EPERM without Developer Mode (#77958)
Windows platform	issue	closed - fixed by #77971	P2	#77958	Plugin-skill registration uses fs.symlink (EPERM on Windows without admin/Developer Mode); junction would work without elevation
Windows platform	pr	merged	P1	#77907	fix(exec-approvals): guard Windows rename fallback
Windows platform	issue	open	P2	#77878	[BUG] openclaw-weixin channel exits with ESM loader error on Windows + Node 24
Windows platform	issue	open	P2	#77805	telegram bundled channel setup fails on Windows: plugin module path escapes plugin root or fails alias checks
Windows platform	issue	closed - fixed by #77907	P1	#77785	fix(exec-approvals): fs.renameSync EPERM on Windows blocks all exec calls
Windows platform	issue	open	P2	#77745	Bug: Feishu image/media download fails with EPERM on Windows due to @larksuiteoapi/node-sdk fsync and writeSavedMediaBuffer handle.sync()
Windows platform	issue	open	P1	#77734	Gateway crashes every 3 minutes on Windows - CIAO PROBING CANCELLED (bonjour plugin)
Windows platform	issue	open	P2	#77730	[Bug]: file-transfer plugin nodeHostCommands not advertised by Windows node host on live handshake (2026.5.3-1)
MS Teams (channel plugin)	pr	open	P0	#46423	fix(cron): retry recurring jobs on transient errors with backoff
MS Teams (channel plugin)	pr	open	P1	#71449	fix(startup): clarify gateway vs channel readiness
MS Teams (channel plugin)	pr	open	P2	#76560	feat(plugins): allow community plugins to use openKeyedStore with man…
MS Teams (channel plugin)	pr	open	P2	#76262	fix(msteams): rebase SDK migration onto current main
MS Teams (channel plugin)	pr	open	P2	#75043	Add provider-aware automatic TTS emotion mapping
Windows platform	pr	open	P0	#74383	fix(security): classify broad Windows SIDs as world principals
Windows platform	issue	open	P0	#74350	[Security] Windows ACL audit bypass: Anonymous and Guest SIDs are misclassified as "group" instead of "world"
Windows platform	issue	open	P1	#77443	[Bug]: WhatsApp event loop blocked (eventLoopDelayMaxMs=12088ms) on first inbound message — 2026.5.3-1 Windows
Windows platform	issue	open	P1	#76699	2026.5.x: Telegram media download broken - event loop saturation on Windows
Windows platform	issue	open - #74425 fixed/green, pending Windows smoke	P1	#74378	[Bug]: OpenClaw CLI commands remain alive as node.exe processes after execution on Windows
Windows platform	issue	open	P2	#77263	Windows: native hook relay bridge directory permission check blocks Codex harness
Windows platform	issue	open	P2	#76884	[Bug]: OpenClaw on native Windows getting notably slower and slower with each new version???
Windows platform	issue	open	P2	#76702	Windows + Feishu DM becomes very slow after upgrade to 2026.5.2; latency appears in agent/session processing, likely amplified by large session context
Windows platform	pr	merged	P2	#76593	fix(media): use r+ instead of r for fs.open to fix EPERM on fsync on Windows
Windows platform	issue	open	P2	#76553	[Bug]: Windows: Claude Code not detected by OpenClaw, Gateway in restart loop after PATH workaround
Windows platform	pr	open	P2	#76245	[codex] Fallback when Windows gateway task exits early
Windows platform	pr	open	P2	#75649	fix(windows): preserve staged update handoff
Windows platform	issue	closed	P2	#75352	LSP servers fail on Windows with ENOENT: uv_spawn cannot resolve .cmd shims
Windows platform	pr	merged	P2	#75343	fix(lsp): resolve Windows .cmd shims in spawnLspServerProcess
Windows platform	pr	merged	P2	#74881	fix(windows): resolve gcloud/gog/tailscale PATHEXT shims before spawn
Windows platform	pr	open - fixed/green, pending Windows smoke	P2	#74425	fix: ensure CLI processes exit after command completion on Windows
WSL	issue	open	P1	#74251	[Bug]: [Bug]: npm install -g openclaw@latest crashes with V8 Fatal error in WSL2 Ubuntu 24.04

Appendix: Removed From Tracker

#	Title	Reason
#70762	refactor(agents): share hook history windows	No longer matches Microsoft-related tracker criteria after false-positive review.
#68725	feat(amazon-bedrock-mantle): add known context windows for open-weight Mantle models	No longer matches Microsoft-related tracker criteria after false-positive review.
#64443	OpenClaw chat interface causes very high WindowServer CPU on Intel Retina iMac	No longer matches Microsoft-related tracker criteria after false-positive review.
#46956	feat(cli): add trust windows for time-bounded exec approval	No longer matches Microsoft-related tracker criteria after false-positive review.
#39126	feat(exec): add session-based trust windows for exec approvals	No longer matches Microsoft-related tracker criteria after false-positive review.

Audit Notes

2026-05-05: Merged #77907 for #77785 at head 91fe6a62c9 with merge commit b971ebaaab65; #77785 is closed.
2026-05-05: Maintainer-prepped #78081 for #77674, rebased onto current main, added the missing changelog entry, pushed head ad42d65f90, and left a maintainer proof override/status comment. Counts remain unchanged until the PR merges and the issue closes.
Source set: live GitHub issue/PR state for openclaw/openclaw, plus every checklist row from the previous PR body so closed/merged items could be marked resolved.
Added newly opened matches for msteams, Microsoft Teams, Windows, WSL, Azure, Entra/AAD, MSAL, managed identity, DefaultAzureCredential, Microsoft Graph, SharePoint, OneDrive, and Microsoft 365.
Kept broad multi-channel PRs when they carry channel: msteams or plugin: azure-speech, because those can still affect Microsoft surfaces.
Removed false positives where window(s) was not Microsoft Windows, including WindowServer, context windows, trust windows, and hook history windows.
This tracking PR remains metadata-only; no repository files or code were changed.

Changed files

CHANGELOG.md (modified, +1/-0)
MICROSOFT_TRACKER.md (added, +398/-0)
scripts/generate-microsoft-tracker.mjs (added, +428/-0)

Code Example

> openclaw doctor
...
[skills] failed to create plugin skill symlink "C:\Users\jarro\.openclaw\plugin-skills\browser-automation" → "C:\Users\jarro\AppData\Roaming\npm\node_modules\openclaw\dist\extensions\browser\skills\browser-automation": Error: EPERM: operation not permitted, symlink 'C:\Users\jarro\AppData\Roaming\npm\node_modules\openclaw\dist\extensions\browser\skills\browser-automation' -> 'C:\Users\jarro\.openclaw\plugin-skills\browser-automation'
[skills] failed to create plugin skill symlink "C:\Users\jarro\.openclaw\plugin-skills\obsidian-vault-maintainer" → "C:\Users\jarro\AppData\Roaming\npm\node_modules\openclaw\dist\extensions\memory-wiki\skills\obsidian-vault-maintainer": Error: EPERM: operation not permitted, symlink ...
[skills] failed to create plugin skill symlink "C:\Users\jarro\.openclaw\plugin-skills\wiki-maintainer" → "C:\Users\jarro\AppData\Roaming\npm\node_modules\openclaw\dist\extensions\memory-wiki\skills\wiki-maintainer": Error: EPERM: operation not permitted, symlink ...

---

> $src = "$env:APPDATA\npm\node_modules\openclaw\dist\extensions\browser\skills\browser-automation"
> $dst = "$env:TEMP\junction-test"
> cmd /c "mklink /J `"$dst`" `"$src`""
Junction created for C:\Users\jarro\AppData\Local\Temp\junction-test <<===>> C:\Users\jarro\AppData\Roaming\npm\node_modules\openclaw\dist\extensions\browser\skills\browser-automation

---

try {
  await fs.symlink(target, link, "junction"); // Node already supports "junction" type on Windows
} catch (err) {
  if (process.platform === "win32" && (err as NodeJS.ErrnoException).code === "EPERM") {
    // last-resort: spawn `cmd /c mklink /J` if the junction type didn't take
    await spawnMklinkJunction(link, target);
  } else {
    throw err;
  }
}

RAW_BUFFERClick to expand / collapse

Version

openclaw 2026.5.4 (325df3e)
Windows 11 (build 26200), Node.js (via nvm4w), PowerShell 7
Standard user account; Developer Mode is OFF

Summary

Reproduction

Fresh install on a standard Windows user account (no Developer Mode, no admin):

> openclaw doctor
...
[skills] failed to create plugin skill symlink "C:\Users\jarro\.openclaw\plugin-skills\browser-automation" → "C:\Users\jarro\AppData\Roaming\npm\node_modules\openclaw\dist\extensions\browser\skills\browser-automation": Error: EPERM: operation not permitted, symlink 'C:\Users\jarro\AppData\Roaming\npm\node_modules\openclaw\dist\extensions\browser\skills\browser-automation' -> 'C:\Users\jarro\.openclaw\plugin-skills\browser-automation'
[skills] failed to create plugin skill symlink "C:\Users\jarro\.openclaw\plugin-skills\obsidian-vault-maintainer" → "C:\Users\jarro\AppData\Roaming\npm\node_modules\openclaw\dist\extensions\memory-wiki\skills\obsidian-vault-maintainer": Error: EPERM: operation not permitted, symlink ...
[skills] failed to create plugin skill symlink "C:\Users\jarro\.openclaw\plugin-skills\wiki-maintainer" → "C:\Users\jarro\AppData\Roaming\npm\node_modules\openclaw\dist\extensions\memory-wiki\skills\wiki-maintainer": Error: EPERM: operation not permitted, symlink ...

The same errors print on every CLI invocation that touches plugin-skill registration.

Why a plain `fs.symlink` fallback is the wrong fix on Windows

On NTFS, directory junctions (reparse points) behave the same as symlinks for fs.readdir/fs.realpath and do not require elevation or Developer Mode. The skill folders OpenClaw is trying to expose are all directories rooted under the npm module dir, which is exactly the case junctions handle.

I confirmed locally that the same target the symlink call is failing on works fine via a junction:

> $src = "$env:APPDATA\npm\node_modules\openclaw\dist\extensions\browser\skills\browser-automation"
> $dst = "$env:TEMP\junction-test"
> cmd /c "mklink /J `"$dst`" `"$src`""
Junction created for C:\Users\jarro\AppData\Local\Temp\junction-test <<===>> C:\Users\jarro\AppData\Roaming\npm\node_modules\openclaw\dist\extensions\browser\skills\browser-automation

(No admin, no Developer Mode.)

Suggested fix

In the plugin-skill registration helper, on process.platform === "win32" and only for directory targets, fall back to a junction when fs.symlink throws EPERM:

try {
  await fs.symlink(target, link, "junction"); // Node already supports "junction" type on Windows
} catch (err) {
  if (process.platform === "win32" && (err as NodeJS.ErrnoException).code === "EPERM") {
    // last-resort: spawn `cmd /c mklink /J` if the junction type didn't take
    await spawnMklinkJunction(link, target);
  } else {
    throw err;
  }
}

Node's own fs.symlink(target, path, "junction") on Windows already maps to a directory junction without requiring elevation, so depending on what's currently being passed, switching the type argument from default/"dir" to "junction" may be the entire fix. Worth confirming the call site is using the default/"dir" mode (which uses NT symlinks and triggers the EPERM).

If a junction is genuinely undesirable (e.g. the skill target is a file, not a directory), fall back to a hard copy — slower but guaranteed to work — and surface a one-line warning telling the user how to enable Developer Mode if they want symlink behavior back.

Impact

Three "stock" plugin-shipped skills are silently unavailable on stock Windows installs:

browser-automation — blocks the entire @openclaw/browser-plugin skill surface
obsidian-vault-maintainer
wiki-maintainer

I ship a desktop frontend on top of OpenClaw (Crystal: https://github.com/jvpflum/Crystal) and was tracking down "why does my browser skill list show empty" when I found this in openclaw doctor. The error is logged but never bubbles up to the skills surface, so users hit it as an "I installed the plugin but the skill isn't there" mystery.

Out of scope but related

The EPERM error itself is also printed to stderr on every CLI invocation that touches skill registration, including --json reads. That's the same anti-pattern flagged in #77942 (config-validator output leaking into machine-readable command stderr). Mentioning here for context but not asking for it to be fixed in this issue.

Happy to send a focused PR + test once you confirm the preferred call-site change (switch fs.symlink type to "junction" vs add explicit fallback logic).

extent analysis

TL;DR

The most likely fix is to modify the plugin-skill registration helper to fall back to a junction when fs.symlink throws EPERM on Windows for directory targets.

Guidance

Verify that the fs.symlink call is using the default "dir" mode, which uses NT symlinks and triggers the EPERM error.
Consider switching the type argument to "junction" in the fs.symlink call to use directory junctions, which do not require elevation or Developer Mode.
If a junction is undesirable (e.g., the skill target is a file), fall back to a hard copy and surface a warning to the user about enabling Developer Mode.
Test the modified plugin-skill registration helper to ensure it correctly handles both directory and file targets.

Example

try {
  await fs.symlink(target, link, "junction");
} catch (err) {
  if (process.platform === "win32" && (err as NodeJS.ErrnoException).code === "EPERM") {
    // last-resort: spawn `cmd /c mklink /J` if the junction type didn't take
    await spawnMklinkJunction(link, target);
  } else {
    throw err;
  }
}

Notes

The fix should be tested on Windows with and without Developer Mode to ensure it works correctly in both scenarios. Additionally, the fix should be reviewed to ensure it does not introduce any security vulnerabilities.

Recommendation

Apply the workaround by modifying the plugin-skill registration helper to fall back to a junction when fs.symlink throws EPERM on Windows for directory targets, as it provides a reliable solution for users without Developer Mode or administrator elevation.

Vote matrix · Quick signals

Works

Did the solution work? Tap to confirm.

Easy Fix

Was it a quick fix?

Time Saver

Did it save you time?

Blocking

Was it severely blocking?

Common Issue

Are others likely hitting this too?

Flaky / Intermittent

Is it intermittent?

Verified / Reproducible

Can you reproduce it reliably?

#model save/load #optimization #mixed precision #training loop #device allocation

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

openclaw - ✅(Solved) Fix Plugin-skill registration uses fs.symlink (EPERM on Windows without admin/Developer Mode); junction would work without elevation [3 pull requests, 2 comments, 3 participants]

Recommended Tools

GitHub issue graph ai analysis

Error Message

Root Cause

Fix Action

Fixed

PR fix notes

PR #77971: fix(skills): use junction symlinks on Windows to avoid EPERM without Developer Mode (#77958)

Description (problem / solution / changelog)

Summary

Verification

Maintainer notes

Changed files

PR #78006: fix(daemon): fall back to Startup-folder on localized schtasks access-denied (#77993)

Description (problem / solution / changelog)

Root cause

Fix

Test

Changed files

PR #74163: WORKING: All Microsoft Issues and PRs (refresh)

Description (problem / solution / changelog)

Microsoft Ecosystem Issues & PRs Tracker

Summary

1. MS Teams Channel Plugin — Issues

Bugs / Crashes

Feature Requests

2. MS Teams Channel Plugin — PRs

3. Windows Platform — Issues

Bugs / Crashes

Feature Requests

4. Windows Platform — PRs

5. WSL (Windows Subsystem for Linux) — Issues

Bugs / Crashes

Feature Requests

6. WSL (Windows Subsystem for Linux) — PRs

7. Azure (Provider / Infrastructure) — Issues

Bugs / Crashes

Feature Requests

8. Azure (Provider / Infrastructure) — PRs

9. Microsoft 365 / SharePoint — Issues

Bugs / Crashes

Feature Requests

10. Microsoft 365 / SharePoint — PRs

Appendix: P0 Blockers (Start Here)

Appendix: High-Priority Open Bugs / Regressions

Appendix: Resolved Since Last Audit

Appendix: New Open Items Added This Audit

Appendix: Removed From Tracker

Audit Notes

Changed files

Code Example

Version

Summary

Reproduction

Why a plain fs.symlink fallback is the wrong fix on Windows

Suggested fix

Impact

Out of scope but related

extent analysis

TL;DR

Guidance

Example

Notes

Recommendation

Still need to ship something?

RELATED_DISCOVERY

TRENDING

Why a plain `fs.symlink` fallback is the wrong fix on Windows