Greptile Summary

This PR adds MICROSOFT_TRACKER.md, a living maintainer checklist that rebuilds the Microsoft-ecosystem issue/PR tracker (Teams, Windows, WSL, Azure, M365) from PR #49126 after the issue/PR purge, with counts refreshed from currently open GitHub items. Summary table arithmetic is correct (186 total), but two issues need attention:

• The "How to use" header instructs maintainers to "edit this PR body" — since this is now a repo file, that instruction is wrong and will confuse anyone trying to update the tracker.
• The commit was made with --no-verify because oxfmt is not installed locally; if the formatter hook is expected to pass on CI or for all contributors, a follow-up to install oxfmt (or update the hook) would be worthwhile.

Confidence Score: 4/5

Doc-only change is safe to merge after fixing the stale "PR body" instruction; no code is affected.

One P1 finding (wrong instruction text that will mislead maintainers) and one P2 finding (miscategorized macOS issue). No code changes, no logic paths affected. Score is at the P1 ceiling of 4.

MICROSOFT_TRACKER.md — the "How to use" instruction on line 13 needs to be corrected from "PR body" to "this file", and issue #64443 on line 142 should be reviewed for correct categorization.

This is a comment left during a code review.
Path: MICROSOFT_TRACKER.md
Line: 13

Comment:
**Stale instruction: references "this PR body" instead of the file**

This tracker now lives as a repository file, not a PR body. The instruction to "edit this PR body" will mislead maintainers who look here for update guidance — there is no associated PR body to edit; changes need to go through a commit to `MICROSOFT_TRACKER.md`.

```suggestion
> - Mark items resolved by editing this file and changing `[ ]` to `[x]`
```

How can I resolve this? If you propose a fix, please make it concise.

---

This is a comment left during a code review.
Path: MICROSOFT_TRACKER.md
Line: 142

Comment:
**macOS item miscategorized under Windows Platform**

Issue #64443 title is "OpenClaw chat interface causes very high **WindowServer** CPU on Intel Retina iMac." `WindowServer` is the macOS display compositor — it does not exist on Windows. This item appears to have been pulled in via a keyword match on "Window" rather than a genuine Windows-platform signal, and belongs under a macOS/UI category or should be removed from this tracker entirely.

How can I resolve this? If you propose a fix, please make it concise.

_{Reviews (1): Last reviewed commit: "docs: refresh Microsoft ecosystem tracke..." | Re-trigger Greptile}

Codex review: found issues before merge.

Summary
The PR adds MICROSOFT_TRACKER.md, scripts/generate-microsoft-tracker.mjs, and a changelog entry for maintaining a Microsoft-related issue/PR checklist.

Reproducibility: yes. for the review findings: PR-head source shows the stale committed counts, hard-coded closed-count reset, stale edit instruction, and substring matcher. No product runtime reproduction applies to this maintainer tracker PR.

Real behavior proof
Not applicable: Not applicable because this is a MEMBER-authored maintainer/admin tracker PR rather than an external contributor runtime behavior change.

Next step before merge
Manual review is needed because this is a draft protected maintainer tracker PR and the remaining action is a source-of-truth/workflow decision plus branch refresh, not a safe autonomous repair.

Security
Cleared: No concrete security or supply-chain regression found; the added script introduces no dependencies and invokes gh through argument arrays rather than shell interpolation.

Review findings

• [P2] Refresh the committed tracker before merge — MICROSOFT_TRACKER.md:25
• [P2] Preserve resolved tracker rows when regenerating — scripts/generate-microsoft-tracker.mjs:302-305
• [P2] Point resolved edits at the tracker file — scripts/generate-microsoft-tracker.mjs:280

Microsoft tracker audit complete (2026-05-04 local time). I updated the PR body only; no code or repo files were changed.

Summary:

• Total tracked rows: 206 (89 issues, 117 PRs)
• Remaining open: 169
• Resolved since the last tracker body: 37
• New open Microsoft-related items added: 22
• Removed false positives: 5

New open items added:
#77443, #77263, #76884, #76702, #76699, #76593, #76560, #76553, #76262, #76245, #75649, #75352, #75343, #75043, #74881, #74425, #74383, #74378, #74350, #74251, #71449, #46423

Resolved since last audit:
#74173, #74086, #73831, #73754, #73592, #73474, #73393, #73227, #72782, #72693, #71611, #70857, #68853, #68656, #68502, #68077, #66210, #64960, #64187, #62697, #59223, #59126, #57468, #55458, #54803, #53950, #52558, #52555, #51869, #46371, #44614, #44013, #40463, #34581, #32558, #30142, #13417

Removed from tracker as false positives after review:
#70762, #68725, #64443, #46956, #39126

Notes:

• I kept this as a tracking-PR metadata update, per maintainer SOP and your request.
• I added a Status column so closed/merged items are visible without losing their checklist history.
• I removed generic window(s) false positives such as WindowServer, context windows, trust windows, and hook history windows.

Microsoft tracker rescan complete.

Updated the PR body with live GitHub state from the May 5 local scan:

• Added new MS Teams items: [Bug]: MS Teams bot fails silently when network paths are blocked — errors are swallowed and logs don't help #77674, fix(msteams): surface network errors blocking bot JWT validation and outbound replies (#77674) #78081, Add Teams delegated auth for plugin tools #77784
• Added new Windows items: fix: handle localized schtasks access denied fallback #78171, [Windows] execLoginShellEnvZero missing windowsHide:true — console flash on login shell env detection (2026.5.4) #78159, fix(daemon): fall back to Startup-folder on localized schtasks access-denied (#77993) #78006, [Bug]: Windows node install does not fall back when schtasks returns Spanish Acceso denegado #77993, fix(skills): use junction symlinks on Windows to avoid EPERM without Developer Mode (#77958) #77971, Plugin-skill registration uses fs.symlink (EPERM on Windows without admin/Developer Mode); junction would work without elevation #77958, fix(exec-approvals): guard Windows rename fallback #77907, [BUG] openclaw-weixin channel exits with ESM loader error on Windows + Node 24 #77878, WebChat TTS: audio generated but no playback or attachment on Windows (same as #57296) #77862, telegram bundled channel setup fails on Windows: plugin module path escapes plugin root or fails alias checks #77805, fix(exec-approvals): fs.renameSync EPERM on Windows blocks all exec calls #77785, build: harden runtime deps fingerprint on Windows #77757, [Bug]: Discord gateway remains stuck at awaiting gateway readiness on Windows v2026.5.3-1 #77747, Bug: Feishu image/media download fails with EPERM on Windows due to @larksuiteoapi/node-sdk fsync and writeSavedMediaBuffer handle.sync() #77745, Gateway crashes every 3 minutes on Windows - CIAO PROBING CANCELLED (bonjour plugin) #77734, [Bug]: file-transfer plugin nodeHostCommands not advertised by Windows node host on live handshake (2026.5.3-1) #77730
• Updated tracked PRs feat(channels): add neverReply config for group message suppression #42400 and feat(azure-speech): add realtime transcription provider for voice-call #73456 from open to closed
• Updated summary totals to 101 issues, 124 PRs, 225 total, 54 resolved, 171 remaining

Search coverage included Windows/win32/WSL/PowerShell/schtasks/cmd.exe, msteams/Microsoft Teams/MS Teams, Microsoft Graph, Azure, Entra/AAD/MSAL/DefaultAzureCredential, SharePoint, OneDrive, Microsoft 365, Outlook, plus channel: msteams and plugin: azure-speech label matches. I filtered out body-only false positives such as generic "window" language and unrelated release/meta PRs.

Tracker update: #77907/#77785 marked as maintainer-prepped/rebased with fresh CI pending. Counts unchanged until the PR merges and the issue closes. PR comment: #77907 (comment)

Tracker update: #78081/#77674 marked as maintainer-prepped/rebased with changelog added, maintainer proof override posted, and fresh CI pending. Counts unchanged until merge/closure. PR comment: #78081 (comment)

Tracker refresh: updated the prepared heads after rebasing onto the latest main again: #77907/#77785 is now at 4530dd1c43; #78081/#77674 is now at f374344f3b with proof: override applied. Counts remain unchanged while both fresh CI runs are pending.

Tracker refresh: #77907/#77785 is now maintainer-refreshed at prepared head 28834ad0d1 after picking up the approvals directory-mode commit and rebasing onto current main. Focused verification passed (23 exec approvals tests plus formatting). #78081/#77674 remains at f374344f3b; reran its failed shared cron shard. Counts remain unchanged while CI is pending/failing.

Tracker update: #77907 merged at head 91fe6a62c9 (merge commit b971ebaaab65) and #77785 is closed. Windows resolved/remaining is now 31/101; overall resolved/remaining is now 56/169. #78081/#77674 remains open because checks-node-core-runtime-shared is still failing with the cron shard no-output timeout.

Tracker refresh: #78081/#77674 is now maintainer-refreshed at prepared head ad42d65f90 after rebasing onto current main. Focused Teams verification passed (50 tests plus formatting). Counts remain unchanged while fresh CI is pending.

Tracker update after #78081 merge:

• Merged fix(msteams): surface network errors blocking bot JWT validation and outbound replies (#77674) #78081 at head ad42d65f9088e484bc29ef4a21733a593edc0bd2 (merge commit eecda912ee756840b153a76de8c9203ae682c0cc).
• Verified linked issue [Bug]: MS Teams bot fails silently when network paths are blocked — errors are swallowed and logs don't help #77674 is closed.
• Updated MS Teams counts to 15 resolved / 43 remaining.
• Updated overall counts to 58 resolved / 167 remaining.

Next low-hanging candidates while the queue is warm: #78159, #77993/#78006/#78171, #77958/#77971, then the older XS Windows PRs that need rebase/conflict cleanup (#60678/#62910/#48320).

Tracker updated for tonight's 1-5 pass.

Resolved/closed in this update:

• fix: handle localized schtasks access denied fallback #78171 merged for [Bug]: Windows node install does not fall back when schtasks returns Spanish Acceso denegado #77993 at prepared head a71d439f4b3363fb920bad88f948c7d3e4b39a31; merge commit 03e6a029ab121756507aeaedc8a7ed21988976ef; [Bug]: Windows node install does not fall back when schtasks returns Spanish Acceso denegado #77993 is closed.
• fix(daemon): fall back to Startup-folder on localized schtasks access-denied (#77993) #78006 closed as superseded by fix: handle localized schtasks access denied fallback #78171.
• fix(skills): use junction symlinks on Windows to avoid EPERM without Developer Mode (#77958) #77971 merged for Plugin-skill registration uses fs.symlink (EPERM on Windows without admin/Developer Mode); junction would work without elevation #77958 at prepared head 2a21a37925656d4efd69b7b8c945083ed7ad8863; merge commit 5f783d7ddd85cae5776f1ec14c3b48325ea9d163; Plugin-skill registration uses fs.symlink (EPERM on Windows without admin/Developer Mode); junction would work without elevation #77958 is closed.

Still open/prepped:

• fix(shell-env): hide Windows login shell probe #78266 opened for [Windows] execLoginShellEnvZero missing windowsHide:true — console flash on login shell env detection (2026.5.4) #78159; local gates passed, but CI is failing check and check-test-types.
• fix(scripts): avoid DEP0190 when spawning .cmd files on Windows (Node.js v24) #62910 prepped/rebased at 87ace89dca4f3620bba8b6d699cad061023aa0f1; proof override applied; fresh CI is pending.
• fix(acpx): add windowsHide to MCP proxy spawn on Windows #60678 remains prepped at 132e71ff1385b5e2a635b65e2e0deb26b94b0bd5; main checks passed but dispatch failed, so I did not merge it.

Counts now: Windows 73 issues / 60 PRs / 133 total / 36 resolved / 97 remaining. Overall 101 issues / 125 PRs / 226 total / 63 resolved / 163 remaining.

Refreshed stale/conflicting prepared PRs after main moved.\n\n- #60678 rebased/pushed from 132e71ff1385b5e2a635b65e2e0deb26b94b0bd5 to 974fd3bdf74752da73f671e4848e8e0a5e5ea976; focused ACPX tests, formatter, and git diff --check passed. Fresh CI is running.\n- #62910 rebased/pushed from 87ace89dca4f3620bba8b6d699cad061023aa0f1 to bb4f1598abed90a276578c22f4454aaa6123cff4; focused UI spawn test, formatter, and git diff --check passed. Fresh CI is running.\n- #78266 remains blocked by failing check / check-test-types.\n\nCounts unchanged: Windows 36 resolved / 97 remaining; overall 63 resolved / 163 remaining.

Microsoft tracker refreshed on 2026-05-08.

Updated counts:

What changed:

• Added 23 newly found Microsoft-related items since the 2026-05-06 audit: OpenClaw 2026.5.4 Gateway status/health inconsistency on WSL2: diagnostics report ok/listener, external checks show no listener and HTTP 000 #78222, [Bug]: msteams proactive send path hardcodes replyStyle top-level, ignoring thread config #78298, fix(msteams): respect thread context in proactive send path #78299, fix(io): add windowsHide to login shell env probe on Windows #78306, [Bug]: 16 Telegram bots on Windows cause event loop starvation up to 65s — 100% ELU, 90%+ CPU, control-plane RPC >100s #78352, fix(msteams): preserve proactive thread replies #78387, [Bug]: channels.slack.start-account phase blocks event loop 5+ minutes while a model_call is in flight (Windows, 2026.5.4) #78435, [Bug]: [Windows] openclaw update hangs after "✓ Updating via package manager" completes #78445, Windows: plugin skill publish fails with EPERM symlink; use junction fallback #78468, fix(update): pipe post-core child stdio on Windows to prevent terminal hang (#78445) #78483, [Bug]: WhatsApp plugin install fails on Windows native (Node 22, npm 10.9.3) #78514, [Bug]: [Windows] Chrome MCP screenshot fails with ENOENT - random temp folder name not created #78524, fix(memory): EPERM on Windows persists after 64187 retry — needs copyFile/unlink fallback (was in closed PR 71611) #78640, [Bug]: Remote inbound media staging spawns hardcoded /usr/bin/scp (broken on Windows / non-FHS layouts) #78677, docs(msteams): document replyStyle resolution precedence and thread context preservation #78835, [codex] Add Teams member-info action gate #78839, fix(msteams): make resolveMSTeamsRouteSessionKey idempotent against pre-suffixed bases (#66771) #78850, fix(plugins): avoid managed npm prefix on Windows #78902, fix(msteams): gate startup user allowlist resolution [AI] #79003, [Bug]: msteams DM idle-timeouts on 2026.5.4–2026.5.6, resolved by downgrade to 2026.5.3-1 #79052, refactor: centralize channel ingress access #79092, Windows gateway probe still reports unreachable while gateway health is OK on 2026.5.6 #79099, test(msteams): fix lifecycle test types #79257.
• Updated fix(msteams): surface network errors blocking bot JWT validation and outbound replies (#77674) #78081/[Bug]: MS Teams bot fails silently when network paths are blocked — errors are swallowed and logs don't help #77674 to resolved.
• Updated current blockers: fix(acpx): add windowsHide to MCP proxy spawn on Windows #60678 still at 974fd3bdf7 with failing check/check-lint/check-test-types; fix(scripts): avoid DEP0190 when spawning .cmd files on Windows (Node.js v24) #62910 moved to f9aba20521 and is failing check/check-lint/check-additional; fix(shell-env): hide Windows login shell probe #78266 remains blocked by check/check-test-types.

Low-hanging fruit pass complete (2026-05-08):

Merged/resolved:

• fix(shell-env): hide Windows login shell probe #78266 merged at deb6ffbd3c with merge commit 2bd4529dfd; [Windows] execLoginShellEnvZero missing windowsHide:true — console flash on login shell env detection (2026.5.4) #78159 is closed.
• fix(update): pipe post-core child stdio on Windows to prevent terminal hang (#78445) #78483 merged at 321608e00b with merge commit 2d65908f7f; [Bug]: [Windows] openclaw update hangs after "✓ Updating via package manager" completes #78445 is closed.

Prepared / waiting:

• fix(acpx): add windowsHide to MCP proxy spawn on Windows #60678 prepared at 9cf5c1ab07; focused ACPX test, build, and check passed locally. Fresh CI is blocked by check-additional-runtime-topology-architecture / aggregate check-additional.
• fix(scripts): avoid DEP0190 when spawning .cmd files on Windows (Node.js v24) #62910 prepared at 252f744c23; focused scripts UI test, build, and check passed locally. Fresh CI is blocked by check-additional-runtime-topology-architecture / aggregate check-additional.
• fix(plugins): avoid managed npm prefix on Windows #78902 remains draft, prepared at d23b670126; focused npm-managed-root/install/uninstall tests, build, and focused lint passed locally.

Counts updated:

• Windows platform: 43 resolved / 102 remaining.
• Overall: 77 resolved / 172 remaining.

Tracker updated

• fix: handle Windows-style session paths when running on POSIX #50116 prepared at 7cc30a64b1; focused session-path test passed after final rebase; build/check passed before final rebase; CI running.
• fix: remove truncated preview from inbound system events #67761 prepared at 4db272b29a; focused Teams/Slack tests passed after final rebase; build/check passed before final rebase; CI running.
• feat(memory-lancedb): native Azure OpenAI support #47285 prepared at e7e1ffa1a4; focused memory-lancedb test passed after final rebase; build/check passed before final rebase; CI running.
• fix(windows): add windowsHide to all Windows spawn resolution paths #48320 closed as superseded by current Windows spawn implementation and already-closed bug(acpx): Windows console windows flash on every ACP spawn — missing windowsHide: true #40340.

Counts updated:

• Windows resolved/remaining: 44/101
• Overall resolved/remaining: 78/171

Follow-up tracker correction: added #62742 to the Azure PR list, it was missing from the tracker. Current #62742 state is open, prepared earlier at 208c1082ed, but now conflicting and failing CI (not merge-ready).

Adjusted counts after adding #62742:

• Azure resolved/remaining: 5/11
• Overall resolved/remaining: 78/172

Tracker update:

• fix(msteams): make resolveMSTeamsRouteSessionKey idempotent against pre-suffixed bases (#66771) #78850 / [Bug]: MSTeams malformed mixed thread session key from old-session reselection #66771 is open and prepared at 3268f499083d40c9f9f97f960a4ec4d3cde06cc5. Local verification: focused Teams thread-session test passed (10 tests), pnpm build passed, pnpm check passed. Fresh CI is running.
• fix(msteams): delete FileConsentCard after user accepts, declines, or upload expires #57364 is open and prepared at 5e0b7a948f674cc2f03d024f374825f80d9155ef. The maintainer prep moved the stale FileConsentCard cleanup into the active file-consent-invoke.ts handler. Local verification: focused file-consent test passed (14 tests), pnpm build passed, pnpm check passed. Fresh CI is running.

Counts unchanged for now because both items are prepared but not merged/closed yet.

Tracker update:

• fix(msteams): make resolveMSTeamsRouteSessionKey idempotent against pre-suffixed bases (#66771) #78850 / [Bug]: MSTeams malformed mixed thread session key from old-session reselection #66771 refreshed to prepared head 0feaddbc142b60c461f28cee758b461ceae11e51 after moving the changelog entry to Unreleased ### Fixes. Local verification after rebase: focused Teams thread-session test passed (10 tests), pnpm build passed, pnpm check passed. Fresh CI is running.
• fix(msteams): delete FileConsentCard after user accepts, declines, or upload expires #57364 remains prepared at 5e0b7a948f674cc2f03d024f374825f80d9155ef; rerun/check status is still being monitored.

No counts changed because neither PR has merged/closed yet.

Tracker update:

• fix(msteams): make resolveMSTeamsRouteSessionKey idempotent against pre-suffixed bases (#66771) #78850 / [Bug]: MSTeams malformed mixed thread session key from old-session reselection #66771 is refreshed at prepared head 0feaddbc142b60c461f28cee758b461ceae11e51; local focused test, build, and check passed. Fresh CI is still running.
• fix(msteams): delete FileConsentCard after user accepts, declines, or upload expires #57364 remains prepared at 5e0b7a948f674cc2f03d024f374825f80d9155ef; local focused test, build, and check passed. Current blocker is ClawSweeper's real behavior proof gate: it needs an inspectable real Teams artifact such as a screenshot, copied live output, recording, or redacted runtime log showing the after-fix FileConsentCard cleanup.
• Older prepared PRs were rechecked/rerun where useful, but are still blocked by failing checks and/or conflict state.

No counts changed because none merged or closed in this pass.

Maintainer batch update for the Microsoft tracker: prepared five PRs and updated the tracker body with the current heads/status.

Prepared and waiting on fresh CI/ClawSweeper:

• fix(msteams): extract emoji unicode from Teams CDN img tags instead of treating as image attachments #57366 — MS Teams emoji CDN alt text, prepared head 2bc7fa4c5fcfc913c862f2c541ec01823a418ab1; local Teams attachment tests (77), build, and check passed.
• fix(msteams): forward messageBack card actions (Action.Submit) to agent (#60952) #64503 — MS Teams messageBack card actions, prepared head 55a5ad889a4118b9a788ec1c5a613bfc1b89ab98; local adaptive-card test (4), build, and check passed.
• feat(msteams): support webhook host binding #63347 — MS Teams webhook host binding, prepared head f634f4684df0ac602e2a11c312719a89f1fd26f1; local lifecycle/channel tests (15), config metadata check, build, and check passed.
• fix(msteams): paginate thread replies and keep recent context #69428 — MS Teams thread reply pagination, prepared head c7b23140cf7e1dfce4c1d9115d676a0ff0336b8e; local graph-thread tests (26), build, and check passed.
• fix(exec): fail closed on Windows shell wrappers in allowlist mode #67655 — Windows shell-wrapper allowlist hardening, prepared head 3baf42a36bcdef3a304f90e741fe13df09f03685; local filtered exec-policy/invoke tests (13), build, and check passed.

No resolved-count change yet; these remain open until fresh CI and maintainer review clear them for merge.

Tracker update after maintainer merge:

• Merged fix(scripts): avoid DEP0190 when spawning .cmd files on Windows (Node.js v24) #62910 at prepared head c49f3d56fae0d4d2af9f0b19a60bd49b169317ce.
• Merge commit: 5adbbaa3cbcc20df26d5425318dbb71d2962fa55.
• Linked issue [Node.js v24] DEP0190 DeprecationWarning: spawn with shell:true + args array on gateway startup #62881 was already closed.
• Updated tracker counts: Windows resolved/remaining 1/107; overall resolved/remaining 1/179.

No other tracked Microsoft PRs met the merge criteria in this pass.

Maintainer update for 2026-05-09:

Closed/resolved tracker items:

• Add OpenClaw User-Agent header to all outbound HTTP requests #51570 closed as superseded by feat(msteams): add OpenClaw User-Agent header to Microsoft HTTP calls #60433, which already landed the Teams User-Agent work and closed msteams: add OpenClaw User-Agent header to Microsoft backend HTTP calls #51568.
• fix(windows): bootstrap UTF-8 before running gateway task script #43975 closed as superseded by the Windows Scheduled Task wrapper/fallback work released in v2026.4.22, which already closed [Bug]: [Windows] Gateway fails to start with Chinese username path #43943.

Prepared for follow-up CI/review:

• fix(windows): prevent restart race from duplicate schtasks /Run #52487 refreshed at 9a31bc85e7f8b12a8bc4cbd62b81e69f2c980eaf; local Windows restart test, build, and check passed. GitHub proof/auto-response checks are failing, so not merge-ready.
• fix(microsoft-foundry): filter Anthropic deployments during onboard #72446 refreshed at ae6567bbf9818ed4695dba2079b204da3b55a80b; local Foundry tests, changelog attribution, and format checks passed. Branch is now stale/conflicting after main moved, and proof/auto-response checks are failing, so not merge-ready.
• fix(daemon): query Windows task runtime directly #51486 refreshed at b80ae7a0dabff8aac5ece86965fdff6c51d904be; local schtasks/inspect tests, format, and oxlint passed. Fresh GitHub CI is pending, so not merge-ready.

Counts updated:

• MS Teams: 1 closed / 47 remaining
• Windows: 2 closed / 106 remaining
• Overall: 3 closed / 177 remaining

Tracker update for the current Microsoft pass:

Resolved/closed since the post-purge tracker refresh:

• fix(google): support Vertex ADC from GCE metadata service accounts #79476 is closed.
• fix(gateway): keep newer node session on stale disconnect #79491 is closed.
• refactor: centralize channel ingress access #79092 merged on 2026-05-10 at head 0c55491abacc150848d30bd956b85e7d2787a140 with merge commit a0fb7fb045474fd41ce5e1474ae57763fb2b2b7e.
• [codex] keep long app-server turns alive through progress #78757 is closed.
• Bug: memory index --force fails with EBUSY on Windows #79708 is closed as implemented on current main.

Counts updated:

• MS Teams: 4 closed / 46 remaining
• Windows: 1 closed / 106 remaining
• Overall: 5 closed / 177 remaining

Checked #79694 as a possible next merge candidate. It is small and mergeable with current GitHub checks green, but the durable ClawSweeper review still asks for live Windows behavior proof, so I did not merge it without platform-real evidence.