Context

PR #90571 switches the Gateway password prompt in openclaw configure --section gateway from clack text() to password(), so the typed password renders as masked bullets instead of cleartext echo. The issue is source-verifiable on current main: src/commands/configure.gateway.ts routes authMode === "password" through a text() call at the Gateway password prompt. The fix is in cross-platform @clack/prompts code with no process.platform branching — it ships to macOS automatically. The author's repro environment is Windows 10 only.

Verification request

Could a macOS maintainer confirm that after PR #90571 merges:

1. pnpm openclaw configure --section gateway
2. Gateway port → press Enter (accept default)
3. Gateway bind mode → Loopback
4. Gateway access protection → Password ← reaches the leak surface
5. Tailscale exposure → Off
6. At Gateway password — type any test string (e.g., DUMMY_PASSWORD); each character should render as • instead of the typed letter
7. Confirm the persisted gateway.auth.password value in ~/.openclaw/openclaw.json is the typed string (not bullets — masking is render-only)

No real gateway is needed — DUMMY_PASSWORD is sufficient.

Related

• PR fix(configure): mask gateway password input in CLI wizard prompt #90571 (the fix — Repro B)
• PR fix(configure): mask gateway token input in CLI wizard prompt #91059 (Repro A — gateway token mask, in-flight)
• PR fix(models): mask paste-token input in CLI auth prompt #90893 (Repro C — paste-token mask, in-flight)
• PR fix(onboarding): mask token/credential inputs in CLI wizard prompts #76693 (onboarding password mask, merged)
• Linux sibling: [verify] gateway password mask renders bullets on Linux (PR #90571) #90635