Context

PR #91059 switches the Gateway token (blank to generate) prompt in openclaw configure --section gateway from clack text() to password(), so the typed or auto-generated token renders as masked bullets instead of cleartext echo. The issue is source-verifiable on current main: src/commands/configure.gateway.ts routes authMode === "token" through a text() call at the Gateway token prompt. The fix is in cross-platform @clack/prompts code with no process.platform branching — it ships to Linux automatically. The author's repro environment is Windows 10 only.

Verification request

Could a Linux maintainer confirm that after PR #91059 merges:

1. pnpm openclaw configure --section gateway
2. Gateway port → press Enter (accept default)
3. Gateway bind mode → Loopback
4. Gateway access protection → Token ← reaches the leak surface
5. Tailscale exposure → Off
6. Gateway token source → Plaintext ← required; only plaintext leaks (ref uses env var, no echo)
7. At Gateway token (blank to generate) — type any string or press Enter to auto-generate; each character (or generated token) should render as • instead of being visible
8. Confirm the persisted gateway.auth.token value in ~/.openclaw/openclaw.json is the actual token string (not bullets — masking is render-only)

No real gateway is needed — any typed string or pressing Enter is sufficient.

Related

• PR fix(configure): mask gateway token input in CLI wizard prompt #91059 (the fix — Repro A)
• PR fix(configure): mask gateway password input in CLI wizard prompt #90571 (Repro B — gateway password mask, in-flight)
• PR fix(models): mask paste-token input in CLI auth prompt #90893 (Repro C — paste-token mask, in-flight)
• PR fix(onboarding): mask token/credential inputs in CLI wizard prompts #76693 (onboarding password mask, merged)
• macOS sibling: [verify] gateway token mask renders bullets on macOS (PR #91059) #91064