fix(macos): validate remote ports

apps/macos/Tests/ClawdbotIPCTests/ClawdbotConfigFileTests.swift

@@ -16,6 +16,52 @@ struct ClawdbotConfigFileTests {
         }
     }
 
+    @MainActor
+    @Test
+    func remoteGatewayPortParsesAndMatchesHost() {
+        let override = FileManager.default.temporaryDirectory
+            .appendingPathComponent("clawdbot-config-\(UUID().uuidString)")
+            .appendingPathComponent("clawdbot.json")
+            .path
+
+        self.withEnv("CLAWDBOT_CONFIG_PATH", value: override) {
+            ClawdbotConfigFile.saveDict([
+                "gateway": [
+                    "remote": [
+                        "url": "ws://bridge.ts.net:19999",
+                    ],
+                ],
+            ])
+            #expect(ClawdbotConfigFile.remoteGatewayPort() == 19999)
+            #expect(ClawdbotConfigFile.remoteGatewayPort(matchingHost: "bridge.ts.net") == 19999)
+            #expect(ClawdbotConfigFile.remoteGatewayPort(matchingHost: "bridge") == 19999)
+            #expect(ClawdbotConfigFile.remoteGatewayPort(matchingHost: "other.ts.net") == nil)
+        }
+    }
+
+    @MainActor
+    @Test
+    func setRemoteGatewayUrlPreservesScheme() {
+        let override = FileManager.default.temporaryDirectory
+            .appendingPathComponent("clawdbot-config-\(UUID().uuidString)")
+            .appendingPathComponent("clawdbot.json")
+            .path
+
+        self.withEnv("CLAWDBOT_CONFIG_PATH", value: override) {
+            ClawdbotConfigFile.saveDict([
+                "gateway": [
+                    "remote": [
+                        "url": "wss://old-host:111",
+                    ],
+                ],
+            ])
+            ClawdbotConfigFile.setRemoteGatewayUrl(host: "new-host", port: 2222)
+            let root = ClawdbotConfigFile.loadDict()
+            let url = ((root["gateway"] as? [String: Any])?["remote"] as? [String: Any])?["url"] as? String
+            #expect(url == "wss://new-host:2222")
+        }
+    }
+
     @Test
     func stateDirOverrideSetsConfigPath() {
         let dir = FileManager.default.temporaryDirectory