docs: explain browser ssh tunnel forward

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

docs/MISSION_CONTROL.md

@@ -404,6 +404,7 @@ Deliverables:
 - Gateway runtime owner summary: **implemented in Command Center topology/support context so local gateway or SSH-forward listener process name, PID, and port are visible without managing the process**
 - Browser proxy SSH forward warning: **implemented targeted Command Center guidance when an SSH tunnel gateway is up but the companion `gateway port + 2` browser-control forward is missing**
 - Browser proxy invoke error guidance: **implemented `browser.proxy` unreachable/timeout errors that name `127.0.0.1:{gateway+2}` and show the exact SSH local-forward shape**
+- Settings SSH browser-forward guidance: **implemented Settings copy explaining that the managed SSH tunnel forwards `local-port+2` to `remote-port+2` for `browser.proxy` when the browser proxy bridge is enabled**
 
 Risk: medium-high for kill/restart actions; start as read-only/copy actions.
 

src/OpenClaw.Tray.WinUI/Windows/SettingsWindow.xaml

@@ -78,6 +78,11 @@
                                    Style="{StaticResource CaptionTextBlockStyle}"
                                    Foreground="{ThemeResource TextFillColorSecondaryBrush}"
                                    TextWrapping="Wrap"/>
+                        <TextBlock AutomationProperties.AutomationId="SettingsSshBrowserForwardHint"
+                                   Text="Browser proxy bridge: when enabled, the managed tunnel also forwards local-port+2 to remote-port+2 so browser.proxy can reach the browser control host."
+                                   Style="{StaticResource CaptionTextBlockStyle}"
+                                   Foreground="{ThemeResource TextFillColorSecondaryBrush}"
+                                   TextWrapping="Wrap"/>
 
                         <Grid ColumnSpacing="8">
                             <Grid.ColumnDefinitions>

tests/OpenClaw.Tray.Tests/TrayMenuWindowMarkupTests.cs

@@ -56,6 +56,8 @@ public class TrayMenuWindowMarkupTests
         Assert.Contains(@"AutomationProperties.AutomationId=""SettingsUseWslGatewayButton""", xaml);
         Assert.Contains(@"AutomationProperties.AutomationId=""SettingsUseSshTunnelButton""", xaml);
         Assert.Contains(@"AutomationProperties.AutomationId=""SettingsUseRemoteGatewayButton""", xaml);
+        Assert.Contains(@"AutomationProperties.AutomationId=""SettingsSshBrowserForwardHint""", xaml);
+        Assert.Contains("local-port+2 to remote-port+2", xaml);
         Assert.Contains(@"TextChanged=""OnTopologyInputChanged""", xaml);
     }