diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json
index 2da6c3bcd..b80a94aa9 100644
--- a/.openclaw-sync/source.json
+++ b/.openclaw-sync/source.json
@@ -1,5 +1,5 @@
 {
   "repository": "openclaw/openclaw",
-  "sha": "7f19676439a8dabc42ae8e50eb26136eec7c01de",
-  "syncedAt": "2026-04-08T14:54:36.562Z"
+  "sha": "b77db8c0b610f975c15a418433c57fb9116b5473",
+  "syncedAt": "2026-04-08T16:03:45.732Z"
 }
diff --git a/docs/gateway/doctor.md b/docs/gateway/doctor.md
index 17091d528..83ddb3d16 100644
--- a/docs/gateway/doctor.md
+++ b/docs/gateway/doctor.md
@@ -323,6 +323,11 @@ Anthropic setup-token path.
 Refresh prompts only appear when running interactively (TTY); `--non-interactive`
 skips refresh attempts.
 
+When an OAuth refresh fails permanently (for example `refresh_token_reused`,
+`invalid_grant`, or a provider telling you to sign in again), doctor reports
+that re-auth is required and prints the exact `openclaw models auth login --provider ...`
+command to run.
+
 Doctor also reports auth profiles that are temporarily unusable due to:
 
 - short cooldowns (rate limits/timeouts/auth failures)