diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json
index aafd17433..b54492ecd 100644
--- a/.openclaw-sync/source.json
+++ b/.openclaw-sync/source.json
@@ -1,5 +1,5 @@
 {
   "repository": "openclaw/openclaw",
-  "sha": "461d0050d997f5c1c241c898eada87630aa763b6",
-  "syncedAt": "2026-04-16T15:42:45.551Z"
+  "sha": "1183832d4f397b60ae65e1d5d9d4f396847571f5",
+  "syncedAt": "2026-04-16T16:32:47.347Z"
 }
diff --git a/docs/gateway/cli-backends.md b/docs/gateway/cli-backends.md
index 1b1897943..b05874676 100644
--- a/docs/gateway/cli-backends.md
+++ b/docs/gateway/cli-backends.md
@@ -221,7 +221,7 @@ The bundled OpenAI plugin also registers a default for `codex-cli`:
 
 - `command: "codex"`
 - `args: ["exec","--json","--color","never","--sandbox","workspace-write","--skip-git-repo-check"]`
-- `resumeArgs: ["exec","resume","{sessionId}","--skip-git-repo-check"]`
+- `resumeArgs: ["exec","resume","{sessionId}","-c","sandbox_mode=\"workspace-write\"","--skip-git-repo-check"]`
 - `output: "jsonl"`
 - `resumeOutput: "text"`
 - `modelArg: "--model"`