diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json
index e26c07c97..b57bedce5 100644
--- a/.openclaw-sync/source.json
+++ b/.openclaw-sync/source.json
@@ -1,5 +1,5 @@
 {
   "repository": "openclaw/openclaw",
-  "sha": "6cfe810402d02cab40100be896bbb91bb367aeb1",
-  "syncedAt": "2026-04-25T03:31:26.865Z"
+  "sha": "96515891a25e8a6640a5e63de714778c722743c9",
+  "syncedAt": "2026-04-25T03:33:12.568Z"
 }
diff --git a/docs/cli/agent.md b/docs/cli/agent.md
index 98a65f7b0..ef1c165eb 100644
--- a/docs/cli/agent.md
+++ b/docs/cli/agent.md
@@ -53,6 +53,7 @@ openclaw agent --agent ops --message "Run locally" --local
 - Gateway mode falls back to the embedded agent when the Gateway request fails. Use `--local` to force embedded execution up front.
 - `--local` still preloads the plugin registry first, so plugin-provided providers, tools, and channels stay available during embedded runs.
 - `--channel`, `--reply-channel`, and `--reply-account` affect reply delivery, not session routing.
+- `--json` keeps stdout reserved for the JSON response. Gateway, plugin, and embedded-fallback diagnostics are routed to stderr so scripts can parse stdout directly.
 - When this command triggers `models.json` regeneration, SecretRef-managed provider credentials are persisted as non-secret markers (for example env var names, `secretref-env:ENV_VAR_NAME`, or `secretref-managed`), not resolved secret plaintext.
 - Marker writes are source-authoritative: OpenClaw persists markers from the active source config snapshot, not from resolved runtime secret values.