diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json
index a3b5551d4..406263327 100644
--- a/.openclaw-sync/source.json
+++ b/.openclaw-sync/source.json
@@ -1,5 +1,5 @@
 {
   "repository": "openclaw/openclaw",
-  "sha": "b164bb37175cb9a676b3ec22b8ec5614a8f0d37c",
-  "syncedAt": "2026-04-24T00:51:39.778Z"
+  "sha": "c42ae0afd8748039b5246a9c22d52fb6deeca15e",
+  "syncedAt": "2026-04-24T01:02:51.835Z"
 }
diff --git a/docs/cli/models.md b/docs/cli/models.md
index 1895bc9a2..b99063273 100644
--- a/docs/cli/models.md
+++ b/docs/cli/models.md
@@ -44,6 +44,9 @@ Probe rows can come from auth profiles, env credentials, or `models.json`.
 Notes:
 
 - `models set <model-or-alias>` accepts `provider/model` or an alias.
+- `models list` is read-only: it reads config, auth profiles, existing catalog
+  state, and provider-owned catalog rows, but it does not rewrite
+  `models.json`.
 - `models list --all` includes bundled provider-owned static catalog rows even
   when you have not authenticated with that provider yet. Those rows still show
   as unavailable until matching auth is configured.