diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json
index fb7efb631..fa8aa730a 100644
--- a/.openclaw-sync/source.json
+++ b/.openclaw-sync/source.json
@@ -1,5 +1,5 @@
 {
   "repository": "openclaw/openclaw",
-  "sha": "c866820fedefb38458d675c7c86fa4c3ed6572c3",
-  "syncedAt": "2026-04-23T03:30:42.125Z"
+  "sha": "dc5ab602dfa374413f2f42ba37d7b7dda6fb5113",
+  "syncedAt": "2026-04-23T03:37:54.932Z"
 }
diff --git a/docs/gateway/cli-backends.md b/docs/gateway/cli-backends.md
index d2cc0bc66..e91595242 100644
--- a/docs/gateway/cli-backends.md
+++ b/docs/gateway/cli-backends.md
@@ -193,7 +193,11 @@ Serialization notes:
 
 - `serialize: true` keeps same-lane runs ordered.
 - Most CLIs serialize on one provider lane.
-- OpenClaw drops stored CLI session reuse when the backend auth state changes, including relogin, token rotation, or a changed auth profile credential.
+- OpenClaw drops stored CLI session reuse when the selected auth identity changes,
+  including a changed auth profile id, static API key, static token, or OAuth
+  account identity when the CLI exposes one. OAuth access and refresh token
+  rotation does not cut the stored CLI session. If a CLI does not expose a
+  stable OAuth account id, OpenClaw lets that CLI enforce resume permissions.
 
 ## Images (pass-through)