Bug type

Behavior bug (incorrect output/state without crash)

Beta release blocker

No

Summary

I have this message on doctor. It looks like a false positive

◇ Gateway auth ─────────────────────────────────────────────────────────╮
│ │
│ Gateway token is managed via SecretRef and is currently unavailable. │
│ Doctor will not overwrite gateway.auth.token with a plaintext value. │
│ Resolve/rotate the external secret source, then rerun doctor. │
│ │

openclaw secrets audit shows unresolved=0
openclaw secrets reload succeeds
the gateway is actually using the SecretRef fine

Useful bits to include:

openclaw --version : OpenClaw 2026.4.11 (769908e)
openclaw secrets audit : nothing about gateway.auth.token
the gateway.auth.token SecretRef shape -->
{
"channels": {
"discord": {
"token": "xxx"
},
"telegram": {
"botToken": "xxx"
}
},
"gateway": {
"auth": {
"token": "xxxxx"
}
}
}

Steps to reproduce

1. set gateway auth token in credentials
2. restart gateway
3. run doctor

Expected behavior

no warning in doctor

Actual behavior

warning :
◇ Gateway auth ─────────────────────────────────────────────────────────╮
│ │
│ Gateway token is managed via SecretRef and is currently unavailable. │
│ Doctor will not overwrite gateway.auth.token with a plaintext value. │
│ Resolve/rotate the external secret source, then rerun doctor. │
│ │

OpenClaw version

2026.4.11

Operating system

macOS

Install method

npm global

Model

GPT 4.5

Provider / routing chain

openclaw -> Mac mini -> OpenAI API

Additional provider/model setup details

No response

Logs, screenshots, and evidence

Impact and severity

No response

Additional information

No response