mirror of
https://github.com/openclaw/openclaw.git
synced 2026-04-07 23:31:07 +00:00
The gateway repair path calls forceResetCrossSigning but does not pass allowSecretStorageRecreateWithoutRecoveryKey. When a device loses its recovery key the repair creates new cross-signing keys but cannot persist them in secret storage. On next restart the gateway fails again with "getSecretStorageKey callback returned falsey". Pass allowSecretStorageRecreateWithoutRecoveryKey: true in the repair bootstrap call only. The initial conservative bootstrap remains unchanged so operators are notified when secret storage becomes inaccessible.