fix(ci): repair protocol drift and audit failures (openclaw#63917)

* CI: fix protocol drift and audit failures

* CI: narrow axios release-age exception

* CI: drop ineffective feishu override

* test: fix workspace-root guard mock typing

Author: altaywtf

apps/macos/Sources/OpenClawProtocol/GatewayModels.swift

@@ -2837,19 +2837,22 @@ public struct ModelChoice: Codable, Sendable {
     public let id: String
     public let name: String
     public let provider: String
+    public let alias: String?
     public let contextwindow: Int?
     public let reasoning: Bool?
 
     public init(
         id: String,
         name: String,
         provider: String,
+        alias: String?,
         contextwindow: Int?,
         reasoning: Bool?)
     {
         self.id = id
         self.name = name
         self.provider = provider
+        self.alias = alias
         self.contextwindow = contextwindow
         self.reasoning = reasoning
     }
@@ -2858,6 +2861,7 @@ public struct ModelChoice: Codable, Sendable {
         case id
         case name
         case provider
+        case alias
         case contextwindow = "contextWindow"
         case reasoning
     }

apps/shared/OpenClawKit/Sources/OpenClawProtocol/GatewayModels.swift

@@ -2837,19 +2837,22 @@ public struct ModelChoice: Codable, Sendable {
     public let id: String
     public let name: String
     public let provider: String
+    public let alias: String?
     public let contextwindow: Int?
     public let reasoning: Bool?
 
     public init(
         id: String,
         name: String,
         provider: String,
+        alias: String?,
         contextwindow: Int?,
         reasoning: Bool?)
     {
         self.id = id
         self.name = name
         self.provider = provider
+        self.alias = alias
         self.contextwindow = contextwindow
         self.reasoning = reasoning
     }
@@ -2858,6 +2861,7 @@ public struct ModelChoice: Codable, Sendable {
         case id
         case name
         case provider
+        case alias
         case contextwindow = "contextWindow"
         case reasoning
     }

package.json

@@ -1431,7 +1431,7 @@
       "@anthropic-ai/sdk": "0.81.0",
       "hono": "4.12.12",
       "@hono/node-server": "1.19.13",
-      "axios": "1.13.6",
+      "axios": "1.15.0",
       "defu": "6.1.5",
       "fast-xml-parser": "5.5.7",
       "request": "npm:@cypress/request@3.0.10",

pnpm-lock.yaml

@@ -19,6 +19,7 @@ minimumReleaseAgeExclude:
   - "@typescript/native-preview*"
   - "@oxlint/*"
   - "@oxfmt/*"
+  - "axios@1.15.0"
   - "sqlite-vec"
   - "sqlite-vec-*"
 

pnpm-workspace.yaml

@@ -2,8 +2,13 @@ import path from "node:path";
 import { beforeAll, beforeEach, describe, expect, it, vi } from "vitest";
 import type { AnyAgentTool } from "./pi-tools.types.js";
 
+type AssertSandboxPath = typeof import("./sandbox-paths.js").assertSandboxPath;
+
 const mocks = vi.hoisted(() => ({
-  assertSandboxPath: vi.fn(async () => ({ resolved: "/tmp/root", relative: "" })),
+  assertSandboxPath: vi.fn<AssertSandboxPath>(async () => ({
+    resolved: "/tmp/root",
+    relative: "",
+  })),
 }));
 
 vi.mock("./sandbox-paths.js", () => ({
@@ -31,11 +36,19 @@ let wrapToolWorkspaceRootGuardWithOptions: typeof import("./pi-tools.read.js").w
 
 describe("wrapToolWorkspaceRootGuardWithOptions", () => {
   const root = "/tmp/root";
+  const assertSandboxPathImpl: AssertSandboxPath = async ({ filePath }) => ({
+    resolved:
+      filePath.startsWith("file://") || path.isAbsolute(filePath)
+        ? filePath
+        : path.resolve(root, filePath),
+    relative: "",
+  });
 
   beforeAll(loadModule);
 
   beforeEach(() => {
-    mocks.assertSandboxPath.mockClear();
+    mocks.assertSandboxPath.mockReset();
+    mocks.assertSandboxPath.mockImplementation(assertSandboxPathImpl);
   });
 
   it("maps container workspace paths to host workspace root", async () => {