OpenClaw Docker E2E Authoring

Use this when adding or changing Docker E2E lanes, release-path Docker tests,
or live-provider Docker proof.

Lane Choice

• Deterministic Docker: fake the dependency/server and assert the exact runtime
  contract crossing the boundary.
• Live Docker: use real provider credentials/model only when user-visible
  behavior needs the real service.
• Prefer both when they prove different risks: deterministic for byte/payload
  routing, live for actual provider behavior.

Authoring Rules

• Test-only helpers live in test/helpers or scripts/e2e/lib/<lane>/, not
  src/**, unless production imports them.
• Package-installed app runs from /app; mount only explicit harness/helper
  paths read-only.
• Fake servers should log boundary requests as JSONL and clients should assert
  the real dependency payload, not just process success.
• Add the package script and scripts/lib/docker-e2e-scenarios.mjs lane in the
  same change.
• If a lane installs a plugin from npm, default the spec via env so published
  and local override paths are both testable.

Media And Vision

• Expected answer must exist only in pixels or provider output being tested.
• Use neutral filenames, neutral prompts, and no metadata leaks.
• Random bitmap/OCR tokens reuse the repo OCR-safe alphabet 24567ACEF unless
  the test owns a stronger glyph set.
• Make the expected answer unique per run when proving real image
  understanding.

chat.send E2E

• Require chat.send to return status: "started" and a string runId.
• Wait for completion with agent.wait.
• Assert final user-visible text via chat.history when event ordering is not
  the behavior under test.
• Keep originating channel/account metadata only when the bug path needs queued
  inbound/channel context.

Verification

Run the smallest proof that covers the touched lane:

pnpm exec oxfmt --write <changed files>
node --check <new .mjs files>
bash -n <new .sh files>
node scripts/run-vitest.mjs test/scripts/docker-e2e-plan.test.ts
OPENCLAW_SKIP_DOCKER_BUILD=1 pnpm test:docker:<lane>

For real-provider lanes, run the matching live Docker script after deterministic
Docker is green. Finish with $autoreview before commit/PR.