fix(ci): classify live installer docker lanes

scripts/check-docker-e2e-boundaries.mjs

@@ -15,6 +15,8 @@ const packageScripts = new Set(Object.keys(packageJson.scripts ?? {}));
 // These lanes prove package-installed surfaces against live auth, so they
 // intentionally need both live credentials and a package-backed image.
 const livePackageBackedLanes = new Set([
+  "install-e2e-anthropic",
+  "install-e2e-openai",
   "live-codex-npm-plugin",
   "live-mcp-code-mode-gateway",
   "live-plugin-tool",

scripts/lib/docker-e2e-plan.mjs

@@ -459,7 +459,7 @@ export function resolveDockerE2ePlan(options) {
   const configuredLanes = selectedLanes
     ? selectedLanes
     : releaseLanes
-      ? releaseLanes
+      ? applyLiveMode(releaseLanes, options.liveMode)
       : options.liveMode === "only"
         ? applyLiveMode([...retriedMainLanes, ...retriedTailLanes], options.liveMode)
         : applyLiveMode(retriedMainLanes, options.liveMode);

scripts/lib/docker-e2e-scenarios.mjs

@@ -694,11 +694,14 @@ const releasePathBundledChannelLanes = [
 ];
 
 const releasePathPackageInstallOpenAiLanes = [
-  npmLane(
+  liveLane(
     "install-e2e-openai",
     "OPENCLAW_INSTALL_TAG=beta OPENCLAW_E2E_MODELS=openai OPENCLAW_INSTALL_E2E_IMAGE=openclaw-install-e2e-openai:local OPENCLAW_INSTALL_E2E_AGENT_TOOL_SMOKE=0 OPENCLAW_INSTALL_E2E_OPENAI_MODEL=openai/gpt-5.4-mini OPENCLAW_INSTALL_E2E_AGENT_TURN_TIMEOUT_SECONDS=120 OPENCLAW_INSTALL_E2E_OPENAI_PROVIDER_TIMEOUT_SECONDS=120 pnpm test:install:e2e",
     {
-      resources: ["service"],
+      e2eImageKind: "bare",
+      needsLiveImage: false,
+      provider: "openai",
+      resources: ["npm", "service"],
       timeoutMs: 15 * 60 * 1000,
       weight: 3,
     },
@@ -714,11 +717,14 @@ const releasePathPackageInstallOpenAiLanes = [
 ];
 
 const releasePathPackageInstallAnthropicLanes = [
-  npmLane(
+  liveLane(
     "install-e2e-anthropic",
     "OPENCLAW_INSTALL_TAG=beta OPENCLAW_E2E_MODELS=anthropic OPENCLAW_INSTALL_E2E_IMAGE=openclaw-install-e2e-anthropic:local pnpm test:install:e2e",
     {
-      resources: ["service"],
+      e2eImageKind: "bare",
+      needsLiveImage: false,
+      provider: "claude",
+      resources: ["npm", "service"],
       weight: 3,
     },
   ),

scripts/test-install-sh-e2e-docker.sh

@@ -7,12 +7,40 @@ source "$ROOT_DIR/scripts/lib/docker-e2e-container.sh"
 IMAGE_NAME="${OPENCLAW_INSTALL_E2E_IMAGE:-openclaw-install-e2e:local}"
 INSTALL_URL="${OPENCLAW_INSTALL_URL:-https://openclaw.bot/install.sh}"
 DOCKER_COMMAND_TIMEOUT="${DOCKER_COMMAND_TIMEOUT:-${OPENCLAW_INSTALL_E2E_DOCKER_TIMEOUT:-2700s}}"
+PROFILE_FILE="${OPENCLAW_INSTALL_E2E_PROFILE_FILE:-${OPENCLAW_PROFILE_FILE:-${OPENCLAW_TESTBOX_PROFILE_FILE:-$HOME/.openclaw-testbox-live.profile}}}"
 
 OPENAI_API_KEY="${OPENAI_API_KEY:-}"
 ANTHROPIC_API_KEY="${ANTHROPIC_API_KEY:-}"
 ANTHROPIC_API_TOKEN="${ANTHROPIC_API_TOKEN:-}"
 OPENCLAW_E2E_MODELS="${OPENCLAW_E2E_MODELS:-}"
 
+if [ ! -f "$PROFILE_FILE" ] && [ -f "$HOME/.profile" ]; then
+  PROFILE_FILE="$HOME/.profile"
+fi
+
+PROFILE_STATUS="none"
+
+read_profile_env_value() {
+  local key="$1"
+  (
+    set +u
+    # shellcheck disable=SC1090
+    source "$PROFILE_FILE" >/dev/null
+    printf '%s' "${!key:-}"
+  )
+}
+
+for key in OPENAI_API_KEY ANTHROPIC_API_KEY ANTHROPIC_API_TOKEN; do
+  if [ -f "$PROFILE_FILE" ] && [ -r "$PROFILE_FILE" ] && [ -z "${!key:-}" ]; then
+    printf -v "$key" '%s' "$(read_profile_env_value "$key")"
+    PROFILE_STATUS="$PROFILE_FILE"
+  fi
+  if [[ "${!key:-}" == "undefined" || "${!key:-}" == "null" ]]; then
+    printf -v "$key" '%s' ""
+  fi
+  export "$key"
+done
+
 echo "==> Build image: $IMAGE_NAME"
 docker_build_run install-e2e-build \
   -t "$IMAGE_NAME" \
@@ -20,6 +48,7 @@ docker_build_run install-e2e-build \
   "$ROOT_DIR/scripts/docker"
 
 echo "==> Run E2E installer test"
+echo "Profile file: $PROFILE_STATUS"
 docker_e2e_docker_run_cmd run --rm \
   -e OPENCLAW_INSTALL_URL="$INSTALL_URL" \
   -e OPENCLAW_INSTALL_TAG="${OPENCLAW_INSTALL_TAG:-latest}" \