test: stabilize release validation test harnesses

scripts/e2e/mcp-channels-docker-client.ts

@@ -341,13 +341,34 @@ async function main() {
       message: "yes abcde",
       idempotencyKey: randomUUID(),
     });
-    const permission = await waitFor(
-      "Claude permission notification",
-      () =>
-        mcpHandle.rawMessages
-          .map((entry) => ClaudePermissionNotificationSchema.safeParse(entry))
-          .find((entry) => entry.success && entry.data.params.request_id === "abcde")?.data.params,
-    );
+    let permission: { request_id: string; behavior: "allow" | "deny" };
+    try {
+      permission = await waitFor(
+        "Claude permission notification",
+        () =>
+          mcpHandle.rawMessages
+            .map((entry) => ClaudePermissionNotificationSchema.safeParse(entry))
+            .find((entry) => entry.success && entry.data.params.request_id === "abcde")?.data
+            .params,
+        60_000,
+      );
+    } catch (error) {
+      throw new Error(
+        `timeout waiting for Claude permission notification: ${JSON.stringify(
+          {
+            rawMessages: mcpHandle.rawMessages.slice(-10),
+            recentGatewayEvents: gateway.events.slice(-10).map((entry) => ({
+              event: entry.event,
+              sessionKey: entry.payload.sessionKey,
+              text: extractTextFromGatewayPayload(entry.payload),
+            })),
+          },
+          null,
+          2,
+        )}`,
+        { cause: error },
+      );
+    }
     assert(permission.behavior === "allow", "expected allow permission reply");
 
     process.stdout.write(

scripts/lib/live-docker-auth.sh

@@ -93,7 +93,7 @@ openclaw_live_should_include_auth_file_for_provider() {
   local provider
   provider="$(openclaw_live_trim "${1:-}")"
   case "$provider" in
-    codex-cli | openai-codex)
+    codex-cli | openai | openai-codex)
       printf '%s\n' ".codex/auth.json"
       printf '%s\n' ".codex/config.toml"
       ;;

scripts/test-live-gateway-models-docker.sh

@@ -175,6 +175,18 @@ echo "==> External auth files: ${AUTH_FILES_CSV:-none}"
 DOCKER_RUN_ARGS=(docker run --rm -t \
   -u "$DOCKER_USER" \
   --entrypoint bash \
+  -e OPENAI_API_KEY \
+  -e OPENAI_BASE_URL \
+  -e ANTHROPIC_API_KEY \
+  -e GEMINI_API_KEY \
+  -e GOOGLE_API_KEY \
+  -e MINIMAX_API_KEY \
+  -e OPENROUTER_API_KEY \
+  -e FIREWORKS_API_KEY \
+  -e DEEPSEEK_API_KEY \
+  -e XAI_API_KEY \
+  -e ZAI_API_KEY \
+  -e Z_AI_API_KEY \
   -e COREPACK_ENABLE_DOWNLOAD_PROMPT=0 \
   -e HOME=/home/node \
   -e NODE_OPTIONS="$CONTAINER_NODE_OPTIONS" \
@@ -191,6 +203,7 @@ DOCKER_RUN_ARGS=(docker run --rm -t \
   -e OPENCLAW_LIVE_REQUIRE_PROFILE_KEYS="${OPENCLAW_LIVE_REQUIRE_PROFILE_KEYS:-}" \
   -e OPENCLAW_LIVE_GATEWAY_MODELS="${OPENCLAW_LIVE_GATEWAY_MODELS:-modern}" \
   -e OPENCLAW_LIVE_GATEWAY_PROVIDERS="${OPENCLAW_LIVE_GATEWAY_PROVIDERS:-}" \
+  -e OPENCLAW_LIVE_GATEWAY_THINKING="${OPENCLAW_LIVE_GATEWAY_THINKING:-}" \
   -e OPENCLAW_LIVE_GATEWAY_SMOKE="${OPENCLAW_LIVE_GATEWAY_SMOKE:-1}" \
   -e OPENCLAW_LIVE_GATEWAY_MAX_MODELS="${OPENCLAW_LIVE_GATEWAY_MAX_MODELS:-8}" \
   -e OPENCLAW_LIVE_GATEWAY_HEARTBEAT_MS="${OPENCLAW_LIVE_GATEWAY_HEARTBEAT_MS:-}" \