feat(memory): isolate selected runtime behind broker

scripts/e2e/fleet-separate-cell-docker.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"
+source "$ROOT_DIR/scripts/lib/docker-e2e-image.sh"
+
+IMAGE_NAME="$(docker_e2e_resolve_image "openclaw-fleet-separate-cell-e2e" OPENCLAW_FLEET_E2E_IMAGE)"
+SKIP_BUILD="${OPENCLAW_FLEET_E2E_SKIP_BUILD:-0}"
+
+# The scheduler supplies the functional package image. A direct invocation can still build the
+# same package-installed image, but this lane never creates a second Fleet-specific image.
+docker_e2e_build_or_reuse "$IMAGE_NAME" fleet-separate-cell "$ROOT_DIR/scripts/e2e/Dockerfile" "$ROOT_DIR" "" "$SKIP_BUILD"
+
+cd "$ROOT_DIR"
+OPENCLAW_PROCESS_ISOLATION_E2E=1 \
+  OPENCLAW_FLEET_E2E_IMAGE="$IMAGE_NAME" \
+  node scripts/run-vitest.mjs src/fleet/service.container.e2e.test.ts

scripts/lib/docker-e2e-scenarios.mts

@@ -530,6 +530,11 @@ export const mainLanes: DockerE2eLane[] = [
     },
   ),
   serviceLane("gateway-network", "OPENCLAW_SKIP_DOCKER_BUILD=1 pnpm test:docker:gateway-network"),
+  serviceLane(
+    "fleet-separate-cell",
+    "OPENCLAW_SKIP_DOCKER_BUILD=1 pnpm test:docker:fleet-separate-cell",
+    { stateScenario: "empty", timeoutMs: 15 * 60 * 1000, weight: 4 },
+  ),
   serviceLane("browser-cdp-snapshot", "pnpm test:docker:browser-cdp-snapshot", {
     stateScenario: "empty",
     timeoutMs: 20 * 60 * 1000,