Merge branch 'dev' into feat/dataset-explorer

e2e/runner/Dockerfile

@@ -0,0 +1,17 @@
+FROM mcr.microsoft.com/playwright:v1.49.1-noble
+
+WORKDIR /workspace
+COPY entrypoint.sh /usr/local/bin/entrypoint.sh
+RUN chmod +x /usr/local/bin/entrypoint.sh
+
+# Bun is required by the project's package.json `packageManager` pin.
+# `unzip` is the only runtime dep of `bun.sh/install` not present in the
+# Playwright base image (noble); install it first to keep the install in
+# one stable RUN layer.
+RUN apt-get update \
+    && apt-get install -y --no-install-recommends unzip \
+    && rm -rf /var/lib/apt/lists/* \
+    && curl -fsSL https://bun.sh/install | bash \
+    && ln -s /root/.bun/bin/bun /usr/local/bin/bun
+
+ENTRYPOINT ["/usr/local/bin/entrypoint.sh"]

e2e/runner/entrypoint.sh

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+# Playwright runner entrypoint. Mounted at /workspace = repo root and writes
+# every artifact under /output (mounted to ./test-output/ on the host).
+set -euo pipefail
+
+cd /workspace
+
+mkdir -p /output/e2e /output
+
+# Install dependencies (frozen lockfile when the lockfile is present).
+if [ -f bun.lock ] || [ -f bun.lockb ]; then
+  bun install --frozen-lockfile
+else
+  bun install
+fi
+
+# The bun script forwards to playwright with the project's e2e config; the
+# config writes the JUnit XML and HTML report to /output via the relative
+# paths it carries.
+bun run test:e2e "$@"