after moving all to cipher

worker-toolkit-stocks-in-the-future/explore/.devcontainer/Dockerfile

@@ -54,6 +54,54 @@ RUN set -eux; \
 RUN gem install bundler -v 2.6.7
 
 USER root
+
+# --- Playwright + Chromium, for driving the app in a real browser -------------
+# Self-contained under /opt — the member's own runtime is untouched.
+ENV PLAYWRIGHT_BROWSERS_PATH=/opt/ms-playwright
+RUN apt-get update -qq \
+    && apt-get install -y -qq --no-install-recommends \
+       xz-utils \
+       libxcomposite1 \
+       libxdamage1 \
+       libxfixes3 \
+       libxrandr2 \
+       libasound2 \
+       libatk1.0-0 \
+       libatk-bridge2.0-0 \
+       libatspi2.0-0 \
+       libcups2 \
+       libdbus-1-3 \
+       libgbm1 \
+       libnspr4 \
+       libnss3 \
+       libxkbcommon0 \
+       libpango-1.0-0 \
+       libcairo2 \
+       libxshmfence1 \
+       libx11-xcb1 \
+       libxcb-dri3-0 \
+       libdrm2 \
+    && rm -rf /var/lib/apt/lists/*
+RUN set -eux; \
+    arch="$(dpkg --print-architecture)"; \
+    case "$arch" in amd64) nodearch=x64;; arm64) nodearch=arm64;; *) echo "unsupported arch: $arch" >&2; exit 1;; esac; \
+    curl -fsSL "https://nodejs.org/dist/v20.19.5/node-v20.19.5-linux-${nodearch}.tar.xz" -o /tmp/pw-node.tar.xz; \
+    mkdir -p /opt/pw-node; \
+    tar -xJf /tmp/pw-node.tar.xz -C /opt/pw-node --strip-components=1; \
+    rm /tmp/pw-node.tar.xz; \
+    export npm_config_prefix=/opt/pw-node PATH="/opt/pw-node/bin:$PATH"; \
+    /opt/pw-node/bin/npm install -g playwright@1.56.0; \
+    test -d /opt/pw-node/lib/node_modules/playwright; \
+    /opt/pw-node/bin/node /opt/pw-node/lib/node_modules/playwright/cli.js install chromium
+
+# `pw <script.js>` runs Node with `require("playwright")` resolvable (CommonJS).
+RUN printf '#!/bin/sh\nNODE_PATH=/opt/pw-node/lib/node_modules exec /opt/pw-node/bin/node "$@"\n' > /usr/local/bin/pw \
+    && chmod +x /usr/local/bin/pw
+
+# Fail the build if Chromium cannot start.
+RUN printf 'const{chromium}=require("playwright");(async()=>{const b=await chromium.launch();const p=await b.newPage();await p.setContent("<h1 id=t>ok</h1>");if(await p.textContent("#t")!=="ok")throw new Error("bad render");await b.close();console.log("chromium OK");})()\n' > /tmp/pw-check.js \
+    && pw /tmp/pw-check.js \
+    && rm -f /tmp/pw-check.js
 ENV IS_SANDBOX=1
 RUN mkdir -p /root/.claude && \
     echo '{"permissions":{"deny":["WebFetch","WebSearch"]}}' > /root/.claude/settings.json