# Sandbox image for run_shell in F10 `mode: sandbox`.
# Bakes the PDF toolchain so the container can run with --network none.
#
# Build:  docker build -t ziro-pdf:latest docker/pdf-sandbox
# Used by an agent's shell_policy.yaml (sandbox_image) when mode is sandbox.
FROM python:3.12-slim
RUN pip install --no-cache-dir pypdf reportlab
WORKDIR /work
