# Sandbox image for the `researcher_docker` agent's run_shell (F10 mode: sandbox).
# Bakes the PDF toolchain so the container can run with --network none.
#
# Build:  docker build -t ziro-pdf:latest docker/pdf-sandbox
# Used by app/agents/researcher_docker/shell_policy.yaml (sandbox_image).
FROM python:3.12-slim
RUN pip install --no-cache-dir pypdf reportlab
WORKDIR /work
