# ─────────────────────────────────────────────────────────────
# Sandbox Dockerfile — Python execution
# ─────────────────────────────────────────────────────────────

FROM python:3.12-alpine

# Create sandbox user
RUN adduser -D -u 1000 sandbox

# Install common Python packages
RUN pip install --no-cache-dir numpy pandas

# Create workspace
RUN mkdir -p /sandbox && chown sandbox:sandbox /sandbox

# Remove pip to prevent installs
RUN rm -rf /usr/local/bin/pip /usr/local/bin/pip3

USER sandbox
WORKDIR /sandbox

ENTRYPOINT ["sh", "-c"]