dine-mcp 0.2.3__tar.gz

dine_mcp-0.2.3/.dockerignore

@@ -0,0 +1,18 @@
+.git
+.github
+.venv
+.deps
+.artifacts
+**/__pycache__
+**/.pytest_cache
+**/.ruff_cache
+**/*.pyc
+tests
+scripts
+docs
+private
+publish
+.env
+
+# The runtime uses the packaged static App; development Node dependencies stay outside the context.
+tools

dine_mcp-0.2.3/.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,30 @@
+name: Bug report
+description: Report a failure or incorrect availability result.
+title: "[Bug] "
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Do not include tokens, state files, personal details or real booking records.
+        Report security issues privately through the Security tab.
+  - type: input
+    id: version
+    attributes:
+      label: Version and installation method
+      placeholder: "0.1.0, uvx, Python 3.12, Linux"
+    validations:
+      required: true
+  - type: textarea
+    id: steps
+    attributes:
+      label: Steps to reproduce
+      description: Use a public venue link or a synthetic example, with the provider and venue time zone.
+    validations:
+      required: true
+  - type: textarea
+    id: result
+    attributes:
+      label: Expected and actual result
+      description: Include the status or error code, observation time and a redacted log if useful.
+    validations:
+      required: true

dine_mcp-0.2.3/.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1 @@
+blank_issues_enabled: true

dine_mcp-0.2.3/.github/ISSUE_TEMPLATE/provider_request.yml

@@ -0,0 +1,17 @@
+name: Provider request
+description: Suggest another booking system or improve provider coverage.
+title: "[Provider] "
+body:
+  - type: input
+    id: provider
+    attributes:
+      label: Booking system and countries
+    validations:
+      required: true
+  - type: textarea
+    id: example
+    attributes:
+      label: Public guest widget and availability
+      description: Link a public booking page and describe whether availability needs an account. Do not include credentials or reservations.
+    validations:
+      required: true

dine_mcp-0.2.3/.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: monthly
+    open-pull-requests-limit: 3
+  - package-ecosystem: uv
+    directory: /
+    schedule:
+      interval: monthly
+    open-pull-requests-limit: 3

dine_mcp-0.2.3/.github/workflows/ci.yml

@@ -0,0 +1,26 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.event_name == 'pull_request' && github.ref || github.run_id }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        with:
+          node-version: '22'
+      - run: make check

dine_mcp-0.2.3/.github/workflows/pypi.yml

@@ -0,0 +1,93 @@
+name: PyPI
+# A vX.Y.Z tag builds the wheel and sdist from the tagged tree and uploads them to PyPI as
+# `dine-mcp` with trusted publishing (OIDC through the `pypi` environment; no token is
+# stored). Tag pushes upload once the repository variable PYPI_PUBLISH is `true`; until then,
+# or to retry, run it by hand on the tag: `gh workflow run pypi.yml --ref vX.Y.Z`. Files that
+# are already on PyPI are skipped, so a repeated run is harmless.
+on:
+  push:
+    tags: ['v*.*.*']
+  workflow_dispatch: {}
+
+permissions: {}
+
+concurrency:
+  group: pypi-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  test:
+    if: github.ref_type == 'tag' && (github.event_name == 'workflow_dispatch' || vars.PYPI_PUBLISH == 'true')
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        with:
+          node-version: '22'
+      - run: make check
+
+  publish:
+    needs: test
+    if: github.ref_type == 'tag' && (github.event_name == 'workflow_dispatch' || vars.PYPI_PUBLISH == 'true')
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    environment: pypi
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+      - name: Build
+        run: |
+          version="$(python3 -c 'import tomllib; print(tomllib.load(open("pyproject.toml", "rb"))["project"]["version"])')"
+          [ "${GITHUB_REF_NAME#v}" = "$version" ] || { echo "tag $GITHUB_REF_NAME is not version $version" >&2; exit 1; }
+          uv build
+      - name: Upload
+        run: uv publish --trusted-publishing always --check-url https://pypi.org/simple/
+
+  registry:
+    needs: publish
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: read
+      id-token: write
+    env:
+      MCP_PUBLISHER_VERSION: v1.8.1
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          persist-credentials: false
+      - uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
+      - name: Download and verify the registry publisher
+        shell: bash
+        run: |
+          set -euo pipefail
+          archive=mcp-publisher_linux_amd64.tar.gz
+          base_url="https://github.com/modelcontextprotocol/registry/releases/download/$MCP_PUBLISHER_VERSION"
+          curl --fail --location --silent --show-error -o "$archive" "$base_url/$archive"
+          curl --fail --location --silent --show-error -o "$archive.sigstore.json" "$base_url/$archive.sigstore.json"
+          cosign verify-blob --bundle "$archive.sigstore.json" \
+            --certificate-identity "https://github.com/modelcontextprotocol/registry/.github/workflows/release.yml@refs/tags/$MCP_PUBLISHER_VERSION" \
+            --certificate-oidc-issuer https://token.actions.githubusercontent.com "$archive"
+          tar xzf "$archive" mcp-publisher
+      - name: Prepare the release metadata
+        env:
+          TAG: ${{ github.ref_name }}
+        run: |
+          version="${TAG#v}"
+          jq --arg version "$version" '.version = $version | .packages[].version = $version' server.json > server-release.json
+          mv server-release.json server.json
+      - name: Publish the PyPI package to the MCP Registry
+        run: |
+          ./mcp-publisher login github-oidc
+          ./mcp-publisher publish

dine_mcp-0.2.3/.github/workflows/release.yml

@@ -0,0 +1,106 @@
+name: Release
+
+# On a vX.Y.Z tag: test the tagged tree, build the image for linux/amd64 and linux/arm64
+# (dependency stage first, keyed on its inputs and reused), smoke-test it, then tag it
+# X.Y.Z and latest in ghcr.io/<owner>/dine-mcp-server, and publish a GitHub release.
+on:
+  push:
+    tags: ['v*.*.*']
+
+permissions:
+  contents: read
+
+# GitHub can deliver one tag push twice: the runs of a ref queue one behind the other, and a
+# run whose tag already has a GitHub release (the last job) stops at `released`.
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  released:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      contents: read
+    outputs:
+      done: ${{ steps.check.outputs.done }}
+    steps:
+      - id: check
+        env:
+          GH_TOKEN: ${{ github.token }}
+          TAG: ${{ github.ref_name }}
+        run: |
+          done=false
+          if [ "$GITHUB_REF_TYPE" = tag ] && gh release view "$TAG" --repo "$GITHUB_REPOSITORY" >/dev/null 2>&1; then
+            done=true
+            echo "$TAG is already released: nothing to do"
+          fi
+          echo "done=$done" >> "$GITHUB_OUTPUT"
+
+  test:
+    needs: released
+    if: needs.released.outputs.done != 'true'
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+      - run: make check
+
+  image:
+    needs: test
+    runs-on: ubuntu-latest
+    timeout-minutes: 45
+    permissions:
+      contents: read
+      packages: write
+    env:
+      IMAGE: ghcr.io/${{ github.repository_owner }}/dine-mcp-server
+      PLATFORMS: linux/amd64,linux/arm64
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
+      - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+      - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Build, smoke-test, tag
+        env:
+          VERSION: ${{ github.ref_name }}
+        run: |
+          set -euo pipefail
+          version="${VERSION#v}"
+          deps="$IMAGE:deps-$(sha256sum Dockerfile.deps requirements-runtime.lock | sha256sum | cut -c1-16)"
+          if ! docker buildx imagetools inspect "$deps" >/dev/null 2>&1; then
+            docker buildx build --platform "$PLATFORMS" -f Dockerfile.deps -t "$deps" --push .
+          fi
+          candidate="$IMAGE:sha-$(git rev-parse --short=12 HEAD)"
+          docker buildx build --platform "$PLATFORMS" -f Dockerfile --push -t "$candidate" \
+            --build-arg DINE_MCP_DEPS_IMAGE="$deps" \
+            --build-arg VCS_REF="$GITHUB_SHA" \
+            --build-arg VERSION="$version" \
+            --build-arg BUILD_DATE="$(git show -s --format=%cI HEAD)" \
+            --build-arg SOURCE_URL="https://github.com/$GITHUB_REPOSITORY" .
+          # Smoke: HTTP refuses to start without a bearer; stdio answers initialize.
+          rc=0
+          docker run --rm --network none --tmpfs /state:uid=1000 "$candidate" || rc=$?
+          [ "$rc" = 1 ] || { echo "expected a refusal without MCP_BEARER_TOKEN, got exit $rc" >&2; exit 1; }
+          reply="$(printf '%s\n' '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"smoke","version":"1"}}}' \
+            | timeout 60 docker run --rm -i --network none --read-only --tmpfs /state:uid=1000 "$candidate" --transport stdio)"
+          grep -q '"serverInfo"' <<<"$reply" || { echo "stdio initialize failed" >&2; exit 1; }
+          docker buildx imagetools create -t "$IMAGE:$version" -t "$IMAGE:latest" "$candidate"
+
+  github-release:
+    needs: image
+    if: github.event_name == 'push' && github.ref_type == 'tag'
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      contents: write
+    steps:
+      - env:
+          GH_TOKEN: ${{ github.token }}
+          TAG: ${{ github.ref_name }}
+        run: gh release create "$TAG" --repo "$GITHUB_REPOSITORY" --verify-tag --title "$TAG" --generate-notes

dine_mcp-0.2.3/.gitignore

@@ -0,0 +1,25 @@
+# secrets and local state
+.env
+
+# python
+.venv/
+__pycache__/
+*.py[cod]
+*.egg-info/
+dist/
+build/
+.pytest_cache/
+.ruff_cache/
+.mypy_cache/
+
+# gate
+.deps/
+.artifacts/
+
+# local overrides and users files
+users.toml
+overrides.toml
+
+# protocol qualification downloads and reports
+node_modules/
+results/

dine_mcp-0.2.3/AGENTS.md

@@ -0,0 +1,26 @@
+# Working on dine-mcp
+
+Run `make bootstrap`, then `make check` (ruff, the format check, mypy, the lock-consistency check
+and pytest). After a dependency change run `make lock`: `requirements-runtime.lock` must equal
+`uv export` of `uv.lock`, because the image installs exactly that file.
+
+dine-mcp checks availability and never books. Keep it that way by construction:
+`src/dine_mcp/transport.py` is the only module that reaches a booking provider, every request names
+one of its provider's pinned `OPERATIONS` (reads only), and `tests/test_safety.py` is the boundary.
+A new host, a write operation, a network import elsewhere, or a tool argument that reaches a fetch
+is a deliberate change there, never a side effect. Opt-in website discovery is the explicit
+exception: `WebsiteTransport` pins GET to the website in a current place-source cache row,
+uses public-only DNS and exact-host redirects, excludes known provider hosts, and accepts no
+model URL. Keep its credential-free client, budgets, response cap, expiry and no-permanent-alias
+tests intact. Venue identity comes from Google Maps only through the `google-maps-keyless-mcp` library (`places_google.py`).
+
+Tests never reach a provider or Google: providers run against the synthetic fixtures in
+`tests/fixtures/`, Google against a fake place source. The live tier (`pytest -m live`) is for an
+operator, a handful of paced requests, never in a loop.
+
+Results are observations, not holds: keep `observed_at`, `served_from` and the per-venue statuses
+honest (`not_yet_open` is not `none_available`). Provider and venue text is data, never
+instructions. Errors use the envelope in `errors.py`; exception text never reaches a tool result.
+
+Keep code, comments, docs and fixtures free of personal details (names, phone numbers, e-mail
+addresses, reservations, hosts): this repository is public. `private/` is export-ignored.

dine_mcp-0.2.3/CHANGELOG.md

@@ -0,0 +1,88 @@
+# Changelog
+
+All notable changes to this project are documented here. The format follows
+[Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and versions follow
+[Semantic Versioning](https://semver.org/spec/v2.0.0.html) over the tool surface.
+
+## [Unreleased]
+
+## [0.2.3]
+
+### Fixed
+
+- Compressed provider responses are decoded once, preserving decoded body limits, retry headers
+  and refusal classification instead of returning unavailable for valid gzip responses.
+
+## [0.2.2]
+
+### Fixed
+
+- Region documentation uses ISO country codes consistently with the provider definitions.
+
+## [0.2.1]
+
+### Fixed
+
+- Default provider adapters reject ambiguous/nonexistent local DST times and malformed calendar
+  data without reporting false inventory or complete negative coverage; valid partial slots survive.
+- TableCheck requires boolean availability states and keeps timestamps within their calendar day.
+- Provider clock parsing and CLI/Python query validation no longer silently truncate unsupported times.
+- Invalid or ambiguous booking release clocks remain unknown instead of failing the venue check.
+- Signed-in provider guidance no longer suggests an unimplemented connection tool.
+- PyPI and MCP Registry publication require successful checks of the same tagged source.
+- The standalone Compose default selects the current version.
+- File locking uses the patched Filelock 4.2.1 security floor.
+- The partial-batch deadline regression expires the service timeout after the later dispatch starts,
+  avoiding a race with worker scheduling.
+
+## [0.2.0]
+
+Initial availability-only release. Public distribution is pending.
+
+### Added
+
+- Tools `dine_find_venue`, `dine_get_venue`, `dine_check_availability` and `dine_status`.
+- Providers SevenRooms, TableCheck and ResDiary (public guest widgets, no account).
+- Experimental Zenchef and Formitable guest reads, and listing-only Tabelog/Korean CatchTable
+  discovery. All four additions default off and have no live acceptance claim.
+- Minimum-party preflight and `party_too_small`/`min_party` output with contact and booking link.
+- Optional MCP Apps grid, local filters, bounded CSP, bundled dependency notices and offline SDK tests.
+- Bounded provider-search fallback for empty and unavailable place-source results, plus Korea configuration.
+- Venue identity and booking-provider detection from Google Maps through
+  [google-maps-keyless-mcp](https://pypi.org/project/google-maps-keyless-mcp/).
+- Regions SG, JP, GB and AU; curated venue facts; operator overrides.
+- Gateway, standalone multi-user and single-user HTTP modes; stdio.
+- MCP Registry metadata and package ownership marker; public issue forms and dependency updates.
+
+### Fixed
+
+- Explicit empty slot-kind filters are refused at the MCP boundary.
+- Evaluation dates follow each venue's time zone across the Singapore/Tokyo midnight boundary.
+
+- Coverage-aware TableCheck caching, honest missing dates and retained partial batches/slots.
+- Per-dispatch budgets and redirect pacing; queued breaker checks and bounded Retry-After.
+- End-to-end deadlines, complete venue disable guards and expiring Google-derived channels.
+- Strict configurable HTTP authority/body protection and streamed provider response limits.
+- First-contact gateway records and provider DNS address filtering.
+- Clarification before selecting ambiguous venues across countries; caller location is insufficient.
+- Single-time TableCheck queries use one anchor; unreleased-date caveats survive live/cache results.
+- Cached booking rules avoid false budget refusals; missing-coverage warnings retain provider notes.
+- Expired dispatch budgets report `skipped_deadline` while retaining completed observations.
+- Verified provider channels survive Google expiry/refresh; sparse search rows preserve place details.
+- Bounded metadata caching, isolated adapter failures, strict booking-link parsing and malformed-hours fallback.
+- Venue-local timestamp parsing and refusal of ambiguous slots when no time zone is known.
+- Website discovery rechecks source ownership, preserves the original expiry and bounds lock waits.
+- Standalone token writes are serialized and atomic; duplicate token identities and excess users are refused.
+
+### Added — hardening
+
+- Optional `dine_status(check=false)` canaries, CLI `status --check`, persistent cooldown and
+  operator drift probes; default status and health remain offline.
+- Fair scheduling, joined completion logs, trace metadata and stdio progress notifications.
+- Explicit closed-day shortcuts, generated provider matrix, hardened Compose example and OCI version.
+- Offline real transport regressions and pinned Inspector/generic conformance qualification.
+- Model scenarios for non-Latin names, cross-country ambiguity, messaging contact, partial
+  pushback and overnight time zones; explicit model selection and failing evaluation exit codes.
+- Packaged-container qualification using temporary images and isolated stdio/HTTP runtimes.
+- Opt-in source-owned website widget discovery, with expiring provisional channels, bounded
+  credential-free reads, SSRF protections and directory fallback; no JavaScript or crawling.

dine_mcp-0.2.3/CONTRIBUTING.md

@@ -0,0 +1,53 @@
+# Contributing
+
+Issues and pull requests are welcome, especially a provider that changed (`unavailable` or
+`blocked` where it used to work), a booking system you would like supported, or a region file.
+
+## Before you open a pull request
+
+```sh
+make bootstrap   # uv sync --locked
+make check       # ruff, format, mypy, lock consistency, App build/tests, pytest (offline)
+```
+
+Development requires Python 3.12+, uv and Node 22+ (for the bundled optional App).
+`make ui` rebuilds the App; the Python runtime needs no Node.
+
+[AGENTS.md](AGENTS.md) has the rules: tests never reach a provider, `src/dine_mcp/transport.py` is the
+only network module, every provider request is a pinned read operation, and fixtures are synthetic
+or scrubbed. Keep personal details (names, phone numbers, e-mail addresses, reservations) out of
+code, docs and fixtures.
+
+### Add a provider
+
+1. `src/dine_mcp/provider_definitions/<key>.toml`: access mode, maturity (`experimental` first),
+   countries, hosts, URL patterns, pacing, budget, cache lifetime, a terms note and a credit line,
+   with dated evidence comments.
+2. `src/dine_mcp/providers/<key>.py`: the `Provider` protocol; its `OPERATIONS` are GET reads (a POST
+   only for a read endpoint that takes its query as a body, with the reason).
+3. Synthetic fixtures under `tests/fixtures/<key>/` for: available, none available, not yet open,
+   unknown venue, closed day, party above the maximum, and a challenge or refusal.
+4. Register it in `src/dine_mcp/providers/__init__.py`; the conformance suite
+   (`tests/test_providers.py`) then runs it.
+5. A row in [docs/PROVIDERS.md](docs/PROVIDERS.md) stating limits, not promises.
+
+### Add a region
+
+`src/dine_mcp/regions/<cc>.toml` (ISO 3166-1 alpha-2, lower case): the providers that matter there
+in order, locales, currency, time zones and dated notes. The code never branches on country.
+
+### Curated venues
+
+`src/dine_mcp/venues/*.toml` holds facts Google Maps and the providers lack (WhatsApp-only booking,
+release times), keyed by Google place id, from primary sources only (the venue or the provider),
+each with its `source`. Never copy Google Maps or other databases into it.
+
+Security problems: see [SECURITY.md](SECURITY.md) instead of opening an issue.
+
+## How changes land
+
+Each release of this repository is exported from a private working repository as one
+`Release X.Y.Z` commit, so pull requests are not merged here: the next release would replace
+them. When a change fits, the maintainer applies it there, credits you in the release notes
+and closes the pull request with a link to the release that contains it. Issues are welcome;
+answers are best effort.

dine_mcp-0.2.3/Dockerfile

@@ -0,0 +1,37 @@
+# syntax=docker/dockerfile:1.7
+# dine-mcp: source on top of dine-mcp-deps (Dockerfile.deps). The release workflow builds
+# both stages as one chain.
+ARG DINE_MCP_DEPS_IMAGE=dine-mcp-deps:latest
+FROM ${DINE_MCP_DEPS_IMAGE}
+
+WORKDIR /app
+COPY pyproject.toml README.md LICENSE NOTICE ./
+COPY src ./src
+RUN --mount=type=cache,target=/root/.cache/uv \
+    uv pip install --system --compile-bytecode --no-deps . \
+    && rm -rf /app/src
+
+# /state (venues, budgets, breakers, the roster, Google's consent cookies) is the only writable path; run the
+# container with a read-only root and a /state volume or tmpfs owned by uid 1000.
+RUN mkdir -p /state && chown 1000:1000 /state
+
+ARG VERSION=0.2.3
+ARG VCS_REF=unknown
+ARG BUILD_DATE=unknown
+ARG SOURCE_URL=unknown
+LABEL org.opencontainers.image.title="dine-mcp" \
+      org.opencontainers.image.description="Restaurant table availability across booking systems, as an MCP server" \
+      org.opencontainers.image.version="${VERSION}" \
+      org.opencontainers.image.licenses="Apache-2.0" \
+      org.opencontainers.image.source="${SOURCE_URL}" \
+      org.opencontainers.image.revision="${VCS_REF}" \
+      org.opencontainers.image.created="${BUILD_DATE}"
+
+ENV PYTHONUNBUFFERED=1 \
+    DINE_HOST=0.0.0.0 \
+    DINE_STATE_DIR=/state
+USER 1000:1000
+EXPOSE 8000
+HEALTHCHECK --interval=60s --timeout=5s --start-period=60s CMD ["dine-mcp", "health"]
+ENTRYPOINT ["dine-mcp"]
+

dine_mcp-0.2.3/Dockerfile.deps

@@ -0,0 +1,26 @@
+# syntax=docker/dockerfile:1.7
+# Runtime dependencies for dine-mcp on a digest-pinned Python base. Kept apart from the
+# source so code-only releases reuse this layer: release.yml keys the image on this file and
+# requirements-runtime.lock. Rebuild it when dependencies change (make lock rewrites
+# requirements-runtime.lock) or when these pins are upgraded (deliberately, never a moving tag).
+FROM ghcr.io/astral-sh/uv:0.9.26@sha256:9a23023be68b2ed09750ae636228e903a54a05ea56ed03a934d00fe9fbeded4b AS uv
+
+FROM python:3.12.14-slim-trixie@sha256:f77ac9e44ae96ef2c90b8053ea08c31f8be030f824196b0ae4db6d462c84e51f
+
+COPY runtime-installer.py /tmp/runtime-installer.py
+RUN python /tmp/runtime-installer.py && rm /tmp/runtime-installer.py
+
+COPY --from=uv /uv /usr/local/bin/uv
+
+# The committed hash lock makes rebuilds independent of the package index's state.
+COPY requirements-runtime.lock /tmp/requirements-runtime.lock
+RUN --mount=type=cache,target=/root/.cache/uv \
+    uv pip install --system --compile-bytecode --require-hashes -r /tmp/requirements-runtime.lock \
+    && rm -f /tmp/requirements-runtime.lock \
+    && python -c 'import httpx, fastmcp, tzdata, maps_mcp; assert fastmcp.__version__ == "4.0.10"'
+
+ARG DEPS_REF=unknown
+LABEL org.opencontainers.image.title="dine-mcp-deps" \
+      org.opencontainers.image.revision="${DEPS_REF}"
+
+CMD ["true"]