uber-mcp 0.1.2__tar.gz

uber_mcp-0.1.2/.dockerignore

@@ -0,0 +1,15 @@
+.git
+.github
+.venv
+.deps
+.artifacts
+**/__pycache__
+**/.pytest_cache
+**/.ruff_cache
+**/*.pyc
+tests
+scripts
+docs
+cookies.txt
+*.cookies.txt
+.env

uber_mcp-0.1.2/.github/workflows/ci.yml

@@ -0,0 +1,38 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+  workflow_dispatch:
+  workflow_call:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.event_name == 'pull_request' && github.ref || github.run_id }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+      - run: make check
+
+  # Windows and macOS: stdio, file locking, paths.
+  portability:
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [windows-latest, macos-latest]
+    runs-on: ${{ matrix.os }}
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+      - run: uv sync --locked
+      - run: uv run --frozen pytest

uber_mcp-0.1.2/.github/workflows/pypi.yml

@@ -0,0 +1,38 @@
+name: PyPI
+# A vX.Y.Z tag builds the wheel and sdist from the tagged tree and uploads them to PyPI as
+# `uber-mcp` with trusted publishing (OIDC through the `pypi` environment; no token is
+# stored). Tag pushes upload once the repository variable PYPI_PUBLISH is `true`; until then,
+# or to retry, run it by hand on the tag: `gh workflow run pypi.yml --ref vX.Y.Z`. Files that
+# are already on PyPI are skipped, so a repeated run is harmless.
+on:
+  push:
+    tags: ['v*.*.*']
+  workflow_dispatch: {}
+
+permissions: {}
+
+concurrency:
+  group: pypi-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  publish:
+    if: github.ref_type == 'tag' && (github.event_name == 'workflow_dispatch' || vars.PYPI_PUBLISH == 'true')
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    environment: pypi
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
+      - name: Build
+        run: |
+          version="$(python3 -c 'import tomllib; print(tomllib.load(open("pyproject.toml", "rb"))["project"]["version"])')"
+          [ "${GITHUB_REF_NAME#v}" = "$version" ] || { echo "tag $GITHUB_REF_NAME is not version $version" >&2; exit 1; }
+          uv build
+      - name: Upload
+        run: uv publish --trusted-publishing always --check-url https://pypi.org/simple/

uber_mcp-0.1.2/.github/workflows/release.yml

@@ -0,0 +1,178 @@
+name: Release
+# A v1.2.3 tag: run the tests on the tagged commit, build the server image (Dockerfile, amd64 and arm64) and the
+# login browser image (Dockerfile.login, amd64), smoke-test both, push them to GHCR and publish a GitHub release.
+# Only the built-in token is used.
+#
+# Every build first publishes a permanent :sha-<12> candidate; a tag release promotes that exact digest to the
+# semver tag and :latest (scripts/promote-image.sh refuses to move an existing tag).
+#
+#   v1.2.3 tag        -> :sha-<12> + :1.2.3 + :latest, and a GitHub release
+#   workflow_dispatch -> :sha-<12> (never moves semver or latest)
+on:
+  push:
+    tags: ['v*.*.*']
+  workflow_dispatch: {}
+
+permissions: {}
+
+# GitHub can deliver one tag push twice: the runs of a ref queue one behind the other, and a
+# run whose tag already has a GitHub release (the last job) stops at `released`.
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  released:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      contents: read
+    outputs:
+      done: ${{ steps.check.outputs.done }}
+    steps:
+      - id: check
+        env:
+          GH_TOKEN: ${{ github.token }}
+          TAG: ${{ github.ref_name }}
+        run: |
+          done=false
+          if [ "$GITHUB_REF_TYPE" = tag ] && gh release view "$TAG" --repo "$GITHUB_REPOSITORY" >/dev/null 2>&1; then
+            done=true
+            echo "$TAG is already released: nothing to do"
+          fi
+          echo "done=$done" >> "$GITHUB_OUTPUT"
+
+  ci:
+    needs: released
+    if: needs.released.outputs.done != 'true'
+    uses: ./.github/workflows/ci.yml
+    permissions:
+      contents: read
+
+  images:
+    needs: ci
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    permissions:
+      contents: read
+      packages: write
+    outputs:
+      version: ${{ steps.v.outputs.version }}
+    env:
+      # zstd layers: faster to decompress on the pulling host; Docker >= 23 pulls them.
+      ZSTD_PUSH: type=registry,compression=zstd,compression-level=3,force-compression=true,oci-mediatypes=true
+      REG: ghcr.io/${{ github.repository_owner }}
+      SERVER_IMAGE: uber-mcp-server
+      LOGIN_IMAGE: uber-mcp-login-browser
+      SOURCE_URL: ${{ github.server_url }}/${{ github.repository }}
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
+      - name: Log in to GHCR
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - uses: docker/setup-qemu-action@v3
+      - uses: docker/setup-buildx-action@v3
+      - name: Compute version
+        id: v
+        run: |
+          if [ "${{ github.event_name }}" = push ] && [ "${{ github.ref_type }}" = tag ]; then
+            V="${GITHUB_REF_NAME#v}"
+            LATEST=true
+            grep -qx "version = \"$V\"" pyproject.toml || { echo "ERROR: tag $GITHUB_REF_NAME != pyproject version" >&2; exit 1; }
+          else
+            V="sha-$(git rev-parse --short=12 HEAD)"
+            LATEST=false
+          fi
+          BUILD_REF="sha-$(git rev-parse --short=12 HEAD)"
+          echo "version=$V" >> "$GITHUB_OUTPUT"
+          echo "build_ref=$BUILD_REF" >> "$GITHUB_OUTPUT"
+          echo "latest=$LATEST" >> "$GITHUB_OUTPUT"
+          echo "Building candidate: $BUILD_REF; release ref: $V"
+      - name: Build + push server image
+        id: server
+        env:
+          BUILD_REF: ${{ steps.v.outputs.build_ref }}
+          VCS_REF: ${{ github.sha }}
+        run: |
+          set -euo pipefail
+          BUILD_DATE="$(git show -s --format=%cI "$VCS_REF")"
+          candidate="$REG/$SERVER_IMAGE:$BUILD_REF"
+          PLATFORMS=linux/amd64,linux/arm64 \
+            bash scripts/build-image.sh "$candidate" Dockerfile "$VCS_REF" "$BUILD_DATE" "$REG/$SERVER_IMAGE:buildcache"
+          digest="$(docker buildx imagetools inspect "$candidate" --format '{{json .Manifest}}' | jq -er .digest)"
+          image="$REG/$SERVER_IMAGE@$digest"
+          docker pull -q "$image" >/dev/null
+          # Smoke: the server builds with a sealed session and booking caps without a network, refuses HTTP
+          # without a bearer, and answers its own health check (the image's HEALTHCHECK) on a read-only root as uid 1000.
+          docker run --rm --network none --read-only --tmpfs /tmp --tmpfs /state:uid=1000 \
+            -e UBER_SESSION_KEY=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA= -e UBER_MAX_FARE='USD 80' -e UBER_MAX_FARE_24H='USD 200' \
+            --entrypoint python "$image" -c 'from uber_mcp.server import UberService, create_server; from uber_mcp.config import Settings; s = Settings.from_env(); assert s.booking_enabled and create_server(UberService(s)).name == "uber"'
+          rc=0
+          timeout 120 docker run --rm --network none --read-only --tmpfs /tmp --tmpfs /state:uid=1000 "$image" || rc=$?
+          [ "$rc" = 1 ] || { echo "ERROR: expected a refusal without MCP_BEARER_TOKEN, got exit $rc" >&2; exit 1; }
+          name="smoke-$BUILD_REF"
+          docker run -d --name "$name" --network none --read-only --tmpfs /tmp --tmpfs /state:uid=1000 \
+            -e MCP_BEARER_TOKEN=smoke-token-0123456789abcdef "$image" >/dev/null
+          trap 'docker rm -f "$name" >/dev/null 2>&1 || true' EXIT
+          for _ in $(seq 30); do docker exec "$name" uber-mcp health && break; sleep 1; done
+          docker exec "$name" uber-mcp health || { docker logs "$name" >&2; exit 1; }
+          echo "digest=$digest" >> "$GITHUB_OUTPUT"
+      - name: Build + push login browser image
+        id: login
+        env:
+          BUILD_REF: ${{ steps.v.outputs.build_ref }}
+          VCS_REF: ${{ github.sha }}
+        run: |
+          set -euo pipefail
+          BUILD_DATE="$(git show -s --format=%cI "$VCS_REF")"
+          candidate="$REG/$LOGIN_IMAGE:$BUILD_REF"
+          bash scripts/build-image.sh "$candidate" Dockerfile.login "$VCS_REF" "$BUILD_DATE" "$REG/$LOGIN_IMAGE:buildcache"
+          digest="$(docker buildx imagetools inspect "$candidate" --format '{{json .Manifest}}' | jq -er .digest)"
+          docker pull -q "$REG/$LOGIN_IMAGE@$digest" >/dev/null
+          image="$REG/$LOGIN_IMAGE@$digest"
+          # Smoke: the browser, display, remote-desktop server, viewer and CJK fonts are there; the service
+          # refuses to start without its bearer; it never runs as root.
+          docker run --rm --network none --entrypoint sh "$image" -c '
+            set -e
+            [ "$(id -u)" = 1000 ]
+            python -c "import uber_login.app, uber_login.logins, uber_login.window, patchright"
+            command -v Xvfb >/dev/null && command -v x11vnc >/dev/null
+            ls /ms-patchright | grep -q chromium
+            [ -f /opt/novnc/vnc.html ] && [ -f /opt/novnc/core/rfb.js ]
+            ls /usr/share/fonts/opentype/noto/ | grep -q CJK'
+          rc=0
+          timeout 60 docker run --rm --network none "$image" || rc=$?
+          [ "$rc" = 1 ] || { echo "ERROR: expected a refusal without UBER_LOGIN_TOKEN, got exit $rc" >&2; exit 1; }
+          echo "digest=$digest" >> "$GITHUB_OUTPUT"
+      - name: Promote verified immutable refs
+        env:
+          V: ${{ steps.v.outputs.version }}
+          PUBLISH_LATEST: ${{ steps.v.outputs.latest }}
+          SERVER_DIGEST: ${{ steps.server.outputs.digest }}
+          LOGIN_DIGEST: ${{ steps.login.outputs.digest }}
+        run: |
+          set -euo pipefail
+          for pair in "$SERVER_IMAGE:$SERVER_DIGEST" "$LOGIN_IMAGE:$LOGIN_DIGEST"; do
+            name="${pair%%:*}"; digest="${pair#*:}"
+            bash scripts/promote-image.sh "$REG/$name" "$digest" "$V"
+            if [ "$PUBLISH_LATEST" = true ]; then
+              docker buildx imagetools create --prefer-index=false --tag "$REG/$name:latest" "$REG/$name@$digest"
+              [ "$(docker buildx imagetools inspect "$REG/$name:latest" --format '{{json .Manifest}}' | jq -r .digest)" = "$digest" ]
+            fi
+          done
+
+  github-release:
+    needs: images
+    if: github.event_name == 'push' && github.ref_type == 'tag'
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      contents: write
+    steps:
+      - env:
+          GH_TOKEN: ${{ github.token }}
+          TAG: ${{ github.ref_name }}
+        run: gh release create "$TAG" --repo "$GITHUB_REPOSITORY" --verify-tag --title "$TAG" --generate-notes

uber_mcp-0.1.2/.gitignore

@@ -0,0 +1,21 @@
+# secrets and local state
+cookies.txt
+*.cookies.txt
+.env
+
+# python
+.venv/
+__pycache__/
+*.py[cod]
+*.egg-info/
+dist/
+build/
+.pytest_cache/
+.ruff_cache/
+
+# gate
+.deps/
+.artifacts/
+# saved sessions and local state
+session*.json
+session.bin

uber_mcp-0.1.2/AGENTS.md

@@ -0,0 +1,47 @@
+# Working on uber-mcp
+
+Instructions for contributors and coding agents. `AGENTS.md` is the only agent instruction file.
+
+**This repository is public.** Never commit personal data or anything about a particular deployment: no real names,
+email addresses, phone numbers or account details, no recorded payloads from a real Uber account, no addresses,
+places, coordinates, trips, fares, drivers, plates or payment methods, no host names, networks or infrastructure of
+where it runs, and no anecdotes about who used it when. Deployment-specific configuration and runbooks belong with the
+deployment, not here. This applies to code comments, docs, tests, fixtures and commit messages alike.
+
+## Verify
+
+`make bootstrap`, then `make check`: ruff, the format check, the lock-consistency check (`requirements-runtime.lock`
+and `requirements-login.lock` must equal `uv export` of `uv.lock`; run `make lock` after a dependency change) and
+pytest, with a source-bound receipt under `.artifacts/`. Documentation-only changes need `git diff --check` and link
+checks.
+
+Tests never reach Uber: `tests/conftest.py` puts a fake Uber behind the real `Transport`, answering each GraphQL
+operation the way [docs/uber-web-api.md](docs/uber-web-api.md) describes. Fixtures are synthetic
+(`tests/fixtures/README.md`): shaped like Uber's responses, with invented values.
+
+## Boundaries
+
+- `tests/test_safety.py` is the safety boundary: a new Uber host, a new GraphQL operation (read or money), a network
+  import outside `uber.py` and `login_client.py` (and `cli.py`'s local health check), or a money operation named or
+  sent anywhere but `booking.py` is a deliberate change there, never a side effect. `uber_request_ride` and
+  `uber_cancel_ride` are the only tools not marked read-only, and they are marked destructive.
+- **Booking lives only in `booking.py`.** `TripRequest` and `TripCancel` go out only through
+  `Uber.graphql(..., money=True)` from there, and only after a preview, a single-use confirm token bound to the
+  preview's arguments, a fresh price no higher than the approved one, both caps, the freeze check and the
+  one-ride-at-a-time check, with every attempt in `audit.jsonl`. Weakening any of these, or adding a way to book
+  around them (scheduled rides, tips, other payment flows), is a design change: argue it in the pull request.
+- An outcome that may have reached Uber is `outcome_unknown`, never retried by the server.
+- `tests/test_login_safety.py`: the sign-in window shows only Uber's pages (and Google's or Apple's sign-in) and
+  automates nothing on them: no click, keystroke, fill or form call exists in `src/uber_login`. The login service's
+  API needs its bearer and the person's view needs its per-sign-in token.
+- Tool results never carry exception text or cookies; errors use the fixed `NEXT_STEP` table in `errors.py`. Logs
+  never carry tool arguments (places), cookie values or Uber's error text.
+- `operations.json` holds Uber's own GraphQL documents, refreshed with `scripts/sync-operations.py`; never hand-write
+  a document Uber's web apps do not send.
+- Live checks against Uber: only your own account, a handful of paced read-only calls, nothing they return is
+  committed. Never request or cancel a ride in a check, test or experiment, and never with someone else's account.
+
+## Releases
+
+A `vX.Y.Z` tag whose version matches `pyproject.toml` runs `.github/workflows/release.yml`: the tests, then both
+images (smoke-tested, pushed to GHCR, promoted from an immutable `:sha-<12>` candidate) and a GitHub release.

uber_mcp-0.1.2/CONTRIBUTING.md

@@ -0,0 +1,45 @@
+# Contributing
+
+Thanks for helping. Issues and pull requests are welcome, especially when Uber changes its web API and a tool starts
+failing with `schema_changed`.
+
+## Setup
+
+```sh
+git clone https://github.com/benjamin-di/uber-mcp-server
+cd uber-mcp-server
+make bootstrap   # uv sync --locked
+make check       # lint, format, lock consistency, tests
+```
+
+`uv run uber-mcp --help` runs your checkout. To try it against Uber, sign in with
+`uv run --extra login uber-mcp login` and use a separate `UBER_STATE_DIR` for development. Leave `UBER_MAX_FARE` and
+`UBER_MAX_FARE_24H` unset while developing: booking then stays off.
+
+When Uber renames an operation or a field, `uv run python scripts/sync-operations.py` reads the current GraphQL
+documents from Uber's own web apps (with the signed-in session of `UBER_STATE_DIR`) and rewrites
+`src/uber_mcp/operations.json`; it names any operation it can no longer find.
+
+## Rules
+
+- **No personal data.** Never commit real account data, recorded payloads from a signed-in session, cookies, names,
+  email addresses, phone numbers, places, coordinates, trips, fares or payment details, in code, tests, fixtures,
+  docs or commit messages. Fixtures are synthetic (`tests/fixtures/README.md`).
+- **Tests never contact Uber.** Model new behaviour in the fakes (`tests/conftest.py`, `tests/fixtures/uber.py`) and
+  document what you observed in [docs/uber-web-api.md](docs/uber-web-api.md).
+- **The safety boundary is deliberate.** Adding an Uber host or GraphQL operation, or anything that could book,
+  cancel or pay outside `src/uber_mcp/booking.py` and its preview, confirm and cap checks, means changing
+  `tests/test_safety.py` on purpose and explaining why in the pull request.
+- Keep tool outputs stable: fields may be added, not renamed or removed, without a major version.
+- Be gentle with Uber when testing live: only your own account, a handful of read-only requests, and commit nothing
+  they return. Never request or cancel a ride to test something.
+
+AGENTS.md has the same rules for coding agents.
+
+## How changes land
+
+Each release of this repository is exported from a private working repository as one
+`Release X.Y.Z` commit, so pull requests are not merged here: the next release would replace
+them. When a change fits, the maintainer applies it there, credits you in the release notes
+and closes the pull request with a link to the release that contains it. Issues are welcome;
+answers are best effort.

uber_mcp-0.1.2/Dockerfile

@@ -0,0 +1,43 @@
+# syntax=docker/dockerfile:1.7
+# uber-mcp: the MCP server over streamable HTTP at :8000/mcp (needs MCP_BEARER_TOKEN). It runs as uid 1000 and
+# works on a read-only root filesystem; /state (a volume) keeps the session (sealed under UBER_SESSION_KEY), the
+# budget, the pause, booking previews, the 24-hour spend and the audit log.
+FROM ghcr.io/astral-sh/uv:0.9.26@sha256:9a23023be68b2ed09750ae636228e903a54a05ea56ed03a934d00fe9fbeded4b AS uv
+
+FROM python:3.12.13-slim-trixie@sha256:57cd7c3a7a273101a6485ba99423ee568157882804b1124b4dd04266317710de
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    HOME=/tmp \
+    UBER_STATE_DIR=/state
+
+# Locked dependencies first, so a code-only release reuses this layer.
+COPY requirements-runtime.lock /tmp/requirements-runtime.lock
+RUN --mount=from=uv,source=/uv,target=/usr/local/bin/uv \
+    --mount=type=cache,target=/root/.cache/uv \
+    uv pip install --system --compile-bytecode --require-hashes -r /tmp/requirements-runtime.lock \
+ && rm /tmp/requirements-runtime.lock
+
+WORKDIR /app
+COPY pyproject.toml README.md LICENSE THIRD_PARTY_NOTICES ./
+COPY src ./src
+RUN --mount=from=uv,source=/uv,target=/usr/local/bin/uv \
+    uv pip install --system --compile-bytecode --no-deps . \
+ && rm -rf /app/src \
+ && install -d -o 1000 -g 1000 -m 0700 /state
+
+ARG VCS_REF=unknown
+ARG BUILD_DATE=unknown
+ARG SOURCE_URL=https://github.com/benjamin-di/uber-mcp-server
+LABEL org.opencontainers.image.title="uber-mcp" \
+      org.opencontainers.image.description="Unofficial MCP server for Uber rides" \
+      org.opencontainers.image.licenses="MIT" \
+      org.opencontainers.image.source="${SOURCE_URL}" \
+      org.opencontainers.image.revision="${VCS_REF}" \
+      org.opencontainers.image.created="${BUILD_DATE}"
+
+EXPOSE 8000
+USER 1000:1000
+HEALTHCHECK --interval=60s --timeout=5s --start-period=2m --start-interval=2s CMD ["uber-mcp", "health"]
+ENTRYPOINT ["uber-mcp"]
+CMD ["serve", "--host", "0.0.0.0", "--port", "8000"]

uber_mcp-0.1.2/Dockerfile.login

@@ -0,0 +1,65 @@
+# syntax=docker/dockerfile:1.7
+# uber-mcp-login: the browser a person signs in to Uber with (src/uber_login), shown to them through noVNC on its
+# view page. A virtual display (Xvfb), a remote-desktop server on loopback (x11vnc), patchright's Chromium and CJK
+# fonts (Uber shows the rider's language). It never automates the sign-in (tests/test_login_safety.py).
+FROM ghcr.io/astral-sh/uv:0.9.26@sha256:9a23023be68b2ed09750ae636228e903a54a05ea56ed03a934d00fe9fbeded4b AS uv
+
+FROM python:3.12.13-slim-trixie@sha256:57cd7c3a7a273101a6485ba99423ee568157882804b1124b4dd04266317710de
+
+ENV PYTHONDONTWRITEBYTECODE=1 \
+    PYTHONUNBUFFERED=1 \
+    PLAYWRIGHT_BROWSERS_PATH=/ms-patchright \
+    HOME=/home/login \
+    UBER_LOGIN_NOVNC=/opt/novnc
+
+COPY --from=uv /uv /usr/local/bin/
+
+RUN apt-get update \
+ && apt-get install -y --no-install-recommends \
+      ca-certificates \
+      curl \
+      dumb-init \
+      fonts-noto-cjk \
+      x11vnc \
+      xvfb \
+ && rm -rf /var/lib/apt/lists/*
+
+# noVNC's own viewer (static files only; the WebSocket bridge is the service's, behind each sign-in's view token).
+ARG NOVNC_VERSION=1.6.0
+ARG NOVNC_SHA256=5066103959ef4e9b10f37e5a148627360dd8414e4cf8a7db92bdbd022e728aaa
+RUN curl --fail --silent --show-error --location \
+      "https://github.com/novnc/noVNC/archive/refs/tags/v${NOVNC_VERSION}.tar.gz" -o /tmp/novnc.tar.gz \
+ && printf '%s  /tmp/novnc.tar.gz\n' "${NOVNC_SHA256}" | sha256sum --check --status \
+ && mkdir -p /opt/novnc \
+ && tar -xzf /tmp/novnc.tar.gz -C /opt/novnc --strip-components=1 \
+      "noVNC-${NOVNC_VERSION}/app" "noVNC-${NOVNC_VERSION}/core" "noVNC-${NOVNC_VERSION}/vendor" \
+      "noVNC-${NOVNC_VERSION}/vnc.html" \
+ && rm /tmp/novnc.tar.gz
+
+# Locked dependencies first, so a code-only release reuses the Chromium layer.
+COPY requirements-login.lock /tmp/requirements-login.lock
+RUN uv pip install --system --compile-bytecode --require-hashes -r /tmp/requirements-login.lock \
+ && patchright install --with-deps chromium \
+ && rm -rf /var/lib/apt/lists/* /tmp/requirements-login.lock \
+ && useradd --uid 1000 --home-dir /home/login --shell /usr/sbin/nologin login \
+ && install -d -o 1000 -g 1000 -m 0700 /home/login
+
+WORKDIR /app
+COPY pyproject.toml README.md LICENSE THIRD_PARTY_NOTICES ./
+COPY src ./src
+RUN uv pip install --system --compile-bytecode --no-deps . && rm -rf /app/src
+
+ARG VCS_REF=unknown
+ARG BUILD_DATE=unknown
+ARG SOURCE_URL=https://github.com/benjamin-di/uber-mcp-server
+LABEL org.opencontainers.image.title="uber-mcp-login" \
+      org.opencontainers.image.description="The browser a person signs in to Uber with, for uber-mcp on a server" \
+      org.opencontainers.image.licenses="MIT" \
+      org.opencontainers.image.source="${SOURCE_URL}" \
+      org.opencontainers.image.revision="${VCS_REF}" \
+      org.opencontainers.image.created="${BUILD_DATE}"
+
+EXPOSE 8080
+USER 1000:1000
+ENTRYPOINT ["dumb-init", "--"]
+CMD ["python", "-m", "uber_login"]

uber_mcp-0.1.2/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 benjamin-di
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

uber_mcp-0.1.2/Makefile

@@ -0,0 +1,10 @@
+.PHONY: bootstrap check lock
+bootstrap:
+	uv sync --locked
+check:
+	./scripts/test.sh
+# After editing dependencies in pyproject.toml: refresh uv.lock and the images' hash locks.
+lock:
+	uv lock
+	uv export --frozen --no-dev --no-emit-project --no-header --quiet -o requirements-runtime.lock
+	uv export --frozen --no-dev --extra login --no-emit-project --no-header --quiet -o requirements-login.lock