Migrate Graphene → Strawberry (Phases 0–5, combined)

.github/workflows/deploy-to-aws.yaml

@@ -17,7 +17,7 @@ jobs:
 
   call-deploy-workflow:
     needs: call-test-workflow
-    uses: GNS-Science/nshm-github-actions/.github/workflows/deploy-to-aws.yml@main
+    uses: GNS-Science/nshm-github-actions/.github/workflows/deploy-to-aws-uv.yml@main
     with:
       operating-system: 'ubuntu-latest'
       python-version: '3.12'

.github/workflows/dev.yml

@@ -4,7 +4,8 @@ on:
   # schedule:
   #  - cron:  '45 6 * * 0' # At 06:45 on Sunday
   pull_request:
-    branches: [main, deploy-test]
+    # No `branches:` filter — stacked migration PRs target feature branches, not
+    # main/deploy-test, and a filter would silently skip their CI (runbook Trap #14).
 
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
@@ -14,10 +15,10 @@ on:
 
 jobs:
   call-test-workflow:
-    uses: GNS-Science/nshm-github-actions/.github/workflows/python-run-tests.yml@main
+    uses: GNS-Science/nshm-github-actions/.github/workflows/python-run-tests-uv.yml@main
     with:
       operating-systems: "['ubuntu-latest']"
       python-versions: "['3.12']"
-      delete-poetry-lock: ${{ github.event_name == 'schedule' }} # the scheduled build tests against newer dependencies
+      delete-uv-lock: ${{ github.event_name == 'schedule' }} # the scheduled build tests against newer dependencies
       optional-dependency-groups: dev
     secrets: inherit

.yarnrc.yml

@@ -0,0 +1,11 @@
+nodeLinker: node-modules
+
+# Supply-chain hardening (runbook §4.6): refuse npm packages younger than 7 days,
+# but allow project-internal packages through so dev velocity isn't blocked.
+npmMinimalAgeGate: "7d"
+npmPreapprovedPackages:
+  - "nshm-*"
+  - "nzshm-*"
+  - "solvis-*"
+  - "weka-*"
+  - "toshi-*"

DEPLOYMENT.md

@@ -26,12 +26,12 @@ public.ecr.aws/lambda/python:3.12
 ```
 
 ### Update the requirements
-poetry export --without-hashes --format=requirements.txt > requirements.txt
+uv export --no-hashes --no-emit-project --format requirements-txt > requirements.txt
 
 ### test wsgi handlers
 
 ```
-ENABLE_METRICS=0 poetry run yarn sls wsgi serve
+ENABLE_METRICS=0 uv run yarn sls wsgi serve
 ```
 
 ## A Dockerfile

Dockerfile

@@ -19,6 +19,7 @@ RUN dnf install git-core -y &&\
     dnf remove git-core -y &&\
     dnf clean all
 
-# lambda entry point
-CMD ["solvis_graphql_api.solvis_graphql_api.app"]
-ENTRYPOINT ["/bin/bash", "-c"]
+# lambda entry point — Mangum handler (was the serverless-wsgi handler.py workaround).
+# ENTRYPOINT is the base image's Runtime Interface Client (/lambda-entrypoint.sh); CMD is
+# the handler. Matches serverless.yml functions.ecr-app.image.{entryPoint,command}.
+CMD ["solvis_graphql_api.app.handler"]

MIGRATION_v0.9.md

@@ -9,7 +9,7 @@ Since version v0.9.x this API uses a dynamoDB/S3 data_store for the CompositeRup
 Below is the one-time script output from the cli which creates the table and pushes up the archive file.
 
 ```
-% AWS_PROFILE=chrisbc S3_BUCKET_NAME=nzshm22-solvis-graphql-api-prod REGION=ap-southeast-2 DEPLOYMENT_STAGE=prod poetry run cli -T -R ~/Downloads/NSHM_v1.0.4_CompositeSolution.zip NSHM_v1.0.4
+% AWS_PROFILE=chrisbc S3_BUCKET_NAME=nzshm22-solvis-graphql-api-prod REGION=ap-southeast-2 DEPLOYMENT_STAGE=prod uv run cli -T -R ~/Downloads/NSHM_v1.0.4_CompositeSolution.zip NSHM_v1.0.4
 WARNING: optional `toshi` dependencies are not installed.
 Running without `toshi` options
 WARNING: geometry.section_distance() uses the optional dependency pyvista.
@@ -31,7 +31,7 @@ solvis_graphql_api cli uploaded solvis composite solution <solvis_graphql_api.da
 And below is the A/B test showing that Prod/Test APIs are working and agree.
 
 ```
-chrisbc@MLX01 solvis-graphql-api % poetry run cli_ab_test WORK/ab.toml -A prod -B test -v
+chrisbc@MLX01 solvis-graphql-api % uv run cli_ab_test WORK/ab.toml -A prod -B test -v
 WARNING: optional `toshi` dependencies are not installed.
 Running without `toshi` options
 config `WORK/ab.toml` has service keys: dict_keys(['prod', 'test', 'dev'])

README.md

@@ -28,9 +28,7 @@ Java is required .
 
 
  ```
-poetry install
-poetry lock
-poetry shell
+uv sync --all-groups
 ```
 
 Make sure the dynamodb plugin for local tests is installed
@@ -41,20 +39,20 @@ yarn sls dynamodb install
 ### Run full stack locally
 
 ```
-npx serverless dynamodb start --stage local &\
-npx serverless s3 start &\
-SLS_OFFLINE=1 poetry run yarn sls wsgi serve
+# npx serverless dynamodb start --stage local &\
+# npx serverless s3 start &\
+SLS_OFFLINE=1 uv run uvicorn solvis_graphql_api.app:app --reload
 ```
 
 then
 
 ```
-AWS_PROFILE=*** SLS_OFFLINE=1 poetry run python ./solvis_graphql_api/scripts/cli.py WORKING/NSHM_v1.0.4_CompositeSolution.zip NSHM_v1.0.4 -R --ensure_table
+AWS_PROFILE=*** SLS_OFFLINE=1 uv run cli WORKING/NSHM_v1.0.4_CompositeSolution.zip NSHM_v1.0.4 -R --ensure_table
 ```
 
 ### Unit tests
 
-`poetry run pytest` note that some environment variables are set in `setup.cfg`.
+`uv run pytest` note that some environment variables are set in `setup.cfg`.
 
 
 ### Push a composite solution