Migrate Python tooling to UV and Ty

[frgfm]

Summary

• Replace Poetry metadata and poetry.lock with a UV workspace and a single root uv.lock.
• Split dependencies into UV groups for server, client, quality, tests, docs, and e2e usage.
• Replace Mypy with Ty in local checks, CI, and client quality extras.
• Run Docker and CI dependency installs through uv sync/uv run instead of Poetry exports.

Main choices

• Kept the backend as a non-package application with tool.uv.package = false; pyroclient remains the only publishable package and is included as a workspace member.
• Put backend runtime dependencies in a server dependency group rather than root project.dependencies, so Docker/CI can install exact slices from the lockfile.
• Added a dependency sync checker that tracks UV/Ruff/Ty/Prek versions across pyproject, Dockerfiles, and workflows.
• Preserved missing-import tolerance by configuring Ty with unresolved-import = "warn", then fixed or locally suppressed migration-specific diagnostics.
• Updated the backend test AsyncClient fixture to use ASGITransport(app=...), matching current HTTPX syntax.
• Made client tests use the dev compose superadmin credentials explicitly, so CI job env does not break auth against docker-compose.dev.yml.
• Added client auth setup assertions so future login failures show status/body instead of KeyError: access_token.
• Made the migration check upgrade to head before testing the downgrade/upgrade cycle.

Validation

• make venv
• uv lock --check
• uv sync --locked --all-groups --all-packages --no-install-project
• make quality
• make test (481 passed)
• make test-client (14 passed)
• Exact client CI sequence with dummy env present and command-level superadmin override (14 passed)
• Bad client credentials now fail as AssertionError: {"detail":"Invalid credentials."}, not KeyError: access_token
• Migration check command from .github/workflows/backend.yml completed with --- Migration cycle successful ---
• make docs-client
• make e2e
• Docker smoke: docker compose -f docker-compose.dev.yml up -d --build --wait plus backend /status check
• YAML parse check for workflows, Dependabot, and pre-commit config
• docker compose -f docker-compose.dev.yml config --quiet

Deliberately excluded

• AGENTS.md
• CLAUDE.md
• docker/minio/setup-s3.sh
• unrelated untracked workflows not needed for this migration

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	setuptools@​82.0.1
	sphinx@​5.3.0
	docutils@​0.17.1
	furo@​2023.3.27
	sqlalchemy-stubs@​0.4
	python-magic@​0.4.27
	pytest@​9.0.3
	jinja2@​3.0.3
	sentry-sdk@​2.59.0
	shapely@​2.1.2
	uvicorn@​0.46.0
	pyproj@​3.7.2
	wheel@​0.47.0
	boto3@​1.43.6 ⏵ 1.35.99
	python-dotenv@​1.2.2
	requests@​2.34.0
	sphinx-copybutton@​0.5.2
	ty@​0.0.33
	ruff@​0.15.12
	python-multipart@​0.0.27
	sphinxemoji@​0.3.2
	prek@​0.3.12
	pytest-cov@​4.1.0
	pytest-pretty@​1.3.0
	pytest-asyncio@​0.21.2
	pyjwt@​2.12.1
	pydantic-settings@​2.14.1
	types-requests@​2.33.0.20260508
	sqlmodel@​0.0.24
	types-python-dateutil@​2.9.0.20260508
	types-passlib@​1.7.7.20260211

View full report

[codecov]

Codecov Report

❌ Patch coverage is 94.73684% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 89.90%. Comparing base (dca6654) to head (00557f2).

Files with missing lines	Patch %	Lines
src/app/main.py	50.00%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #590      +/-   ##
==========================================
- Coverage   89.92%   89.90%   -0.03%     
==========================================
  Files          55       55              
  Lines        2451     2456       +5     
==========================================
+ Hits         2204     2208       +4     
- Misses        247      248       +1     

Flag	Coverage Δ
backend	?
client	?

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[MateoLostanlen]

Hello @frgfm ,

Thanks for this PR.

I was planning to switch from Poetry to uv, so this is perfect, thank you.

I really like the idea of moving to Ty, and the Astral team is doing great work. Do you have any concerns about the project still being relatively young?

Could you also explain the idea behind this new backend CI workflow, and why not reuse the existing ones?

[frgfm]

I really like the idea of moving to Ty, and the Astral team is doing great work. Do you have any concerns about the project still being relatively young?

None at all, I had the same concerns a while back and since I migrated all my other projects, I feel like Ty is way more mature and serious than mypy (performance wise but also quality wise, remember all those mypy ignore). The nice part is that it's so fast, you can use it as a language server and pre commit hook (if you had done that with mypy, you would be waiting 30sec every time)

Could you also explain the idea behind this new backend CI workflow, and why not reuse the existing ones?

Yup I need to clear up some CI job redundancies actually!