Address review feedback: split deps, add psycopg2-binary, fix docs

Move pytest and pytest-asyncio to a separate requirements-dev.in so
they don't ship in the production image. Add psycopg2-binary to
requirements.in and remove the separate pip install from the prod
Dockerfile. Update README Quick Start to use Docker commands instead
of make targets. Update CI to check both lockfiles. Regenerate both
lockfiles.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: ambv

.github/workflows/ci.yml

@@ -14,14 +14,29 @@ jobs:
       - uses: actions/checkout@v4
         with:
           fetch-depth: 0
-      - name: Ensure requirements.txt is updated when requirements.in changes
+      - name: Ensure lockfiles are updated when .in files change
         run: |
           BASE=${{ github.event.pull_request.base.sha }}
           HEAD=${{ github.event.pull_request.head.sha }}
           CHANGED=$(git diff --name-only "$BASE" "$HEAD")
-          if echo "$CHANGED" | grep -q 'backend/requirements\.in'; then
-            if ! echo "$CHANGED" | grep -q 'backend/requirements\.txt'; then
-              echo "::error::backend/requirements.in was modified but backend/requirements.txt was not. Please run pip-compile to regenerate the lockfile."
-              exit 1
+          FAIL=0
+          if echo "$CHANGED" | grep -q 'backend/requirements\.in$'; then
+            if ! echo "$CHANGED" | grep -q 'backend/requirements\.txt$'; then
+              echo "::error::backend/requirements.in was modified but backend/requirements.txt was not."
+              FAIL=1
             fi
+            if ! echo "$CHANGED" | grep -q 'backend/requirements-dev\.txt$'; then
+              echo "::error::backend/requirements.in was modified but backend/requirements-dev.txt was not."
+              FAIL=1
+            fi
+          fi
+          if echo "$CHANGED" | grep -q 'backend/requirements-dev\.in$'; then
+            if ! echo "$CHANGED" | grep -q 'backend/requirements-dev\.txt$'; then
+              echo "::error::backend/requirements-dev.in was modified but backend/requirements-dev.txt was not."
+              FAIL=1
+            fi
+          fi
+          if [ "$FAIL" -eq 1 ]; then
+            echo "::error::Please run pip-compile to regenerate lockfiles. See README for instructions."
+            exit 1
           fi

README.md

@@ -18,24 +18,19 @@ This project consists of three main components:
 
 ### Setup & Installation
 ```bash
-# Install all dependencies and set up database
-make setup
+# Copy environment config
+cp .env.example .env
 
-# Or install components separately
-make install          # Install frontend + backend dependencies
-make init-db         # Initialize SQLite database
-make populate-db     # Add mock data for development
+# Build and start all services
+docker compose -f docker-compose.dev.yml up --build
 ```
 
 ### Development
-```bash
-# Start both frontend and backend servers
-make dev
 
-# Or start them individually
-make dev-frontend    # Frontend on http://localhost:9002
-make dev-backend     # Backend API on http://localhost:8000
-```
+Services start automatically with hot reload:
+- Frontend: http://localhost:9002
+- Backend API: http://localhost:8000
+- API Documentation: http://localhost:8000/api/docs
 
 ## Development Commands
 
@@ -59,10 +54,13 @@ make clean                  # Clean up generated files and caches
 
 ### Updating Backend Dependencies
 ```bash
-# Edit backend/requirements.in, then regenerate the lockfile:
+# Edit backend/requirements.in, then regenerate both lockfiles:
 docker run --rm -v "$(pwd)/backend:/app" -w /app python:3.13-slim-bookworm \
-  sh -c "pip install --quiet pip-tools && pip-compile --strip-extras \
-  --generate-hashes --output-file requirements.txt requirements.in"
+  sh -c "pip install --quiet pip-tools && \
+  pip-compile --strip-extras --generate-hashes \
+    --output-file requirements.txt requirements.in && \
+  pip-compile --strip-extras --generate-hashes \
+    --output-file requirements-dev.txt requirements-dev.in"
 
 # Rebuild the backend container:
 docker compose -f docker-compose.dev.yml up --build -d backend
@@ -101,10 +99,10 @@ memory-tracker benchmark /path/to/cpython HEAD~5..HEAD \
 
 ```bash
 # Development with hot reload
-docker-compose -f docker-compose.dev.yml up
+docker compose -f docker-compose.dev.yml up
 
 # Production deployment
-docker-compose up
+docker compose up
 ```
 
 ## Usage Examples

backend/Dockerfile

@@ -12,9 +12,6 @@ RUN apt-get update && apt-get install -y \
 # Copy requirements first to leverage Docker layer caching
 COPY requirements.txt .
 
-# Install PostgreSQL adapter
-RUN pip install --no-cache-dir asyncpg psycopg2-binary
-
 # Install Python dependencies
 RUN pip install --no-cache-dir -r requirements.txt
 

backend/Dockerfile.dev

@@ -7,10 +7,10 @@ RUN apt-get update && apt-get install -y \
     gcc \
     && rm -rf /var/lib/apt/lists/*
 
-COPY requirements.txt .
+COPY requirements-dev.txt .
 
-# Install Python dependencies
-RUN pip install --no-cache-dir -r requirements.txt
+# Install Python dependencies (dev lockfile includes test tooling)
+RUN pip install --no-cache-dir -r requirements-dev.txt
 
 # The source code will be mounted as a volume, so we don't copy it here
 

backend/requirements-dev.in

@@ -0,0 +1,3 @@
+-r requirements.in
+pytest
+pytest-asyncio