Set up Cursor Cloud dev environment

[driver727-pixel]

Summary

Sets up and verifies the development environment for Punch Skater™ (Vite + React client with an Express API proxy) and documents non-obvious startup caveats for future Cloud Agents.

• Adds AGENTS.md with a ## Cursor Cloud specific instructions section: the two services (Vite dev client on 5173, Express proxy on 3001), secret/degraded-mode behavior, the non-secret VITE_IMAGE_API_URL gate for in-app image generation, the multi-line FIREBASE_SERVICE_ACCOUNT_JSON/base64 caveat, and known non-blocking gotchas.
• Update script for future runs: npm install (dependency refresh only).

Environment verification

Check	Command	Result
Install	npm install	pass (810 packages)
Server tests	npm run test:server	pass (402/402)
Build	npm run build	pass
Lint	npm run lint	pre-existing rules-of-hooks errors in src/components/LanguageProfilePanel.tsx (clean checkout)
Dev run	npm run dev + npm start	pass (both serve HTTP 200)
E2E	npx playwright install chromium + npm run test:e2e	20 pass / 8 skip / 13 pre-existing fail (forge-objective-overlay modal)

Hello-world walkthrough (with secrets)

With the provided Firebase / Fal / Stripe secrets, the full authenticated core loop works end-to-end: Email/Password sign-in, forging a card, and real AI artwork generation (proxied through the Express server to Fal and uploaded to Firebase Storage). Saving to the Collection is gated behind a paid tier (product behavior).

Fal image generation verified at the API level (returns a Firebase Storage URL):

POST /api/generate-image → {"images":[{"url":"https://firebasestorage.googleapis.com/.../generated/...png"...}]}

Authenticated: logged-in nav
Rare hit on forge
Forged card with AI-generated art
Second forged card with AI art

Notes

Screen-recording capture was unavailable in this environment (save aborted), so evidence is provided via screenshots and API output. Secrets are read directly from process.env (server) and import.meta.env (Vite), so injected secrets work without a committed .env.

_{To show artifacts inline, enable in settings.}