Test api ai

AGENTS.md

@@ -30,7 +30,10 @@ Environment: `backend/.env` (`PORT=5000`, `MONGO_URI=mongodb://127.0.0.1:27017/m
 `JWT_SECRET` — signs session tokens, `AUTH_TOKEN_TTL` — how long one lasts, default `7d`;
 see `.env.example`). Without `JWT_SECRET` the API warns and uses an insecure dev key.
 Frontend API URL comes from `NUXT_PUBLIC_API_BASE`
-(default `http://localhost:5000`, read via `runtimeConfig.public.apiBase`).
+(default `http://localhost:5000`, read via `runtimeConfig.public.apiBase`). The frontend image
+builds it empty: the browser then calls `/api` on its own origin, which nginx routes to
+`backend:5000`, while the Nuxt server's own (SSR) `/api` calls go through a `routeRules` proxy
+aimed at `NUXT_API_PROXY_TARGET` (`http://backend:5000` baked in at image build).
 
 There is **no test suite, linter, or typecheck script** configured — don't invent commands.