Tracker: the production-readiness pass — T1, T3-T11 closed, and B5 fixed
Ten of the eleven open tasks are done and each row says what actually changed.
T2 narrows to what is genuinely left: app.js's DOM event wiring and inspector
rendering. The pure logic and the escaping boundary are covered now, and
boot.test.mjs holds the ids the page has to provide.
The pass also found a bug. Making the gate trustworthy meant seeding city-fuzz's
traffic — it drove twenty cities with unseeded Math.random, which is why the full
suite failed where the file alone passed — and hunting that drive turned up a bus
leaving the city grid: a recorded junction decision held only a road INDEX, and
an index is not a junction, so a decision to carry on through index 0 one way was
still counted as a decision when the vehicle came back the other way, where there
is no road. The record names the direction now, the stop-for-a-space path clears
it, and _decideTurn refuses to act on a carry-on record where carrying on is not
possible.
Also recorded: the two traps this cost time to learn — a fresh query string does
not re-evaluate an already-imported ES module (the first login test was silently
inert because of it), and a test that configures its own preconditions can hide
the bug it exists to catch.
Three pages updated with the new facts: the stream caps and the same-origin check
(Server API), the checksum verification and the narrow install default (Hosting),
and the new tests plus the seeding rule (Architecture).
Resync the wiki with the code, and add a Project Tracker
The wiki had not been touched since 2026-08-23, and 38 commits landed on the
code after that. Some of what it said had been wrong for weeks.
Hosting and Deployment was the worst of it: it documented an nginx :443 ->
Caddy :8077 topology with certbot, a certificate hook and /etc/caddy paths.
None of that has existed since RoomCAD moved behind the host's master Caddy —
the real path is master Caddy -> RoomCAD's own Caddy on loopback :8081 ->
server.py, with no certbot anywhere and the master answering ACME itself. It
now describes the architecture that is actually deployed, the two service
accounts, the systemd sandbox, and why deploy.sh chowns the database.
Architecture and Development claimed city.js was ~630 lines (it is ~5200) and
that app.js is the only module that touches the network (login.js does too,
and plan.js/store.js do no I/O at all). It now has accurate sizes and module
responsibilities, the test runner and CI, and the newer invariants — the sky
dome must contain the walkable city, and frames must stop when the 3D view is
not on screen.
Server API and Storage gained the endpoint it was missing (/api/live-check),
the baseSeq staleness rule, the JSON-object body requirement, and the note
that rooms.db.sql is structure only.
Troubleshooting and Live Collaboration lost their nginx instructions and
gained the service-account failure mode and the two-file Caddy ownership.
Project Tracker is new. There was no tracker anywhere — not in the wiki, not
in issues (the repository has never had one), not in milestones. It records
what this audit fixed, the 4 bugs and 11 tasks still open, and the handful of
things that are deliberate and must not be 'fixed' by accident.
Rework every page: simpler, example-led, and matching the code
The wiki had drifted from the app. The worst of it:
- Live Collaboration described an auto-save model that no longer exists
("editing auto-saves, debounced ~600 ms"). The real flow is deliberate:
Join Live, Live Active, Leave Live Mode, with unsaved drafts on a
separate in-memory channel that never creates versions.
- Server API listed six endpoints and no authentication. There are
eleven, all but login behind a session cookie, plus a browser_sessions
table that decides which design a browser reopens.
- File Format documented four furniture kinds; there are ten plus two
ceiling fixtures, and canvas / origin / publicAreas were missing.
- 2D Editor omitted Measure, Public areas and the automatic floor layout.
- 3D Walkthrough claimed the sun advances in real time. It does not — the
hour is a user setting, and the L key switches to placed-lights-only.
Every page is now example-led: a worked bedroom in Getting Started, curl
recipes against the API, a complete valid .rcad document, a two-browser
walkthrough for Live, and copy-pasteable deploy and backup commands.
Architecture gains an Invariants section recording why the shadow bias
must stay zero and why a wall end must cross its neighbour's half
thickness, so the light-leak bug cannot quietly return. Troubleshooting
gains entries for that leak, the fail-closed password file and WebGPU.
All 11 pages checked: no broken internal links.
Rework wiki for the web edition