revert(mobile,trpc,auth): back out the pro-plan gate pending testing

Merged
SA
3mo ago
+7-340

Backs out #6411 — merged prematurely before it was tested or the email/password approach was settled. Restores:

  • No paywall tier / screen (mobile is ungated again)
  • emailAndPassword back to dev/preview-only (no credential sign-in in prod)
  • Seed script removed from the repo
  • No mobile plan middleware / client version header
  • store.config.js review posture back to demoRequired: false with the SIWA-instant-account notes (keeps #6412's dynamic config + version pin, which are needed for metadata:push regardless)

The gate implementation is preserved on the mobile-paywall branch for iteration.

Summary by cubic

Reverts the mobile Pro-plan gate and restores ungated mobile behavior pending testing. Previously, mobile required a paid plan and allowed credential sign-in in production; now, mobile is ungated and email/password sign-in is limited to dev/preview. Paywall UI, TRPC gating, seed script, and the mobile client version header are removed; dynamic store config and version pin remain.

  • Mobile: remove paywall route/screen and plan-based navigation; delete the EmailSignInLink; keep pending-deletion guard.
  • Auth: restrict emailAndPassword to dev/preview only; remove the review demo seeding flow and script.
  • TRPC: drop the mobile paywall enforcement and the x-superset-client header from the client.
  • Store config: set demoRequired: false and update review notes.

Required actions:

  • Stop using db:seed-review; remove APP_REVIEW_EMAIL and APP_REVIEW_PASSWORD from CI/secrets.
  • QA: verify social sign-in flows, onboarding empty state, and account deletion; confirm no paywall route is reachable.

Summary by CodeRabbit

  • New Features
    • Mobile users can access authenticated app features without a paid-plan paywall.
    • Added account deletion handling with sign-out, data refresh, and return to sign-in.
  • Changes
    • Streamlined mobile sign-in by removing the email sign-in option; social sign-in remains available.
    • Production email/password authentication is no longer available.
    • Updated app review guidance to reflect social sign-in, free account creation, and account deletion.
  • Removed
    • Removed paywall screens and review-account setup tooling.