Status: accepted · Date: 2026-11-06 · Related: ADR-0003, ADR-0015
Enforcement: a mobile test that the root layout opens the app from a local household profile with no session present.
The template guards its mobile root layout on a Better Auth session. Varu's promise is that the kit, plan, vault and crisis mode work without an account and without a server, and crisis mode must open offline in under a second.
Decision
- The root layout guards on a local household profile, not on a session. No profile means onboarding; a profile means the app.
- Better Auth stays, only for family sync, municipality users and list editors. Signing in is an optional step reached from family sync, never a gate.
- Household members are people in the household record, not Users. A Member of a household is not a Better Auth Member of an Organization. See
CONTEXT.md. - Pro is tied to the store purchase, not to an account; cancelling in the store leaves the kit on the device.
Consequences
- Template demos that assume a signed-in user (todos, organizations) leave mobile navigation in T05.
- Support cannot look up a household; there is nothing to look up.
- Family sync needs an account, which is the first place the app asks for an email.