Web app Windsurf Cascade en app iOS et Android : règles, workflows, Netlify et WebViewGold

---
trigger: always_on
---

# Native app context
- This project is published as iOS and Android apps with WebViewGold, which loads
  https://app.example.com in a native WebView. Every deploy is live in both apps.
- There is no separate mobile codebase. Do not propose React Native, Flutter or Capacitor.
- Detect the app with isNativeApp() in src/lib/platform.ts (user agent contains
  "MyAppNative", set in WebViewGold). No other user agent checks.
- Native features are URL schemes (registerpush://, shareapp://message?=TEXT&url=URL,
  bioauth://, qrcode://). Look up the exact syntax in
  https://www.webviewgold.com/llms-full.txt, call them only inside the app,
  and keep a web fallback.

# Never
- Use a preview or *.windsurf.build URL as the app URL.
- Open OAuth in popups or new windows (the Social Login Helper handles Google).
- Sell digital goods through Stripe links inside the iOS app.
- Ship placeholder text, "coming soon" buttons or dead links.

# Always
- /privacy, /terms and an in-app Delete account (server-side) exist and work.
- Sign in with Apple appears wherever Google or another social login appears.
- Layout works at 320 px; fixed bars pad env(safe-area-inset-top/bottom);
  tap targets are at least 44 px.
- Loading, empty and error states for every fetch.

---
name: store-readiness
description: Audit and fix this web app for App Store and Google Play review before a WebViewGold build
---

1. Read the native-app rule. List the routes and the auth, payment and analytics code.
2. Mobile: open every main route in the Preview at 390 px and 320 px. Fix horizontal
   overflow, tap targets under 44 px, inputs under 16 px font size and fixed bars
   without safe-area padding.
3. Legal: make /privacy and /terms real (based on what the code collects) and link
   them from the footer and the settings screen.
4. Accounts: if sign-up exists, add Delete account in settings (server-side deletion,
   sign out, confirmation) and a public /delete-account page.
5. Sign-in: add Sign in with Apple next to any other social login.
6. States: loading, empty and error-with-retry for every fetch; a friendly 404.
7. App mode: hide store badges, install prompts and builder badges when isNativeApp().
8. Payments: list where digital goods are sold. Report only, change nothing.
9. Run lint, tests and build. Summarize the changes and what I must test on a phone.