Strategy and tradingTrading client
iOS authentication
Use Supabase user authentication in the native client without shipping privileged service credentials.
iOS authentication — contract and behavior
- AppConfig contains the Supabase URL and publishable anon key appropriate for a public client.
- The native session represents the signed-in user and gates the hosted trading surface.
- Service-role operations and model-router signing happen on the server, never in Swift client code.
- Sign-out removes local session state and returns the UI to the authentication gate.