Grant new users a three-day signup trial

web/core.py

@@ -179,6 +179,7 @@ def _bind_optional_supabase_identity(request: Request) -> None:
     request.state.auth_user_id = identity.user_id
     request.state.auth_email = identity.email
     request.state.auth_points = identity.points
+    request.state.auth_created_at = identity.created_at
 
 
 def _resolve_auth_points(request: Request) -> int:

web/routes.py

@@ -275,10 +275,15 @@ async def auth_me(request: Request):
 
     if SUPABASE_ENTITLEMENT.enabled and user_id:
         try:
-            latest_subscription = SUPABASE_ENTITLEMENT.get_latest_active_subscription(
+            latest_subscription = SUPABASE_ENTITLEMENT.ensure_signup_trial(
                 user_id,
-                respect_requirement=False,
+                created_at=getattr(request.state, "auth_created_at", None),
             )
+            if not latest_subscription:
+                latest_subscription = SUPABASE_ENTITLEMENT.get_latest_active_subscription(
+                    user_id,
+                    respect_requirement=False,
+                )
             if (
                 not latest_subscription
                 and getattr(PAYMENT_CHECKOUT, "enabled", False)