manage-app-shell-auth

Enable or disable the PUBLIC auth control of the app shell — the Sign in / account button in the header and the signed-in visitor's account drawer. Use when the owner says "add login", "add auth", "I want a personal cabinet / my account", "let users sign up", or when you are building an app that NEEDS visitor accounts (a store, a social app, a SaaS dashboard) — and when the owner says "remove login". It is a BUILD-TIME toggle (NEXT_PUBLIC_APP_SHELL_AUTH = left | right | off) written through a validated setter; a change applies after a REBUILD. Self-sufficient: the setter is registered in every agent's MCP client — no Hermes required. The admin login always exists separately; this governs only what your visitors see.