Guides
Auth
Add app-user auth, roles, invites, and sessions.
For agents: Declare
auth.mode: "app_users"and roles, then callctx.auth.currentUser(request)orctx.auth.requireRole(request, role).
Reserved Routes
App-user signup, login, logout, session lookup, and invite acceptance live under /_userland/auth/*.
Create admin invites through the control-plane API or CLI after publishing an app that declares the target roles.