minutework 0.1.32 → 0.1.33

package/assets/templates/next-tenant-app/src/features/dashboard/components/tenant-dashboard.tsx

@@ -1,13 +1,13 @@
 "use client";
 
 import Link from "next/link";
-import { Blocks, Building2, FolderKanban, ShieldCheck } from "lucide-react";
+import { ArrowRight, Database, ShieldCheck, UserRound } from "lucide-react";
+import type { TenantCustomerSession } from "@minutework/web-auth";
 
 import { PanelFrame } from "@/design-system/patterns/panel-frame";
 import { StatusBadge } from "@/design-system/patterns/status-badge";
 import { Button } from "@/design-system/primitives/button";
 import { appRoutes } from "@/lib/app-routes";
-import type { AuthenticatedPlatformSession } from "@/lib/platform/contracts";
 
 function DashboardMetric({
   label,
@@ -28,40 +28,32 @@ function DashboardMetric({
 
 export function TenantDashboard({
   appName,
-  runtimeCommandExampleEnabled,
   session,
 }: {
   appName: string;
-  runtimeCommandExampleEnabled: boolean;
-  session: AuthenticatedPlatformSession;
+  session: TenantCustomerSession;
 }) {
   return (
     <div className="grid gap-6">
       <PanelFrame tone="floating" radius="xl" padding="lg" className="space-y-6">
         <div className="space-y-2">
-          <p className="text-sm font-semibold uppercase tracking-widest text-muted-foreground">
-            Authenticated Workspace
-          </p>
           <h2 className="text-3xl font-semibold tracking-tight">
-            {appName} ships with a reusable authenticated shell behind `/app`.
+            {appName} workspace
           </h2>
           <p className="max-w-3xl text-sm leading-7 text-muted-foreground">
-            This template is designed for Builder materialization into a writable
-            sandbox. Public storytelling lives at the root, while the
-            authenticated shell, tenant context controls, password settings,
-            route gating, and BFF auth boundary remain real under `/app`.
+            Customer session state is loaded through the MinuteWork web auth SDK.
           </p>
         </div>
 
         <div className="grid gap-3 md:grid-cols-3">
-          <DashboardMetric label="Signed-in user" value={session.user.username} />
           <DashboardMetric
-            label="Active tenant"
-            value={session.active_tenant.tenant_name}
+            label="Customer"
+            value={session.user?.display_name || session.user?.email || "Customer"}
           />
+          <DashboardMetric label="Tenant" value={session.tenant.name} />
           <DashboardMetric
-            label="Membership count"
-            value={`${session.memberships.length}`}
+            label="Role"
+            value={session.customer_membership?.roles.join(", ") || "customer"}
           />
         </div>
       </PanelFrame>
@@ -71,85 +63,58 @@ export function TenantDashboard({
           <div className="flex items-center gap-2">
             <ShieldCheck className="size-5 text-primary" />
             <h3 className="text-xl font-semibold tracking-tight">
-              Auth profile
+              Tenant web auth
             </h3>
           </div>
           <div className="flex flex-wrap gap-3">
-            <StatusBadge tone="primary">platform_session_bff</StatusBadge>
-            <StatusBadge tone="info">Server-owned cookies</StatusBadge>
-            <StatusBadge tone="success">CSRF forwarding</StatusBadge>
+            <StatusBadge tone="primary">tenant_web_auth_sdk</StatusBadge>
+            <StatusBadge tone="info">HttpOnly cookies</StatusBadge>
+            <StatusBadge tone="success">CSRF protected</StatusBadge>
           </div>
           <p className="text-sm leading-7 text-muted-foreground">
-            The browser talks only to this Next.js app. Upstream platform session
-            cookies and CSRF tokens remain server-owned inside route handlers.
-            Request-scoped tenant overrides stay scoped to feature actions unless
-            the explicit session-context APIs are used.
+            Customer sessions stay same-origin through /_mw.
           </p>
         </PanelFrame>
 
         <PanelFrame tone="raised" radius="xl" padding="lg" className="space-y-4">
           <div className="flex items-center gap-2">
-            <Building2 className="size-5 text-primary" />
+            <Database className="size-5 text-primary" />
             <h3 className="text-xl font-semibold tracking-tight">
-              Builder materialization
+              Manifest API
             </h3>
           </div>
           <p className="text-sm leading-7 text-muted-foreground">
-            The canonical template bundle is meant to be copied into
-            a writable workspace copy before an agent edits it. In runtime
-            Builder flows that writable root lives at
-            `BuilderWorkspace.sandbox_root/app/`; in CLI scaffolds the same
-            starter lands in `tenant-app/`. This source bundle stays governed
-            and read-only in normal authoring flows.
+            Query and action calls go through the SDK and are authorized as
+            `tenant_customer`.
           </p>
+          <Button asChild className="w-fit">
+            <Link href={appRoutes.demo}>
+              Open demo
+              <ArrowRight className="size-4" />
+            </Link>
+          </Button>
         </PanelFrame>
       </section>
 
-      <section className="grid gap-6 xl:grid-cols-[1fr,1fr]">
-        <PanelFrame tone="raised" radius="xl" padding="lg" className="space-y-4">
-          <div className="flex items-center gap-2">
-            <Blocks className="size-5 text-primary" />
-            <h3 className="text-xl font-semibold tracking-tight">
-              Scaffold contents
-            </h3>
-          </div>
-          <ul className="space-y-3 text-sm leading-6 text-muted-foreground">
-            <li>Design-system primitives, patterns, docs, and governance checks.</li>
-            <li>Public marketing, docs, and blog routes with a swappable content adapter.</li>
-            <li>Typed platform session BFF routes for login, context, and password flows.</li>
-            <li>Tenant-aware shell components ready for Builder-specific feature work.</li>
-          </ul>
-        </PanelFrame>
-
-        <PanelFrame tone="raised" radius="xl" padding="lg" className="space-y-4">
-          <div className="flex items-center gap-2">
-            <FolderKanban className="size-5 text-primary" />
-            <h3 className="text-xl font-semibold tracking-tight">
-              Optional example surface
-            </h3>
-          </div>
-          <p className="text-sm leading-7 text-muted-foreground">
-            The runtime-command example is bundled as optional sample code rather
-            than the template&apos;s default product identity.
-          </p>
-          {runtimeCommandExampleEnabled ? (
-            <Button asChild className="w-fit">
-              <Link href={appRoutes.runtimeCommandExample}>
-                Open runtime command example
-              </Link>
-            </Button>
-          ) : (
-            <div className="space-y-2">
-              <StatusBadge tone="default">Disabled by default</StatusBadge>
-              <p className="text-sm leading-6 text-muted-foreground">
-                Set `MW_ENABLE_RUNTIME_COMMAND_EXAMPLE=true` in the materialized
-                workspace to enable the example route and its matching gateway
-                proxy handlers.
-              </p>
-            </div>
+      <PanelFrame tone="raised" radius="xl" padding="lg" className="space-y-4">
+        <div className="flex items-center gap-2">
+          <UserRound className="size-5 text-primary" />
+          <h3 className="text-xl font-semibold tracking-tight">
+            Session payload
+          </h3>
+        </div>
+        <pre className="overflow-auto rounded-md bg-muted p-4 text-xs text-muted-foreground">
+          {JSON.stringify(
+            {
+              principal_kind: session.principal_kind,
+              tenant_id: session.tenant.id,
+              customer_membership_id: session.customer_membership?.id,
+            },
+            null,
+            2,
           )}
-        </PanelFrame>
-      </section>
+        </pre>
+      </PanelFrame>
     </div>
   );
 }

package/assets/templates/next-tenant-app/src/features/demo/components/manifest-demo.tsx

@@ -0,0 +1,89 @@
+"use client";
+
+import { useState } from "react";
+import { Database, Play, RefreshCcw } from "lucide-react";
+
+import { PanelFrame } from "@/design-system/patterns/panel-frame";
+import { Button } from "@/design-system/primitives/button";
+import { Input } from "@/design-system/primitives/input";
+import { createIdempotencyKey, mw } from "@/mw/client";
+
+type DemoResult = {
+  data?: unknown;
+  count?: number;
+  created?: boolean;
+  idempotency_key?: string;
+};
+
+export function ManifestDemo() {
+  const [title, setTitle] = useState("Demo record");
+  const [result, setResult] = useState<DemoResult | null>(null);
+  const [error, setError] = useState("");
+  const [pending, setPending] = useState(false);
+
+  async function runQuery() {
+    setPending(true);
+    setError("");
+    try {
+      setResult(await mw.query<DemoResult>("demo.list", { limit: 10 }));
+    } catch (caught) {
+      setError(caught instanceof Error ? caught.message : "Query failed.");
+    } finally {
+      setPending(false);
+    }
+  }
+
+  async function runAction() {
+    setPending(true);
+    setError("");
+    try {
+      setResult(
+        await mw.action<DemoResult>(
+          "demo.create",
+          { title, status: "new" },
+          { idempotencyKey: createIdempotencyKey("demo-create") },
+        ),
+      );
+    } catch (caught) {
+      setError(caught instanceof Error ? caught.message : "Action failed.");
+    } finally {
+      setPending(false);
+    }
+  }
+
+  return (
+    <div className="grid gap-6">
+      <PanelFrame tone="floating" radius="xl" padding="lg" className="space-y-5">
+        <div className="flex items-center gap-2">
+          <Database className="size-5 text-primary" />
+          <h2 className="text-2xl font-semibold tracking-tight">
+            Manifest query and action
+          </h2>
+        </div>
+        <div className="grid gap-3 md:grid-cols-[1fr,auto,auto]">
+          <Input
+            value={title}
+            onChange={(event) => setTitle(event.target.value)}
+            className="h-11"
+            aria-label="Demo title"
+          />
+          <Button type="button" variant="outline" onClick={runQuery} disabled={pending}>
+            <RefreshCcw className="size-4" />
+            Query
+          </Button>
+          <Button type="button" onClick={runAction} disabled={pending}>
+            <Play className="size-4" />
+            Action
+          </Button>
+        </div>
+        {error ? <p className="text-sm text-destructive">{error}</p> : null}
+      </PanelFrame>
+
+      <PanelFrame tone="raised" radius="xl" padding="lg">
+        <pre className="min-h-40 overflow-auto rounded-md bg-muted p-4 text-xs text-muted-foreground">
+          {result ? JSON.stringify(result, null, 2) : "No result yet"}
+        </pre>
+      </PanelFrame>
+    </div>
+  );
+}

package/assets/templates/next-tenant-app/src/features/public-shell/components/static-public-page.tsx

@@ -0,0 +1,58 @@
+import Link from "next/link";
+import { ArrowRight } from "lucide-react";
+
+import { Button } from "@/design-system/primitives/button";
+import { appRoutes } from "@/lib/app-routes";
+
+export function StaticPublicPage({
+  eyebrow,
+  title,
+  body,
+}: {
+  eyebrow: string;
+  title: string;
+  body: string;
+}) {
+  return (
+    <main className="min-h-screen bg-background text-foreground">
+      <div className="mx-auto flex min-h-screen max-w-6xl flex-col px-6 py-6">
+        <nav className="flex items-center justify-between">
+          <Link className="text-sm font-semibold text-foreground" href={appRoutes.publicHome}>
+            Tenant App
+          </Link>
+          <div className="flex items-center gap-2">
+            <Button asChild variant="ghost">
+              <Link href={appRoutes.pricing}>Pricing</Link>
+            </Button>
+            <Button asChild variant="ghost">
+              <Link href={appRoutes.docsIndex}>Docs</Link>
+            </Button>
+            <Button asChild>
+              <Link href={appRoutes.login}>Log in</Link>
+            </Button>
+          </div>
+        </nav>
+
+        <section className="grid flex-1 content-center gap-8 py-16">
+          <div className="max-w-3xl space-y-5">
+            <p className="text-sm font-semibold uppercase tracking-widest text-muted-foreground">
+              {eyebrow}
+            </p>
+            <h1 className="text-5xl font-semibold tracking-tight text-balance sm:text-6xl">
+              {title}
+            </h1>
+            <p className="max-w-2xl text-lg leading-8 text-muted-foreground">
+              {body}
+            </p>
+            <Button asChild className="w-fit">
+              <Link href={appRoutes.login}>
+                Continue
+                <ArrowRight className="size-4" />
+              </Link>
+            </Button>
+          </div>
+        </section>
+      </div>
+    </main>
+  );
+}