minutework 0.1.6 → 0.1.8

package/EXTERNAL_ALPHA.md

@@ -15,6 +15,10 @@ npx minutework link
 
 From there, the current external alpha supports two post-link lanes.
 
+The shipped `tenant-app` starter is the combined web surface: public routes at
+the root, a private `/app` workspace, and a MinuteWork-managed public-content
+path over the runtime-baseline `mw.core.site` contract.
+
 ### Developer-local broker lane
 
 Use `minutework session` when you want MinuteWork to assemble the workspace
@@ -54,6 +58,12 @@ The broker fails closed when a live session is already active, the selected
 engine is missing, a prior running record has gone stale, or the launch is
 interrupted or fails mid-session.
 
+Generated workspaces receive a root `CLAUDE.md` plus exported `skills/`
+guidance so the local coding agent sees the combined-web, snapshot-delivery,
+and `mw.core.site` baseline workflow.
+
+Runtime-only Claude hooks remain excluded from the generated workspace export.
+
 ### Local preview and deploy lane
 
 Use the existing local preview/test loop and hosted preview deploy lane when
@@ -89,10 +99,15 @@ If you run `minutework init` **without** `--starter` in an interactive terminal,
 The generated `tenant-app/.env.example` defaults to:
 
 ```dotenv
+MW_CONTENT_API_TOKEN=
 MW_PUBLIC_SITE_PROPERTY_KEY=main-site
 MW_PUBLIC_SITE_ENV=preview
 ```
 
+`MW_CONTENT_API_TOKEN` stays server-only. `MW_PUBLIC_SITE_ENV=preview` targets
+preview or draft-safe reads, while `MW_PUBLIC_SITE_ENV=live` is publication-safe
+and intended for published snapshot delivery.
+
 If the workspace cannot compile hosted preview release metadata for the linked property, deploy fails closed.
 
 ## What `deploy --preview` does
@@ -136,4 +151,6 @@ The CLI does not fabricate success. If the backend cannot materialize a hosted p
 - Package versioning stays manual for the first alpha.
 - Publish with npm dist-tag `alpha`.
 - Use the manual GitHub Actions workflow at `.github/workflows/minutework-cli-alpha-publish.yml`.
-- Keep dry-run enabled until the package version and changelog are ready.
+- Treat `pnpm --dir packages/minutework-cli smoke:starter` as a hard publish
+  gate alongside package tests and build, because the workflow does not run it
+  automatically.

package/README.md

@@ -12,6 +12,10 @@ The current external alpha is intentionally narrow:
 - Deploy surface: `minutework deploy --preview`
 - Deferred: `--live`, additional local coding engines, sidecar/runtime-backed deploys, marketplace publish flows
 
+The shipped `tenant-app` starter is the combined web surface: public routes at
+the root plus a private `/app` workspace. Public-site content follows the
+MinuteWork-managed `mw.core.site` baseline and published-snapshot flow.
+
 The CLI fails closed when the backend cannot provide typed release metadata, deploy status, receipts, activation state, or rollback state. It does not claim a successful deploy when the provider substrate is unavailable.
 
 ## Install
@@ -70,6 +74,9 @@ minutework session resume
 - The broker fails closed on live overlap, missing engine binaries, stale
   session records, interrupts, and launch failures instead of allowing
   overlapping phantom sessions.
+- Generated workspaces receive a root `CLAUDE.md` plus exported `skills/`
+  guidance tailored to the combined web and published-site workflow.
+- Runtime-only Claude hooks are not exported into the generated workspace.
 
 ### Local preview and deploy lane
 
@@ -84,9 +91,9 @@ minutework deploy --preview
 
 Workspaces created with **both** `tenant-app` and `sidecar` run `poetry install` in `sidecar` automatically on `pnpm install` (requires [Poetry](https://python-poetry.org/) on your `PATH`). Sidecar-only scaffolds have no root `package.json`; run `poetry install` in `sidecar` once before `minutework dev`.
 
-`link` provisions or resolves the default published-site property for the active tenant and stores that property key in repo-local state. The generated `tenant-app/.env.example` defaults to `MW_PUBLIC_SITE_PROPERTY_KEY=main-site` and `MW_PUBLIC_SITE_ENV=preview`.
+`link` provisions or resolves the default published-site property for the active tenant and stores that property key in repo-local state. The generated `tenant-app/.env.example` includes the standard site env contract: `MW_CONTENT_API_TOKEN`, `MW_PUBLIC_SITE_PROPERTY_KEY`, and `MW_PUBLIC_SITE_ENV`. It defaults to `MW_PUBLIC_SITE_PROPERTY_KEY=main-site` and `MW_PUBLIC_SITE_ENV=preview`.
 
-`deploy --preview` always revalidates and recompiles before submit, prints a local-vs-remote diff, requires confirmation unless `--yes` is passed, polls typed receipts until a terminal state, and persists the last known preview deploy state under `.minutework/deploy/preview/status.json`.
+`deploy --preview` always revalidates and recompiles before submit, prints a local-vs-remote diff, requires confirmation unless `--yes` is passed, polls typed receipts until a terminal state, and persists the last known preview deploy state under `.minutework/deploy/preview/status.json`. This alpha is preview-first; live public delivery remains follow-on.
 
 ## Bug reporting
 

package/assets/claude-local/CLAUDE.md.template

@@ -4,6 +4,9 @@ Use this workspace to build or extend MinuteWork app packs. `tenant-app` and
 `sidecar` are implementation surfaces inside the pack; choose the smallest
 surface that fits the request.
 
+`tenant-app` is the combined web starter: public site routes at the root plus a
+private authenticated workspace under `/app`.
+
 ## Starter Choice Matrix
 
 The shipped product unit is an `app pack`. `tenant-app` and `sidecar` are
@@ -32,14 +35,31 @@ a concrete backend responsibility such as:
 - internal API endpoint
 - external system sync
 
+## Public Site Defaults
+
+- Treat `mw.core.site` as a runtime baseline capability that already exists. Do
+  not model site work as "installing" or "reconciling" the baseline.
+- Author public content against runtime/CMS records and published-web flows, not
+  against a fixed in-repo marketing template.
+- Use `MW_CONTENT_API_TOKEN`, `MW_PUBLIC_SITE_PROPERTY_KEY`, and
+  `MW_PUBLIC_SITE_ENV` as the standard site env contract.
+- `MW_PUBLIC_SITE_ENV=preview` is for preview or draft-safe reads.
+- `MW_PUBLIC_SITE_ENV=live` is for publication-safe delivery.
+- Anonymous live delivery should prefer published snapshots instead of direct
+  runtime reads on every request.
+- `content_structure` is open and ordered. Extend it through adjacent schemas or
+  extension packs when needed instead of bloating the baseline.
+
 ## Hard Rules
 
 - Do not put browser auth or tenant-facing login flows in `sidecar`.
 - Do not put heavy compute, workers, or integration orchestration in `tenant-app` route handlers.
 - Do not choose `both` by default unless the app clearly has both UI and backend-runtime responsibilities.
 - Public anonymous pages usually belong in `tenant-app` and ship through the hosted public-release path, not a runtime-local sidecar.
+- Do not use `sidecar` as the default public-site renderer for pricing, docs,
+  blog, or landing pages.
 - `sidecar` is internal-first by default.
 
 See the files under `skills/` for deeper guidance on schema authoring,
-app-pack structure, sidecar generation, event flows, ontology mapping, and
-import boundaries.
+app-pack structure, published web, content sections, sidecar generation, event
+flows, ontology mapping, and import boundaries.

package/assets/claude-local/skills/README.md

@@ -4,3 +4,12 @@ Place focused MinuteWork architecture skills here.
 
 These files are part of the canonical Builder common bundle and are allowlisted
 for developer-local export. Skills are shared across all engine renderers.
+
+They should describe the shipped authoring model external workspaces actually
+receive:
+
+- `tenant-app` is the combined public plus private web starter
+- `mw.core.site` is a runtime baseline capability
+- public authoring is runtime/CMS-backed
+- anonymous live delivery should prefer published snapshots
+- tenant-specific extensions belong in adjacent schemas or extension packs

package/assets/claude-local/skills/app-pack-authoring.md

@@ -3,6 +3,10 @@
 An `app pack` is the shipped product unit.
 
 - Start with declarative schema/manifests and add code surfaces only when needed.
-- Use `tenant-app` for web UI/BFF concerns.
+- Use `tenant-app` for the combined public-site plus private-app web surface.
 - Use `sidecar` for internal APIs, workers, integrations, or Python-heavy compute.
+- Treat `mw.core.site` as a runtime baseline capability and compose against it
+  instead of trying to install it from the workspace.
+- Public-site authoring should stay CMS/runtime-backed, while anonymous live
+  delivery should prefer published snapshots.
 - Keep platform-owned runtime source untouched; author only workspace-local generated source.

package/assets/claude-local/skills/content-structure-and-sections.md

@@ -0,0 +1,15 @@
+# Content Structure And Sections
+
+Use this skill when the request touches CMS page models, section rendering, or
+public content composition.
+
+- Treat `content_structure` as an open, ordered section graph, not a closed
+  fixed-template schema.
+- Section types should stay extensible strings so tenant-specific or extension
+  pack sections can be added without rewriting the baseline.
+- Keep ordering explicit with stable page and section sort fields where the
+  contract expects them.
+- Map `section_type` values to UI components in the web surface instead of
+  collapsing everything into one page model.
+- Put tenant-specific additions in adjacent schemas or extension packs instead
+  of bloating `mw.core.site`.

package/assets/claude-local/skills/published-web-and-mw-core-site.md

@@ -0,0 +1,17 @@
+# Published Web And mw.core.site
+
+Use this skill when the request touches public-site delivery, published-web
+flows, or the default MinuteWork site model.
+
+- Treat `mw.core.site` as a runtime baseline capability that already exists.
+- `tenant-app` is the combined web starter for public routes plus the private
+  `/app` workspace.
+- Author public content against runtime/CMS records, not a fixed in-repo site
+  starter.
+- Use `published-web` and hosted public-release flows for anonymous delivery.
+- `MW_CONTENT_API_TOKEN`, `MW_PUBLIC_SITE_PROPERTY_KEY`, and
+  `MW_PUBLIC_SITE_ENV` are the standard site env variables.
+- `MW_PUBLIC_SITE_ENV=preview` is for preview or draft-safe reads.
+- `MW_PUBLIC_SITE_ENV=live` is for publication-safe reads only.
+- Anonymous live traffic should prefer published snapshots instead of direct
+  runtime reads on every request.

package/assets/claude-local/skills/schema-engine.md

@@ -6,3 +6,7 @@ Use this skill when the request needs tenant-defined data structures.
 - Prefer declarative schema changes before adding custom code surfaces.
 - Index only the fields that need query/filter behavior.
 - Treat runtime-backed content as the authoring source; publish safe snapshots for anonymous public delivery.
+- Treat `mw.core.site` as already present in the runtime baseline.
+- Keep `content_structure` open and ordered. Extend the baseline through
+  adjacent schemas or extension packs instead of hard-coding a fixed page
+  template into the schema layer.

package/assets/claude-local/skills/secrets-runtime-bridge.md

@@ -7,3 +7,6 @@ data access.
 - Prefer `secret_ref` style bindings over plaintext credentials.
 - Treat bridge access as explicit and narrow; do not turn it into a generic data bypass.
 - Keep private runtime payloads, traces, and raw tenant data out of public or control-plane surfaces unless a contract explicitly allows projection.
+- Keep `MW_CONTENT_API_TOKEN` server-only.
+- Do not leak preview-only or runtime-private site reads into anonymous live
+  delivery; published snapshots are the safe default for that boundary.

package/assets/claude-local/skills/sidecar-generation.md

@@ -5,5 +5,9 @@ belong in `tenant-app`.
 
 - Good fits: webhook handlers, workers, schedulers, ingestion, internal APIs, Python libraries.
 - Keep browser auth and tenant-facing login flows in `tenant-app`, not here.
+- Keep public-site rendering for pricing, docs, blog, and landing pages in
+  `tenant-app`, not here.
+- Do not use sidecar routes as the default anonymous live delivery path when
+  published snapshots or hosted public delivery are the intended contract.
 - Treat the sidecar as internal-first by default.
 - Do not couple sidecar code directly to the runtime database.

package/assets/templates/fastapi-sidecar/template.schema.json

@@ -24,7 +24,8 @@
       "type": "string",
       "enum": [
         "sidecar_nextjs_private",
-        "sidecar_fastapi_internal"
+        "sidecar_fastapi_internal",
+        "combined_web"
       ]
     },
     "template_profile": {

package/assets/templates/next-tenant-app/.storybook/main.ts

@@ -9,7 +9,7 @@ export default defineMain({
   framework: {
     name: "@storybook/nextjs-vite",
     options: {
-      nextConfigPath: "../next.config.ts",
+      nextConfigPath: "../next.config.mjs",
     },
   },
   staticDirs: ["../public"],

package/assets/templates/next-tenant-app/README.md

@@ -1,6 +1,12 @@
 # Next Tenant App Template
 
-This directory is the canonical combined Next.js web starter for Builder. It is the bundle that Builder will later materialize into `BuilderWorkspace.sandbox_root/app/`.
+This directory is the canonical combined Next.js web starter for Builder.
+
+In the runtime Builder flow, this bundle materializes into
+`BuilderWorkspace.sandbox_root/app/`.
+
+In the external CLI scaffold flow, the same starter is copied into
+`tenant-app/`.
 
 `apps/mw-next-client` is still the repo-side seed used to harden and evolve this scaffold. It is not the runtime template location.
 
@@ -37,6 +43,9 @@ The default built-in adapter is `MinuteWorkPublicSiteContentAdapter`. It calls t
 MinuteWork gateway with a server-only content token and reads the narrow
 `mw.core.site` public-site snapshot contract.
 
+`mw.core.site` is treated as a runtime baseline capability. This starter
+composes against that baseline rather than trying to install it locally.
+
 The gateway response carries an explicit boundary:
 
 - `environment=preview` must declare `source_boundary=runtime_preview`
@@ -105,11 +114,19 @@ Use `pnpm validate` from this directory. It runs:
 6. `typecheck`
 7. `lint`
 8. `test`
-9. `build`
-10. `build-storybook`
+9. `build:validate`
+10. `build-storybook:validate`
 
 `template:validate` validates `template.json` against the bundled `template.schema.json`, so the template remains self-validating after Builder materializes it into a workspace sandbox.
 
+When the CLI scaffolds this starter into `tenant-app/`, the same validation
+contract still applies to that copied workspace surface.
+
+The validation-only build steps inject fixture values for the required
+production env vars and run against a local public-site fixture server, so the
+template can prove its build contract in-repo without weakening the real
+`pnpm build` requirement.
+
 `template:route-contract` verifies that the combined public/private route tree, metadata routes, and content-adapter entrypoints remain present in the template.
 
 Inside the repo, the shared schema at `runtime/builder/templates/template.schema.json` is authoritative. The bundled `template.schema.json` inside this template must stay byte-equivalent, and `template:validate` fails if the two drift.

package/assets/templates/next-tenant-app/next.config.mjs

@@ -0,0 +1,33 @@
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { existsSync } from "node:fs";
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+
+function resolveTurbopackRoot(startDirectory) {
+  let directory = startDirectory;
+
+  while (true) {
+    if (existsSync(path.join(directory, "pnpm-workspace.yaml"))) {
+      return directory;
+    }
+
+    const parent = path.dirname(directory);
+    if (parent === directory) {
+      return startDirectory;
+    }
+    directory = parent;
+  }
+}
+
+const nextConfig = {
+  reactStrictMode: true,
+  typedRoutes: true,
+  // Prefer the nearest workspace root so scaffolded tenant-app packages inside a
+  // monorepo and the in-repo template both resolve dependencies correctly.
+  turbopack: {
+    root: resolveTurbopackRoot(__dirname),
+  },
+};
+
+export default nextConfig;

package/assets/templates/next-tenant-app/package.json

@@ -9,6 +9,7 @@
   "scripts": {
     "dev": "next dev --hostname 127.0.0.1 --port 3000",
     "build": "next build",
+    "build:validate": "node tools/template/with-public-site-fixture.mjs next build",
     "start": "next start -p 3000",
     "lint": "eslint .",
     "test": "vitest run",
@@ -16,12 +17,13 @@
     "template:validate": "node tools/template/validate-template.mjs",
     "template:route-contract": "node tools/template/validate-route-contract.mjs",
     "typecheck": "tsc --noEmit",
-    "validate": "pnpm template:validate && pnpm template:route-contract && pnpm typegen && pnpm design-system:tokens && pnpm design-system:check && pnpm typecheck && pnpm lint && pnpm test && pnpm build && pnpm build-storybook",
+    "validate": "pnpm template:validate && pnpm template:route-contract && pnpm typegen && pnpm design-system:tokens && pnpm design-system:check && pnpm typecheck && pnpm lint && pnpm test && pnpm build:validate && pnpm build-storybook:validate",
     "design-system:tokens": "node tools/design-system/build-token-manifest.mjs",
     "design-system:check": "node tools/design-system/run-checks.mjs",
     "design-system:check:staged": "node tools/design-system/run-checks.mjs --staged",
     "storybook": "storybook dev -p 6006",
     "build-storybook": "storybook build",
+    "build-storybook:validate": "node tools/template/with-public-site-fixture.mjs storybook build",
     "design-system:visual": "playwright test -c tools/design-system/playwright.config.mjs"
   },
   "dependencies": {

package/assets/templates/next-tenant-app/public/.gitkeep

@@ -0,0 +1 @@
+

package/assets/templates/next-tenant-app/src/app/(cms)/[...path]/page.tsx

@@ -0,0 +1,73 @@
+import type { Metadata } from "next";
+import { notFound } from "next/navigation";
+
+import { ContentStructureRenderer } from "@/features/public-shell/components/section-renderer";
+import { PublicSiteShell } from "@/features/public-shell/components/public-site-shell";
+import { getPageByPath, getSiteConfig, listPages } from "@/lib/content/adapter.server";
+import { buildPublicMetadata } from "@/lib/public-site";
+
+type PageParams = { path: string[] };
+
+export async function generateStaticParams(): Promise<PageParams[]> {
+  const pages = await listPages("published");
+  return pages
+    .filter((p) => p.path !== "/")
+    .map((p) => ({
+      path: p.path.replace(/^\//, "").split("/").filter(Boolean),
+    }));
+}
+
+export async function generateMetadata({
+  params,
+}: {
+  params: Promise<PageParams>;
+}): Promise<Metadata> {
+  const { path: pathSegments } = await params;
+  const pagePath = `/${pathSegments.join("/")}`;
+  const page = await getPageByPath(pagePath);
+
+  if (!page) return {};
+
+  const seo = page.seo_metadata;
+  return buildPublicMetadata({
+    title: seo?.title ?? page.title,
+    description: seo?.description ?? page.title,
+    path: pagePath,
+  });
+}
+
+export default async function CmsPage({
+  params,
+}: {
+  params: Promise<PageParams>;
+}) {
+  const { path: pathSegments } = await params;
+  const pagePath = `/${pathSegments.join("/")}`;
+  const [siteConfig, page] = await Promise.all([
+    getSiteConfig(),
+    getPageByPath(pagePath),
+  ]);
+
+  if (!page || page.status === "draft") {
+    notFound();
+  }
+
+  const sections = page.content_structure?.sections ?? [];
+
+  return (
+    <PublicSiteShell siteConfig={siteConfig} activeHref={pagePath}>
+      <div className="space-y-8">
+        <div className="space-y-3">
+          <h1 className="text-3xl font-semibold tracking-tight sm:text-4xl">
+            {page.title}
+          </h1>
+        </div>
+        {sections.length > 0 ? (
+          <ContentStructureRenderer sections={sections} />
+        ) : (
+          <p className="text-muted-foreground">This page has no content yet.</p>
+        )}
+      </div>
+    </PublicSiteShell>
+  );
+}

package/assets/templates/next-tenant-app/src/features/dashboard/components/tenant-dashboard.tsx

@@ -96,9 +96,11 @@ export function TenantDashboard({
           </div>
           <p className="text-sm leading-7 text-muted-foreground">
             The canonical template bundle is meant to be copied into
-            `BuilderWorkspace.sandbox_root/app/` before an agent edits it. The
-            copied workspace becomes the writable app root; this source bundle stays
-            governed and read-only in normal authoring flows.
+            a writable workspace copy before an agent edits it. In runtime
+            Builder flows that writable root lives at
+            `BuilderWorkspace.sandbox_root/app/`; in CLI scaffolds the same
+            starter lands in `tenant-app/`. This source bundle stays governed
+            and read-only in normal authoring flows.
           </p>
         </PanelFrame>
       </section>

package/assets/templates/next-tenant-app/src/features/public-shell/components/section-renderer.test.ts

@@ -0,0 +1,38 @@
+import { describe, expect, it } from "vitest";
+
+import type { ContentSection } from "@/lib/content/contracts";
+
+describe("section-renderer", () => {
+  it("sorts sections by sort_order", async () => {
+    const sections: ContentSection[] = [
+      { section_key: "b", section_type: "text", sort_order: 2, data: { heading: "B" } },
+      { section_key: "a", section_type: "text", sort_order: 0, data: { heading: "A" } },
+      { section_key: "c", section_type: "text", sort_order: 1, data: { heading: "C" } },
+    ];
+
+    const sorted = [...sections].sort(
+      (a, b) => (a.sort_order ?? 0) - (b.sort_order ?? 0),
+    );
+
+    expect(sorted.map((s) => s.section_key)).toEqual(["a", "c", "b"]);
+  });
+
+  it("accepts arbitrary section types without error", () => {
+    const sections: ContentSection[] = [
+      {
+        section_key: "custom",
+        section_type: "my_custom_widget",
+        data: { arbitrary: "tenant-defined", nested: { deep: true } },
+      },
+      {
+        section_key: "hero",
+        section_type: "hero_banner",
+        data: { heading: "Welcome" },
+      },
+    ];
+
+    // Content types are open strings — no validation error.
+    expect(sections.length).toBe(2);
+    expect(sections[0]!.section_type).toBe("my_custom_widget");
+  });
+});

package/assets/templates/next-tenant-app/src/features/public-shell/components/section-renderer.tsx

@@ -0,0 +1,145 @@
+import { PanelFrame } from "@/design-system/patterns/panel-frame";
+import type { ContentSection } from "@/lib/content/contracts";
+
+/**
+ * Registry of section_type -> React component.
+ *
+ * Section types are extensible strings.  Unknown types render a
+ * generic fallback.  Tenant-specific or extension-pack sections
+ * can be added here without modifying the baseline.
+ */
+
+function HeroSection({ section }: { section: ContentSection }) {
+  const { heading, subheading, body, cta_label, cta_href } = section.data as Record<
+    string,
+    string | undefined
+  >;
+  return (
+    <PanelFrame tone="floating" radius="xl" padding="lg" className="space-y-4 border-border/70">
+      <div className="space-y-3">
+        {subheading ? (
+          <p className="text-sm font-semibold uppercase tracking-[0.28em] text-muted-foreground">
+            {subheading}
+          </p>
+        ) : null}
+        <h2 className="text-3xl font-semibold tracking-tight text-balance sm:text-4xl">
+          {heading || section.section_key}
+        </h2>
+        {body ? <p className="max-w-2xl text-base leading-8 text-muted-foreground">{body}</p> : null}
+      </div>
+      {cta_label && cta_href ? (
+        <a
+          href={cta_href}
+          className="inline-flex items-center gap-2 rounded-md bg-primary px-4 py-2 text-sm font-medium text-primary-foreground"
+        >
+          {cta_label}
+        </a>
+      ) : null}
+    </PanelFrame>
+  );
+}
+
+function TextSection({ section }: { section: ContentSection }) {
+  const { heading, body, eyebrow } = section.data as Record<string, string | undefined>;
+  return (
+    <PanelFrame tone="raised" radius="xl" padding="lg" className="space-y-3 border-border/70">
+      {eyebrow ? (
+        <p className="text-xs font-semibold uppercase tracking-[0.24em] text-muted-foreground">
+          {eyebrow}
+        </p>
+      ) : null}
+      <h3 className="text-xl font-semibold tracking-tight">{heading || section.section_key}</h3>
+      {body ? <p className="text-sm leading-7 text-muted-foreground">{body}</p> : null}
+    </PanelFrame>
+  );
+}
+
+function FeatureGridSection({ section }: { section: ContentSection }) {
+  const { heading, items } = section.data as {
+    heading?: string;
+    items?: { title: string; description?: string; icon?: string }[];
+  };
+  return (
+    <div className="space-y-4">
+      {heading ? <h3 className="text-xl font-semibold tracking-tight">{heading}</h3> : null}
+      <div className="grid gap-4 sm:grid-cols-2 lg:grid-cols-3">
+        {(items ?? []).map((item) => (
+          <PanelFrame
+            key={item.title}
+            tone="raised"
+            radius="xl"
+            padding="lg"
+            className="space-y-2 border-border/70"
+          >
+            <h4 className="font-semibold">{item.title}</h4>
+            {item.description ? (
+              <p className="text-sm text-muted-foreground">{item.description}</p>
+            ) : null}
+          </PanelFrame>
+        ))}
+      </div>
+    </div>
+  );
+}
+
+function GenericSection({ section }: { section: ContentSection }) {
+  const { heading, body, eyebrow } = section.data as Record<string, string | undefined>;
+  return (
+    <PanelFrame tone="raised" radius="xl" padding="lg" className="space-y-3 border-border/70">
+      {eyebrow ? (
+        <p className="text-xs font-semibold uppercase tracking-[0.24em] text-muted-foreground">
+          {eyebrow}
+        </p>
+      ) : null}
+      <h3 className="text-xl font-semibold tracking-tight">
+        {heading || section.section_type}
+      </h3>
+      {body ? <p className="text-sm leading-7 text-muted-foreground">{body}</p> : null}
+    </PanelFrame>
+  );
+}
+
+const SECTION_RENDERERS: Record<
+  string,
+  (props: { section: ContentSection }) => React.ReactNode
+> = {
+  hero_banner: HeroSection,
+  hero: HeroSection,
+  text: TextSection,
+  text_block: TextSection,
+  feature_grid: FeatureGridSection,
+};
+
+/**
+ * Render a single content section by its section_type.
+ *
+ * Known types get specialized renderers.  Unknown types get a generic
+ * fallback that renders heading + body from the section data.
+ */
+export function SectionRenderer({ section }: { section: ContentSection }) {
+  const Renderer = SECTION_RENDERERS[section.section_type] ?? GenericSection;
+  return <Renderer section={section} />;
+}
+
+/**
+ * Render an ordered list of content sections from a page's content_structure.
+ *
+ * Sections are sorted by sort_order (if present), then rendered in order.
+ */
+export function ContentStructureRenderer({
+  sections,
+}: {
+  sections: ContentSection[];
+}) {
+  const sorted = [...sections].sort(
+    (a, b) => (a.sort_order ?? 0) - (b.sort_order ?? 0),
+  );
+
+  return (
+    <div className="grid gap-6">
+      {sorted.map((section) => (
+        <SectionRenderer key={section.section_key} section={section} />
+      ))}
+    </div>
+  );
+}

package/assets/templates/next-tenant-app/src/lib/content/adapter.server.test.ts

@@ -302,9 +302,9 @@ describe("public content adapter", () => {
             }
 
             return publicSiteFixtureSnapshot.blog.map((entry) => ({
-              ...entry,
+              ...toBlogEntrySummary(entry),
               slug: ["release", "v1"],
-            }));
+            })) as unknown as Awaited<ReturnType<PublicContentAdapter["listEntries"]>>;
           },
         }),
     }));