@cosmicdrift/kumiko-samples 0.362.0 → 0.363.0

package/packages/bundled-features/src/workflow-runner/event-trigger.ts

@@ -22,7 +22,6 @@ import {
   describeWorkflowStepError,
   getStep,
   SYSTEM_TENANT_ID,
-  type TenantId,
   WORKFLOW_AGGREGATE_TYPE,
   WORKFLOW_RUN_FAILED_TYPE,
   WorkflowStepError,
@@ -71,7 +70,7 @@ export function assertEventTriggerStepsSupported(workflow: WorkflowDefinition):
     steps = buildPipelineSteps(workflow.pipelineDef, {
       type: "workflow-registration-probe",
       payload: {},
-      user: createSystemUser(SYSTEM_TENANT_ID as TenantId),
+      user: createSystemUser(SYSTEM_TENANT_ID),
     });
   } catch (error) {
     throw new Error(

package/samples/apps/ui-walkthrough/package.json

@@ -10,9 +10,11 @@
   "dependencies": {
     "@cosmicdrift/kumiko-bundled-features": "workspace:*",
     "@cosmicdrift/kumiko-dev-server": "workspace:*",
+    "@cosmicdrift/kumiko-document-designer": "workspace:*",
     "@cosmicdrift/kumiko-dispatcher-live": "workspace:*",
     "@cosmicdrift/kumiko-framework": "workspace:*",
     "@cosmicdrift/kumiko-headless": "workspace:*",
+    "@cosmicdrift/kumiko-renderer-mail-html": "workspace:*",
     "@cosmicdrift/kumiko-renderer-web": "workspace:*",
     "@cosmicdrift/kumiko-server-runtime": "workspace:*",
     "react": "^19.2.6",

package/samples/apps/ui-walkthrough/src/app/auth-constants.ts

@@ -18,3 +18,12 @@ export const ADMIN_PASSWORD = "kumiko-admin";
 // `as TenantId`-Cast lokal.
 export const DEV_TENANT_ID = "00000000-0000-4000-8000-000000000001";
 export const BETA_TENANT_ID = "00000000-0000-4000-8000-000000000002";
+
+// Nordlicht Immobilien GmbH: the tenant the document-designer walkthrough runs
+// in. Both users are new; the admin above stays untouched.
+export const NORDLICHT_TENANT_ID = "00000000-0000-4000-8000-000000000003";
+export const NORDLICHT_TENANT_NAME = "Nordlicht Immobilien GmbH";
+export const TENANT_ADMIN_EMAIL = "a.berger@nordlicht-immobilien.de";
+export const TENANT_ADMIN_PASSWORD = "nordlicht-berger";
+export const PLATFORM_ADMIN_EMAIL = "plattform@kumiko.dev";
+export const PLATFORM_ADMIN_PASSWORD = "kumiko-plattform";

package/samples/apps/ui-walkthrough/src/app/client.tsx

@@ -2,8 +2,11 @@
 // übergibt Shell + clientFeatures an createKumikoApp.
 
 import { emailPasswordClient } from "@cosmicdrift/kumiko-bundled-features/auth-email-password/web";
+import { textBlocksClient } from "@cosmicdrift/kumiko-bundled-features/template-resolver/web";
+import { documentDesignerClient } from "@cosmicdrift/kumiko-document-designer/web";
 import { localeDeClient } from "@cosmicdrift/kumiko-locale-de/web";
 import { createKumikoApp } from "@cosmicdrift/kumiko-renderer-web";
+import { billingClient } from "../features/billing/web";
 import { rentalClient } from "../features/rental/web";
 import { tasksClient } from "../features/tasks/web";
 import { vehiclesClient } from "../features/vehicles/web";
@@ -17,5 +20,8 @@ createKumikoApp({
     tasksClient,
     rentalClient,
     vehiclesClient,
+    billingClient,
+    textBlocksClient(),
+    documentDesignerClient(),
   ],
 });

package/samples/apps/ui-walkthrough/src/app/seed-templates.ts

@@ -0,0 +1,154 @@
+// Nordlicht Immobilien GmbH for the document-designer walkthrough: a tenant
+// admin, a platform admin, branding and a realistic set of mail and PDF
+// templates. Everything goes through the template write handlers (or the
+// system-template seed), never straight into the tables.
+
+import { seedAdmin } from "@cosmicdrift/kumiko-bundled-features/auth-email-password/seeding";
+import { BRANDING_QN } from "@cosmicdrift/kumiko-bundled-features/managed-pages";
+import {
+  TemplateResolverHandlers,
+  TemplateResolverQueries,
+} from "@cosmicdrift/kumiko-bundled-features/template-resolver";
+import type { SeedFn } from "@cosmicdrift/kumiko-dev-server";
+import type { SessionUser, TenantId } from "@cosmicdrift/kumiko-framework/engine";
+import { DEFAULT_MAIL_LAYOUT_MJML } from "@cosmicdrift/kumiko-renderer-mail-html";
+import {
+  NORDLICHT_TENANT_ID,
+  NORDLICHT_TENANT_NAME,
+  PLATFORM_ADMIN_EMAIL,
+  PLATFORM_ADMIN_PASSWORD,
+  TENANT_ADMIN_EMAIL,
+  TENANT_ADMIN_PASSWORD,
+} from "./auth-constants";
+import {
+  INVOICE_CORRECTED_DRAFT,
+  INVOICE_ISSUED_DRAFT_VERSIONS,
+  PAYMENT_REMINDER_TEMPLATES,
+  type SeedTemplate,
+  SYSTEM_AUTH_MAILS,
+  SYSTEM_INVOICE_DOCUMENTS,
+  SYSTEM_INVOICE_ISSUED,
+  SYSTEM_PDF_LAYOUT,
+  SYSTEM_TENANCY_CERTIFICATE,
+  TENANT_MAIL_LAYOUT_VERSIONS,
+  TENANT_UTILITY_STATEMENT,
+} from "./template-seed-data";
+
+const NORDLICHT = NORDLICHT_TENANT_ID as TenantId;
+
+const BRANDING = [
+  [BRANDING_QN.title, "Nordlicht Mieterportal"],
+  [BRANDING_QN.accentColor, "#205265"],
+  [BRANDING_QN.siteUrl, "https://nordlicht-immobilien.de"],
+  [BRANDING_QN.logoUrl, "https://nordlicht-immobilien.de/logo-nordlicht.png"],
+] as const;
+
+export const seedTemplates: SeedFn = async (stack) => {
+  const membership = (roles: readonly string[]) => [
+    {
+      tenantId: NORDLICHT,
+      tenantKey: "nordlicht",
+      tenantName: NORDLICHT_TENANT_NAME,
+      roles,
+    },
+  ];
+  const tenantAdminAccount = await seedAdmin(stack.db, {
+    email: TENANT_ADMIN_EMAIL,
+    password: TENANT_ADMIN_PASSWORD,
+    displayName: "A. Berger",
+    emailVerified: true,
+    memberships: membership(["TenantAdmin"]),
+  });
+  const platformAdminAccount = await seedAdmin(stack.db, {
+    email: PLATFORM_ADMIN_EMAIL,
+    password: PLATFORM_ADMIN_PASSWORD,
+    displayName: "Plattform-Admin",
+    emailVerified: true,
+    globalRoles: ["SystemAdmin"],
+    memberships: membership(["TenantAdmin"]),
+  });
+  // The session re-derives roles from the membership row on every request, so
+  // the roles here only have to match what the account really has.
+  const tenantAdmin: SessionUser = {
+    id: tenantAdminAccount.id as SessionUser["id"],
+    tenantId: NORDLICHT,
+    roles: ["TenantAdmin"],
+  };
+  const platformAdmin: SessionUser = {
+    id: platformAdminAccount.id as SessionUser["id"],
+    tenantId: NORDLICHT,
+    roles: ["TenantAdmin", "SystemAdmin"],
+  };
+
+  const overview = await stack.http.queryOk<{ rows: { origin: string }[] }>(
+    TemplateResolverQueries.overview,
+    {},
+    tenantAdmin,
+  );
+  if (overview.rows.some((row) => row.origin === "tenant")) return;
+
+  const upsert = (
+    handler: string,
+    template: SeedTemplate,
+    user: SessionUser,
+    extra: Record<string, unknown> = {},
+  ) =>
+    stack.http.writeOk<{ id: string }>(
+      handler,
+      {
+        slug: template.slug,
+        kind: template.kind,
+        locale: template.locale,
+        contentFormat: "html",
+        content: template.content,
+        ...(template.title !== undefined && { title: template.title }),
+        ...(template.meta !== undefined && { meta: template.meta }),
+        ...(template.variableSchema !== undefined && { variableSchema: template.variableSchema }),
+        ...extra,
+      },
+      user,
+    );
+  const upsertSystem = (template: SeedTemplate) =>
+    upsert(TemplateResolverHandlers.upsertSystem, template, platformAdmin);
+  const upsertTenant = (template: SeedTemplate, status: "draft" | "active") =>
+    upsert(TemplateResolverHandlers.upsertTenant, template, tenantAdmin, { status });
+
+  await stack.http.writeOk(
+    TemplateResolverHandlers.upsertSystem,
+    {
+      slug: "default",
+      kind: "mail-layout",
+      locale: "en",
+      contentFormat: "mjml",
+      content: DEFAULT_MAIL_LAYOUT_MJML,
+      title: "Mail-Layout",
+    },
+    platformAdmin,
+  );
+  await upsertSystem(SYSTEM_PDF_LAYOUT);
+  for (const mail of SYSTEM_AUTH_MAILS) await upsertSystem(mail);
+  await upsertSystem(SYSTEM_INVOICE_ISSUED);
+  for (const document of SYSTEM_INVOICE_DOCUMENTS) await upsertSystem(document);
+  const certificate = await upsertSystem(SYSTEM_TENANCY_CERTIFICATE);
+  await stack.http.writeOk(
+    TemplateResolverHandlers.archiveSystem,
+    { id: certificate.id },
+    platformAdmin,
+  );
+
+  for (const [key, value] of BRANDING) {
+    await stack.http.writeOk("config:write:set", { key, value }, tenantAdmin);
+  }
+  // Each save is a new version of the same row; the second one makes the
+  // layout "customised" for the overview and the first leaves history to diff.
+  for (const content of TENANT_MAIL_LAYOUT_VERSIONS) {
+    await upsertTenant(
+      { slug: "default", kind: "mail-layout", locale: "en", title: "Mail-Layout", content },
+      "active",
+    );
+  }
+  for (const draft of INVOICE_ISSUED_DRAFT_VERSIONS) await upsertTenant(draft, "draft");
+  await upsertTenant(INVOICE_CORRECTED_DRAFT, "draft");
+  for (const reminder of PAYMENT_REMINDER_TEMPLATES) await upsertTenant(reminder, "active");
+  await upsertTenant(TENANT_UTILITY_STATEMENT, "active");
+};

package/samples/apps/ui-walkthrough/src/app/server.ts

@@ -11,10 +11,12 @@
 
 import { runDevApp } from "@cosmicdrift/kumiko-dev-server";
 import type { TenantId } from "@cosmicdrift/kumiko-framework/engine";
+import { createInMemoryFileProvider } from "@cosmicdrift/kumiko-framework/files";
 import { APP_FEATURES } from "../run-config";
 import { ADMIN_EMAIL, ADMIN_PASSWORD, BETA_TENANT_ID, DEV_TENANT_ID } from "./auth-constants";
 import { seedTasks } from "./seed";
 import { seedRental } from "./seed-rental";
+import { seedTemplates } from "./seed-templates";
 import { seedVehicles } from "./seed-vehicles";
 
 // Zwei feste Tenants — Admin ist in beiden Mitglied damit der
@@ -25,10 +27,12 @@ import { seedVehicles } from "./seed-vehicles";
 
 await runDevApp({
   features: [...APP_FEATURES],
-  seeds: [seedTasks, seedRental, seedVehicles],
+  seeds: [seedTasks, seedRental, seedVehicles, seedTemplates],
   // PORT env-var override für Playwright-e2e-Runs (config zeigt auf 4174);
   // sonst lokal-Default 4173.
   port: Number.parseInt(process.env["PORT"] ?? "4173", 10),
+  // Logo and attachment uploads of the mail editor need a file store.
+  files: { storageProvider: createInMemoryFileProvider() },
   clientEntry: "./src/app/client.tsx",
   htmlPath: "./public/index.html",
   watchDirs: ["./src", "../../../packages/*/src"],

package/samples/apps/ui-walkthrough/src/app/shell.tsx

@@ -5,6 +5,7 @@
 import {
   TenantMenuItems,
   UserMenu,
+  useSession,
 } from "@cosmicdrift/kumiko-bundled-features/auth-email-password/web";
 import {
   type AppSchema,
@@ -18,13 +19,19 @@ import {
 import { MoonStar, Sun } from "lucide-react";
 import type { ReactNode } from "react";
 import { AssistantAction } from "./assistant-action";
-import { BETA_TENANT_ID, DEV_TENANT_ID } from "./auth-constants";
+import {
+  BETA_TENANT_ID,
+  DEV_TENANT_ID,
+  NORDLICHT_TENANT_ID,
+  NORDLICHT_TENANT_NAME,
+} from "./auth-constants";
 
 const APP_NAME = "Kumiko Walkthrough";
 
 const tenantName = (tenantId: string): string => {
   if (tenantId === DEV_TENANT_ID) return "Dev Tenant";
   if (tenantId === BETA_TENANT_ID) return "Beta Tenant";
+  if (tenantId === NORDLICHT_TENANT_ID) return NORDLICHT_TENANT_NAME;
   return tenantId.slice(0, 8);
 };
 
@@ -41,10 +48,14 @@ export function AppShell({
   readonly schema: AppSchema;
 }): ReactNode {
   const t = useTranslation();
+  const session = useSession();
+  // Without the user the shell hides role-gated navs and KumikoScreen denies role-gated screens.
+  const user = session.user !== null ? { id: session.user.id, roles: session.roles } : undefined;
   return (
     <DefaultAppShell
       brand={<SidebarBrand name={APP_NAME} plan={t("tasks.shell.tagline")} />}
       schema={schema}
+      {...(user !== undefined && { user })}
       headerActions={
         <>
           <AssistantAction />

package/samples/apps/ui-walkthrough/src/app/template-seed-data.ts

@@ -0,0 +1,354 @@
+// Template content for the Nordlicht document-designer walkthrough. Pure data,
+// no framework import: seed-templates.ts feeds it through the template write
+// handlers, so every body here goes through the real sanitizer and placeholder
+// validation.
+
+export type SeedTemplate = {
+  readonly slug: string;
+  readonly kind: "mail" | "mail-layout" | "document-pdf" | "pdf-layout";
+  readonly locale: string;
+  readonly title?: string;
+  readonly content: string;
+  readonly meta?: Record<string, unknown>;
+  readonly variableSchema?: Record<string, unknown>;
+};
+
+// Document HTML marks a variable as an empty span; only link targets take {{name}}.
+const v = (name: string): string => `<span data-variable="${name}"></span>`;
+
+const AUTH_VARIABLE_SCHEMA = {
+  appName: { type: "text", required: true },
+  actionUrl: { type: "link", required: true },
+  validFor: { type: "text", required: true },
+  validUntil: { type: "text", required: true },
+} as const;
+
+const INVOICE_VARIABLE_SCHEMA = {
+  customerName: { type: "text", required: true },
+  invoiceNumber: { type: "text", required: true },
+  amount: { type: "money", required: true },
+  dueDate: { type: "date", required: true },
+  invoiceUrl: { type: "link", required: true },
+} as const;
+
+const DOCUMENT_LINES_SCHEMA = {
+  tenantName: { type: "text" },
+  customerName: { type: "text", required: true },
+  invoiceNumber: { type: "text", required: true },
+  invoiceDate: { type: "date", required: true },
+  total: { type: "money", required: true },
+  lines: {
+    type: "list",
+    required: true,
+    item: { description: { type: "text" }, amount: { type: "money" } },
+  },
+} as const;
+
+export const SYSTEM_PDF_LAYOUT: SeedTemplate = {
+  slug: "default",
+  kind: "pdf-layout",
+  locale: "en",
+  title: "Briefpapier",
+  content: [
+    `<div data-header><p><strong>${v("tenantName")}</strong></p></div>`,
+    "<div data-content></div>",
+    "<div data-signature></div>",
+    `<div data-footer><p>${v("tenantName")} · Seite ${v("page")} von ${v("pages")}</p></div>`,
+  ].join(""),
+};
+
+export const TENANT_MAIL_LAYOUT_VERSIONS: readonly string[] = [
+  [
+    `<div data-header><p><strong>${v("tenantName")}</strong></p></div>`,
+    "<div data-content></div>",
+    "<div data-signature><p>Mit freundlichen Grüßen</p></div>",
+    `<div data-footer><p>${v("tenantName")}</p></div>`,
+  ].join(""),
+  [
+    `<div data-header><p><strong>${v("tenantName")}</strong></p><p>Ihre Hausverwaltung in Kiel</p></div>`,
+    "<div data-content></div>",
+    `<div data-signature><p>Mit freundlichen Grüßen</p><p>${v("signature")}</p><p>${v("tenantName")}</p></div>`,
+    `<div data-footer><p>${v("imprint")}</p><p><a href="https://nordlicht-immobilien.de/datenschutz">Datenschutz</a> · <a href="{{unsubscribeUrl}}">Abmelden</a></p></div>`,
+  ].join(""),
+];
+
+const LINES_TABLE = `<table><tbody><tr><th><p>Position</p></th><th><p>Betrag</p></th></tr><tr data-each="lines" data-repeat-header=""><td><p>${v("description")}</p></td><td><p>${v("amount")}</p></td></tr></tbody></table>`;
+
+// The registry of the billing notifications declares the variables, so these
+// templates carry no variableSchema of their own.
+function invoiceIssuedBody(args: {
+  readonly intro: string;
+  readonly withDueDate: boolean;
+}): string {
+  const due = args.withDueDate ? ` Bitte überweisen Sie den Betrag bis zum ${v("dueDate")}.` : "";
+  return [
+    "<h2>Ihre Rechnung ist da</h2>",
+    `<p>Guten Tag ${v("recipientName")},</p>`,
+    `<p>${args.intro} <strong>${v("invoiceNumber")}</strong> über <strong>${v("invoiceTotal")}</strong>.${due}</p>`,
+    '<a data-button href="{{invoiceUrl}}">Rechnung öffnen</a>',
+    LINES_TABLE,
+    "<hr>",
+    "<p>Mit freundlichen Grüßen</p>",
+    `<p>${v("tenantName")}</p>`,
+  ].join("");
+}
+
+const INVOICE_ISSUED_SLUG = "billing:notify:invoice-issued";
+const INVOICE_CORRECTED_SLUG = "billing:notify:invoice-corrected";
+
+const invoiceIssuedMeta = (subject: string) => ({
+  subject,
+  previewText: "Rechnung {{invoiceNumber}} über {{invoiceTotal}}, online abrufbar",
+});
+
+// The platform default has a due date; the tenant drafts below drop it, which
+// is what blocks publishing in the walkthrough.
+export const SYSTEM_INVOICE_ISSUED: SeedTemplate = {
+  slug: INVOICE_ISSUED_SLUG,
+  kind: "mail",
+  locale: "de",
+  title: "Rechnung versendet",
+  content: invoiceIssuedBody({ intro: "anbei senden wir Ihnen die Rechnung", withDueDate: true }),
+  meta: invoiceIssuedMeta("Rechnung {{invoiceNumber}} von {{tenantName}}"),
+};
+
+// Saved in order: each entry becomes the next version of the same draft.
+export const INVOICE_ISSUED_DRAFT_VERSIONS: readonly SeedTemplate[] = [
+  {
+    slug: INVOICE_ISSUED_SLUG,
+    kind: "mail",
+    locale: "de",
+    title: "Rechnung versendet",
+    content: invoiceIssuedBody({
+      intro: "anbei senden wir Ihnen die Rechnung",
+      withDueDate: false,
+    }),
+    meta: invoiceIssuedMeta("Ihre Rechnung {{invoiceNumber}}"),
+  },
+  {
+    slug: INVOICE_ISSUED_SLUG,
+    kind: "mail",
+    locale: "de",
+    title: "Rechnung versendet",
+    content: invoiceIssuedBody({ intro: "anbei erhalten Sie die Rechnung", withDueDate: false }),
+    meta: invoiceIssuedMeta("Ihre Rechnung {{invoiceNumber}} von {{tenantName}}"),
+  },
+];
+
+// Separate draft for the screenshot spec, so the mail-editor e2e can change
+// "Rechnung versendet" without touching what the screenshots show.
+export const INVOICE_CORRECTED_DRAFT: SeedTemplate = {
+  slug: INVOICE_CORRECTED_SLUG,
+  kind: "mail",
+  locale: "de",
+  title: "Korrigierte Rechnung",
+  content: invoiceIssuedBody({
+    intro: "anbei erhalten Sie die korrigierte Rechnung",
+    withDueDate: false,
+  }),
+  meta: invoiceIssuedMeta("Ihre Rechnung {{invoiceNumber}} von {{tenantName}}"),
+};
+
+export const PAYMENT_REMINDER_TEMPLATES: readonly SeedTemplate[] = [
+  {
+    slug: "billing:notify:payment-reminder",
+    kind: "mail",
+    locale: "de",
+    title: "Zahlungserinnerung",
+    content: [
+      `<p>Guten Tag ${v("customerName")},</p>`,
+      `<p>zu unserer Rechnung <strong>${v("invoiceNumber")}</strong> über <strong>${v("amount")}</strong> konnten wir bis heute keinen Zahlungseingang feststellen. Fällig war der Betrag am ${v("dueDate")}.</p>`,
+      `<p>Bitte überweisen Sie den offenen Betrag in den nächsten Tagen. Die Rechnung finden Sie hier: <a href="{{invoiceUrl}}">Rechnung öffnen</a></p>`,
+      "<p>Sollten Sie bereits gezahlt haben, betrachten Sie diese Nachricht bitte als gegenstandslos.</p>",
+    ].join(""),
+    meta: { subject: "Zahlungserinnerung zu Rechnung {{invoiceNumber}}" },
+    variableSchema: INVOICE_VARIABLE_SCHEMA,
+  },
+  {
+    slug: "billing:notify:payment-reminder",
+    kind: "mail",
+    locale: "en",
+    title: "Payment reminder",
+    content: [
+      `<p>Hello ${v("customerName")},</p>`,
+      `<p>we have not received a payment for invoice <strong>${v("invoiceNumber")}</strong> of <strong>${v("amount")}</strong>, which was due on ${v("dueDate")}.</p>`,
+      `<p>Please transfer the open amount in the next few days. You can find the invoice here: <a href="{{invoiceUrl}}">Open invoice</a></p>`,
+      "<p>If you have already paid, please disregard this message.</p>",
+    ].join(""),
+    meta: { subject: "Payment reminder for invoice {{invoiceNumber}}" },
+    variableSchema: INVOICE_VARIABLE_SCHEMA,
+  },
+];
+
+function authMail(
+  notification: string,
+  locale: "de" | "en",
+  title: string,
+  subject: string,
+  paragraphs: readonly string[],
+  extraSchema: Record<string, unknown> = {},
+): SeedTemplate {
+  return {
+    slug: `auth-email-password:notify:${notification}`,
+    kind: "mail",
+    locale,
+    title,
+    content: paragraphs.join(""),
+    meta: { subject },
+    variableSchema: { ...AUTH_VARIABLE_SCHEMA, ...extraSchema },
+  };
+}
+
+export const SYSTEM_AUTH_MAILS: readonly SeedTemplate[] = [
+  authMail(
+    "password-reset",
+    "de",
+    "Passwort zurücksetzen",
+    "Passwort für {{appName}} zurücksetzen",
+    [
+      "<p>Hallo,</p>",
+      `<p>für Ihr Konto bei ${v("appName")} wurde ein neues Passwort angefordert. Über den folgenden Link können Sie es festlegen: <a href="{{actionUrl}}">Passwort zurücksetzen</a></p>`,
+      `<p>Der Link ist ${v("validFor")} gültig, bis ${v("validUntil")}. Haben Sie das nicht angefordert, können Sie diese Nachricht ignorieren.</p>`,
+    ],
+  ),
+  authMail("password-reset", "en", "Reset password", "Reset your {{appName}} password", [
+    "<p>Hello,</p>",
+    `<p>a new password was requested for your ${v("appName")} account. You can set it with this link: <a href="{{actionUrl}}">Reset password</a></p>`,
+    `<p>The link is valid for ${v("validFor")}, until ${v("validUntil")}. If you did not ask for this, you can ignore this message.</p>`,
+  ]),
+  authMail(
+    "invite",
+    "de",
+    "Einladung ins Team",
+    "Einladung zu {{appName}}",
+    [
+      "<p>Hallo,</p>",
+      `<p>Sie wurden zu ${v("appName")} eingeladen, mit der Rolle <strong>${v("role")}</strong>. Mit dem folgenden Link nehmen Sie die Einladung an: <a href="{{actionUrl}}">Einladung annehmen</a></p>`,
+      `<p>Die Einladung ist ${v("validFor")} gültig, bis ${v("validUntil")}.</p>`,
+    ],
+    { role: { type: "text", required: true } },
+  ),
+  authMail(
+    "invite",
+    "en",
+    "Team invitation",
+    "You are invited to {{appName}}",
+    [
+      "<p>Hello,</p>",
+      `<p>You have been invited to ${v("appName")} with the role <strong>${v("role")}</strong>. Accept the invitation with this link: <a href="{{actionUrl}}">Accept invitation</a></p>`,
+      `<p>The invitation is valid for ${v("validFor")}, until ${v("validUntil")}.</p>`,
+    ],
+    { role: { type: "text", required: true } },
+  ),
+  authMail(
+    "signup-activation",
+    "de",
+    "Registrierung bestätigen",
+    "Registrierung bei {{appName}} bestätigen",
+    [
+      "<p>Willkommen,</p>",
+      `<p>vielen Dank für Ihre Registrierung bei ${v("appName")}. Bitte bestätigen Sie Ihre E-Mail-Adresse: <a href="{{actionUrl}}">Registrierung bestätigen</a></p>`,
+      `<p>Der Link ist ${v("validFor")} gültig, bis ${v("validUntil")}.</p>`,
+    ],
+  ),
+  authMail(
+    "email-verification",
+    "de",
+    "E-Mail-Adresse bestätigen",
+    "E-Mail-Adresse für {{appName}} bestätigen",
+    [
+      "<p>Hallo,</p>",
+      `<p>bitte bestätigen Sie Ihre E-Mail-Adresse für ${v("appName")}: <a href="{{actionUrl}}">E-Mail-Adresse bestätigen</a></p>`,
+      `<p>Der Link ist ${v("validFor")} gültig, bis ${v("validUntil")}.</p>`,
+    ],
+  ),
+  authMail("email-verification", "en", "Confirm email address", "Confirm your {{appName}} email", [
+    "<p>Hello,</p>",
+    `<p>please confirm your email address for ${v("appName")}: <a href="{{actionUrl}}">Confirm email address</a></p>`,
+    `<p>The link is valid for ${v("validFor")}, until ${v("validUntil")}.</p>`,
+  ]),
+  authMail("account-unlock", "de", "Konto entsperren", "Ihr Konto bei {{appName}} entsperren", [
+    "<p>Hallo,</p>",
+    `<p>Ihr Konto bei ${v("appName")} wurde nach mehreren fehlgeschlagenen Anmeldungen gesperrt. Mit dem folgenden Link entsperren Sie es: <a href="{{actionUrl}}">Konto entsperren</a></p>`,
+    `<p>Der Link ist ${v("validFor")} gültig, bis ${v("validUntil")}.</p>`,
+  ]),
+  authMail("account-unlock", "en", "Unlock account", "Unlock your {{appName}} account", [
+    "<p>Hello,</p>",
+    `<p>your ${v("appName")} account was locked after several failed sign-ins. Unlock it with this link: <a href="{{actionUrl}}">Unlock account</a></p>`,
+    `<p>The link is valid for ${v("validFor")}, until ${v("validUntil")}.</p>`,
+  ]),
+];
+
+const INVOICE_DOCUMENT_ROWS = `<table><tbody><tr><th><p>Leistung</p></th><th><p>Betrag</p></th></tr><tr data-each="lines" data-repeat-header=""><td><p>${v("description")}</p></td><td><p>${v("amount")}</p></td></tr></tbody></table>`;
+
+export const SYSTEM_INVOICE_DOCUMENTS: readonly SeedTemplate[] = [
+  {
+    slug: "billing:invoice",
+    kind: "document-pdf",
+    locale: "de",
+    title: "Rechnung",
+    content: [
+      `<h1>Rechnung ${v("invoiceNumber")}</h1>`,
+      `<p>Rechnungsdatum: ${v("invoiceDate")}</p>`,
+      `<p>Guten Tag ${v("customerName")},</p>`,
+      "<p>für unsere Leistungen stellen wir Ihnen folgenden Betrag in Rechnung.</p>",
+      INVOICE_DOCUMENT_ROWS,
+      `<p><strong>Gesamtbetrag: ${v("total")}</strong></p>`,
+      "<p>Bitte überweisen Sie den Betrag innerhalb von 14 Tagen auf unser Konto.</p>",
+    ].join(""),
+    meta: { layoutSlug: "default", pageFormat: "A4", fileName: "Rechnung.pdf" },
+    variableSchema: DOCUMENT_LINES_SCHEMA,
+  },
+  {
+    slug: "billing:invoice",
+    kind: "document-pdf",
+    locale: "en",
+    title: "Invoice",
+    content: [
+      `<h1>Invoice ${v("invoiceNumber")}</h1>`,
+      `<p>Invoice date: ${v("invoiceDate")}</p>`,
+      `<p>Dear ${v("customerName")},</p>`,
+      "<p>we charge you the following amount for our services.</p>",
+      INVOICE_DOCUMENT_ROWS.replace("Leistung", "Service").replace("Betrag", "Amount"),
+      `<p><strong>Total: ${v("total")}</strong></p>`,
+      "<p>Please transfer the amount to our account within 14 days.</p>",
+    ].join(""),
+    meta: { layoutSlug: "default", pageFormat: "A4", fileName: "Invoice.pdf" },
+    variableSchema: DOCUMENT_LINES_SCHEMA,
+  },
+];
+
+export const TENANT_UTILITY_STATEMENT: SeedTemplate = {
+  slug: "rental:utility-statement",
+  kind: "document-pdf",
+  locale: "de",
+  title: "Nebenkostenabrechnung",
+  content: [
+    `<h1>Nebenkostenabrechnung ${v("invoiceNumber")}</h1>`,
+    `<p>Abrechnungsdatum: ${v("invoiceDate")}</p>`,
+    `<p>Guten Tag ${v("customerName")},</p>`,
+    "<p>nachfolgend erhalten Sie die Abrechnung der Betriebskosten für den Abrechnungszeitraum.</p>",
+    INVOICE_DOCUMENT_ROWS,
+    `<p><strong>Ergebnis: ${v("total")}</strong></p>`,
+    "<p>Ein Guthaben überweisen wir Ihnen innerhalb von 30 Tagen, eine Nachzahlung ist zum Monatsende fällig.</p>",
+  ].join(""),
+  meta: { layoutSlug: "default", pageFormat: "A4", fileName: "Nebenkostenabrechnung.pdf" },
+  variableSchema: DOCUMENT_LINES_SCHEMA,
+};
+
+export const SYSTEM_TENANCY_CERTIFICATE: SeedTemplate = {
+  slug: "rental:tenancy-certificate",
+  kind: "document-pdf",
+  locale: "de",
+  title: "Mietbescheinigung",
+  content: [
+    "<h1>Mietbescheinigung</h1>",
+    `<p>Hiermit bestätigen wir, dass ${v("customerName")} bei uns Mieter ist und die Miete ordnungsgemäß zahlt.</p>`,
+    `<p>Ausgestellt am ${v("invoiceDate")}.</p>`,
+  ].join(""),
+  meta: { layoutSlug: "default", pageFormat: "A4", fileName: "Mietbescheinigung.pdf" },
+  variableSchema: {
+    customerName: { type: "text", required: true },
+    invoiceDate: { type: "date", required: true },
+  },
+};