@nxgt/janus-mail 0.4.2 → 0.5.0

package/docs/guide/sending.md

@@ -27,6 +27,7 @@ export const mail = janusMail({
 		resetPassword: (token) => `https://acme.example/reset?token=${encodeURIComponent(token)}`,
 		secureAccount: () => 'https://acme.example/account/security',
 		getStarted: () => 'https://acme.example/',
+		recoveryCodes: () => 'https://acme.example/account/recovery-codes', // optional
 	},
 });
 ```
@@ -47,6 +48,7 @@ time one is sent, and kept.
 | `links.resetPassword` | `(token) => string` | required | The page that sets a new password, given the one-time token |
 | `links.secureAccount` | `() => string` | required | Where a user who made no change secures their account: the notices link to it |
 | `links.getStarted` | `() => string` | required | Where a new user starts — your home page, or your sign-in page for an account someone else created: the welcome's **Get started** button links to it |
+| `links.recoveryCodes` | `() => string` | `links.secureAccount` | Where a user regenerates their recovery codes: the recovery code notice links to it, from its **Secure my account** button |
 | `locales` | `readonly L[]` | `['en', 'fr']` | The locales sent in — see [Locales](locales.md) |
 | `fallbackLocale` | one of `locales` | `'en'`, else the first of `locales` | The locale when the recipient wants none of `locales` |
 | `templates` | `Partial<JanusMailTemplates<L>>` | none | Your own templates, over the defaults — see [Templates](templates.md) |
@@ -198,6 +200,54 @@ and the address from the user. With several user types, check
   and `signUp` answers as it would have. For a welcome that must arrive, put
   the event in a queue that retries a `MAIL_FAILED`, and send from there.
 
+### `recoveryCodeUsed(to, { when, recoveryCodesLeft })`
+
+```ts
+// On the user event @nxgt/janus sends once a recovery code is spent:
+const auth = janus({
+	...config,
+	async events(event) {
+		if (event.type !== 'user.recoveryCodeUsed') return;
+		const user = await auth.get(event.userId);
+		const recoveryCodesLeft = await auth.secondFactor.recoveryCodesLeft(user); // @nxgt/janus 0.11
+		if (recoveryCodesLeft === null) return; // the factor was turned off since
+		const when = new Intl.DateTimeFormat(user.locale, {
+			dateStyle: 'long',
+			timeStyle: 'short',
+			timeZone: user.timeZone, // a field of yours, when you keep one
+		}).format(event.occurredAt);
+		await mail.recoveryCodeUsed(
+			{ name: user.name, locale: user.locale, email: user.email },
+			{ when, recoveryCodesLeft },
+		);
+	},
+});
+```
+
+A notice for the account at `to.email`: a recovery code was used — a
+sign-in without the user's phone — at `when`, and how many codes are left,
+with a **Secure my account** button. Send it on the `user.recoveryCodeUsed`
+event, which `auth.secondFactor.recover` sends once the code is spent, even
+when opening the session then fails.
+
+- **`when` is text you write**, in the recipient's locale and time zone:
+  "28 septembre 2026 à 14:05". The event's `occurredAt` is when the code
+  was spent.
+- **`recoveryCodesLeft` is the count, or the sentence.** The event does not
+  carry it: `auth.secondFactor.recoveryCodesLeft(user)` reads it after the
+  write, the code just spent already out, and answers `null` for a user
+  with no active factor — check it, the compiler asks you to. A count is
+  written as `@nxgt/mail-presets`' plural in the recipient's locale: "You
+  have no recovery codes left.", "You have 1 recovery code left.", "Il vous
+  reste 9 codes de récupération." — the build's own catalogue, parsed when
+  this package is built, and formatted at send time with the locale's
+  plural rules. Text is sent as it is: pass the sentence yourself for
+  another wording, or a locale the defaults are not built in, where a count
+  is a `TypeError`.
+- **The link is `links.recoveryCodes()`**, where the user regenerates their
+  codes; without it, `links.secureAccount()`. `recoveryCodes` is optional,
+  so a `links` written for 0.4 still compiles.
+
 ## The expiry
 
 `verifyEmail`, `resetPassword` and `signInCode` say how long the link or the
@@ -252,6 +302,7 @@ a `TypeError`, and nothing reaches the mailer: revive the date with
 | `passwordChanged` | `to.email` | — |
 | `emailChanged` | `to.formerEmail` | `to.newEmail` |
 | `twoFactorEnabled`, `twoFactorDisabled` | `to.email` | — |
+| `recoveryCodeUsed` | `to.email` | — |
 | `welcome` | `to.email` | — |
 
 `issued.email` is the address the user's record holds, as they registered
@@ -307,10 +358,12 @@ retries a `MAIL_FAILED`, rather than to a promise nobody awaits.
 ### Retrying and tracing the mailer
 
 Wrap the mailer before you hand it to `janusMail()`: `withRetry`, from
-`@nxgt/mail` 0.8, retries a `MailFailure` with backoff, reusing one
-idempotency key for every attempt, and never retries a `MailRefused`;
-`withMailTelemetry`, from `@nxgt/mail/telemetry` 0.9 (`withTelemetry` on
-0.8), opens a `mail.send` span per send. That entry
+`@nxgt/mail` 0.8 or later, retries a `MailFailure` with backoff, reusing one
+idempotency key for every attempt, and never retries a `MailRefused` — its
+options are `MailRetryOptions` since 1.0, which removed the older name
+`RetryOptions`; `withMailTelemetry`, from `@nxgt/mail/telemetry` 0.9 or
+later (`withTelemetry` on 0.8, removed in 1.0), opens a `mail.send` span
+per send. That entry
 needs `@opentelemetry/api` installed (an optional peer, loaded by it alone);
 with no OpenTelemetry SDK registered, its spans are no-ops. Put telemetry on the outside, so one
 send is one span:
@@ -334,9 +387,10 @@ export const mail = janusMail({
 which scopes a telemetry to a block. `mail.send` is recorded through
 OpenTelemetry, not `@nxgt/telemetry`, so it does not nest under
 `@nxgt/janus-telemetry`'s spans. `@nxgt/mail` 0.9 renamed its decorator
-`withMailTelemetry` so the two no longer share a name; on 0.8 it is
-`withTelemetry`, still exported by 0.9 as a deprecated alias until 1.0 —
-import it under another name there when a module uses both.
+`withMailTelemetry` so the two no longer share a name, and 1.0 removed the
+old `withTelemetry` — with `withRendererTelemetry`, which
+`@nxgt/mail/telemetry` 1.0 names `withMailRendererTelemetry`. On 0.8, import
+its `withTelemetry` under another name when a module uses both.
 
 **SMTP ignores the idempotency key**, so a retry after an ambiguous SMTP
 timeout can deliver an e-mail twice. If a duplicate sign-in code or reset

package/docs/guide/templates.md

@@ -1,7 +1,7 @@
 # Templates
 
 This page is for changing what an e-mail says or looks like: what a template
-is given and answers, replacing some of the eight, using the defaults on their
+is given and answers, replacing some of the nine, using the defaults on their
 own, and what the defaults say.
 
 ```ts
@@ -22,7 +22,7 @@ const mail = janusMail({
 });
 ```
 
-The sign-in code e-mail is now yours; the seven others stay the defaults.
+The sign-in code e-mail is now yours; the eight others stay the defaults.
 
 ## What a template is
 
@@ -66,15 +66,34 @@ e-mail.
 | `emailChanged` | `brand`, `name`, `link`, `newEmail` | `mail.emailChanged(to)` |
 | `twoFactorEnabled` | `brand`, `name`, `link` | `mail.twoFactorEnabled(to)` |
 | `twoFactorDisabled` | `brand`, `name`, `link` | `mail.twoFactorDisabled(to)` |
+| `recoveryCodeUsed` | `brand`, `name`, `when`, `recoveryCodesLeft`, `link` | `mail.recoveryCodeUsed(to, { when, recoveryCodesLeft })` |
 | `welcome` | `brand`, `name`, `link` | `mail.welcome(to)` |
 
 Every one also gets `locale`, one of `locales`. Every value is a string:
 `brand` from the options, `name` from the recipient, `link` from `links` —
-`links.secureAccount()` for the four notices, `links.getStarted()` for
-`welcome` — `code` and `newEmail` from the
+`links.secureAccount()` for the four notices, `links.recoveryCodes()` (else
+`links.secureAccount()`) for `recoveryCodeUsed`, `links.getStarted()` for
+`welcome` — `code`, `newEmail` and `when` from the
 call, and `expiresIn` derived from the flow's `expiresAt` in the locale, or
 the send's own `expiresIn` ([Sending](sending.md#the-expiry)).
 
+`recoveryCodesLeft` is a **sentence**, not the count: "You have 9 recovery
+codes left." The method writes it from the count with the preset's plural in
+the recipient's locale, or passes the send's own text — so an override for
+a locale of its own is given what the caller wrote:
+
+```ts
+// `escape` is your HTML escaper: a template of yours escapes what it writes.
+templates: {
+	recoveryCodeUsed: ({ name, when, recoveryCodesLeft, link }) => ({
+		subject: 'Ein Wiederherstellungscode wurde verwendet',
+		html: `<p>Hallo ${escape(name)}, am ${escape(when)}.</p><p>${escape(recoveryCodesLeft)}</p><p><a href="${escape(link)}">Konto sichern</a></p>`,
+		text: `Hallo ${name}, am ${when}.\n\n${recoveryCodesLeft}\n\n${link}`,
+	}),
+},
+// await mail.recoveryCodeUsed(to, { when, recoveryCodesLeft: `Sie haben noch ${left} Wiederherstellungscodes.` });
+```
+
 `signInCode` is **never given the challenge**: it is not in its variables,
 and the method never reads it. An override states the expiry from
 `expiresIn`, already formatted:
@@ -105,11 +124,11 @@ methods live on its prototype and are refused — see
 [troubleshooting](../troubleshooting.md#janusmail-templatesname-is-not-an-own-enumerable-property--pass-a-plain-object-as--name-variables--rendered-).
 
 `templates` is `Partial` while `locales` stays within `en` and `fr`: give
-any of the eight, and the defaults render the rest. Once `locales` holds
-another locale, it takes **all eight** — see
+any of the nine, and the defaults render the rest. Once `locales` holds
+another locale, it takes **all nine** — see
 [Adding a locale](locales.md#adding-a-locale).
 
-`mail.templates` answers the eight in use — yours, and the defaults for the
+`mail.templates` answers the nine in use — yours, and the defaults for the
 rest — frozen:
 
 ```ts
@@ -131,7 +150,7 @@ const { subject, html, text } = await defaults.resetPassword({
 });
 ```
 
-It answers the eight defaults, typed for `'en' | 'fr'`, without a mailer:
+It answers the nine defaults, typed for `'en' | 'fr'`, without a mailer:
 to preview an e-mail, to wrap one — add a line to the default text, say — or
 to send one through something other than `janusMail()`. A default reused for
 a wider set of locales is a compile error: it could not render the one it
@@ -157,7 +176,7 @@ them renders: that is when the package's `mails/` folder is read, once.
 ## What the defaults say
 
 The defaults are [`@nxgt/mail-presets`](https://www.npmjs.com/package/@nxgt/mail-presets)
-0.4.3, built with a neutral grey theme and no logo:
+1.0.1, built with a neutral grey theme and no logo:
 
 | Template | Built from | Subject (`en`) | Subject (`fr`) |
 | --- | --- | --- | --- |
@@ -168,12 +187,16 @@ The defaults are [`@nxgt/mail-presets`](https://www.npmjs.com/package/@nxgt/mail
 | `emailChanged` | `email-changed` | Your e-mail address was changed | Votre adresse e-mail a été modifiée |
 | `twoFactorEnabled` | `two-factor-enabled` | Two-factor authentication was turned on | L'authentification à deux facteurs a été activée |
 | `twoFactorDisabled` | `two-factor-disabled` | Two-factor authentication was turned off | L'authentification à deux facteurs a été désactivée |
+| `recoveryCodeUsed` | `recovery-code-used` | A recovery code was used on your account | Un code de récupération a été utilisé sur votre compte |
 | `welcome` | `welcome` | Welcome, `Ada` | Bienvenue, `Ada` |
 
 Each has a header and a footer with the brand, a heading, a greeting by name
 (but `signInCode`), a button with its link and the link again in text for a
-client that shows no button, and a text part. The four notices add a warning:
-*if this was not you, secure your account now*. `welcome` has the brand in
+client that shows no button, and a text part. The other four notices add a warning:
+*if this was not you, secure your account now*. `recoveryCodeUsed` says it
+too, after a warning banner — *a recovery code was used on your account at
+`when`* — the codes left, and a line on generating new ones; its button says
+**Secure my account**. `welcome` has the brand in
 its heading — "Welcome to Acme" — and the recipient's name in its subject,
 filled at send time like the body; its button says **Get started**.
 
@@ -197,11 +220,13 @@ mode, 9.85:1. The muted text — the footer, and the closing *if you did not
 ask for this* — is a slate grey (`#5f718a`) in light mode, 4.53:1 on the
 page, and turns `#cbd5e1` in dark mode, 12.01:1 on the dark card and
 13.31:1 on the page. The notices' alerts keep their light ground and grey
-text in both modes, 4.56:1 at the least. Every
-text of the defaults reads at 4.5:1 or more in both modes, but the link
-under the button, which `@nxgt/mail-ui` colours with its info blue in
-both: 6.78:1 on the dark card, 2.63:1 on the light one, and no theme token
-moves it without breaking the other mode. Nothing is passed for any of it,
+text in both modes, 4.56:1 at the least; the recovery code banner keeps
+its light ground and near-black text, 17.57:1. The link under the button is
+a blue of each mode's own: `#1d4ed8` on the light card, 6.70:1, and
+`#93c5fd` on the dark one, 9.89:1 — `@nxgt/mail-ui` 1.0 gives the info
+blue a dark value (`color-info-dark`), where one blue served both modes and
+read 2.63:1 on the light card. Every text of the defaults reads at 4.5:1 or
+more in both modes. Nothing is passed for any of it,
 the text part has no colours, and a template of your own gets none of it. `@nxgt/mail-ui`'s
 [Dark mode](https://github.com/softistx/nxgt-mail/blob/develop/packages/mail-ui/docs/guide/dark-mode.md)
 guide has the technique, client by client.

package/docs/roadmap.md

@@ -35,7 +35,7 @@ Nothing between releases.
   `@nxgt/mail` answers every failure, whichever package sent the e-mail.
 - **Retries or a queue** — a retry is the application's decision, made where
   it can see it; hand a send to a queue that retries a `MAIL_FAILED`, or pass
-  a mailer wrapped in `@nxgt/mail` 0.8's `withRetry`.
+  a mailer wrapped in `@nxgt/mail`'s `withRetry` (0.8 or later).
 - **Sending from inside `janus()`** — `@nxgt/janus` stays free of e-mail:
   its flows answer what to send, and this package is called with that answer.
   An application that sends its own way needs neither this package nor a
@@ -47,6 +47,20 @@ Nothing between releases.
 
 Newest first; from the first release on, the package's CHANGELOG holds every one.
 
+- **The recovery code notice, and a readable link in both modes, v0.5.0.**
+  `recoveryCodeUsed(to, { when, recoveryCodesLeft })`, built from
+  `@nxgt/mail-presets` 1.0.0's `recovery-code-used` in English and French:
+  send it on `@nxgt/janus`'s `user.recoveryCodeUsed` event, with the count
+  `auth.secondFactor.recoveryCodesLeft(user)` reads (`@nxgt/janus` 0.11),
+  written as the preset's plural in the recipient's locale — "You have 1
+  recovery code left." Its button links to the new, optional
+  `links.recoveryCodes()`, else `links.secureAccount()`. Nine e-mails now,
+  and nine templates to pass for a locale beyond `en` and `fr`. The link
+  under the button is a blue of each mode's own — 6.70:1 on the light card,
+  where it read 2.63:1, and 9.89:1 on the dark one — from `@nxgt/mail-ui`
+  1.0.0's `color-info-dark`. The `@nxgt/mail` peer widens to `>=0.1.0 <2`,
+  so `@nxgt/mail` 1.0 and its transports are admitted; the manifest is still
+  format 1.
 - **Muted text at 4.5:1 or more in both modes, v0.4.1.** Under dark mode the
   sign-in code's box is a slate a step above the dark card with light code on
   it, 9.85:1, and the muted text turns light, 13.31:1 on the page and

package/docs/troubleshooting.md

@@ -27,12 +27,13 @@ How the messages are shaped:
 - [`janusMail: brand must be the name the e-mails show, as 'Acme'`](#janusmail-brand-must-be-the-name-the-e-mails-show-as-acme)
 - [`janusMail: links must be an object, as { verifyEmail, resetPassword, secureAccount, getStarted }`](#janusmail-links-must-be-an-object-as--verifyemail-resetpassword-secureaccount-getstarted-)
 - [`janusMail: links.<name> must be a function`](#janusmail-linksname-must-be-a-function)
+- [`janusMail: links.recoveryCodes must be a function, or left out`](#janusmail-linksrecoverycodes-must-be-a-function-or-left-out)
 - [`janusMail: locales must list at least one locale, as ['en', 'fr']`](#janusmail-locales-must-list-at-least-one-locale-as-en-fr)
 - [`janusMail: locales must be BCP 47 language tags, as 'fr-CA'`](#janusmail-locales-must-be-bcp-47-language-tags-as-fr-ca)
 - [`janusMail: locales holds the same locale twice`](#janusmail-locales-holds-the-same-locale-twice)
 - [`janusMail: fallbackLocale must be one of locales`](#janusmail-fallbacklocale-must-be-one-of-locales)
 - [`janusMail: templates must be an object of functions, as { verifyEmail: (variables) => rendered }`](#janusmail-templates-must-be-an-object-of-functions-as--verifyemail-variables--rendered-)
-- [`janusMail: templates has no template <name> — name one of verifyEmail, resetPassword, signInCode, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, welcome`](#janusmail-templates-has-no-template-name--name-one-of-verifyemail-resetpassword-signincode-passwordchanged-emailchanged-twofactorenabled-twofactordisabled-welcome)
+- [`janusMail: templates has no template <name> — name one of verifyEmail, resetPassword, signInCode, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, recoveryCodeUsed, welcome`](#janusmail-templates-has-no-template-name--name-one-of-verifyemail-resetpassword-signincode-passwordchanged-emailchanged-twofactorenabled-twofactordisabled-recoverycodeused-welcome)
 - [`janusMail: templates.<name> must be a function`](#janusmail-templatesname-must-be-a-function)
 - [`janusMail: templates.<name> is not an own enumerable property — pass a plain object, as { <name>: (variables) => rendered }`](#janusmail-templatesname-is-not-an-own-enumerable-property--pass-a-plain-object-as--name-variables--rendered-)
 - [`janusMail: clock must be a Clock — an object with a now function`](#janusmail-clock-must-be-a-clock--an-object-with-a-now-function)
@@ -41,6 +42,8 @@ How the messages are shaped:
 **Sending**
 - [`janusMail.<method>: <field> must be a string`](#janusmailmethod-field-must-be-a-string)
 - [`janusMail.<method>: expiresAt must be a Date`](#janusmailmethod-expiresat-must-be-a-date)
+- [`janusMail.recoveryCodeUsed: recoveryCodesLeft must be a count — a whole number, 0 or more — or the sentence to show`](#janusmailrecoverycodeused-recoverycodesleft-must-be-a-count--a-whole-number-0-or-more--or-the-sentence-to-show)
+- [`janusMail.recoveryCodeUsed: recoveryCodesLeft must be the sentence to show in a locale the default e-mails are not built in`](#janusmailrecoverycodeused-recoverycodesleft-must-be-the-sentence-to-show-in-a-locale-the-default-e-mails-are-not-built-in)
 - [`janusMail.<method>: clock.now() must answer a Date`](#janusmailmethod-clocknow-must-answer-a-date)
 - [`janusMail.<method>: expiresAt is past — the link or code would not work`](#janusmailmethod-expiresat-is-past--the-link-or-code-would-not-work)
 - [`This link expires in 1 hour.` — in the wrong language, or shorter than the `tokens` TTL](#this-link-expires-in-1-hour--in-the-wrong-language-or-shorter-than-the-tokens-ttl)
@@ -55,14 +58,17 @@ How the messages are shaped:
 - [The button all but vanishes in dark mode](#the-button-all-but-vanishes-in-dark-mode)
 - [The sign-in code's box stays a light slab in dark mode](#the-sign-in-codes-box-stays-a-light-slab-in-dark-mode)
 - [The sign-in code turns unreadable in dark mode after upgrading `@nxgt/mail-ui` to 0.7](#the-sign-in-code-turns-unreadable-in-dark-mode-after-upgrading-nxgtmail-ui-to-07)
-- [The link under the button is faint in light mode](#the-link-under-the-button-is-faint-in-light-mode)
+- [The link under the button is faint in light mode, or in dark mode](#the-link-under-the-button-is-faint-in-light-mode-or-in-dark-mode)
 
 **Compile errors**
 - [`TS2345: Argument of type '(IssuedToken & { user: … }) | null' is not assignable to parameter of type 'IssuedToken'.`](#ts2345-argument-of-type-issuedtoken---user----null-is-not-assignable-to-parameter-of-type-issuedtoken)
 - [`TS2345: … Types of property 'expiresAt' are incompatible. Type 'string' is not assignable to type 'Date'.`](#ts2345--types-of-property-expiresat-are-incompatible-type-string-is-not-assignable-to-type-date)
 - [`TS2739: Type '{ … }' is missing the following properties from type 'JanusMailTemplates<…>'`](#ts2739-type----is-missing-the-following-properties-from-type-janusmailtemplates)
+- [`TS2741: Property 'recoveryCodeUsed' is missing in type '{ … }' but required in type 'JanusMailTemplates<…>'.`](#ts2741-property-recoverycodeused-is-missing-in-type----but-required-in-type-janusmailtemplates)
 - [`TS2322: Type '"de"' is not assignable to type '"en" | "fr"'.`](#ts2322-type-de-is-not-assignable-to-type-en--fr)
 - [`TS2741: Property 'getStarted' is missing in type '{ … }' but required in type 'JanusMailLinks'.`](#ts2741-property-getstarted-is-missing-in-type----but-required-in-type-janusmaillinks)
+- [`TS2322: Type 'number | null' is not assignable to type 'string | number'.`](#ts2322-type-number--null-is-not-assignable-to-type-string--number)
+- [`TS2322: Type 'Date' is not assignable to type 'string'.`](#ts2322-type-date-is-not-assignable-to-type-string)
 
 ---
 
@@ -107,8 +113,8 @@ janusMail({ mailer, from, brand: 'Acme', links });
 
 ### `janusMail: links must be an object, as { verifyEmail, resetPassword, secureAccount, getStarted }`
 
-No `links`. All four are required: the notices link to `secureAccount`, and
-the welcome to `getStarted`.
+No `links`. Four are required: the notices link to `secureAccount`, and
+the welcome to `getStarted`. A fifth, `recoveryCodes`, is optional.
 
 ### `janusMail: links.<name> must be a function`
 
@@ -131,6 +137,17 @@ link the welcome e-mail added in 0.4.0: `links` written for 0.3 has no
 sign-in page — even if you never send the welcome. In TypeScript the same
 `links` is a compile error on `links`, `Property 'getStarted' is missing`.
 
+### `janusMail: links.recoveryCodes must be a function, or left out`
+
+`links.recoveryCodes` given as a URL, or as anything but a function. It is
+optional — the recovery code notice links to `secureAccount` without it —
+but when given it takes nothing and answers the page where the user
+regenerates their codes:
+
+```ts
+links: { …, recoveryCodes: () => 'https://acme.example/account/recovery-codes' },
+```
+
 ### `janusMail: locales must list at least one locale, as ['en', 'fr']`
 
 `locales: []`, `locales: 'en'`, or a list holding something that is not a
@@ -163,9 +180,9 @@ A `fallbackLocale` the list does not hold — `'de'` with the default
 
 `templates` given as a list or a function. Key each template by its name.
 
-### `janusMail: templates has no template <name> — name one of verifyEmail, resetPassword, signInCode, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, welcome`
+### `janusMail: templates has no template <name> — name one of verifyEmail, resetPassword, signInCode, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, recoveryCodeUsed, welcome`
 
-A key that is not one of the eight — `magicLink`, or the e-mail's file name
+A key that is not one of the nine — `magicLink`, or the e-mail's file name
 `'verify-email'` rather than the template's, `verifyEmail`. Other e-mails are
 on the [roadmap](roadmap.md); send them with `@nxgt/mail` directly meanwhile.
 
@@ -199,7 +216,7 @@ as it is: fields are own properties.
 ### `janusMail: the default templates are built in en and fr only — with another locale in locales, pass every template in templates; <names> missing`
 
 `locales` holds a locale beyond `en` and `fr`, and `templates` leaves some
-out: the defaults could not render them in that locale. Pass all eight — see
+out: the defaults could not render them in that locale. Pass all nine — see
 [Adding a locale](guide/locales.md#adding-a-locale) — or drop the locale.
 The message lists the templates missing.
 
@@ -238,14 +255,19 @@ number of seconds: pass the text to show, `{ expiresIn: '1 hour' }`, or
 leave it out.
 
 `janusMail.twoFactorEnabled: email must be a string` (or `twoFactorDisabled`,
-or `welcome`) is the user event itself given to the e-mail: an event names the user by id
-alone. Read the user first:
+`recoveryCodeUsed` or `welcome`) is the user event itself given to the
+e-mail: an event names the user by id alone. Read the user first:
 
 ```ts
 const user = await auth.get(event.userId);
 await mail.twoFactorDisabled({ name: user.name, locale: user.locale, email: user.email });
 ```
 
+`janusMail.recoveryCodeUsed: when must be a string` is the second argument
+missing, or its `when` given as the event's `Date`: pass the text to show,
+formatted in the recipient's locale and time zone —
+`new Intl.DateTimeFormat(user.locale, { dateStyle: 'long', timeStyle: 'short', timeZone }).format(event.occurredAt)`.
+
 ### `janusMail.<method>: expiresAt must be a Date`
 
 A `TypeError` from `verifyEmail`, `resetPassword` or `signInCode`: the e-mail
@@ -261,6 +283,32 @@ await mail.verifyEmail(issued, { name: job.name });
 await mail.verifyEmail(job.issued, { name: job.name }, { expiresIn: '1 day' });
 ```
 
+### `janusMail.recoveryCodeUsed: recoveryCodesLeft must be a count — a whole number, 0 or more — or the sentence to show`
+
+A `TypeError`, before anything is rendered or sent. `recoveryCodesLeft` was
+`null`, negative, a fraction, `NaN`, or missing. The usual cause is
+`auth.secondFactor.recoveryCodesLeft(user)`'s answer passed unchecked: it is
+`null` for a user with no active factor — turned off since the code was
+spent — who has no codes to count. Check it, and send nothing then:
+
+```ts
+const recoveryCodesLeft = await auth.secondFactor.recoveryCodesLeft(user);
+if (recoveryCodesLeft !== null) {
+	await mail.recoveryCodeUsed(to, { when, recoveryCodesLeft });
+}
+```
+
+### `janusMail.recoveryCodeUsed: recoveryCodesLeft must be the sentence to show in a locale the default e-mails are not built in`
+
+A `TypeError`, before anything is sent: the recipient's locale is one of
+yours beyond `en` and `fr`, and `recoveryCodesLeft` is a count. The plural
+of the codes left is in the build's catalogue, in `en` and `fr` only, so the
+count cannot be written for that locale. Pass the sentence as text:
+
+```ts
+await mail.recoveryCodeUsed(to, { when, recoveryCodesLeft: `Sie haben noch ${left} Wiederherstellungscodes.` });
+```
+
 ### `janusMail.<method>: clock.now() must answer a Date`
 
 A `TypeError` from `verifyEmail`, `resetPassword` or `signInCode`: the
@@ -320,6 +368,7 @@ A `TypeError` from a call, before anything is rendered or sent
 (`mailer.attempts` stays 0) — `janusMail.verifyEmail: links.verifyEmail(token)
 must answer a string`, `janusMail.emailChanged: links.secureAccount() must
 answer a string`, `janusMail.welcome: links.getStarted() must answer a
+string`, `janusMail.recoveryCodeUsed: links.recoveryCodes() must answer a
 string`. The `links` function answered something other than a
 string: a `URL` object, `undefined`, or a promise — an `async` function.
 Answer `url.href`, and compute the link synchronously:
@@ -379,7 +428,7 @@ try {
 ```
 
 This package retries nothing: a retry is your decision. To retry in
-process, pass a mailer wrapped in `@nxgt/mail` 0.8's `withRetry`; once its
+process, pass a mailer wrapped in `@nxgt/mail`'s `withRetry` (0.8 or later); once its
 attempts run out it rejects with the last `MailFailure`, `attempts` on it —
 see [Retrying and tracing the mailer](guide/sending.md#retrying-and-tracing-the-mailer).
 
@@ -396,7 +445,7 @@ avoids the read altogether. (In this repository: run `bun run build`.)
 
 The default templates read `mails/` with `node:fs`, through
 `@nxgt/mail/renderer`: Node, Bun or Deno only. On an edge runtime, pass all
-eight templates yourself; an inlined build is on the [roadmap](roadmap.md).
+nine templates yourself; an inlined build is on the [roadmap](roadmap.md).
 
 ### An e-mail stays light in dark mode
 
@@ -466,17 +515,33 @@ the code at 1.86:1 once rebuilt with `@nxgt/mail-ui` 0.7.0. Through 0.6.0,
 no one value suits a mid-slate box: set a dark `color-muted-dark` and a
 light `color-muted-foreground-dark`, as in the entry above.
 
-### The link under the button is faint in light mode
+### The link under the button is faint in light mode, or in dark mode
 
 The link repeated in text under the button, for a client that shows no
-button, is `@nxgt/mail-ui`'s `NxLink`, coloured with its info blue
-(`#54a2ff`) in both modes: 2.63:1 on the light card, 6.78:1 on the dark
-one. It is the one text of the defaults under 4.5:1. `color-info` has no
-dark twin, and no single value reaches 4.5:1 on both the white card and the
-dark card, so the defaults leave it as it is rather than trade the dark
-mode for the light one; it is `@nxgt/mail-ui`'s to fix. A template of your
-own can colour its link with the primary instead, which has a dark twin:
-`NxLink` merges a `class` over its own `text-info`, and
+button, is `@nxgt/mail-ui`'s `NxLink`, coloured with its info blue. Through
+0.4, the defaults kept `@nxgt/mail-ui`'s `#54a2ff` in both modes: 2.63:1 on
+the light card, 6.78:1 on the dark one. Since 0.5.0 they are built with
+`@nxgt/mail-ui` 1.0, whose info blue has a dark twin, and set one blue per
+mode: `#1d4ed8` on the light card, 6.70:1, and `#93c5fd` on the dark card,
+9.89:1. Upgrade to read it.
+
+A template of your own built with `@nxgt/mail-ui` 1.0.0 or later sets the
+same pair in its `theme` — a light `color-info` dark enough for the white
+card, and a `color-info-dark` light enough for the dark one; no single
+value reaches 4.5:1 on both:
+
+```ts
+ui({
+	brand: { name: 'Acme' },
+	theme: {
+		'color-info': '#1d4ed8', // the link on the light card, 6.70:1
+		'color-info-dark': '#93c5fd', // the link on the dark card, 9.89:1
+	},
+});
+```
+
+Before 1.0, colour the link with the primary instead, which has a dark
+twin: `NxLink` merges a `class` over its own `text-info`, and
 `nx-dark-text-primary` follows `color-primary-dark` in dark mode:
 
 ```vue
@@ -511,7 +576,18 @@ whole.
 ### `TS2739: Type '{ … }' is missing the following properties from type 'JanusMailTemplates<…>'`
 
 `locales` holds a locale beyond `en` and `fr`, and `templates` does not give
-all eight. See [Adding a locale](guide/locales.md#adding-a-locale).
+all nine. With five or more missing, the code is `TS2740` and the list ends
+`…, and 4 more.` See [Adding a locale](guide/locales.md#adding-a-locale).
+
+### `TS2741: Property 'recoveryCodeUsed' is missing in type '{ … }' but required in type 'JanusMailTemplates<…>'.`
+
+`templates` written for 0.4, with a locale beyond `en` and `fr`: since
+0.5.0 there are nine templates, and with such a locale every one is yours.
+Add `recoveryCodeUsed` — it is given `brand`, `name`, `when`,
+`recoveryCodesLeft` (a sentence) and `link` — even if you never send it; in
+JavaScript the same `templates` is
+[`janusMail: the default templates are built in en and fr only — …; recoveryCodeUsed missing`](#janusmail-the-default-templates-are-built-in-en-and-fr-only--with-another-locale-in-locales-pass-every-template-in-templates-names-missing).
+See [Templates](guide/templates.md#what-each-template-is-given).
 
 ### `TS2322: Type '"de"' is not assignable to type '"en" | "fr"'.`
 
@@ -533,3 +609,20 @@ links: {
 	getStarted: () => 'https://acme.example/',
 },
 ```
+
+### `TS2322: Type 'number | null' is not assignable to type 'string | number'.`
+
+On `recoveryCodesLeft`: `auth.secondFactor.recoveryCodesLeft(user)`'s
+answer, passed without checking it for `null`. A user with no active factor
+has no codes to count; check it first, as in
+[`recoveryCodesLeft must be a count`](#janusmailrecoverycodeused-recoverycodesleft-must-be-a-count--a-whole-number-0-or-more--or-the-sentence-to-show).
+
+### `TS2322: Type 'Date' is not assignable to type 'string'.`
+
+On `when`: the event's `occurredAt` passed as it is. `when` is the text the
+e-mail shows — format it in the recipient's locale and time zone first:
+
+```ts
+const when = new Intl.DateTimeFormat(user.locale, { dateStyle: 'long', timeStyle: 'short', timeZone: 'Europe/Paris' })
+	.format(event.occurredAt);
+```

package/mails/en/email-changed.html

@@ -10,11 +10,11 @@
 -8.51797)!important;}[data-ogsb] .nx-dark-bg-background{background-color:#020918!important;background-color:lab(2.35721% .367686 -8.51797)!important;}[data-ogsc] .nx-dark-text-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}[data-ogsb] .nx-dark-text-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}[data-ogsc] .nx-dark-text-foreground-25{color:#404551!important;}[data-ogsb] .nx-dark-text-foreground-25{color:#404551!important;}
 [data-ogsc] .nx-dark-text-card-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}[data-ogsb] .nx-dark-text-card-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}[data-ogsc] .nx-dark-border-border{border-color:#1c212f!important;}[data-ogsb] .nx-dark-border-border{border-color:#1c212f!important;}[data-ogsc] .nx-dark-bg-muted{background-color:#1e293b!important;}[data-ogsb] .nx-dark-bg-muted{background-color:#1e293b!important;}
 [data-ogsc] .nx-dark-text-muted-foreground{color:#cbd5e1!important;}[data-ogsb] .nx-dark-text-muted-foreground{color:#cbd5e1!important;}[data-ogsc] .nx-dark-border-muted-foreground{border-color:#cbd5e1!important;}[data-ogsb] .nx-dark-border-muted-foreground{border-color:#cbd5e1!important;}[data-ogsc] .nx-dark-border-muted{border-color:#1e293b!important;}[data-ogsb] .nx-dark-border-muted{border-color:#1e293b!important;}[data-ogsc] .nx-dark-bg-primary{background-color:#fafafa!important;}
-[data-ogsb] .nx-dark-bg-primary{background-color:#fafafa!important;}[data-ogsc] .nx-dark-text-primary{color:#fafafa!important;}[data-ogsb] .nx-dark-text-primary{color:#fafafa!important;}[data-ogsc] .nx-dark-text-primary-foreground{color:#18181b!important;}[data-ogsb] .nx-dark-text-primary-foreground{color:#18181b!important;}[data-ogsc] .nx-dark-border-primary{border-color:#fafafa!important;}[data-ogsb] .nx-dark-border-primary{border-color:#fafafa!important;}[data-ogsc] .nx-dark-bg-primary-15{
-background-color:#272d3a!important;}[data-ogsb] .nx-dark-bg-primary-15{background-color:#272d3a!important;}[data-ogsc] .nx-dark-bg-primary-20{background-color:#343945!important;}[data-ogsb] .nx-dark-bg-primary-20{background-color:#343945!important;}[data-ogsc] .nx-dark-border-primary-40{border-color:#656972!important;}[data-ogsb] .nx-dark-border-primary-40{border-color:#656972!important;}[data-ogsc] .nx-dark-border-primary-50{border-color:#7e8189!important;}[data-ogsb] .nx-dark-border-primary-50
-{border-color:#7e8189!important;}[data-ogsc] .nx-light-only{display:none!important;}[data-ogsb] .nx-light-only{display:none!important;}[data-ogsc] .nx-dark-only{display:inline-block!important;}[data-ogsb] .nx-dark-only{display:inline-block!important;}
+[data-ogsb] .nx-dark-bg-primary{background-color:#fafafa!important;}[data-ogsc] .nx-dark-text-primary{color:#fafafa!important;}[data-ogsb] .nx-dark-text-primary{color:#fafafa!important;}[data-ogsc] .nx-dark-text-primary-foreground{color:#18181b!important;}[data-ogsb] .nx-dark-text-primary-foreground{color:#18181b!important;}[data-ogsc] .nx-dark-text-info{color:#93c5fd!important;}[data-ogsb] .nx-dark-text-info{color:#93c5fd!important;}[data-ogsc] .nx-dark-border-primary{border-color:#fafafa
+!important;}[data-ogsb] .nx-dark-border-primary{border-color:#fafafa!important;}[data-ogsc] .nx-dark-bg-primary-15{background-color:#272d3a!important;}[data-ogsb] .nx-dark-bg-primary-15{background-color:#272d3a!important;}[data-ogsc] .nx-dark-bg-primary-20{background-color:#343945!important;}[data-ogsb] .nx-dark-bg-primary-20{background-color:#343945!important;}[data-ogsc] .nx-dark-border-primary-40{border-color:#656972!important;}[data-ogsb] .nx-dark-border-primary-40{border-color:#656972
+!important;}[data-ogsc] .nx-dark-border-primary-50{border-color:#7e8189!important;}[data-ogsb] .nx-dark-border-primary-50{border-color:#7e8189!important;}[data-ogsc] .nx-light-only{display:none!important;}[data-ogsb] .nx-light-only{display:none!important;}[data-ogsc] .nx-dark-only{display:inline-block!important;}[data-ogsb] .nx-dark-only{display:inline-block!important;}
 @media (prefers-color-scheme:dark){html{--lightningcss-light:;--lightningcss-dark:initial;}.nx-dark-bg-paper{background-color:#040a19!important;}.nx-dark-bg-card{background-color:#0f172b!important;background-color:lab(7.78673% 1.82345 -15.0537)!important;}.nx-dark-text-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}.nx-dark-text-card-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}.nx-dark-border-border{border-color:#1c212f
-!important;}.nx-dark-text-muted-foreground{color:#cbd5e1!important;}.nx-dark-bg-primary{background-color:#fafafa!important;}.nx-dark-text-primary-foreground{color:#18181b!important;} }
+!important;}.nx-dark-text-muted-foreground{color:#cbd5e1!important;}.nx-dark-bg-primary{background-color:#fafafa!important;}.nx-dark-text-primary-foreground{color:#18181b!important;}.nx-dark-text-info{color:#93c5fd!important;} }
 </style>
 </head>
 <body xml:lang="en" dir="ltr" style="margin:0;padding:0;width:100%;height:100%;word-break:break-word;background-color:#f4f4f4;" class="nx-dark-bg-paper"><div style="display:none;">Your account now signs in with a new address.&#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847;
@@ -42,7 +42,7 @@ background-color:#272d3a!important;}[data-ogsb] .nx-dark-bg-primary-15{backgroun
 <!--[if mso]><i style="mso-font-width:114%;mso-text-raise:19px;" hidden>&emsp;</i>
 <![endif]--> <span style="mso-text-raise:10px;">Undo this change</span>
 <!--[if mso]><i style="mso-font-width:114%;" hidden>&emsp;&#8203;</i>
-<![endif]--></a></div><div role="separator" style="line-height:24px;">&zwj;</div><p class="nx-dark-text-foreground" style="margin:0 0 16px;font-size:12px;line-height:16px;color:#5f718a;">If the button does not work, open this link: <a href="{{ link }}" style="color:#54a2ff;color:lab(65.0361% -1.42065 -56.9802);text-decoration:underline;">{{ link }}</a></p>
+<![endif]--></a></div><div role="separator" style="line-height:24px;">&zwj;</div><p class="nx-dark-text-foreground" style="margin:0 0 16px;font-size:12px;line-height:16px;color:#5f718a;">If the button does not work, open this link: <a href="{{ link }}" class="nx-dark-text-info" style="color:#1d4ed8;text-decoration:underline;">{{ link }}</a></p>
 </td></tr><tr><td class="nx-dark-text-muted-foreground" style="padding-left:24px;padding-right:24px;padding-top:24px;text-align:center;font-size:12px;line-height:16px;color:#5f718a;"><p style="margin:0 0 8px;">You received this e-mail because you have an account with {{ brand }}.</p><p style="margin:0;">{{ brand }}</p>
 </td></tr></table></div>
 <!--[if mso]>

package/mails/en/password-changed.html

@@ -10,11 +10,11 @@
 -8.51797)!important;}[data-ogsb] .nx-dark-bg-background{background-color:#020918!important;background-color:lab(2.35721% .367686 -8.51797)!important;}[data-ogsc] .nx-dark-text-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}[data-ogsb] .nx-dark-text-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}[data-ogsc] .nx-dark-text-foreground-25{color:#404551!important;}[data-ogsb] .nx-dark-text-foreground-25{color:#404551!important;}
 [data-ogsc] .nx-dark-text-card-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}[data-ogsb] .nx-dark-text-card-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}[data-ogsc] .nx-dark-border-border{border-color:#1c212f!important;}[data-ogsb] .nx-dark-border-border{border-color:#1c212f!important;}[data-ogsc] .nx-dark-bg-muted{background-color:#1e293b!important;}[data-ogsb] .nx-dark-bg-muted{background-color:#1e293b!important;}
 [data-ogsc] .nx-dark-text-muted-foreground{color:#cbd5e1!important;}[data-ogsb] .nx-dark-text-muted-foreground{color:#cbd5e1!important;}[data-ogsc] .nx-dark-border-muted-foreground{border-color:#cbd5e1!important;}[data-ogsb] .nx-dark-border-muted-foreground{border-color:#cbd5e1!important;}[data-ogsc] .nx-dark-border-muted{border-color:#1e293b!important;}[data-ogsb] .nx-dark-border-muted{border-color:#1e293b!important;}[data-ogsc] .nx-dark-bg-primary{background-color:#fafafa!important;}
-[data-ogsb] .nx-dark-bg-primary{background-color:#fafafa!important;}[data-ogsc] .nx-dark-text-primary{color:#fafafa!important;}[data-ogsb] .nx-dark-text-primary{color:#fafafa!important;}[data-ogsc] .nx-dark-text-primary-foreground{color:#18181b!important;}[data-ogsb] .nx-dark-text-primary-foreground{color:#18181b!important;}[data-ogsc] .nx-dark-border-primary{border-color:#fafafa!important;}[data-ogsb] .nx-dark-border-primary{border-color:#fafafa!important;}[data-ogsc] .nx-dark-bg-primary-15{
-background-color:#272d3a!important;}[data-ogsb] .nx-dark-bg-primary-15{background-color:#272d3a!important;}[data-ogsc] .nx-dark-bg-primary-20{background-color:#343945!important;}[data-ogsb] .nx-dark-bg-primary-20{background-color:#343945!important;}[data-ogsc] .nx-dark-border-primary-40{border-color:#656972!important;}[data-ogsb] .nx-dark-border-primary-40{border-color:#656972!important;}[data-ogsc] .nx-dark-border-primary-50{border-color:#7e8189!important;}[data-ogsb] .nx-dark-border-primary-50
-{border-color:#7e8189!important;}[data-ogsc] .nx-light-only{display:none!important;}[data-ogsb] .nx-light-only{display:none!important;}[data-ogsc] .nx-dark-only{display:inline-block!important;}[data-ogsb] .nx-dark-only{display:inline-block!important;}
+[data-ogsb] .nx-dark-bg-primary{background-color:#fafafa!important;}[data-ogsc] .nx-dark-text-primary{color:#fafafa!important;}[data-ogsb] .nx-dark-text-primary{color:#fafafa!important;}[data-ogsc] .nx-dark-text-primary-foreground{color:#18181b!important;}[data-ogsb] .nx-dark-text-primary-foreground{color:#18181b!important;}[data-ogsc] .nx-dark-text-info{color:#93c5fd!important;}[data-ogsb] .nx-dark-text-info{color:#93c5fd!important;}[data-ogsc] .nx-dark-border-primary{border-color:#fafafa
+!important;}[data-ogsb] .nx-dark-border-primary{border-color:#fafafa!important;}[data-ogsc] .nx-dark-bg-primary-15{background-color:#272d3a!important;}[data-ogsb] .nx-dark-bg-primary-15{background-color:#272d3a!important;}[data-ogsc] .nx-dark-bg-primary-20{background-color:#343945!important;}[data-ogsb] .nx-dark-bg-primary-20{background-color:#343945!important;}[data-ogsc] .nx-dark-border-primary-40{border-color:#656972!important;}[data-ogsb] .nx-dark-border-primary-40{border-color:#656972
+!important;}[data-ogsc] .nx-dark-border-primary-50{border-color:#7e8189!important;}[data-ogsb] .nx-dark-border-primary-50{border-color:#7e8189!important;}[data-ogsc] .nx-light-only{display:none!important;}[data-ogsb] .nx-light-only{display:none!important;}[data-ogsc] .nx-dark-only{display:inline-block!important;}[data-ogsb] .nx-dark-only{display:inline-block!important;}
 @media (prefers-color-scheme:dark){html{--lightningcss-light:;--lightningcss-dark:initial;}.nx-dark-bg-paper{background-color:#040a19!important;}.nx-dark-bg-card{background-color:#0f172b!important;background-color:lab(7.78673% 1.82345 -15.0537)!important;}.nx-dark-text-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}.nx-dark-text-card-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}.nx-dark-border-border{border-color:#1c212f
-!important;}.nx-dark-text-muted-foreground{color:#cbd5e1!important;}.nx-dark-bg-primary{background-color:#fafafa!important;}.nx-dark-text-primary-foreground{color:#18181b!important;} }
+!important;}.nx-dark-text-muted-foreground{color:#cbd5e1!important;}.nx-dark-bg-primary{background-color:#fafafa!important;}.nx-dark-text-primary-foreground{color:#18181b!important;}.nx-dark-text-info{color:#93c5fd!important;} }
 </style>
 </head>
 <body xml:lang="en" dir="ltr" style="margin:0;padding:0;width:100%;height:100%;word-break:break-word;background-color:#f4f4f4;" class="nx-dark-bg-paper"><div style="display:none;">The password of your account was just changed.&#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847;
@@ -42,7 +42,7 @@ background-color:#272d3a!important;}[data-ogsb] .nx-dark-bg-primary-15{backgroun
 <!--[if mso]><i style="mso-font-width:114%;mso-text-raise:19px;" hidden>&emsp;</i>
 <![endif]--> <span style="mso-text-raise:10px;">Secure my account</span>
 <!--[if mso]><i style="mso-font-width:114%;" hidden>&emsp;&#8203;</i>
-<![endif]--></a></div><div role="separator" style="line-height:24px;">&zwj;</div><p class="nx-dark-text-foreground" style="margin:0 0 16px;font-size:12px;line-height:16px;color:#5f718a;">If the button does not work, open this link: <a href="{{ link }}" style="color:#54a2ff;color:lab(65.0361% -1.42065 -56.9802);text-decoration:underline;">{{ link }}</a></p>
+<![endif]--></a></div><div role="separator" style="line-height:24px;">&zwj;</div><p class="nx-dark-text-foreground" style="margin:0 0 16px;font-size:12px;line-height:16px;color:#5f718a;">If the button does not work, open this link: <a href="{{ link }}" class="nx-dark-text-info" style="color:#1d4ed8;text-decoration:underline;">{{ link }}</a></p>
 </td></tr><tr><td class="nx-dark-text-muted-foreground" style="padding-left:24px;padding-right:24px;padding-top:24px;text-align:center;font-size:12px;line-height:16px;color:#5f718a;"><p style="margin:0 0 8px;">You received this e-mail because you have an account with {{ brand }}.</p><p style="margin:0;">{{ brand }}</p>
 </td></tr></table></div>
 <!--[if mso]>