@nxgt/janus-mail 0.5.2 → 0.7.0

package/dist/types.d.ts

@@ -54,6 +54,15 @@ export interface JanusMailLinks {
      * the codes usually are.
      */
     readonly recoveryCodes?: () => string;
+    /**
+     * The page a sign-in link opens, given its one-time token —
+     * `magicLink` links to it. **Optional**, for an application that sends no
+     * sign-in link; without it, `magicLink` throws a `TypeError` before
+     * anything is rendered. That page spends nothing: its button posts the
+     * token to the route that calls `auth.magicLink.confirm`, so a mail
+     * scanner that opens the link does not sign in for the user.
+     */
+    readonly magicLink?: (token: string) => string;
 }
 /** The options every locale set shares. */
 interface JanusMailBaseOptions<L extends string> {
@@ -78,7 +87,7 @@ interface JanusMailBaseOptions<L extends string> {
     readonly clock?: Clock;
 }
 /**
- * What one send of `verifyEmail`, `resetPassword` or `signInCode` may pass
+ * What one send of `verifyEmail`, `resetPassword`, `signInCode` or `magicLink` may pass
  * besides the flow's answer and the recipient.
  */
 export interface JanusMailSendOptions {
@@ -120,6 +129,14 @@ export interface JanusMail<L extends string = JanusMailLocale> {
      * the e-mail.
      */
     signInCode(issued: Pick<IssuedCode<unknown>, 'code' | 'email' | 'expiresAt'>, to?: Pick<Recipient, 'locale'>, options?: JanusMailSendOptions): Promise<SentMail>;
+    /**
+     * The sign-in link `auth.magicLink.request(email)` answered, once checked
+     * for `null`, to `issued.email` — its button and its fallback link built
+     * by `links.magicLink(issued.token)`, saying how long it stays valid.
+     * Greets nobody by name, as a sign-in code does not. A `TypeError`, before
+     * anything is rendered, when `janusMail()` was given no `links.magicLink`.
+     */
+    magicLink(issued: IssuedToken, to?: Pick<Recipient, 'locale'>, options?: JanusMailSendOptions): Promise<SentMail>;
     /** Tells `to.email` their password was changed, with a link to secure the account. */
     passwordChanged(to: Recipient & {
         readonly email: string;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,YAAY,EACX,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,GAClB,MAAM,kBAAkB,CAAC;AAE1B;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CAChC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC9B,6HAA6H;IAC7H,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAChD,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,MAAM,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;CACtC;AAED,2CAA2C;AAC3C,UAAU,oBAAoB,CAAC,CAAC,SAAS,MAAM;IAC9C,kGAAkG;IAClG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,qFAAqF;IACrF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;IAChC,wGAAwG;IACxG,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,MAAM,GAAG,eAAe,IAC9D,oBAAoB,CAAC,CAAC,CAAC,GACtB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,GAC3B;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAA;CAAE,CAAC,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,SAAS,CAAC,CAAC,SAAS,MAAM,GAAG,eAAe;IAC5D;;;;OAIG;IACH,WAAW,CACV,MAAM,EAAE,WAAW,EACnB,EAAE,EAAE,SAAS,EACb,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB,qGAAqG;IACrG,aAAa,CACZ,MAAM,EAAE,WAAW,EACnB,EAAE,EAAE,SAAS,EACb,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB;;;;OAIG;IACH,UAAU,CACT,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC,EACjE,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB,sFAAsF;IACtF,eAAe,CACd,EAAE,EAAE,SAAS,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GACxC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB,6GAA6G;IAC7G,YAAY,CACX,EAAE,EAAE,SAAS,GAAG;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GACzE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB;;;;OAIG;IACH,gBAAgB,CACf,EAAE,EAAE,SAAS,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GACxC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB;;;;OAIG;IACH,iBAAiB,CAChB,EAAE,EAAE,SAAS,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GACxC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB;;;;OAIG;IACH,OAAO,CAAC,EAAE,EAAE,SAAS,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvE;;;;;;;;;;;OAWG;IACH,gBAAgB,CACf,EAAE,EAAE,SAAS,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAC1C,IAAI,EAAE;QACL,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,MAAM,CAAC;KAC5C,GACC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB,sEAAsE;IACtE,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAC1C,2BAA2B;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;CAC/B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,YAAY,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,YAAY,EACX,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,GAClB,MAAM,kBAAkB,CAAC;AAE1B;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;CAChC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC9B,6HAA6H;IAC7H,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAChD,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,MAAM,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,MAAM,MAAM,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,MAAM,CAAC;IACtC;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CAC/C;AAED,2CAA2C;AAC3C,UAAU,oBAAoB,CAAC,CAAC,SAAS,MAAM;IAC9C,kGAAkG;IAClG,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kCAAkC;IAClC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,8CAA8C;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,qFAAqF;IACrF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;IAC/B,sEAAsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;IAChC,wGAAwG;IACxG,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACpC;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,MAAM,gBAAgB,CAAC,CAAC,SAAS,MAAM,GAAG,eAAe,IAC9D,oBAAoB,CAAC,CAAC,CAAC,GACtB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,GAC3B;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAA;CAAE,CAAC,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,SAAS,CAAC,CAAC,SAAS,MAAM,GAAG,eAAe;IAC5D;;;;OAIG;IACH,WAAW,CACV,MAAM,EAAE,WAAW,EACnB,EAAE,EAAE,SAAS,EACb,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB,qGAAqG;IACrG,aAAa,CACZ,MAAM,EAAE,WAAW,EACnB,EAAE,EAAE,SAAS,EACb,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB;;;;OAIG;IACH,UAAU,CACT,MAAM,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC,EACjE,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB;;;;;;OAMG;IACH,SAAS,CACR,MAAM,EAAE,WAAW,EACnB,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAC9B,OAAO,CAAC,EAAE,oBAAoB,GAC5B,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB,sFAAsF;IACtF,eAAe,CACd,EAAE,EAAE,SAAS,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GACxC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB,6GAA6G;IAC7G,YAAY,CACX,EAAE,EAAE,SAAS,GAAG;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GACzE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB;;;;OAIG;IACH,gBAAgB,CACf,EAAE,EAAE,SAAS,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GACxC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB;;;;OAIG;IACH,iBAAiB,CAChB,EAAE,EAAE,SAAS,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GACxC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB;;;;OAIG;IACH,OAAO,CAAC,EAAE,EAAE,SAAS,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvE;;;;;;;;;;;OAWG;IACH,gBAAgB,CACf,EAAE,EAAE,SAAS,GAAG;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAC1C,IAAI,EAAE;QACL,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,MAAM,CAAC;KAC5C,GACC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB,sEAAsE;IACtE,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAC1C,2BAA2B;IAC3B,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;CAC/B"}

package/docs/README.md

@@ -5,7 +5,7 @@ the detail.
 
 | Page | Read it when |
 | --- | --- |
-| [Sending](guide/sending.md) | You are wiring `janusMail()` into your routes: the options, `clock` among them; each method, the welcome on `user.created` and the recovery code notice on `user.recoveryCodeUsed` among them; the expiry an e-mail states and how to set it, where each e-mail goes, what a failure looks like, retrying and tracing the mailer, and a test |
+| [Sending](guide/sending.md) | You are wiring `janusMail()` into your routes: the options, `clock` among them; each method, the welcome on `user.created`, the recovery code notice on `user.recoveryCodeUsed` and the change notices on `user.passwordChanged` and `user.emailChanged` among them; the expiry an e-mail states and how to set it, where each e-mail goes, what a failure looks like, retrying and tracing the mailer, and a test |
 | [Templates](guide/templates.md) | You want an e-mail of your own: what a template takes and answers, a partial override, `janusTemplates()`, and what the defaults say |
 | [Locales](guide/locales.md) | You send in more than one language: how the locale is picked, `fallbackLocale`, fewer locales, and adding one |
 | [Building](guide/building.md) | You work on this package: the Maizzle project in `mail/`, `mails/`, the generated files, and why none of it reaches a consumer's build |
@@ -23,11 +23,11 @@ They mean the same here. These pages add:
 
 | Word | Means | Not |
 | --- | --- | --- |
-| **e-mail** | One of the nine this package sends: `verify-email`, `reset-password`, `sign-in-code`, `password-changed`, `email-changed`, `two-factor-enabled`, `two-factor-disabled`, `recovery-code-used`, `welcome` — by the name of its built file | "mail", "message" — a *message* is what a mailer sends, addressed |
+| **e-mail** | One of the ten this package sends: `verify-email`, `reset-password`, `sign-in-code`, `magic-link`, `password-changed`, `email-changed`, `two-factor-enabled`, `two-factor-disabled`, `recovery-code-used`, `welcome` — by the name of its built file | "mail", "message" — a *message* is what a mailer sends, addressed |
 | **template** | The function that renders one e-mail: `(variables & { locale }) => Rendered`. Named in camelCase, after the method that sends it: `verifyEmail`, `signInCode` | "renderer" — the renderer is `@nxgt/mail`'s, and reads the build |
 | **default template** | A template of `janusTemplates()`: the prebuilt e-mail, filled by the renderer | "preset" — a preset is `@nxgt/mail-presets`' source, which the build compiles |
 | **override** | A template of yours, passed in `templates`, used instead of the default | "custom template" |
-| **issued** | What a flow answered: an `IssuedToken` from `verifyEmail.send` or `resetPassword.request`, an `IssuedCode` from `signInCode.request` | "result", "payload" |
+| **issued** | What a flow answered: an `IssuedToken` from `verifyEmail.send`, `resetPassword.request` or `magicLink.request`, an `IssuedCode` from `signInCode.request` | "result", "payload" |
 | **recipient** | Who an e-mail is for besides the address: a `Recipient`, `{ name, locale? }` | "user" — a user is a record of `@nxgt/janus`; "to" is the address |
 | **notice** | An e-mail that tells, and asks for nothing: `passwordChanged`, `emailChanged`, `twoFactorEnabled`, `twoFactorDisabled`, `recoveryCodeUsed`. It links to `links.secureAccount()` — `recoveryCodeUsed` to `links.recoveryCodes()` when given | "alert", "notification" |
 | **welcome** | The e-mail sent once a user was created, on `@nxgt/janus`'s `user.created`: `welcome`. It links to `links.getStarted()` — not a notice, since it warns of nothing | "onboarding", "greeting" |

package/docs/guide/building.md

@@ -55,7 +55,7 @@ packages/janus-mail/
    `src/generated/mail.ts` (`rendererTypes`), from the build.
 3. `scripts/build-mail.ts` reads the manifest and **fails unless its
    format is one every `@nxgt/mail` the peer admits reads** — see below —
-   and **unless exactly the nine e-mails were built**: a tenth from a new
+   and **unless exactly the ten e-mails were built**: an eleventh from a new
    `@nxgt/mail-presets`, or one missing, stops the build.
 4. It writes `src/generated/locales.ts` from the manifest's locales, and
    `src/generated/codes-left.ts` — below — each only when its content

package/docs/guide/locales.md

@@ -81,6 +81,7 @@ const templates: JanusMailTemplates<Locale> = {
 	verifyEmail: ({ name, link, expiresIn, locale }) => render('verify-email', locale, { name, link, expiresIn }),
 	resetPassword: ({ name, link, expiresIn, locale }) => render('reset-password', locale, { name, link, expiresIn }),
 	signInCode: ({ code, expiresIn, locale }) => render('sign-in-code', locale, { code, expiresIn }),
+	magicLink: ({ link, expiresIn, locale }) => render('magic-link', locale, { link, expiresIn }),
 	passwordChanged: ({ name, link, locale }) => render('password-changed', locale, { name, link }),
 	emailChanged: ({ name, link, newEmail, locale }) => render('email-changed', locale, { name, link, newEmail }),
 	twoFactorEnabled: ({ name, link, locale }) => render('two-factor-enabled', locale, { name, link }),
@@ -100,22 +101,22 @@ mail.locales; // readonly ('en' | 'fr' | 'de')[]
 plural of the codes left in `en` and `fr` only, so a German recipient's
 `mail.recoveryCodeUsed` takes the sentence as text — "Sie haben noch 3
 Wiederherstellungscodes." — and a count is a `TypeError` there.
-`recoveryCodeUsed` is the ninth template, since 0.5.0: a `templates` of
-eight, written for 0.4, no longer compiles with a locale beyond `en` and
-`fr`. A
+`recoveryCodeUsed` is the ninth template, since 0.5.0, and `magicLink` the
+tenth, since 0.7.0: a `templates` written for an earlier version no longer
+compiles with a locale beyond `en` and `fr` — add the one it lacks. A
 renderer over a Maizzle build of your own, with
 `@nxgt/mail-presets` and a `locales/de.json`, is the closest to the defaults.
 With only some templates, the call does not compile — the error lands on
 `templates`:
 
 ```text
-TS2740: Type '{ verifyEmail: () => Rendered; }' is missing the following properties from type 'JanusMailTemplates<"en" | "fr" | "de">': resetPassword, signInCode, passwordChanged, emailChanged, and 4 more.
+TS2740: Type '{ verifyEmail: () => Rendered; }' is missing the following properties from type 'JanusMailTemplates<"en" | "fr" | "de">': welcome, resetPassword, signInCode, magicLink, and 5 more.
 ```
 
 and in JavaScript it throws when `janusMail()` is called:
 
 ```text
-TypeError: janusMail: the default templates are built in en and fr only — with another locale in locales, pass every template in templates; resetPassword, signInCode, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, recoveryCodeUsed, welcome missing
+TypeError: janusMail: the default templates are built in en and fr only — with another locale in locales, pass every template in templates; resetPassword, signInCode, magicLink, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, recoveryCodeUsed, welcome missing
 ```
 
 A default template is typed for `'en' | 'fr'`, so reusing one in a wider set
@@ -128,4 +129,4 @@ Built-in locales for more languages are on the [roadmap](../roadmap.md).
 
 - `@nxgt/mail`'s [locales guide](https://github.com/softistx/nxgt-mail/blob/develop/packages/mail/docs/guide/locales.md)
   — `pickLocale` and `parseAcceptLanguage` in full.
-- [Templates](templates.md) — writing the nine for a new locale.
+- [Templates](templates.md) — writing the ten for a new locale.

package/docs/guide/sending.md

@@ -48,6 +48,7 @@ time one is sent, and kept.
 | `links.resetPassword` | `(token) => string` | required | The page that sets a new password, given the one-time token |
 | `links.secureAccount` | `() => string` | required | Where a user who made no change secures their account: the notices link to it |
 | `links.getStarted` | `() => string` | required | Where a new user starts — your home page, or your sign-in page for an account someone else created: the welcome's **Get started** button links to it |
+| `links.magicLink` | `(token) => string` | none: `magicLink` is a `TypeError` without it | The page a sign-in link opens, given the one-time token. That page spends nothing: its button posts the token to the route that calls `auth.magicLink.confirm` |
 | `links.recoveryCodes` | `() => string` | `links.secureAccount` | Where a user regenerates their recovery codes: the recovery code notice links to it, from its **Secure my account** button |
 | `locales` | `readonly L[]` | `['en', 'fr']` | The locales sent in — see [Locales](locales.md) |
 | `fallbackLocale` | one of `locales` | `'en'`, else the first of `locales` | The locale when the recipient wants none of `locales` |
@@ -114,29 +115,85 @@ challenge is the visitor's secret, and neither the default template nor an
 override is ever given it. `to` is optional — the e-mail greets nobody by
 name — and only its `locale` is read.
 
+### `magicLink(issued, to?, options?)`
+
+```ts
+const issued = await auth.magicLink.request(email); // IssuedToken & { user } | null
+if (issued !== null) await mail.magicLink(issued, { locale: issued.user.locale });
+return new Response(null, { status: 202 }); // the same answer either way
+```
+
+`request` answers `null` for an address nobody holds, and for an inactive
+user; the compiler refuses `null` here. Sent to `issued.email`, with a
+**Sign in** button to `links.magicLink(issued.token)` and how long it lasts —
+"This link expires in 15 minutes." `to` is optional — the e-mail greets
+nobody by name — and only its `locale` is read.
+
+- **`links.magicLink` is required to send it.** It is optional in
+  `janusMail()`, for an application that sends no sign-in link, and without
+  it `magicLink` throws a `TypeError` —
+  `janusMail.magicLink: links.magicLink is missing — …` — before anything is
+  rendered. There is no fallback: only your page can carry the token.
+- **Link to a page, never to the route that signs in.** Mail scanners open
+  every link in an e-mail; one that signs in on `GET` signs in for the
+  scanner, and the user's click answers `TOKEN_SPENT`. The page's button
+  posts the token to the route calling `auth.magicLink.confirm` —
+  [`@nxgt/janus`'s sign-in link guide](https://github.com/softistx/nxgt-janus/blob/develop/packages/janus/docs/guide/magic-link.md)
+  has it, and [`@nxgt/janus-hono`'s routes](https://github.com/softistx/nxgt-janus/blob/develop/packages/janus-hono/docs/guide/routes.md#a-link-sent-by-e-mail)
+  the same on Hono.
+- **A sign-in code is not a link.** Its answer has a `challenge`, the
+  visitor's secret, and no `token`: the compiler refuses it here, and
+  JavaScript gets `janusMail.magicLink: token must be a string`.
+
 ### `passwordChanged(to)`
 
 ```ts
-const changed = await auth.changePassword(user, { current, next });
-await mail.passwordChanged({ name: changed.name, locale: changed.locale, email: changed.email });
+// On the user event @nxgt/janus 0.14 sends once the password is written:
+const auth = janus({
+	...config,
+	async events(event) {
+		if (event.type !== 'user.passwordChanged') return;
+		const user = await auth.get(event.userId);
+		await mail.passwordChanged({ name: user.name, locale: user.locale, email: user.email });
+	},
+});
 ```
 
 A notice: the password of the account at `to.email` changed, with a link to
-`links.secureAccount()` for a user who did not change it. Send it after
-`changePassword`, `setPassword` and `resetPassword.confirm`.
+`links.secureAccount()` for a user who did not change it. Send it on the
+`user.passwordChanged` event, which `changePassword` and `setPassword` send.
+A reset sends `user.passwordReset` instead, never both: to tell a reset too,
+send the same notice on that type — `event.type === 'user.passwordChanged'
+|| event.type === 'user.passwordReset'`. The event names the user by id
+alone, so read the name, the locale and the address from the user.
+`setPassword` sends it for a user's first password too — an account created
+without one — so the notice then tells them a password was set on their
+account, which is worth knowing all the same.
 
 ### `emailChanged(to)`
 
 ```ts
-const formerEmail = user.email;
-const updated = await auth.update(user, { email: next });
-await mail.emailChanged({ name: updated.name, locale: updated.locale, formerEmail, newEmail: updated.email });
+// On the user event @nxgt/janus 0.14 sends when an update changed the e-mail:
+const auth = janus({
+	...config,
+	async events(event) {
+		if (event.type !== 'user.emailChanged' || event.formerEmail == null) return;
+		const user = await auth.get(event.userId);
+		await mail.emailChanged({ name: user.name, locale: user.locale, formerEmail: event.formerEmail, newEmail: user.email });
+	},
+});
 ```
 
 Sent to **`formerEmail`**: the owner of the old address is the one to warn,
 since whoever changed it already controls the new one. It names `newEmail`,
-and links to `links.secureAccount()`. Read the former address before the
-update: the user `update` answers already holds the new one.
+and links to `links.secureAccount()`. The `user.emailChanged` event is the
+one that carries an address — `event.formerEmail`, the e-mail before the
+update — since the user read back already holds the new one. It is `null`
+for a user who had no e-mail before: there is no former inbox to tell, and
+the type refuses it unchecked. The example assumes a required e-mail: with
+an optional one, `update` also sends the event when it removes the address,
+and the user read back has no `newEmail` to name — check `user.email` first,
+and tell the former address your own way or not at all.
 
 ### `twoFactorEnabled(to)` and `twoFactorDisabled(to)`
 
@@ -250,8 +307,8 @@ when opening the session then fails.
 
 ## The expiry
 
-`verifyEmail`, `resetPassword` and `signInCode` say how long the link or the
-code lasts — "This link expires in 1 hour.", "Ce code expire dans
+`verifyEmail`, `resetPassword`, `signInCode` and `magicLink` say how long
+the link or the code lasts — "This link expires in 1 hour.", "Ce code expire dans
 10 minutes." The text is `expiresIn`, one of the template's variables,
 derived at send time from the flow's `issued.expiresAt`:
 
@@ -299,6 +356,7 @@ a `TypeError`, and nothing reaches the mailer: revive the date with
 | `verifyEmail` | `issued.email` | what the visitor typed |
 | `resetPassword` | `issued.email` | the `email` passed to `request` |
 | `signInCode` | `issued.email` | the `email` passed to `request` |
+| `magicLink` | `issued.email` | the `email` passed to `request` |
 | `passwordChanged` | `to.email` | — |
 | `emailChanged` | `to.formerEmail` | `to.newEmail` |
 | `twoFactorEnabled`, `twoFactorDisabled` | `to.email` | — |

package/docs/guide/templates.md

@@ -1,7 +1,7 @@
 # Templates
 
 This page is for changing what an e-mail says or looks like: what a template
-is given and answers, replacing some of the nine, using the defaults on their
+is given and answers, replacing some of the ten, using the defaults on their
 own, and what the defaults say.
 
 ```ts
@@ -62,6 +62,7 @@ e-mail.
 | `verifyEmail` | `brand`, `name`, `link`, `expiresIn` | `mail.verifyEmail(issued, to, options?)` |
 | `resetPassword` | `brand`, `name`, `link`, `expiresIn` | `mail.resetPassword(issued, to, options?)` |
 | `signInCode` | `brand`, `code`, `expiresIn` | `mail.signInCode(issued, to?, options?)` |
+| `magicLink` | `brand`, `link`, `expiresIn` | `mail.magicLink(issued, to?, options?)` |
 | `passwordChanged` | `brand`, `name`, `link` | `mail.passwordChanged(to)` |
 | `emailChanged` | `brand`, `name`, `link`, `newEmail` | `mail.emailChanged(to)` |
 | `twoFactorEnabled` | `brand`, `name`, `link` | `mail.twoFactorEnabled(to)` |
@@ -124,11 +125,11 @@ methods live on its prototype and are refused — see
 [troubleshooting](../troubleshooting.md#janusmail-templatesname-is-not-an-own-enumerable-property--pass-a-plain-object-as--name-variables--rendered-).
 
 `templates` is `Partial` while `locales` stays within `en` and `fr`: give
-any of the nine, and the defaults render the rest. Once `locales` holds
-another locale, it takes **all nine** — see
+any of the ten, and the defaults render the rest. Once `locales` holds
+another locale, it takes **all ten** — see
 [Adding a locale](locales.md#adding-a-locale).
 
-`mail.templates` answers the nine in use — yours, and the defaults for the
+`mail.templates` answers the ten in use — yours, and the defaults for the
 rest — frozen:
 
 ```ts
@@ -150,7 +151,7 @@ const { subject, html, text } = await defaults.resetPassword({
 });
 ```
 
-It answers the nine defaults, typed for `'en' | 'fr'`, without a mailer:
+It answers the ten defaults, typed for `'en' | 'fr'`, without a mailer:
 to preview an e-mail, to wrap one — add a line to the default text, say — or
 to send one through something other than `janusMail()`. A default reused for
 a wider set of locales is a compile error: it could not render the one it
@@ -183,6 +184,7 @@ The defaults are [`@nxgt/mail-presets`](https://www.npmjs.com/package/@nxgt/mail
 | `verifyEmail` | `verify-email` | Confirm your e-mail address | Confirmez votre adresse e-mail |
 | `resetPassword` | `reset-password` | Reset your password | Réinitialisez votre mot de passe |
 | `signInCode` | `sign-in-code` | Your sign-in code: `042817` | Votre code de connexion : `042817` |
+| `magicLink` | `magic-link` | Your sign-in link | Votre lien de connexion |
 | `passwordChanged` | `password-changed` | Your password was changed | Votre mot de passe a été modifié |
 | `emailChanged` | `email-changed` | Your e-mail address was changed | Votre adresse e-mail a été modifiée |
 | `twoFactorEnabled` | `two-factor-enabled` | Two-factor authentication was turned on | L'authentification à deux facteurs a été activée |
@@ -191,7 +193,7 @@ The defaults are [`@nxgt/mail-presets`](https://www.npmjs.com/package/@nxgt/mail
 | `welcome` | `welcome` | Welcome, `Ada` | Bienvenue, `Ada` |
 
 Each has a header and a footer with the brand, a heading, a greeting by name
-(but `signInCode`), a button with its link and the link again in text for a
+(but `signInCode` and `magicLink`), a button with its link and the link again in text for a
 client that shows no button, and a text part. The other four notices add a warning:
 *if this was not you, secure your account now*. `recoveryCodeUsed` says it
 too, after a warning banner — *a recovery code was used on your account at
@@ -200,8 +202,8 @@ too, after a warning banner — *a recovery code was used on your account at
 its heading — "Welcome to Acme" — and the recipient's name in its subject,
 filled at send time like the body; its button says **Get started**.
 
-`verifyEmail`, `resetPassword` and `signInCode` also say how long the link
-or the code lasts: "This link expires in 1 hour.", "Ce code expire dans
+`verifyEmail`, `resetPassword`, `signInCode` and `magicLink` also say how
+long the link or the code lasts: "This link expires in 1 hour.", "Ce code expire dans
 10 minutes." The text part keeps each paragraph on one line.
 
 **The HTML follows dark mode.** Each HTML part declares

package/docs/roadmap.md

@@ -9,9 +9,9 @@ Nothing between releases.
 
 ## Next
 
-- **The other presets** — `magic-link`, `new-sign-in` and `invitation` from
+- **The other presets** — `new-sign-in` and `invitation` from
   `@nxgt/mail-presets`, each once `@nxgt/janus` has a flow that sends it: a
-  sign-in link, a sign-in from a new device, an invitation to a user type.
+  sign-in from a new device, an invitation to a user type.
 - **The other presets of `@nxgt/mail-presets` 0.4.0** — `account-deleted`,
   after a user is deleted, once `@nxgt/janus` has a deletion a link can
   undo; and `invitation-accepted`, once it has invitations.
@@ -47,6 +47,22 @@ Nothing between releases.
 
 Newest first; from the first release on, the package's CHANGELOG holds every one.
 
+- **The sign-in link, v0.7.0.** `magicLink(issued, to?, options?)`, built
+  from `@nxgt/mail-presets` 1.0.1's `magic-link` in English and French:
+  send what `@nxgt/janus` 0.15's `auth.magicLink.request(email)` answered,
+  to `issued.email`, its button built by the new, optional
+  `links.magicLink(token)` and its expiry read from `issued.expiresAt` —
+  "This link expires in 15 minutes." Without `links.magicLink`, the send is
+  a `TypeError`. Ten e-mails now, and ten templates to pass for a locale
+  beyond `en` and `fr`.
+
+- **The change notices on their events, v0.6.0.** `passwordChanged` and
+  `emailChanged` are sent from `@nxgt/janus` 0.14's `user.passwordChanged`
+  and `user.emailChanged` events, as the two-factor notices are, rather than
+  after the call: whoever changed the password or the e-mail, the user is
+  told. `emailChanged` goes to the event's `formerEmail`, the inbox the
+  account just left, and the compiler refuses it unchecked for `null`.
+
 - **The recovery code notice, and a readable link in both modes, v0.5.0.**
   `recoveryCodeUsed(to, { when, recoveryCodesLeft })`, built from
   `@nxgt/mail-presets` 1.0.0's `recovery-code-used` in English and French:

package/docs/troubleshooting.md

@@ -28,18 +28,20 @@ How the messages are shaped:
 - [`janusMail: links must be an object, as { verifyEmail, resetPassword, secureAccount, getStarted }`](#janusmail-links-must-be-an-object-as--verifyemail-resetpassword-secureaccount-getstarted-)
 - [`janusMail: links.<name> must be a function`](#janusmail-linksname-must-be-a-function)
 - [`janusMail: links.recoveryCodes must be a function, or left out`](#janusmail-linksrecoverycodes-must-be-a-function-or-left-out)
+- [`janusMail: links.magicLink must be a function, or left out`](#janusmail-linksmagiclink-must-be-a-function-or-left-out)
 - [`janusMail: locales must list at least one locale, as ['en', 'fr']`](#janusmail-locales-must-list-at-least-one-locale-as-en-fr)
 - [`janusMail: locales must be BCP 47 language tags, as 'fr-CA'`](#janusmail-locales-must-be-bcp-47-language-tags-as-fr-ca)
 - [`janusMail: locales holds the same locale twice`](#janusmail-locales-holds-the-same-locale-twice)
 - [`janusMail: fallbackLocale must be one of locales`](#janusmail-fallbacklocale-must-be-one-of-locales)
 - [`janusMail: templates must be an object of functions, as { verifyEmail: (variables) => rendered }`](#janusmail-templates-must-be-an-object-of-functions-as--verifyemail-variables--rendered-)
-- [`janusMail: templates has no template <name> — name one of verifyEmail, resetPassword, signInCode, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, recoveryCodeUsed, welcome`](#janusmail-templates-has-no-template-name--name-one-of-verifyemail-resetpassword-signincode-passwordchanged-emailchanged-twofactorenabled-twofactordisabled-recoverycodeused-welcome)
+- [`janusMail: templates has no template <name> — name one of verifyEmail, resetPassword, signInCode, magicLink, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, recoveryCodeUsed, welcome`](#janusmail-templates-has-no-template-name--name-one-of-verifyemail-resetpassword-signincode-magiclink-passwordchanged-emailchanged-twofactorenabled-twofactordisabled-recoverycodeused-welcome)
 - [`janusMail: templates.<name> must be a function`](#janusmail-templatesname-must-be-a-function)
 - [`janusMail: templates.<name> is not an own enumerable property — pass a plain object, as { <name>: (variables) => rendered }`](#janusmail-templatesname-is-not-an-own-enumerable-property--pass-a-plain-object-as--name-variables--rendered-)
 - [`janusMail: clock must be a Clock — an object with a now function`](#janusmail-clock-must-be-a-clock--an-object-with-a-now-function)
 - [`janusMail: the default templates are built in en and fr only — with another locale in locales, pass every template in templates; <names> missing`](#janusmail-the-default-templates-are-built-in-en-and-fr-only--with-another-locale-in-locales-pass-every-template-in-templates-names-missing)
 
 **Sending**
+- [`janusMail.magicLink: links.magicLink is missing — pass it to janusMail({ links }) to send sign-in links`](#janusmailmagiclink-linksmagiclink-is-missing--pass-it-to-janusmail-links--to-send-sign-in-links)
 - [`janusMail.<method>: <field> must be a string`](#janusmailmethod-field-must-be-a-string)
 - [`janusMail.<method>: expiresAt must be a Date`](#janusmailmethod-expiresat-must-be-a-date)
 - [`janusMail.recoveryCodeUsed: recoveryCodesLeft must be a count — a whole number, 0 or more — or the sentence to show`](#janusmailrecoverycodeused-recoverycodesleft-must-be-a-count--a-whole-number-0-or-more--or-the-sentence-to-show)
@@ -65,6 +67,7 @@ How the messages are shaped:
 - [`TS2345: … Types of property 'expiresAt' are incompatible. Type 'string' is not assignable to type 'Date'.`](#ts2345--types-of-property-expiresat-are-incompatible-type-string-is-not-assignable-to-type-date)
 - [`TS2739: Type '{ … }' is missing the following properties from type 'JanusMailTemplates<…>'`](#ts2739-type----is-missing-the-following-properties-from-type-janusmailtemplates)
 - [`TS2741: Property 'recoveryCodeUsed' is missing in type '{ … }' but required in type 'JanusMailTemplates<…>'.`](#ts2741-property-recoverycodeused-is-missing-in-type----but-required-in-type-janusmailtemplates)
+- [`TS2741: Property 'magicLink' is missing in type '{ … }' but required in type 'JanusMailTemplates<…>'.`](#ts2741-property-magiclink-is-missing-in-type----but-required-in-type-janusmailtemplates)
 - [`TS2322: Type '"de"' is not assignable to type '"en" | "fr"'.`](#ts2322-type-de-is-not-assignable-to-type-en--fr)
 - [`TS2741: Property 'getStarted' is missing in type '{ … }' but required in type 'JanusMailLinks'.`](#ts2741-property-getstarted-is-missing-in-type----but-required-in-type-janusmaillinks)
 - [`TS2322: Type 'number | null' is not assignable to type 'string | number'.`](#ts2322-type-number--null-is-not-assignable-to-type-string--number)
@@ -114,7 +117,8 @@ janusMail({ mailer, from, brand: 'Acme', links });
 ### `janusMail: links must be an object, as { verifyEmail, resetPassword, secureAccount, getStarted }`
 
 No `links`. Four are required: the notices link to `secureAccount`, and
-the welcome to `getStarted`. A fifth, `recoveryCodes`, is optional.
+the welcome to `getStarted`. Two more, `recoveryCodes` and `magicLink`, are
+optional.
 
 ### `janusMail: links.<name> must be a function`
 
@@ -148,6 +152,18 @@ regenerates their codes:
 links: { …, recoveryCodes: () => 'https://acme.example/account/recovery-codes' },
 ```
 
+### `janusMail: links.magicLink must be a function, or left out`
+
+`links.magicLink` given as a URL, or as anything but a function. It is
+optional — an application that sends no sign-in link leaves it out — but
+when given it takes the link's one-time token and answers **a page of
+yours that spends nothing**, whose button posts the token to the route
+calling `auth.magicLink.confirm`:
+
+```ts
+links: { …, magicLink: (token) => `https://acme.example/sign-in/link?token=${token}` },
+```
+
 ### `janusMail: locales must list at least one locale, as ['en', 'fr']`
 
 `locales: []`, `locales: 'en'`, or a list holding something that is not a
@@ -180,9 +196,9 @@ A `fallbackLocale` the list does not hold — `'de'` with the default
 
 `templates` given as a list or a function. Key each template by its name.
 
-### `janusMail: templates has no template <name> — name one of verifyEmail, resetPassword, signInCode, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, recoveryCodeUsed, welcome`
+### `janusMail: templates has no template <name> — name one of verifyEmail, resetPassword, signInCode, magicLink, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, recoveryCodeUsed, welcome`
 
-A key that is not one of the nine — `magicLink`, or the e-mail's file name
+A key that is not one of the ten — `newSignIn`, or the e-mail's file name
 `'verify-email'` rather than the template's, `verifyEmail`. Other e-mails are
 on the [roadmap](roadmap.md); send them with `@nxgt/mail` directly meanwhile.
 
@@ -216,7 +232,7 @@ as it is: fields are own properties.
 ### `janusMail: the default templates are built in en and fr only — with another locale in locales, pass every template in templates; <names> missing`
 
 `locales` holds a locale beyond `en` and `fr`, and `templates` leaves some
-out: the defaults could not render them in that locale. Pass all nine — see
+out: the defaults could not render them in that locale. Pass all ten — see
 [Adding a locale](guide/locales.md#adding-a-locale) — or drop the locale.
 The message lists the templates missing.
 
@@ -234,6 +250,23 @@ janusMail({ mailer, from, brand: 'Acme', links, clock });
 
 ## Sending
 
+### `janusMail.magicLink: links.magicLink is missing — pass it to janusMail({ links }) to send sign-in links`
+
+A `TypeError` from `mail.magicLink`, before anything is rendered or sent:
+`janusMail()` was given no `links.magicLink`. It is optional, so
+`janusMail()` accepts `links` without it — written before 0.7, or for an
+application that sent no sign-in link — and there is no page to fall back
+on: only yours can carry the token. Add it:
+
+```ts
+const mail = janusMail({
+	…,
+	links: { …, magicLink: (token) => `https://acme.example/sign-in/link?token=${token}` },
+});
+```
+
+Sending again fails again: it is a bug, not an outage.
+
 ### `janusMail.<method>: <field> must be a string`
 
 A `TypeError` from a call, naming the method and the field it could not read
@@ -247,6 +280,10 @@ const issued = await auth.resetPassword.request(email);
 if (issued !== null) await mail.resetPassword(issued, { name: issued.user.name });
 ```
 
+`janusMail.magicLink: token must be a string` is a sign-in code's answer
+given to `magicLink` — it has a `challenge`, never mailed, and no token:
+send it with `signInCode`, or ask `auth.magicLink.request` for a link.
+
 `issued` needs `token` and `email` (`code` and `email` for `signInCode`), and
 the recipient its `name` — a user whose schema has no name passes one
 anyway: `{ name: user.email }`. `janusMail.verifyEmail: expiresIn must be a
@@ -255,14 +292,29 @@ number of seconds: pass the text to show, `{ expiresIn: '1 hour' }`, or
 leave it out.
 
 `janusMail.twoFactorEnabled: email must be a string` (or `twoFactorDisabled`,
-`recoveryCodeUsed` or `welcome`) is the user event itself given to the
-e-mail: an event names the user by id alone. Read the user first:
+`passwordChanged`, `recoveryCodeUsed` or `welcome`) is the user event itself
+given to the e-mail: an event names the user by id alone. Read the user first:
 
 ```ts
 const user = await auth.get(event.userId);
 await mail.twoFactorDisabled({ name: user.name, locale: user.locale, email: user.email });
 ```
 
+On `user.emailChanged`, `janusMail.emailChanged: name must be a string` is
+the event itself given to `emailChanged`, and `janusMail.emailChanged:
+formerEmail must be a string` is `event.formerEmail` passed without its
+check — it is `null` for a user who had no e-mail before. `janusMail.emailChanged:
+newEmail must be a string` is an update that removed the e-mail: there is no
+new address to name. Check both, and read the rest from the user:
+
+```ts
+if (event.type === 'user.emailChanged' && event.formerEmail != null) {
+	const user = await auth.get(event.userId);
+	if (user.email === undefined) return; // removed: tell the former address your own way
+	await mail.emailChanged({ name: user.name, locale: user.locale, formerEmail: event.formerEmail, newEmail: user.email });
+}
+```
+
 `janusMail.recoveryCodeUsed: when must be a string` is the second argument
 missing, or its `when` given as the event's `Date`: pass the text to show,
 formatted in the recipient's locale and time zone —
@@ -270,8 +322,8 @@ formatted in the recipient's locale and time zone —
 
 ### `janusMail.<method>: expiresAt must be a Date`
 
-A `TypeError` from `verifyEmail`, `resetPassword` or `signInCode`: the e-mail
-says how long its link or code lasts, from `issued.expiresAt`, and that is
+A `TypeError` from `verifyEmail`, `resetPassword`, `signInCode` or
+`magicLink`: the e-mail says how long its link or code lasts, from `issued.expiresAt`, and that is
 not a valid `Date`. The usual cause is a flow's answer that went through
 JSON — a job queue, a cache — where a `Date` becomes a string. Nothing is
 sent. Revive it when the job runs, or say the expiry yourself:
@@ -311,8 +363,8 @@ await mail.recoveryCodeUsed(to, { when, recoveryCodesLeft: `Sie haben noch ${lef
 
 ### `janusMail.<method>: clock.now() must answer a Date`
 
-A `TypeError` from `verifyEmail`, `resetPassword` or `signInCode`: the
-`clock` given to `janusMail()` has a `now` that answered something else — a
+A `TypeError` from `verifyEmail`, `resetPassword`, `signInCode` or
+`magicLink`: the `clock` given to `janusMail()` has a `now` that answered something else — a
 number from `Date.now()`, a string, an invalid `Date`. Nothing is sent.
 `clock` is `@nxgt/janus`'s `Clock`: pass the one `janus({ clock })` was
 given, or `{ now: () => new Date() }`.
@@ -369,7 +421,7 @@ A `TypeError` from a call, before anything is rendered or sent
 must answer a string`, `janusMail.emailChanged: links.secureAccount() must
 answer a string`, `janusMail.welcome: links.getStarted() must answer a
 string`, `janusMail.recoveryCodeUsed: links.recoveryCodes() must answer a
-string`. The `links` function answered something other than a
+string`, `janusMail.magicLink: links.magicLink(token) must answer a string`. The `links` function answered something other than a
 string: a `URL` object, `undefined`, or a promise — an `async` function.
 Answer `url.href`, and compute the link synchronously:
 
@@ -445,7 +497,7 @@ avoids the read altogether. (In this repository: run `bun run build`.)
 
 The default templates read `mails/` with `node:fs`, through
 `@nxgt/mail/renderer`: Node, Bun or Deno only. On an edge runtime, pass all
-nine templates yourself; an inlined build is on the [roadmap](roadmap.md).
+ten templates yourself; an inlined build is on the [roadmap](roadmap.md).
 
 ### An e-mail stays light in dark mode
 
@@ -561,7 +613,9 @@ if (issued !== null) await mail.resetPassword(issued, { name: issued.user.name }
 return new Response(null, { status: 202 });
 ```
 
-The same holds for `signInCode.request`, whose answer passed unchecked reads
+`auth.magicLink.request(email)`'s answer, passed to `mail.magicLink`
+unchecked, reads the same. The same holds for `signInCode.request`, whose
+answer passed unchecked reads
 `Argument of type 'IssuedCode<…> | null' is not assignable to parameter of
 type 'Pick<IssuedCode<unknown>, "email" | "code" | "expiresAt">'`.
 
@@ -576,19 +630,27 @@ whole.
 ### `TS2739: Type '{ … }' is missing the following properties from type 'JanusMailTemplates<…>'`
 
 `locales` holds a locale beyond `en` and `fr`, and `templates` does not give
-all nine. With five or more missing, the code is `TS2740` and the list ends
-`…, and 4 more.` See [Adding a locale](guide/locales.md#adding-a-locale).
+all ten. With five or more missing, the code is `TS2740` and the list ends
+`…, and 5 more.` See [Adding a locale](guide/locales.md#adding-a-locale).
 
 ### `TS2741: Property 'recoveryCodeUsed' is missing in type '{ … }' but required in type 'JanusMailTemplates<…>'.`
 
 `templates` written for 0.4, with a locale beyond `en` and `fr`: since
-0.5.0 there are nine templates, and with such a locale every one is yours.
+0.5.0 `recoveryCodeUsed` is one of the templates, and with such a locale every one is yours.
 Add `recoveryCodeUsed` — it is given `brand`, `name`, `when`,
 `recoveryCodesLeft` (a sentence) and `link` — even if you never send it; in
 JavaScript the same `templates` is
 [`janusMail: the default templates are built in en and fr only — …; recoveryCodeUsed missing`](#janusmail-the-default-templates-are-built-in-en-and-fr-only--with-another-locale-in-locales-pass-every-template-in-templates-names-missing).
 See [Templates](guide/templates.md#what-each-template-is-given).
 
+### `TS2741: Property 'magicLink' is missing in type '{ … }' but required in type 'JanusMailTemplates<…>'.`
+
+`templates` written before 0.7, with a locale beyond `en` and `fr`: since
+0.7.0 there are ten templates, and with such a locale every one is yours.
+Add `magicLink` — it is given `brand`, `link` and `expiresIn` — even if you
+never send it; in JavaScript the same `templates` is
+[`janusMail: the default templates are built in en and fr only — …; magicLink missing`](#janusmail-the-default-templates-are-built-in-en-and-fr-only--with-another-locale-in-locales-pass-every-template-in-templates-names-missing).
+
 ### `TS2322: Type '"de"' is not assignable to type '"en" | "fr"'.`
 
 A `fallbackLocale` outside `locales`. Add it to `locales` — with every