@nxgt/janus-mail 0.7.1 → 0.8.0

package/docs/README.md

@@ -5,7 +5,7 @@ the detail.
 
 | Page | Read it when |
 | --- | --- |
-| [Sending](guide/sending.md) | You are wiring `janusMail()` into your routes: the options, `clock` among them; each method, the welcome on `user.created`, the recovery code notice on `user.recoveryCodeUsed` and the change notices on `user.passwordChanged` and `user.emailChanged` among them; the expiry an e-mail states and how to set it, where each e-mail goes, what a failure looks like, retrying and tracing the mailer, and a test |
+| [Sending](guide/sending.md) | You are wiring `janusMail()` into your routes: the options, `clock` among them; each method, the step-up's code, the welcome on `user.created`, the recovery code notice on `user.recoveryCodeUsed` and the change notices on `user.passwordChanged` and `user.emailChanged` among them; the expiry an e-mail states and how to set it, where each e-mail goes, what a failure looks like, retrying and tracing the mailer, and a test |
 | [Templates](guide/templates.md) | You want an e-mail of your own: what a template takes and answers, a partial override, `janusTemplates()`, and what the defaults say |
 | [Locales](guide/locales.md) | You send in more than one language: how the locale is picked, `fallbackLocale`, fewer locales, and adding one |
 | [Building](guide/building.md) | You work on this package: the Maizzle project in `mail/`, `mails/`, the generated files, and why none of it reaches a consumer's build |
@@ -23,11 +23,11 @@ They mean the same here. These pages add:
 
 | Word | Means | Not |
 | --- | --- | --- |
-| **e-mail** | One of the ten this package sends: `verify-email`, `reset-password`, `sign-in-code`, `magic-link`, `password-changed`, `email-changed`, `two-factor-enabled`, `two-factor-disabled`, `recovery-code-used`, `welcome` — by the name of its built file | "mail", "message" — a *message* is what a mailer sends, addressed |
+| **e-mail** | One of the eleven this package sends: `verify-email`, `reset-password`, `sign-in-code`, `magic-link`, `confirm-action`, `password-changed`, `email-changed`, `two-factor-enabled`, `two-factor-disabled`, `recovery-code-used`, `welcome` — by the name of its built file | "mail", "message" — a *message* is what a mailer sends, addressed |
 | **template** | The function that renders one e-mail: `(variables & { locale }) => Rendered`. Named in camelCase, after the method that sends it: `verifyEmail`, `signInCode` | "renderer" — the renderer is `@nxgt/mail`'s, and reads the build |
 | **default template** | A template of `janusTemplates()`: the prebuilt e-mail, filled by the renderer | "preset" — a preset is `@nxgt/mail-presets`' source, which the build compiles |
 | **override** | A template of yours, passed in `templates`, used instead of the default | "custom template" |
-| **issued** | What a flow answered: an `IssuedToken` from `verifyEmail.send`, `resetPassword.request` or `magicLink.request`, an `IssuedCode` from `signInCode.request` | "result", "payload" |
+| **issued** | What a flow answered: an `IssuedToken` from `verifyEmail.send`, `resetPassword.request` or `magicLink.request`, an `IssuedCode` from `signInCode.request`, a `StepUpByEmail` from `stepUp.request` once narrowed to `via: 'email'` | "result", "payload" |
 | **recipient** | Who an e-mail is for besides the address: a `Recipient`, `{ name, locale? }` | "user" — a user is a record of `@nxgt/janus`; "to" is the address |
 | **notice** | An e-mail that tells, and asks for nothing: `passwordChanged`, `emailChanged`, `twoFactorEnabled`, `twoFactorDisabled`, `recoveryCodeUsed`. It links to `links.secureAccount()` — `recoveryCodeUsed` to `links.recoveryCodes()` when given | "alert", "notification" |
 | **welcome** | The e-mail sent once a user was created, on `@nxgt/janus`'s `user.created`: `welcome`. It links to `links.getStarted()` — not a notice, since it warns of nothing | "onboarding", "greeting" |

package/docs/guide/building.md

@@ -55,7 +55,7 @@ packages/janus-mail/
    `src/generated/mail.ts` (`rendererTypes`), from the build.
 3. `scripts/build-mail.ts` reads the manifest and **fails unless its
    format is one every `@nxgt/mail` the peer admits reads** — see below —
-   and **unless exactly the ten e-mails were built**: an eleventh from a new
+   and **unless exactly the eleven e-mails were built**: a twelfth from a new
    `@nxgt/mail-presets`, or one missing, stops the build.
 4. It writes `src/generated/locales.ts` from the manifest's locales, and
    `src/generated/codes-left.ts` — below — each only when its content

package/docs/guide/locales.md

@@ -82,6 +82,7 @@ const templates: JanusMailTemplates<Locale> = {
 	resetPassword: ({ name, link, expiresIn, locale }) => render('reset-password', locale, { name, link, expiresIn }),
 	signInCode: ({ code, expiresIn, locale }) => render('sign-in-code', locale, { code, expiresIn }),
 	magicLink: ({ link, expiresIn, locale }) => render('magic-link', locale, { link, expiresIn }),
+	stepUp: ({ name, code, expiresIn, link, locale }) => render('confirm-action', locale, { name, code, expiresIn, link }),
 	passwordChanged: ({ name, link, locale }) => render('password-changed', locale, { name, link }),
 	emailChanged: ({ name, link, newEmail, locale }) => render('email-changed', locale, { name, link, newEmail }),
 	twoFactorEnabled: ({ name, link, locale }) => render('two-factor-enabled', locale, { name, link }),
@@ -101,8 +102,9 @@ mail.locales; // readonly ('en' | 'fr' | 'de')[]
 plural of the codes left in `en` and `fr` only, so a German recipient's
 `mail.recoveryCodeUsed` takes the sentence as text — "Sie haben noch 3
 Wiederherstellungscodes." — and a count is a `TypeError` there.
-`recoveryCodeUsed` is the ninth template, since 0.5.0, and `magicLink` the
-tenth, since 0.7.0: a `templates` written for an earlier version no longer
+`recoveryCodeUsed` is the ninth template, since 0.5.0, `magicLink` the
+tenth, since 0.7.0, and `stepUp` the eleventh, since 0.8.0: a `templates`
+written for an earlier version no longer
 compiles with a locale beyond `en` and `fr` — add the one it lacks. A
 renderer over a Maizzle build of your own, with
 `@nxgt/mail-presets` and a `locales/de.json`, is the closest to the defaults.
@@ -110,13 +112,13 @@ With only some templates, the call does not compile — the error lands on
 `templates`:
 
 ```text
-TS2740: Type '{ verifyEmail: () => Rendered; }' is missing the following properties from type 'JanusMailTemplates<"en" | "fr" | "de">': welcome, resetPassword, signInCode, magicLink, and 5 more.
+TS2740: Type '{ verifyEmail: () => Rendered; }' is missing the following properties from type 'JanusMailTemplates<"en" | "fr" | "de">': welcome, resetPassword, signInCode, magicLink, and 6 more.
 ```
 
 and in JavaScript it throws when `janusMail()` is called:
 
 ```text
-TypeError: janusMail: the default templates are built in en and fr only — with another locale in locales, pass every template in templates; resetPassword, signInCode, magicLink, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, recoveryCodeUsed, welcome missing
+TypeError: janusMail: the default templates are built in en and fr only — with another locale in locales, pass every template in templates; resetPassword, signInCode, magicLink, stepUp, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, recoveryCodeUsed, welcome missing
 ```
 
 A default template is typed for `'en' | 'fr'`, so reusing one in a wider set
@@ -129,4 +131,4 @@ Built-in locales for more languages are on the [roadmap](../roadmap.md).
 
 - `@nxgt/mail`'s [locales guide](https://github.com/softistx/nxgt-mail/blob/develop/packages/mail/docs/guide/locales.md)
   — `pickLocale` and `parseAcceptLanguage` in full.
-- [Templates](templates.md) — writing the ten for a new locale.
+- [Templates](templates.md) — writing the eleven for a new locale.

package/docs/guide/sending.md

@@ -46,7 +46,7 @@ time one is sent, and kept.
 | `brand` | `string` | required | The name the e-mails show, in the header, the body and the footer. Text: escaped in the HTML |
 | `links.verifyEmail` | `(token) => string` | required | The page that confirms an address, given the one-time token |
 | `links.resetPassword` | `(token) => string` | required | The page that sets a new password, given the one-time token |
-| `links.secureAccount` | `() => string` | required | Where a user who made no change secures their account: the notices link to it |
+| `links.secureAccount` | `() => string` | required | Where a user who made no change secures their account: the notices link to it, and so does the step-up's code, for a user who asked for none |
 | `links.getStarted` | `() => string` | required | Where a new user starts — your home page, or your sign-in page for an account someone else created: the welcome's **Get started** button links to it |
 | `links.magicLink` | `(token) => string` | none: `magicLink` is a `TypeError` without it | The page a sign-in link opens, given the one-time token. That page spends nothing: its button posts the token to the route that calls `auth.magicLink.confirm` |
 | `links.recoveryCodes` | `() => string` | `links.secureAccount` | Where a user regenerates their recovery codes: the recovery code notice links to it, from its **Secure my account** button |
@@ -145,6 +145,44 @@ nobody by name — and only its `locale` is read.
   visitor's secret, and no `token`: the compiler refuses it here, and
   JavaScript gets `janusMail.magicLink: token must be a string`.
 
+### `stepUp(issued, to, options?)`
+
+```ts
+const current = await auth.authenticate(request); // the signed-in user, their session
+if (current === null) return new Response(null, { status: 401 });
+const issued = await auth.stepUp.request(current.user); // StepUpByEmail, or StepUpByApp with a second factor
+if (issued.via === 'email') {
+	await mail.stepUp(issued, { name: current.user.name, locale: current.user.locale });
+}
+return Response.json({ challenge: issued.challenge, via: issued.via }); // the challenge stays with the user
+```
+
+The code of a step-up — a signed-in user proving again who they are before
+a sensitive action, `@nxgt/janus`'s
+[step-up guide](https://github.com/softistx/nxgt-janus/blob/develop/packages/janus/docs/guide/step-up.md) —
+sent to `issued.email`, greeting `to.name`: "Your confirmation code",
+"Votre code de confirmation", the code, how long it lasts — "This code
+expires in 10 minutes." — and a **Secure my account** button to
+`links.secureAccount()`, for a user who asked for nothing. The e-mail names
+no action: it says "something sensitive", whatever the route guards.
+
+- **Narrow `via` first.** A user whose second factor is active confirms with
+  their app: `request` answers `via: 'secondFactor'`, with no code and no
+  address, and there is nothing to send. The compiler refuses the answer
+  un-narrowed; JavaScript gets
+  `janusMail.stepUp: via must be 'email' — a step-up confirmed with the user's app sends no e-mail`,
+  before anything is rendered. A type without `secondFactor` in `janus()`
+  answers `via: 'email'` alone, and needs no check.
+- **`to` is required**, unlike `signInCode`'s: the e-mail greets the user by
+  name, and it is the user of the session, whose name you hold.
+- It reads `issued.via`, `issued.code`, `issued.email` and
+  `issued.expiresAt`, **and nothing else**: the challenge never reaches a
+  template.
+- **The link has no fallback, and needs none.** `links.secureAccount` is
+  required by `janusMail()`: the notices link to it too.
+- **Rate-limit `stepUp.request` per user**, as the step-up guide says: each
+  request sends this e-mail.
+
 ### `passwordChanged(to)`
 
 ```ts
@@ -313,8 +351,8 @@ when opening the session then fails.
 
 ## The expiry
 
-`verifyEmail`, `resetPassword`, `signInCode` and `magicLink` say how long
-the link or the code lasts — "This link expires in 1 hour.", "Ce code expire dans
+`verifyEmail`, `resetPassword`, `signInCode`, `magicLink` and `stepUp` say
+how long the link or the code lasts — "This link expires in 1 hour.", "Ce code expire dans
 10 minutes." The text is `expiresIn`, one of the template's variables,
 derived at send time from the flow's `issued.expiresAt`:
 
@@ -328,7 +366,7 @@ derived at send time from the flow's `issued.expiresAt`:
    `unitDisplay: 'long'`, in the recipient's locale: "3 hours", "3 heures".
 
 With `@nxgt/janus`'s defaults, a verification link says "1 day", a reset
-link "1 hour" and a sign-in code "10 minutes".
+link "1 hour", and a sign-in code and a step-up's code "10 minutes".
 
 The time is `janusMail({ clock })`'s — pass the clock `janus({ clock })` was
 given, a `fixedClock` in tests — else the system clock:
@@ -363,6 +401,7 @@ a `TypeError`, and nothing reaches the mailer: revive the date with
 | `resetPassword` | `issued.email` | the `email` passed to `request` |
 | `signInCode` | `issued.email` | the `email` passed to `request` |
 | `magicLink` | `issued.email` | the `email` passed to `request` |
+| `stepUp` | `issued.email` | an address the client sent |
 | `passwordChanged` | `to.email` | — |
 | `emailChanged` | `to.formerEmail` | `to.newEmail` |
 | `twoFactorEnabled`, `twoFactorDisabled` | `to.email` | — |
@@ -386,7 +425,7 @@ defines no error class and wraps nothing:
 | --- | --- | --- | --- |
 | `MailFailure` (`MAIL_FAILED`) | the mailer | The transport could not hand the e-mail over. Nothing is known to have been sent | A `503`, or a retry from a queue |
 | `MailRefused` (`MAIL_REFUSED`) | the renderer, or the mailer | The e-mail itself is wrong: a link that is not `http:`, `https:` or `mailto:`, an address that is not one | A bug to fix; sending it again fails again |
-| `TypeError` | this package, or the renderer | A call without the value a flow answered — `janusMail.resetPassword: token must be a string` — or, in JavaScript, a link that is not a string (a compile error in TypeScript) — `janusMail.verifyEmail: links.verifyEmail(token) must answer a string`. For [the expiry](#the-expiry): `janusMail.<method>: expiresAt must be a Date`, `janusMail.<method>: expiresAt is past — the link or code would not work`, `janusMail.<method>: expiresIn must be a string`, `janusMail.<method>: clock.now() must answer a Date` | A bug to fix — for a past `expiresAt`, issue a new token or code and send that |
+| `TypeError` | this package, or the renderer | A call without the value a flow answered — `janusMail.resetPassword: token must be a string` — or, in JavaScript, a link that is not a string (a compile error in TypeScript) — `janusMail.verifyEmail: links.verifyEmail(token) must answer a string`. For [the expiry](#the-expiry): `janusMail.<method>: expiresAt must be a Date`, `janusMail.<method>: expiresAt is past — the link or code would not work`, `janusMail.<method>: expiresIn must be a string`, `janusMail.<method>: clock.now() must answer a Date`. For `stepUp`: `janusMail.stepUp: via must be 'email' — …` | A bug to fix — for a past `expiresAt`, issue a new token or code and send that |
 | `Error` from `createMailRenderer` | the renderer | `mails/` is missing where the package runs: a bundler inlined `@nxgt/janus-mail`, or a deploy kept `dist/` only | Keep `@nxgt/janus-mail` external to your bundle and deploy its `mails/` with it; see [troubleshooting](../troubleshooting.md#createmailrenderer-mailsmail-manifestjson-cannot-be-read--run-maizzle-build-and-deploy-its-output-folder) |
 
 `instanceof` holds against the classes of your own `@nxgt/mail`, since it is

package/docs/guide/templates.md

@@ -1,7 +1,7 @@
 # Templates
 
 This page is for changing what an e-mail says or looks like: what a template
-is given and answers, replacing some of the ten, using the defaults on their
+is given and answers, replacing some of the eleven, using the defaults on their
 own, and what the defaults say.
 
 ```ts
@@ -22,7 +22,7 @@ const mail = janusMail({
 });
 ```
 
-The sign-in code e-mail is now yours; the eight others stay the defaults.
+The sign-in code e-mail is now yours; the ten others stay the defaults.
 
 ## What a template is
 
@@ -63,6 +63,7 @@ e-mail.
 | `resetPassword` | `brand`, `name`, `link`, `expiresIn` | `mail.resetPassword(issued, to, options?)` |
 | `signInCode` | `brand`, `code`, `expiresIn` | `mail.signInCode(issued, to?, options?)` |
 | `magicLink` | `brand`, `link`, `expiresIn` | `mail.magicLink(issued, to?, options?)` |
+| `stepUp` | `brand`, `name`, `code`, `expiresIn`, `link` | `mail.stepUp(issued, to, options?)` |
 | `passwordChanged` | `brand`, `name`, `link` | `mail.passwordChanged(to)` |
 | `emailChanged` | `brand`, `name`, `link`, `newEmail` | `mail.emailChanged(to)` |
 | `twoFactorEnabled` | `brand`, `name`, `link` | `mail.twoFactorEnabled(to)` |
@@ -72,7 +73,7 @@ e-mail.
 
 Every one also gets `locale`, one of `locales`. Every value is a string:
 `brand` from the options, `name` from the recipient, `link` from `links` —
-`links.secureAccount()` for the four notices, `links.recoveryCodes()` (else
+`links.secureAccount()` for the four notices and `stepUp`, `links.recoveryCodes()` (else
 `links.secureAccount()`) for `recoveryCodeUsed`, `links.getStarted()` for
 `welcome` — `code`, `newEmail` and `when` from the
 call, and `expiresIn` derived from the flow's `expiresAt` in the locale, or
@@ -95,8 +96,8 @@ templates: {
 // await mail.recoveryCodeUsed(to, { when, recoveryCodesLeft: `Sie haben noch ${left} Wiederherstellungscodes.` });
 ```
 
-`signInCode` is **never given the challenge**: it is not in its variables,
-and the method never reads it. An override states the expiry from
+`signInCode` and `stepUp` are **never given the challenge**: it is not in
+their variables, and the methods never read it. An override states the expiry from
 `expiresIn`, already formatted:
 
 ```ts
@@ -125,11 +126,11 @@ methods live on its prototype and are refused — see
 [troubleshooting](../troubleshooting.md#janusmail-templatesname-is-not-an-own-enumerable-property--pass-a-plain-object-as--name-variables--rendered-).
 
 `templates` is `Partial` while `locales` stays within `en` and `fr`: give
-any of the ten, and the defaults render the rest. Once `locales` holds
-another locale, it takes **all ten** — see
+any of the eleven, and the defaults render the rest. Once `locales` holds
+another locale, it takes **all eleven** — `stepUp` included, since 0.8 — see
 [Adding a locale](locales.md#adding-a-locale).
 
-`mail.templates` answers the ten in use — yours, and the defaults for the
+`mail.templates` answers the eleven in use — yours, and the defaults for the
 rest — frozen:
 
 ```ts
@@ -151,7 +152,7 @@ const { subject, html, text } = await defaults.resetPassword({
 });
 ```
 
-It answers the ten defaults, typed for `'en' | 'fr'`, without a mailer:
+It answers the eleven defaults, typed for `'en' | 'fr'`, without a mailer:
 to preview an e-mail, to wrap one — add a line to the default text, say — or
 to send one through something other than `janusMail()`. A default reused for
 a wider set of locales is a compile error: it could not render the one it
@@ -177,7 +178,7 @@ them renders: that is when the package's `mails/` folder is read, once.
 ## What the defaults say
 
 The defaults are [`@nxgt/mail-presets`](https://www.npmjs.com/package/@nxgt/mail-presets)
-1.0.1, built with a neutral grey theme and no logo:
+1.1.0, built with a neutral grey theme and no logo:
 
 | Template | Built from | Subject (`en`) | Subject (`fr`) |
 | --- | --- | --- | --- |
@@ -185,6 +186,7 @@ The defaults are [`@nxgt/mail-presets`](https://www.npmjs.com/package/@nxgt/mail
 | `resetPassword` | `reset-password` | Reset your password | Réinitialisez votre mot de passe |
 | `signInCode` | `sign-in-code` | Your sign-in code: `042817` | Votre code de connexion : `042817` |
 | `magicLink` | `magic-link` | Your sign-in link | Votre lien de connexion |
+| `stepUp` | `confirm-action` | Your confirmation code | Votre code de confirmation |
 | `passwordChanged` | `password-changed` | Your password was changed | Votre mot de passe a été modifié |
 | `emailChanged` | `email-changed` | Your e-mail address was changed | Votre adresse e-mail a été modifiée |
 | `twoFactorEnabled` | `two-factor-enabled` | Two-factor authentication was turned on | L'authentification à deux facteurs a été activée |
@@ -194,16 +196,19 @@ The defaults are [`@nxgt/mail-presets`](https://www.npmjs.com/package/@nxgt/mail
 
 Each has a header and a footer with the brand, a heading, a greeting by name
 (but `signInCode` and `magicLink`), a button with its link and the link again in text for a
-client that shows no button, and a text part. The other four notices add a warning:
-*if this was not you, secure your account now*. `recoveryCodeUsed` says it
+client that shows no button, and a text part. The four notices but `recoveryCodeUsed` add a warning:
+*if this was not you, secure your account now*. `stepUp` shows its code as
+the sign-in code does, names no action — *someone, we hope you, asked to do
+something sensitive on your account* — and warns not to share the code if
+it was not the user, its button saying **Secure my account**. `recoveryCodeUsed` says it
 too, after a warning banner — *a recovery code was used on your account at
 `when`* — the codes left, and a line on generating new ones; its button says
 **Secure my account**. `welcome` has the brand in
 its heading — "Welcome to Acme" — and the recipient's name in its subject,
 filled at send time like the body; its button says **Get started**.
 
-`verifyEmail`, `resetPassword`, `signInCode` and `magicLink` also say how
-long the link or the code lasts: "This link expires in 1 hour.", "Ce code expire dans
+`verifyEmail`, `resetPassword`, `signInCode`, `magicLink` and `stepUp` also
+say how long the link or the code lasts: "This link expires in 1 hour.", "Ce code expire dans
 10 minutes." The text part keeps each paragraph on one line.
 
 **The HTML follows dark mode.** Each HTML part declares
@@ -215,7 +220,7 @@ is near-black (`#27272a`) with light text in light mode, and near-white
 (`#fafafa`) with near-black text (`#18181b`) in dark mode — 17:1 against the
 dark card, where the light primary would be 1.2:1. The page behind the card
 is 5% of the light primary over the dark background, a shade darker than the
-card, which its border outlines. The sign-in code's box is a light grey
+card, which its border outlines. The code's box — the sign-in code's and the step-up's — is a light grey
 (`#f1f5f9`) with near-black code (`#020918`) in light mode, and a slate a
 step above the dark card (`#1e293b`) with light code (`#cbd5e1`) in dark
 mode, 9.85:1. The muted text — the footer, and the closing *if you did not

package/docs/roadmap.md

@@ -40,13 +40,23 @@ Nothing between releases.
   its flows answer what to send, and this package is called with that answer.
   An application that sends its own way needs neither this package nor a
   hook to turn off.
-- **The challenge in an e-mail** — a sign-in code e-mail carries the code and
-  never the challenge, not even through an override.
+- **The challenge in an e-mail** — a sign-in code's or a step-up's e-mail
+  carries the code and never the challenge, not even through an override.
 
 ## Shipped
 
 Newest first; from the first release on, the package's CHANGELOG holds every one.
 
+- **The step-up's code, v0.8.0.** `stepUp(issued, to, options?)`, built
+  from `@nxgt/mail-presets` 1.1.0's `confirm-action` in English and French:
+  send what `@nxgt/janus`'s `auth.stepUp.request(user)` answered, once
+  narrowed to `via: 'email'`, to `issued.email` — "Your confirmation code",
+  the code, how long it lasts, and a **Secure my account** button to
+  `links.secureAccount()` for a user who asked for nothing. A step-up
+  confirmed with the user's app sends nothing, and is refused. Eleven
+  e-mails now, and eleven templates to pass for a locale beyond `en` and
+  `fr`.
+
 - **The sign-in link, v0.7.0.** `magicLink(issued, to?, options?)`, built
   from `@nxgt/mail-presets` 1.0.1's `magic-link` in English and French:
   send what `@nxgt/janus` 0.15's `auth.magicLink.request(email)` answered,

package/docs/troubleshooting.md

@@ -34,7 +34,7 @@ How the messages are shaped:
 - [`janusMail: locales holds the same locale twice`](#janusmail-locales-holds-the-same-locale-twice)
 - [`janusMail: fallbackLocale must be one of locales`](#janusmail-fallbacklocale-must-be-one-of-locales)
 - [`janusMail: templates must be an object of functions, as { verifyEmail: (variables) => rendered }`](#janusmail-templates-must-be-an-object-of-functions-as--verifyemail-variables--rendered-)
-- [`janusMail: templates has no template <name> — name one of verifyEmail, resetPassword, signInCode, magicLink, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, recoveryCodeUsed, welcome`](#janusmail-templates-has-no-template-name--name-one-of-verifyemail-resetpassword-signincode-magiclink-passwordchanged-emailchanged-twofactorenabled-twofactordisabled-recoverycodeused-welcome)
+- [`janusMail: templates has no template <name> — name one of verifyEmail, resetPassword, signInCode, magicLink, stepUp, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, recoveryCodeUsed, welcome`](#janusmail-templates-has-no-template-name--name-one-of-verifyemail-resetpassword-signincode-magiclink-stepup-passwordchanged-emailchanged-twofactorenabled-twofactordisabled-recoverycodeused-welcome)
 - [`janusMail: templates.<name> must be a function`](#janusmail-templatesname-must-be-a-function)
 - [`janusMail: templates.<name> is not an own enumerable property — pass a plain object, as { <name>: (variables) => rendered }`](#janusmail-templatesname-is-not-an-own-enumerable-property--pass-a-plain-object-as--name-variables--rendered-)
 - [`janusMail: clock must be a Clock — an object with a now function`](#janusmail-clock-must-be-a-clock--an-object-with-a-now-function)
@@ -42,6 +42,7 @@ How the messages are shaped:
 
 **Sending**
 - [`janusMail.magicLink: links.magicLink is missing — pass it to janusMail({ links }) to send sign-in links`](#janusmailmagiclink-linksmagiclink-is-missing--pass-it-to-janusmail-links--to-send-sign-in-links)
+- [`janusMail.stepUp: via must be 'email' — a step-up confirmed with the user's app sends no e-mail`](#janusmailstepup-via-must-be-email--a-step-up-confirmed-with-the-users-app-sends-no-e-mail)
 - [`janusMail.<method>: <field> must be a string`](#janusmailmethod-field-must-be-a-string)
 - [`janusMail.<method>: expiresAt must be a Date`](#janusmailmethod-expiresat-must-be-a-date)
 - [`janusMail.recoveryCodeUsed: recoveryCodesLeft must be a count — a whole number, 0 or more — or the sentence to show`](#janusmailrecoverycodeused-recoverycodesleft-must-be-a-count--a-whole-number-0-or-more--or-the-sentence-to-show)
@@ -68,6 +69,8 @@ How the messages are shaped:
 - [`TS2739: Type '{ … }' is missing the following properties from type 'JanusMailTemplates<…>'`](#ts2739-type----is-missing-the-following-properties-from-type-janusmailtemplates)
 - [`TS2741: Property 'recoveryCodeUsed' is missing in type '{ … }' but required in type 'JanusMailTemplates<…>'.`](#ts2741-property-recoverycodeused-is-missing-in-type----but-required-in-type-janusmailtemplates)
 - [`TS2741: Property 'magicLink' is missing in type '{ … }' but required in type 'JanusMailTemplates<…>'.`](#ts2741-property-magiclink-is-missing-in-type----but-required-in-type-janusmailtemplates)
+- [`TS2741: Property 'stepUp' is missing in type '{ … }' but required in type 'JanusMailTemplates<…>'.`](#ts2741-property-stepup-is-missing-in-type----but-required-in-type-janusmailtemplates)
+- [`TS2345: Argument of type 'StepUpByEmail<…> | StepUpByApp<…>' is not assignable to parameter of type 'Pick<StepUpByEmail<unknown>, …>'.`](#ts2345-argument-of-type-stepupbyemail--stepupbyapp-is-not-assignable-to-parameter-of-type-pickstepupbyemailunknown-)
 - [`TS2322: Type '"de"' is not assignable to type '"en" | "fr"'.`](#ts2322-type-de-is-not-assignable-to-type-en--fr)
 - [`TS2741: Property 'getStarted' is missing in type '{ … }' but required in type 'JanusMailLinks'.`](#ts2741-property-getstarted-is-missing-in-type----but-required-in-type-janusmaillinks)
 - [`TS2322: Type 'number | null' is not assignable to type 'string | number'.`](#ts2322-type-number--null-is-not-assignable-to-type-string--number)
@@ -196,9 +199,9 @@ A `fallbackLocale` the list does not hold — `'de'` with the default
 
 `templates` given as a list or a function. Key each template by its name.
 
-### `janusMail: templates has no template <name> — name one of verifyEmail, resetPassword, signInCode, magicLink, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, recoveryCodeUsed, welcome`
+### `janusMail: templates has no template <name> — name one of verifyEmail, resetPassword, signInCode, magicLink, stepUp, passwordChanged, emailChanged, twoFactorEnabled, twoFactorDisabled, recoveryCodeUsed, welcome`
 
-A key that is not one of the ten — `newSignIn`, or the e-mail's file name
+A key that is not one of the eleven — `newSignIn`, or the e-mail's file name
 `'verify-email'` rather than the template's, `verifyEmail`. Other e-mails are
 on the [roadmap](roadmap.md); send them with `@nxgt/mail` directly meanwhile.
 
@@ -232,7 +235,7 @@ as it is: fields are own properties.
 ### `janusMail: the default templates are built in en and fr only — with another locale in locales, pass every template in templates; <names> missing`
 
 `locales` holds a locale beyond `en` and `fr`, and `templates` leaves some
-out: the defaults could not render them in that locale. Pass all ten — see
+out: the defaults could not render them in that locale. Pass all eleven — see
 [Adding a locale](guide/locales.md#adding-a-locale) — or drop the locale.
 The message lists the templates missing.
 
@@ -267,6 +270,26 @@ const mail = janusMail({
 
 Sending again fails again: it is a bug, not an outage.
 
+### `janusMail.stepUp: via must be 'email' — a step-up confirmed with the user's app sends no e-mail`
+
+A `TypeError` from `mail.stepUp`, before anything is rendered or sent: it
+was given what `auth.stepUp.request(user)` answered for a user whose second
+factor is active — `via: 'secondFactor'`, with no code and no address — or
+something with no `via` at all, such as a sign-in code's answer. A step-up
+confirmed with the user's app sends nothing: ask for the code their app
+shows. Check `via` first:
+
+```ts
+const issued = await auth.stepUp.request(current.user);
+if (issued.via === 'email') {
+	await mail.stepUp(issued, { name: current.user.name, locale: current.user.locale });
+}
+return Response.json({ challenge: issued.challenge, via: issued.via });
+```
+
+In TypeScript the unchecked call does not compile — see
+[`TS2345: Argument of type 'StepUpByEmail<…> | StepUpByApp<…>' …`](#ts2345-argument-of-type-stepupbyemail--stepupbyapp-is-not-assignable-to-parameter-of-type-pickstepupbyemailunknown-).
+
 ### `janusMail.<method>: <field> must be a string`
 
 A `TypeError` from a call, naming the method and the field it could not read
@@ -286,7 +309,9 @@ send it with `signInCode`, or ask `auth.magicLink.request` for a link.
 
 `issued` needs `token` and `email` (`code` and `email` for `signInCode`), and
 the recipient its `name` — a user whose schema has no name passes one
-anyway: `{ name: user.email }`. `janusMail.verifyEmail: expiresIn must be a
+anyway: `{ name: user.email }`. `janusMail.stepUp: name must be a string`
+is `stepUp` called without the recipient: unlike `signInCode`, its e-mail
+greets the user by name. `janusMail.verifyEmail: expiresIn must be a
 string` is the third argument's `expiresIn` given as something else — a
 number of seconds: pass the text to show, `{ expiresIn: '1 hour' }`, or
 leave it out.
@@ -322,8 +347,8 @@ formatted in the recipient's locale and time zone —
 
 ### `janusMail.<method>: expiresAt must be a Date`
 
-A `TypeError` from `verifyEmail`, `resetPassword`, `signInCode` or
-`magicLink`: the e-mail says how long its link or code lasts, from `issued.expiresAt`, and that is
+A `TypeError` from `verifyEmail`, `resetPassword`, `signInCode`,
+`magicLink` or `stepUp`: the e-mail says how long its link or code lasts, from `issued.expiresAt`, and that is
 not a valid `Date`. The usual cause is a flow's answer that went through
 JSON — a job queue, a cache — where a `Date` becomes a string. Nothing is
 sent. Revive it when the job runs, or say the expiry yourself:
@@ -363,8 +388,8 @@ await mail.recoveryCodeUsed(to, { when, recoveryCodesLeft: `Sie haben noch ${lef
 
 ### `janusMail.<method>: clock.now() must answer a Date`
 
-A `TypeError` from `verifyEmail`, `resetPassword`, `signInCode` or
-`magicLink`: the `clock` given to `janusMail()` has a `now` that answered something else — a
+A `TypeError` from `verifyEmail`, `resetPassword`, `signInCode`,
+`magicLink` or `stepUp`: the `clock` given to `janusMail()` has a `now` that answered something else — a
 number from `Date.now()`, a string, an invalid `Date`. Nothing is sent.
 `clock` is `@nxgt/janus`'s `Clock`: pass the one `janus({ clock })` was
 given, or `{ now: () => new Date() }`.
@@ -497,7 +522,7 @@ avoids the read altogether. (In this repository: run `bun run build`.)
 
 The default templates read `mails/` with `node:fs`, through
 `@nxgt/mail/renderer`: Node, Bun or Deno only. On an edge runtime, pass all
-ten templates yourself; an inlined build is on the [roadmap](roadmap.md).
+eleven templates yourself; an inlined build is on the [roadmap](roadmap.md).
 
 ### An e-mail stays light in dark mode
 
@@ -630,7 +655,7 @@ whole.
 ### `TS2739: Type '{ … }' is missing the following properties from type 'JanusMailTemplates<…>'`
 
 `locales` holds a locale beyond `en` and `fr`, and `templates` does not give
-all ten. With five or more missing, the code is `TS2740` and the list ends
+all eleven. With five or more missing, the code is `TS2740` and the list ends
 `…, and 5 more.` See [Adding a locale](guide/locales.md#adding-a-locale).
 
 ### `TS2741: Property 'recoveryCodeUsed' is missing in type '{ … }' but required in type 'JanusMailTemplates<…>'.`
@@ -651,6 +676,32 @@ Add `magicLink` — it is given `brand`, `link` and `expiresIn` — even if you
 never send it; in JavaScript the same `templates` is
 [`janusMail: the default templates are built in en and fr only — …; magicLink missing`](#janusmail-the-default-templates-are-built-in-en-and-fr-only--with-another-locale-in-locales-pass-every-template-in-templates-names-missing).
 
+### `TS2741: Property 'stepUp' is missing in type '{ … }' but required in type 'JanusMailTemplates<…>'.`
+
+`templates` written before 0.8, with a locale beyond `en` and `fr`: since
+0.8.0 there are eleven templates, and with such a locale every one is
+yours. Add `stepUp` — it is given `brand`, `name`, `code`, `expiresIn` and
+`link` — even if you never send it; in JavaScript the same `templates` is
+[`janusMail: the default templates are built in en and fr only — …; stepUp missing`](#janusmail-the-default-templates-are-built-in-en-and-fr-only--with-another-locale-in-locales-pass-every-template-in-templates-names-missing).
+See [Templates](guide/templates.md#what-each-template-is-given).
+
+### `TS2345: Argument of type 'StepUpByEmail<…> | StepUpByApp<…>' is not assignable to parameter of type 'Pick<StepUpByEmail<unknown>, …>'.`
+
+What `auth.stepUp.request(user)` answered, passed to `mail.stepUp` without
+checking `via`, on a user type that may have a second factor. The error
+goes on: `Type 'StepUpByApp<…>' is missing the following properties …`,
+naming `code` and `email` — a user whose factor is active confirms with their app, and
+there is nothing to send. Narrow it first:
+
+```ts
+const issued = await auth.stepUp.request(current.user);
+if (issued.via === 'email') await mail.stepUp(issued, { name: current.user.name });
+```
+
+A sign-in code's answer given to `stepUp` reads `Property 'via' is missing
+in type 'IssuedCode<…>'`: a sign-in code signs in, it confirms no action —
+send it with `signInCode`.
+
 ### `TS2322: Type '"de"' is not assignable to type '"en" | "fr"'.`
 
 A `fallbackLocale` outside `locales`. Add it to `locales` — with every

package/mails/en/confirm-action.html

@@ -0,0 +1,52 @@
+<!DOCTYPE html>
+<html lang="en" dir="ltr" xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" style="color-scheme:light dark;">
+<head>
+<meta charset="utf-8">
+<meta name="x-apple-disable-message-reformatting">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta name="color-scheme" content="light dark">
+<meta name="supported-color-schemes" content="light dark">
+<style>[data-ogsc] .nx-dark-bg-paper{background-color:#040a19!important;}[data-ogsb] .nx-dark-bg-paper{background-color:#040a19!important;}[data-ogsc] .nx-dark-bg-card{background-color:#0f172b!important;background-color:lab(7.78673% 1.82345 -15.0537)!important;}[data-ogsb] .nx-dark-bg-card{background-color:#0f172b!important;background-color:lab(7.78673% 1.82345 -15.0537)!important;}[data-ogsc] .nx-dark-bg-background{background-color:#020918!important;background-color:lab(2.35721% .367686
+-8.51797)!important;}[data-ogsb] .nx-dark-bg-background{background-color:#020918!important;background-color:lab(2.35721% .367686 -8.51797)!important;}[data-ogsc] .nx-dark-text-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}[data-ogsb] .nx-dark-text-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}[data-ogsc] .nx-dark-text-foreground-25{color:#404551!important;}[data-ogsb] .nx-dark-text-foreground-25{color:#404551!important;}
+[data-ogsc] .nx-dark-text-card-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}[data-ogsb] .nx-dark-text-card-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}[data-ogsc] .nx-dark-border-border{border-color:#1c212f!important;}[data-ogsb] .nx-dark-border-border{border-color:#1c212f!important;}[data-ogsc] .nx-dark-bg-muted{background-color:#1e293b!important;}[data-ogsb] .nx-dark-bg-muted{background-color:#1e293b!important;}
+[data-ogsc] .nx-dark-text-muted-foreground{color:#cbd5e1!important;}[data-ogsb] .nx-dark-text-muted-foreground{color:#cbd5e1!important;}[data-ogsc] .nx-dark-border-muted-foreground{border-color:#cbd5e1!important;}[data-ogsb] .nx-dark-border-muted-foreground{border-color:#cbd5e1!important;}[data-ogsc] .nx-dark-border-muted{border-color:#1e293b!important;}[data-ogsb] .nx-dark-border-muted{border-color:#1e293b!important;}[data-ogsc] .nx-dark-bg-primary{background-color:#fafafa!important;}
+[data-ogsb] .nx-dark-bg-primary{background-color:#fafafa!important;}[data-ogsc] .nx-dark-text-primary{color:#fafafa!important;}[data-ogsb] .nx-dark-text-primary{color:#fafafa!important;}[data-ogsc] .nx-dark-text-primary-foreground{color:#18181b!important;}[data-ogsb] .nx-dark-text-primary-foreground{color:#18181b!important;}[data-ogsc] .nx-dark-text-info{color:#93c5fd!important;}[data-ogsb] .nx-dark-text-info{color:#93c5fd!important;}[data-ogsc] .nx-dark-border-primary{border-color:#fafafa
+!important;}[data-ogsb] .nx-dark-border-primary{border-color:#fafafa!important;}[data-ogsc] .nx-dark-bg-primary-15{background-color:#272d3a!important;}[data-ogsb] .nx-dark-bg-primary-15{background-color:#272d3a!important;}[data-ogsc] .nx-dark-bg-primary-20{background-color:#343945!important;}[data-ogsb] .nx-dark-bg-primary-20{background-color:#343945!important;}[data-ogsc] .nx-dark-border-primary-40{border-color:#656972!important;}[data-ogsb] .nx-dark-border-primary-40{border-color:#656972
+!important;}[data-ogsc] .nx-dark-border-primary-50{border-color:#7e8189!important;}[data-ogsb] .nx-dark-border-primary-50{border-color:#7e8189!important;}[data-ogsc] .nx-light-only{display:none!important;}[data-ogsb] .nx-light-only{display:none!important;}[data-ogsc] .nx-dark-only{display:inline-block!important;}[data-ogsb] .nx-dark-only{display:inline-block!important;}
+@media (prefers-color-scheme:dark){html{--lightningcss-light:;--lightningcss-dark:initial;}.nx-dark-bg-paper{background-color:#040a19!important;}.nx-dark-bg-card{background-color:#0f172b!important;background-color:lab(7.78673% 1.82345 -15.0537)!important;}.nx-dark-text-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}.nx-dark-text-card-foreground{color:#f8fafc!important;color:lab(98.1434% -.369519 -1.05966)!important;}.nx-dark-border-border{border-color:#1c212f
+!important;}.nx-dark-bg-muted{background-color:#1e293b!important;}.nx-dark-text-muted-foreground{color:#cbd5e1!important;}.nx-dark-bg-primary{background-color:#fafafa!important;}.nx-dark-text-primary-foreground{color:#18181b!important;}.nx-dark-text-info{color:#93c5fd!important;} }
+</style>
+</head>
+<body xml:lang="en" dir="ltr" style="margin:0;padding:0;width:100%;height:100%;word-break:break-word;background-color:#f4f4f4;" class="nx-dark-bg-paper"><div style="display:none;">Enter this code to confirm your request.&#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847;
+&#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847;
+&#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847;
+&#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847;
+&#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847;
+&#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847;
+&#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847;
+&#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &#8199;&#65279;&#847; &nbsp;</div><span style="display:none">
+<!--[if mso]><xml><o:OfficeDocumentSettings><o:PixelsPerInch>96</o:PixelsPerInch></o:OfficeDocumentSettings><w:WordDocument><w:DontUseAdvancedTypographyReadingMail/></w:WordDocument></xml>
+<![endif]--></span><div role="article" aria-roledescription="email" lang="en" dir="ltr" style="font-size:medium;font-size:max(16px,1rem)">
+<table class="nx-dark-bg-paper" role="presentation" cellpadding="0" cellspacing="0" dir="ltr" style="width:100%;background-color:#f4f4f4;font-family:ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont, 'Segoe UI',Roboto, 'Noto Sans',Ubuntu,Cantarell, 'Helvetica Neue',sans-serif;"><tr><td align="center" style="padding:32px 16px;">
+<!--[if mso]>
+<table role="none" cellpadding="0" cellspacing="0" style="width:600px" align="center"><tr><td>
+<![endif]--><div style="margin:0 auto;max-width:600px;">
+<table role="presentation" cellpadding="0" cellspacing="0" dir="ltr" style="width:100%;"><tr><td style="padding-bottom:24px;text-align:center;"><span class="nx-dark-text-foreground" style="font-size:18px;line-height:28px;font-weight:600;color:#020918;color:lab(2.35721% .367686 -8.51797);">{{ brand }}</span>
+</td></tr><tr><td class="nx-dark-border-border nx-dark-bg-card nx-dark-text-card-foreground" style="border-radius:14px;border-color:#e2e8f0;border-style:solid;border-width:1px;border-color:lab(91.7353% -.998765 -4.76968);background-color:#fff;background-color:lab(100% 0 0);padding:32px;font-size:14px;line-height:20px;color:#020618;color:lab(1.76974% 1.32743 -9.28855);box-shadow:0 0 rgba(0,0,0,0),0 0 rgba(0,0,0,0),0 0 rgba(0,0,0,0),0 0 rgba(0,0,0,0),0 1px 3px rgba(0,0,0,.1),0 1px 2px -1px rgba(0,
+0,0,.1);"><h1 class="nx-dark-text-foreground" style="margin:0 0 16px;font-size:24px;line-height:32px;font-weight:600;color:#020918;color:lab(2.35721% .367686 -8.51797);">Your confirmation code</h1><p class="nx-dark-text-foreground" style="margin:0 0 16px;font-size:14px;line-height:20px;color:#020918;color:lab(2.35721% .367686 -8.51797);">Hello {{ name }},</p><p class="nx-dark-text-foreground" style="margin:0 0 16px;font-size:14px;line-height:20px;color:#020918;color:lab(2.35721% .367686
+-8.51797);">Someone, we hope you, asked to do something sensitive on your {{ brand }} account. Enter this code to confirm it.</p>
+<table role="presentation" cellpadding="0" cellspacing="0" style="margin-bottom:16px;width:100%;"><tr><td class="nx-dark-bg-muted nx-dark-text-muted-foreground" style="border-radius:10px;background-color:#f1f5f9;background-color:lab(96.286% -.852436 -2.46847);padding:16px 24px;text-align:center;font-family:ui-monospace,Menlo,Consolas,monospace;font-size:30px;line-height:36px;font-weight:600;letter-spacing:.3em;color:#020918;color:lab(2.35721% .367686 -8.51797);">{{ code }}
+</td></tr></table><p class="nx-dark-text-foreground" style="margin:0 0 16px;font-size:12px;line-height:16px;color:#020918;color:lab(2.35721% .367686 -8.51797);">This code expires in {{ expiresIn }}.</p><p class="nx-dark-text-foreground" style="margin:0 0 16px;font-size:14px;line-height:20px;color:#020918;color:lab(2.35721% .367686 -8.51797);">If this was not you, do not share this code: someone may be trying to act on your account. Secure your account now.</p><div><a style="display:inline-block;
+border-radius:9999px;background-color:#27272a;padding:10px 16px;font-family:ui-sans-serif,system-ui,-apple-system,BlinkMacSystemFont, 'Segoe UI',Roboto, 'Noto Sans',Ubuntu,Cantarell, 'Helvetica Neue',sans-serif;font-size:14px;line-height:16px;font-weight:500;color:#f8fafc;color:lab(98.1434% -.369519 -1.05966);text-decoration:none;" href="{{ link }}" class="nx-dark-bg-primary nx-dark-text-primary-foreground">
+<!--[if mso]><i style="mso-font-width:114%;mso-text-raise:19px;" hidden>&emsp;</i>
+<![endif]--> <span style="mso-text-raise:10px;">Secure my account</span>
+<!--[if mso]><i style="mso-font-width:114%;" hidden>&emsp;&#8203;</i>
+<![endif]--></a></div><div role="separator" style="line-height:24px;">&zwj;</div><p class="nx-dark-text-foreground" style="margin:0 0 16px;font-size:12px;line-height:16px;color:#5f718a;">If the button does not work, open this link: <a href="{{ link }}" class="nx-dark-text-info" style="color:#1d4ed8;text-decoration:underline;">{{ link }}</a></p>
+</td></tr><tr><td class="nx-dark-text-muted-foreground" style="padding-left:24px;padding-right:24px;padding-top:24px;text-align:center;font-size:12px;line-height:16px;color:#5f718a;"><p style="margin:0 0 8px;">You received this e-mail because you have an account with {{ brand }}.</p><p style="margin:0;">{{ brand }}</p>
+</td></tr></table></div>
+<!--[if mso]>
+</td></tr></table>
+<![endif]-->
+</td></tr></table></div>
+</body>
+</html>

package/mails/en/confirm-action.txt

@@ -0,0 +1,25 @@
+Enter this code to confirm your request.
+
+{{ brand }}
+
+Your confirmation code
+
+Hello {{ name }},
+
+Someone, we hope you, asked to do something sensitive on your {{ brand }} account. Enter this code to confirm it.
+
+{{ code }}
+
+This code expires in {{ expiresIn }}.
+
+If this was not you, do not share this code: someone may be trying to act on your account. Secure your account now.
+
+Secure my account
+
+{{ link }}
+
+If the button does not work, open this link: {{ link }}
+
+You received this e-mail because you have an account with {{ brand }}.
+
+{{ brand }}