v4: every email is rendered by its template in api/mail/ on one layout that takes the instance's style, and sent one way — the welcome email was built and sent inside the register route and the reset link in its service, each writing Markdown, running marked, and calling a nodemailer wrapper whose cc, bcc, replyTo and send result nothing used. Now api/mail/ holds one template per email (welcome.ts, password-reset.ts) on layout.ts's EmailKit, which draws each block with inline styles in a style from styles.ts: the six site styles' palettes, copied from src/themes/, and what makes each recognisable in a mail client (Brutalist's hard border and shadow, GeoCities' ridge and rainbow rules, Times' underlined ink links, Kanagawa's colored quotes, dates and wordmark, Melange's spice bar). On the "auto" scheme the light palette is inlined and the dark one swapped in by a prefers-color-scheme block; a chosen scheme sends only its own. User-written text is escaped where it lands. strings.ts holds every email's words in English and French. GERBEUR_EMAIL_LOCALE picks the language and GERBEUR_DEFAULT_STYLE the instance's style, which the welcome and reset emails are drawn in; GERBEUR_WELCOME_EMAIL_BODY still replaces the welcome's Markdown, whose blocks now take the style too. email-service sends a rendered email with its recipient and headers, refuses to load when GERBEUR_SMTPS_URL is set without GERBEUR_FROM_EMAIL (sends used to fail one by one), and takes a test transport, through which the tests now read what was sent. The welcome send moves to user-service's sendWelcomeEmail. The style and scheme names move to shared/theme.ts, which the server now needs. README, mod.ts and .env.example describe mail/ and the new variables, and drop the "notifications, invites" email that never existed. 221 backend tests pass (new: the layout's schemes, styles and escaping, both templates, the welcome on sign-up, a reset link from the email that works), and deno check, deno lint, doc:lint, deno fmt, tsc and eslint are clean.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

README.md

@@ -54,8 +54,10 @@ variables:
 | `GERBEUR_FRONTEND_URL`       | Frontend base URL for email links and CORS; auto-added to allowed origins — the only variable needed when the frontend runs on a separate host           | `GERBEUR_PUBLIC_URL`            |
 | `GERBEUR_ALLOWED_ORIGINS`    | Comma-separated extra origins for CORS/WebSocket; `PUBLIC_URL` and `FRONTEND_URL` are always included — typically only needed in dev for the Vite server | `""` (empty)                    |
 | `GERBEUR_SITE_NAME`          | Site name used in the browser tab, app header, OG meta tags, and emails                                                                                  | `gerbeur`                       |
-| `GERBEUR_SMTPS_URL`          | SMTPS connection URL for outgoing email (`smtps://user:pass@host:465`)                                                                                   | unset                           |
-| `GERBEUR_FROM_EMAIL`         | Sender address for outgoing emails — required when `GERBEUR_SMTPS_URL` is set                                                                            | unset                           |
+| `GERBEUR_SMTPS_URL`          | SMTPS connection URL for outgoing email (`smtps://user:pass@host:465`); unset sends no email                                                             | unset                           |
+| `GERBEUR_FROM_EMAIL`         | Sender of every email — required when `GERBEUR_SMTPS_URL` is set, or the server won't start                                                              | unset                           |
+| `GERBEUR_EMAIL_LOCALE`       | Language of every email: `en` or `fr`                                                                                                                    | `en`                            |
+| `GERBEUR_DEFAULT_STYLE`      | The instance's style (`smooth`, `brutalist`, `geocities`, `nyt`, `kanagawa`, `melange`), used by the welcome and reset emails                            | `smooth`                        |
 | `GERBEUR_WELCOME_EMAIL_BODY` | Markdown body for the account-creation welcome email; supports `{{username}}` and `{{site_name}}`                                                        | built-in template               |
 | `VITE_API_PROTOCOL`          | API protocol baked into the frontend bundle (see [Production](#production))                                                                              | `http`                          |
 | `VITE_API_HOSTNAME`          | API hostname baked into the frontend bundle                                                                                                              | `localhost`                     |
@@ -130,6 +132,7 @@ api/
   routes/          # One router per URL prefix: HTTP + WebSocket, no SQL
   services/        # Business logic and every SQL query
   remote/          # Everything that fetches from other sites
+  mail/            # One template per email, and the layout they share
     providers/     # Link metadata providers (YouTube, SoundCloud, Bandcamp, …)
   model/           # Per table: row type, row guard, row ↔ API mappers
   validators/      # Per domain: request body guards
@@ -169,8 +172,9 @@ The backend is split by layer, one kind of module per folder, and each file is
 named after its domain: the dumps are `routes/dumps.ts`,
 `services/dump-service.ts`, `model/dump.ts` and `validators/dump.ts`. Routes
 parse and answer, services hold the logic and the SQL, `remote/` is the only
-place that fetches from other sites. Tests mirror the source one file per
-module, so the tests of `services/chat-service.ts` are in
+place that fetches from other sites, and `mail/` renders each email that
+`services/email-service.ts` sends. Tests mirror the source one file per module,
+so the tests of `services/chat-service.ts` are in
 `test/services/chat-service.test.ts`.
 
 ### Comments