I/O Maildir

Maildir client library, written in Rust
This library is composed of 2 feature-gated layers:
- Low-level I/O-free coroutines: these
no_std-compatible state machines contain the whole Maildir logic and can be used anywhere - Mid-level std client: a standard, blocking Maildir client built on
std::fs
Table of contents
Features
- I/O-free coroutines:
no_stdstate machines; no filesystem calls, no async runtime, nostdrequired, drive against any blocking, async, or fuzz harness. - Standard, blocking client (requires
clientfeature) backed bystd::fs. - Maildir delivery protocol: the entry-store coroutine writes to
/tmpfirst, then atomically renames into/curor/new, producing IDs of the shapesecs.#counter.M<nanos>P<pid>.<host>. - Maildir++ mode: optional dotted folder enumeration (
.Work.Foo) and inbox surfacing, gated by themaildirppstore flag. - Dovecot keywords resolution: read / write the
dovecot-keywordsslot table (a..zletters), gated by thedovecot_keywordsclient option. - Header round-trip for custom keywords: inject and strip
X-Keywords/X-Labelheaders, gated bykeywords_headerandstrip_headers.
[!TIP] I/O Maildir is written in Rust and uses cargo features to gate backend support. The default feature set is declared in Cargo.toml or on docs.rs.
Specification coverage
This library implements the Maildir format as I/O-agnostic coroutines.
| Coroutine | What it does |
|---|---|
MaildirCreate |
Creates root, cur, new, tmp in lexicographic order |
MaildirDelete |
Recursively removes a Maildir |
MaildirRename |
Renames a Maildir within its parent directory |
MaildirList |
Lists every valid Maildir inside a root directory |
MaildirEntryStore |
Writes to /tmp, then atomically renames into /cur or /new with optional flags |
MaildirEntryGet |
Locates an entry by ID and reads its contents |
MaildirEntryList |
Scans both /new and /cur and returns every confirmed entry |
MaildirEntryCopy |
Copies an entry between Maildirs |
MaildirEntryMove |
Moves an entry between Maildirs |
MaildirEntryLocate |
Finds an entry file by ID across cur, new and tmp |
MaildirFlagsAdd |
Adds flags to an entry in /cur (no-op for /new and /tmp) |
MaildirFlagsRemove |
Removes flags from an entry in /cur (no-op for /new and /tmp) |
MaildirFlagsSet |
Replaces the flags of an entry in /cur (no-op for /new and /tmp) |
DovecotLoad |
Reads the per-folder dovecot-keywords slot table |
DovecotStore |
Writes a per-folder dovecot-keywords slot table |
Usage
I/O Maildir can be consumed two ways, depending on how much of the I/O stack you want to own. Each mode is gated by cargo features.
Whichever mode you pick, every coroutine implements the MaildirCoroutine trait. Its resume(arg: Option<MaildirReply>) method returns a MaildirCoroutineState<Yield, Return> with two variants:
Yielded(Y): intermediate.YisMaildirYield, mixing filesystem step requests (WantsDirCreate,WantsDirRead,WantsDirRemove,WantsDirExists,WantsFileCreate,WantsFileRead,WantsFileExists,WantsRename,WantsCopy) with the three environmental inputs used by the delivery protocol to mint entry identifiers (WantsTime,WantsPid,WantsHostname).Complete(R): terminal. By conventionR = Result<Output, Error>carrying the operation's final value.
The driver answers each Yielded(MaildirYield::Wants*) with the matching MaildirReply variant on the next resume.
I/O-free coroutines
No features required: works in #![no_std], no filesystem calls, no async runtime. You own the loop and the syscalls; the library only computes the operations to perform and consumes their results.
Create a fresh Maildir against a blocking caller (the same shape works under async or in-memory replay):
use fs;
use ;
let store = MaildirStore ;
let name = from;
let mut coroutine = new;
let mut arg: = None;
loop
Drive a multi-step command (store an entry) the same way:
use ;
use gethostname;
use ;
let maildir = from_path;
let contents = b"From: alice@example.com\r\nSubject: Hello\r\n\r\nHello!\r\n".to_vec;
let mut coroutine = new;
let mut arg: = None;
let MaildirEntryStoreOutput = loop ;
println!;
Std client
Enable the client feature (on by default). MaildirClient::new(root) wraps a filesystem root and exposes one method per coroutine; the resume loop is driven for you via MaildirClient::run and std::fs.
[]
= "0.1.0" # client is enabled by default
use ;
#
Logical mailbox names ("inbox", "Archive/2024") are translated to on-disk paths by client.store according to its maildirpp flag: in fs layout (default) "Archive/2024" becomes <root>/Archive/2024/; in Maildir++ it becomes <root>/.Archive.2024/.
Examples
See complete examples at ./examples.
Have also a look at real-world projects built on top of this library:
- Himalaya CLI: CLI to manage emails
- Himalaya TUI: TUI to manage emails
- Neverest: CLI to synchronize emails
AI disclosure
This project is developed with AI assistance. This section documents how, so users and downstream packagers can make informed decisions.
-
Tools: Claude Code (Anthropic), Opus 4.7, invoked locally with a persistent project-scoped memory and a small set of repo-specific rules.
-
Used for: Refactors, mechanical multi-file edits, boilerplate (feature gates, error enums, derive macros, trait impls), test scaffolding, doc polish, exploratory design conversations.
-
Not used for: Engineering, critical code, git manipulation (commit, merge, rebase…), real-world tests.
-
Verification: Every AI-assisted change is read, compiled, tested, and formatted before commit (
nix develop --command cargo check / cargo test / cargo fmt). Behavioural correctness is verified against the relevant spec, not assumed from the model output. Tests are never adjusted to fit AI-generated code; the code is adjusted to fit correct behaviour. -
Limitations: AI models occasionally produce code that compiles and passes tests but is subtly wrong: off-by-one errors, missed edge cases, plausible but nonexistent APIs, stale spec references. The verification workflow catches most of this; it does not catch all of it. Bug reports are welcome and taken seriously.
-
Last reviewed: 05/06/2026
License
This project is licensed under either of:
at your option.
Social
- Chat on Matrix
- News on Mastodon or RSS
- Mail at pimalaya.org@posteo.net
Sponsoring
Special thanks to the NLnet foundation and the European Commission that have been financially supporting the project for years:
- 2022 → 2023: NGI Assure
- 2023 → 2024: NGI Zero Entrust
- 2024 → 2026: NGI Zero Core
- 2027 in preparation…
If you appreciate the project, feel free to donate using one of the following providers:
