operations-mail-sync

Provider-agnostic mail sync worker loop over MailReader/RefreshPolicy, plus quota/audit send-path composition over MailSender

What it is for

# operations-mail-sync

Two responsibilities (sprint 3.45 crate 10):

1. The sync worker loop (SyncWorker): turns a foundation_refresh_policy::RefreshPolicy decision into MailReader::list/fetch calls, persisting through a caller-supplied MailStore seam. Advances the cursor only after a full page has been persisted with zero errors (Gate 1.5.6 batch-failure rule). 2. Send-path quota/audit composition (SendGuard): wires operations-rate-limit and foundation-audit-log around a &dyn MailSender, per sprint 3.45's "No new crate" decision (Gate 0.5 dedup — composition, not a new primitives-mail-send-guard crate).

Source: rust-gmail-manager/src/services/sync_service.rs's worker-loop portion — the override -> full -> incremental -> bootstrap decision logic itself was already lifted into foundation-refresh-policy (crate 2); this crate builds the loop AROUND that decision, not a second extraction of it. See CHANGELOG.md for the full Gate 4.5 provenance note.

Capabilities

MailSyncError

Errors for the operations-mail-sync worker loop and send-path composition.

SendGuardError

Errors for the operations-mail-sync worker loop and send-path composition.

AuditSink

Send-path composition: quota (operations-rate-limit) + audit

SendGuard

Send-path composition: quota (operations-rate-limit) + audit

MailStore

MailStore — the persistence seam the sync worker writes through.

SyncOutcome

The sync worker loop: RefreshPolicy::decide chooses a SyncStrategy,

SyncRequest

The sync worker loop: RefreshPolicy::decide chooses a SyncStrategy,

SyncWorker

The sync worker loop: RefreshPolicy::decide chooses a SyncStrategy,

SyncWorker<'a>

The sync worker loop: RefreshPolicy::decide chooses a SyncStrategy,

How to use it

No examples/ target and no doctest in this crate's rustdoc. The tests listed under Verification are the closest executable usage.

Module structure

operations_mail_sync

• error
• send_guard
• store
• worker

flowchart TD
  n_operations_mail_sync["operations_mail_sync"]
  n_operations_mail_sync --> n_error["error"]
  n_operations_mail_sync --> n_send_guard["send_guard"]
  n_operations_mail_sync --> n_store["store"]
  n_operations_mail_sync --> n_worker["worker"]

Public surface

`error`

`send_guard`

`store`

`worker`

Re-exports. Exported here, defined elsewhere.

Boundary

Reaches into foundation.

Shares tier operations with 40 other crates: operations-approval-workflow, operations-assessments, operations-block-imaging, operations-boot-media, operations-browser-agent-worker, operations-camera-discovery, operations-camera-liveview, operations-camera-registry, … (40 total).

_What this crate deliberately does NOT own is a judgment. No committed registry records one for it, so none is stated here._

Where it sits

Tier flow. Which tiers this crate's own edges cross.

flowchart LR
  n_operations["operations"] --> n_foundation["foundation"]

Dependencies

Runtime, in this workspace.

Runtime, from outside the workspace.

Development, from outside the workspace.

Build. None.

Depended on by. 1 workspace crate.

Signal flow — what reaches this crate, and what it reaches.

flowchart LR
  n_tools_mail_manager["tools-mail-manager"] -->|uses| SELF
  SELF["operations-mail-sync"]
  SELF -->|runtime| n_foundation_audit_log["foundation-audit-log"]
  SELF -->|runtime| n_foundation_mail_message["foundation-mail-message"]
  SELF -->|runtime| n_foundation_refresh_policy["foundation-refresh-policy"]
  SELF -->|runtime| n_operations_rate_limit["operations-rate-limit"]
  classDef self fill:#1f883d,stroke:#1f883d,color:#fff;
  class SELF self;

Feature flags

No Cargo features are defined: every capability is unconditional, so no consumer can receive a half-wired crate.

Targets

Error model

Operational characteristics

No unsafe block, unsafe fn, unsafe impl or unsafe trait was found by the parser anywhere in this crate's source.

Configuration

No environment variable is read with a literal name anywhere in this crate. A variable whose key is computed at run time cannot be listed here, and is not claimed to be absent.

Related capabilities

1 workspace crate depends on this one: tools-mail-manager.

Verification

Evidence by module. How often each public module is named by something executable.

What the tests establish, by name:

• composite_account_syncs_via_reader_and_sends_via_sender_independently — tests/composite_account.rs
• override_quota_skips_limiter_but_still_sends_and_audits — src/send_guard.rs
• quota_exhaustion_throttles_without_calling_sender — src/send_guard.rs
• quota_is_scoped_per_recipient_not_global — src/send_guard.rs
• send_within_quota_succeeds_and_audits_mail_send — src/send_guard.rs
• sender_failure_is_audited_as_denied_and_propagated — src/send_guard.rs
• bootstrap_run_lists_and_persists_all_messages_and_advances_cursor — src/worker.rs
• budget_truncated_page_does_not_advance_cursor_or_skip_mail — src/worker.rs
• empty_first_page_is_a_no_op — src/worker.rs
• fetch_failure_mid_page_aborts_without_advancing_cursor — src/worker.rs
• full_flag_ignores_stored_cursor — src/worker.rs
• incremental_resumes_from_stored_cursor — src/worker.rs
• override_filter_wins_and_is_forwarded_as_opaque_cursor — src/worker.rs
• store_failure_mid_page_aborts_without_advancing_cursor — src/worker.rs

Documentation coverage

pie showData
    title Public items with rustdoc
    "Documented" : 12
    "No rustdoc detected" : 0

Metrics

pie showData
    title Public API by kind
    "enum" : 2
    "method" : 4
    "struct" : 4
    "trait" : 2

pie showData
    title Rust source composition
    "Code" : 797
    "Blank or comment" : 354

Generation

Rendered by tools-corpus corpus readme from repository evidence alone, renderer schema 2, lexicon current. No model, network service or database was consulted. Regenerate with tools-corpus corpus readme --write; verify with --check.