Changelog

All notable changes to Komorebi are recorded here. The format follows Keep a Changelog, and versions follow Semantic Versioning. Each entry says what it changes in the local data (the cache, its folders and Credential Manager).

0.7.0 (2026-10-23)

Added

• Contacts: a local address book ("On this computer") with names, email addresses, phone numbers, organization, job title, notes and groups, in a Contacts view (list, search, group filter, details, inline editor, New message to). Recipient suggestions list contacts first, then groups (a group adds its members), then addresses seen in mail.
• CardDAV sync per account (Contacts > Sync): off by default, read only or read and write, with Find (SRV and /.well-known/carddav, no credentials), Find address books, a separate password option kept in Windows Credential Manager, sync-collection with ETags and a ctag and ETag fallback, and edits pushed with If-Match. A field changed on both sides takes the server's value and keeps yours until you choose.
• Local rules (Settings > Rules, between Signatures and General): per account, ordered, on new Inbox mail while Komorebi runs. Conditions on sender, To or Cc, subject and attachment; actions move, delete to Trash, mark read, mark important and stop. Filed mail never enters the Inbox list and raises no notification; mail marked read raises none. An activity list shows what automatic runs did, and Copy as Sieve puts the rules on the clipboard as a Sieve script. No rule sends mail.
• Calendar: a local calendar, "On this PC", with an agenda of 30 days (the Calendar item above Settings). Accepting or tentatively accepting a meeting invitation adds the event to it (a newer version replaces it, a changed occurrence joins its series), declining removes it (or just the one occurrence declined), the invitation card says when the event is in the calendar, and a cancelled one offers Remove from calendar. Repeating events are expanded on this computer; time zones come from the invitation or from Windows' own rules.
• Calendar sync (CalDAV): Calendars on the Calendar page finds an account's calendars on a press of Find calendars (looking the server up from the mail address when no address is given), leaves task lists out, and lets each calendar be turned off. Calendars sync when the page opens, on Sync now and at most every 15 minutes while one is on, on a short-lived thread per account, with sync-collection or the ctag and ETags; an event too large or unreadable is skipped.
• Calendar views and editing: Month (the default), Week and Day views next to the agenda, with Page Up, Page Down and Home, and New event and an editor for your own events (all day, start and end with a date picker, simple repeats, reminder, place and notes; only this event or the whole series for a repeating one). Changes to a CalDAV calendar are sent on the next sync with If-Match, never over a newer version: a conflict keeps the server's version and offers to apply your change again or discard it. Someone else's event is read only apart from Remove from calendar.
• Event reminders: the agenda marks an event under way ("Now") and one whose reminder is due ("In 10 minutes"), and Settings > General > Notifications for event reminders (off by default) shows a Windows notification for each reminder while Komorebi runs, from one timer in the app; nothing is scheduled with Windows.
• Certificate review offers the issuing CA from the chain the server presented, so a private-CA server can be pinned to its CA instead of its own certificate.
• SMTP without sign-in: a per-account setting for a submission server that takes mail without AUTH (TLS is still required), used by the connection check and every send.
• Settings > Privacy > Encrypt the mail cache on this computer (off by default): the cache is encrypted or decrypted at the next start, with a key only your Windows user can unlock. A cache that cannot be unlocked opens a dialog that sets it aside and starts a fresh one, or quits.

Changed

• Invitation times in a named time zone without its definition in the invite are now converted with Windows' rules for that zone, and a time in the hour skipped when clocks go forward uses the offset before the change.

Local data: the cache moves to schema v15 (contacts: contacts, groups, address books and the DAV settings shared with the calendar), v16 (rules: the rules, rule_conditions and rule_log tables and two watermark columns on folders), v17 (the calendar's tables, created empty with the local calendar) and v18 (accounts.smtp_no_auth, off for every account); nothing is removed or rewritten. Contacts and rules are user data and are kept like settings. Older Komorebi versions refuse a v18 cache. Cached mail and caches made by unreleased development builds are not upgraded: only caches from released versions (0.6.0 and earlier) migrate. With encryption on, the cache is rewritten once at the next start and cache.sqlite3.key is added beside it.

0.6.0 (2026-10-15)

Added

• Self-hosted servers: the certificate prompt can trust the server key instead of the exact certificate, so a renewal that keeps the key does not raise the changed-certificate alarm. CA pins are enforced on connect.
• Encrypted cache engine (not switched on yet): a SQLite VFS shim (src/cachecrypt.rs) that seals every page of the cache and its write-ahead log with AES-256-GCM through Windows CNG, with a random key per cache kept in cache.sqlite3.key under DPAPI, and a crash-safe conversion in both directions (copy, check, swap). A cache in the encrypted form opens through it; a missing or foreign key fails closed and leaves the file untouched. Remove all data also deletes the key and any interrupted conversion's files. Local data: none changes; every existing cache stays plaintext until a setting to turn it on lands.

Changed

• Sending checks the pinned certificate or key itself before signing in, on STARTTLS and SSL/TLS alike.

0.5.0 (2026-10-15)

Added

• Composer polish: Ctrl+C and Cut put the selection on the clipboard as formatted HTML and plain text (the whole selection, even on a long message), and pasting it back keeps the formatting; the colour flyout moves with the arrow keys (Home, End, Enter, Esc); the caret blinks at the Windows rate and stays steady with animation effects off; on a message over 16 KB the screen reader is told its length and how to move through it. In the dark theme a dark logo on a clear ground in a dimmed message gets a light plate, so it no longer vanishes.
• To, Cc and Bcc show recipients as person tokens: a comma, a semicolon, Enter or leaving the field turns an address into a chip, a wrong address shows in the error style, and a chip is removed with its x or Backspace, selected with the arrow keys and copied with Ctrl+C. Drafts and sending keep the same address text.
• A draft saved on another device or in webmail opens for editing: Edit on a message in the server's Drafts folder makes a draft of this computer from its text and attachments, linked to the server's message, so saving replaces it and Discard removes it (one copy). The draft files are written to the drafts folder beside the cache; nothing else changes in the local data.
• mailto: links: komorebi.exe "mailto:..." (what Windows runs for a mail link once Komorebi is chosen in Settings > Default apps) opens a composer with the address, cc, bcc, subject and body filled in, never sent, with no attachments taken from the link; a second start hands the link to the running copy and exits. Anything else on the command line is ignored. No change to the local data.
• The update check and download are tested end to end against a local HTTPS server (newer, same, tampered, wrongly signed, redirected away, progress).
• A draft can open in a window of its own (Ctrl+O on the composer): closing it saves the draft, Send and Undo send work from it, and several can be open at once.
• Composer windows also open from a draft row in the Drafts folder (Ctrl+O) and from a composer tab's "Open in new window"; files dropped on one attach to its draft; the reading pane says where a popped-out draft went, with Bring to front; quitting saves every open window's draft, and a draft already in a window brings that window forward. No change to the local data.

Fixed

• The installer: a silent update now starts Komorebi again afterwards (Restart Manager does not restart a program that already quit); the app quits when Windows asks it to end (the installer's close request, or sign-out) even when it lives in the tray with its window hidden; the "Komorebi is running" text says how to quit a tray-only copy (English and European Portuguese).
• Settings opened from a message or draft tab keep the folder pane, and F6 there cycles only the regions that show. A message tab whose account is removed, or whose folder vanishes, keeps its message and says it was moved or deleted on the server (active or background tab). No change to the local data.

Changed

• The drop-down lists (Settings, the composer's From, the account form, the editor's table size) are Komorebi's own: contrast colours under a Windows contrast theme, and no fade when animation effects are off. No change to the local data.
• scripts/check-pins.ps1 fails with a readable message when the Slint compiler no longer declares the TextInput properties the composer's body editor reads.
• Servers whose IDLE never announces delivered mail (Dovecot on Postale.io) lose their IDLE connection for the session after five such messages found by the timer's passes while it was silent, saving a connection; the timer already finds the mail. Presets now carry a "save a copy to Sent" default (on for both). The sender notice's trust rule for Authentication-Results is unchanged, now covered by tests and described in the README. No change to the local data.
• Windows 11 look: the tray and system menus follow the dark theme, the text size follows the Windows slider at once, the navigation pill slides between folders, and the onboarding welcome rises in while the step card grows or shrinks between steps (at once, with no motion, when animation effects are off). No change to the local data.
• The composer now writes its view, preview and formatted body editor through the window holding the draft (groundwork for the composer in a window of its own; still the main window). A preview that finishes after another draft took the composer is no longer drawn over it. No change to the local data.

0.4.1 (2026-10-15)

Added

• Updates: the download shows real progress (a determinate bar and "3.2 MB of 8.7 MB") when the server announces the size; otherwise the bar stays indeterminate. Only the installer download is reported, not its checksum and signature files. New sentence {0} of {1}, translated to pt-PT.

Changed

• The release workflow (.github/workflows/release.yml) is manual-only: it builds the installer, zip and checksums as a workflow artifact and publishes nothing; pushing a tag starts nothing. README and CONTRIBUTING describe the manual release steps (release build, scripts/build-installer.ps1 into dist\, sign_update, gh release create).
• Tests: a new account's first sync never raises notifications, and mail after it notifies once.
• Local data: none; no schema change.

0.4.0 (2026-10-15)

Added

• Relicensed to GPL-3.0-or-later (LICENSE, NOTICE).

• Updates: Settings > About checks the project's GitHub releases (on a press, or once a day when automatic checks are on), says when a new version is available (also in a quiet bar), and downloads and installs it only when you press Download and install. The installer runs only if its SHA-256 and the Ed25519 signature over its version and hash verify against a public key compiled in (src/update.rs, src/app/updates.rs, examples/sign_update.rs). The installer is named komorebi-<version>-setup.exe.

• Inno Setup installer rebuilt: per-user or all-users install, Start menu and optional desktop shortcut, optional start with Windows, mail client registration (mailto), English and Portuguese setup (scripts/build-installer.ps1).

• Tabs and windows: the folder pane folds to the rail at any width (its toggle, Ctrl+Shift+E or Hide folders; remembered). Messages open in tabs of their own at full width (double-click, Shift+Enter, a middle-click in the background, "Open in new tab"), and each draft beyond the one in the reading pane gets a composer tab; a draft with something written moves to a tab when another message is selected. Tabs close (Ctrl+W, a middle-click), reorder, reopen (Ctrl+Shift+T) and come back at the next start ("Reopen tabs at start" in Settings > General). Ctrl+O or "Open in new window" shows a message in a read-only window of its own; replies from it open as composer tabs in the main window. Closing the main window closes every window. Local data: settings nav_collapsed, tabs (message and draft ids only), reopen_tabs and popout_size; no schema change.

• Formatted mail: the composer's body is Komorebi's own painted page (the reader's text engine over a hidden text field that keeps the caret, IME, the clipboard's text and screen readers), with a toolbar for ten email-safe fonts, twelve sizes, bold, italic, underline, strikethrough, ten named colours or Automatic, bulleted and numbered lists, indent, alignment, links, quotes, simple tables (up to 10 x 10, Tab between cells) and Clear formatting; one undo stack for text and formatting; pasted HTML keeps what the document can hold (Ctrl+Shift+V pastes plain text). A message with no formatting is still sent as plain text only; any message can be switched to plain text (asked first, Ctrl+Z undoes it), and a plain-text message is sent as text/plain only (the composer's old **bold** and - marks are no longer turned into HTML). Settings > General > Compose picks how new messages start and their font. A key in a 2,000-line message with 20 tables is drawn in about 11 ms.

• Named signatures (Settings > Signatures): formatted, with at most one PNG or JPEG logo of 200 KB sent as an embedded cid: part; each account picks one for new messages and one for replies and forwards (or None); the composer's Signature menu swaps it.

• Local data: schema v14 adds the signatures table, accounts.sig_new / sig_reply, drafts.body_rich and drafts.signature_id, and draft_attachments.cid. Each non-empty account signature becomes a named signature (named after the account's address) once, and both defaults; accounts.signature stays in the table but is no longer read (the onboarding flow's signature is saved as a named signature). A formatted draft keeps its plain text in drafts.body beside the document; a draft saved as plain text (every draft from before) opens as plain text. All of it is plaintext in the cache.

• A new first run and Add account flow (ui/onboarding.slint, docs/WINUI3.md "Onboarding"): a welcome with Komorebi's vector mark, what it is in one sentence and three short values, "Add your email account", and Need help?, Privacy, a Language box that switches at once and Settings; then three steps with the steps remaining shown above them: Your email (Continue checks the address and refuses one already added; a Purelymail or Postale.io address has its settings built in; any other domain is looked up only because Continue was pressed; offline goes straight to the server settings), Sign in (what was found, or the provider choice, or manual setup with "Encrypted (SSL/TLS)" and "Encrypted after connecting (STARTTLS)"; the check shows three stages and reassures after 3 and 10 seconds; a failure is one title, one sentence and one next step, with the seven steps under "Show details"), and Make it yours (the name from the address and an optional signature with a From preview, after the account is saved). "You're all set" shows the first download until "Open your inbox". Settings > Accounts > Add account opens the same steps in the content area. Text, colours, motion (off with Windows animation effects), high contrast and text size follow Windows; English and pt-PT.

• Sender-set importance: the Importance, X-Priority and X-MSMail-Priority headers are read in the same header FETCH as the rest of a list row (no extra round trip). A high-importance message shows a bold "!" in the text colour before its date ("High importance" to screen readers), apart from the user's amber Important flag; a low-importance one a small Down arrow in the secondary text colour ("Low importance"). The reader says "Sent with high importance" (after the same "!") or "Sent with low importance" under the To line.

• The composer's formatting bar has High importance and Low importance toggles; the message is sent with Importance and X-Priority headers (none for normal mail), and the choice is saved with the draft and its server copy. Changing it, or the From account, on an empty new message keeps nothing (Esc still drops it silently).

• Local data: the cache moves to schema v13, adding messages.priority and drafts.importance (both default to normal). Cached mail is cleared and refetched on first start after upgrading (a clean slate, so every message has its importance, flags and body from the server): messages, bodies and the address index are emptied and each folder's sync fingerprint reset, so the next sync is a full first one (inboxes do not notify for it). Accounts, folders and their settings, drafts, the outbox, signatures, settings, remote-image senders and invitation answers are kept. Nothing on the server changes. The step is one way: 0.3.0 leaves a v13 cache as it is and does not open it.

Changed

• Settings no longer has its own "Add an account" form (the account page, Edit, is unchanged), and adding an account no longer leaves an "Added … Downloading mail…" line on the status line: the flow's finish shows the download. Local data: none changed (no schema change; Make it yours writes the account's existing name and signature once, the signature also as a named signature set as both its defaults; Skip writes nothing).
• Read and unread rows look more different: an unread row has its sender, subject and date semibold in the text colour and an 8 px accent dot before the sender; a read row is regular in the secondary text colour (still 4.5:1 on every plate; the window text colour under high contrast). The old dot at the end of the subject line is gone, and the row's text sits 12 px further right so read and unread rows line up. Local data: none.
• Flags are now "important" messages: Mark as important / Remove importance (row menu, quick actions, reader and selection buttons) and an Important filter tab ("No important messages" when empty). Still the IMAP \Flagged flag, so other clients keep showing them as flagged or starred. The row marker is a 14 px amber flag (Fluent 2 marigold, apart from the red of drafts and failed sends) at the end of the subject line; hovering a row shows an outline one there, and clicking it marks or unmarks that row only. Ctrl+Shift+G does what Insert does, for keyboards without an Insert key. Local data: none (no schema change). On a draft or an Outbox row the flag is only shown: screen readers hear "Important" once, in the row's name, not again as a disabled button.

0.3.0 (2026-10-13)

The rewrite: a small Slint app in place of an earlier prototype. This section lists everything since the start of the rewrite, including what the 0.2.0 pre-release (2026-10-07) already had. It is still a pre-release: the binary is not code-signed, and self-hosted servers have been tested only against local fakes (see TODO.md for the open items).

Added

• Folder tree in the folder pane: subfolders sit under their parent (including under Inbox, Sent or Archive), each parent folder has an expander, and folded accounts and folders stay folded after a restart. A folded folder shows the unread mail inside it; Left and Right fold, open and move through the tree as in Windows. The pane is 16 px wider (264 px). Local data: one new setting, nav_folded, in the cache's existing settings table (no schema change).
• Folder pane accounts read as groups: space above each account, a round initial in the account's colour, the account's name (or its address) in bold, a leading chevron, and a tooltip with the name and address. Unread counts are neutral instead of accent-coloured and stop at 999+; the server's Drafts folder shows how many drafts it holds; long folder names show in full as a tooltip. Local data: none.
• Narrow windows: the window goes down to 500 px wide (was 720), so Snap Layouts' halves and thirds fit common screens. Below 720 px one pane shows at a time: the list, or the open message, composer or Outbox entry with a back arrow ("Back to list (Esc)"); the status line and the Undo offer then float at the foot of the reader; while the list shows there, the arrow keys only move through it and Enter opens (the back button alone takes the focus when the list hides). Below 1040 px the list stretches over the reader's place while nothing is open. In English, dates with a year (the list's older rows, the reader's date) follow Windows' short-date format, read once at start, with ISO 8601 as the fallback; quote headers in sent replies keep ISO, so what is sent does not depend on the PC. Local data: none.
• Onboarding tips, help and shortcuts: short teaching tips, one at a time and never in the way (no smoke, no focus taken, Esc is Got it): Search and Help on a wide window, and Folders first when the folder pane is folded into the narrow rail; "1 of 2", Got it and Skip tips. Each is shown once, in either layout. After an update, a "Komorebi was updated to …" bar with What's new (the changelog, through the link prompt), never together with a tip. Settings › About gains What's new, Show tips again, Keyboard shortcuts, Get help, Report a problem (the issues page; no data is attached) and Privacy statement. F1 or Ctrl+/ opens a Keyboard shortcuts dialog with every key of the README's table (Up / Down, PageUp / PageDown, Home and End scroll it; F6 stays inside it, as in every dialog). A tip hides while the Move list is open. Local data: two new settings, tips_seen and whats_new_version, in the existing settings table (no schema change); the version is saved silently when the first account is added.
• Settings, accounts and trust surfaces: each account is a card that opens its page ("Accounts › name"): "Sync this account" with what Off does, Name, Email (with why it can't change), Password, Signature, Folders (each role's header above its box, so no label is cut in Portuguese), Server settings folded in an Expander (it opens on a failed check or a saved certificate; Find settings only for a server that isn't a preset), Download again and Remove; Save, Test connection and Cancel stay pinned under the page; Move up / down sit in its "…" menu. A changed certificate says so in one short sentence with Review certificate (it opens the page and reads the new certificate into the prompt); the prompt shows fingerprints as 4 lines of 8 bytes, the old one beside the new with a caution line, a Copy button and "How do I check this?". A server out of reach offers Try now and puts a caution badge on the account's row and rail tile until a sync goes through. The sender notice reads "This message may not be from who it says" with the reason under it and Report junk, Delete and Why?. "Always load from this sender" is followed by a bar with Undo; later messages say "Images load from this sender · Change". Privacy holds remote images, the diagnostics log with Open logs folder, and Reset (Remove all data); About has Help and About groups, the data path cut from its start with the whole path in its tooltip, and a Made with Slint card. A language change says that some text changes after a restart. Local data: none changed (no new settings, no schema change).
• Composer, drafts and Outbox: a Close button in the composer's header, and every way out of it (Close, Esc, a click on a message or an Outbox row) saves the draft on this PC and copies it to the server's Drafts at once, saying "Draft saved"; the header shows "Draft saved 14:05", refreshed by each save. Send is always on: pressed with no recipient or a wrong address, the field says why and takes the focus. The undo-send offer names the message ("Sending "Plans" in 5 s"). The Outbox says why a send failed in a plain sentence for the kind of refusal (for example "ana@example.org doesn't exist."), with the server's reply under Details and the first lines of the text; Edit or Retry is the main button depending on whether sending again can help; a failed send's status line stays until closed. One discard sentence everywhere: deleted here and from the server's Drafts, with the attachments. Preview (a toggle on the formatting row) shows the message as sent; the plain-text part and the Drafts and Outbox previews no longer show ** and _ marks; Quote has Ctrl+Shift+Q; a one-time caption explains the marks. Replies and forwards fold the quote behind "Show quoted text" and write its header line in the language shown; an empty body says "Write your message", and text typed over the whole body keeps a blank line before the quote; a Drafts row previews the text above the quote. Dragging files over the window shows "Drop to attach" (or "...to a new message", which opens one). In a narrow window Discard and Send keep their labels. A message with a reply in progress says so in the reader, with Resume. Local data: one new setting, format_hint_seen, in the existing settings table (no schema change). Behaviour: a click on a message or an Outbox row while writing now also copies the draft to the server, as Esc did; nothing else changes in what is sent, saved or deleted.
• First run and account setup: the welcome has the whole window (no folder pane, rail or search until there is an account) with a line on what stays private and the links "Need help?", "Privacy" and "Settings". The add form asks Email, Password (saved in Windows Credential Manager, said under it), Provider as three choices with a line each (picked from the address for purelymail.com and postale.io) and an optional name; the signature and the Sent copy moved to the account's Edit page. Add account and Test connection stay enabled and say what is missing under each field. Other server's fields are in a "Server settings" expander, and with no server typed Add or Test looks them up first (only on that press). Cancel, Back and Esc stop a running check; after 3 s the wait says what to check. A failure keeps the steps inside its message, scrolls it into view (its top under the page header, never cut by it) and offers Set username (a username now works with Purelymail and Postale.io too) or Review certificate; a rejected password marks the Password box, and the sentence fits the provider. A new account opens on its Inbox with its download's progress in the empty list ("Newest messages arrive first"), the status line stays until the first pass ends, and an empty folder says "This folder is empty" once synced. The window no longer opens at its minimum height on a first run. Local data: none (no schema or setting change; a username typed for a preset is stored in the existing columns).
• Easier navigation: Settings has a back arrow ("Back to mail", Esc), and the gear and Ctrl+, open and close it. With one account there is no All inboxes: Komorebi opens on its Inbox, and the view you left is opened again at the next start. Long folder trees start folded (parent folders without unread mail of their own; with several accounts, every account after the first), so all accounts show at once. The narrow window's rail is 64 px with a name under every icon (New mail, All inboxes, Drafts, the accounts, Folders, Settings) and unread counts as badges; the folder pane opened over it dims the rest of the window. Drafts is always in the folder pane: New mail always starts a blank message, the start-up "saved drafts / Resume draft" line is gone, and drafts take Enter, Delete (asking first) and a right-click menu (Open, Discard). The server's Drafts folder no longer repeats the drafts saved here, shows no filters or bold, and its drafts open with Forward as new draft instead of Reply. The list shows a folder's account under its name. The folder pane menu is Mark all as read and Collapse all (on an account also Refresh and Account settings; "Expand all" and the per-folder Expand / Collapse entries are gone: the chevrons and Left/Right do that); a rail tile's menu goes to its Inbox, Sent or Archive. Local data: two new settings in the existing settings table, last_view and nav_folds_init (no schema change); the first start after the update folds each account's parent folders without unread mail once.
• A Windows 11 title bar: Komorebi draws its own 48 px title bar as Windows 11 Mail and the new Outlook do, with the icon and name, the search box in the middle and the minimize, maximize and close buttons (Snap Layouts, drag, double-click and the system menu work as before; it dims while another window is in front). On Windows 10 and under high contrast the Windows title bar stays, with the same search strip under it, and turning high contrast on or off switches it while the app runs. The search moved there: Ctrl+E, F3 or Ctrl+F reach it (from Settings too), it says what it searches ("Search Newsletters"), its scope is "This folder" or "All folders", the query stays when you open another folder, the list says "Search results" with how many were found where, results from all folders show their account and folder, and Show in folder opens one in its folder (the list's Mark all as read is off while results show: it would cover the whole folder). Archive is now Backspace (on a message or the reader), as in the new Outlook. The window keeps its size across restarts. Local data: none.
• Easier triage: rows say unread with bold text and a small accent dot at the end of the subject line, and in All inboxes name their account in a text tag (no more coloured dots). Pointing at a row (or reaching it with the keyboard) shows Archive, Delete, Flag and Mark as read / unread buttons that act on that message only: they never open it or mark it read. "Select messages" in the list's "..." menu shows check boxes; the selection panel has Select all, Clear selection and says why Move is off. The reader's bar keeps its most used labels longest (Reply, Archive and Delete also in Portuguese at 1280 x 800); Mark as read / unread and Flag / Remove flag are plain buttons that say what they do, and every button and menu item shows its key. New keys: Ctrl+Q marks read and Ctrl+U unread (as in Outlook; Show original keeps its menu item), Ctrl+Shift+F forwards, Ctrl+Shift+V opens Move and Ctrl+Shift+I goes to the Inbox. Move has a filter box, your last three folders first, and subfolders indented (Drafts folders left out). Undo shows at the bottom of the list, never moves the rows or gets replaced by another message, lasts at least 10 seconds and waits while you point at it. Deleting from Trash (which deletes on the server) or Junk asks first. A message not downloaded while offline says so with Retry, and one opened from the Unread filter stays in the list until you change the filter or the folder. Local data: one new setting, move_recent (the last folders moved to), in the existing settings table (no schema change).
• Folder pane menus: right-click a folder, All inboxes or an account (or use its "..." button, Shift+F10 or the Menu key) to mark all as read there, refresh one account, expand or collapse all its folders, or open its settings. The pane shows a thin scroll bar and edges while folders are scrolled away. In a narrow window the rail shows one round initial per account (it opens that account's Inbox) instead of every folder, and the pane opened over the content scrolls to the open folder. Local data: none.
• Languages: English and European Portuguese (pt-PT; Brazilian Portuguese is not included, and Windows in pt-BR shows English). The language follows the Windows display language, and Settings → General → Language (System, English, Português (Portugal)) overrides it and switches at once without a restart. Every screen, dialog, error sentence, status line and window title is translated; dates, numbers, sizes and plurals follow the language (12 out., 1,2 MB, "0 mensagens"). Text inside the mail, server replies and the technical detail after an error sentence are shown as received. The catalog is translations/pt-PT/LC_MESSAGES/komorebi.po, bundled by Slint at build time, and a test keeps it complete. Local data: one new setting, language, in the cache's existing settings table (no schema change); nothing is sent anywhere.
• Find settings: a button in the manual account form that looks up your email domain (DNS SRV records, then the provider's autoconfig file over HTTPS) and fills the server fields you have not typed in. Only when pressed; only the domain is sent (never the address or password); nothing goes to a third party; a server on another domain is shown but not filled in. Local data: none changed.
• Servers that do less: IDLE, CONDSTORE, UIDPLUS, MOVE and special-use folders are optional; folders are recognised by name under INBOX. or at the top with any delimiter, odd and invalid modified UTF-7 names are kept as the server wrote them, and Settings → Accounts → Edit → Folders picks the folder for Sent, Drafts, Trash, Archive and Junk. Without a Sent folder mail still goes (said once); without a Trash folder nothing is deleted. A bare EXPUNGE is never sent.
• An account that needs you (rejected password, changed or untrusted certificate, no STARTTLS) makes one attempt, then waits: the status line offers Retry or Update password. Local data: none changed (the folder roles you pick are stored in the cache's existing role_override column).
• Accounts: Purelymail and Postale.io presets and manual IMAP/SMTP settings (SSL/TLS or STARTTLS), checked by signing in before they are saved; editing in place, signatures, an Enabled switch, ordering and a colour dot. Passwords live only in Windows Credential Manager.
• Sync: header-first, newest first; one-command steady-state passes with LIST-STATUS and CONDSTORE; IDLE on the inbox; inbox body prefetch; resume after sleep; one retry of a failed action on reconnect.
• Reading: a built-in HTML renderer (no web engine, no scripts, remote images only with consent), scaling of fixed-width mail, dimming in the dark theme, colour emoji, text selection, links behind a confirm, attachments (Save, Open with a risky-type block, Mark of the Web), the sender notice, encrypted-mail state, List-Unsubscribe, meeting invites (card, RSVP to the organizer, Save .ics), Save as .eml, Show original, Forward as attachment.
• Writing: drafts saved locally and to the server Drafts folder, an Outbox with undo send, send guards, Markdown-lite formatting sent as an HTML alternative, HTML quoted replies, recipient suggestions, attachments by dialog, drop or paste.
• Organizing: multi-select, a row menu, Junk and Not junk, undo for archive, delete, move and junk, Unread and Flagged filters, Mark all read, accent-folded search in one folder or all.
• Settings in four sections (Accounts, General, Privacy, About), theme choice, check interval, mark-as-read delay, an opt-in taskbar flash, an opt-in diagnostics log; the unread count in the window title; window place restored; keyboard access throughout (focus ring, F6 panes, shortcuts).
• Windows appearance: the accent colour and the shades Windows derives from it (New mail, selection, accent text), light or dark apps under the System theme, contrast themes (light or dark as the theme's window colour; accent, selection and focus in its colours), the text size and animation effects, read at start and whenever Windows says one changed (read only, never stored); a title bar coloured as the window, or Windows' own with accent title bars or a contrast theme. Colours, strokes and text follow WinUI 3's theme resources (contrast themes included; every control keeps a 1 px edge, links in the theme's hyperlink colour); no drop shadows. No local data change.
• UI polish round (WinUI 3 / Fluent 2): every field of the account form is a WinUI text box (the signature too) or a drop-down with a Button's edge, with contrast-theme borders. No local data change.
• WinUI-style controls: standard, accent, subtle, toggle and link buttons that get lighter when hovered; text fields with a strong bottom edge (accent while focused) and a clear or show-password button; check boxes, info bars, dialogs with a button bar, a delayed progress ring, tabs with a selection pill (one Tab stop, arrows select) and a flyout for Move; tooltips on icon buttons and the narrow rail; the double focus ring shows only after a key moves the focus. Status colours mark only status (a flagged row's red flag, a failed send), never a command: the selection panel's Flag button is no longer red, and its buttons go two to a row so they fit a narrow window at a large text size.
• Windows 11 shell: the list and the reader on one card with a rounded top-left corner beside the folder pane, as in Settings and File Explorer; WinUI navigation items (hover, pressed and selected states, the accent pill, folding account lines with a chevron); Settings at the foot of the folder pane; in a narrow window a 48 px rail whose toggle opens the folder pane over the content (Esc or a click outside closes it).
• Message list as a Windows 11 list: rounded hover and selection plates with the accent pill, no lines between rows, unread mail in semibold with an accent date; All / Unread / Flagged tabs; a search box with a search button and an "All folders" toggle beside it while searching; empty lists explain themselves in the middle with one action; a thin scroll thumb over the rows that widens under the pointer; a small ring while a sync lasts more than a second.
• Reader as a Windows 11 command bar and info bars: labels by priority as the reader narrows (the same in both themes and for every message), Unread and Flag as toggles, a Move chevron, and View as plain text and Show original colours (checked while on) in the reader's More menu; the sender check, encryption and remote-image notices as info bars (the image bar names the sender's address and can be closed); attachments as a wrapping grid with type icons; an outlined invitation card with answer buttons; the date moves under the sender in a narrow reader. No local data change.
• Composer on WinUI controls: the labels line up in a column that grows with the text size; Cc and Bcc are links at the end of the To field; why Send is off is its tooltip and description instead of a line that moved the fields; recipient suggestions drop down over the fields below as a ComboBox list; a quote icon and a divider in the formatting row; Insert is the link bar's accent button; the size counter gets a caution or error icon; the Discard prompt has no default button and Cancel has the focus. The undo offer counts down ("Sending in 9 s") for the whole undo window (before, it vanished after 5 seconds), and a delivered message says "Sent". The Outbox entry shows its commands on top (Edit, Retry, Discard) and where its send is as an info bar; failed rows get a red mark. No local data change.
• Settings as a page in the window, as in Windows 11's own apps, instead of a dialog: the Settings item is selected, the folders stay usable (choosing one or New mail leaves Settings), tabs for the sections and a column of setting cards; switches for settings that apply at once (Enabled, taskbar flash, diagnostics log); the account form with headers above its fields and server and port side by side, and while it signs in a ring with "Signing in …" after a second; a download bar with "Downloading 1,234 of 5,000 …" in the account's card; About as cards with Copy and Open for the data folder. Every prompt has the Windows dialog's button bar on one smoke layer; prompts that remove, discard or send again have no default button and start on Cancel, the others have the accent answer that Enter gives; Show original gets the button bar too. Closing Settings or a prompt gives the focus back to what opened it. No local data change.
• States and first run: the status line is an info bar at the top of the message list (and of Settings) instead of a toast over the rows, with a severity: a server that can't be reached is a caution that stays until the account syncs again (before, it went after 12 seconds), errors are critical, the rest informational; Undo offers keep their time. Waits show nothing for the first second ("Downloading message …" and "Fetching message …" too), and every ellipsis has a no-break space before it. Drafts and the Outbox say "No drafts" and "Outbox is empty. Messages wait here while they are sent." when empty, the reader under Drafts "Select a draft to keep writing"; opening Drafts answers the "Resume draft" offer. With no account, the welcome says what is needed and how long it takes, its Add account opens the form directly, and New mail is hidden. No local data change.
• Reliability: a crash note (crash.log, no mail content), a damaged cache renamed aside, a clear message for a cache from a newer version, one app per cache.
• Release foundations: LICENSE, NOTICE, this changelog, the app icon (also in the title bar and taskbar), version information and a manifest in komorebi.exe (UTF-8 code page, Windows 10/11, asInvoker), a title bar that follows the app's theme, and CI gates: clippy with warnings as errors, a release build with a 15.0 MB size check, an offline boot snapshot on a seeded cache, cargo-deny for licenses and advisories, and scripts/check-pins.ps1.
• Installer and data removal: a per-user Inno Setup installer (no administrator rights, %LOCALAPPDATA%\Programs\Komorebi, Start menu shortcut, an uninstaller that asks, default No, whether to delete the mail cache folder), a portable zip, a release workflow (tag check, tests, boot snapshot, optional signing, SHA256SUMS, a draft release with the .pdb beside it), and Settings > Privacy > Remove all data.
• Speed: the HTML reader opens image-heavy mail up to about 40 percent faster (the tile raster is built at full optimization, 50 KB smaller) and list, filter and search queries run 10 to 25 percent faster, for 0.3 MB more in the exe (17.07 MB). No local data change.
• Speed: search matches the six columns in one pass without copying them, about 38 percent faster at 20000 messages (14.5 to 9.0 ms), for 1.5 KB more in the exe. No local data change.
• Speed: the cache opens and the title bar icon loads while the window is created, and a first launch writes its default folds after the first frame; the cache is ready about 2 ms sooner (9.8 to 7.9 ms) and the first frame about 1.5 ms sooner, for 7 KB more in the exe. No local data change.
• Speed: background body downloads are written one transaction per fetched batch of up to 25 instead of one per message, so 300 bodies store in 5.9 ms instead of 25.9 ms (on a worker thread; a failed batch stores nothing and is retried), for 3 KB more in the exe. No local data change.

Local data

The cache (%LOCALAPPDATA%\komorebi\cache.sqlite3) stays plaintext. Each schema version migrates the one before it in place; see PRIVACY.md for everything kept on disk.

• v2: message bodies in their own table.
• v3: each folder's sync fingerprint (its last STATUS).
• v4: the senders whose remote images load without asking.
• v5: saved drafts and their attachment copies (cache.drafts beside the cache).
• v6: the Outbox: each message as it will be sent, attachments encoded in it, until it is sent, discarded or its account removed.
• v7: account signatures and a settings table.
• v8: an address index (addresses and display names of senders and of the recipients of sent mail), deleted with the account.
• v9: each draft's change count and where its server copy is; drafts are also kept in the account's own Drafts folder on the server.
• v10: answers to meeting invitations (UID, occurrence, version, answer, time; nothing else from the invite).
• v11: each account's Enabled flag; settings now include the window's place.
• v12: each account's IMAP and SMTP sign-in names (empty: the email address), room for a pinned certificate per server, and a folder role the user chose. An older Komorebi refuses a v12 cache.
• Beside the cache: crash.log and crash.seen, the opt-in logs folder (metadata only), cache.open (opened attachments, deleted at the next start) and, after damage, cache.damaged-<date>.sqlite3.
• Credential Manager: one generic credential per account, account:<n>:password.komorebi.
• The release-foundations work changes no local data.
• Remove all data deletes every account's credential, then the cache and everything beside it listed above, then the komorebi folder if it is empty. The uninstaller deletes %LOCALAPPDATA%\komorebi only if you answer Yes, and never touches Credential Manager. No schema change.