sealkeep 0.6.0 → 0.6.1

package/CHANGELOG.md

@@ -3,6 +3,14 @@
 Notable changes, by published version. Sealkeep is pre-1.0: minor versions
 may change behavior, and say so here when they do.
 
+## 0.6.1 — 2026-08-19
+
+- Reading an offloaded archive now checks for free space first. An index build
+  reads each archive in full, and on a machine already short of space that
+  filled the disk and died mid-build — the failure this product exists to
+  prevent. It refuses in words that name the archive and the shortfall, keeps a
+  512 MB reserve, and lets the build carry on with the rest.
+
 ## 0.6.0 — 2026-08-19
 
 **A second machine no longer wipes your search index.** The content index is

package/dist/src/errors.d.ts

@@ -3,7 +3,7 @@
  * between releases; these codes are a contract for the CLI, local API, and MCP.
  * Details are operational only: never place plaintext, phrases, or keys here.
  */
-export type VaultlineErrorCode = "invalid_argument" | "vault_not_initialized" | "vault_already_initialized" | "config_unsupported_version" | "recovery_phrase_missing" | "recovery_phrase_mismatch" | "archive_not_found" | "source_unreadable" | "destination_exists" | "destination_unwritable" | "path_not_permitted" | "native_restore_unavailable" | "ciphertext_integrity_failed" | "plaintext_integrity_failed" | "hook_payload_invalid" | "queue_job_not_found" | "queue_lease_invalid" | "queue_lease_expired" | "queue_job_exhausted" | "storage_not_configured" | "provider_unsupported" | "signer_not_configured" | "lease_expired" | "unauthorized" | "forbidden" | "internal";
+export type VaultlineErrorCode = "invalid_argument" | "vault_not_initialized" | "vault_already_initialized" | "config_unsupported_version" | "recovery_phrase_missing" | "recovery_phrase_mismatch" | "archive_not_found" | "source_unreadable" | "destination_exists" | "destination_unwritable" | "insufficient_disk_space" | "path_not_permitted" | "native_restore_unavailable" | "ciphertext_integrity_failed" | "plaintext_integrity_failed" | "hook_payload_invalid" | "queue_job_not_found" | "queue_lease_invalid" | "queue_lease_expired" | "queue_job_exhausted" | "storage_not_configured" | "provider_unsupported" | "signer_not_configured" | "lease_expired" | "unauthorized" | "forbidden" | "internal";
 export declare class VaultlineError extends Error {
     readonly code: VaultlineErrorCode;
     readonly details: Record<string, unknown>;

package/dist/src/offload.js

@@ -320,6 +320,19 @@ export async function checkRemoteCopyMany(dataDir, ids, client) {
 export async function materialiseArchive(dataDir, record, client) {
     if (!isV2(record) || !record.offloaded)
         return { path: record.objectPath, release: async () => { } };
+    // Reading an offloaded archive means writing it back to disk in full, and
+    // this runs in a loop during an index build. On a machine that offloaded
+    // BECAUSE it was short of space, that filled the disk and died on ENOSPC
+    // mid-build — the exact failure this product exists to prevent. Ask first,
+    // and refuse in words that name the archive and the shortfall.
+    const { freeBytes } = await import("./disk.js");
+    const free = await freeBytes(tmpdir());
+    const needed = record.cipher.storedBytes ?? record.remote?.bytes ?? 0;
+    const RESERVE = 512 * 1024 * 1024;
+    if (free !== undefined && needed > 0 && free < needed + RESERVE) {
+        const gb = (n) => `${(n / 1024 ** 3).toFixed(1)} GB`;
+        fail("insufficient_disk_space", `Reading archive ${record.id.slice(0, 8)} needs about ${gb(needed)} of temporary space and this machine has ${gb(free)} free. Nothing was written. Free some space, or reclaim what is already archived, and try again.`, { archiveId: record.id, free, needed });
+    }
     const ciphertext = await fetchCiphertext(dataDir, record, client);
     if (sha256(ciphertext) !== record.cipher.ciphertextSha256) {
         fail("ciphertext_integrity_failed", `The copy of archive ${record.id} in ${record.offloaded.bucket} is not the archive that was stored there`, { archiveId: record.id });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sealkeep",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "type": "module",
   "description": "Sealkeep by SPALA AI \u2014 your AI coding-agent history, sealed, searchable, and shared across your machines.",
   "license": "SEE LICENSE IN LICENSE",