unicity-aos/capsule-fs

This system is a sandboxed filesystem service built on the Astrid platform, designed to provide secure file operations within a Current Working Directory boundary. It exposes typed APIs for reading, writing, and searching files, ensuring that all modifications are staged in an overlay rather than directly altering the underlying workspace. The implementation leverages WebAssembly Component Model standards and inter-process communication schemas to enforce strict isolation and reproducible builds.

The astrid-capsule-fs package has been updated to version 0.2.0, introducing several key changes for users and developers. The filesystem capabilities now use the \cwd://\ and \home://\ schemes instead of the previous \workspace://\ and \global://\ paths, aligning with the new per-domain WIT model. Inter-process communication has migrated to a Cargo-like publish/subscribe schema, explicitly defining handlers for tools like \read\_file\, \write\_file\, and \grep\_search\ via the \@unicity-astrid/wit\ interface. Additionally, the project now includes comprehensive documentation (README), dual licensing (MIT/Apache-2.0), and enforces reproducible builds for the \wasm32-unknown-unknown\ target.

(repo-wide) · high confidence

The \FsTools\ capsule has been refactored to enforce a strict sandbox boundary: all file operations are now confined to the Current Working Directory (CWD) via an Astrid VFS overlay, preventing access to existing workspace files outside the session. The underlying SDK has been upgraded to version 0.6.0, replacing the previous JSON-based parsing for \fs::read\_dir\ and \fs::metadata\ with typed, WIT-driven return values for more reliable directory listing and file metadata retrieval. Additionally, mutable tools like \write\_file\, \replace\_in\_file\, \create\_directory\, \delete\_file\, and \move\_file\ are now explicitly marked, and documentation has been added to clarify that write operations are staged in an overlay until committed.

src · high confidence

The astrid-capsule-fs package has been updated to version 0.2.0, primarily driven by a significant upgrade of the astrid-sdk dependency from a local path reference (0.1.1) to the published crates.io version 0.7.1. This change aligns the capsule with the latest SDK capabilities, including WIT-driven types and the wasm Component Model, as indicated by the SDK's dependency tree (wit-bindgen 0.54.0, wit-parser 0.227.1). Additionally, the release profile has been optimized for size with LTO, stripping, and panic abortion enabled, and the Cargo.lock file is now committed to ensure reproducible builds.

(dependencies) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 60 → 61 (+0.2)
• Rubric changed (rubric-2026.09.9 → rubric-2026.09.17) — scores are not directly comparable.

• Code Health 100 → 100 (+0.0)
• Architecture 69 → 69 (+0.0)
• Maturity 48 → 48 (+0.0)
• Readiness 65 → 69 (+4.0)
• Security 73 → 76 (+2.2)

• Documentation: no architecture or design documentation (README.md)

• Documentation: no project overview (README.md)
• End-of-life runtime: Rust 1.94
• Outdated: astrid-sdk
• Outdated: serde
• Outdated: serde_json

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

unicity-aos/capsule-fs was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.