8.4K ·GitHub
What is this?
capsule-fs is a filesystem toolkit for AI agents inside Unicity AOS (also called Astrid OS): it gives agents readfile, writefile, replaceinfile, listdirectory, grepsearch, createdirectory, deletefile and movefile tools, all mediated by the OS kernel's VFS airlock.
capsule-fs is a filesystem toolkit for AI agents inside Unicity AOS (also called Astrid OS): it gives agents readfile, writefile, replaceinfile, listdirectory, grepsearch, createdirectory, deletefile and movefile tools, all mediated by the OS kernel's VFS airlock.Is this a standalone app, or does it plug into something bigger?It's a 'capsule' - a module that plugs into the Unicity AOS kernel, acting like the coreutils package for that agent operating system rather than running on its own.
It's a 'capsule' - a module that plugs into the Unicity AOS kernel, acting like the coreutils package for that agent operating system rather than running on its own.Do these tools work without the rest of Unicity AOS?No - every operation goes through the kernel's VFS airlock, which enforces path boundaries, copy-on-write isolation, and capability checks before touching the real filesystem.
No - every operation goes through the kernel's VFS airlock, which enforces path boundaries, copy-on-write isolation, and capability checks before touching the real filesystem.Are there limits on deleting or moving files?Yes: deletefile only works on files created in the current session (no whiteout support yet), and movefile enforces a 10MB size cap with existence checks and rollback on failure.
Yes: deletefile only works on files created in the current session (no whiteout support yet), and movefile enforces a 10MB size cap with existence checks and rollback on failure.What does replaceinfile do if there's more than one match?It rejects the edit entirely - replaceinfile only succeeds on an exact string match that occurs exactly once in the file, avoiding accidental multi-location rewrites.
It rejects the edit entirely - replaceinfile only succeeds on an exact string match that occurs exactly once in the file, avoiding accidental multi-location rewrites.What is grepsearch capable of?It's a recursive content search tool with caps on search depth, number of files scanned, and number of matches returned, so agents can't trigger runaway searches.
It's a recursive content search tool with caps on search depth, number of files scanned, and number of matches returned, so agents can't trigger runaway searches.What exactly does the VFS airlock protect against?It's the kernel's gatekeeper for filesystem access - it checks path boundaries, isolates writes via copy-on-write, and verifies capabilities before any tool reaches the host filesystem.
It's the kernel's gatekeeper for filesystem access - it checks path boundaries, isolates writes via copy-on-write, and verifies capabilities before any tool reaches the host filesystem.Which topics is it in?file-management, agent-sandbox, sandboxing, filesystem, agent-tools, kernel, sandbox, sdk, agents, ai-agent, rust, agent
file-management, agent-sandbox, sandboxing, filesystem, agent-tools, kernel, sandbox, sdk, agents, ai-agent, rust, agent