Build a delegated DIRECTORY reference for a task param (the directory analogue of
capFile). The host resolves it against YOUR OWN grants and mints an
attenuated, task-scoped chroot of that directory for the callee — you can only
delegate a directory you already hold (attenuation only, never escalation):
Build a delegated DIRECTORY reference for a task param (the directory analogue of capFile). The host resolves it against YOUR OWN grants and mints an attenuated, task-scoped chroot of that directory for the callee — you can only delegate a directory you already hold (attenuation only, never escalation):
roots: [capDir({ mountId: 'space:abc', relPath: 'boards' }, { mode: 'rw' })]