Build a delegated file reference for a task param. The host resolves it against YOUR OWN grants and mints an attenuated, task-scoped chroot for the callee — you can only delegate a path you already hold (attenuation only, never escalation).

file: capFile({ mountId: 'space:abc', relPath: 'photos/cat.jpg' }, { mode: 'rw' })

  • Parameters

    • ref: { mountId: string; relPath: string }
    • opts: { mode: "ro" | "rw" }

    Returns FileCap