Build a delegated file reference for a task param. The host resolves it against YOUR OWN grants and mints an attenuated, task-scoped chroot for the callee — you can only delegate a path you already hold (attenuation only, never escalation).
file: capFile({ mountId: 'space:abc', relPath: 'photos/cat.jpg' }, { mode: 'rw' })
Build a delegated file reference for a task param. The host resolves it against YOUR OWN grants and mints an attenuated, task-scoped chroot for the callee — you can only delegate a path you already hold (attenuation only, never escalation).
file: capFile({ mountId: 'space:abc', relPath: 'photos/cat.jpg' }, { mode: 'rw' })