Struct Cap 

pub struct Cap(/* private fields */);

A capability this service holds, by the slot the kernel put it in.

Thin on purpose: the value is an index into this task’s capability table, and the kernel is what gives it meaning. Wrapping it in a type stops it being confused with the resource ids, endpoint ids and file descriptors it is NOT.

Implementations

impl Cap

pub fn handle(self) -> CapHandle

The raw slot, for the rare call that still needs the SDK.

Present so that reaching the lower layer is a visible, deliberate step rather than a reason to abandon this module. If you find yourself calling this often, the missing thing belongs here.

Trait Implementations

impl Clone for Cap

fn clone(&self) -> Cap

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Cap

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl From<CapHandle> for Cap

Adopt a handle an SDK call outside this library returned - a spawn that hands back an endpoint, a minted resource, a capability looked up by contract name - so the rest of its life is spent here.

This grants nothing and forges nothing. A handle is a slot number anyone can type; what makes a capability unforgeable is the kernel, which checks the slot, its generation and its rights on every use (CLAUDE.md 7.3). Wrapping a number that is not a capability yields a Cap every call refuses.

fn from(h: CapHandle) -> Self

Converts to this type from the input type.

impl PartialEq for Cap

fn eq(&self, other: &Cap) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for Cap

impl Eq for Cap

impl StructuralPartialEq for Cap