Struct CapabilityGrant 

pub struct CapabilityGrant {
    pub pool_id: B256,
    pub signer: Address,
    pub spending_cap: u64,
    pub expiry: u64,
    pub owner_signature: Vec<u8>,
}

A pool owner’s SignedCapability in its transferable, self-contained form.

Postcard-encoded and base64url-wrapped by Self::to_token. The owner signature is held as raw bytes (65-byte r‖s‖v, exactly Signature::as_bytes) rather than an alloy Signature so the wire shape is a plain byte string that postcard round-trips without a human-readable branch.

Fields

pool_id: B256

The on-chain pool the grant draws from.

signer: Address

The delegate voucher-signing key the owner authorizes.

spending_cap: u64

Cumulative spend ceiling (token base units) for signer under this grant. A u64, matching Capability::spending_cap and the PaymentPool.spendingCap on-chain width.

expiry: u64

Unix-seconds expiry after which vouchers under this grant stop being redeemable.

owner_signature: Vec<u8>

The owner’s raw EIP-712 signature over the capability (65 bytes, r‖s‖v).

Implementations

impl CapabilityGrant

pub fn from_signed_capability(signed: &SignedCapability) -> Self

Build a grant from an already-signed capability, copying its owner signature into the token’s raw-bytes field.

pub fn to_token(&self) -> String

Encode the grant as a dcap1: token: the prefix followed by the base64url (no padding) of its postcard encoding.

Panics

Never — postcard encoding of a fixed-shape struct into a growable Vec does not fail, so the Result is unwrapped to an empty body on the unreachable error rather than propagated.

pub fn from_token(s: &str) -> Result<Self, GrantError>

Parse and validate a dcap1: token back into a grant.

Errors

• GrantError::BadPrefix — the dcap1: prefix is absent.
• GrantError::BadBase64 — the body is not valid base64url.
• GrantError::BadPayload — the decoded bytes are not a postcard CapabilityGrant.

pub fn to_signed_capability(&self) -> Result<SignedCapability, GrantError>

Reconstruct the SignedCapability this grant carries, ready for PoolContext::with_capability.

Errors

GrantError::BadSignature when owner_signature is not a well-formed 65-byte ECDSA signature.

pub fn owner(&self, domain: &Eip712Domain) -> Result<Address, GrantOwnerError>

Recover the pool owner that signed this grant under domain, for display and validation.

Errors

• GrantError::BadSignature — the embedded signature is malformed.
• CapabilityError::InvalidSignature via GrantOwnerError — the signature is non-canonical (high-s) or unrecoverable.

Trait Implementations

impl Clone for CapabilityGrant

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapabilityGrant

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CapabilityGrant

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Eq for CapabilityGrant

impl PartialEq for CapabilityGrant

fn eq(&self, other: &Self) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl Serialize for CapabilityGrant

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for CapabilityGrant