Struct CapTokenRecord 

pub struct CapTokenRecord {
    pub token: CapToken,
    pub uses_left: Option<u32>,
    pub revoked: bool,
    pub task_id: Option<TaskId>,
}

Server-side counter/state holder paired 1:1 with a minted CapToken (keyed by nonce in EngineState.tokens). Tracks remaining uses, revocation, and — for Worker tokens — the task the token is bound to.

Fields

token: CapToken

The token this record backs.

uses_left: Option<u32>

Remaining number of verb-consuming calls. None means unlimited (session-style tokens); Some(0) makes consume fail.

revoked: bool

When true, consume always fails regardless of uses_left.

task_id: Option<TaskId>

The task this Worker token is bound to (set when minted via dispatch_attempt). Used on two axes:

1. Depth tracking. When a Worker calls start_task to spawn a child, the child receives this task’s spawn_depth + 1.

2. Ownership gate. When a Worker calls a state-touch verb (fetch_prompt / post_result / read_task_state / cancel_task / poll_task), the argument’s task_id must match this value. start_task and dispatch_attempt are exempt — recursive swarming must stay open, and depth is capped by max_spawn_depth.

   Operator tokens (minted at attach time) leave this None, so they can touch any task.

Implementations

impl CapTokenRecord

pub fn from_token(token: CapToken) -> Self

Wrap a freshly minted CapToken with no bound task (task_id = None) — the shape used for Operator/session tokens.

pub fn from_worker_token(token: CapToken, task_id: TaskId) -> Self

Convenience constructor used when minting a Worker token — binds the record to the target task.

pub fn consume(&mut self) -> Result<(), CapTokenConsumeError>

Consume one use. None (session token) always returns Ok; Some(0) returns Err.

Trait Implementations

impl Clone for CapTokenRecord

fn clone(&self) -> CapTokenRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapTokenRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for CapTokenRecord

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for CapTokenRecord

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.