v0 protocol: use size_t for capability length/offset