Struct DurableResolverSeat 

pub struct DurableResolverSeat {
    pub handle: Arc<DurableHandle>,
    pub promise_id: PromiseId,
    pub token: Zeroizing<[u8; 32]>,
}

The out-of-band resolver seat carried from parent to child background task (INV-9).

Held exclusively inside the spawned background task; never reachable from the child’s tool executor or LLM surface. Zeroizing ensures the raw token bytes are wiped on drop.

Fields

handle: Arc<DurableHandle>

Shared backend handle — cheap clone, used only to call resolve.

promise_id: PromiseId

Promise identifier matching the parent’s program position.

token: Zeroizing<[u8; 32]>

The raw 32-byte resolver token (zeroized on drop, never stored).