@zackbart/connecta 0.34.1 → 0.36.0

package/dist/worker.js

@@ -1,5 +1,9 @@
 // The upstream sandbox, with request-owned loader/RPC handles. A guest's
 // deadline cannot clean up after the parent response has already ended.
+import { Deferred, Effect, Exit, Scope } from "effect";
+import { admit } from "./runtime/admission.js";
+import { detach, runEdge } from "./runtime/run.js";
+import { awaitExecutorLease, provideExecutorProgram, executorProgram } from "./runtime/executor.js";
 import { DynamicWorkerExecutor, normalizeCode } from "@cloudflare/codemode";
 import { AdmissionController, ExecutorExecutionError } from "./executor-admission.js";
 import { brandExecutor } from "./executor-contract.js";
@@ -48,110 +52,90 @@ export function workerExecutor(options) {
         retryAfterMs: 1_000,
     });
     const active = new Set();
-    return brandExecutor({
-        name: "DynamicWorkerExecutor",
-        async acquire(request = {}) {
-            const permit = await admission.acquire(request);
-            const disposers = [];
-            let released = false;
-            let executed = false;
-            let runEnded = false;
-            let cancel;
-            let hostProviders;
-            const hostFailures = new Map();
-            // An upstream evaluation can remain pending after disposal. Its
-            // dispatchers retain only these forwarders, detached on lease release.
-            const forward = (index, name) => async (...args) => {
+    const acquire = (request = {}) => Effect.gen(function* () {
+        const permit = yield* admit(admission, request);
+        const resources = Scope.makeUnsafe();
+        const stopped = Deferred.makeUnsafe();
+        let released = false;
+        let executed = false;
+        let runEnded = false;
+        let hostProviders;
+        const hostFailures = new Map();
+        // An upstream evaluation can remain pending after disposal. Its
+        // dispatchers retain only these forwarders, detached on lease release.
+        const forward = (index, name) => (...args) => runEdge(Effect.raceFirst(Effect.tryPromise({
+            try: () => {
                 const fn = hostProviders?.[index]?.fns[name];
-                try {
-                    if (!fn)
-                        throw new Error("The Worker run ended.");
-                    return { ok: true, value: await fn(...args) };
-                }
-                catch (error) {
-                    const message = error instanceof Error ? error.message : "Host call failed.";
-                    if (error instanceof InvocationFailure && !released && !runEnded) {
-                        const failureId = crypto.randomUUID();
-                        hostFailures.set(failureId, error.details);
-                        // The codec may expose the copy to guest hooks. The authoritative
-                        // record never leaves this host-side map.
-                        return {
-                            ok: false,
-                            error: {
-                                message,
-                                code: error.details.code,
-                                retryable: error.details.retryable,
-                                details: structuredClone(error.details),
-                            },
-                            failureId,
-                        };
-                    }
-                    return { ok: false, error: { message } };
+                if (!fn || released || runEnded)
+                    throw new Error("The Worker run ended.");
+                return Promise.resolve(fn(...args));
+            },
+            catch: (error) => error,
+        }), Deferred.await(stopped)).pipe(Effect.match({
+            onSuccess: (value) => ({ ok: true, value }),
+            onFailure: (error) => {
+                const message = error instanceof Error ? error.message : "Host call failed.";
+                if (error instanceof InvocationFailure && !released && !runEnded) {
+                    const failureId = crypto.randomUUID();
+                    hostFailures.set(failureId, error.details);
+                    // Guest hooks receive a copy; authority remains in this map.
+                    return {
+                        ok: false,
+                        error: {
+                            message,
+                            code: error.details.code,
+                            retryable: error.details.retryable,
+                            details: structuredClone(error.details),
+                        },
+                        failureId,
+                    };
                 }
-            };
-            let rpcOutcome;
-            // Keep each native method's receiver and make upstream's later finally
-            // harmless. Release RPC stubs before the Worker Loader handle.
-            const track = (resource, entrypoint = false) => {
-                let disposed = false;
-                const dispose = () => {
-                    if (disposed)
-                        return;
-                    disposed = true;
-                    const method = Reflect.get(resource, Symbol.dispose);
-                    if (typeof method === "function")
-                        method.call(resource);
-                };
-                disposers.push(dispose);
-                return new Proxy(resource, {
-                    get(target, key) {
-                        if (key === Symbol.dispose)
-                            return dispose;
-                        if (key === "getEntrypoint" && !entrypoint) {
-                            return (...args) => track(Reflect.apply(Reflect.get(target, key), target, args), true);
-                        }
-                        if (key === "evaluate" && entrypoint)
-                            return async (...args) => {
-                                const result = (await Reflect.apply(Reflect.get(target, key), target, args));
-                                // Only the native RPC return channel supplies executor facts.
-                                rpcOutcome = result;
-                                return result;
-                            };
-                        const value = Reflect.get(target, key);
-                        return typeof value === "function" ? (...args) => Reflect.apply(value, target, args) : value;
-                    },
-                });
-            };
-            let executableCode;
-            let guestProgram;
-            let normalizationLines = 0;
-            const loader = new Proxy(options.loader, {
-                get(target, key) {
-                    if (key === "load")
-                        return (...args) => {
-                            if (released)
-                                throw new Error("Executor lease was already released.");
-                            const definition = args[0];
-                            const source = definition?.modules?.["executor.js"];
-                            // Keep guest source in its own module, outside the lexical scope of
-                            // RPC dispatchers and retained host-failure identities.
-                            if (typeof source !== "string" || !executableCode || !hostProviders)
-                                throw new Error("Worker executable module was unavailable.");
-                            const index = source.indexOf(executableCode);
-                            if (index < 0)
-                                throw new Error("Worker executable module did not contain the program.");
-                            const guest = guestProgram;
-                            if (guest)
-                                normalizationLines = 0;
-                            const names = hostProviders.map((provider) => provider.name).join(", ");
-                            const globals = hostProviders
-                                .map((provider) => `globalThis[${JSON.stringify(provider.name)}] = ${provider.name};`)
-                                .join("\n");
-                            let isolated = source.slice(0, index) + "__connecta_program" + source.slice(index + executableCode.length);
-                            const bridge = `if (data.error) throw new Error(data.error);\n          return data.result;`;
-                            if (hostProviders.length > 0 && !isolated.includes(bridge))
-                                throw new Error("Worker bridge contract changed.");
-                            isolated = isolated.replaceAll(bridge, `if (data.error) throw new NativeError(data.error);
+                return { ok: false, error: { message } };
+            },
+        })));
+        // The SDK prepares its source/dispatchers against this inert loader.
+        // Actual Loader and RPC acquisition belongs to the native program below.
+        let prepared;
+        const dispose = (resource) => Effect.sync(() => {
+            try {
+                const method = Reflect.get(resource, Symbol.dispose);
+                if (typeof method === "function")
+                    method.call(resource);
+            }
+            catch {
+                /* A failed RPC disposer cannot skip the Loader cleanup. */
+            }
+        });
+        let executableCode;
+        let guestProgram;
+        let normalizationLines = 0;
+        const loader = new Proxy(options.loader, {
+            get(target, key) {
+                if (key === "load")
+                    return (...args) => {
+                        if (released)
+                            throw new Error("Executor lease was already released.");
+                        const definition = args[0];
+                        const source = definition?.modules?.["executor.js"];
+                        // Keep guest source in its own module, outside the lexical scope of
+                        // RPC dispatchers and retained host-failure identities.
+                        if (typeof source !== "string" || !executableCode || !hostProviders)
+                            throw new Error("Worker executable module was unavailable.");
+                        const index = source.indexOf(executableCode);
+                        if (index < 0)
+                            throw new Error("Worker executable module did not contain the program.");
+                        const guest = guestProgram;
+                        if (guest)
+                            normalizationLines = 0;
+                        const names = hostProviders.map((provider) => provider.name).join(", ");
+                        const globals = hostProviders
+                            .map((provider) => `globalThis[${JSON.stringify(provider.name)}] = ${provider.name};`)
+                            .join("\n");
+                        let isolated = source.slice(0, index) + "__connecta_program" + source.slice(index + executableCode.length);
+                        const bridge = `if (data.error) throw new Error(data.error);\n          return data.result;`;
+                        if (hostProviders.length > 0 && !isolated.includes(bridge))
+                            throw new Error("Worker bridge contract changed.");
+                        isolated = isolated.replaceAll(bridge, `if (data.error) throw new NativeError(data.error);
           const reply = data.result;
           if (!reply.ok) {
             const error = new NativeError(reply.error.message);
@@ -167,14 +151,14 @@ export function workerExecutor(options) {
             throw error;
           }
           return reply.value;`);
-                            isolated = isolated.replace("    const __logs = [];", `    if (initialized) throw new NativeError("Worker initialization is single-use.");
+                        isolated = isolated.replace("    const __logs = [];", `    if (initialized) throw new NativeError("Worker initialization is single-use.");
     initialized = true;
     const failures = new NativeWeakMap();
     const timeoutError = new NativeError("Execution timed out");
     const __logs = [];`);
-                            isolated = isolated.replace('new Error("Execution timed out")', "timeoutError");
-                            isolated = isolated.replace("setTimeout(() => reject(timeoutError)", "nativeSetTimeout(() => reject(timeoutError)");
-                            isolated = isolated.replace("return { result: undefined, error: err.message, logs: __logs };", `
+                        isolated = isolated.replace('new Error("Execution timed out")', "timeoutError");
+                        isolated = isolated.replace("setTimeout(() => reject(timeoutError)", "nativeSetTimeout(() => reject(timeoutError)");
+                        isolated = isolated.replace("return { result: undefined, error: err.message, logs: __logs };", `
       const failureId = lookup(failures, err);
       let name = "Error", message = "Program threw a value.", stack = "";
       try {
@@ -190,29 +174,29 @@ export function workerExecutor(options) {
         name, ...(failureId ? { failureId } : {}), ...(location ? { line: toNumber(location[1]) - 1 } : {}),
         ...(err === timeoutError ? { timeout: { elapsedMs: ${options.timeout ?? 60_000}, deadlineMs: ${options.timeout ?? 60_000} } } : {})
       } };`);
-                            const preludes = [];
-                            let firstInitializer;
-                            for (const provider of hostProviders) {
-                                if (!provider.prelude)
-                                    continue;
-                                if (!isolated.includes(provider.prelude))
-                                    throw new Error("Worker provider setup was unavailable.");
-                                preludes.push(provider.prelude);
-                                const call = firstInitializer ? "" : `__connecta_initialize(${names});`;
-                                isolated = isolated.replace(provider.prelude, call);
-                                firstInitializer ||= call;
-                            }
-                            // Successive preludes share lexical bindings in both executors.
-                            const captureGuest = preludes.includes(guestPrelude());
-                            const initializer = preludes.length
-                                ? `const __connecta_initialize = (${names}) => {\n${preludes.map((prelude) => (prelude === guestPrelude() ? "__connecta_guest_initialize(connecta);" : prelude)).join("\n")}\n};\n`
-                                : "";
-                            // Runner modules are inaccessible to guest imports. The callback has
-                            // no lexical access to initialization or RPC dispatchers.
-                            const programName = guest ? "__connecta_user_program" : "__connecta_program";
-                            const imports = 'import Runner from "./connecta-runner.js";\n' + `import program from "./connecta-guest.js";\n`;
-                            const wrapper = guest ? `    const __connecta_program = (${guest.wrapper});\n` : "";
-                            const hardening = `
+                        const preludes = [];
+                        let firstInitializer;
+                        for (const provider of hostProviders) {
+                            if (!provider.prelude)
+                                continue;
+                            if (!isolated.includes(provider.prelude))
+                                throw new Error("Worker provider setup was unavailable.");
+                            preludes.push(provider.prelude);
+                            const call = firstInitializer ? "" : `__connecta_initialize(${names});`;
+                            isolated = isolated.replace(provider.prelude, call);
+                            firstInitializer ||= call;
+                        }
+                        // Successive preludes share lexical bindings in both executors.
+                        const captureGuest = preludes.includes(guestPrelude());
+                        const initializer = preludes.length
+                            ? `const __connecta_initialize = (${names}) => {\n${preludes.map((prelude) => (prelude === guestPrelude() ? "__connecta_guest_initialize(connecta);" : prelude)).join("\n")}\n};\n`
+                            : "";
+                        // Runner modules are inaccessible to guest imports. The callback has
+                        // no lexical access to initialization or RPC dispatchers.
+                        const programName = guest ? "__connecta_user_program" : "__connecta_program";
+                        const imports = 'import Runner from "./connecta-runner.js";\n' + `import program from "./connecta-guest.js";\n`;
+                        const wrapper = guest ? `    const __connecta_program = (${guest.wrapper});\n` : "";
+                        const hardening = `
 const builtinAllowed = name => typeof name === "string" && name !== "module" && name !== "node:module" && name !== "process" && name !== "node:process";
 if (typeof process !== "undefined" && typeof process.getBuiltinModule === "function") {
   const getBuiltin = process.getBuiltinModule.bind(process);
@@ -220,10 +204,10 @@ if (typeof process !== "undefined" && typeof process.getBuiltinModule === "funct
     value: name => builtinAllowed(name) ? getBuiltin(name) : undefined });
 }
 `;
-                            // ESM evaluates the first dependency completely before the next.
-                            // This module has no guest dependency; its references and retained
-                            // failures stay private, and guest imports cannot reach its export.
-                            const captures = `
+                        // ESM evaluates the first dependency completely before the next.
+                        // This module has no guest dependency; its references and retained
+                        // failures stay private, and guest imports cannot reach its export.
+                        const captures = `
 const {
   NativeError, NativeWeakMap, NativeProxy, NativePromise, NativeUint8Array, NativeArrayBuffer,
   defineProperties, freeze, clone, retain, lookup, slice, nativeSetTimeout, toNumber, exec,
@@ -251,58 +235,59 @@ const {
   nativeConsole: console
 });
 `;
-                            const binaryTagCheck = "(__CODEMODE_BINARY_TAG in value)";
-                            const binaryDataCheck = 'typeof value.data !== "string"';
-                            if (!isolated.includes(binaryTagCheck) || !isolated.includes(binaryDataCheck)) {
-                                throw new Error("Worker binary codec contract changed.");
-                            }
-                            isolated = isolated
-                                .replace("async evaluate(__dispatchers = {}, __connectors = {}) {", `async evaluate(__dispatchers = {}, __connectors = {}, ${programName}) {\n${wrapper}`)
-                                .replaceAll("JSON.parse(", "jsonParse(")
-                                .replaceAll("JSON.stringify(", "jsonStringify(")
-                                .replaceAll(binaryTagCheck, "hasOwn(value, __CODEMODE_BINARY_TAG)")
-                                .replaceAll(binaryDataCheck, '!hasOwn(value, "data") || typeof value.data !== "string"')
-                                .replaceAll("console.", "nativeConsole.")
-                                .replaceAll("new Proxy(", "new NativeProxy(")
-                                .replaceAll("Object.prototype.hasOwnProperty.call(target, toolName)", "hasOwn(target, toolName)")
-                                .replaceAll("String(toolName)", "toString(toolName)")
-                                .replaceAll('a.map(String).join(" ")', 'join(map(a, toString), " ")')
-                                .replaceAll("__logs.push(", "push(__logs, ")
-                                .replaceAll("String.fromCharCode(", "fromCharCode(")
-                                .replaceAll("bytes.subarray(i, Math.min(i + chunkSize, bytes.byteLength))", "subarray(bytes, i, min(i + chunkSize, bytes.byteLength))")
-                                .replaceAll("btoa(binary)", "nativeBtoa(binary)")
-                                .replaceAll("atob(b64)", "nativeAtob(b64)")
-                                .replaceAll("new Uint8Array(", "new NativeUint8Array(")
-                                .replaceAll("instanceof Uint8Array", "instanceof NativeUint8Array")
-                                .replaceAll("instanceof ArrayBuffer", "instanceof NativeArrayBuffer")
-                                .replaceAll("ArrayBuffer.isView(", "isView(")
-                                .replaceAll("binary.charCodeAt(i)", "charCodeAt(binary, i)")
-                                .replaceAll("bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength)", "bufferSlice(bytes.buffer, bytes.byteOffset, bytes.byteOffset + bytes.byteLength)")
-                                .replaceAll("Promise.race(", "race(")
-                                .replaceAll("new Promise(", "new NativePromise(");
-                            // Recompute the insertion point after changing the generated runner.
-                            const setup = firstInitializer
-                                ? isolated.indexOf(firstInitializer)
-                                : isolated.indexOf("    try {\n      const result = await race");
-                            if (setup < 0)
-                                throw new Error("Worker provider setup was unavailable.");
-                            const runner = hardening +
-                                (captureGuest
-                                    ? `const __connecta_guest_initialize = ${guestInitializer()};\n`
-                                    : `${guestPromiseInitializer()};\n`) +
-                                captures +
-                                "let initialized = false;\n" +
-                                initializer +
-                                isolated.slice(0, setup) +
-                                globals +
-                                "\n" +
-                                isolated.slice(setup);
-                            const main = imports +
-                                `export default class CodeExecutor extends Runner {
+                        const binaryTagCheck = "(__CODEMODE_BINARY_TAG in value)";
+                        const binaryDataCheck = 'typeof value.data !== "string"';
+                        if (!isolated.includes(binaryTagCheck) || !isolated.includes(binaryDataCheck)) {
+                            throw new Error("Worker binary codec contract changed.");
+                        }
+                        isolated = isolated
+                            .replace("async evaluate(__dispatchers = {}, __connectors = {}) {", `async evaluate(__dispatchers = {}, __connectors = {}, ${programName}) {\n${wrapper}`)
+                            .replaceAll("JSON.parse(", "jsonParse(")
+                            .replaceAll("JSON.stringify(", "jsonStringify(")
+                            .replaceAll(binaryTagCheck, "hasOwn(value, __CODEMODE_BINARY_TAG)")
+                            .replaceAll(binaryDataCheck, '!hasOwn(value, "data") || typeof value.data !== "string"')
+                            .replaceAll("console.", "nativeConsole.")
+                            .replaceAll("new Proxy(", "new NativeProxy(")
+                            .replaceAll("Object.prototype.hasOwnProperty.call(target, toolName)", "hasOwn(target, toolName)")
+                            .replaceAll("String(toolName)", "toString(toolName)")
+                            .replaceAll('a.map(String).join(" ")', 'join(map(a, toString), " ")')
+                            .replaceAll("__logs.push(", "push(__logs, ")
+                            .replaceAll("String.fromCharCode(", "fromCharCode(")
+                            .replaceAll("bytes.subarray(i, Math.min(i + chunkSize, bytes.byteLength))", "subarray(bytes, i, min(i + chunkSize, bytes.byteLength))")
+                            .replaceAll("btoa(binary)", "nativeBtoa(binary)")
+                            .replaceAll("atob(b64)", "nativeAtob(b64)")
+                            .replaceAll("new Uint8Array(", "new NativeUint8Array(")
+                            .replaceAll("instanceof Uint8Array", "instanceof NativeUint8Array")
+                            .replaceAll("instanceof ArrayBuffer", "instanceof NativeArrayBuffer")
+                            .replaceAll("ArrayBuffer.isView(", "isView(")
+                            .replaceAll("binary.charCodeAt(i)", "charCodeAt(binary, i)")
+                            .replaceAll("bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength)", "bufferSlice(bytes.buffer, bytes.byteOffset, bytes.byteOffset + bytes.byteLength)")
+                            .replaceAll("Promise.race(", "race(")
+                            .replaceAll("new Promise(", "new NativePromise(");
+                        // Recompute the insertion point after changing the generated runner.
+                        const setup = firstInitializer
+                            ? isolated.indexOf(firstInitializer)
+                            : isolated.indexOf("    try {\n      const result = await race");
+                        if (setup < 0)
+                            throw new Error("Worker provider setup was unavailable.");
+                        const runner = hardening +
+                            (captureGuest
+                                ? `const __connecta_guest_initialize = ${guestInitializer()};\n`
+                                : `${guestPromiseInitializer()};\n`) +
+                            captures +
+                            "let initialized = false;\n" +
+                            initializer +
+                            isolated.slice(0, setup) +
+                            globals +
+                            "\n" +
+                            isolated.slice(setup);
+                        const main = imports +
+                            `export default class CodeExecutor extends Runner {
   evaluate(dispatchers, connectors) { return super.evaluate(dispatchers, connectors, program); }
 }`;
-                            const routed = routeGuestImports(guest?.program ?? executableCode);
-                            return track(Reflect.apply(Reflect.get(target, key), target, [
+                        const routed = routeGuestImports(guest?.program ?? executableCode);
+                        const acquisition = {
+                            load: () => Reflect.apply(Reflect.get(target, key), target, [
                                 {
                                     ...definition,
                                     modules: {
@@ -313,123 +298,158 @@ const {
                                     },
                                 },
                                 ...args.slice(1),
-                            ]));
+                            ]),
+                            args: undefined,
+                        };
+                        prepared = acquisition;
+                        return {
+                            getEntrypoint: () => ({
+                                evaluate: (...evaluateArgs) => {
+                                    acquisition.args = evaluateArgs;
+                                    return Promise.resolve({ result: undefined });
+                                },
+                            }),
                         };
-                    const value = Reflect.get(target, key);
-                    return typeof value === "function" ? (...args) => Reflect.apply(value, target, args) : value;
-                },
-            });
-            const lease = {
-                waitMs: permit.waitMs,
-                async execute(code, providers) {
-                    if (released)
-                        throw new Error("Executor lease was already released.");
-                    if (executed)
-                        throw new Error("Executor lease may execute only once.");
-                    executed = true;
-                    hostProviders = providers;
-                    // Extract the fixed wrapper from the original source. Upstream may
-                    // wrap invalid syntax as a bare body; that must not turn an attempted
-                    // module escape into runnable statements or shift guest locations.
-                    guestProgram = isolateGuestProgram(code.trim());
-                    executableCode = normalizeCode(code);
-                    const original = executableCode.indexOf(code.trim());
-                    if (original >= 0)
-                        normalizationLines = executableCode.slice(0, original).split("\n").length - 1;
-                    const detached = providers.map((provider, index) => ({
-                        name: provider.name,
-                        ...(provider.prelude ? { prelude: provider.prelude } : {}),
-                        fns: Object.fromEntries(Object.keys(provider.fns).map((name) => [name, forward(index, name)])),
-                    }));
-                    const stopped = new Promise((_resolve, reject) => {
-                        cancel = () => reject(new ExecutorExecutionError("executor_cancelled", "Worker executor lease was released during execution."));
+                    };
+                const value = Reflect.get(target, key);
+                return typeof value === "function" ? (...args) => Reflect.apply(value, target, args) : value;
+            },
+        });
+        const execute = (code, providers) => Effect.suspend(() => {
+            if (released)
+                return Effect.fail(new Error("Executor lease was already released."));
+            if (executed)
+                return Effect.fail(new Error("Executor lease may execute only once."));
+            executed = true;
+            return Effect.gen(function* () {
+                hostProviders = providers;
+                // Extract the fixed wrapper from the original source. Upstream may
+                // wrap invalid syntax as a bare body; that must not turn an attempted
+                // module escape into runnable statements or shift guest locations.
+                guestProgram = isolateGuestProgram(code.trim());
+                executableCode = normalizeCode(code);
+                const original = executableCode.indexOf(code.trim());
+                if (original >= 0)
+                    normalizationLines = executableCode.slice(0, original).split("\n").length - 1;
+                const detached = providers.map((provider, index) => ({
+                    name: provider.name,
+                    ...(provider.prelude ? { prelude: provider.prelude } : {}),
+                    fns: Object.fromEntries(Object.keys(provider.fns).map((name) => [name, forward(index, name)])),
+                }));
+                const started = Date.now();
+                const operation = Effect.gen(function* () {
+                    const setup = yield* Effect.tryPromise({
+                        try: () => new DynamicWorkerExecutor({
+                            loader,
+                            ...(options.timeout !== undefined ? { timeout: options.timeout } : {}),
+                        }).execute(code, detached),
+                        catch: (error) => error,
                     });
-                    const started = Date.now();
-                    try {
-                        const result = await Promise.race([
-                            new DynamicWorkerExecutor({
-                                loader,
-                                ...(options.timeout !== undefined ? { timeout: options.timeout } : {}),
-                            }).execute(code, detached),
-                            stopped,
-                        ]);
-                        const outcome = rpcOutcome ?? result;
-                        if (outcome.failure) {
-                            const failure = { ...outcome.failure };
-                            const call = typeof failure.failureId === "string" ? hostFailures.get(failure.failureId) : undefined;
-                            // Neither an unknown id nor a guest/RPC-supplied call record
-                            // supplies typed host details. Strip the private id at the edge.
-                            delete failure.call;
-                            delete failure.failureId;
-                            outcome.failure = { ...failure, ...(call ? { call } : {}) };
-                        }
-                        if (outcome.failure?.timeout)
-                            outcome.failure.timeout.elapsedMs = Date.now() - started;
-                        return outcome;
-                    }
-                    catch (error) {
-                        const message = error instanceof Error ? error.message : "";
-                        // Worker Loader erases the native SyntaxError type at its RPC edge.
-                        // Match its startup diagnostic only; guest/downstream failures return normally.
-                        const syntax = /^Failed to start Worker:\nUncaught SyntaxError: ([^\n]*)\n\s+at connecta-guest\.js:(\d+):\d+$/.exec(message);
-                        if (error instanceof SyntaxError || syntax) {
-                            const location = error instanceof SyntaxError && "loc" in error ? error.loc : undefined;
-                            const line = syntax
-                                ? Math.max(1, Number(syntax[2]) - normalizationLines - 1)
-                                : location?.line !== undefined
-                                    ? Math.max(1, location.line)
-                                    : undefined;
-                            return {
-                                result: undefined,
-                                error: (syntax?.[1] ?? message) || "Invalid JavaScript program.",
-                                failure: { name: "SyntaxError", ...(line !== undefined ? { line } : {}) },
-                            };
-                        }
-                        throw error;
-                    }
-                    finally {
-                        runEnded = true;
-                        cancel = undefined;
-                        hostFailures.clear();
+                    // Provider validation can return before the SDK reaches its loader.
+                    if (!prepared)
+                        return setup;
+                    const load = prepared.load;
+                    const args = prepared.args;
+                    const open = () => Effect.suspend(() => released || resources.state._tag === "Closed"
+                        ? Effect.fail(new ExecutorExecutionError("executor_cancelled", "Worker executor lease was released during execution."))
+                        : Effect.void);
+                    const evaluation = Effect.gen(function* () {
+                        yield* open();
+                        const worker = yield* Effect.acquireRelease(Effect.try({ try: load, catch: (error) => error }), dispose);
+                        yield* open();
+                        const entrypoint = yield* Effect.acquireRelease(Effect.try({
+                            try: () => Reflect.apply(Reflect.get(worker, "getEntrypoint"), worker, []),
+                            catch: (error) => error,
+                        }), dispose);
+                        yield* open();
+                        return yield* Effect.tryPromise({
+                            try: () => Reflect.apply(Reflect.get(entrypoint, "evaluate"), entrypoint, args ?? []),
+                            catch: (error) => error,
+                        });
+                    }).pipe(Scope.provide(resources));
+                    const result = yield* evaluation;
+                    const outcome = result;
+                    if (outcome.failure) {
+                        const failure = { ...outcome.failure };
+                        const call = typeof failure.failureId === "string" ? hostFailures.get(failure.failureId) : undefined;
+                        // Neither an unknown id nor a guest/RPC-supplied call record
+                        // supplies typed host details. Strip the private id at the edge.
+                        delete failure.call;
+                        delete failure.failureId;
+                        outcome.failure = { ...failure, ...(call ? { call } : {}) };
                     }
-                },
-                release() {
-                    if (released)
-                        return;
-                    released = true;
-                    hostProviders = undefined;
-                    hostFailures.clear();
-                    cancel?.();
-                    for (const dispose of disposers.reverse()) {
-                        try {
-                            dispose();
-                        }
-                        catch {
-                            /* Release every handle and the permit. */
-                        }
+                    if (outcome.failure?.timeout)
+                        outcome.failure.timeout.elapsedMs = Date.now() - started;
+                    return outcome;
+                });
+                return yield* operation.pipe(Effect.catch((error) => {
+                    const message = error instanceof Error ? error.message : "";
+                    // Worker Loader erases the native SyntaxError type at its RPC edge.
+                    // Match its startup diagnostic only; guest/downstream failures return normally.
+                    const syntax = /^Failed to start Worker:\nUncaught SyntaxError: ([^\n]*)\n\s+at connecta-guest\.js:(\d+):\d+$/.exec(message);
+                    if (error instanceof SyntaxError || syntax) {
+                        const location = error instanceof SyntaxError && "loc" in error ? error.loc : undefined;
+                        const line = syntax
+                            ? Math.max(1, Number(syntax[2]) - normalizationLines - 1)
+                            : location?.line !== undefined
+                                ? Math.max(1, location.line)
+                                : undefined;
+                        return Effect.succeed({
+                            result: undefined,
+                            error: (syntax?.[1] ?? message) || "Invalid JavaScript program.",
+                            failure: { name: "SyntaxError", ...(line !== undefined ? { line } : {}) },
+                        });
                     }
-                    disposers.length = 0;
-                    active.delete(lease);
-                    permit.release();
-                },
-            };
-            active.add(lease);
-            return lease;
-        },
-        async execute(code, providers) {
-            const lease = await this.acquire();
-            try {
-                return await lease.execute(code, providers);
-            }
-            finally {
-                lease.release();
-            }
-        },
+                    return Effect.fail(error);
+                }));
+            }).pipe(Effect.raceFirst(Deferred.await(stopped)), Effect.catchDefect((error) => Effect.fail(error)), Effect.ensuring(Effect.sync(() => {
+                runEnded = true;
+                hostProviders = undefined;
+                prepared = undefined;
+                hostFailures.clear();
+                Deferred.doneUnsafe(stopped, Exit.fail(new ExecutorExecutionError("executor_cancelled", "The Worker run ended.")));
+            })), Effect.ensuring(Scope.close(resources, Exit.void)));
+        });
+        const lease = {
+            waitMs: permit.waitMs,
+            execute: (code, providers) => runEdge(execute(code, providers)),
+            release() {
+                if (released)
+                    return;
+                released = true;
+                hostProviders = undefined;
+                prepared = undefined;
+                hostFailures.clear();
+                // Only synchronous SDK disposers inhabit this scope. They run before
+                // release returns, even if evaluate never settles or a disposer throws.
+                void detach(Scope.close(resources, Exit.void));
+                Deferred.doneUnsafe(stopped, Exit.fail(new ExecutorExecutionError("executor_cancelled", "Worker executor lease was released during execution.")));
+                active.delete(lease);
+                permit.release();
+            },
+        };
+        provideExecutorProgram(lease, execute);
+        active.add(lease);
+        return lease;
+    });
+    const acquireShell = (request) => runEdge(acquire(request));
+    const executor = {
+        name: "DynamicWorkerExecutor",
+        acquire: acquireShell,
+        execute: (code, providers) => runEdge(execute(code, providers)),
         admissionSnapshot: () => admission.snapshot(),
         close() {
             admission.close();
             for (const lease of active)
                 lease.release();
         },
-    }, "leased");
+    };
+    const execute = (code, providers) => Effect.scoped(Effect.gen(function* () {
+        const lease = yield* Effect.acquireRelease(Effect.suspend(() => executor.acquire !== acquireShell || admission.activeCount >= admission.concurrency
+            ? awaitExecutorLease((signal) => executor.acquire({ signal }))
+            : acquire()), (lease) => Effect.sync(() => lease.release()), { interruptible: true });
+        return yield* executorProgram(lease, code, providers);
+    }));
+    provideExecutorProgram(executor, execute);
+    return brandExecutor(executor, "leased");
 }