fix(deploy): tolerate transient CF 404 on workers-domain DELETE

Right after a 12MB putScript upload, Cloudflare transiently 404s
DELETE /workers/domains/{id} for bindings attached to that worker (the
envelope's result is null, surfacing as a bare CloudflareHttpError, not
DomainNotFound). The same call succeeds seconds later — verified by
direct curl/SDK probes of the exact binding.

- alchemy patch: catch CloudflareHttpError alongside DomainNotFound in
  syncDomains detachment (stack code reconciles domains right after and
  fails loudly if the detach truly mattered)
- web/docs stacks: retry deleteDomain through the transient window
  (5x, 2s spacing, CloudflareHttpError only)

Author: czxtm

apps/docs/alchemy.run.ts

@@ -8,6 +8,7 @@ import * as Cloudflare from "alchemy/Cloudflare";
 import * as Output from "alchemy/Output";
 import * as Workers from "@distilled.cloud/cloudflare/workers";
 import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
 
 const PROJECT = "stackpanel";
 const SERVICE = "docs";
@@ -139,7 +140,16 @@ const program = Effect.gen(function* () {
             );
           }
           for (const d of stale) {
-            yield* Workers.deleteDomain({ accountId, domainId: d.id! });
+            // Cloudflare transiently 404s workers-domain DELETEs right
+            // after the worker upload (binding record rebuild) — retry
+            // through that window instead of dying on a phantom 404.
+            yield* Workers.deleteDomain({ accountId, domainId: d.id! }).pipe(
+              Effect.retry({
+                while: (e) => e._tag === "CloudflareHttpError",
+                schedule: Schedule.spaced("2 seconds"),
+                times: 5,
+              }),
+            );
           }
           yield* Workers.putDomain({
             accountId,

apps/web/alchemy.run.ts

@@ -9,6 +9,7 @@ import * as Cloudflare from "alchemy/Cloudflare";
 import * as Output from "alchemy/Output";
 import * as Workers from "@distilled.cloud/cloudflare/workers";
 import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
 import * as Layer from "effect/Layer";
 
 const PROJECT = "stackpanel";
@@ -134,7 +135,16 @@ const program = Effect.gen(function* () {
               );
             }
             for (const d of stale) {
-              yield* Workers.deleteDomain({ accountId, domainId: d.id! });
+              // Cloudflare transiently 404s workers-domain DELETEs right
+              // after the worker upload (binding record rebuild) — retry
+              // through that window instead of dying on a phantom 404.
+              yield* Workers.deleteDomain({ accountId, domainId: d.id! }).pipe(
+                Effect.retry({
+                  while: (e) => e._tag === "CloudflareHttpError",
+                  schedule: Schedule.spaced("2 seconds"),
+                  times: 5,
+                }),
+              );
             }
             yield* Workers.putDomain({
               accountId,

patches/alchemy@2.0.0-beta.57.patch

@@ -1,3 +1,6 @@
+diff --git a/node_modules/alchemy/.bun-tag-2e60a3d01e391349 b/.bun-tag-2e60a3d01e391349
+new file mode 100644
+index 0000000000000000000000000000000000000000..e69de29bb2d1d6434b8b29ae775ad8c2e48c5391
 diff --git a/lib/Cloudflare/StateStore/Api.js b/lib/Cloudflare/StateStore/Api.js
 index 91cd6535c3ff5b8997764cd5c37a5a527f09a773..c60ded30c61681649df77d00f1b1e834095c93aa 100644
 --- a/lib/Cloudflare/StateStore/Api.js
@@ -55,6 +58,26 @@ index ff7b9a56c3795e13b833cf1ea6ece859c7896532..a7048956934ee531bd9ac6d14b66e911
          }).pipe(Effect.orDie);
          return {
              // -- Root DO methods -----------------------------------------
+diff --git a/lib/Cloudflare/Workers/Worker.js b/lib/Cloudflare/Workers/Worker.js
+index 912be17fdd1a0380471856b0c485a7f1a88dbc0b..d863bba4904105bcf4c9fe5640be7258c18355c3 100644
+--- a/lib/Cloudflare/Workers/Worker.js
++++ b/lib/Cloudflare/Workers/Worker.js
+@@ -584,7 +584,14 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
+         const toRemove = liveAll.filter((d) => !desiredSet.has(d.hostname));
+         yield* Effect.all(toRemove.map((d) => workers
+             .deleteDomain({ accountId, domainId: d.id })
+-            .pipe(Effect.catchTag("DomainNotFound", () => Effect.void))), { concurrency: "unbounded" });
++            // darkmatter: Cloudflare transiently 404s workers-domain DELETEs
++            // in the window right after a large putScript upload (the binding
++            // record is rebuilt server-side) — the identical call succeeds
++            // seconds later. That 404 surfaces as a bare CloudflareHttpError
++            // (envelope `result` is null), not DomainNotFound, so widen the
++            // catch: the stack's own domain reconciliation runs immediately
++            // after and fails loudly if the detach was genuinely required.
++            .pipe(Effect.catchTags({ DomainNotFound: () => Effect.void, CloudflareHttpError: () => Effect.void }))), { concurrency: "unbounded" });
+         if (desired.length === 0)
+             return [];
+         const zoneCache = new Map();
 diff --git a/src/Cloudflare/StateStore/Api.ts b/src/Cloudflare/StateStore/Api.ts
 index 5d63113ef5c9ed720a1cdf08a57949e45e8362ae..b7100a4495ff02ae70aa70fc0a51a34ab69270f1 100644
 --- a/src/Cloudflare/StateStore/Api.ts