alchemy 2.0.0-beta.76 → 2.0.0-beta.78

package/lib/Cloudflare/Workers/WorkerProvider.js

@@ -16,7 +16,6 @@ import { isHttpClientError } from "effect/unstable/http/HttpClientError";
 import * as crypto from "node:crypto";
 import { Unowned } from "../../AdoptPolicy.js";
 import * as Artifacts from "../../Artifacts.js";
-import { hashDirectory } from "../../Command/Memo.js";
 import { havePropsChanged, isResolved, stripEffects } from "../../Diff.js";
 import * as ProviderLayer from "../../Local/ProviderLayer.js";
 import * as Provider from "../../Provider.js";
@@ -24,6 +23,7 @@ import {} from "../../Resource.js";
 import { Stack } from "../../Stack.js";
 import { cachedFunction } from "../../Util/cached-function.js";
 import { initialCwd } from "../../Util/Node.js";
+import { isRedactedMarker } from "../../RuntimeContext.js";
 import { sha256Object } from "../../Util/sha256.js";
 import { CloudflareEnvironment } from "../CloudflareEnvironment.js";
 import { localRuntimeServices } from "../LocalRuntime.js";
@@ -35,8 +35,9 @@ import { getCompatibility } from "./Compatibility.js";
 import { isDurableObjectExport } from "./DurableObject.js";
 import { LocalWorkerProvider } from "./LocalWorkerProvider.js";
 import { makeSourceContext, resolveSource } from "./Source.js";
+import { assertCloudflareTelemetryCompatibility } from "./Telemetry.js";
 import { isSelfUrl, Worker, } from "./Worker.js";
-import { getCacheBinding, getCronBindings, isContainerDecl, } from "./WorkerAsyncBindings.js";
+import { getCacheBinding, getCronBindings, isContainerDecl, resolveObservability, } from "./WorkerAsyncBindings.js";
 import { readPrebuiltWorkerBundle } from "./Sources/Prebuilt.js";
 import { isPythonMain, readPythonWorkerBundle } from "./Sources/Python.js";
 import { WorkerBundle } from "./Sources/Rolldown.js";
@@ -157,6 +158,50 @@ export const resolveVersionParentName = (version) => {
     const workerName = parent.workerName;
     return typeof workerName === "string" ? workerName : undefined;
 };
+/**
+ * A Worker's `preview` configuration is invalid — combined with
+ * `version.parent`, missing `preview.of`, a bad Preview name, or a
+ * script-level setting that belongs to the parent.
+ */
+export class WorkerPreviewConfigError extends Data.TaggedError("WorkerPreviewConfigError") {
+}
+/**
+ * Resolve the parent script *name* from a resolved `preview.of` prop.
+ *
+ * @internal
+ */
+export const resolvePreviewParentName = (preview) => {
+    const parent = preview?.of;
+    if (parent == null)
+        return undefined;
+    if (typeof parent === "string")
+        return parent;
+    const workerName = parent.workerName;
+    return typeof workerName === "string" ? workerName : undefined;
+};
+const toPreviewWireKey = (key) => key.replace(/[A-Z]/g, (c) => `_${c.toLowerCase()}`);
+const toPreviewWire = (value) => {
+    if (Array.isArray(value))
+        return value.map(toPreviewWire);
+    if (value !== null && typeof value === "object") {
+        return Object.fromEntries(Object.entries(value).map(([k, v]) => [
+            toPreviewWireKey(k),
+            toPreviewWire(v),
+        ]));
+    }
+    return value;
+};
+/** Convert Alchemy's binding array into wrangler's Preview `env` map. */
+const bindingsToPreviewEnv = (bindings) => {
+    const env = {};
+    for (const binding of bindings) {
+        const { name, ...rest } = binding;
+        if (typeof name !== "string")
+            continue;
+        env[name] = toPreviewWire(rest);
+    }
+    return env;
+};
 /**
  * The traffic percentage a *self-owned* Worker's new version should receive,
  * or `undefined` for the default full cutover. Only a `version` prop without
@@ -405,9 +450,14 @@ domain) => Effect.gen(function* () {
         }));
     }
     const zone = resolveWorkerDomainZone(config);
-    return zone === undefined
-        ? { name, aliases, redirects }
-        : { name, aliases, redirects, zone };
+    const previews = "previews" in config && config.previews === true ? true : undefined;
+    return {
+        name,
+        aliases,
+        redirects,
+        ...(zone === undefined ? {} : { zone }),
+        ...(previews === undefined ? {} : { previews }),
+    };
 });
 const isWorkersDevHostname = (hostname) => hostname.endsWith(".workers.dev");
 // Hostnames that only appear in local-dev state (the dev server's
@@ -449,6 +499,7 @@ export const stateWorkerDomain = (output) => {
             aliases: (domain.aliases ?? []).filter((h) => typeof h === "string"),
             redirects: (domain.redirects ?? []).filter((h) => typeof h === "string"),
             ...(zone === undefined ? {} : { zone }),
+            ...(domain.previews === true ? { previews: true } : {}),
         };
     }
     const legacy = stateCustomDomains(state?.domains);
@@ -670,7 +721,7 @@ export const shouldObserveWorkerCrons = (olds, output) => olds?.crons !== undefi
  * (`<subdomain>` in `https://<script>.<subdomain>.workers.dev`). When set,
  * Worker URL construction skips `GET /accounts/{id}/workers/subdomain`.
  */
-const CLOUDFLARE_WORKERS_SUBDOMAIN = Config.string("CLOUDFLARE_WORKERS_SUBDOMAIN").pipe(Config.map((value) => value.trim()), Config.option);
+const CLOUDFLARE_WORKERS_SUBDOMAIN = Config.String("CLOUDFLARE_WORKERS_SUBDOMAIN").pipe(Config.map((value) => value.trim()), Config.option);
 const WORKERS_SUBDOMAIN_PATTERN = /^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/;
 /**
  * Max concurrent `GET /zones/{id}/workers/routes` calls when observing the
@@ -790,6 +841,14 @@ const resolveWorkerMetadataHash = ({ props, bindings, accountId, stack, selfUrl,
             tag: props.version.tag,
         }
         : undefined,
+    preview: props.preview
+        ? {
+            of: resolvePreviewParentName(props.preview),
+            name: props.preview.name,
+            message: props.preview.message,
+            tag: props.preview.tag,
+        }
+        : undefined,
 }).pipe(Effect.flatMap((metadata) => sha256Object({ metadata })));
 export const WorkerProvider = () => ProviderLayer.dual(Worker, {
     live: () => LiveWorkerProvider(),
@@ -882,7 +941,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
         if (!changed)
             return live;
         if (desired.length > 0 || previous.length > 0 || live.length > 0) {
-            yield* session.note(`Reconciling Cron Triggers (${desired.length}) ...`);
+            yield* session.note(`Reconciling Cron Triggers (${desired.length}) ...`, { kind: "status" });
         }
         const result = yield* workers
             .putScriptSchedule({
@@ -917,7 +976,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
         zoneCache.set(cacheKey, zoneId);
         return zoneId;
     });
-    const reconcileDomains = (scriptName, desired, zone) => Effect.gen(function* () {
+    const reconcileDomains = (scriptName, desired, zone, previewsEnabled) => Effect.gen(function* () {
         const { accountId } = yield* yield* CloudflareEnvironment;
         // Always query the live state of domains attached to *this*
         // Worker rather than trusting `_previous` from local state.
@@ -937,6 +996,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                     hostname: d.hostname,
                     zoneId: d.zoneId,
                     service: d.service ?? undefined,
+                    previewsEnabled: d.previewsEnabled === true,
                 },
             ]
             : [])), Effect.catch(() => Effect.succeed([])));
@@ -962,7 +1022,8 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                 ? undefined
                 : yield* inferZoneIdForHostname(hostname, zoneCache, zone);
             if (live &&
-                !shouldRecreateWorkerDomainAttachment(live.zoneId, desiredZoneId)) {
+                !shouldRecreateWorkerDomainAttachment(live.zoneId, desiredZoneId) &&
+                live.previewsEnabled === (previewsEnabled === true)) {
                 return {
                     hostname: live.hostname,
                     id: live.id,
@@ -1003,6 +1064,11 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                 hostname,
                 service: scriptName,
                 zoneId,
+                // Private-beta field — only send it when the user opted
+                // into custom-domain Previews. Omitting it keeps the
+                // public PUT /workers/domains body unchanged for everyone
+                // else.
+                ...(previewsEnabled === true ? { previewsEnabled: true } : {}),
             })
                 .pipe(Effect.retry({
                 while: (error) => error._tag === "WorkerNotFound",
@@ -1511,9 +1577,10 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
         // Handle string path or AssetsProps
         return yield* readAssets(typeof assets === "string" ? { directory: assets } : assets);
     });
-    const prepareBundle = (id, props) => (isPythonMain(props.main)
+    const prepareBundle = (id, fqn, props) => (isPythonMain(props.main)
         ? readPythonWorkerBundle({
             id,
+            fqn,
             main: props.main,
             compatibility: getCompatibility(props),
         })
@@ -1538,7 +1605,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                 extraOptions: props.build,
             })).pipe(Artifacts.cached("build"));
     const hashScript = (script) => Effect.sync(() => crypto.createHash("sha256").update(script).digest("hex"));
-    const viteBuild = Effect.fn(function* (props, selfUrl) {
+    const viteBuild = Effect.fn(function* (id, fqn, props, selfUrl) {
         const compatibility = getCompatibility(props);
         const Vite = yield* loadVite;
         const { clientDirectory, base, serverBundle, externalWorkspaces } = yield* Vite.viteBuild(props.vite?.rootDir, Object.fromEntries((yield* Effect.all(Object.entries(props.env ?? {}).map(Effect.fn(function* ([key, value]) {
@@ -1583,7 +1650,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
             compatibilityDate: compatibility.date,
             compatibilityFlags: compatibility.flags,
             viteEnvironments: props.vite?.viteEnvironments,
-        });
+        }, fqn);
         const [assets, bundle, input] = yield* Effect.all([
             clientDirectory
                 ? readAssets({
@@ -1617,7 +1684,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
     // needed for vite-based workers at build time — not for every Worker
     // definition at module-load time.
     const loadVite = Effect.promise(() => import("./Sources/Vite.js"));
-    const prepareAssetsAndBundle = (id, workerName, props, opts = {}) => Effect.gen(function* () {
+    const prepareAssetsAndBundle = (id, fqn, workerName, props, opts = {}) => Effect.gen(function* () {
         // External source provider (`props.source`): the provider is
         // self-contained — it supplies the bundle, optionally its own
         // assets (framework builds), and the hash slots it owns. The
@@ -1627,6 +1694,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
             const source = yield* resolveSource(props);
             const ctx = makeSourceContext({
                 id,
+                fqn,
                 workerName,
                 props,
                 compatibility: getCompatibility(props),
@@ -1663,7 +1731,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
             };
         }
         if (props.vite) {
-            return yield* viteBuild(props, opts.selfUrl);
+            return yield* viteBuild(id, fqn, props, opts.selfUrl);
         }
         // Assets-only Worker: no entry module at all. The script PUT goes
         // out with no modules and no main_module — Cloudflare's asset
@@ -1687,7 +1755,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
             opts.skipAssetsRead
                 ? Effect.succeed(undefined)
                 : prepareAssets(props.assets),
-            prepareBundle(id, props),
+            prepareBundle(id, fqn, props),
         ], { concurrency: "unbounded" });
         return {
             assets,
@@ -1737,6 +1805,34 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
             skip: effectiveHash === output?.hash?.assets,
         };
     };
+    /**
+     * Merge `Worker["Binding"].env` from active bindings into `news.env`.
+     * Stack-level `worker.bind({ env })` is how a later resource (webhook
+     * secret, etc.) attaches env without the Worker init depending on it.
+     */
+    const secretTextFromEnvValue = (value) => {
+        if (Redacted.isRedacted(value)) {
+            const inner = Redacted.value(value);
+            return typeof inner === "string" ? inner : undefined;
+        }
+        if (isRedactedMarker(value) && typeof value.value === "string") {
+            return value.value;
+        }
+        return undefined;
+    };
+    const newsWithBoundEnv = (news, bindings) => {
+        const bound = {};
+        for (const binding of bindings) {
+            if (binding.action === "delete")
+                continue;
+            if (binding.data?.env)
+                Object.assign(bound, binding.data.env);
+        }
+        const boundKeys = Object.keys(bound);
+        if (boundKeys.length === 0)
+            return { news, boundKeys };
+        return { news: { ...news, env: { ...news.env, ...bound } }, boundKeys };
+    };
     /**
      * Append the standard Alchemy runtime bindings plus the user's `env`
      * entries (routed by shape: `Redacted` → secret_text, string →
@@ -1772,14 +1868,12 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                     continue;
                 if (metadataBindings.some((b) => b.name === key))
                     continue;
-                if (Redacted.isRedacted(value)) {
-                    const unredacted = Redacted.value(value);
+                const secretText = secretTextFromEnvValue(value);
+                if (secretText !== undefined) {
                     metadataBindings.push({
                         type: "secret_text",
                         name: key,
-                        text: typeof unredacted === "string"
-                            ? unredacted
-                            : JSON.stringify(unredacted),
+                        text: secretText,
                     });
                 }
                 else if (typeof value === "string") {
@@ -1975,7 +2069,8 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
      * exactly this content, receiving exactly this traffic" — re-running
      * with changed content simply uploads the next immutable version.
      */
-    const putWorkerVersion = Effect.fn(function* (id, news, bindings, session, output) {
+    const putWorkerVersion = Effect.fn(function* (id, fqn, news, bindings, session, output) {
+        ({ news } = newsWithBoundEnv(news, bindings));
         const { accountId } = yield* yield* CloudflareEnvironment;
         const version = news.version;
         const parentName = resolveVersionParentName(version);
@@ -2006,7 +2101,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
             }));
         }
         yield* Effect.logInfo(`Cloudflare Worker version: preparing bundle for ${parentName} (from ${id})`);
-        const { assets, bundle, hash: preparedHash, } = yield* prepareAssetsAndBundle(id, parentName, news, {
+        const { assets, bundle, hash: preparedHash, } = yield* prepareAssetsAndBundle(id, fqn, parentName, news, {
             skipAssetsRead: false,
         });
         const metadataHash = yield* resolveWorkerMetadataHash({
@@ -2046,7 +2141,9 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
         }
         appendAlchemyAndEnvBindings(metadataBindings, news, accountId, parentName);
         const compatibility = getCompatibility(news);
-        yield* session.note(`Uploading version of ${parentName} ...`);
+        yield* session.note(`Uploading version of ${parentName} ...`, {
+            kind: "status",
+        });
         const created = yield* workers
             .createScriptVersion({
             accountId,
@@ -2084,7 +2181,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
         }
         let deploymentId;
         if (traffic > 0) {
-            yield* session.note(`Deploying version at ${traffic}% of ${parentName}'s traffic ...`);
+            yield* session.note(`Deploying version at ${traffic}% of ${parentName}'s traffic ...`, { kind: "status" });
             deploymentId = yield* deployVersionTraffic({
                 accountId,
                 scriptName: parentName,
@@ -2140,7 +2237,9 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                             `Give the parent a \`domain\` or zone \`routes\`, or pass the parent as a Worker resource so its routes are visible here.`,
                     }));
                 }
-                yield* session.note("Reconciling version-affinity rules ...");
+                yield* session.note("Reconciling version-affinity rules ...", {
+                    kind: "status",
+                });
             }
             const placed = yield* reconcileAffinityRules({
                 scriptName: parentName,
@@ -2186,7 +2285,254 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
             hash,
         };
     });
-    const putWorker = Effect.fn(function* (id, news, bindings, olds, output, session, existingSettings) {
+    /**
+     * Reconcile a *Preview Worker*: create/update a first-class Preview of
+     * the parent script and upload this Worker's code + bindings as a
+     * Preview deployment. Isolated same-Worker Durable Object classes
+     * get their own namespace per Preview.
+     */
+    const putWorkerPreview = Effect.fn(function* (id, fqn, news, bindings, session, output) {
+        const { accountId } = yield* yield* CloudflareEnvironment;
+        const preview = news.preview;
+        const parentName = resolvePreviewParentName(preview);
+        if (parentName === undefined) {
+            return yield* Effect.fail(new WorkerPreviewConfigError({
+                message: `preview.of did not resolve to a Worker script name. Pass a Worker (e.g. \`yield* Cloudflare.Worker.ref(id, { stage })\`) or a literal script name.`,
+            }));
+        }
+        if (news.version !== undefined) {
+            return yield* Effect.fail(new WorkerPreviewConfigError({
+                message: `preview and version cannot be set together. Use preview.of for branch/PR Previews; use version.parent / version.traffic for canaries and gradual rollouts.`,
+            }));
+        }
+        const forbidden = [
+            ["name", news.name],
+            ["namespace", news.namespace],
+            ["crons", news.crons],
+            ["tailConsumers", news.tailConsumers],
+            ["streamingTailConsumers", news.streamingTailConsumers],
+            ["domain", news.domain],
+            ["routes", news.routes],
+            ["workersDev", news.workersDev],
+            ["access", news.access],
+        ].flatMap(([key, value]) => (value !== undefined ? [key] : []));
+        if (forbidden.length > 0) {
+            return yield* Effect.fail(new WorkerPreviewConfigError({
+                message: `preview.of creates a Preview of '${parentName}' — script-level settings belong to the parent Worker and cannot be set here: ${forbidden.join(", ")}. ` +
+                    `Remove ${forbidden.length === 1 ? "this prop" : "these props"} or configure ${forbidden.length === 1 ? "it" : "them"} on the parent.`,
+            }));
+        }
+        const cronBindings = getCronBindings(bindings);
+        if (cronBindings.length > 0) {
+            return yield* Effect.fail(new WorkerPreviewConfigError({
+                message: `Cron Triggers are script-level settings and cannot be registered from a Preview of '${parentName}'. Configure crons on the parent Worker.`,
+            }));
+        }
+        const budget = 63 - parentName.length - 1;
+        const userName = preview.name;
+        let previewName;
+        if (userName !== undefined) {
+            if (!/^[a-z][a-z0-9-]*$/.test(userName)) {
+                return yield* Effect.fail(new WorkerPreviewConfigError({
+                    message: `preview.name '${userName}' is invalid: names must start with a lowercase letter and contain only lowercase letters, digits, and dashes.`,
+                }));
+            }
+            if (userName.length > budget) {
+                return yield* Effect.fail(new WorkerPreviewConfigError({
+                    message: `preview.name '${userName}' is too long: '<name>-${parentName}' must fit in a 63-character DNS label, leaving ${Math.max(budget, 0)} characters for the name.`,
+                }));
+            }
+            previewName = userName;
+        }
+        else if (budget < 4) {
+            return yield* Effect.fail(new WorkerPreviewConfigError({
+                message: `Cannot derive a Preview name: '<name>-${parentName}' must fit in a 63-character DNS label. Set preview.name to a short value or shorten the parent's name.`,
+            }));
+        }
+        else {
+            const readable = stack.stage
+                .toLowerCase()
+                .replace(/[^a-z0-9-]+/g, "-")
+                .replace(/^-+|-+$/g, "");
+            const derived = (readable.length > 0 ? readable : `p${id}`)
+                .slice(0, budget)
+                .replace(/-+$/, "");
+            previewName = /^[a-z]/.test(derived)
+                ? derived
+                : `p${derived}`.slice(0, budget);
+        }
+        yield* Effect.logInfo(`Cloudflare Worker Preview: ${previewName} of ${parentName} (from ${id})`);
+        const existingPreview = yield* workers
+            .getPreview({
+            accountId,
+            workerId: parentName,
+            previewId: previewName,
+        })
+            .pipe(Effect.catchTag("PreviewNotFound", () => Effect.succeed(undefined)), Effect.catchTag("WorkerNotFound", () => Effect.fail(new WorkerPreviewConfigError({
+            message: `preview.of script '${parentName}' does not exist. Deploy the parent Worker first (or check the referenced stage/stack).`,
+        }))));
+        const previewResource = existingPreview ??
+            (yield* workers
+                .createPreview({
+                accountId,
+                workerId: parentName,
+                name: previewName,
+                ignoreBaseConfig: true,
+            })
+                .pipe(Effect.catchTag("WorkerNotFound", () => Effect.fail(new WorkerPreviewConfigError({
+                message: `preview.of script '${parentName}' does not exist. Deploy the parent Worker first (or check the referenced stage/stack).`,
+            })))));
+        const accountSubdomain = yield* getAccountSubdomain(accountId);
+        const parentAttrs = typeof preview.of === "object" && preview.of !== null
+            ? preview.of
+            : undefined;
+        const parentDomainName = parentAttrs?.domain?.name;
+        const parentDomainPreviews = parentAttrs?.domain?.previews === true;
+        const constructedUrls = [
+            ...(parentDomainPreviews && parentDomainName
+                ? [`https://${previewResource.slug}.${parentDomainName}`]
+                : []),
+            `https://${previewResource.slug}-${parentName}.${accountSubdomain}.workers.dev`,
+        ];
+        const stableUrl = previewResource.urls?.[0] ?? constructedUrls[0];
+        const selfUrl = hasSelfUrlBinding(bindings) ? stableUrl : undefined;
+        yield* Effect.logInfo(`Cloudflare Worker Preview: preparing bundle for ${parentName} (preview ${previewName})`);
+        const { assets, bundle, hash: preparedHash, } = yield* prepareAssetsAndBundle(id, fqn, parentName, news, {
+            skipAssetsRead: false,
+        });
+        const metadataHash = yield* resolveWorkerMetadataHash({
+            props: news,
+            bindings,
+            accountId,
+            stack: { name: stack.name, stage: stack.stage },
+            selfUrl,
+        });
+        const hash = {
+            ...preparedHash,
+            metadata: metadataHash,
+        };
+        const metadataBindings = bindings.flatMap((b) => (b.data.bindings ?? []).map((item) => item.type === "self_url"
+            ? { type: "plain_text", name: item.name, text: selfUrl }
+            : item.type === "self_service"
+                ? {
+                    type: "service",
+                    name: item.name,
+                    service: parentName,
+                }
+                : item));
+        let metadataAssets;
+        if (assets) {
+            yield* Effect.logInfo(`Cloudflare Worker Preview: uploading assets for ${parentName}`);
+            const { jwt } = yield* uploadAssets(accountId, parentName, assets, session);
+            metadataAssets = {
+                jwt,
+                config: mergeAssetsConfigFiles(assets.config, assets),
+            };
+            metadataBindings.push({ type: "assets", name: "ASSETS" });
+        }
+        appendAlchemyAndEnvBindings(metadataBindings, news, accountId, parentName);
+        const hostedClasses = getDurableObjectBindings(bindings, parentName);
+        const classNames = [...new Set(hostedClasses.map((c) => c.className))];
+        let migrations = undefined;
+        if (classNames.length > 0) {
+            const latest = yield* workers
+                .getPreviewDeployment({
+                accountId,
+                workerId: parentName,
+                previewId: previewResource.id,
+                deploymentId: "latest",
+            })
+                .pipe(Effect.catchTag(["PreviewNotFound", "PreviewDeploymentNotFound"], () => Effect.succeed(undefined)));
+            const oldTag = latest?.migrationTag ?? undefined;
+            const previous = output?.previewDoClasses ?? [];
+            if (oldTag === undefined) {
+                migrations = {
+                    new_tag: "alchemy:v1",
+                    new_sqlite_classes: classNames,
+                };
+            }
+            else {
+                const added = classNames.filter((c) => !previous.includes(c));
+                const deleted = previous.filter((c) => !classNames.includes(c));
+                if (added.length > 0 || deleted.length > 0) {
+                    migrations = {
+                        old_tag: oldTag,
+                        new_tag: bumpMigrationTagVersion(oldTag) ?? "alchemy:v1",
+                        ...(added.length > 0 ? { new_sqlite_classes: added } : {}),
+                        ...(deleted.length > 0 ? { deleted_classes: deleted } : {}),
+                    };
+                }
+            }
+        }
+        const compatibility = getCompatibility(news);
+        const annotations = preview.message !== undefined || preview.tag !== undefined
+            ? {
+                ...(preview.message !== undefined
+                    ? { "workers/message": preview.message }
+                    : {}),
+                ...(preview.tag !== undefined
+                    ? { "workers/tag": preview.tag }
+                    : {}),
+            }
+            : undefined;
+        yield* session.note(`Uploading Preview ${previewName} of ${parentName} ...`, {
+            kind: "status",
+        });
+        const deployment = yield* workers.createPreviewDeployment({
+            accountId,
+            workerId: parentName,
+            previewId: previewResource.id,
+            metadata: {
+                mainModule: bundle.main,
+                assets: metadataAssets,
+                compatibilityDate: compatibility.date,
+                compatibilityFlags: compatibility.flags,
+                cacheOptions: news.cache ?? getCacheBinding(bindings),
+                annotations,
+                migrations,
+                env: bindingsToPreviewEnv(metadataBindings),
+            },
+            files: bundle.files,
+        });
+        const refreshed = yield* workers
+            .getPreview({
+            accountId,
+            workerId: parentName,
+            previewId: previewResource.id,
+        })
+            .pipe(Effect.catchTag("PreviewNotFound", () => Effect.succeed(previewResource)));
+        const urls = [
+            ...new Set([
+                ...(refreshed.urls ?? []),
+                ...constructedUrls,
+                ...(deployment.urls ?? []),
+            ]),
+        ];
+        return {
+            workerId: cachedWorkerId(output?.workerId, parentName) ??
+                (yield* findWorkerId(accountId, parentName)),
+            workerName: parentName,
+            namespace: undefined,
+            logpush: undefined,
+            url: urls[0],
+            urls,
+            domain: undefined,
+            tags: undefined,
+            durableObjectNamespaces: {},
+            accountId,
+            routes: [],
+            crons: [],
+            previewOf: parentName,
+            previewId: previewResource.id,
+            previewName,
+            previewSlug: previewResource.slug,
+            previewDoClasses: classNames.length > 0 ? classNames : undefined,
+            deploymentId: deployment.id,
+            hash,
+        };
+    });
+    const putWorker = Effect.fn(function* (id, fqn, news, bindings, olds, output, session, existingSettings) {
+        news = newsWithBoundEnv(news, bindings).news;
         const { accountId } = yield* yield* CloudflareEnvironment;
         // Prefer the deployed name: regenerating would target a different
         // script if the generator's output for this id ever drifts.
@@ -2219,7 +2565,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
         // has bound to this script. The disk read is the expensive
         // part; the script PUT happens either way.
         const prebuiltAssets = normalizePrebuiltAssets(news.assets, output);
-        const { assets, bundle, hash: preparedHash, } = yield* prepareAssetsAndBundle(id, name, news, {
+        const { assets, bundle, hash: preparedHash, } = yield* prepareAssetsAndBundle(id, fqn, name, news, {
             skipAssetsRead: prebuiltAssets?.skip,
             selfUrl,
         });
@@ -2334,7 +2680,9 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
         const sizeKB = size / 1024;
         const sizeMB = sizeKB / 1024;
         const bundleSize = `${sizeKB > 1024 ? `${sizeMB.toFixed(2)} MB` : `${sizeKB.toFixed(2)} KB`}`;
-        yield* session.note(`Uploading worker (${bundleSize}) ...`);
+        yield* session.note(`Uploading worker (${bundleSize}) ...`, {
+            kind: "status",
+        });
         // Read existing worker settings for migration tracking
         const oldSettings = existingSettings ??
             (yield* workers
@@ -2586,13 +2934,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
             logpush: news.logpush,
             mainModule: bundle.main,
             migrations,
-            observability: news.observability ?? {
-                enabled: true,
-                logs: {
-                    enabled: true,
-                    invocationLogs: true,
-                },
-            },
+            observability: resolveObservability(news, bindings),
             placement: news.placement,
             tags: metadataTags,
             tailConsumers,
@@ -2628,7 +2970,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                     message: `This deploy of '${name}' changes Durable Object classes (${migratedClasses.join(", ")}), which requires a migration — migrations cannot ride a gradual rollout. Deploy at 100% (remove version.traffic) first, then resume gradual rollouts.`,
                 }));
             }
-            yield* session.note(`Uploading version of ${name} (${bundleSize}) ...`);
+            yield* session.note(`Uploading version of ${name} (${bundleSize}) ...`, { kind: "status" });
             const created = yield* workers
                 .createScriptVersion({
                 accountId,
@@ -2664,7 +3006,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                 }));
             }
             if (rolloutTraffic > 0) {
-                yield* session.note(`Deploying version at ${rolloutTraffic}% of traffic ...`);
+                yield* session.note(`Deploying version at ${rolloutTraffic}% of traffic ...`, { kind: "status" });
                 deploymentId = yield* deployVersionTraffic({
                     accountId,
                     scriptName: name,
@@ -2772,7 +3114,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
         })));
         if (workersDev.enabled !== observedSubdomain.enabled ||
             workersDev.previewsEnabled !== observedSubdomain.previewsEnabled) {
-            yield* session.note(`${workersDev.enabled || workersDev.previewsEnabled ? "Enabling" : "Disabling"} workers.dev subdomain...`);
+            yield* session.note(`${workersDev.enabled || workersDev.previewsEnabled ? "Enabling" : "Disabling"} workers.dev subdomain...`, { kind: "status" });
             // Cloudflare's script registry is eventually consistent — for the
             // first few hundred ms after `putScript` returns, POST /subdomain
             // can still get back `WorkerNotFound` (a generic "unknown error"
@@ -2835,7 +3177,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                     ...domainConfig.redirects,
                 ]
                 : [];
-            yield* session.note(`Reconciling custom domains (${desiredHostnames.length}) ...`);
+            yield* session.note(`Reconciling custom domains (${desiredHostnames.length}) ...`, { kind: "status" });
             // Capture hostname → zone for *currently attached* domains before
             // reconcile detaches removed ones — a removed redirect hostname's
             // zone is otherwise unresolvable and its rule couldn't be cleaned.
@@ -2844,7 +3186,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                 .pipe(Effect.map((r) => (r.result ?? []).flatMap((d) => d.hostname && d.zoneId
                 ? [[d.hostname, d.zoneId]]
                 : [])), Effect.catch(() => Effect.succeed([])));
-            const reconciled = yield* reconcileDomains(name, desiredHostnames, domainConfig?.zone);
+            const reconciled = yield* reconcileDomains(name, desiredHostnames, domainConfig?.zone, domainConfig?.previews);
             const zoneIdByHostname = new Map([
                 ...liveBeforeReconcile,
                 ...reconciled.map((d) => [d.hostname, d.zoneId]),
@@ -2867,7 +3209,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
         const desiredRoutes = yield* normalizeRoutes(news.routes);
         const previousRoutes = output?.routes ?? [];
         if (desiredRoutes.length > 0 || previousRoutes.length > 0) {
-            yield* session.note(`Reconciling worker routes (${desiredRoutes.length}) ...`);
+            yield* session.note(`Reconciling worker routes (${desiredRoutes.length}) ...`, { kind: "status" });
         }
         const routes = yield* reconcileRoutes(name, desiredRoutes, previousRoutes);
         // Version-affinity transform rules (`version.affinity`): pin each
@@ -2916,7 +3258,9 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                             `On the bare workers.dev URL, clients must send the header themselves.`,
                     }));
                 }
-                yield* session.note("Reconciling version-affinity rules ...");
+                yield* session.note("Reconciling version-affinity rules ...", {
+                    kind: "status",
+                });
             }
             const placed = yield* reconcileAffinityRules({
                 scriptName: name,
@@ -3009,7 +3353,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
         const read = yield* prepareAssets(assets).pipe(Effect.catchTag(["PlatformError", "AssetTooLargeError", "TooManyAssetsError"], () => Effect.succeed(undefined)));
         return read === undefined || read.hash !== output.hash?.assets;
     });
-    const hasChanged = Effect.fn(function* (id, props, output, bindings, accountId) {
+    const hasChanged = Effect.fn(function* (id, fqn, props, output, bindings, accountId) {
         // #745: metadata-only edits (compatibility, observability, placement,
         // limits, logpush, env literals, bindings, subdomain config, tags)
         // don't touch the bundle/vite/asset-content hashes below, so compare a
@@ -3024,15 +3368,20 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
             const versionParent = props.version?.parent != null
                 ? (resolveVersionParentName(props.version) ?? output.versionOf)
                 : undefined;
+            const previewParent = props.preview?.of != null
+                ? (resolvePreviewParentName(props.preview) ?? output.previewOf)
+                : undefined;
             const selfUrl = hasSelfUrlBinding(bindings)
-                ? versionParent !== undefined
-                    ? yield* Effect.gen(function* () {
-                        const alias = yield* resolveVersionAlias(id, props, versionParent);
-                        return alias !== undefined
-                            ? `https://${alias}-${versionParent}.${yield* getAccountSubdomain(accountId)}.workers.dev`
-                            : undefined;
-                    })
-                    : yield* resolveSelfUrl(output.workerName, props, accountId)
+                ? previewParent !== undefined
+                    ? output.url
+                    : versionParent !== undefined
+                        ? yield* Effect.gen(function* () {
+                            const alias = yield* resolveVersionAlias(id, props, versionParent);
+                            return alias !== undefined
+                                ? `https://${alias}-${versionParent}.${yield* getAccountSubdomain(accountId)}.workers.dev`
+                                : undefined;
+                        })
+                        : yield* resolveSelfUrl(output.workerName, props, accountId)
                 : undefined;
             const metadataHash = yield* resolveWorkerMetadataHash({
                 props,
@@ -3053,6 +3402,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
             const source = yield* resolveSource(props);
             const slots = yield* source.hash(makeSourceContext({
                 id,
+                fqn,
                 workerName: output.workerName,
                 props,
                 compatibility: getCompatibility(props),
@@ -3105,7 +3455,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
             }
             return yield* assetsChanged(props.assets, output);
         }
-        const bundleHash = yield* prepareBundle(id, props).pipe(Effect.map((b) => b.hash));
+        const bundleHash = yield* prepareBundle(id, fqn, props).pipe(Effect.map((b) => b.hash));
         if (bundleHash !== output.hash?.bundle) {
             return true;
         }
@@ -3158,7 +3508,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                 ]
                 : []))));
         }),
-        diff: Effect.fn(function* ({ id, news: desired, olds, output, newBindings, }) {
+        diff: Effect.fn(function* ({ id, fqn, news: desired, olds, output, newBindings, }) {
             const { accountId } = yield* yield* CloudflareEnvironment;
             // Effect-valued `env` entries (tagged Worker classes / resource
             // Effects — the circular-bindings pattern) never resolve at plan
@@ -3183,9 +3533,9 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
             if (newNamespace !== oldNamespace) {
                 return { action: "replace" };
             }
-            // A version worker (version.parent) and a script-owning Worker are
-            // distinct cloud resources, and a version belongs to exactly one
-            // parent script — switching mode or parent is a replacement.
+            // A version worker (version.parent), a Preview Worker
+            // (preview.of), and a script-owning Worker are distinct cloud
+            // resources — switching mode or parent is a replacement.
             const newIsVersion = news.version?.parent != null;
             const oldIsVersion = output?.versionOf !== undefined || olds?.version?.parent != null;
             if (newIsVersion !== oldIsVersion) {
@@ -3200,6 +3550,20 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                     return { action: "replace" };
                 }
             }
+            const newIsPreview = news.preview?.of != null;
+            const oldIsPreview = output?.previewOf !== undefined || olds?.preview?.of != null;
+            if (newIsPreview !== oldIsPreview) {
+                return { action: "replace" };
+            }
+            if (newIsPreview) {
+                const newParent = resolvePreviewParentName(news.preview);
+                const oldParent = output?.previewOf ?? resolvePreviewParentName(olds?.preview);
+                if (newParent !== undefined &&
+                    oldParent !== undefined &&
+                    newParent !== oldParent) {
+                    return { action: "replace" };
+                }
+            }
             const oldWorkerName = output?.workerName ?? (yield* createWorkerName(id, olds?.name));
             // Auto-generated names are engine-owned: the deployed name stays
             // authoritative even if the generator would name this id
@@ -3225,6 +3589,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                     d.aliases,
                     [...d.redirects].sort(),
                     d.zone ?? null,
+                    d.previews === true,
                 ]);
             // An omitted `domain` unmanages the surface (#942): reconcile
             // carries previously-observed custom domains forward in state, so
@@ -3301,7 +3666,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                 domainsChanged ||
                 routesChanged ||
                 cronsChanged ||
-                (yield* hasChanged(id, news, output, Array.isArray(newBindings)
+                (yield* hasChanged(id, fqn, news, output, Array.isArray(newBindings)
                     ? newBindings
                     : undefined, accountId))) {
                 // The immutable script ID is always stable across an update —
@@ -3359,6 +3724,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
         }),
         precreate: Effect.fn(function* ({ id, news, session, bindings }) {
             const { accountId } = yield* yield* CloudflareEnvironment;
+            yield* assertCloudflareTelemetryCompatibility(news, bindings);
             const name = yield* createWorkerName(id, news.name);
             // A version worker uploads to its parent's script during
             // reconcile; pre-creating a placeholder script under this
@@ -3367,8 +3733,8 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
             // no placeholder is needed for circular bindings either. (`news`
             // is raw here — `version.parent` may be an unresolved ref, but its
             // *presence* is statically known.)
-            if (news.version?.parent != null) {
-                yield* Effect.logInfo(`Cloudflare Worker precreate: skipping stub for version worker ${id}`);
+            if (news.version?.parent != null || news.preview?.of != null) {
+                yield* Effect.logInfo(`Cloudflare Worker precreate: skipping stub for ${news.preview?.of != null ? "Preview" : "version"} worker ${id}`);
                 return {
                     // Provisional: a version worker resolves its parent's
                     // immutable ID at reconcile — nothing observes this stub row
@@ -3470,7 +3836,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                 yield* Effect.logInfo(`Cloudflare Worker precreate: reusing existing ${name}`);
             }
             else {
-                yield* session.note("Pre-creating worker...");
+                yield* session.note("Pre-creating worker...", { kind: "status" });
                 const compatibility = getCompatibility(news);
                 const mainModule = "main.js";
                 const placeholderScript = `${doClasses.length > 0 ? 'import { DurableObject } from "cloudflare:workers";\n\n' : ""}export default { fetch() { return new Response("Alchemy worker is being deployed...") } };\n${doClasses
@@ -3506,13 +3872,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                                 newSqliteClasses: doClasses,
                             }
                             : undefined,
-                        observability: news.observability ?? {
-                            enabled: true,
-                            logs: {
-                                enabled: true,
-                                invocationLogs: true,
-                            },
-                        },
+                        observability: resolveObservability(news, bindings),
                         tags,
                     },
                     files: [
@@ -3545,6 +3905,19 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                 ({ durableObjectNamespaces } =
                     yield* getWorkerSettingsWithDurableObjects(name, doClasses, dispatchNamespace));
             }
+            /**
+             * Precreate publishes the stable `https://{name}.{subdomain}.workers.dev`
+             * URL when `workersDev` is enabled (the default). Cycle peers that
+             * interpolate `worker.url` (e.g. Stripe.WebhookEndpoint) need a
+             * valid HTTPS URL here — the previous `url: undefined` stub made
+             * Stripe reject `"undefined/webhooks/stripe"`. Custom domains and
+             * version/preview URLs are still unresolved; reconcile overwrites
+             * `url` with the final value. `workersDev: false` keeps `url`
+             * undefined.
+             */
+            const workersDevUrl = resolveWorkersDev(news.workersDev).enabled
+                ? `https://${name}.${yield* getAccountSubdomain(accountId)}.workers.dev`
+                : undefined;
             return {
                 // The placeholder upload's tag (or, when adopting an existing
                 // script, the listing lookup); reconcile re-records it after
@@ -3553,11 +3926,11 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                 workerName: name,
                 namespace: dispatchNamespace,
                 logpush: existingSettings?.logpush ?? undefined,
-                url: undefined,
+                url: workersDevUrl,
                 tags: existingSettings?.tags ?? tags,
                 durableObjectNamespaces,
                 accountId,
-                urls: [],
+                urls: workersDevUrl !== undefined ? [workersDevUrl] : [],
                 domain: undefined,
                 routes: [],
                 crons: [],
@@ -3586,6 +3959,18 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                 })
                     .pipe(Effect.map(() => output), Effect.catchTag(["WorkerNotFound", "VersionNotFound"], () => Effect.succeed(undefined)));
             }
+            if (output?.previewOf !== undefined || olds?.preview?.of != null) {
+                if (output?.previewOf === undefined || !output.previewId) {
+                    return undefined;
+                }
+                return yield* workers
+                    .getPreview({
+                    accountId,
+                    workerId: output.previewOf,
+                    previewId: output.previewId,
+                })
+                    .pipe(Effect.map(() => output), Effect.catchTag(["WorkerNotFound", "PreviewNotFound"], () => Effect.succeed(undefined)));
+            }
             const workerName = output?.workerName ?? (yield* createWorkerName(id, olds?.name));
             const dispatchNamespace = output?.namespace ?? resolveNamespaceName(olds?.namespace);
             yield* Effect.logInfo(`Cloudflare Worker read: checking ${workerName}`);
@@ -3630,6 +4015,9 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                     // `streaming_tail_consumers` field. Carry the last deployed
                     // value forward like other provider-managed caches.
                     streamingTailConsumers: output?.streamingTailConsumers,
+                    // The bundle hash is computed locally during deployment and
+                    // cannot be reconstructed from Cloudflare's read APIs.
+                    hash: output?.hash,
                 };
                 return hasAlchemyWorkerTags(id, settings.tags ?? [])
                     ? attrs
@@ -3746,6 +4134,9 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                 // `streaming_tail_consumers` field. Carry the last deployed
                 // value forward like other provider-managed caches.
                 streamingTailConsumers: output?.streamingTailConsumers,
+                // The bundle hash is computed locally during deployment and
+                // cannot be reconstructed from Cloudflare's read APIs.
+                hash: output?.hash,
                 // Rule placement is provider-managed state, not observed here
                 // (a getPhas call per known zone on every read); carry the
                 // cleanup list forward like any other stable cache.
@@ -3766,12 +4157,21 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
         // The dispatch-namespace endpoints report the same conditions as
         // `DispatchNamespaceScriptNotFound` / `DispatchNamespaceNotFound`.
         Effect.catchTag("WorkerNotFound", () => Effect.succeed(undefined)), Effect.catchTag("WorkerHasNoVersions", () => Effect.succeed(undefined)), Effect.catchTag("DispatchNamespaceScriptNotFound", () => Effect.succeed(undefined)), Effect.catchTag("DispatchNamespaceNotFound", () => Effect.succeed(undefined)))),
-        reconcile: Effect.fn(function* ({ id, news, olds, bindings, output, session, }) {
+        reconcile: Effect.fn(function* ({ id, fqn, news, olds, bindings, output, session, }) {
+            yield* assertCloudflareTelemetryCompatibility(news, bindings);
+            if (news.preview?.of != null && news.version?.parent != null) {
+                return yield* Effect.fail(new WorkerPreviewConfigError({
+                    message: `preview and version cannot be set together. Use preview.of for branch/PR Previews; use version.parent / version.traffic for canaries and gradual rollouts.`,
+                }));
+            }
             // A version worker uploads an immutable version to its parent's
             // script instead of owning a script of its own — none of the
             // script-level observation below applies.
             if (news.version?.parent != null) {
-                return yield* putWorkerVersion(id, news, bindings, session, output);
+                return yield* putWorkerVersion(id, fqn, news, bindings, session, output);
+            }
+            if (news.preview?.of != null) {
+                return yield* putWorkerPreview(id, fqn, news, bindings, session, output);
             }
             const { accountId } = yield* yield* CloudflareEnvironment;
             const name = output?.workerName ?? (yield* createWorkerName(id, news.name));
@@ -3797,7 +4197,7 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
             Effect.catchTag("WorkerNotFound", () => Effect.succeed(undefined)), Effect.catchTag("WorkerHasNoVersions", () => Effect.succeed(undefined)), Effect.catchTag("DispatchNamespaceScriptNotFound", () => Effect.succeed(undefined)), Effect.catchTag("DispatchNamespaceNotFound", () => Effect.succeed(undefined)));
             yield* Effect.logInfo(`Cloudflare Worker reconcile: existing durable object tags ${JSON.stringify((existingSettings?.tags ?? []).filter(isDurableObjectTag))}`);
             yield* Effect.logInfo(`Cloudflare Worker reconcile: previous durable object tags ${JSON.stringify((output?.tags ?? []).filter(isDurableObjectTag))}`);
-            return yield* putWorker(id, news, bindings, olds, output, session, existingSettings);
+            return yield* putWorker(id, fqn, news, bindings, olds, output, session, existingSettings);
         }),
         delete: Effect.fn(function* ({ output }) {
             // Version workers own a version, not the script — `workerName` is
@@ -3854,6 +4254,20 @@ export const LiveWorkerProvider = () => Provider.effect(Worker, Effect.gen(funct
                     .pipe(Effect.catchTag("WorkerNotFound", () => Effect.void));
                 return;
             }
+            if (output.previewOf !== undefined) {
+                const previewId = output.previewId ?? output.previewName;
+                if (!previewId)
+                    return;
+                yield* Effect.logInfo(`Cloudflare Worker delete: deleting Preview ${previewId} of ${output.previewOf}`);
+                yield* workers
+                    .deletePreview({
+                    accountId: output.accountId,
+                    workerId: output.previewOf,
+                    previewId,
+                })
+                    .pipe(Effect.catchTag(["PreviewNotFound", "WorkerNotFound"], () => Effect.void));
+                return;
+            }
             yield* Effect.logInfo(`Cloudflare Worker delete: deleting ${output.workerName}`);
             // Workers for Platforms user workers have no custom domains; delete
             // the script straight out of its dispatch namespace.