chore(dev): move local origin to local.uploadrouter.dev

[Zach Dunn (zachdunn)]

Summary

Moves the local dev origin off the shared local.buildinternet.dev zone, which other projects also use, onto the project's own uploadrouter.dev domain.

• Web origin: https://uploads.local.buildinternet.dev → https://local.uploadrouter.dev
• Worktree stacks: <branch>.local.uploadrouter.dev
• Portless names: local.uploadrouter, api. / auth. / mcp.local.uploadrouter (portless.json)
• The host constants in scripts/dev-stack-common.mjs, apps/auth/src/local-demo.ts, and apps/web/src/lib/auth-client.ts are updated together, and so are their tests.
• docs/ops.md gets a new Domains section for uploadrouter.com / uploadrouter.dev. docs/local-dev.md and CONTRIBUTING.md use the new host.

No production behavior changes. The local-demo bypass gate matches the same shape as before, with a new suffix.

Infra (already applied via the Cloudflare API)

• uploadrouter.dev: DNS-only A 127.0.0.1 for local and *.local. Both resolve publicly.
• uploadrouter.com: proxied apex + www, with a zone Single Redirect that returns 302 to https://uploads.sh (path and query kept). uploads.sh stays canonical.

After merge

• Re-register local OAuth callbacks (Google etc.) as https://local.uploadrouter.dev/api/auth/callback/<provider>.
• Retire the old uploads.local.buildinternet.dev records when nothing depends on them.

Test plan

• vitest for trusted-origins, auth-client, workspace-cache, and the auth index tests
• pnpm check
• dig resolves local.uploadrouter.dev and fix-ui.local.uploadrouter.dev to 127.0.0.1
• curl against uploadrouter.com / www returns 302 → uploads.sh

[changeset-bot]

⚠️ No Changeset found

Latest commit: 26d3cd7

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one) (2)

• coderabbit:review
• review

🚫 Excluded labels (none allowed) (1)

• wip

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 4879f46c-e1ab-4d97-8bd4-eb2d6370da2b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
✅ Deployment successful! View logs	uploads-auth	26d3cd7	Oct 08 2026, 06:37 PM

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	uploads-web	26d3cd7	Commit Preview URL Branch Preview URL	Oct 08 2026, 06:38 PM