[Zach Dunn (zachdunn)]

In plain terms

Version URLs for the API and web workers are a second public copy of production. They use production bindings and live on workers.dev, so the uploads.sh rate limits and WAF never see them. This turns those URLs off. Auth already sends its Version URLs through Cloudflare Access, so that worker stays as it is.

What it does / what it is not

• Sets preview_urls to false on uploads-api and uploads-web.
• Updates the previews doc so it no longer tells you to mint a Version URL for those workers.
• Leaves uploads-auth on preview_urls: true.
• Does not deploy. Existing Version URLs keep routing until the next production deploy of each worker. Cloudflare then stops routing them.
• Does not change npx wrangler preview. That path still uses the separate preview tier.

How to try it

After this merges, the next production deploy of uploads-api and uploads-web is what turns the URLs off. Until then, a current API Version URL still answers GET /health.

Technical notes

There is no standing staging environment. A Version URL is the uploaded version with that worker's production bindings. The zone WAF is attached to uploads.sh, not to *.workers.dev.

Test plan

• preview_urls is false in apps/api/wrangler.jsonc and apps/web/wrangler.jsonc
• apps/auth/wrangler.jsonc still has preview_urls: true
• docs/previews.md no longer includes a versions upload example for the API or web workers
• Confirm after the production deploy that an API Version URL no longer answers

[changeset-bot]

⚠️ No Changeset found

Latest commit: ac79bbc

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one): 2

• coderabbit:review
• review

🚫 Excluded labels (none allowed): 1

• wip

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: d9ad59b8-164f-423b-ab93-35cdc0e4ec37

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn