Worker environment
ready- Evidence
- production
- Fix
- Set ENVIRONMENT in wrangler.toml.
- Command
npm run verify:readiness -- --strict- Docs
- docs/PROVISIONING_RUNBOOK.md#strict-readiness
Provisioning readiness
Strict-readiness troubleshooting for Supabase, R2, Stripe, admin, and entitlement configuration. This page mirrors the provider checks that must pass before deploy and live smoke.
strict verification pending2ready
14missing
16checks
nostrict-ready
Runtime Bindings
R2 bucket binding
ready- Evidence
- BUCKET bound
- Fix
- Bind BUCKET to the syntha-audio R2 bucket.
- Command
wrangler r2 bucket create syntha-audio- Docs
- docs/PROVISIONING_RUNBOOK.md#cloudflare
Environment Secrets
Admin write token
missing- Evidence
- missing
- Fix
- Set ADMIN_TOKEN before enabling guarded upload, moderation, payout, and compliance writes.
- Command
wrangler secret put ADMIN_TOKEN- Docs
- docs/PROVISIONING_RUNBOOK.md#worker-secrets
Supabase project URL
missing- Evidence
- missing
- Fix
- Create the Supabase project, apply migrations, then set SUPABASE_URL.
- Command
wrangler secret put SUPABASE_URL- Docs
- docs/PROVISIONING_RUNBOOK.md#worker-secrets
Supabase anon read key
missing- Evidence
- missing
- Fix
- Set SUPABASE_ANON_KEY so the public catalog can use Supabase instead of seed fallback.
- Command
wrangler secret put SUPABASE_ANON_KEY- Docs
- docs/PROVISIONING_RUNBOOK.md#worker-secrets
Supabase service-role write key
missing- Evidence
- missing
- Fix
- Set SUPABASE_SERVICE_ROLE_KEY for admin persistence, ledger, takedown, and analytics writes.
- Command
wrangler secret put SUPABASE_SERVICE_ROLE_KEY- Docs
- docs/PROVISIONING_RUNBOOK.md#worker-secrets
Public stream base URL
missing- Evidence
- missing
- Fix
- Set PUBLIC_STREAM_BASE_URL after the public stream object path is provisioned.
- Command
wrangler secret put PUBLIC_STREAM_BASE_URL- Docs
- docs/PROVISIONING_RUNBOOK.md#worker-secrets
Stripe secret key
missing- Evidence
- missing
- Fix
- Set STRIPE_SECRET_KEY from Stripe test mode before checkout verification.
- Command
wrangler secret put STRIPE_SECRET_KEY- Docs
- docs/PROVISIONING_RUNBOOK.md#worker-secrets
Stripe webhook signing secret
missing- Evidence
- missing
- Fix
- Create the /api/stripe/webhook endpoint in Stripe test mode and set STRIPE_WEBHOOK_SECRET.
- Command
wrangler secret put STRIPE_WEBHOOK_SECRET- Docs
- docs/PROVISIONING_RUNBOOK.md#worker-secrets
Stripe support price
missing- Evidence
- missing
- Fix
- Create the support price in Stripe test mode and set STRIPE_SUPPORT_PRICE_ID.
- Command
wrangler secret put STRIPE_SUPPORT_PRICE_ID- Docs
- docs/PROVISIONING_RUNBOOK.md#worker-secrets
Stripe download price
missing- Evidence
- missing
- Fix
- Create the download price in Stripe test mode and set STRIPE_DOWNLOAD_PRICE_ID.
- Command
wrangler secret put STRIPE_DOWNLOAD_PRICE_ID- Docs
- docs/PROVISIONING_RUNBOOK.md#worker-secrets
Download/upload token secret
missing- Evidence
- missing
- Fix
- Set DOWNLOAD_TOKEN_SECRET so upload and download entitlement URLs are short-lived and signed.
- Command
wrangler secret put DOWNLOAD_TOKEN_SECRET- Docs
- docs/PROVISIONING_RUNBOOK.md#worker-secrets
Live Verification Gates
Supabase catalog read path
missing- Evidence
- seed fallback active
- Fix
- Apply migrations, seed the catalog, set SUPABASE_URL and SUPABASE_ANON_KEY, then run strict readiness.
- Command
supabase db push- Docs
- docs/PROVISIONING_RUNBOOK.md#supabase
Admin persistence path
missing- Evidence
- setup-required responses expected
- Fix
- Set ADMIN_TOKEN, SUPABASE_URL, and SUPABASE_SERVICE_ROLE_KEY before live admin write verification.
- Command
npm run verify:live -- --strict- Docs
- docs/PROVISIONING_RUNBOOK.md#live-smoke-tests
Stripe checkout and webhook path
missing- Evidence
- checkout/webhook not fully configured
- Fix
- Set Stripe test-mode secret, webhook secret, support price, and download price before live checkout verification.
- Command
npm run verify:live -- --strict- Docs
- docs/PROVISIONING_RUNBOOK.md#stripe
R2 stream, upload, and download path
missing- Evidence
- R2 or token secret missing
- Fix
- Bind BUCKET and set DOWNLOAD_TOKEN_SECRET before upload, stream, and download object smoke tests.
- Command
npm run verify:live -- --strict- Docs
- docs/PROVISIONING_RUNBOOK.md#r2-seed-objects
Command path
npm run verify:readiness -- --strict
npm run deploy
npm run verify:live -- --strict