Get your Devnet sign-in server online.

1. Create a Supabase test project

Open the Supabase dashboard and create a separate Devnet project. Use its SQL Editor to execute the provided migrations db/001_devnet_readiness.sql, then db/002_revocable_sessions.sql and db/003_invoker_only.sql in sequence.

2. Set private Cloudflare Pages secrets

Open Cloudflare → Workers & Pages → your Aero Commander Pages project → Settings → Variables and Secrets → Add. Encrypt sensitive values and apply them to Production:

• SUPABASE_URL — your Supabase project HTTPS URL
• SUPABASE_SECRET_KEY — your Supabase server secret, stored only as an encrypted Cloudflare secret
• AERO_SESSION_SECRET — a long, randomly generated value (48+ characters)
• AERO_ALLOWED_ORIGINS — your exact website origin, e.g. https://aerocommander.pages.dev

Use the **actual site URL**, without a trailing slash. If testing a preview site, add its exact origin separated by a comma.

3. Deploy the complete project with Wrangler

Cloudflare dashboard drag-and-drop does not deploy Pages Functions. Use the Wrangler CLI from the extracted project folder (containing wrangler.jsonc) and run:

npx wrangler login
npx wrangler pages project create aerocommander --production-branch=main
npx wrangler pages deploy public --project-name=aerocommander --branch=main

Set AERO_ALLOWED_ORIGINS to the exact deployed HTTPS origin, then deploy again. If the project name is unavailable, change it in wrangler.jsonc and the CLI commands.

4. Verify the backend

Open /api/devnet/health. It must return backendConfigured: true and databaseReady: true. If it does not, recheck variables and SQL migrations. Only after both are true can wallet sign-in complete.