# Vibe-Code Rescue

> Paste the error from your Lovable, Bolt, Cursor, Replit, or v0 app and get a plain-English fix for Supabase, Stripe, Vercel, and Netlify.

Plain-English repair guides for non-technical builders in the United States whose Lovable, Bolt, Cursor, Replit, or v0 apps break after deploy. Each fix says what the error means, the likely causes, the steps to fix it, how to check that it worked, and the sources.

Site: https://vibecodefixes.com/
Help: https://vibecodefixes.com/help
About: https://vibecodefixes.com/about
Privacy: https://vibecodefixes.com/privacy

## Comparisons

These pages cite vendor documentation. They do not include invented failure rates or traffic numbers.

- [Lovable vs Bolt vs Cursor: which breaks least after deploy](https://vibecodefixes.com/compare/lovable-vs-bolt-vs-cursor): No vendor publishes a post-deploy failure rate. Here is the deploy path each of Lovable, Bolt, and Cursor documents, and which errors that path leaves you with. Reviewed 2026-10-14.
- [Supabase vs Firebase for vibe coders: common production errors](https://vibecodefixes.com/compare/supabase-vs-firebase): Supabase and Firebase fail differently in production. Firestore rules reject the whole query. Supabase RLS can return an empty list with no error. Reviewed 2026-10-14.
- [Vercel vs Netlify for AI-built apps: deploy errors compared](https://vibecodefixes.com/compare/vercel-vs-netlify): Vercel and Netlify document the same two deploy failures differently: a refresh 404 on a single-page app, and env vars that never reached the browser. Reviewed 2026-10-14.

## Fixes

- [Supabase login redirects to localhost:3000 after deploy](https://vibecodefixes.com/fix/supabase-auth-redirects-to-localhost): Login or email confirm sends users to localhost:3000 on your live site? Change Supabase's Site URL and add your domain to Redirect URLs. Platforms: Supabase, Lovable, Bolt, Cursor, v0, Vercel, Netlify. Reviewed 2026-10-14.
- [Invalid API key (Supabase)](https://vibecodefixes.com/fix/supabase-invalid-api-key): Supabase says "Invalid API key" on your live site? Usually the key or project URL env var is missing, mistyped, or from another project. Platforms: Supabase, Lovable, Bolt, Cursor, v0, Vercel, Netlify. Reviewed 2026-10-14.
- [Environment variables are undefined in production](https://vibecodefixes.com/fix/env-variables-undefined-in-production): Works locally but env vars are undefined once deployed? Add them to your host, use the VITE_ or NEXT_PUBLIC_ prefix for browser code, then redeploy. Platforms: Vercel, Netlify, Lovable, Bolt, Cursor, v0, Vite, Next.js. Reviewed 2026-10-14.
- [Supabase returns an empty array [] but the table has data](https://vibecodefixes.com/fix/supabase-query-returns-empty-array-rls): Your Supabase query returns [] with no error even though rows exist? Row Level Security is on with no policy allowing the read. Platforms: Supabase, Lovable, Bolt, Cursor, v0. Reviewed 2026-10-14.
- [new row violates row-level security policy for table](https://vibecodefixes.com/fix/new-row-violates-row-level-security-policy): Saving data fails with "new row violates row-level security policy"? Add an INSERT policy with a WITH CHECK rule and send the right user_id. Platforms: Supabase, Lovable, Bolt, Cursor, v0. Reviewed 2026-10-14.
- [Webhook signature verification failed. No signatures found matching the expected signature for payload](https://vibecodefixes.com/fix/stripe-webhook-signature-verification-failed): Stripe webhook fails signature check? Usually the wrong whsec_ secret or your framework changed the raw request body. Here's the fix. Platforms: Stripe, Vercel, Next.js, Cursor, Lovable, Bolt. Reviewed 2026-10-14.
- [Stripe webhook failing: 404, 307/308 redirect, timeout or 500](https://vibecodefixes.com/fix/stripe-webhook-not-received-or-failing): Stripe shows webhook deliveries Failed with 3xx, 4xx, 5xx or timed out? Point it at the exact final URL and respond 200 fast. Platforms: Stripe, Vercel, Netlify, Next.js. Reviewed 2026-10-14.
- [Blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present](https://vibecodefixes.com/fix/cors-no-access-control-allow-origin): "Blocked by CORS policy" on your live site? The server you call must allow your domain. How to fix it for APIs you own and ones you don't. Platforms: CORS, Vercel, Netlify, Supabase, Lovable, Bolt, Cursor, v0. Reviewed 2026-10-14.
- [Supabase Edge Function CORS error: Response to preflight request doesn't pass access control check](https://vibecodefixes.com/fix/supabase-edge-function-cors-error): Calling a Supabase Edge Function from the browser fails with a CORS/preflight error? Handle OPTIONS and return corsHeaders on every response. Platforms: Supabase, Lovable, Bolt, Cursor. Reviewed 2026-10-14.
- [Vercel 404: NOT_FOUND when refreshing a page or opening a direct link](https://vibecodefixes.com/fix/vercel-404-not-found-on-page-refresh): Home page works on Vercel but refreshing /dashboard gives 404 NOT_FOUND? Add a rewrite to index.html for your single-page app. Platforms: Vercel, Vite, React, Lovable, Bolt. Reviewed 2026-10-14.
- [Netlify "Page not found" when refreshing or opening a link](https://vibecodefixes.com/fix/netlify-page-not-found-on-refresh): Netlify shows "Page not found" on refresh or deep links? Add the /* /index.html 200 rewrite so your single-page app handles routing. Platforms: Netlify, Vite, React, Lovable, Bolt. Reviewed 2026-10-14.
- [Module not found: Can't resolve (build works locally, fails on Vercel)](https://vibecodefixes.com/fix/module-not-found-cant-resolve): Vercel build fails with "Module not found: Can't resolve" but works on your Mac/PC? Usually filename casing. How to find and fix it. Platforms: Vercel, Next.js, Vite, Cursor, v0, Lovable, Bolt. Reviewed 2026-10-14.
- [Changed an environment variable on Vercel but the live site still uses the old value](https://vibecodefixes.com/fix/env-variable-changed-but-site-not-updated): Updated a key in Vercel env vars but nothing changed? Env var changes only apply to new deployments. Redeploy and check the right environment. Platforms: Vercel, Next.js, Vite, Lovable, Bolt, v0. Reviewed 2026-10-14.
- [Error 400: redirect_uri_mismatch (Sign in with Google)](https://vibecodefixes.com/fix/google-oauth-redirect-uri-mismatch): Google sign-in shows "Error 400: redirect_uri_mismatch"? The callback URL in Google Cloud must exactly match the one your app or Supabase uses. Platforms: Supabase, Google, Lovable, Bolt, Cursor, v0. Reviewed 2026-10-14.
- [email rate limit exceeded (Supabase Auth)](https://vibecodefixes.com/fix/supabase-email-rate-limit-exceeded): Supabase says "email rate limit exceeded" or sign-up emails stop? The built-in mailer allows only 2 emails an hour. Set up custom SMTP. Platforms: Supabase, Lovable, Bolt, Cursor, v0. Reviewed 2026-10-14.
- [Supabase confirmation or password reset email not arriving](https://vibecodefixes.com/fix/supabase-confirmation-email-not-sending): Users never get the Supabase confirm or reset email? Check the rate limit, set up custom SMTP and fix the link's Site URL. Platforms: Supabase, Lovable, Bolt. Reviewed 2026-10-14.
- [Supabase service_role or secret key exposed in front-end code](https://vibecodefixes.com/fix/supabase-service-role-key-exposed-in-browser): Is your Supabase service_role or sb_secret key in your browser code? Anyone can read it and bypass all security. How to rotate and fix it. Platforms: Supabase, Lovable, Bolt, Cursor, v0, Security. Reviewed 2026-10-14.
- [infinite recursion detected in policy for relation](https://vibecodefixes.com/fix/infinite-recursion-detected-in-policy): Supabase error 42P17 "infinite recursion detected in policy for relation"? Two RLS policies check each other. Break the loop with a function. Platforms: Supabase, Lovable, Bolt, Cursor. Reviewed 2026-10-14.
- [permission denied for table (Supabase error 42501)](https://vibecodefixes.com/fix/permission-denied-for-table-supabase): Supabase "permission denied for table"? The role lacks a GRANT on the table, which is checked before RLS. Add the grant, then a policy. Platforms: Supabase, Lovable, Bolt, Cursor. Reviewed 2026-10-14.
- [Supabase Storage upload fails: new row violates row-level security policy](https://vibecodefixes.com/fix/supabase-storage-upload-row-level-security): Image/file upload to Supabase Storage fails with an RLS error? Add policies on storage.objects for INSERT (plus SELECT/UPDATE for upsert). Platforms: Supabase, Lovable, Bolt, Cursor. Reviewed 2026-10-14.
- [Vercel FUNCTION_INVOCATION_TIMEOUT (504) on API routes or AI calls](https://vibecodefixes.com/fix/vercel-function-invocation-timeout): Vercel API route times out with 504 FUNCTION_INVOCATION_TIMEOUT? Common with slow AI calls. Raise maxDuration, stream, or move work to background. Platforms: Vercel, Next.js, v0, Cursor, OpenAI. Reviewed 2026-10-14.
- [500: INTERNAL_SERVER_ERROR / FUNCTION_INVOCATION_FAILED on Vercel](https://vibecodefixes.com/fix/vercel-500-function-invocation-failed): Live site shows 500 FUNCTION_INVOCATION_FAILED but works locally? Your server code crashed. Read the runtime logs, then check env vars. Platforms: Vercel, Next.js, v0, Cursor. Reviewed 2026-10-14.
- [too many connections / remaining connection slots are reserved (Supabase + serverless)](https://vibecodefixes.com/fix/too-many-connections-supabase-serverless): Database errors like "too many connections" after deploying to Vercel? Use Supabase's transaction pooler (port 6543) for serverless functions. Platforms: Supabase, Vercel, Prisma, Next.js, Cursor. Reviewed 2026-10-14.
- [Hydration failed because the server rendered HTML didn't match the client](https://vibecodefixes.com/fix/hydration-failed-nextjs): Next.js "Hydration failed" error? The server and browser drew different HTML. Fix nesting, window/localStorage use and dates. Platforms: Next.js, React, v0, Cursor. Reviewed 2026-10-14.
- [Mixed Content: the page was loaded over HTTPS but requested an insecure resource](https://vibecodefixes.com/fix/mixed-content-blocked): Browser blocks requests with a "Mixed Content" warning on your HTTPS site? Change every http:// URL your app calls to https://. Platforms: Vercel, Netlify, Lovable, Bolt, Cursor. Reviewed 2026-10-14.
- [Vercel custom domain shows "Invalid Configuration"](https://vibecodefixes.com/fix/vercel-domain-invalid-configuration): Added your domain to Vercel and it says Invalid Configuration? Set the DNS records Vercel shows at your registrar and wait for DNS. Platforms: Vercel, Domains, v0, Cursor. Reviewed 2026-10-14.
- [Lovable custom domain not working or stuck pending](https://vibecodefixes.com/fix/lovable-custom-domain-not-working): Connected your own domain to Lovable and it won't load or stays pending? Check the DNS records Lovable gives you and remove conflicting ones. Platforms: Lovable, Domains. Reviewed 2026-10-14.
- [Replit deployment fails or published app won't load (server must listen on 0.0.0.0)](https://vibecodefixes.com/fix/replit-deployment-failed-port-0-0-0-0): Replit preview works but publishing fails or the URL won't load? Make your server listen on 0.0.0.0, set production Secrets, check ports. Platforms: Replit. Reviewed 2026-10-14.
- [Stripe error: No such price / No such customer (resource_missing)](https://vibecodefixes.com/fix/stripe-no-such-price-test-live-mode): Stripe says "No such price" or "No such customer" in production? You're mixing test and live keys or IDs. Match them. Platforms: Stripe, Lovable, Bolt, Cursor, v0. Reviewed 2026-10-14.
- [OpenAI API 429: You exceeded your current quota / rate limit reached](https://vibecodefixes.com/fix/openai-429-insufficient-quota): Your app's AI feature fails with OpenAI 429? Either your credits ran out or you're sending requests too fast. How to tell which and fix it. Platforms: OpenAI, AI APIs, Vercel, Lovable, Bolt, Cursor. Reviewed 2026-10-14.
- [Invalid JWT after switching to sb_publishable or sb_secret keys](https://vibecodefixes.com/fix/supabase-new-api-keys-invalid-jwt): The app broke after Supabase's new sb_publishable or sb_secret keys? Legacy keys can stay on until you swap them. Don't send the new keys as a Bearer JWT. Platforms: Supabase, Lovable, Bolt, Cursor, Vercel, Netlify, Security. Reviewed 2026-10-14.
- [Build failed: npm ERR! ERESOLVE](https://vibecodefixes.com/fix/vercel-build-failed-npm-eresolve): Vercel stops on npm ERR! ERESOLVE unable to resolve dependency tree? npm is refusing a peer dependency clash. Fix the versions, or override the install command on purpose. Platforms: Vercel, Cursor, Bolt, Lovable. Reviewed 2026-10-14.
- [ReferenceError: window is not defined](https://vibecodefixes.com/fix/nextjs-window-is-not-defined): Next.js crashes with window is not defined? The page is rendered on the server, where window does not exist. Read it after the component mounts. Platforms: Next.js, Vercel, v0, Cursor. Reviewed 2026-10-14.
- [Supabase error: JWT expired](https://vibecodefixes.com/fix/supabase-jwt-expired): API calls fail with JWT expired? The Supabase access token is meant to be short-lived. Refresh the session once, and don't refresh it twice at the same time. Platforms: Supabase, Next.js, Vercel, Lovable, Bolt, Cursor. Reviewed 2026-10-14.
- [Clerk sign-in keeps redirecting in a loop](https://vibecodefixes.com/fix/clerk-auth-redirect-loop): The app bounces between the page and Clerk sign-in forever? The redirect target is protected too, or the force-redirect URL points back at the gate. Platforms: Clerk, Next.js, Vercel, Netlify. Reviewed 2026-10-14.
- [TypeError: Failed to fetch (only in production)](https://vibecodefixes.com/fix/failed-to-fetch-in-production): The live site says Failed to fetch, but the preview worked? The browser could not open the connection. Check the URL, HTTPS, and the console, not the HTTP status. Platforms: CORS, Vercel, Netlify, Lovable, Bolt, Cursor. Reviewed 2026-10-14.
- [Vite env var is undefined because the name has no VITE_ prefix](https://vibecodefixes.com/fix/vite-env-var-missing-vite-prefix): import.meta.env.MY_KEY is undefined in a Vite app? Vite only exposes names that start with VITE_. Rename it and rebuild. Platforms: Vite, Lovable, Bolt, Vercel, Netlify. Reviewed 2026-10-14.
- [Lovable GitHub sync is behind, diverged, or created a new repo](https://vibecodefixes.com/fix/lovable-github-sync-not-updating): GitHub and Lovable don't match? Lovable syncs one branch, won't reattach an old repo, and replaces its copy if you rewrite history. Platforms: Lovable. Reviewed 2026-10-14.
- [Prisma on Vercel: query engine not found](https://vibecodefixes.com/fix/prisma-query-engine-missing-on-vercel): Vercel runs the app and Prisma can't find its query engine? The Rust engine file was left out of the serverless bundle, or Prisma Client was generated for the wrong machine. Platforms: Prisma, Vercel, Next.js, Cursor. Reviewed 2026-10-14.
- [Supabase error: Email address not authorized](https://vibecodefixes.com/fix/supabase-email-address-not-authorized): Sign-up tells the user Email address not authorized? The built-in mailer only sends to your Supabase organization. Custom SMTP sends to everyone else. Platforms: Supabase, Lovable, Bolt, Cursor. Reviewed 2026-10-14.

## Platform hubs

- [Supabase](https://vibecodefixes.com/platform/supabase): 17 fixes.
- [Stripe](https://vibecodefixes.com/platform/stripe): 3 fixes.
- [Vercel](https://vibecodefixes.com/platform/vercel): 23 fixes.
- [Lovable](https://vibecodefixes.com/platform/lovable): 30 fixes.
- [Bolt](https://vibecodefixes.com/platform/bolt): 28 fixes.
- [Cursor](https://vibecodefixes.com/platform/cursor): 30 fixes.
- [Replit](https://vibecodefixes.com/platform/replit): 1 fix.
- [Netlify](https://vibecodefixes.com/platform/netlify): 11 fixes.
- [v0](https://vibecodefixes.com/platform/v0): 17 fixes.
- [Vite](https://vibecodefixes.com/platform/vite): 6 fixes.
- [Next.js](https://vibecodefixes.com/platform/nextjs): 13 fixes.
- [CORS](https://vibecodefixes.com/platform/cors): 2 fixes.
- [React](https://vibecodefixes.com/platform/react): 3 fixes.
- [Google](https://vibecodefixes.com/platform/google): 1 fix.
- [Security](https://vibecodefixes.com/platform/security): 2 fixes.
- [OpenAI](https://vibecodefixes.com/platform/openai): 2 fixes.
- [Prisma](https://vibecodefixes.com/platform/prisma): 2 fixes.
- [Domains](https://vibecodefixes.com/platform/domains): 2 fixes.
- [AI APIs](https://vibecodefixes.com/platform/ai-api): 1 fix.
- [Clerk](https://vibecodefixes.com/platform/clerk): 1 fix.

## Optional

- [Home](https://vibecodefixes.com/): Search error text and the ranked list of fixes.
- [Comparisons](https://vibecodefixes.com/compare): Lovable, Bolt, Cursor, Supabase, Firebase, Vercel, and Netlify, from vendor docs.
- [Get help](https://vibecodefixes.com/help): Free guides. The paid fix is coming soon. The form asks a person to look.
- [About](https://vibecodefixes.com/about): Who the site is for.
- [Privacy](https://vibecodefixes.com/privacy): What the forms store.