https://devonauts.com/blog/ Plain-language guides for people who built an app with Lovable, Bolt, Cursor, v0 or Replit: finding what broke, making it safe and getting it live. en https://devonauts.com/blog/add-database-to-v0-app/https://devonauts.com/blog/add-database-to-v0-app/Tue, 20 Oct 2026 12:00:00 GMTConnect Supabase, Neon or Upstash to a v0 app, replace mock data with real queries, keep secret keys on the server and protect each user's rows. https://devonauts.com/blog/admin-panel-security/https://devonauts.com/blog/admin-panel-security/Tue, 20 Oct 2026 12:00:00 GMTHow to protect an app's admin panel: roles checked on the server, where to store them in Supabase, two-factor for admins, audit logs and least privilege. https://devonauts.com/blog/ai-agent-deleted-files/https://devonauts.com/blog/ai-agent-deleted-files/Tue, 20 Oct 2026 12:00:00 GMTWhat to do right after an AI agent deletes files or database data, how to recover from git, checkpoints and backups, and settings that prevent a repeat. https://devonauts.com/blog/ai-coding-agent-large-codebase/https://devonauts.com/blog/ai-coding-agent-large-codebase/Tue, 20 Oct 2026 12:00:00 GMTWhy AI agents drift in big projects and how to keep control: a project map, plan mode, scoped tasks, less noise, reviewable diffs and fresh sessions. https://devonauts.com/blog/analytics-for-your-web-app/https://devonauts.com/blog/analytics-for-your-web-app/Tue, 20 Oct 2026 12:00:00 GMTDecide what to measure, pick the few events that matter, choose a tool, send payment events from the server and handle consent without over-collecting. https://devonauts.com/blog/api-key-exposed-in-frontend/https://devonauts.com/blog/api-key-exposed-in-frontend/Tue, 20 Oct 2026 12:00:00 GMTHow to check whether a secret API key ships in your app's browser code, which keys are meant to be public, and how to move the secret ones to a server. https://devonauts.com/blog/app-emails-going-to-spam/https://devonauts.com/blog/app-emails-going-to-spam/Tue, 20 Oct 2026 12:00:00 GMTWhy your app's sign-up, reset and receipt emails land in spam, how to set up SPF, DKIM and DMARC, and how to check that Gmail and Yahoo trust them. https://devonauts.com/blog/app-maintenance-cost/https://devonauts.com/blog/app-maintenance-cost/Tue, 20 Oct 2026 12:00:00 GMTThe monthly costs of keeping an app running: hosting, database, store fees, third-party services and developer time, with official prices and budget tips. https://devonauts.com/blog/base44-limitations-when-to-move/https://devonauts.com/blog/base44-limitations-when-to-move/Tue, 20 Oct 2026 12:00:00 GMTWhere Base44 fits and where it pinches: backend, data access, backups, credits and code control. The signs it's time to move, and options short of a rebuild. https://devonauts.com/blog/beta-testing-your-app/https://devonauts.com/blog/beta-testing-your-app/Tue, 20 Oct 2026 12:00:00 GMTHow to run a beta: picking testers, TestFlight and Google Play testing tracks, what to ask, how to collect feedback and bugs, and when the beta is done. https://devonauts.com/blog/bolt-new-breaks-app-on-every-change/https://devonauts.com/blog/bolt-new-breaks-app-on-every-change/Tue, 20 Oct 2026 12:00:00 GMTWhy each Bolt.new prompt can break features that worked, what to do the moment it happens, and a routine of locks, versions and tests that stops regressions. https://devonauts.com/blog/bolt-new-database-migrations/https://devonauts.com/blog/bolt-new-database-migrations/Tue, 20 Oct 2026 12:00:00 GMTHow to change tables in a Bolt.new app without losing data: back up first, write each change as a reviewed SQL migration, avoid risky edits and verify after. https://devonauts.com/blog/bolt-new-environment-variables/https://devonauts.com/blog/bolt-new-environment-variables/Tue, 20 Oct 2026 12:00:00 GMTWhich values in a Bolt.new app can live in the browser, which must stay in Secrets, how VITE_ and other prefixes work, and how to check that nothing leaked. https://devonauts.com/blog/bolt-new-netlify-deploy-failed/https://devonauts.com/blog/bolt-new-netlify-deploy-failed/Tue, 20 Oct 2026 12:00:00 GMTWhere to find the real error when a Bolt.new project fails to publish to Netlify, the causes behind most failures, and how to fix and confirm each one. https://devonauts.com/blog/bolt-new-npm-dependency-errors/https://devonauts.com/blog/bolt-new-npm-dependency-errors/Tue, 20 Oct 2026 12:00:00 GMTWhat ERESOLVE, native addon, 404 and lockfile errors mean in a Bolt.new project, how to fix each one safely and how to keep package versions from drifting. https://devonauts.com/blog/bolt-new-project-too-large-tokens/https://devonauts.com/blog/bolt-new-project-too-large-tokens/Tue, 20 Oct 2026 12:00:00 GMTWhy Bolt.new says your project is too large, how context and token limits differ, and the steps that shrink a project so you can keep building. https://devonauts.com/blog/bolt-new-supabase-connection-error/https://devonauts.com/blog/bolt-new-supabase-connection-error/Tue, 20 Oct 2026 12:00:00 GMTWhy a Bolt.new app fails to reach Supabase: missing URL or key, the wrong key type, RLS blocking reads, a paused project or auth URLs. How to find and fix each. https://devonauts.com/blog/bolt-new-user-roles-admin-panel/https://devonauts.com/blog/bolt-new-user-roles-admin-panel/Tue, 20 Oct 2026 12:00:00 GMTHow to store roles where users can't change them, enforce them with RLS and server functions, and build a Bolt.new admin panel that is more than a hidden page. https://devonauts.com/blog/claude-code-vs-cursor-non-developers/https://devonauts.com/blog/claude-code-vs-cursor-non-developers/Tue, 20 Oct 2026 12:00:00 GMTA plain comparison of Claude Code and Cursor for founders who don't program: how each works, setup, safety settings, October 2026 pricing and which to pick. https://devonauts.com/blog/control-ai-api-costs/https://devonauts.com/blog/control-ai-api-costs/Tue, 20 Oct 2026 12:00:00 GMTWhere AI API spending comes from, how to measure it per feature and per user, and the limits, caching, model choices and batch jobs that keep the bill in check. https://devonauts.com/blog/core-web-vitals-for-your-app/https://devonauts.com/blog/core-web-vitals-for-your-app/Tue, 20 Oct 2026 12:00:00 GMTWhat LCP, INP and CLS measure, the targets Google uses, why apps made with Lovable, Bolt or v0 often miss them, and the fixes that move each one. https://devonauts.com/blog/cors-error-explained/https://devonauts.com/blog/cors-error-explained/Tue, 20 Oct 2026 12:00:00 GMTWhat a CORS error really means, how to read it in the browser console, the usual causes in AI-built apps, and the server-side fix for Supabase functions. https://devonauts.com/blog/cost-to-fix-vibe-coded-app/https://devonauts.com/blog/cost-to-fix-vibe-coded-app/Tue, 20 Oct 2026 12:00:00 GMTWhat decides the price of fixing a Lovable, Bolt, v0, Replit or Cursor app, the three sizes of fix, how pricing models compare and how to keep the bill down. https://devonauts.com/blog/cursor-broke-my-code-how-to-undo/https://devonauts.com/blog/cursor-broke-my-code-how-to-undo/Tue, 20 Oct 2026 12:00:00 GMTHow to roll back changes from Cursor or another AI agent: checkpoints, Claude Code's /rewind, the right git command for each case, and what none of them undo. https://devonauts.com/blog/cursor-rules-for-real-projects/https://devonauts.com/blog/cursor-rules-for-real-projects/Tue, 20 Oct 2026 12:00:00 GMTWhere Cursor rules live, the four rule types, what a useful rule says in a real project, why rules get ignored, and how to test and share them with other tools. https://devonauts.com/blog/data-protection-basics-for-app-founders/https://devonauts.com/blog/data-protection-basics-for-app-founders/Tue, 20 Oct 2026 12:00:00 GMTA plain-words overview of GDPR and CCPA for people launching an app: when they may apply, what they usually ask of you, and the practical steps to start with. https://devonauts.com/blog/dns-records-explained/https://devonauts.com/blog/dns-records-explained/Tue, 20 Oct 2026 12:00:00 GMTWhat A, AAAA, CNAME, MX, TXT, NS and CAA records do, which ones your app's domain needs, the mistakes that break sites and email, and how to check your setup. https://devonauts.com/blog/document-your-app-for-handoff/https://devonauts.com/blog/document-your-app-for-handoff/Tue, 20 Oct 2026 12:00:00 GMTWhat to write down before handing your app to a new developer or agency: accounts, setup, architecture, data, deployment, known issues and a handoff checklist. https://devonauts.com/blog/environment-variables-production-vs-preview/https://devonauts.com/blog/environment-variables-production-vs-preview/Tue, 20 Oct 2026 12:00:00 GMTHow production, preview and local environment variables differ on Vercel and Netlify, which values go in each, and the mistakes that leak keys or break deploys. https://devonauts.com/blog/export-data-from-base44-app/https://devonauts.com/blog/export-data-from-base44-app/Tue, 20 Oct 2026 12:00:00 GMTExport every Base44 table as CSV, collect uploaded files and users, and get the code through GitHub sync or the CLI, with checks so nothing is lost.