Blog
Practical notes on software, marketing and the systems behind a working product.
Start here: the five settings the editor never asked you for
-
cursor ai pricing hit you with two usage pools
cursor ai pricing shows fast requests, premium models, and add-on usage in different places. You thought one plan covered everything until Agent and Max Mode drained a second…
Read article -
cursor max mode burned your allowance in days
You enabled cursor max mode for a hard bug and watched the usage meter cliff before the week ended. Max Mode sends bigger context to frontier models —…
Read article -
Your replit database lost rows after the Agent ran migrations
Replit Agent can reset your replit database while you asked for a UI tweak. Tables vanish, test users appear, and production data is gone before you notice the…
Read article -
Your lovable api key is sitting in the frontend bundle
Lovable can paste OpenAI, Stripe, and Supabase keys straight into React files. A lovable api key in the bundle is copy-paste public after publish — move secrets to…
Read article -
lovable security fails because you never wrote a policy
Lovable ships auth screens and data tables fast. lovable security still fails when Row Level Security is off and the anon key in your bundle can read every…
Read article -
lovable stripe checkout dies the day you launch
Lovable can render a pay button and success page while lovable stripe still runs on test keys and a missing webhook. Switch to live mode and register production…
Read article -
replit auth looked done but breaks after you ship
Replit Agent can wire Google login inside the Repl while replit auth still points at dev secrets and localhost callbacks. Harden auth before real users hit your deployed…
Read article -
supabase oauth sends users back to localhost after publish
Google and GitHub sign-in can work in Lovable preview while supabase oauth still points callbacks at localhost. Update URL Configuration before your live users hit the loop.
Read article -
Bolt new login dead after launch — button does nothing
Sign-in works inside Bolt.new, then the live URL shows a dead button or an auth loop. Preview URLs and Supabase settings rarely copy themselves when you deploy.
Read article