Errors people hit most often building with Lovable, Bolt, Cursor, Replit, v0 and Windsurf, ranked by how often they come up. Each one has a fix prompt you can copy.
The preview or published site shows a completely blank white/black page. Console often shows: Uncaught TypeError / Uncaught ReferenceError ...Your app crashed while it was starting up, so the browser has nothing to draw. It's almost always one specific error hiding in the browser console, and that error names the exact file that broke.
How to fix it →new row violates row-level security policy for table "profiles" (code 42501, 403 Forbidden)Your database has a security guard (Row Level Security) that checks every save. There's no rule allowing this user to add or change this row, so the guard blocks it.
How to fix it →[plugin:vite:import-analysis] Failed to resolve import "@/components/ui/button" from "src/pages/Index.tsx". Does the file exist?A page is trying to load another file or package that isn't there. Either the file was renamed or deleted (often by the AI itself), the path is spelled differently, or a package was never installed.
How to fix it →import.meta.env.VITE_API_URL is undefined / process.env.NEXT_PUBLIC_... is undefined / Missing environment variableYour app's settings (like keys and URLs) aren't reaching the code. Either they're named without the prefix the framework requires, or they were never added to your hosting service.
How to fix it →Same error comes back after every 'fix'. Try to Fix / Fix with AI runs again and again, burning credits.The AI is guessing instead of diagnosing, and each guess changes more code. The way out is to stop, go back to a working version, and make it find the real cause before it touches anything.
How to fix it →Uncaught TypeError: Cannot read properties of undefined (reading 'map')The code tried to use a piece of data before it existed, like reading a list before it finished loading from the database. It's like opening a box that hasn't been delivered yet.
How to fix it →404: NOT_FOUND Code: NOT_FOUND (Vercel) / Page not found: Looks like you've followed a broken link (Netlify). Only on routes like /dashboard after refresh.Your app handles its pages inside the browser, but when you refresh, the hosting service looks for a real file called /dashboard, can't find it, and shows 404. It needs one rule saying 'always send people to the app'.
How to fix it →Access to fetch at 'https://api...' from origin 'https://myapp...' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.Browsers only let your site talk to another server if that server says 'yes, that website is allowed'. The server you're calling didn't say that, so the browser blocked the request.
How to fix it →After clicking the confirmation or magic link: This site can't be reached. localhost refused to connect (ERR_CONNECTION_REFUSED)Your login system still thinks your app lives on your own computer (localhost), so it sends users there after they click the email link. It needs your real website address.
How to fix it →FunctionsFetchError: Failed to send a request to the Edge Function / FunctionsHttpError: Edge Function returned a non-2xx status codeYour app's small server function on Supabase either couldn't be reached (often a CORS or not-deployed issue) or ran and crashed. The real message is in the function's logs.
How to fix it →{"code":"42501","message":"permission denied for table todos","hint":"Grant the required privileges to the current role with: GRANT SELECT ON public.todos TO anon;"}Your app's users (the 'anon' and 'authenticated' roles) haven't been given access to this table at all, so the database refuses before it even looks at your security rules. Supabase no longer gives new tables that access automatically: it's the default for projects created since May 30, 2026 and applies to all existing projects from October 30, 2026. Tables that already existed keep working; newly created ones need an explicit GRANT.
How to fix it →I asked for a small change and now another page/feature is broken or missing.When the AI changes one thing, it sometimes rewrites nearby code it didn't need to touch. Your old feature was collateral damage.
How to fix it →Module not found: Can't resolve '@/lib/utils' / Error: Cannot find module 'xyz' or its corresponding type declarations.Your code refers to a file or package that can't be found. Like a recipe that says 'see page 42' when page 42 was torn out.
How to fix it →Error: Command "npm run build" exited with 1 / Build failed due to a user error: Build script returned non-zero exit code: 2The hosting service tried to package your app and hit an error partway through. The real reason is a few lines above this message in the build log.
How to fix it →Uncaught Error: supabaseUrl is required. / supabaseKey is required.Your app tried to connect to your Supabase database but the address or key was empty. The settings exist in one place (like your builder) but not where the app is actually running.
How to fix it →error TS2322: Type 'string | undefined' is not assignable to type 'string'. / error TS2339: Property 'x' does not exist on type 'Y'. / Type error: ... (next build)TypeScript is a spell-checker for code. It found places where data doesn't match what the code expects, and a strict build refuses to finish until those are fixed.
How to fix it →supabase.from('posts').select() returns { data: [], error: null } even though the table has rows.Your data is there, but the security rules don't let this user see it, so the database quietly answers 'nothing' instead of showing an error.
How to fix it →TypeError: Failed to fetch / NetworkError when attempting to fetch resource / net::ERR_NAME_NOT_RESOLVEDYour app tried to call a server and never got an answer. The address could be wrong, the server could be off or paused, or the browser blocked the request (often a CORS problem).
How to fix it →npm ERR! code ERESOLVE npm ERR! ERESOLVE unable to resolve dependency tree ... Could not resolve dependency: peer react@"^16.8.0 || ^17.0.0" from [email protected]Two of your add-on packages want different versions of the same thing (often React), and npm refuses to guess which one wins.
How to fix it →Error: Hydration failed because the initial UI does not match what was rendered on the server. / Text content does not match server-rendered HTML.Next.js builds your page twice: once on the server and once in the browser. The two versions came out different (often because of dates, random numbers, or browser-only data), so React complains.
How to fix it →StripeSignatureVerificationError: No signatures found matching the expected signature for payload. Are you passing the raw request body you received from Stripe?Stripe signs every payment notification so your app can trust it. The check failed because either the secret is the wrong one, or your app changed the message before checking it.
How to fix it →AuthApiError: email rate limit exceeded / over_email_send_rate_limitSupabase's built-in email sender only allows a few emails per hour, meant for testing. You've hit that cap, so sign-up and password emails stop going out.
How to fix it →AuthApiError: Email not confirmedThe user signed up but hasn't clicked the confirmation email yet, so the system won't let them in. Sometimes the email never arrives.
How to fix it →relation "public.profiles" does not exist (42P01) / Could not find the table 'public.profiles' in the schema cache (PGRST205)The code is asking for a database table that doesn't exist. Often the AI wrote code for a table but the step that creates it (the migration) never ran on your actual database.
How to fix it →Could not find the 'full_name' column of 'profiles' in the schema cache (PGRST204) / column profiles.full_name does not exist (42703)Your app is trying to save or read a field (column) that the database table doesn't have, or has under a different name.
How to fix it →Error: Too many re-renders. React limits the number of renders to prevent an infinite loop. / Maximum update depth exceeded.A part of your page keeps changing itself, which makes it redraw, which makes it change itself again, forever. React stops it to prevent your browser from freezing.
How to fix it →sh: 1: vite: not found / jsh: command not found: vite / Command failed with exit code 127: npm run buildThe tool your app needs to start or build isn't installed in this environment. Usually the install step never finished or a package went missing from the dependency list.
How to fix it →infinite recursion detected in policy for relation "profiles" (code 42P17)One of your database security rules checks the same table it's protecting, which asks the rule again, forever. It's usually an 'is this user an admin?' check.
How to fix it →Uncaught SyntaxError: The requested module '/src/lib/api.ts' does not provide an export named 'fetchUsers' / Module '"x"' has no exported member 'Y'.Your code asks a file for something by name, but that file doesn't offer anything with that name. Often the AI renamed a function or invented one that a package doesn't actually have.
How to fix it →ReferenceError: window is not defined / localStorage is not defined / document is not definedSome of your code expects to run in a web browser, but Next.js also runs it on the server, where there is no browser window. The code needs to wait until it's actually in the browser.
How to fix it →You're importing a component that needs useState. This React hook only works in a client component. To fix, mark the file (or its parent) with the "use client" directive.Next.js splits code into server parts and browser parts. A piece that needs to react to clicks or remember things was placed on the server side without being marked as a browser component.
How to fix it →User pays in Stripe Checkout, returns to the success page, but their account still shows as free / subscription not updated.Stripe took the money, but your app never heard about it. Apps should learn about payments from a Stripe webhook (a message Stripe sends to your server), not just from the success page.
How to fix it →AuthApiError: Invalid login credentialsThe login service couldn't match that email and password. Besides a typo, it often means the account was created with Google/magic link (no password), or in a different project.
How to fix it →AuthSessionMissingError: Auth session missing! / JWT expired / AuthApiError: Invalid Refresh Token: Refresh Token Not FoundThe app forgot who's logged in, or the login pass it was holding expired and couldn't be renewed. Users suddenly appear logged out or requests fail.
How to fix it →FirebaseError: [code=permission-denied]: Missing or insufficient permissions.Your Firebase database's security rules don't allow this read or write. Either the rules are too strict, the user isn't logged in yet, or the query asks for more than the rules allow.
How to fix it →duplicate key value violates unique constraint "profiles_pkey" (23505)You tried to save something that must be unique (like a user's profile or an email) but it's already there. Often the app creates the same profile twice.
How to fix it →Error 400: redirect_uri_mismatch. You can't sign in to this app because it doesn't comply with Google's OAuth 2.0 policy.Google only sends users back to addresses you've pre-approved. The address your app (or Supabase/Firebase) uses isn't on Google's approved list.
How to fix it →This conversation is too long / maximum context length exceeded / the AI forgets earlier decisions and re-creates files.AI assistants can only hold a limited amount of your project and chat in their head at once. In long sessions they forget earlier details and start contradicting themselves.
How to fix it →Error: Objects are not valid as a React child (found: object with keys {id, name}). If you meant to render a collection of children, use an array instead.The page tried to display a whole bundle of data (an object) as if it were plain text. It needs to be told which specific field to show, like the name instead of the whole customer record.
How to fix it →Element type is invalid: expected a string (for built-in components) or a class/function (for composite components) but got: undefined. You likely forgot to export your component from the file it's defined in, or you might have mixed up default and named imports.The page tried to use a component that doesn't exist under that name. Usually a file was renamed, or a component is imported with the wrong style of import.
How to fix it →StripeInvalidRequestError: No such price: 'price_123' / No such customer: 'cus_...'; a similar object exists in test mode, but a live mode key was used to make this request.Your app refers to a price or customer that Stripe can't find with the key you're using. Usually you mixed test-mode IDs with live-mode keys (or vice versa), or the AI made up a placeholder ID.
How to fix it →Treating warnings as errors because process.env.CI = true. Most CI servers set it automatically. / Failed to compile. ESLint: 'x' is assigned a value but never used.Your hosting service checks code-quality warnings more strictly than your preview does. Small issues like unused variables are being treated as fatal errors during the live build.
How to fix it →Page renders but looks like plain HTML with no styling. Sometimes: Unknown at rule @tailwind / Cannot apply unknown utility classYour design styles aren't being loaded, so the page falls back to plain browser defaults. Usually the style file isn't connected, or the Tailwind setup doesn't match the version installed.
How to fix it →401 Incorrect API key provided / 429 You exceeded your current quota, please check your plan and billing details / insufficient_quota / rate_limit_exceededThe AI service your app calls either doesn't recognize your key, or your account has run out of credit or is sending too many requests too fast.
How to fix it →{"message":"Invalid API key","hint":"Double check your Supabase `anon` or `service_role` API key."} / No API key found in requestThe key your app uses to talk to Supabase is wrong, belongs to a different project, or is missing. Often keys were copied from an old project or rotated.
How to fix it →504: GATEWAY_TIMEOUT Code: FUNCTION_INVOCATION_TIMEOUT / Task timed out after 10.00 secondsA server function in your app took longer than your host allows (common with AI calls that take a while), so the host cut it off.
How to fix it →GET https://myapp.com/src/assets/logo.png 404 (Not Found) / Failed to load resource: the server responded with a status of 404Your images worked in preview but the live site can't find them. The code points to where the file sits in your project folder, not where it ends up after the app is packaged.
How to fix it →Your app is not responding on port ... / The deployment failed health checks / Your app must listen on 0.0.0.0When published, Replit waits for your app to answer on a specific port within a few seconds. Your app is either listening on the wrong address/port or taking too long to start.
How to fix it →Invalid hook call. Hooks can only be called inside of the body of a function component. / Rendered more hooks than during the previous render.React has strict rules about where special functions called 'hooks' (useState, useEffect, etc.) can be used. One of them is being used in the wrong place, like inside an if-statement, or two copies of React got installed.
How to fix it →StripeAuthenticationError: Invalid API Key provided: sk_test_**** / You did not provide an API key.Your payment code is using a missing or wrong Stripe key. The secret key must only live on the server, and the publishable key goes in the browser.
How to fix it →Uncaught ReferenceError: process is not definedThe code uses a Node-style way of reading settings (process.env) inside a Vite browser app, which doesn't support it. Vite has its own way.
How to fix it →500: INTERNAL_SERVER_ERROR Code: FUNCTION_INVOCATION_FAILED / This Serverless Function has crashed.A server-side part of your app crashed. The page only shows a generic error; the real reason is in your host's function logs.
How to fix it →StorageApiError: Bucket not found / 403 Unauthorized new row violates row-level security policy (storage upload)Your app tries to upload or show files from a storage folder ('bucket') that either doesn't exist under that name or doesn't allow this user to upload.
How to fix it →insert or update on table "orders" violates foreign key constraint "orders_user_id_fkey" (23503)You tried to link a record to something that doesn't exist, like an order for a customer who isn't in the customers table yet.
How to fix it →FirebaseError: Firebase: Error (auth/unauthorized-domain). This domain is not authorized for OAuth operations for your Firebase project.Firebase only allows sign-in from websites you've listed. Your live site's address isn't on that list yet.
How to fix it →npm WARN EBADENGINE Unsupported engine / The engine "node" is incompatible with this module. Expected version ">=18.17.0". / You are using Node.js 16.x. Next.js requires Node.js >= 18.Your app needs a newer version of Node (the engine that runs JavaScript on servers) than the one your computer or host is using.
How to fix it →npm ERR! code ENOENT npm ERR! syscall open npm ERR! path /home/project/package.json npm ERR! enoent Could not read package.jsonThe terminal is running in a folder that doesn't contain your project's main settings file. Either you're in the wrong folder or the file never got created.
How to fix it →Mixed Content: The page at 'https://...' was loaded over HTTPS, but requested an insecure resource 'http://...'. This request has been blocked.Your live site is secure (https) but is trying to load something from an insecure (http) address, and browsers block that. Often it's a leftover link to your local computer or an old API address.
How to fix it →FirebaseError: Firebase: Error (auth/invalid-api-key). / auth/api-key-not-valid.-please-pass-a-valid-api-key.Your app's Firebase settings are missing or wrong, usually because the config values didn't load from environment variables on the live site.
How to fix it →Error: listen EADDRINUSE: address already in use :::3000 / Port 5173 is in useAnother copy of your app (or another program) is already using the same 'door' (port) on your computer, so the new one can't open it.
How to fix it →