[{"data":1,"prerenderedAt":1627},["ShallowReactive",2],{"blog-vibecoding-apps-promise-vs-reality":3,"related-vibecoding-apps-promise-vs-reality":527},{"id":4,"title":5,"author":6,"body":7,"category":6,"date":512,"description":513,"draft":514,"extension":515,"image":6,"meta":516,"navigation":517,"path":518,"seo":519,"stem":520,"tags":521,"__hash__":526},"blog\u002Fblog\u002Fvibecoding-apps-promise-vs-reality.md","Vibecoding Apps: The Promise vs. Production Reality",null,{"type":8,"value":9,"toc":491},"minimark",[10,22,25,30,33,36,59,62,66,69,72,86,90,93,119,122,127,187,191,194,232,235,239,242,249,263,267,270,279,282,308,311,315,326,329,333,336,372,375,379,382,402,405,409,441,445,454,458,461,465,472,476,482],[11,12,13,14,21],"p",{},"Vibe coding has a clean pitch: describe your app in plain language, and an AI writes the code. The term went mainstream after Andrej Karpathy ",[15,16,20],"a",{"href":17,"rel":18},"https:\u002F\u002Fen.wikipedia.org\u002Fwiki\u002FVibe_coding",[19],"nofollow","described it"," as \"fully giving in to the vibes\" and forgetting the code even exists. For prototypes, it genuinely works. For production SaaS with real billing and real users, the gap between \"it runs\" and \"it ships\" is where most vibecoding apps quietly stall.",[11,23,24],{},"This is an honest map of what vibe coding actually does, where the tools break, and how agent-guided building differs from one-shot generation.",[26,27,29],"h2",{"id":28},"what-vibe-coding-actually-is","What Vibe Coding Actually Is",[11,31,32],{},"Vibe coding is AI-assisted development where natural language drives code generation instead of traditional syntax. You describe intent; a model produces implementation.",[11,34,35],{},"But \"vibe coding\" is a spectrum, not one thing:",[37,38,39,47],"ul",{},[40,41,42,46],"li",{},[43,44,45],"strong",{},"Pure description"," (Google AI Studio, Lovable): you type a goal, you get output.",[40,48,49,52,53,58],{},[43,50,51],{},"Agent-guided structured building"," (Cursor with conventions, ",[15,54,57],{"href":55,"rel":56},"https:\u002F\u002Fboiledplate.ai",[19],"BoiledPlate","): an agent interviews you, then applies structured changes to a known codebase shape.",[11,60,61],{},"Both use natural language. Only one keeps producing coherent code past the first afternoon.",[26,63,65],{"id":64},"the-promise-vs-the-reality-gap","The Promise vs. the Reality Gap",[11,67,68],{},"Marketing says: describe your app, get a working product. What actually happens is: description → generated code → integration hell.",[11,70,71],{},"The generated code is usually the easy 10%. The other 90% is plumbing — the wiring between services that no demo ever shows. Stripe webhooks that agree with your database. Row-level security policies. Refund state. EU consent flows. i18n strings that have to land in five places before the build stops complaining.",[11,73,74,75,79,80,85],{},"Vibe coding fails silently here because a one-shot generator can produce a Stripe checkout button that ",[76,77,78],"em",{},"looks"," done and has no working webhook behind it. It compiles. It even redirects. It just doesn't record the payment when the user closes the tab. As we've argued before, ",[15,81,84],{"href":82,"rel":83},"https:\u002F\u002Fboiledplate.ai\u002Fblog\u002Fhow-to-ship-saas-fast",[19],"the stack is easy and the plumbing is the project"," — and plumbing is exactly what one-shot tools skip.",[26,87,89],{"id":88},"vibe-coding-tools-an-honest-taxonomy","Vibe Coding Tools: An Honest Taxonomy",[11,91,92],{},"Four broad categories, each solving a different slice:",[37,94,95,101,107,113],{},[40,96,97,100],{},[43,98,99],{},"No-code visual builders"," (FlutterFlow, Canva Code): UI-first, limited backend logic. Fine for MVPs, high lock-in.",[40,102,103,106],{},[43,104,105],{},"Pure language-to-code"," (Google AI Studio, Lovable): fast initial output, weak at multi-service integration.",[40,108,109,112],{},[43,110,111],{},"Agent-guided structured builders"," (BoiledPlate, Cursor + strong conventions): interviews shape the infrastructure, deterministic patches keep the codebase coherent.",[40,114,115,118],{},[43,116,117],{},"Full-stack IDE environments"," (Replit, Bolt.new, Base44): sandboxed and impressive, but you still wire the real services yourself.",[11,120,121],{},"None of these is strictly better. They're built for different points in the lifecycle. The mistake is using an exploration tool for a production launch.",[123,124,126],"h3",{"id":125},"what-each-actually-solves","What each actually solves",[128,129,130,143],"table",{},[131,132,133],"thead",{},[134,135,136,140],"tr",{},[137,138,139],"th",{},"Need",[137,141,142],{},"Who handles it well",[144,145,146,155,163,171,179],"tbody",{},[134,147,148,152],{},[149,150,151],"td",{},"Rapid prototyping",[149,153,154],{},"All of them, inconsistently",[134,156,157,160],{},[149,158,159],{},"Production auth with RLS",[149,161,162],{},"Only tools with deterministic secrets + database-level permissions",[134,164,165,168],{},[149,166,167],{},"Real billing (idempotent webhooks)",[149,169,170],{},"Almost none in one-shot mode",[134,172,173,176],{},[149,174,175],{},"Multi-language i18n",[149,177,178],{},"Almost none automatically",[134,180,181,184],{},[149,182,183],{},"SEO (JSON-LD, canonicals, prerendering)",[149,185,186],{},"Only purpose-built frameworks",[26,188,190],{"id":189},"the-workflow-where-the-time-actually-goes","The Workflow: Where the Time Actually Goes",[11,192,193],{},"People imagine vibecoding apps is 90% prompting. In practice, for anything real:",[37,195,196,202,208,214,220,226],{},[40,197,198,201],{},[43,199,200],{},"Prompt clarity and iteration"," — 5–15% of time, but decisive.",[40,203,204,207],{},[43,205,206],{},"Reviewing generated code quality"," — 20–30%.",[40,209,210,213],{},[43,211,212],{},"Service provisioning"," (Stripe, Supabase, Google OAuth) — manual in most tools.",[40,215,216,219],{},[43,217,218],{},"Webhook architecture and idempotency"," — 30–40%. This is the real work.",[40,221,222,225],{},[43,223,224],{},"Edge cases"," — refunds, subscription transitions, EU withdrawal periods.",[40,227,228,231],{},[43,229,230],{},"Deployment and monitoring"," — always an afterthought.",[11,233,234],{},"The prompt is the smallest slice. The webhook is the biggest. That ratio is why \"describe your app\" undersells the job.",[26,236,238],{"id":237},"ai-agents-vs-vibe-coding-tools","AI Agents vs. Vibe Coding Tools",[11,240,241],{},"The core difference is memory and structure.",[11,243,244,245,248],{},"A vibe coding tool does one-shot generation with a limited context window and no persistent conventions. An agent working against a starter kit does iterative interviews, applies deterministic patches, and reads a contract that tells it how ",[76,246,247],{},"this"," codebase does things.",[11,250,251,252,257,258,262],{},"That contract matters more than it sounds. As we've written, ",[15,253,256],{"href":254,"rel":255},"https:\u002F\u002Fboiledplate.ai\u002Fblog\u002Fconventions-for-ai-coding-agents",[19],"an agent cannot smell a codebase"," — give it three ways to fetch data and it cheerfully adds a fourth, because it has no reason to prefer yours. Without written conventions, every suggestion drifts a little further from the shape of your code. BoiledPlate ships an ",[259,260,261],"code",{},"AGENTS.md"," contract precisely so the agent reads one documented way to do data access and secrets, then respects your customizations instead of reinventing them.",[26,264,266],{"id":265},"the-billing-problem-nobody-solves","The Billing Problem Nobody Solves",[11,268,269],{},"This is where vibecoding apps break most predictably.",[11,271,272,273,278],{},"Client-side success pages lie. The user pays, the browser redirects, and then they close the tab before your success page finishes running. If your billing state depends on that page, you just lost a payment record. The only reliable source of truth is the Stripe webhook — ",[15,274,277],{"href":275,"rel":276},"https:\u002F\u002Fboiledplate.ai\u002Fblog\u002Fstripe-webhooks-source-of-truth",[19],"your checkout success page should not touch your billing state"," at all.",[11,280,281],{},"Doing this right requires:",[37,283,284,296,302],{},[40,285,286,289,290,295],{},[43,287,288],{},"Idempotent webhooks"," so a redelivered event doesn't double-charge or double-provision. Stripe ",[15,291,294],{"href":292,"rel":293},"https:\u002F\u002Fdocs.stripe.com\u002Fwebhooks#handle-duplicate-events",[19],"explicitly recommends"," handling duplicate events.",[40,297,298,301],{},[43,299,300],{},"Refund and downgrade state machines"," — partial refunds, subscription changes, EU withdrawal windows.",[40,303,304,307],{},[43,305,306],{},"Stripe as the single source of truth",", with everything else a view of Stripe state.",[11,309,310],{},"Almost no one-shot tool encodes this. It requires ongoing architecture, not a single generation.",[26,312,314],{"id":313},"auth-and-security-where-it-breaks-quietly","Auth and Security: Where It Breaks Quietly",[11,316,317,318,321,322,325],{},"Row-level security is invisible in generated code and critical in production. A generator can wire Google sign-in flawlessly and still leave your database wide open, because sign-in only proves ",[76,319,320],{},"who"," the user is — RLS decides ",[76,323,324],{},"what rows"," they can touch.",[11,327,328],{},"Supabase RLS policies are auto-generated wrong more often than right. This is the classic \"a user saw someone else's data\" bug, and it never shows up in a demo because demos have one user. Agent-driven builders solve this by encoding RLS templates as part of the starter, not leaving each policy to a fresh guess.",[26,330,332],{"id":331},"real-world-bugs-in-generated-code","Real-World Bugs in Generated Code",[11,334,335],{},"Generated code fails in specific, repeatable ways:",[37,337,338,350,360,366],{},[40,339,340,343,344,349],{},[43,341,342],{},"JSON-LD hydration crashes"," in Nuxt SSR — a page that returns ",[15,345,348],{"href":346,"rel":347},"https:\u002F\u002Fboiledplate.ai\u002Fblog\u002Fthe-page-that-returned-200-on-the-server-and-500-in-the-browser-a-json-ld-tempor",[19],"200 from curl and 500 in the browser"," because of source order. A generator won't catch this; it's an integration bug, not a syntax bug.",[40,351,352,355,356,359],{},[43,353,354],{},"Canonical URL edge cases"," — trailing slashes, query params, and the memorable case of a blog telling Google its canonical URL was ",[259,357,358],{},"localhost:3000",".",[40,361,362,365],{},[43,363,364],{},"TypeScript strict mode"," — most generators skip it and hand you union-type nightmares.",[40,367,368,371],{},[43,369,370],{},"Peer dependency conflicts"," — Stripe SDK versions, Supabase auth breaking changes.",[11,373,374],{},"None of these are clever problems. They're endless, slightly different, and exactly the kind of thing that eats a launch weekend.",[26,376,378],{"id":377},"the-cost-equation","The Cost Equation",[11,380,381],{},"Realistic numbers matter more than hype:",[37,383,384,390,396],{},[40,385,386,389],{},[43,387,388],{},"Time to working prototype",": a couple of hours in Lovable; roughly an hour with a structured starter if the interview is clear.",[40,391,392,395],{},[43,393,394],{},"Time to production-ready",": add 2–4 weeks of plumbing regardless of tool.",[40,397,398,401],{},[43,399,400],{},"Cost of lock-in",": high with FlutterFlow and Canva Code, medium with Replit and Bolt, low with GitHub-native delivery where the code lives next to your CI\u002FCD.",[11,403,404],{},"The prototype gap between tools is small. The production gap is enormous, and it's decided by architecture, not by prompt quality.",[26,406,408],{"id":407},"choosing-a-tool-a-quick-matrix","Choosing a Tool: A Quick Matrix",[37,410,411,417,423,429,435],{},[40,412,413,416],{},[43,414,415],{},"MVP under a week",": Google AI Studio, Lovable, Canva Code.",[40,418,419,422],{},[43,420,421],{},"Production SaaS with billing",": an agent plus a strong starter kit, or manual work with agent oversight.",[40,424,425,428],{},[43,426,427],{},"Mobile-first",": FlutterFlow.",[40,430,431,434],{},[43,432,433],{},"Maximum flexibility",": Replit, Bolt.new — sandboxed, but you wire everything.",[40,436,437,440],{},[43,438,439],{},"Zero lock-in",": GitHub + Claude agent + a Nuxt\u002FSupabase\u002FStripe starter.",[26,442,444],{"id":443},"why-nuxt-supabase-stripe-works-for-agents","Why Nuxt + Supabase + Stripe Works for Agents",[11,446,447,448,453],{},"This combination isn't fashion; it's about predictable integration points. Nuxt's universal rendering forces deterministic patterns an agent can read and extend. Supabase RLS policies are template-able. Stripe webhooks give one unambiguous source of truth. Every SaaS starter ships this stack — but as we've noted, ",[15,449,452],{"href":450,"rel":451},"https:\u002F\u002Fboiledplate.ai\u002Fblog\u002Fnuxt-saas-boilerplate-for-ai-agents",[19],"that was never the hard part",". The parts are cheap; bolting them together is the project.",[26,455,457],{"id":456},"what-vibe-coding-wont-do-yet","What Vibe Coding Won't Do Yet",[11,459,460],{},"Be honest about the ceiling. Generated schemas are brittle, so migrations are risky. Updating generated code tends to break old queries. Vibe-coded apps are hard to inherit because no one wrote down the conventions, which means no one owns the plumbing. And AI-generated code against regulatory requirements is still a gray area.",[26,462,464],{"id":463},"where-vibe-coding-genuinely-shines","Where Vibe Coding Genuinely Shines",[11,466,467,468,471],{},"None of this means vibe coding is a fad. It is genuinely faster for exploration, for the prototype-to-feedback loop, and for grinding down repetitive boilerplate. The best use of an agent isn't \"build me a startup\" — it's \"given this codebase shape, what's the right next step?\" That question only has a good answer when the codebase ",[76,469,470],{},"has"," a documented shape.",[26,473,475],{"id":474},"conclusion-a-layer-not-a-replacement","Conclusion: A Layer, Not a Replacement",[11,477,478,479,481],{},"The real speedup in vibecoding apps isn't the initial generation — it's structured integration. The framework was never what slowed you down; the plumbing was. Use vibe coding tools for exploration, and use agent-guided starter kits for production, where deterministic patches and an ",[259,480,261],{}," contract keep output coherent past month three.",[11,483,484,485,490],{},"That's the model BoiledPlate is built around: an agent that interviews you, provisions Stripe, Supabase, and Google sign-in, and then respects your customizations instead of drifting away from them. You can read ",[15,486,489],{"href":487,"rel":488},"https:\u002F\u002Fboiledplate.ai\u002Fblog",[19],"more of the engineering log on the blog"," — every edge case it took to make the plumbing trustworthy is written down, because that's the part vibe coding still can't hand you for free.",{"title":492,"searchDepth":493,"depth":493,"links":494},"",3,[495,497,498,501,502,503,504,505,506,507,508,509,510,511],{"id":28,"depth":496,"text":29},2,{"id":64,"depth":496,"text":65},{"id":88,"depth":496,"text":89,"children":499},[500],{"id":125,"depth":493,"text":126},{"id":189,"depth":496,"text":190},{"id":237,"depth":496,"text":238},{"id":265,"depth":496,"text":266},{"id":313,"depth":496,"text":314},{"id":331,"depth":496,"text":332},{"id":377,"depth":496,"text":378},{"id":407,"depth":496,"text":408},{"id":443,"depth":496,"text":444},{"id":456,"depth":496,"text":457},{"id":463,"depth":496,"text":464},{"id":474,"depth":496,"text":475},"2026-07-19","Explore how vibecoding apps work, where they break down, and the gap between prototypes and production SaaS that actually ships with real users.",false,"md",{},true,"\u002Fblog\u002Fvibecoding-apps-promise-vs-reality",{"title":5,"description":513},"blog\u002Fvibecoding-apps-promise-vs-reality",[522,523,524,525],"vibecoding","AI development","code generation","SaaS development","6xVs1JNK5DqaC2I5I7p7VIrAUYF6PkCHDYjGNHtBzOs",[528,841,1182],{"id":529,"title":530,"author":6,"body":531,"category":6,"date":829,"description":830,"draft":514,"extension":515,"image":6,"meta":831,"navigation":517,"path":832,"seo":833,"stem":834,"tags":835,"__hash__":840},"blog\u002Fblog\u002Fvibe-coding-gemini-production.md","Vibe Coding with Gemini: From Demo to Production Reality",{"type":8,"value":532,"toc":813},[533,536,540,543,546,550,553,556,559,563,566,569,583,591,595,598,605,608,616,620,623,631,638,642,650,663,676,680,683,694,698,706,730,734,742,746,749,753,756,768,774,777,781,790,794,800,804],[11,534,535],{},"Vibe coding is having a moment. Type a sentence, get an app. Google's pitch with Gemini in AI Studio is that anyone can describe a \"vibe\" and watch a working React app appear, then ship it to Cloud Run in minutes. It's genuinely impressive. It's also where most of the honest conversation stops. Because the distance between \"it runs on my screen\" and \"it survives paying customers\" is exactly the distance this article is about.",[26,537,539],{"id":538},"what-vibe-coding-actually-means","What \"Vibe Coding\" Actually Means",[11,541,542],{},"Vibe coding means turning natural-language prompts into functional code — not sketches, not pseudocode, but something that compiles and deploys. You describe the goal (\"a neon-themed pomodoro timer for my kid\") and Gemini writes it. People have built personalized apps in under 30 minutes this way, and the demos are real.",[11,544,545],{},"The gap is between \"describe your vibe\" and \"ships to production.\" Gemini positions this as democratized development: anyone can code now. What that actually requires, once you leave the single-file demo, is everything vibe coding quietly skips — billing state, data isolation, webhook retries, compliance. The framework was never the hard part.",[26,547,549],{"id":548},"gemini-vs-claude-the-agent-architecture-choice","Gemini vs. Claude: The Agent Architecture Choice",[11,551,552],{},"The two dominant coding-agent styles behave very differently, and it matters more than benchmarks suggest.",[11,554,555],{},"Gemini sprints. As one developer put it comparing it to Claude Code, \"Gemini doesn't make a plan and ask you if you want to proceed. It sprints ahead.\" That's fast and satisfying for a prototype. Gemini 2.5 Flash is faster still than Gemini 3 Pro, but developers who ran the same project through both found Flash more manual and more error-prone — speed traded against correctness.",[11,557,558],{},"Claude's agentic workflow leans the other way: plan first, then execute deliberate, repeatable changes. For a throwaway timer, planning is overhead. For a multi-tenant SaaS with billing, planning is the whole game. Consistency beats velocity the moment your codebase outlives the first session.",[26,560,562],{"id":561},"the-real-cost-of-fast-single-file-apps-vs-plumbing","The Real Cost of \"Fast\": Single-File Apps vs. Plumbing",[11,564,565],{},"A neon React timer in half an hour is a fair benchmark for what vibe coding covers well: UI components, basic logic, deployment scaffolding.",[11,567,568],{},"Here's what it doesn't touch:",[37,570,571,574,577,580],{},[40,572,573],{},"Signature-verified, idempotent Stripe webhooks",[40,575,576],{},"Row-level security so users can't read each other's rows",[40,578,579],{},"Refund flows that don't double-cancel on a retry",[40,581,582],{},"EU consent compliance baked into the pay button",[11,584,585,586,590],{},"None of that is clever work. It's endless, slightly-different-every-time work — the kind we call ",[15,587,589],{"href":82,"rel":588},[19],"plumbing",". And it's where launches actually stall. Vibe coding a UI is a solved problem. Wiring the services beneath it is the project.",[26,592,594],{"id":593},"building-real-apps-where-google-ai-studio-hits-a-wall","Building Real Apps: Where Google AI Studio Hits a Wall",[11,596,597],{},"Google AI Studio's newer vibe-coding experience can add databases and even multiplayer. That's progress, but \"add a database\" is where the real work starts, not where it ends.",[11,599,600,601,604],{},"Multiplayer requires state synchronization and, critically, ",[43,602,603],{},"row-level security"," so one user's writes never leak into another's session. A database alone gives you none of that — you still need a migration strategy, schema validation, and a policy layer enforced at query time.",[11,606,607],{},"Billing is worse. Provisioning Stripe products, verifying webhook signatures, and making handlers idempotent is not something a prompt reliably produces. And auth? Adding Google sign-in is trivial. Managing the user session, the RLS policies tied to it, and the secrets that must never reach the client is not.",[11,609,610,611,615],{},"This is exactly the box-of-parts problem we've written about before: ",[15,612,614],{"href":450,"rel":613},[19],"every boilerplate ships the stack",", then leaves you alone in a room with the wiring.",[26,617,619],{"id":618},"the-vibe-coding-workflow-that-actually-works-for-saas","The Vibe Coding Workflow That Actually Works for SaaS",[11,621,622],{},"The missing step in the \"describe it and deploy\" pitch is the interview.",[11,624,625,626,630],{},"Before an agent should touch a SaaS codebase, it needs answers: What's the billing model — one-time or subscription, how many plans? What user roles exist? What data must be isolated per tenant? BoiledPlate's setup runs exactly this way — ",[15,627,629],{"href":55,"rel":628},[19],"your coding agent interviews you",", then provisions Stripe, Supabase, and Google sign-in based on your answers.",[11,632,633,634,637],{},"Those answers drive ",[43,635,636],{},"deterministic patches",": automated, repeatable code changes that reshape the starter to your specific setup rather than hallucinating a fresh architecture each run. And validation matters — \"the code compiles\" is not \"the billing survives production.\" Those are two entirely different claims.",[26,639,641],{"id":640},"webhook-architecture-the-plumbing-nobody-teaches","Webhook Architecture: The Plumbing Nobody Teaches",[11,643,644,645,649],{},"Here is the single lesson most vibe-coded billing systems get wrong: your checkout success page is not your source of truth. ",[15,646,648],{"href":275,"rel":647},[19],"Stripe webhooks are",". The user can close the tab, lose signal, or refresh — the webhook is what tells you money moved.",[11,651,652,653,656,657,662],{},"That means handlers must be ",[43,654,655],{},"idempotent",". Stripe retries deliveries. If your handler grants access or cancels a subscription twice because it got called twice, you have a bug that only shows up under load. We've written in detail about ",[15,658,661],{"href":659,"rel":660},"https:\u002F\u002Fboiledplate.ai\u002Fblog\u002Fthe-github-invite-is-the-product-building-a-stripe-webhook-where-delivery-throws",[19],"a webhook where some failures must throw and some must never do"," — the distinction is the difference between a self-healing system and a support ticket.",[11,664,665,666,671,672,675],{},"Compliance lives here too. Encoding a ",[15,667,670],{"href":668,"rel":669},"https:\u002F\u002Fboiledplate.ai\u002Fblog\u002Fstripe-checkout-consent-collection-german-withdrawal-waiver",[19],"German withdrawal-right waiver into the pay button"," via Stripe's ",[259,673,674],{},"consent_collection"," is not something a vibe prompt knows to do. It's compliance as code, and it's mandatory in the EU.",[26,677,679],{"id":678},"agent-consistency-writing-conventions-that-survive-updates","Agent Consistency: Writing Conventions That Survive Updates",[11,681,682],{},"An agent cannot smell a codebase. Give it three ways to fetch data and it adds a fourth — not because it's dumb, but because it has no reason to prefer yours. This is the failure mode behind \"anyone can code\": the agent drifts, and by month three you have five patterns for one job.",[11,684,685,686,688,689,693],{},"The fix is a contract. An ",[259,687,261],{}," file documents one way to access data, handle secrets, and apply patches, so ",[15,690,692],{"href":254,"rel":691},[19],"agent output stays consistent"," past the first session. Gemini's sprint-ahead style has no equivalent plan-and-confirm gate, which is fine for a demo and dangerous for a codebase you'll maintain for a year.",[26,695,697],{"id":696},"vibe-coding-languages-frameworks-and-real-bugs","Vibe Coding Languages, Frameworks, and Real Bugs",[11,699,700,701,705],{},"Most vibe coding assumes one language — JavaScript or TypeScript — and one happy path. Production is messier. A serious SaaS often needs ",[15,702,704],{"href":55,"rel":703},[19],"four languages from day one"," via i18n, where a single new locale string has to land in five places before the build stops complaining.",[11,707,708,709,713,714,719,720,723,724,729],{},"Real debugging stories make the point. We shipped a page that ",[15,710,712],{"href":346,"rel":711},[19],"returned 200 from curl and 500 in Chrome"," — a JSON-LD hydration bug hiding in source order. Our blog once ",[15,715,718],{"href":716,"rel":717},"https:\u002F\u002Fboiledplate.ai\u002Fblog\u002Four-blog-canonically-pointed-at-localhost",[19],"told Google its canonical URL was localhost:3000",". A ",[259,721,722],{},"@vercel\u002Fanalytics"," install ",[15,725,728],{"href":726,"rel":727},"https:\u002F\u002Fboiledplate.ai\u002Fblog\u002Fvercel-web-analytics-nuxt-4-analytics-package-breaks-typecheck",[19],"broke Nuxt typecheck"," through a peer-dependency conflict. None of these appear in a vibe-coding demo. All of them appear in a real project.",[26,731,733],{"id":732},"typed-end-to-end-why-vibe-coding-needs-typescript-discipline","Typed End to End: Why Vibe Coding Needs TypeScript Discipline",[11,735,736,737,741],{},"Natural-language-to-code loves shortcuts, and the first shortcut is usually type safety. That's a false economy. TypeScript in ",[15,738,740],{"href":55,"rel":739},[19],"strict mode"," catches bugs at compile time instead of in a customer's checkout. Pair it with Zod validation and a database schema treated as a single source of truth, and refactors stop being terrifying. Vibe code without types and you're signing up for refactoring hell the first time requirements change.",[26,743,745],{"id":744},"deployment-speed-is-not-shipping-speed","Deployment Speed Is Not Shipping Speed",[11,747,748],{},"\"Deploy to Cloud Run in minutes\" is a genuine feature. But fast-to-first-deploy and safe-in-production pull in opposite directions. A template you clone hands you parts. A kit that adapts to your interview answers hands you a wired product — and, in BoiledPlate's case, delivers it through a GitHub invite with lifetime updates. The delivery mechanism is instant; the value is that the plumbing already agrees with itself.",[26,750,752],{"id":751},"when-vibe-coding-makes-sense-and-when-it-doesnt","When Vibe Coding Makes Sense (And When It Doesn't)",[11,754,755],{},"Be honest about fit.",[11,757,758,761,762,767],{},[43,759,760],{},"Reach for Gemini AI Studio"," for prototypes, internal tools, learning projects, and quick wins. It genuinely shines here, and Google's own ",[15,763,766],{"href":764,"rel":765},"https:\u002F\u002Fai.google.dev\u002F",[19],"vibe-coding documentation"," is a good starting point.",[11,769,770,773],{},[43,771,772],{},"Reach for agent-driven plumbing"," the moment you have billing-critical, multi-tenant, or compliance-heavy requirements. The checklist is simple: does your app need webhooks, RLS, or signature verification? If yes, you've left vibe-coding territory.",[11,775,776],{},"The pragmatic middle is a hybrid — vibe code the UI, then apply deterministic patches to the dangerous parts.",[26,778,780],{"id":779},"the-one-time-cost-vs-subscription-trap","The One-Time Cost vs. Subscription Trap",[11,782,783,784,789],{},"\"Free and fast\" often means \"expensive to maintain.\" Free vibe-coding access still leaves you owning recurring infrastructure and — worse — the ongoing cost of code nobody wrote a contract for. BoiledPlate Pro is €159 one-time with lifetime updates and no lock-in, and if you want to start free, ",[15,785,788],{"href":786,"rel":787},"https:\u002F\u002Fboiledplate.ai\u002Fblog\u002Ffree-nuxt-supabase-saas-boilerplate",[19],"BoiledPlate Lite is MIT-licensed",". What you actually pay for isn't the stack — it's the agent-readable contracts, deterministic patches, and compliance encoded as code.",[26,791,793],{"id":792},"the-future-of-vibe-coding-maturity-not-speed","The Future of Vibe Coding: Maturity, Not Speed",[11,795,796,797,799],{},"The trajectory is clear: from \"write code fast\" to \"write code safely.\" ",[259,798,261],{},"-style contracts are becoming the norm, and deterministic patches are the bridge between a natural-language prompt and code you'd put in front of a paying customer. Speed got us the demo. Consistency gets us production.",[26,801,803],{"id":802},"getting-started","Getting Started",[11,805,806,807,812],{},"Use Gemini when you're learning or experimenting. Use an agent-driven kit when you're shipping something with money, tenants, or regulators involved. If your vibe-coded app touches billing state, isolates user data, or verifies a webhook signature, the plumbing is your project — and it's worth reading ",[15,808,811],{"href":809,"rel":810},"https:\u002F\u002Fboiledplate.ai\u002Fblog\u002Fnuxt-supabase-stripe-saas-boilerplate",[19],"what wiring a Nuxt, Supabase and Stripe SaaS actually demands"," before you promise a launch date.",{"title":492,"searchDepth":493,"depth":493,"links":814},[815,816,817,818,819,820,821,822,823,824,825,826,827,828],{"id":538,"depth":496,"text":539},{"id":548,"depth":496,"text":549},{"id":561,"depth":496,"text":562},{"id":593,"depth":496,"text":594},{"id":618,"depth":496,"text":619},{"id":640,"depth":496,"text":641},{"id":678,"depth":496,"text":679},{"id":696,"depth":496,"text":697},{"id":732,"depth":496,"text":733},{"id":744,"depth":496,"text":745},{"id":751,"depth":496,"text":752},{"id":779,"depth":496,"text":780},{"id":792,"depth":496,"text":793},{"id":802,"depth":496,"text":803},"2026-07-17","Explore vibe coding with Google's Gemini: how natural language turns into working apps. Learn what's missing between impressive demos and production-ready systems.",{},"\u002Fblog\u002Fvibe-coding-gemini-production",{"title":530,"description":830},"blog\u002Fvibe-coding-gemini-production",[836,837,838,839],"vibe-coding","gemini","ai-development","cloud-run","9t7yKExFOOtTP4gAd2PO34EvsBA731bM-sFnHMUa4E0",{"id":842,"title":843,"author":6,"body":844,"category":6,"date":1170,"description":1171,"draft":514,"extension":515,"image":6,"meta":1172,"navigation":517,"path":1173,"seo":1174,"stem":1175,"tags":1176,"__hash__":1181},"blog\u002Fblog\u002Fandrej-karpathy-vibe-coding.md","Andrej Karpathy's Vibe Coding: The Rise and Fall",{"type":8,"value":845,"toc":1154},[846,849,853,856,859,862,865,869,883,886,889,892,896,899,902,905,909,912,924,927,934,938,941,944,947,951,957,963,969,975,981,985,993,996,999,1002,1006,1009,1012,1015,1019,1022,1025,1028,1032,1035,1042,1045,1049,1052,1098,1102,1105,1108,1112,1115,1118,1121,1125,1131,1137,1143],[11,847,848],{},"Andrej Karpathy dropped a tweet in February 2025 that renamed how a generation of developers talked about their work. \"Vibe coding,\" he called it — fully giving in to the vibes, embracing exponentials, forgetting the code even exists. Within a year the phrase was everywhere, then it curdled into a buzzword, and by February 2026 Karpathy himself had quietly moved on. This guide traces the whole arc: what vibe coding actually meant, where it breaks, and what serious builders do instead.",[123,850,852],{"id":851},"what-is-vibe-coding","What is Vibe Coding?",[11,854,855],{},"Vibe coding is software development where you lean on a large language model to generate code and trust its output rather than reading every line. Karpathy's framing was deliberately loose: describe what you want, accept the diff, run it, and if it works, keep going.",[11,857,858],{},"The core philosophy is about embracing exponential capability. Models improve fast, so why fight them with perfectionism? You prompt, you iterate, you ship.",[11,860,861],{},"This is a genuine break from structured, methodical coding, where every function is reasoned about and every architectural decision is deliberate. Vibe coding says: let the model hold the details, you hold the intent.",[11,863,864],{},"The mindset shift is real. You stop being the author and start being the director. That works beautifully — right up until it doesn't.",[123,866,868],{"id":867},"the-origins-karpathys-vision","The Origins: Karpathy's Vision",[11,870,871,872,877,878,882],{},"The ",[15,873,876],{"href":874,"rel":875},"https:\u002F\u002Fx.com\u002Fkarpathy\u002Fstatus\u002F1886192184808149383",[19],"original post"," landed in early 2025 and spread within days. ",[15,879,881],{"href":17,"rel":880},[19],"Wikipedia"," now credits Karpathy with coining the term.",[11,884,885],{},"What he actually meant was narrower than how it was received. His examples were throwaway projects — weekend apps, scripts, things where a bug just meant asking the model to fix it. The point was fun, not recklessness.",[11,887,888],{},"The misinterpretation came fast. \"Vibe coding\" got read as license to ship production software without understanding it. That is not what the phrase was built to carry.",[11,890,891],{},"Context matters. In early 2025, AI coding was good enough to feel magical and immature enough to fail silently. Vibes filled the gap between capability and reliability.",[123,893,895],{"id":894},"how-vibe-coding-actually-works-in-practice","How Vibe Coding Actually Works in Practice",[11,897,898],{},"In practice, vibe coding is a rhythm: prompt, read the result loosely, run it, correct with another prompt. You stay in flow, and the LLM absorbs the tedium.",[11,900,901],{},"The skill is knowing when to override the vibe. If the output touches money, auth, or user data, you stop vibing and start reading. If it's UI scaffolding or a data transform, you let it ride.",[11,903,904],{},"Tools like Cursor and Claude made this possible, but the real enabler was architectural: choosing a stack and conventions the model already understands well. A model vibes better inside familiar terrain.",[123,906,908],{"id":907},"vibe-coding-meets-production-reality","Vibe Coding Meets Production Reality",[11,910,911],{},"Vibes carry you through scaffolding. They collapse at the plumbing.",[11,913,914,915,918,919,923],{},"We learned this building ",[15,916,57],{"href":55,"rel":917},[19],", where the stack was the easy part and the wiring ate the weeks. As we argued in ",[15,920,922],{"href":82,"rel":921},[19],"how to ship SaaS fast",", the framework picks itself — Stripe verification, row-level security, and idempotency are where launches actually stall.",[11,925,926],{},"You cannot vibe your way to a signature-verified webhook. Cryptographic correctness is binary. Full vibe coding fails at scale because the failures are silent: a user sees someone else's data, a subscription state drifts, a webhook fires twice.",[11,928,929,930,933],{},"What helps is structure. Building SaaS with agents requires contracts — an ",[15,931,261],{"href":254,"rel":932},[19]," file that documents one way to do data access and secrets, so the agent stays consistent instead of inventing a fourth pattern.",[123,935,937],{"id":936},"the-karpathy-pivot-why-he-moved-on-february-2026","The Karpathy Pivot: Why He Moved On (February 2026)",[11,939,940],{},"By February 2026, Karpathy had publicly declared vibe coding outdated. His reasoning: LLMs got smart enough that \"vibes\" was no longer the right word for what good AI-assisted development looked like.",[11,942,943],{},"The landscape had matured. Models could follow explicit conventions, apply structured edits, and reason about architecture. The loose, forget-the-code-exists ethos felt incomplete against that.",[11,945,946],{},"His pivot signals something bigger: AI development grew up. The frontier moved from \"trust the model\" to \"constrain the model well.\" The industry got stuck arguing about the word \"vibe\" while the actual evolution was happening in tooling and contracts.",[123,948,950],{"id":949},"five-different-approaches-to-vibe-coding","Five Different Approaches to Vibe Coding",[11,952,953,956],{},[43,954,955],{},"Pure vibes."," Full trust, minimal oversight. Great for scripts and prototypes. Fails predictably for anything with real users.",[11,958,959,962],{},[43,960,961],{},"Vibes with guardrails."," Prompting combined with deterministic patches and schema validation, so the model's output gets checked before it lands.",[11,964,965,968],{},[43,966,967],{},"Vibe coding for architecture."," Use agents to design systems and explore options, then let humans wire the sensitive plumbing by hand.",[11,970,971,974],{},[43,972,973],{},"Agent-native development."," Build around an AGENTS.md contract so agents produce consistent output across months, not just across a single session.",[11,976,977,980],{},[43,978,979],{},"Post-vibe coding."," Structured prompting, explicit contracts, deterministic outputs. This is the direction Karpathy's pivot points toward.",[123,982,984],{"id":983},"vibe-coding-vs-deterministic-coding","Vibe Coding vs. Deterministic Coding",[11,986,987,988,992],{},"The problem with vibes alone is drift. An agent given three ways to fetch data will ",[15,989,991],{"href":254,"rel":990},[19],"cheerfully add a fourth",", because it has no reason to prefer yours.",[11,994,995],{},"Drift costs rework. Every time LLM output diverges from your conventions, someone has to notice, refactor, and re-explain — often the agent itself, badly.",[11,997,998],{},"Deterministic patches and semantic contracts prevent this decay. Instead of hoping the model matches your style, you encode the style as rules it must follow.",[11,1000,1001],{},"The concrete cases make it obvious: webhook idempotency, RLS policies, and multi-language i18n are all places where \"close enough\" is a bug. There are five places a new locale string has to land before the build stops complaining, and vibes will find four of them.",[123,1003,1005],{"id":1004},"the-business-case-vibe-coding-in-startup-context","The Business Case: Vibe Coding in Startup Context",[11,1007,1008],{},"The speed gains from vibes are real and measurable — for the first mile. Scaffolding a landing page, a dashboard shell, a data model happens in minutes now.",[11,1010,1011],{},"Then the curve inverts. The weeks you saved on scaffolding get spent debugging the plumbing vibes couldn't handle. Founders who track this honestly land on the same rule: vibes for the MVP, structure for scale.",[11,1013,1014],{},"Karpathy's 2025 enthusiasm faded by 2026 partly through survivorship filtering. The demos that went viral were the ones that worked. The vibe-coded projects that quietly died in production billing bugs didn't trend.",[123,1016,1018],{"id":1017},"is-vibe-coding-dead","Is Vibe Coding Dead?",[11,1020,1021],{},"The buzzword trap killed the term more than the technique. Once every tool marketed itself as \"vibe coding,\" the phrase meant nothing.",[11,1023,1024],{},"What survived is the useful core: describe intent, let the model do the mechanical work, iterate fast.",[11,1026,1027],{},"What changed is the emphasis. LLMs are smarter, so the need for \"vibes\" shifted to \"conventions.\" The real skill now is judgment — knowing when to trust the agent and when to enforce determinism.",[123,1029,1031],{"id":1030},"the-anti-hype-take-what-developers-actually-need","The Anti-Hype Take: What Developers Actually Need",[11,1033,1034],{},"Here's the uncomfortable read: vibe coding solved the wrong problem. It framed the challenge as attitude — loosen up, trust the model — when the challenge was actually tooling.",[11,1036,1037,1038,359],{},"The real innovation was never vibes. It was agent-readable contracts: AGENTS.md, structured prompts, deterministic provisioning. Every starter that ships the stack misses the point; ",[15,1039,1041],{"href":450,"rel":1040},[19],"the stack was never the hard part",[11,1043,1044],{},"Starter kits with strong conventions beat pure vibes because they give the agent a floor. Building SaaS the way Karpathy now implies means structure plus AI, not vibes plus hope.",[123,1046,1048],{"id":1047},"technical-specifics-where-vibes-fail","Technical Specifics: Where Vibes Fail",[11,1050,1051],{},"Some things simply do not bend to attitude:",[37,1053,1054,1065,1071,1077,1088],{},[40,1055,1056,1059,1060,1064],{},[43,1057,1058],{},"Webhook signature verification."," You cannot vibe cryptographic correctness. See our writeup on treating ",[15,1061,1063],{"href":659,"rel":1062},[19],"the GitHub invite as the product",", where some failures must throw and some must never.",[40,1066,1067,1070],{},[43,1068,1069],{},"Row-level security."," RLS is explicit, not emergent. A missing policy is a data breach, not a rough edge.",[40,1072,1073,1076],{},[43,1074,1075],{},"Idempotent transactions."," The two-generals problem doesn't care how confident your prompt sounded.",[40,1078,1079,1082,1083,1087],{},[43,1080,1081],{},"Consent flows."," ",[15,1084,1086],{"href":668,"rel":1085},[19],"German withdrawal law"," has specific requirements you encode into the pay button, or you don't sell legally.",[40,1089,1090,1082,1093,1097],{},[43,1091,1092],{},"Billing state.",[15,1094,1096],{"href":275,"rel":1095},[19],"Stripe webhooks are the source of truth",", not the optimistic client-side success page.",[123,1099,1101],{"id":1100},"tools-and-patterns-for-post-vibe-coding","Tools and Patterns for Post-Vibe Coding",[11,1103,1104],{},"This is exactly what BoiledPlate encodes: the lessons of vibe coding turned into structure. Instead of vibing through setup, an agent-driven interview provisions Stripe products and webhooks, a Supabase database with RLS, and Google sign-in in one session — deterministically.",[11,1106,1107],{},"The AGENTS.md contract is the evolution of vibes into something a machine can read and honor. And semantic, agent-readable release notes let agents apply updates consistently instead of guessing.",[123,1109,1111],{"id":1110},"lessons-for-the-next-wave-of-ai-coding","Lessons for the Next Wave of AI Coding",[11,1113,1114],{},"Vibe coding was a necessary phase, not the destination. It taught developers that intent-first workflows are faster — and that unstructured trust doesn't survive production.",[11,1116,1117],{},"Karpathy's pivot tells us where things head: verification over trust, contracts over vibes. The skills that will matter are prompt engineering, contract design, and knowing what to check.",[11,1119,1120],{},"The best AI-native code, it turns out, looks less like vibes and more like highly structured conventions a model can follow without drifting.",[123,1122,1124],{"id":1123},"faq-common-misconceptions-about-vibe-coding","FAQ: Common Misconceptions About Vibe Coding",[11,1126,1127,1130],{},[43,1128,1129],{},"Does vibe coding mean no testing?"," No. The durable version is vibes plus verification — generate loosely, validate strictly.",[11,1132,1133,1136],{},[43,1134,1135],{},"Is Karpathy saying not to use LLMs?"," The opposite. Use them heavily, but with determinism and explicit constraints.",[11,1138,1139,1142],{},[43,1140,1141],{},"Can I ship production SaaS on vibes alone?"," Not sustainably. The plumbing — billing, security, compliance — demands structure.",[11,1144,1145,1148,1149,1153],{},[43,1146,1147],{},"What's the successor to vibe coding?"," Agent-native development built on contracts. Start from ",[15,1150,1152],{"href":786,"rel":1151},[19],"a boilerplate designed for agents"," rather than vibing the wiring yourself.",{"title":492,"searchDepth":493,"depth":493,"links":1155},[1156,1157,1158,1159,1160,1161,1162,1163,1164,1165,1166,1167,1168,1169],{"id":851,"depth":493,"text":852},{"id":867,"depth":493,"text":868},{"id":894,"depth":493,"text":895},{"id":907,"depth":493,"text":908},{"id":936,"depth":493,"text":937},{"id":949,"depth":493,"text":950},{"id":983,"depth":493,"text":984},{"id":1004,"depth":493,"text":1005},{"id":1017,"depth":493,"text":1018},{"id":1030,"depth":493,"text":1031},{"id":1047,"depth":493,"text":1048},{"id":1100,"depth":493,"text":1101},{"id":1110,"depth":493,"text":1111},{"id":1123,"depth":493,"text":1124},"2026-07-16","Explore vibe coding, Andrej Karpathy's controversial approach to AI-assisted development. Understand what it means, where it breaks, and serious alternatives.",{},"\u002Fblog\u002Fandrej-karpathy-vibe-coding",{"title":843,"description":1171},"blog\u002Fandrej-karpathy-vibe-coding",[1177,1178,1179,1180],"vibe coding","andrej karpathy","ai development","software engineering","SACUbmvSS-AaQ5e5rFj_7Tzsc3NC1Ldhz-Gf4C2uvSs",{"id":1183,"title":1184,"author":6,"body":1185,"category":6,"date":1617,"description":1618,"draft":514,"extension":515,"image":6,"meta":1619,"navigation":517,"path":1620,"seo":1621,"stem":1622,"tags":1623,"__hash__":1626},"blog\u002Fblog\u002Fvibe-coding-tutorial-build-saas.md","Vibe Coding Tutorial: Build SaaS That Scales",{"type":8,"value":1186,"toc":1602},[1187,1190,1193,1197,1200,1207,1214,1217,1221,1224,1235,1246,1250,1253,1284,1295,1299,1302,1308,1319,1330,1339,1345,1349,1355,1361,1364,1368,1402,1406,1409,1445,1448,1452,1455,1458,1462,1470,1484,1488,1533,1542,1546,1555,1559,1585,1588,1592],[11,1188,1189],{},"Most \"vibe coding tutorial\" content teaches you to build a to-do list. This one assumes you want to ship something people pay for. That changes everything, because the hard part of a SaaS was never the framework or the button that says \"Sign up.\" It's the plumbing underneath — billing, security, email — and that's exactly where vibe coding either saves you weeks or quietly ruins your launch.",[11,1191,1192],{},"Here's how to use an AI agent to build real software, what it's genuinely good at, and where you still have to do the thinking.",[26,1194,1196],{"id":1195},"what-is-vibe-coding-and-what-it-actually-solves","What Is Vibe Coding (and What It Actually Solves)",[11,1198,1199],{},"Vibe coding means describing your intent to an AI agent instead of writing every line by hand. You say \"add a subscription plan with a monthly and annual price,\" and the agent writes the Stripe calls, the database rows, and the webhook handling.",[11,1201,1202,1203,1206],{},"It works now because agents have become reliable at ",[76,1204,1205],{},"deterministic, repeatable"," tasks — the kind of wiring that follows the same pattern every time. That's the sweet spot.",[11,1208,1209,1210,1213],{},"What it is ",[76,1211,1212],{},"not",": magic. It won't design your architecture, and it won't let you skip understanding how your app works. If you can't tell when the agent's output is wrong, you can't ship it.",[11,1215,1216],{},"The real win isn't \"learning to code without learning to code.\" It's offloading the boring integration work so you spend your attention on the product.",[26,1218,1220],{"id":1219},"the-stack-that-matters-more-than-the-agent","The Stack That Matters More Than the Agent",[11,1222,1223],{},"Vibe coding fails hardest on bad architecture. An agent dropped into a chaotic codebase produces chaotic output — it pattern-matches, and if there are three ways to fetch data, it adds a fourth.",[11,1225,1226,1227,1231,1232,359],{},"That's why the stack matters more than the agent. Nuxt + Supabase + Stripe + Resend works well together not because each is best-in-class in isolation, but because each has a clear contract an agent can reason about. Supabase gives you auth fast, but ",[15,1228,1230],{"href":809,"rel":1229},[19],"row-level security is the part everyone forgets",". Stripe's real product is the webhook, not the checkout page. Resend is simple to send with but annoying to send ",[76,1233,1234],{},"exactly once",[11,1236,1237,1238,1240,1241,1245],{},"The tool that ties this together for agents is an ",[259,1239,261],{}," file: one documented way to do data access, secrets, and error handling. ",[15,1242,1244],{"href":254,"rel":1243},[19],"Give an agent conventions instead of guessing"," and its output stays consistent past month three. You're trading maximum flexibility for something an agent can hold in its head.",[26,1247,1249],{"id":1248},"vibe-coding-your-first-saas-from-brainstorm-to-webhook","Vibe Coding Your First SaaS: From Brainstorm to Webhook",[11,1251,1252],{},"A workflow that actually produces a shippable app:",[1254,1255,1256,1262,1272,1278],"ol",{},[40,1257,1258,1261],{},[43,1259,1260],{},"Describe the problem, not the solution."," \"Users need to pay monthly and lose access when they cancel\" beats \"add a Stripe subscription.\"",[40,1263,1264,1267,1268,1271],{},[43,1265,1266],{},"Let the agent interview you."," This is the ",[15,1269,57],{"href":55,"rel":1270},[19]," model — the agent asks about your app name, languages, billing model, and theme before it writes anything.",[40,1273,1274,1277],{},[43,1275,1276],{},"Watch it provision services."," Stripe products and webhooks, a Supabase database with RLS, Google sign-in — provisioned in one session, not clicked together across five dashboards.",[40,1279,1280,1283],{},[43,1281,1282],{},"Validate the plumbing before writing features."," Trigger a test payment. Confirm the webhook fires and the database updates.",[11,1285,1286,1287,1290,1291,1294],{},"What beginners miss: testing webhook ",[76,1288,1289],{},"delivery"," and ",[76,1292,1293],{},"idempotency"," before launch. A payment that succeeds in Stripe but never reaches your database is a customer who paid and got nothing.",[26,1296,1298],{"id":1297},"the-plumbing-nobody-talks-about-but-eats-80-of-the-time","The Plumbing Nobody Talks About (But Eats 80% of the Time)",[11,1300,1301],{},"This is where the difference between a tutorial app and a product lives.",[11,1303,1304,1307],{},[43,1305,1306],{},"Webhook idempotency."," Stripe retries. If your handler runs twice, does the user get charged twice, or granted access twice? An idempotent webhook handles repeated calls without duplicating side effects.",[11,1309,1310,1313,1314,1318],{},[43,1311,1312],{},"Billing state as source of truth."," Never trust a client-side success page. The user's card can succeed while their browser closes. ",[15,1315,1317],{"href":275,"rel":1316},[19],"Your checkout success page should not touch your billing state"," — the webhook is the source of truth.",[11,1320,1321,1324,1325,1329],{},[43,1322,1323],{},"Refund and consent flows."," EU law has real edge cases. A ",[15,1326,1328],{"href":668,"rel":1327},[19],"German withdrawal waiver has to be encoded into the pay button itself",", not bolted on after. An agent won't know this unless you tell it.",[11,1331,1332,1335,1336,1338],{},[43,1333,1334],{},"RLS mistakes."," Agent-generated row-level security often ",[76,1337,78],{}," right and still leaks data — a policy that checks the wrong column, or forgets one table entirely. Review every rule.",[11,1340,1341,1344],{},[43,1342,1343],{},"Email delivery."," Transactional email (receipts, password resets) is not marketing email. Resend handles the sending; you still have to think about bounces and retries.",[26,1346,1348],{"id":1347},"how-to-write-prompts-so-agents-dont-drift","How to Write Prompts So Agents Don't Drift",[11,1350,1351,1352,1354],{},"The single highest-leverage move is the ",[259,1353,261],{}," contract. Document one way to do data access, one way to read secrets, one way to handle errors. The agent reads it and stops inventing alternatives.",[11,1356,1357,1358,1360],{},"Pair that with ",[43,1359,636],{},": repeatable code changes applied the same way every time. \"Apply this pattern everywhere\" beats freestyle iteration that drifts a little with each prompt.",[11,1362,1363],{},"Conventions act as rails — naming patterns, folder structure, comment markers the agent can find. And test the output: validate your schema before the agent's migration touches your database. A bad migration is a lot harder to undo than a bad function.",[26,1365,1367],{"id":1366},"beginner-mistakes-in-vibe-coding-saas","Beginner Mistakes in Vibe Coding SaaS",[37,1369,1370,1376,1382,1388,1394],{},[40,1371,1372,1375],{},[43,1373,1374],{},"Shipping agent-written security rules unreviewed."," RLS is easy to get subtly wrong.",[40,1377,1378,1381],{},[43,1379,1380],{},"Skipping webhook testing because \"it works locally.\""," Local doesn't retry, doesn't fail, doesn't hit real cards.",[40,1383,1384,1387],{},[43,1385,1386],{},"Assuming the agent handles edge cases."," Consent flows, refunds, currency handling — it won't unless prompted.",[40,1389,1390,1393],{},[43,1391,1392],{},"Deploying before the source of truth is clear."," Where does billing state actually live? If you can't answer that, you're not ready.",[40,1395,1396,1082,1399,1401],{},[43,1397,1398],{},"Not version-controlling your agent instructions.",[259,1400,261],{}," is code. Treat it that way.",[26,1403,1405],{"id":1404},"from-vibe-to-production-debugging-real-world-failures","From Vibe to Production: Debugging Real-World Failures",[11,1407,1408],{},"The gap between \"works in the demo\" and \"works in production\" is where real vibe coding skill shows. A few failures we've actually hit and documented:",[37,1410,1411,1420,1429,1439],{},[40,1412,1413,1415,1416,1419],{},[43,1414,342],{}," — a page that ",[15,1417,712],{"href":346,"rel":1418},[19]," because of source order in server-side rendering.",[40,1421,1422,1424,1425,359],{},[43,1423,354],{}," — where ",[15,1426,1428],{"href":716,"rel":1427},[19],"our blog told Google its canonical URL was localhost:3000",[40,1430,1431,1434,1435,359],{},[43,1432,1433],{},"Peer dependency hell"," — when the agent's chosen packages ",[15,1436,1438],{"href":726,"rel":1437},[19],"break your typecheck",[40,1440,1441,1444],{},[43,1442,1443],{},"Webhook retry logic"," — agent-generated retries that hammer your own service.",[11,1446,1447],{},"None of these show up in a happy-path demo. All of them show up in production. Your testing matrix has to cover what the agent can't catch.",[26,1449,1451],{"id":1450},"building-alone-vs-building-with-an-agent-the-honest-comparison","Building Alone vs. Building With an Agent: The Honest Comparison",[11,1453,1454],{},"Agents excel at wiring services, writing boilerplate, and applying deterministic patches. They stumble on edge cases, security review, naming things well, and testing strategy.",[11,1456,1457],{},"The time saved is real: plumbing that takes weeks compresses into a session. But you still own the architecture decisions, the security policy, and the data model. Vibe coding isn't enough for complex business logic, novel integrations, or compliance that needs legal judgment. Those are the parts you keep.",[26,1459,1461],{"id":1460},"boiledplate-as-the-vibe-coding-shortcut","BoiledPlate as the Vibe Coding Shortcut",[11,1463,1464,1465,1469],{},"BoiledPlate ships the whole stack pre-built: Nuxt, Supabase, Stripe, transactional email, four languages, a prerendered Markdown blog, and SEO with JSON-LD and canonical URLs. The ",[15,1466,1468],{"href":82,"rel":1467},[19],"stack was never the hard part"," — the wiring is, and it's already done.",[11,1471,1472,1473,1475,1476,1479,1480,1483],{},"The agent interviews you, provisions your services, patches the codebase to your answers, and delivers via GitHub. The ",[259,1474,261],{}," contract is what lets you iterate fast without the drift. There are two tiers: ",[43,1477,1478],{},"Lite"," (free, MIT-licensed, wire it manually) and ",[43,1481,1482],{},"Pro"," (€159 one-time, lifetime updates, instant GitHub delivery).",[26,1485,1487],{"id":1486},"tools-of-the-vibe-coding-trade-beyond-boiledplate","Tools of the Vibe Coding Trade Beyond BoiledPlate",[37,1489,1490,1496,1505,1516,1522],{},[40,1491,1492,1495],{},[43,1493,1494],{},"Claude Code and Cursor"," — agent interfaces with different strengths; either can run the workflow.",[40,1497,1498,1501,1502,359],{},[43,1499,1500],{},"Supabase"," — RLS is agent-friendly ",[76,1503,1504],{},"once you document the rules",[40,1506,1507,1510,1511,359],{},[43,1508,1509],{},"Stripe"," — webhooks are the contract between your code and billing state. See ",[15,1512,1515],{"href":1513,"rel":1514},"https:\u002F\u002Fboiledplate.ai\u002Fblog\u002Fstripe-subscriptions-nuxt-supabase",[19],"how to set up subscriptions on this stack",[40,1517,1518,1521],{},[43,1519,1520],{},"Resend"," — transactional email your agent-built app can rely on.",[40,1523,1524,1527,1528,1532],{},[43,1525,1526],{},"GitHub"," — ",[15,1529,1531],{"href":659,"rel":1530},[19],"the invite itself can be the product",", provisioned by webhook the moment payment clears.",[11,1534,1535,1536,1541],{},"For the underlying models, ",[15,1537,1540],{"href":1538,"rel":1539},"https:\u002F\u002Fwww.anthropic.com\u002Fengineering",[19],"Anthropic's own guidance on agentic coding"," is worth reading.",[26,1543,1545],{"id":1544},"testing-and-confidence-how-to-know-it-actually-works","Testing and Confidence: How to Know It Actually Works",[11,1547,1548,1549,1554],{},"Let the agent write unit tests. You design the integration tests — they're where the real risks live. Verify webhook delivery with Stripe's CLI. Simulate refunds, plan changes, and currency edge cases. Run a security audit: RLS, secrets, CORS, authentication. Stripe's ",[15,1550,1553],{"href":1551,"rel":1552},"https:\u002F\u002Fdocs.stripe.com\u002Ftesting",[19],"testing documentation"," covers the payment scenarios agents routinely skip. And load-test, because agents ignore it — it's not a \"feature.\"",[26,1556,1558],{"id":1557},"the-vibe-coding-workflow-that-actually-ships","The Vibe Coding Workflow That Actually Ships",[37,1560,1561,1567,1573,1579],{},[40,1562,1563,1566],{},[43,1564,1565],{},"Session 1:"," interview, architecture, service provisioning.",[40,1568,1569,1572],{},[43,1570,1571],{},"Session 2:"," feature definition — agent writes, you review.",[40,1574,1575,1578],{},[43,1576,1577],{},"Session 3:"," edge cases, security, error handling.",[40,1580,1581,1584],{},[43,1582,1583],{},"Session 4:"," deployment, monitoring, a runbook.",[11,1586,1587],{},"Each gate gives you clarity before the next. That beats freestyle iteration, where the rework all lands at the end.",[26,1589,1591],{"id":1590},"beyond-the-first-app-scaling-your-vibe-coded-saas","Beyond the First App: Scaling Your Vibe-Coded SaaS",[11,1593,1594,1595,1597,1598,359],{},"Updates arrive as semantic, agent-readable release notes and opt-in patches — no merge hell over code you customized. ",[259,1596,261],{}," doubles as onboarding for new teammates, human or agent. Expect drift after week two, and maintain your instructions like any other part of the codebase. Eventually you'll hit the handoff point — complex logic where you take the wheel. Recognizing that moment is the last skill a good vibe coder learns. Read more on the ",[15,1599,1601],{"href":487,"rel":1600},[19],"BoiledPlate blog",{"title":492,"searchDepth":493,"depth":493,"links":1603},[1604,1605,1606,1607,1608,1609,1610,1611,1612,1613,1614,1615,1616],{"id":1195,"depth":496,"text":1196},{"id":1219,"depth":496,"text":1220},{"id":1248,"depth":496,"text":1249},{"id":1297,"depth":496,"text":1298},{"id":1347,"depth":496,"text":1348},{"id":1366,"depth":496,"text":1367},{"id":1404,"depth":496,"text":1405},{"id":1450,"depth":496,"text":1451},{"id":1460,"depth":496,"text":1461},{"id":1486,"depth":496,"text":1487},{"id":1544,"depth":496,"text":1545},{"id":1557,"depth":496,"text":1558},{"id":1590,"depth":496,"text":1591},"2026-07-15","Learn vibe coding to ship production SaaS faster. Master AI agents for billing, security, and integrations—skip the to-do lists.",{},"\u002Fblog\u002Fvibe-coding-tutorial-build-saas",{"title":1184,"description":1618},"blog\u002Fvibe-coding-tutorial-build-saas",[1177,1624,525,1625],"AI coding","no-code automation","n7JeaOotMXhmkca_amCNh5CAwRtxcnvBrQy_a87o9gI",1784422316853]