AI Code Repair and Vibe Coded App Rescue

Stuck with an app generated by Firebase Studio, Lovable, Cursor or an AI assistant? I fix the architecture, close the security holes, add real authentication and tests, and ship it

Building with an AI assistant gets you to a working demo faster than anything before it. Then the same three things go wrong: the data model was never designed, authentication and access rules are decorative, and nobody can tell which half of the code is actually used.

That is a rescue job, not a rebuild. I read what exists, keep the parts that earn their place, and fix the rest in order of risk.

The usual list: real authentication and authorisation, Firestore or database security rules that actually deny something, secrets moved out of client code, input validation, a sane data model with a migration path off the current one, error handling and logging, tests around the parts that must not break, and a deployment pipeline that can roll back.

Firebase Studio prototypes are a common case and a lucky one: they output Next.js and Firebase, which is exactly the stack I ship in production, so the road from prototype to live product is short.

You get a written assessment first, listing what is broken, what it costs to fix and what can safely wait. If the honest answer is that a rewrite is cheaper than a repair, that is the answer you get.