Take the agent-built app past Emergent Deploy into a real ship
Preview and Deploy are where you proved the agent-built app boots — not where strangers should live without an owned remote. Own GitHub Save/Push, keep preview Mongo separate from production, move secrets out of the workspace, and put a start path on paper so someone else can ship with the agent UI closed. First useful cut — not cancel-the-workspace.
To-production here means the GitHub tree becomes the thing you ship from. Auth checks live where they matter, workspace secrets rotate out, you can name which version is live, and you know how to undo a bad Deploy. Managed hosting may still run — but it is no longer an unexamined finish line. A short note that people can trust the app is.
What living on Emergent Deploy still hides
Agent builds are great at a demo you can show
That is the right first job. The second job is what users feel when preview DB and production DB diverge — whether you wrote it down or not.
Hiding a button is not the same as permission
If a row is only hidden on the screen, someone can still ask for it another way. Production checks every read and write where it counts.
The workspace is a leaky password drawer
Keys that only exist in the agent UI are not a safe home. Rotate anything that lived there.
A green Deploy is not a release record
Production answers: what changed, which GitHub SHA is live, what checks passed, and how to undo.
Deploy-from-workspace is not a full ship process
Reviewed CI builds beat one-click Deploy when uptime and second-engineer deploys matter.
The handoff we actually run
Score the agent-built app as something people can rely on
Keep the journeys. Stop relying on untested Deploy to run the app.
01
Map preview vs production Mongo and Auth redirects
Document which DB production uses. No preview URLs in prod config.
02
Move secrets onto the destination host
Fresh values. Named in a vault. Fail closed when missing.
03
Stand a start path that works with the workspace closed
Second person can release React + FastAPI from GitHub.
04
Name the primary journey and how to roll back
Signup → session → write. Prior tag ready.
How to
How to take an agent-built app past Emergent Deploy into a real ship
Own GitHub, secrets, and DB split. First useful ship — not a full exit.
Step 01
List what still only works because Deploy is live
Workspace secrets, preview DB, managed process shape.
Step 02
Own a GitHub remote of record
Save/Push complete. Lockfiles pinned.
Step 03
Inject destination secrets and re-check Auth redirects
Production domain only. Preview≠prod DB.
Step 04
Ship a known version with the agent UI closed
Logs tag the release.
Step 05
Keep Emergent Deploy as studio until evidence says leave
Document which model production uses — and hosting credit spend.
Read next
Proof, the essay, and sibling intents
These pages are already on the site. Use them to pressure-test the bet before a call.
“What impressed us most about CodeCross was their ability to deeply understand our vision and translate it into a complete digital solution. Unlike many agencies that just focus on technical delivery, CodeCross approached our project like true partners.”
Why do workspace preview and managed Deploy fail an org-host check?
Preview proves the agent’s build runs (and may sleep). Deploy proves a live '.emergent.host' origin. Neither proves you own the GitHub remote, can rotate secrets without every collaborator opening the workspace, or can roll back without Redeploy from the agent UI.
What must be true of the GitHub-synced tree before you point a custom domain at it?
Save/Push to an org repo; pin lockfiles for React and FastAPI (or Expo). Map env names; document preview DB vs production DB. Auth redirects list only your production domain.
How should managed Deploy vs owned host be chosen?
Use Deploy while agent iteration and credit spend are acceptable — and budget lock-in. Prefer org GitHub plus external CI when rollback and second-engineer deploys matter. Document which model production uses.
How do you prove a GitHub Save/Push ship without regenerating every screen?
Run signup → session → write on the custom domain with production secrets after GitHub sync. Confirm Auth fails closed when env is wrong, and closing the workspace does not stop the destination host — or that Emergent Deploy is an explicit choice.
Keep the agent-built app. Stop treating Emergent Deploy as the finish line.
Bring preview vs prod DB notes, workspace secret inventory, and who can Deploy today. We put owned ship first — and we leave the workspace as a studio until evidence says leave.