Control center
Custom agents walkthrough
Custom Agents groups agent authoring, testing and publishing, registry, orchestration, supervision, policy, memory, monitoring, analytics and audit screens. The backend mounts matching customAgents routers, but the route tree does not issue direct tRPC queries; treat screens as UI scaffolding unless their composed component explicitly persists an operation.
Key routes
- Agent overview
Entry point for custom-agent capabilities.
- Builder
Open the agent authoring area.
- Orchestration
Review orchestration and run routes.
- Supervision
Review approval and human-supervision surfaces.
- Registry
Browse registered agents.
- Policy
Inspect policy configuration surfaces.
- Audit
Review agent audit and evidence views.
Prerequisites and seed data
- Use an authenticated tenant account. Agent records and execution evidence should belong to that tenant.
- Define intended capabilities, data access, delegation boundaries and review policy before authoring an agent.
- Seed or create agent definitions and runs using a verified backend workflow; a blank registry or run list can be a valid empty state.
Primary workflows
Author and verify an agent
Move through the authoring routes and verify persistence before publishing.
- Open the builder and start a new definition. New agent
- Run the available test flow; do not publish until expected behavior and access boundaries are reviewed. Agent tests
- Inspect the registry to confirm the agent is present before using it. Registry
Review a supervised execution
Inspect run activity and human review surfaces.
Check policy and operational health
Review configured controls and the monitoring surfaces before diagnosing an agent issue.
- Inspect guardrails and data-access policy routes. Guardrails
- Open monitoring to review the available fleet and incident surfaces. Monitoring
Concepts
- Agent definition
- A configured agent identity, instructions and capability boundary; confirm saving and version semantics in the implementation.
- Run
- An execution instance with status and evidence, represented by orchestration run routes.
- Supervision
- Human review controls for approvals, escalations, disagreements and interventions.
- Policy boundary
- Rules constraining data access, delegation, jurisdiction, guardrails and spending.
Data sources and implementation status
- The backend mounts customAgents.audit, builder, customsAgents, evals, memory, monitoring, orchestration, policy, registry and supervision routers.
- The route pages in app/(app)/custom-agents do not directly call tRPC hooks; verify composed component behavior before treating any displayed action as persisted.
- Router registration is in backend/src/trpc/trpc.router.ts; audit and run-related persistence is in backend/src/custom-agents/.
Permissions
- The backend context can derive user and tenant from a bearer token. The custom-agent route files do not call tRPC directly, so each composed control and procedure must be checked for its actual guards.
- The backend supports requireRole middleware and the GlobalRole enum; this walkthrough does not infer an agent-author, approver or publisher mapping.
- The shared createCrudRouter does not attach authentication or role middleware on its own; a tenant filter is not a substitute for authorization.
- Restrict publish, delegation, data access and spend controls to roles approved by your organization; confirm enforcement in each procedure.
Troubleshooting
| Symptom | Check | Where to look |
|---|---|---|
| Builder or registry changes disappear after navigation. | The route tree does not directly invoke tRPC; verify the composed component has a mutation and successful response before relying on persistence. | app/(app)/custom-agents/ and backend/src/custom-agents/ |
| A run has no detail view or evidence. | Confirm a run was created by a connected orchestration procedure and use an actual run ID from the list. | app/(app)/custom-agents/orchestration/runs/ |
| A user cannot approve or publish. | Inspect the procedure’s requireRole middleware and the account’s tenant role. | backend/src/custom-agents/ and backend/src/trpc/trpc.middleware.ts |
Where things live
- Agent route pages
- app/(app)/custom-agents/
- Builder, orchestration, registry and supervision API modules
- backend/src/custom-agents/
- Router registration
- backend/src/trpc/trpc.router.ts
- Authentication and authorization middleware
- backend/src/trpc/trpc.middleware.ts
Audience: developer · Last reviewed: