Brokered short-lived provider credentials client in matrx-frontend (`lib/api/broker/`). Use when browser code needs a provider realtime session, a direct provider call, an ephemeral token, or a provider API key in the browser or `NEXT_PUBLIC_*`. NOT for adding a new audience server-side (use aidream's token-broker).
The English summary is being prepared. Showing the original description.
See how to installReview the instructions the agent will receive before you install.
The primitive lives at lib/api/broker/ (contract: its FEATURE.md; cross-repo system of record: ../common-docs/systems/architecture/token-broker/FEATURE.md). It is complete — consume it; never hand-roll a mint call, credential cache, or gateway fetch.
Check KNOWN_AUDIENCES in lib/api/broker/types.ts and the live minter registry (aidream services/token_broker/minters/).
token-broker skill (~/.claude/skills/token-broker/SKILL.md) — one minter + one registry line in aidream — then consume here through the unchanged primitive. Never work around a missing audience with client-side key handling.import { brokeredFetch, resolveBrokeredTransport } from "@/lib/api/broker/transport";
import { useBrokeredCredential } from "@/lib/api/broker/hooks";
// Proxied audience (e.g. "anthropic") — provider-wire HTTP, streaming included:
const res = await brokeredFetch(
{ audience: "anthropic", tierPolicy: "none", model: "claude-sonnet-5" },
"/v1/messages",
{ method: "POST", body: JSON.stringify(anthropicShapedBody) },
);
// Native audience (e.g. "openai_realtime") — connect directly per protocol:
const t = await resolveBrokeredTransport({ audience: "openai_realtime", tierPolicy: "none" });
if (t.mode === "native_ephemeral") connectRealtime(t.endpoint, t.token);
// Component that needs a continuously-fresh credential:
const { credential, status, error, refresh } = useBrokeredCredential(req);
Caching, in-flight dedup, refresh-ahead (<20% TTL), 401→one-re-mint, and sign-out clearing all happen inside the primitive — callers never manage credential lifetime.
tierPolicy is explicit at every callsite ("none" | "guest" | "mid"). Never add a default, wrapper-with-default, or omittable param.credential.token — mask it (debug UIs use useBrokerCacheSnapshot, masked).credential.endpoint is the only source.NEXT_PUBLIC_* or otherwise). Finding one is a defect: replace it with a broker audience (server-first).Demo page /demos/token-broker (dev builds): mint per audience, cache inspector, live proxied Anthropic call, forced re-mint.
No reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Admin debug system wiring for the floating AdminIndicator's live debug data and Copy Full Context. Use when adding debug visibility to a route or feature, wiring useDebugContext or the debug panel, capturing console errors, or enabling the copy-context workflow for a page.
The English summary is being prepared. Showing the original description.
Compact two-icon Copy / Copy-for-AI controls (components/agent-copy). Use when adding copy buttons to a row, card, list, or record; merging duplicate Copy/JSON/AI controls; continuing the copy rollout; or writing a Copy-for-AI payload. NOT for markdown content actions (use rich-document-actions).
The English summary is being prepared. Showing the original description.
Disclosing a surface's existing fixed AI jobs in the shell's top Agents menu. Use when a page, panel, overlay, or window already runs a mandate behind a button, assist, automatic action, or mode; when the agent-disclosure guard names a file; or during a surface check.
The English summary is being prepared. Showing the original description.
The watch-fix-rerun method for making an existing platform agent or automated process efficient and correct: baseline its ledger, run one unit yourself, fix the class behind every wasted call, rerun, record. Use when asked to improve, optimize, watch, or 'make efficient' an agent, a sandbox session, a sync job, or any recurring automated process.
The English summary is being prepared. Showing the original description.
Redux state for agent execution and firing agent shortcuts. Use when editing features/agents/redux/, building agent UI, creating a conversation, touching assembleRequest or NDJSON stream state, wiring agent-state selectors, adding a per-conversation capability, or triggering a shortcut from a button, menu, or code (useShortcutTrigger, launchAgentExecution).
The English summary is being prepared. Showing the original description.
The provision for a call site: the exhaustive menu of values that place in the code can realistically produce. Use before creating or fixing a mandate or agent that reasons about more than its own input, when deciding whether an agent can answer at all with what it is sent, or when its output 'looks right' but nobody checked it could be. NOT for building the agent (use create-agent).
The English summary is being prepared. Showing the original description.