@sunflower0305/claude-proxy 1.1.3 → 1.3.0

package/.env.example

@@ -1,15 +1,20 @@
-# Choose your provider: qwen | deepseek | glm | minimax | kimi
+# Choose your provider: qwen | deepseek | glm | minimax | kimi | mimo
 PROVIDER=deepseek
 
 # Proxy server port (default: 8080)
 PROXY_PORT=8080
 
+# Optional local proxy token.
+# When set, clients must send this value as x-api-key or Authorization: Bearer.
+# PROXY_API_KEY=your-local-proxy-token
+
 # API keys - set the one(s) you need
 QWEN_API_KEY=your-qwen-api-key
 DEEPSEEK_API_KEY=your-deepseek-key
 GLM_API_KEY=your-glm-key
 MINIMAX_API_KEY=your-minimax-key
 KIMI_API_KEY=your-kimi-key
+MIMO_API_KEY=your-mimo-key
 
 # Optional model overrides
 QWEN_MODEL=qwen-plus
@@ -17,6 +22,7 @@ DEEPSEEK_MODEL=deepseek-v4-pro
 GLM_MODEL=glm-5.1
 MINIMAX_MODEL=MiniMax-M2.7-highspeed
 KIMI_MODEL=kimi-k2.6
+MIMO_MODEL=mimo-v2.5-pro
 
 # Optional upstream Anthropic-compatible base URL overrides
 # QWEN_ANTHROPIC_BASE_URL=https://dashscope.aliyuncs.com/apps/anthropic
@@ -24,3 +30,4 @@ KIMI_MODEL=kimi-k2.6
 # GLM_ANTHROPIC_BASE_URL=https://open.bigmodel.cn/api/anthropic
 # MINIMAX_ANTHROPIC_BASE_URL=https://api.minimaxi.com/anthropic
 # KIMI_ANTHROPIC_BASE_URL=https://api.moonshot.cn/anthropic
+# MIMO_ANTHROPIC_BASE_URL=https://api.xiaomimimo.com/anthropic

package/CHANGELOG.md

@@ -2,6 +2,35 @@
 
 All notable changes to this project will be documented in this file.
 
+## [1.3.0] - 2026-05-06
+
+Minor release of `@sunflower0305/claude-proxy`.
+
+### Added
+
+- Anthropic-compatible proxy support for MIMO through the `mimo` provider
+- `MIMO_API_KEY`, `MIMO_MODEL`, and `MIMO_ANTHROPIC_BASE_URL` configuration
+- local integration coverage for MIMO provider switching, model mapping, and non-streaming request proxying
+
+Detailed release notes: [docs/releases/1.3.0.md](docs/releases/1.3.0.md)
+
+## [1.2.0] - 2026-05-01
+
+Minor release of `@sunflower0305/claude-proxy`.
+
+### Changed
+
+- `.env` loading now uses Node.js built-in `.env` file support instead of the external `dotenv` package
+- minimum supported Node.js version is now 20.12
+- CORS is no longer enabled by default
+
+### Removed
+
+- removed runtime dependency on `dotenv`
+- removed unused `cors` and `@types/cors` dependencies
+
+Detailed release notes: [docs/releases/1.2.0.md](docs/releases/1.2.0.md)
+
 ## [1.1.3] - 2026-04-24
 
 Patch release of `@sunflower0305/claude-proxy`.

package/README.md

@@ -4,16 +4,18 @@
 [![CD](https://github.com/sunflower0305/claude-proxy/actions/workflows/cd.yml/badge.svg)](https://github.com/sunflower0305/claude-proxy/actions/workflows/cd.yml)
 [![Coverage Status](https://coveralls.io/repos/github/sunflower0305/claude-proxy/badge.svg?branch=master)](https://coveralls.io/github/sunflower0305/claude-proxy?branch=master)
 [![npm version](https://img.shields.io/npm/v/%40sunflower0305%2Fclaude-proxy)](https://www.npmjs.com/package/@sunflower0305/claude-proxy)
-[![npm downloads](https://img.shields.io/npm/dm/%40sunflower0305%2Fclaude-proxy)](https://www.npmjs.com/package/@sunflower0305/claude-proxy)
+[![npm downloads](https://img.shields.io/npm/dm/%40sunflower0305%2Fclaude-proxy?cacheSeconds=60)](https://www.npmjs.com/package/@sunflower0305/claude-proxy)
 [![GitHub stars](https://img.shields.io/github/stars/sunflower0305/claude-proxy?cacheSeconds=60)](https://github.com/sunflower0305/claude-proxy/stargazers)
 [![License](https://img.shields.io/github/license/sunflower0305/claude-proxy)](https://github.com/sunflower0305/claude-proxy/blob/master/LICENSE)
 
 `claude-proxy` is published on npm as `@sunflower0305/claude-proxy`. It is a lightweight Express proxy that lets Claude Code or the Claude Agent SDK talk to domestic Chinese LLM providers through Anthropic-compatible `/v1/messages` endpoints.
 
-It currently supports `qwen`, `deepseek`, `glm`, `minimax`, and `kimi`.
+It currently supports `qwen`, `deepseek`, `glm`, `minimax`, `kimi`, and `mimo`.
 
 ## Install
 
+Requires Node.js 20.12 or newer.
+
 Run without installing:
 
 ```bash
@@ -29,13 +31,15 @@ claude-proxy
 
 ## Configure
 
-The proxy reads configuration from environment variables. You can export them in your shell or create a `.env` file in the directory where you run `claude-proxy`.
+The proxy reads configuration from environment variables. You can export them in your shell or create a `.env` file in the directory where you run `claude-proxy`; `.env` loading uses Node.js built-in `.env` file support.
 
 Example `.env`:
 
 ```dotenv
 PROVIDER=deepseek
 PROXY_PORT=8080
+# Optional: require clients to send this token to write endpoints.
+# PROXY_API_KEY=your-local-proxy-token
 DEEPSEEK_API_KEY=your-deepseek-api-key
 DEEPSEEK_MODEL=deepseek-v4-pro
 ```
@@ -46,13 +50,15 @@ Available variables:
 | ------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------- |
 | `PROVIDER`                                                                                                                                  | Active provider. Defaults to `deepseek`.                            |
 | `PROXY_PORT`                                                                                                                                | Local server port. Defaults to `8080`.                              |
+| `PROXY_API_KEY`                                                                                                                             | Optional local proxy token for `POST /v1/messages` and `POST /api/provider`. |
 | `QWEN_API_KEY`                                                                                                                              | API key for Qwen.                                                   |
 | `DEEPSEEK_API_KEY`                                                                                                                          | API key for DeepSeek.                                               |
 | `GLM_API_KEY`                                                                                                                               | API key for GLM.                                                    |
 | `MINIMAX_API_KEY`                                                                                                                           | API key for MiniMax.                                                |
 | `KIMI_API_KEY`                                                                                                                              | API key for Kimi.                                                   |
-| `QWEN_ANTHROPIC_BASE_URL`, `DEEPSEEK_ANTHROPIC_BASE_URL`, `GLM_ANTHROPIC_BASE_URL`, `MINIMAX_ANTHROPIC_BASE_URL`, `KIMI_ANTHROPIC_BASE_URL` | Override the upstream Anthropic-compatible base URL for a provider. |
-| `QWEN_MODEL`, `DEEPSEEK_MODEL`, `GLM_MODEL`, `MINIMAX_MODEL`, `KIMI_MODEL`                                                                  | Override the default upstream model for a provider.                 |
+| `MIMO_API_KEY`                                                                                                                              | API key for MIMO.                                                   |
+| `QWEN_ANTHROPIC_BASE_URL`, `DEEPSEEK_ANTHROPIC_BASE_URL`, `GLM_ANTHROPIC_BASE_URL`, `MINIMAX_ANTHROPIC_BASE_URL`, `KIMI_ANTHROPIC_BASE_URL`, `MIMO_ANTHROPIC_BASE_URL` | Override the upstream Anthropic-compatible base URL for a provider. |
+| `QWEN_MODEL`, `DEEPSEEK_MODEL`, `GLM_MODEL`, `MINIMAX_MODEL`, `KIMI_MODEL`, `MIMO_MODEL`                                                    | Override the default upstream model for a provider.                 |
 
 Provider defaults:
 
@@ -63,6 +69,7 @@ Provider defaults:
 | `glm` | `GLM_MODEL` | `glm-5.1` |
 | `minimax` | `MINIMAX_MODEL` | `MiniMax-M2.7-highspeed` |
 | `kimi` | `KIMI_MODEL` | `kimi-k2.6` |
+| `mimo` | `MIMO_MODEL` | `mimo-v2.5-pro` |
 
 You can use the bundled example as a starting point:
 
@@ -87,6 +94,11 @@ export ANTHROPIC_BASE_URL=http://localhost:8080
 export ANTHROPIC_API_KEY=any-string-works
 ```
 
+If you set `PROXY_API_KEY`, set the client `ANTHROPIC_API_KEY` to the same
+value. The proxy accepts it through either `x-api-key` or
+`Authorization: Bearer`. If `PROXY_API_KEY` is not set, the local proxy does not
+validate the client API key and any non-empty string can be used.
+
 Example SDK usage:
 
 ```ts
@@ -94,7 +106,7 @@ import Anthropic from "@anthropic-ai/sdk";
 
 const client = new Anthropic({
   baseURL: "http://localhost:8080",
-  apiKey: "any-string",
+  apiKey: process.env.PROXY_API_KEY || "any-string",
 });
 ```
 

package/dist/proxy.d.ts

@@ -8,8 +8,8 @@
  * Usage:
  *   export ANTHROPIC_BASE_URL=http://localhost:8080
  *   export ANTHROPIC_API_KEY=any-key-works
+ *   # If PROXY_API_KEY is set, use that same value instead.
  */
-import "dotenv/config";
 import express from "express";
 export declare function createApp(): express.Express;
 export declare const app: express.Express;

package/dist/proxy.js

@@ -8,13 +8,15 @@
  * Usage:
  *   export ANTHROPIC_BASE_URL=http://localhost:8080
  *   export ANTHROPIC_API_KEY=any-key-works
+ *   # If PROXY_API_KEY is set, use that same value instead.
  */
-import "dotenv/config";
-import cors from "cors";
 import express from "express";
-import { realpathSync } from "node:fs";
+import { existsSync, realpathSync } from "node:fs";
+import { loadEnvFile } from "node:process";
 import { Readable } from "node:stream";
 import { fileURLToPath } from "node:url";
+if (existsSync(".env"))
+    loadEnvFile(".env");
 const DEFAULT_ANTHROPIC_VERSION = "2023-06-01";
 const HOP_BY_HOP_RESPONSE_HEADERS = new Set([
     "connection",
@@ -66,12 +68,20 @@ const PROVIDERS = {
         apiKey: process.env.KIMI_API_KEY || "",
         model: pickEnv("KIMI_MODEL") || "kimi-k2.6",
     },
+    mimo: {
+        baseUrl: pickEnv("MIMO_ANTHROPIC_BASE_URL") ||
+            "https://api.xiaomimimo.com/anthropic",
+        apiKey: process.env.MIMO_API_KEY || "",
+        model: pickEnv("MIMO_MODEL") || "mimo-v2.5-pro",
+    },
 };
 function isProviderKey(value) {
     return Boolean(value && value in PROVIDERS);
 }
 function getInitialProvider() {
-    return isProviderKey(process.env.PROVIDER) ? process.env.PROVIDER : "deepseek";
+    return isProviderKey(process.env.PROVIDER)
+        ? process.env.PROVIDER
+        : "deepseek";
 }
 function getProviderConfig(provider) {
     return PROVIDERS[provider] || PROVIDERS.deepseek;
@@ -122,6 +132,19 @@ function createProxyError(message) {
         },
     };
 }
+function createAuthenticationError() {
+    return {
+        type: "error",
+        error: {
+            type: "authentication_error",
+            message: "Invalid API key",
+        },
+    };
+}
+function getBearerToken(authorization) {
+    const match = authorization?.match(/^Bearer\s+(.+)$/i);
+    return match?.[1]?.trim() || undefined;
+}
 function inferProviderFromModel(model) {
     if (!model)
         return undefined;
@@ -148,6 +171,7 @@ function logTimingEvent(trace, phase, extra = {}) {
 export function createApp() {
     let currentProvider = getInitialProvider();
     let requestSequence = 0;
+    const proxyApiKey = pickEnv("PROXY_API_KEY");
     function getConfig(provider = currentProvider) {
         return getProviderConfig(provider);
     }
@@ -179,6 +203,21 @@ export function createApp() {
             startedAt: Date.now(),
         };
     }
+    function requireProxyApiKey(req, res, next) {
+        if (!proxyApiKey) {
+            next();
+            return;
+        }
+        const clientTokens = [
+            getHeaderValue(req.headers["x-api-key"])?.trim(),
+            getBearerToken(getHeaderValue(req.headers.authorization)),
+        ].filter((token) => Boolean(token));
+        if (clientTokens.includes(proxyApiKey)) {
+            next();
+            return;
+        }
+        res.status(401).json(createAuthenticationError());
+    }
     async function handleNonStreamingRequest(req, res) {
         const config = getConfig();
         const targetModel = getTargetModel(req.body?.model);
@@ -307,8 +346,7 @@ export function createApp() {
         }
     }
     const app = express();
-    app.use(cors());
-    app.use(express.json({ limit: "50mb" }));
+    app.use(express.json({ limit: "32mb" }));
     app.get("/", (_req, res) => {
         const config = getConfig();
         res.json({
@@ -324,7 +362,7 @@ export function createApp() {
             },
         });
     });
-    app.post("/v1/messages", async (req, res) => {
+    app.post("/v1/messages", requireProxyApiKey, async (req, res) => {
         if (req.body?.stream) {
             await handleStreamingRequest(req, res);
             return;
@@ -353,7 +391,7 @@ export function createApp() {
             availableProviders: Object.keys(PROVIDERS),
         });
     });
-    app.post("/api/provider", (req, res) => {
+    app.post("/api/provider", requireProxyApiKey, (req, res) => {
         const { provider, model } = (req.body ?? {});
         const targetProvider = provider ?? inferProviderFromModel(model);
         if (!isProviderKey(targetProvider)) {
@@ -397,6 +435,9 @@ function isMainModule() {
 if (isMainModule()) {
     const initialProvider = getInitialProvider();
     const initialConfig = getProviderConfig(initialProvider);
+    const clientApiKeyHint = pickEnv("PROXY_API_KEY")
+        ? "same value as PROXY_API_KEY"
+        : "any-string-works";
     if (!initialConfig.apiKey) {
         console.warn(`Warning: API key not configured for provider: ${initialProvider}`);
         console.warn("Please set the appropriate environment variable in .env");
@@ -413,7 +454,7 @@ if (isMainModule()) {
 ╠═══════════════════════════════════════════════════════╣
 ║  Set these env vars in your app:                      ║
 ║  ANTHROPIC_BASE_URL=http://localhost:${PORT}
-║  ANTHROPIC_API_KEY=any-string-works                   ║
+║  ANTHROPIC_API_KEY=${clientApiKeyHint}
 ╚═══════════════════════════════════════════════════════╝
   `);
     });

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@sunflower0305/claude-proxy",
-  "version": "1.1.3",
+  "version": "1.3.0",
   "type": "module",
-  "description": "A proxy that lets Claude Agent SDK use domestic Chinese LLMs (DeepSeek, Qwen, GLM, MiniMax) as backend",
+  "description": "A proxy that lets Claude Agent SDK use domestic Chinese LLMs (DeepSeek, Qwen, GLM, MiniMax, Kimi, MIMO) as backend",
   "license": "MIT",
   "main": "./dist/proxy.js",
   "types": "./dist/proxy.d.ts",
@@ -23,7 +23,7 @@
     ".env.example"
   ],
   "engines": {
-    "node": ">=18"
+    "node": ">=20.12"
   },
   "publishConfig": {
     "access": "public"
@@ -46,7 +46,8 @@
     "deepseek",
     "glm",
     "minimax",
-    "kimi"
+    "kimi",
+    "mimo"
   ],
   "scripts": {
     "dev": "tsx watch src/proxy.ts",
@@ -55,20 +56,17 @@
     "prepack": "npm run build",
     "prepublishOnly": "npm run test:proxy-local",
     "test": "vitest run",
-    "test:coverage": "vitest run tests/integration/proxy-local.test.ts --coverage --coverage.reporter=lcov --coverage.reporter=text --pool threads",
+    "test:coverage": "vitest run tests/integration/proxy-local.test.ts --coverage --coverage.reporter=lcov --coverage.reporter=text --pool forks",
     "test:proxy-local": "vitest run tests/integration/proxy-local.test.ts",
     "test:provider-anthropic": "node --experimental-strip-types tests/integration/provider-anthropic.ts",
     "test:provider-cli-e2e": "node --experimental-strip-types tests/integration/provider-cli-e2e.ts",
     "report:provider-cli-e2e": "node --experimental-strip-types tests/integration/report-provider-cli-e2e.ts"
   },
   "dependencies": {
-    "cors": "^2.8.5",
-    "dotenv": "^16.4.5",
     "express": "^4.21.0"
   },
   "devDependencies": {
     "@vitest/coverage-v8": "^3.2.4",
-    "@types/cors": "^2.8.17",
     "@types/express": "^4.17.21",
     "@types/node": "^22.0.0",
     "tsx": "^4.19.0",