-
-
Notifications
You must be signed in to change notification settings - Fork 80.7k
fix(tts/xiaomi): Xiaomi Token Plan endpoint uses Bearer auth, not api-key header #77692
Copy link
Copy link
Open
Labels
P2Normal backlog priority with limited blast radius.Normal backlog priority with limited blast radius.clawsweeper:linked-pr-openClawSweeper found an open linked pull request for this issue.ClawSweeper found an open linked pull request for this issue.clawsweeper:needs-product-decisionClawSweeper marked this issue as needing a product or behavior decision.ClawSweeper marked this issue as needing a product or behavior decision.clawsweeper:no-new-fix-prClawSweeper does not recommend queueing a new automated fix PR for this issue.ClawSweeper does not recommend queueing a new automated fix PR for this issue.clawsweeper:source-reproClawSweeper found a high-confidence source-level issue reproduction.ClawSweeper found a high-confidence source-level issue reproduction.impact:auth-providerAuth, provider routing, model choice, or SecretRef resolution may break.Auth, provider routing, model choice, or SecretRef resolution may break.issue-rating: 🦞 diamond lobsterVery strong issue quality with high-confidence source-level or clear reproduction.Very strong issue quality with high-confidence source-level or clear reproduction.
Description
Metadata
Metadata
Assignees
Labels
P2Normal backlog priority with limited blast radius.Normal backlog priority with limited blast radius.clawsweeper:linked-pr-openClawSweeper found an open linked pull request for this issue.ClawSweeper found an open linked pull request for this issue.clawsweeper:needs-product-decisionClawSweeper marked this issue as needing a product or behavior decision.ClawSweeper marked this issue as needing a product or behavior decision.clawsweeper:no-new-fix-prClawSweeper does not recommend queueing a new automated fix PR for this issue.ClawSweeper does not recommend queueing a new automated fix PR for this issue.clawsweeper:source-reproClawSweeper found a high-confidence source-level issue reproduction.ClawSweeper found a high-confidence source-level issue reproduction.impact:auth-providerAuth, provider routing, model choice, or SecretRef resolution may break.Auth, provider routing, model choice, or SecretRef resolution may break.issue-rating: 🦞 diamond lobsterVery strong issue quality with high-confidence source-level or clear reproduction.Very strong issue quality with high-confidence source-level or clear reproduction.
Type
Fields
Priority
None yet
`## Background
Xiaomi MiMo launched the MiMo Orbit Plan (
创造者百万亿Token激励计划) on 2026-04-28 alongside the open-source release of MiMo-V2.5. Developers who apply and are approved receive a Token Plan subscription (e.g. Max Plan worth ¥659/month).Token Plan users have different credentials and endpoint from pay-as-you-go users:
https://api.xiaomimimo.com/v1https://token-plan-cn.xiaomimimo.com/v1sk-tp-api-key: <token>Authorization: Bearer <token>Both endpoints accept the same
/v1/chat/completionsrequest format withaudio: { voice, format }for TTS.Problem
The bundled Xiaomi TTS provider (
speech-provider-B1-Tp_iU.js) hardcodes theapi-keyauthentication header: