
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
Provider-native coding variants with custom providers, tweakcc theming, and battle-tested defaults
Pre-configured coding variants with custom providers,
prompt packs, and battle-tested enhancements.
One command. Instant power-up.
cc-mirror is maintained as issues-first. Please open issues with provider docs, reproduction steps, and patch/design links; external pull requests are not accepted directly.
# Fastest path to a configured provider-native variant
npx cc-mirror quick --provider mirror --name mirror
# Run it
mirror
That's it. You now have an isolated coding variant ready to run.
By default, CC-MIRROR installs the latest native runtime release. You can pin a channel or version:
# Track upstream stable channel
npx cc-mirror quick --provider mirror --name mirror --claude-version stable
# Track upstream latest channel
npx cc-mirror update mirror --claude-version latest
# Pin a specific version
npx cc-mirror update mirror --claude-version 2.1.37
Notes:
stable and latest are upstream channels. stable may lag behind latest (that is normal).variant.json.npx cc-mirror update [name] refreshes the native runtime install and cc-mirror-managed defaults for that variant, including provider endpoints, model slots, update/install/privacy flags, provider-managed MCP servers, and managed tweakcc startup/banner settings. Credentials and custom env keys are preserved.
Managed variants default to cc-mirror-controlled updates, disabled upstream install checks, privacy-oriented hosted-provider traffic settings, and hidden upstream startup branding where tweakcc can control it.
npx cc-mirror
CC-MIRROR is an opinionated provider-native coding distribution. We did the wiring; you get the useful defaults.
At its core, CC-MIRROR:
Each variant is completely isolated — its own config, sessions, MCP servers, and credentials. Your main installation stays untouched.
┌─────────────────────────────────────────────────────────────────────────┐
│ ~/.cc-mirror/ │
│ │
│ ├── mirror/ ← Mirror variant │
│ │ ├── native/ Runtime installation │
│ │ ├── config/ API keys, sessions, MCP servers │
│ │ ├── tweakcc/ Theme customization │
│ │ └── variant.json Metadata │
│ │ │
│ ├── zai/ ← Z.ai variant (GLM models) │
│ ├── minimax/ ← MiniMax variant (M2.7) │
│ └── kimi/ ← Kimi Code variant │
│ │
│ Wrappers: <bin-dir>/mirror, <bin-dir>/zai, ... │
└─────────────────────────────────────────────────────────────────────────┘
Default <bin-dir> is ~/.local/bin on macOS/Linux and ~/.cc-mirror/bin on Windows.
Windows tip: add %USERPROFILE%\.cc-mirror\bin to your PATH, or run the <variant>.cmd wrapper directly. Each wrapper has a sibling <variant>.mjs launcher.
Each variant has its own Claude Code config directory. Add MCP servers to:
~/.cc-mirror/<variant>/config/.claude.json
cc-mirror keeps provider-managed MCP servers up to date during npx cc-mirror update, while preserving unrelated user-added MCP servers in the same file.
For a server that should load in every project for one variant, run the variant wrapper with user scope:
openrouter mcp add-json airtable '{"command":"npx","args":["@rashidazarang/airtable-mcp"],"env":{"AIRTABLE_TOKEN":"","AIRTABLE_BASE_ID":""}}' --scope user
openrouter mcp list
For a server that should live with the current project, use --scope project; Claude Code will write .mcp.json in that project. The default local scope is project-specific but private, so a server added from one working directory may not appear from another.
The clean default runtime path. No proxy, no model changes — just isolation and privacy defaults.
npx cc-mirror quick --provider mirror --name mirror
Want to use different models? CC-MIRROR supports multiple providers:
| Provider | Models | Auth | Best For |
|---|---|---|---|
| Kimi | kimi-for-coding | Auth Token | Long-context coding (Kimi Code) |
| MiniMax | MiniMax-M2.7 | Auth Token | Unified model experience |
| Z.ai | GLM-5.1, 5-Turbo, 4.5-Air | Auth Token | Heavy coding with GLM reasoning |
| OpenRouter | 100+ models | Auth Token | Model flexibility, pay-per-use |
| Vercel | Multi-provider gateway | Auth Token | Vercel AI Gateway |
| Ollama | Local + cloud models | Auth Token | Local-first + hybrid setups |
| NanoGPT | GPT-5.2 / Gemini 3 Flash | Auth Token | Pay-as-you-go model access |
| CCRouter | Ollama, DeepSeek, etc. | Optional | Local-first development |
| GatewayZ | Multi-provider gateway | Auth Token | Centralized routing |
# Kimi Code
npx cc-mirror quick --provider kimi --api-key "$KIMI_API_KEY"
# MiniMax (MiniMax-M2.7)
npx cc-mirror quick --provider minimax --api-key "$MINIMAX_API_KEY"
# Z.ai (GLM-5.1/5-Turbo/4.5-Air)
npx cc-mirror quick --provider zai --api-key "$Z_AI_API_KEY"
# OpenRouter (100+ models)
npx cc-mirror quick --provider openrouter --api-key "$OPENROUTER_API_KEY" \
--model-sonnet "provider/balanced-coding-model"
# Vercel AI Gateway
npx cc-mirror quick --provider vercel --api-key "$VERCEL_AI_GATEWAY_KEY" \
--model-sonnet "provider/balanced-coding-model"
# Ollama
npx cc-mirror quick --provider ollama --api-key "ollama" \
--model-sonnet "qwen3.5" --model-opus "qwen3.5" --model-haiku "qwen3.5"
# NanoGPT
npx cc-mirror quick --provider nanogpt --api-key "$NANOGPT_API_KEY"
# CC Router (local LLMs)
npx cc-mirror quick --provider ccrouter
# GatewayZ
npx cc-mirror quick --provider gatewayz --api-key "$GATEWAYZ_API_KEY" \
--model-sonnet "provider/balanced-coding-model"
# Create & manage variants
npx cc-mirror # Interactive TUI
npx cc-mirror quick [options] # Fast setup with defaults
npx cc-mirror create [options] # Full configuration wizard
npx cc-mirror list # List all variants
npx cc-mirror update [name] # Update one or all variants
npx cc-mirror apply <name> # Re-apply tweakcc patches (no reinstall)
npx cc-mirror remove <name> # Delete a variant
npx cc-mirror doctor # Health check all variants
npx cc-mirror tweak <name> # Launch tweakcc customization
# Launch your variant
mirror # Run Mirror
zai # Run Z.ai variant
minimax # Run MiniMax variant
kimi # Run Kimi Code variant
--provider <name> kimi | minimax | zai | openrouter | vercel | ollama | nanogpt | ccrouter | mirror | gatewayz | custom
--name <name> Variant name (becomes the CLI command)
--api-key <key> Provider API key
--base-url <url> Custom API endpoint
--model-sonnet <name> Map Balanced model slot
--model-opus <name> Map Primary model slot
--model-haiku <name> Map Fast model slot
--brand <preset> Theme: auto | kimi | minimax | zai | openrouter | vercel | ollama | nanogpt | ccrouter | mirror | gatewayz
--no-tweak Skip tweakcc theme
--no-prompt-pack Skip provider prompt pack
--verbose Show full tweakcc output during update
Each provider includes a custom color theme via tweakcc:
| Brand | Style |
|---|---|
| kimi | Teal/cyan gradient |
| minimax | Coral/red/orange spectrum |
| zai | Dark carbon with gold accents |
| openrouter | Silver/chrome with electric blue |
| vercel | Monochrome with green accents |
| ollama | Warm sandstone with earthy tones |
| nanogpt | Aurora green + cyan accents |
| ccrouter | Sky blue accents |
| gatewayz | Violet gradients |
| Document | Description |
|---|---|
| Mirror | Isolated runtime with clean defaults |
| Architecture | How CC-MIRROR works under the hood |
| Full Documentation | Complete documentation index |
Contributions welcome! See CONTRIBUTING.md for development setup.
Want to add a provider? Check the Provider Guide.
MIT — see LICENSE
Created by Numman Ali
@nummanali
FAQs
Provider-native coding variants with custom providers, tweakcc theming, and battle-tested defaults
The npm package cc-mirror receives a total of 54 weekly downloads. As such, cc-mirror popularity was classified as not popular.
We found that cc-mirror demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.