voice-vibecoder 2.9.1__tar.gz → 2.9.3__tar.gz

{voice_vibecoder-2.9.1 → voice_vibecoder-2.9.3}/CHANGELOG.md

@@ -2,6 +2,22 @@
 
 <!-- version list -->
 
+## v2.9.3 (2026-02-21)
+
+### Bug Fixes
+
+- Implement correct device auth payload signing
+  ([`419bdfb`](https://github.com/snokam/voice-vibecoder/commit/419bdfb6e21f32fc56ecc9cdce4ba4b9fb64d6bd))
+
+
+## v2.9.2 (2026-02-21)
+
+### Bug Fixes
+
+- Use mode=cli for gateway connect
+  ([`2606052`](https://github.com/snokam/voice-vibecoder/commit/2606052c59b7c6f2bd98f60c9e531d1838e9af3c))
+
+
 ## v2.9.1 (2026-02-21)
 
 ### Bug Fixes

{voice_vibecoder-2.9.1 → voice_vibecoder-2.9.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: voice-vibecoder
-Version: 2.9.1
+Version: 2.9.3
 Summary: Olaf The Vibecoder — a voice-controlled coding assistant using OpenAI Realtime API + Claude Code
 Project-URL: Homepage, https://github.com/snokam/voice-vibecoder
 Project-URL: Repository, https://github.com/snokam/voice-vibecoder

{voice_vibecoder-2.9.1 → voice_vibecoder-2.9.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "voice-vibecoder"
-version = "2.9.1"
+version = "2.9.3"
 description = "Olaf The Vibecoder — a voice-controlled coding assistant using OpenAI Realtime API + Claude Code"
 readme = "README.md"
 requires-python = ">=3.10"

{voice_vibecoder-2.9.1 → voice_vibecoder-2.9.3}/src/voice_vibecoder/__init__.py

@@ -3,7 +3,7 @@
 A voice-controlled coding assistant using OpenAI Realtime API + Claude Code.
 """
 
-__version__ = "2.9.1"
+__version__ = "2.9.3"
 
 from voice_vibecoder.app_config import VoiceConfig
 from voice_vibecoder.ui.screen import VoiceCodingScreen

{voice_vibecoder-2.9.1 → voice_vibecoder-2.9.3}/src/voice_vibecoder/code_providers/openclaw.py

@@ -11,6 +11,7 @@ import base64
 import json
 import logging
 import os
+import time
 import uuid
 from typing import Any, Awaitable, Callable
 
@@ -57,11 +58,42 @@ def _load_device_keys(state_dir: str) -> tuple[str, Ed25519PrivateKey | None, st
     return device_id, private_key, token
 
 
-def _sign_challenge(private_key: Ed25519PrivateKey, nonce: str, ts: int) -> tuple[str, int]:
-    """Sign the gateway challenge."""
-    message = f"{nonce}:{ts}".encode()
-    signature = private_key.sign(message)
-    return base64.urlsafe_b64encode(signature).decode().rstrip("="), ts
+def _build_auth_payload(
+    device_id: str,
+    client_id: str,
+    client_mode: str,
+    role: str,
+    scopes: list[str],
+    signed_at_ms: int,
+    token: str | None,
+    nonce: str | None,
+) -> str:
+    """Build the payload to sign for device auth.
+    
+    Format (v2 with nonce):
+    v2|deviceId|clientId|clientMode|role|scopes|signedAtMs|token|nonce
+    """
+    scopes_str = ",".join(scopes)
+    token_str = token or ""
+    
+    parts = [
+        "v2",
+        device_id,
+        client_id,
+        client_mode,
+        role,
+        scopes_str,
+        str(signed_at_ms),
+        token_str,
+        nonce or "",
+    ]
+    return "|".join(parts)
+
+
+def _sign_payload(private_key: Ed25519PrivateKey, payload: str) -> str:
+    """Sign the payload and return base64url-encoded signature."""
+    signature = private_key.sign(payload.encode())
+    return base64.urlsafe_b64encode(signature).decode().rstrip("=")
 
 
 class OpenClawRunner:
@@ -114,19 +146,34 @@ class OpenClawRunner:
                 return None
             
             nonce = challenge["payload"]["nonce"]
-            ts = challenge["payload"]["ts"]
+            signed_at_ms = int(time.time() * 1000)
+            
+            # Build auth payload and sign
+            client_id = "cli"
+            client_mode = "cli"
+            role = "operator"
+            scopes = ["operator.read", "operator.write"]
             
-            # Sign challenge
-            signature, signed_at = _sign_challenge(self._private_key, nonce, ts)
+            payload = _build_auth_payload(
+                device_id=self._device_id,
+                client_id=client_id,
+                client_mode=client_mode,
+                role=role,
+                scopes=scopes,
+                signed_at_ms=signed_at_ms,
+                token=self._device_token,
+                nonce=nonce,
+            )
+            signature = _sign_payload(self._private_key, payload)
             
             # Get public key in base64
             public_key_bytes = self._private_key.public_key().public_bytes(
                 encoding=serialization.Encoding.Raw,
                 format=serialization.PublicFormat.Raw
             )
-            public_key_b64 = base64.urlsafe_b64encode(public_key_bytes).decode().rstrip("=")
+            pub_b64 = base64.urlsafe_b64encode(public_key_bytes).decode().rstrip("=")
             
-            # Send connect request - match CLI format exactly
+            # Send connect request
             connect_req = {
                 "type": "req",
                 "id": str(uuid.uuid4()),
@@ -135,13 +182,13 @@ class OpenClawRunner:
                     "minProtocol": 3,
                     "maxProtocol": 3,
                     "client": {
-                        "id": "cli",  # Must be "cli" for operator role
+                        "id": client_id,
                         "version": "1.0.0",
                         "platform": "linux",
-                        "mode": "operator"  # Must be "operator"
+                        "mode": client_mode
                     },
-                    "role": "operator",
-                    "scopes": ["operator.read", "operator.write"],
+                    "role": role,
+                    "scopes": scopes,
                     "caps": [],
                     "commands": [],
                     "permissions": {},
@@ -150,9 +197,9 @@ class OpenClawRunner:
                     "userAgent": "voice-server/1.0.0",
                     "device": {
                         "id": self._device_id,
-                        "publicKey": public_key_b64,
+                        "publicKey": pub_b64,
                         "signature": signature,
-                        "signedAt": signed_at,
+                        "signedAt": signed_at_ms,
                         "nonce": nonce
                     }
                 }