vibelet 1.2.221 → 1.2.224

package/README.md

@@ -47,7 +47,7 @@ prints `Web UI (other devices)` for LAN or remote browsers.
 ## Options
 
 ```bash
-vibelet --access=local                       # Skip the default Cloudflare Tunnel for this run
+vibelet --access=local                       # Disable Tailcat and Cloudflare for this run
 vibelet --access=remote --force              # Force a fresh tunnel URL
 vibelet --access=https://<your-tunnel-url>   # Use your own tunnel URL
 vibelet --access=<tailscale-or-lan-host>     # Use a direct private-network host
@@ -57,7 +57,7 @@ vibelet --tailcat                            # Enable account-free Tailcat direc
 vibelet --no-tailcat                         # Disable previously enabled Tailcat access
 ```
 
-Remote access is enabled by default for `vibelet`, `vibelet start`, `vibelet restart`, and `vibelet reset`. Use `--access=local` when you want a LAN-only QR code for that run. Legacy aliases still work: `--local`, `--relay`, `--host`, `--fallback-hosts`, `--remote`, and `--tunnel`.
+Tailcat and Cloudflare remote access are enabled by default for `vibelet`, `vibelet start`, `vibelet restart`, and `vibelet reset`. Use `--access=local` when you want a LAN-only QR code for that run. This also disables Tailcat for the current run, even if it was previously enabled; the saved Tailcat choice is unchanged. Legacy aliases still work: `--local`, `--relay`, `--host`, `--fallback-hosts`, `--remote`, and `--tunnel`.
 
 Managed Cloudflare Tunnels use cloudflared's `auto` transport so QUIC is preferred
 when UDP is available and HTTP/2 remains the fallback. The CLI checks its bundled,
@@ -81,8 +81,10 @@ Then scan the newly printed QR code with a Vibelet app build that includes
 Tailcat support. The app races the eligible connection paths and uses the first
 healthy one. Tailcat bootstraps through DERP and upgrades to a direct P2P UDP
 path when NAT traversal succeeds; if it cannot become direct, DERP can remain
-the encrypted relay. LAN, Tailscale, and Cloudflare targets stay available as
-Vibelet fallbacks.
+the encrypted relay. LAN and Tailscale remain available as fallbacks. Tailcat mode skips automatic
+Cloudflare Tunnel startup and saved relay URLs. To also enable Cloudflare, use
+`npx vibelet --tailcat --cloudflare`; for a custom relay, add
+`--access=https://<url>`.
 
 The `--tailcat` choice is stored in `~/.vibelet/tailcat.json` and reused by
 later starts and restarts. Turn it off with:
@@ -119,10 +121,25 @@ The dual publish script builds once, then publishes the same CLI bundle to both
   | `VIBE_PORT` | `9876` | Daemon listen port |
   | `VIBE_IDLE_TIMEOUT_MS` | `1800000` (30 min) | Idle timeout before a driver is released (0 = disabled) |
   | `VIBE_TURN_STALL_TIMEOUT_MS` | `300000` (5 min) | Soft inactivity threshold for suspecting an in-flight turn has stalled (0 = disabled) |
-  | `VIBE_TURN_STALL_HARD_TIMEOUT_MS` | `900000` (15 min) | Hard inactivity threshold for force-stopping a stalled turn after warning (0 = warn only) |
+  | `VIBE_TURN_STALL_HARD_TIMEOUT_MS` | `900000` (15 min) | Stop threshold when both turn activity and verified execution-client presence are absent (0 = warn only; confirmed process death can still stop a turn) |
   | `VIBE_TEXT_DELTA_BATCH_MS` | `24` | Maximum delay for combining streaming text updates before WebSocket broadcast (0 = disabled) |
   | `VIBE_AUDIT_MAX_BYTES` | `8388608` (8 MB) | Max audit.jsonl size before trimming |
   | `VIBE_DAEMON_LOG_MAX_BYTES` | `16777216` (16 MB) | Max daemon log file size before trimming |
   | `VIBE_STORAGE_HOUSEKEEPING_INTERVAL_MS` | `300000` (5 min) | Log trimming check interval |
   | `CLAUDE_PATH` | auto-detect | Path to Claude binary |
   | `CODEX_PATH` | auto-detect | Path to Codex binary |
+
+Execution-driver presence is checked locally every 2 seconds during a turn and
+every 15 seconds while idle. These checks do not send prompts or consume model
+tokens, and do not update the last actual activity time. A silent turn with
+verified process presence produces a warning after the soft threshold but is
+not stopped or subjected to tool-process recovery merely for silence. This
+covers long commands, `sleep`, and polling without requiring a scheduling tool.
+Presence means the execution process/connection is alive, not that its model or
+tools are making progress; a live deadlock still needs explicit cancellation or
+the tool's own timeout. If presence can no longer be verified, the hard timeout
+also checks time since the last verified presence; a single missed check after a
+long wait does not immediately terminate the turn. The existing idle-driver
+release policy is independent and still applies after the turn finishes.
+
+Both Tailcat and Cloudflare are enabled by default. Use `npx vibelet --tailcat` for Tailcat only, or `npx vibelet --cloudflare` for Cloudflare only. `--access=remote`, `--remote`, and `--tunnel` remain compatible aliases. `--no-tailcat` disables Tailcat while keeping Cloudflare available.