moshcode 0.93.0 → 0.94.0

package/README.md

@@ -26,7 +26,7 @@ or miss one that does. A test fails the build when it drifts.
 <!-- COMMANDS:START -->
 | command | group | what it does |
 |---|---|---|
-| `moshcode agents` | engines | list engines or launch one autonomously |
+| `moshcode agents` | engines | list engines, open their agent view, or launch autonomously |
 | `moshcode start` | engines | launch an engine with its native defaults |
 | `moshcode herd` | runtime | run agent sessions that outlive this terminal |
 | `moshcode ps` | runtime | list herd sessions and what each one is doing |
@@ -107,7 +107,7 @@ use this only in an isolated container, VM, or workspace you trust:
 moshcode agents claude      # claude agents --dangerously-skip-permissions  (agent view)
 moshcode agents opencode    # opencode --auto                              (autonomous)
 moshcode agents privacycode # privacycode --auto                           (autonomous)
-moshcode agents codex       # codex --dangerously-bypass-approvals-and-sandbox  (autonomous)
+moshcode agents codex       # codex --dangerously-bypass-approvals-and-sandbox agents (agent view)
 moshcode agents gemini      # gemini --approval-mode=yolo                       (autonomous)
 moshcode agents kimi        # kimi --yolo                                       (autonomous)
 moshcode agents qwen        # qwen --approval-mode=yolo                         (autonomous)
@@ -116,6 +116,25 @@ moshcode agents aider       # aider --yes-always
 moshcode agents openagents  # openagents                                        (dashboard)
 ```
 
+Codex's native agents overview requires a CLI with `codex agents` support
+(verified with 0.151.0) and, for the local daemon, the managed standalone
+installation. `moshcode install codex` / `moshcode upgrade codex` use Codex's
+official standalone installer on macOS/Linux; an npm-only install is not enough.
+Existing npm installations are preserved. Windows retains npm and requires
+`--remote <server>` for the agents overview.
+`/agents codex` opens the same live overview of sessions on Codex's shared local
+app-server daemon. The approval/sandbox bypass is passed for this invocation;
+moshcode does not rewrite your global Codex settings or stop existing sessions.
+Additional arguments are forwarded to the native `agents` subcommand, for example
+`moshcode agents codex --no-alt-screen`.
+
+For separate conversations, Codex's `/new` starts a fresh chat in the same CLI,
+`/resume` reopens a saved chat, and `/fork` branches a conversation while preserving
+the original. These commands are distinct from launching parallel subagents:
+ask Codex to delegate work, then use its `/agent` or `/subagents` picker to switch
+threads. See the [Codex command reference](https://learn.chatgpt.com/docs/developer-commands?surface=cli)
+and [subagent guide](https://learn.chatgpt.com/docs/agent-configuration/subagents).
+
 `start` is the explicit raw path. It injects nothing, so the native engine keeps
 its normal permission model and receives only your arguments:
 
@@ -723,6 +742,44 @@ login`. Publishing needs one, and `bo login` is a device-code exchange, so a
 terminal never handles a browser session. `bo mcp config` prints the MCP
 registration for a coding agent, which is the same graph over a different door.
 
+### CrawlProof — what the fleet costs and what it returns
+
+[CrawlProof](https://crawlproof.com) knows who arrived on your sites and what
+your ads delivered. `crawlproof` joins that to what the bank actually did, so
+the terminal can answer the question a dashboard usually cannot: is any of this
+paying for itself.
+
+```sh
+moshcode install crawlproof       # npm i -g @profullstack/crawlproof
+
+moshcode crawlproof               # the live dashboard, last day, humans
+moshcode crawlproof dashboard --range=1m
+moshcode crawlproof stats site.com
+moshcode crawlproof dashboard --json | jq .roi.derived
+```
+
+Five screens: ROI, Traffic, Ads, Money, Spend. Two rules run through the
+arithmetic and both exist because breaking either produces a nicer number that
+is false. Where an account advertises on its own slots, ad spend and ad earnings
+are one dollar moving between two pockets, so they are reported under *Internal*
+and counted as neither cost nor revenue. And a bank feed carries groceries next
+to servers, so cost is the business scope only.
+
+It also says what it does not know, next to the number: a site that did not
+answer is missing rather than zero, and a fleet whose visits run far above its
+pageviews says so and offers the per-pageview figure instead.
+
+Needs a CrawlProof API token in `CRAWLPROOF_TOKEN` or the `token` field of
+`~/.crawlproof.json`. The money screens want a CoinPay merchant session as well;
+without one the other four still work and the money panels say what is missing.
+The dashboard is a TUI and wants Node 22.6+, while `stats` and `--json` run
+anywhere.
+
+`crawlproof` also ships in the `cli-tools` set, which symlinks a wrapper of the
+same name that vendors this package. Installing both is fine: the wrapper hands
+over to a `crawlproof` on PATH that is not its own, and refuses to follow one
+that is.
+
 ### Cloud + infra CLIs
 
 ```sh

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "moshcode",
-  "version": "0.93.0",
+  "version": "0.94.0",
   "type": "module",
   "description": "moshcode \u2014 a metal wrapper for coding engines and native UGig/CoinPay workflow CLIs, with OpenPRD and moshscript",
   "repository": {

package/src/cli-schema.mjs

@@ -35,7 +35,7 @@ export const CORE_CLI_COMMANDS = [
   {
     name: "agents",
     group: "engines",
-    description: "list engines or launch one autonomously",
+    description: "list engines, open their agent view, or launch autonomously",
     synopsis: [
       ["moshcode agents", "list engines and their install status"],
       ["moshcode agents --json", "list engine status as machine-readable JSON"],
@@ -48,6 +48,7 @@ export const CORE_CLI_COMMANDS = [
       ["moshcode agents", "which engines are here"],
       ["moshcode agents --json", "pipe engine status into a script"],
       ["moshcode agents claude", "claude's agent list"],
+      ["moshcode agents codex", "Codex's shared-daemon agents overview (CLI 0.151.0+)"],
     ],
     seeAlso: ["start", "engines", "install"],
     note: "autonomous modes bypass approval prompts — use them in a container or a workspace you trust.",
@@ -1518,7 +1519,7 @@ export const PIT_COMMANDS = [
   { name: "new", pitOnly: true,
     description: "open and switch to another moshcode tab" },
   { name: "agents", aliases: ["agent", "engines"], args: "[name]", cli: "agents",
-    description: "list engines, or launch one autonomously" },
+    description: "list engines, open their agent view, or launch autonomously" },
   { name: "start", args: "<engine> [args…]", cli: "start",
     description: "raw launch; inject no engine arguments" },
   { name: "herd", args: "[verb] [args…]", cli: "herd",

package/src/commands.mjs

@@ -826,7 +826,7 @@ const COMMANDS = [
   cliVerb("run", "run another .mosh file (include)"),
   // shortcut: ai() runs an engine headlessly and RETURNS its output (see PRD R17)
   aiVerb,
-  cliVerb("agents", "launch an autonomous agent session (moshcode agents <engine>)"),
+  cliVerb("agents", "open the native agent view or launch autonomously (moshcode agents <engine>)"),
   cliVerb("herd", "drive the herd (moshcode herd <verb>) — see herdStart/herdWait for values"),
   cliVerb("ps", "print the herd roster"),
   cliVerb("cost", "print what the herd is spending (moshcode cost [name] [--all])"),

package/src/engines.mjs

@@ -5,8 +5,8 @@
 //
 // `agentsView` (optional) is the exact argv that opens the engine's native
 // agent list/view — used by `/agents <name>` when the engine actually has one
-// (currently claude). It's the FULL leading args (subcommand + any flags that
-// subcommand accepts). Engines without an `agentsView` fall back to
+// (currently Claude and Codex). It's the FULL leading args, including root
+// flags before the subcommand when required. Engines without an `agentsView` fall back to
 // `agentArgs` — an autonomous session with native approvals
 // bypassed/auto-approved. Do not use a machine-readable, one-shot list command
 // as an agents view: `/agents` promises to hand the terminal to a live session.
@@ -131,7 +131,16 @@ export const ENGINES = {
     desc: "Codex — OpenAI's coding CLI",
     bin: "codex",
     agentArgs: ["--dangerously-bypass-approvals-and-sandbox"],
-    install: { cmd: "npm", args: ["install", "-g", "@openai/codex"] },
+    // Codex 0.151.0+: live shared-daemon session overview. The bypass option
+    // belongs to the root command, not the `agents` subcommand.
+    agentsView: ["--dangerously-bypass-approvals-and-sandbox", "agents"],
+    // The local agents daemon requires the installer-managed standalone
+    // package; npm alone can launch chats but cannot bootstrap that daemon.
+    // Windows uses a remote agents server and retains its npm installation.
+    install: process.platform === "win32"
+      ? { cmd: "npm", args: ["install", "-g", "@openai/codex"] }
+      : { cmd: "bash", args: ["-o", "pipefail", "-c", "curl -fsSL https://chatgpt.com/codex/install.sh | CODEX_NON_INTERACTIVE=1 sh"] },
+    binDirs: [path.join(homedir(), ".local", "bin")],
     resume: ["resume", "--last"],
     state: {
       blocked: [/\ballow (?:this )?command\b/i, /\bapprove this (?:command|edit|change)\b/i],

package/src/tools.mjs

@@ -88,6 +88,23 @@ export const TOOLS = {
     // where those words mean something else entirely.
     aliases: { cmd: "cli-tools", args: ["aliases", "--json"] },
   },
+  crawlproof: {
+    desc: "CrawlProof \u2014 what the fleet costs and what it returns: traffic, ad delivery and the bank behind it",
+    bin: "crawlproof",
+    // Reachable two ways on purpose. The `cli-tools` set above symlinks a
+    // wrapper of the same name, and this entry installs the package that
+    // wrapper vendors. Having both is safe: the wrapper hands over to a
+    // `crawlproof` on PATH that is not its own, and refuses to follow one that
+    // is, which would be an exec loop. It is its own entry because
+    // `/install crawlproof` should install CrawlProof rather than seven other
+    // commands that happen to travel with it.
+    //
+    // The dashboard is a TUI and wants Node 22.6+; `crawlproof stats` and
+    // `--json` run anywhere. An ordinary global npm package, and
+    // `npm install -g` is idempotent, so the install is also the upgrade \u2014
+    // no `upgrade` key, the same as bo and railway.
+    install: { cmd: "npm", args: ["install", "-g", "@profullstack/crawlproof"] },
+  },
   timer: {
     desc: "Profullstack timer - track time against projects, for people and for agents",
     bin: "timer",