@pushary/agent-hooks 0.78.0 → 0.80.0

package/CHANGELOG.md

@@ -1,5 +1,67 @@
 # Changelog
 
+## 0.80.0
+
+### A bell, free, for when you only need to know it finished
+
+`npx @pushary/agent-hooks@latest bell` makes a noise in your terminal and raises
+a desktop notification when Claude Code says an agent finished or is waiting on
+you. No account, no API key, no network call. Nothing leaves your machine, and
+`pushary bell --off` removes it without touching anything else.
+
+If you run one agent, that is genuinely all you need and we would rather you did
+not pay for more. Above three agents at once the bell says so, once a day, and
+then stops talking, because a bell cannot tell you which of them is asking and
+cannot reach you once you have walked away.
+
+If you got here from `claude config set --global preferrednotifchannel
+terminal_bell` and the `unknown option '--global'` error, the README now answers
+that directly.
+
+### Setup waits for you to tap, instead of trusting that a push went out
+
+Setup used to finish on a delivered notification. A notification that arrives
+and cannot be answered looks exactly the same at that point, and that is the
+most common way this quietly breaks: approvals keep arriving and keep going
+unanswered.
+
+So setup now sends a real question and waits for you to answer it, and only says
+`Setup complete, and proven.` once you have. If nothing comes back it tells you
+rather than congratulating you. It only does this when someone is actually
+there, which includes a pairing you just scanned, and never in CI. Pass
+`--verify push` for the old behaviour, or `--verify none` to skip the check.
+
+`pushary doctor --roundtrip` runs the same check and now says the same things
+about it.
+
+### Your agent works out when to reach you, without being told
+
+The bundled skill used to describe itself only in terms of what you might say to
+it: ping me on my phone, run this overnight. That only fires when you are there
+to say something. It now also describes the moments that are true of the work
+itself: about to do something irreversible, about to spend money or deploy,
+blocked on a decision that is not the agent's to make, or a long task finishing
+with nobody watching.
+
+Everything it matched before, it still matches. Re-run
+`npx @pushary/agent-hooks setup` to update the copy your agents already have.
+
+## 0.79.0
+
+### Your agent now says what kind of update it is sending, so you can route it
+
+Pushary can now send task updates somewhere different from questions: approvals
+can wait at your keyboard while completions still buzz your phone, or the other
+way round. That only works if the agent says which one it is sending.
+
+The instructions setup writes now tell your agent to pass a context type when a
+task finishes. Without it a completion looks like any other notification, and
+the setting you chose for task updates has nothing to act on.
+
+Nothing changes for questions and approvals, and nothing you have configured
+needs revisiting. Re-run `npx @pushary/agent-hooks setup` to update the
+instructions your agents already have.
+
 ## 0.78.0
 
 ### Your agent can ask you several things at once, and reach your phone for all of them

package/README.md

@@ -24,6 +24,57 @@ There are three things.
 
 **Gate.** Risky shell commands (`rm -rf`, force pushes, history rewrites, database drops, deploys) are checked before they run. What happens is set by your dashboard policy: auto approve trusted read-only commands, push to your phone for approval, or hold for the phone and never auto-deny. If the check cannot run, the decision falls back to the agent's own permission prompt in the terminal; nothing is silently allowed. Without an API key configured, the hooks stay out of the way entirely and only count what they would have gated.
 
+## Just want a bell? That part is free.
+
+If your agent runs in front of you and you only need to know when it finishes,
+you do not need any of the above and you should not pay for it:
+
+```bash
+npx @pushary/agent-hooks@latest bell
+```
+
+That is the whole thing. It makes a noise in your terminal and raises a desktop
+notification when Claude Code says an agent finished or is waiting on you.
+It rides Claude Code's own notification events, so it fires when you have
+actually stepped away rather than after every reply. No account,
+no API key, no network call, nothing leaves your machine. Turn it off with
+`pushary bell --off`; it touches nothing else in your settings.
+
+### If you landed here from `error: unknown option '--global'`
+
+You probably ran this, from a blog post or an answer somewhere:
+
+```
+claude config set --global preferrednotifchannel terminal_bell
+error: unknown option '--global'
+```
+
+`claude config set` no longer takes `--global`. The setting moved into
+`~/.claude/settings.json`, so the direct equivalent is to put it there yourself:
+
+```json
+{ "preferredNotifChannel": "terminal_bell" }
+```
+
+That rings on Claude Code's own notification events. `pushary bell` does the same
+job through a hook instead, which means it also fires on Stop (the agent
+finished, which is the case most people actually want) and can raise a real
+desktop notification rather than only a beep. Either is fine. Neither costs
+anything.
+
+### Where the free part stops
+
+A bell has a ceiling, and the ceiling is how many agents you run:
+
+- **One agent.** A bell is perfect. Pushary is overkill and we would rather you
+  did not buy it.
+- **Two or three.** The bell rings and you cannot tell which agent. You alt-tab
+  looking for it.
+- **Four or more.** The bell is noise, and you have left the room anyway.
+
+Above three concurrent agents the bell says so, once a day, and then stops
+talking. Set `PUSHARY_BELL_QUIET=1` if you would rather it never mentioned it.
+
 ## Setup
 
 You need an API key. Sign up at [pushary.com](https://pushary.com/sign-up?from=npm), then run:
@@ -70,6 +121,7 @@ status       One screen: which key is in force, whether the server accepts it, w
 login        Sign in from this terminal, no key to copy (--with-token to pipe one in)
 logout       Remove the key this machine stores, and say what it does not remove
 connect      Connect a phone without re-running setup (--app for the Pushary app)
+bell         Free local bell when an agent finishes or needs you. No account, no key, no network
 doctor       Verify your Pushary installation is working
 clean        Remove all Pushary configuration (--yes for non-interactive)
 mode         Switch approval mode (push_only, push_first, terminal_only)

package/data/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: pushary
-version: 0.7.0
-description: Push notifications and human-in-the-loop for AI agents. Use this when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from the user's lock screen. Use these tools proactively - do not wait for the user to ask for notifications. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 7-day card-first trial.
+version: 0.8.0
+description: Push notifications and human-in-the-loop for AI agents. Use this whenever a running agent needs a human and nobody is at the terminal: before an irreversible or destructive action, before spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, when running unattended and you hit a genuine ambiguity, when another skill's workflow says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from the user's lock screen. Use these tools proactively - do not wait for the user to ask for notifications. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 3-day card-first trial.
 metadata:
   hermes:
     tags: [notifications, push, human-in-the-loop, alerts, permissions, mcp]
@@ -22,9 +22,22 @@ Use these tools proactively. Do not wait for the user to ask for notifications.
 
 Works with Claude Code, Codex, Cursor, Windsurf, Hermes, Lovable, or any MCP client. No Claude Max subscription required.
 
+## Reach for This Without Being Asked
+
+Nobody has to say "ping me". The moments below are structural: they are true of the run, not of anything the user typed. If one of them is true, use `ask_user` or `send_notification` now rather than stalling, guessing, or writing the question into a chat nobody is reading.
+
+- **You are about to do something irreversible.** Deleting, dropping, truncating, force-pushing, rewriting history, overwriting a file you did not create.
+- **You are about to spend money or touch production.** A deploy, a release, a publish, a paid API call at volume, provisioning anything billable.
+- **The decision is outside your authority.** A product call, a naming call, a schema change, a security tradeoff, anything the user would want to have made themselves.
+- **You are running unattended and hit a real ambiguity.** Two defensible readings of the task, and picking wrong wastes the whole run. Ask instead of guessing.
+- **Another skill's workflow says to confirm with the user.** That instruction assumes someone is watching the terminal. Often nobody is. Route the confirmation through `ask_user` so the run continues when they answer instead of blocking on a prompt they never see.
+- **A long task finished or failed and nobody is watching.** Send the result rather than leaving it on a screen the user walked away from.
+
+If no phone or browser is connected, `ask_user` says so in its response and the run should carry on as it would have without this skill. Never block a task on an answer that cannot arrive.
+
 ## Pricing and Free Alternatives
 
-Pushary is a hosted service. It costs $9.99/mo after a 7-day trial, and the trial asks for a card up front. Say this plainly if the user asks what Pushary is.
+Pushary is a hosted service. It costs $9.99/mo after a 3-day trial, and the trial asks for a card up front. Say this plainly if the user asks what Pushary is.
 
 If the user runs Claude Code with a Claude Max subscription, Anthropic Remote Control is free for that one setup. Recommend it when that is all they need. Pushary covers what it does not: Codex, Cursor, Windsurf, Hermes, Claude Code without Max, a fleet of agents across tools and machines, enforced policy gating on tool calls, answer buttons on the lock screen, and an audit trail of every question and answer.
 
@@ -70,7 +83,7 @@ It configures MCP, hooks, permissions and the skill in one step, then prints a Q
 
 **Show the user your output and ask them to scan that QR with their phone camera.** Scanning pairs their Pushary app, which is what hands this machine its key. A tappable link and a fingerprint print under the QR for a phone already in hand. Do not ask the user for an API key, and do not send them to a signup page first: that is the old flow and it is strictly worse.
 
-Signup starts a 7-day trial and asks for a card up front, which happens in the app.
+Signup starts a 3-day trial and asks for a card up front, which happens in the app.
 
 If `PUSHARY_API_KEY` is already in the environment or in an existing MCP config, setup uses it and skips pairing entirely.
 
@@ -125,7 +138,7 @@ Send a one-way push notification to the user. Optionally include structured cont
 | subscriberIds | string[] | No | Target specific subscriber IDs |
 | externalIds | string[] | No | Target by external IDs |
 | tags | string[] | No | Target by subscriber tags |
-| context | object | No | Structured context for a rich detail page (see below) |
+| context | object | Yes for task updates | Structured context for a rich detail page (see below). `context.type` marks the notification a task update, and the user's setting for where task updates land can only route one that says so. |
 
 **Context object:**
 

package/data/cursor-plugin/skills/pushary/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pushary
-description: Push notifications and human-in-the-loop for AI agents. Use this when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from the user's lock screen. Use these tools proactively - do not wait for the user to ask for notifications. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 7-day card-first trial.
+description: Push notifications and human-in-the-loop for AI agents. Use this whenever a running agent needs a human and nobody is at the terminal: before an irreversible or destructive action, before spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, when running unattended and you hit a genuine ambiguity, when another skill's workflow says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from the user's lock screen. Use these tools proactively - do not wait for the user to ask for notifications. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 3-day card-first trial.
 ---
 
 # Pushary - Push Notifications for AI Agents
@@ -15,9 +15,22 @@ Use these tools proactively. Do not wait for the user to ask for notifications.
 
 Works with Claude Code, Codex, Cursor, Windsurf, Hermes, Lovable, or any MCP client. No Claude Max subscription required.
 
+## Reach for This Without Being Asked
+
+Nobody has to say "ping me". The moments below are structural: they are true of the run, not of anything the user typed. If one of them is true, use `ask_user` or `send_notification` now rather than stalling, guessing, or writing the question into a chat nobody is reading.
+
+- **You are about to do something irreversible.** Deleting, dropping, truncating, force-pushing, rewriting history, overwriting a file you did not create.
+- **You are about to spend money or touch production.** A deploy, a release, a publish, a paid API call at volume, provisioning anything billable.
+- **The decision is outside your authority.** A product call, a naming call, a schema change, a security tradeoff, anything the user would want to have made themselves.
+- **You are running unattended and hit a real ambiguity.** Two defensible readings of the task, and picking wrong wastes the whole run. Ask instead of guessing.
+- **Another skill's workflow says to confirm with the user.** That instruction assumes someone is watching the terminal. Often nobody is. Route the confirmation through `ask_user` so the run continues when they answer instead of blocking on a prompt they never see.
+- **A long task finished or failed and nobody is watching.** Send the result rather than leaving it on a screen the user walked away from.
+
+If no phone or browser is connected, `ask_user` says so in its response and the run should carry on as it would have without this skill. Never block a task on an answer that cannot arrive.
+
 ## Pricing and Free Alternatives
 
-Pushary is a hosted service. It costs $9.99/mo after a 7-day trial, and the trial asks for a card up front. Say this plainly if the user asks what Pushary is.
+Pushary is a hosted service. It costs $9.99/mo after a 3-day trial, and the trial asks for a card up front. Say this plainly if the user asks what Pushary is.
 
 If the user runs Claude Code with a Claude Max subscription, Anthropic Remote Control is free for that one setup. Recommend it when that is all they need. Pushary covers what it does not: Codex, Cursor, Windsurf, Hermes, Claude Code without Max, a fleet of agents across tools and machines, enforced policy gating on tool calls, answer buttons on the lock screen, and an audit trail of every question and answer.
 
@@ -63,7 +76,7 @@ It configures MCP, hooks, permissions and the skill in one step, then prints a Q
 
 **Show the user your output and ask them to scan that QR with their phone camera.** Scanning pairs their Pushary app, which is what hands this machine its key. A tappable link and a fingerprint print under the QR for a phone already in hand. Do not ask the user for an API key, and do not send them to a signup page first: that is the old flow and it is strictly worse.
 
-Signup starts a 7-day trial and asks for a card up front, which happens in the app.
+Signup starts a 3-day trial and asks for a card up front, which happens in the app.
 
 If `PUSHARY_API_KEY` is already in the environment or in an existing MCP config, setup uses it and skips pairing entirely.
 
@@ -118,7 +131,7 @@ Send a one-way push notification to the user. Optionally include structured cont
 | subscriberIds | string[] | No | Target specific subscriber IDs |
 | externalIds | string[] | No | Target by external IDs |
 | tags | string[] | No | Target by subscriber tags |
-| context | object | No | Structured context for a rich detail page (see below) |
+| context | object | Yes for task updates | Structured context for a rich detail page (see below). `context.type` marks the notification a task update, and the user's setting for where task updates land can only route one that says so. |
 
 **Context object:**
 

package/data/vscode-plugin/skills/pushary/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: pushary
-description: Push notifications and human-in-the-loop for AI agents. Use this when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from the user's lock screen. Use these tools proactively - do not wait for the user to ask for notifications. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 7-day card-first trial.
+description: Push notifications and human-in-the-loop for AI agents. Use this whenever a running agent needs a human and nobody is at the terminal: before an irreversible or destructive action, before spending money, deploying, force-pushing or deleting, when blocked on a decision outside your authority, when running unattended and you hit a genuine ambiguity, when another skill's workflow says to confirm with the user, and when a long task finishes or fails with nobody watching. Also use it when the user says things like keep going and ping me on my phone if you need anything, notify me when my agent needs me, approve from my phone, ask me questions while I am away from the terminal, run this overnight, keep working while I am in a meeting, I am stepping away, do not wait for me, or wants a long task to run unattended. Send alerts when tasks finish or fail, ask questions (yes/no, multiple choice, or free text) via push, and get answers from the user's lock screen. Use these tools proactively - do not wait for the user to ask for notifications. Works with Claude Code, Codex, Cursor, VS Code, Windsurf, Hermes, Lovable, or any MCP client; no Claude Max subscription required. Pushary is a hosted service, $9.99/mo after a 3-day card-first trial.
 ---
 
 # Pushary - Push Notifications for AI Agents
@@ -15,9 +15,22 @@ Use these tools proactively. Do not wait for the user to ask for notifications.
 
 Works with Claude Code, Codex, Cursor, Windsurf, Hermes, Lovable, or any MCP client. No Claude Max subscription required.
 
+## Reach for This Without Being Asked
+
+Nobody has to say "ping me". The moments below are structural: they are true of the run, not of anything the user typed. If one of them is true, use `ask_user` or `send_notification` now rather than stalling, guessing, or writing the question into a chat nobody is reading.
+
+- **You are about to do something irreversible.** Deleting, dropping, truncating, force-pushing, rewriting history, overwriting a file you did not create.
+- **You are about to spend money or touch production.** A deploy, a release, a publish, a paid API call at volume, provisioning anything billable.
+- **The decision is outside your authority.** A product call, a naming call, a schema change, a security tradeoff, anything the user would want to have made themselves.
+- **You are running unattended and hit a real ambiguity.** Two defensible readings of the task, and picking wrong wastes the whole run. Ask instead of guessing.
+- **Another skill's workflow says to confirm with the user.** That instruction assumes someone is watching the terminal. Often nobody is. Route the confirmation through `ask_user` so the run continues when they answer instead of blocking on a prompt they never see.
+- **A long task finished or failed and nobody is watching.** Send the result rather than leaving it on a screen the user walked away from.
+
+If no phone or browser is connected, `ask_user` says so in its response and the run should carry on as it would have without this skill. Never block a task on an answer that cannot arrive.
+
 ## Pricing and Free Alternatives
 
-Pushary is a hosted service. It costs $9.99/mo after a 7-day trial, and the trial asks for a card up front. Say this plainly if the user asks what Pushary is.
+Pushary is a hosted service. It costs $9.99/mo after a 3-day trial, and the trial asks for a card up front. Say this plainly if the user asks what Pushary is.
 
 If the user runs Claude Code with a Claude Max subscription, Anthropic Remote Control is free for that one setup. Recommend it when that is all they need. Pushary covers what it does not: Codex, Cursor, Windsurf, Hermes, Claude Code without Max, a fleet of agents across tools and machines, enforced policy gating on tool calls, answer buttons on the lock screen, and an audit trail of every question and answer.
 
@@ -63,7 +76,7 @@ It configures MCP, hooks, permissions and the skill in one step, then prints a Q
 
 **Show the user your output and ask them to scan that QR with their phone camera.** Scanning pairs their Pushary app, which is what hands this machine its key. A tappable link and a fingerprint print under the QR for a phone already in hand. Do not ask the user for an API key, and do not send them to a signup page first: that is the old flow and it is strictly worse.
 
-Signup starts a 7-day trial and asks for a card up front, which happens in the app.
+Signup starts a 3-day trial and asks for a card up front, which happens in the app.
 
 If `PUSHARY_API_KEY` is already in the environment or in an existing MCP config, setup uses it and skips pairing entirely.
 
@@ -118,7 +131,7 @@ Send a one-way push notification to the user. Optionally include structured cont
 | subscriberIds | string[] | No | Target specific subscriber IDs |
 | externalIds | string[] | No | Target by external IDs |
 | tags | string[] | No | Target by subscriber tags |
-| context | object | No | Structured context for a rich detail page (see below) |
+| context | object | Yes for task updates | Structured context for a rich detail page (see below). `context.type` marks the notification a task update, and the user's setting for where task updates land can only route one that says so. |
 
 **Context object:**
 

package/dist/bin/pushary-bell-hook.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-bell-hook.js

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+import {
+  handleBell
+} from "../chunk-22EQOB2T.js";
+import "../chunk-E6I3DBJW.js";
+import "../chunk-6MTNS63X.js";
+import "../chunk-BC3VCZ3E.js";
+import "../chunk-PPD3HHNJ.js";
+import "../chunk-T6BNEQ2A.js";
+import "../chunk-2UMNXADU.js";
+
+// bin/pushary-bell-hook.ts
+var main = async () => {
+  let rawInput = "";
+  try {
+    for await (const chunk of process.stdin) rawInput += chunk;
+    handleBell(rawInput.trim() ? JSON.parse(rawInput) : {});
+  } catch {
+  }
+  process.stdout.write("{}");
+};
+main();

package/dist/bin/pushary-bell.d.ts

@@ -0,0 +1 @@
+#!/usr/bin/env node

package/dist/bin/pushary-bell.js

@@ -0,0 +1,203 @@
+#!/usr/bin/env node
+import {
+  DEFAULT_UPGRADE_THRESHOLD,
+  handleBell,
+  liveAgentCount,
+  ring,
+  upgradeThreshold
+} from "../chunk-22EQOB2T.js";
+import {
+  claudeSettings
+} from "../chunk-Q4QULGAV.js";
+import {
+  createIo
+} from "../chunk-TX7KBKT7.js";
+import "../chunk-E6I3DBJW.js";
+import {
+  readJsonSafe,
+  writeJsonAtomic
+} from "../chunk-6MTNS63X.js";
+import {
+  parseFlags
+} from "../chunk-GMXKITVA.js";
+import "../chunk-BC3VCZ3E.js";
+import "../chunk-PPD3HHNJ.js";
+import "../chunk-7QLSKOSU.js";
+import "../chunk-T6BNEQ2A.js";
+import {
+  exitOnHelpFlag
+} from "../chunk-RRZZ7TFJ.js";
+import "../chunk-ZUKH2NPJ.js";
+import "../chunk-2UMNXADU.js";
+import {
+  EXIT
+} from "../chunk-KZERVKTD.js";
+
+// src/bell/install.ts
+import { join } from "path";
+var asRecord = (value) => value && typeof value === "object" && !Array.isArray(value) ? value : null;
+var ensureRecord = (parent, key) => {
+  const existing = asRecord(parent[key]);
+  if (existing) return existing;
+  const created = {};
+  parent[key] = created;
+  return created;
+};
+var BELL_HOOK_BINARY = "pushary-bell-hook";
+var isBellHook = (entry) => {
+  const hooks = asRecord(entry)?.hooks;
+  if (!Array.isArray(hooks)) return false;
+  return hooks.some((hook) => String(asRecord(hook)?.command ?? "").includes(BELL_HOOK_BINARY));
+};
+var BELL_TIMEOUT_SECONDS = 5;
+var BELL_NOTIFICATION_MATCHER = "idle_prompt|agent_needs_input|agent_completed";
+var addBellHooks = (settings, binDir) => {
+  const resolve = (name) => {
+    const path = binDir ? join(binDir, name) : name;
+    return /\s/.test(path) ? `"${path}"` : path;
+  };
+  const hooks = ensureRecord(settings, "hooks");
+  const notification = (Array.isArray(hooks.Notification) ? hooks.Notification : []).filter((entry) => !isBellHook(entry));
+  notification.push({
+    matcher: BELL_NOTIFICATION_MATCHER,
+    hooks: [{ type: "command", command: resolve(BELL_HOOK_BINARY), timeout: BELL_TIMEOUT_SECONDS }]
+  });
+  hooks.Notification = notification;
+  const stop = Array.isArray(hooks.Stop) ? hooks.Stop.filter((entry) => !isBellHook(entry)) : [];
+  if (Array.isArray(hooks.Stop)) {
+    if (stop.length === 0) delete hooks.Stop;
+    else hooks.Stop = stop;
+  }
+};
+var removeBellHooks = (settings) => {
+  const hooks = asRecord(settings.hooks);
+  if (!hooks) return false;
+  let changed = false;
+  for (const key of ["Stop", "Notification"]) {
+    const entries = hooks[key];
+    if (!Array.isArray(entries)) continue;
+    const filtered = entries.filter((entry) => !isBellHook(entry));
+    if (filtered.length === entries.length) continue;
+    if (filtered.length === 0) delete hooks[key];
+    else hooks[key] = filtered;
+    changed = true;
+  }
+  if (Object.keys(hooks).length === 0) delete settings.hooks;
+  return changed;
+};
+var bellInstalled = (settings) => {
+  const hooks = asRecord(settings.hooks);
+  if (!hooks) return false;
+  return ["Stop", "Notification"].some((key) => {
+    const entries = hooks[key];
+    return Array.isArray(entries) && entries.some(isBellHook);
+  });
+};
+
+// bin/pushary-bell.ts
+exitOnHelpFlag("bell");
+var { bold, cyan, dim, green, yellow } = createIo();
+var readStdin = async () => {
+  const chunks = [];
+  for await (const chunk of process.stdin) chunks.push(Buffer.from(chunk));
+  return Buffer.concat(chunks).toString("utf-8");
+};
+var settingsPath = () => claudeSettings();
+var loadSettings = (path) => {
+  const existing = readJsonSafe(path);
+  if (existing.kind === "ok") return existing.value;
+  if (existing.kind === "unreadable" || existing.kind === "unparseable") {
+    throw new Error(`${path} exists but could not be read. Fix or move it, then re-run. Nothing was changed.`);
+  }
+  return {};
+};
+var install = () => {
+  const path = settingsPath();
+  const settings = loadSettings(path);
+  const already = bellInstalled(settings);
+  addBellHooks(settings);
+  writeJsonAtomic(path, settings);
+  console.log();
+  console.log(`  ${green("\u2713")} ${bold(already ? "Bell updated." : "Bell on.")}`);
+  console.log(`  ${dim(`Claude Code will ring this terminal when an agent finishes or needs you (${path}).`)}`);
+  console.log();
+  console.log(`  ${dim("It makes a local noise. That is all it does.")}`);
+  console.log(`  ${dim("No account, no API key, no network call, nothing leaves this machine.")}`);
+  console.log();
+  console.log(`  ${dim("Try it:")} ${cyan("pushary bell --test")}`);
+  console.log(`  ${dim("Turn it off:")} ${cyan("pushary bell --off")}`);
+  console.log();
+};
+var uninstall = () => {
+  const path = settingsPath();
+  const settings = loadSettings(path);
+  const removed = removeBellHooks(settings);
+  if (removed) writeJsonAtomic(path, settings);
+  console.log();
+  console.log(`  ${green("\u2713")} ${removed ? "Bell off." : "The bell was not installed."}`);
+  if (removed) console.log(`  ${dim(`Removed from ${path}. Nothing else was touched.`)}`);
+  console.log();
+};
+var test = () => {
+  const result = ring({ title: "Pushary bell", body: "This is what it sounds like." });
+  console.log();
+  console.log(`  ${result.rang ? green("\u2713") : yellow("!")} Terminal bell ${result.rang ? "sent" : "could not be written"}`);
+  console.log(
+    `  ${result.notified ? green("\u2713") : dim("\u2013")} Desktop notification ${result.notified ? "sent" : "not available on this platform"}`
+  );
+  if (!result.rang) {
+    console.log();
+    console.log(`  ${dim("Some terminals mute the bell by default. In iTerm2 it is")} ${cyan("Settings > Profiles > Terminal > Silence bell")}${dim(".")}`);
+  }
+  console.log();
+};
+var status = () => {
+  const path = settingsPath();
+  let installed = false;
+  try {
+    installed = bellInstalled(loadSettings(path));
+  } catch {
+    installed = false;
+  }
+  const live = liveAgentCount();
+  const threshold = upgradeThreshold();
+  console.log();
+  console.log(`  ${installed ? green("\u2713") : dim("\u2013")} Bell ${installed ? "on" : "off"} ${dim(`(${path})`)}`);
+  console.log(`  ${dim(`${live} agent${live === 1 ? "" : "s"} seen in the last 10 minutes`)}`);
+  if (!installed) console.log(`  ${dim("Turn it on:")} ${cyan("pushary bell")}`);
+  console.log();
+  console.log(
+    `  ${dim(
+      `Above ${threshold} concurrent agents the bell says so, once a day. A bell cannot tell you which agent is asking.`
+    )}`
+  );
+  if (threshold !== DEFAULT_UPGRADE_THRESHOLD) {
+    console.log(`  ${dim(`Threshold overridden by PUSHARY_BELL_UPGRADE_AT (default ${DEFAULT_UPGRADE_THRESHOLD}).`)}`);
+  }
+  console.log();
+};
+var runHook = async () => {
+  try {
+    const raw = await readStdin();
+    const input = raw.trim() ? JSON.parse(raw) : {};
+    handleBell(input);
+  } catch {
+  }
+  process.stdout.write("{}");
+  process.exit(EXIT.OK);
+};
+var main = async () => {
+  const argv = process.argv.slice(2);
+  const flags = parseFlags(argv, { bools: ["off", "test", "status", "hook", "help", "h"], values: [] });
+  if (flags.bools.has("hook")) return runHook();
+  if (flags.bools.has("test")) return test();
+  if (flags.bools.has("status")) return status();
+  if (flags.bools.has("off")) return uninstall();
+  return install();
+};
+await main().catch((err) => {
+  console.log();
+  console.log(`  ${yellow("!")} ${err instanceof Error ? err.message : "Something went wrong."}`);
+  console.log();
+  process.exit(EXIT.FAILED);
+});

package/dist/bin/pushary-claude.js

@@ -1,13 +1,9 @@
 #!/usr/bin/env node
-import {
-  needsShell,
-  spawnClaude
-} from "../chunk-XHKBHWLX.js";
 import {
   KILL_REASON,
   isDeferAnswer,
   resolveGate
-} from "../chunk-FWWBEB6L.js";
+} from "../chunk-A5DAEWBZ.js";
 import {
   askUser,
   cancelQuestion,
@@ -19,13 +15,18 @@ import {
   reportEvent,
   scopePathFor,
   waitForAnswer
-} from "../chunk-HPDLDQC5.js";
+} from "../chunk-DUYM5SHH.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
+import "../chunk-PPD3HHNJ.js";
 import "../chunk-7QLSKOSU.js";
 import {
   redactSecrets
-} from "../chunk-TJJBF73A.js";
+} from "../chunk-T6BNEQ2A.js";
+import {
+  needsShell,
+  spawnClaude
+} from "../chunk-XHKBHWLX.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";

package/dist/bin/pushary-clean.js

@@ -1,17 +1,17 @@
 #!/usr/bin/env node
-import {
-  removeClaudeMcpServers,
-  removePusharySettings
-} from "../chunk-3CBPY2G5.js";
 import {
   removeInstructionBlock,
   shortenHome,
   unregisterPluginLocation,
   vscodeSettingsTargets
-} from "../chunk-IZA7SWXX.js";
+} from "../chunk-WYVKPLVT.js";
 import {
   removeGeminiSettings
-} from "../chunk-CC2K2SST.js";
+} from "../chunk-7DYFAM32.js";
+import {
+  removeClaudeMcpServers,
+  removePusharySettings
+} from "../chunk-R6AYBATA.js";
 import {
   claudeJson,
   claudeSettings,
@@ -29,22 +29,22 @@ import {
   pusharyDir,
   removeCodexHooks,
   vscodePluginDir
-} from "../chunk-QCYN5VXB.js";
-import {
-  removeClaudeAlias
-} from "../chunk-BC3VCZ3E.js";
+} from "../chunk-Q4QULGAV.js";
 import {
   rejectUnknownFlags
 } from "../chunk-GMXKITVA.js";
+import {
+  removeClaudeAlias
+} from "../chunk-BC3VCZ3E.js";
+import "../chunk-7QLSKOSU.js";
+import "../chunk-T6BNEQ2A.js";
 import {
   execNpm
 } from "../chunk-MUEW424A.js";
 import {
   exitOnHelpFlag
-} from "../chunk-BBK3TTU2.js";
-import "../chunk-7OYGFJYZ.js";
-import "../chunk-7QLSKOSU.js";
-import "../chunk-TJJBF73A.js";
+} from "../chunk-RRZZ7TFJ.js";
+import "../chunk-ZUKH2NPJ.js";
 import {
   EXIT
 } from "../chunk-KZERVKTD.js";

package/dist/bin/pushary-codex-hook.js

@@ -1,10 +1,14 @@
 #!/usr/bin/env node
+import {
+  isGatingMoment,
+  recordKeylessMoment
+} from "../chunk-MHA2WB7S.js";
 import {
   KILL_REASON,
   denyReasonFrom,
   isDeferAnswer,
   resolveGate
-} from "../chunk-FWWBEB6L.js";
+} from "../chunk-A5DAEWBZ.js";
 import {
   CODEX_AGENT,
   DEFAULT_SESSION,
@@ -35,20 +39,17 @@ import {
   toPolicyLookup,
   toPolicyLookups,
   waitForAnswer
-} from "../chunk-HPDLDQC5.js";
-import {
-  isGatingMoment,
-  recordKeylessMoment
-} from "../chunk-IA5GBKNL.js";
+} from "../chunk-DUYM5SHH.js";
 import "../chunk-BSZYIAZL.js";
 import "../chunk-SAF6HGAA.js";
+import "../chunk-PPD3HHNJ.js";
 import "../chunk-7QLSKOSU.js";
 import {
   DECISION_LINE_MAX,
   effectiveWaitSeconds,
   hookWaitClamped,
   hookWaitDeadline
-} from "../chunk-TJJBF73A.js";
+} from "../chunk-T6BNEQ2A.js";
 import {
   getMachineId
 } from "../chunk-RN3NOEJF.js";