
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
ai-agent-notifier
Advanced tools
Desktop & phone notifications for AI coding agents in VS Code and CLI. Supports Claude Code, Codex, Gemini CLI, and Cursor with toast alerts and ntfy push notifications.
Desktop & phone notifications for AI coding agents
One tool. One config. Every agent. Never miss when your AI finishes or needs input.
npx ai-agent-notifier setup
That's it. The setup wizard detects your platform and installed AI tools, wires the hooks, and optionally configures phone push notifications. Restart your AI tools to activate.
~/.ai-agent-notifier/config.json across all tools| Tool | VS Code | CLI | Task Complete | Needs Input |
|---|---|---|---|---|
| Native | Native | Stop | Notification | |
| Native | Native | Stop | PermissionRequest | |
| Native | -- | stop | -- | |
| -- | Native | AfterAgent | Notification |
All four tools are wired automatically by the setup wizard. No manual config editing needed.
Claude Code, Codex, and Cursor all run inside VS Code. ai-agent-notifier hooks directly into each tool's native hook system -- no VS Code extension required. The setup wizard detects installed tools and patches their configs automatically. Click a notification toast to jump straight back to your VS Code window.
# One-shot setup (no install needed)
npx ai-agent-notifier setup
# Or install globally
npm i -g ai-agent-notifier
ai-agent-notifier setup
/install-plugin https://github.com/DevinoSolutions/ai-agent-notifier
Hooks auto-register. Use /ai-agent-notifier:setup to wire other tools.
Windows (PowerShell):
irm https://raw.githubusercontent.com/DevinoSolutions/ai-agent-notifier/main/setup/install.ps1 | iex
macOS / Linux:
curl -fsSL https://raw.githubusercontent.com/DevinoSolutions/ai-agent-notifier/main/setup/install.sh | bash
ai-agent-notifier setup # First-time setup wizard
ai-agent-notifier status # Show wired tools, config, backends
ai-agent-notifier test [channel] # Fire test notification (toast | ntfy | both)
ai-agent-notifier config # Interactive settings menu
ai-agent-notifier uninstall # Remove hooks from all tools
Config lives at ~/.ai-agent-notifier/config.json:
{
"ntfy": {
"enabled": true,
"server": "https://ntfy.sh",
"topic": "ai-agent-notifier-<random>"
},
"toast": {
"enabled": true,
"clickToFocus": true
},
"events": {
"task_complete": { "sound": "IM", "ntfyPriority": "default" },
"needs_input": { "sound": "Reminder", "ntfyPriority": "urgent" },
"session_start": { "sound": "Default", "ntfyPriority": "low" }
}
}
ntfy sends free push notifications to your phone -- no account needed.
| Event | Default Sound | ntfy Priority | Description |
|---|---|---|---|
task_complete | IM | default | Agent finished its task |
needs_input | Reminder | urgent | Agent needs your input or permission |
session_start | Default | low | New session started (disabled by default) |
Each AI tool's hook system pipes event data to notify.mjs:
Hook fires (stdin JSON + --source flag)
-> parse-input.mjs (normalize across tools)
-> router.mjs (map event to notification type)
-> platform toast (Windows / macOS / Linux)
-> ntfy push (phone notification)
agentfocus:// URI protocolosascript -- zero additional dependenciesterminal-notifier for richer features if availablenotify-send (libnotify) -- available on most desktop distributions| Requirement | Details |
|---|---|
| Node.js | >= 18.0.0 (already present for all supported AI tools) |
| Windows | PowerShell 7+ (pwsh) |
| macOS | osascript (built-in) |
| Linux | notify-send (optional, for desktop toasts) |
ai-agent-notifier uninstall
Removes all managed hooks from every tool's config. Original configs are backed up at ~/.ai-agent-notifier/backups/.
Everything below is verified against the real thing — no mocks, no stubs, no fakes. Real ntfy.sh push delivery, a real Linux notification daemon receiving the exact payload, the real agent CLIs installed from npm and driven end to end, and the real native OS toast backends actually firing. Every job is required and hard-fails: a broken key, a renamed secret, or a hook that doesn't deliver turns CI red instead of skipping silently.
Each job runs as its own GitHub Actions workflow. The badge in every row is its live status on main — not a screenshot — so click any badge to see the actual run and its per-test logs.
¹ Codex and Cursor don't round-trip a prompt through their API in CI — codex exec needs OpenAI Tier 1+ WebSocket access, and Cursor is a GUI editor. Their hook delivery is fully covered by the unit + e2e suites; these jobs verify the live key and the real config wiring.
npm test # offline: 117 unit + integration tests
npm run test:e2e # real ntfy.sh round-trip, needs network
npm run toast:demo # fire real desktop toasts, every event
Headless CI has no display or login session, so it verifies delivery (a real daemon received the payload) and backend success (the OS accepted the call) — but it cannot prove a human visually sees a banner appear. macOS and Windows also silently suppress toasts under Do Not Disturb / Focus or denied notification permission, returning success either way. To confirm with your own eyes on your own machine, run npm run toast:demo and watch them pop.
Contributions are welcome. Please open an issue first to discuss what you'd like to change.
AGPL-3.0 -- Copyright (c) 2026 DevinoSolutions
FAQs
Desktop & phone notifications for AI coding agents in VS Code and CLI. Supports Claude Code, Codex, Gemini CLI, and Cursor with toast alerts and ntfy push notifications.
The npm package ai-agent-notifier receives a total of 319 weekly downloads. As such, ai-agent-notifier popularity was classified as not popular.
We found that ai-agent-notifier demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.