Only when you are not looking
A native notification only fires when the TYBA window is out of focus.
When it fires
The ~2 seconds only apply to the end of a turn. The agent tends to stop and come back in a blink — the delay keeps you from being told about a “done” that is no longer true. If a new turn started in the meantime, the alert is swallowed.TYBA also uses those 2s to re-read the end of the conversation and write a body better than “finished”. Approvals and requests for an answer wait for nothing — you are the one blocking the agent.
What shows up
Title:Tyba — <session name>. With no name, it becomes Tyba — agent session.
Body: what happened — Approval pending: <command>, Agent waiting for your answer, or a summary of what it did.
The body is redacted
What gets wiped:It is a known-pattern filter, not a universal detector. A password that doesn’t look like any of those formats gets through. The real defense is the agent not receiving your secrets — redaction is the last line, not the first.
Back to the session behind the last alert
It takes you straight to the last session that asked for attention — no hunting through the sidebar for which of the seven tabs it was.
It cannot be remapped. It does not appear in Settings → Shortcuts; it is constant. There is even a test that stops any default shortcut from colliding with that combination.With no alert pending, it does nothing.
What does not exist
To silence them, the tool is your system: macOS’s Do Not Disturb, Windows’s Focus Assist, whatever your Linux desktop offers. TYBA uses the native API, so respecting the system’s silence comes for free.The only thing called “Notifications” in Settings is the title of the inbox panel. It is not a group of options.
See also
Claude Code and Codex
The statuses that generate the alerts.
Risk classification
What makes a command stop and call you.