bund

Your AI agent is waiting for you. Again.

Telegram pings for coding agents.
Approve from your phone. Free. Zero dependencies.

---

The problem

How it works

Setup (2 minutes)

pip install bund

bund set --token <botfather-token>
bund set --chat auto
bund install
bund test

bund install wires Claude Code's PermissionRequest and Stop hooks. On any other agent or script, use bund ask (below) — no install needed.

What you get

Button	Does
✅ Approve	Lets it run, once
❌ Deny	Nope
♾ Approve all similar	Never asks again for that kind of command

And a ping when the task is done:

Now you know which one.

Sample message

🙄 Your AI intern wants to run Bash. Please supervise.

📁 my-project
npm run build

[ ✅ Approve ] [ ❌ Deny ]
[ ♾ Approve all similar: Bash(npm run *) ]

The joke is on top. The real command is always shown in full below it.

Works with any agent

bund ask is the universal protocol: any CLI, script, or agent asks a question, your phone answers.

bund ask "deploy to prod?" && echo let's go
# stdout: allow | deny | timeout
# exit:   0      1      2

import subprocess
r = subprocess.run(["bund", "ask", "run the migration?"], capture_output=True, text=True)
if r.stdout.strip() == "allow":
    ...

No config files to wire. If bund isn't configured, bund ask fails fast with exit code 2 instead of hanging your agent.

One command per project

Tell any agent to use bund for every question and approval, scoped to the current project:

bund setup opencode      # writes the prompt into ./AGENTS.md
bund setup claudecode    # writes the prompt into ./CLAUDE.md
bund setup codex         # AGENTS.md
bund setup gemini        # GEMINI.md
bund setup generic       # just prints it — paste anywhere
bund -setup opencode     # same thing, if you like dashes

You get a ready-made instruction block (also printed to stdout) that tells the agent: whenever you'd block waiting for me — permission, decision, or confirmation — run bund ask "<full question>", honor the allow | deny | timeout answer, and fall back to the terminal on timeout. Running it twice updates the block in place instead of duplicating it.

Safety

• Only your Telegram chat can approve anything
• Every button works once (random request ids, no replaying old taps)
• Dangerous commands (rm -rf, sudo, force pushes, curl | sh, …) get a serious warning and no "approve all" button
• No answer? The agent falls back to the normal terminal prompt
• bund can never block your work — any error means silent fallback
• Token and chat id live in ~/.config/bund/config.json with chmod 600

Dependencies

Python 3.9+. Standard library only. That's it.

Cost

Tone

bund set --tone sarcasm   # default
bund set --tone plain     # for people who have no joy

Add your own lines in ~/.config/bund/templates.json.

Also

bund -m "build finished, come back"

Works with any script or agent.

---

Commands

bund set --token <token>        # botfather token
bund set --chat auto|<id>       # pick your chat
bund set --tone sarcasm|plain   # message tone
bund install                    # add Claude Code hooks
bund uninstall                  # remove only bund's hooks
bund setup <provider>           # project-scope prompt: use bund for every question
bund test                       # send a test message
bund ask "<question>"           # ask anything (allow|deny|timeout)
bund -m "<text>"                # send any message
bund hook                       # internal, called by hooks

_{Memes by memegen.link. If they don't load, that's on them, not us.
MIT License}