agentvibes 3.5.5 → 3.5.8

package/.claude/config/background-music-position.txt

@@ -0,0 +1,27 @@
+agent-vibes-dark-chill-step.mp3:49.006169
+Agent Vibes Japanese City Pop v1.mp3:29.392744
+Agent Vibes ChillWave v2.mp3:22.154467
+Agent Vibes Bossa Nova v2.mp3:23.733424
+Agent Vibes Tabla Dream Pop v1.mp3:19.101043
+Agent Vibes Hawaiian slack key guitar v2.mp3:36.381950
+AgentVibes Soft Flamenco.mp3:23.160000
+Agent Vibes Arabic v2.mp3:21.922268
+Agent Vibes Goa Trance v2.mp3:55.953741
+Agent Vibes Ganawa Ambient v2.mp3:39.680205
+Agent Vibes Celtic Harp v1.mp3:42.190476
+Agent Vibes Harpsichord v2.mp3:21.739410
+Agent Vibes Japanese City Pop v1-loop.mp3:13.917551
+Agent Vibes Hawaiian slack key guitar v2-loop.mp3:12.977143
+Agent Vibes Ganawa Ambient v2-loop.mp3:.00000000000000000002815996
+Agent Vibes Tabla Dream Pop v1-loop.mp3:.00000000000000000009067943
+Agent Vibes ChillWave v2-loop.mp3:.00000000000000000007080511
+Agent Vibes Harpsichord v2-loop.mp3:.00000000000000000013140818
+agent_vibes_japanese_city_pop_v1_loop.mp3:6.054512
+agent_vibes_bossa_nova_v2_loop.mp3:5.369524
+agent_vibes_salsa_v2_loop.mp3:9.972790
+agent_vibes_cumbia_v1_loop.mp3:5.717823
+agent_vibes_arabic_v2_loop.mp3:.00000000000000000006132724
+agent_vibes_chillwave_v2_loop.mp3:14.628390
+agent_vibes_bachata_v1_loop.mp3:.00000000000000000005344000
+agentvibes_soft_flamenco_loop.mp3:.00000000000000000006934441
+agent_vibes_goa_trance_v2_loop.mp3:.00000000000000000002499918

package/.claude/config/background-music-volume.txt

@@ -1 +1 @@
-0.10
+0.30

package/.claude/config/background-music.cfg

@@ -0,0 +1 @@
+enabled

package/.claude/config/background-music.txt

@@ -0,0 +1 @@
+enabled

package/.claude/config/tts-speech-rate.txt

@@ -0,0 +1 @@
+1.3

package/.claude/config/tts-verbosity.txt

@@ -0,0 +1 @@
+high

package/.claude/github-star-reminder.txt

@@ -0,0 +1 @@
+20260212

package/.claude/hooks/bmad-party-manager.sh

@@ -0,0 +1,225 @@
+#!/usr/bin/env bash
+#
+# File: .claude/hooks/bmad-party-manager.sh
+#
+# AgentVibes - Finally, your AI Agents can Talk Back! Text-to-Speech WITH personality for AI Assistants!
+# Website: https://agentvibes.org
+# Repository: https://github.com/paulpreibisch/AgentVibes
+#
+# Co-created by Paul Preibisch with Claude AI
+# Copyright (c) 2025 Paul Preibisch
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+#
+# DISCLAIMER: This software is provided "AS IS", WITHOUT WARRANTY OF ANY KIND,
+# express or implied, including but not limited to the warranties of
+# merchantability, fitness for a particular purpose and noninfringement.
+# In no event shall the authors or copyright holders be liable for any claim,
+# damages or other liability, whether in an action of contract, tort or
+# otherwise, arising from, out of or in connection with the software or the
+# use or other dealings in the software.
+#
+# ---
+#
+# @fileoverview BMAD Party Mode Voice Integration Manager
+# @context Controls auto-enable/disable of multi-agent voice switching during BMAD party mode
+# @architecture Opt-out flag management, auto-detection, status reporting
+# @dependencies .bmad/_cfg/agent-manifest.csv, bmad-voices-enabled.flag, user-prompt-output.sh
+# @entrypoints /agent-vibes:bmad-party slash command
+# @patterns Auto-enable with opt-out, graceful degradation, feature detection
+# @related user-prompt-output.sh, bmad-voice-manager.sh, Issue #33
+
+# Fix locale warnings
+export LC_ALL=C
+
+PLUGIN_DIR=".claude/plugins"
+DISABLE_FLAG="$PLUGIN_DIR/bmad-party-mode-disabled.flag"
+BMAD_VOICES_FLAG="$PLUGIN_DIR/bmad-voices-enabled.flag"
+BMAD_MANIFEST=".bmad/_cfg/agent-manifest.csv"
+
+# Colors
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+RED='\033[0;31m'
+CYAN='\033[0;36m'
+GRAY='\033[0;90m'
+NC='\033[0m' # No Color
+
+#
+# @function is_bmad_installed
+# @context Check if BMAD v6 is installed
+# @returns 0=installed, 1=not installed
+#
+is_bmad_installed() {
+  [[ -f "$BMAD_MANIFEST" ]]
+}
+
+#
+# @function is_bmad_voices_enabled
+# @context Check if BMAD voice plugin is enabled
+# @returns 0=enabled, 1=disabled
+#
+is_bmad_voices_enabled() {
+  [[ -f "$BMAD_VOICES_FLAG" ]]
+}
+
+#
+# @function is_party_mode_enabled
+# @context Check if party mode voice integration is enabled
+# @returns 0=enabled, 1=disabled
+#
+is_party_mode_enabled() {
+  # Disabled if opt-out flag exists
+  [[ -f "$DISABLE_FLAG" ]] && return 1
+
+  # Enabled if BMAD + voice plugin active
+  is_bmad_installed && is_bmad_voices_enabled
+}
+
+#
+# @function show_status
+# @context Display current party mode voice integration status
+#
+show_status() {
+  echo -e "${CYAN}🎭 BMAD Party Mode Voice Integration${NC}"
+  echo "━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━"
+  echo ""
+
+  # Check BMAD installation
+  if ! is_bmad_installed; then
+    echo -e "${RED}❌ BMAD not installed${NC}"
+    echo -e "${GRAY}   Party mode voice integration requires BMAD v6${NC}"
+    echo -e "${GRAY}   Install: https://github.com/bmad-method/bmad${NC}"
+    echo ""
+    return 1
+  fi
+
+  echo -e "${GREEN}✅ BMAD v6 detected${NC}"
+
+  # Check voice plugin
+  if ! is_bmad_voices_enabled; then
+    echo -e "${RED}❌ BMAD voice plugin disabled${NC}"
+    echo -e "${GRAY}   Enable: /agent-vibes:bmad enable${NC}"
+    echo ""
+    return 1
+  fi
+
+  echo -e "${GREEN}✅ BMAD voice plugin enabled${NC}"
+
+  # Check party mode status
+  if is_party_mode_enabled; then
+    echo -e "${GREEN}✅ Party mode voices: ENABLED${NC}"
+    echo ""
+    echo -e "${CYAN}How it works:${NC}"
+    echo "  When you run /bmad:core:workflows:party-mode,"
+    echo "  each agent speaks with their unique voice:"
+    echo ""
+    echo "  🏗️  Winston (Architect) → Michael"
+    echo "  📋 John (PM) → Jessica Anne Bogart"
+    echo "  💻 Amelia (Dev) → Matthew Schmitz"
+    echo "  📊 Mary (Analyst) → kristin"
+    echo "  ... and more!"
+    echo ""
+    echo -e "${GRAY}Disable with: /agent-vibes:bmad-party disable${NC}"
+  else
+    echo -e "${YELLOW}⚠️  Party mode voices: DISABLED (opt-out active)${NC}"
+    echo ""
+    echo -e "${GRAY}Enable with: /agent-vibes:bmad-party enable${NC}"
+  fi
+
+  echo ""
+}
+
+#
+# @function enable_party_mode
+# @context Enable party mode voice integration (remove opt-out flag)
+#
+enable_party_mode() {
+  # Verify prerequisites
+  if ! is_bmad_installed; then
+    echo -e "${RED}❌ Cannot enable: BMAD not installed${NC}"
+    echo -e "${GRAY}   Install BMAD v6 first${NC}"
+    return 1
+  fi
+
+  if ! is_bmad_voices_enabled; then
+    echo -e "${RED}❌ Cannot enable: BMAD voice plugin disabled${NC}"
+    echo -e "${GRAY}   Enable with: /agent-vibes:bmad enable${NC}"
+    return 1
+  fi
+
+  # Remove opt-out flag if it exists
+  if [[ -f "$DISABLE_FLAG" ]]; then
+    rm -f "$DISABLE_FLAG"
+    echo -e "${GREEN}✅ Party mode voices enabled${NC}"
+    echo ""
+    echo -e "${CYAN}🎭 Multi-agent voice switching activated!${NC}"
+    echo "   Run /bmad:core:workflows:party-mode to hear agents speak"
+  else
+    echo -e "${GREEN}✅ Party mode voices already enabled${NC}"
+    echo ""
+    echo -e "${GRAY}(Auto-enabled when BMAD detected)${NC}"
+  fi
+
+  echo ""
+}
+
+#
+# @function disable_party_mode
+# @context Disable party mode voice integration (create opt-out flag)
+#
+disable_party_mode() {
+  mkdir -p "$PLUGIN_DIR"
+
+  if [[ -f "$DISABLE_FLAG" ]]; then
+    echo -e "${YELLOW}⚠️  Party mode voices already disabled${NC}"
+    return 0
+  fi
+
+  # Create opt-out flag
+  touch "$DISABLE_FLAG"
+
+  echo -e "${GREEN}✅ Party mode voices disabled${NC}"
+  echo ""
+  echo -e "${GRAY}Party mode will continue to work, but agents won't speak${NC}"
+  echo -e "${GRAY}Enable again with: /agent-vibes:bmad-party enable${NC}"
+  echo ""
+}
+
+# Main command dispatcher
+case "${1:-status}" in
+  enable)
+    enable_party_mode
+    ;;
+  disable)
+    disable_party_mode
+    ;;
+  status)
+    show_status
+    ;;
+  *)
+    echo -e "${CYAN}AgentVibes BMAD Party Mode Manager${NC}"
+    echo ""
+    echo "Usage: bmad-party-manager.sh {enable|disable|status}"
+    echo ""
+    echo "Commands:"
+    echo "  enable     Enable party mode voice integration"
+    echo "  disable    Disable party mode voice integration (opt-out)"
+    echo "  status     Show current status and configuration"
+    echo ""
+    echo "Party Mode Voice Integration:"
+    echo "  • Auto-enabled when BMAD v6 detected"
+    echo "  • Each agent speaks with unique voice during party mode"
+    echo "  • Opt-out available via disable command"
+    ;;
+esac

package/.claude/hooks/play-tts.sh

@@ -78,7 +78,7 @@ elif [[ -f "$GLOBAL_MUTE_FILE" ]]; then
 fi
 
 TEXT="$1"
-VOICE_OVERRIDE="$2"  # Optional: voice name or ID
+VOICE_OVERRIDE="${2:-}"  # Optional: voice name or ID
 
 # Security: Validate inputs
 if [[ -z "$TEXT" ]]; then

package/.claude/hooks/provider-manager.sh

@@ -51,7 +51,7 @@ get_provider_config_path() {
   local provider_file
 
   # Check project-local first
-  if [[ -n "$CLAUDE_PROJECT_DIR" ]] && [[ -d "$CLAUDE_PROJECT_DIR/.claude" ]]; then
+  if [[ -n "${CLAUDE_PROJECT_DIR:-}" ]] && [[ -d "$CLAUDE_PROJECT_DIR/.claude" ]]; then
     provider_file="$CLAUDE_PROJECT_DIR/.claude/tts-provider.txt"
   else
     # Search up directory tree for .claude/
@@ -134,7 +134,7 @@ set_active_provider() {
 
   # Reset voice when switching providers to avoid incompatible voices
   local voice_file
-  if [[ -n "$CLAUDE_PROJECT_DIR" ]] && [[ -d "$CLAUDE_PROJECT_DIR/.claude" ]]; then
+  if [[ -n "${CLAUDE_PROJECT_DIR:-}" ]] && [[ -d "$CLAUDE_PROJECT_DIR/.claude" ]]; then
     voice_file="$CLAUDE_PROJECT_DIR/.claude/tts-voice.txt"
   else
     voice_file="$HOME/.claude/tts-voice.txt"

package/.claude/hooks/stop.sh

@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+#
+# File: .claude/hooks/stop.sh
+#
+# AgentVibes Stop Hook - Wrapper that delegates to .agentvibes/
+# This hook runs in LITE mode to extract and speak "Audio Summary:" markers
+#
+
+# Fix locale warnings
+export LC_ALL=C
+
+# Get script directory
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
+
+# Path to mode configuration
+MODE_FILE="$PROJECT_ROOT/.agentvibes/config/mode.txt"
+
+# Check if AgentVibes is installed
+AGENTVIBES_HOOKS="$PROJECT_ROOT/.agentvibes/hooks"
+if [[ ! -d "$AGENTVIBES_HOOKS" ]]; then
+  # AgentVibes not installed, exit silently
+  exit 0
+fi
+
+# Read current mode (default to full if not set)
+CURRENT_MODE="full"
+if [[ -f "$MODE_FILE" ]]; then
+  CURRENT_MODE=$(cat "$MODE_FILE" 2>/dev/null | tr -d '[:space:]')
+fi
+
+# Only run stop hook in LITE mode
+# (Full mode uses tool calls for TTS, not stop hooks)
+if [[ "$CURRENT_MODE" == "lite" ]]; then
+  if [[ -f "$AGENTVIBES_HOOKS/stop-lite.sh" ]]; then
+    bash "$AGENTVIBES_HOOKS/stop-lite.sh" "$@"
+  fi
+fi

package/.claude/piper-voices-dir.txt

@@ -0,0 +1 @@
+/home/fire/.claude/piper-voices

package/.mcp.json

@@ -0,0 +1,34 @@
+{
+  "mcpServers": {
+    "sonarqube": {
+      "command": "docker",
+      "args": [
+        "run",
+        "-i",
+        "--name",
+        "sonarqube-mcp-server-agentvibes",
+        "--rm",
+        "--dns",
+        "8.8.8.8",
+        "--dns",
+        "8.8.4.4",
+        "-e",
+        "SONARQUBE_TOKEN",
+        "-e",
+        "SONARQUBE_ORG",
+        "-e",
+        "STORAGE_PATH",
+        "mcp/sonarqube"
+      ],
+      "env": {
+        "SONARQUBE_TOKEN": "${SONARQUBE_TOKEN}",
+        "SONARQUBE_ORG": "${SONARQUBE_ORG}",
+        "STORAGE_PATH": "${STORAGE_PATH}"
+      }
+    },
+    "pieces": {
+      "type": "sse",
+      "url": "http://localhost:39300/model_context_protocol/2024-11-05/sse"
+    }
+  }
+}

package/README.md

@@ -11,7 +11,7 @@
 [![Publish](https://github.com/paulpreibisch/AgentVibes/actions/workflows/publish.yml/badge.svg)](https://github.com/paulpreibisch/AgentVibes/actions/workflows/publish.yml)
 [![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
 
-**Author**: Paul Preibisch ([@997Fire](https://x.com/997Fire)) | **Version**: v3.5.5
+**Author**: Paul Preibisch ([@997Fire](https://x.com/997Fire)) | **Version**: v3.5.8
 
 ---
 
@@ -41,11 +41,11 @@ Whether you're coding in Claude Code, chatting in Claude Desktop, using Warp Ter
 ### 🎯 Key Features
 
 **🪟 NEW IN v3.5.5 — Native Windows Support:**
-- 🖥️ **Windows Native TTS** - Three providers: Soprano (neural), Piper (offline), Windows SAPI (zero setup). No WSL required!
-- 🎵 **Background Music** - 16 genre tracks (Bachata, Flamenco, Bossa Nova, City Pop, and more) mixed under voice
-- 🎛️ **Reverb & Audio Effects** - 5 reverb levels via ffmpeg (Light, Medium, Heavy, Cathedral)
-- 🔊 **Verbosity Control** - Choose how much Claude speaks: High, Medium, or Low
-- 🎨 **Beautiful Installer** - `npx agentvibes install` (Node.js) or `.\setup-windows.ps1` (no Node.js required)
+- 🖥️ **Windows Native TTS** - Soprano, Piper, and Windows SAPI providers. No WSL required!
+- 🎵 **Background Music** - 16 genre tracks mixed under voice
+- 🎛️ **Reverb & Audio Effects** - 5 reverb levels via ffmpeg
+- 🔊 **Verbosity Control** - High, Medium, or Low settings
+- 🎨 **Beautiful Installer** - `npx agentvibes install` or `.\setup-windows.ps1`
 
 **⚡ v3.4.0 Highlights:**
 - 🎤 **Soprano TTS Provider** - Ultra-fast neural TTS with 20x CPU, 2000x GPU acceleration (thanks [@nathanchase](https://github.com/nathanchase)!)
@@ -97,7 +97,7 @@ All 50+ Piper voices AgentVibes provides are sourced from Hugging Face's open-so
 - [📱 Android/Termux](#-quick-setup-android--termux-claude-code-on-your-phone) - Run Claude Code on your phone
 - [📋 Prerequisites](#-prerequisites) - What you actually need (Node.js + optional tools)
 - [✨ What is AgentVibes?](#-what-is-agentvibes) - Overview & key features
-- [📰 Latest Release](#-latest-release) - v3.5.5 - Native Windows Support with Soprano, Piper & SAPI
+- [📰 Latest Release](#-latest-release) - v3.5.8 Security & UX + v3.5.5 Native Windows Support
 - [🪟 Windows Setup Guide for Claude Desktop](mcp-server/WINDOWS_SETUP.md) - Complete Windows installation with WSL & Python
 
 ### AgentVibes MCP (Natural Language Control)
@@ -141,26 +141,11 @@ All 50+ Piper voices AgentVibes provides are sourced from Hugging Face's open-so
 
 ## 📰 Latest Release
 
-**[v3.5.5 - Native Windows Support: Soprano, Piper & SAPI Providers](https://github.com/paulpreibisch/AgentVibes/releases/tag/v3.5.5)** 🪟🎤
+**[v3.5.8 - Security & Provider Validation](https://github.com/paulpreibisch/AgentVibes/releases/tag/v3.5.8)** 🛡️
 
-AgentVibes v3.5.5 delivers native Windows support with a polished PowerShell installer offering three TTS providers (Soprano neural, Piper offline, Windows SAPI), background music selection from 16 genre tracks, reverb effects via ffmpeg aecho filter, and verbosity control. The release includes 8 Windows hook scripts, MCP server platform detection for automatic .sh-to-.ps1 resolution, and 46 new unit tests. Security hardening adds path traversal prevention with regex allowlisting and path containment checks, reverb config allowlist validation, and strict mode compliance across all scripts. Cross-platform test fixes ensure the full 93-test suite passes on both Windows and Unix.
+Critical security update: Fixed command injection vulnerabilities, HOME directory injection prevention, and path traversal protection. Soprano TTS installed via pipx now correctly detected. Enhanced provider detection messaging and debug logging.
 
-Install via `npx agentvibes install` or the standalone PowerShell installer (`.\setup-windows.ps1`). No WSL required!
-
-**Key Highlights:**
-- 🖥️ **Native Windows TTS** - Three providers: Soprano, Piper, and Windows SAPI. No WSL needed!
-- 🎵 **Background Music** - 16 genre tracks (Bachata, Flamenco, Bossa Nova, City Pop, and more)
-- 🎛️ **Reverb & Effects** - 5 reverb levels via ffmpeg aecho filter
-- 🔊 **Verbosity Control** - High (full reasoning), Medium (key updates), Low (essential only)
-- 🎨 **Beautiful Installer** - Figlet banner, directory explanations, provider detection
-- 🧪 **93/93 Tests Passing** - 46 Windows + 47 cross-platform
-- 🛡️ **Security Hardened** - Path traversal prevention, input sanitization, resource disposal
-
-**Perfect For:**
-- Windows developers wanting native TTS without WSL
-- Teams needing zero-setup voice (Windows SAPI works out of the box)
-- Users wanting background music and reverb effects
-- Anyone installing via `npx agentvibes install` on Windows
+**Foundation Release:** [v3.5.5 - Native Windows Support](https://github.com/paulpreibisch/AgentVibes/releases/tag/v3.5.5) brings Windows support (Soprano, Piper, SAPI), background music (16 genre tracks), reverb/audio effects, and verbosity control. [See release notes](RELEASE_NOTES.md) for complete v3.5.5-3.5.8 history.
 
 💡 **Tip:** If `npx agentvibes` shows an older version or missing commands, clear your npm cache: `npm cache clean --force && npx agentvibes@latest --help`
 

package/RELEASE_NOTES.md

@@ -1,5 +1,83 @@
 # AgentVibes Release Notes
 
+## 🛡️ v3.5.8 - Provider Validation Security & UX Improvements
+
+**Release Date:** February 12, 2026
+
+### 🎯 Summary
+
+Critical security and reliability update for provider detection. Fixes command injection vulnerabilities in validation code, prevents HOME directory injection attacks, and improves UX with explicit provider detection messaging. Soprano TTS installed via pipx is now correctly detected (previously showed "not installed" due to ES module import error). All 8 critical code review issues resolved with comprehensive security hardening and enhanced error reporting.
+
+### ✨ Key Improvements
+
+- **🔐 Security Fixes:** Fixed command injection vulnerability (template strings → array form), prevented HOME injection attacks, added path traversal protection
+- **✅ Provider Detection:** Soprano via pipx now correctly detected; added checkedLocations tracking for transparency
+- **💬 Better Messaging:** Explicit "Detected and selected!" confirmation; detailed error messages showing what was checked
+- **🧪 Test Coverage:** Enhanced tests verify actual detection values, not just types
+- **🐛 Debugging:** Added [DEBUG] logging for troubleshooting provider issues
+
+### 🔴 Critical Fixes
+
+1. **Command Injection Prevention** - All execSync calls now use array form (security: CLAUDE.md)
+2. **HOME Directory Injection** - Switched to os.homedir() instead of process.env.HOME
+3. **Path Traversal Protection** - Added path.resolve() validation for pipx venv directories
+
+### 🟡 Medium Fixes
+
+4. **Pipx Logic Improved** - Tracks checked locations even on success (transparency)
+5. **Silent Failures Eliminated** - Added [DEBUG] error logging for diagnostics
+6. **Test Quality Enhanced** - Verify message content, not just types
+7. **Documentation** - Added JSDoc comments explaining security-critical imports
+8. **Error Differentiation** - Better distinction between different failure types
+
+### 📊 Technical Impact
+
+- Soprano detection now works reliably for both pip and pipx installations
+- Reduced false negatives in provider validation
+- Enhanced security posture aligned with CLAUDE.md security mandates
+- Improved debuggability with explicit error messages
+
+---
+
+## 🔧 v3.5.7 - CLI Fix: npx Command Output & Startup Hooks
+
+**Release Date:** February 12, 2026
+
+Fixes critical bug where `npx agent-vibes install` and other commands produced no output, making CLI unusable. Root cause: bin/agent-vibes used dynamic import without passing arguments to installer.js on local execution. Also removed broken hook configurations (pre_compact.py, notification.ts) that didn't exist and caused startup errors in Claude Code settings.
+
+### 🎯 What's Fixed
+
+- **npx agent-vibes now works** - `npx agent-vibes install`, `npx agent-vibes --help`, all commands produce proper output
+- **Startup hook errors gone** - Removed non-existent hook references from settings.json (pre_compact.py, notification.ts)
+- **CLI execution proper** - Both npx and local execution now use execFileSync with proper argument passing
+
+### 🚀 Technical Details
+
+**Before v3.5.7:**
+```javascript
+// bin/agent-vibes (local execution path)
+import('../src/installer.js');  // ❌ No args, doesn't await
+```
+
+**After v3.5.7:**
+```javascript
+// bin/agent-vibes (all execution paths)
+execFileSync('node', [installerPath, ...arguments_], {
+  stdio: 'inherit',
+  cwd: isNpxExecution ? path.dirname(__dirname) : process.cwd(),
+});  // ✅ Passes args, proper I/O
+```
+
+---
+
+## 🔧 v3.5.6 - Bug Fix: Bash Hook Parameter Handling
+
+**Release Date:** February 11, 2026
+
+Fixes critical regression in v3.5.5 where bash hooks failed with unbound variable errors when called with optional parameters under strict mode. Affects `play-tts.sh` and `provider-manager.sh`.
+
+---
+
 ## 📦 v3.5.5 - Native Windows Support: Soprano, Piper & SAPI Providers
 
 **Release Date:** February 12, 2026