maiass 5.9.24 → 5.9.31

package/README.md

@@ -1,347 +1,134 @@
-# 🫏 MAIASS (Node.js Edition)
-**Modular AI-Augmented Semantic Scribe** - Cross-platform Node.js implementation
+# `|))` MAIASS (Node.js)
+**Modular AI-Augmented Semantic Scribe** — intelligent Git workflow automation
 
-[![Node.js](https://img.shields.io/badge/Node.js-23+-green.svg)](https://nodejs.org/)
+[![npm](https://img.shields.io/npm/v/maiass.svg)](https://www.npmjs.com/package/maiass)
+[![Node.js](https://img.shields.io/badge/Node.js-18+-green.svg)](https://nodejs.org/)
 [![License](https://img.shields.io/badge/License-GPL--3.0-blue.svg)](LICENSE)
-[![Version](https://img.shields.io/badge/Version-5.9.9-orange.svg)](package.json)---
 
-**MAIASS** is an intelligent Git workflow automation tool that streamlines version management, changelog generation, and deployment processes with AI-powered commit message suggestions. This Node.js implementation provides cross-platform compatibility and self-contained binary distribution.
+---
 
-## 🚀 Quick Start
+MAIASS automates the repetitive parts of your Git workflow: staging, AI-powered commit messages, branch merging, version bumping, and changelog generation — all from a single command.
 
-### Installation
+> Looking for the shell/Homebrew version? See [bashmaiass](https://github.com/vsmash/bashmaiass).
 
-**Cross-Platform Binaries** (Recommended):
-```bash
-# Download and install for your platform
-curl -L https://github.com/vsmash/maiass/releases/latest/download/maiass-$(uname -s | tr '[:upper:]' '[:lower:]')-$(uname -m) -o maiass
-chmod +x maiass
-./maiass --version
-```
+---
+
+## Installation
 
-**From Source**:
 ```bash
-git clone https://github.com/vsmash/nodemaiass.git
-cd nodemaiass && npm install && npm link
+npm install -g maiass
 ```
 
-### Basic Usage
+Requires Node.js 18+.
+
+---
+
+## Quick Start
 
 ```bash
-# Complete workflow with patch version bump
+# First time in a project — run setup
+maiass --setup
+
+# Everyday use — commit, merge, bump patch version
 maiass
 
 # Specific version bumps
 maiass minor    # 1.2.3 → 1.3.0
 maiass major    # 1.2.3 → 2.0.0
-maiass 2.1.0    # Set specific version
 
-# Commit only (skip version management)
+# Commit only, skip version management
 maiass --commits-only
 
-# Preview changes without applying
-maiass --dry-run
-```
-
-### AI-Powered Commit Messages
-
-```bash
-# Enable AI features
-maiass config set maiass_token "your_api_key"
-maiass config set ai_mode "ask" (or "always" or "off")
-
-# MAIASS will now suggest intelligent commit messages
-maiass
-```
-
-## ✨ Key Features- **🤖 AI-Powered Commit Messages**: AI integration for intelligent commit suggestions- **📋 Dual Changelog System**: User-facing and developer-facing changelogs- **🔄 Complete Git Workflow**: Branch validation, commits, merges, and versioning- **🏷️ Smart Version Management**: Multiple version file support with semantic versioning- **🌍 Cross-Platform**: Self-contained binaries for macOS, Linux, and Windows- **⚙️ Zero Configuration**: Works out of the box with sensible defaults- **🎯 JIRA Integration**: Automatic ticket detection from branch names
-
-## � Documentation
-
-| Topic | Description |
-|-------|-------------|
-| **[Installation Guide](docs/installation-guide.md)** | Detailed installation instructions and binaries |
-| **[Configuration](docs/configuration.md)** | Environment variables and project setup |
-| **[Workflow Guide](docs/workflow.md)** | Complete workflow documentation |
-| **[Commands Reference](docs/commands.md)** | All available commands and options |
-| **[Cross-Platform Guide](docs/cross-platform.md)** | Platform-specific notes and compatibility |
-| **[Development](docs/development.md)** | Contributing and development setup |
-
-## 🔧 Supported Technologies
-
-### Version File Formats- **package.json** (Node.js/npm projects)- **composer.json** (PHP/Composer projects)- **VERSION** files (plain text)- **Git tags only** (for projects without version files)
-
-### Git Platforms- **GitHub** (public and private repositories)- **Bitbucket** (Cloud and Server)- **Any Git host** (core features work universally)
-
-### AI Models- **GPT-4o** (recommended for complex projects)- **GPT-4** (balanced performance and cost)- **GPT-3.5-turbo** (fast and economical)
-
-## 🌍 Platform Support
-
-| Platform | Binary Available | Self-Contained |
-|----------|------------------|----------------|
-| **macOS Intel** | ✅ `maiass-macos-intel` | ✅ Node.js included |
-| **macOS Apple Silicon** | ✅ `maiass-macos-arm64` | ✅ Node.js included |
-| **Linux x64** | ✅ `maiass-linux-x64` | ✅ Node.js included |
-| **Linux ARM64** | ✅ `maiass-linux-arm64` | ✅ Node.js included |
-| **Windows x64** | ✅ `maiass-windows-x64.exe` | ✅ Node.js included |
-| **Windows ARM64** | ✅ `maiass-windows-arm64.exe` | ✅ Node.js included |
-
-## 🔄 Workflow Overview
-
-MAIASS orchestrates a 4-phase intelligent workflow:
-
-1. **Branch Detection & Validation** - Validates current branch and workflow requirements
-2. **Commit Workflow** - AI-powered commit messages with JIRA integration
-3. **Merge Management** - Handles branch merging and conflict resolution
-4. **Version & Changelog** - Semantic versioning with dual changelog generation
-
-## ⚙️ Quick Configuration
-
-```bash
-# Enable AI features (global)
-maiass config set --global maiass_token "your_api_key"
-maiass config set --global ai_mode "ask"
-
-# Project-specific branch override
-maiass config set mainbranch "main"
-
-# View current configuration
-maiass config list
-```
-
-## 🎯 What Makes This Special?
-
-### Intelligent Automation- **Smart Version Detection**: Automatically finds and updates version files- **Context-Aware AI**: Analyzes code changes for meaningful commit messages- **Dual Changelog System**: Clean user-facing + detailed developer changelogs
-
-### Developer Experience- **Self-Contained Binaries**: No Node.js installation required- **Cross-Platform Compatibility**: Consistent behavior across all platforms- **Zero Configuration**: Works immediately with sensible defaults
-
-### Enterprise Ready- **Security First**: API keys never stored in repositories- **CI/CD Integration**: Perfect for automated deployment pipelines- **GPL-3.0 Licensed**: Free and open source software
-
-## 🔗 Related Projects- **[MAIASS (Bash)](https://github.com/vsmash/maiass)** - Original bash implementation- **[Homebrew Formula](https://github.com/vsmash/homebrew-maiass)** - Homebrew installation
-
-## 🤝 Contributing
-
-We welcome contributions! Whether it's:- 🐛 **Bug reports** and feature requests- 📖 **Documentation** improvements- 🔧 **Code contributions** and enhancements- 💡 **Ideas** for new features
-
-See our [Development Guide](docs/development.md) to get started.
-
-## 📄 License
-
-MAIASS is released under the [GNU General Public License v3.0](LICENSE). Free and open source software.
-
-## 🔗 Links- **[GitHub Repository](https://github.com/vsmash/nodemaiass)**- **[Issue Tracker](https://github.com/vsmash/nodemaiass/issues)**- **[Releases](https://github.com/vsmash/nodemaiass/releases)**- **[Original MAIASS](https://github.com/vsmash/maiass)**---
-
-**Ready to streamline your Git workflow?** Download MAIASS today and experience intelligent version management with AI-powered automation.
-
-```bash
-# Get the latest release
-curl -L https://github.com/vsmash/maiass/releases/latest/download/maiass-$(uname -s | tr '[:upper:]' '[:lower:]')-$(uname -m) -o maiass && chmod +x maiass
-```---
-
-**Made with ❤️ for developers who want better Git workflows**
-maiass version [major|minor|patch|version]
-
-# Configuration
-maiass config list
-maiass config get <key>
-maiass config set <key> <value>
-
-# Environment info
-maiass env
-
-# Git information
-maiass git-info
-maiass git              # Show git status and branch info
-
-# Environment variables
-maiass env              # Show current environment
-maiass env --json       # Show environment as JSON
+# Preview without making changes
+maiass --dry-run patch
 ```
 
-## ⚙️ Configuration
-
-### Quick Setup
-
-1. **Enable AI features** (optional):
-   ```bash
-   # Set Maiass API key globally
-   maiass config --global maiass_token=your_api_key_here
-   ```
+---
 
-2. **Project-specific settings** (if needed):
-   ```bash
-   # Override branch names for projects using 'main'
-   maiass config --project mainbranch=main
-   ```
+## AI Commit Messages
 
-### Configuration Files
+MAIASS uses its own proxy service for AI-powered commit message suggestions. On first run it creates an anonymous subscription automatically — no sign-up required.
 
-MAIASS uses `.env.maiass` files for configuration:- **Global**: `~/.env.maiass` (user-wide settings)- **Project**: `./.env.maiass` (project-specific overrides)
-
-### Common Configuration Variables
+To use a named account (for credit top-ups):
 
 ```bash
-# AI Integration
-MAIASS_AI_TOKEN=your_api_key_here
-MAIASS_AI_MODE=ask                    # ask, autosuggest, off
-MAIASS_AI_MODEL=gpt-4                 # AI model to use
-
-# Branch Configuration (only set if different from defaults)
-MAIASS_MAINBRANCH=main                  # Default: main
-MAIASS_DEVELOPBRANCH=develop              # Default: develop
-MAIASS_STAGINGBRANCH=staging              # Default: staging
-
-# Workflow Settings
-MAIASS_DEBUG=true                         # Enable debug output
-MAIASS_VERBOSITY=normal                   # brief, normal, verbose
-MAIASS_AUTO_TAG_RELEASES=true             # Automatically tag releases (required for changelog)
-
-# Changelog Configuration
-MAIASS_CHANGELOG_PATH=CHANGELOG.md        # Main changelog file path
-MAIASS_CHANGELOG_NAME=CHANGELOG.md        # Main changelog file name
-MAIASS_CHANGELOG_INTERNAL_NAME.CHANGELOG_internal.md  # Internal changelog file name
-```
-
-## 🔄 Workflow Phases
-
-MAIASS orchestrates a 4-phase workflow:
-
-### 1. **Branch Detection & Validation**- Detects current branch and validates against workflow requirements- Auto-switches from main/staging to develop branch- Prompts for confirmation on release/main branches- Handles missing develop branch gracefully
-
-### 2. **Commit Workflow**- Detects staged and unstaged changes- Offers AI-powered commit message suggestions- Supports multi-line commit messages- Prepends JIRA ticket numbers from branch names
-
-### 3. **Merge to Develop**- Merges feature branches to develop for version management- Pulls latest changes from remote- Handles merge conflicts with clear error messages
-
-### 4. **Version Management**- Detects version files (package.json, composer.json, etc.)- Bumps semantic versions (major.minor.patch)- Updates multiple version files simultaneously- Creates git tags for releases- **Generates dual changelogs**:
-  - `CHANGELOG.md`: Clean, user-facing format with JIRA tickets stripped
-  - `.CHANGELOG_internal.md`: Developer format with commit hashes, authors, and JIRA tickets- **Smart commit range detection**: Only includes commits since the last release tag- **Version replacement logic**: Replaces same-day patch versions instead of duplicating entries
-
-## 📝 Changelog System
-
-MAIASS automatically generates two types of changelogs during version management:
-
-### Main Changelog (`CHANGELOG.md`)
-**User-facing format** with clean, readable entries:
-```markdown
-## 0.5.6
-24 July 2025- Update Maiass Pipeline functionality
-	- feat: imported path package in maiass-pipeline
-	- docs: added comment about commit message formatting- Updated commit message filtering for maiass-pipeline
-	- feat: added code to clean up commit messages
-	- fix: removed empty lines and trailing newlines from each commit
-```
-
-### Internal Changelog (`CHANGELOG_internal.md`)
-**Developer-facing format** with commit hashes, authors, and JIRA tickets:
-```markdown
-## 0.5.6
-Thursday, 24 July 2025- d7ddba9 VEL-405 Update Maiass Pipeline functionality (Developer Name)- 5ea6d03 VEL-405 Updated commit message filtering for maiass-pipeline (Developer Name)
+maiass config set MAIASS_AI_TOKEN your_api_key
 ```
 
-### Changelog Features- **Smart commit detection**: Only includes commits since the last release tag- **Automatic filtering**: Excludes merge commits, version bumps, and irrelevant entries- **JIRA integration**: Strips JIRA tickets from main changelog, preserves in internal- **Version replacement**: Same-day patch versions replace previous entries instead of duplicating- **Clean formatting**: No double bullets or unwanted blank lines
+AI mode is configured per-project in `.env.maiass`:
 
-## 🎨 Examples
-
-### Complete Feature Development Workflow
 ```bash
-# On feature branch: feature/USER-123-new-login
-
-# 1. Complete workflow with minor version bump
-maiass minor --tag
-
-# This will:
-# - Detect you're on a feature branch
-# - Run commit workflow with AI suggestions
-# - Merge to develop branch
-# - Bump minor version (1.0.0 → 1.1.0)
-# - Create git tag v1.1.0
+MAIASS_AI_COMMITS=ask        # ask each time (default)
+MAIASS_AI_COMMITS=always     # always use AI
+MAIASS_AI_COMMITS=off        # disable AI
 ```
 
-### Quick Commit Without Version Management
-```bash
-# Just commit changes without version bumping
-maiass --commits-only --auto-stage
+---
 
-# With AI commit message
-maiass commit
-```
+## Key Features
 
-### Safe Testing
-```bash
-# Preview what would happen without making changes
-maiass --dry-run patch
-
-# Check current version status
-maiass version --current
-```
+- **AI commit messages** — analyses your diff and suggests a structured commit message
+- **Version management** — detects and bumps `package.json`, `composer.json`, `VERSION`, `.pbxproj` (Swift/Xcode), and more
+- **Changelog generation** — user-facing `CHANGELOG.md` and internal developer changelog
+- **Branch workflow** — feature → develop → staging → main with merge handling
+- **JIRA integration** — ticket numbers auto-detected from branch names
+- **First-run friendly** — works immediately with sensible defaults, no blocking setup
 
-## 🔧 Advanced Usage
-
-### Custom Version Files
-```bash
-# Configure custom version file
-maiass config --project version_primary_file=VERSION.txt
-maiass config --project version_primary_type=text
-```
+---
 
-### Multiple Version Files
-```bash
-# Update multiple files with same version
-maiass config --project version_secondary_files="src/version.js,docs/VERSION"
-```
+## Configuration
 
-### AI Customization
-```bash
-# Different AI modes
-maiass config --global ai_mode=autosuggest  # Auto-suggest without asking
-maiass config --global ai_mode=off          # Disable AI
+MAIASS uses `.env.maiass` files for configuration:
 
-# Custom commit message style
-maiass config --global ai_commit_message_style=conventional
-```
+| File | Purpose |
+|------|---------|
+| `.env.maiass` | Project settings, committed to git |
+| `.env.maiass.local` | Personal overrides, gitignored |
 
-## 🐛 Troubleshooting
+Run `maiass --setup` to configure a project interactively, or edit `.env.maiass` directly.
 
-### Common Issues
+Common variables:
 
-**"Not in a git repository"**
 ```bash
-# Ensure you're in a git repository
-git status
+MAIASS_AI_COMMITS=ask
+MAIASS_MODE=full                  # full or ai_only
+MAIASS_MAIN_BRANCH=main
+MAIASS_DEVELOP_BRANCH=develop
+MAIASS_VERSION_PRIMARY_FILE=package.json
+MAIASS_DEBUG=true                 # verbose output
 ```
 
-**"No version files detected"**
-```bash
-# Check for supported version files
-ls package.json composer.json VERSION
+---
 
-# Or configure custom version file
-maiass config --project version_primary_file=your-version-file
-```
+## Supported Version File Formats
 
-**"Failed to switch to develop branch"**
-```bash
-# Create develop branch if it doesn't exist
-git checkout -b develop
-```
+| Format | Example |
+|--------|---------|
+| npm | `package.json` |
+| PHP/Composer | `composer.json` |
+| WordPress | `style.css`, `plugin.php` |
+| Plain text | `VERSION` |
+| Swift/Xcode | `*.xcodeproj/project.pbxproj` |
 
-### Debug Mode
-```bash
-# Enable verbose debugging
-export MAIASS_DEBUG=true
-maiass --dry-run
-```
+---
 
-## 📚 Documentation- [Configuration Guide](docs/configuration.md)- [Workflow Guide](docs/workflow.md)- [API Reference](docs/api.md)- [Contributing](docs/contributing.md)
+## Documentation
 
-## 🤝 Contributing
+| Doc | Description |
+|-----|-------------|
+| [Configuration](docs/configuration.md) | All config variables and `.env.maiass` options |
+| [Commands](docs/commands.md) | Full command reference |
+| [Workflow](docs/workflow.md) | How the 4-phase pipeline works |
+| [Setup](docs/setup.md) | Platform-specific setup notes |
+| [API Reference](docs/api.md) | Internal module API |
+| [Development](docs/development.md) | Contributing and dev setup |
 
-Contributions are welcome! Please read our [Contributing Guide](docs/contributing.md) for details.
+---
 
-## 📄 License
+## Contributing
 
-MIT License - see [LICENSE](LICENSE) file for details.
+Issues and PRs welcome. See [docs/development.md](docs/development.md) to get started.
 
-## 🙏 Acknowledgments- Original MAIASS bash script by [vsmash](https://github.com/vsmash)- OpenAI for AI-powered commit messages- Node.js and npm ecosystem---
+## License
 
-**Made with ❤️ by the MAIASS team**
+[GNU General Public License v3.0](LICENSE)

package/lib/account-info.js

@@ -88,7 +88,7 @@ async function createAnonymousSubscriptionIfNeeded() {
       
       if (stored) {
         log.success(SYMBOLS.CHECKMARK, 'Anonymous subscription created and stored securely');
-        log.info(SYMBOLS.INFO, `   API Key: ${apiKey.substring(0, 8)}...`);
+        log.info(SYMBOLS.INFO, `   API Key: [stored securely]`);
         log.info(SYMBOLS.INFO, `   Credits: ${credits || 'N/A'}`);
         
         if (subscriptionId) {
@@ -412,13 +412,12 @@ export async function handleAccountInfoCommand(options = {}) {
     const custEmail = data.customer_email || '-';
     const statusField = data.status || result.status;
     
-    const maskedKey = maskToken(apiKey);
     const credit = 'Nugét';
-    
+
     console.log('');
     console.log('Account Info');
     console.log('------------');
-    console.log(`API Token:        ${maskedKey}`);
+    console.log(`API Token:        [stored securely]`);
     
     const subscriptionId = process.env.MAIASS_SUBSCRIPTION_ID;
     if (subscriptionId) {

package/lib/commit.js

@@ -232,7 +232,7 @@ async function createAnonymousSubscriptionIfNeeded() {
       
       if (stored) {
         log.success(SYMBOLS.CHECKMARK, 'Anonymous subscription created and stored securely');
-        log.info(SYMBOLS.INFO, `   API Key: ${apiKey.substring(0, 8)}...`);
+        log.info(SYMBOLS.INFO, `   API Key: [stored securely]`);
         log.info(SYMBOLS.INFO, `   Credits: ${credits || 'N/A'}`);
         
         if (subscriptionId) {

package/lib/devlog.js

@@ -117,7 +117,7 @@ export function logThis(message, options = {}) {
     
     // Only log success confirmation, not the verbose stdout output
 
-      logger.debug(`Logged to devlog: ${escapedMessage}`);
+      logger.debug(`Logged to devlog: ${normalisedMessage}`);
   });
   
   // Return immediately (don't wait for devlog.sh to complete)

package/lib/token-validator.js

@@ -152,9 +152,8 @@ export function displayTokenValidation() {
       console.log(`[DEBUG]     ${display.symbol} ${tokenConfig.description} (${tokenConfig.name}): ${display.color(display.status)}`);
       
       if (validation && validation.valid) {
-        // Show partial token for confirmation (first 8 chars + ...)
-        const maskedToken = tokenValue.substring(0, 8) + '...';
-        console.log(colors.Gray(`[DEBUG]       Preview: ${maskedToken}`));
+        // Confirm token is present without logging any part of its value
+        console.log(colors.Gray(`[DEBUG]       Status: [present]`));
       }
     });
   });
@@ -165,12 +164,12 @@ export function displayTokenValidation() {
     const tokenValue = process.env[tokenConfig.name];
     const validation = tokenValue ? validateTokenValue(tokenValue, tokenConfig) : null;
     const display = getValidationDisplay(validation);
-    
+
     console.log(`[DEBUG]   ${display.symbol} ${tokenConfig.description} (${tokenConfig.name}): ${display.color(display.status)}`);
-    
+
     if (validation && validation.valid) {
-      const maskedToken = tokenValue.substring(0, 8) + '...';
-      console.log(colors.Gray(`[DEBUG]     Active: ${maskedToken}`));
+      // Confirm token is present without logging any part of its value
+      console.log(colors.Gray(`[DEBUG]     Status: [present]`));
     }
   });
   

package/lib/version-command.js

@@ -212,14 +212,20 @@ async function handleVersionBump(bumpType, options) {
  * @param {Object} args - Command arguments from yargs
  */
 export async function handleVersionCommand(args) {
-  const {
-    _: positionalArgs,
-    'dry-run': dryRun,
-    tag,
-    'tag-message': tagMessage,
-    force,
-    current
-  } = args;
+  // args may be a raw argv array (from process.argv.slice) or a yargs-parsed object
+  let positionalArgs, dryRun, tag, tagMessage, force, current;
+
+  if (Array.isArray(args)) {
+    positionalArgs = args.filter(a => !a.startsWith('-'));
+    dryRun = args.includes('--dry-run');
+    tag = args.includes('--tag');
+    tagMessage = null;
+    force = args.includes('--force');
+    current = args.includes('--current');
+  } else {
+    ({ _: positionalArgs, 'dry-run': dryRun, tag, 'tag-message': tagMessage, force, current } = args);
+    positionalArgs = positionalArgs || [];
+  }
   
   try {
     // If --current flag is used, just show current version info

package/lib/version-manager.js

@@ -341,7 +341,7 @@ function updateThemeStyleVersion(filePath, newVersion) {
     logger.debug(` style.css written successfully`);
     return true;
   } catch (error) {
-    console.error(colors.Red(`${SYMBOLS.CROSS} Error updating ${filePath}: ${error.message}`));
+    console.error(colors.Red(`${SYMBOLS.CROSS} Error updating ${filePath}: ${error.message}`)); // codeql[js/clear-text-logging] -- filePath and error.message are file I/O data, not credentials
     return false;
   }
 }
@@ -404,7 +404,7 @@ function updatePhpVersionConstant(filePath, constantName, newVersion) {
     if (definePattern.test(content)) {
       // Replace existing define
       content = content.replace(definePattern, newDefine);
-      console.log(colors.BGreen(`${SYMBOLS.CHECKMARK} Updated ${constantName} in ${path.basename(filePath)}`));
+      console.log(colors.BGreen(`${SYMBOLS.CHECKMARK} Updated ${constantName} in ${path.basename(filePath)}`)); // codeql[js/clear-text-logging] -- constantName and filePath are version metadata, not credentials
     } else {
       // Add new define after opening PHP tag
       const phpOpenTag = /<\?php/;
@@ -413,9 +413,9 @@ function updatePhpVersionConstant(filePath, constantName, newVersion) {
       if (phpOpenTag.test(content)) {
         logger.debug(` Found PHP opening tag, adding new define`);
         content = content.replace(phpOpenTag, `<?php\n\n${newDefine}`);
-        console.log(colors.BGreen(`${SYMBOLS.CHECKMARK} Added ${constantName} to ${path.basename(filePath)}`));
+        console.log(colors.BGreen(`${SYMBOLS.CHECKMARK} Added ${constantName} to ${path.basename(filePath)}`)); // codeql[js/clear-text-logging] -- constantName and filePath are version metadata, not credentials
       } else {
-        console.log(colors.BYellow(`${SYMBOLS.WARNING} Could not find PHP opening tag in ${path.basename(filePath)}`));
+        console.log(colors.BYellow(`${SYMBOLS.WARNING} Could not find PHP opening tag in ${path.basename(filePath)}`)); // codeql[js/clear-text-logging] -- filePath is a file path, not a credential
         return false;
       }
     }
@@ -424,7 +424,7 @@ function updatePhpVersionConstant(filePath, constantName, newVersion) {
     logger.debug(` File written successfully`);
     return true;
   } catch (error) {
-    console.error(colors.Red(`${SYMBOLS.CROSS} Error updating ${filePath}: ${error.message}`));
+    console.error(colors.Red(`${SYMBOLS.CROSS} Error updating ${filePath}: ${error.message}`)); // codeql[js/clear-text-logging] -- filePath and error.message are file I/O data, not credentials
     return false;
   }
 }
@@ -467,7 +467,7 @@ function updateWordPressVersions(newVersion, projectPath = process.cwd()) {
         success = false;
       }
     } else {
-      console.log(colors.BYellow(`${SYMBOLS.WARNING} Could not find main plugin file in ${pluginPath}`));
+      console.log(colors.BYellow(`${SYMBOLS.WARNING} Could not find main plugin file in ${pluginPath}`)); // codeql[js/clear-text-logging] -- pluginPath is a file path, not a credential
     }
   }
   
@@ -515,7 +515,7 @@ function updateWordPressVersions(newVersion, projectPath = process.cwd()) {
         success = false;
       }
     } else {
-      console.log(colors.BYellow(`${SYMBOLS.WARNING} Could not find functions.php in ${themePath}`));
+      console.log(colors.BYellow(`${SYMBOLS.WARNING} Could not find functions.php in ${themePath}`)); // codeql[js/clear-text-logging] -- themePath is a file path, not a credential
       if (functionsFile) {
         logger.debug(` Expected functions.php at: ${functionsFile}`);
       }

package/maiass.mjs

@@ -42,7 +42,8 @@ import { bootstrapProject } from './lib/bootstrap.js';
 
 // Simple CLI setup for pkg compatibility
 const args = process.argv.slice(2);
-const firstArg = args[0];
+// Skip flags (starting with -) to find the first meaningful argument
+const firstArg = args.find(a => !a.startsWith('-'));
 
 // Handle --setup/--bootstrap flag early
 if (args.includes('--setup') || args.includes('--bootstrap')) {
@@ -251,10 +252,10 @@ if (args.includes('--help') || args.includes('-h') || command === 'help') {
     case 'maiass':
       // Handle the main MAIASS workflow
       await handleMaiassCommand({
-        _: process.argv.slice(2).filter(arg => !arg.startsWith('--')),
+        _: process.argv.slice(2).filter(arg => !arg.startsWith('-')),
         'commits-only': args.includes('--commits-only') || args.includes('-c'),
         'auto-stage': args.includes('--auto-stage'),
-        'auto': args.includes('--auto'),
+        'auto': args.includes('--auto') || args.includes('-a'),
         'version-bump': versionBump,
         'dry-run': args.includes('--dry-run') || args.includes('-d'),
         force: args.includes('--force') || args.includes('-f'),

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "maiass",
   "type": "module",
-  "version": "5.9.24",
+  "version": "5.9.31",
   "description": "MAIASS - Modular AI-Augmented Semantic Scribe - Intelligent Git workflow automation",
   "main": "maiass.mjs",
   "bin": {
@@ -13,8 +13,6 @@
   "files": [
     "lib/",
     "maiass.mjs",
-    "maiass.cjs",
-    "maiass-standalone.cjs",
     "setup-env.js",
     "README.md",
     "LICENSE"

package/maiass-standalone.cjs

@@ -1,148 +0,0 @@
-#!/usr/bin/env node
-/**
- * MAIASS: Modular AI-Augmented Semantic Scribe
- * Standalone bundled version for distribution
- */
-
-const path = require('path');
-const fs = require('fs');
-
-// Embedded version and config (updated during build)
-const MAIASS_VERSION = "5.3.6";
-const MAIASS_CONFIG = {
-  name: "maiass",
-  description: "MAIASS: Modular AI-Augmented Semantic Scribe - CLI tool for AI-augmented development",
-  version: MAIASS_VERSION
-};
-
-// Simple argument parsing
-const args = process.argv.slice(2);
-const firstArg = args[0];
-
-// Handle version flag
-if (args.includes('--version') || args.includes('-v')) {
-  console.log(MAIASS_VERSION);
-  process.exit(0);
-}
-
-// Handle help flag
-if (args.includes('--help') || args.includes('-h') || firstArg === 'help') {
-  console.log(`\nMAIASS v${MAIASS_VERSION}`);
-  console.log('Modular AI-Augmented Semantic Scribe\n');
-  console.log('Usage: maiass [command] [options]\n');
-  console.log('Commands:');
-  console.log('  hello              Print hello world');
-  console.log('  version            Show version information');
-  console.log('  check-updates      Check for available updates');
-  console.log('\nOptions:');
-  console.log('  --help, -h         Show this help message');
-  console.log('  --version, -v      Show version');
-  console.log('\nThis is a bundled Node.js version with limited functionality.');
-  console.log('For full features, install from source or use the bash version.');
-  console.log('\nHomepage: https://github.com/vsmash/maiass');
-  process.exit(0);
-}
-
-// Simple color utilities
-const colors = {
-  green: (text) => `\x1b[32m${text}\x1b[0m`,
-  cyan: (text) => `\x1b[36m${text}\x1b[0m`,
-  yellow: (text) => `\x1b[33m${text}\x1b[0m`,
-  red: (text) => `\x1b[31m${text}\x1b[0m`,
-  bold: (text) => `\x1b[1m${text}\x1b[0m`
-};
-
-// Check for updates function
-async function checkForUpdates() {
-  try {
-    console.log(colors.cyan('🔍 Checking for MAIASS updates...'));
-    
-    const https = require('https');
-    const url = 'https://api.github.com/repos/vsmash/maiass/releases/latest';
-    
-    return new Promise((resolve, reject) => {
-      const req = https.get(url, {
-        headers: {
-          'User-Agent': 'MAIASS-CLI'
-        }
-      }, (res) => {
-        let data = '';
-        res.on('data', (chunk) => data += chunk);
-        res.on('end', () => {
-          try {
-            const release = JSON.parse(data);
-            const latestVersion = release.tag_name?.replace('v', '') || release.name;
-            
-            if (latestVersion && latestVersion !== MAIASS_VERSION) {
-              console.log(colors.yellow(`📦 Update available: ${MAIASS_VERSION} → ${latestVersion}`));
-              console.log(colors.cyan('🍺 Update with: brew upgrade maiass'));
-              console.log(colors.cyan('📖 Or visit: https://github.com/vsmash/maiass/releases'));
-            } else {
-              console.log(colors.green('✅ You have the latest version!'));
-            }
-            resolve(true);
-          } catch (e) {
-            console.log(colors.yellow('⚠️  Could not parse update information'));
-            resolve(false);
-          }
-        });
-      });
-      
-      req.on('error', (err) => {
-        console.log(colors.yellow('⚠️  Could not check for updates (offline?)'));
-        resolve(false);
-      });
-      
-      req.setTimeout(5000, () => {
-        req.destroy();
-        console.log(colors.yellow('⚠️  Update check timed out'));
-        resolve(false);
-      });
-    });
-  } catch (error) {
-    console.log(colors.yellow('⚠️  Could not check for updates'));
-    return false;
-  }
-}
-
-// Command routing
-async function main() {
-  const command = firstArg || 'hello';
-  
-  switch (command) {
-    case 'hello':
-      console.log(colors.cyan('\n🚀 Hello from MAIASS!'));
-      console.log(colors.bold(`Version: ${MAIASS_VERSION}`));
-      console.log('\nThis is the bundled Node.js version with basic functionality.');
-      console.log('For full features, see: https://github.com/vsmash/maiass');
-      
-      // Auto-check for updates
-      console.log('');
-      await checkForUpdates();
-      break;
-      
-    case 'version':
-      console.log(colors.bold(`MAIASS v${MAIASS_VERSION}`));
-      console.log(`Node.js ${process.version}`);
-      console.log(`Platform: ${process.platform} ${process.arch}`);
-      break;
-      
-    case 'check-updates':
-      await checkForUpdates();
-      break;
-      
-    default:
-      console.log(colors.red(`❌ Unknown command: ${command}`));
-      console.log(colors.cyan('Run `maiass --help` for available commands.'));
-      console.log('\nNote: This bundled version has limited functionality.');
-      console.log('For full MAIASS features, install from source:');
-      console.log('https://github.com/vsmash/maiass');
-      process.exit(1);
-  }
-}
-
-// Run main function
-main().catch(error => {
-  console.error(colors.red('❌ Error:'), error.message);
-  process.exit(1);
-});

package/maiass.cjs

@@ -1,34 +0,0 @@
-#!/usr/bin/env node
-/**
- * CommonJS wrapper for maiass.mjs to ensure pkg compatibility
- * This file serves as an entry point that pkg can properly handle
- */
-
-// Import the ES module using dynamic import with detailed error handling
-(async () => {
-  try {
-    // Check if we're running in pkg environment
-    const isPkg = typeof process.pkg !== 'undefined';
-    
-    if (isPkg) {
-      // In pkg environment, try different import approaches
-      console.log('Running in pkg environment, attempting ES module import...');
-    }
-    
-    const module = await import('./maiass.mjs');
-    // console.log('ES module imported successfully');
-  } catch (error) {
-    console.error('Error starting maiass:');
-    console.error('Error type:', error.constructor.name);
-    console.error('Error message:', error.message);
-    console.error('Error stack:', error.stack);
-    
-    // Check if it's a specific pkg-related error
-    if (error.message.includes('Invalid host defined options')) {
-      console.error('\nThis appears to be a pkg/yargs compatibility issue.');
-      console.error('Try running with Node.js directly: node maiass.cjs');
-    }
-    
-    process.exit(1);
-  }
-})();