soja-cli 1.4.0

package/dist/utils/time.js

@@ -0,0 +1,25 @@
+const MINUTE = 60_000;
+const HOUR = 60 * MINUTE;
+const DAY = 24 * HOUR;
+const pad = (value) => String(value).padStart(2, '0');
+const MONTHS = ['Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep', 'Oct', 'Nov', 'Dec'];
+/** `10:42` today, `Sep 22` this year, `Sep 22 2025` otherwise. */
+export function formatStamp(date, now = new Date()) {
+    if (date.toDateString() === now.toDateString())
+        return `${pad(date.getHours())}:${pad(date.getMinutes())}`;
+    const day = `${MONTHS[date.getMonth()]} ${date.getDate()}`;
+    return date.getFullYear() === now.getFullYear() ? day : `${day} ${date.getFullYear()}`;
+}
+/** `just now`, `5m ago`, `3h ago`, `2d ago`, then a date. */
+export function formatRelative(date, now = new Date()) {
+    const elapsed = now.getTime() - date.getTime();
+    if (elapsed < MINUTE)
+        return 'just now';
+    if (elapsed < HOUR)
+        return `${Math.floor(elapsed / MINUTE)}m ago`;
+    if (elapsed < DAY)
+        return `${Math.floor(elapsed / HOUR)}h ago`;
+    if (elapsed < 7 * DAY)
+        return `${Math.floor(elapsed / DAY)}d ago`;
+    return formatStamp(date, now);
+}

package/docs/NPM_PUBLISH.md

@@ -0,0 +1,35 @@
+# Publicar SOJA en npm
+
+El paquete es [`soja-cli`](https://www.npmjs.com/package/soja-cli). El código fuente es público en GitHub bajo una licencia propietaria ([LICENSE](../LICENSE)).
+
+## Primera publicación (una sola vez, a mano)
+
+npm solo permite configurar un *Trusted Publisher* en un paquete que ya existe, así que la primera versión se publica desde una máquina con la cuenta propietaria:
+
+```bash
+git checkout main && git pull
+npm login                 # cuenta propietaria del paquete, con 2FA
+npm publish --access public
+```
+
+`prepublishOnly` corre lint, tests y build antes de publicar.
+
+Luego, en npmjs.com → `soja-cli` → **Settings → Trusted Publisher → GitHub Actions**:
+
+- Organization or user: `Mike28108`
+- Repository: `soja-cli`
+- Workflow filename: `publish.yml`
+- Environment: vacío
+
+Y en **Settings → Publishing access**, elige *Require two-factor authentication and disallow tokens*: a partir de ahí solo el workflow puede publicar.
+
+## Versiones siguientes (automático)
+
+Sube la versión en `package.json` y `package-lock.json`, mueve el changelog y haz commit `release: vX.Y.Z` en `main` (por PR). Al subir el tag `vX.Y.Z`:
+
+- `release.yml` crea el release de GitHub con el paquete adjunto;
+- `publish.yml` valida (lint, tests, build, que el tag coincida con la versión), empaqueta sin *source maps* en un job sin permisos de publicación y publica ese mismo archivo en otro job con OIDC, sin tokens de larga duración y con *provenance* (npm registra desde qué commit y workflow se construyó). Si la versión ya está en npm, no hace nada.
+
+## Qué implica que sea público
+
+El JavaScript del paquete y el código fuente del repositorio los puede leer cualquiera. La licencia limita lo que se puede hacer con ellos (instalar y usar; no redistribuir, modificar ni publicar versiones propias sin permiso), pero no los oculta. Nunca pongas secretos en el cliente: todo lo sensible vive en el backend y en sus variables de entorno.

package/docs/PRIVACY.md

@@ -0,0 +1,38 @@
+# SOJA privacy notice
+
+Last updated: 2026-09-25
+
+SOJA Local stores workspace data on the device. SOJA Online sends account and
+workspace data to the SOJA server so members of the selected workspace can
+collaborate. Workspace access is limited by membership enforced by the server.
+
+When you sign in, SOJA receives your GitHub account ID, username, profile name,
+email (if GitHub provides it), and avatar URL. An access request also collects
+your display name, date of birth, country code, and a letter of up to 100
+characters. This information is used for account identity, access review, and
+profile display. The CEO reviewer can see pending requests and their submitted
+profile data.
+
+Online workspace data can include workspace membership, projects, tasks,
+comments, activity, and chat messages. These records are shared with members
+of their workspace. Do not submit passwords, access tokens, or sensitive
+personal information in task or chat content.
+
+SOJA uses GitHub for sign-in, Railway to host the API, the configured database
+provider to store Online data, and REST Countries to retrieve country choices.
+Local mode does not enable chat or shared Online workspace access. The CLI may
+also contact the npm registry to check for and install published updates. The
+package is distributed through npm with provenance from its public source
+repository.
+
+You may request account deletion using `soja account delete`. Deletion revokes
+sessions, removes direct profile and access-request data, removes workspace
+memberships, and anonymizes your identity on shared tasks, comments, activity,
+and chat messages so collaborative records remain available. Tasks assigned to
+you become unassigned. A workspace with no other owner must be transferred
+before account deletion. Backups may retain data until their normal rotation or
+removal.
+
+For privacy requests or questions, contact the project maintainer through the
+SOJA repository. This notice describes current product behavior and should be
+reviewed for legal requirements in the jurisdictions where SOJA is offered.

package/package.json

@@ -0,0 +1,74 @@
+{
+  "name": "soja-cli",
+  "version": "1.4.0",
+  "description": "Software Operations & Job Assistant",
+  "author": "Enmauel.biz",
+  "license": "SEE LICENSE IN LICENSE",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Mike28108/soja-cli.git"
+  },
+  "homepage": "https://github.com/Mike28108/soja-cli#readme",
+  "bugs": {
+    "url": "https://github.com/Mike28108/soja-cli/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "bin": {
+    "soja": "./dist/cli/index.js"
+  },
+  "files": [
+    "dist",
+    "docs/PRIVACY.md",
+    "docs/NPM_PUBLISH.md"
+  ],
+  "engines": {
+    "node": ">=24"
+  },
+  "keywords": [
+    "cli",
+    "tui",
+    "tasks",
+    "developer-tools"
+  ],
+  "scripts": {
+    "prepublishOnly": "npm run lint && npm test && npm run build",
+    "dev": "tsx src/cli/index.tsx",
+    "build": "rm -rf dist && tsc -p tsconfig.build.json && node scripts/copy-migrations.mjs",
+    "start": "node dist/cli/index.js",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "test:e2e": "vitest run --config vitest.e2e.config.ts",
+    "check:domain": "node scripts/check-domain.mjs",
+    "typecheck": "tsc --noEmit",
+    "lint": "tsc --noEmit && eslint .",
+    "db:generate": "drizzle-kit generate",
+    "db:migrate": "tsx src/cli/index.tsx dev migrate",
+    "db:seed": "tsx src/cli/index.tsx dev seed",
+    "db:reset": "tsx src/cli/index.tsx dev reset"
+  },
+  "dependencies": {
+    "drizzle-orm": "0.45.3",
+    "ink": "7.1.1",
+    "react": "19.3.0",
+    "zod": "4.6.5"
+  },
+  "devDependencies": {
+    "@eslint/js": "9.39.5",
+    "@types/node": "26.6.2",
+    "@types/react": "19.3.0",
+    "drizzle-kit": "0.31.11",
+    "eslint": "9.39.5",
+    "eslint-plugin-react-hooks": "7.1.1",
+    "ink-testing-library": "4.0.0",
+    "tsx": "4.23.15",
+    "typescript": "6.0.3",
+    "typescript-eslint": "8.70.1",
+    "vitest": "5.0.1"
+  },
+  "overrides": {
+    "esbuild": "^0.25.0"
+  }
+}