void 0.10.1 → 0.10.3

package/dist/{project-cmd-CWZeawuN.mjs → project-cmd-InegJruy.mjs}

@@ -1,5 +1,5 @@
 import { i as dim, l as tablePrefix, n as cliTitle, s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { d as getToken, n as PlatformClient, u as getSiteDomain } from "./client-D4awzTnj.mjs";
+import { d as getSiteDomain, f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
 import { c as R, g as ge, y as ye } from "./dist-abzUneor.mjs";
 //#region src/cli/projects.ts
 async function runProjectsCommand(root) {
@@ -34,32 +34,32 @@ async function runProjectsCommand(root) {
 //#region src/cli/project-cmd.ts
 async function runProjectCommand(root, args) {
 	if (args.subcommand === "status") {
-		const { runListCommand } = await import("./list-BkwE5vH4.mjs");
+		const { runListCommand } = await import("./list-B7qXBBjo.mjs");
 		return runListCommand(root, args.name || void 0);
 	}
 	if (args.subcommand === "link") {
-		const { runLink } = await import("./link-CpbWJY3P.mjs");
+		const { runLink } = await import("./link-BKLElphS.mjs");
 		return runLink(root, args.name || void 0);
 	}
 	if (args.subcommand === "list") return runProjectsCommand(root);
 	if (args.subcommand === "logs") {
-		const { runLogsCommand } = await import("./logs-ArQzZquo.mjs");
+		const { runLogsCommand } = await import("./logs-AXm660MB.mjs");
 		return runLogsCommand(root, args.filter, args.range, args.deployment || void 0, args.level || void 0);
 	}
 	if (args.subcommand === "rollback") {
-		const { runRollbackCommand } = await import("./rollback-BJ60ktsW.mjs");
+		const { runRollbackCommand } = await import("./rollback-CHVE-DeT.mjs");
 		return runRollbackCommand(root, args.deployId || void 0);
 	}
 	if (args.subcommand === "cancel") {
-		const { runCancelDeployCommand } = await import("./cancel-deploy-CDzkVaYZ.mjs");
+		const { runCancelDeployCommand } = await import("./cancel-deploy-S2N8NSv6.mjs");
 		return runCancelDeployCommand(root, args.deployId || void 0);
 	}
 	if (args.subcommand === "delete") {
-		const { runDeleteCommand } = await import("./delete-CJZGDLBR.mjs");
+		const { runDeleteCommand } = await import("./delete-CfSe3EJO.mjs");
 		return runDeleteCommand(root, args.name || void 0, { force: args.force });
 	}
 	if (args.subcommand === "purge-cache") {
-		const { runPurgeCacheCommand } = await import("./cache-DNX0hLsO.mjs");
+		const { runPurgeCacheCommand } = await import("./cache-CMzjhxHh.mjs");
 		return runPurgeCacheCommand(root, args.projectSlug || void 0);
 	}
 }

package/dist/{protocol-63PHtCHS.d.mts → protocol-6UZCowS1.d.mts}

@@ -1,6 +1,6 @@
-import { n as HeadDescriptor, t as HeadConfig } from "./head-JAH2l3fg.mjs";
-import { n as CloudBindings, r as CloudContext } from "./handler-DczZlaXR.mjs";
-import { a as PageRenderMode, t as DevCssAsset } from "./types-BnHMXezo.mjs";
+import { n as HeadDescriptor, t as HeadConfig } from "./head-eOUCWUNy.mjs";
+import { n as CloudBindings, r as CloudContext } from "./handler-B7rCOy21.mjs";
+import { a as PageRenderMode, t as DevCssAsset } from "./types-BodZGegX.mjs";
 
 //#region src/pages/protocol.d.ts
 /** Escape characters that are unsafe inside inline <script> tags to prevent XSS. */

package/dist/{rollback-BJ60ktsW.mjs → rollback-CHVE-DeT.mjs}

@@ -1,5 +1,5 @@
 import { a as ensureUtc, i as dim, n as cliTitle, r as createSpinner, s as import_picocolors } from "./output-DeiS4oEX.mjs";
-import { d as getToken, n as PlatformClient } from "./client-D4awzTnj.mjs";
+import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
 import { _ as me, c as R, g as ge, i as Ee, v as ue, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 //#region src/cli/rollback.ts

package/dist/runtime/auth.d.mts

@@ -1,2 +1,2 @@
-import { a as VoidAuthConfigContext, c as getSession, i as VoidAuthConfig, l as getUser, n as AuthState, o as authContext, r as AuthUser, s as defineAuth, t as AuthSession, u as requireAuth } from "../auth-nEUVHuFI.mjs";
+import { a as VoidAuthConfigContext, c as getSession, i as VoidAuthConfig, l as getUser, n as AuthState, o as authContext, r as AuthUser, s as defineAuth, t as AuthSession, u as requireAuth } from "../auth-Dz2CCn4T.mjs";
 export { AuthSession, AuthState, AuthUser, VoidAuthConfig, VoidAuthConfigContext, authContext, defineAuth, getSession, getUser, requireAuth };

package/dist/runtime/better-auth-pg.d.mts

@@ -1,4 +1,4 @@
-import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv, r as VoidAuthRuntimeApi, t as VoidAuthDialect } from "../better-auth-shared-a7H3wk9J.mjs";
+import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv, r as VoidAuthRuntimeApi, t as VoidAuthDialect } from "../better-auth-shared-jkksALri.mjs";
 
 //#region src/runtime/better-auth-pg.d.ts
 declare const resolveVoidAuthOptions: VoidAuthRuntimeApi["resolveVoidAuthOptions"];

package/dist/runtime/better-auth.d.mts

@@ -1,4 +1,4 @@
-import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv, r as VoidAuthRuntimeApi, t as VoidAuthDialect } from "../better-auth-shared-a7H3wk9J.mjs";
+import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv, r as VoidAuthRuntimeApi, t as VoidAuthDialect } from "../better-auth-shared-jkksALri.mjs";
 
 //#region src/runtime/better-auth.d.ts
 declare const resolveVoidAuthOptions: VoidAuthRuntimeApi["resolveVoidAuthOptions"];

package/dist/runtime/client-react.d.mts

@@ -1,6 +1,6 @@
-import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-nEUVHuFI.mjs";
+import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-Dz2CCn4T.mjs";
 import { auth, createAuthClient } from "./auth-client-react.mjs";
-import { t as FetchError } from "../fetch-error-BQMdPvge.mjs";
+import { t as FetchError } from "../fetch-error-B6RaJ-eZ.mjs";
 import { fetch } from "./fetch.mjs";
 import { fetchStream } from "./fetch-stream.mjs";
 export { type AuthSession, type AuthState, type AuthUser, FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client-solid.d.mts

@@ -1,6 +1,6 @@
-import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-nEUVHuFI.mjs";
+import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-Dz2CCn4T.mjs";
 import { auth, createAuthClient } from "./auth-client-solid.mjs";
-import { t as FetchError } from "../fetch-error-BQMdPvge.mjs";
+import { t as FetchError } from "../fetch-error-B6RaJ-eZ.mjs";
 import { fetch } from "./fetch.mjs";
 import { fetchStream } from "./fetch-stream.mjs";
 export { type AuthSession, type AuthState, type AuthUser, FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client-svelte.d.mts

@@ -1,6 +1,6 @@
-import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-nEUVHuFI.mjs";
+import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-Dz2CCn4T.mjs";
 import { auth, createAuthClient } from "./auth-client-svelte.mjs";
-import { t as FetchError } from "../fetch-error-BQMdPvge.mjs";
+import { t as FetchError } from "../fetch-error-B6RaJ-eZ.mjs";
 import { fetch } from "./fetch.mjs";
 import { fetchStream } from "./fetch-stream.mjs";
 export { type AuthSession, type AuthState, type AuthUser, FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client-vue.d.mts

@@ -1,6 +1,6 @@
-import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-nEUVHuFI.mjs";
+import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-Dz2CCn4T.mjs";
 import { auth, createAuthClient } from "./auth-client-vue.mjs";
-import { t as FetchError } from "../fetch-error-BQMdPvge.mjs";
+import { t as FetchError } from "../fetch-error-B6RaJ-eZ.mjs";
 import { fetch } from "./fetch.mjs";
 import { fetchStream } from "./fetch-stream.mjs";
 export { type AuthSession, type AuthState, type AuthUser, FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/client.d.mts

@@ -1,6 +1,6 @@
-import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-nEUVHuFI.mjs";
+import { n as AuthState, r as AuthUser, t as AuthSession } from "../auth-Dz2CCn4T.mjs";
 import { auth, createAuthClient } from "./auth-client.mjs";
-import { t as FetchError } from "../fetch-error-BQMdPvge.mjs";
+import { t as FetchError } from "../fetch-error-B6RaJ-eZ.mjs";
 import { fetch } from "./fetch.mjs";
 import { fetchStream } from "./fetch-stream.mjs";
 export { type AuthSession, type AuthState, type AuthUser, FetchError, FetchError as StreamError, auth, createAuthClient, fetch, fetchStream };

package/dist/runtime/env-helpers.d.mts

@@ -1,2 +1,2 @@
-import { a as getSecretOverride, c as oneOf, i as email, l as string, n as SECRET_OVERRIDE_SYMBOL, o as json, r as boolean, s as number, t as EnvSchema, u as url } from "../env-helpers-ZatKyjen.mjs";
+import { a as getSecretOverride, c as oneOf, i as email, l as string, n as SECRET_OVERRIDE_SYMBOL, o as json, r as boolean, s as number, t as EnvSchema, u as url } from "../env-helpers-B_ks681T.mjs";
 export { EnvSchema, SECRET_OVERRIDE_SYMBOL, boolean, email, getSecretOverride, json, number, oneOf, string, url };

package/dist/runtime/env-public-client.d.mts

@@ -1,4 +1,4 @@
-import { c as oneOf, i as email, l as string, o as json, r as boolean, s as number, t as EnvSchema, u as url } from "../env-helpers-ZatKyjen.mjs";
+import { c as oneOf, i as email, l as string, o as json, r as boolean, s as number, t as EnvSchema, u as url } from "../env-helpers-B_ks681T.mjs";
 
 //#region src/runtime/env-public-client.d.ts
 declare const env: Record<string, unknown>;

package/dist/runtime/env-public.d.mts

@@ -1,6 +1,6 @@
 /// <reference types="@cloudflare/workers-types" />
-import { t as StandardSchemaV1 } from "../standard-schema-BCBv-QaP.mjs";
-import { c as oneOf, i as email, l as string, o as json, r as boolean, s as number, t as EnvSchema, u as url } from "../env-helpers-ZatKyjen.mjs";
+import { t as StandardSchemaV1 } from "../standard-schema-Cy0lfeWv.mjs";
+import { c as oneOf, i as email, l as string, o as json, r as boolean, s as number, t as EnvSchema, u as url } from "../env-helpers-B_ks681T.mjs";
 import * as _$_cloudflare_sandbox0 from "@cloudflare/sandbox";
 
 //#region src/runtime/env-public.d.ts

package/dist/runtime/fetch-stream.d.mts

@@ -1,4 +1,4 @@
-import { t as FetchError } from "../fetch-error-BQMdPvge.mjs";
+import { t as FetchError } from "../fetch-error-B6RaJ-eZ.mjs";
 import { RouteMap } from "void/routes";
 
 //#region src/runtime/fetch-stream.d.ts

package/dist/runtime/fetch.d.mts

@@ -1,4 +1,4 @@
-import { t as FetchError } from "../fetch-error-BQMdPvge.mjs";
+import { t as FetchError } from "../fetch-error-B6RaJ-eZ.mjs";
 import { RouteMap } from "void/routes";
 
 //#region src/runtime/fetch.d.ts

package/dist/runtime/handler.d.mts

@@ -1,3 +1,3 @@
 /// <reference types="@cloudflare/workers-types" />
-import { C as defer, E as ValidatorSlots, S as InferProps, T as HandlerInput, _ as defineQueue, a as CloudEnv, b as Deferred, c as QueueRetryOptions, d as TypedQueueHandler, f as VoidAssetRewriteError, g as defineMiddleware, h as defineHead, i as CloudContextVariables, l as RenderAssetTags, m as defineHandler, n as CloudBindings, o as QueueBatch, p as basicAuth, r as CloudContext, s as QueueMessage, t as BasicAuthOptions, u as TypedHandler, v as defineRender, w as ValidationError, y as defineScheduled } from "../handler-DczZlaXR.mjs";
+import { C as defer, E as ValidatorSlots, S as InferProps, T as HandlerInput, _ as defineQueue, a as CloudEnv, b as Deferred, c as QueueRetryOptions, d as TypedQueueHandler, f as VoidAssetRewriteError, g as defineMiddleware, h as defineHead, i as CloudContextVariables, l as RenderAssetTags, m as defineHandler, n as CloudBindings, o as QueueBatch, p as basicAuth, r as CloudContext, s as QueueMessage, t as BasicAuthOptions, u as TypedHandler, v as defineRender, w as ValidationError, y as defineScheduled } from "../handler-B7rCOy21.mjs";
 export { BasicAuthOptions, CloudBindings, CloudContext, CloudContextVariables, CloudEnv, Deferred, HandlerInput, InferProps, QueueBatch, QueueMessage, QueueRetryOptions, RenderAssetTags, TypedHandler, TypedQueueHandler, ValidationError, ValidatorSlots, VoidAssetRewriteError, basicAuth, defer, defineHandler, defineHead, defineMiddleware, defineQueue, defineRender, defineScheduled };

package/dist/runtime/live.d.mts

@@ -1,6 +1,6 @@
 /// <reference types="@cloudflare/workers-types" />
-import { r as AuthUser } from "../auth-nEUVHuFI.mjs";
-import { a as CloudEnv, r as CloudContext } from "../handler-DczZlaXR.mjs";
+import { r as AuthUser } from "../auth-Dz2CCn4T.mjs";
+import { a as CloudEnv, r as CloudContext } from "../handler-B7rCOy21.mjs";
 
 //#region src/runtime/live.d.ts
 type MaybePromise<T> = T | Promise<T>;

package/dist/runtime/validator.d.mts

@@ -1,2 +1,2 @@
-import { D as runValidation, E as ValidatorSlots, T as HandlerInput } from "../handler-DczZlaXR.mjs";
+import { D as runValidation, E as ValidatorSlots, T as HandlerInput } from "../handler-B7rCOy21.mjs";
 export { HandlerInput, ValidatorSlots, runValidation };

package/dist/runtime/ws-server.d.mts

@@ -1,5 +1,5 @@
-import { n as AuthState } from "../auth-nEUVHuFI.mjs";
-import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv } from "../better-auth-shared-a7H3wk9J.mjs";
+import { n as AuthState } from "../auth-Dz2CCn4T.mjs";
+import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv } from "../better-auth-shared-jkksALri.mjs";
 import { AnyWebSocketDefinition } from "./ws.mjs";
 
 //#region src/runtime/ws-server.d.ts

package/dist/runtime/ws.d.mts

@@ -1,6 +1,6 @@
-import { r as AuthUser } from "../auth-nEUVHuFI.mjs";
-import { t as StandardSchemaV1 } from "../standard-schema-BCBv-QaP.mjs";
-import { a as CloudEnv } from "../handler-DczZlaXR.mjs";
+import { r as AuthUser } from "../auth-Dz2CCn4T.mjs";
+import { t as StandardSchemaV1 } from "../standard-schema-Cy0lfeWv.mjs";
+import { a as CloudEnv } from "../handler-B7rCOy21.mjs";
 import { WebSocketRouteMap } from "void/routes";
 
 //#region src/runtime/ws.d.ts

package/dist/{secret-BRbXyu7E.mjs → secret-CVKwIOm3.mjs}

@@ -1,5 +1,5 @@
 import { n as cliTitle } from "./output-DeiS4oEX.mjs";
-import { d as getToken, n as PlatformClient } from "./client-D4awzTnj.mjs";
+import { f as getToken, n as PlatformClient } from "./client-YIzxv2ZO.mjs";
 import { _ as me, c as R, g as ge, n as Ce, u as Se, v as ue, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
 import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-D4O1_fZz.mjs";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "void",
-  "version": "0.10.1",
+  "version": "0.10.3",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/voidzero-dev/void.git",
@@ -353,7 +353,7 @@
     "valibot": ">=1.0.0-beta.7",
     "vite": "^8.0.0",
     "zod": "^3.25.0 || ^4.0.0",
-    "@void/md": "0.10.1"
+    "@void/md": "0.10.3"
   },
   "peerDependenciesMeta": {
     "@void/md": {

package/skills/void/docs/guide/deployment.md

@@ -66,7 +66,7 @@ If your CI pipeline runs typechecking or other static analysis before deploy, ru
 
 You can deploy from a GitHub repo on every push to `main`. Running `void init --github` generates `.github/workflows/void-deploy.yml` in your project.
 
-The workflow authenticates with [GitHub OIDC](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect) — there is **no long-lived `VOID_TOKEN` secret to store or rotate**. The job requests a short-lived OIDC token from GitHub, exchanges it at `POST $VOID_API_URL/auth/github-oidc` for a short-lived project-scoped deploy token (about 15 minutes on the free tier; longer on higher plans, capped at ~60 minutes), then runs `void deploy --project <slug>`:
+The workflow authenticates with [GitHub OIDC](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect) — there is **no long-lived `VOID_TOKEN` secret to store or rotate**. `void deploy` detects GitHub Actions and does the exchange itself: it requests a short-lived OIDC token from GitHub (audience `void`), exchanges it at `POST $VOID_API_URL/auth/github-oidc` for a short-lived project-scoped deploy token (about 15 minutes on the free tier; longer on higher plans, capped at ~60 minutes), and deploys — so the workflow is a single `void deploy` step. `permissions: id-token: write` is still required: it is what lets the job (and the CLI) mint the OIDC token.
 
 ```yaml
 name: Deploy to Void
@@ -98,17 +98,6 @@ jobs:
           node-version: lts/*
           cache: npm
       - run: npm ci
-      - name: Exchange GitHub OIDC token for a Void deploy token
-        run: |
-          OIDC_TOKEN="$(curl -sf \
-            -H "Authorization: Bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \
-            "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=void" | jq -r '.value')"
-          VOID_TOKEN="$(curl -sf \
-            -H 'Content-Type: application/json' \
-            -d "$(jq -n --arg t "$OIDC_TOKEN" --arg p "$VOID_PROJECT" '{oidcToken: $t, project: $p}')" \
-            "$VOID_API_URL/auth/github-oidc" | jq -r '.token')"
-          echo "::add-mask::$VOID_TOKEN"
-          echo "VOID_TOKEN=$VOID_TOKEN" >> "$GITHUB_ENV"
       - name: Deploy
         run: npx void deploy --project "$VOID_PROJECT"
 ```

package/skills/void/docs/guide/pages-routing/markdown.md

@@ -437,6 +437,18 @@ Import code from external files:
 
 Shortcodes convert to unicode: `:tada:` becomes :tada:, `:rocket:` becomes :rocket:.
 
+### Footnotes
+
+Reference a footnote inline and define it anywhere in the document:
+
+```md
+Here is a statement with a footnote.[^1]
+
+[^1]: And here is the footnote body.
+```
+
+The references and definitions render into a linked footnote list at the end of the content.
+
 ### Attributes
 
 Add classes, IDs, or attributes to any element:

package/skills/void/docs/node_modules/void/node_modules/@void/md/README.md

@@ -115,6 +115,7 @@ Full VitePress-parity feature set:
 - **Custom containers** — `:::tip`, `:::info`, `:::warning`, `:::danger`, `:::details`
 - **GitHub alerts** — `> [!NOTE]`, `> [!TIP]`, `> [!WARNING]`, `> [!IMPORTANT]`, `> [!CAUTION]`
 - **Emoji** — `:emoji_name:` shortcodes
+- **Footnotes** — `text[^1]` refs with matching `[^1]: definition` blocks
 - **Attributes** — `{.class #id}` on elements via `markdown-it-attrs`
 - **Anchor links** — auto-generated heading anchors
 - **Table of contents** — `[[toc]]` directive
@@ -143,7 +144,7 @@ import '@void/md/theme.css'; // or theme-content.css
 
 ## Tests
 
-- `test/unit/compile.test.ts` — compilation pipeline: basic, frontmatter, title extraction, headings, Shiki, emoji, anchors
+- `test/unit/compile.test.ts` — compilation pipeline: basic, frontmatter, title extraction, headings, Shiki, emoji, footnotes, anchors
 - `test/unit/extract-script.test.ts` — script extraction: island imports, client code, edge cases
 - `test/unit/plugins.test.ts` — markdown-it plugins: containers, GitHub alerts, links, images, line numbers, emoji, TOC
 - `test/unit/emit-vue.test.ts` — Vue component emission with and without islands

package/skills/void/docs/node_modules/void/node_modules/@void/md/node_modules/markdown-it-footnote/README.md

@@ -0,0 +1,135 @@
+# markdown-it-footnote
+
+[![CI](https://github.com/markdown-it/markdown-it-footnote/actions/workflows/ci.yml/badge.svg)](https://github.com/markdown-it/markdown-it-footnote/actions/workflows/ci.yml)
+[![NPM version](https://img.shields.io/npm/v/markdown-it-footnote.svg?style=flat)](https://www.npmjs.org/package/markdown-it-footnote)
+[![Coverage Status](https://img.shields.io/coveralls/markdown-it/markdown-it-footnote/master.svg?style=flat)](https://coveralls.io/r/markdown-it/markdown-it-footnote?branch=master)
+
+> Footnotes plugin for [markdown-it](https://github.com/markdown-it/markdown-it) markdown parser.
+
+__v2.+ requires `markdown-it` v5.+, see changelog.__
+
+Markup is based on [pandoc](http://johnmacfarlane.net/pandoc/README.html#footnotes) definition.
+
+__Normal footnote__:
+
+```
+Here is a footnote reference,[^1] and another.[^longnote]
+
+[^1]: Here is the footnote.
+
+[^longnote]: Here's one with multiple blocks.
+
+    Subsequent paragraphs are indented to show that they
+belong to the previous footnote.
+```
+
+html:
+
+```html
+<p>Here is a footnote reference,<sup class="footnote-ref"><a href="#fn1" id="fnref1">[1]</a></sup> and another.<sup class="footnote-ref"><a href="#fn2" id="fnref2">[2]</a></sup></p>
+<p>This paragraph won’t be part of the note, because it
+isn’t indented.</p>
+<hr class="footnotes-sep">
+<section class="footnotes">
+<ol class="footnotes-list">
+<li id="fn1"  class="footnote-item"><p>Here is the footnote. <a href="#fnref1" class="footnote-backref">↩</a></p>
+</li>
+<li id="fn2"  class="footnote-item"><p>Here’s one with multiple blocks.</p>
+<p>Subsequent paragraphs are indented to show that they
+belong to the previous footnote. <a href="#fnref2" class="footnote-backref">↩</a></p>
+</li>
+</ol>
+</section>
+```
+
+__Inline footnote__:
+
+```
+Here is an inline note.^[Inlines notes are easier to write, since
+you don't have to pick an identifier and move down to type the
+note.]
+```
+
+html:
+
+```html
+<p>Here is an inline note.<sup class="footnote-ref"><a href="#fn1" id="fnref1">[1]</a></sup></p>
+<hr class="footnotes-sep">
+<section class="footnotes">
+<ol class="footnotes-list">
+<li id="fn1"  class="footnote-item"><p>Inlines notes are easier to write, since
+you don’t have to pick an identifier and move down to type the
+note. <a href="#fnref1" class="footnote-backref">↩</a></p>
+</li>
+</ol>
+</section>
+```
+
+
+## Install
+
+node.js, browser:
+
+```bash
+npm install markdown-it-footnote --save
+bower install markdown-it-footnote --save
+```
+
+## Use
+
+```js
+var md = require('markdown-it')()
+            .use(require('markdown-it-footnote'));
+
+md.render(/*...*/) // See examples above
+```
+
+_Differences in browser._ If you load script directly into the page, without
+package system, module will add itself globally as `window.markdownitFootnote`.
+
+
+### Customize
+
+If you want to customize the output, you'll need to replace the template
+functions. To see which templates exist and their default implementations,
+look in [`index.js`](index.js). The API of these template functions is out of
+scope for this plugin's documentation; you can read more about it [in the
+markdown-it
+documentation](https://github.com/markdown-it/markdown-it/blob/master/docs/architecture.md#renderer).
+
+To demonstrate with an example, here is how you might replace the `<hr>` that
+this plugin emits by default with an `<h4>` emitted by your own template
+function override:
+
+```js
+const md = require('markdown-it')().use(require('markdown-it-footnote'));
+
+md.renderer.rules.footnote_block_open = () => (
+  '<h4 class="mt-3">Footnotes</h4>\n' +
+  '<section class="footnotes">\n' +
+  '<ol class="footnotes-list">\n'
+);
+```
+
+Here's another example that customizes footnotes for epub books:
+
+```js
+const backrefLabel = 'back to text';
+
+const epubRules = {
+  footnote_ref: ['<a', '<a epub:type="noteref"'],
+  footnote_open: ['<li', '<li epub:type="footnote"'],
+  footnote_anchor: ['<a', `<a aria-label="${backrefLabel}"`],
+}
+
+Object.keys(epubRules).map(rule => {
+  let defaultRender = md.renderer.rules[rule];
+  md.renderer.rules[rule] = (tokens, idx, options, env, self) => {
+    return defaultRender(tokens, idx, options, env, self).replace(...epubRules[rule]);
+  }
+})
+```
+
+## License
+
+[MIT](https://github.com/markdown-it/markdown-it-footnote/blob/master/LICENSE)

package/skills/void/docs/reference/cli.md

@@ -35,6 +35,7 @@ Use this page as a command reference. If you are setting up a project for the fi
 | `void project rollback`           | Roll back to a previous deployment                                  |
 | `void project cancel`             | Cancel an active deployment                                         |
 | `void project purge-cache`        | Purge all cached pages                                              |
+| `void build logs`                 | Stream, tail, or download build logs                                |
 | `void mcp`                        | Start the Void MCP server                                           |
 | `void init`                       | Setup wizard for new or existing projects                           |
 
@@ -86,7 +87,7 @@ After that, the full interactive flow walks through:
 4. **Skills:** links Void skills using the same detected or selected agent context.
 5. **MCP config:** writes MCP server config using that same agent context.
 6. **Demo code:** for existing non-Pages projects, optionally scaffolds a `db/migrations/` directory plus an API route and typed fetch example.
-7. **GitHub Actions:** optionally creates `.github/workflows/void-deploy.yml`. The workflow deploys on pushes to `main` and authenticates via [GitHub OIDC](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect) — no long-lived `VOID_TOKEN` secret is stored in the repo. The job requests an OIDC token (audience `void`), exchanges it at `POST $VOID_API_URL/auth/github-oidc` for a short-lived project-scoped deploy token, then runs `void deploy --project <slug>` with the right package manager. The project slug is baked in from your linked project (`.void/project.json`) when known; otherwise the workflow reads a `VOID_PROJECT` repository variable.
+7. **GitHub Actions:** optionally creates `.github/workflows/void-deploy.yml`. The workflow deploys on pushes to `main` and authenticates via [GitHub OIDC](https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect) — no long-lived `VOID_TOKEN` secret is stored in the repo. The workflow is a single `void deploy` step: when it runs in GitHub Actions, `void deploy` mints an OIDC token (audience `void`), exchanges it at `POST $VOID_API_URL/auth/github-oidc` for a short-lived project-scoped deploy token, and deploys. `permissions: id-token: write` is retained so the CLI can mint that token. The project slug is baked in from your linked project (`.void/project.json`) when known; otherwise the workflow reads a `VOID_PROJECT` repository variable.
 8. **`env.ts` scaffold:** if the project has no `env.ts` but has `.env` / `.env.example` / `.env.local` / `.env.development*` files on disk, generates an `env.ts` pre-populated with their keys. Values get conservative type inference (`boolean`/`url`/`number`/`string`) — the file carries a banner nudging you to tighten anything the heuristic got wrong.
 9. **Project setup:** optionally logs you in, lets you select or create a project, and writes `.void/project.json` so your first deploy can just be `void deploy`.
 
@@ -606,13 +607,16 @@ Connect a GitHub repository to a Void project for automatic deploys. On every pu
 
 **Options**
 
-| Flag                  | Description                                                                     |
-| --------------------- | ------------------------------------------------------------------------------- |
-| `--project <name>`    | Project name (alias for the positional argument)                                |
-| `--installation <id>` | GitHub App installation ID (required when you have multiple installations)      |
-| `--repo <owner/repo>` | Repository full name — required unless the installation grants exactly one repo |
-| `--branch <name>`     | Branch to deploy from — **required in non-interactive mode**                    |
-| `--executor <type>`   | Build executor: `container` (default) or `github_actions`                       |
+| Flag                  | Description                                                                       |
+| --------------------- | --------------------------------------------------------------------------------- |
+| `--project <name>`    | Project name (alias for the positional argument)                                  |
+| `--installation <id>` | GitHub App installation ID (required when you have multiple installations)        |
+| `--repo <owner/repo>` | Repository full name — required unless the installation grants exactly one repo   |
+| `--branch <name>`     | Branch to deploy from — **required in non-interactive mode**                      |
+| `--executor <type>`   | Build executor: `container` (default) or `github_actions`                         |
+| `--workflow <path>`   | Authorized deploy workflow file — defaults to `.github/workflows/void-deploy.yml` |
+
+The `--workflow` path is the workflow file the GitHub OIDC exchange authorizes to mint this project's deploy token. It defaults to the scaffolded `.github/workflows/void-deploy.yml`; set it only if your deploy step lives in a different workflow file (it must be under `.github/workflows/` and end in `.yml`/`.yaml`). Because the exchange is secretless, **only this one workflow** can mint a deploy token — any other workflow in the repo (including an unsafe `pull_request_target`) is rejected. Pointing it at a broad, multi-purpose workflow widens that trust, so prefer a dedicated file.
 
 **Non-interactive use (CI)**
 
@@ -627,6 +631,65 @@ void github connect my-app \
 
 **Project resolution** follows the same order as deploy: positional / `--project`, `VOID_PROJECT`, linked project (`.void/project.json`).
 
+### `void github update`
+
+```
+void github update [project] [options]
+```
+
+Update an existing connection's deploy **branch**, **build executor**, and/or authorized **workflow file**. Use this to change settings on a project that is already connected — for example, flipping the executor from `container` to `github_actions` for a monorepo whose Void app lives in a subdirectory, moving the deploy branch, or pointing the OIDC trust at a different workflow file. The project must already be connected (run `void github connect` first); the repository and installation are not changed.
+
+**Options**
+
+| Flag                | Description                                                      |
+| ------------------- | ---------------------------------------------------------------- |
+| `--project <name>`  | Project name (alias for the positional argument)                 |
+| `--branch <name>`   | New branch to deploy from                                        |
+| `--executor <type>` | New build executor: `container` or `github_actions`              |
+| `--workflow <path>` | New authorized deploy workflow file (under `.github/workflows/`) |
+
+Interactively (TTY), `void github update` shows the current branch and executor and prompts for new values, defaulting each to the current setting. `--workflow` is flag-only — it is never prompted for; pass it explicitly to change the authorized workflow file. When stdin is not a TTY, it never prompts: pass at least one of `--branch` / `--executor` / `--workflow`, or it fails closed. If nothing actually changes, the command reports "no changes" and does not call the API.
+
+```
+void github update my-app --executor github_actions
+```
+
+**Project resolution** follows the same order as deploy: positional / `--project`, `VOID_PROJECT`, linked project (`.void/project.json`).
+
+## Build
+
+Inspect Deploy-on-GitHub builds.
+
+### `void build logs`
+
+```
+void build logs [build] [--follow] [--output <file>] [--project <slug>]
+```
+
+Stream, tail, or download the build logs for a **container** build. With no
+`[build]` argument, targets the project's most recent build.
+
+| Flag                     | Purpose                                                           | Default |
+| ------------------------ | ----------------------------------------------------------------- | ------- |
+| `--follow`, `-f`         | Live-tail: poll until the build reaches a terminal status.        | off     |
+| `--output <file>`, `-o`  | Write logs to a file instead of stdout (appends while following). | stdout  |
+| `--project <slug>`, `-p` | Target project.                                                   | linked  |
+
+**Project resolution** follows the same order as deploy: positional / `--project`,
+`VOID_PROJECT`, linked project (`.void/project.json`).
+
+Builds run on **GitHub Actions** keep their logs on GitHub — the command prints
+the Actions run URL instead of streaming. Only the last 10,000 log lines of a
+container build are retained.
+
+Examples:
+
+```
+void build logs                     # print the latest build's logs
+void build logs -f                  # follow the latest build until it finishes
+void build logs bld_123 -o build.log  # download a specific build's logs
+```
+
 ## Custom Domains
 
 ### `void domain add`