void 0.10.3 → 0.10.4

package/dist/cli/cli.mjs

@@ -635,6 +635,11 @@ const githubSubcommands = [
 		arg: "[project]",
 		description: "Update an existing connection's branch, build executor, or deploy workflow"
 	},
+	{
+		name: "status",
+		arg: "[project]",
+		description: "Show a project's GitHub connection (repo, branch, executor, workflow)"
+	},
 	{
 		name: "link",
 		description: "Link your GitHub account to Void"
@@ -750,7 +755,26 @@ function parseGithubArgs(args) {
 			workflowPath
 		};
 	}
-	throw new Error("github: Usage: void github <install|installations|connect|update|link>.");
+	if (subcommand === "status") {
+		let projectName = "";
+		for (let i = 0; i < rest.length; i++) {
+			const arg = rest[i];
+			if (arg === "--project") {
+				if (i + 1 >= rest.length) throw new Error("github: --project requires a value.");
+				const value = rest[++i];
+				if (value.trim() === "") throw new Error("github: --project requires a value.");
+				if (projectName) throw new Error(`github: Unexpected argument '${value}'.`);
+				projectName = value;
+			} else if (arg.startsWith("-")) throw new Error(`github: Unexpected argument '${arg}'.`);
+			else if (projectName) throw new Error(`github: Unexpected argument '${arg}'.`);
+			else projectName = arg;
+		}
+		return {
+			subcommand,
+			projectName
+		};
+	}
+	throw new Error("github: Usage: void github <install|installations|connect|update|status|link>.");
 }
 //#endregion
 //#region src/cli/ascii.ts
@@ -1064,6 +1088,10 @@ const HELP_TREE = {
 				command: "update [project]",
 				description: "Update an existing connection's branch, build executor, or deploy workflow"
 			},
+			{
+				command: "status [project]",
+				description: "Show a project's GitHub connection (repo, branch, executor, workflow)"
+			},
 			{
 				command: "link",
 				description: "Link your GitHub account to Void"
@@ -1095,20 +1123,27 @@ const HELP_TREE = {
 					},
 					{
 						command: "--executor <type>",
-						description: "Build executor: container (default) | github_actions"
+						description: "Build executor: container (default) | github_actions; prompted interactively when omitted"
 					},
 					{
 						command: "--workflow <path>",
-						description: "Authorized deploy workflow file (default .github/workflows/void-deploy.yml)"
+						description: "Authorized deploy workflow file (default .github/workflows/void-deploy.yml); prompted interactively when using github_actions"
 					}
 				],
-				examples: [{
-					command: "void github connect [project]",
-					description: "Connect a repository to a project"
-				}, {
-					command: "void github connect my-app --installation 42 --repo owner/repo --branch main",
-					description: "Non-interactive connect (all flags explicit)"
-				}]
+				examples: [
+					{
+						command: "void github connect [project]",
+						description: "Connect a repository to a project"
+					},
+					{
+						command: "void github connect my-app --installation 42 --repo owner/repo --branch main",
+						description: "Non-interactive connect (all flags explicit)"
+					},
+					{
+						command: "void github connect my-app --repo owner/repo --branch main --executor github_actions",
+						description: "Non-interactive connect using the GitHub Actions executor"
+					}
+				]
 			},
 			update: {
 				summary: "Update an existing connection's branch, build executor, or deploy workflow.",
@@ -1124,11 +1159,11 @@ const HELP_TREE = {
 					},
 					{
 						command: "--executor <type>",
-						description: "New build executor: container | github_actions"
+						description: "New build executor: container | github_actions; prompted interactively when omitted"
 					},
 					{
 						command: "--workflow <path>",
-						description: "New authorized deploy workflow file (under .github/workflows/)"
+						description: "New authorized deploy workflow file under .github/workflows/; prompted interactively when using github_actions"
 					}
 				],
 				examples: [{
@@ -1138,6 +1173,21 @@ const HELP_TREE = {
 					command: "void github update my-app --branch release",
 					description: "Change the deploy branch"
 				}]
+			},
+			status: {
+				summary: "Show a project's GitHub connection settings.",
+				usage: ["void github status [project] [options]"],
+				options: [{
+					command: "--project <name>",
+					description: "Project name (alias for positional)"
+				}],
+				examples: [{
+					command: "void github status",
+					description: "Show the linked project's connection"
+				}, {
+					command: "void github status my-app",
+					description: "Show a specific project connection"
+				}]
 			}
 		}
 	},
@@ -1906,7 +1956,7 @@ else if (command === "domain") runSubcommandGroup("domain", domainSubcommands, p
 else if (command === "db") runSubcommandGroup("db", dbSubcommands, parseDbArgs, (root, parsed) => import("../db-hAmBumot.mjs").then(({ runDbCommand }) => runDbCommand(root, parsed)));
 else if (command === "env") runSubcommandGroup("env", envSubcommands, parseEnvArgs, (root, parsed) => import("../env-CIwG2y7G.mjs").then(({ runEnvCommand }) => runEnvCommand(root, parsed)));
 else if (command === "gen") runSubcommandGroup("gen", genSubcommands, parseGenArgs, (root, parsed) => import("../gen-q6McxXgE.mjs").then(({ runGenCommand }) => runGenCommand(root, parsed)));
-else if (command === "github") runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-D3L0f93X.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed)));
+else if (command === "github") runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (root, parsed) => import("../github-cmd-BvEKQmcD.mjs").then(({ runGithubCommand }) => runGithubCommand(root, parsed)));
 else if (command === "build") runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (root, parsed) => import("../build-cmd-CJQSRupz.mjs").then(({ runBuildCommand }) => runBuildCommand(root, parsed)));
 else if (command === "prepare") {
 	const root = process.cwd();
@@ -1979,7 +2029,7 @@ else if (command === "-v" || command === "--version") {
 		},
 		{
 			name: "github",
-			hint: "install | installations | connect | update | link",
+			hint: "install | installations | connect | update | status | link",
 			description: "Connect a GitHub repository for automatic deploys"
 		},
 		{
@@ -2042,7 +2092,7 @@ else if (command === "-v" || command === "--version") {
 			case "project": return runSubcommandGroup("project", projectSubcommands, parseProjectArgs, (r, p) => import("../project-cmd-InegJruy.mjs").then(({ runProjectCommand }) => runProjectCommand(r, p)));
 			case "secret": return runSubcommandGroup("secret", secretSubcommands, parseSecretArgs, (r, p) => import("../secret-CVKwIOm3.mjs").then(({ runSecretCommand }) => runSecretCommand(r, p)));
 			case "domain": return runSubcommandGroup("domain", domainSubcommands, parseDomainArgs, (r, p) => import("../domain-CkowysQx.mjs").then(({ runDomainCommand }) => runDomainCommand(r, p)));
-			case "github": return runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (r, p) => import("../github-cmd-D3L0f93X.mjs").then(({ runGithubCommand }) => runGithubCommand(r, p)));
+			case "github": return runSubcommandGroup("github", githubSubcommands, parseGithubArgs, (r, p) => import("../github-cmd-BvEKQmcD.mjs").then(({ runGithubCommand }) => runGithubCommand(r, p)));
 			case "build": return runSubcommandGroup("build", buildSubcommands, parseBuildArgs, (r, p) => import("../build-cmd-CJQSRupz.mjs").then(({ runBuildCommand }) => runBuildCommand(r, p)));
 			case "db": return runSubcommandGroup("db", dbSubcommands, parseDbArgs, (r, p) => import("../db-hAmBumot.mjs").then(({ runDbCommand }) => runDbCommand(r, p)));
 			case "env": return runSubcommandGroup("env", envSubcommands, parseEnvArgs, (r, p) => import("../env-CIwG2y7G.mjs").then(({ runEnvCommand }) => runEnvCommand(r, p)));

package/dist/{github-cmd-D3L0f93X.mjs → github-cmd-BvEKQmcD.mjs}

@@ -7,6 +7,20 @@ import { t as collectGitDeployMetadata } from "./git-metadata-Ce0AtSZL.mjs";
 import { randomBytes } from "node:crypto";
 //#region src/cli/github-cmd.ts
 /**
+* The workflow file `void init --github` scaffolds and the platform default for
+* a connection's OIDC deploy pin. Kept in sync with the server default
+* (`github_connections.workflow_path`) and the `init.ts` scaffolder.
+*/
+const DEFAULT_WORKFLOW_PATH = ".github/workflows/void-deploy.yml";
+/**
+* Client-side mirror of the server's `isValidWorkflowPath` (packages/api
+* routes/github.ts). Used to reject a bad path at the interactive prompt before
+* an API round-trip. The server re-validates, so this is DX only, not security.
+*/
+function isValidWorkflowPath(path) {
+	return path.length > 0 && path.startsWith(".github/workflows/") && (path.endsWith(".yml") || path.endsWith(".yaml")) && !path.includes("..");
+}
+/**
 * Map a PlatformApiError status + error code string to a friendly user message.
 * Returns null for unrecognised cases (caller should re-throw).
 */
@@ -62,6 +76,22 @@ function formatInstallations(installations) {
 		return header;
 	}).join("\n\n");
 }
+/**
+* Render a GitHub connection as an aligned key/value block for `void github
+* status`. The workflow file is the OIDC deploy pin — it is only read for
+* github_actions builds (container builds never use it), so it is annotated as
+* unused when the executor is container to avoid implying it is active.
+*/
+function formatConnection(connection) {
+	const row = (label, value) => `  ${label.padEnd(16)}${value}`;
+	const workflow = connection.build_executor === "github_actions" ? connection.workflow_path : `${connection.workflow_path} (unused for container builds)`;
+	return [
+		row("Repository", connection.repo_full_name),
+		row("Branch", connection.branch),
+		row("Build executor", connection.build_executor),
+		row("Deploy workflow", workflow)
+	].join("\n");
+}
 async function runGithubCommand(root, args) {
 	const token = getToken(root);
 	if (!token) {
@@ -74,6 +104,7 @@ async function runGithubCommand(root, args) {
 		case "installations": return runInstallations(client);
 		case "connect": return runConnect(root, client, args);
 		case "update": return runGithubUpdate(root, client, args);
+		case "status": return runStatus(root, client, args);
 		case "link": return runGithubLink(root, client);
 	}
 }
@@ -294,7 +325,48 @@ async function runConnect(root, client, args) {
 		}
 		branch = input.trim() || branchDefault;
 	}
-	const executor = args.executor ?? "container";
+	let executor;
+	if (args.executor !== void 0) executor = args.executor;
+	else if (!isTTY) executor = "container";
+	else {
+		const picked = await Ee({
+			message: "Build executor:",
+			options: [{
+				value: "container",
+				label: "Cloudflare Container",
+				hint: "build on Void (default)"
+			}, {
+				value: "github_actions",
+				label: "GitHub Actions",
+				hint: "build in your repo's runner"
+			}],
+			initialValue: "container"
+		});
+		if (q(picked)) {
+			me("Cancelled.");
+			process.exit(0);
+		}
+		executor = picked;
+	}
+	let workflowPath = args.workflowPath;
+	if (executor === "github_actions" && args.workflowPath === void 0 && isTTY) {
+		const input = await Re({
+			message: "Deploy workflow file:",
+			placeholder: DEFAULT_WORKFLOW_PATH,
+			initialValue: DEFAULT_WORKFLOW_PATH,
+			validate(value) {
+				const v = (value ?? "").trim();
+				if (v.length === 0 || isValidWorkflowPath(v)) return;
+				return "Must be under .github/workflows/, end in .yml/.yaml, and not contain \"..\".";
+			}
+		});
+		if (q(input)) {
+			me("Cancelled.");
+			process.exit(0);
+		}
+		const chosen = input.trim() || ".github/workflows/void-deploy.yml";
+		if (chosen !== ".github/workflows/void-deploy.yml") workflowPath = chosen;
+	}
 	let connection;
 	try {
 		connection = await client.connectGithub(projectId, {
@@ -302,7 +374,7 @@ async function runConnect(root, client, args) {
 			repoFullName,
 			branch,
 			buildExecutor: executor,
-			workflowPath: args.workflowPath
+			workflowPath
 		});
 	} catch (err) {
 		if (err instanceof PlatformApiError) {
@@ -317,8 +389,8 @@ async function runConnect(root, client, args) {
 		}
 		throw err;
 	}
-	if (args.workflowPath !== void 0 && connection.workflow_path !== args.workflowPath) {
-		R.error(`connect: server did not apply --workflow ${args.workflowPath} (got ${connection.workflow_path ?? "none"}). The platform may be too old to support a custom workflow path.`);
+	if (workflowPath !== void 0 && connection.workflow_path !== workflowPath) {
+		R.error(`connect: server did not apply workflow path ${workflowPath} (got ${connection.workflow_path ?? "none"}). The platform may be too old to support a custom workflow path.`);
 		process.exit(1);
 	}
 	R.success(`Connected ${repoFullName} (${branch}) → project. Push to ${branch} to deploy.`);
@@ -381,6 +453,7 @@ async function runGithubUpdate(root, client, args) {
 	}
 	let branch;
 	let executor;
+	let workflowPath = args.workflowPath ?? current.workflow_path;
 	if (isTTY) {
 		if (args.branch !== void 0) branch = args.branch;
 		else {
@@ -414,6 +487,23 @@ async function runGithubUpdate(root, client, args) {
 			}
 			executor = picked;
 		}
+		if (executor === "github_actions" && args.workflowPath === void 0) {
+			const input = await Re({
+				message: "Deploy workflow file:",
+				placeholder: current.workflow_path,
+				initialValue: current.workflow_path,
+				validate(value) {
+					const v = (value ?? "").trim();
+					if (v.length === 0 || isValidWorkflowPath(v)) return;
+					return "Must be under .github/workflows/, end in .yml/.yaml, and not contain \"..\".";
+				}
+			});
+			if (q(input)) {
+				me("Cancelled.");
+				process.exit(0);
+			}
+			workflowPath = input.trim() || current.workflow_path;
+		}
 	} else {
 		branch = args.branch ?? current.branch;
 		executor = args.executor ?? current.build_executor;
@@ -421,7 +511,7 @@ async function runGithubUpdate(root, client, args) {
 	const patch = {};
 	if (branch !== current.branch) patch.branch = branch;
 	if (executor !== current.build_executor) patch.buildExecutor = executor;
-	if (args.workflowPath !== void 0 && args.workflowPath !== current.workflow_path) patch.workflowPath = args.workflowPath;
+	if (workflowPath !== current.workflow_path) patch.workflowPath = workflowPath;
 	if (patch.branch === void 0 && patch.buildExecutor === void 0 && patch.workflowPath === void 0) {
 		R.info(`No changes. ${current.repo_full_name} already deploys from ${current.branch} via ${current.build_executor}.`);
 		return;
@@ -443,10 +533,70 @@ async function runGithubUpdate(root, client, args) {
 		throw err;
 	}
 	if (patch.workflowPath !== void 0 && updated.workflow_path !== patch.workflowPath) {
-		R.error(`update: server did not apply --workflow ${patch.workflowPath} (got ${updated.workflow_path ?? "none"}). The platform may be too old to support a custom workflow path.`);
+		R.error(`update: server did not apply workflow path ${patch.workflowPath} (got ${updated.workflow_path ?? "none"}). The platform may be too old to support a custom workflow path.`);
 		process.exit(1);
 	}
 	R.success(`Updated ${updated.repo_full_name} → branch ${updated.branch}, executor ${updated.build_executor}, workflow ${updated.workflow_path}.`);
 }
+/**
+* `void github status [project]` — print the current GitHub connection (repo,
+* branch, build executor, deploy workflow). Read-only; never mutates. Project
+* resolution mirrors connect/update; a 404 means the project was never
+* connected and points the user at `connect`.
+*/
+async function runStatus(root, client, args) {
+	const isTTY = process.stdin.isTTY === true;
+	let projectId;
+	const requestedSlug = getRequestedProjectSlug({ projectSlug: args.projectName || void 0 });
+	if (requestedSlug) {
+		const resolved = resolveProjectBySlug(await client.listProjects(), requestedSlug);
+		if (!resolved) {
+			R.error(`status: No project found with slug '${requestedSlug}'.`);
+			process.exit(1);
+		}
+		projectId = resolved.projectId;
+	} else {
+		const linked = readProjectConfig(root);
+		if (linked) projectId = linked.projectId;
+		else if (!isTTY) {
+			R.error("status: No project specified. Pass a project name or --project <name>, set VOID_PROJECT, or link one with `void project link`.");
+			process.exit(1);
+		} else {
+			const projects = await client.listProjects();
+			if (projects.length === 0) {
+				R.error("No projects found. Create one first with `void deploy`.");
+				process.exit(1);
+			}
+			const picked = await Ee({
+				message: "Select a project:",
+				options: projects.map((p) => ({
+					value: p.id,
+					label: p.slug
+				}))
+			});
+			if (q(picked)) {
+				me("Cancelled.");
+				process.exit(0);
+			}
+			projectId = picked;
+		}
+	}
+	let connection;
+	try {
+		connection = await client.getGithubConnection(projectId);
+	} catch (err) {
+		if (err instanceof PlatformApiError) {
+			const body = parsePlatformErrorBody(err.body);
+			const code = body?.error ?? body?.message ?? "";
+			const message = describeUpdateError(err.status, code);
+			if (message !== null) {
+				R.error(`status: ${message}`);
+				process.exit(1);
+			}
+		}
+		throw err;
+	}
+	R.message(formatConnection(connection));
+}
 //#endregion
 export { runGithubCommand };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "void",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/voidzero-dev/void.git",
@@ -353,7 +353,7 @@
     "valibot": ">=1.0.0-beta.7",
     "vite": "^8.0.0",
     "zod": "^3.25.0 || ^4.0.0",
-    "@void/md": "0.10.3"
+    "@void/md": "0.10.4"
   },
   "peerDependenciesMeta": {
     "@void/md": {

package/skills/void/docs/reference/cli.md

@@ -618,6 +618,8 @@ Connect a GitHub repository to a Void project for automatic deploys. On every pu
 
 The `--workflow` path is the workflow file the GitHub OIDC exchange authorizes to mint this project's deploy token. It defaults to the scaffolded `.github/workflows/void-deploy.yml`; set it only if your deploy step lives in a different workflow file (it must be under `.github/workflows/` and end in `.yml`/`.yaml`). Because the exchange is secretless, **only this one workflow** can mint a deploy token — any other workflow in the repo (including an unsafe `pull_request_target`) is rejected. Pointing it at a broad, multi-purpose workflow widens that trust, so prefer a dedicated file.
 
+Interactively (TTY), after resolving the repository and branch, `void github connect` prompts for the **build executor** (defaulting to `container`). If you pick `github_actions`, it then prompts for the **deploy workflow file**, defaulting to `.github/workflows/void-deploy.yml` and validated locally before it is sent. Pass `--executor` and/or `--workflow` to skip the respective prompt. The workflow prompt is skipped entirely for the `container` executor, which does not use a workflow file.
+
 **Non-interactive use (CI)**
 
 When stdin is not a TTY, `void github connect` never prompts — it fails closed and names any flag it needs. `--branch` is always required. `--project` must be resolvable (positional / `--project` / `VOID_PROJECT` / linked `.void/project.json`). `--installation` is required only when your account has more than one installation; otherwise the sole installation is used. `--repo` is required when the installation grants access to all repos or to more than one selected repo; when it grants exactly one repo that repo is used automatically. Use `void github installations` to discover the `installation_id`.
@@ -648,7 +650,7 @@ Update an existing connection's deploy **branch**, **build executor**, and/or au
 | `--executor <type>` | New build executor: `container` or `github_actions`              |
 | `--workflow <path>` | New authorized deploy workflow file (under `.github/workflows/`) |
 
-Interactively (TTY), `void github update` shows the current branch and executor and prompts for new values, defaulting each to the current setting. `--workflow` is flag-only — it is never prompted for; pass it explicitly to change the authorized workflow file. When stdin is not a TTY, it never prompts: pass at least one of `--branch` / `--executor` / `--workflow`, or it fails closed. If nothing actually changes, the command reports "no changes" and does not call the API.
+Interactively (TTY), `void github update` shows the current branch and executor and prompts for new values, defaulting each to the current setting. If the resulting executor is `github_actions`, it then prompts for the **deploy workflow file**, defaulting to the current path and validated locally; pass `--workflow` to skip that prompt. The workflow prompt is skipped when the executor is `container`, which does not use a workflow file. When stdin is not a TTY, it never prompts: pass at least one of `--branch` / `--executor` / `--workflow`, or it fails closed. If nothing actually changes, the command reports "no changes" and does not call the API.
 
 ```
 void github update my-app --executor github_actions
@@ -656,6 +658,26 @@ void github update my-app --executor github_actions
 
 **Project resolution** follows the same order as deploy: positional / `--project`, `VOID_PROJECT`, linked project (`.void/project.json`).
 
+### `void github status`
+
+```
+void github status [project]
+```
+
+Show a project's current GitHub connection: the connected **repository**, the deploy **branch**, the **build executor** (`container` or `github_actions`), and the authorized **deploy workflow file**. Read-only — it never changes anything. The workflow file is the OIDC pin used only for `github_actions` builds; on a `container` connection it is still shown but marked unused. The project must already be connected (run `void github connect` first, otherwise it reports that and exits).
+
+**Options**
+
+| Flag               | Description                                      |
+| ------------------ | ------------------------------------------------ |
+| `--project <name>` | Project name (alias for the positional argument) |
+
+```
+void github status my-app
+```
+
+**Project resolution** follows the same order as deploy: positional / `--project`, `VOID_PROJECT`, linked project (`.void/project.json`).
+
 ## Build
 
 Inspect Deploy-on-GitHub builds.