void 0.20.0 → 0.20.2

package/dist/help-CwOX-zmI.mjs

@@ -0,0 +1,2216 @@
+import { n as __exportAll } from "./rolldown-runtime-rQ84J-ij.mjs";
+import { o as join } from "./dist-BrsS7cai.mjs";
+import { A as outro, c as import_picocolors, k as note, l as sectionTitle, p as getPackageDir, s as helpLine, t as categoryTitle } from "./output-B0cfNSx5.mjs";
+import { t as OPERATOR_MAX_TIMEOUT_MS } from "./operator-client-LUZnlnYk.mjs";
+import { readFileSync } from "node:fs";
+//#region src/cli/ascii.ts
+const asciiArts = [
+	`
+▄   ▄  ▄▄▄  ▄    ▐▌
+█   █ █   █ ▄    ▐▌
+ ▀▄▀  ▀▄▄▄▀ █ ▗▞▀▜▌
+            █ ▝▚▄▟▌`,
+	`
+                  oo       dP 
+                           88 
+dP   .dP .d8888b. dP .d888b88 
+88   d8' 88'  \`88 88 88'  \`88 
+88 .88'  88.  .88 88 88.  .88 
+8888P'   \`88888P' dP \`88888P8`,
+	`
+              _     __
+ _   ______ (__)___/ /
+| | / / __ \\/ / __  /
+| |/ / /_/ / / /_/ /
+|___/\\____/_/\\__,_/`
+];
+//#endregion
+//#region src/cli/operator-args.ts
+const operatorCommands = [
+	{
+		group: "auth",
+		action: "login",
+		description: "Sign in as a platform administrator",
+		path: "/session",
+		values: { provider: "OAuth provider" },
+		booleans: ["token-stdin"]
+	},
+	{
+		group: "auth",
+		action: "logout",
+		description: "Revoke the current operator session and remove its local credential",
+		path: "/session/logout"
+	},
+	{
+		group: "auth",
+		action: "status",
+		description: "Inspect operator identity, expiry, and capabilities",
+		path: "/session"
+	},
+	{
+		group: "auth",
+		action: "token",
+		description: "Print an operator token; exchange an API session with --token-stdin",
+		path: "/session",
+		booleans: ["token-stdin"]
+	},
+	{
+		group: "user",
+		action: "list",
+		description: "List users",
+		path: "/users",
+		values: { search: "Search login or email" }
+	},
+	{
+		group: "user",
+		action: "show",
+		description: "Inspect a user, usage, and projects",
+		path: "/users/:id",
+		positional: ["id"]
+	},
+	{
+		group: "user",
+		action: "plan",
+		description: "Change a user plan",
+		path: "/users/:id/plan",
+		positional: ["id", "plan"],
+		method: "POST"
+	},
+	{
+		group: "user",
+		action: "suspend",
+		description: "Suspend a user and their projects",
+		path: "/users/:id/suspend",
+		positional: ["id"],
+		values: { reason: "Reason for suspension" },
+		method: "POST"
+	},
+	{
+		group: "user",
+		action: "restore",
+		description: "Restore a suspended user",
+		path: "/users/:id/restore",
+		positional: ["id"],
+		method: "POST"
+	},
+	{
+		group: "user",
+		action: "delete",
+		description: "Delete a user and all owned resources",
+		path: "/users/:id/delete",
+		positional: ["id"],
+		method: "POST"
+	},
+	{
+		group: "project",
+		action: "list",
+		description: "List tenant projects",
+		path: "/projects",
+		values: {
+			user: "Owner user ID",
+			search: "Search projects"
+		}
+	},
+	{
+		group: "project",
+		action: "show",
+		description: "Inspect a project and its resources",
+		path: "/projects/:id",
+		positional: ["id"]
+	},
+	{
+		group: "project",
+		action: "delete",
+		description: "Delete a project and its resources",
+		path: "/projects/:id/delete",
+		positional: ["id"],
+		method: "POST"
+	},
+	{
+		group: "project",
+		action: "owner",
+		description: "Transfer project ownership to another registered user",
+		path: "/projects/:id/owner",
+		positional: ["id", "userId"],
+		method: "POST"
+	},
+	{
+		group: "deployment",
+		action: "list",
+		description: "List tenant deployments",
+		path: "/deployments",
+		values: {
+			project: "Project ID",
+			search: "Search deployments",
+			status: "Deployment status"
+		}
+	},
+	{
+		group: "deployment",
+		action: "show",
+		description: "Inspect a deployment",
+		path: "/deployments/:id",
+		positional: ["id"]
+	},
+	{
+		group: "deployment",
+		action: "cancel",
+		description: "Cancel a deployment",
+		path: "/deployments/:id/cancel",
+		positional: ["id"],
+		method: "POST"
+	},
+	{
+		group: "deployment",
+		action: "logs",
+		description: "Read runtime logs (JSON follow emits one object per line)",
+		path: "/deployments/:id/logs",
+		positional: ["id"],
+		values: {
+			since: "Duration or ISO timestamp",
+			cursor: "Opaque continuation cursor"
+		},
+		booleans: ["follow"]
+	},
+	{
+		group: "build",
+		action: "show",
+		description: "Inspect a managed build",
+		path: "/builds/:id",
+		positional: ["id"]
+	},
+	{
+		group: "build",
+		action: "logs",
+		description: "Read build logs (JSON follow emits one object per line)",
+		path: "/builds/:id/logs",
+		positional: ["id"],
+		values: { since: "Last received sequence number" },
+		booleans: ["follow"]
+	},
+	{
+		group: "signup",
+		action: "show",
+		description: "Inspect signup restrictions and allowlist",
+		path: "/signup"
+	},
+	{
+		group: "signup",
+		action: "restrict",
+		description: "Restrict signup to the allowlist",
+		path: "/signup/restrict",
+		method: "POST"
+	},
+	{
+		group: "signup",
+		action: "open",
+		description: "Open public signup",
+		path: "/signup/open",
+		method: "POST"
+	},
+	{
+		group: "signup",
+		action: "allow",
+		description: "Add a GitHub, email, or exact login identity grant",
+		path: "/signup/allow",
+		positional: ["type", "pattern"],
+		usage: ["void platform signup allow <github|email> <pattern> [options]", "void platform signup allow identity <connection-id> <subject> [options]"],
+		values: { note: "Allowlist note" },
+		method: "POST"
+	},
+	{
+		group: "signup",
+		action: "disallow",
+		description: "Remove a GitHub, email, or exact login identity grant",
+		path: "/signup/disallow",
+		positional: ["type", "pattern"],
+		usage: ["void platform signup disallow <github|email> <pattern> [options]", "void platform signup disallow identity <connection-id> <subject> [options]"],
+		method: "POST"
+	},
+	{
+		group: "signup",
+		action: "remove",
+		description: "Remove a GitHub or email allowlist pattern (compatibility alias)",
+		path: "/signup/remove",
+		positional: ["type", "pattern"],
+		method: "POST"
+	},
+	{
+		group: "invitation",
+		action: "list",
+		description: "List invitations",
+		path: "/invitations"
+	},
+	{
+		group: "invitation",
+		action: "send",
+		description: "Send invitations to comma-separated email addresses",
+		path: "/invitations/send",
+		positional: ["emails"],
+		method: "POST"
+	},
+	{
+		group: "invitation",
+		action: "revoke",
+		description: "Revoke an invitation",
+		path: "/invitations/:id/revoke",
+		positional: ["id"],
+		method: "POST"
+	},
+	{
+		group: "system",
+		action: "overview",
+		description: "Inspect platform usage and capacity",
+		path: "/system/overview"
+	},
+	{
+		group: "system",
+		action: "health",
+		description: "Check platform health",
+		path: "/system/health"
+	},
+	{
+		group: "system",
+		action: "cli-versions",
+		description: "Inspect CLI version adoption and deployment statistics",
+		path: "/system/cli-versions"
+	},
+	{
+		group: "system",
+		action: "events",
+		description: "List operator audit events",
+		path: "/system/events"
+	},
+	{
+		group: "system",
+		action: "backfill-queue-tokens",
+		description: "Repair missing queue authentication tokens",
+		path: "/system/backfill-queue-tokens",
+		method: "POST"
+	},
+	{
+		group: "system",
+		action: "sandbox-drain",
+		description: "Drain and verify managed Sandbox container applications",
+		path: "/system/sandbox-drain",
+		values: { cursor: "Opaque cursor returned by --plan" },
+		method: "POST"
+	},
+	{
+		group: "email",
+		action: "policy",
+		description: "Show the recipient policy for the shared sender",
+		path: "/email/policy"
+	},
+	{
+		group: "email",
+		action: "policy-set",
+		description: "Set the recipient policy: verified, domains, or any",
+		path: "/email/policy",
+		positional: ["mode"],
+		values: { domains: "Comma-separated recipient domains for mode=domains" },
+		method: "POST"
+	},
+	{
+		group: "email",
+		action: "settings",
+		description: "Show platform email settings",
+		path: "/email/settings"
+	},
+	{
+		group: "email",
+		action: "settings-set",
+		description: "Set who manages email domains: self-serve or admin",
+		path: "/email/settings",
+		values: { domains: "self-serve or admin" },
+		method: "POST"
+	},
+	{
+		group: "email",
+		action: "limit",
+		description: "Set a project's monthly and burst recipient submission caps",
+		path: "/email/projects/:project/limit",
+		positional: ["project"],
+		values: {
+			monthly: "Recipient submissions per UTC calendar month",
+			burst: "Recipient submissions per rolling 60-second window"
+		},
+		method: "POST"
+	},
+	{
+		group: "email",
+		action: "logs",
+		description: "Inspect retained email receipt and recipient outcomes for a project",
+		path: "/email/projects/:project/logs",
+		positional: ["project"]
+	},
+	{
+		group: "email",
+		action: "attempts",
+		description: "List unresolved email send attempts awaiting operator reconciliation",
+		path: "/email/attempts",
+		values: { project: "Project id or slug" }
+	},
+	{
+		group: "email",
+		action: "attempt-resolve",
+		description: "Resolve a stopped send as outcome unknown and release its cleanup fence",
+		path: "/email/attempts/:id/resolve",
+		positional: ["id"],
+		values: { reason: "Audit reason without recipient or message content" },
+		booleans: ["ended"],
+		method: "POST"
+	},
+	{
+		group: "email",
+		action: "operation-resolve",
+		description: "Resolve an ended ambiguous email setup write with operator attestation",
+		path: "/email/operations/:id/resolve",
+		positional: ["id"],
+		values: {
+			outcome: "Provider outcome: applied or not-applied",
+			reason: "Audit reason for the verified provider outcome"
+		},
+		booleans: ["ended"],
+		method: "POST"
+	},
+	{
+		group: "email",
+		action: "domains",
+		description: "List email domains registered on this platform",
+		path: "/email/domains",
+		values: { project: "Project id or slug" }
+	},
+	{
+		group: "email",
+		action: "domain-add",
+		description: "Register an email domain for a project with the platform credential",
+		path: "/email/domains",
+		positional: ["domain"],
+		values: { project: "Project id or slug" },
+		booleans: ["token-stdin"],
+		method: "POST"
+	},
+	{
+		group: "email",
+		action: "domain-status",
+		description: "Inspect an email domain's setup, credential and relay",
+		path: "/email/domains/:domain",
+		positional: ["domain"]
+	},
+	{
+		group: "email",
+		action: "domain-sync",
+		description: "Reconcile an email domain with its Cloudflare setup",
+		path: "/email/domains/:domain/sync",
+		positional: ["domain"],
+		method: "POST"
+	},
+	{
+		group: "email",
+		action: "domain-rotate-secret",
+		description: "Rotate an email domain's ingress secret",
+		path: "/email/domains/:domain/rotate-secret",
+		positional: ["domain"],
+		method: "POST"
+	},
+	{
+		group: "email",
+		action: "domain-remove",
+		description: "Remove an email domain and its Cloudflare setup",
+		path: "/email/domains/:domain/remove",
+		positional: ["domain"],
+		booleans: ["token-stdin"],
+		method: "POST"
+	},
+	{
+		group: "worker",
+		action: "list",
+		description: "List hosted platform workers",
+		path: "/workers",
+		values: { environment: "production or staging" }
+	},
+	{
+		group: "worker",
+		action: "show",
+		description: "Inspect hosted worker versions",
+		path: "/workers/:id",
+		positional: ["id"],
+		values: { environment: "production or staging" }
+	},
+	{
+		group: "worker",
+		action: "rollback",
+		description: "Roll back a hosted worker to a version",
+		path: "/workers/:id/rollback",
+		positional: ["id", "versionId"],
+		values: { environment: "production or staging" },
+		method: "POST"
+	},
+	{
+		group: "worker",
+		action: "rollback-all",
+		description: "Roll back all hosted workers to their previous versions",
+		path: "/workers/rollback-all",
+		values: { environment: "production or staging" },
+		method: "POST"
+	},
+	{
+		group: "worker",
+		action: "events",
+		description: "List hosted worker events or inspect a batch",
+		path: "/workers/events",
+		positional: ["batchId"],
+		optionalPositional: true,
+		values: { environment: "production or staging" }
+	}
+];
+const operatorGroups = [...new Set(operatorCommands.map(({ group }) => group))];
+function parseOperatorArgs(args) {
+	const positional = [];
+	const values = {};
+	const flags = /* @__PURE__ */ new Set();
+	const booleanFlags = /* @__PURE__ */ new Set([
+		"json",
+		"plan",
+		"yes",
+		"follow",
+		"token-stdin",
+		"force",
+		"ended"
+	]);
+	for (let index = 0; index < args.length; index++) {
+		const arg = args[index];
+		if (!arg.startsWith("-")) {
+			positional.push(arg);
+			continue;
+		}
+		if (!arg.startsWith("--")) throw new Error(`platform: Unknown flag '${arg}'.`);
+		const flag = arg.slice(2);
+		if (flags.has(flag) || Object.hasOwn(values, flag)) throw new Error(`platform: Duplicate flag '${arg}'.`);
+		if (booleanFlags.has(flag)) flags.add(flag);
+		else {
+			const value = args[++index];
+			if (!value || value.startsWith("-")) throw new Error(`platform: ${arg} requires a value.`);
+			values[flag] = value;
+		}
+	}
+	const [group = "", action = "", ...parameters] = positional;
+	if (!operatorGroups.includes(group)) throw new Error("platform: Unknown operator command group.");
+	const parsed = {
+		subcommand: "operator",
+		group,
+		action,
+		connection: values.connection ?? "",
+		json: flags.has("json"),
+		plan: flags.has("plan"),
+		yes: flags.has("yes"),
+		follow: flags.has("follow"),
+		tokenStdin: flags.has("token-stdin"),
+		provider: values.provider ?? "github",
+		...values.provider ? { providerExplicit: true } : {},
+		method: "GET",
+		path: "",
+		query: {},
+		body: {}
+	};
+	if (!action && args.length === 1) return parsed;
+	const command = operatorCommands.find((entry) => entry.group === group && entry.action === action);
+	if (!command) throw new Error(`platform: Usage: void platform ${group} <${operatorCommands.filter((entry) => entry.group === group).map(({ action }) => action).join("|")}>.`);
+	const count = command.positional?.length ?? 0;
+	const identitySignupEntry = group === "signup" && ["allow", "disallow"].includes(action) && parameters[0] === "identity";
+	if (group === "signup" && action === "remove" && parameters[0] === "identity") throw new Error("platform: Use `void platform signup disallow identity <connection-id> <subject>`.");
+	const expectedCount = identitySignupEntry ? 3 : count;
+	if (parameters.length > expectedCount || !command.optionalPositional && parameters.length !== expectedCount) throw new Error(`platform: Usage: ${command.usage?.[identitySignupEntry ? 1 : 0]?.replace(/ \[options\]$/, "") ?? `void platform ${group} ${action}${command.positional?.map((name) => ` <${name}>`).join("") ?? ""}`}.`);
+	const paged = action === "list" || action === "events" || action === "logs" || action === "attempts";
+	const allowed = /* @__PURE__ */ new Set([
+		"connection",
+		...command.method ? ["timeout"] : [],
+		...Object.keys(command.values ?? {}),
+		...paged ? ["limit", ...action !== "logs" || group === "email" ? ["page"] : []] : []
+	]);
+	for (const name of Object.keys(values)) if (!allowed.has(name)) throw new Error(`platform: Unknown flag '--${name}' for ${group} ${action}.`);
+	for (const name of flags) if (![
+		"json",
+		...command.method ? ["yes", "plan"] : [],
+		...command.booleans ?? []
+	].includes(name)) throw new Error(`platform: Unknown flag '--${name}' for ${group} ${action}.`);
+	if (parsed.plan && parsed.yes) throw new Error("platform: --plan and --yes cannot be combined.");
+	parsed.path = command.path;
+	parsed.method = command.method ?? "GET";
+	if (identitySignupEntry) {
+		const connectionId = parameters[1];
+		const subject = parameters[2];
+		if (!/^[a-z][a-z0-9-]{0,63}$/.test(connectionId)) throw new Error("platform: Invalid login connection ID.");
+		if (!subject || subject.length > 255) throw new Error("platform: Identity subject must be 1–255 characters.");
+		parsed.body = {
+			type: "identity",
+			connectionId,
+			subject
+		};
+	} else for (const [index, name] of (command.positional ?? []).entries()) {
+		const value = parameters[index];
+		if (value === void 0) continue;
+		if (value === "." || value === "..") throw new Error("platform: An object ID cannot be a dot path segment.");
+		if (parsed.path.includes(`:${name}`)) parsed.path = parsed.path.replace(`:${name}`, encodeURIComponent(value));
+		else if (group === "worker" && action === "events") parsed.path += `/${encodeURIComponent(value)}`;
+		else parsed.body[name] = name === "emails" ? value.split(",").map((email) => email.trim()) : value;
+	}
+	for (const [name, value] of Object.entries(values)) {
+		if (name === "connection" || name === "provider") continue;
+		if (name === "timeout") {
+			const maximum = OPERATOR_MAX_TIMEOUT_MS / 1e3;
+			if (!/^[1-9]\d*$/.test(value) || Number(value) > maximum) throw new Error(`platform: --timeout must be an integer from 1 to ${maximum} seconds.`);
+			parsed.timeoutMs = Number(value) * 1e3;
+			continue;
+		}
+		if (name === "page" || name === "limit") {
+			const maximum = name === "limit" ? action === "logs" && group !== "email" ? 500 : 100 : 1e6;
+			if (!/^[1-9]\d*$/.test(value) || Number(value) > maximum) throw new Error(`platform: --${name} must be an integer from 1 to ${maximum}.`);
+		}
+		if (name === "since" && group === "build" && (!/^\d+$/.test(value) || !Number.isSafeInteger(Number(value)))) throw new Error("platform: --since must be a nonnegative safe integer for build logs.");
+		if (name === "environment" && !["production", "staging"].includes(value)) throw new Error("platform: --environment must be production or staging.");
+		if (parsed.method === "POST") parsed.body[name] = value;
+		else parsed.query[name] = value;
+	}
+	if (parsed.body.type && ![
+		"github",
+		"email",
+		"identity"
+	].includes(String(parsed.body.type))) throw new Error("platform: Signup grant type must be github, email, or identity.");
+	for (const name of command.booleans ?? []) if (name !== "token-stdin" && flags.has(name)) parsed.body[name] = true;
+	return parsed;
+}
+//#endregion
+//#region src/cli/help.ts
+var help_exports = /* @__PURE__ */ __exportAll({
+	getHelpPath: () => getHelpPath,
+	printGlobalHelp: () => printGlobalHelp,
+	printHelpPage: () => printHelpPage,
+	printVoidHeader: () => printVoidHeader
+});
+function operatorHelpTree() {
+	return Object.fromEntries(operatorGroups.map((group) => {
+		const commands = operatorCommands.filter((entry) => entry.group === group);
+		return [group, {
+			summary: `Administer platform ${group}. Operator credentials are separate from deployment credentials.`,
+			usage: [`void platform ${group} <command> [options]`],
+			commands: commands.map((entry) => ({
+				command: entry.action,
+				description: entry.description
+			})),
+			children: Object.fromEntries(commands.map((entry) => [entry.action, {
+				summary: `${entry.description}.`,
+				usage: entry.usage ?? [`void platform ${group} ${entry.action}${entry.positional?.map((name) => entry.optionalPositional ? ` [${name}]` : ` <${name}>`).join("") ?? ""} [options]`],
+				options: [
+					{
+						command: "--connection <id-or-url>",
+						description: "Choose a registered connection; otherwise use VOID_API_URL or the active connection"
+					},
+					{
+						command: "--json",
+						description: "Write structured JSON to stdout (JSON Lines while following logs)"
+					},
+					...entry.method ? [
+						{
+							command: "--plan",
+							description: "Validate and preview without changing anything"
+						},
+						{
+							command: "--yes",
+							description: "Apply after preview without prompting; required in unattended scripts"
+						},
+						{
+							command: "--timeout <seconds>",
+							description: "Mutation deadline (default 300 seconds; maximum 3600 seconds)"
+						}
+					] : [],
+					...[
+						"list",
+						"events",
+						"logs",
+						"attempts"
+					].includes(entry.action) ? [{
+						command: "--limit <number>",
+						description: entry.action === "logs" && group !== "email" ? "Maximum 500 log records" : "Maximum 100 records per page"
+					}, ...entry.action !== "logs" || group === "email" ? [{
+						command: "--page <number>",
+						description: "One-based page number"
+					}] : []] : [],
+					...Object.entries(entry.values ?? {}).map(([flag, description]) => ({
+						command: `--${flag} <value>`,
+						description
+					})),
+					...(entry.booleans ?? []).map((flag) => ({
+						command: `--${flag}`,
+						description: flag === "follow" ? "Poll new logs until interrupted or the build ends" : flag === "ended" ? "Attest that the original provider execution has ended" : flag === "token-stdin" && group === "email" ? entry.action === "domain-remove" ? "Read a replacement Cloudflare token for blocked project cleanup from stdin" : "Read a scoped Cloudflare API token from stdin" : "Read a full API session from stdin for explicit operator session exchange"
+					}))
+				]
+			}]))
+		}];
+	}));
+}
+const HELP_TREE = {
+	connect: {
+		summary: "Connect this project to Cloudflare or an existing Void platform.",
+		usage: ["void connect [url] [--platform <cloudflare|void>] [--no-login]"],
+		options: [{
+			command: "--platform <cloudflare|void>",
+			description: "Choose the deployment destination"
+		}, {
+			command: "--no-login",
+			description: "Save a Void connection without authenticating"
+		}],
+		examples: [
+			{
+				command: "void connect",
+				description: "Choose a destination and sign in"
+			},
+			{
+				command: "void connect https://platform.example.com",
+				description: "Join a Void platform"
+			},
+			{
+				command: "void connect --platform cloudflare",
+				description: "Sign in and select a Cloudflare account"
+			}
+		]
+	},
+	init: {
+		summary: "Set up Void in a new or existing project.",
+		usage: ["void init [options]"],
+		options: [
+			{
+				command: "--agents",
+				description: "Set up agent instructions and skills"
+			},
+			{
+				command: "--tsconfig",
+				description: "Only update tsconfig.json"
+			},
+			{
+				command: "--git",
+				description: "Initialize a Git repository without prompting"
+			},
+			{
+				command: "--no-git",
+				description: "Skip Git repository initialization"
+			},
+			{
+				command: "--github",
+				description: "Only create the GitHub Actions deploy workflow (OIDC, no stored token)"
+			}
+		],
+		examples: [
+			{
+				command: "void init",
+				description: "Scaffold or configure the current project"
+			},
+			{
+				command: "void init --agents",
+				description: "Install agent instructions and skills"
+			},
+			{
+				command: "void init --github",
+				description: "Scaffold the GitHub Actions deploy workflow"
+			}
+		]
+	},
+	deploy: {
+		summary: "Build and deploy. Offers to link an existing Cloudflare Worker when no destination is configured.",
+		usage: ["void deploy [options]"],
+		options: [
+			{
+				command: "--project <name>",
+				description: "Deploy target project name"
+			},
+			{
+				command: "--dir <path>",
+				description: "Deploy a static directory and skip build"
+			},
+			{
+				command: "--spa",
+				description: "Use SPA mode for static deploys"
+			},
+			{
+				command: "--skip-build",
+				description: "Skip the build step and use existing output (static deploys on Cloudflare)"
+			},
+			{
+				command: "--platform <cloudflare|void>",
+				description: "Override the platform saved by void init"
+			},
+			{
+				command: "--require-email",
+				description: "Fail instead of deploying without email when the mail domain is not set up (with --platform cloudflare)"
+			},
+			{
+				command: "--debug",
+				description: "Mirror the deploy log to stderr (always written to ~/.void/logs)"
+			}
+		],
+		examples: [
+			{
+				command: "void deploy",
+				description: "Deploy the linked project"
+			},
+			{
+				command: "void deploy --project my-app",
+				description: "Deploy to a specific project"
+			},
+			{
+				command: "void deploy --dir dist --spa",
+				description: "Deploy a static SPA directory"
+			},
+			{
+				command: "void deploy --platform cloudflare",
+				description: "Deploy to your own Cloudflare account"
+			}
+		]
+	},
+	auth: {
+		summary: "Log in, link login methods, log out, and inspect local auth state.",
+		usage: ["void auth <command>"],
+		commands: [
+			{
+				command: "login",
+				description: "Log in with an enabled platform login method"
+			},
+			{
+				command: "link [connection-id]",
+				description: "Link another login method to your account"
+			},
+			{
+				command: "logout",
+				description: "Log out and remove credentials"
+			},
+			{
+				command: "whoami",
+				description: "Show the logged-in username"
+			},
+			{
+				command: "token",
+				description: "Copy auth token to clipboard"
+			}
+		],
+		children: {
+			login: basicSubcommand("Log in with an enabled platform login method.", "void auth login"),
+			link: basicSubcommand("Sign in again, then verify and link another login method to your existing account.", "void auth link [connection-id]"),
+			logout: basicSubcommand("Log out and remove credentials.", "void auth logout"),
+			whoami: basicSubcommand("Show the logged-in username.", "void auth whoami"),
+			token: basicSubcommand("Copy auth token to clipboard.", "void auth token")
+		}
+	},
+	cloudflare: {
+		summary: "Manage Cloudflare authentication used by Void.",
+		usage: ["void cloudflare <command>"],
+		commands: [
+			{
+				command: "login",
+				description: "Sign in or switch users with browser OAuth"
+			},
+			{
+				command: "status",
+				description: "Show identity, authentication, and the deployment account"
+			},
+			{
+				command: "logout",
+				description: "Remove the local browser session"
+			}
+		],
+		children: {
+			login: basicSubcommand("Sign in again or switch Cloudflare users with browser OAuth.", "void cloudflare login"),
+			status: basicSubcommand("Show Cloudflare identity, authentication, accessible accounts, and the pinned deployment account.", "void cloudflare status"),
+			logout: basicSubcommand("Remove the local browser session.", "void cloudflare logout")
+		}
+	},
+	platform: {
+		summary: "Install Void platforms and administer users, projects, access, and operations. Use `void connect` to join one.",
+		usage: ["void platform <command>"],
+		commands: [
+			...operatorGroups.map((group) => ({
+				command: `${group} <command>`,
+				description: `Administer platform ${group}`
+			})),
+			{
+				command: "config auth [command]",
+				description: "Configure login methods, company protection, and provider recovery"
+			},
+			{
+				command: "list",
+				description: "List installed and connected platforms"
+			},
+			{
+				command: "use [id]",
+				description: "Select the default Void platform"
+			},
+			{
+				command: "status [id]",
+				description: "Inspect a platform and its health"
+			},
+			{
+				command: "discover",
+				description: "Recover installations from a Cloudflare account"
+			},
+			{
+				command: "domain set <domain>",
+				description: "Add an application domain to a test platform"
+			},
+			{
+				command: "install",
+				description: "Install a Void platform in Cloudflare"
+			},
+			{
+				command: "upgrade [id]",
+				description: "Upgrade an installed Void platform"
+			},
+			{
+				command: "rollback [id]",
+				description: "Restore a compatible earlier platform runtime"
+			},
+			{
+				command: "repair [id]",
+				description: "Reconcile an installed Void platform"
+			},
+			{
+				command: "disable [id]",
+				description: "Disable traffic without deleting data"
+			},
+			{
+				command: "enable [id]",
+				description: "Restore traffic for a disabled platform"
+			},
+			{
+				command: "uninstall [id]",
+				description: "Safely remove an installed Void platform"
+			}
+		],
+		children: {
+			...operatorHelpTree(),
+			config: {
+				summary: "Configure platform settings.",
+				usage: ["void platform config auth [command] [options]"],
+				children: { auth: {
+					summary: "Manage login methods and independent platform protection. Without a command, opens interactive configuration.",
+					usage: ["void platform config auth [list|show|initialize|add|configure|test|enable|disable|link|admission|protection|recover] [method-or-action] [options]"],
+					commands: [
+						{
+							command: "list",
+							description: "List configured login methods and platform protection"
+						},
+						{
+							command: "show <id>",
+							description: "Inspect a login method without displaying secrets"
+						},
+						{
+							command: "initialize",
+							description: "Import existing login settings before first configuration"
+						},
+						{
+							command: "add <github|google|oidc|cloudflare-access>",
+							description: "Configure a new login method"
+						},
+						{
+							command: "configure <id>",
+							description: "Stage an update to a login method"
+						},
+						{
+							command: "test <id>",
+							description: "Verify a login configuration in the browser"
+						},
+						{
+							command: "enable <id>",
+							description: "Enable a successfully tested configuration"
+						},
+						{
+							command: "disable <id>",
+							description: "Disable a method and revoke its human sessions"
+						},
+						{
+							command: "link <id>",
+							description: "Explicitly link a tested identity to your account"
+						},
+						{
+							command: "admission",
+							description: "Choose invited, company-approved, or public signup"
+						},
+						{
+							command: "protection <enable|disable|show>",
+							description: "Create or connect Access protection independently from login"
+						},
+						{
+							command: "recover <id>",
+							description: "Recover an existing administrator using installation authority"
+						}
+					],
+					options: [
+						{
+							command: "--connection <id-or-url>",
+							description: "Select a registered platform"
+						},
+						{
+							command: "--installation <id>",
+							description: "Select recovery authority for protection or provider recovery"
+						},
+						{
+							command: "--id <id>",
+							description: "Name a new OIDC or Access connection"
+						},
+						{
+							command: "--file <path>",
+							description: "Read nonsecret configuration from JSON"
+						},
+						{
+							command: "--client-secret-env <name>",
+							description: "Read the client secret from an environment variable"
+						},
+						{
+							command: "--test-id <id>",
+							description: "Use a completed test for enable or link"
+						},
+						{
+							command: "--plan",
+							description: "Validate and preview a change"
+						},
+						{
+							command: "--yes",
+							description: "Apply without prompting"
+						},
+						{
+							command: "--json",
+							description: "Print structured output"
+						}
+					]
+				} }
+			},
+			domain: {
+				summary: "Add an application domain while keeping existing workers.dev URLs.",
+				usage: ["void platform domain set <domain> [options]"],
+				children: { set: {
+					summary: "Set up DNS and verify HTTPS before making an application domain canonical. Rerun to resume.",
+					usage: ["void platform domain set <domain> [options]"],
+					options: [
+						{
+							command: "--installation <id>",
+							description: "Choose an installed platform; otherwise select interactively"
+						},
+						{
+							command: "--zone <domain>",
+							description: "Containing Cloudflare zone; detected when it already exists"
+						},
+						{
+							command: "--dedicated-zone",
+							description: "Add catch-all routes for a zone dedicated to this platform"
+						},
+						{
+							command: "--plan",
+							description: "Preview without making changes"
+						},
+						{
+							command: "--yes",
+							description: "Apply without an interactive confirmation"
+						}
+					]
+				} }
+			},
+			list: basicSubcommand("List installed and connected platforms.", "void platform list"),
+			use: basicSubcommand("Select the default Void platform.", "void platform use [id]"),
+			status: basicSubcommand("Inspect a platform and its health.", "void platform status [id]"),
+			discover: {
+				summary: "Recover owned platform installations from Cloudflare.",
+				usage: ["void platform discover [--account <id>] [--installation <id-or-name>]"],
+				options: [{
+					command: "--account <id>",
+					description: "Cloudflare account id"
+				}, {
+					command: "--installation <id-or-name>",
+					description: "Recover only one installation from a shared account"
+				}]
+			},
+			install: {
+				summary: "Install or resume a Void platform with a domain, or workers.dev for testing.",
+				usage: ["void platform install [options]"],
+				options: [
+					{
+						command: "--auth-config <path>",
+						description: "Read login methods and signup policy from nonsecret JSON with environment secret references"
+					},
+					{
+						command: "--name <slug>",
+						description: "Installation name"
+					},
+					{
+						command: "--workers-dev",
+						description: "Use workers.dev for testing; add a domain later"
+					},
+					{
+						command: "--display-name <name>",
+						description: "Human-readable platform name"
+					},
+					{
+						command: "--account <id>",
+						description: "Cloudflare account id"
+					},
+					{
+						command: "--application-domain <domain>",
+						description: "Base domain for applications (zone apex is simplest)"
+					},
+					{
+						command: "--zone <domain>",
+						description: "Cloudflare zone containing the app domain"
+					},
+					{
+						command: "--dedicated-zone",
+						description: "Allow zone-wide application catch-all routes"
+					},
+					{
+						command: "--control-plane-domain <domain>",
+						description: "Optional API hostname"
+					},
+					{
+						command: "--plan",
+						description: "Print the exact plan without changing Cloudflare"
+					},
+					{
+						command: "--resume",
+						description: "Resume the matching local installation"
+					},
+					{
+						command: "--runtime <path>",
+						description: "Deploy an integrity-checked runtime directory instead of the package"
+					},
+					{
+						command: "--yes",
+						description: "Acknowledge changes without an interactive prompt"
+					}
+				]
+			},
+			upgrade: lifecycleHelp("upgrade", "Upgrade an installed platform without deleting resources."),
+			rollback: {
+				summary: "Restore a compatible earlier runtime without reversing database migrations.",
+				usage: ["void platform rollback [id] --runtime <earlier-path> [--from-runtime <current-path>] [--plan] [--yes]"],
+				options: [
+					{
+						command: "--runtime <path>",
+						description: "Earlier compatible runtime to restore"
+					},
+					{
+						command: "--from-runtime <path>",
+						description: "Current installed runtime when it differs from the packaged runtime"
+					},
+					{
+						command: "--plan",
+						description: "Print the exact plan without making changes"
+					},
+					{
+						command: "--yes",
+						description: "Acknowledge non-interactive Cloudflare changes"
+					}
+				]
+			},
+			repair: lifecycleHelp("repair", "Reconcile drift using the installation ownership manifest."),
+			disable: lifecycleHelp("disable", "Disable platform traffic without deleting data."),
+			enable: lifecycleHelp("enable", "Restore configured traffic for a disabled platform."),
+			uninstall: {
+				summary: "Safely remove installer-owned platform resources.",
+				usage: ["void platform uninstall [id] [options]"],
+				options: [
+					{
+						command: "--plan",
+						description: "Print the exact deletion and retention plan"
+					},
+					{
+						command: "--yes",
+						description: "Acknowledge changes without an interactive prompt"
+					},
+					{
+						command: "--purge-data",
+						description: "Delete installer-owned data even when it contains apps"
+					},
+					{
+						command: "--keep-zone",
+						description: "Explicitly retain an installer-created zone"
+					}
+				]
+			}
+		}
+	},
+	project: {
+		summary: "Manage Void projects and deployments.",
+		usage: ["void project <command>"],
+		commands: [
+			{
+				command: "status [name]",
+				description: "Show deployments for a project"
+			},
+			{
+				command: "link [name]",
+				description: "Link this directory to a project"
+			},
+			{
+				command: "list",
+				description: "List your projects"
+			},
+			{
+				command: "token <command>",
+				description: "Manage project-scoped CI deploy credentials"
+			},
+			{
+				command: "team <command>",
+				description: "Manage members and project invitations"
+			},
+			{
+				command: "logs",
+				description: "Show runtime logs from the deployed project"
+			},
+			{
+				command: "requests",
+				description: "Show request-level traffic (status, method, timing)"
+			},
+			{
+				command: "rollback [deployId]",
+				description: "Roll back to a previous deployment"
+			},
+			{
+				command: "cancel [deployId]",
+				description: "Cancel an active deployment"
+			},
+			{
+				command: "delete [name]",
+				description: "Delete a project and all its resources"
+			},
+			{
+				command: "purge-cache",
+				description: "Purge all cached pages"
+			}
+		],
+		children: {
+			status: basicSubcommand("Show deployments for a project.", "void project status [name]", "void project status my-app"),
+			link: basicSubcommand("Link this directory to a Void project.", "void project link [name]", "void project link my-app"),
+			list: basicSubcommand("List your projects.", "void project list"),
+			token: {
+				summary: "Manage revocable, project-scoped credentials for CI deploys.",
+				usage: ["void project token <create|list|renew|revoke> [options]"],
+				options: [
+					{
+						command: "--project <name>",
+						description: "Project name override"
+					},
+					{
+						command: "--name <label>",
+						description: "Credential label (create only)"
+					},
+					{
+						command: "--expires-in <days>",
+						description: "Expiry from 1 to 90 days"
+					},
+					{
+						command: "--json",
+						description: "Print machine-readable output"
+					}
+				],
+				examples: [{
+					command: "void project token create --name github-actions --expires-in 30",
+					description: "Create a CI deploy credential"
+				}, {
+					command: "void project token revoke <id>",
+					description: "Revoke a credential now"
+				}]
+			},
+			team: {
+				summary: "Manage members and invitations for Void platform projects.",
+				usage: ["void project team <command>"],
+				commands: [
+					{
+						command: "list",
+						description: "List project members and roles"
+					},
+					{
+						command: "invite <email>",
+						description: "Invite a registered user by email"
+					},
+					{
+						command: "invitations",
+						description: "List invitations sent for a project"
+					},
+					{
+						command: "role <user-id> <role>",
+						description: "Change a member's role"
+					},
+					{
+						command: "remove <user-id>",
+						description: "Remove a project member"
+					},
+					{
+						command: "revoke <invitation-id>",
+						description: "Revoke a project invitation"
+					},
+					{
+						command: "leave",
+						description: "Leave a shared project"
+					},
+					{
+						command: "pending",
+						description: "List invitations awaiting your response"
+					},
+					{
+						command: "accept <invitation-id>",
+						description: "Accept your invitation"
+					},
+					{
+						command: "decline <invitation-id>",
+						description: "Decline your invitation"
+					}
+				],
+				children: {
+					list: withProjectOption("List project members and roles.", "void project team list [options]"),
+					invite: {
+						summary: "Invite an existing Void platform user by registered email address.",
+						usage: ["void project team invite <email> --role <role> [options]"],
+						options: [{
+							command: "--role <role>",
+							description: "reader, collaborator, or admin"
+						}, {
+							command: "--project <name>",
+							description: "Project name override"
+						}]
+					},
+					invitations: withProjectOption("List invitations sent for a project.", "void project team invitations [options]"),
+					role: withProjectOption("Change a member's role to reader, collaborator, or admin.", "void project team role <user-id> <role> [options]"),
+					remove: withProjectOption("Remove a member from the project.", "void project team remove <user-id> [options]"),
+					revoke: withProjectOption("Revoke a pending project invitation.", "void project team revoke <invitation-id> [options]"),
+					leave: withProjectOption("Leave a shared project.", "void project team leave [options]"),
+					pending: basicSubcommand("List invitations on the active platform connection (VOID_API_URL overrides it).", "void project team pending"),
+					accept: basicSubcommand("Accept your invitation on the active platform connection, preserving project links.", "void project team accept <invitation-id>"),
+					decline: basicSubcommand("Decline your invitation on the active platform connection (VOID_API_URL overrides it).", "void project team decline <invitation-id>")
+				}
+			},
+			logs: {
+				summary: "Show runtime logs from the deployed project.",
+				usage: ["void project logs [options]"],
+				options: [
+					{
+						command: "--filter <text>",
+						description: "Substring search over log messages"
+					},
+					{
+						command: "--level <level>",
+						description: "Filter by level: error|warn|info|log|debug|all (default: all)"
+					},
+					{
+						command: "--range <range>",
+						description: "Time range to query (default: 1h)"
+					},
+					{
+						command: "--deployment <id>",
+						description: "Limit logs to one deployment"
+					}
+				],
+				examples: [
+					{
+						command: "void project logs --range 30m",
+						description: "Show recent project logs"
+					},
+					{
+						command: "void project logs --level error",
+						description: "Show only error-level entries and exceptions"
+					},
+					{
+						command: "void project logs --filter websocket",
+						description: "Substring search over log messages"
+					}
+				]
+			},
+			requests: {
+				summary: "Show request-level traffic (status, method, type, timing). Surfaces 5xx that the edge router generated itself and requests to static/SPA projects that never invoke a worker — neither of which appears in `project logs`.",
+				usage: ["void project requests [options]"],
+				options: [{
+					command: "--status <filter>",
+					description: "Filter by status: a class like 5xx or an exact code like 500"
+				}, {
+					command: "--range <range>",
+					description: "Time range to query (default: 1h)"
+				}],
+				examples: [{
+					command: "void project requests --status 5xx",
+					description: "Show recent server-error responses, including edge-generated ones"
+				}, {
+					command: "void project requests --range 24h",
+					description: "Show all request traffic in the last day"
+				}]
+			},
+			rollback: basicSubcommand("Roll back to a previous deployment.", "void project rollback [deployId]"),
+			cancel: basicSubcommand("Cancel an active deployment.", "void project cancel [deployId]"),
+			delete: {
+				summary: "Delete a project and all its resources.",
+				usage: ["void project delete [name] [options]"],
+				options: [{
+					command: "--force, -f",
+					description: "Delete without confirmation"
+				}],
+				examples: [{
+					command: "void project delete my-app",
+					description: "Delete a project"
+				}]
+			},
+			"purge-cache": {
+				summary: "Purge all cached pages for a project.",
+				usage: ["void project purge-cache [options]"],
+				options: [{
+					command: "--project <name>",
+					description: "Project name override"
+				}]
+			}
+		}
+	},
+	secret: {
+		summary: "Manage production secrets for Void projects.",
+		usage: ["void secret <command>"],
+		commands: [
+			{
+				command: "list",
+				description: "List project secrets"
+			},
+			{
+				command: "put <name>",
+				description: "Set a project secret"
+			},
+			{
+				command: "delete <name>",
+				description: "Delete a project secret"
+			},
+			{
+				command: "sync <file>",
+				description: "Sync secrets from a dotenv file"
+			}
+		],
+		children: {
+			list: withProjectOption("List project secrets.", "void secret list [options]"),
+			put: withProjectOption("Set a project secret.", "void secret put <name> [options]"),
+			delete: withProjectOption("Delete a project secret.", "void secret delete <name> [options]"),
+			sync: withProjectOption("Sync secrets from a dotenv file.", "void secret sync <file> [options]")
+		}
+	},
+	domain: {
+		summary: "Configure custom domains for Void projects.",
+		usage: ["void domain <command>"],
+		commands: [
+			{
+				command: "add <hostname>",
+				description: "Add a custom domain"
+			},
+			{
+				command: "delete <hostname>",
+				description: "Remove a custom domain"
+			},
+			{
+				command: "list",
+				description: "List custom domains and status"
+			},
+			{
+				command: "status <hostname>",
+				description: "Check domain verification status"
+			}
+		],
+		children: {
+			add: withProjectOption("Add a custom domain.", "void domain add <hostname> [options]"),
+			delete: withProjectOption("Remove a custom domain.", "void domain delete <hostname> [options]"),
+			list: withProjectOption("List custom domains and status.", "void domain list [options]"),
+			status: {
+				summary: "Check domain verification status. Prints a rolled-up state with a one-line diagnostic.",
+				usage: ["void domain status <hostname> [options]"],
+				options: [{
+					command: "--project <name>",
+					description: "Project name override"
+				}, {
+					command: "--verbose",
+					description: "Also print the raw multi-line status breakdown"
+				}]
+			}
+		}
+	},
+	email: {
+		summary: "Inspect email activity, manage verified recipients, and send and receive at your own domain.",
+		usage: ["void email <command>"],
+		commands: [
+			{
+				command: "usage",
+				description: "Show monthly outbound/inbound counts and quota"
+			},
+			{
+				command: "logs",
+				description: "Show recent email delivery activity"
+			},
+			{
+				command: "destinations",
+				description: "List verified recipient addresses"
+			},
+			{
+				command: "allow <address>",
+				description: "Add a recipient and trigger CF verification"
+			},
+			{
+				command: "disallow <address>",
+				description: "Remove a recipient from the allowlist"
+			},
+			{
+				command: "domain <add|status|list|sync|rotate-secret|remove>",
+				description: "Send and receive at your own domain on a Cloudflare zone"
+			},
+			{
+				command: "status --platform cloudflare",
+				description: "Show the email setup state and address map on your own account"
+			},
+			{
+				command: "setup --platform cloudflare",
+				description: "Set email up on your own Cloudflare account (one confirmation)"
+			}
+		],
+		children: {
+			usage: withProjectOption("Show monthly outbound/inbound counts and quota.", "void email usage [options]"),
+			logs: {
+				summary: "Show recent email delivery activity.",
+				usage: ["void email logs [options]"],
+				options: [{
+					command: "--project <name>",
+					description: "Project name override"
+				}, {
+					command: "--limit <n>",
+					description: "How many entries to show (positive integer)"
+				}]
+			},
+			destinations: withProjectOption("List verified recipient addresses.", "void email destinations [options]"),
+			allow: withProjectOption("Add a recipient and trigger a Cloudflare verification email.", "void email allow <address> [options]"),
+			disallow: withProjectOption("Remove a recipient from the verified allowlist.", "void email disallow <address> [options]"),
+			domain: {
+				summary: "Send and receive at your own domain on a Cloudflare zone.",
+				usage: ["void email domain <verb> [<domain>] [options]"],
+				commands: [
+					{
+						command: "add <domain>",
+						description: "Register the domain with a scoped Cloudflare API token"
+					},
+					{
+						command: "status <domain>",
+						description: "Show inbound, outbound, management, and operation readiness"
+					},
+					{
+						command: "list",
+						description: "List registered email domains"
+					},
+					{
+						command: "rotate-secret <domain>",
+						description: "Rotate the shared zone ingress secret with a deployment probe"
+					},
+					{
+						command: "sync <domain>",
+						description: "Reconcile the zone connection and refresh readiness"
+					},
+					{
+						command: "remove <domain>",
+						description: "Disable the domain assignment and reconcile shared resources"
+					}
+				],
+				options: [{
+					command: "--subdomain <label|host>",
+					description: "On add: register this subdomain instead of the proposed mail.<domain>"
+				}, {
+					command: "--project <name>",
+					description: "Project name override"
+				}],
+				children: {
+					add: {
+						summary: "Register a domain on a Cloudflare zone you own for sending and receiving. Proposes mail.<domain> when the apex already carries MX.",
+						usage: ["void email domain add <domain> [options]"],
+						options: [{
+							command: "--subdomain <label|host>",
+							description: "Register this subdomain instead of the proposed mail.<domain>"
+						}, {
+							command: "--project <name>",
+							description: "Project name override"
+						}]
+					},
+					status: withProjectOption("Show a registered domain and its recorded readiness.", "void email domain status <domain> [options]"),
+					list: withProjectOption("List registered email domains.", "void email domain list [options]"),
+					"rotate-secret": withProjectOption("Rotate the shared zone ingress secret and verify the deployed generation.", "void email domain rotate-secret <domain> [options]"),
+					sync: withProjectOption("Reconcile the zone connection and refresh readiness.", "void email domain sync <domain> [options]"),
+					remove: withProjectOption("Disable the domain assignment and reconcile shared resources.", "void email domain remove <domain> [options]")
+				}
+			},
+			status: {
+				summary: "Show the email setup state and address map. Exit 1 when not ready.",
+				usage: ["void email status --platform cloudflare"],
+				options: [{
+					command: "--platform cloudflare",
+					description: "Your own Cloudflare account (the only platform with a status today)"
+				}]
+			},
+			setup: {
+				summary: "Set email up on your own Cloudflare account: enable Email Routing, onboard Email Sending, write send_email + addresses into wrangler.jsonc. Asks once before changing the account.",
+				usage: ["void email setup --platform cloudflare"],
+				options: [{
+					command: "--platform cloudflare",
+					description: "Your own Cloudflare account (required; the Void platform needs no setup)"
+				}]
+			}
+		}
+	},
+	github: {
+		summary: "Connect a GitHub repository for automatic deploys.",
+		usage: ["void github <command>"],
+		commands: [
+			{
+				command: "install",
+				description: "Open the GitHub App install page in your browser"
+			},
+			{
+				command: "installations",
+				description: "List your GitHub App installations"
+			},
+			{
+				command: "connect [project]",
+				description: "Connect a repository to a project for auto-deploy"
+			},
+			{
+				command: "update [project]",
+				description: "Update an existing connection's branch, build executor, or deploy workflow"
+			},
+			{
+				command: "status [project]",
+				description: "Show a project's GitHub connection (repo, branch, executor, workflow)"
+			},
+			{
+				command: "disconnect [project]",
+				description: "Disconnect a project from its GitHub repository"
+			},
+			{
+				command: "link",
+				description: "Link your GitHub account to Void"
+			},
+			{
+				command: "join",
+				description: "Join your organization's shared GitHub App installations"
+			}
+		],
+		children: {
+			install: basicSubcommand("Open the GitHub App install page in your browser.", "void github install"),
+			installations: basicSubcommand("List your GitHub App installations.", "void github installations"),
+			link: basicSubcommand("Link your GitHub account to Void.", "void github link"),
+			join: basicSubcommand("Join your organization's shared GitHub App installations.", "void github join"),
+			connect: {
+				summary: "Connect a repository to a project for automatic deploys.",
+				usage: ["void github connect [project] [options]"],
+				options: [
+					{
+						command: "--project <name>",
+						description: "Project name (alias for positional)"
+					},
+					{
+						command: "--installation <id>",
+						description: "GitHub App installation ID"
+					},
+					{
+						command: "--repo <owner/repo>",
+						description: "Repository full name (owner/repo)"
+					},
+					{
+						command: "--branch <name>",
+						description: "Branch to deploy from (required in non-interactive mode)"
+					},
+					{
+						command: "--executor <type>",
+						description: "Build executor: container (default) | github_actions; prompted interactively when omitted"
+					},
+					{
+						command: "--workflow <path>",
+						description: "Authorized deploy workflow file (default .github/workflows/void-deploy.yml); prompted interactively when using github_actions"
+					}
+				],
+				examples: [
+					{
+						command: "void github connect [project]",
+						description: "Connect a repository to a project"
+					},
+					{
+						command: "void github connect my-app --installation 42 --repo owner/repo --branch main",
+						description: "Non-interactive connect (all flags explicit)"
+					},
+					{
+						command: "void github connect my-app --repo owner/repo --branch main --executor github_actions",
+						description: "Non-interactive connect using the GitHub Actions executor"
+					}
+				]
+			},
+			update: {
+				summary: "Update an existing connection's branch, build executor, or deploy workflow.",
+				usage: ["void github update [project] [options]"],
+				options: [
+					{
+						command: "--project <name>",
+						description: "Project name (alias for positional)"
+					},
+					{
+						command: "--branch <name>",
+						description: "New branch to deploy from"
+					},
+					{
+						command: "--executor <type>",
+						description: "New build executor: container | github_actions; prompted interactively when omitted"
+					},
+					{
+						command: "--workflow <path>",
+						description: "New authorized deploy workflow file under .github/workflows/; prompted interactively when using github_actions"
+					}
+				],
+				examples: [{
+					command: "void github update my-app --executor github_actions",
+					description: "Switch an existing connection to the GitHub Actions executor"
+				}, {
+					command: "void github update my-app --branch release",
+					description: "Change the deploy branch"
+				}]
+			},
+			status: {
+				summary: "Show a project's GitHub connection settings.",
+				usage: ["void github status [project] [options]"],
+				options: [{
+					command: "--project <name>",
+					description: "Project name (alias for positional)"
+				}],
+				examples: [{
+					command: "void github status",
+					description: "Show the linked project's connection"
+				}, {
+					command: "void github status my-app",
+					description: "Show a specific project connection"
+				}]
+			},
+			disconnect: {
+				summary: "Disconnect a project from its GitHub repository.",
+				usage: ["void github disconnect [project] [options]"],
+				options: [{
+					command: "--project <name>",
+					description: "Project name (alias for positional)"
+				}, {
+					command: "--yes",
+					description: "Skip the confirmation prompt (required in non-interactive shells)"
+				}],
+				examples: [{
+					command: "void github disconnect",
+					description: "Disconnect the linked project's repository"
+				}, {
+					command: "void github disconnect my-app --yes",
+					description: "Disconnect a specific project without confirmation"
+				}]
+			}
+		}
+	},
+	build: {
+		summary: "Inspect remote builds.",
+		usage: ["void build <command>"],
+		commands: [{
+			command: "logs [build]",
+			description: "Stream, tail, or download logs for a build"
+		}],
+		children: { logs: {
+			summary: "Stream, tail, or download logs for a build.",
+			usage: ["void build logs [build] [options]"],
+			options: [
+				{
+					command: "--follow, -f",
+					description: "Live-tail until the build finishes"
+				},
+				{
+					command: "--output <file>, -o",
+					description: "Write logs to a file instead of stdout"
+				},
+				{
+					command: "--project <slug>, -p",
+					description: "Target project (else linked / VOID_PROJECT)"
+				}
+			],
+			examples: [
+				{
+					command: "void build logs",
+					description: "Print the latest build's logs"
+				},
+				{
+					command: "void build logs -f",
+					description: "Follow the latest build until it finishes"
+				},
+				{
+					command: "void build logs bld_123 -o build.log",
+					description: "Download a build's logs to a file"
+				}
+			]
+		} }
+	},
+	db: {
+		summary: "Manage local and remote database state.",
+		usage: ["void db <command>"],
+		commands: [
+			{
+				command: "push",
+				description: "Push schema to local D1 without migration files"
+			},
+			{
+				command: "generate",
+				description: "Generate SQL migrations from schema changes"
+			},
+			{
+				command: "status",
+				description: "Show migration status (local and remote)"
+			},
+			{
+				command: "reset",
+				description: "Reset local DB and re-run migrations"
+			},
+			{
+				command: "seed",
+				description: "Reset local DB, run migrations, and seed"
+			},
+			{
+				command: "execute <sql>",
+				description: "Run SQL against the database (--remote for deployed)"
+			},
+			{
+				command: "migrate",
+				description: "Apply pending migrations"
+			},
+			{
+				command: "studio",
+				description: "Open Drizzle Studio (--remote for deployed PG)"
+			},
+			{
+				command: "export",
+				description: "Export local database as SQL"
+			},
+			{
+				command: "connect",
+				description: "Connect or provision an external database"
+			},
+			{
+				command: "set-url",
+				description: "Update the external database URL"
+			},
+			{
+				command: "rename-migrations",
+				description: "Rename migrations to timestamp format"
+			}
+		],
+		children: {
+			push: basicSubcommand("Push schema to local D1 without migration files.", "void db push"),
+			generate: basicSubcommand("Generate SQL migrations from schema changes.", "void db generate"),
+			status: basicSubcommand("Show migration status for local and remote DBs.", "void db status"),
+			reset: basicSubcommand("Reset local DB and re-run migrations.", "void db reset"),
+			seed: {
+				summary: "Reset local DB, run migrations, and seed data.",
+				usage: ["void db seed [options]"],
+				options: [{
+					command: "--file <path>",
+					description: "Seed from a specific file"
+				}]
+			},
+			execute: {
+				summary: "Run SQL against the database (local by default; use --remote for the deployed database).",
+				usage: ["void db execute <sql>", "void db execute --file <path>"],
+				options: [{
+					command: "--file <path>",
+					description: "Run SQL from a file instead"
+				}, {
+					command: "--remote",
+					description: "Run against the deployed database (D1 via proxy; PostgreSQL via direct connection)"
+				}],
+				examples: [
+					{
+						command: "void db execute \"select * from users\"",
+						description: "Run inline SQL"
+					},
+					{
+						command: "void db execute --file query.sql",
+						description: "Run SQL from a file"
+					},
+					{
+						command: "void db execute --remote \"select count(*) from users\"",
+						description: "Query the deployed database"
+					}
+				]
+			},
+			migrate: {
+				summary: "Apply pending migrations.",
+				usage: ["void db migrate [options]"],
+				options: [{
+					command: "--remote",
+					description: "Apply to the remote database"
+				}]
+			},
+			studio: {
+				summary: "Open Drizzle Studio against the database (local by default; use --remote for the deployed PostgreSQL database; D1 remote not yet supported).",
+				usage: ["void db studio [options]"],
+				options: [{
+					command: "--remote",
+					description: "Open Studio against the deployed PostgreSQL database (D1 remote not yet supported)"
+				}],
+				examples: [{
+					command: "void db studio",
+					description: "Open Studio for the local database"
+				}, {
+					command: "void db studio --remote",
+					description: "Open Studio against the deployed PostgreSQL database"
+				}]
+			},
+			export: {
+				summary: "Export local database contents as SQL.",
+				usage: ["void db export [options]"],
+				options: [
+					{
+						command: "--output <path>",
+						description: "Export to a specific file path"
+					},
+					{
+						command: "--no-data",
+						description: "Schema only (no INSERT statements)"
+					},
+					{
+						command: "--no-schema",
+						description: "Data only (no CREATE TABLE)"
+					},
+					{
+						command: "--table <name>",
+						description: "Export a single table"
+					}
+				]
+			},
+			connect: {
+				summary: "Connect or provision an external PostgreSQL/MySQL database.",
+				usage: ["void db connect [connection-string]", "void db connect --provider <name-or-module> [options]"],
+				options: [
+					{
+						command: "--provider <name-or-module>",
+						description: "Provision with an adapter"
+					},
+					{
+						command: "--name <name>",
+						description: "Provider project/database name"
+					},
+					{
+						command: "--region <region>",
+						description: "Provider region identifier"
+					},
+					{
+						command: "--local-only",
+						description: "Do not sync a linked Void project"
+					}
+				],
+				examples: [{
+					command: "void db connect \"postgresql://user:pass@host/db\"",
+					description: "Connect an existing database"
+				}, {
+					command: "void db connect --provider neon --name my-app",
+					description: "Provision a Neon database using NEON_API_KEY"
+				}]
+			},
+			"set-url": basicSubcommand("Update the external database connection string for deployment.", "void db set-url"),
+			"rename-migrations": basicSubcommand("Rename migrations to timestamp-based format.", "void db rename-migrations")
+		}
+	},
+	env: {
+		summary: "Validate env.ts and generate environment types.",
+		usage: ["void env <command>"],
+		commands: [{
+			command: "check",
+			description: "Validate local .env or remote secret names"
+		}, {
+			command: "types",
+			description: "Regenerate .void/env.d.ts from env.ts"
+		}],
+		children: {
+			check: {
+				summary: "Validate local .env or required remote secret names.",
+				usage: ["void env check [options]"],
+				options: [{
+					command: "--remote",
+					description: "Check required server keys as remote secrets"
+				}]
+			},
+			types: basicSubcommand("Regenerate .void/env.d.ts from env.ts.", "void env types")
+		}
+	},
+	gen: {
+		summary: "Scaffold routes, models, background jobs, and framework entries.",
+		usage: ["void gen <command>"],
+		commands: [
+			{
+				command: "model <name> [cols...]",
+				description: "Generate migration, CRUD routes, and DB types"
+			},
+			{
+				command: "migration <name>",
+				description: "Generate an empty migration file"
+			},
+			{
+				command: "route <path>",
+				description: "Generate a route with handler exports"
+			},
+			{
+				command: "middleware <name>",
+				description: "Generate a numbered middleware file"
+			},
+			{
+				command: "ssr",
+				description: "Generate SSR entry, client, and App component"
+			},
+			{
+				command: "cron <name>",
+				description: "Generate a cron job file"
+			},
+			{
+				command: "queue <name>",
+				description: "Generate a queue consumer file"
+			}
+		],
+		children: {
+			model: {
+				summary: "Generate a migration, CRUD routes, and database types.",
+				usage: ["void gen model <name> [columns...]"],
+				examples: [{
+					command: "void gen model post title:string body:text",
+					description: "Create a model"
+				}]
+			},
+			migration: basicSubcommand("Generate an empty migration file.", "void gen migration <name>"),
+			route: {
+				summary: "Generate a route with handler exports.",
+				usage: ["void gen route <path> [options]"],
+				options: [{
+					command: "--methods <list>",
+					description: "Comma-separated methods (default: get)"
+				}],
+				examples: [{
+					command: "void gen route api/posts --methods get,post",
+					description: "Create a route"
+				}]
+			},
+			middleware: basicSubcommand("Generate a numbered middleware file.", "void gen middleware <name>"),
+			ssr: {
+				summary: "Generate SSR entry, client, and App component.",
+				usage: ["void gen ssr [options]"],
+				options: [
+					{
+						command: "--react",
+						description: "Use React"
+					},
+					{
+						command: "--vue",
+						description: "Use Vue"
+					},
+					{
+						command: "--svelte",
+						description: "Use Svelte"
+					},
+					{
+						command: "--solid",
+						description: "Use Solid"
+					}
+				]
+			},
+			cron: basicSubcommand("Generate a cron job file.", "void gen cron <name>"),
+			queue: basicSubcommand("Generate a queue consumer file.", "void gen queue <name>")
+		}
+	},
+	prepare: {
+		summary: "Generate .void artifacts without starting Vite.",
+		usage: ["void prepare"],
+		examples: [{
+			command: "void prepare",
+			description: "Refresh generated project types"
+		}]
+	}
+};
+function basicSubcommand(summary, usage, example) {
+	return {
+		summary,
+		usage: [usage],
+		examples: example ? [{
+			command: example,
+			description: summary
+		}] : void 0
+	};
+}
+function withProjectOption(summary, usage) {
+	return {
+		summary,
+		usage: [usage],
+		options: [{
+			command: "--project <name>",
+			description: "Project name override"
+		}]
+	};
+}
+function lifecycleHelp(command, summary) {
+	return {
+		summary,
+		usage: [`void platform ${command} [id] [--plan]${command === "disable" ? "" : " [--runtime <path>]"} [--yes]`],
+		options: [
+			{
+				command: "--plan",
+				description: "Print the exact plan without making changes"
+			},
+			...command === "disable" ? [] : [{
+				command: "--runtime <path>",
+				description: "Deploy an integrity-checked runtime directory instead of the package"
+			}],
+			{
+				command: "--yes",
+				description: "Acknowledge non-interactive Cloudflare changes"
+			}
+		]
+	};
+}
+function printGlobalHelp() {
+	printVoidHeader();
+	note([
+		globalCommandLine(["init"], "void init"),
+		...globalOptionLines(["init"]),
+		"",
+		globalCommandLine(["connect"], "void connect [url]"),
+		...globalOptionLines(["connect"]),
+		"",
+		globalCommandLine(["deploy"], "void deploy"),
+		...globalOptionLines(["deploy"]),
+		"",
+		...globalCommandGroup("auth"),
+		"",
+		...globalCommandGroup("platform"),
+		"",
+		...globalCommandGroup("project"),
+		"",
+		categoryTitle("secrets"),
+		...globalCommandLines("secret"),
+		"",
+		...globalCommandGroup("domain"),
+		"",
+		...globalCommandGroup("email"),
+		"",
+		...globalCommandGroup("github"),
+		"",
+		...globalCommandGroup("build"),
+		"",
+		categoryTitle("database"),
+		...globalCommandLines("db", {
+			execute: "execute <sql>",
+			export: "export [--output <path>]",
+			seed: "seed [--file <path>]"
+		}),
+		...globalOptionLines(["db", "execute"]),
+		...globalOptionLines(["db", "export"]),
+		"",
+		...globalCommandGroup("env"),
+		...globalOptionLines(["env", "check"]),
+		"",
+		categoryTitle("codegen"),
+		globalCommandLine(["prepare"], "void prepare"),
+		...globalCommandLines("gen", { route: "route <path> [--methods]" }),
+		"",
+		categoryTitle("agent"),
+		helpLine("void init --agents", requiredOption(["init"], "--agents").description),
+		"",
+		categoryTitle("help"),
+		helpLine("void help <command>", "Show command-specific help"),
+		helpLine("void <command> --help", "Show command-specific help")
+	].join("\n"), sectionTitle("Commands"));
+	note([helpLine("VOID_TOKEN", "Auth token (or use `void auth login`)"), helpLine("VOID_PROJECT", "Deploy target project name override")].join("\n"), sectionTitle("Environment"));
+	outro("https://void.cloud");
+}
+function printVoidHeader() {
+	const version = JSON.parse(readFileSync(join(getPackageDir(), "package.json"), "utf-8")).version;
+	const art = asciiArts[Math.floor(Math.random() * asciiArts.length)];
+	console.log(import_picocolors.default.blue(`${art}  v${version}\n`));
+}
+function getHelpPath(args) {
+	if (args.length === 0) return null;
+	const command = args[0];
+	if (command === "help") return args.slice(1);
+	if (command === "--help" || command === "-h") return [];
+	if (args[1] === "help") return [command, ...args.slice(2)];
+	const helpIndex = args.findIndex((arg) => arg === "--help" || arg === "-h");
+	if (helpIndex === -1) return null;
+	return getKnownHelpPrefix(args.slice(0, helpIndex));
+}
+function printHelpPage(path) {
+	const page = findHelpPage(path);
+	if (!page) throw new Error(`Unknown help topic: ${formatHelpPath(path)}`);
+	const lines = [
+		page.summary,
+		"",
+		categoryTitle("Usage"),
+		...page.usage.map((usage) => `  ${usage}`)
+	];
+	appendHelpSection(lines, "Commands", page.commands);
+	appendHelpSection(lines, "Options", page.options);
+	appendHelpSection(lines, "Examples", page.examples);
+	if (page.commands) lines.push("", `Run \`void help ${path.join(" ")} <command>\` for command-specific help.`);
+	note(lines.join("\n"), sectionTitle(`void ${path.join(" ")}`));
+}
+function appendHelpSection(lines, title, entries) {
+	if (!entries || entries.length === 0) return;
+	lines.push("", categoryTitle(title));
+	for (const entry of entries) lines.push(helpLine(entry.command, entry.description));
+}
+function globalCommandGroup(group) {
+	return [categoryTitle(group), ...globalCommandLines(group)];
+}
+function globalCommandLines(group, commandOverrides) {
+	return (requiredPage([group]).commands ?? []).map((command) => helpLine(`void ${group} ${commandOverrides?.[command.command.split(" ")[0]] ?? command.command}`, command.description));
+}
+function globalCommandLine(path, command) {
+	return helpLine(command, formatGlobalDescription(requiredPage(path).summary));
+}
+function globalOptionLines(path) {
+	return (requiredPage(path).options ?? []).map((option) => helpLine(`  ${option.command}`, option.description));
+}
+function requiredOption(path, command) {
+	const option = requiredPage(path).options?.find((entry) => entry.command === command);
+	if (!option) throw new Error(`Missing help option: ${formatHelpPath(path)} ${command}`);
+	return option;
+}
+function requiredPage(path) {
+	const page = findHelpPage(path);
+	if (!page) throw new Error(`Missing help page: ${formatHelpPath(path)}`);
+	return page;
+}
+function formatGlobalDescription(summary) {
+	return summary.replace(/\.$/, "");
+}
+function findHelpPage(path) {
+	let tree = HELP_TREE;
+	let page = null;
+	for (const part of path) {
+		const node = tree?.[part];
+		if (!node) return null;
+		page = node;
+		tree = node.children;
+	}
+	return page;
+}
+function getKnownHelpPrefix(args) {
+	let tree = HELP_TREE;
+	const path = [];
+	for (const arg of args) {
+		if (arg.startsWith("-")) break;
+		const node = tree?.[arg];
+		if (!node) {
+			if (path.length === 0) return [arg];
+			if (tree) return [...path, arg];
+			break;
+		}
+		path.push(arg);
+		tree = node.children;
+	}
+	return path;
+}
+function formatHelpPath(path) {
+	return path.length === 0 ? "help" : path.join(" ");
+}
+//#endregion
+export { printVoidHeader as a, printHelpPage as i, help_exports as n, operatorGroups as o, printGlobalHelp as r, parseOperatorArgs as s, getHelpPath as t };