void 0.9.0 → 0.9.2

package/dist/runtime/env.mjs

@@ -1,4 +1,4 @@
-import { i as getRawRuntimeEnv, n as asEnv, r as envContext, t as INTERNAL_BINDING_PREFIXES } from "../env-raw-DhK_myJu.mjs";
+import { i as getRawRuntimeEnv, n as asEnv, r as envContext, t as INTERNAL_BINDING_PREFIXES } from "../env-raw-RDkMnSTC.mjs";
 //#region src/runtime/env.ts
 /**
 * Public runtime env API — exposed via "void/_env".

package/dist/runtime/fetch-stream.d.mts

@@ -1,4 +1,4 @@
-import { t as FetchError } from "../fetch-error-Dn-En6Wg.mjs";
+import { t as FetchError } from "../fetch-error-CimrygMq.mjs";
 import { RouteMap } from "void/routes";
 
 //#region src/runtime/fetch-stream.d.ts

package/dist/runtime/fetch-stream.mjs

@@ -1,4 +1,4 @@
-import { n as ofetch, t as FetchError } from "../fetch-error-B8GTcrQw.mjs";
+import { n as ofetch, t as FetchError } from "../fetch-error-BFIoojjf.mjs";
 //#region src/runtime/fetch-stream.ts
 /**
 * Consume an SSE endpoint as an async generator of text chunks.

package/dist/runtime/fetch.d.mts

@@ -1,4 +1,4 @@
-import { t as FetchError } from "../fetch-error-Dn-En6Wg.mjs";
+import { t as FetchError } from "../fetch-error-CimrygMq.mjs";
 import { RouteMap } from "void/routes";
 
 //#region src/runtime/fetch.d.ts

package/dist/runtime/fetch.mjs

@@ -1,4 +1,4 @@
-import { n as ofetch, t as FetchError } from "../fetch-error-B8GTcrQw.mjs";
+import { n as ofetch, t as FetchError } from "../fetch-error-BFIoojjf.mjs";
 //#region src/runtime/fetch.ts
 async function fetch(path, options) {
 	let url = path;

package/dist/runtime/handler.d.mts

@@ -1,3 +1,3 @@
 /// <reference types="@cloudflare/workers-types" />
-import { C as HandlerInput, S as ValidationError, _ as defineScheduled, a as QueueBatch, b as InferProps, c as RenderAssetTags, d as VoidAssetRewriteError, f as defineHandler, g as defineRender, h as defineQueue, i as CloudEnv, l as TypedHandler, m as defineMiddleware, n as CloudContext, o as QueueMessage, p as defineHead, r as CloudContextVariables, s as QueueRetryOptions, t as CloudBindings, u as TypedQueueHandler, v as Deferred, w as ValidatorSlots, x as defer } from "../handler-DMSGX5S6.mjs";
+import { C as HandlerInput, S as ValidationError, _ as defineScheduled, a as QueueBatch, b as InferProps, c as RenderAssetTags, d as VoidAssetRewriteError, f as defineHandler, g as defineRender, h as defineQueue, i as CloudEnv, l as TypedHandler, m as defineMiddleware, n as CloudContext, o as QueueMessage, p as defineHead, r as CloudContextVariables, s as QueueRetryOptions, t as CloudBindings, u as TypedQueueHandler, v as Deferred, w as ValidatorSlots, x as defer } from "../handler-xflsMwWM.mjs";
 export { CloudBindings, CloudContext, CloudContextVariables, CloudEnv, Deferred, HandlerInput, InferProps, QueueBatch, QueueMessage, QueueRetryOptions, RenderAssetTags, TypedHandler, TypedQueueHandler, ValidationError, ValidatorSlots, VoidAssetRewriteError, defer, defineHandler, defineHead, defineMiddleware, defineQueue, defineRender, defineScheduled };

package/dist/runtime/handler.mjs

@@ -1,6 +1,6 @@
 import { convertReturnValue } from "./response.mjs";
 import { runValidation } from "./validator.mjs";
-import { i as ValidationError, n as defer } from "../defer-BosTTQTi.mjs";
+import { i as ValidationError, n as defer } from "../defer-CouVukrf.mjs";
 //#region src/runtime/handler.ts
 /**
 * Thrown when `c.rewrite()` is called with a destination whose final path

package/dist/runtime/isr.mjs

@@ -1,4 +1,4 @@
-import { i as getRawRuntimeEnv } from "../env-raw-DhK_myJu.mjs";
+import { i as getRawRuntimeEnv } from "../env-raw-RDkMnSTC.mjs";
 //#region src/runtime/isr.ts
 /**
 * Revalidate ISR-cached pages on demand.

package/dist/runtime/live.d.mts

@@ -1,6 +1,6 @@
 /// <reference types="@cloudflare/workers-types" />
-import { r as AuthUser } from "../auth-BL0cU_Sy.mjs";
-import { i as CloudEnv, n as CloudContext } from "../handler-DMSGX5S6.mjs";
+import { r as AuthUser } from "../auth-CDeb2XAl.mjs";
+import { i as CloudEnv, n as CloudContext } from "../handler-xflsMwWM.mjs";
 
 //#region src/runtime/live.d.ts
 type MaybePromise<T> = T | Promise<T>;

package/dist/runtime/live.mjs

@@ -1,4 +1,4 @@
-import { i as getRawRuntimeEnv } from "../env-raw-DhK_myJu.mjs";
+import { i as getRawRuntimeEnv } from "../env-raw-RDkMnSTC.mjs";
 import { getUser } from "./auth.mjs";
 //#region src/runtime/live.ts
 let liveBindingName = "VOID_LIVE";

package/dist/runtime/migration-handler-pg.mjs

@@ -1,4 +1,4 @@
-import { t as disablePgPassFallback } from "../pg-C-ybKyFU.mjs";
+import { t as disablePgPassFallback } from "../pg-CMZ_5wsC.mjs";
 //#region src/runtime/migration-handler-pg.ts
 function createMigrationHandler(env, migrations, _dialect, runAuthMigrations) {
 	return async (request) => {

package/dist/runtime/sandbox.mjs

@@ -1,4 +1,4 @@
-import { i as getRawRuntimeEnv } from "../env-raw-DhK_myJu.mjs";
+import { i as getRawRuntimeEnv } from "../env-raw-RDkMnSTC.mjs";
 import { requireRuntimeBinding } from "./env.mjs";
 import { Sandbox, getSandbox as getSandbox$1 } from "@cloudflare/sandbox";
 //#region src/runtime/sandbox.ts

package/dist/runtime/validator.d.mts

@@ -1,2 +1,2 @@
-import { C as HandlerInput, T as runValidation, w as ValidatorSlots } from "../handler-DMSGX5S6.mjs";
+import { C as HandlerInput, T as runValidation, w as ValidatorSlots } from "../handler-xflsMwWM.mjs";
 export { HandlerInput, ValidatorSlots, runValidation };

package/dist/runtime/ws-server.d.mts

@@ -1,5 +1,5 @@
-import { n as AuthState } from "../auth-BL0cU_Sy.mjs";
-import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv } from "../better-auth-shared-BxcgLiHN.mjs";
+import { n as AuthState } from "../auth-CDeb2XAl.mjs";
+import { i as VoidAuthRuntimeOptions, n as VoidAuthEnv } from "../better-auth-shared-CmEQZs1T.mjs";
 import { AnyWebSocketDefinition } from "./ws.mjs";
 
 //#region src/runtime/ws-server.d.ts

package/dist/runtime/ws.d.mts

@@ -1,6 +1,6 @@
-import { r as AuthUser } from "../auth-BL0cU_Sy.mjs";
-import { t as StandardSchemaV1 } from "../standard-schema-DCIm8cwQ.mjs";
-import { i as CloudEnv } from "../handler-DMSGX5S6.mjs";
+import { r as AuthUser } from "../auth-CDeb2XAl.mjs";
+import { t as StandardSchemaV1 } from "../standard-schema-Dnsh2vnl.mjs";
+import { i as CloudEnv } from "../handler-xflsMwWM.mjs";
 import { WebSocketRouteMap } from "void/routes";
 
 //#region src/runtime/ws.d.ts

package/dist/{secret-Dab6XQdb.mjs → secret-C_uTY7xx.mjs}

@@ -1,8 +1,8 @@
 import { n as cliTitle } from "./output-DeiS4oEX.mjs";
-import { c as getToken, n as PlatformClient } from "./client-CCOKwNUz.mjs";
+import { c as getToken, n as PlatformClient } from "./client-DIfOFf1W.mjs";
 import { _ as me, c as R, g as ge, n as Ce, u as Se, v as ue, x as q, y as ye } from "./dist-abzUneor.mjs";
 import { r as readProjectConfig } from "./project-CH9pdo16.mjs";
-import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-CNpUbUHd.mjs";
+import { r as resolveProjectBySlug, t as getRequestedProjectSlug } from "./resolve-project-D4O1_fZz.mjs";
 import { readFileSync } from "node:fs";
 //#region src/cli/secret.ts
 async function runSecretCommand(root, args) {

package/dist/{skills-GPm5Kjev.mjs → skills-BRKc--As.mjs}

@@ -1,6 +1,6 @@
 import { a as join, s as relative } from "./pathe.M-eThtNZ-BrPhGF_K.mjs";
 import { c as R } from "./dist-abzUneor.mjs";
-import { r as getPackageDir } from "./agents-Dkgafwfr.mjs";
+import { r as getPackageDir } from "./agents-MhSzNMiC.mjs";
 import { existsSync, mkdirSync, readFileSync, readdirSync, readlinkSync, symlinkSync } from "node:fs";
 //#region src/cli/skills.ts
 function parseSkills(skillsDir) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "void",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/voidzero-dev/void.git",
@@ -353,7 +353,7 @@
     "valibot": ">=1.0.0-beta.7",
     "vite": "^8.0.0",
     "zod": "^3.25.0 || ^4.0.0",
-    "@void/md": "0.9.0"
+    "@void/md": "0.9.2"
   },
   "peerDependenciesMeta": {
     "@void/md": {

package/skills/void/docs/guide/ai.md

@@ -4,7 +4,7 @@ outline: deep
 
 # AI
 
-Void provides a typed AI client powered by Cloudflare's [AI Gateway](https://developers.cloudflare.com/ai-gateway/). It supports both [Workers AI](https://developers.cloudflare.com/workers-ai/) models and third-party providers such as OpenAI, Anthropic, and Google through bring-your-own-key credentials. Import `ai` from `void/ai` and run inference directly from your route handlers. Usage is metered through Void.
+Void provides a typed AI client powered by Cloudflare's [AI Gateway](https://developers.cloudflare.com/ai-gateway/). Import `ai` from `void/ai` and run inference directly from your route handlers. Usage is metered through Void.
 
 ```ts
 import { ai } from 'void/ai';
@@ -29,7 +29,7 @@ export const POST = defineHandler(async (c) => {
 });
 ```
 
-You can use any model available on [Workers AI](https://developers.cloudflare.com/workers-ai/models/), including text generation, image classification, image-to-text, text-to-image, embeddings, translation, and more. Models that return binary data, such as generated images, are returned as a `Blob` from `ai.run()`.
+You can use any model available through Cloudflare's AI binding, including Workers AI models such as `@cf/meta/llama-3.1-8b-instruct` and Cloudflare Gateway models such as `google/gemini-2.5-flash` or `openai/gpt-4.1-mini`. The input object must match the selected Cloudflare model's schema. Models that return binary data, such as generated images, are returned as a `Blob` from `ai.run()`.
 
 ## Streaming
 
@@ -87,11 +87,52 @@ Workers AI usage is metered in [**neurons**](https://developers.cloudflare.com/w
 
 On the **free tier**, AI requests return a `429` error once the limit is reached. On **paid tiers**, usage beyond the included allowance is tracked as overage on your monthly bill.
 
-## Third-Party Providers (BYOK)
+## Cloudflare Gateway Models
 
-You can use models from OpenAI, Anthropic, Google, and other providers by passing a `provider/model` identifier. Bring your own API key, add it as a project secret, and Void handles the rest. Third-party inference is billed directly by the provider, and Void does not mark up API calls. Requests still route through AI Gateway so usage shows up on the dashboard.
+`ai.run()` mirrors Cloudflare's `env.AI.run()` model naming and input schemas. Third-party models use Cloudflare model IDs and Cloudflare-managed credentials.
 
-### Usage
+```ts
+const result = await ai.run('google/gemini-2.5-flash', {
+  contents: [
+    {
+      role: 'user',
+      parts: [{ text: 'Explain Durable Objects in one paragraph.' }],
+    },
+  ],
+});
+```
+
+OpenAI-compatible models use OpenAI-style `messages`:
+
+```ts
+const result = await ai.run('openai/gpt-4.1-mini', {
+  messages: [{ role: 'user', content: 'Summarize this deploy.' }],
+});
+```
+
+Pass Cloudflare AI Gateway options as the third argument:
+
+```ts
+const result = await ai.run(
+  'openai/gpt-4.1-mini',
+  {
+    messages: [{ role: 'user', content: 'Summarize this deploy.' }],
+  },
+  {
+    gateway: {
+      skipCache: true,
+    },
+  },
+);
+```
+
+Void always injects the `void` gateway ID and project metadata for metering.
+
+## Provider-Native Requests
+
+Use `ai.provider(provider).fetch(path, init)` when you want to call a provider-native API with your own provider key. The request still routes through Cloudflare AI Gateway and Void metering, but the request shape is the provider's native HTTP API.
+
+### OpenAI
 
 ```ts
 import { defineHandler } from 'void';
@@ -100,85 +141,99 @@ import { ai } from 'void/ai';
 export const POST = defineHandler(async (c) => {
   const { prompt } = await c.req.json();
 
-  const result = await ai.run('openai/gpt-4o', {
-    messages: [{ role: 'user', content: prompt }],
-    max_tokens: 512,
+  const response = await ai.provider('openai').fetch('/chat/completions', {
+    body: {
+      model: 'gpt-4o',
+      messages: [{ role: 'user', content: prompt }],
+      max_tokens: 512,
+    },
   });
 
+  const result = await response.json();
   return c.json(result);
 });
 ```
 
-The same `ai.run()` and `ai.stream()` methods work for both Workers AI and third-party models. The framework detects the provider from the model string and routes the request through [AI Gateway](https://developers.cloudflare.com/ai-gateway/) automatically.
-
-The options follow each provider's conventions. All third-party providers use the OpenAI-compatible chat completions format, including `messages`, `max_tokens`, and `temperature`. TypeScript narrows the input and return types based on the model string: Workers AI models get per-model typed inputs from `@cloudflare/workers-types`, while third-party models such as `"provider/model"` get `ChatCompletionInputs` and `ChatCompletionResponse`.
-
-### Vision
-
-Third-party chat models that accept image inputs can receive OpenAI-compatible multimodal message content:
+### Google AI Studio
 
 ```ts
-const result = await ai.run('openai/gpt-4o', {
-  messages: [
-    {
-      role: 'user',
-      content: [
-        { type: 'text', text: 'What is in this image?' },
+const response = await ai
+  .provider('google-ai-studio')
+  .fetch('/v1/models/gemini-2.5-flash:generateContent', {
+    body: {
+      contents: [
         {
-          type: 'image_url',
-          image_url: { url: 'data:image/png;base64,...', detail: 'high' },
+          role: 'user',
+          parts: [{ text: 'What is Cloudflare?' }],
         },
       ],
     },
-  ],
-});
+  });
+
+const result = await response.json();
+```
+
+### Custom Providers
+
+For providers that are not in Void's default key map, pass the secret name and API-key header:
+
+```ts
+const response = await ai
+  .provider('custom-provider', {
+    apiKeyEnv: 'CUSTOM_PROVIDER_API_KEY',
+    apiKeyHeader: 'x-api-key',
+    apiKeyPrefix: '',
+  })
+  .fetch('/v1/respond', {
+    body: { prompt: 'Hello' },
+  });
 ```
 
 ### Image Generation
 
-Use `ai.image()` for image-generation providers or Workers AI image models. It returns a `Response`, so route handlers can return it directly or parse it as JSON depending on the provider:
+Use `ai.run()` or `ai.image()` for Cloudflare-native image models:
 
 ```ts
 export const POST = defineHandler(async (c) => {
   const { prompt } = await c.req.json();
-
-  return ai.image('openai/gpt-image-1.5', {
-    prompt,
-    size: '1024x1024',
-    response_format: 'b64_json',
-  });
+  return ai.image('@cf/black-forest-labs/flux-1-schnell', { prompt });
 });
 ```
 
-For Workers AI text-to-image models, pass the model name and input shape from Cloudflare's model docs:
+Use `ai.provider().fetch()` for provider-native image APIs:
 
 ```ts
 export const POST = defineHandler(async (c) => {
   const { prompt } = await c.req.json();
-  return ai.image('@cf/black-forest-labs/flux-1-schnell', { prompt });
+
+  return ai.provider('openai').fetch('/images/generations', {
+    body: {
+      model: 'gpt-image-1.5',
+      prompt,
+      size: '1024x1024',
+      response_format: 'b64_json',
+    },
+  });
 });
 ```
 
-For image edits, pass the file-like input and select the edit endpoint. Void serializes the file through the proxy and forwards it to AI Gateway as multipart form data:
+For multipart provider APIs, pass a `FormData` body. Void serializes the body through the proxy and reconstructs it before forwarding to AI Gateway:
 
 ```ts
 export const POST = defineHandler(async (c) => {
   const body = await c.req.parseBody();
+  const form = new FormData();
+  form.set('model', 'gpt-image-1.5');
+  form.set('prompt', String(body.prompt));
+  form.set('image', body.image as Blob, 'source.png');
 
-  return ai.image(
-    'openai/gpt-image-1.5',
-    {
-      prompt: String(body.prompt),
-      image: body.image as Blob,
-    },
-    { endpoint: 'images/edits' },
-  );
+  return ai.provider('openai').fetch('/images/edits', { body: form });
 });
 ```
 
 ### Provider Key Convention
 
-Each provider requires an API key set as a project secret. The env var name is automatically derived from the provider prefix:
+Provider-native requests require an API key set as a project secret. The env var name is automatically derived from the provider name:
 
 | Provider prefix    | Env var               |
 | ------------------ | --------------------- |
@@ -203,7 +258,7 @@ Each provider requires an API key set as a project secret. The env var name is a
 | `ideogram`         | `IDEOGRAM_API_KEY`    |
 | `parallel`         | `PARALLEL_API_KEY`    |
 
-All [AI Gateway providers](https://developers.cloudflare.com/ai-gateway/usage/providers/) that accept a Bearer API key are supported. Providers with non-standard auth (Amazon Bedrock, Azure OpenAI, Google Vertex) are not yet supported.
+OpenAI-style providers use `Authorization: Bearer <key>`. Google AI Studio uses `x-goog-api-key`. Use `apiKeyHeader` and `apiKeyPrefix` for custom providers.
 
 For production, add your API key as a project secret:
 
@@ -217,19 +272,22 @@ For local development, add it to `.env.local` in your project root:
 OPENAI_API_KEY=sk-...
 ```
 
-If the key is missing at runtime, `ai.run()` throws a descriptive error telling you which env var to set.
+If the key is missing at runtime, `ai.provider().fetch()` throws a descriptive error telling you which env var to set.
 
-### Streaming with Third-Party Models
+### Streaming with Provider-Native APIs
 
-`ai.stream()` works the same way. The response is always SSE regardless of provider:
+Provider-native streaming APIs return the provider response directly:
 
 ```ts
 export const POST = defineHandler(async (c) => {
   const { prompt } = await c.req.json();
 
-  return ai.stream('anthropic/claude-sonnet-4-20250514', {
-    messages: [{ role: 'user', content: prompt }],
-    max_tokens: 512,
+  return ai.provider('openai').fetch('/chat/completions', {
+    body: {
+      model: 'gpt-4o',
+      messages: [{ role: 'user', content: prompt }],
+      stream: true,
+    },
   });
 });
 ```

package/skills/void/docs/guide/auth.md

@@ -229,12 +229,12 @@ Localhost dev uses a built-in fallback secret automatically. Outside the managed
 For advanced configuration, create `auth.ts` at the project root and export `defineAuth(...)`:
 
 ```ts
-import { defineAuth } from "void/auth";
+import { defineAuth } from 'void/auth';
 
 export default defineAuth(({ defaults }) => ({
   ...defaults,
-  trustedOrigins: ["https://example.com"],
-});
+  trustedOrigins: ['https://example.com'],
+}));
 ```
 
 `defaults` already includes Void's conventions. Extend it explicitly instead of expecting a deep merge.

package/skills/void/docs/node_modules/void/AGENTS.md

@@ -101,7 +101,7 @@ src/
 | `void/ws`        | `defineRoom()`, `defineWebSocket()`, typed `connect()`, and WebSocket context types                                     |
 | `void/db`        | `db` Drizzle D1 instance (auto-wired with user schema) + `createDb()` for custom D1 bindings                            |
 | `void/queues`    | `queues` typed proxy + `QueueMap` stub interface (augmented by generated `queues.d.ts`)                                 |
-| `void/ai`        | `ai` proxy — `ai.run()`, `ai.stream()`, `ai.models()` with auto-detected backend (service binding / HTTPS / direct)     |
+| `void/ai`        | `ai` proxy — Cloudflare-native `ai.run()`/`ai.stream()`, provider-native `ai.provider().fetch()`, `ai.models()`         |
 | `void/log`       | `logger.error/warn/info(msg, fields?)` — emits stringified JSON to `console.*` so Cloudflare Tail captures level + msg  |
 | `void/env`       | `defineEnv()`, typed `env` proxy, built-in schema helpers (`string`, `number`, `oneOf`, …) + global Cloudflare types    |
 

package/skills/void/docs/reference/api.md

@@ -675,7 +675,7 @@ Imported from `"void/ai"`.
 
 ### `ai`
 
-Typed AI client for Workers AI models and AI Gateway-backed third-party providers.
+Typed AI client for Cloudflare AI models and provider-native AI Gateway requests.
 
 ```ts
 import { ai } from 'void/ai';
@@ -683,9 +683,16 @@ import { ai } from 'void/ai';
 const result = await ai.run('@cf/meta/llama-3.1-8b-instruct', {
   messages: [{ role: 'user', content: 'Summarize this release note.' }],
 });
+
+const response = await ai.provider('openai').fetch('/chat/completions', {
+  body: {
+    model: 'gpt-4o',
+    messages: [{ role: 'user', content: 'Summarize this release note.' }],
+  },
+});
 ```
 
-**Key exports:** `ai`, `VoidAi`, model input/response types. See [AI](../guide/ai.md) for provider setup and streaming examples.
+**Key exports:** `ai`, `VoidAi`, provider request types. See [AI](../guide/ai.md) for provider setup and streaming examples.
 
 ## ISR
 

package/skills/void/docs/reference/cli.md

@@ -10,32 +10,33 @@ Use this page as a command reference. If you are setting up a project for the fi
 
 ## Cheat Sheet
 
-| Command                           | Purpose                                          |
-| --------------------------------- | ------------------------------------------------ |
-| `void deploy`                     | Build and deploy to Void                         |
-| `void prepare`                    | Generate `.void` artifacts without starting Vite |
-| `void gen model <name> [cols...]` | Scaffold migration + CRUD routes                 |
-| `void gen route <path>`           | Create an API route                              |
-| `void db push`                    | Apply schema directly without migration files    |
-| `void db generate`                | Generate SQL migrations from schema changes      |
-| `void db status`                  | Show local/remote migration status               |
-| `void db reset`                   | Drop and re-apply all migrations                 |
-| `void db seed`                    | Reset + seed local database                      |
-| `void db studio`                  | Open Drizzle Studio for local database           |
-| `void secret put <name=value>`    | Set a production secret                          |
-| `void secret list`                | List production secrets                          |
-| `void secret sync .env.local`     | Bulk upload secrets from dotenv file             |
-| `void env check [--remote]`       | Validate env.ts schema                           |
-| `void env types`                  | Regenerate .void/env.d.ts from env.ts            |
-| `void env example`                | Refresh the void-managed block in .env.example   |
-| `void auth login`                 | Authenticate with Void                           |
-| `void project link`               | Link directory to a project                      |
-| `void project logs`               | Show runtime logs from deployed project          |
-| `void project rollback`           | Roll back to a previous deployment               |
-| `void project cancel`             | Cancel an active deployment                      |
-| `void project purge-cache`        | Purge all cached pages                           |
-| `void mcp`                        | Start the Void MCP server                        |
-| `void init`                       | Setup wizard for new or existing projects        |
+| Command                           | Purpose                                                             |
+| --------------------------------- | ------------------------------------------------------------------- |
+| `void deploy`                     | Build and deploy to Void                                            |
+| `void prepare`                    | Generate `.void` artifacts without starting Vite                    |
+| `void gen model <name> [cols...]` | Scaffold migration + CRUD routes                                    |
+| `void gen route <path>`           | Create an API route                                                 |
+| `void db push`                    | Apply schema directly without migration files                       |
+| `void db generate`                | Generate SQL migrations from schema changes                         |
+| `void db status`                  | Show local/remote migration status                                  |
+| `void db reset`                   | Drop and re-apply all migrations                                    |
+| `void db seed`                    | Reset + seed local database                                         |
+| `void db execute <sql>`           | Run SQL against the database (--remote for deployed)                |
+| `void db studio`                  | Open Drizzle Studio (--remote for the deployed PostgreSQL database) |
+| `void secret put <name=value>`    | Set a production secret                                             |
+| `void secret list`                | List production secrets                                             |
+| `void secret sync .env.local`     | Bulk upload secrets from dotenv file                                |
+| `void env check [--remote]`       | Validate env.ts schema                                              |
+| `void env types`                  | Regenerate .void/env.d.ts from env.ts                               |
+| `void env example`                | Refresh the void-managed block in .env.example                      |
+| `void auth login`                 | Authenticate with Void                                              |
+| `void project link`               | Link directory to a project                                         |
+| `void project logs`               | Show runtime logs from deployed project                             |
+| `void project rollback`           | Roll back to a previous deployment                                  |
+| `void project cancel`             | Cancel an active deployment                                         |
+| `void project purge-cache`        | Purge all cached pages                                              |
+| `void mcp`                        | Start the Void MCP server                                           |
+| `void init`                       | Setup wizard for new or existing projects                           |
 
 ## Binary Invocation
 
@@ -289,9 +290,17 @@ Programmatic seed modules must export either a default function or a named `seed
 ```
 void db execute <sql>
 void db execute --file <path>
+void db execute --remote <sql>
 ```
 
-Run ad-hoc SQL against the local D1 database. Provide SQL inline or from a file. SELECT queries display results as a formatted table; other statements execute silently.
+Run ad-hoc SQL against the database. Provide SQL inline or from a file. SELECT queries display results as a formatted table; other statements execute silently.
+
+By default, targets the local database. Pass `--remote` to run against the deployed database:
+
+- **D1 projects**: routes the query through the Void proxy (`proxy.void.cloud/d1/query`) using your auth token. No Cloudflare credentials needed.
+- **PostgreSQL projects**: fetches the stored connection string from the platform and connects directly. Requires that `void db set-url` has been run at least once (the platform stores the URL encrypted). If the URL isn't stored yet, you will see: _"Run `void db set-url` once to populate it, then retry."_
+
+For destructive statements (`DELETE`, `UPDATE`, `DROP`, etc.) when running in a TTY, you will be prompted to confirm before the query is sent to the deployed database. Non-TTY environments (CI) skip the prompt.
 
 ### `void db migrate`
 
@@ -305,7 +314,16 @@ Pass `--remote` to apply pending migrations to the remote database instead. Requ
 
 ### `void db studio`
 
-Open [Drizzle Studio](https://orm.drizzle.team/docs/drizzle-kit-studio) for the local database. Launches a web-based GUI for browsing and editing your data.
+```
+void db studio [--remote]
+```
+
+Open [Drizzle Studio](https://orm.drizzle.team/docs/drizzle-kit-studio) for the database. Launches a web-based GUI for browsing and editing your data.
+
+By default, targets the local database. Pass `--remote` to open Studio against the deployed database:
+
+- **PostgreSQL projects**: fetches the stored connection string from the platform and opens Studio against it. Requires being logged in (`void auth login`) with a linked project. If the URL isn't stored yet, run `void db set-url` first.
+- **D1 projects**: remote Studio is not yet supported. Use `void db execute --remote` for ad-hoc queries against your deployed D1 database.
 
 ### `void db rename-migrations`
 
@@ -554,7 +572,9 @@ See [Environment Variables](../guide/env-vars.md) for the full guide.
 void domain add <hostname> [--project <name>]
 ```
 
-Add a custom domain to a project. Prints the CNAME target you need to add in your DNS provider.
+Add a custom domain to a project. Prints the two DNS records to add at your DNS provider: a traffic **CNAME** pointing `<hostname>` at the CNAME target shown in the command output, and a non-rotating `_cf-custom-hostname` ownership **TXT**. Certificates are validated over HTTP at Cloudflare's edge and renew automatically — there are no `_acme-challenge` records to publish, at first issuance or ever. After adding the records the domain activates automatically (no polling required); run `void domain status <hostname>` to check progress.
+
+> Wildcard custom hostnames (`*.example.com`) are not supported — register each subdomain individually.
 
 ### `void domain delete`
 
@@ -578,7 +598,7 @@ List all custom domains and their status (active/pending).
 void domain status <hostname> [--project <name>] [--verbose]
 ```
 
-Check verification and SSL status for a specific domain. Prints a rolled-up state (`awaiting_dns`, `verifying_dns`, `issuing_cert`, `deploying_cert`, `awaiting_deployment`, `active`, `error`, or `pending`) with a one-line diagnostic explaining what Cloudflare is doing and any user action required. When DNS records are still pending, the command also prints the exact TXT records to add at your DNS provider.
+Check verification and SSL status for a specific domain. Prints a rolled-up state (`awaiting_dns`, `verifying_dns`, `issuing_cert`, `deploying_cert`, `awaiting_deployment`, `active`, `error`, or `pending`) with a one-line diagnostic explaining what Cloudflare is doing and any user action required. While the certificate is not yet active, the command also surfaces the records to configure — the traffic **CNAME** and the `_cf-custom-hostname` ownership **TXT** — so you can verify them. Activation is automatic: a background job reconciles pending domains (about every 2 minutes for the first 30 minutes after adding, then hourly), so this command is for instant feedback rather than required polling.
 
 Pass `--verbose` to additionally print the raw multi-line status breakdown (DB status, SSL status, ownership state, verification errors) underneath the rollup.