feat(cli): GitHub connection DX — executor/workflow prompts + void github status

docs/reference/cli.md

@@ -618,6 +618,8 @@ Connect a GitHub repository to a Void project for automatic deploys. On every pu
 
 The `--workflow` path is the workflow file the GitHub OIDC exchange authorizes to mint this project's deploy token. It defaults to the scaffolded `.github/workflows/void-deploy.yml`; set it only if your deploy step lives in a different workflow file (it must be under `.github/workflows/` and end in `.yml`/`.yaml`). Because the exchange is secretless, **only this one workflow** can mint a deploy token — any other workflow in the repo (including an unsafe `pull_request_target`) is rejected. Pointing it at a broad, multi-purpose workflow widens that trust, so prefer a dedicated file.
 
+Interactively (TTY), after resolving the repository and branch, `void github connect` prompts for the **build executor** (defaulting to `container`). If you pick `github_actions`, it then prompts for the **deploy workflow file**, defaulting to `.github/workflows/void-deploy.yml` and validated locally before it is sent. Pass `--executor` and/or `--workflow` to skip the respective prompt. The workflow prompt is skipped entirely for the `container` executor, which does not use a workflow file.
+
 **Non-interactive use (CI)**
 
 When stdin is not a TTY, `void github connect` never prompts — it fails closed and names any flag it needs. `--branch` is always required. `--project` must be resolvable (positional / `--project` / `VOID_PROJECT` / linked `.void/project.json`). `--installation` is required only when your account has more than one installation; otherwise the sole installation is used. `--repo` is required when the installation grants access to all repos or to more than one selected repo; when it grants exactly one repo that repo is used automatically. Use `void github installations` to discover the `installation_id`.
@@ -648,14 +650,34 @@ Update an existing connection's deploy **branch**, **build executor**, and/or au
 | `--executor <type>` | New build executor: `container` or `github_actions`              |
 | `--workflow <path>` | New authorized deploy workflow file (under `.github/workflows/`) |
 
-Interactively (TTY), `void github update` shows the current branch and executor and prompts for new values, defaulting each to the current setting. `--workflow` is flag-only — it is never prompted for; pass it explicitly to change the authorized workflow file. When stdin is not a TTY, it never prompts: pass at least one of `--branch` / `--executor` / `--workflow`, or it fails closed. If nothing actually changes, the command reports "no changes" and does not call the API.
+Interactively (TTY), `void github update` shows the current branch and executor and prompts for new values, defaulting each to the current setting. If the resulting executor is `github_actions`, it then prompts for the **deploy workflow file**, defaulting to the current path and validated locally; pass `--workflow` to skip that prompt. The workflow prompt is skipped when the executor is `container`, which does not use a workflow file. When stdin is not a TTY, it never prompts: pass at least one of `--branch` / `--executor` / `--workflow`, or it fails closed. If nothing actually changes, the command reports "no changes" and does not call the API.
 
 ```
 void github update my-app --executor github_actions
 ```
 
 **Project resolution** follows the same order as deploy: positional / `--project`, `VOID_PROJECT`, linked project (`.void/project.json`).
 
+### `void github status`
+
+```
+void github status [project]
+```
+
+Show a project's current GitHub connection: the connected **repository**, the deploy **branch**, the **build executor** (`container` or `github_actions`), and the authorized **deploy workflow file**. Read-only — it never changes anything. The workflow file is the OIDC pin used only for `github_actions` builds; on a `container` connection it is still shown but marked unused. The project must already be connected (run `void github connect` first, otherwise it reports that and exits).
+
+**Options**
+
+| Flag               | Description                                      |
+| ------------------ | ------------------------------------------------ |
+| `--project <name>` | Project name (alias for the positional argument) |
+
+```
+void github status my-app
+```
+
+**Project resolution** follows the same order as deploy: positional / `--project`, `VOID_PROJECT`, linked project (`.void/project.json`).
+
 ## Build
 
 Inspect Deploy-on-GitHub builds.

packages/void/src/cli/cli.ts

@@ -206,7 +206,7 @@ if (helpPath) {
     },
     {
       name: 'github',
-      hint: 'install | installations | connect | update | link',
+      hint: 'install | installations | connect | update | status | link',
       description: 'Connect a GitHub repository for automatic deploys',
     },
     {

packages/void/src/cli/github-args.ts

@@ -13,6 +13,11 @@ export const githubSubcommands: Array<SubcommandDef> = [
     arg: '[project]',
     description: "Update an existing connection's branch, build executor, or deploy workflow",
   },
+  {
+    name: 'status',
+    arg: '[project]',
+    description: "Show a project's GitHub connection (repo, branch, executor, workflow)",
+  },
   { name: 'link', description: 'Link your GitHub account to Void' },
 ];
 
@@ -35,6 +40,10 @@ export type GithubArgs =
       branch?: string;
       executor?: 'container' | 'github_actions';
       workflowPath?: string;
+    }
+  | {
+      subcommand: 'status';
+      projectName: string;
     };
 
 export function parseGithubArgs(args: Array<string>): GithubArgs {
@@ -209,5 +218,34 @@ export function parseGithubArgs(args: Array<string>): GithubArgs {
     return { subcommand, projectName, branch, executor, workflowPath };
   }
 
-  throw new Error('github: Usage: void github <install|installations|connect|update|link>.');
+  if (subcommand === 'status') {
+    let projectName = '';
+
+    for (let i = 0; i < rest.length; i++) {
+      const arg = rest[i];
+      if (arg === '--project') {
+        if (i + 1 >= rest.length) {
+          throw new Error('github: --project requires a value.');
+        }
+        const value = rest[++i]!;
+        if (value.trim() === '') {
+          throw new Error('github: --project requires a value.');
+        }
+        if (projectName) {
+          throw new Error(`github: Unexpected argument '${value}'.`);
+        }
+        projectName = value;
+      } else if (arg.startsWith('-')) {
+        throw new Error(`github: Unexpected argument '${arg}'.`);
+      } else if (projectName) {
+        throw new Error(`github: Unexpected argument '${arg}'.`);
+      } else {
+        projectName = arg;
+      }
+    }
+
+    return { subcommand, projectName };
+  }
+
+  throw new Error('github: Usage: void github <install|installations|connect|update|status|link>.');
 }