@cardelli/ambit 0.1.2 → 0.1.4

package/esm/src/cli/commands/deploy.js

@@ -2,7 +2,7 @@
 // Deploy Command - Safely Deploy a Workload App on a Custom Private Network
 // =============================================================================
 import * as dntShim from "../../../_dnt.shims.js";
-import { parseArgs } from "../../../deps/jsr.io/@std/cli/1.0.27/mod.js";
+import { parseArgs } from "../../../deps/jsr.io/@std/cli/1.0.28/mod.js";
 import { join } from "../../../deps/jsr.io/@std/path/1.1.4/mod.js";
 import { bold, confirm, fileExists } from "../../../lib/cli.js";
 import { createOutput } from "../../../lib/output.js";
@@ -11,6 +11,7 @@ import { createFlyProvider, FlyDeployError } from "../../providers/fly.js";
 import { findRouterApp } from "../../discovery.js";
 import { resolveOrg } from "../../resolve.js";
 import { assertNotRouter, auditDeploy, scanFlyToml } from "../../guard.js";
+import { fetchTemplate, parseTemplateRef } from "../../template.js";
 // =============================================================================
 // Image Mode
 // =============================================================================
@@ -91,11 +92,79 @@ const resolveConfigMode = async (explicitConfig, out) => {
     };
 };
 // =============================================================================
+// Template Mode
+// =============================================================================
+/** Resolve deploy config for template mode (--template). */
+const resolveTemplateMode = async (templateRaw, out) => {
+    const ref = parseTemplateRef(templateRaw);
+    if (!ref) {
+        out.die(`Invalid Template Reference: "${templateRaw}". ` +
+            `Format: owner/repo[/path][@ref]`);
+        return null;
+    }
+    const label = (ref.path === "."
+        ? `${ref.owner}/${ref.repo}`
+        : `${ref.owner}/${ref.repo}/${ref.path}`) +
+        (ref.ref ? `@${ref.ref}` : "");
+    out.info(`Template: ${label}`);
+    const fetchSpinner = out.spinner("Fetching Template from GitHub");
+    const result = await fetchTemplate(ref);
+    if (!result.ok) {
+        fetchSpinner.fail("Template Fetch Failed");
+        out.die(result.message);
+        return null;
+    }
+    fetchSpinner.success("Template Fetched");
+    // Find and scan the template's fly.toml
+    const configPath = join(result.templateDir, "fly.toml");
+    let tomlContent;
+    try {
+        tomlContent = await dntShim.Deno.readTextFile(configPath);
+    }
+    catch {
+        try {
+            dntShim.Deno.removeSync(result.tempDir, { recursive: true });
+        }
+        catch { /* ignore */ }
+        out.die(`Template '${ref.path === "." ? ref.repo : ref.path}' Has No fly.toml`);
+        return null;
+    }
+    const scan = scanFlyToml(tomlContent);
+    if (scan.errors.length > 0) {
+        try {
+            dntShim.Deno.removeSync(result.tempDir, { recursive: true });
+        }
+        catch { /* ignore */ }
+        for (const err of scan.errors) {
+            out.err(err);
+        }
+        out.die("Pre-flight Check Failed for Template fly.toml");
+        return null;
+    }
+    for (const warn of scan.warnings) {
+        out.warn(warn);
+    }
+    out.ok(`Scanned ${ref.path === "." ? "" : ref.path + "/"}fly.toml`);
+    return {
+        configPath,
+        preflight: { scanned: scan.scanned, warnings: scan.warnings },
+        tempDir: result.tempDir,
+    };
+};
+// =============================================================================
 // Deploy Command
 // =============================================================================
 const deploy = async (argv) => {
     const args = parseArgs(argv, {
-        string: ["network", "org", "region", "image", "config", "main-port"],
+        string: [
+            "network",
+            "org",
+            "region",
+            "image",
+            "config",
+            "main-port",
+            "template",
+        ],
         boolean: ["help", "yes", "json"],
         alias: { y: "yes" },
         default: { "main-port": "80" },
@@ -105,35 +174,58 @@ const deploy = async (argv) => {
 ${bold("ambit deploy")} - Deploy an App Safely on a Custom Private Network
 
 ${bold("USAGE")}
+  ambit deploy <app>.<network> [options]
   ambit deploy <app> --network <name> [options]
 
+  The network can be specified as part of the name (app.network) or with --network.
+
 ${bold("MODES")}
   Config mode (default):
-    ambit deploy <app> --network <name>                 Uses ./fly.toml
-    ambit deploy <app> --network <name> --config path   Explicit fly.toml
+    ambit deploy my-app.lab                                Uses ./fly.toml
+    ambit deploy my-app.lab --config path                  Explicit fly.toml
 
   Image mode:
-    ambit deploy <app> --network <name> --image <img>   Docker image, no toml
+    ambit deploy my-app.lab --image <img>                  Docker image, no toml
+
+  Template mode:
+    ambit deploy my-app.lab --template <ref>               GitHub template
 
 ${bold("OPTIONS")}
-  --network <name>       Custom 6PN network to target (required)
+  --network <name>       Target network
   --org <org>            Fly.io organization slug
   --region <region>      Primary deployment region
-  --image <img>          Docker image (mutually exclusive with --config)
-  --config <path>        fly.toml path (mutually exclusive with --image)
-  --main-port <port>     Internal port for HTTP service in image mode (default: 80, "none" to skip)
   -y, --yes              Skip confirmation prompts
   --json                 Output as JSON
 
+${bold("CONFIG MODE")} (default)
+  --config <path>        Explicit fly.toml path (auto-detects ./fly.toml if omitted)
+
+${bold("IMAGE MODE")}
+  --image <img>          Docker image to deploy (no fly.toml needed)
+  --main-port <port>     Internal port for HTTP service (default: 80, "none" to skip)
+
+${bold("TEMPLATE MODE")}
+  --template <ref>       GitHub template as owner/repo[/path][@ref]
+
+  Reference format:
+    owner/repo                Fetch repo root from the default branch
+    owner/repo/path           Fetch subdirectory from the default branch
+    owner/repo/path@tag       Fetch a tagged release
+    owner/repo/path@branch    Fetch a specific branch
+    owner/repo/path@commit    Fetch a specific commit
+
 ${bold("SAFETY")}
   Always deploys with --no-public-ips and --flycast.
   Post-deploy audit releases any public IPs and verifies Flycast allocation.
   Pre-flight scan rejects fly.toml with force_https or TLS on 443.
 
 ${bold("EXAMPLES")}
-  ambit deploy my-app --network browsers
-  ambit deploy my-app --network browsers --image registry/img:latest
-  ambit deploy my-app --network browsers --config ./fly.toml --region sea
+  ambit deploy my-app.lab
+  ambit deploy my-app.lab --image registry/img:latest
+  ambit deploy my-app.lab --config ./fly.toml --region sea
+  ambit deploy my-claw.lab --template ToxicPine/ambit-openclaw
+  ambit deploy my-browser.lab --template ToxicPine/ambit-templates/chromatic
+  ambit deploy my-browser --network lab --template ToxicPine/ambit-templates/chromatic@v1.0
 `);
         return;
     }
@@ -143,11 +235,27 @@ ${bold("EXAMPLES")}
     // ==========================================================================
     const appArg = args._[0];
     if (!appArg || typeof appArg !== "string") {
-        return out.die("App Name Required. Usage: ambit deploy <app> --network <name>");
+        return out.die("Missing app name. Usage: ambit deploy <app>.<network>");
     }
-    const app = appArg;
-    if (!args.network) {
-        return out.die("--network Is Required");
+    let app;
+    let network;
+    if (appArg.includes(".")) {
+        const parts = appArg.split(".");
+        if (parts.length !== 2 || !parts[0] || !parts[1]) {
+            return out.die(`'${appArg}' should have exactly one dot, like my-app.my-network`);
+        }
+        if (args.network) {
+            return out.die(`Network is already part of the name ('${appArg}'), --network is not needed`);
+        }
+        app = parts[0];
+        network = parts[1];
+    }
+    else {
+        app = appArg;
+        if (!args.network) {
+            return out.die(`Missing network. Use: ambit deploy ${app}.<network>`);
+        }
+        network = args.network;
     }
     try {
         assertNotRouter(app);
@@ -155,10 +263,10 @@ ${bold("EXAMPLES")}
     catch (e) {
         return out.die(e instanceof Error ? e.message : String(e));
     }
-    if (args.image && args.config) {
-        return out.die("--image and --config Are Mutually Exclusive");
+    const modeFlags = [args.image, args.config, args.template].filter(Boolean);
+    if (modeFlags.length > 1) {
+        return out.die("--image, --config, and --template Are Mutually Exclusive");
     }
-    const network = args.network;
     out.blank()
         .header("=".repeat(50))
         .header(`  ambit Deploy: ${app}`)
@@ -214,9 +322,16 @@ ${bold("EXAMPLES")}
     // Phase 4: Resolve Deploy Mode
     // ==========================================================================
     out.header("Step 4: Pre-flight Check").blank();
-    const deployConfig = args.image
-        ? resolveImageMode(args.image, String(args["main-port"]), out)
-        : await resolveConfigMode(args.config, out);
+    let deployConfig;
+    if (args.template) {
+        deployConfig = await resolveTemplateMode(args.template, out);
+    }
+    else if (args.image) {
+        deployConfig = resolveImageMode(args.image, String(args["main-port"]), out);
+    }
+    else {
+        deployConfig = await resolveConfigMode(args.config, out);
+    }
     if (!deployConfig)
         return; // mode resolver already called out.die()
     out.blank();
@@ -306,6 +421,6 @@ ${bold("EXAMPLES")}
 registerCommand({
     name: "deploy",
     description: "Deploy an app safely on a custom private network",
-    usage: "ambit deploy <app> --network <name> [--image <img>] [--org <org>] [--region <region>]",
+    usage: "ambit deploy <app> --network <name> [--image <img>] [--template <ref>] [--org <org>] [--region <region>]",
     run: deploy,
 });

package/esm/src/cli/commands/destroy.js

@@ -1,19 +1,47 @@
 // =============================================================================
-// Destroy Command - Tear Down Router and Clean Up
+// Destroy Command - Destroy Networks or Apps
 // =============================================================================
-import { parseArgs } from "../../../deps/jsr.io/@std/cli/1.0.27/mod.js";
+import * as dntShim from "../../../_dnt.shims.js";
+import { parseArgs } from "../../../deps/jsr.io/@std/cli/1.0.28/mod.js";
 import { bold, confirm } from "../../../lib/cli.js";
 import { createOutput } from "../../../lib/output.js";
 import { registerCommand } from "../mod.js";
 import { createFlyProvider } from "../../providers/fly.js";
 import { createTailscaleProvider } from "../../providers/tailscale.js";
 import { checkDependencies } from "../../credentials.js";
-import { findRouterApp } from "../../discovery.js";
+import { findRouterApp, findWorkloadApp, listWorkloadAppsOnNetwork, } from "../../discovery.js";
 import { resolveOrg } from "../../resolve.js";
+import { assertNotRouter } from "../../guard.js";
 // =============================================================================
-// Destroy Command
+// Top-Level Help
 // =============================================================================
-const destroy = async (argv) => {
+const showDestroyHelp = () => {
+    console.log(`
+${bold("ambit destroy")} - Destroy Networks or Apps
+
+${bold("USAGE")}
+  ambit destroy network <name> [options]
+  ambit destroy app <app>.<network> [options]
+
+${bold("SUBCOMMANDS")}
+  network    Tear down a router, clean up DNS and tailnet device
+  app        Destroy a workload app on a network
+
+${bold("OPTIONS")}
+  --help     Show help for a subcommand
+
+${bold("EXAMPLES")}
+  ambit destroy network browsers
+  ambit destroy app my-app.browsers
+  ambit destroy app my-app --network browsers
+
+Run 'ambit destroy network --help' or 'ambit destroy app --help' for details.
+`);
+};
+// =============================================================================
+// Destroy Network
+// =============================================================================
+const destroyNetwork = async (argv) => {
     const args = parseArgs(argv, {
         string: ["network", "org"],
         boolean: ["help", "yes", "json"],
@@ -21,57 +49,78 @@ const destroy = async (argv) => {
     });
     if (args.help) {
         console.log(`
-${bold("ambit destroy")} - Tear Down Router
+${bold("ambit destroy network")} - Tear Down Router
 
 ${bold("USAGE")}
-  ambit destroy --network <name> [--org <org>] [--yes] [--json]
+  ambit destroy network <name> [--org <org>] [--yes] [--json]
 
 ${bold("OPTIONS")}
-  --network <name>   Network of the router to destroy (required)
   --org <org>        Fly.io organization slug
   -y, --yes          Skip confirmation prompts
   --json             Output as JSON
+
+${bold("EXAMPLES")}
+  ambit destroy network browsers
+  ambit destroy network browsers --org my-org --yes
 `);
         return;
     }
     const out = createOutput(args.json);
-    if (!args.network) {
-        return out.die("--network Is Required");
+    // Accept network as positional or --network flag (backward compat)
+    const network = (typeof args._[0] === "string" ? args._[0] : undefined) || args.network;
+    if (!network) {
+        return out.die("Network name required. Usage: ambit destroy network <name>");
     }
-    // =========================================================================
+    // ===========================================================================
     // Prerequisites
-    // =========================================================================
+    // ===========================================================================
     const { tailscaleKey } = await checkDependencies(out);
     const fly = createFlyProvider();
     await fly.ensureAuth({ interactive: !args.json });
     const tailscale = createTailscaleProvider("-", tailscaleKey);
     const org = await resolveOrg(fly, args, out);
-    // =========================================================================
+    // ===========================================================================
     // Discover Router
-    // =========================================================================
+    // ===========================================================================
     const spinner = out.spinner("Discovering Router");
-    const app = await findRouterApp(fly, org, args.network);
+    const app = await findRouterApp(fly, org, network);
     if (!app) {
         spinner.fail("Router Not Found");
-        return out.die(`No Router Found for Network '${args.network}'`);
+        return out.die(`No Router Found for Network '${network}'`);
     }
     spinner.success(`Found Router: ${app.appName}`);
     let tsDevice = null;
     try {
         tsDevice = await tailscale.getDeviceByHostname(app.appName);
     }
-    catch { /* device may not exist */ }
+    catch {
+        /* device may not exist */
+    }
     const tag = tsDevice?.tags?.[0] ?? null;
-    // =========================================================================
+    // ===========================================================================
+    // Check for Workload Apps on This Network
+    // ===========================================================================
+    const workloadApps = await listWorkloadAppsOnNetwork(fly, org, network);
+    // ===========================================================================
     // Confirm
-    // =========================================================================
+    // ===========================================================================
     out.blank()
-        .header("ambit Destroy")
+        .header("ambit Destroy Network")
         .blank()
-        .text(`  Network:    ${app.network}`)
+        .text(`  Network:    ${network}`)
         .text(`  Router App: ${app.appName}`)
         .text(`  Tag:        ${tag ?? "unknown"}`)
         .blank();
+    if (workloadApps.length > 0) {
+        out.warn(`${workloadApps.length} workload app(s) still on network '${network}':`);
+        for (const wa of workloadApps) {
+            out.text(`  - ${wa.appName}`);
+        }
+        out.blank();
+        out.dim("These apps will lose connectivity when the router is destroyed.");
+        out.dim(`Consider destroying them first with: ambit destroy app <name>.${network}`);
+        out.blank();
+    }
     if (!args.yes && !args.json) {
         const confirmed = await confirm("Destroy this router?");
         if (!confirmed) {
@@ -80,12 +129,12 @@ ${bold("OPTIONS")}
         }
         out.blank();
     }
-    // =========================================================================
+    // ===========================================================================
     // Tear Down
-    // =========================================================================
+    // ===========================================================================
     const dnsSpinner = out.spinner("Clearing Split DNS");
     try {
-        await tailscale.clearSplitDns(app.network);
+        await tailscale.clearSplitDns(network);
         dnsSpinner.success("Split DNS Cleared");
     }
     catch {
@@ -113,10 +162,14 @@ ${bold("OPTIONS")}
     catch {
         appSpinner.fail("Could Not Destroy Fly App");
     }
-    // =========================================================================
+    // ===========================================================================
     // Done
-    // =========================================================================
-    out.done({ destroyed: true, appName: app.appName });
+    // ===========================================================================
+    out.done({
+        destroyed: true,
+        appName: app.appName,
+        workloadAppsWarned: workloadApps.length,
+    });
     out.ok("Router Destroyed");
     if (tag) {
         out.blank()
@@ -135,11 +188,153 @@ ${bold("OPTIONS")}
     out.print();
 };
 // =============================================================================
+// Destroy App
+// =============================================================================
+const destroyApp = async (argv) => {
+    const args = parseArgs(argv, {
+        string: ["network", "org"],
+        boolean: ["help", "yes", "json"],
+        alias: { y: "yes" },
+    });
+    if (args.help) {
+        console.log(`
+${bold("ambit destroy app")} - Destroy a Workload App
+
+${bold("USAGE")}
+  ambit destroy app <app>.<network> [--org <org>] [--yes] [--json]
+  ambit destroy app <app> --network <name> [--org <org>] [--yes] [--json]
+
+${bold("OPTIONS")}
+  --network <name>   Target network (if not using dot syntax)
+  --org <org>        Fly.io organization slug
+  -y, --yes          Skip confirmation prompts
+  --json             Output as JSON
+
+${bold("EXAMPLES")}
+  ambit destroy app my-app.browsers
+  ambit destroy app my-app --network browsers --yes
+`);
+        return;
+    }
+    const out = createOutput(args.json);
+    // ===========================================================================
+    // Parse App & Network
+    // ===========================================================================
+    const appArg = args._[0];
+    if (!appArg || typeof appArg !== "string") {
+        return out.die("Missing app name. Usage: ambit destroy app <app>.<network>");
+    }
+    let app;
+    let network;
+    if (appArg.includes(".")) {
+        const parts = appArg.split(".");
+        if (parts.length !== 2 || !parts[0] || !parts[1]) {
+            return out.die(`'${appArg}' should have exactly one dot, like my-app.my-network`);
+        }
+        if (args.network) {
+            return out.die(`Network is already part of the name ('${appArg}'), --network is not needed`);
+        }
+        app = parts[0];
+        network = parts[1];
+    }
+    else {
+        app = appArg;
+        if (!args.network) {
+            return out.die(`Missing network. Use: ambit destroy app ${app}.<network>`);
+        }
+        network = args.network;
+    }
+    try {
+        assertNotRouter(app);
+    }
+    catch (e) {
+        return out.die(e instanceof Error ? e.message : String(e));
+    }
+    // ===========================================================================
+    // Prerequisites
+    // ===========================================================================
+    const { tailscaleKey: _tailscaleKey } = await checkDependencies(out);
+    const fly = createFlyProvider();
+    await fly.ensureAuth({ interactive: !args.json });
+    const org = await resolveOrg(fly, args, out);
+    // ===========================================================================
+    // Discover App
+    // ===========================================================================
+    const spinner = out.spinner("Discovering App");
+    const workloadApp = await findWorkloadApp(fly, org, app, network);
+    if (!workloadApp) {
+        spinner.fail("App Not Found");
+        // Check if app exists on a different network
+        const anyApp = await findWorkloadApp(fly, org, app);
+        if (anyApp) {
+            return out.die(`App '${app}' exists on network '${anyApp.network}', not '${network}'`);
+        }
+        return out.die(`No app '${app}' found on network '${network}'`);
+    }
+    spinner.success(`Found App: ${workloadApp.appName} (network: ${workloadApp.network})`);
+    // ===========================================================================
+    // Confirm
+    // ===========================================================================
+    out.blank()
+        .header("ambit Destroy App")
+        .blank()
+        .text(`  App:      ${workloadApp.appName}`)
+        .text(`  Network:  ${workloadApp.network}`)
+        .blank();
+    if (!args.yes && !args.json) {
+        const confirmed = await confirm(`Destroy app '${app}' on network '${network}'?`);
+        if (!confirmed) {
+            out.text("Cancelled.");
+            return;
+        }
+        out.blank();
+    }
+    // ===========================================================================
+    // Destroy
+    // ===========================================================================
+    const appSpinner = out.spinner("Destroying Fly App");
+    try {
+        await fly.deleteApp(app);
+        appSpinner.success("Fly App Destroyed");
+    }
+    catch {
+        appSpinner.fail("Could Not Destroy Fly App");
+    }
+    // ===========================================================================
+    // Done
+    // ===========================================================================
+    out.done({ destroyed: true, appName: app, network });
+    out.ok("App Destroyed");
+    out.blank();
+    out.print();
+};
+// =============================================================================
+// Dispatcher
+// =============================================================================
+const destroy = async (argv) => {
+    const subcommand = typeof argv[0] === "string" ? argv[0] : undefined;
+    if (subcommand === "network") {
+        return destroyNetwork(argv.slice(1));
+    }
+    if (subcommand === "app") {
+        return destroyApp(argv.slice(1));
+    }
+    // Handle --help at the top level
+    const args = parseArgs(argv, { boolean: ["help"] });
+    if (args.help) {
+        showDestroyHelp();
+        return;
+    }
+    // No valid subcommand
+    showDestroyHelp();
+    dntShim.Deno.exit(1);
+};
+// =============================================================================
 // Register Command
 // =============================================================================
 registerCommand({
     name: "destroy",
-    description: "Tear down the router, clean up DNS and tailnet device",
-    usage: "ambit destroy --network <name> [--org <org>] [--yes] [--json]",
+    description: "Destroy a network (router) or a workload app",
+    usage: "ambit destroy network|app <name> [options]",
     run: destroy,
 });

package/esm/src/cli/commands/doctor.js

@@ -1,7 +1,7 @@
 // =============================================================================
 // Doctor Command - Verify Environment and Infrastructure Health
 // =============================================================================
-import { parseArgs } from "../../../deps/jsr.io/@std/cli/1.0.27/mod.js";
+import { parseArgs } from "../../../deps/jsr.io/@std/cli/1.0.28/mod.js";
 import { bold } from "../../../lib/cli.js";
 import { createOutput } from "../../../lib/output.js";
 import { runCommand } from "../../../lib/command.js";

package/esm/src/cli/commands/list.js

@@ -1,7 +1,7 @@
 // =============================================================================
 // List Command - List All Discovered Routers
 // =============================================================================
-import { parseArgs } from "../../../deps/jsr.io/@std/cli/1.0.27/mod.js";
+import { parseArgs } from "../../../deps/jsr.io/@std/cli/1.0.28/mod.js";
 import { Table } from "../../../deps/jsr.io/@cliffy/table/1.0.0/mod.js";
 import { bold } from "../../../lib/cli.js";
 import { createOutput } from "../../../lib/output.js";

package/esm/src/cli/commands/status.js

@@ -1,7 +1,7 @@
 // =============================================================================
 // Status Command - Show Router Status
 // =============================================================================
-import { parseArgs } from "../../../deps/jsr.io/@std/cli/1.0.27/mod.js";
+import { parseArgs } from "../../../deps/jsr.io/@std/cli/1.0.28/mod.js";
 import { Table } from "../../../deps/jsr.io/@cliffy/table/1.0.0/mod.js";
 import { bold } from "../../../lib/cli.js";
 import { createOutput } from "../../../lib/output.js";

package/esm/src/cli/mod.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../../src/src/cli/mod.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAQD,eAAO,MAAM,eAAe,GAAI,SAAS,OAAO,KAAG,IAElD,CAAC;AAEF,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,KAAG,OAAO,GAAG,SAEnD,CAAC;AAEF,eAAO,MAAM,cAAc,QAAO,OAAO,EAExC,CAAC;AAQF,eAAO,MAAM,QAAQ,QAAO,IA4B3B,CAAC;AAEF,eAAO,MAAM,WAAW,QAAO,IAE9B,CAAC;AAMF,eAAO,MAAM,MAAM,GAAU,MAAM,MAAM,EAAE,KAAG,OAAO,CAAC,IAAI,CAuCzD,CAAC"}
+{"version":3,"file":"mod.d.ts","sourceRoot":"","sources":["../../../src/src/cli/mod.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,OAAO;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACxC;AAQD,eAAO,MAAM,eAAe,GAAI,SAAS,OAAO,KAAG,IAElD,CAAC;AAEF,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,KAAG,OAAO,GAAG,SAEnD,CAAC;AAEF,eAAO,MAAM,cAAc,QAAO,OAAO,EAExC,CAAC;AAQF,eAAO,MAAM,QAAQ,QAAO,IA6B3B,CAAC;AAEF,eAAO,MAAM,WAAW,QAAO,IAE9B,CAAC;AAMF,eAAO,MAAM,MAAM,GAAU,MAAM,MAAM,EAAE,KAAG,OAAO,CAAC,IAAI,CAuCzD,CAAC"}

package/esm/src/cli/mod.js

@@ -2,8 +2,9 @@
 // CLI Framework - Command Parser and Router
 // =============================================================================
 import * as dntShim from "../../_dnt.shims.js";
-import { parseArgs } from "../../deps/jsr.io/@std/cli/1.0.27/mod.js";
+import { parseArgs } from "../../deps/jsr.io/@std/cli/1.0.28/mod.js";
 import { bold, dim } from "../../lib/cli.js";
+import denoConfig from "../../deno.js";
 // =============================================================================
 // Commands Registry
 // =============================================================================
@@ -20,7 +21,7 @@ export const getAllCommands = () => {
 // =============================================================================
 // Help Text
 // =============================================================================
-const VERSION = "0.3.0";
+const VERSION = denoConfig.version;
 export const showHelp = () => {
     console.log(`
 ${bold("ambit")} - Tailscale Subnet Router for Fly.io Custom Networks
@@ -33,7 +34,7 @@ ${bold("COMMANDS")}
   deploy     Deploy an app safely on a custom private network
   list       List all discovered routers across networks
   status     Show router status, network, and tailnet info
-  destroy    Tear down the router, clean up DNS and tailnet device
+  destroy    Destroy a network (router) or a workload app
   doctor     Check that Tailscale and the router are working correctly
 
 ${bold("OPTIONS")}
@@ -44,7 +45,8 @@ ${bold("EXAMPLES")}
   ambit create browsers
   ambit list
   ambit status --network browsers
-  ambit destroy --network browsers
+  ambit destroy network browsers
+  ambit destroy app my-app.browsers
   ambit doctor
 
 ${dim("Run 'ambit <command> --help' for command-specific help.")}