bindler 1.1.0 → 1.2.0

package/dist/cli.js

@@ -2,11 +2,11 @@
 
 // src/cli.ts
 import { Command } from "commander";
-import chalk26 from "chalk";
+import chalk29 from "chalk";
 
 // src/commands/new.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync3 } from "fs";
-import { basename } from "path";
+import { existsSync as existsSync5, mkdirSync as mkdirSync3 } from "fs";
+import { basename as basename2 } from "path";
 import inquirer from "inquirer";
 import chalk from "chalk";
 
@@ -140,6 +140,19 @@ function getDefaults() {
   const config = readConfig();
   return config.defaults;
 }
+function listProjectsForEnv(env = "production") {
+  const config = readConfig();
+  return config.projects.map((project) => {
+    const envConfig = project.environments?.[env];
+    if (!envConfig) return project;
+    return {
+      ...project,
+      hostname: envConfig.hostname || project.hostname,
+      port: envConfig.port || project.port,
+      env: { ...project.env, ...envConfig.env }
+    };
+  });
+}
 
 // src/lib/utils.ts
 import { execSync, spawn } from "child_process";
@@ -277,6 +290,60 @@ function getPortsTable() {
 // src/lib/nginx.ts
 import { existsSync as existsSync3, writeFileSync as writeFileSync2, copyFileSync as copyFileSync2, mkdirSync as mkdirSync2 } from "fs";
 import { dirname as dirname2, join as join3 } from "path";
+import { createHash } from "crypto";
+function generateHtpasswdEntry(username, password) {
+  const result = execCommandSafe(`openssl passwd -apr1 '${password.replace(/'/g, "'\\''")}'`);
+  if (result.success && result.output) {
+    return `${username}:${result.output.trim()}`;
+  }
+  const hash = createHash("md5").update(password).digest("base64");
+  return `${username}:{PLAIN}${password}`;
+}
+function generateSecurityDirectives(project, indent) {
+  const lines = [];
+  const security = project.security;
+  if (!security) return lines;
+  if (security.basicAuth?.enabled) {
+    const realm = security.basicAuth.realm || "Restricted";
+    const htpasswdPath = security.basicAuth.htpasswdPath || join3(getGeneratedDir(), `htpasswd-${project.name}`);
+    lines.push(`${indent}    auth_basic "${realm}";`);
+    lines.push(`${indent}    auth_basic_user_file ${htpasswdPath};`);
+  }
+  if (security.ipBlocklist?.length) {
+    for (const ip of security.ipBlocklist) {
+      lines.push(`${indent}    deny ${ip};`);
+    }
+  }
+  if (security.ipAllowlist?.length) {
+    for (const ip of security.ipAllowlist) {
+      lines.push(`${indent}    allow ${ip};`);
+    }
+    lines.push(`${indent}    deny all;`);
+  }
+  if (security.rateLimit?.enabled) {
+    const burst = security.rateLimit.burst || 20;
+    lines.push(`${indent}    limit_req zone=limit_${project.name} burst=${burst} nodelay;`);
+  }
+  if (security.headers) {
+    const h = security.headers;
+    if (h.hsts) {
+      lines.push(`${indent}    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;`);
+    }
+    if (h.xFrameOptions) {
+      lines.push(`${indent}    add_header X-Frame-Options "${h.xFrameOptions}" always;`);
+    }
+    if (h.xContentTypeOptions) {
+      lines.push(`${indent}    add_header X-Content-Type-Options "nosniff" always;`);
+    }
+    if (h.xXssProtection) {
+      lines.push(`${indent}    add_header X-XSS-Protection "1; mode=block" always;`);
+    }
+    if (h.contentSecurityPolicy) {
+      lines.push(`${indent}    add_header Content-Security-Policy "${h.contentSecurityPolicy}" always;`);
+    }
+  }
+  return lines;
+}
 function generateLocationBlock(project, indent = "    ") {
   const lines = [];
   const locationPath = project.basePath || "/";
@@ -290,6 +357,7 @@ function generateLocationBlock(project, indent = "    ") {
     }
     lines.push(`${indent}    index index.html index.htm;`);
     lines.push(`${indent}    try_files $uri $uri/ =404;`);
+    lines.push(...generateSecurityDirectives(project, indent));
     lines.push(`${indent}}`);
   } else if (project.type === "npm") {
     lines.push(`${indent}location ${locationPath} {`);
@@ -302,10 +370,22 @@ function generateLocationBlock(project, indent = "    ") {
     lines.push(`${indent}    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;`);
     lines.push(`${indent}    proxy_set_header X-Forwarded-Proto $scheme;`);
     lines.push(`${indent}    proxy_cache_bypass $http_upgrade;`);
+    lines.push(...generateSecurityDirectives(project, indent));
     lines.push(`${indent}}`);
   }
   return lines;
 }
+function generateHtpasswdFiles(projects) {
+  for (const project of projects) {
+    if (project.security?.basicAuth?.enabled && project.security.basicAuth.users?.length) {
+      const htpasswdPath = project.security.basicAuth.htpasswdPath || join3(getGeneratedDir(), `htpasswd-${project.name}`);
+      const entries = project.security.basicAuth.users.map(
+        (u) => generateHtpasswdEntry(u.username, u.password)
+      );
+      writeFileSync2(htpasswdPath, entries.join("\n") + "\n");
+    }
+  }
+}
 function generateNginxConfig(config) {
   const { defaults, projects } = config;
   const listen = defaults.nginxListen;
@@ -314,6 +394,17 @@ function generateNginxConfig(config) {
     `# Generated at: ${(/* @__PURE__ */ new Date()).toISOString()}`,
     ""
   ];
+  const rateLimitedProjects = projects.filter(
+    (p) => p.enabled !== false && p.security?.rateLimit?.enabled
+  );
+  if (rateLimitedProjects.length > 0) {
+    lines.push("# Rate limiting zones");
+    for (const project of rateLimitedProjects) {
+      const rps = project.security?.rateLimit?.requestsPerSecond || 10;
+      lines.push(`limit_req_zone $binary_remote_addr zone=limit_${project.name}:10m rate=${rps}r/s;`);
+    }
+    lines.push("");
+  }
   const hostGroups = /* @__PURE__ */ new Map();
   for (const project of projects) {
     if (project.enabled === false) {
@@ -550,6 +641,59 @@ function restartAllProjects(projects) {
   }));
 }
 
+// src/lib/yaml.ts
+import { existsSync as existsSync4, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "fs";
+import { join as join4, basename } from "path";
+import yaml from "js-yaml";
+var YAML_FILENAME = "bindler.yaml";
+function readBindlerYaml(dir) {
+  const yamlPath = join4(dir, YAML_FILENAME);
+  if (!existsSync4(yamlPath)) {
+    return null;
+  }
+  try {
+    const content = readFileSync3(yamlPath, "utf-8");
+    const parsed = yaml.load(content);
+    return parsed || null;
+  } catch {
+    return null;
+  }
+}
+function yamlToProject(yamlConfig, dir) {
+  const project = {
+    name: yamlConfig.name || basename(dir),
+    type: yamlConfig.type || "static",
+    path: dir,
+    hostname: yamlConfig.hostname,
+    basePath: yamlConfig.basePath,
+    port: yamlConfig.port,
+    start: yamlConfig.start,
+    env: yamlConfig.env,
+    local: yamlConfig.local,
+    security: yamlConfig.security,
+    environments: yamlConfig.environments
+  };
+  for (const key of Object.keys(project)) {
+    if (project[key] === void 0) {
+      delete project[key];
+    }
+  }
+  return project;
+}
+function mergeYamlWithProject(project, yamlConfig) {
+  return {
+    ...project,
+    hostname: yamlConfig.hostname || project.hostname,
+    basePath: yamlConfig.basePath ?? project.basePath,
+    port: yamlConfig.port ?? project.port,
+    start: yamlConfig.start ?? project.start,
+    env: yamlConfig.env ? { ...project.env, ...yamlConfig.env } : project.env,
+    local: yamlConfig.local ?? project.local,
+    security: yamlConfig.security ?? project.security,
+    environments: yamlConfig.environments ?? project.environments
+  };
+}
+
 // src/commands/new.ts
 async function newCommand(options) {
   console.log(chalk.dim("Checking prerequisites...\n"));
@@ -584,7 +728,14 @@ async function newCommand(options) {
   const defaults = getDefaults();
   let project = {};
   const cwd = process.cwd();
-  const cwdName = basename(cwd);
+  const cwdName = basename2(cwd);
+  const initialPath = options.path || cwd;
+  const yamlConfig = existsSync5(initialPath) ? readBindlerYaml(initialPath) : null;
+  let yamlDefaults = {};
+  if (yamlConfig) {
+    console.log(chalk.cyan("Found bindler.yaml - using as defaults\n"));
+    yamlDefaults = yamlToProject(yamlConfig, initialPath);
+  }
   if (!options.name) {
     const answers = await inquirer.prompt([
       {
@@ -603,7 +754,7 @@ async function newCommand(options) {
         type: "input",
         name: "name",
         message: "Project name:",
-        default: cwdName,
+        default: yamlDefaults.name || cwdName,
         validate: (input) => {
           if (!validateProjectName(input)) {
             return "Invalid project name. Use alphanumeric characters, dashes, and underscores.";
@@ -616,21 +767,22 @@ async function newCommand(options) {
         name: "type",
         message: "Project type:",
         choices: (answers2) => {
-          const detected = existsSync4(answers2.path) ? detectProjectType(answers2.path) : "static";
+          const detected = existsSync5(answers2.path) ? detectProjectType(answers2.path) : "static";
           return [
             { name: `npm (Node.js app)${detected === "npm" ? " - detected" : ""}`, value: "npm" },
             { name: `static (HTML/CSS/JS)${detected === "static" ? " - detected" : ""}`, value: "static" }
           ];
         },
         default: (answers2) => {
-          return existsSync4(answers2.path) ? detectProjectType(answers2.path) : "static";
+          if (yamlDefaults.type) return yamlDefaults.type;
+          return existsSync5(answers2.path) ? detectProjectType(answers2.path) : "static";
         }
       },
       {
         type: "input",
         name: "hostname",
         message: options.local ? "Hostname (e.g., myapp.local):" : "Hostname (e.g., mysite.example.com or example.com):",
-        default: options.local ? `${cwdName}.local` : void 0,
+        default: yamlDefaults.hostname || (options.local ? `${cwdName}.local` : void 0),
         validate: (input) => {
           if (!validateHostname(input)) {
             return "Invalid hostname format";
@@ -642,6 +794,7 @@ async function newCommand(options) {
         type: "input",
         name: "basePath",
         message: "Base path (leave empty for root, or e.g., /api):",
+        default: yamlDefaults.basePath || "",
         filter: (input) => {
           if (!input || input.trim() === "") return "";
           const trimmed = input.trim();
@@ -652,9 +805,11 @@ async function newCommand(options) {
     project = { ...answers };
     if (!project.basePath) delete project.basePath;
     if (options.local) project.local = true;
+    if (yamlDefaults.security) project.security = yamlDefaults.security;
+    if (yamlDefaults.environments) project.environments = yamlDefaults.environments;
     if (answers.type === "npm") {
-      const scripts = existsSync4(answers.path) ? getPackageJsonScripts(answers.path) : [];
-      const suggestedPort = findAvailablePort();
+      const scripts = existsSync5(answers.path) ? getPackageJsonScripts(answers.path) : [];
+      const suggestedPort = yamlDefaults.port || findAvailablePort();
       const npmAnswers = await inquirer.prompt([
         {
           type: "input",
@@ -678,7 +833,7 @@ async function newCommand(options) {
             ...scripts.map((s) => ({ name: `npm run ${s}`, value: `npm run ${s}` })),
             { name: "Custom command...", value: "__custom__" }
           ] : void 0,
-          default: scripts.includes("start") ? "npm run start" : "npm start"
+          default: yamlDefaults.start || (scripts.includes("start") ? "npm run start" : "npm start")
         }
       ]);
       if (npmAnswers.start === "__custom__") {
@@ -734,7 +889,7 @@ async function newCommand(options) {
     console.error(chalk.red("Error: Invalid hostname"));
     process.exit(1);
   }
-  if (!existsSync4(project.path)) {
+  if (!existsSync5(project.path)) {
     const createDir = options.name ? true : (await inquirer.prompt([
       {
         type: "confirm",
@@ -1193,9 +1348,9 @@ Run ${chalk8.cyan("sudo bindler apply")} to apply changes to nginx.`));
 }
 
 // src/commands/edit.ts
-import { writeFileSync as writeFileSync3, readFileSync as readFileSync3, unlinkSync } from "fs";
+import { writeFileSync as writeFileSync4, readFileSync as readFileSync4, unlinkSync } from "fs";
 import { tmpdir } from "os";
-import { join as join4 } from "path";
+import { join as join5 } from "path";
 import chalk9 from "chalk";
 async function editCommand(name) {
   const project = getProject(name);
@@ -1204,8 +1359,8 @@ async function editCommand(name) {
     process.exit(1);
   }
   const editor = process.env.EDITOR || process.env.VISUAL || "vi";
-  const tmpFile = join4(tmpdir(), `bindler-${name}-${Date.now()}.json`);
-  writeFileSync3(tmpFile, JSON.stringify(project, null, 2) + "\n");
+  const tmpFile = join5(tmpdir(), `bindler-${name}-${Date.now()}.json`);
+  writeFileSync4(tmpFile, JSON.stringify(project, null, 2) + "\n");
   console.log(chalk9.dim(`Opening ${name} config in ${editor}...`));
   const exitCode = await spawnInteractive(editor, [tmpFile]);
   if (exitCode !== 0) {
@@ -1215,7 +1370,7 @@ async function editCommand(name) {
   }
   let editedContent;
   try {
-    editedContent = readFileSync3(tmpFile, "utf-8");
+    editedContent = readFileSync4(tmpFile, "utf-8");
   } catch (error) {
     console.error(chalk9.red("Failed to read edited file"));
     process.exit(1);
@@ -1303,6 +1458,7 @@ Run ${chalk10.cyan("sudo bindler apply")} to update nginx configuration.`));
 
 // src/commands/apply.ts
 import chalk11 from "chalk";
+import { existsSync as existsSync6 } from "fs";
 
 // src/lib/cloudflare.ts
 function isCloudflaredInstalled() {
@@ -1394,8 +1550,36 @@ function getTunnelInfo(tunnelName) {
 
 // src/commands/apply.ts
 async function applyCommand(options) {
-  const config = readConfig();
+  let config = readConfig();
   const defaults = getDefaults();
+  if (options.sync) {
+    console.log(chalk11.dim("Syncing bindler.yaml from project directories...\n"));
+    let synced = 0;
+    for (const project of config.projects) {
+      if (!existsSync6(project.path)) continue;
+      const yamlConfig = readBindlerYaml(project.path);
+      if (yamlConfig) {
+        const merged = mergeYamlWithProject(project, yamlConfig);
+        updateProject(project.name, merged);
+        console.log(chalk11.green(`  \u2713 Synced ${project.name} from bindler.yaml`));
+        synced++;
+      }
+    }
+    if (synced === 0) {
+      console.log(chalk11.dim("  No bindler.yaml files found in project directories"));
+    } else {
+      console.log(chalk11.dim(`
+  Synced ${synced} project(s)
+`));
+    }
+    config = readConfig();
+  }
+  if (options.env) {
+    console.log(chalk11.dim(`Using ${options.env} environment configuration...
+`));
+    const envProjects = listProjectsForEnv(options.env);
+    config = { ...config, projects: envProjects };
+  }
   if (config.projects.length === 0) {
     console.log(chalk11.yellow("No projects registered. Nothing to apply."));
     return;
@@ -1422,6 +1606,18 @@ Try running with sudo: ${chalk11.cyan("sudo bindler apply")}`));
     }
     process.exit(1);
   }
+  const authProjects = config.projects.filter(
+    (p) => p.security?.basicAuth?.enabled && p.security.basicAuth.users?.length
+  );
+  if (authProjects.length > 0) {
+    console.log(chalk11.dim("Generating htpasswd files..."));
+    try {
+      generateHtpasswdFiles(config.projects);
+      console.log(chalk11.green(`  \u2713 Generated htpasswd files for ${authProjects.length} project(s)`));
+    } catch (error) {
+      console.log(chalk11.yellow(`  ! Failed to generate htpasswd files: ${error}`));
+    }
+  }
   console.log(chalk11.dim("Testing nginx configuration..."));
   const testResult = testNginxConfig();
   if (!testResult.success) {
@@ -1511,7 +1707,7 @@ ${config.projects.length} project(s) configured:`));
 
 // src/commands/doctor.ts
 import chalk12 from "chalk";
-import { existsSync as existsSync5 } from "fs";
+import { existsSync as existsSync7 } from "fs";
 async function doctorCommand() {
   console.log(chalk12.blue("Running diagnostics...\n"));
   const checks = [];
@@ -1649,7 +1845,7 @@ async function doctorCommand() {
       }
     }
     const defaults = getDefaults();
-    if (existsSync5(defaults.nginxManagedPath)) {
+    if (existsSync7(defaults.nginxManagedPath)) {
       checks.push({
         name: "Nginx config file",
         status: "ok",
@@ -1663,7 +1859,7 @@ async function doctorCommand() {
         fix: "Run: sudo bindler apply"
       });
     }
-    if (existsSync5(defaults.projectsRoot)) {
+    if (existsSync7(defaults.projectsRoot)) {
       checks.push({
         name: "Projects root",
         status: "ok",
@@ -1758,7 +1954,7 @@ async function infoCommand() {
   `));
   console.log(chalk14.white("  Manage multiple projects behind Cloudflare Tunnel"));
   console.log(chalk14.white("  with Nginx and PM2\n"));
-  console.log(chalk14.dim("  Version:  ") + chalk14.white("1.1.0"));
+  console.log(chalk14.dim("  Version:  ") + chalk14.white("1.2.0"));
   console.log(chalk14.dim("  Author:   ") + chalk14.white("alfaoz"));
   console.log(chalk14.dim("  License:  ") + chalk14.white("MIT"));
   console.log(chalk14.dim("  GitHub:   ") + chalk14.cyan("https://github.com/alfaoz/bindler"));
@@ -1950,7 +2146,7 @@ Project: ${project.name} (${project.type})`));
 import chalk16 from "chalk";
 import inquirer3 from "inquirer";
 import { execSync as execSync2 } from "child_process";
-import { existsSync as existsSync6, readFileSync as readFileSync4 } from "fs";
+import { existsSync as existsSync8, readFileSync as readFileSync5 } from "fs";
 function detectOs() {
   const platform = process.platform;
   if (platform === "darwin") {
@@ -1961,8 +2157,8 @@ function detectOs() {
   }
   if (platform === "linux") {
     try {
-      if (existsSync6("/etc/os-release")) {
-        const osRelease = readFileSync4("/etc/os-release", "utf-8");
+      if (existsSync8("/etc/os-release")) {
+        const osRelease = readFileSync5("/etc/os-release", "utf-8");
         const lines = osRelease.split("\n");
         const info = {};
         for (const line of lines) {
@@ -1978,7 +2174,7 @@ function detectOs() {
         if (["ubuntu", "debian", "pop", "mint", "elementary"].includes(distro)) {
           packageManager = "apt";
         } else if (["fedora", "rhel", "centos", "rocky", "alma"].includes(distro)) {
-          packageManager = existsSync6("/usr/bin/dnf") ? "dnf" : "yum";
+          packageManager = existsSync8("/usr/bin/dnf") ? "dnf" : "yum";
         } else if (["amzn"].includes(distro)) {
           packageManager = "yum";
         }
@@ -2346,8 +2542,8 @@ async function initCommand() {
 // src/commands/deploy.ts
 import chalk18 from "chalk";
 import { execSync as execSync3 } from "child_process";
-import { existsSync as existsSync7 } from "fs";
-import { join as join5 } from "path";
+import { existsSync as existsSync9 } from "fs";
+import { join as join6 } from "path";
 function runInDir(command, cwd) {
   try {
     const output = execSync3(command, { cwd, encoding: "utf-8", stdio: "pipe" });
@@ -2377,7 +2573,7 @@ async function deployCommand(name, options) {
     }
     process.exit(1);
   }
-  if (!existsSync7(project.path)) {
+  if (!existsSync9(project.path)) {
     console.log(chalk18.red(`Project path does not exist: ${project.path}`));
     process.exit(1);
   }
@@ -2385,7 +2581,7 @@ async function deployCommand(name, options) {
 Deploying ${project.name}...
 `));
   if (!options.skipPull) {
-    const isGitRepo = existsSync7(join5(project.path, ".git"));
+    const isGitRepo = existsSync9(join6(project.path, ".git"));
     if (isGitRepo) {
       console.log(chalk18.dim("Pulling latest changes..."));
       const result = runInDir("git pull", project.path);
@@ -2409,7 +2605,7 @@ Deploying ${project.name}...
     console.log(chalk18.dim("  - Skipped git pull (--skip-pull)"));
   }
   if (project.type === "npm" && !options.skipInstall) {
-    const hasPackageJson = existsSync7(join5(project.path, "package.json"));
+    const hasPackageJson = existsSync9(join6(project.path, "package.json"));
     if (hasPackageJson) {
       console.log(chalk18.dim("Installing dependencies..."));
       const result = runInDir("npm install", project.path);
@@ -2444,7 +2640,7 @@ Deploying ${project.name}...
 
 // src/commands/backup.ts
 import chalk19 from "chalk";
-import { existsSync as existsSync8, readFileSync as readFileSync5, writeFileSync as writeFileSync4, mkdirSync as mkdirSync4 } from "fs";
+import { existsSync as existsSync10, readFileSync as readFileSync6, writeFileSync as writeFileSync5, mkdirSync as mkdirSync4 } from "fs";
 import { dirname as dirname3, resolve } from "path";
 import { homedir as homedir2 } from "os";
 async function backupCommand(options) {
@@ -2453,7 +2649,7 @@ async function backupCommand(options) {
   const defaultPath = resolve(homedir2(), `bindler-backup-${timestamp}.json`);
   const outputPath = options.output || defaultPath;
   const dir = dirname3(outputPath);
-  if (!existsSync8(dir)) {
+  if (!existsSync10(dir)) {
     mkdirSync4(dir, { recursive: true });
   }
   const backup = {
@@ -2461,7 +2657,7 @@ async function backupCommand(options) {
     exportedAt: (/* @__PURE__ */ new Date()).toISOString(),
     config
   };
-  writeFileSync4(outputPath, JSON.stringify(backup, null, 2) + "\n");
+  writeFileSync5(outputPath, JSON.stringify(backup, null, 2) + "\n");
   console.log(chalk19.green(`
 \u2713 Backup saved to ${outputPath}
 `));
@@ -2481,13 +2677,13 @@ async function restoreCommand(file, options) {
     process.exit(1);
   }
   const filePath = resolve(file);
-  if (!existsSync8(filePath)) {
+  if (!existsSync10(filePath)) {
     console.log(chalk19.red(`File not found: ${filePath}`));
     process.exit(1);
   }
   let backup;
   try {
-    const content = readFileSync5(filePath, "utf-8");
+    const content = readFileSync6(filePath, "utf-8");
     backup = JSON.parse(content);
   } catch (error) {
     console.log(chalk19.red("Invalid backup file. Must be valid JSON."));
@@ -3094,14 +3290,340 @@ async function completionCommand(shell) {
   }
 }
 
+// src/commands/clone.ts
+import chalk26 from "chalk";
+import inquirer5 from "inquirer";
+async function cloneCommand(source, newName, options) {
+  if (!source) {
+    console.log(chalk26.red("Usage: bindler clone <source> <new-name>"));
+    console.log(chalk26.dim("\nClones a project configuration with a new name"));
+    console.log(chalk26.dim("\nExamples:"));
+    console.log(chalk26.dim("  bindler clone myapp myapp-staging"));
+    console.log(chalk26.dim("  bindler clone myapp myapp-v2 --hostname newapp.example.com"));
+    console.log(chalk26.dim("  bindler clone myapp myapp-copy --path /var/www/newapp"));
+    process.exit(1);
+  }
+  const sourceProject = getProject(source);
+  if (!sourceProject) {
+    console.log(chalk26.red(`Project "${source}" not found.`));
+    console.log(chalk26.dim("\nAvailable projects:"));
+    const projects = listProjects();
+    for (const p of projects) {
+      console.log(chalk26.dim(`  - ${p.name}`));
+    }
+    process.exit(1);
+  }
+  let targetName = newName;
+  if (!targetName) {
+    const answer = await inquirer5.prompt([
+      {
+        type: "input",
+        name: "name",
+        message: "New project name:",
+        default: `${source}-copy`,
+        validate: (input) => {
+          if (!validateProjectName(input)) {
+            return "Invalid project name. Use alphanumeric characters, dashes, and underscores.";
+          }
+          if (getProject(input)) {
+            return `Project "${input}" already exists`;
+          }
+          return true;
+        }
+      }
+    ]);
+    targetName = answer.name;
+  } else {
+    if (!validateProjectName(targetName)) {
+      console.log(chalk26.red("Invalid project name. Use alphanumeric characters, dashes, and underscores."));
+      process.exit(1);
+    }
+    if (getProject(targetName)) {
+      console.log(chalk26.red(`Project "${targetName}" already exists.`));
+      process.exit(1);
+    }
+  }
+  let targetHostname = options.hostname;
+  if (!targetHostname) {
+    const answer = await inquirer5.prompt([
+      {
+        type: "input",
+        name: "hostname",
+        message: "Hostname for new project:",
+        default: sourceProject.hostname.replace(source, targetName),
+        validate: (input) => {
+          if (!validateHostname(input)) {
+            return "Invalid hostname format";
+          }
+          return true;
+        }
+      }
+    ]);
+    targetHostname = answer.hostname;
+  } else {
+    if (!validateHostname(targetHostname)) {
+      console.log(chalk26.red("Invalid hostname format."));
+      process.exit(1);
+    }
+  }
+  const newProject = {
+    ...sourceProject,
+    name: targetName,
+    hostname: targetHostname,
+    path: options.path || sourceProject.path
+  };
+  if (newProject.type === "npm") {
+    newProject.port = options.port || findAvailablePort();
+    if (newProject.env?.PORT) {
+      newProject.env = { ...newProject.env, PORT: String(newProject.port) };
+    }
+  }
+  try {
+    addProject(newProject);
+    console.log(chalk26.green(`
+Project "${targetName}" cloned from "${source}"!
+`));
+    console.log(chalk26.dim("Configuration:"));
+    console.log(chalk26.dim(`  Name:     ${newProject.name}`));
+    console.log(chalk26.dim(`  Type:     ${newProject.type}`));
+    console.log(chalk26.dim(`  Path:     ${newProject.path}`));
+    console.log(chalk26.dim(`  Hostname: ${newProject.hostname}`));
+    if (newProject.port) {
+      console.log(chalk26.dim(`  Port:     ${newProject.port}`));
+    }
+    console.log(chalk26.dim(`
+Run ${chalk26.cyan("sudo bindler apply")} to update nginx configuration.`));
+    if (newProject.type === "npm") {
+      console.log(chalk26.dim(`Run ${chalk26.cyan(`bindler start ${targetName}`)} to start the application.`));
+    }
+  } catch (error) {
+    console.error(chalk26.red(`Error: ${error instanceof Error ? error.message : error}`));
+    process.exit(1);
+  }
+}
+
+// src/commands/dev.ts
+import chalk27 from "chalk";
+import { spawn as spawn3 } from "child_process";
+import { existsSync as existsSync11, readFileSync as readFileSync7 } from "fs";
+import { basename as basename3, join as join7 } from "path";
+function getPackageJson(dir) {
+  const pkgPath = join7(dir, "package.json");
+  if (!existsSync11(pkgPath)) return null;
+  try {
+    return JSON.parse(readFileSync7(pkgPath, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function getDevCommand(dir) {
+  const pkg = getPackageJson(dir);
+  if (!pkg?.scripts) return null;
+  const scripts = pkg.scripts;
+  if (scripts.dev) return "npm run dev";
+  if (scripts["start:dev"]) return "npm run start:dev";
+  if (scripts.watch) return "npm run watch";
+  if (scripts.start) return "npm run start";
+  return null;
+}
+async function devCommand(name, options) {
+  const cwd = process.cwd();
+  let project;
+  let projectDir;
+  if (name) {
+    project = getProject(name);
+    if (!project) {
+      console.log(chalk27.red(`Project "${name}" not found.`));
+      console.log(chalk27.dim("\nAvailable projects:"));
+      const projects = listProjects();
+      for (const p of projects) {
+        console.log(chalk27.dim(`  - ${p.name}`));
+      }
+      process.exit(1);
+    }
+    projectDir = project.path;
+  } else {
+    const projects = listProjects();
+    project = projects.find((p) => p.path === cwd);
+    if (!project) {
+      const yamlConfig = readBindlerYaml(cwd);
+      if (yamlConfig) {
+        console.log(chalk27.cyan("Found bindler.yaml - creating temporary dev project\n"));
+        const yamlProject = yamlToProject(yamlConfig, cwd);
+        project = {
+          name: yamlProject.name || basename3(cwd),
+          type: yamlProject.type || "npm",
+          path: cwd,
+          hostname: options.hostname || yamlProject.hostname || `${basename3(cwd)}.local`,
+          port: options.port || yamlProject.port || findAvailablePort(),
+          start: yamlProject.start,
+          local: true
+        };
+      } else {
+        const pkg = getPackageJson(cwd);
+        if (!pkg) {
+          console.log(chalk27.red("No package.json found in current directory."));
+          console.log(chalk27.dim("\nUsage: bindler dev [name]"));
+          console.log(chalk27.dim("  Run in a project directory or specify a project name"));
+          process.exit(1);
+        }
+        project = {
+          name: pkg.name || basename3(cwd),
+          type: "npm",
+          path: cwd,
+          hostname: options.hostname || `${basename3(cwd)}.local`,
+          port: options.port || findAvailablePort(),
+          local: true
+        };
+      }
+    }
+    projectDir = cwd;
+  }
+  if (project.type !== "npm") {
+    console.log(chalk27.red("Dev mode is only supported for npm projects."));
+    console.log(chalk27.dim("\nFor static projects, use a local web server:"));
+    console.log(chalk27.dim("  npx serve " + project.path));
+    process.exit(1);
+  }
+  if (!existsSync11(projectDir)) {
+    console.log(chalk27.red(`Project directory not found: ${projectDir}`));
+    process.exit(1);
+  }
+  const devCmd = getDevCommand(projectDir) || project.start || "npm start";
+  const port = options.port || project.port || findAvailablePort();
+  console.log(chalk27.blue(`
+Starting ${project.name} in dev mode...
+`));
+  console.log(chalk27.dim(`  Directory: ${projectDir}`));
+  console.log(chalk27.dim(`  Command:   ${devCmd}`));
+  console.log(chalk27.dim(`  Port:      ${port}`));
+  console.log(chalk27.dim(`  Hostname:  ${project.hostname}`));
+  if (project.hostname.endsWith(".local") || project.local) {
+    console.log(chalk27.yellow(`
+Note: Add to /etc/hosts if not already:`));
+    console.log(chalk27.cyan(`  echo "127.0.0.1  ${project.hostname}" | sudo tee -a /etc/hosts`));
+  }
+  const defaults = getDefaults();
+  const listenPort = defaults.nginxListen.split(":")[1] || "8080";
+  console.log(chalk27.green(`
+Access at: http://${project.hostname}:${listenPort}`));
+  console.log(chalk27.dim("Press Ctrl+C to stop\n"));
+  console.log(chalk27.dim("---"));
+  const env = {
+    ...process.env,
+    PORT: String(port),
+    ...project.env
+  };
+  const [cmd, ...args] = devCmd.split(" ");
+  const child = spawn3(cmd, args, {
+    cwd: projectDir,
+    env,
+    stdio: "inherit",
+    shell: true
+  });
+  child.on("error", (error) => {
+    console.error(chalk27.red(`
+Failed to start: ${error.message}`));
+    process.exit(1);
+  });
+  child.on("exit", (code) => {
+    if (code !== 0) {
+      console.log(chalk27.yellow(`
+Process exited with code ${code}`));
+    }
+    process.exit(code || 0);
+  });
+  process.on("SIGINT", () => {
+    console.log(chalk27.dim("\n\nStopping dev server..."));
+    child.kill("SIGINT");
+  });
+  process.on("SIGTERM", () => {
+    child.kill("SIGTERM");
+  });
+}
+
+// src/lib/update-check.ts
+import chalk28 from "chalk";
+import { existsSync as existsSync12, readFileSync as readFileSync8, writeFileSync as writeFileSync6, mkdirSync as mkdirSync5 } from "fs";
+import { join as join8 } from "path";
+import { homedir as homedir3 } from "os";
+var CHECK_INTERVAL = 24 * 60 * 60 * 1e3;
+var CACHE_DIR = join8(homedir3(), ".config", "bindler");
+var CACHE_FILE = join8(CACHE_DIR, ".update-check");
+function readCache() {
+  try {
+    if (existsSync12(CACHE_FILE)) {
+      return JSON.parse(readFileSync8(CACHE_FILE, "utf-8"));
+    }
+  } catch {
+  }
+  return { lastCheck: 0, latestVersion: null };
+}
+function writeCache(data) {
+  try {
+    if (!existsSync12(CACHE_DIR)) {
+      mkdirSync5(CACHE_DIR, { recursive: true });
+    }
+    writeFileSync6(CACHE_FILE, JSON.stringify(data));
+  } catch {
+  }
+}
+async function fetchLatestVersion() {
+  try {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), 3e3);
+    const response = await fetch("https://registry.npmjs.org/bindler/latest", {
+      signal: controller.signal
+    });
+    clearTimeout(timeout);
+    if (!response.ok) return null;
+    const data = await response.json();
+    return data.version || null;
+  } catch {
+    return null;
+  }
+}
+function compareVersions(current, latest) {
+  const c = current.split(".").map(Number);
+  const l = latest.split(".").map(Number);
+  for (let i = 0; i < 3; i++) {
+    if ((l[i] || 0) > (c[i] || 0)) return 1;
+    if ((l[i] || 0) < (c[i] || 0)) return -1;
+  }
+  return 0;
+}
+async function checkForUpdates() {
+  const cache = readCache();
+  const now = Date.now();
+  if (now - cache.lastCheck < CHECK_INTERVAL) {
+    if (cache.latestVersion && compareVersions("1.2.0", cache.latestVersion) < 0) {
+      showUpdateMessage(cache.latestVersion);
+    }
+    return;
+  }
+  fetchLatestVersion().then((latestVersion) => {
+    writeCache({ lastCheck: now, latestVersion });
+    if (latestVersion && compareVersions("1.2.0", latestVersion) < 0) {
+      showUpdateMessage(latestVersion);
+    }
+  });
+}
+function showUpdateMessage(latestVersion) {
+  console.log("");
+  console.log(chalk28.yellow(`  Update available: ${"1.2.0"} \u2192 ${latestVersion}`));
+  console.log(chalk28.dim(`  Run: npm update -g bindler`));
+  console.log("");
+}
+
 // src/cli.ts
 var program = new Command();
-program.name("bindler").description("Manage multiple projects behind Cloudflare Tunnel with Nginx and PM2").version("1.0.0");
-program.hook("preAction", () => {
+program.name("bindler").description("Manage multiple projects behind Cloudflare Tunnel with Nginx and PM2").version("1.2.0");
+program.hook("preAction", async () => {
   try {
     initConfig();
   } catch (error) {
   }
+  checkForUpdates();
 });
 program.command("new").description("Create and register a new project").option("-n, --name <name>", "Project name").option("-t, --type <type>", "Project type (static or npm)", "static").option("-p, --path <path>", "Project directory path").option("-h, --hostname <hostname>", "Hostname for the project").option("-b, --base-path <path>", "Base path for path-based routing (e.g., /api)").option("--port <port>", "Port number (npm projects only)").option("-s, --start <command>", "Start command (npm projects only)").option("-l, --local", "Local project (skip Cloudflare, use .local hostname)").option("--apply", "Apply nginx config after creating").action(async (options) => {
   await newCommand(options);
@@ -3114,78 +3636,78 @@ program.command("status").description("Show detailed status of all projects").ac
 });
 program.command("start [name]").description("Start an npm project with PM2").option("-a, --all", "Start all npm projects").action(async (name, options) => {
   if (!name && !options.all) {
-    console.log(chalk26.red("Usage: bindler start <name> or bindler start --all"));
-    console.log(chalk26.dim("\nExamples:"));
-    console.log(chalk26.dim("  bindler start myapp"));
-    console.log(chalk26.dim("  bindler start --all    # start all npm projects"));
+    console.log(chalk29.red("Usage: bindler start <name> or bindler start --all"));
+    console.log(chalk29.dim("\nExamples:"));
+    console.log(chalk29.dim("  bindler start myapp"));
+    console.log(chalk29.dim("  bindler start --all    # start all npm projects"));
     process.exit(1);
   }
   await startCommand(name, options);
 });
 program.command("stop [name]").description("Stop an npm project").option("-a, --all", "Stop all npm projects").action(async (name, options) => {
   if (!name && !options.all) {
-    console.log(chalk26.red("Usage: bindler stop <name> or bindler stop --all"));
-    console.log(chalk26.dim("\nExamples:"));
-    console.log(chalk26.dim("  bindler stop myapp"));
-    console.log(chalk26.dim("  bindler stop --all    # stop all npm projects"));
+    console.log(chalk29.red("Usage: bindler stop <name> or bindler stop --all"));
+    console.log(chalk29.dim("\nExamples:"));
+    console.log(chalk29.dim("  bindler stop myapp"));
+    console.log(chalk29.dim("  bindler stop --all    # stop all npm projects"));
     process.exit(1);
   }
   await stopCommand(name, options);
 });
 program.command("restart [name]").description("Restart an npm project").option("-a, --all", "Restart all npm projects").action(async (name, options) => {
   if (!name && !options.all) {
-    console.log(chalk26.red("Usage: bindler restart <name> or bindler restart --all"));
-    console.log(chalk26.dim("\nExamples:"));
-    console.log(chalk26.dim("  bindler restart myapp"));
-    console.log(chalk26.dim("  bindler restart --all    # restart all npm projects"));
+    console.log(chalk29.red("Usage: bindler restart <name> or bindler restart --all"));
+    console.log(chalk29.dim("\nExamples:"));
+    console.log(chalk29.dim("  bindler restart myapp"));
+    console.log(chalk29.dim("  bindler restart --all    # restart all npm projects"));
     process.exit(1);
   }
   await restartCommand(name, options);
 });
 program.command("logs [name]").description("Show logs for an npm project").option("-f, --follow", "Follow log output").option("-l, --lines <n>", "Number of lines to show", "200").action(async (name, options) => {
   if (!name) {
-    console.log(chalk26.red("Usage: bindler logs <name>"));
-    console.log(chalk26.dim("\nExamples:"));
-    console.log(chalk26.dim("  bindler logs myapp"));
-    console.log(chalk26.dim("  bindler logs myapp --follow"));
-    console.log(chalk26.dim("  bindler logs myapp --lines 500"));
+    console.log(chalk29.red("Usage: bindler logs <name>"));
+    console.log(chalk29.dim("\nExamples:"));
+    console.log(chalk29.dim("  bindler logs myapp"));
+    console.log(chalk29.dim("  bindler logs myapp --follow"));
+    console.log(chalk29.dim("  bindler logs myapp --lines 500"));
     process.exit(1);
   }
   await logsCommand(name, { ...options, lines: parseInt(options.lines, 10) });
 });
 program.command("update [name]").description("Update project configuration").option("-h, --hostname <hostname>", "New hostname").option("--port <port>", "New port number").option("-s, --start <command>", "New start command").option("-p, --path <path>", "New project path").option("-e, --env <vars...>", "Environment variables (KEY=value)").option("--enable", "Enable the project").option("--disable", "Disable the project").action(async (name, options) => {
   if (!name) {
-    console.log(chalk26.red("Usage: bindler update <name> [options]"));
-    console.log(chalk26.dim("\nExamples:"));
-    console.log(chalk26.dim("  bindler update myapp --hostname newapp.example.com"));
-    console.log(chalk26.dim("  bindler update myapp --port 4000"));
-    console.log(chalk26.dim("  bindler update myapp --disable"));
+    console.log(chalk29.red("Usage: bindler update <name> [options]"));
+    console.log(chalk29.dim("\nExamples:"));
+    console.log(chalk29.dim("  bindler update myapp --hostname newapp.example.com"));
+    console.log(chalk29.dim("  bindler update myapp --port 4000"));
+    console.log(chalk29.dim("  bindler update myapp --disable"));
     process.exit(1);
   }
   await updateCommand(name, options);
 });
 program.command("edit [name]").description("Edit project configuration in $EDITOR").action(async (name) => {
   if (!name) {
-    console.log(chalk26.red("Usage: bindler edit <name>"));
-    console.log(chalk26.dim("\nOpens the project config in your $EDITOR"));
-    console.log(chalk26.dim("\nExample:"));
-    console.log(chalk26.dim("  bindler edit myapp"));
+    console.log(chalk29.red("Usage: bindler edit <name>"));
+    console.log(chalk29.dim("\nOpens the project config in your $EDITOR"));
+    console.log(chalk29.dim("\nExample:"));
+    console.log(chalk29.dim("  bindler edit myapp"));
     process.exit(1);
   }
   await editCommand(name);
 });
 program.command("remove [name]").alias("rm").description("Remove a project from registry").option("-f, --force", "Skip confirmation").option("--apply", "Apply nginx config after removing").action(async (name, options) => {
   if (!name) {
-    console.log(chalk26.red("Usage: bindler remove <name>"));
-    console.log(chalk26.dim("\nExamples:"));
-    console.log(chalk26.dim("  bindler remove myapp"));
-    console.log(chalk26.dim("  bindler remove myapp --force    # skip confirmation"));
-    console.log(chalk26.dim("  bindler rm myapp                # alias"));
+    console.log(chalk29.red("Usage: bindler remove <name>"));
+    console.log(chalk29.dim("\nExamples:"));
+    console.log(chalk29.dim("  bindler remove myapp"));
+    console.log(chalk29.dim("  bindler remove myapp --force    # skip confirmation"));
+    console.log(chalk29.dim("  bindler rm myapp                # alias"));
     process.exit(1);
   }
   await removeCommand(name, options);
 });
-program.command("apply").description("Generate and apply nginx configuration + Cloudflare DNS routes").option("-d, --dry-run", "Print config without applying").option("--no-reload", "Write config but do not reload nginx").option("--no-cloudflare", "Skip Cloudflare DNS route configuration").option("--no-ssl", "Skip SSL certificate setup (direct mode)").action(async (options) => {
+program.command("apply").description("Generate and apply nginx configuration + Cloudflare DNS routes").option("-d, --dry-run", "Print config without applying").option("--no-reload", "Write config but do not reload nginx").option("--no-cloudflare", "Skip Cloudflare DNS route configuration").option("--no-ssl", "Skip SSL certificate setup (direct mode)").option("--sync", "Sync bindler.yaml from project directories before applying").option("-e, --env <env>", "Use environment-specific config (staging, production)").action(async (options) => {
   await applyCommand(options);
 });
 program.command("doctor").description("Run system diagnostics and check dependencies").action(async () => {
@@ -3199,10 +3721,10 @@ program.command("info").description("Show bindler information and stats").action
 });
 program.command("check [hostname]").description("Check DNS propagation and HTTP accessibility for a hostname").option("-v, --verbose", "Show verbose output").action(async (hostname, options) => {
   if (!hostname) {
-    console.log(chalk26.red("Usage: bindler check <hostname>"));
-    console.log(chalk26.dim("\nExamples:"));
-    console.log(chalk26.dim("  bindler check myapp.example.com"));
-    console.log(chalk26.dim("  bindler check myapp          # uses project name"));
+    console.log(chalk29.red("Usage: bindler check <hostname>"));
+    console.log(chalk29.dim("\nExamples:"));
+    console.log(chalk29.dim("  bindler check myapp.example.com"));
+    console.log(chalk29.dim("  bindler check myapp          # uses project name"));
     process.exit(1);
   }
   await checkCommand(hostname, options);
@@ -3240,5 +3762,11 @@ program.command("stats").description("Show CPU and memory stats for npm projects
 program.command("completion [shell]").description("Generate shell completion script (bash, zsh, fish)").action(async (shell) => {
   await completionCommand(shell);
 });
+program.command("clone [source] [new-name]").description("Clone a project configuration with a new name").option("-h, --hostname <hostname>", "Hostname for the new project").option("-p, --path <path>", "Path for the new project").option("--port <port>", "Port for the new project (npm only)").action(async (source, newName, options) => {
+  await cloneCommand(source, newName, options);
+});
+program.command("dev [name]").description("Start a project in development mode with hot reload").option("-p, --port <port>", "Override port number").option("-h, --hostname <hostname>", "Override hostname").action(async (name, options) => {
+  await devCommand(name, options);
+});
 program.parse();
 //# sourceMappingURL=cli.js.map