bindler 1.6.0 → 1.6.1

package/dist/cli.js

@@ -11,10 +11,10 @@ import { Command } from "commander";
 import chalk31 from "chalk";
 
 // src/commands/new.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync3 } from "fs";
+import { existsSync as existsSync7, mkdirSync as mkdirSync3 } from "fs";
 import { basename as basename2 } from "path";
 import inquirer from "inquirer";
-import chalk2 from "chalk";
+import chalk3 from "chalk";
 
 // src/lib/config.ts
 import { existsSync, mkdirSync, readFileSync, writeFileSync, copyFileSync } from "fs";
@@ -890,9 +890,296 @@ function runPreflightChecks(config) {
   return result;
 }
 
+// src/commands/apply.ts
+import chalk2 from "chalk";
+import { existsSync as existsSync6 } from "fs";
+
+// src/lib/cloudflare.ts
+function isCloudflaredInstalled() {
+  const result = execCommandSafe("which cloudflared");
+  return result.success;
+}
+function getCloudflaredVersion() {
+  const result = execCommandSafe("cloudflared --version");
+  if (result.success) {
+    const match = result.output.match(/cloudflared version (\S+)/);
+    return match ? match[1] : result.output;
+  }
+  return null;
+}
+function listTunnels() {
+  const result = execCommandSafe("cloudflared tunnel list --output json");
+  if (!result.success) {
+    return [];
+  }
+  try {
+    const tunnels = JSON.parse(result.output);
+    return tunnels.map((t) => ({
+      id: t.id,
+      name: t.name,
+      createdAt: t.created_at
+    }));
+  } catch {
+    return [];
+  }
+}
+function getTunnelByName(name) {
+  const tunnels = listTunnels();
+  const tunnel = tunnels.find((t) => t.name === name);
+  return tunnel ? { id: tunnel.id, name: tunnel.name } : null;
+}
+function routeDns(tunnelName, hostname) {
+  const result = execCommandSafe(`cloudflared tunnel route dns "${tunnelName}" "${hostname}"`);
+  if (!result.success) {
+    if (result.error?.includes("already exists") || result.output?.includes("already exists")) {
+      return { success: true, output: "DNS route already exists" };
+    }
+    return { success: false, error: result.error };
+  }
+  return { success: true, output: result.output };
+}
+function routeDnsForAllProjects() {
+  const config = readConfig();
+  const { tunnelName, applyCloudflareDnsRoutes } = config.defaults;
+  if (!applyCloudflareDnsRoutes) {
+    return [];
+  }
+  const results = [];
+  for (const project of config.projects) {
+    if (project.enabled === false) {
+      continue;
+    }
+    if (project.local) {
+      results.push({
+        hostname: project.hostname,
+        success: true,
+        skipped: true,
+        output: "Local project - skipped"
+      });
+      continue;
+    }
+    const result = routeDns(tunnelName, project.hostname);
+    results.push({
+      hostname: project.hostname,
+      ...result
+    });
+  }
+  return results;
+}
+function isTunnelRunning(tunnelName) {
+  const result = execCommandSafe(`pgrep -f "cloudflared.*tunnel.*run.*${tunnelName}"`);
+  return result.success;
+}
+function getTunnelInfo(tunnelName) {
+  const tunnel = getTunnelByName(tunnelName);
+  if (!tunnel) {
+    return { exists: false, running: false };
+  }
+  return {
+    exists: true,
+    running: isTunnelRunning(tunnelName),
+    id: tunnel.id
+  };
+}
+
+// src/commands/apply.ts
+async function applyCommand(options) {
+  let config = readConfig();
+  const defaults = getDefaults();
+  if (options.sync) {
+    console.log(chalk2.dim("Syncing bindler.yaml from project directories...\n"));
+    let synced = 0;
+    for (const project of config.projects) {
+      if (!existsSync6(project.path)) continue;
+      const yamlConfig = readBindlerYaml(project.path);
+      if (yamlConfig) {
+        const merged = mergeYamlWithProject(project, yamlConfig);
+        updateProject(project.name, merged);
+        console.log(chalk2.green(`  \u2713 Synced ${project.name} from bindler.yaml`));
+        synced++;
+      }
+    }
+    if (synced === 0) {
+      console.log(chalk2.dim("  No bindler.yaml files found in project directories"));
+    } else {
+      console.log(chalk2.dim(`
+  Synced ${synced} project(s)
+`));
+    }
+    config = readConfig();
+  }
+  if (options.env) {
+    console.log(chalk2.dim(`Using ${options.env} environment configuration...
+`));
+    const envProjects = listProjectsForEnv(options.env);
+    config = { ...config, projects: envProjects };
+  }
+  const hasProjects = config.projects.length > 0;
+  console.log(chalk2.blue("Applying configuration...\n"));
+  if (hasProjects && !options.skipChecks) {
+    console.log(chalk2.dim("Running preflight checks..."));
+    const checkResult = runPreflightChecks(config);
+    if (!checkResult.valid) {
+      printValidationResult(checkResult);
+      console.log(chalk2.red("\n\u2717 Preflight checks failed. Fix the errors above before applying."));
+      console.log(chalk2.dim("  Use --skip-checks to bypass (not recommended)"));
+      process.exit(1);
+    }
+    if (checkResult.warnings.length > 0) {
+      printValidationResult(checkResult);
+      console.log("");
+    } else {
+      console.log(chalk2.green("  \u2713 Preflight checks passed"));
+    }
+  }
+  console.log(chalk2.dim("Generating nginx configuration..."));
+  if (options.dryRun) {
+    const nginxConfig = generateNginxConfig(config);
+    console.log(chalk2.cyan("\n--- Generated nginx config (dry-run) ---\n"));
+    console.log(nginxConfig);
+    console.log(chalk2.cyan("--- End of config ---\n"));
+    console.log(chalk2.yellow("Dry run mode - no changes were made."));
+    return;
+  }
+  try {
+    const { path, content } = writeNginxConfig(config);
+    console.log(chalk2.green(`  \u2713 Wrote nginx config to ${path}`));
+  } catch (error) {
+    const errMsg = error instanceof Error ? error.message : String(error);
+    console.error(chalk2.red(`  \u2717 Failed to write nginx config: ${errMsg}`));
+    if (errMsg.includes("EACCES") || errMsg.includes("permission denied")) {
+      console.log(chalk2.yellow(`
+Try running with sudo: ${chalk2.cyan("sudo bindler apply")}`));
+    }
+    process.exit(1);
+  }
+  const authProjects = config.projects.filter(
+    (p) => p.security?.basicAuth?.enabled && p.security.basicAuth.users?.length
+  );
+  if (authProjects.length > 0) {
+    console.log(chalk2.dim("Generating htpasswd files..."));
+    try {
+      generateHtpasswdFiles(config.projects);
+      console.log(chalk2.green(`  \u2713 Generated htpasswd files for ${authProjects.length} project(s)`));
+    } catch (error) {
+      console.log(chalk2.yellow(`  ! Failed to generate htpasswd files: ${error}`));
+    }
+  }
+  console.log(chalk2.dim("Testing nginx configuration..."));
+  const testResult = testNginxConfig();
+  if (!testResult.success) {
+    console.error(chalk2.red("  \u2717 Nginx configuration test failed:"));
+    console.error(chalk2.red(testResult.output));
+    console.log(chalk2.yellow("\nConfiguration was written but nginx was NOT reloaded."));
+    console.log(chalk2.dim("Fix the configuration and run `sudo bindler apply` again."));
+    process.exit(1);
+  }
+  console.log(chalk2.green("  \u2713 Nginx configuration test passed"));
+  if (!options.noReload) {
+    console.log(chalk2.dim("Reloading nginx..."));
+    const reloadResult = reloadNginx();
+    if (!reloadResult.success) {
+      console.error(chalk2.red(`  \u2717 Failed to reload nginx: ${reloadResult.error}`));
+      console.log(chalk2.dim("You may need to reload nginx manually: sudo systemctl reload nginx"));
+      process.exit(1);
+    }
+    console.log(chalk2.green("  \u2713 Nginx reloaded successfully"));
+    const listenPort = parseInt(defaults.nginxListen.split(":").pop() || "80", 10);
+    const portCheck = execCommandSafe(`lsof -i :${listenPort} -P -n 2>/dev/null | grep LISTEN | grep nginx`);
+    if (!portCheck.success || !portCheck.output) {
+      const isPrivilegedPort = listenPort < 1024;
+      console.log(chalk2.yellow(`
+\u26A0 Nginx is not listening on port ${listenPort}`));
+      if (isPrivilegedPort) {
+        console.log(chalk2.dim(`  Port ${listenPort} requires root privileges.
+`));
+        console.log(chalk2.cyan("  Solutions:\n"));
+        console.log(chalk2.white("  Option 1: Restart nginx with sudo (recommended for port 80)"));
+        console.log(chalk2.dim("    sudo pkill nginx && sudo nginx\n"));
+        console.log(chalk2.white("  Option 2: Use a non-privileged port (no sudo needed)"));
+        console.log(chalk2.dim("    bindler config set nginxListen 8080"));
+        console.log(chalk2.dim("    bindler apply"));
+        console.log(chalk2.dim("    # Then access via http://hostname:8080\n"));
+      } else {
+        console.log(chalk2.dim("  Try restarting nginx: brew services restart nginx"));
+      }
+    }
+  } else {
+    console.log(chalk2.yellow("  - Skipped nginx reload (--no-reload)"));
+  }
+  const isDirectMode = defaults.mode === "direct";
+  if (!hasProjects) {
+  } else if (isDirectMode) {
+    console.log(chalk2.dim("\n  - Direct mode: skipping Cloudflare DNS routes"));
+  } else if (!options.noCloudflare && defaults.applyCloudflareDnsRoutes) {
+    console.log(chalk2.dim("\nConfiguring Cloudflare DNS routes..."));
+    if (!isCloudflaredInstalled()) {
+      console.log(chalk2.yellow("  - cloudflared not installed, skipping DNS routes"));
+    } else {
+      const dnsResults = routeDnsForAllProjects();
+      if (dnsResults.length === 0) {
+        console.log(chalk2.dim("  No hostnames to route"));
+      } else {
+        for (const result of dnsResults) {
+          if (result.skipped) {
+            console.log(chalk2.dim(`  - ${result.hostname} (local - skipped)`));
+          } else if (result.success) {
+            const msg = result.output?.includes("already exists") ? "exists" : "routed";
+            console.log(chalk2.green(`  \u2713 ${result.hostname} (${msg})`));
+          } else {
+            console.log(chalk2.red(`  \u2717 ${result.hostname}: ${result.error}`));
+          }
+        }
+      }
+    }
+  } else if (options.noCloudflare) {
+    console.log(chalk2.dim("\n  - Skipped Cloudflare DNS routes (--no-cloudflare)"));
+  }
+  if (hasProjects && isDirectMode && defaults.sslEnabled && options.ssl !== false) {
+    console.log(chalk2.dim("\nSetting up SSL certificates..."));
+    const hostnames = config.projects.filter((p) => p.enabled !== false && !p.local).map((p) => p.hostname);
+    if (hostnames.length === 0) {
+      console.log(chalk2.dim("  No hostnames to secure"));
+    } else {
+      const certbotResult = execCommandSafe("which certbot");
+      if (!certbotResult.success) {
+        console.log(chalk2.yellow("  - certbot not installed, skipping SSL"));
+        console.log(chalk2.dim("    Run: bindler setup --direct"));
+      } else {
+        for (const hostname of hostnames) {
+          console.log(chalk2.dim(`  Requesting certificate for ${hostname}...`));
+          const email = defaults.sslEmail || "admin@" + hostname.split(".").slice(-2).join(".");
+          const result = execCommandSafe(
+            `sudo certbot --nginx -d ${hostname} --non-interactive --agree-tos --email ${email} 2>&1`
+          );
+          if (result.success || result.output?.includes("Certificate not yet due for renewal")) {
+            console.log(chalk2.green(`  \u2713 ${hostname} (secured)`));
+          } else if (result.output?.includes("already exists")) {
+            console.log(chalk2.green(`  \u2713 ${hostname} (exists)`));
+          } else {
+            console.log(chalk2.yellow(`  ! ${hostname}: ${result.error || "failed"}`));
+            console.log(chalk2.dim("    Run manually: sudo certbot --nginx -d " + hostname));
+          }
+        }
+      }
+    }
+  }
+  console.log(chalk2.green("\n\u2713 Configuration applied successfully!"));
+  if (hasProjects) {
+    console.log(chalk2.dim(`
+${config.projects.length} project(s) configured:`));
+    for (const project of config.projects) {
+      const status = project.enabled !== false ? chalk2.green("enabled") : chalk2.yellow("disabled");
+      console.log(chalk2.dim(`  - ${project.name} \u2192 ${project.hostname} (${status})`));
+    }
+  } else {
+    console.log(chalk2.dim("\nNo projects configured. Nginx config cleared."));
+  }
+}
+
 // src/commands/new.ts
 async function newCommand(options) {
-  console.log(chalk2.dim("Checking prerequisites...\n"));
+  console.log(chalk3.dim("Checking prerequisites...\n"));
   const issues = [];
   if (!isNginxInstalled()) {
     issues.push("nginx is not installed. Install: brew install nginx (macOS) or apt install nginx (Linux)");
@@ -901,11 +1188,11 @@ async function newCommand(options) {
     issues.push("PM2 is not installed. Install: npm install -g pm2");
   }
   if (issues.length > 0) {
-    console.log(chalk2.red("Missing prerequisites:\n"));
+    console.log(chalk3.red("Missing prerequisites:\n"));
     for (const issue of issues) {
-      console.log(chalk2.red(`  \u2717 ${issue}`));
+      console.log(chalk3.red(`  \u2717 ${issue}`));
     }
-    console.log(chalk2.dim("\nRun `bindler doctor` for full diagnostics."));
+    console.log(chalk3.dim("\nRun `bindler doctor` for full diagnostics."));
     const { proceed } = await inquirer.prompt([
       {
         type: "confirm",
@@ -919,17 +1206,17 @@ async function newCommand(options) {
     }
     console.log("");
   } else {
-    console.log(chalk2.green("\u2713 Prerequisites OK\n"));
+    console.log(chalk3.green("\u2713 Prerequisites OK\n"));
   }
   const defaults = getDefaults();
   let project = {};
   const cwd = process.cwd();
   const cwdName = basename2(cwd);
   const initialPath = options.path || cwd;
-  const yamlConfig = existsSync6(initialPath) ? readBindlerYaml(initialPath) : null;
+  const yamlConfig = existsSync7(initialPath) ? readBindlerYaml(initialPath) : null;
   let yamlDefaults = {};
   if (yamlConfig) {
-    console.log(chalk2.cyan("Found bindler.yaml - using as defaults\n"));
+    console.log(chalk3.cyan("Found bindler.yaml - using as defaults\n"));
     yamlDefaults = yamlToProject(yamlConfig, initialPath);
   }
   if (!options.name) {
@@ -963,7 +1250,7 @@ async function newCommand(options) {
         name: "type",
         message: "Project type:",
         choices: (answers2) => {
-          const detected = existsSync6(answers2.path) ? detectProjectType(answers2.path) : "static";
+          const detected = existsSync7(answers2.path) ? detectProjectType(answers2.path) : "static";
           return [
             { name: `npm (Node.js app)${detected === "npm" ? " - detected" : ""}`, value: "npm" },
             { name: `static (HTML/CSS/JS)${detected === "static" ? " - detected" : ""}`, value: "static" }
@@ -971,7 +1258,7 @@ async function newCommand(options) {
         },
         default: (answers2) => {
           if (yamlDefaults.type) return yamlDefaults.type;
-          return existsSync6(answers2.path) ? detectProjectType(answers2.path) : "static";
+          return existsSync7(answers2.path) ? detectProjectType(answers2.path) : "static";
         }
       },
       {
@@ -1004,7 +1291,7 @@ async function newCommand(options) {
     if (yamlDefaults.security) project.security = yamlDefaults.security;
     if (yamlDefaults.environments) project.environments = yamlDefaults.environments;
     if (answers.type === "npm") {
-      const scripts = existsSync6(answers.path) ? getPackageJsonScripts(answers.path) : [];
+      const scripts = existsSync7(answers.path) ? getPackageJsonScripts(answers.path) : [];
       let suggestedPort = yamlDefaults.port || findAvailablePort();
       const portCheck = checkPortInUse(suggestedPort);
       if (portCheck.inUse) {
@@ -1073,7 +1360,7 @@ async function newCommand(options) {
     }
   } else {
     if (!options.hostname) {
-      console.error(chalk2.red("Error: --hostname is required"));
+      console.error(chalk3.red("Error: --hostname is required"));
       process.exit(1);
     }
     project.name = options.name;
@@ -1091,13 +1378,13 @@ async function newCommand(options) {
       const portCheck = checkPortInUse(port);
       if (portCheck.inUse) {
         const processInfo = portCheck.process ? ` by ${portCheck.process}` : "";
-        console.log(chalk2.yellow(`Warning: Port ${port} is already in use${processInfo}`));
+        console.log(chalk3.yellow(`Warning: Port ${port} is already in use${processInfo}`));
         if (!options.port) {
           for (let p = port + 1; p <= 9e3; p++) {
             const check = checkPortInUse(p);
             if (!check.inUse) {
               port = p;
-              console.log(chalk2.dim(`  Using port ${port} instead`));
+              console.log(chalk3.dim(`  Using port ${port} instead`));
               break;
             }
           }
@@ -1109,14 +1396,14 @@ async function newCommand(options) {
     }
   }
   if (!validateProjectName(project.name)) {
-    console.error(chalk2.red("Error: Invalid project name"));
+    console.error(chalk3.red("Error: Invalid project name"));
     process.exit(1);
   }
   if (!validateHostname(project.hostname)) {
-    console.error(chalk2.red("Error: Invalid hostname"));
+    console.error(chalk3.red("Error: Invalid hostname"));
     process.exit(1);
   }
-  if (!existsSync6(project.path)) {
+  if (!existsSync7(project.path)) {
     const createDir = options.name ? true : (await inquirer.prompt([
       {
         type: "confirm",
@@ -1127,7 +1414,7 @@ async function newCommand(options) {
     ])).create;
     if (createDir) {
       mkdirSync3(project.path, { recursive: true });
-      console.log(chalk2.green(`Created directory: ${project.path}`));
+      console.log(chalk3.green(`Created directory: ${project.path}`));
     }
   }
   const validationResult = validateProject(project);
@@ -1135,7 +1422,7 @@ async function newCommand(options) {
     console.log("");
     printValidationResult(validationResult);
     if (!validationResult.valid) {
-      console.log(chalk2.red("\n\u2717 Cannot add project due to validation errors."));
+      console.log(chalk3.red("\n\u2717 Cannot add project due to validation errors."));
       process.exit(1);
     }
     const { proceed } = await inquirer.prompt([
@@ -1147,52 +1434,57 @@ async function newCommand(options) {
       }
     ]);
     if (!proceed) {
-      console.log(chalk2.yellow("Aborted."));
+      console.log(chalk3.yellow("Aborted."));
       process.exit(0);
     }
   }
   try {
     addProject(project);
-    console.log(chalk2.green(`
+    console.log(chalk3.green(`
 Project "${project.name}" added successfully!`));
-    if (project.local) {
-      console.log(chalk2.yellow(`
-Local project - add to /etc/hosts:`));
-      console.log(chalk2.cyan(`  echo "127.0.0.1  ${project.hostname}" | sudo tee -a /etc/hosts`));
-      console.log(chalk2.dim(`
-Run ${chalk2.cyan("sudo bindler apply")} to update nginx.`));
-      console.log(chalk2.dim(`Then access at: ${chalk2.cyan(`http://${project.hostname}:8080`)}`));
+    if (options.apply) {
+      console.log("");
+      await applyCommand({});
     } else {
-      console.log(chalk2.dim(`
-Configuration saved. Run ${chalk2.cyan("sudo bindler apply")} to update nginx and cloudflare.`));
+      if (project.local) {
+        console.log(chalk3.yellow(`
+Local project - add to /etc/hosts:`));
+        console.log(chalk3.cyan(`  echo "127.0.0.1  ${project.hostname}" | sudo tee -a /etc/hosts`));
+        console.log(chalk3.dim(`
+Run ${chalk3.cyan("sudo bindler apply")} to update nginx.`));
+        console.log(chalk3.dim(`Then access at: ${chalk3.cyan(`http://${project.hostname}:8080`)}`));
+      } else {
+        console.log(chalk3.dim(`
+Configuration saved. Run ${chalk3.cyan("sudo bindler apply")} to update nginx and cloudflare.`));
+      }
     }
     if (project.type === "npm") {
-      console.log(chalk2.dim(`Run ${chalk2.cyan(`bindler start ${project.name}`)} to start the application.`));
+      console.log(chalk3.dim(`Run ${chalk3.cyan(`bindler start ${project.name}`)} to start the application.`));
     }
   } catch (error) {
-    console.error(chalk2.red(`Error: ${error instanceof Error ? error.message : error}`));
+    console.error(chalk3.red(`Error: ${error instanceof Error ? error.message : error}`));
     process.exit(1);
   }
 }
 
 // src/commands/list.ts
-import chalk3 from "chalk";
+import chalk4 from "chalk";
 import Table from "cli-table3";
 async function listCommand() {
   const projects = listProjects();
   if (projects.length === 0) {
-    console.log(chalk3.yellow("No projects registered."));
-    console.log(chalk3.dim(`Run ${chalk3.cyan("bindler new")} to create one.`));
+    console.log(chalk4.yellow("No projects registered."));
+    console.log(chalk4.dim(`Run ${chalk4.cyan("bindler new")} to create one.`));
     return;
   }
   const table = new Table({
     head: [
-      chalk3.cyan("Name"),
-      chalk3.cyan("Type"),
-      chalk3.cyan("Hostname"),
-      chalk3.cyan("Port"),
-      chalk3.cyan("Path"),
-      chalk3.cyan("Status")
+      chalk4.cyan("Name"),
+      chalk4.cyan("Type"),
+      chalk4.cyan("Hostname"),
+      chalk4.cyan("Port"),
+      chalk4.cyan("Path"),
+      chalk4.cyan("Status")
     ],
     style: {
       head: [],
@@ -1204,15 +1496,15 @@ async function listCommand() {
     if (project.type === "npm") {
       const process2 = getProcessByName(project.name);
       if (process2) {
-        status = process2.status === "online" ? chalk3.green("online") : process2.status === "stopped" ? chalk3.yellow("stopped") : chalk3.red(process2.status);
+        status = process2.status === "online" ? chalk4.green("online") : process2.status === "stopped" ? chalk4.yellow("stopped") : chalk4.red(process2.status);
       } else {
-        status = chalk3.dim("not started");
+        status = chalk4.dim("not started");
       }
     } else {
-      status = project.enabled !== false ? chalk3.green("serving") : chalk3.yellow("disabled");
+      status = project.enabled !== false ? chalk4.green("serving") : chalk4.yellow("disabled");
     }
     if (project.enabled === false) {
-      status = chalk3.yellow("disabled");
+      status = chalk4.yellow("disabled");
     }
     table.push([
       project.name,
@@ -1224,17 +1516,17 @@ async function listCommand() {
     ]);
   }
   console.log(table.toString());
-  console.log(chalk3.dim(`
+  console.log(chalk4.dim(`
 ${projects.length} project(s) registered`));
 }
 
 // src/commands/status.ts
-import chalk4 from "chalk";
+import chalk5 from "chalk";
 import Table2 from "cli-table3";
 async function statusCommand() {
   const projects = listProjects();
   if (projects.length === 0) {
-    console.log(chalk4.yellow("No projects registered."));
+    console.log(chalk5.yellow("No projects registered."));
     return;
   }
   const statuses = [];
@@ -1258,12 +1550,12 @@ async function statusCommand() {
   }
   const table = new Table2({
     head: [
-      chalk4.cyan("Name"),
-      chalk4.cyan("Type"),
-      chalk4.cyan("Hostname"),
-      chalk4.cyan("Port"),
-      chalk4.cyan("PM2 Status"),
-      chalk4.cyan("Port Check")
+      chalk5.cyan("Name"),
+      chalk5.cyan("Type"),
+      chalk5.cyan("Hostname"),
+      chalk5.cyan("Port"),
+      chalk5.cyan("PM2 Status"),
+      chalk5.cyan("Port Check")
     ],
     style: {
       head: [],
@@ -1276,25 +1568,25 @@ async function statusCommand() {
     if (status.type === "npm") {
       switch (status.pm2Status) {
         case "online":
-          pm2StatusStr = chalk4.green("online");
+          pm2StatusStr = chalk5.green("online");
           break;
         case "stopped":
-          pm2StatusStr = chalk4.yellow("stopped");
+          pm2StatusStr = chalk5.yellow("stopped");
           break;
         case "errored":
-          pm2StatusStr = chalk4.red("errored");
+          pm2StatusStr = chalk5.red("errored");
           break;
         case "not_managed":
-          pm2StatusStr = chalk4.dim("not started");
+          pm2StatusStr = chalk5.dim("not started");
           break;
         default:
-          pm2StatusStr = chalk4.dim(status.pm2Status || "-");
+          pm2StatusStr = chalk5.dim(status.pm2Status || "-");
       }
-      portCheckStr = status.portListening ? chalk4.green("listening") : chalk4.red("not listening");
+      portCheckStr = status.portListening ? chalk5.green("listening") : chalk5.red("not listening");
     }
     if (status.enabled === false) {
-      pm2StatusStr = chalk4.yellow("disabled");
-      portCheckStr = chalk4.dim("-");
+      pm2StatusStr = chalk5.yellow("disabled");
+      portCheckStr = chalk5.dim("-");
     }
     table.push([
       status.name,
@@ -1308,14 +1600,14 @@ async function statusCommand() {
   console.log(table.toString());
   const runningProcesses = getPm2List().filter((p) => p.name.startsWith("bindler:"));
   if (runningProcesses.length > 0) {
-    console.log(chalk4.bold("\nPM2 Process Details:"));
+    console.log(chalk5.bold("\nPM2 Process Details:"));
     const detailTable = new Table2({
       head: [
-        chalk4.cyan("Process"),
-        chalk4.cyan("CPU"),
-        chalk4.cyan("Memory"),
-        chalk4.cyan("Uptime"),
-        chalk4.cyan("Restarts")
+        chalk5.cyan("Process"),
+        chalk5.cyan("CPU"),
+        chalk5.cyan("Memory"),
+        chalk5.cyan("Uptime"),
+        chalk5.cyan("Restarts")
       ],
       style: {
         head: [],
@@ -1336,198 +1628,198 @@ async function statusCommand() {
 }
 
 // src/commands/start.ts
-import chalk5 from "chalk";
+import chalk6 from "chalk";
 async function startCommand(name, options) {
   if (options.all) {
     const projects = listProjects();
     const npmProjects = projects.filter((p) => p.type === "npm");
     if (npmProjects.length === 0) {
-      console.log(chalk5.yellow("No npm projects to start."));
+      console.log(chalk6.yellow("No npm projects to start."));
       return;
     }
-    console.log(chalk5.blue(`Starting ${npmProjects.length} npm project(s)...`));
+    console.log(chalk6.blue(`Starting ${npmProjects.length} npm project(s)...`));
     const results = startAllProjects(npmProjects);
     for (const result2 of results) {
       if (result2.success) {
-        console.log(chalk5.green(`  \u2713 ${result2.name}`));
+        console.log(chalk6.green(`  \u2713 ${result2.name}`));
       } else {
-        console.log(chalk5.red(`  \u2717 ${result2.name}: ${result2.error}`));
+        console.log(chalk6.red(`  \u2717 ${result2.name}: ${result2.error}`));
       }
     }
     const succeeded = results.filter((r) => r.success).length;
-    console.log(chalk5.dim(`
+    console.log(chalk6.dim(`
 ${succeeded}/${results.length} started successfully`));
     return;
   }
   if (!name) {
-    console.error(chalk5.red("Error: Project name is required. Use --all to start all projects."));
+    console.error(chalk6.red("Error: Project name is required. Use --all to start all projects."));
     process.exit(1);
   }
   const project = getProject(name);
   if (!project) {
-    console.error(chalk5.red(`Error: Project "${name}" not found`));
+    console.error(chalk6.red(`Error: Project "${name}" not found`));
     process.exit(1);
   }
   if (project.type !== "npm") {
-    console.log(chalk5.blue(`Project "${name}" is a static site - no process to start.`));
-    console.log(chalk5.dim("Static sites are served directly by nginx."));
+    console.log(chalk6.blue(`Project "${name}" is a static site - no process to start.`));
+    console.log(chalk6.dim("Static sites are served directly by nginx."));
     return;
   }
-  console.log(chalk5.blue(`Starting ${name}...`));
+  console.log(chalk6.blue(`Starting ${name}...`));
   const result = startProject(project);
   if (result.success) {
-    console.log(chalk5.green(`\u2713 ${name} started successfully`));
-    console.log(chalk5.dim(`  Port: ${project.port}`));
-    console.log(chalk5.dim(`  URL: https://${project.hostname}`));
+    console.log(chalk6.green(`\u2713 ${name} started successfully`));
+    console.log(chalk6.dim(`  Port: ${project.port}`));
+    console.log(chalk6.dim(`  URL: https://${project.hostname}`));
   } else {
-    console.error(chalk5.red(`\u2717 Failed to start ${name}: ${result.error}`));
+    console.error(chalk6.red(`\u2717 Failed to start ${name}: ${result.error}`));
     process.exit(1);
   }
 }
 
 // src/commands/stop.ts
-import chalk6 from "chalk";
+import chalk7 from "chalk";
 async function stopCommand(name, options) {
   if (options.all) {
     const projects = listProjects();
     const npmProjects = projects.filter((p) => p.type === "npm");
     if (npmProjects.length === 0) {
-      console.log(chalk6.yellow("No npm projects to stop."));
+      console.log(chalk7.yellow("No npm projects to stop."));
       return;
     }
-    console.log(chalk6.blue(`Stopping ${npmProjects.length} npm project(s)...`));
+    console.log(chalk7.blue(`Stopping ${npmProjects.length} npm project(s)...`));
     const results = stopAllProjects(npmProjects);
     for (const result2 of results) {
       if (result2.success) {
-        console.log(chalk6.green(`  \u2713 ${result2.name}`));
+        console.log(chalk7.green(`  \u2713 ${result2.name}`));
       } else {
-        console.log(chalk6.red(`  \u2717 ${result2.name}: ${result2.error}`));
+        console.log(chalk7.red(`  \u2717 ${result2.name}: ${result2.error}`));
       }
     }
     const succeeded = results.filter((r) => r.success).length;
-    console.log(chalk6.dim(`
+    console.log(chalk7.dim(`
 ${succeeded}/${results.length} stopped successfully`));
     return;
   }
   if (!name) {
-    console.error(chalk6.red("Error: Project name is required. Use --all to stop all projects."));
+    console.error(chalk7.red("Error: Project name is required. Use --all to stop all projects."));
     process.exit(1);
   }
   const project = getProject(name);
   if (!project) {
-    console.error(chalk6.red(`Error: Project "${name}" not found`));
+    console.error(chalk7.red(`Error: Project "${name}" not found`));
     process.exit(1);
   }
   if (project.type !== "npm") {
-    console.log(chalk6.yellow(`Project "${name}" is a static site - no process to stop.`));
+    console.log(chalk7.yellow(`Project "${name}" is a static site - no process to stop.`));
     return;
   }
-  console.log(chalk6.blue(`Stopping ${name}...`));
+  console.log(chalk7.blue(`Stopping ${name}...`));
   const result = stopProject(name);
   if (result.success) {
-    console.log(chalk6.green(`\u2713 ${name} stopped successfully`));
+    console.log(chalk7.green(`\u2713 ${name} stopped successfully`));
   } else {
-    console.error(chalk6.red(`\u2717 Failed to stop ${name}: ${result.error}`));
+    console.error(chalk7.red(`\u2717 Failed to stop ${name}: ${result.error}`));
     process.exit(1);
   }
 }
 
 // src/commands/restart.ts
-import chalk7 from "chalk";
+import chalk8 from "chalk";
 async function restartCommand(name, options) {
   if (options.all) {
     const projects = listProjects();
     const npmProjects = projects.filter((p) => p.type === "npm");
     if (npmProjects.length === 0) {
-      console.log(chalk7.yellow("No npm projects to restart."));
+      console.log(chalk8.yellow("No npm projects to restart."));
       return;
     }
-    console.log(chalk7.blue(`Restarting ${npmProjects.length} npm project(s)...`));
+    console.log(chalk8.blue(`Restarting ${npmProjects.length} npm project(s)...`));
     const results = restartAllProjects(npmProjects);
     for (const result2 of results) {
       if (result2.success) {
-        console.log(chalk7.green(`  \u2713 ${result2.name}`));
+        console.log(chalk8.green(`  \u2713 ${result2.name}`));
       } else {
-        console.log(chalk7.red(`  \u2717 ${result2.name}: ${result2.error}`));
+        console.log(chalk8.red(`  \u2717 ${result2.name}: ${result2.error}`));
       }
     }
     const succeeded = results.filter((r) => r.success).length;
-    console.log(chalk7.dim(`
+    console.log(chalk8.dim(`
 ${succeeded}/${results.length} restarted successfully`));
     return;
   }
   if (!name) {
-    console.error(chalk7.red("Error: Project name is required. Use --all to restart all projects."));
+    console.error(chalk8.red("Error: Project name is required. Use --all to restart all projects."));
     process2.exit(1);
   }
   const project = getProject(name);
   if (!project) {
-    console.error(chalk7.red(`Error: Project "${name}" not found`));
+    console.error(chalk8.red(`Error: Project "${name}" not found`));
     process2.exit(1);
   }
   if (project.type !== "npm") {
-    console.log(chalk7.yellow(`Project "${name}" is a static site - no process to restart.`));
+    console.log(chalk8.yellow(`Project "${name}" is a static site - no process to restart.`));
     return;
   }
-  console.log(chalk7.blue(`Restarting ${name}...`));
+  console.log(chalk8.blue(`Restarting ${name}...`));
   const process2 = getProcessByName(name);
   let result;
   if (process2) {
     result = restartProject(name);
   } else {
-    console.log(chalk7.dim("Process not running, starting..."));
+    console.log(chalk8.dim("Process not running, starting..."));
     result = startProject(project);
   }
   if (result.success) {
-    console.log(chalk7.green(`\u2713 ${name} restarted successfully`));
+    console.log(chalk8.green(`\u2713 ${name} restarted successfully`));
   } else {
-    console.error(chalk7.red(`\u2717 Failed to restart ${name}: ${result.error}`));
+    console.error(chalk8.red(`\u2717 Failed to restart ${name}: ${result.error}`));
     process2.exit(1);
   }
 }
 
 // src/commands/logs.ts
-import chalk8 from "chalk";
+import chalk9 from "chalk";
 async function logsCommand(name, options) {
   const project = getProject(name);
   if (!project) {
-    console.error(chalk8.red(`Error: Project "${name}" not found`));
+    console.error(chalk9.red(`Error: Project "${name}" not found`));
     process2.exit(1);
   }
   if (project.type !== "npm") {
-    console.log(chalk8.yellow(`Project "${name}" is a static site - no logs available.`));
-    console.log(chalk8.dim("Check nginx access/error logs instead:"));
-    console.log(chalk8.dim("  /var/log/nginx/access.log"));
-    console.log(chalk8.dim("  /var/log/nginx/error.log"));
+    console.log(chalk9.yellow(`Project "${name}" is a static site - no logs available.`));
+    console.log(chalk9.dim("Check nginx access/error logs instead:"));
+    console.log(chalk9.dim("  /var/log/nginx/access.log"));
+    console.log(chalk9.dim("  /var/log/nginx/error.log"));
     return;
   }
   const process2 = getProcessByName(name);
   if (!process2) {
-    console.log(chalk8.yellow(`Project "${name}" has not been started yet.`));
-    console.log(chalk8.dim(`Run ${chalk8.cyan(`bindler start ${name}`)} first.`));
+    console.log(chalk9.yellow(`Project "${name}" has not been started yet.`));
+    console.log(chalk9.dim(`Run ${chalk9.cyan(`bindler start ${name}`)} first.`));
     return;
   }
   const lines = options.lines || 200;
   const follow = options.follow || false;
   if (follow) {
-    console.log(chalk8.dim(`Following logs for ${name}... (Ctrl+C to exit)`));
+    console.log(chalk9.dim(`Following logs for ${name}... (Ctrl+C to exit)`));
   }
   await showLogs(name, follow, lines);
 }
 
 // src/commands/update.ts
-import chalk9 from "chalk";
-import { existsSync as existsSync7 } from "fs";
+import chalk10 from "chalk";
+import { existsSync as existsSync8 } from "fs";
 async function updateCommand(name, options) {
   const project = getProject(name);
   if (!project) {
-    console.error(chalk9.red(`Error: Project "${name}" not found`));
+    console.error(chalk10.red(`Error: Project "${name}" not found`));
     process.exit(1);
   }
   const updates = {};
   if (options.hostname) {
     if (!validateHostname(options.hostname)) {
-      console.error(chalk9.red("Error: Invalid hostname format"));
+      console.error(chalk10.red("Error: Invalid hostname format"));
       process.exit(1);
     }
     updates.hostname = options.hostname;
@@ -1535,11 +1827,11 @@ async function updateCommand(name, options) {
   if (options.port) {
     const port = parseInt(options.port, 10);
     if (!validatePort(port)) {
-      console.error(chalk9.red("Error: Invalid port. Use a number between 1024 and 65535."));
+      console.error(chalk10.red("Error: Invalid port. Use a number between 1024 and 65535."));
       process.exit(1);
     }
     if (!isPortAvailable(port) && port !== project.port) {
-      console.error(chalk9.red(`Error: Port ${port} is already in use by another project.`));
+      console.error(chalk10.red(`Error: Port ${port} is already in use by another project.`));
       process.exit(1);
     }
     updates.port = port;
@@ -1549,20 +1841,20 @@ async function updateCommand(name, options) {
   }
   if (options.start) {
     if (project.type !== "npm") {
-      console.error(chalk9.red("Error: Start command only applies to npm projects"));
+      console.error(chalk10.red("Error: Start command only applies to npm projects"));
       process.exit(1);
     }
     updates.start = options.start;
   }
   if (options.path) {
-    if (!existsSync7(options.path)) {
-      console.error(chalk9.red(`Error: Path does not exist: ${options.path}`));
+    if (!existsSync8(options.path)) {
+      console.error(chalk10.red(`Error: Path does not exist: ${options.path}`));
       process.exit(1);
     }
     if (isProtectedPath(options.path)) {
-      console.error(chalk9.red(`Error: Path is in a macOS protected folder (Desktop/Documents/Downloads).`));
-      console.error(chalk9.yellow(`Nginx cannot access these folders without Full Disk Access.`));
-      console.error(chalk9.dim(`Move your project to ~/projects or another accessible location.`));
+      console.error(chalk10.red(`Error: Path is in a macOS protected folder (Desktop/Documents/Downloads).`));
+      console.error(chalk10.yellow(`Nginx cannot access these folders without Full Disk Access.`));
+      console.error(chalk10.dim(`Move your project to ~/projects or another accessible location.`));
       process.exit(1);
     }
     updates.path = options.path;
@@ -1572,7 +1864,7 @@ async function updateCommand(name, options) {
     for (const envStr of options.env) {
       const [key, ...valueParts] = envStr.split("=");
       if (!key) {
-        console.error(chalk9.red(`Error: Invalid env format: ${envStr}. Use KEY=value`));
+        console.error(chalk10.red(`Error: Invalid env format: ${envStr}. Use KEY=value`));
         process.exit(1);
       }
       env[key] = valueParts.join("=");
@@ -1585,23 +1877,23 @@ async function updateCommand(name, options) {
     updates.enabled = false;
   }
   if (Object.keys(updates).length === 0) {
-    console.log(chalk9.yellow("No updates specified."));
-    console.log(chalk9.dim("Available options: --hostname, --port, --start, --path, --env, --enable, --disable"));
+    console.log(chalk10.yellow("No updates specified."));
+    console.log(chalk10.dim("Available options: --hostname, --port, --start, --path, --env, --enable, --disable"));
     return;
   }
   try {
     updateProject(name, updates);
-    console.log(chalk9.green(`\u2713 Project "${name}" updated successfully`));
+    console.log(chalk10.green(`\u2713 Project "${name}" updated successfully`));
     for (const [key, value] of Object.entries(updates)) {
-      console.log(chalk9.dim(`  ${key}: ${typeof value === "object" ? JSON.stringify(value) : value}`));
+      console.log(chalk10.dim(`  ${key}: ${typeof value === "object" ? JSON.stringify(value) : value}`));
     }
-    console.log(chalk9.dim(`
-Run ${chalk9.cyan("sudo bindler apply")} to apply changes to nginx.`));
+    console.log(chalk10.dim(`
+Run ${chalk10.cyan("sudo bindler apply")} to apply changes to nginx.`));
     if (project.type === "npm" && (updates.port || updates.start || updates.env)) {
-      console.log(chalk9.dim(`Run ${chalk9.cyan(`bindler restart ${name}`)} to apply changes to the running process.`));
+      console.log(chalk10.dim(`Run ${chalk10.cyan(`bindler restart ${name}`)} to apply changes to the running process.`));
     }
   } catch (error) {
-    console.error(chalk9.red(`Error: ${error instanceof Error ? error.message : error}`));
+    console.error(chalk10.red(`Error: ${error instanceof Error ? error.message : error}`));
     process.exit(1);
   }
 }
@@ -1610,20 +1902,20 @@ Run ${chalk9.cyan("sudo bindler apply")} to apply changes to nginx.`));
 import { writeFileSync as writeFileSync4, readFileSync as readFileSync4, unlinkSync } from "fs";
 import { tmpdir } from "os";
 import { join as join6 } from "path";
-import chalk10 from "chalk";
+import chalk11 from "chalk";
 async function editCommand(name) {
   const project = getProject(name);
   if (!project) {
-    console.error(chalk10.red(`Error: Project "${name}" not found`));
+    console.error(chalk11.red(`Error: Project "${name}" not found`));
     process.exit(1);
   }
   const editor = process.env.EDITOR || process.env.VISUAL || "vi";
   const tmpFile = join6(tmpdir(), `bindler-${name}-${Date.now()}.json`);
   writeFileSync4(tmpFile, JSON.stringify(project, null, 2) + "\n");
-  console.log(chalk10.dim(`Opening ${name} config in ${editor}...`));
+  console.log(chalk11.dim(`Opening ${name} config in ${editor}...`));
   const exitCode = await spawnInteractive(editor, [tmpFile]);
   if (exitCode !== 0) {
-    console.error(chalk10.red("Editor exited with error"));
+    console.error(chalk11.red("Editor exited with error"));
     unlinkSync(tmpFile);
     process.exit(1);
   }
@@ -1631,7 +1923,7 @@ async function editCommand(name) {
   try {
     editedContent = readFileSync4(tmpFile, "utf-8");
   } catch (error) {
-    console.error(chalk10.red("Failed to read edited file"));
+    console.error(chalk11.red("Failed to read edited file"));
     process.exit(1);
   } finally {
     unlinkSync(tmpFile);
@@ -1640,44 +1932,44 @@ async function editCommand(name) {
   try {
     editedProject = JSON.parse(editedContent);
   } catch (error) {
-    console.error(chalk10.red("Error: Invalid JSON in edited file"));
+    console.error(chalk11.red("Error: Invalid JSON in edited file"));
     process.exit(1);
   }
   if (editedProject.name !== project.name) {
-    console.error(chalk10.red("Error: Cannot change project name via edit. Use a new project instead."));
+    console.error(chalk11.red("Error: Cannot change project name via edit. Use a new project instead."));
     process.exit(1);
   }
   const originalStr = JSON.stringify(project);
   const editedStr = JSON.stringify(editedProject);
   if (originalStr === editedStr) {
-    console.log(chalk10.yellow("No changes made."));
+    console.log(chalk11.yellow("No changes made."));
     return;
   }
   try {
     const config = readConfig();
     const index = config.projects.findIndex((p) => p.name === name);
     if (index === -1) {
-      console.error(chalk10.red("Error: Project not found"));
+      console.error(chalk11.red("Error: Project not found"));
       process.exit(1);
     }
     config.projects[index] = editedProject;
     writeConfig(config);
-    console.log(chalk10.green(`\u2713 Project "${name}" updated successfully`));
-    console.log(chalk10.dim(`
-Run ${chalk10.cyan("sudo bindler apply")} to apply changes to nginx.`));
+    console.log(chalk11.green(`\u2713 Project "${name}" updated successfully`));
+    console.log(chalk11.dim(`
+Run ${chalk11.cyan("sudo bindler apply")} to apply changes to nginx.`));
   } catch (error) {
-    console.error(chalk10.red(`Error: ${error instanceof Error ? error.message : error}`));
+    console.error(chalk11.red(`Error: ${error instanceof Error ? error.message : error}`));
     process.exit(1);
   }
 }
 
 // src/commands/remove.ts
 import inquirer2 from "inquirer";
-import chalk11 from "chalk";
+import chalk12 from "chalk";
 async function removeCommand(name, options) {
   const project = getProject(name);
   if (!project) {
-    console.error(chalk11.red(`Error: Project "${name}" not found`));
+    console.error(chalk12.red(`Error: Project "${name}" not found`));
     process.exit(1);
   }
   if (!options.force) {
@@ -1690,338 +1982,51 @@ async function removeCommand(name, options) {
       }
     ]);
     if (!confirm) {
-      console.log(chalk11.yellow("Cancelled."));
+      console.log(chalk12.yellow("Cancelled."));
       return;
     }
   }
   if (project.type === "npm") {
     const process2 = getProcessByName(name);
     if (process2) {
-      console.log(chalk11.dim("Stopping PM2 process..."));
+      console.log(chalk12.dim("Stopping PM2 process..."));
       deleteProject(name);
     }
   }
   try {
     removeProject(name);
-    console.log(chalk11.green(`\u2713 Project "${name}" removed from registry`));
+    console.log(chalk12.green(`\u2713 Project "${name}" removed from registry`));
     if (options.apply) {
-      console.log(chalk11.dim("\nApplying nginx configuration..."));
+      console.log(chalk12.dim("\nApplying nginx configuration..."));
       const config = readConfig();
       try {
         writeNginxConfig(config);
         const testResult = testNginxConfig();
         if (testResult.success) {
           reloadNginx();
-          console.log(chalk11.green("\u2713 Nginx configuration updated"));
+          console.log(chalk12.green("\u2713 Nginx configuration updated"));
         } else {
-          console.log(chalk11.yellow("! Nginx config test failed, reload skipped"));
+          console.log(chalk12.yellow("! Nginx config test failed, reload skipped"));
         }
       } catch (err) {
-        console.log(chalk11.yellow(`! Failed to update nginx: ${err}`));
-        console.log(chalk11.dim("  Try running: sudo bindler apply"));
+        console.log(chalk12.yellow(`! Failed to update nginx: ${err}`));
+        console.log(chalk12.dim("  Try running: sudo bindler apply"));
       }
-    } else {
-      console.log(chalk11.dim(`
-Run ${chalk11.cyan("sudo bindler apply")} to update nginx configuration.`));
-    }
-    console.log(chalk11.yellow("\nNote: Project files were not deleted."));
-    console.log(chalk11.dim(`  Path: ${project.path}`));
-    if (!project.local) {
-      console.log(chalk11.yellow("\nCloudflare DNS route was not removed."));
-      console.log(chalk11.dim("  Remove it manually from the Cloudflare dashboard:"));
-      console.log(chalk11.dim("  https://dash.cloudflare.com \u2192 DNS \u2192 Records \u2192 Delete the CNAME for " + project.hostname));
-    }
-  } catch (error) {
-    console.error(chalk11.red(`Error: ${error instanceof Error ? error.message : error}`));
-    process.exit(1);
-  }
-}
-
-// src/commands/apply.ts
-import chalk12 from "chalk";
-import { existsSync as existsSync8 } from "fs";
-
-// src/lib/cloudflare.ts
-function isCloudflaredInstalled() {
-  const result = execCommandSafe("which cloudflared");
-  return result.success;
-}
-function getCloudflaredVersion() {
-  const result = execCommandSafe("cloudflared --version");
-  if (result.success) {
-    const match = result.output.match(/cloudflared version (\S+)/);
-    return match ? match[1] : result.output;
-  }
-  return null;
-}
-function listTunnels() {
-  const result = execCommandSafe("cloudflared tunnel list --output json");
-  if (!result.success) {
-    return [];
-  }
-  try {
-    const tunnels = JSON.parse(result.output);
-    return tunnels.map((t) => ({
-      id: t.id,
-      name: t.name,
-      createdAt: t.created_at
-    }));
-  } catch {
-    return [];
-  }
-}
-function getTunnelByName(name) {
-  const tunnels = listTunnels();
-  const tunnel = tunnels.find((t) => t.name === name);
-  return tunnel ? { id: tunnel.id, name: tunnel.name } : null;
-}
-function routeDns(tunnelName, hostname) {
-  const result = execCommandSafe(`cloudflared tunnel route dns "${tunnelName}" "${hostname}"`);
-  if (!result.success) {
-    if (result.error?.includes("already exists") || result.output?.includes("already exists")) {
-      return { success: true, output: "DNS route already exists" };
-    }
-    return { success: false, error: result.error };
-  }
-  return { success: true, output: result.output };
-}
-function routeDnsForAllProjects() {
-  const config = readConfig();
-  const { tunnelName, applyCloudflareDnsRoutes } = config.defaults;
-  if (!applyCloudflareDnsRoutes) {
-    return [];
-  }
-  const results = [];
-  for (const project of config.projects) {
-    if (project.enabled === false) {
-      continue;
-    }
-    if (project.local) {
-      results.push({
-        hostname: project.hostname,
-        success: true,
-        skipped: true,
-        output: "Local project - skipped"
-      });
-      continue;
-    }
-    const result = routeDns(tunnelName, project.hostname);
-    results.push({
-      hostname: project.hostname,
-      ...result
-    });
-  }
-  return results;
-}
-function isTunnelRunning(tunnelName) {
-  const result = execCommandSafe(`pgrep -f "cloudflared.*tunnel.*run.*${tunnelName}"`);
-  return result.success;
-}
-function getTunnelInfo(tunnelName) {
-  const tunnel = getTunnelByName(tunnelName);
-  if (!tunnel) {
-    return { exists: false, running: false };
-  }
-  return {
-    exists: true,
-    running: isTunnelRunning(tunnelName),
-    id: tunnel.id
-  };
-}
-
-// src/commands/apply.ts
-async function applyCommand(options) {
-  let config = readConfig();
-  const defaults = getDefaults();
-  if (options.sync) {
-    console.log(chalk12.dim("Syncing bindler.yaml from project directories...\n"));
-    let synced = 0;
-    for (const project of config.projects) {
-      if (!existsSync8(project.path)) continue;
-      const yamlConfig = readBindlerYaml(project.path);
-      if (yamlConfig) {
-        const merged = mergeYamlWithProject(project, yamlConfig);
-        updateProject(project.name, merged);
-        console.log(chalk12.green(`  \u2713 Synced ${project.name} from bindler.yaml`));
-        synced++;
-      }
-    }
-    if (synced === 0) {
-      console.log(chalk12.dim("  No bindler.yaml files found in project directories"));
     } else {
       console.log(chalk12.dim(`
-  Synced ${synced} project(s)
-`));
+Run ${chalk12.cyan("sudo bindler apply")} to update nginx configuration.`));
     }
-    config = readConfig();
-  }
-  if (options.env) {
-    console.log(chalk12.dim(`Using ${options.env} environment configuration...
-`));
-    const envProjects = listProjectsForEnv(options.env);
-    config = { ...config, projects: envProjects };
-  }
-  const hasProjects = config.projects.length > 0;
-  console.log(chalk12.blue("Applying configuration...\n"));
-  if (hasProjects && !options.skipChecks) {
-    console.log(chalk12.dim("Running preflight checks..."));
-    const checkResult = runPreflightChecks(config);
-    if (!checkResult.valid) {
-      printValidationResult(checkResult);
-      console.log(chalk12.red("\n\u2717 Preflight checks failed. Fix the errors above before applying."));
-      console.log(chalk12.dim("  Use --skip-checks to bypass (not recommended)"));
-      process.exit(1);
-    }
-    if (checkResult.warnings.length > 0) {
-      printValidationResult(checkResult);
-      console.log("");
-    } else {
-      console.log(chalk12.green("  \u2713 Preflight checks passed"));
+    console.log(chalk12.yellow("\nNote: Project files were not deleted."));
+    console.log(chalk12.dim(`  Path: ${project.path}`));
+    if (!project.local) {
+      console.log(chalk12.yellow("\nCloudflare DNS route was not removed."));
+      console.log(chalk12.dim("  Remove it manually from the Cloudflare dashboard:"));
+      console.log(chalk12.dim("  https://dash.cloudflare.com \u2192 DNS \u2192 Records \u2192 Delete the CNAME for " + project.hostname));
     }
-  }
-  console.log(chalk12.dim("Generating nginx configuration..."));
-  if (options.dryRun) {
-    const nginxConfig = generateNginxConfig(config);
-    console.log(chalk12.cyan("\n--- Generated nginx config (dry-run) ---\n"));
-    console.log(nginxConfig);
-    console.log(chalk12.cyan("--- End of config ---\n"));
-    console.log(chalk12.yellow("Dry run mode - no changes were made."));
-    return;
-  }
-  try {
-    const { path, content } = writeNginxConfig(config);
-    console.log(chalk12.green(`  \u2713 Wrote nginx config to ${path}`));
   } catch (error) {
-    const errMsg = error instanceof Error ? error.message : String(error);
-    console.error(chalk12.red(`  \u2717 Failed to write nginx config: ${errMsg}`));
-    if (errMsg.includes("EACCES") || errMsg.includes("permission denied")) {
-      console.log(chalk12.yellow(`
-Try running with sudo: ${chalk12.cyan("sudo bindler apply")}`));
-    }
+    console.error(chalk12.red(`Error: ${error instanceof Error ? error.message : error}`));
     process.exit(1);
   }
-  const authProjects = config.projects.filter(
-    (p) => p.security?.basicAuth?.enabled && p.security.basicAuth.users?.length
-  );
-  if (authProjects.length > 0) {
-    console.log(chalk12.dim("Generating htpasswd files..."));
-    try {
-      generateHtpasswdFiles(config.projects);
-      console.log(chalk12.green(`  \u2713 Generated htpasswd files for ${authProjects.length} project(s)`));
-    } catch (error) {
-      console.log(chalk12.yellow(`  ! Failed to generate htpasswd files: ${error}`));
-    }
-  }
-  console.log(chalk12.dim("Testing nginx configuration..."));
-  const testResult = testNginxConfig();
-  if (!testResult.success) {
-    console.error(chalk12.red("  \u2717 Nginx configuration test failed:"));
-    console.error(chalk12.red(testResult.output));
-    console.log(chalk12.yellow("\nConfiguration was written but nginx was NOT reloaded."));
-    console.log(chalk12.dim("Fix the configuration and run `sudo bindler apply` again."));
-    process.exit(1);
-  }
-  console.log(chalk12.green("  \u2713 Nginx configuration test passed"));
-  if (!options.noReload) {
-    console.log(chalk12.dim("Reloading nginx..."));
-    const reloadResult = reloadNginx();
-    if (!reloadResult.success) {
-      console.error(chalk12.red(`  \u2717 Failed to reload nginx: ${reloadResult.error}`));
-      console.log(chalk12.dim("You may need to reload nginx manually: sudo systemctl reload nginx"));
-      process.exit(1);
-    }
-    console.log(chalk12.green("  \u2713 Nginx reloaded successfully"));
-    const listenPort = parseInt(defaults.nginxListen.split(":").pop() || "80", 10);
-    const portCheck = execCommandSafe(`lsof -i :${listenPort} -P -n 2>/dev/null | grep LISTEN | grep nginx`);
-    if (!portCheck.success || !portCheck.output) {
-      const isPrivilegedPort = listenPort < 1024;
-      console.log(chalk12.yellow(`
-\u26A0 Nginx is not listening on port ${listenPort}`));
-      if (isPrivilegedPort) {
-        console.log(chalk12.dim(`  Port ${listenPort} requires root privileges.
-`));
-        console.log(chalk12.cyan("  Solutions:\n"));
-        console.log(chalk12.white("  Option 1: Restart nginx with sudo (recommended for port 80)"));
-        console.log(chalk12.dim("    sudo pkill nginx && sudo nginx\n"));
-        console.log(chalk12.white("  Option 2: Use a non-privileged port (no sudo needed)"));
-        console.log(chalk12.dim("    bindler config set nginxListen 8080"));
-        console.log(chalk12.dim("    bindler apply"));
-        console.log(chalk12.dim("    # Then access via http://hostname:8080\n"));
-      } else {
-        console.log(chalk12.dim("  Try restarting nginx: brew services restart nginx"));
-      }
-    }
-  } else {
-    console.log(chalk12.yellow("  - Skipped nginx reload (--no-reload)"));
-  }
-  const isDirectMode = defaults.mode === "direct";
-  if (!hasProjects) {
-  } else if (isDirectMode) {
-    console.log(chalk12.dim("\n  - Direct mode: skipping Cloudflare DNS routes"));
-  } else if (!options.noCloudflare && defaults.applyCloudflareDnsRoutes) {
-    console.log(chalk12.dim("\nConfiguring Cloudflare DNS routes..."));
-    if (!isCloudflaredInstalled()) {
-      console.log(chalk12.yellow("  - cloudflared not installed, skipping DNS routes"));
-    } else {
-      const dnsResults = routeDnsForAllProjects();
-      if (dnsResults.length === 0) {
-        console.log(chalk12.dim("  No hostnames to route"));
-      } else {
-        for (const result of dnsResults) {
-          if (result.skipped) {
-            console.log(chalk12.dim(`  - ${result.hostname} (local - skipped)`));
-          } else if (result.success) {
-            const msg = result.output?.includes("already exists") ? "exists" : "routed";
-            console.log(chalk12.green(`  \u2713 ${result.hostname} (${msg})`));
-          } else {
-            console.log(chalk12.red(`  \u2717 ${result.hostname}: ${result.error}`));
-          }
-        }
-      }
-    }
-  } else if (options.noCloudflare) {
-    console.log(chalk12.dim("\n  - Skipped Cloudflare DNS routes (--no-cloudflare)"));
-  }
-  if (hasProjects && isDirectMode && defaults.sslEnabled && options.ssl !== false) {
-    console.log(chalk12.dim("\nSetting up SSL certificates..."));
-    const hostnames = config.projects.filter((p) => p.enabled !== false && !p.local).map((p) => p.hostname);
-    if (hostnames.length === 0) {
-      console.log(chalk12.dim("  No hostnames to secure"));
-    } else {
-      const certbotResult = execCommandSafe("which certbot");
-      if (!certbotResult.success) {
-        console.log(chalk12.yellow("  - certbot not installed, skipping SSL"));
-        console.log(chalk12.dim("    Run: bindler setup --direct"));
-      } else {
-        for (const hostname of hostnames) {
-          console.log(chalk12.dim(`  Requesting certificate for ${hostname}...`));
-          const email = defaults.sslEmail || "admin@" + hostname.split(".").slice(-2).join(".");
-          const result = execCommandSafe(
-            `sudo certbot --nginx -d ${hostname} --non-interactive --agree-tos --email ${email} 2>&1`
-          );
-          if (result.success || result.output?.includes("Certificate not yet due for renewal")) {
-            console.log(chalk12.green(`  \u2713 ${hostname} (secured)`));
-          } else if (result.output?.includes("already exists")) {
-            console.log(chalk12.green(`  \u2713 ${hostname} (exists)`));
-          } else {
-            console.log(chalk12.yellow(`  ! ${hostname}: ${result.error || "failed"}`));
-            console.log(chalk12.dim("    Run manually: sudo certbot --nginx -d " + hostname));
-          }
-        }
-      }
-    }
-  }
-  console.log(chalk12.green("\n\u2713 Configuration applied successfully!"));
-  if (hasProjects) {
-    console.log(chalk12.dim(`
-${config.projects.length} project(s) configured:`));
-    for (const project of config.projects) {
-      const status = project.enabled !== false ? chalk12.green("enabled") : chalk12.yellow("disabled");
-      console.log(chalk12.dim(`  - ${project.name} \u2192 ${project.hostname} (${status})`));
-    }
-  } else {
-    console.log(chalk12.dim("\nNo projects configured. Nginx config cleared."));
-  }
 }
 
 // src/commands/doctor.ts
@@ -2333,7 +2338,7 @@ async function infoCommand() {
   `));
   console.log(chalk15.white("  Manage multiple projects behind Cloudflare Tunnel"));
   console.log(chalk15.white("  with Nginx and PM2\n"));
-  console.log(chalk15.dim("  Version:  ") + chalk15.white("1.6.0"));
+  console.log(chalk15.dim("  Version:  ") + chalk15.white("1.6.1"));
   console.log(chalk15.dim("  Author:   ") + chalk15.white("alfaoz"));
   console.log(chalk15.dim("  License:  ") + chalk15.white("MIT"));
   console.log(chalk15.dim("  GitHub:   ") + chalk15.cyan("https://github.com/alfaoz/bindler"));
@@ -4075,28 +4080,28 @@ async function checkForUpdates() {
   const cache = readCache();
   const now = Date.now();
   if (now - cache.lastCheck < CHECK_INTERVAL) {
-    if (cache.latestVersion && compareVersions("1.6.0", cache.latestVersion) < 0) {
+    if (cache.latestVersion && compareVersions("1.6.1", cache.latestVersion) > 0) {
       showUpdateMessage(cache.latestVersion);
     }
     return;
   }
   fetchLatestVersion().then((latestVersion) => {
     writeCache({ lastCheck: now, latestVersion });
-    if (latestVersion && compareVersions("1.6.0", latestVersion) < 0) {
+    if (latestVersion && compareVersions("1.6.1", latestVersion) > 0) {
       showUpdateMessage(latestVersion);
     }
   });
 }
 function showUpdateMessage(latestVersion) {
   console.log("");
-  console.log(chalk30.yellow(`  Update available: ${"1.6.0"} \u2192 ${latestVersion}`));
+  console.log(chalk30.yellow(`  Update available: ${"1.6.1"} \u2192 ${latestVersion}`));
   console.log(chalk30.dim(`  Run: npm update -g bindler`));
   console.log("");
 }
 
 // src/cli.ts
 var program = new Command();
-program.name("bindler").description("Manage multiple projects behind Cloudflare Tunnel with Nginx and PM2").version("1.6.0");
+program.name("bindler").description("Manage multiple projects behind Cloudflare Tunnel with Nginx and PM2").version("1.6.1");
 program.hook("preAction", async () => {
   try {
     initConfig();