@quatronic/qore 0.1.4 → 0.1.6

package/dist/cli.js

@@ -1,11 +1,18 @@
 #!/usr/bin/env node
 
+!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="28c91dc8-dbb9-5c0a-91e3-f368931a4ed3")}catch(e){}}();
+import { createRequire as __qoreCreateRequire } from "node:module"; const require = __qoreCreateRequire(import.meta.url);
+import {
+  addSecretValues,
+  buildScrubContext
+} from "./chunk-OAU6HJHZ.js";
+
 // src/cli.ts
 import { homedir as homedir2 } from "os";
 import { EnvHttpProxyAgent, setGlobalDispatcher } from "undici";
 
 // src/cli/io.ts
-import { confirm, search, select } from "@inquirer/prompts";
+import { confirm, input, search, select } from "@inquirer/prompts";
 import { createInterface } from "readline";
 
 // src/platform/browser.ts
@@ -44,6 +51,10 @@ var EXIT = {
   QORE_REPO_ACCESS_PENDING: 5,
   QORE_GIT_AUTH: 5,
   QORE_WORKSPACE_CONFLICT: 2,
+  QORE_ROOT_NOT_SET: 2,
+  QORE_ROOT_INVALID: 2,
+  QORE_ROOT_NOT_WRITABLE: 1,
+  QORE_PROJECT_NOT_FOUND: 2,
   QORE_AUTH_UNAVAILABLE: 6,
   QORE_AUTH_BUSY: 6,
   QORE_API_UNREACHABLE: 6,
@@ -145,13 +156,21 @@ function processIo(interactive, stderrTTY = Boolean(process.stderr.isTTY)) {
         throw e;
       }
     },
+    async input(message, o) {
+      try {
+        return await input({ message, default: o?.default });
+      } catch (e) {
+        if (e.name === "ExitPromptError") throw new CancelledError();
+        throw e;
+      }
+    },
     waitForEnter: createWaitForEnter(process.stdin, process.stderr),
     openUrl: openBrowser
   };
 }
-function createWaitForEnter(input, output) {
-  return (message, signal) => new Promise((resolve5, reject) => {
-    const rl = createInterface({ input, output, terminal: true });
+function createWaitForEnter(input2, output) {
+  return (message, signal) => new Promise((resolve6, reject) => {
+    const rl = createInterface({ input: input2, output, terminal: true });
     const onAbort = () => {
       rl.close();
       reject(new CancelledError());
@@ -159,7 +178,7 @@ function createWaitForEnter(input, output) {
     const done = () => {
       signal.removeEventListener("abort", onAbort);
       rl.close();
-      resolve5();
+      resolve6();
     };
     signal.addEventListener("abort", onAbort, { once: true });
     rl.on("SIGINT", () => {
@@ -176,7 +195,7 @@ import { Command, CommanderError } from "commander";
 
 // src/core/api/http.ts
 function abortableFetch(fetch3, signal) {
-  return (input, init) => fetch3(input, { ...init, signal: init?.signal ? AbortSignal.any([init.signal, signal]) : signal });
+  return (input2, init) => fetch3(input2, { ...init, signal: init?.signal ? AbortSignal.any([init.signal, signal]) : signal });
 }
 var TLS = /* @__PURE__ */ new Set([
   "SELF_SIGNED_CERT_IN_CHAIN",
@@ -320,7 +339,7 @@ function renderDoctorJson(io2, report) {
   return true;
 }
 var SYMBOL = { ok: "\u2713", warn: "!", fail: "\u2717" };
-var TOOL_IDS = ["qore", "node", "git", "github-ssh", "docker"];
+var TOOL_IDS = ["qore", "node", "git", "github-ssh", "docker", "telemetry"];
 var ROW_WIDTH = 80;
 var COL_B = 36;
 function rawLine(r) {
@@ -435,7 +454,16 @@ function buildProgram(deps2, io2, signal, register, setExitCode) {
   for (const r of register) r(program, ctx);
   return program;
 }
-async function run(argv2, deps2, io2, signal, register) {
+function commandPath(action) {
+  const names = [];
+  for (let c = action; c?.parent; c = c.parent) names.unshift(c.name());
+  return names.join(" ");
+}
+function isCrash(e) {
+  if (e instanceof QoreError || e instanceof CancelledError || e instanceof CommanderError) return false;
+  return !(e instanceof Error && (e.name === "CancelledError" || e.name === "QoreError"));
+}
+async function run(argv2, deps2, io2, signal, register, hooks = {}) {
   const json2 = jsonFromArgv(argv2);
   const parseIo = json2 ? { ...io2, err: () => {
   } } : io2;
@@ -443,8 +471,12 @@ async function run(argv2, deps2, io2, signal, register) {
   const program = buildProgram(deps2, parseIo, signal, register, (code) => {
     state.exitCode = code;
   });
-  program.hook("preAction", (_program, action) => {
+  program.hook("preAction", async (_program, action) => {
     state.command = action.name();
+    try {
+      await hooks.onCommand?.(commandPath(action));
+    } catch {
+    }
   });
   try {
     await program.parseAsync(argv2, { from: "user" });
@@ -456,6 +488,12 @@ async function run(argv2, deps2, io2, signal, register) {
       if (json2) io2.out(JSON.stringify({ ok: false, error: { code: "QORE_CONTEXT_INVALID", message: e.message } }));
       return 2;
     }
+    if (isCrash(e)) {
+      try {
+        hooks.onCrash?.(e);
+      } catch {
+      }
+    }
     const opts = program.opts();
     renderError(io2, e, Boolean(opts.json), pc2.isColorSupported && opts.color !== false);
     if (!opts.json && needsDoctor(e) && state.command !== "doctor") io2.err("Run qore doctor for a full check of your machine.");
@@ -464,7 +502,7 @@ async function run(argv2, deps2, io2, signal, register) {
 }
 
 // src/cli/commands/clone.ts
-import { join as join6, relative as relative2, resolve as resolve2 } from "path";
+import { join as join9, relative as relative3, resolve as resolve4 } from "path";
 import { Option } from "commander";
 
 // src/core/api/meta.ts
@@ -918,8 +956,8 @@ var ResolutionCache = class {
     const f = await this.load();
     const hits = [];
     for (const [k, e] of Object.entries(f.entries)) {
-      const sep2 = k.lastIndexOf("|");
-      if (keys.includes(k.slice(sep2 + 1)) && this.fresh(e)) hits.push({ origin: k.slice(0, sep2), at: new Date(e.resolvedAt).getTime() });
+      const sep3 = k.lastIndexOf("|");
+      if (keys.includes(k.slice(sep3 + 1)) && this.fresh(e)) hits.push({ origin: k.slice(0, sep3), at: new Date(e.resolvedAt).getTime() });
     }
     hits.sort((a, b) => b.at - a.at);
     return [...new Set(hits.map((h) => h.origin))];
@@ -1225,6 +1263,13 @@ async function syncPresent(deps2, results, actions, pull, ctx) {
   }
 }
 
+// src/core/projects/registry.ts
+import { realpath as realpath4 } from "fs/promises";
+
+// src/core/projects/discover.ts
+import { readdir, realpath as realpath2 } from "fs/promises";
+import { join as join6 } from "path";
+
 // src/core/workspace/file.ts
 import { randomBytes as randomBytes2 } from "crypto";
 import { mkdir as mkdir2, readFile as readFile2, rename as rename2, rm, writeFile as writeFile2 } from "fs/promises";
@@ -1261,8 +1306,8 @@ async function readAt(dir2) {
 async function readWorkspace(dir2) {
   return readAt(dir2);
 }
-async function findWorkspace(start, home) {
-  let dir2 = resolve(start);
+async function findWorkspace(start2, home) {
+  let dir2 = resolve(start2);
   const stop = resolve(home);
   for (; ; ) {
     const ws = await readAt(dir2);
@@ -1286,17 +1331,225 @@ async function writeWorkspace(root, o) {
 }
 async function workspacePortal(deps2, ws) {
   const portal = resolvePortal(ws.portal, void 0);
-  const label2 = portal.builtin ?? portal.apiOrigin;
+  const label3 = portal.builtin ?? portal.apiOrigin;
   const profile = (await deps2.config.read()).profiles[portal.apiOrigin];
   const loggedIn = profile && await new TokenStore(deps2.keychain, profileHash(profile.apiOrigin, profile.issuer)).getRefresh();
   if (!loggedIn) {
-    throw new QoreError("QORE_NOT_LOGGED_IN", `This workspace belongs to ${label2}, which you are not logged in to`, {
-      hint: `Run \`qore login --portal ${label2}\`.`
+    throw new QoreError("QORE_NOT_LOGGED_IN", `This workspace belongs to ${label3}, which you are not logged in to`, {
+      hint: `Run \`qore login --portal ${label3}\`.`
     });
   }
   return portal;
 }
 
+// src/core/projects/discover.ts
+var SKIP = (name) => name.startsWith(".") || name === "node_modules";
+async function subdirs(dir2) {
+  try {
+    return (await readdir(dir2, { withFileTypes: true })).filter((d) => d.isDirectory() && !SKIP(d.name)).map((d) => d.name);
+  } catch {
+    return [];
+  }
+}
+async function scanRoot(root) {
+  const out = [];
+  for (const tenant of (await subdirs(root)).sort()) {
+    for (const app of (await subdirs(join6(root, tenant))).sort()) {
+      const path = join6(root, tenant, app);
+      try {
+        const ws = await readWorkspace(path);
+        if (ws) out.push({ kind: "workspace", path, portal: ws.portal, tenantSlug: tenant, appId: ws.appId, appSlug: app });
+      } catch {
+      }
+    }
+  }
+  return out;
+}
+var GONE = /* @__PURE__ */ new Set(["ENOENT", "ENOTDIR"]);
+async function stillValid(e) {
+  try {
+    const real = await realpath2(e.path);
+    if (e.kind === "workspace") {
+      const ws = await readWorkspace(real);
+      return ws && ws.appId === e.appId ? real : "gone";
+    }
+    return real;
+  } catch (err) {
+    if (err instanceof CancelledError) throw err;
+    return GONE.has(err.code ?? "") ? "gone" : "unknown";
+  }
+}
+async function knownProjects(deps2, o = {}) {
+  const cfg = await deps2.config.read();
+  const root = cfg.projectsRoot ? await realpath2(cfg.projectsRoot).catch(() => cfg.projectsRoot) : void 0;
+  const out = root ? (await scanRoot(root)).map((p) => ({ ...p, source: "root" })) : [];
+  const seen = new Set(out.map((p) => p.path));
+  const stale = [];
+  for (const e of cfg.projects ?? []) {
+    const real = await stillValid(e);
+    if (real === "gone") {
+      stale.push(e.path);
+      continue;
+    }
+    if (real === "unknown") continue;
+    if (seen.has(real)) continue;
+    seen.add(real);
+    out.push({ ...e, path: real, source: "registry" });
+  }
+  if (stale.length > 0) await forget(deps2, stale);
+  return o.portal ? out.filter((p) => p.portal === o.portal) : out;
+}
+
+// src/core/projects/root.ts
+import { randomBytes as randomBytes3 } from "crypto";
+import { mkdir as mkdir3, realpath as realpath3, rm as rm2, stat as stat2, writeFile as writeFile3 } from "fs/promises";
+import { dirname as dirname3, isAbsolute, join as join8, parse, relative as relative2, resolve as resolve3, sep } from "path";
+
+// src/core/context/repoRoot.ts
+import { stat } from "fs/promises";
+import { dirname as dirname2, join as join7, resolve as resolve2 } from "path";
+async function findRepoRoot(start2) {
+  let dir2 = resolve2(start2);
+  for (; ; ) {
+    try {
+      await stat(join7(dir2, ".git"));
+      return dir2;
+    } catch {
+    }
+    const up = dirname2(dir2);
+    if (up === dir2) return null;
+    dir2 = up;
+  }
+}
+
+// src/core/projects/root.ts
+var NOT_WRITABLE = /* @__PURE__ */ new Set(["EACCES", "EPERM", "EROFS"]);
+function expandPath(deps2, input2) {
+  const s = input2.trim();
+  if (s === "~") return deps2.home;
+  if (s.startsWith("~/") || s.startsWith("~\\")) return trimSeparator(join8(deps2.home, s.slice(2)));
+  return resolve3(deps2.cwd, s);
+}
+function trimSeparator(p) {
+  const root = parse(p).root;
+  let end = p.length;
+  while (end > root.length && (p[end - 1] === "/" || p[end - 1] === "\\")) end--;
+  return p.slice(0, end);
+}
+async function underAFile(path) {
+  for (let p = dirname3(path); ; p = dirname3(p)) {
+    const s = await stat2(p).catch((e) => e.code === "ENOENT" ? void 0 : null);
+    if (s === null) return false;
+    if (s) return !s.isDirectory();
+    if (dirname3(p) === p) return false;
+  }
+}
+function isInside(parent, child) {
+  const rel = relative2(parent, child);
+  return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+}
+function scannedBy(root, e) {
+  if (e.kind !== "workspace" || !isInside(root, e.path)) return false;
+  return relative2(root, e.path).split(sep).filter(Boolean).length === 2;
+}
+async function writableError(path) {
+  const probe = join8(path, `.qore-write-test-${randomBytes3(6).toString("hex")}`);
+  try {
+    await writeFile3(probe, "");
+    await rm2(probe, { force: true });
+    return null;
+  } catch (e) {
+    return e;
+  }
+}
+var invalid2 = (path, why) => new QoreError("QORE_ROOT_INVALID", `${path} cannot be the projects root: ${why}`, { hint: "Pick another folder: qore init --root <path>." });
+var notWritable = (path, e) => new QoreError("QORE_ROOT_NOT_WRITABLE", `${path} is not writable (${e.code ?? e.message})`, {
+  hint: "Fix its permissions, or pick another folder: qore init --root <path>.",
+  cause: e
+});
+async function checkRoot(deps2, input2) {
+  const path = expandPath(deps2, input2);
+  if (dirname3(path) === path) throw invalid2(path, "it is the filesystem root");
+  try {
+    if (!(await stat2(path)).isDirectory()) throw invalid2(path, "it is a file");
+  } catch (e) {
+    if (e instanceof QoreError) throw e;
+    const err = e;
+    if (err.code === "ENOTDIR") throw invalid2(path, "a parent of it is a file");
+    if (NOT_WRITABLE.has(err.code ?? "")) throw notWritable(path, err);
+    if (err.code !== "ENOENT") throw e;
+    if (await underAFile(path)) throw invalid2(path, "a parent of it is a file");
+  }
+  const repo = await findRepoRoot(path);
+  if (await findWorkspace(path, deps2.home) || repo && !isInside(repo, deps2.home)) {
+    throw invalid2(path, "it lies inside a project (an app workspace or a git repository)");
+  }
+  return path;
+}
+async function createRoot(path) {
+  try {
+    await mkdir3(path, { recursive: true });
+  } catch (e) {
+    const err2 = e;
+    if (NOT_WRITABLE.has(err2.code ?? "")) throw notWritable(path, err2);
+    if (err2.code === "ENOTDIR" || err2.code === "EEXIST") throw invalid2(path, "a parent of it is a file");
+    throw e;
+  }
+  const err = await writableError(path);
+  if (err) throw notWritable(path, err);
+  return realpath3(path);
+}
+async function validateRoot(deps2, input2) {
+  return createRoot(await checkRoot(deps2, input2));
+}
+
+// src/core/projects/registry.ts
+var LOCK = "projects";
+var same = (a, b) => JSON.stringify(a) === JSON.stringify(b);
+async function quietly(fn) {
+  try {
+    await fn();
+  } catch (e) {
+    if (e instanceof CancelledError) throw e;
+  }
+}
+async function remember(deps2, e) {
+  await quietly(async () => {
+    const path = await realpath4(e.path);
+    const entry = { ...e, path };
+    const cfg = await deps2.config.read();
+    const root = cfg.projectsRoot ? await realpath4(cfg.projectsRoot).catch(() => cfg.projectsRoot) : void 0;
+    if (root && scannedBy(root, entry)) return;
+    const current = cfg.projects?.find((p) => p.path === path);
+    if (current && same(current, entry)) return;
+    await deps2.withLock(LOCK, () => deps2.config.update((c) => {
+      c.projects = [...(c.projects ?? []).filter((p) => p.path !== path), entry];
+    }).then(() => void 0));
+  });
+}
+async function forget(deps2, paths) {
+  const drop = new Set(paths);
+  await quietly(() => deps2.withLock(LOCK, () => deps2.config.update((c) => {
+    if (c.projects) c.projects = c.projects.filter((p) => !drop.has(p.path));
+  }).then(() => void 0)));
+}
+async function setRoot(deps2, next) {
+  let registered = 0;
+  await deps2.withLock(LOCK, async () => {
+    const old = (await deps2.config.read()).projectsRoot;
+    const carried = old && old !== next ? await scanRoot(old) : [];
+    const keep = carried.filter((p) => !next || !scannedBy(next, p));
+    registered = keep.length;
+    await deps2.config.update((c) => {
+      c.projectsRoot = next;
+      if (next === void 0) delete c.projectsRoot;
+      const rest = (c.projects ?? []).filter((p) => !keep.some((k) => k.path === p.path));
+      if (rest.length + keep.length > 0) c.projects = [...rest, ...keep];
+    });
+  });
+  return { registered };
+}
+
 // src/core/workspace/safety.ts
 var SAFE_SEGMENT = /^[a-z0-9][a-z0-9-]*$/;
 var WINDOWS_RESERVED = /^(con|prn|aux|nul|com[1-9]|lpt[1-9])$/;
@@ -1347,9 +1600,9 @@ function firstSentenceLower(hint) {
   return sentence.length ? sentence[0].toLowerCase() + sentence.slice(1) : sentence;
 }
 function failedLine(r) {
-  const label2 = FAILURE_LABELS[r.error?.code ?? ""] ?? "failed";
+  const label3 = FAILURE_LABELS[r.error?.code ?? ""] ?? "failed";
   const detail2 = firstSentenceLower(r.error?.hint);
-  return `\u2717 ${r.slug}   ${label2}${detail2 ? ` \u2014 ${detail2}` : ""}`;
+  return `\u2717 ${r.slug}   ${label3}${detail2 ? ` \u2014 ${detail2}` : ""}`;
 }
 function line(r, conflictCount) {
   switch (r.status) {
@@ -1448,85 +1701,164 @@ async function pickApp(deps2, io2, session, tenantFlag) {
   });
   return { tenant: tenant.slug, app };
 }
+async function cloneApp(ctx, appArg, dirArg, flags) {
+  const { deps: deps2, io: io2 } = ctx;
+  const g = ctx.opts();
+  const cfg = await deps2.config.read();
+  const portal = resolvePortal(g.portal, cfg.defaultProfile);
+  const onRequest = g.verbose ? (l) => io2.err(l) : void 0;
+  const session = await openSession(deps2, portal, "clone", onRequest);
+  await ensureCapability(deps2, portal.apiOrigin, "app.modules");
+  const picked = appArg === void 0 ? await pickApp(deps2, io2, session, flags.tenant) : void 0;
+  const appSlug = picked?.app ?? appArg;
+  const ref = await resolveApp(deps2, io2, session, appSlug, picked?.tenant ?? flags.tenant);
+  const app = await session.api.get(`/api/cli/v1/apps/${encodeURIComponent(ref.appId)}/modules`);
+  const projectsRoot = cfg.projectsRoot;
+  if (dirArg === void 0 && !isSafeSlug(app.app.slug)) throw unsafeSlugError(app.app.slug);
+  if (dirArg === void 0 && projectsRoot && !isSafeSlug(app.app.tenant.slug)) throw unsafeSlugError(app.app.tenant.slug);
+  const root = dirArg !== void 0 ? resolve4(deps2.cwd, dirArg) : projectsRoot ? join9(projectsRoot, app.app.tenant.slug, app.app.slug) : resolve4(deps2.cwd, app.app.slug);
+  const dirLabel = dirArg ?? (projectsRoot ? root : app.app.slug);
+  const info = await deps2.git.inspect(root);
+  if (info.exists && !info.empty) {
+    const ws = await readWorkspace(root);
+    if (!ws || ws.appId !== app.app.id || ws.portal !== portal.apiOrigin) {
+      throw new QoreError("QORE_WORKSPACE_CONFLICT", `${root} exists and is not the workspace of ${app.app.slug}`, {
+        hint: `Pick another directory: qore clone ${appSlug} <dir>.`
+      });
+    }
+  }
+  await writeWorkspace(root, { portal: portal.apiOrigin, appId: app.app.id });
+  await remember(deps2, {
+    kind: "workspace",
+    path: root,
+    portal: portal.apiOrigin,
+    tenantSlug: app.app.tenant.slug,
+    appId: app.app.id,
+    appSlug: app.app.slug
+  });
+  const dirs = {};
+  const modulesForPlan = [];
+  const earlyFailures = [];
+  for (const m of app.modules) {
+    if (!isSafeSlug(m.slug)) {
+      earlyFailures.push(asFailure(m.slug, unsafeSlugError(m.slug)));
+      continue;
+    }
+    try {
+      dirs[m.slug] = await deps2.git.inspect(join9(root, m.slug));
+      modulesForPlan.push(m);
+    } catch (e) {
+      earlyFailures.push(asFailure(m.slug, e));
+    }
+  }
+  const { actions } = planWorkspace(root, modulesForPlan, dirs, []);
+  const applied = await applyActions(deps2, { portal, app, actions, protocol: flags.protocol, onResult: () => {
+  } });
+  for (const r of applied) {
+    if (r.status === "cloned" && r.dir && isInside(deps2.cwd, r.dir)) r.dir = relative3(deps2.cwd, r.dir) || ".";
+  }
+  const results = [...earlyFailures, ...applied];
+  const err = reportWorkspaceRun(io2, results, Boolean(g.json));
+  if (!g.json) {
+    io2.out(`\u2713 Wrote ${join9(dirLabel, "qore.workspace.json")}`);
+    const first = results.find((r) => r.status === "cloned" || r.status === "present");
+    if (first && !err) io2.out(`Next: cd ${join9(dirLabel, first.slug)} && qore env pull`);
+  }
+  if (!g.json && dirArg === void 0 && !projectsRoot) io2.err("Tip: run `qore init` to always clone into one projects folder.");
+  if (err) throw err;
+  return { root, appSlug: app.app.slug };
+}
 function registerClone(program, ctx) {
   program.command("clone").description("Clone an app's modules into a new workspace directory").argument("[app]", "app slug or id (omit to pick one interactively)").argument("[dir]", "target directory (default: the app's slug)").option("--tenant <slug>", "tenant the app slug belongs to, when it is not your active one").addOption(new Option("--protocol <https|ssh>", "clone URL protocol").choices(["https", "ssh"]).default("https")).action(async (appArg, dirArg, flags) => {
+    await cloneApp(ctx, appArg, dirArg, flags);
+  });
+}
+
+// src/core/telemetry/consent.ts
+var ON = /* @__PURE__ */ new Set(["1", "true", "on", "yes"]);
+var DO_NOT_TRACK_EXEMPT = /* @__PURE__ */ new Set(["0", "false"]);
+var norm = (v) => (v ?? "").trim().toLowerCase();
+function resolveConsent(env, cfg) {
+  const dnt = norm(env.DO_NOT_TRACK);
+  if (dnt !== "" && !DO_NOT_TRACK_EXEMPT.has(dnt)) return { enabled: false, source: "DO_NOT_TRACK" };
+  const q = norm(env.QORE_TELEMETRY);
+  if (q !== "") return { enabled: ON.has(q), source: "QORE_TELEMETRY" };
+  if (typeof cfg.telemetry?.enabled === "boolean") return { enabled: cfg.telemetry.enabled, source: "config" };
+  return { enabled: true, source: "default" };
+}
+function needsNotice(cfg, consent) {
+  return consent.enabled && consent.source === "default" && !cfg.telemetry?.noticeShownAt;
+}
+function describeConsent(consent, built) {
+  const state = `crash reports ${consent.enabled ? "on" : "off"} (${consent.source})`;
+  return consent.enabled && !built ? `${state} \xB7 this build has no DSN, nothing is sent` : state;
+}
+
+// src/cli/commands/config.ts
+async function describeRoot(deps2) {
+  const known = await knownProjects(deps2);
+  return {
+    root: (await deps2.config.read()).projectsRoot ?? null,
+    projects: { inRoot: known.filter((p) => p.source === "root").length, registered: known.filter((p) => p.source === "registry").length }
+  };
+}
+function registerConfig(program, ctx) {
+  const config = program.command("config").description("Change qore's own settings");
+  config.command("telemetry").description("Show or set crash reporting").argument("[state]", "on or off").action(async (state) => {
     const { deps: deps2, io: io2 } = ctx;
-    const g = ctx.opts();
-    const cfg = await deps2.config.read();
-    const portal = resolvePortal(g.portal, cfg.defaultProfile);
-    const onRequest = g.verbose ? (l) => io2.err(l) : void 0;
-    const session = await openSession(deps2, portal, "clone", onRequest);
-    await ensureCapability(deps2, portal.apiOrigin, "app.modules");
-    const picked = appArg === void 0 ? await pickApp(deps2, io2, session, flags.tenant) : void 0;
-    const appSlug = picked?.app ?? appArg;
-    const ref = await resolveApp(deps2, io2, session, appSlug, picked?.tenant ?? flags.tenant);
-    const app = await session.api.get(`/api/cli/v1/apps/${encodeURIComponent(ref.appId)}/modules`);
-    if (dirArg === void 0 && !isSafeSlug(app.app.slug)) throw unsafeSlugError(app.app.slug);
-    const dirLabel = dirArg ?? app.app.slug;
-    const root = resolve2(deps2.cwd, dirLabel);
-    const info = await deps2.git.inspect(root);
-    if (info.exists && !info.empty) {
-      const ws = await readWorkspace(root);
-      if (!ws || ws.appId !== app.app.id || ws.portal !== portal.apiOrigin) {
-        throw new QoreError("QORE_WORKSPACE_CONFLICT", `${root} exists and is not the workspace of ${app.app.slug}`, {
-          hint: `Pick another directory: qore clone ${appSlug} <dir>.`
-        });
-      }
+    if (state !== void 0 && state !== "on" && state !== "off") {
+      throw new QoreError("QORE_CONTEXT_INVALID", `Unknown telemetry state: ${state}`, { hint: "Use: qore config telemetry on|off" });
     }
-    await writeWorkspace(root, { portal: portal.apiOrigin, appId: app.app.id });
-    const dirs = {};
-    const modulesForPlan = [];
-    const earlyFailures = [];
-    for (const m of app.modules) {
-      if (!isSafeSlug(m.slug)) {
-        earlyFailures.push(asFailure(m.slug, unsafeSlugError(m.slug)));
-        continue;
-      }
-      try {
-        dirs[m.slug] = await deps2.git.inspect(join6(root, m.slug));
-        modulesForPlan.push(m);
-      } catch (e) {
-        earlyFailures.push(asFailure(m.slug, e));
-      }
+    if (state) await deps2.config.update((c) => {
+      c.telemetry = { ...c.telemetry, enabled: state === "on" };
+    });
+    const consent = resolveConsent(deps2.env, await deps2.config.read());
+    const built = deps2.sentryDsn !== "";
+    if (ctx.opts().json) {
+      renderJson(io2, { telemetry: { ...consent, built } });
+      return;
     }
-    const { actions } = planWorkspace(root, modulesForPlan, dirs, []);
-    const applied = await applyActions(deps2, { portal, app, actions, protocol: flags.protocol, onResult: () => {
-    } });
-    for (const r of applied) {
-      if (r.status === "cloned" && r.dir) r.dir = relative2(deps2.cwd, r.dir) || ".";
+    io2.out(describeConsent(consent, built));
+    if (state && consent.source !== "config") io2.err(`${consent.source} in your environment overrides this setting.`);
+  });
+  config.command("root").description("Show or set the projects folder qore clones into (see qore init)").argument("[path]", "the new projects folder").option("--unset", "clear it; projects already there stay findable").action(async (path, f) => {
+    const { deps: deps2, io: io2 } = ctx;
+    if (path !== void 0 && f.unset) {
+      throw new QoreError("QORE_CONTEXT_INVALID", "Pass a path or --unset, not both", { hint: "qore config root <path> | qore config root --unset" });
     }
-    const results = [...earlyFailures, ...applied];
-    const err = reportWorkspaceRun(io2, results, Boolean(g.json));
-    if (!g.json) {
-      io2.out(`\u2713 Wrote ${join6(dirLabel, "qore.workspace.json")}`);
-      const first = results.find((r) => r.status === "cloned" || r.status === "present");
-      if (first && !err) io2.out(`Next: cd ${join6(dirLabel, first.slug)} && qore env pull`);
+    if (path !== void 0) await setRoot(deps2, await validateRoot(deps2, path));
+    if (f.unset) await setRoot(deps2, void 0);
+    const d = await describeRoot(deps2);
+    if (ctx.opts().json) {
+      renderJson(io2, d);
+      return;
     }
-    if (err) throw err;
+    io2.out(d.root ? `Projects root: ${d.root}` : "Projects root: not set \u2014 run qore init");
+    io2.out(`Known projects: ${d.projects.inRoot} in the root, ${d.projects.registered} elsewhere`);
   });
 }
 
 // src/cli/commands/dev.ts
-import { randomBytes as randomBytes5 } from "crypto";
-import { realpath as realpath5 } from "fs/promises";
+import { randomBytes as randomBytes6 } from "crypto";
+import { realpath as realpath8 } from "fs/promises";
 import { constants as constants3 } from "os";
-import { dirname as dirname6, join as join18, relative as relative6 } from "path";
+import { dirname as dirname7, join as join21, relative as relative7 } from "path";
 import { StringDecoder } from "string_decoder";
 
 // src/core/context/repoConfig.ts
 import { readFile as readFile3 } from "fs/promises";
-import { join as join7 } from "path";
+import { join as join10 } from "path";
 var FORBIDDEN = ["portal", "api", "apiOrigin", "issuer", "tenant", "tenantId", "app", "appId", "module", "moduleId"];
 var KEY = /^[A-Za-z_][A-Za-z0-9_]*$/;
 var SCRIPT = /^[A-Za-z0-9:_.-]+$/;
-var invalid2 = (msg, details) => new QoreError("QORE_CONTEXT_INVALID", `.qore.json: ${msg}`, { hint: "Fix .qore.json in the repository root; see the $schema it names.", details });
+var invalid3 = (msg, details) => new QoreError("QORE_CONTEXT_INVALID", `.qore.json: ${msg}`, { hint: "Fix .qore.json in the repository root; see the $schema it names.", details });
 function moduleDefaults(type) {
   return type === "frontend" ? { envFile: ".env.local", localSecrets: ["SESSION_COOKIE_SECRET"] } : { envFile: ".env", localSecrets: [] };
 }
 async function readRepoConfig(root) {
   let raw;
   try {
-    raw = await readFile3(join7(root, ".qore.json"), "utf8");
+    raw = await readFile3(join10(root, ".qore.json"), "utf8");
   } catch (e) {
     if (e.code === "ENOENT") return {};
     throw e;
@@ -1535,44 +1867,44 @@ async function readRepoConfig(root) {
   try {
     doc = JSON.parse(raw);
   } catch {
-    throw invalid2("not valid JSON");
+    throw invalid3("not valid JSON");
   }
-  if (!doc || typeof doc !== "object" || Array.isArray(doc)) throw invalid2("must be an object");
+  if (!doc || typeof doc !== "object" || Array.isArray(doc)) throw invalid3("must be an object");
   const v = doc.schemaVersion === void 0 ? 1 : doc.schemaVersion;
-  if (!Number.isInteger(v) || v < 1) throw invalid2("schemaVersion must be a positive integer");
+  if (!Number.isInteger(v) || v < 1) throw invalid3("schemaVersion must be a positive integer");
   if (v > 1) {
     throw new QoreError("QORE_CONTEXT_UNSUPPORTED", `.qore.json schemaVersion ${v} is newer than this qore`, { hint: "Run: npm i -g @quatronic/qore" });
   }
-  for (const f of FORBIDDEN) if (f in doc) throw invalid2(`"${f}" is not allowed \u2014 .qore.json never selects a portal or a resource`, { field: f });
+  for (const f of FORBIDDEN) if (f in doc) throw invalid3(`"${f}" is not allowed \u2014 .qore.json never selects a portal or a resource`, { field: f });
   const out = {};
   if (doc.envFile !== void 0) {
-    if (typeof doc.envFile !== "string" || !doc.envFile) throw invalid2("envFile must be a non-empty string");
+    if (typeof doc.envFile !== "string" || !doc.envFile) throw invalid3("envFile must be a non-empty string");
     out.envFile = doc.envFile;
   }
   if (doc.localSecrets !== void 0) {
     if (!Array.isArray(doc.localSecrets) || !doc.localSecrets.every((k) => typeof k === "string" && KEY.test(k))) {
-      throw invalid2("localSecrets must be a list of env key names");
+      throw invalid3("localSecrets must be a list of env key names");
     }
-    if (new Set(doc.localSecrets).size !== doc.localSecrets.length) throw invalid2("localSecrets must not contain duplicates");
+    if (new Set(doc.localSecrets).size !== doc.localSecrets.length) throw invalid3("localSecrets must not contain duplicates");
     out.localSecrets = doc.localSecrets;
   }
   if (doc.dev !== void 0) {
     const d = doc.dev;
-    if (!d || typeof d !== "object" || Array.isArray(d)) throw invalid2("dev must be an object");
+    if (!d || typeof d !== "object" || Array.isArray(d)) throw invalid3("dev must be an object");
     const dev = {};
     if (d.install !== void 0) {
-      if (typeof d.install !== "boolean") throw invalid2("dev.install must be true or false");
+      if (typeof d.install !== "boolean") throw invalid3("dev.install must be true or false");
       dev.install = d.install;
     }
     if (d.services !== void 0) {
       if (!Array.isArray(d.services) || !d.services.every((s) => typeof s === "string" && SCRIPT.test(s))) {
-        throw invalid2("dev.services must be a list of script names");
+        throw invalid3("dev.services must be a list of script names");
       }
-      if (new Set(d.services).size !== d.services.length) throw invalid2("dev.services must not contain duplicates");
+      if (new Set(d.services).size !== d.services.length) throw invalid3("dev.services must not contain duplicates");
       dev.services = d.services;
     }
     if (d.script !== void 0) {
-      if (typeof d.script !== "string" || !SCRIPT.test(d.script)) throw invalid2("dev.script must be a script name");
+      if (typeof d.script !== "string" || !SCRIPT.test(d.script)) throw invalid3("dev.script must be a script name");
       dev.script = d.script;
     }
     out.dev = dev;
@@ -1580,25 +1912,8 @@ async function readRepoConfig(root) {
   return out;
 }
 
-// src/core/context/repoRoot.ts
-import { stat } from "fs/promises";
-import { dirname as dirname2, join as join8, resolve as resolve3 } from "path";
-async function findRepoRoot(start) {
-  let dir2 = resolve3(start);
-  for (; ; ) {
-    try {
-      await stat(join8(dir2, ".git"));
-      return dir2;
-    } catch {
-    }
-    const up = dirname2(dir2);
-    if (up === dir2) return null;
-    dir2 = up;
-  }
-}
-
 // src/core/context/resolver.ts
-import { isAbsolute, join as join9, relative as relative3 } from "path";
+import { isAbsolute as isAbsolute2, join as join11, relative as relative4 } from "path";
 var UUID3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 var HINT_FLAG = "cd into a module repository, or pass --module <slug|id>.";
 var RESOLVE = "/api/cli/v1/repos/resolve";
@@ -1706,8 +2021,8 @@ async function byFlag(deps2, o, cache, ws) {
   return { portal, session, module, source: overrides ? { kind: "flag", overrides } : { kind: "flag" }, repoRoot, workspace: ws };
 }
 var isBelow = (root, dir2) => {
-  const rel = relative3(root, dir2);
-  return rel !== "" && !rel.startsWith("..") && !isAbsolute(rel);
+  const rel = relative4(root, dir2);
+  return rel !== "" && !rel.startsWith("..") && !isAbsolute2(rel);
 };
 async function inWorkspaceRoot(deps2, ws) {
   if (!ws) return false;
@@ -1811,7 +2126,7 @@ async function anyLoggedIn(deps2, cfg) {
   return false;
 }
 async function resolveModuleContext(deps2, o) {
-  const cache = new ResolutionCache(join9(deps2.config.dir, "cache"), deps2.now);
+  const cache = new ResolutionCache(join11(deps2.config.dir, "cache"), deps2.now);
   const ws = await findWorkspace(deps2.cwd, deps2.home);
   if (o.module) return byFlag(deps2, o, cache, ws);
   const cfg = await deps2.config.read();
@@ -1962,15 +2277,17 @@ function exitHint(tail, h) {
 }
 
 // src/core/dev/env.ts
-import { dirname as dirname5, join as join12 } from "path";
+import { dirname as dirname6, join as join14 } from "path";
 
 // src/core/env/fetch.ts
 async function fetchLocalEnv(deps2, mc, app) {
   await ensureCapability(deps2, mc.portal.apiOrigin, "module.local-env");
   try {
-    return await mc.session.api.get(
+    const local = await mc.session.api.get(
       `/api/cli/v1/modules/${encodeURIComponent(mc.module.id)}/local-env?app_id=${encodeURIComponent(app.id)}`
     );
+    deps2.registerSecrets(Object.values(local.env));
+    return local;
   } catch (e) {
     if (!(e instanceof QoreError) || e.code !== "QORE_ACCESS_DENIED") throw e;
     if (e.serverCode === "app.access.denied") {
@@ -2062,8 +2379,8 @@ function renderEnv(original, merged) {
 }
 
 // src/core/env/pull.ts
-import { lstat, realpath as realpath2 } from "fs/promises";
-import { basename, dirname as dirname3, isAbsolute as isAbsolute2, relative as relative4, resolve as resolve4, sep } from "path";
+import { lstat, realpath as realpath5 } from "fs/promises";
+import { basename, dirname as dirname4, isAbsolute as isAbsolute3, relative as relative5, resolve as resolve5, sep as sep2 } from "path";
 var outside = (target) => new QoreError("QORE_CONTEXT_INVALID", `The env file must be inside the repository (got ${target})`, {
   hint: "Use a path inside the repository for --target or .qore.json envFile."
 });
@@ -2071,29 +2388,29 @@ var symlinked = (target) => new QoreError("QORE_CONTEXT_INVALID", `The env file
   hint: "Use a path inside the repository for --target or .qore.json envFile."
 });
 function inside(root, p) {
-  const rel = relative4(root, p);
-  return rel !== "" && rel !== ".." && !rel.startsWith(".." + sep) && !isAbsolute2(rel);
+  const rel = relative5(root, p);
+  return rel !== "" && rel !== ".." && !rel.startsWith(".." + sep2) && !isAbsolute3(rel);
 }
 async function resolveTarget(root, target, base = root) {
-  const realRoot = await realpath2(root);
-  const realBase = base === root ? realRoot : await realpath2(base);
-  const abs = resolve4(realBase, target);
-  if (!isAbsolute2(target) && !inside(realRoot, abs)) throw outside(target);
+  const realRoot = await realpath5(root);
+  const realBase = base === root ? realRoot : await realpath5(base);
+  const abs = resolve5(realBase, target);
+  if (!isAbsolute3(target) && !inside(realRoot, abs)) throw outside(target);
   let parent;
   try {
-    parent = await realpath2(dirname3(abs));
+    parent = await realpath5(dirname4(abs));
   } catch (e) {
     if (e.code !== "ENOENT") throw e;
     throw new QoreError("QORE_CONTEXT_INVALID", `The directory for ${target} does not exist`, {
       hint: "Create the parent directory, or point --target / .qore.json envFile at an existing one."
     });
   }
-  const final = resolve4(parent, basename(abs));
+  const final = resolve5(parent, basename(abs));
   if (!inside(realRoot, final)) throw outside(target);
   try {
     const st = await lstat(final);
     if (st.isSymbolicLink()) throw symlinked(target);
-    const realFinal = await realpath2(final);
+    const realFinal = await realpath5(final);
     if (!inside(realRoot, realFinal)) throw outside(target);
   } catch (e) {
     if (e instanceof QoreError) throw e;
@@ -2129,9 +2446,9 @@ function planPull(o) {
 }
 
 // src/core/env/write.ts
-import { chmod as chmod2, readFile as readFile4, rename as rename3, unlink, writeFile as writeFile3 } from "fs/promises";
-import { randomBytes as randomBytes3 } from "crypto";
-import { basename as basename2, dirname as dirname4, join as join10 } from "path";
+import { chmod as chmod2, readFile as readFile4, rename as rename3, unlink, writeFile as writeFile4 } from "fs/promises";
+import { randomBytes as randomBytes4 } from "crypto";
+import { basename as basename2, dirname as dirname5, join as join12 } from "path";
 async function readOrNull(p) {
   try {
     return await readFile4(p, "utf8");
@@ -2142,10 +2459,10 @@ async function readOrNull(p) {
 }
 async function writeSecurely(target, text2) {
   const base = basename2(target);
-  const tmpName = base.endsWith(".local") ? `${base.slice(0, -".local".length)}.qore-${randomBytes3(6).toString("hex")}.local` : `${base}.qore-${randomBytes3(6).toString("hex")}.tmp`;
-  const tmp = join10(dirname4(target), tmpName);
+  const tmpName = base.endsWith(".local") ? `${base.slice(0, -".local".length)}.qore-${randomBytes4(6).toString("hex")}.local` : `${base}.qore-${randomBytes4(6).toString("hex")}.tmp`;
+  const tmp = join12(dirname5(target), tmpName);
   try {
-    await writeFile3(tmp, text2, { mode: 384, flag: "wx" });
+    await writeFile4(tmp, text2, { mode: 384, flag: "wx" });
     await chmod2(tmp, 384);
     await rename3(tmp, target);
   } finally {
@@ -2171,8 +2488,8 @@ async function syncEnvFile(o) {
 
 // src/core/dev/lastStart.ts
 import { createHash as createHash2 } from "crypto";
-import { realpath as realpath3 } from "fs/promises";
-import { join as join11 } from "path";
+import { realpath as realpath6 } from "fs/promises";
+import { join as join13 } from "path";
 var NETWORK_REASONS = /* @__PURE__ */ new Set(["connect", "dns", "tls", "timeout"]);
 function isOffline(e) {
   if (!(e instanceof QoreError)) return false;
@@ -2181,14 +2498,14 @@ function isOffline(e) {
   return (e.status ?? 0) >= 500 || NETWORK_REASONS.has(String(e.details?.reason));
 }
 async function stateKey(deps2, root) {
-  const real = await realpath3(root).catch(() => root);
+  const real = await realpath6(root).catch(() => root);
   return createHash2("sha256").update(trustKey(real, deps2.platform)).digest("hex").slice(0, 16);
 }
 async function saveLastStart(deps2, root, rec) {
-  await writeJsonAtomic(join11(deps2.config.dir, "dev"), `${await stateKey(deps2, root)}.json`, rec);
+  await writeJsonAtomic(join13(deps2.config.dir, "dev"), `${await stateKey(deps2, root)}.json`, rec);
 }
 async function loadLastStart(deps2, root) {
-  const rec = await readJson(join11(deps2.config.dir, "dev", `${await stateKey(deps2, root)}.json`)).catch(() => null);
+  const rec = await readJson(join13(deps2.config.dir, "dev", `${await stateKey(deps2, root)}.json`)).catch(() => null);
   return rec && rec.schemaVersion === 1 ? rec : null;
 }
 
@@ -2208,7 +2525,7 @@ async function devEnv(deps2, o) {
   if (o.mc && o.app) {
     try {
       const local = await fetchLocalEnv(deps2, o.mc, o.app);
-      const example = await readOrNull(join12(dirname5(target), ".env.example"));
+      const example = await readOrNull(join14(dirname6(target), ".env.example"));
       const w = await syncEnvFile({
         target,
         example,
@@ -2343,7 +2660,7 @@ function providerDown(o) {
 
 // src/core/dev/project.ts
 import { access, readFile as readFile5 } from "fs/promises";
-import { join as join13 } from "path";
+import { join as join15 } from "path";
 var LEGACY_DEV_SCRIPTS = ["node --env-file=.env --import ./dist/instrumentation.js dist/index.js"];
 var LOCKFILES = [["pnpm-lock.yaml", "pnpm"], ["package-lock.json", "npm"], ["yarn.lock", "yarn"]];
 var exists = (p) => access(p).then(() => true, () => false);
@@ -2351,7 +2668,7 @@ var unsupported = (message, hint, details) => new QoreError("QORE_DEV_UNSUPPORTE
 async function readPackageJson(root) {
   let raw;
   try {
-    raw = await readFile5(join13(root, "package.json"), "utf8");
+    raw = await readFile5(join15(root, "package.json"), "utf8");
   } catch {
     throw unsupported("This repository has no package.json", "qore dev starts Node repositories through their package.json scripts.");
   }
@@ -2367,7 +2684,7 @@ async function detectPackageManager(root, pkg) {
     if (!m) throw unsupported(`packageManager "${pkg.packageManager}" is not pnpm, npm or yarn`, "qore dev supports pnpm, npm and yarn.");
     return { name: m[1], version: m[2].split("+")[0] };
   }
-  for (const [file, name] of LOCKFILES) if (await exists(join13(root, file))) return { name, version: null };
+  for (const [file, name] of LOCKFILES) if (await exists(join15(root, file))) return { name, version: null };
   throw unsupported("No package manager declared and no lockfile found", 'Add "packageManager": "pnpm@<version>" to package.json.');
 }
 function planRecipe(o) {
@@ -2410,21 +2727,21 @@ function installArgs(pm) {
 }
 
 // src/core/dev/install.ts
-import { stat as stat2 } from "fs/promises";
-import { join as join14 } from "path";
+import { stat as stat3 } from "fs/promises";
+import { join as join16 } from "path";
 var MARKERS = {
   pnpm: [".modules.yaml"],
   npm: [".package-lock.json"],
   yarn: [".yarn-state.yml", ".yarn-integrity"]
 };
-var LOCK = { pnpm: "pnpm-lock.yaml", npm: "package-lock.json", yarn: "yarn.lock" };
-var mtime = (p) => stat2(p).then((s) => s.mtimeMs, () => null);
+var LOCK2 = { pnpm: "pnpm-lock.yaml", npm: "package-lock.json", yarn: "yarn.lock" };
+var mtime = (p) => stat3(p).then((s) => s.mtimeMs, () => null);
 async function needsInstall(root, pm) {
-  if (await mtime(join14(root, "node_modules")) === null) return true;
+  if (await mtime(join16(root, "node_modules")) === null) return true;
   let marker = null;
-  for (const m of MARKERS[pm.name]) marker ??= await mtime(join14(root, "node_modules", m));
+  for (const m of MARKERS[pm.name]) marker ??= await mtime(join16(root, "node_modules", m));
   if (marker === null) return true;
-  const lock = await mtime(join14(root, LOCK[pm.name]));
+  const lock = await mtime(join16(root, LOCK2[pm.name]));
   return lock !== null && lock > marker;
 }
 
@@ -2740,11 +3057,11 @@ async function checkPort(deps2, o) {
   throw await portInUseError(deps2, { slug: o.slug, port: o.port, key: o.key, runs: o.runs });
 }
 function abortableDelay(signal) {
-  return (ms) => new Promise((resolve5) => {
+  return (ms) => new Promise((resolve6) => {
     const done = () => {
       clearTimeout(t);
       signal.removeEventListener("abort", done);
-      resolve5();
+      resolve6();
     };
     const t = setTimeout(done, ms);
     signal.addEventListener("abort", done, { once: true });
@@ -2827,11 +3144,11 @@ function hintContext(recipe, pkg, env) {
 
 // src/core/dev/runFile.ts
 import { unlink as unlink2 } from "fs/promises";
-import { join as join15 } from "path";
+import { join as join17 } from "path";
 async function runFilePath(deps2, root) {
-  const dir2 = join15(deps2.config.dir, "run");
+  const dir2 = join17(deps2.config.dir, "run");
   const name = `${await stateKey(deps2, root)}.json`;
-  return { dir: dir2, name, path: join15(dir2, name) };
+  return { dir: dir2, name, path: join17(dir2, name) };
 }
 async function writeRunFile(deps2, root, rec) {
   const { dir: dir2, name } = await runFilePath(deps2, root);
@@ -2852,6 +3169,177 @@ async function leftoverRun(deps2, root, o = {}) {
   return null;
 }
 
+// src/cli/project.ts
+import { readdir as readdir2, stat as stat4 } from "fs/promises";
+import { join as join18 } from "path";
+
+// src/core/projects/match.ts
+function readings(ref) {
+  const s = ref.split("/").map((x) => x.trim());
+  if (s.some((x) => x === "")) return [];
+  if (s.length === 1) return [{ app: s[0] }];
+  if (s.length === 2) return [{ app: s[0], module: s[1] }, { tenant: s[0], app: s[1] }];
+  if (s.length === 3) return [{ tenant: s[0], app: s[1], module: s[2] }];
+  return [];
+}
+function hit(p, w) {
+  if (p.appSlug !== w.app || w.tenant !== void 0 && p.tenantSlug !== w.tenant) return null;
+  if (p.kind === "module") return w.module === p.moduleSlug ? { project: p } : null;
+  return w.module ? { project: p, module: w.module } : { project: p };
+}
+function matchProjects(projects, ref) {
+  const out = [];
+  for (const w of readings(ref)) {
+    for (const p of projects) {
+      const m = hit(p, w);
+      if (m) out.push(m);
+    }
+  }
+  return out;
+}
+
+// src/cli/project.ts
+async function loggedInAs(ctx) {
+  const cfg = await ctx.deps.config.read();
+  const portal = resolvePortal(ctx.opts().portal, cfg.defaultProfile);
+  const p = cfg.profiles[portal.apiOrigin];
+  if (!p || !await new TokenStore(ctx.deps.keychain, profileHash(p.apiOrigin, p.issuer)).getRefresh()) return null;
+  return p.email ?? p.sub ?? portal.apiOrigin;
+}
+var isDir = async (p) => (await stat4(p).catch(() => null))?.isDirectory() ?? false;
+var label2 = (p) => `${p.tenantSlug} / ${p.appSlug}${p.kind === "module" ? ` / ${p.moduleSlug}` : ""}${p.source === "registry" ? `  (${p.path})` : ""}`;
+var candidate = (p) => p.kind === "module" ? { kind: "module", id: p.moduleId, slug: p.moduleSlug, tenant: p.tenantSlug, name: p.path } : { kind: "app", slug: p.appSlug, tenant: p.tenantSlug, name: p.path };
+var withCwd = (ctx, cwd) => ({ ...ctx, deps: { ...ctx.deps, cwd } });
+async function inProject(ctx) {
+  if (await findWorkspace(ctx.deps.cwd, ctx.deps.home)) return true;
+  const repo = await findRepoRoot(ctx.deps.cwd);
+  return repo !== null && !isInside(repo, ctx.deps.home);
+}
+async function moduleDirs(wsPath) {
+  const out = [];
+  for (const d of await readdir2(wsPath, { withFileTypes: true }).catch(() => [])) {
+    if (d.isDirectory() && !d.name.startsWith(".") && await stat4(join18(wsPath, d.name, ".git")).catch(() => null)) out.push(d.name);
+  }
+  return out.sort();
+}
+async function pathFor(ctx, m, needModule) {
+  const p = m.project;
+  if (p.kind === "module") return p.path;
+  if (m.module) {
+    const dir2 = join18(p.path, m.module);
+    if (!await isDir(dir2)) {
+      throw new QoreError("QORE_PROJECT_NOT_FOUND", `${p.appSlug} has no checkout of module ${m.module} in ${p.path}`, {
+        hint: `Run \`qore sync\` in ${p.path} to clone the app's missing modules.`
+      });
+    }
+    return dir2;
+  }
+  if (!needModule) return p.path;
+  const dirs = await moduleDirs(p.path);
+  if (dirs.length === 1) return join18(p.path, dirs[0]);
+  if (dirs.length === 0) {
+    throw new QoreError("QORE_PROJECT_NOT_FOUND", `${p.appSlug} has no module checkouts in ${p.path}`, {
+      hint: `Run \`qore sync\` in ${p.path}.`
+    });
+  }
+  if (!ctx.io.interactive) {
+    throw new QoreError("QORE_CONTEXT_REQUIRED", `${p.appSlug} has several modules \u2014 which one?`, {
+      hint: `Pass ${p.appSlug}/<module>.`,
+      candidates: dirs.map((slug) => ({ kind: "module", slug, tenant: p.tenantSlug, name: join18(p.path, slug) }))
+    });
+  }
+  return join18(p.path, await ctx.io.select("Select a module", dirs.map((d) => ({ name: d, value: d }))));
+}
+async function liveMatches(matches) {
+  const live = [];
+  for (const m of matches) {
+    if (m.project.kind === "workspace" && m.module && !await isDir(join18(m.project.path, m.module))) continue;
+    live.push(m);
+  }
+  return live.length > 0 ? live : matches;
+}
+async function choose(ctx, matches, what, explicit) {
+  if (explicit && matches.length === 1) return matches[0];
+  if (!ctx.io.interactive) {
+    throw new QoreError("QORE_CONTEXT_REQUIRED", what, {
+      hint: "Pass a more specific reference: tenant/app or app/module.",
+      candidates: matches.map((m) => candidate(m.project))
+    });
+  }
+  const i = await ctx.io.select("Select a project", matches.map((m, idx) => ({
+    name: m.module ? `${label2(m.project)} / ${m.module}` : label2(m.project),
+    value: idx
+  })));
+  return matches[i];
+}
+async function projectCtx(ctx, o) {
+  const g = ctx.opts();
+  const cfg = await ctx.deps.config.read();
+  const portal = g.portal ? resolvePortal(g.portal, cfg.defaultProfile).apiOrigin : void 0;
+  if (o.ref) {
+    const matches = matchProjects(await knownProjects(ctx.deps, { portal }), o.ref);
+    if (matches.length === 0) {
+      const parts = o.ref.split("/");
+      const app = parts.length === 1 ? o.ref : parts.length === 3 ? parts[1] : "<app>";
+      throw new QoreError("QORE_PROJECT_NOT_FOUND", `No local project "${o.ref}"`, {
+        hint: cfg.projectsRoot ? `Run \`qore clone ${app}\`.` : `Run \`qore init\`, or \`qore clone ${app}\`.`
+      });
+    }
+    const m2 = await choose(ctx, await liveMatches(matches), `"${o.ref}" matches several projects`, true);
+    return relocate(ctx, await pathFor(ctx, m2, o.needModule));
+  }
+  if (o.module || o.app || await inProject(ctx)) return ctx;
+  const known = await knownProjects(ctx.deps, { portal });
+  if (known.length === 0) {
+    if (!cfg.projectsRoot) {
+      if (!await loggedInAs(ctx)) return ctx;
+      throw new QoreError("QORE_ROOT_NOT_SET", "Not inside a project, and qore knows no projects yet", {
+        hint: "Run `qore init` to choose a projects folder, or cd into a project."
+      });
+    }
+    throw new QoreError("QORE_PROJECT_NOT_FOUND", `Not inside a project, and ${cfg.projectsRoot} holds none yet`, {
+      hint: "Run `qore clone <app>`."
+    });
+  }
+  const m = await choose(ctx, known.map((project) => ({ project })), "Not inside a project \u2014 which one?", false);
+  return relocate(ctx, await pathFor(ctx, m, o.needModule));
+}
+function relocate(ctx, path) {
+  if (path === ctx.deps.cwd) return ctx;
+  if (!ctx.opts().json) ctx.io.err(`\u2192 in ${path}`);
+  return withCwd(ctx, path);
+}
+async function rememberContext(ctx, mc, app) {
+  const tenantSlug = mc.module.tenant.slug;
+  if (mc.workspace && mc.workspace.appId === app.id) {
+    await remember(ctx.deps, {
+      kind: "workspace",
+      path: mc.workspace.root,
+      portal: mc.workspace.portal,
+      tenantSlug,
+      appId: app.id,
+      appSlug: app.slug
+    });
+    return;
+  }
+  if (mc.repoRoot) {
+    await remember(ctx.deps, {
+      kind: "module",
+      path: mc.repoRoot,
+      portal: mc.portal.apiOrigin,
+      tenantSlug,
+      appId: app.id,
+      appSlug: app.slug,
+      moduleId: mc.module.id,
+      moduleSlug: mc.module.slug
+    });
+  }
+}
+async function rememberWorkspace(ctx, ws, app) {
+  if (ws.appId !== app.id) return;
+  await remember(ctx.deps, { kind: "workspace", path: ws.root, portal: ws.portal, tenantSlug: app.tenant.slug, appId: app.id, appSlug: app.slug });
+}
+
 // src/cli/context.ts
 var allOfKind = (c, kind) => !!c && c.length > 0 && c.every((x) => x.kind === kind && typeof x.id === "string");
 async function moduleContextFor(ctx, flags, command) {
@@ -2863,11 +3351,11 @@ async function moduleContextFor(ctx, flags, command) {
   } catch (e) {
     if (!(e instanceof QoreError) || e.code !== "QORE_CONTEXT_REQUIRED" || !ctx.io.interactive) throw e;
     if (allOfKind(e.candidates, "module")) {
-      const choose = await ctx.io.select(
+      const choose2 = await ctx.io.select(
         "Select a module",
         e.candidates.map((c) => ({ name: `${c.tenant ? `${c.tenant} / ` : ""}${c.slug}  (${c.remote})`, value: c.id }))
       );
-      return resolveModuleContext(ctx.deps, { ...base, choose });
+      return resolveModuleContext(ctx.deps, { ...base, choose: choose2 });
     }
     if (allOfKind(e.candidates, "tenant")) {
       const tenant = await ctx.io.select("Select a tenant", e.candidates.map((c) => ({ name: c.name ?? c.slug, value: c.id })));
@@ -3075,9 +3563,9 @@ async function ensureTrusted(ctx, mc, app, o) {
 }
 
 // src/cli/commands/devWorkspace.ts
-import { randomBytes as randomBytes4 } from "crypto";
-import { realpath as realpath4 } from "fs/promises";
-import { join as join17, relative as relative5 } from "path";
+import { randomBytes as randomBytes5 } from "crypto";
+import { realpath as realpath7 } from "fs/promises";
+import { join as join20, relative as relative6 } from "path";
 
 // src/core/dev/order.ts
 function selectSkips(modules, sel) {
@@ -3182,8 +3670,8 @@ function planDev(modules, sel) {
   }
   const order = sccs.map((_, i) => i).sort((a, b) => minSlug[a].localeCompare(minSlug[b]));
   for (const i of order) visit(i);
-  const start = [];
-  for (const i of orderedSccIndices) start.push(...sccSlugs[i]);
+  const start2 = [];
+  for (const i of orderedSccIndices) start2.push(...sccSlugs[i]);
   const waitFor = {};
   for (const m of starting) {
     const mySccId = sccOf.get(m.id);
@@ -3198,7 +3686,7 @@ function planDev(modules, sel) {
       missingProviders[m.slug] = [...new Set(missing)].sort();
     }
   }
-  return { start, waitFor, cycles, skipped, missingProviders };
+  return { start: start2, waitFor, cycles, skipped, missingProviders };
 }
 
 // src/core/dev/supervisor.ts
@@ -3234,15 +3722,15 @@ function supervise(o) {
   });
   const readiness = /* @__PURE__ */ new Map();
   for (const m of o.modules) {
-    let resolve5;
+    let resolve6;
     let settled = false;
     const promise = new Promise((r) => {
-      resolve5 = r;
+      resolve6 = r;
     });
     readiness.set(m.slug, { promise, settle: (r) => {
       if (settled) return false;
       settled = true;
-      resolve5(r);
+      resolve6(r);
       return true;
     } });
   }
@@ -3306,7 +3794,7 @@ function supervise(o) {
       checkDone();
     });
   };
-  const start = async (m) => {
+  const start2 = async (m) => {
     const providers = m.waitFor.filter((p) => readiness.has(p));
     const results = await Promise.all(providers.map((p) => readiness.get(p).promise));
     if (stopCode !== null) return;
@@ -3316,7 +3804,7 @@ function supervise(o) {
     });
     launch(m);
   };
-  for (const m of o.modules) void start(m);
+  for (const m of o.modules) void start2(m);
   checkDone();
   return {
     done,
@@ -3333,12 +3821,12 @@ function supervise(o) {
 }
 
 // src/core/workspace/stray.ts
-import { lstat as lstat2, readdir } from "fs/promises";
-import { join as join16 } from "path";
+import { lstat as lstat2, readdir as readdir3 } from "fs/promises";
+import { join as join19 } from "path";
 async function strayRepos(root, slugs) {
   let entries;
   try {
-    entries = (await readdir(root, { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name);
+    entries = (await readdir3(root, { withFileTypes: true })).filter((e) => e.isDirectory()).map((e) => e.name);
   } catch {
     return [];
   }
@@ -3346,7 +3834,7 @@ async function strayRepos(root, slugs) {
   for (const name of entries) {
     if (slugs.has(name)) continue;
     try {
-      await lstat2(join16(root, name, ".git"));
+      await lstat2(join19(root, name, ".git"));
       names.push(name);
     } catch {
     }
@@ -3386,16 +3874,18 @@ function prefixer(slugs, color) {
 import { constants as constants2 } from "os";
 var childRunning = { current: false };
 function registerRun(program, ctx) {
-  program.command("run").description("Run a command with this module's local secrets in its environment").option("--module <slug|id>", "the module (default: from this repository's git remote)").option("--app <slug|id>", "the app, when the module is part of several").option("--yes", "trust this repository without asking").argument("<command>", "the command to run (after --)").argument("[args...]", "its arguments, passed verbatim").action(async (cmd, args, f) => {
-    const { deps: deps2 } = ctx;
+  program.command("run").description("Run a command with this module's local secrets in its environment").option("--module <slug|id>", "the module (default: from this repository's git remote)").option("--app <slug|id>", "the app, when the module is part of several").option("--project <ref>", "the project whose secrets to use, from anywhere (see qore init)").option("--yes", "trust this repository without asking").argument("<command>", "the command to run (after --)").argument("[args...]", "its arguments, passed verbatim").action(async (cmd, args, f) => {
     if (ctx.opts().json) {
       throw new QoreError("QORE_CONTEXT_INVALID", "run has no --json output", {
         hint: "Drop --json; the child's own output passes through."
       });
     }
-    const mc = await moduleContextFor(ctx, f, "run");
-    const app = await appFor(ctx, mc, f.app);
-    await ensureTrusted(ctx, mc, app, { yes: f.yes });
+    const c = await projectCtx(ctx, { ref: f.project, module: f.module, app: f.app, needModule: true });
+    const { deps: deps2 } = c;
+    const mc = await moduleContextFor(c, f, "run");
+    const app = await appFor(c, mc, f.app);
+    await rememberContext(c, mc, app);
+    await ensureTrusted(c, mc, app, { yes: f.yes });
     const local = await fetchLocalEnv(deps2, mc, app);
     childRunning.current = true;
     let exit;
@@ -3429,7 +3919,9 @@ async function workspaceContext(ctx, ws) {
     const session = await openSession(deps2, portal, "dev", requestLog(ctx));
     await ensureCapability(deps2, portal.apiOrigin, "app.modules");
     await ensureCapability(deps2, portal.apiOrigin, "module.local-env");
-    return { am: await workspaceAppModules(session, portal, ws), online: { portal, session }, offlineCause: null };
+    const am = await workspaceAppModules(session, portal, ws);
+    await rememberWorkspace(ctx, ws, am.app);
+    return { am, online: { portal, session }, offlineCause: null };
   } catch (e) {
     if (!isOffline(e)) throw e;
     const last = await loadLastStart(deps2, ws.root);
@@ -3504,7 +3996,7 @@ async function prepareWorkspace(ctx, ws, f, waitTimeout, p) {
       continue;
     }
     try {
-      dirs[m.slug] = await deps2.git.inspect(join17(ws.root, m.slug));
+      dirs[m.slug] = await deps2.git.inspect(join20(ws.root, m.slug));
       safe.push(m);
     } catch (e) {
       if (!(e instanceof QoreError) || e.code === "QORE_GIT_UNAVAILABLE") throw e;
@@ -3541,7 +4033,7 @@ async function prepareWorkspace(ctx, ws, f, waitTimeout, p) {
     const results = await applyActions(deps2, { portal: online.portal, app: am, actions, protocol: cloneProtocol(dirs), onResult: () => {
     } });
     renderResults(io2, results, false);
-    for (const r of results) if (r.status === "cloned") dirs[r.slug] = await deps2.git.inspect(join17(ws.root, r.slug));
+    for (const r of results) if (r.status === "cloned") dirs[r.slug] = await deps2.git.inspect(join20(ws.root, r.slug));
     ({ present, plan } = computePlan());
   }
   for (const name of await strayRepos(ws.root, new Set(am.modules.map((m) => m.slug)))) renderFinding(ctx, strayClone(name, am.app.name));
@@ -3649,7 +4141,7 @@ async function prepareWorkspace(ctx, ws, f, waitTimeout, p) {
     workspace: ws,
     module: { id: u.m.id, slug: u.m.slug, name: u.m.name, type: u.m.type, access: u.m.access, tenant: am.app.tenant, apps: [appRef] }
   });
-  const rootReal = await realpath4(ws.root);
+  const rootReal = await realpath7(ws.root);
   const withDocker = dockerRecovery(ctx, p.signal);
   for (const u of units.filter((x) => x.recipe && x.trusted)) {
     const slug = u.m.slug;
@@ -3662,7 +4154,7 @@ async function prepareWorkspace(ctx, ws, f, waitTimeout, p) {
           type: u.m.type,
           moduleId: u.m.id,
           cfg: u.cfg,
-          random: () => randomBytes4(32).toString("hex")
+          random: () => randomBytes5(32).toString("hex")
         });
       } catch (e) {
         if (offlineCause && isOffline(e)) throw offlineCause;
@@ -3672,7 +4164,7 @@ async function prepareWorkspace(ctx, ws, f, waitTimeout, p) {
     const dev = u.dev;
     if (!dev) continue;
     if (online && dev.offline) {
-      warn(`${slug}: the portal is unreachable \u2014 starting from ${relative5(rootReal, dev.envFile)} as last written; values may be stale.`, { module: slug });
+      warn(`${slug}: the portal is unreachable \u2014 starting from ${relative6(rootReal, dev.envFile)} as last written; values may be stale.`, { module: slug });
     }
     if (dev.kept.length) {
       warn(
@@ -3680,7 +4172,7 @@ async function prepareWorkspace(ctx, ws, f, waitTimeout, p) {
         { module: slug, keys: dev.kept }
       );
     }
-    report({ module: slug, step: "env", status: "done", detail: relative5(rootReal, dev.envFile) });
+    report({ module: slug, step: "env", status: "done", detail: relative6(rootReal, dev.envFile) });
     const services = servicesMissing(slug, dev.env, u.recipe, { servicesFlag: f.services, configured: u.cfg.dev?.services !== void 0 });
     if (services) renderFinding(ctx, services);
     try {
@@ -3722,7 +4214,7 @@ async function prepareWorkspace(ctx, ws, f, waitTimeout, p) {
   if (online && units.every((u) => !u.dev.offline)) {
     const envFile = (m) => {
       const u = units.find((x) => x.m.id === m.id);
-      return u ? relative5(rootReal, u.dev.envFile) : join17(m.slug, moduleDefaults(m.type).envFile);
+      return u ? relative6(rootReal, u.dev.envFile) : join20(m.slug, moduleDefaults(m.type).envFile);
     };
     await saveLastStart(deps2, ws.root, {
       schemaVersion: 1,
@@ -3911,11 +4403,17 @@ function makeStderrTee(sink) {
   };
 }
 function registerDev(program, ctx) {
-  program.command("dev").description("Start this module's dev server \u2014 or, in a workspace root, every module of the app").option("--module <slug|id>", "the module (default: from this repository's git remote)").option("--app <slug|id>", "the app, when the module is part of several").option("--only <slugs>", "workspace: start only these modules (comma-separated)").option("--skip <slugs>", "workspace: start all but these modules (comma-separated)").option("--no-install", "do not run the package manager's install").option("--no-services", "do not start local services (db:up)").option("--kill-others", "workspace: the first module to exit stops the rest").option("--wait-timeout <s>", "workspace: seconds to wait for a provider's port", "60").option("--yes", "trust the repositories without asking").action(async (f) => {
+  program.command("dev").description("Start this module's dev server \u2014 or, in a workspace root, every module of the app").argument("[project]", "app or app/module to start, from anywhere (see qore init)").option("--module <slug|id>", "the module (default: from this repository's git remote)").option("--app <slug|id>", "the app, when the module is part of several").option("--project <ref>", "same as the [project] argument").option("--only <slugs>", "workspace: start only these modules (comma-separated)").option("--skip <slugs>", "workspace: start all but these modules (comma-separated)").option("--no-install", "do not run the package manager's install").option("--no-services", "do not start local services (db:up)").option("--kill-others", "workspace: the first module to exit stops the rest").option("--wait-timeout <s>", "workspace: seconds to wait for a provider's port", "60").option("--yes", "trust the repositories without asking").action(async (project, f) => {
     const waitTimeout = parseWaitTimeout(f.waitTimeout);
-    const ws = await workspaceRoot(ctx.deps);
-    if (ws && f.module === void 0) return workspaceDev(ctx, ws, f, waitTimeout);
-    return moduleDev(ctx, f, waitTimeout);
+    if (project !== void 0 && f.project !== void 0 && project !== f.project) {
+      throw new QoreError("QORE_CONTEXT_INVALID", `Pass the project once: "${project}" and --project "${f.project}" differ`, {
+        hint: "qore dev <project> | qore dev --project <project>"
+      });
+    }
+    const c = await projectCtx(ctx, { ref: project ?? f.project, module: f.module, app: f.app, needModule: false });
+    const ws = await workspaceRoot(c.deps);
+    if (ws && f.module === void 0) return workspaceDev(c, ws, f, waitTimeout);
+    return moduleDev(c, f, waitTimeout);
   });
 }
 function parseWaitTimeout(raw) {
@@ -3955,7 +4453,7 @@ async function providerFindings(ctx, root, mc, app, env) {
     let fix = `qore clone ${app.slug}`;
     if (ws && ws.appId === app.id) fix = cdAndDev(deps2.home, ws.root);
     else if (providers.length === 1) {
-      const sibling = join18(dirname6(root), providers[0].slug);
+      const sibling = join21(dirname7(root), providers[0].slug);
       if ((await deps2.git.inspect(sibling)).isRepo) fix = cdAndDev(deps2.home, sibling);
     }
     return providerDown({
@@ -3989,6 +4487,7 @@ async function devContext(ctx, f, root) {
     return { online: null, module: last.module, offlineCause: e };
   }
   const app = await appFor(ctx, mc, f.app);
+  await rememberContext(ctx, mc, app);
   await ensureTrusted(ctx, mc, app, { yes: f.yes });
   return { online: { mc, app }, module: mc.module, offlineCause: null };
 }
@@ -4084,13 +4583,13 @@ async function prepareModule(ctx, f, waitTimeout, p) {
       type: c.module.type,
       moduleId: c.module.id,
       cfg,
-      random: () => randomBytes5(32).toString("hex")
+      random: () => randomBytes6(32).toString("hex")
     });
   } catch (e) {
     if (c.offlineCause && isOffline(e)) throw c.offlineCause;
     throw e;
   }
-  const envFile = relative6(await realpath5(root), dev.envFile);
+  const envFile = relative7(await realpath8(root), dev.envFile);
   if (dev.offline) io2.err(`! The portal is unreachable \u2014 starting from ${envFile} as last written; values may be stale.`);
   if (dev.kept.length) {
     io2.err(`! ${dev.kept.length} key(s) differ locally and were kept: ${dev.kept.join(", ")} \u2014 qore env pull --use-portal takes the portal's values`);
@@ -4136,12 +4635,20 @@ async function prepareModule(ctx, f, waitTimeout, p) {
   return { root, slug, recipe, env, port: dev.port, pkg, devEnv: dev.env };
 }
 
+// src/cli/commands/debugTelemetry.ts
+function registerDebugTelemetry(program, ctx) {
+  program.command("debug-telemetry", { hidden: true }).description("Send a test crash report").option("--crash", "throw an unexpected error").action((o) => {
+    if (o.crash) throw new Error(`qore debug-telemetry crash in ${ctx.deps.home} token=debug-telemetry-secret`);
+    if (ctx.opts().json) renderJson(ctx.io, { crash: false });
+  });
+}
+
 // src/cli/commands/doctor.ts
 import pc3 from "picocolors";
 
 // src/core/doctor/checks.ts
-import { realpath as realpath6 } from "fs/promises";
-import { basename as basename3, join as join19 } from "path";
+import { realpath as realpath9, stat as stat5 } from "fs/promises";
+import { basename as basename3, join as join22 } from "path";
 
 // src/core/diagnostics/ssh.ts
 var SSH_TEST_ARGS = ["-T", "-o", "BatchMode=yes", "-o", "ConnectTimeout=5", "git@github.com"];
@@ -4186,8 +4693,8 @@ var UPGRADE = "npm i -g @quatronic/qore";
 var RANK = { ok: 0, warn: 1, fail: 2 };
 var noop = () => {
 };
-var ok = (label2, details) => ({ status: "ok", label: label2, ...details ? { details } : {} });
-var withError = (status2, label2, e) => ({ status: status2, label: label2, error: toJsonError(e) });
+var ok = (label3, details) => ({ status: "ok", label: label3, ...details ? { details } : {} });
+var withError = (status2, label3, e) => ({ status: status2, label: label3, error: toJsonError(e) });
 var isCancel = (e, signal) => e instanceof CancelledError || signal.aborted;
 var portalLabel = (p) => p.builtin ?? p.apiOrigin;
 var ToolTimeout = class extends Error {
@@ -4323,7 +4830,7 @@ function ownerText(e) {
   if (d.owner === "qore") return ` by a previous qore dev (pid ${String(d.pid)})`;
   return "";
 }
-var sameDir = async (a, b) => await realpath6(a).catch(() => a) === await realpath6(b).catch(() => b);
+var sameDir = async (a, b) => await realpath9(a).catch(() => a) === await realpath9(b).catch(() => b);
 async function moduleBody(deps2, m, runs, signal) {
   const parts = [];
   const part = async (fn) => {
@@ -4421,6 +4928,21 @@ async function resolveRepoModule(deps2, session, portal, meta, root) {
   }
   return session.api.get(`/api/cli/v1/modules/${encodeURIComponent(ids[0])}`);
 }
+async function checkProjectsRoot(cfg) {
+  const root = cfg?.projectsRoot;
+  if (!root) return ok("projects folder not set (optional \u2014 qore init)");
+  const s = await stat5(root).catch(() => null);
+  if (!s?.isDirectory()) return { status: "warn", label: `projects folder ${root} does not exist \u2014 qore init` };
+  const e = await writableError(root);
+  if (e) return { status: "fail", label: `projects folder ${root} is not writable (${e.code ?? e.message})` };
+  return ok(`projects folder ${root}`);
+}
+function checkTelemetry(deps2, cfg) {
+  const built = deps2.sentryDsn !== "";
+  if (!cfg) return ok("crash reports off (config unreadable)", { enabled: false, source: "config", reason: "unreadable", built });
+  const consent = resolveConsent(deps2.env, cfg);
+  return ok(describeConsent(consent, built), { enabled: consent.enabled, source: consent.source, built });
+}
 async function runDoctor(deps2, o = {}) {
   const signal = o.signal ?? new AbortController().signal;
   const toolMs = o.toolTimeoutMs ?? TOOL_TIMEOUT_MS;
@@ -4440,12 +4962,14 @@ async function runDoctor(deps2, o = {}) {
     return r;
   };
   let cfg;
+  let cfgReadable = true;
   try {
     cfg = await deps2.config.read();
   } catch (e) {
     if (isCancel(e, signal)) throw e;
     await push("config", "tools", () => withError("fail", errorLabel(e), e));
     cfg = { schemaVersion: 1, profiles: {} };
+    cfgReadable = false;
   }
   let ws = null;
   let wsError = null;
@@ -4467,6 +4991,8 @@ async function runDoctor(deps2, o = {}) {
   await push("git", "tools", () => checkGit(deps2, signal, toolMs));
   await push("github-ssh", "tools", () => checkGithubSsh(deps2, signal, toolMs));
   await push("docker", "tools", () => checkDocker(deps2, signal, toolMs));
+  await push("telemetry", "tools", () => checkTelemetry(deps2, cfgReadable ? cfg : null));
+  await push("projects-root", "tools", () => checkProjectsRoot(cfgReadable ? cfg : null));
   const sessions = /* @__PURE__ */ new Map();
   let loggedIn = [];
   try {
@@ -4559,7 +5085,7 @@ async function workspaceModule(deps2, ws, am, m, runs, signal, push, perModule)
     await push(`module:${m.slug}`, "workspace", () => ({ status: "warn", label: "not a safe directory name \u2014 skipped" }), m.slug);
     return;
   }
-  const mod = { root: join19(ws.root, m.slug), slug: m.slug, type: m.type, id: m.id, access: m.access };
+  const mod = { root: join22(ws.root, m.slug), slug: m.slug, type: m.type, id: m.id, access: m.access };
   let prepared = null;
   await push(`module:${m.slug}`, "workspace", async () => {
     const info = await deps2.git.inspect(mod.root);
@@ -4589,26 +5115,28 @@ function registerDoctor(program, ctx) {
 }
 
 // src/cli/commands/env.ts
-import { randomBytes as randomBytes6 } from "crypto";
-import { chmod as chmod3, realpath as realpath7 } from "fs/promises";
-import { dirname as dirname7, join as join20, relative as relative7 } from "path";
+import { randomBytes as randomBytes7 } from "crypto";
+import { chmod as chmod3, realpath as realpath10 } from "fs/promises";
+import { dirname as dirname8, join as join23, relative as relative8 } from "path";
 var maskLen = (v) => v === void 0 ? "(unset)" : `\u2022\u2022\u2022\u2022 (${v.length} chars)`;
 function registerEnv(program, ctx) {
   const env = program.command("env").description("Local environment");
-  env.command("pull").description("Write this module's local secrets into its env file").option("--module <slug|id>", "the module (default: from this repository's git remote)").option("--app <slug|id>", "the app, when the module is part of several").option("--target <path>", "env file to write (inside the repository)").option("--use-portal", "take the portal's value for keys that differ locally").option("--yes", "trust this repository without asking").action(async (f) => {
-    const { deps: deps2, io: io2 } = ctx;
-    const g = ctx.opts();
-    const mc = await moduleContextFor(ctx, f, "env pull");
+  env.command("pull").description("Write this module's local secrets into its env file").option("--module <slug|id>", "the module (default: from this repository's git remote)").option("--app <slug|id>", "the app, when the module is part of several").option("--project <ref>", "the project to pull for, from anywhere (see qore init)").option("--target <path>", "env file to write (inside the repository)").option("--use-portal", "take the portal's value for keys that differ locally").option("--yes", "trust this repository without asking").action(async (f) => {
+    const c = await projectCtx(ctx, { ref: f.project, module: f.module, app: f.app, needModule: true });
+    const { deps: deps2, io: io2 } = c;
+    const g = c.opts();
+    const mc = await moduleContextFor(c, f, "env pull");
     if (!mc.repoRoot) {
       throw new QoreError("QORE_CONTEXT_REQUIRED", "env pull writes into a module repository", { hint: "cd into the module's repository." });
     }
-    const app = await appFor(ctx, mc, f.app);
+    const app = await appFor(c, mc, f.app);
+    await rememberContext(c, mc, app);
     const cfg = await readRepoConfig(mc.repoRoot);
     const defaults = moduleDefaults(mc.module.type);
     const target = f.target ? await resolveTarget(mc.repoRoot, f.target, deps2.cwd) : await resolveTarget(mc.repoRoot, cfg.envFile ?? defaults.envFile);
-    await ensureTrusted(ctx, mc, app, { yes: f.yes });
+    await ensureTrusted(c, mc, app, { yes: f.yes });
     const existing = await readOrNull(target);
-    const example = existing === null ? await readOrNull(join20(dirname7(target), ".env.example")) : null;
+    const example = existing === null ? await readOrNull(join23(dirname8(target), ".env.example")) : null;
     const local = await fetchLocalEnv(deps2, mc, app);
     const inputs = {
       existing,
@@ -4617,7 +5145,7 @@ function registerEnv(program, ctx) {
       managed: local.managedKeys,
       localSecrets: cfg.localSecrets ?? defaults.localSecrets,
       defaultChoice: f.usePortal ? "use-portal" : "keep",
-      random: () => randomBytes6(32).toString("hex")
+      random: () => randomBytes7(32).toString("hex")
     };
     let plan = planPull(inputs);
     if (plan.conflicts.length && io2.interactive && !f.usePortal) {
@@ -4649,7 +5177,7 @@ function registerEnv(program, ctx) {
     } else {
       await writeSecurely(target, plan.text);
     }
-    const rel = relative7(await realpath7(mc.repoRoot), target);
+    const rel = relative8(await realpath10(mc.repoRoot), target);
     if (g.json) {
       const names = {
         created: plan.created,
@@ -4678,6 +5206,9 @@ function registerEnv(program, ctx) {
   });
 }
 
+// src/cli/commands/init.ts
+import { realpath as realpath11 } from "fs/promises";
+
 // src/core/auth/oidc.ts
 import * as oc from "openid-client";
 var LOGIN_SCOPE = "openid profile email offline_access qore:read qore:local-env";
@@ -4745,9 +5276,9 @@ async function createOidc(opts) {
         throw mapOidcError(e, host);
       }
     },
-    async pollDevice(start, signal) {
+    async pollDevice(start2, signal) {
       try {
-        const t = await oc.pollDeviceAuthorizationGrant(config, start.handle, void 0, { signal });
+        const t = await oc.pollDeviceAuthorizationGrant(config, start2.handle, void 0, { signal });
         return toTokenSet(t);
       } catch (e) {
         throw mapOidcError(e, host);
@@ -4774,14 +5305,14 @@ async function createOidc(opts) {
 // src/core/auth/login.ts
 async function deviceLogin(opts) {
   await opts.store.getRefresh();
-  const start = await opts.oidc.startDevice(LOGIN_SCOPE);
+  const start2 = await opts.oidc.startDevice(LOGIN_SCOPE);
   const stopPoll = new AbortController();
   const settled = new AbortController();
-  const poll = opts.oidc.pollDevice(start, AbortSignal.any([opts.signal, stopPoll.signal])).finally(() => settled.abort());
+  const poll = opts.oidc.pollDevice(start2, AbortSignal.any([opts.signal, stopPoll.signal])).finally(() => settled.abort());
   poll.catch(() => {
   });
   try {
-    await opts.onCode(start, settled.signal);
+    await opts.onCode(start2, settled.signal);
   } catch (e) {
     stopPoll.abort();
     const late = await poll.catch(() => null);
@@ -4809,78 +5340,201 @@ async function deviceLogin(opts) {
 }
 
 // src/cli/commands/login.ts
+var NO_TENANTS = "Your account is not a developer in any organisation. Ask an admin to invite you as developer.";
+async function loginFlow(ctx, cmd) {
+  const { deps: deps2, io: io2, signal } = ctx;
+  const g = ctx.opts();
+  const cfg = await deps2.config.read();
+  const portal = resolvePortal(g.portal, cfg.defaultProfile);
+  const meta = await fetchMeta(deps2.fetch, portal.apiOrigin);
+  const known = cfg.profiles[portal.apiOrigin]?.issuer;
+  const pinned = { ...portal, pinnedIssuer: portal.pinnedIssuer ?? known ?? null };
+  if (!pinned.pinnedIssuer && portal.builtin === null) {
+    io2.err(`! Logging in to ${portal.apiOrigin}, identity provider ${meta.auth.issuer}`);
+  }
+  negotiate(meta, pinned, deps2.version);
+  const issuer = pinned.pinnedIssuer ?? meta.auth.issuer;
+  const hash = profileHash(portal.apiOrigin, issuer);
+  const store = new TokenStore(deps2.keychain, hash);
+  const t = await deviceLogin({
+    oidc: await deps2.oidcFor(issuer),
+    store,
+    now: deps2.now,
+    signal,
+    withLock: deps2.withLock,
+    lockName: hash,
+    onCode: async (s, settled) => {
+      const url = s.verificationUriComplete ?? s.verificationUri;
+      io2.err(`! First copy your one-time code: ${s.userCode}`);
+      if (io2.interactive && cmd.browser) {
+        try {
+          await io2.waitForEnter(`  Press Enter to open ${url} (or open it yourself)`, AbortSignal.any([signal, settled]));
+        } catch (e) {
+          if (settled.aborted && !signal.aborted) return;
+          throw e;
+        }
+        if (settled.aborted) return;
+        if (!await io2.openUrl(url)) io2.err(`  Open ${url} in a browser`);
+      } else {
+        io2.err(`  Open ${url} in a browser`);
+      }
+    }
+  });
+  await deps2.config.update((c) => {
+    c.profiles[portal.apiOrigin] = {
+      ...c.profiles[portal.apiOrigin],
+      apiOrigin: portal.apiOrigin,
+      issuer,
+      sub: t.sub,
+      email: t.email,
+      meta: { fetchedAt: deps2.now().toISOString(), doc: meta }
+    };
+    if (g.portal || !c.defaultProfile) c.defaultProfile = portal.apiOrigin;
+  });
+  const { api } = await openSession(deps2, { ...portal, pinnedIssuer: issuer }, "login", requestLog(ctx));
+  const me = await api.get("/api/cli/v1/me");
+  const prev = cfg.profiles[portal.apiOrigin];
+  let active = prev?.sub === t.sub && prev.activeTenant && me.tenants.some((x) => x.id === prev.activeTenant.id) ? prev.activeTenant : void 0;
+  if (active) {
+  } else if (me.tenants.length === 0) {
+    io2.err(`! ${NO_TENANTS}`);
+  } else if (me.tenants.length === 1) {
+    active = { id: me.tenants[0].id, slug: me.tenants[0].slug };
+    io2.err(`\u2713 Using tenant ${me.tenants[0].name}`);
+  } else if (io2.interactive) {
+    active = await io2.select("Select a tenant", me.tenants.map((x) => ({ name: `${x.name}  ${x.role}`, value: { id: x.id, slug: x.slug } })));
+  } else {
+    io2.err(`! You belong to ${me.tenants.length} tenants; choose one with \`qore tenant use <slug>\``);
+  }
+  await deps2.config.update((c) => {
+    c.profiles[portal.apiOrigin].activeTenant = active;
+  });
+  const label3 = portal.builtin ?? portal.apiOrigin;
+  if (g.json) renderJson(io2, { portal: label3, email: me.email, activeTenant: active ?? null });
+  else io2.out(`\u2713 Logged in as ${me.email} (${label3})`);
+}
 function registerLogin(program, ctx) {
-  program.command("login").description("Log in with your Qore account").option("--no-browser", "only print the URL").action(async (cmd) => {
-    const { deps: deps2, io: io2, signal } = ctx;
+  program.command("login").description("Log in with your Qore account").option("--no-browser", "only print the URL").action(async (cmd) => loginFlow(ctx, cmd));
+}
+
+// src/cli/commands/tenant.ts
+function registerTenant(program, ctx) {
+  const tenant = program.command("tenant").description("Manage the active tenant");
+  tenant.command("list").description("List tenants you have access to").action(async () => {
+    const { deps: deps2, io: io2 } = ctx;
     const g = ctx.opts();
     const cfg = await deps2.config.read();
     const portal = resolvePortal(g.portal, cfg.defaultProfile);
-    const meta = await fetchMeta(deps2.fetch, portal.apiOrigin);
-    const known = cfg.profiles[portal.apiOrigin]?.issuer;
-    const pinned = { ...portal, pinnedIssuer: portal.pinnedIssuer ?? known ?? null };
-    if (!pinned.pinnedIssuer && portal.builtin === null) {
-      io2.err(`! Logging in to ${portal.apiOrigin}, identity provider ${meta.auth.issuer}`);
-    }
-    negotiate(meta, pinned, deps2.version);
-    const issuer = pinned.pinnedIssuer ?? meta.auth.issuer;
-    const hash = profileHash(portal.apiOrigin, issuer);
-    const store = new TokenStore(deps2.keychain, hash);
-    const t = await deviceLogin({
-      oidc: await deps2.oidcFor(issuer),
-      store,
-      now: deps2.now,
-      signal,
-      withLock: deps2.withLock,
-      lockName: hash,
-      onCode: async (s, settled) => {
-        const url = s.verificationUriComplete ?? s.verificationUri;
-        io2.err(`! First copy your one-time code: ${s.userCode}`);
-        if (io2.interactive && cmd.browser) {
-          try {
-            await io2.waitForEnter(`  Press Enter to open ${url} (or open it yourself)`, AbortSignal.any([signal, settled]));
-          } catch (e) {
-            if (settled.aborted && !signal.aborted) return;
-            throw e;
-          }
-          if (settled.aborted) return;
-          if (!await io2.openUrl(url)) io2.err(`  Open ${url} in a browser`);
-        } else {
-          io2.err(`  Open ${url} in a browser`);
-        }
-      }
-    });
-    await deps2.config.update((c) => {
-      c.profiles[portal.apiOrigin] = {
-        ...c.profiles[portal.apiOrigin],
-        apiOrigin: portal.apiOrigin,
-        issuer,
-        sub: t.sub,
-        email: t.email,
-        meta: { fetchedAt: deps2.now().toISOString(), doc: meta }
-      };
-      if (g.portal || !c.defaultProfile) c.defaultProfile = portal.apiOrigin;
-    });
-    const { api } = await openSession(deps2, { ...portal, pinnedIssuer: issuer }, "login", requestLog(ctx));
+    const { profile, api } = await openSession(deps2, portal, "tenant list", requestLog(ctx));
     const me = await api.get("/api/cli/v1/me");
-    const prev = cfg.profiles[portal.apiOrigin];
-    let active = prev?.sub === t.sub && prev.activeTenant && me.tenants.some((x) => x.id === prev.activeTenant.id) ? prev.activeTenant : void 0;
-    if (active) {
-    } else if (me.tenants.length === 0) {
-      io2.err("! Your account is not a developer in any organisation. Ask an admin to invite you as developer.");
-    } else if (me.tenants.length === 1) {
-      active = { id: me.tenants[0].id, slug: me.tenants[0].slug };
-      io2.err(`\u2713 Using tenant ${me.tenants[0].name}`);
-    } else if (io2.interactive) {
-      active = await io2.select("Select a tenant", me.tenants.map((x) => ({ name: `${x.name}  ${x.role}`, value: { id: x.id, slug: x.slug } })));
-    } else {
-      io2.err(`! You belong to ${me.tenants.length} tenants; choose one with \`qore tenant use <slug>\``);
+    const activeId = profile.activeTenant?.id;
+    if (g.json) {
+      renderJson(io2, { tenants: me.tenants.map((t) => ({ ...t, active: t.id === activeId })) });
+      return;
     }
-    await deps2.config.update((c) => {
-      c.profiles[portal.apiOrigin].activeTenant = active;
-    });
-    const label2 = portal.builtin ?? portal.apiOrigin;
-    if (g.json) renderJson(io2, { portal: label2, email: me.email, activeTenant: active ?? null });
-    else io2.out(`\u2713 Logged in as ${me.email} (${label2})`);
+    for (const t of me.tenants) {
+      const mark = t.id === activeId ? "*" : " ";
+      io2.out(`${mark} ${t.name}  ${t.role}`);
+    }
+  });
+  tenant.command("use").description("Set the active tenant").argument("[slug]", "tenant slug").action(async (slug) => {
+    const chosen = await useTenant(ctx, slug);
+    if (ctx.opts().json) renderJson(ctx.io, { activeTenant: chosen });
+    else ctx.io.out(`\u2713 Using tenant ${chosen.slug}`);
+  });
+}
+async function useTenant(ctx, slug, known) {
+  const { deps: deps2, io: io2 } = ctx;
+  const g = ctx.opts();
+  const cfg = await deps2.config.read();
+  const portal = resolvePortal(g.portal, cfg.defaultProfile);
+  const me = known ?? await (await openSession(deps2, portal, "tenant use", requestLog(ctx))).api.get("/api/cli/v1/me");
+  const candidates = me.tenants.map((t) => ({ kind: "tenant", id: t.id, slug: t.slug, name: t.name }));
+  let chosen;
+  if (slug) {
+    const found = me.tenants.find((t) => t.slug === slug);
+    if (!found) throw new QoreError("QORE_RESOURCE_NOT_FOUND", `No tenant "${slug}" for this account`, { candidates });
+    chosen = { id: found.id, slug: found.slug };
+  } else if (io2.interactive) {
+    chosen = await io2.select("Select a tenant", me.tenants.map((t) => ({ name: `${t.name}  ${t.role}`, value: { id: t.id, slug: t.slug } })));
+  } else {
+    throw new QoreError("QORE_CONTEXT_REQUIRED", "Which tenant? Pass a slug or run interactively.", { candidates });
+  }
+  await deps2.config.update((c) => {
+    c.profiles[portal.apiOrigin].activeTenant = chosen;
+  });
+  return chosen;
+}
+
+// src/cli/commands/init.ts
+var step = (status2, detail2) => detail2 === void 0 ? { status: status2 } : { status: status2, detail: detail2 };
+async function rootStep(ctx, f) {
+  const { deps: deps2, io: io2 } = ctx;
+  const current = (await deps2.config.read()).projectsRoot;
+  let input2 = f.root;
+  if (input2 === void 0) {
+    if (!io2.interactive) {
+      if (current) return step("already", current);
+      throw new QoreError("QORE_ROOT_NOT_SET", "No projects folder chosen", { hint: "Pass one: qore init --root <path>." });
+    }
+    input2 = await io2.input("Projects folder", { default: current ?? "~/qore" }) || current || "~/qore";
+  }
+  const wanted = await checkRoot(deps2, input2);
+  const asked = await realpath11(wanted).catch(() => wanted);
+  if (current && asked !== current && io2.interactive && !await io2.confirm(`Change the projects folder from ${current} to ${asked}? Nothing is moved.`, ctx.signal)) {
+    return step("skipped", current);
+  }
+  const next = await createRoot(wanted);
+  if (next === current) return step("already", current);
+  await setRoot(deps2, next);
+  return step("done", next);
+}
+async function activeTenant(ctx) {
+  const cfg = await ctx.deps.config.read();
+  return cfg.profiles[resolvePortal(ctx.opts().portal, cfg.defaultProfile).apiOrigin]?.activeTenant?.slug ?? null;
+}
+async function tenantStep(ctx) {
+  const cfg = await ctx.deps.config.read();
+  const portal = resolvePortal(ctx.opts().portal, cfg.defaultProfile);
+  const { api } = await openSession(ctx.deps, portal, "init", requestLog(ctx));
+  const me = await api.get("/api/cli/v1/me");
+  if (me.tenants.length === 0) return step("skipped", NO_TENANTS);
+  return step("done", (await useTenant(ctx, me.tenants.length === 1 ? me.tenants[0].slug : void 0, me)).slug);
+}
+function registerInit(program, ctx) {
+  program.command("init").description("Set up qore: a projects folder, login, tenant and a first app").option("--root <path>", "the projects folder (default: ask, ~/qore)").option("--clone <app>", "clone this app into the projects folder").option("--tenant <slug>", "tenant the --clone app belongs to").action(async (f) => {
+    const { io: io2 } = ctx;
+    const json2 = Boolean(ctx.opts().json);
+    const sub = json2 ? { ...ctx, io: { ...io2, out: io2.err }, opts: () => ({ ...ctx.opts(), json: false }) } : ctx;
+    const steps = {
+      root: await rootStep(ctx, f),
+      login: step("skipped"),
+      tenant: step("skipped"),
+      clone: step("skipped")
+    };
+    const who = await loggedInAs(ctx);
+    if (who) steps.login = step("already", who);
+    else if (io2.interactive) {
+      await loginFlow(sub, { browser: true });
+      steps.login = step("done", await loggedInAs(ctx) ?? void 0);
+    } else steps.login = step("skipped", "run qore login");
+    const tenant = await activeTenant(ctx);
+    if (tenant) steps.tenant = step(steps.login.status === "done" ? "done" : "already", tenant);
+    else if (steps.login.status !== "skipped" && io2.interactive) steps.tenant = await tenantStep(sub);
+    else steps.tenant = step("skipped", "run qore tenant use <slug>");
+    if (f.clone) {
+      steps.clone = step("done", (await cloneApp(sub, f.clone, void 0, { tenant: f.tenant, protocol: "https" })).root);
+    } else if (io2.interactive && steps.login.status !== "skipped" && steps.tenant.status !== "skipped" && await io2.confirm("Clone an app now?", ctx.signal)) {
+      steps.clone = step("done", (await cloneApp(sub, void 0, void 0, { tenant: f.tenant, protocol: "https" })).root);
+    }
+    const projectsRoot = (await ctx.deps.config.read()).projectsRoot ?? null;
+    if (json2) {
+      renderJson(io2, { projectsRoot, steps });
+      return;
+    }
+    const mark = (s) => s.status === "skipped" ? "\u2013" : "\u2713";
+    for (const [name, s] of Object.entries(steps)) io2.out(`${mark(s)} ${name.padEnd(6)} ${s.status}${s.detail ? `  ${s.detail}` : ""}`);
+    if (projectsRoot) io2.out(`Next: qore dev <app> works from any directory.`);
   });
 }
 
@@ -4948,6 +5602,7 @@ async function appStatus(ctx, ws, appFlag) {
   await ensureCapability(deps2, portal.apiOrigin, "app.modules");
   await ensureCapability(deps2, portal.apiOrigin, "module.status");
   const am = await workspaceAppModules(session, portal, ws);
+  await rememberWorkspace(ctx, ws, am.app);
   const { tenant, ...app } = am.app;
   if (appFlag && appFlag !== app.id && appFlag !== app.slug) {
     throw new QoreError("QORE_RESOURCE_NOT_FOUND", `This workspace is for ${app.slug}, not "${appFlag}"`, {
@@ -4975,19 +5630,21 @@ async function appStatus(ctx, ws, appFlag) {
   for (const line2 of table(rows)) io2.out(line2);
 }
 function registerStatus(program, ctx) {
-  program.command("status").description("Deployment and health per environment for this module (or, in a workspace root, the app)").option("--module <slug|id>", "the module (default: from this repository's git remote)").option("--app <slug|id>", "the app, when the module is part of several").action(async (flags) => {
-    const { deps: deps2, io: io2 } = ctx;
-    const g = ctx.opts();
+  program.command("status").description("Deployment and health per environment for this module (or, in a workspace root, the app)").option("--module <slug|id>", "the module (default: from this repository's git remote)").option("--app <slug|id>", "the app, when the module is part of several").option("--project <ref>", "the app or module, from anywhere (see qore init)").action(async (flags) => {
+    const c = await projectCtx(ctx, { ref: flags.project, module: flags.module, app: flags.app, needModule: false });
+    const { deps: deps2, io: io2 } = c;
+    const g = c.opts();
     if (!flags.module) {
       const ws = await workspaceRoot(deps2);
       if (ws) {
-        await appStatus(ctx, ws, flags.app);
+        await appStatus(c, ws, flags.app);
         return;
       }
     }
-    const mc = await moduleContextFor(ctx, flags, "status");
+    const mc = await moduleContextFor(c, flags, "status");
     await ensureCapability(deps2, mc.portal.apiOrigin, "module.status");
-    const app = await appFor(ctx, mc, flags.app);
+    const app = await appFor(c, mc, flags.app);
+    await rememberContext(c, mc, app);
     if (!g.json) io2.err(contextLine(mc, app));
     const st = await mc.session.api.get(
       `/api/cli/v1/modules/${encodeURIComponent(mc.module.id)}/status?app_id=${encodeURIComponent(app.id)}`
@@ -5007,7 +5664,7 @@ function registerStatus(program, ctx) {
 }
 
 // src/cli/commands/sync.ts
-import { join as join21, relative as relative8 } from "path";
+import { join as join24, relative as relative9 } from "path";
 import { Option as Option2 } from "commander";
 function asFailure2(slug, e) {
   if (e instanceof QoreError && e.code !== "QORE_GIT_UNAVAILABLE") {
@@ -5039,7 +5696,7 @@ function registerSync(program, ctx) {
         continue;
       }
       try {
-        dirs[m.slug] = await deps2.git.inspect(join21(ws.root, m.slug));
+        dirs[m.slug] = await deps2.git.inspect(join24(ws.root, m.slug));
         modulesForPlan.push(m);
       } catch (e) {
         earlyFailures.push(asFailure2(m.slug, e));
@@ -5051,7 +5708,7 @@ function registerSync(program, ctx) {
     } });
     await syncPresent(deps2, applied, actions, Boolean(flags.pull), { app, protocol: flags.protocol });
     for (const r of applied) {
-      if (r.status === "cloned" && r.dir) r.dir = relative8(deps2.cwd, r.dir) || ".";
+      if (r.status === "cloned" && r.dir) r.dir = relative9(deps2.cwd, r.dir) || ".";
     }
     const removedResults = removed.map((slug) => ({ slug, status: "removed", reason: "not a module of this app \u2014 left in place" }));
     const results = [...earlyFailures, ...applied, ...removedResults];
@@ -5060,52 +5717,6 @@ function registerSync(program, ctx) {
   });
 }
 
-// src/cli/commands/tenant.ts
-function registerTenant(program, ctx) {
-  const tenant = program.command("tenant").description("Manage the active tenant");
-  tenant.command("list").description("List tenants you have access to").action(async () => {
-    const { deps: deps2, io: io2 } = ctx;
-    const g = ctx.opts();
-    const cfg = await deps2.config.read();
-    const portal = resolvePortal(g.portal, cfg.defaultProfile);
-    const { profile, api } = await openSession(deps2, portal, "tenant list", requestLog(ctx));
-    const me = await api.get("/api/cli/v1/me");
-    const activeId = profile.activeTenant?.id;
-    if (g.json) {
-      renderJson(io2, { tenants: me.tenants.map((t) => ({ ...t, active: t.id === activeId })) });
-      return;
-    }
-    for (const t of me.tenants) {
-      const mark = t.id === activeId ? "*" : " ";
-      io2.out(`${mark} ${t.name}  ${t.role}`);
-    }
-  });
-  tenant.command("use").description("Set the active tenant").argument("[slug]", "tenant slug").action(async (slug) => {
-    const { deps: deps2, io: io2 } = ctx;
-    const g = ctx.opts();
-    const cfg = await deps2.config.read();
-    const portal = resolvePortal(g.portal, cfg.defaultProfile);
-    const { api } = await openSession(deps2, portal, "tenant use", requestLog(ctx));
-    const me = await api.get("/api/cli/v1/me");
-    const candidates = me.tenants.map((t) => ({ kind: "tenant", id: t.id, slug: t.slug, name: t.name }));
-    let chosen;
-    if (slug) {
-      const found = me.tenants.find((t) => t.slug === slug);
-      if (!found) throw new QoreError("QORE_RESOURCE_NOT_FOUND", `No tenant "${slug}" for this account`, { candidates });
-      chosen = { id: found.id, slug: found.slug };
-    } else if (io2.interactive) {
-      chosen = await io2.select("Select a tenant", me.tenants.map((t) => ({ name: `${t.name}  ${t.role}`, value: { id: t.id, slug: t.slug } })));
-    } else {
-      throw new QoreError("QORE_CONTEXT_REQUIRED", "Which tenant? Pass a slug or run interactively.", { candidates });
-    }
-    await deps2.config.update((c) => {
-      c.profiles[portal.apiOrigin].activeTenant = chosen;
-    });
-    if (g.json) renderJson(io2, { activeTenant: chosen });
-    else io2.out(`\u2713 Using tenant ${chosen.slug}`);
-  });
-}
-
 // src/cli/commands/version.ts
 function registerVersion(program, ctx) {
   program.command("version").description("Show the CLI and portal version").action(async () => {
@@ -5125,11 +5736,11 @@ function registerVersion(program, ctx) {
       return;
     }
     io2.out(`qore ${deps2.version}`);
-    const label2 = portal.builtin ?? portal.apiOrigin;
+    const label3 = portal.builtin ?? portal.apiOrigin;
     if (portalInfo) {
-      io2.out(`portal ${label2}: api ${portalInfo.apiVersions.join(",")}, min ${portalInfo.minCliVersion}, latest ${portalInfo.latestCliVersion}`);
+      io2.out(`portal ${label3}: api ${portalInfo.apiVersions.join(",")}, min ${portalInfo.minCliVersion}, latest ${portalInfo.latestCliVersion}`);
     } else {
-      io2.out(`portal ${label2}: unreachable`);
+      io2.out(`portal ${label3}: unreachable`);
     }
   });
 }
@@ -5143,18 +5754,18 @@ function registerWhoami(program, ctx) {
     const portal = resolvePortal(g.portal, cfg.defaultProfile);
     const { profile, api } = await openSession(deps2, portal, "whoami", requestLog(ctx));
     const me = await api.get("/api/cli/v1/me");
-    const activeTenant = profile.activeTenant;
-    if (activeTenant && !me.tenants.some((t) => t.id === activeTenant.id)) {
-      io2.err(`! You no longer have developer access to ${activeTenant.slug}`);
+    const activeTenant2 = profile.activeTenant;
+    if (activeTenant2 && !me.tenants.some((t) => t.id === activeTenant2.id)) {
+      io2.err(`! You no longer have developer access to ${activeTenant2.slug}`);
     }
-    const label2 = portal.builtin ?? portal.apiOrigin;
+    const label3 = portal.builtin ?? portal.apiOrigin;
     if (g.json) {
-      renderJson(io2, { portal: label2, activeTenant: activeTenant ?? null, me });
+      renderJson(io2, { portal: label3, activeTenant: activeTenant2 ?? null, me });
       return;
     }
-    io2.out(`${me.email} (${label2})`);
+    io2.out(`${me.email} (${label3})`);
     for (const t of me.tenants) {
-      const mark = activeTenant?.id === t.id ? "*" : " ";
+      const mark = activeTenant2?.id === t.id ? "*" : " ";
       io2.out(`${mark} ${t.name}  ${t.role}`);
       for (const a of t.apps) {
         io2.out(`  ${a.slug}  ${a.access}`);
@@ -5168,6 +5779,7 @@ function registerWhoami(program, ctx) {
 
 // src/cli/commands/index.ts
 var COMMANDS = [
+  registerInit,
   registerLogin,
   registerLogout,
   registerWhoami,
@@ -5179,9 +5791,111 @@ var COMMANDS = [
   registerClone,
   registerSync,
   registerVersion,
-  registerDoctor
+  registerConfig,
+  registerDoctor,
+  registerDebugTelemetry
 ];
 
+// src/cli/telemetry/notice.ts
+var NOTICE = [
+  "qore sends anonymous crash reports and a per-run health record to Quatronic, to find and fix bugs.",
+  "Tokens, env values and your home path are removed; no user or tenant is attached.",
+  "Turn it off with `qore config telemetry off`, QORE_TELEMETRY=0 or DO_NOT_TRACK=1. See the Privacy section of the README."
+];
+async function showNoticeOnce(deps2, io2, o) {
+  if (o.json || !io2.interactive || !deps2.sentryDsn) return;
+  try {
+    const cfg = await deps2.config.read();
+    if (!needsNotice(cfg, resolveConsent(deps2.env, cfg))) return;
+    await deps2.config.update((c) => {
+      c.telemetry = { ...c.telemetry, noticeShownAt: deps2.now().toISOString() };
+    });
+  } catch {
+    return;
+  }
+  for (const line2 of NOTICE) io2.err(line2);
+}
+
+// src/cli/telemetry/index.ts
+var CRASH_FLUSH_MS = 2e3;
+var CLEAN_FLUSH_MS = 200;
+var loadSentry = async () => (await import("./sentry-GMM4X3FT.js")).createSdk;
+function createTelemetry(deps2, o) {
+  const load = o.load ?? loadSentry;
+  const flushMs = o.flushMs ?? { crash: CRASH_FLUSH_MS, clean: CLEAN_FLUSH_MS };
+  let sdk = null;
+  let crashed = null;
+  const secrets = [];
+  let scrub = null;
+  return {
+    begin(command) {
+      if (sdk || !deps2.sentryDsn) return;
+      sdk = start(deps2, o.argv, command, load, (ctx) => {
+        scrub = ctx;
+        addSecretValues(ctx, secrets);
+      }).catch(() => null);
+    },
+    crash(e) {
+      crashed ??= { e };
+    },
+    registerSecrets(values) {
+      secrets.push(...values);
+      if (scrub) addSecretValues(scrub, values);
+    },
+    async end(signal) {
+      if (!sdk) return { drained: true };
+      const ms = crashed ? flushMs.crash : flushMs.clean;
+      const work = sdk.then(async (s) => {
+        if (!s) return true;
+        if (crashed) s.crash(crashed.e);
+        return s.end(ms);
+      }).catch(() => false);
+      return { drained: await withDeadline(work, ms, signal) };
+    }
+  };
+}
+async function start(deps2, argv2, command, load, onScrub) {
+  const cfg = await deps2.config.read().catch(() => null);
+  if (!cfg) return null;
+  if (!resolveConsent(deps2.env, cfg).enabled) return null;
+  const create = await load();
+  const scrub = buildScrubContext({ home: deps2.home, platform: deps2.platform, env: deps2.env, argv: argv2, commandWords: command.split(" ") });
+  onScrub(scrub);
+  const sdk = create({
+    dsn: deps2.sentryDsn,
+    environment: deps2.sentryEnvironment,
+    release: deps2.version,
+    tags: { command, "cli.version": deps2.version, "node.version": deps2.nodeVersion, os: deps2.platform, ci: deps2.env.CI ? "true" : "false" },
+    scrub
+  });
+  sdk.start();
+  return sdk;
+}
+function withDeadline(work, ms, signal) {
+  if (signal?.aborted) return Promise.resolve(false);
+  return new Promise((resolve6) => {
+    const done = (v) => {
+      clearTimeout(timer);
+      signal?.removeEventListener("abort", onAbort);
+      resolve6(v);
+    };
+    const onAbort = () => done(false);
+    const timer = setTimeout(() => done(false), ms);
+    signal?.addEventListener("abort", onAbort, { once: true });
+    work.then(done, () => done(false));
+  });
+}
+function telemetryHooks(deps2, io2, t, o) {
+  return {
+    onCommand: async (command) => {
+      if (command === "config telemetry") return;
+      await showNoticeOnce(deps2, io2, o);
+      t.begin(command);
+    },
+    onCrash: (e) => t.crash(e)
+  };
+}
+
 // src/cli/updateCheck.ts
 var REGISTRY_URL = "https://registry.npmjs.org/@quatronic%2Fqore/latest";
 var DAY_MS2 = 24 * 60 * 60 * 1e3;
@@ -5215,7 +5929,7 @@ async function maybeNotifyUpdate(deps2, io2, o, timeoutMs = DEFAULT_TIMEOUT_MS)
 
 // src/core/config.ts
 import { readFile as readFile6 } from "fs/promises";
-import { join as join22 } from "path";
+import { join as join25 } from "path";
 var empty = () => ({ schemaVersion: 1, profiles: {} });
 var ConfigStore = class {
   constructor(dir2) {
@@ -5223,7 +5937,7 @@ var ConfigStore = class {
   }
   dir;
   get file() {
-    return join22(this.dir, "config.json");
+    return join25(this.dir, "config.json");
   }
   async read() {
     let raw;
@@ -5254,9 +5968,9 @@ var ConfigStore = class {
 
 // src/platform/git.ts
 import { execFile, execFileSync } from "child_process";
-import { mkdir as mkdir3, readdir as readdir2, stat as stat3 } from "fs/promises";
+import { mkdir as mkdir4, readdir as readdir4, stat as stat6 } from "fs/promises";
 import { homedir } from "os";
-import { dirname as dirname8, join as join23 } from "path";
+import { dirname as dirname9, join as join26 } from "path";
 function parseRemotes(stdout) {
   const seen = /* @__PURE__ */ new Set();
   const out = [];
@@ -5323,7 +6037,7 @@ function gitExecOptions(repoDir) {
   return { cwd: homedir(), env, windowsHide: true, maxBuffer: 8 * 1024 * 1024 };
 }
 function runGit(args, repoDir) {
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     execFile("git", args, gitExecOptions(repoDir), (err, stdout, stderr) => {
       if (err && err.code === "ENOENT") {
         reject(new QoreError("QORE_GIT_UNAVAILABLE", "git is not installed or not on PATH", {
@@ -5332,7 +6046,7 @@ function runGit(args, repoDir) {
         return;
       }
       const code = err ? typeof err.code === "number" ? err.code : 1 : 0;
-      resolve5({ code, stdout: String(stdout), stderr: String(stderr), err: err ?? void 0 });
+      resolve6({ code, stdout: String(stdout), stderr: String(stderr), err: err ?? void 0 });
     });
   });
 }
@@ -5350,7 +6064,7 @@ async function remotes(repoRoot) {
   return parseRemotes(r.stdout);
 }
 async function clone(url, dir2) {
-  await mkdir3(dirname8(dir2), { recursive: true });
+  await mkdir4(dirname9(dir2), { recursive: true });
   const r = await runGit(["clone", "--", url, dir2]);
   return toResult(r, "git clone");
 }
@@ -5370,7 +6084,7 @@ async function status(repoRoot) {
 }
 async function statOrThrow(path) {
   try {
-    return await stat3(path);
+    return await stat6(path);
   } catch (err) {
     if (err.code === "ENOENT") return void 0;
     throw new QoreError("QORE_INTERNAL", `could not stat ${path}`, { cause: err });
@@ -5382,12 +6096,12 @@ async function inspect(dir2) {
   if (!st.isDirectory()) return { exists: true, empty: false, isRepo: false, remotes: [] };
   let entries;
   try {
-    entries = await readdir2(dir2);
+    entries = await readdir4(dir2);
   } catch (err) {
     throw new QoreError("QORE_INTERNAL", `could not read ${dir2}`, { cause: err });
   }
   const empty2 = entries.length === 0;
-  const isRepo = await statOrThrow(join23(dir2, ".git")) !== void 0;
+  const isRepo = await statOrThrow(join26(dir2, ".git")) !== void 0;
   const dirRemotes = isRepo ? await remotes(dir2) : [];
   return { exists: true, empty: empty2, isRepo, remotes: dirRemotes };
 }
@@ -5448,15 +6162,15 @@ var OsKeychain = class {
 };
 
 // src/platform/lock.ts
-import { mkdir as mkdir4, writeFile as writeFile4 } from "fs/promises";
-import { join as join24 } from "path";
+import { mkdir as mkdir5, writeFile as writeFile5 } from "fs/promises";
+import { join as join27 } from "path";
 import lockfile from "proper-lockfile";
 function fileLock(dir2) {
   return async (name, fn) => {
-    const locks = join24(dir2, "locks");
-    await mkdir4(locks, { recursive: true, mode: 448 });
-    const target = join24(locks, `${name}.lock`);
-    await writeFile4(target, "", { flag: "a" });
+    const locks = join27(dir2, "locks");
+    await mkdir5(locks, { recursive: true, mode: 448 });
+    const target = join27(locks, `${name}.lock`);
+    await writeFile5(target, "", { flag: "a" });
     let release;
     let compromised;
     try {
@@ -5499,7 +6213,7 @@ var STDERR_DRAIN_MS = 500;
 function makeSpawner(spawnFn, proc) {
   return {
     run(cmd, args, env, o) {
-      return new Promise((resolve5, reject) => {
+      return new Promise((resolve6, reject) => {
         let child;
         try {
           child = spawnFn(cmd, args, {
@@ -5533,7 +6247,7 @@ function makeSpawner(spawnFn, proc) {
           cleanup();
           const stderr = child.stderr;
           if (!o?.onStderr || !stderr || stderr.readableEnded) {
-            resolve5({ code, signal });
+            resolve6({ code, signal });
             return;
           }
           let settled = false;
@@ -5541,7 +6255,7 @@ function makeSpawner(spawnFn, proc) {
             if (settled) return;
             settled = true;
             clearTimeout(timer);
-            resolve5({ code, signal });
+            resolve6({ code, signal });
           };
           const timer = setTimeout(finish, STDERR_DRAIN_MS);
           timer.unref?.();
@@ -5596,13 +6310,13 @@ var systemLauncher = {
     child.stdout?.on("data", (c) => out.push(c));
     child.stderr?.on("data", (c) => err.push(c));
     let closed = false;
-    const exited = new Promise((resolve5) => {
-      child.once("error", (e) => resolve5({ code: null, signal: null, spawnError: e.code ?? "error" }));
+    const exited = new Promise((resolve6) => {
+      child.once("error", (e) => resolve6({ code: null, signal: null, spawnError: e.code ?? "error" }));
       child.once("close", (code, signal) => {
         closed = true;
         out.flush();
         err.flush();
-        resolve5({ code, signal });
+        resolve6({ code, signal });
       });
     });
     return {
@@ -5648,11 +6362,11 @@ var systemLauncher = {
 import { execFile as execFile2 } from "child_process";
 import { connect } from "net";
 function accepts(host, port) {
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     const s = connect({ host, port });
     const done = (v) => {
       s.destroy();
-      resolve5(v);
+      resolve6(v);
     };
     s.setTimeout(500, () => done(false));
     s.once("connect", () => done(true));
@@ -5660,12 +6374,12 @@ function accepts(host, port) {
   });
 }
 function run2(cmd, args) {
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     execFile2(
       cmd,
       args,
       { timeout: 2e3, env: { ...process.env, LC_ALL: "C" }, windowsHide: true },
-      (e, stdout) => resolve5(e && !stdout ? null : String(stdout))
+      (e, stdout) => resolve6(e && !stdout ? null : String(stdout))
     );
   });
 }
@@ -5728,6 +6442,10 @@ var systemPorts = {
   }
 };
 
+// src/buildInfo.ts
+var SENTRY_DSN = true ? "https://50b592efb53dbc1a31cb10d3945c6d52@o4512129906049024.ingest.de.sentry.io/4512174341750864" : "";
+var SENTRY_ENVIRONMENT = true ? "production" : "development";
+
 // src/platform/proxy.ts
 import { execFile as execFile3 } from "child_process";
 
@@ -5754,12 +6472,12 @@ function parseRegProxy(stdout) {
 
 // src/platform/proxy.ts
 function run3(cmd, args) {
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     execFile3(
       cmd,
       args,
       { timeout: 2e3, env: { ...process.env, LC_ALL: "C" }, windowsHide: true },
-      (e, stdout) => resolve5(e && !stdout ? null : String(stdout))
+      (e, stdout) => resolve6(e && !stdout ? null : String(stdout))
     );
   });
 }
@@ -5790,7 +6508,7 @@ function systemProxy(platform = process.platform) {
 }
 
 // src/version.ts
-var VERSION = true ? "0.1.4" : "0.0.0-dev";
+var VERSION = true ? "0.1.6" : "0.0.0-dev";
 
 // src/cli.ts
 if (process.env.HTTPS_PROXY || process.env.https_proxy || process.env.HTTP_PROXY) setGlobalDispatcher(new EnvHttpProxyAgent());
@@ -5833,6 +6551,11 @@ var deps = {
     process.kill(process.pid, signal);
   },
   pid: process.pid,
+  registerSecrets: (values) => {
+    telemetry.registerSecrets(values);
+  },
+  sentryDsn: SENTRY_DSN,
+  sentryEnvironment: SENTRY_ENVIRONMENT,
   systemProxy: () => systemProxy(process.platform)
 };
 var termination = preflightTermination(() => ac.abort(), deps.raise);
@@ -5843,16 +6566,24 @@ var io = processIo(isInteractive({
   noInput: preSeparatorArgv.includes("--no-input"),
   env: process.env
 }));
-process.exitCode = await run(argv, deps, io, ac.signal, COMMANDS);
-await termination.reRaise(async () => {
+var flushStd = async () => {
   await Promise.all([process.stdout, process.stderr].map((s) => new Promise((r) => {
     s.write("", () => r());
   })));
-});
+};
+var telemetry = createTelemetry(deps, { argv });
+process.exitCode = await run(argv, deps, io, ac.signal, COMMANDS, telemetryHooks(deps, io, telemetry, { json }));
+var { drained } = await telemetry.end(ac.signal);
+await termination.reRaise(flushStd);
 if (!ac.signal.aborted) {
   try {
     await maybeNotifyUpdate(deps, io, { json });
   } catch {
   }
 }
-//# sourceMappingURL=cli.js.map
+if (!drained) {
+  await flushStd();
+  process.exit();
+}
+//# sourceMappingURL=cli.js.map
+//# debugId=28c91dc8-dbb9-5c0a-91e3-f368931a4ed3