0sec-cli 0.23.0 → 0.24.1

package/0.js

@@ -2,89 +2,95 @@
 import { createRequire as __0CreateRequire } from "node:module";
 const require = __0CreateRequire(import.meta.url);
 import {
-  Command,
   runStartupUpdate
-} from "./chunks/chunk-OLSKXTQZ.js";
+} from "./chunks/chunk-7UHAXEOV.js";
 import {
+  Command
+} from "./chunks/chunk-WUPN3D37.js";
+import {
+  savedConnectionEnvPatch,
   setHerdrSink
-} from "./chunks/chunk-VDOWARMJ.js";
+} from "./chunks/chunk-BPU6M42R.js";
 import {
-  getSettings,
   installConsolePresentationBridge,
-  installProcessPresentationStreamBridge,
-  maybeLoadCodexAuth,
+  installProcessPresentationStreamBridge
+} from "./chunks/chunk-OOMBOLAF.js";
+import {
   presentationEventBus
-} from "./chunks/chunk-3P3XXSIJ.js";
+} from "./chunks/chunk-56UTQKXO.js";
 import {
+  getSettings,
+  maybeLoadCodexAuth,
   resolveEngagement
-} from "./chunks/chunk-R35KKJA4.js";
+} from "./chunks/chunk-LMP2T4G2.js";
 import {
   source_default
 } from "./chunks/chunk-HLFS6WV2.js";
 import {
   launchConfiguredWorkbench,
   remoteBackendClientId
-} from "./chunks/chunk-HFDSIHTE.js";
+} from "./chunks/chunk-X2IPO5JO.js";
 import {
   createHerdrEventSink,
   maybeSubscribeOperationalEventSink
-} from "./chunks/chunk-4HGGNBKK.js";
-import "./chunks/chunk-QMICC5O2.js";
-import "./chunks/chunk-TPUJZ74W.js";
+} from "./chunks/chunk-ZM6ANQZJ.js";
+import "./chunks/chunk-H5QURBBK.js";
+import "./chunks/chunk-5NFIY2SJ.js";
+import "./chunks/chunk-BOBIAHKA.js";
+import "./chunks/chunk-ILRMLA6J.js";
+import "./chunks/chunk-GVD6SJGH.js";
 import "./chunks/chunk-QCUFBVIZ.js";
-import "./chunks/chunk-NX4H6L4M.js";
-import "./chunks/chunk-62ENS6XO.js";
+import "./chunks/chunk-S2GITRD5.js";
+import "./chunks/chunk-IIBNQTOK.js";
 import "./chunks/chunk-2WNCI664.js";
 import "./chunks/chunk-23DG5YKS.js";
 import "./chunks/chunk-DQTNI3KY.js";
-import "./chunks/chunk-XORZUR2H.js";
-import "./chunks/chunk-LVGZGG63.js";
-import "./chunks/chunk-3ZNI7F42.js";
-import "./chunks/chunk-WIYNYNL2.js";
+import "./chunks/chunk-3WUPCZGF.js";
+import "./chunks/chunk-UJE4WOQS.js";
+import "./chunks/chunk-PJU24AKR.js";
+import "./chunks/chunk-6XMFCVJS.js";
 import "./chunks/chunk-AZ7L3HFD.js";
-import "./chunks/chunk-EJH2TNVH.js";
-import "./chunks/chunk-P7KDN5PK.js";
-import "./chunks/chunk-EH2WTNY7.js";
+import "./chunks/chunk-TVS6WVSK.js";
+import "./chunks/chunk-YSQWZ67M.js";
+import "./chunks/chunk-5WAHHZBF.js";
+import "./chunks/chunk-3LPBJMHB.js";
 import "./chunks/chunk-K2PWUPUI.js";
-import "./chunks/chunk-JEYIWMGL.js";
-import "./chunks/chunk-Y4HJRUFE.js";
+import "./chunks/chunk-X2ZMSRTP.js";
+import "./chunks/chunk-YERUDEXT.js";
 import "./chunks/chunk-UEX7PFSE.js";
-import "./chunks/chunk-3E54JYS4.js";
-import "./chunks/chunk-F344NYUN.js";
-import "./chunks/chunk-YYS2H33A.js";
-import "./chunks/chunk-AAA4PRWK.js";
+import "./chunks/chunk-4ROZFLSR.js";
+import "./chunks/chunk-BD7WULFS.js";
+import "./chunks/chunk-XA2IBHPB.js";
+import "./chunks/chunk-5ETI27Q3.js";
+import "./chunks/chunk-YKWARO3T.js";
 import "./chunks/chunk-SQCBHFWN.js";
-import "./chunks/chunk-GVD6SJGH.js";
-import "./chunks/chunk-UZUELPFW.js";
+import "./chunks/chunk-K74DRDC5.js";
 import "./chunks/chunk-O6KPVYOI.js";
 import "./chunks/chunk-FHC2B7LN.js";
 import "./chunks/chunk-DKSCN2AB.js";
 import "./chunks/chunk-UFHN6RIU.js";
-import "./chunks/chunk-T7ZEVY5G.js";
-import "./chunks/chunk-TO35Y326.js";
+import "./chunks/chunk-BMDG6T7D.js";
+import "./chunks/chunk-GTED3FSZ.js";
 import "./chunks/chunk-IXT64DV5.js";
-import "./chunks/chunk-W5VNCB57.js";
-import "./chunks/chunk-YAEJAZYW.js";
-import "./chunks/chunk-65H3MRBF.js";
-import "./chunks/chunk-CP6HANBE.js";
+import "./chunks/chunk-SU4IHQQI.js";
 import "./chunks/chunk-NJLKFC66.js";
-import "./chunks/chunk-K55B4OH4.js";
-import "./chunks/chunk-BF5FIK7H.js";
+import "./chunks/chunk-NBV4I237.js";
+import "./chunks/chunk-IJ6UPW3H.js";
 import {
   analyticsPipeline,
   configureRunContributionsFromEnvironment
-} from "./chunks/chunk-NI6QYQSK.js";
-import "./chunks/chunk-RS4MAN3Q.js";
-import "./chunks/chunk-UELXHK2Y.js";
+} from "./chunks/chunk-PVJUPIQG.js";
 import {
   eventBus,
   presentationEventSink
-} from "./chunks/chunk-A5QO7N3S.js";
-import "./chunks/chunk-ITES7BCY.js";
+} from "./chunks/chunk-5PFRE522.js";
+import "./chunks/chunk-RS4MAN3Q.js";
+import "./chunks/chunk-CGBDEST2.js";
+import "./chunks/chunk-QNRYOJEB.js";
 import "./chunks/chunk-5IBCBQEH.js";
 import {
   VERSION
-} from "./chunks/chunk-LTEE2JWK.js";
+} from "./chunks/chunk-GXXX7AGH.js";
 import "./chunks/chunk-VIT5ALXF.js";
 import "./chunks/chunk-VCSFCHAJ.js";
 
@@ -110,7 +116,7 @@ import { fileURLToPath } from "node:url";
 var BYPASS_ENV = "ZERO_ALLOW_STALE_SOURCE_DIST";
 function currentBuildCommit() {
   if (true) {
-    return "8f4d9ec0535d64def1bc2c3fc9c917d4ec220cb4";
+    return "42ab1fa74044b79edd6b8f0990b2afa7ccfd824b";
   }
   return void 0;
 }
@@ -230,9 +236,14 @@ setHerdrSink(herdrSink);
 enforceSourceDistFreshness({ entryUrl: import.meta.url });
 if (!isWorkbenchManagement && !isRemoteBackendClient) await runStartupUpdate(VERSION);
 async function buildProgram() {
-  const c = await import("./chunks/commands-PBDAOZKA.js");
+  const c = await import("./chunks/commands-FRPOFIO4.js");
   const program = new Command();
   program.name("0").description("Open-source multi-model security research harness").version(VERSION).enablePositionalOptions();
+  program.hook("preAction", (_command, action) => {
+    if (!isWorkbenchManagement && !isRemoteBackendClient && ["review", "scan"].includes(action.name())) {
+      Object.assign(process.env, savedConnectionEnvPatch(process.env));
+    }
+  });
   c.registerScanCommand(program);
   c.registerResumeCommand(program);
   c.registerReplayCommand(program);
@@ -245,6 +256,7 @@ async function buildProgram() {
   c.registerDoctorCommand(program);
   c.registerDashboardCommand(program);
   c.registerTuiCommand(program);
+  c.registerTeamCommand(program);
   c.registerOrchestrateCommand(program);
   c.registerDbCommand(program);
   c.registerMcpServerCommand(program);
@@ -280,6 +292,7 @@ async function buildProgram() {
   c.registerCloudCommand(program);
   c.registerXnuFuzzCommand(program);
   c.registerResearchCommand(program);
+  c.registerWorkerCommand(program);
   c.registerRadarCommand(program);
   c.registerTimelineCommand(program);
   c.registerAgentAssureCommand(program);
@@ -287,41 +300,27 @@ async function buildProgram() {
   c.registerPluginCommand(program);
   c.registerThemeCommand(program);
   c.registerEvolveCommand(program);
+  c.registerLearningCommand(program);
   c.registerConfigCommand(program);
   c.registerWorkbenchCommand(program);
   c.registerReviewChecksCommand(program);
   c.registerHackstoreCommand(program);
   return program;
 }
-async function showInteractiveMenu() {
-  const { isBunRuntime } = await import("./chunks/runtime-4TAJFVF7.js");
-  if (isBunRuntime()) {
-    const { showOpenTuiHome } = await import("./chunks/run-VH4OIDKF.js");
-    await showOpenTuiHome();
-    return;
-  }
-  console.log("");
-  console.log(`  ${source_default.bold("0")} ${source_default.dim(`v${VERSION}`)}`);
-  console.log("");
-  console.log(`  ${source_default.dim("From v0.9.0 onwards, 0 ships as a self-contained binary.")}`);
-  console.log(`  ${source_default.dim("The full TUI (mission control + live scan view) needs Bun's runtime.")}`);
-  console.log("");
-  console.log(`  ${source_default.bold("Install")} (single curl, no Node / Bun required):`);
-  console.log(`    curl -fsSL https://raw.githubusercontent.com/0sec-labs/0/main/install.sh | bash`);
-  console.log("");
-  console.log(`  ${source_default.dim("After install, run:")}`);
-  console.log(`    0 scan --target https://example.com`);
-  console.log(`    0 --help`);
-  console.log("");
+async function showWebConsole() {
+  const { registerDashboardCommand } = await import("./chunks/dashboard-5HDSNBAU.js");
+  const program = new Command();
+  registerDashboardCommand(program);
+  await program.parseAsync(["web"], { from: "user" });
 }
 process.once("beforeExit", () => {
   void analyticsPipeline.flushNow().catch(() => {
   });
 });
 var userArgs = process.argv.slice(2);
-var knownCommands = ["scan", "resume", "replay", "history", "findings", "secure", "review", "fix", "audit", "deps", "doctor", "dashboard", "web", "tui", "watch", "orchestrate", "db", "mcp-server", "workflow", "runs", "triage", "eval", "bench", "ingest", "kernel", "disclose", "verify", "exploit", "hunt", "recency-hunt", "deep-review", "lens-synth", "memsafety", "assumption-hunt", "specdrift", "protocol-check", "cve", "upgrade", "update", "h1", "intel", "recon", "js-recon", "npm-discovery", "identity", "adgraph", "entragraph", "cloud", "xnu-fuzz", "research", "radar", "timeline", "console", "agent-assure", "binary", "plugin", "theme", "config", "workbench", "checks", "evolve", "hackstore", "hack", "store", "help"];
+var knownCommands = ["scan", "resume", "replay", "history", "findings", "secure", "review", "fix", "audit", "deps", "doctor", "dashboard", "web", "chat", "team", "tui", "watch", "orchestrate", "db", "mcp-server", "workflow", "runs", "sessions", "triage", "eval", "bench", "ingest", "kernel", "disclose", "verify", "exploit", "hunt", "recency-hunt", "deep-review", "lens-synth", "memsafety", "assumption-hunt", "specdrift", "protocol-check", "cve", "upgrade", "update", "h1", "intel", "recon", "js-recon", "npm-discovery", "identity", "adgraph", "entragraph", "cloud", "xnu-fuzz", "research", "worker", "radar", "timeline", "console", "agent-assure", "binary", "plugin", "theme", "config", "workbench", "checks", "evolve", "learning", "hackstore", "hack", "store", "help"];
 if (userArgs.length === 0) {
-  showInteractiveMenu().catch((err) => {
+  showWebConsole().catch((err) => {
     console.error(source_default.red(err instanceof Error ? err.message : String(err)));
     process.exit(2);
   });

package/README.md

@@ -1,6 +1,6 @@
 <p align="center">
   <a href="https://0.security/">
-    <img src="assets/readme-cover.png" alt="0security terminal security research workflow" width="100%">
+    <img src="assets/readme-cover.png" alt="0security landscape with Zero and the security research mission" width="100%">
   </a>
 </p>
 
@@ -12,7 +12,7 @@
 </p>
 
 <p align="center">
-  <strong>Open-source security workflows in your browser, terminal, or coding agent.</strong><br/>
+  <strong>Open-source security workflows in your browser or coding agent.</strong><br/>
   <sub>Backed by Y Combinator · The Swiss Applied AI &amp; Cybersecurity Research Lab</sub><br/>
   <a href="https://0.security/">0.security</a> ·
   <a href="https://docs.0.security/">Documentation</a> ·
@@ -39,7 +39,7 @@ export PATH="$HOME/.0/bin:$PATH"
 0 web
 ```
 
-**Browser:** `0 web` · **Terminal:** `0`
+**Command Center (browser):** `0 web` · **Terminal:** `0`
 
 Configure a [model provider](https://docs.0.security/api-keys/) before running AI workflows.
 
@@ -47,6 +47,10 @@ Configure a [model provider](https://docs.0.security/api-keys/) before running A
 
 Browser, CLI, and MCP share one workflow runner with retained results.
 
+Findings are prioritized by business impact: affected customers and data, fraud,
+critical services, and disruption. Each priority includes a rationale; missing
+context stays **Not assessed**. CVSS remains available as technical severity.
+
 | Work | Built-in templates |
 | --- | --- |
 | Assess | Repositories, dependencies, APIs, web configuration, scoped penetration tests, package behavior, smart contracts, native code |
@@ -57,6 +61,11 @@ Browser, CLI, and MCP share one workflow runner with retained results.
 Start from 12 templates, customize steps, and run manually or with browser triggers and schedules.
 **Template:** starting point · **Workflow:** reusable steps · **Run:** one execution.
 
+**Learning** retains local run activity, source-grounded notes and evaluated
+improvement history. Saved workflows keep immutable revisions and support restore.
+Use `0 learning status` or open Learning in the browser.
+[Learning documentation](https://docs.0.security/learning/).
+
 ```bash
 0 workflow list --templates
 0 workflow run --template security-research \
@@ -67,14 +76,15 @@ Start from 12 templates, customize steps, and run manually or with browser trigg
 
 [Workflow guide: inputs, limits, and results](https://docs.0.security/workflow/).
 
-<details>
-  <summary>Preview the web app</summary>
+## See Zero at work
 
-![Customer API security review in the Zero web app](assets/screenshots/web-chat.jpg)
+A source review of the included [demo API](assets/examples/demo-api/), with code locations and suggested fixes.
 
-![Customer API security workflow in the Zero web app](assets/screenshots/web-workflow.jpg)
+![Demo API source review in Zero](assets/screenshots/web-chat.jpg)
 
-</details>
+Start a workflow from a template and edit its steps.
+
+![Workflow editor in Zero](assets/screenshots/web-workflow.jpg)
 
 ## Use 0 from another agent
 
@@ -89,6 +99,20 @@ For a registered remote engine, use `0 mcp-server --workflows --backend producti
 0's model provider is separate from the connecting agent's session.
 
 Browser chat's **Connect an external agent** copies a setup prompt.
+CLI and MCP workflow clients automatically attach to a running local web engine
+for the same workspace and control database. To attach explicitly to the sessions
+and runs already open in an engine:
+
+```bash
+0 mcp-server --workflows --engine-url http://127.0.0.1:3000 \
+  --engine-token-env ENGINE_TOKEN --session SESSION_ID
+0 sessions list --engine-url http://127.0.0.1:3000 --engine-token-env ENGINE_TOKEN
+```
+
+Set `ENGINE_TOKEN` to the engine's configured bearer credential. Attached clients
+share the browser's session and run lifecycle; disconnecting leaves the engine
+running. Omit `--session` to create a session under the engine's admission grants.
+
 See [MCP setup and individual tools](https://docs.0.security/integrations/) or
 [local and remote engines](https://docs.0.security/engine-connections/).
 
@@ -105,15 +129,17 @@ More guides: [installation](https://docs.0.security/getting-started/) ·
 ## Development
 
 Install dependencies, run `npm run dev`, and open the printed browser address.
-See [CONTRIBUTING.md](CONTRIBUTING.md).
+See [CONTRIBUTING.md](https://github.com/0sec-labs/0/blob/main/.github/CONTRIBUTING.md).
 
 ## Status and safety
 
 **Research preview.** Assess authorized systems and review findings and fixes.
-The terminal defaults to YOLO; use `0 console --mode standard` for confirmations.
+Run `0` or `0 web` to open the browser console without an account.
+The interactive terminal UI is retired; headless CLI, automation, MCP and binary commands remain available.
+Use `0 chat --prompt "your request"` for one-shot automation; set `--mode standard` for explicit scope checks.
 The optional [scope plugin](https://docs.0.security/scope/) enforces target boundaries.
 
-Report vulnerabilities through [SECURITY.md](SECURITY.md).
+Report vulnerabilities through [SECURITY.md](https://github.com/0sec-labs/0/blob/main/.github/SECURITY.md).
 Licensed under [MIT](LICENSE-MIT) OR [Apache-2.0](LICENSE).
 
 [Public disclosures and upstream fixes](https://0.security/research/#disclosures).

package/chunks/{adapt-loop-V3JFWOKC.js → adapt-loop-L77BWMNE.js}

@@ -5,10 +5,10 @@ import {
   adaptAndVerify,
   applyUnifiedDiff,
   renderAdaptationPrompt
-} from "./chunk-3ZNI7F42.js";
-import "./chunk-3E54JYS4.js";
-import "./chunk-F344NYUN.js";
-import "./chunk-LTEE2JWK.js";
+} from "./chunk-5NFIY2SJ.js";
+import "./chunk-3LPBJMHB.js";
+import "./chunk-XA2IBHPB.js";
+import "./chunk-GXXX7AGH.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{artifact-scraper-NYKUF2M5.js → artifact-scraper-BV67RAP5.js}

@@ -14,8 +14,8 @@ import {
   parseUbuntuTracker,
   scoreCodeCandidate,
   scoreRepoCandidate
-} from "./chunk-W5VNCB57.js";
-import "./chunk-LTEE2JWK.js";
+} from "./chunk-SU4IHQQI.js";
+import "./chunk-GXXX7AGH.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{assumption-mining-ZX3YVWEH.js → assumption-mining-RPVR77A3.js}

@@ -24,33 +24,33 @@ import {
   scoreDualViewWeaponizability,
   storeAssumptionModel,
   subjectSelfEnforces
-} from "./chunk-EJH2TNVH.js";
+} from "./chunk-TVS6WVSK.js";
 import {
   composeGate,
   makeSkepticVerifier
-} from "./chunk-P7KDN5PK.js";
-import "./chunk-EH2WTNY7.js";
+} from "./chunk-YSQWZ67M.js";
+import "./chunk-5WAHHZBF.js";
+import "./chunk-3LPBJMHB.js";
 import "./chunk-K2PWUPUI.js";
-import "./chunk-JEYIWMGL.js";
-import "./chunk-Y4HJRUFE.js";
+import "./chunk-X2ZMSRTP.js";
+import "./chunk-YERUDEXT.js";
 import "./chunk-UEX7PFSE.js";
-import "./chunk-3E54JYS4.js";
-import "./chunk-F344NYUN.js";
-import "./chunk-AAA4PRWK.js";
-import "./chunk-UZUELPFW.js";
+import "./chunk-4ROZFLSR.js";
+import "./chunk-BD7WULFS.js";
+import "./chunk-XA2IBHPB.js";
+import "./chunk-YKWARO3T.js";
+import "./chunk-K74DRDC5.js";
 import "./chunk-O6KPVYOI.js";
-import "./chunk-T7ZEVY5G.js";
+import "./chunk-BMDG6T7D.js";
 import "./chunk-IXT64DV5.js";
-import "./chunk-65H3MRBF.js";
-import "./chunk-CP6HANBE.js";
-import "./chunk-BF5FIK7H.js";
-import "./chunk-NI6QYQSK.js";
+import "./chunk-IJ6UPW3H.js";
+import "./chunk-PVJUPIQG.js";
+import "./chunk-5PFRE522.js";
 import "./chunk-RS4MAN3Q.js";
-import "./chunk-UELXHK2Y.js";
-import "./chunk-A5QO7N3S.js";
-import "./chunk-ITES7BCY.js";
+import "./chunk-CGBDEST2.js";
+import "./chunk-QNRYOJEB.js";
 import "./chunk-5IBCBQEH.js";
-import "./chunk-LTEE2JWK.js";
+import "./chunk-GXXX7AGH.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{backend-connections-H52NIVH2.js → backend-connections-ACIXNYZN.js}

@@ -8,9 +8,9 @@ import {
   createBackendHandshake,
   handleBackendConnectionRequest,
   loadBackendConnectionConfig
-} from "./chunk-WYNZFNMF.js";
-import "./chunk-T7ZEVY5G.js";
-import "./chunk-LTEE2JWK.js";
+} from "./chunk-Q7JKIKKF.js";
+import "./chunk-BMDG6T7D.js";
+import "./chunk-GXXX7AGH.js";
 import "./chunk-VIT5ALXF.js";
 import "./chunk-VCSFCHAJ.js";
 export {

package/chunks/{chunk-MQJVU2GZ.js → chunk-2NBZZFRG.js}

@@ -7,23 +7,31 @@ import {
   loadGlobalSettings,
   loadWorkbenchConfig,
   resolveWorkbenchGuestSettings,
+  validateWorkbenchSourceLesson,
   workbenchConfigPath,
   workbenchNetworkEnabled
-} from "./chunk-HFDSIHTE.js";
+} from "./chunk-X2IPO5JO.js";
 import {
   createWorkbenchProviderBroker
-} from "./chunk-4HGGNBKK.js";
+} from "./chunk-ZM6ANQZJ.js";
 import {
+  HuntMemoryStore,
+  LearningService
+} from "./chunk-5WAHHZBF.js";
+import {
+  LearningStore,
+  learningArtifactDigest,
+  learningProjectId,
   osecDB
-} from "./chunk-T7ZEVY5G.js";
+} from "./chunk-BMDG6T7D.js";
 import {
   isAdmittedSmolvmWorkbench
-} from "./chunk-NI6QYQSK.js";
+} from "./chunk-PVJUPIQG.js";
 import {
   SERVICE_PLUGIN_CATALOG,
   findingSchema,
   homeStateDir
-} from "./chunk-LTEE2JWK.js";
+} from "./chunk-GXXX7AGH.js";
 
 // packages/cli/src/web/service-plugins.ts
 import { constants, closeSync, fstatSync, lstatSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, writeFileSync, chmodSync } from "node:fs";
@@ -32,6 +40,7 @@ import { randomUUID as randomUUID2 } from "node:crypto";
 
 // packages/cli/src/console-execution.ts
 import { existsSync, realpathSync } from "node:fs";
+import { relative, resolve, sep } from "node:path";
 import { randomUUID } from "node:crypto";
 function consoleExecutionProfile(homeDir) {
   if (process.platform === "linux" && isAdmittedSmolvmWorkbench()) return "local";
@@ -53,19 +62,80 @@ function createIsolatedConsoleSession(config, options = {}) {
   const models = [.../* @__PURE__ */ new Set([model, ...Object.values(routing?.agentModels ?? {}).filter((value) => value !== "auto")])];
   if (!runtime.workbenchCredentialResolver) throw new Error("The selected runtime cannot bind its account to the host provider broker.");
   const broker = createWorkbenchProviderBroker({ provider, models, resolveCredentials: runtime.workbenchCredentialResolver() });
-  const { runtime: _runtime, ...guestConfig } = config;
+  const { runtime: _runtime, learningStore: hostLearningStore, huntMemoryStore: hostMemoryStore, sourceLessonHints: _hostHints, ...guestConfig } = config;
+  const learningEnabled = config.codebaseLearning === true && config.role !== "verify";
+  if (/^(1|true)$/i.test(process.env.ZERO_DISABLE_HUNT_MEMORY ?? "")) guestConfig.codebaseLearning = false;
+  let memory = hostMemoryStore;
+  const hostMemory = () => memory ??= new HuntMemoryStore({ home: options.homeDir });
+  const withLearning = (use) => {
+    const store = hostLearningStore ?? new LearningStore(options.dbPath);
+    try {
+      return use(new LearningService(store));
+    } finally {
+      if (!hostLearningStore) store.close();
+    }
+  };
+  const approvedWorkspace = realpathSync(workbench.workspaceRoot ?? options.workspaceRoot ?? config.workspaceRoot ?? process.cwd());
   const scanId = config.scanId ?? `console-${randomUUID()}`;
   try {
     return createWorkbenchConsoleSession({
-      config: { ...guestConfig, scanId, workspaceRoot: realpathSync(workbench.workspaceRoot ?? options.workspaceRoot ?? config.workspaceRoot ?? process.cwd()) },
+      config: { ...guestConfig, scanId, workspaceRoot: approvedWorkspace },
       workbench,
       selection: { provider, model, contextWindowTokens: config.contextWindowTokens, ...routing },
       provider: { ...broker.grant, request: broker.request, close: broker.close },
       pluginHomeDir: options.homeDir,
-      assets: currentWorkbenchAssets(),
+      assets: options.assets ?? currentWorkbenchAssets(),
       guestSettings: resolveWorkbenchGuestSettings(loadGlobalSettings(options.homeDir)),
       network: workbenchNetworkEnabled(),
       onExecution: options.onExecution,
+      onSourceLesson: (artifact, context) => {
+        if (!learningEnabled || /^(1|true)$/i.test(process.env.ZERO_DISABLE_HUNT_MEMORY ?? "")) return;
+        if (realpathSync(context.workspaceRoot) !== approvedWorkspace) throw new Error("Source lesson workspace differs from host grant");
+        const lesson = validateWorkbenchSourceLesson(artifact, approvedWorkspace, context.scopePath);
+        const memory2 = hostMemory();
+        const paths = lesson.sourceLinks.map((link) => relative(context.scopePath, resolve(context.workspaceRoot, link.path)).split(sep).join("/"));
+        const prior = memory2.all().find((note) => note.codebase?.root === realpathSync(context.scopePath) && note.title === lesson.title && note.summary === lesson.summary && JSON.stringify(note.codebase?.files.map((file) => ({ path: file.path, hash: file.digest }))) === JSON.stringify(lesson.sourceLinks.map((link, index) => ({ path: paths[index], hash: link.hash }))));
+        if (!prior) memory2.rememberCodebase({ root: context.scopePath, paths, title: lesson.title, summary: lesson.summary, source: `smolvm:${context.scanId}` });
+        withLearning((service) => service.importCodebaseNotes(learningProjectId(context.scopePath), context.scopePath, memory2, 8));
+      },
+      readSourceLessons: (context) => {
+        if (!learningEnabled || /^(1|true)$/i.test(process.env.ZERO_DISABLE_HUNT_MEMORY ?? "")) return [];
+        if (realpathSync(context.workspaceRoot) !== approvedWorkspace) return [];
+        const memory2 = hostMemory();
+        return withLearning((service) => {
+          const entries = service.importCodebaseNotes(learningProjectId(context.scopePath), context.scopePath, memory2, 8);
+          return memory2.recallCodebase(context.scopePath, 6).flatMap((note) => {
+            const sourceLinks = note.codebase.files.map((file) => ({ path: file.path, hash: file.digest }));
+            if (!entries.some((entry) => entry.status === "current" && entry.summary === note.summary && JSON.stringify(entry.sourceLinks) === JSON.stringify(sourceLinks))) return [];
+            const lesson = { title: note.title, summary: note.summary, sourceLinks: sourceLinks.map((link) => ({ ...link, path: relative(context.workspaceRoot, resolve(context.scopePath, link.path)).split(sep).join("/") })) };
+            try {
+              return [validateWorkbenchSourceLesson(lesson, context.workspaceRoot, context.scopePath)];
+            } catch {
+              return [];
+            }
+          });
+        });
+      },
+      onSourceContext: (artifact, context) => {
+        if (!learningEnabled || /^(1|true)$/i.test(process.env.ZERO_DISABLE_HUNT_MEMORY ?? "")) return;
+        const store = new LearningStore(options.dbPath);
+        try {
+          const digest = learningArtifactDigest(JSON.stringify(artifact.sourceLinks));
+          store.recordExperience({
+            idempotencyKey: `vm-source:${learningArtifactDigest(context.runId + digest)}`,
+            projectId: learningProjectId(context.workspaceRoot),
+            kind: "source-context",
+            outcome: "current",
+            evidenceStrength: "hypothesis",
+            summary: "Source references retained from an isolated workspace.",
+            runId: context.runId,
+            sourceLinks: artifact.sourceLinks,
+            evidenceDigests: [digest]
+          });
+        } finally {
+          store.close();
+        }
+      },
       onFindings: (findings, completion) => {
         const validated = findings.map((finding) => findingSchema.parse(finding));
         const db = new osecDB(options.dbPath);
@@ -217,7 +287,7 @@ var ServicePluginServices = class {
   }
   async #probe(connection) {
     try {
-      const probe = this.#options.probe ?? (await import("./dist-4LGRIBOC.js")).testServicePluginConnection;
+      const probe = this.#options.probe ?? (await import("./dist-TQMHMSBZ.js")).testServicePluginConnection;
       const result = await probe(connection);
       if (!Array.isArray(result.tools) || result.tools.length > 512 || result.tools.some((tool) => typeof tool.name !== "string" || tool.name.length > 256 || typeof tool.description !== "string" || tool.description.length > 16384)) throw new Error("Invalid tool catalog.");
       const configurations = [...readStore(this.#options.homeDir), connection];