@eyeauras/insight-cli 0.2.4 → 0.3.0

package/dist/src/contexts.js

@@ -167,8 +167,8 @@ export class GhidraContexts {
         }
     }
     async verified(binding, target, verifySource = true) {
-        const root = resolve(binding.root);
-        if (!root.startsWith(resolve(this.directory()) + sep) || await realpath(root) !== root || binding.target !== target.id || binding.runtimeFingerprint !== this.inputs.fingerprint)
+        const root = await realpath(binding.root);
+        if (!root.startsWith(resolve(this.directory()) + sep) || binding.target !== target.id || binding.runtimeFingerprint !== this.inputs.fingerprint)
             fail('binding', 'Native context receipt does not match its profile, target or runtime.');
         if (stable(JSON.parse(await readFile(join(root, 'process.json'), 'utf8'))) !== stable(binding))
             fail('binding', 'Native context receipt changed.');
@@ -219,11 +219,11 @@ export class GhidraContexts {
         this.running.delete(binding.root);
     }
     async debuggerReleased(binding) {
-        const root = resolve(binding.root);
-        if (!root.startsWith(resolve(this.directory()) + sep) || await realpath(root) !== root ||
+        const root = await realpath(binding.root);
+        if (!root.startsWith(resolve(this.directory()) + sep) ||
             stable(JSON.parse(await readFile(join(root, 'process.json'), 'utf8'))) !== stable(binding))
             fail('binding', 'Debugger lifetime binding moved outside its owned context.');
-        const directory = join(binding.root, 'debugger-supervisors'), deadline = Date.now() + 15000;
+        const directory = join(root, 'debugger-supervisors'), deadline = Date.now() + 15000;
         for (;;) {
             let names;
             try {
@@ -305,7 +305,7 @@ export class GhidraContexts {
             if (await realpath(root) !== resolve(root))
                 fail('binding', 'Legacy initial-import stage moved outside owned storage.');
             const binding = JSON.parse(await readFile(join(root, 'process.json'), 'utf8'));
-            if (binding.root !== root || binding.target !== target.id || binding.kind !== 'bootstrap' || binding.program !== programPath(target.id))
+            if (await realpath(binding.root) !== root || binding.target !== target.id || binding.kind !== 'bootstrap' || binding.program !== programPath(target.id))
                 fail('binding', 'Legacy bootstrap receipt changed.');
             let stopped = false;
             try {
@@ -872,8 +872,8 @@ public class ${name} extends GhidraScript {
     }
     async closed(scope) {
         const context = this.workspace.context(scope), path = join(this.directory(), 'context', context.id, 'current.json');
-        const binding = JSON.parse(await readFile(path, 'utf8')), root = resolve(binding.root);
-        if (!root.startsWith(resolve(this.directory()) + sep) || await realpath(root) !== root || binding.context !== context.id || binding.target !== scope.target ||
+        const binding = JSON.parse(await readFile(path, 'utf8')), root = await realpath(binding.root);
+        if (!root.startsWith(resolve(this.directory()) + sep) || binding.context !== context.id || binding.target !== scope.target ||
             stable(JSON.parse(await readFile(join(root, 'process.json'), 'utf8'))) !== stable(binding))
             fail('binding', 'Closed context receipt changed.');
         try {

package/dist/src/ghidra-processes.js

@@ -5,16 +5,17 @@ import { serverIdentity, stopLocalServer } from './server.js';
 import { HttpBridge } from './transport.js';
 import { registerExistingProcess } from './tool-runtime/supervisor.js';
 import { fail } from './model.js';
+import { analysisDirectory } from './analysis-storage.js';
 async function ownedPath(c, path) {
     if (typeof path !== 'string')
         fail('binding', 'Tool resource moved outside this profile.');
-    const supplied = resolve(path), profile = resolve(c.appArguments.AppDataDirectory), canonical = await realpath(profile);
-    const base = supplied.startsWith(profile + sep) ? profile : supplied.startsWith(canonical + sep) ? canonical : undefined;
+    const supplied = resolve(path), profile = resolve(c.appArguments.AppDataDirectory), canonical = await realpath(profile), analysis = await realpath(analysisDirectory(c));
+    const base = supplied.startsWith(profile + sep) ? profile : supplied.startsWith(canonical + sep) ? canonical : supplied.startsWith(analysis + sep) ? analysis : undefined;
     if (!base)
         fail('binding', 'Tool resource moved outside this profile.');
     // Keep Factory's raw AppData identity in process records, but compare native resources
     // under its canonical profile. Accept the parent alias, never a replaced child link.
-    const expected = join(canonical, relative(base, supplied));
+    const suffix = relative(base, supplied), expected = base === analysis ? supplied : ['workspace', 'runtime', 'materials', 'temp'].some(tree => suffix === tree || suffix.startsWith(tree + sep)) ? join(analysis, suffix) : join(canonical, suffix);
     if (await realpath(supplied) !== expected)
         fail('binding', 'Tool resource moved outside this profile.');
     return expected;
@@ -53,7 +54,7 @@ export function ghidraProcessHooks(workspace, close) {
     return {
         verify: verifyGhidraProcess,
         async discover(c) {
-            const directory = c.appArguments.AppDataDirectory, executable = runtimeSelection(directory)?.java ?? String(c.profile.values.java ?? 'unverified-legacy-executable');
+            const directory = c.appArguments.AppDataDirectory, executable = runtimeSelection(directory, analysisDirectory(c))?.java ?? String(c.profile.values.java ?? 'unverified-legacy-executable');
             async function walk(path, depth = 0) {
                 if (depth > 6)
                     return;

package/dist/src/initial-model.js

@@ -54,7 +54,8 @@ export async function initializeModel(workspace, target, binding, server, finger
         intent = await initialIntent(workspace, target.id);
     }
     if (!intent || typeof intent.id !== 'string' || !/^[a-f0-9-]{36}$/.test(intent.id) ||
-        Object.entries(expected).some(([key, value]) => stable(intent[key]) !== stable(value)))
+        Object.entries(expected).filter(([key]) => key !== 'input').some(([key, value]) => stable(intent[key]) !== stable(value)) ||
+        typeof intent.input !== 'string' || await realpath(intent.input) !== expected.input)
         fail('binding', 'Retained initial model differs from its input, load settings, runtime or repository authority.');
     if (workspace.model(target.id).state === 'opening')
         workspace.beginModelInitialization(target.id);

package/dist/src/native-inputs.js

@@ -81,7 +81,7 @@ export async function nativeRuntimeFingerprint(ghidraVersion, files) {
 }
 export async function nativeInputs(values, directory, c) {
     if (directory)
-        values = runtimeValues(dirname(directory), values);
+        values = runtimeValues(c?.appArguments.AppDataDirectory ?? dirname(directory), values, typeof values.analysisDirectory === 'string' ? values.analysisDirectory : undefined);
     if (!values.java || !values.ghidraHome)
         fail('configuration', 'Ghidra is not installed. Run insight-cli ghidra install, or supply external runtime paths.');
     const requested = [text(values.java, 4096), text(values.ghidraHome, 4096), text(values.mcpJar ?? packagedMcpJar, 4096)];
@@ -118,7 +118,7 @@ export async function nativeInputs(values, directory, c) {
     const files = await nativeRuntimeFiles(ghidraHome, java);
     const baseFingerprint = await nativeRuntimeFingerprint(ghidraVersion, [...files, { name: 'bridge/GhidraMCP-7.0.0.jar', path: mcpJar }]);
     if (directory) {
-        const selected = runtimeSelection(dirname(directory));
+        const selected = runtimeSelection(c?.appArguments.AppDataDirectory ?? dirname(directory), typeof values.analysisDirectory === 'string' ? values.analysisDirectory : undefined);
         if (selected && selected.fingerprint !== baseFingerprint)
             fail('binding', 'Selected runtime inputs differ from their installation receipt; reinstall or restore the verified files.');
     }

package/dist/src/runtime-manager.js

@@ -1,4 +1,5 @@
 import { runTool } from './tool-runtime/run.js';
+import { analysisDirectory } from './analysis-storage.js';
 import { readFile, mkdir, rename, rm, realpath, readdir, stat, cp } from 'node:fs/promises';
 import { existsSync, realpathSync } from 'node:fs';
 import { join, dirname, resolve, delimiter, basename } from 'node:path';
@@ -104,9 +105,9 @@ export class RuntimeManager {
     }
     // Canonicalize storage once the profile exists, without creating it for passive status.
     // Keep the Factory directory for shared process/lock identity and existing run receipts.
-    get root() { return runtimeRoot(existsSync(this.directory) ? realpathSync.native(this.directory) : this.directory); }
+    get root() { const root = runtimeRoot(existsSync(this.directory) ? realpathSync.native(this.directory) : this.directory); return existsSync(root) ? realpathSync.native(root) : root; }
     async status() {
-        const selected = runtimeSelection(this.directory), values = selected ? runtimeValuesForStatus(selected, this.c.profile.values) : this.c.profile.values;
+        const selected = runtimeSelection(this.directory, analysisDirectory(this.c)), values = selected ? runtimeValuesForStatus(selected, this.c.profile.values) : this.c.profile.values;
         const java = typeof values.java === 'string' ? values.java : undefined, home = typeof values.ghidraHome === 'string' ? values.ghidraHome : undefined;
         const missing = [];
         if (!java || !existsSync(java))
@@ -203,7 +204,7 @@ export class RuntimeManager {
             for (const name of names) {
                 if (!/^[a-f0-9-]{36}$/.test(name))
                     continue;
-                const root = join(this.root, parent, name, ...(parent === 'stages' ? ['validation'] : []));
+                const root = join(analysisDirectory(this.c), 'runtime', parent, name, ...(parent === 'stages' ? ['validation'] : []));
                 if (existsSync(join(root, 'server/local.json'))) {
                     if (await realpath(root) !== resolve(root))
                         fail('binding', 'Retained runtime probe moved outside its owned storage.');
@@ -285,7 +286,7 @@ export class RuntimeManager {
         return withToolLock(this.directory, 'ghidra', async () => {
             await assertUnused(this.directory, 'ghidra');
             await this.cleanupProbes();
-            const selected = runtimeSelection(this.directory);
+            const selected = runtimeSelection(this.directory, analysisDirectory(this.c));
             if (!selected)
                 fail('configuration', 'No managed selection exists; externally configured profile paths are never removed.');
             if (purgeCache && selected.id) {
@@ -339,7 +340,7 @@ export class RuntimeManager {
     }
     async doctor() {
         await this.cleanupProbes();
-        const root = join(this.root, 'checks', randomUUID()), values = runtimeValues(this.directory, this.c.profile.values);
+        const root = join(analysisDirectory(this.c), 'runtime/checks', randomUUID()), values = runtimeValues(this.directory, this.c.profile.values, analysisDirectory(this.c));
         const inputs = await nativeInputs(values, undefined, this.c), native = await this.probe(inputs, root);
         let debuggerCheck = { state: 'host_specific' };
         if (managedGhidraDebugger())

package/dist/src/runtime-selection.d.ts

@@ -9,5 +9,5 @@ export interface RuntimeSelection {
     uninstalledAt?: string;
 }
 export declare const runtimeRoot: (directory: string) => string;
-export declare function runtimeSelection(directory: string): RuntimeSelection | undefined;
-export declare function runtimeValues(directory: string, values: Record<string, unknown>): Record<string, unknown>;
+export declare function runtimeSelection(directory: string, analysis?: string): RuntimeSelection | undefined;
+export declare function runtimeValues(directory: string, values: Record<string, unknown>, analysis?: string): Record<string, unknown>;

package/dist/src/runtime-selection.js

@@ -1,8 +1,8 @@
 import { readFileSync, existsSync, realpathSync } from 'node:fs';
 import { join, isAbsolute, resolve } from 'node:path';
-import { fail, object } from './model.js';
+import { fail, object, digest } from './model.js';
 export const runtimeRoot = (directory) => join(directory, 'runtime');
-export function runtimeSelection(directory) {
+export function runtimeSelection(directory, analysis = directory) {
     const path = join(runtimeRoot(directory), 'selection.json');
     if (!existsSync(path))
         return;
@@ -15,23 +15,30 @@ export function runtimeSelection(directory) {
             fail('binding', 'Managed runtime moved outside its owned installation.');
         // Workspace resolves AppData physically; older install receipts can retain a profile
         // alias such as /tmp -> /private/tmp. Accept that same profile, never an inner escape.
-        let profile, recorded, home;
+        let profile, recorded, owned, home, retained = false;
         try {
             profile = realpathSync.native(directory);
             recorded = realpathSync.native(recordedProfile);
+            owned = realpathSync.native(analysis);
+            if (recorded !== profile && recorded !== owned) {
+                const marker = object(JSON.parse(readFileSync(join(recorded, '.insight-analysis.json'), 'utf8')));
+                retained = marker.schema === 1 && marker.binding === digest(profile);
+            }
+            if (realpathSync.native(runtimeRoot(directory)) !== join(owned, 'runtime') || realpathSync.native(runtimeRoot(recordedProfile)) !== join(owned, 'runtime'))
+                fail('binding', 'Managed runtime root differs from its configured analysis owner.');
             if (existsSync(value.ghidraHome))
                 home = realpathSync.native(value.ghidraHome);
         }
         catch {
             fail('binding', 'Managed runtime profile ownership could not be verified.');
         }
-        if (recorded !== profile || home !== undefined && home !== join(runtimeRoot(profile), 'installations', id, 'ghidra'))
+        if (recorded !== profile && recorded !== owned && !retained || home !== undefined && home !== join(runtimeRoot(owned), 'installations', id, 'ghidra'))
             fail('binding', 'Managed runtime moved outside its owned installation.');
     }
     return value;
 }
-export function runtimeValues(directory, values) {
-    const selected = runtimeSelection(directory);
+export function runtimeValues(directory, values, analysis) {
+    const selected = runtimeSelection(directory, analysis);
     if (!selected)
         return values;
     if (selected.uninstalledAt)

package/dist/src/saved-materials.js

@@ -3,6 +3,7 @@ import { createHash, randomUUID } from 'node:crypto';
 import { constants } from 'node:fs';
 import { lstat, mkdir, open, opendir, realpath, rename, rm } from 'node:fs/promises';
 import { basename, isAbsolute, join, relative, resolve, sep } from 'node:path';
+import { analysisDirectory } from './analysis-storage.js';
 const maximumEntries = 100_000, maximumDepth = 128;
 function fail(code, message) { throw new CliError(message, { code: 'artifacts.' + code }); }
 function check(signal) { if (signal?.aborted)
@@ -190,7 +191,7 @@ export function artifactsCommands() {
             command('save <path>', 'Save a complete independent copy of a file or directory in this profile', ({ args }, context) => {
                 if (typeof args.path !== 'string' || !args.path || args.path.includes('\0'))
                     fail('invalid', 'Provide one file or directory path.');
-                return saveMaterials(context.appArguments.AppDataDirectory, resolve(context.cwd, args.path), context.signal);
+                return saveMaterials(analysisDirectory(context), resolve(context.cwd, args.path), context.signal);
             }, { permission: Permission.Update }),
         ])];
 }

package/dist/src/tool-runtime/installer.js

@@ -1,4 +1,5 @@
-import { mkdir, stat, rm, readdir, writeFile, readFile } from 'node:fs/promises';
+import { analysisDirectory } from '../analysis-storage.js';
+import { mkdir, stat, rm, readdir, writeFile, readFile, realpath } from 'node:fs/promises';
 import { join, resolve, sep, dirname } from 'node:path';
 import { cacheArtifact, consumeArchive, extractArchive, fileSha256, archiveName } from './archives.js';
 import { atomicWrite, readJson, toolRoot, withToolLock, installationStage, removeInstallation, treeFingerprint, assertUnused, withToolUse } from './store.js';
@@ -7,7 +8,7 @@ import { digest, fail, text } from '../model.js';
 /** Read-only verification used by an owned child after the command owner has staged a runtime. */
 export async function verifyManagedInstallation(directory, tool, selected) {
     const root = join(toolRoot(directory, tool), 'installations', selected.id);
-    if (selected.schema !== 1 || selected.tool !== tool || selected.mode !== 'managed' || selected.uninstalledAt || !/^[a-f0-9]{64}$/.test(selected.id) || selected.root !== root || !resolve(selected.executable).startsWith(resolve(root) + sep))
+    if (selected.schema !== 1 || selected.tool !== tool || selected.mode !== 'managed' || selected.uninstalledAt || !/^[a-f0-9]{64}$/.test(selected.id) || await realpath(selected.root) !== await realpath(root) || !(await realpath(selected.executable)).startsWith(await realpath(root) + sep))
         fail('binding', 'Invalid managed tool installation receipt.');
     const ready = await readJson(join(root, 'ready.json'));
     const binding = (v) => { const { selectedAt, uninstalledAt, ...rest } = v; return rest; };
@@ -27,8 +28,8 @@ export class ToolInstaller {
         this.c = c;
         this.descriptor = descriptor;
         this.directory = c.appArguments.AppDataDirectory;
-        this.root = toolRoot(this.directory, descriptor.id);
-        this.cache = join(this.directory, 'runtime/cache');
+        this.root = toolRoot(analysisDirectory(c), descriptor.id);
+        this.cache = join(analysisDirectory(c), 'runtime/cache');
     }
     async receipt() { return readJson(join(this.root, 'selection.json')); }
     async status() {
@@ -105,7 +106,7 @@ export class ToolInstaller {
         if (selected.schema !== 1 || selected.tool !== this.descriptor.id || !/^[a-f0-9]{64}$/.test(selected.id))
             fail('binding', 'Invalid tool installation receipt.');
         const root = join(this.root, 'installations', selected.id);
-        if (selected.root !== root || selected.mode === 'managed' && !resolve(selected.executable).startsWith(resolve(root) + sep))
+        if (await realpath(selected.root) !== await realpath(root) || selected.mode === 'managed' && !(await realpath(selected.executable)).startsWith(await realpath(root) + sep))
             fail('binding', 'Selected tool points outside its owned installation.');
         const ready = await readJson(join(root, 'ready.json'));
         const binding = (v) => { const { selectedAt, uninstalledAt, ...rest } = v; return rest; };
@@ -131,7 +132,7 @@ export class ToolInstaller {
             await verifyManagedInstallation(this.directory, this.descriptor.id, selected);
         else if (await fileSha256(selected.executable, this.c.signal) !== selected.fingerprint)
             fail('binding', 'Selected tool code differs from its verified installation.');
-        if (selected.execution && (!resolve(selected.execution.executable).startsWith(resolve(root) + sep) || await treeFingerprint(root) !== selected.executionFingerprint))
+        if (selected.execution && (!(await realpath(selected.execution.executable)).startsWith(await realpath(root) + sep) || await treeFingerprint(root) !== selected.executionFingerprint))
             fail('binding', 'Owned external-tool execution copy differs from its verified installation.');
         if (selected.mode === 'external' && this.descriptor.externalInputs && (!selected.externalInputs || digest(await this.descriptor.externalInputs(selected.executable, this.c)) !== digest(selected.externalInputs)))
             fail('binding', 'External tool family differs from its verified installation.');

package/dist/src/tool-runtime/launch-worker.js

@@ -19,7 +19,9 @@ async function main() {
         if (input.length > 4 * 1024 ** 2)
             throw Error('Launch input exceeds its bound');
     }
-    if (await realpath(String(record.root)) !== join(root, 'runtime/runs', id))
+    // Factory's stable profile remains local while the complete runtime tree can be
+    // an authorized analysis-storage alias. Child paths must still stay inside it.
+    if (await realpath(String(record.root)) !== join(await realpath(join(root, 'runtime')), 'runs', id))
         throw Error('Launch storage changed');
     const plan = JSON.parse(input);
     if (plan.executable !== record.executable)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eyeauras/insight-cli",
-  "version": "0.2.4",
+  "version": "0.3.0",
   "type": "module",
   "description": "Agent-facing durable sessions and isolated Ghidra research contexts",
   "main": "./dist/src/index.js",
@@ -24,7 +24,7 @@
     "prepack": "npm run build"
   },
   "dependencies": {
-    "@eyeauras/cli-factory": "https://raw.githubusercontent.com/iXab3r/insight-cli/73459aecc88da6f878988b64f71ab72b34a83c45/vendor/factory-core-74e7a64.tgz",
+    "@eyeauras/cli-factory": "https://raw.githubusercontent.com/iXab3r/insight-cli/b0d2805ef97face11ab131e8aa39b34216eefaf0/vendor/factory-core-0413409.tgz",
     "@eyeauras/cli-factory-ipc": "https://raw.githubusercontent.com/iXab3r/insight-cli/f47f6d14e8aadc6b6778a6e3627bbb08909521d2/vendor/factory-ipc-7c403d8.tgz",
     "@modelcontextprotocol/sdk": "1.32.1",
     "tar": "7.5.22",

package/references/artifacts.md

@@ -1,7 +1,7 @@
 # Save ordinary research materials
 
 `insight-cli artifacts save <path> --json` saves a file or a settled directory tree in
-the selected profile's AppData. It needs Factory Update permission and does not require
+the selected profile's [analysis storage](storage.md), which defaults to AppData. It needs Factory Update permission and does not require
 Ghidra, Java, authentication, target/session selectors or evidence metadata. Relative input
 paths resolve against the caller's working directory. Use `--help` for generated syntax.
 

package/references/managed-runtime.md

@@ -79,7 +79,7 @@ operations until `connect`/`start`. `server connect/disconnect` retain their con
 An external server remains configured through profile server/repository/account fields and Factory
 secrets; `server stop` cannot stop that external service.
 
-Code/cache/installation receipts live under profile AppData `runtime/`; research remains under
+Code/cache/installation receipts live under configured [analysis storage](storage.md) `runtime/`; research remains under
 `workspace/`, and saved files under `materials/`. One selected immutable installation serves many
 isolated JVM contexts; each has its own projects, home, settings, cache/temp and authenticated
 endpoint. No per-agent copy of the Ghidra code distribution is required. This is process and data

package/references/setup.md

@@ -1,5 +1,9 @@
 # Setup
 
+Inspect `storage show --json` and read [analysis storage](storage.md) before moving databases.
+Use `storage configure` for an empty profile or `storage migrate` for existing work. Factory
+control metadata and keyring identity stay in their original locations.
+
 Use Node 24+ and `ghidra install` to deliver Ghidra 12.1.2, JDK 21, native components and
 server support. See [managed runtime](managed-runtime.md) for download/install/offline archives,
 external executable paths, status/doctor and safe removal. Existing Factory profile `java` and

package/references/storage.md

@@ -0,0 +1,99 @@
+# Analysis storage and migration
+
+`storage show --json` reports effective profile storage, availability, active file/byte usage,
+exact included trees and retained migration. The default is Factory profile AppData. No
+checkout, environment or automatic disk fallback changes it. The non-secret setting is
+`analysisDirectory` in Factory's profile (`profile show` also displays it). Use storage commands
+to change it safely.
+
+```sh
+insight-cli permissions grant Update
+insight-cli storage show --json
+insight-cli storage configure --directory "/mnt/analysis volume" --json
+```
+
+`configure` requires no existing analysis entries. With existing data use `migrate`.
+The directory is a **base**: the effective root appends `insight-cli/<profile>`, preserving
+profile isolation. Choose an ordinary empty destination profile directory on a mounted local
+filesystem. Spaces and Unicode are supported. Factory restricts the dedicated destination root to the
+current user, including a Windows ACL; a filesystem that cannot apply this protection fails
+before copying.
+
+The complete `workspace`, `materials`, `temp` and `runtime` trees move: immutable inputs,
+artifact/candidate snapshots, workspace SQLite DB/WAL, native private project/context DBs,
+local Ghidra Server repositories, operation/publication/import journals, debugger traces,
+process captures, exports, native helper compilation and verification working data.
+**Runtime installations, acquisition caches, selections and process receipts move too**;
+installation staging and activation must share a filesystem. External tool installations and
+user-selected outputs outside these trees keep their locations.
+
+Factory keeps profiles, permissions, IPC election/socket, migration-control metadata and
+application logs in current-user AppData. Secrets stay in the OS keyring. Credential/profile
+identities do not change. Updating/installing npm never migrates a profile automatically.
+
+## Move an existing profile
+
+Finish changing commands, close native contexts, and stop this profile's owned server/tool
+processes through ordinary CLI commands. Inspect `tools processes --json`. Unverified lifetimes
+also block migration. Do not kill guessed PIDs or stop other profiles to make preflight pass.
+Factory retains IPC ownership and command admission; other profiles can keep working.
+
+```sh
+insight-cli storage migrate --directory "/mnt/analysis volume" --dry-run --json
+insight-cli storage migrate --directory "/mnt/analysis volume" --json
+insight-cli storage show --json
+```
+
+Dry-run checks separation, destination contents, access, conservative capacity and quiescence
+without reserving/copying a migration. Source/destination/configuration roots cannot be equal
+or nested. Destination symlink roots, escaping source links, special files, unresolved links
+and inventories above one million entries or 128 directory levels are rejected. Internal
+links retain their exact target strings. Preflight does not reserve space; concurrent disk use
+can still cause a copy failure.
+
+Migration durably reserves its journal, hashes stable source bytes, streams/syncs the copy,
+independently hashes destination bytes and rechecks the source. Only then does it replace source
+trees with permanent compatibility links and commit the Factory setting. Original trees are
+renamed into `.storage-retained/<migration>` on their original volume. Copy/activation never
+deletes them, including on failures. Existing IDs, requests, journals, candidate snapshots and
+receipts retain exact bytes. Compatibility paths preserve old absolute references: do not remove
+those links or their profile/source ancestors manually after migrating.
+
+## Interruptions, uncertainty and retention
+
+```sh
+insight-cli storage resume --json
+insight-cli storage rollback --json
+```
+
+Ordinary research freezes during incomplete copy/activation/rollback/cleanup. `show` and Factory
+profile inspection remain available. Resume verifies completed files, recopies an incomplete
+file, rechecks capacity and finishes the retained transaction. Source and destination filesystem
+anchor identities are bound durably. Missing/replaced volumes fail without creating a system-disk
+fallback; mount the original volume before resuming.
+
+Rollback restores retained source and the prior Factory setting. After activation it requires
+an unchanged destination and a verified retained source. Native reopening or later findings can
+make rollback unsafe, in which case it refuses and preserves both copies. Use forward migration
+to another empty base after using the new location. A rolled-back destination remains for manual
+inspection/removal and is never automatically adopted. Cleanup permanently disables rollback.
+
+Unknown script/publication effects do **not** need abandonment before migrating a stopped
+profile. Migration starts no worker, replays no script/check-in and marks no unknown outcome
+applied. Inspect the original request after migrating; existing [recovery](recovery.md)
+restrictions and independent readback requirements still apply.
+
+After independent native reopen and saved-file readback, free retained source explicitly:
+
+```sh
+insight-cli permissions grant Destructive
+insight-cli storage cleanup --json
+```
+
+Cleanup verifies retained bytes, records irreversible intent, then deletes only that owned
+backup. Interrupted cleanup continues through `storage resume`; rollback is already disabled.
+Compatibility links, receipts and manifests remain. Clean or roll back the current migration
+before starting another. This release provides no nonempty-destination adoption, reverse
+synchronization, live-DB snapshotting or network-filesystem guarantees. POSIX directory fsync
+is used. Windows has file fsync and rename/junction semantics; Node cannot fsync directories
+there, and internal symlinks can require OS privileges.

package/runtime/toolbox.json

@@ -6,7 +6,9 @@
       "title": "insight-cli",
       "path": "SKILL.md",
       "resources": {
-        "references/agent-execution.md": "references/agent-execution.md"
+        "references/agent-execution.md": "references/agent-execution.md",
+        "references/storage.md": "references/storage.md",
+        "references/recovery.md": "references/recovery.md"
       }
     },
     {
@@ -16,7 +18,8 @@
       "resources": {
         "references/recovery.md": "references/recovery.md",
         "references/artifacts.md": "references/artifacts.md",
-        "references/agent-execution.md": "references/agent-execution.md"
+        "references/agent-execution.md": "references/agent-execution.md",
+        "references/storage.md": "references/storage.md"
       }
     },
     {
@@ -35,7 +38,8 @@
         "references/archive.md": "references/archive.md",
         "references/extensions-and-sync.md": "references/extensions-and-sync.md",
         "references/artifacts.md": "references/artifacts.md",
-        "references/agent-execution.md": "references/agent-execution.md"
+        "references/agent-execution.md": "references/agent-execution.md",
+        "references/storage.md": "references/storage.md"
       }
     },
     {
@@ -53,7 +57,9 @@
       "path": "skills/insight-artifacts/SKILL.md",
       "resources": {
         "references/artifacts.md": "references/artifacts.md",
-        "references/agent-execution.md": "references/agent-execution.md"
+        "references/agent-execution.md": "references/agent-execution.md",
+        "references/storage.md": "references/storage.md",
+        "references/recovery.md": "references/recovery.md"
       }
     },
     {

package/skill-bundle/insight-artifacts/SKILL.md

@@ -3,7 +3,7 @@ name: insight-artifacts
 description: Retain a completed reverse-engineering evidence file or directory as an ordinary checkpoint using insight-cli artifacts save. Use after Ghidra or any external tool; preserve existing project formats and source of truth.
 ---
 
-# Insight Artifacts 0.2.4
+# Insight Artifacts 0.3.0
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-artifacts/references/artifacts.md

@@ -1,7 +1,7 @@
 # Save ordinary research materials
 
 `insight-cli artifacts save <path> --json` saves a file or a settled directory tree in
-the selected profile's AppData. It needs Factory Update permission and does not require
+the selected profile's [analysis storage](storage.md), which defaults to AppData. It needs Factory Update permission and does not require
 Ghidra, Java, authentication, target/session selectors or evidence metadata. Relative input
 paths resolve against the caller's working directory. Use `--help` for generated syntax.
 

package/skill-bundle/insight-artifacts/references/recovery.md

@@ -0,0 +1,79 @@
+# Continue saved work
+
+Retain the session/target returned by initial open. Continue the tuple through
+`insight-cli ghidra open --session <id> --target <id> --json`. Saved private snapshots and
+pending scalar comparisons persist independently of a backend process. Reopening preserves
+private work; it does not silently receive a newer shared version.
+
+First-import recovery uses the same scoped `ghidra open` or the original request ID/input.
+Import/analysis writes a private snapshot and completion receipt before any initial publication.
+If its worker is still running, continuation reports busy; wait and continue the same scope.
+If that worker stopped before completing its receipt, continuation can repeat private analysis
+from the immutable input while retaining previous attempts. A completed snapshot is reused.
+Initial publication first creates a uniquely named staging object. A separate read-only process
+verifies its complete saved DB buffers before a conditional server move to the absent canonical
+path. It never checks in a new version of an existing canonical item. Lost promotion replies
+are reconciled against the retained identity, one-version history and complete saved buffers.
+Interrupted staging objects remain retained and can be replaced by another private stage;
+they are not adopted as the canonical model. Foreign or mismatched canonical state stays blocked.
+An older direct create that is provably owned and left only an incomplete `<Recovered>` entry
+can be moved aside without deletion; its bytes and original receipt remain preserved.
+
+Legacy first-import failures are also recoverable in the original profile. Continuation first
+establishes that the old owned bootstrap worker has ended, then uses an authoritative repository
+probe. An absent canonical item permits private preparation; an existing first version requires
+independent readback. The old project, intent and original session/target remain preserved.
+
+If a response was lost, inspect `sessions status <session> --target <target>`. Never infer
+`applied` from a connection failure. A changing command's optional request ID binds one effective
+intent inside the profile. Repeating the same ID/input retrieves its recorded outcome or
+unresolved state; changing input under that ID fails. Without an ID, calls are new intentions.
+
+An unknown or partial effect retains its request intent, snapshots and native stage. Open the
+same tuple to reconcile supported outcomes. A committed merge is verified against its recorded
+server version and complete saved buffers through independent read authority; it is never
+checked in again merely because its response was lost. Until verification succeeds, publication
+for this shared target is blocked across sessions. Saved private work remains retained.
+
+Scalar reconciliation observes and saves an already present effect; it does not execute the
+setter again. Supported structural/function edits retain a candidate snapshot after an incomplete
+response; continuation can verify every requested effect in that immutable snapshot and adopt it
+without replay. If the complete result cannot be established, the candidate and previous saved
+private view remain retained. An unproved program/script/external outcome remains unresolved. Preserve the profile
+storage and credential store. Do not delete another session's project, stop a process by guessed
+PID/port, or blindly repeat a script/external action to turn uncertainty into success.
+
+The older prototype's `workers`, `findings`, `integrate` and batch `recover` commands are not the
+public facade API. Its coordinator journals remain separate and are never silently migrated.
+
+A lost UI navigation response can be verified from the live authenticated cursor without another
+goto. If its original owned GUI process has exited, continuation reports the uncertain UI action
+as disconnected and retains saved program work. It does not recreate the old cursor or re-enable
+a previous prompt policy. Other unproved live UI effects remain retained until their outcome is
+established or the original process is known to have ended.
+
+## Abandon an uncertain private program attempt
+
+A post-mutation save timeout does not repeat the script or issue another save in the
+error handler. Status exposes the original request identity and retained phase/budget.
+Arbitrary script effects are never inferred from metadata or from an unverified DB.
+After inspecting the retained attempt, explicitly stop only its verified owned worker
+(`tools processes`, then `tools processes kill <process>` if required). Resume the
+last acknowledged private snapshot with:
+
+```sh
+insight-cli permissions grant Destructive
+insight-cli ghidra abandon --session <session> --target <target> \
+  --request-id <original-request> --acknowledge-unknown-effects --json
+insight-cli ghidra open --session <session> --target <target> --json
+```
+
+Abandon requires exactly one unresolved private program operation, an unchanged verified
+previous snapshot/generation, a stopped original worker and no active publication or live
+debugger. It retains the native project, candidate artifacts, original intent/execution and
+previous diagnostic result. Its terminal request is `failed` / `state: abandoned` with
+`outcome: unknown`; no effect is marked applied. Repeating abandonment retrieves the same
+result. Earlier saved private edits remain pending. The original changing request ID cannot
+execute again. Abandoning never undoes external effects or establishes what an arbitrary
+script did; the acknowledgement explicitly accepts that uncertainty. Publication recovery,
+initial import, UI and debugger attempts use their own protocols and cannot use this command.