@eyeauras/insight-cli 0.5.4 → 0.5.5

package/skill-bundle/insight-cli/references/recovery.md

@@ -24,6 +24,23 @@ establishes that the old owned bootstrap worker has ended, then uses an authorit
 probe. An absent canonical item permits private preparation; an existing first version requires
 independent readback. The old project, intent and original session/target remain preserved.
 
+## Unresponsive headless backend
+
+Continue the same session/target with ordinary `ghidra open` or a research read. When the
+backend fails its identity preflight, the facade verifies the acknowledged private snapshot
+and independently authenticates the exact worker before retiring it and restoring that snapshot.
+This automatic retirement is limited to headless contexts without uncertain mutations, active
+publication or a connected debugger. A failed health preflight is never permission to repeat a
+script, save or publication. Journals, original projects and acknowledged pending edits remain.
+Lifecycle diagnostics record `backend_unresponsive` followed by snapshot restoration.
+
+On macOS ARM64 the packaged read-only kernel helper checks the same-user process, executable,
+private root and digest of its unique context token without entering the JVM. It emits no token,
+argument list or environment values. PID birth and profile bindings remain independently checked.
+A missing/unreadable/mismatched proof stays blocked; never kill by port, basename or guessed PID.
+Other platforms retain their existing ownership authentication; this does not claim equivalent
+hang recovery where no independent proof is available. No compiler is required on installation.
+
 ## Interrupted save or close
 
 After restoring profile storage, inspect the selected session and target with

package/skill-bundle/insight-cli/references/storage.md

@@ -84,6 +84,17 @@ those links or their profile/source ancestors manually after migrating.
 
 ## Interruptions, uncertainty and retention
 
+If a completed migration no longer agrees with the Factory profile setting, ordinary
+commands and `storage resume` fail. After inspecting `storage show`, explicitly restore
+the setting with `storage resume --repair-profile --json`. This Update operation verifies
+the journal, source/destination identities, destination ownership and every compatibility
+link before changing only `analysisDirectory`. Later destination research is preserved;
+the old migration manifest is not used to roll it back. A different selected location,
+missing volume or replaced compatibility path blocks repair. Preserve conflicting paths
+and restore the recorded links before retrying; repair never deletes or merges them.
+Process-inventory failures are reported as `storage.inventory` with the original cause
+available under `--verbose`. A terminal unavailable migration is never a successful resume.
+
 ```sh
 insight-cli storage resume --json
 insight-cli storage rollback --json

package/skill-bundle/insight-die/SKILL.md

@@ -3,7 +3,7 @@ name: insight-die
 description: Classify unknown executable or container inputs by format, architecture and compiler/runtime/packer signatures with Detect It Easy before choosing managed or native analysis. Use insight-cli die for static triage and preserve scan uncertainty.
 ---
 
-# Insight Detect It Easy 0.5.4
+# Insight Detect It Easy 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-dnspy/SKILL.md

@@ -3,7 +3,7 @@ name: insight-dnspy
 description: Debug a managed Windows EXE at an IL breakpoint and read primitive arguments, or change one expected IL Int32 constant in a new assembly copy through insight-cli dnspy. Use when C# decompilation needs observed execution or a controlled binary edit.
 ---
 
-# Insight dnSpyEx 0.5.4
+# Insight dnSpyEx 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-dotnet-dump/SKILL.md

@@ -3,7 +3,7 @@ name: insight-dotnet-dump
 description: Capture a managed heap dump or inspect compatible .NET dumps with SOS to recover waiting stacks, objects, fields and retention evidence.
 ---
 
-# Insight .NET Dump 0.5.4
+# Insight .NET Dump 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-dotnet-stack/SKILL.md

@@ -3,7 +3,7 @@ name: insight-dotnet-stack
 description: Inspect live managed thread stacks to identify active or waiting work in an explicitly selected .NET process without taking a dump.
 ---
 
-# Insight .NET Stack 0.5.4
+# Insight .NET Stack 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-dotnet-trace/SKILL.md

@@ -3,7 +3,7 @@ name: insight-dotnet-trace
 description: Collect and inspect bounded .NET EventPipe traces to identify sampled thread work, waits or runtime activity; distinguish wall-clock samples from CPU consumption.
 ---
 
-# Insight .NET Trace 0.5.4
+# Insight .NET Trace 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-frida/SKILL.md

@@ -3,7 +3,7 @@ name: insight-frida
 description: Observe native call arguments/results or inspect runtime modules and exports in an explicitly selected authorized process with bounded Frida scripts. Use insight-cli frida to corroborate static findings with actual execution on macOS ARM64.
 ---
 
-# Insight Frida 0.5.4
+# Insight Frida 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-ghidra/SKILL.md

@@ -3,7 +3,7 @@ name: insight-ghidra
 description: Inspect or edit native binaries with Ghidra through insight-cli; use isolated contexts, multi-agent merge/refresh, server, GUI or debugger workflows. Choose this for static native behavior and references, not C# recovery from managed IL.
 ---
 
-# Insight Ghidra 0.5.4
+# Insight Ghidra 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized
@@ -48,6 +48,9 @@ session context can still be opening. Inspect `sessions status` for context read
 
 Use `ghidra status` to inspect runtime readiness; `ghidra install` delivers the pinned runtime.
 For static managed C#/IL research, locate `insight-cli skill insight-ilspy`.
+For an unresponsive headless backend, continue the same session/target with `ghidra open`;
+the facade authenticates and retires eligible hung workers, restoring acknowledged private work.
+Uncertain mutation/publication outcomes remain blocked; see [recovery](references/recovery.md).
 For owned process inventory use `tools processes`; `stop` saves Ghidra contexts, while
 `kill` explicitly interrupts verified owned work and preserves its journals.
 For archives, external launchers, server lifecycle or removal, read [managed runtime](references/managed-runtime.md).

package/skill-bundle/insight-ghidra/references/recovery.md

@@ -24,6 +24,23 @@ establishes that the old owned bootstrap worker has ended, then uses an authorit
 probe. An absent canonical item permits private preparation; an existing first version requires
 independent readback. The old project, intent and original session/target remain preserved.
 
+## Unresponsive headless backend
+
+Continue the same session/target with ordinary `ghidra open` or a research read. When the
+backend fails its identity preflight, the facade verifies the acknowledged private snapshot
+and independently authenticates the exact worker before retiring it and restoring that snapshot.
+This automatic retirement is limited to headless contexts without uncertain mutations, active
+publication or a connected debugger. A failed health preflight is never permission to repeat a
+script, save or publication. Journals, original projects and acknowledged pending edits remain.
+Lifecycle diagnostics record `backend_unresponsive` followed by snapshot restoration.
+
+On macOS ARM64 the packaged read-only kernel helper checks the same-user process, executable,
+private root and digest of its unique context token without entering the JVM. It emits no token,
+argument list or environment values. PID birth and profile bindings remain independently checked.
+A missing/unreadable/mismatched proof stays blocked; never kill by port, basename or guessed PID.
+Other platforms retain their existing ownership authentication; this does not claim equivalent
+hang recovery where no independent proof is available. No compiler is required on installation.
+
 ## Interrupted save or close
 
 After restoring profile storage, inspect the selected session and target with

package/skill-bundle/insight-ghidra/references/storage.md

@@ -84,6 +84,17 @@ those links or their profile/source ancestors manually after migrating.
 
 ## Interruptions, uncertainty and retention
 
+If a completed migration no longer agrees with the Factory profile setting, ordinary
+commands and `storage resume` fail. After inspecting `storage show`, explicitly restore
+the setting with `storage resume --repair-profile --json`. This Update operation verifies
+the journal, source/destination identities, destination ownership and every compatibility
+link before changing only `analysisDirectory`. Later destination research is preserved;
+the old migration manifest is not used to roll it back. A different selected location,
+missing volume or replaced compatibility path blocks repair. Preserve conflicting paths
+and restore the recorded links before retrying; repair never deletes or merges them.
+Process-inventory failures are reported as `storage.inventory` with the original cause
+available under `--verbose`. A terminal unavailable migration is never a successful resume.
+
 ```sh
 insight-cli storage resume --json
 insight-cli storage rollback --json

package/skill-bundle/insight-ilspy/SKILL.md

@@ -3,7 +3,7 @@ name: insight-ilspy
 description: Recover C#, inspect IL/types/metadata, extract resources or export projects from managed .NET assemblies through insight-cli ILSpy. Choose native analysis for NativeAOT or ordinary PE machine code.
 ---
 
-# Insight ILSpy 0.5.4
+# Insight ILSpy 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-interop/SKILL.md

@@ -3,7 +3,7 @@ name: insight-interop
 description: Trace a .NET P/Invoke declaration to an explicitly supplied native library export and Ghidra function through insight-cli ilspy query, binary query and scoped ghidra APIs. Use for managed/native linkage evidence while keeping static correspondence separate from observed loading or execution.
 ---
 
-# Insight Interop 0.5.4
+# Insight Interop 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-lldb/SKILL.md

@@ -3,7 +3,7 @@ name: insight-lldb
 description: Observe native runtime arguments, return values, registers, stacks and bounded memory at a selected breakpoint using an owned LLDB launch. Use insight-cli lldb on macOS ARM64 when static findings need a concrete execution check.
 ---
 
-# Insight LLDB 0.5.4
+# Insight LLDB 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-llvm/SKILL.md

@@ -3,7 +3,7 @@ name: insight-llvm
 description: Inspect PE, ELF and Mach-O headers, dependencies, exports and symbols; query PDB debug information or a small instruction window with insight-cli LLVM utilities before opening a full analysis project.
 ---
 
-# Insight LLVM 0.5.4
+# Insight LLVM 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-managed-heap/SKILL.md

@@ -3,7 +3,7 @@ name: insight-managed-heap
 description: Query structured .NET heap objects, primitive fields and managed stacks from a retained CoreCLR dump through insight-cli dotnet-dump query. Use for bounded offline dump investigation with an explicit matching DAC, preserving uncertainty and immutable input identity.
 ---
 
-# Insight Managed Heap 0.5.4
+# Insight Managed Heap 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-managed-metadata/SKILL.md

@@ -3,7 +3,7 @@ name: insight-managed-metadata
 description: Query managed assembly metadata, MethodDef tokens, P/Invoke declarations and bounded IL, or compare two C#/.NET assemblies through insight-cli ilspy query/compare. Use for structured static evidence and changed-method research without executing the target.
 ---
 
-# Insight Managed Metadata 0.5.4
+# Insight Managed Metadata 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-mitmproxy/SKILL.md

@@ -3,7 +3,7 @@ name: insight-mitmproxy
 description: Record, inspect and compare HTTP request/response evidence with insight-cli mitmproxy. Use when an owned client can explicitly use a loopback proxy; read native flow archives or HAR without replaying traffic. System interception and global certificate trust are outside this facade.
 ---
 
-# Insight mitmproxy 0.5.4
+# Insight mitmproxy 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-overview/SKILL.md

@@ -3,7 +3,7 @@ name: insight-overview
 description: Choose bounded tool overviews and focused drilldown through insight-cli without flooding agent context with whole-program code, traces or dumps. Use for tool discovery, scoped evidence paging and keeping native partial coverage separate from complete results.
 ---
 
-# Insight Overview 0.5.4
+# Insight Overview 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-procmon/SKILL.md

@@ -3,7 +3,7 @@ name: insight-procmon
 description: Observe actual file and registry access by an authorized running Windows process through insight-cli procmon. Use when static paths or configuration guesses need runtime evidence; inspect retained captures without collecting again.
 ---
 
-# Insight ProcMon 0.5.4
+# Insight ProcMon 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-re/SKILL.md

@@ -3,7 +3,7 @@ name: insight-re
 description: Investigate shipped programs and binary artifacts with insight-cli and other available tools; retain ordinary research files, coordinate independent agents and publish Ghidra annotations. Use for reverse engineering behavior, not ordinary source-repository browsing.
 ---
 
-# Insight RE 0.5.4
+# Insight RE 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-re/references/recovery.md

@@ -24,6 +24,23 @@ establishes that the old owned bootstrap worker has ended, then uses an authorit
 probe. An absent canonical item permits private preparation; an existing first version requires
 independent readback. The old project, intent and original session/target remain preserved.
 
+## Unresponsive headless backend
+
+Continue the same session/target with ordinary `ghidra open` or a research read. When the
+backend fails its identity preflight, the facade verifies the acknowledged private snapshot
+and independently authenticates the exact worker before retiring it and restoring that snapshot.
+This automatic retirement is limited to headless contexts without uncertain mutations, active
+publication or a connected debugger. A failed health preflight is never permission to repeat a
+script, save or publication. Journals, original projects and acknowledged pending edits remain.
+Lifecycle diagnostics record `backend_unresponsive` followed by snapshot restoration.
+
+On macOS ARM64 the packaged read-only kernel helper checks the same-user process, executable,
+private root and digest of its unique context token without entering the JVM. It emits no token,
+argument list or environment values. PID birth and profile bindings remain independently checked.
+A missing/unreadable/mismatched proof stays blocked; never kill by port, basename or guessed PID.
+Other platforms retain their existing ownership authentication; this does not claim equivalent
+hang recovery where no independent proof is available. No compiler is required on installation.
+
 ## Interrupted save or close
 
 After restoring profile storage, inspect the selected session and target with

package/skill-bundle/insight-re/references/storage.md

@@ -84,6 +84,17 @@ those links or their profile/source ancestors manually after migrating.
 
 ## Interruptions, uncertainty and retention
 
+If a completed migration no longer agrees with the Factory profile setting, ordinary
+commands and `storage resume` fail. After inspecting `storage show`, explicitly restore
+the setting with `storage resume --repair-profile --json`. This Update operation verifies
+the journal, source/destination identities, destination ownership and every compatibility
+link before changing only `analysisDirectory`. Later destination research is preserved;
+the old migration manifest is not used to roll it back. A different selected location,
+missing volume or replaced compatibility path blocks repair. Preserve conflicting paths
+and restore the recorded links before retrying; repair never deletes or merges them.
+Process-inventory failures are reported as `storage.inventory` with the original cause
+available under `--verbose`. A terminal unavailable migration is never a successful resume.
+
 ```sh
 insight-cli storage resume --json
 insight-cli storage rollback --json

package/skill-bundle/insight-sevenzip/SKILL.md

@@ -3,7 +3,7 @@ name: insight-sevenzip
 description: Inventory, integrity-check and recover files from archives and supported containers with insight-cli 7-Zip, then hand recovered binaries or configuration to the appropriate research tool.
 ---
 
-# Insight 7-Zip 0.5.4
+# Insight 7-Zip 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-strace/SKILL.md

@@ -3,7 +3,7 @@ name: insight-strace
 description: Observe actual file reads, writes, process creation and network syscalls in an authorized owned native Linux launch using insight-cli strace. Use when static inference needs concrete operating-system interaction evidence.
 ---
 
-# Insight strace 0.5.4
+# Insight strace 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-tshark/SKILL.md

@@ -3,7 +3,7 @@ name: insight-tshark
 description: Inspect an offline PCAP or PCAPNG with insight-cli tshark to identify protocols, HTTP/DNS/TLS fields, packet evidence and reconstructed TCP/UDP streams. Use for captured traffic questions; live acquisition and TLS decryption are separate tasks.
 ---
 
-# Insight TShark 0.5.4
+# Insight TShark 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/insight-windbg/SKILL.md

@@ -3,7 +3,7 @@ name: insight-windbg
 description: Investigate Windows native user-mode minidumps using bounded stacks, threads, registers, modules, memory and disassembly through insight-cli windbg. Use on Windows x64 when a captured runtime state needs native debugger evidence.
 ---
 
-# Insight WinDbg 0.5.4
+# Insight WinDbg 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skill-bundle/manifest.json

@@ -1,7 +1,7 @@
 {
   "schema": 1,
   "package": "@eyeauras/insight-cli",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "skills": [
     "insight-cli",
     "insight-re",

package/skills/insight-artifacts/SKILL.md

@@ -3,7 +3,7 @@ name: insight-artifacts
 description: Retain a completed reverse-engineering evidence file or directory as an ordinary checkpoint using insight-cli artifacts save. Use after Ghidra or any external tool; preserve existing project formats and source of truth.
 ---
 
-# Insight Artifacts 0.5.4
+# Insight Artifacts 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-artifacts/references/recovery.md

@@ -24,6 +24,23 @@ establishes that the old owned bootstrap worker has ended, then uses an authorit
 probe. An absent canonical item permits private preparation; an existing first version requires
 independent readback. The old project, intent and original session/target remain preserved.
 
+## Unresponsive headless backend
+
+Continue the same session/target with ordinary `ghidra open` or a research read. When the
+backend fails its identity preflight, the facade verifies the acknowledged private snapshot
+and independently authenticates the exact worker before retiring it and restoring that snapshot.
+This automatic retirement is limited to headless contexts without uncertain mutations, active
+publication or a connected debugger. A failed health preflight is never permission to repeat a
+script, save or publication. Journals, original projects and acknowledged pending edits remain.
+Lifecycle diagnostics record `backend_unresponsive` followed by snapshot restoration.
+
+On macOS ARM64 the packaged read-only kernel helper checks the same-user process, executable,
+private root and digest of its unique context token without entering the JVM. It emits no token,
+argument list or environment values. PID birth and profile bindings remain independently checked.
+A missing/unreadable/mismatched proof stays blocked; never kill by port, basename or guessed PID.
+Other platforms retain their existing ownership authentication; this does not claim equivalent
+hang recovery where no independent proof is available. No compiler is required on installation.
+
 ## Interrupted save or close
 
 After restoring profile storage, inspect the selected session and target with

package/skills/insight-artifacts/references/storage.md

@@ -84,6 +84,17 @@ those links or their profile/source ancestors manually after migrating.
 
 ## Interruptions, uncertainty and retention
 
+If a completed migration no longer agrees with the Factory profile setting, ordinary
+commands and `storage resume` fail. After inspecting `storage show`, explicitly restore
+the setting with `storage resume --repair-profile --json`. This Update operation verifies
+the journal, source/destination identities, destination ownership and every compatibility
+link before changing only `analysisDirectory`. Later destination research is preserved;
+the old migration manifest is not used to roll it back. A different selected location,
+missing volume or replaced compatibility path blocks repair. Preserve conflicting paths
+and restore the recorded links before retrying; repair never deletes or merges them.
+Process-inventory failures are reported as `storage.inventory` with the original cause
+available under `--verbose`. A terminal unavailable migration is never a successful resume.
+
 ```sh
 insight-cli storage resume --json
 insight-cli storage rollback --json

package/skills/insight-binary/SKILL.md

@@ -3,7 +3,7 @@ name: insight-binary
 description: Query structured PE, ELF and thin Mach-O headers, sections, imports and exports, or make an explicitly guarded new PE subsystem copy through insight-cli binary. Use for scoped binary structure, linkage and copy-only header edits without target execution.
 ---
 
-# Insight Binary 0.5.4
+# Insight Binary 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-capture/SKILL.md

@@ -3,7 +3,7 @@ name: insight-capture
 description: Capture one explicitly authorized native program run, exact stdout/stderr and declared file snapshots through insight-cli capture, then inspect or compare retained reports without replay. Use for controlled input/output research, preserving original files and interrupted or unknown outcomes.
 ---
 
-# Insight Capture 0.5.4
+# Insight Capture 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-die/SKILL.md

@@ -3,7 +3,7 @@ name: insight-die
 description: Classify unknown executable or container inputs by format, architecture and compiler/runtime/packer signatures with Detect It Easy before choosing managed or native analysis. Use insight-cli die for static triage and preserve scan uncertainty.
 ---
 
-# Insight Detect It Easy 0.5.4
+# Insight Detect It Easy 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-dnspy/SKILL.md

@@ -3,7 +3,7 @@ name: insight-dnspy
 description: Debug a managed Windows EXE at an IL breakpoint and read primitive arguments, or change one expected IL Int32 constant in a new assembly copy through insight-cli dnspy. Use when C# decompilation needs observed execution or a controlled binary edit.
 ---
 
-# Insight dnSpyEx 0.5.4
+# Insight dnSpyEx 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-dotnet-dump/SKILL.md

@@ -3,7 +3,7 @@ name: insight-dotnet-dump
 description: Capture a managed heap dump or inspect compatible .NET dumps with SOS to recover waiting stacks, objects, fields and retention evidence.
 ---
 
-# Insight .NET Dump 0.5.4
+# Insight .NET Dump 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-dotnet-stack/SKILL.md

@@ -3,7 +3,7 @@ name: insight-dotnet-stack
 description: Inspect live managed thread stacks to identify active or waiting work in an explicitly selected .NET process without taking a dump.
 ---
 
-# Insight .NET Stack 0.5.4
+# Insight .NET Stack 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-dotnet-trace/SKILL.md

@@ -3,7 +3,7 @@ name: insight-dotnet-trace
 description: Collect and inspect bounded .NET EventPipe traces to identify sampled thread work, waits or runtime activity; distinguish wall-clock samples from CPU consumption.
 ---
 
-# Insight .NET Trace 0.5.4
+# Insight .NET Trace 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-frida/SKILL.md

@@ -3,7 +3,7 @@ name: insight-frida
 description: Observe native call arguments/results or inspect runtime modules and exports in an explicitly selected authorized process with bounded Frida scripts. Use insight-cli frida to corroborate static findings with actual execution on macOS ARM64.
 ---
 
-# Insight Frida 0.5.4
+# Insight Frida 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-ghidra/SKILL.md

@@ -3,7 +3,7 @@ name: insight-ghidra
 description: Inspect or edit native binaries with Ghidra through insight-cli; use isolated contexts, multi-agent merge/refresh, server, GUI or debugger workflows. Choose this for static native behavior and references, not C# recovery from managed IL.
 ---
 
-# Insight Ghidra 0.5.4
+# Insight Ghidra 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized
@@ -48,6 +48,9 @@ session context can still be opening. Inspect `sessions status` for context read
 
 Use `ghidra status` to inspect runtime readiness; `ghidra install` delivers the pinned runtime.
 For static managed C#/IL research, locate `insight-cli skill insight-ilspy`.
+For an unresponsive headless backend, continue the same session/target with `ghidra open`;
+the facade authenticates and retires eligible hung workers, restoring acknowledged private work.
+Uncertain mutation/publication outcomes remain blocked; see [recovery](references/recovery.md).
 For owned process inventory use `tools processes`; `stop` saves Ghidra contexts, while
 `kill` explicitly interrupts verified owned work and preserves its journals.
 For archives, external launchers, server lifecycle or removal, read [managed runtime](references/managed-runtime.md).

package/skills/insight-ghidra/references/recovery.md

@@ -24,6 +24,23 @@ establishes that the old owned bootstrap worker has ended, then uses an authorit
 probe. An absent canonical item permits private preparation; an existing first version requires
 independent readback. The old project, intent and original session/target remain preserved.
 
+## Unresponsive headless backend
+
+Continue the same session/target with ordinary `ghidra open` or a research read. When the
+backend fails its identity preflight, the facade verifies the acknowledged private snapshot
+and independently authenticates the exact worker before retiring it and restoring that snapshot.
+This automatic retirement is limited to headless contexts without uncertain mutations, active
+publication or a connected debugger. A failed health preflight is never permission to repeat a
+script, save or publication. Journals, original projects and acknowledged pending edits remain.
+Lifecycle diagnostics record `backend_unresponsive` followed by snapshot restoration.
+
+On macOS ARM64 the packaged read-only kernel helper checks the same-user process, executable,
+private root and digest of its unique context token without entering the JVM. It emits no token,
+argument list or environment values. PID birth and profile bindings remain independently checked.
+A missing/unreadable/mismatched proof stays blocked; never kill by port, basename or guessed PID.
+Other platforms retain their existing ownership authentication; this does not claim equivalent
+hang recovery where no independent proof is available. No compiler is required on installation.
+
 ## Interrupted save or close
 
 After restoring profile storage, inspect the selected session and target with

package/skills/insight-ghidra/references/storage.md

@@ -84,6 +84,17 @@ those links or their profile/source ancestors manually after migrating.
 
 ## Interruptions, uncertainty and retention
 
+If a completed migration no longer agrees with the Factory profile setting, ordinary
+commands and `storage resume` fail. After inspecting `storage show`, explicitly restore
+the setting with `storage resume --repair-profile --json`. This Update operation verifies
+the journal, source/destination identities, destination ownership and every compatibility
+link before changing only `analysisDirectory`. Later destination research is preserved;
+the old migration manifest is not used to roll it back. A different selected location,
+missing volume or replaced compatibility path blocks repair. Preserve conflicting paths
+and restore the recorded links before retrying; repair never deletes or merges them.
+Process-inventory failures are reported as `storage.inventory` with the original cause
+available under `--verbose`. A terminal unavailable migration is never a successful resume.
+
 ```sh
 insight-cli storage resume --json
 insight-cli storage rollback --json

package/skills/insight-ilspy/SKILL.md

@@ -3,7 +3,7 @@ name: insight-ilspy
 description: Recover C#, inspect IL/types/metadata, extract resources or export projects from managed .NET assemblies through insight-cli ILSpy. Choose native analysis for NativeAOT or ordinary PE machine code.
 ---
 
-# Insight ILSpy 0.5.4
+# Insight ILSpy 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-interop/SKILL.md

@@ -3,7 +3,7 @@ name: insight-interop
 description: Trace a .NET P/Invoke declaration to an explicitly supplied native library export and Ghidra function through insight-cli ilspy query, binary query and scoped ghidra APIs. Use for managed/native linkage evidence while keeping static correspondence separate from observed loading or execution.
 ---
 
-# Insight Interop 0.5.4
+# Insight Interop 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-lldb/SKILL.md

@@ -3,7 +3,7 @@ name: insight-lldb
 description: Observe native runtime arguments, return values, registers, stacks and bounded memory at a selected breakpoint using an owned LLDB launch. Use insight-cli lldb on macOS ARM64 when static findings need a concrete execution check.
 ---
 
-# Insight LLDB 0.5.4
+# Insight LLDB 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-llvm/SKILL.md

@@ -3,7 +3,7 @@ name: insight-llvm
 description: Inspect PE, ELF and Mach-O headers, dependencies, exports and symbols; query PDB debug information or a small instruction window with insight-cli LLVM utilities before opening a full analysis project.
 ---
 
-# Insight LLVM 0.5.4
+# Insight LLVM 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-managed-heap/SKILL.md

@@ -3,7 +3,7 @@ name: insight-managed-heap
 description: Query structured .NET heap objects, primitive fields and managed stacks from a retained CoreCLR dump through insight-cli dotnet-dump query. Use for bounded offline dump investigation with an explicit matching DAC, preserving uncertainty and immutable input identity.
 ---
 
-# Insight Managed Heap 0.5.4
+# Insight Managed Heap 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized