@eyeauras/insight-cli 0.5.4 → 0.5.5

package/skills/insight-managed-metadata/SKILL.md

@@ -3,7 +3,7 @@ name: insight-managed-metadata
 description: Query managed assembly metadata, MethodDef tokens, P/Invoke declarations and bounded IL, or compare two C#/.NET assemblies through insight-cli ilspy query/compare. Use for structured static evidence and changed-method research without executing the target.
 ---
 
-# Insight Managed Metadata 0.5.4
+# Insight Managed Metadata 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-mitmproxy/SKILL.md

@@ -3,7 +3,7 @@ name: insight-mitmproxy
 description: Record, inspect and compare HTTP request/response evidence with insight-cli mitmproxy. Use when an owned client can explicitly use a loopback proxy; read native flow archives or HAR without replaying traffic. System interception and global certificate trust are outside this facade.
 ---
 
-# Insight mitmproxy 0.5.4
+# Insight mitmproxy 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-overview/SKILL.md

@@ -3,7 +3,7 @@ name: insight-overview
 description: Choose bounded tool overviews and focused drilldown through insight-cli without flooding agent context with whole-program code, traces or dumps. Use for tool discovery, scoped evidence paging and keeping native partial coverage separate from complete results.
 ---
 
-# Insight Overview 0.5.4
+# Insight Overview 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-procmon/SKILL.md

@@ -3,7 +3,7 @@ name: insight-procmon
 description: Observe actual file and registry access by an authorized running Windows process through insight-cli procmon. Use when static paths or configuration guesses need runtime evidence; inspect retained captures without collecting again.
 ---
 
-# Insight ProcMon 0.5.4
+# Insight ProcMon 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-re/SKILL.md

@@ -3,7 +3,7 @@ name: insight-re
 description: Investigate shipped programs and binary artifacts with insight-cli and other available tools; retain ordinary research files, coordinate independent agents and publish Ghidra annotations. Use for reverse engineering behavior, not ordinary source-repository browsing.
 ---
 
-# Insight RE 0.5.4
+# Insight RE 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-re/references/recovery.md

@@ -24,6 +24,23 @@ establishes that the old owned bootstrap worker has ended, then uses an authorit
 probe. An absent canonical item permits private preparation; an existing first version requires
 independent readback. The old project, intent and original session/target remain preserved.
 
+## Unresponsive headless backend
+
+Continue the same session/target with ordinary `ghidra open` or a research read. When the
+backend fails its identity preflight, the facade verifies the acknowledged private snapshot
+and independently authenticates the exact worker before retiring it and restoring that snapshot.
+This automatic retirement is limited to headless contexts without uncertain mutations, active
+publication or a connected debugger. A failed health preflight is never permission to repeat a
+script, save or publication. Journals, original projects and acknowledged pending edits remain.
+Lifecycle diagnostics record `backend_unresponsive` followed by snapshot restoration.
+
+On macOS ARM64 the packaged read-only kernel helper checks the same-user process, executable,
+private root and digest of its unique context token without entering the JVM. It emits no token,
+argument list or environment values. PID birth and profile bindings remain independently checked.
+A missing/unreadable/mismatched proof stays blocked; never kill by port, basename or guessed PID.
+Other platforms retain their existing ownership authentication; this does not claim equivalent
+hang recovery where no independent proof is available. No compiler is required on installation.
+
 ## Interrupted save or close
 
 After restoring profile storage, inspect the selected session and target with

package/skills/insight-re/references/storage.md

@@ -84,6 +84,17 @@ those links or their profile/source ancestors manually after migrating.
 
 ## Interruptions, uncertainty and retention
 
+If a completed migration no longer agrees with the Factory profile setting, ordinary
+commands and `storage resume` fail. After inspecting `storage show`, explicitly restore
+the setting with `storage resume --repair-profile --json`. This Update operation verifies
+the journal, source/destination identities, destination ownership and every compatibility
+link before changing only `analysisDirectory`. Later destination research is preserved;
+the old migration manifest is not used to roll it back. A different selected location,
+missing volume or replaced compatibility path blocks repair. Preserve conflicting paths
+and restore the recorded links before retrying; repair never deletes or merges them.
+Process-inventory failures are reported as `storage.inventory` with the original cause
+available under `--verbose`. A terminal unavailable migration is never a successful resume.
+
 ```sh
 insight-cli storage resume --json
 insight-cli storage rollback --json

package/skills/insight-sevenzip/SKILL.md

@@ -3,7 +3,7 @@ name: insight-sevenzip
 description: Inventory, integrity-check and recover files from archives and supported containers with insight-cli 7-Zip, then hand recovered binaries or configuration to the appropriate research tool.
 ---
 
-# Insight 7-Zip 0.5.4
+# Insight 7-Zip 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-strace/SKILL.md

@@ -3,7 +3,7 @@ name: insight-strace
 description: Observe actual file reads, writes, process creation and network syscalls in an authorized owned native Linux launch using insight-cli strace. Use when static inference needs concrete operating-system interaction evidence.
 ---
 
-# Insight strace 0.5.4
+# Insight strace 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-tshark/SKILL.md

@@ -3,7 +3,7 @@ name: insight-tshark
 description: Inspect an offline PCAP or PCAPNG with insight-cli tshark to identify protocols, HTTP/DNS/TLS fields, packet evidence and reconstructed TCP/UDP streams. Use for captured traffic questions; live acquisition and TLS decryption are separate tasks.
 ---
 
-# Insight TShark 0.5.4
+# Insight TShark 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized

package/skills/insight-windbg/SKILL.md

@@ -3,7 +3,7 @@ name: insight-windbg
 description: Investigate Windows native user-mode minidumps using bounded stacks, threads, registers, modules, memory and disassembly through insight-cli windbg. Use on Windows x64 when a captured runtime state needs native debugger evidence.
 ---
 
-# Insight WinDbg 0.5.4
+# Insight WinDbg 0.5.5
 
 If local help/status reports AppData or IPC access denied, retry that **read-only probe**
 with the agent host's normal permission escalation, then use that route for later authorized