@eyeauras/insight-cli 0.1.0 → 0.2.1

package/references/native/InsightTraceState.java

@@ -17,6 +17,15 @@ import ghidra.trace.model.memory.TraceMemoryState;
 /** Save/restore trace databases independently of the program database and live execution. */
 public class InsightTraceState extends GhidraScript {
   static String string(JsonObject p,String key){return p.get(key).getAsString();}
+  static void activateAndWait(DebuggerTraceManagerService manager,ghidra.debug.api.tracemgr.DebuggerCoordinates coordinates)throws Exception{
+    var pending=new java.util.concurrent.atomic.AtomicReference<java.util.concurrent.CompletableFuture<Void>>();
+    Runnable activate=()->pending.set(manager.activateAndNotify(coordinates,DebuggerTraceManagerService.ActivationCause.USER));
+    if(SwingUtilities.isEventDispatchThread()){
+      activate.run();if(!pending.get().isDone())throw new IllegalStateException("Asynchronous trace navigation requires a background script");pending.get().join();
+    }else{SwingUtilities.invokeAndWait(activate);pending.get().get(30,java.util.concurrent.TimeUnit.SECONDS);}
+    if(manager.getCurrentTrace()!=coordinates.getTrace())throw new IllegalStateException("Trace selection did not settle");
+  }
+
   static void bind(Trace trace,JsonObject p,boolean create){
     var options=trace.getOptions("Insight");String target=options.getString("Target",null),context=options.getString("Context",null);
     if(target==null&&context==null&&create){int tx=trace.startTransaction("Bind owned trace");try{
@@ -82,31 +91,31 @@ public class InsightTraceState extends GhidraScript {
       var thread=manager.getCurrentThread();var object=thread==null?null:thread.getObject();
       if(object==null){var candidates=manager.getCurrentTrace().getObjectManager().getAllObjects().filter(item->item.getSchema().getName().toString().equals("Process")).toList();
         if(candidates.size()!=1)throw new IllegalStateException("Debugger process selection is ambiguous");object=candidates.get(0);}
-      var m=manager;final var selectedObject=object;Runnable focus=()->m.activateObject(selectedObject);
-      if(SwingUtilities.isEventDispatchThread())focus.run();else SwingUtilities.invokeAndWait(focus);
+      activateAndWait(manager,manager.resolveObject(object));
       println("INSIGHT_TRACE_STATE "+new Gson().toJson(Map.of("state","focused")));return;
     }
     if(operation.equals("restore")){
       var folder=data.getRootFolder().getFolder("__insight_traces");if(folder==null)folder=data.getRootFolder().createFolder("__insight_traces");
       for(var entry:p.getAsJsonArray("traces")){
         var saved=entry.getAsJsonObject();String id=string(saved,"id");if(!id.matches("trace_[a-f0-9-]{36}"))throw new IllegalArgumentException();
-        boolean present=false;for(var trace:manager.getOpenTraces())if(id.equals(trace.getOptions("Insight").getString("Trace ID",null)))present=true;
-        if(present)continue;
-        var file=folder.getFile(id);if(file==null)file=folder.createFile(id,Path.of(string(saved,"input")).toFile(),monitor);
-        Trace trace=manager.openTrace(file,-1);bind(trace,p,false);
-        if(!id.equals(trace.getOptions("Insight").getString("Trace ID",null)))throw new IllegalArgumentException("Restored trace identity changed");
+        Trace trace=null;for(var existing:manager.getOpenTraces())if(id.equals(existing.getOptions("Insight").getString("Trace ID",null)))trace=existing;
+        if(trace==null){var file=folder.getFile(id);if(file==null)file=folder.createFile(id,Path.of(string(saved,"input")).toFile(),monitor);trace=manager.openTrace(file,-1);}
+        bind(trace,p,false);if(!id.equals(trace.getOptions("Insight").getString("Trace ID",null)))throw new IllegalArgumentException("Restored trace identity changed");
         relocateMappings(trace,selected);
-        if(p.has("active")&&id.equals(string(p,"active"))){final var m=manager;Runnable activate=()->{
-          m.activateTrace(trace);m.activateSnap(Long.parseLong(string(saved,"snap")));
-          if(saved.has("thread")){var thread=trace.getThreadManager().getThread(Long.parseLong(string(saved,"thread")));if(thread!=null)m.activateThread(thread);}
-        };if(SwingUtilities.isEventDispatchThread())activate.run();else SwingUtilities.invokeAndWait(activate);}
+        var coordinates=manager.resolveTrace(trace).snap(Long.parseLong(string(saved,"snap")));
+        if(saved.has("thread")){var thread=trace.getThreadManager().getThread(Long.parseLong(string(saved,"thread")));if(thread!=null)coordinates=coordinates.thread(thread);}
+        activateAndWait(manager,coordinates);
+        if(manager.getCurrentSnap()!=Long.parseLong(string(saved,"snap")))throw new IllegalStateException("Saved trace snap did not restore");
+      }
+      if(p.has("active"))for(var trace:manager.getOpenTraces())if(string(p,"active").equals(trace.getOptions("Insight").getString("Trace ID",null))){
+        activateAndWait(manager,manager.resolveTrace(trace));
       }
       println("INSIGHT_TRACE_STATE "+new Gson().toJson(Map.of("state","restored")));return;
     }
     if(operation.equals("select")){
       String id=string(p,"id");for(var trace:manager.getOpenTraces()){
-        bind(trace,p,false);if(id.equals(trace.getOptions("Insight").getString("Trace ID",null))){final var m=manager;
-          if(SwingUtilities.isEventDispatchThread())m.activateTrace(trace);else SwingUtilities.invokeAndWait(()->m.activateTrace(trace));
+        bind(trace,p,false);if(id.equals(trace.getOptions("Insight").getString("Trace ID",null))){
+          activateAndWait(manager,manager.resolveTrace(trace));
           println("INSIGHT_TRACE_STATE "+new Gson().toJson(Map.of("state","selected","id",id)));return;}
       }
       throw new IllegalArgumentException("Trace not found");
@@ -114,15 +123,21 @@ public class InsightTraceState extends GhidraScript {
     if(!operation.equals("checkpoint"))throw new IllegalArgumentException();
     Path root=Path.of(string(p,"output")).toRealPath();List<Object> traces=new ArrayList<>();String active=null;
     if(manager.getOpenTraces().size()>64)throw new IllegalArgumentException("Trace count exceeds 64");
+    long lockDeadline=System.nanoTime()+java.util.concurrent.TimeUnit.SECONDS.toNanos(10);
     for(var trace:manager.getOpenTraces()){
       bind(trace,p,false);String id=trace.getOptions("Insight").getString("Trace ID",null);if(id==null||!id.matches("trace_[a-f0-9-]{36}"))throw new IllegalArgumentException();
       Path output=root.resolve(id+".gzf");if(Files.exists(output))throw new IllegalArgumentException();
+      while(!trace.lock("Insight consistent trace checkpoint")){
+        monitor.checkCancelled();if(System.nanoTime()>=lockDeadline)throw new IllegalStateException("Trace transaction did not release for checkpoint");Thread.sleep(25);
+      }
+      try{
       var coordinates=manager.getCurrentFor(trace);trace.saveToPackedFile(output.toFile(),monitor);
       Map<String,Object> row=new LinkedHashMap<>();row.put("id",id);row.put("name",trace.getName());row.put("snap",Long.toString(coordinates.getSnap()));
       row.put("modules",trace.getModuleManager().getAllModules().size());row.put("threads",trace.getThreadManager().getAllThreads().size());
       if(coordinates.getThread()!=null)row.put("thread",Long.toString(coordinates.getThread().getKey()));
       var targets=selected.getService(DebuggerTargetService.class);var live=targets==null?null:targets.getTarget(trace);row.put("connected",live!=null&&live.isValid());
       traces.add(row);if(manager.getCurrentTrace()==trace)active=id;
+      }finally{trace.unlock();}
     }
     Map<String,Object> result=new LinkedHashMap<>();result.put("traces",traces);if(active!=null)result.put("active",active);
     println("INSIGHT_TRACE_STATE "+new Gson().toJson(result));

package/references/setup.md

@@ -1,7 +1,9 @@
 # Setup
 
-Use Node 24+, Ghidra 12.1.2 and a Java 21 JDK. Configure the runtime with Factory's profile
-commands and generated help: `java` and `ghidraHome` select installed dependencies.
+Use Node 24+ and `ghidra install` to deliver Ghidra 12.1.2, JDK 21, native components and
+server support. See [managed runtime](managed-runtime.md) for download/install/offline archives,
+external executable paths, status/doctor and safe removal. Existing Factory profile `java` and
+`ghidraHome` paths remain supported when no managed/external selection exists.
 The package contains the verified GhidraMCP 7.0.0 bridge, its Apache-2.0 license/notice and
 artifact provenance. Its pinned functionality catalog is from source
 `57e37a8bf388b1279cff46378f85be1554548f61`, with SHA256
@@ -38,7 +40,8 @@ Native acceptance separates macOS GUI/LLDB workflows from selected headless Wind
 SDK, Version Tracking and FID/BSim workflows. Native Windows/Linux debugger/GUI acceptance
 remains deferred. The ordinary CI lane stays offline; disposable native CI is explicit.
 
-Debugger execution additionally needs a supported host debugger (local LLDB on macOS). Its
+On macOS 15+ ARM64, `ghidra install` delivers an owned LLDB/Python debugger backend;
+OS debugger authorization remains required. Other host profiles need their supported debugger. Its
 Ghidra Python dependencies are prepared from the installed SDK wheels into owned GUI storage.
 `debuggerPython` optionally configures a Python-backed offer; `windbgDir` configures the Windows
 debugger runtime directory when relevant. These are runtime profile settings, not research scope.

package/runtime/managed/insight-heap/Insight.Heap.csproj

@@ -0,0 +1 @@
+<Project Sdk="Microsoft.NET.Sdk"><PropertyGroup><TargetFramework>net10.0</TargetFramework><OutputType>Exe</OutputType><UseAppHost>false</UseAppHost><AssemblyName>Insight.Heap</AssemblyName><Nullable>enable</Nullable><ImplicitUsings>enable</ImplicitUsings><Deterministic>true</Deterministic><DebugType>none</DebugType><RestorePackagesWithLockFile>true</RestorePackagesWithLockFile></PropertyGroup><ItemGroup><PackageReference Include="Microsoft.Diagnostics.Runtime" Version="4.2.751201" /></ItemGroup></Project>

package/runtime/managed/insight-heap/Insight.Heap.deps.json

@@ -0,0 +1,391 @@
+{
+  "runtimeTarget": {
+    "name": ".NETCoreApp,Version=v10.0",
+    "signature": ""
+  },
+  "compilationOptions": {},
+  "targets": {
+    ".NETCoreApp,Version=v10.0": {
+      "Insight.Heap/1.0.0": {
+        "dependencies": {
+          "Microsoft.Diagnostics.Runtime": "4.2.751201"
+        },
+        "runtime": {
+          "Insight.Heap.dll": {}
+        }
+      },
+      "Azure.Core/1.53.0": {
+        "dependencies": {
+          "Microsoft.Bcl.AsyncInterfaces": "10.0.3",
+          "Microsoft.Extensions.Configuration.Abstractions": "10.0.3",
+          "Microsoft.Extensions.Hosting.Abstractions": "10.0.3",
+          "Microsoft.Identity.Client": "4.83.1",
+          "Microsoft.Identity.Client.Extensions.Msal": "4.83.1",
+          "System.ClientModel": "1.10.0",
+          "System.Memory.Data": "10.0.3"
+        },
+        "runtime": {
+          "lib/net10.0/Azure.Core.dll": {
+            "assemblyVersion": "1.53.0.0",
+            "fileVersion": "1.5300.26.21006"
+          }
+        }
+      },
+      "Azure.Identity/1.21.0": {
+        "dependencies": {
+          "Azure.Core": "1.53.0"
+        },
+        "runtime": {
+          "lib/net10.0/Azure.Identity.dll": {
+            "assemblyVersion": "1.21.0.0",
+            "fileVersion": "1.2100.26.21009"
+          }
+        }
+      },
+      "Microsoft.Bcl.AsyncInterfaces/10.0.3": {
+        "runtime": {
+          "lib/netstandard2.1/Microsoft.Bcl.AsyncInterfaces.dll": {
+            "assemblyVersion": "10.0.0.3",
+            "fileVersion": "10.0.326.7603"
+          }
+        }
+      },
+      "Microsoft.Diagnostics.NETCore.Client/0.2.661903": {
+        "dependencies": {
+          "Microsoft.Extensions.Logging.Abstractions": "10.0.3"
+        },
+        "runtime": {
+          "lib/net8.0/Microsoft.Diagnostics.NETCore.Client.dll": {
+            "assemblyVersion": "0.2.13.11903",
+            "fileVersion": "0.2.13.11903"
+          }
+        }
+      },
+      "Microsoft.Diagnostics.Runtime/4.2.751201": {
+        "dependencies": {
+          "Azure.Identity": "1.21.0",
+          "Microsoft.Diagnostics.NETCore.Client": "0.2.661903",
+          "Microsoft.Security.AntiSSRF": "1.0.0"
+        },
+        "runtime": {
+          "lib/net10.0/Microsoft.Diagnostics.Runtime.dll": {
+            "assemblyVersion": "4.2.15.1201",
+            "fileVersion": "4.2.15.1201"
+          }
+        }
+      },
+      "Microsoft.Extensions.Configuration.Abstractions/10.0.3": {
+        "dependencies": {
+          "Microsoft.Extensions.Primitives": "10.0.3"
+        },
+        "runtime": {
+          "lib/net10.0/Microsoft.Extensions.Configuration.Abstractions.dll": {
+            "assemblyVersion": "10.0.0.0",
+            "fileVersion": "10.0.326.7603"
+          }
+        }
+      },
+      "Microsoft.Extensions.DependencyInjection.Abstractions/10.0.3": {
+        "runtime": {
+          "lib/net10.0/Microsoft.Extensions.DependencyInjection.Abstractions.dll": {
+            "assemblyVersion": "10.0.0.0",
+            "fileVersion": "10.0.326.7603"
+          }
+        }
+      },
+      "Microsoft.Extensions.Diagnostics.Abstractions/10.0.3": {
+        "dependencies": {
+          "Microsoft.Extensions.DependencyInjection.Abstractions": "10.0.3",
+          "Microsoft.Extensions.Options": "10.0.3"
+        },
+        "runtime": {
+          "lib/net10.0/Microsoft.Extensions.Diagnostics.Abstractions.dll": {
+            "assemblyVersion": "10.0.0.0",
+            "fileVersion": "10.0.326.7603"
+          }
+        }
+      },
+      "Microsoft.Extensions.FileProviders.Abstractions/10.0.3": {
+        "dependencies": {
+          "Microsoft.Extensions.Primitives": "10.0.3"
+        },
+        "runtime": {
+          "lib/net10.0/Microsoft.Extensions.FileProviders.Abstractions.dll": {
+            "assemblyVersion": "10.0.0.0",
+            "fileVersion": "10.0.326.7603"
+          }
+        }
+      },
+      "Microsoft.Extensions.Hosting.Abstractions/10.0.3": {
+        "dependencies": {
+          "Microsoft.Extensions.Configuration.Abstractions": "10.0.3",
+          "Microsoft.Extensions.DependencyInjection.Abstractions": "10.0.3",
+          "Microsoft.Extensions.Diagnostics.Abstractions": "10.0.3",
+          "Microsoft.Extensions.FileProviders.Abstractions": "10.0.3",
+          "Microsoft.Extensions.Logging.Abstractions": "10.0.3"
+        },
+        "runtime": {
+          "lib/net10.0/Microsoft.Extensions.Hosting.Abstractions.dll": {
+            "assemblyVersion": "10.0.0.0",
+            "fileVersion": "10.0.326.7603"
+          }
+        }
+      },
+      "Microsoft.Extensions.Logging.Abstractions/10.0.3": {
+        "dependencies": {
+          "Microsoft.Extensions.DependencyInjection.Abstractions": "10.0.3"
+        },
+        "runtime": {
+          "lib/net10.0/Microsoft.Extensions.Logging.Abstractions.dll": {
+            "assemblyVersion": "10.0.0.0",
+            "fileVersion": "10.0.326.7603"
+          }
+        }
+      },
+      "Microsoft.Extensions.Options/10.0.3": {
+        "dependencies": {
+          "Microsoft.Extensions.DependencyInjection.Abstractions": "10.0.3",
+          "Microsoft.Extensions.Primitives": "10.0.3"
+        },
+        "runtime": {
+          "lib/net10.0/Microsoft.Extensions.Options.dll": {
+            "assemblyVersion": "10.0.0.0",
+            "fileVersion": "10.0.326.7603"
+          }
+        }
+      },
+      "Microsoft.Extensions.Primitives/10.0.3": {
+        "runtime": {
+          "lib/net10.0/Microsoft.Extensions.Primitives.dll": {
+            "assemblyVersion": "10.0.0.0",
+            "fileVersion": "10.0.326.7603"
+          }
+        }
+      },
+      "Microsoft.Identity.Client/4.83.1": {
+        "dependencies": {
+          "Microsoft.IdentityModel.Abstractions": "8.14.0"
+        },
+        "runtime": {
+          "lib/net8.0/Microsoft.Identity.Client.dll": {
+            "assemblyVersion": "4.83.1.0",
+            "fileVersion": "4.83.1.0"
+          }
+        }
+      },
+      "Microsoft.Identity.Client.Extensions.Msal/4.83.1": {
+        "dependencies": {
+          "Microsoft.Identity.Client": "4.83.1",
+          "System.Security.Cryptography.ProtectedData": "4.5.0"
+        },
+        "runtime": {
+          "lib/net8.0/Microsoft.Identity.Client.Extensions.Msal.dll": {
+            "assemblyVersion": "4.83.1.0",
+            "fileVersion": "4.83.1.0"
+          }
+        }
+      },
+      "Microsoft.IdentityModel.Abstractions/8.14.0": {
+        "runtime": {
+          "lib/net9.0/Microsoft.IdentityModel.Abstractions.dll": {
+            "assemblyVersion": "8.14.0.0",
+            "fileVersion": "8.14.0.60815"
+          }
+        }
+      },
+      "Microsoft.Security.AntiSSRF/1.0.0": {
+        "runtime": {
+          "lib/net8.0/Microsoft.Security.AntiSSRF.dll": {
+            "assemblyVersion": "1.0.0.0",
+            "fileVersion": "1.0.0.0"
+          }
+        }
+      },
+      "System.ClientModel/1.10.0": {
+        "dependencies": {
+          "Microsoft.Extensions.Configuration.Abstractions": "10.0.3",
+          "Microsoft.Extensions.Hosting.Abstractions": "10.0.3",
+          "Microsoft.Extensions.Logging.Abstractions": "10.0.3",
+          "System.Memory.Data": "10.0.3"
+        },
+        "runtime": {
+          "lib/net10.0/System.ClientModel.dll": {
+            "assemblyVersion": "1.10.0.0",
+            "fileVersion": "1.1000.26.16607"
+          }
+        }
+      },
+      "System.Memory.Data/10.0.3": {
+        "runtime": {
+          "lib/net10.0/System.Memory.Data.dll": {
+            "assemblyVersion": "10.0.0.3",
+            "fileVersion": "10.0.326.7603"
+          }
+        }
+      },
+      "System.Security.Cryptography.ProtectedData/4.5.0": {
+        "runtime": {
+          "lib/netstandard2.0/System.Security.Cryptography.ProtectedData.dll": {
+            "assemblyVersion": "4.0.3.0",
+            "fileVersion": "4.6.26515.6"
+          }
+        },
+        "runtimeTargets": {
+          "runtimes/win/lib/netstandard2.0/System.Security.Cryptography.ProtectedData.dll": {
+            "rid": "win",
+            "assetType": "runtime",
+            "assemblyVersion": "4.0.3.0",
+            "fileVersion": "4.6.26515.6"
+          }
+        }
+      }
+    }
+  },
+  "libraries": {
+    "Insight.Heap/1.0.0": {
+      "type": "project",
+      "serviceable": false,
+      "sha512": ""
+    },
+    "Azure.Core/1.53.0": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-x9c/toFMOtRrlTdFuE7rlGCVAduQzWVfKmLz5juj41zJAXEhYD5hluiUyyAEzJ6OxpBnKtiaBztzwpZITAVjtg==",
+      "path": "azure.core/1.53.0",
+      "hashPath": "azure.core.1.53.0.nupkg.sha512"
+    },
+    "Azure.Identity/1.21.0": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-GeFv8sGwRKvDKwI2WFy8r0mhmlxEVZg24Sit2NogTjiSO8RVjllWM65OT6e1sKjOvG8V74y7hAbaELUUPjZQSw==",
+      "path": "azure.identity/1.21.0",
+      "hashPath": "azure.identity.1.21.0.nupkg.sha512"
+    },
+    "Microsoft.Bcl.AsyncInterfaces/10.0.3": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-TV62UsrJZPX6gbt3c4WrtXh7bmaDIcMqf9uft1cc4L6gJXOU07hDGEh+bFQh/L2Az0R1WVOkiT66lFqS6G2NmA==",
+      "path": "microsoft.bcl.asyncinterfaces/10.0.3",
+      "hashPath": "microsoft.bcl.asyncinterfaces.10.0.3.nupkg.sha512"
+    },
+    "Microsoft.Diagnostics.NETCore.Client/0.2.661903": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-3ISv5jXar4dHBt/7Rz3YdnR3VpnC94BhSdSvuq8ZuKgCOcVuTdmgRnq0hUzJyL/z8Ge4VekFjhui2aufUXPdvg==",
+      "path": "microsoft.diagnostics.netcore.client/0.2.661903",
+      "hashPath": "microsoft.diagnostics.netcore.client.0.2.661903.nupkg.sha512"
+    },
+    "Microsoft.Diagnostics.Runtime/4.2.751201": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-9rg4pJnc46e7QvUYC8Pxu5VqPJhKEO2ILGEZy1LOKrwurLC8iSAAzamDVLd/cYPb3zGbM9RE4Zo41Tis8OxCyA==",
+      "path": "microsoft.diagnostics.runtime/4.2.751201",
+      "hashPath": "microsoft.diagnostics.runtime.4.2.751201.nupkg.sha512"
+    },
+    "Microsoft.Extensions.Configuration.Abstractions/10.0.3": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-xVDHL0+SIgemfh95fTO9cGLe17TWv/ZP0n7m01z8X6pzt2DmQpucioWR/mYZA1sRlkWnkXzfl0JweLNWmE9WMg==",
+      "path": "microsoft.extensions.configuration.abstractions/10.0.3",
+      "hashPath": "microsoft.extensions.configuration.abstractions.10.0.3.nupkg.sha512"
+    },
+    "Microsoft.Extensions.DependencyInjection.Abstractions/10.0.3": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-bwGMrRcAMWx2s/RDgja97p27rxSz2pEQW0+rX5cWAUWVETVJ/eyxGfjAl8vuG5a+lckWmPIE+vcuaZNVB5YDdw==",
+      "path": "microsoft.extensions.dependencyinjection.abstractions/10.0.3",
+      "hashPath": "microsoft.extensions.dependencyinjection.abstractions.10.0.3.nupkg.sha512"
+    },
+    "Microsoft.Extensions.Diagnostics.Abstractions/10.0.3": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-mQiTzAj7PIJ2A9YXR5QhgulS1fTWhmQc3ckd1Mrf3hKW07d03fBDqx8vVaFw+cRTebDOeB6pNqdWdnRxsi1hBA==",
+      "path": "microsoft.extensions.diagnostics.abstractions/10.0.3",
+      "hashPath": "microsoft.extensions.diagnostics.abstractions.10.0.3.nupkg.sha512"
+    },
+    "Microsoft.Extensions.FileProviders.Abstractions/10.0.3": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-4TD9AXDRsipTmaemwnjt/DM5Ri0de2JzHQhvZ4woBTjUtL4XrPNsMrOk5oiLJAx1gTrE6pOIhxv+lEde5F6CZA==",
+      "path": "microsoft.extensions.fileproviders.abstractions/10.0.3",
+      "hashPath": "microsoft.extensions.fileproviders.abstractions.10.0.3.nupkg.sha512"
+    },
+    "Microsoft.Extensions.Hosting.Abstractions/10.0.3": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-GdMpC10Jf6poxSvUJ4lgYpJ5F/kJeaAoJmrPufjBoPYyCTKKY5Dyl0rZA+LBNvFqTq1cZa/lhlptlUhNvU6xrg==",
+      "path": "microsoft.extensions.hosting.abstractions/10.0.3",
+      "hashPath": "microsoft.extensions.hosting.abstractions.10.0.3.nupkg.sha512"
+    },
+    "Microsoft.Extensions.Logging.Abstractions/10.0.3": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-lxl0WLk7ROgBFAsjcOYjQ8/DVK+VMszxGBzUhgtQmAsTNldLL5pk9NG/cWTsXHq0lUhUEAtZkEE7jOGOA8bGKQ==",
+      "path": "microsoft.extensions.logging.abstractions/10.0.3",
+      "hashPath": "microsoft.extensions.logging.abstractions.10.0.3.nupkg.sha512"
+    },
+    "Microsoft.Extensions.Options/10.0.3": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-hU6WzGTPvPoLA2ng1ILvWQb3g0qORdlHNsxI8IcPLumJb3suimYUl+bbDzdo1V4KFsvVhnMWzysHpKbZaoDQPQ==",
+      "path": "microsoft.extensions.options/10.0.3",
+      "hashPath": "microsoft.extensions.options.10.0.3.nupkg.sha512"
+    },
+    "Microsoft.Extensions.Primitives/10.0.3": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-GEcpTwo7sUoLGGNTqV1FZEuL+tTD9m81NX/mh099dqGNna07/UGZShKQNZRw4hv6nlliSUwYQgSYc7OR99Jufg==",
+      "path": "microsoft.extensions.primitives/10.0.3",
+      "hashPath": "microsoft.extensions.primitives.10.0.3.nupkg.sha512"
+    },
+    "Microsoft.Identity.Client/4.83.1": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-jOLIrZ3cynoqHLLO1cXplFFabrhrMEYs/EuKHvmCyrOm1axqiVFT6nCSnHxk7w5+d2BeQfCdM12Yf/0X7OeS1g==",
+      "path": "microsoft.identity.client/4.83.1",
+      "hashPath": "microsoft.identity.client.4.83.1.nupkg.sha512"
+    },
+    "Microsoft.Identity.Client.Extensions.Msal/4.83.1": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-I3k4J4Hj4KbLEFanjeUzzDOVecukETaTgEkJ7h2pP/Yazs6SLp6TVUTo/Eo+ptPXMwvc+iX7rBFtMSUrA7R+Mg==",
+      "path": "microsoft.identity.client.extensions.msal/4.83.1",
+      "hashPath": "microsoft.identity.client.extensions.msal.4.83.1.nupkg.sha512"
+    },
+    "Microsoft.IdentityModel.Abstractions/8.14.0": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-iwbCpSjD3ehfTwBhtSNEtKPK0ICun6ov7Ibx6ISNA9bfwIyzI2Siwyi9eJFCJBwxowK9xcA1mj+jBWiigeqgcQ==",
+      "path": "microsoft.identitymodel.abstractions/8.14.0",
+      "hashPath": "microsoft.identitymodel.abstractions.8.14.0.nupkg.sha512"
+    },
+    "Microsoft.Security.AntiSSRF/1.0.0": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-V0AJQt8FC5HXkvFhBqB0WgMADVL+vG+qiMK9p39OHdqfNwYOh1durk8j9rKPklWasBxpk8ifVdzoJmEgUWVoeg==",
+      "path": "microsoft.security.antissrf/1.0.0",
+      "hashPath": "microsoft.security.antissrf.1.0.0.nupkg.sha512"
+    },
+    "System.ClientModel/1.10.0": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-lBEWs54F5Y5pZ9hC+8z4S/X76957ex+DPk7WecRHlbIHtrPfbRMMlOgI3iDn4Jpb3bSxvBnKaaHoD59auFjlBA==",
+      "path": "system.clientmodel/1.10.0",
+      "hashPath": "system.clientmodel.1.10.0.nupkg.sha512"
+    },
+    "System.Memory.Data/10.0.3": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-MaGhRfGunmrj/nHjtsi9XkhlYJ/ERGWrbA+BiSKNtGnAjc9XlG5EhAvak6VRcX5LYzPF6pBO8nJ613dTgzabig==",
+      "path": "system.memory.data/10.0.3",
+      "hashPath": "system.memory.data.10.0.3.nupkg.sha512"
+    },
+    "System.Security.Cryptography.ProtectedData/4.5.0": {
+      "type": "package",
+      "serviceable": true,
+      "sha512": "sha512-wLBKzFnDCxP12VL9ANydSYhk59fC4cvOr9ypYQLPnAj48NQIhqnjdD2yhP8yEKyBJEjERWS9DisKL7rX5eU25Q==",
+      "path": "system.security.cryptography.protecteddata/4.5.0",
+      "hashPath": "system.security.cryptography.protecteddata.4.5.0.nupkg.sha512"
+    }
+  }
+}

package/runtime/managed/insight-heap/Insight.Heap.runtimeconfig.json

@@ -0,0 +1,13 @@
+{
+  "runtimeOptions": {
+    "tfm": "net10.0",
+    "framework": {
+      "name": "Microsoft.NETCore.App",
+      "version": "10.0.0"
+    },
+    "configProperties": {
+      "System.Reflection.Metadata.MetadataUpdater.IsSupported": false,
+      "System.Runtime.Serialization.EnableUnsafeBinaryFormatterSerialization": false
+    }
+  }
+}

package/runtime/managed/insight-heap/NuGet.Config

@@ -0,0 +1 @@
+<?xml version="1.0" encoding="utf-8"?><configuration><packageSources><clear/><add key="nuget.org" value="https://api.nuget.org/v3/index.json"/></packageSources></configuration>

package/runtime/managed/insight-heap/Program.cs

@@ -0,0 +1,20 @@
+// MIT first-party bounded offline ClrMD queries. No attachment or expression evaluation.
+using Microsoft.Diagnostics.Runtime;
+using System.Collections.Immutable;
+using System.Runtime.InteropServices;
+using System.Text.Json;
+using System.Text.Json.Serialization;
+sealed class Plan {public int Schema{get;set;}public string Input{get;set;}="";public string Dac{get;set;}="";public string View{get;set;}="overview";public string? Type{get;set;}public string? Address{get;set;}public uint? Thread{get;set;}public int Runtime{get;set;}public int Limit{get;set;}=50;public int Offset{get;set;}public int MaxObjects{get;set;}=1000000;}
+sealed class NoFiles:IFileLocator {public string? FindPEImage(string f,int t,int s,bool c)=>null;public string? FindPEImage(string f,SymbolProperties p,ImmutableArray<byte>b,OSPlatform o,bool c)=>null;}
+static class Program {
+ static readonly JsonSerializerOptions Json=new(){PropertyNamingPolicy=JsonNamingPolicy.CamelCase,DefaultIgnoreCondition=JsonIgnoreCondition.WhenWritingNull};
+ static string Address(ulong address)=>"0x"+address.ToString("x");
+ static object Field(ClrObject obj,ClrInstanceField field){try{object? value=field.ElementType switch{ClrElementType.Boolean=>obj.ReadField<bool>(field),ClrElementType.Char=>obj.ReadField<char>(field).ToString(),ClrElementType.Int8=>obj.ReadField<sbyte>(field),ClrElementType.UInt8=>obj.ReadField<byte>(field),ClrElementType.Int16=>obj.ReadField<short>(field),ClrElementType.UInt16=>obj.ReadField<ushort>(field),ClrElementType.Int32=>obj.ReadField<int>(field),ClrElementType.UInt32=>obj.ReadField<uint>(field),ClrElementType.Int64=>obj.ReadField<long>(field).ToString(System.Globalization.CultureInfo.InvariantCulture),ClrElementType.UInt64=>obj.ReadField<ulong>(field).ToString(System.Globalization.CultureInfo.InvariantCulture),ClrElementType.Float=>obj.ReadField<float>(field).ToString(System.Globalization.CultureInfo.InvariantCulture),ClrElementType.Double=>obj.ReadField<double>(field).ToString(System.Globalization.CultureInfo.InvariantCulture),ClrElementType.String=>obj.ReadStringField(field,257),_=>field.IsObjectReference?Address(obj.ReadObjectField(field).Address):null};bool truncated=value is string str&&field.ElementType==ClrElementType.String&&str.Length>256;if(truncated)value=((string)value!)[..256];return new{name=field.Name,type=field.Type?.Name,kind=field.ElementType.ToString(),value,available=value is not null,truncated};}catch(Exception error){return new{name=field.Name,type=field.Type?.Name,kind=field.ElementType.ToString(),available=false,error=error.Message};}}
+ static object Query(Plan p){using var target=DataTarget.LoadDump(p.Input,new DataTargetOptions{FileLocator=new NoFiles(),SymbolPaths=[]});if(p.Runtime<0||p.Runtime>=target.ClrVersions.Length)throw new InvalidOperationException("No selected CLR runtime in this dump");var info=target.ClrVersions[p.Runtime];using var runtime=info.CreateRuntime(p.Dac,false);var heap=runtime.Heap;object observation;bool complete=true;string? reason=null;
+ if(p.View=="overview"){observation=new{architecture=target.DataReader.Architecture.ToString(),pointerSize=target.DataReader.PointerSize,runtime=info.Version.ToString(),flavor=info.Flavor.ToString(),runtimeIndex=p.Runtime,availableRuntimes=target.ClrVersions.Select((c,n)=>new{index=n,version=c.Version.ToString(),flavor=c.Flavor.ToString()}).ToArray(),canWalkHeap=heap.CanWalkHeap,threads=runtime.Threads.Length};}
+ else if(p.View=="objects"){if(!heap.CanWalkHeap)throw new InvalidOperationException("Heap cannot be walked in this dump; capture a compatible Heap or Full dump");var items=new List<object>();int scanned=0,matching=0;foreach(var obj in heap.EnumerateObjects()){if(scanned>=p.MaxObjects){complete=false;reason="object_scan_bound";break;}scanned++;if(obj.IsFree||!obj.IsValid||p.Type is not null&&obj.Type?.Name!=p.Type)continue;if(matching>=p.Offset&&items.Count<p.Limit)items.Add(new{address=Address(obj.Address),type=obj.Type?.Name,size=obj.Size.ToString()});matching++;}observation=new{items,scannedObjects=scanned,matchingInScannedPrefix=matching,limit=p.Limit,offset=p.Offset,truncated=p.Offset+p.Limit<matching,maxObjects=p.MaxObjects};}
+ else if(p.View=="object"){var obj=heap.GetObject(Convert.ToUInt64(p.Address![2..],16));if(!obj.IsValid||obj.IsFree||obj.Type is null)throw new InvalidOperationException("Address is not a readable managed object in this exact dump");if(p.Type is not null&&p.Type!=obj.Type.Name)throw new InvalidOperationException("Object type differs from the explicit expected type");observation=new{address=Address(obj.Address),type=obj.Type.Name,size=obj.Size.ToString(),fields=obj.Type.Fields.Skip(p.Offset).Take(p.Limit).Select(f=>Field(obj,f)).ToArray(),totalFields=obj.Type.Fields.Length,limit=p.Limit,offset=p.Offset,truncated=p.Offset+p.Limit<obj.Type.Fields.Length};}
+ else if(p.View=="stacks"){var threads=runtime.Threads.Where(t=>!p.Thread.HasValue||t.OSThreadId==p.Thread).ToArray();var rows=threads.Skip(p.Offset).Take(p.Limit).Select(t=>{var frames=t.EnumerateStackTrace(false,129).ToArray();if(frames.Length>128){complete=false;reason="stack_frame_bound";}return new{osThreadId=t.OSThreadId,managedThreadId=t.ManagedThreadId,isAlive=t.IsAlive,frames=frames.Take(128).Select(s=>new{instructionPointer=Address(s.InstructionPointer),stackPointer=Address(s.StackPointer),method=s.Method?.Signature,kind=s.Kind.ToString()}).ToArray(),truncated=frames.Length>128};}).ToArray();if(p.Thread.HasValue&&threads.Length==0)throw new InvalidOperationException("Selected OS thread was not found");observation=new{items=rows,total=threads.Length,limit=p.Limit,offset=p.Offset,truncated=p.Offset+p.Limit<threads.Length};}
+ else throw new InvalidOperationException("Unknown offline dump view");return new{state=complete?"completed":"partial",complete,reason,view=p.View,observation,scope="One immutable dump and explicitly selected matching native DAC. No live attachment, automatic file/symbol download or expression evaluation. Unreadable fields remain unknown; addresses belong only to this dump. A bounded prefix cannot establish global absence."};}
+ public static int Main(string[] args){try{if(args.Length!=1||!Path.IsPathFullyQualified(args[0])||new FileInfo(args[0]).Length>16384)throw new InvalidOperationException("A bounded absolute private plan is required");var p=JsonSerializer.Deserialize<Plan>(File.ReadAllText(args[0]),new JsonSerializerOptions{PropertyNameCaseInsensitive=true})??throw new InvalidOperationException("Missing plan");if(p.Schema!=1||!Path.IsPathFullyQualified(p.Input)||!Path.IsPathFullyQualified(p.Dac)||p.Limit<1||p.Limit>500||p.Offset<0||p.MaxObjects<1||p.MaxObjects>1000000)throw new InvalidOperationException("Invalid dump query bounds");Console.WriteLine(JsonSerializer.Serialize(Query(p),Json));return 0;}catch(Exception error){Console.WriteLine(JsonSerializer.Serialize(new{state="failed",error=error.Message.Length>4096?error.Message[..4096]:error.Message},Json));return 70;}}
+}

package/runtime/managed/insight-heap/README.md

@@ -0,0 +1,16 @@
+# First-party structured managed heap capability
+
+ClrMD 4.2.751201 and its locked dependency closure are implementation libraries behind
+`dotnet-dump query`, not new applications. Consumers reuse a private .NET 10 runtime and
+an explicitly matching native CoreCLR DAC; no SDK is required. No live attachment,
+expression evaluation, automatic file lookup or symbol server is enabled.
+
+`dependencies.json` records all exact original package SHA256/content hashes, source
+commits and full retained license notices. Microsoft authentication libraries are
+upstream transitive dependencies; this helper never creates credentials or symbol
+server clients. The no-files locator returns no external image or downloaded symbol.
+
+The maintainer builder compiles twice in independent temporary directories with SDK
+10.0.303, locked restore and canonical source paths, compares every shipped output,
+and records source, notices and binary hashes. Parsing runs under the common owned
+process deadline. Heap scan, field, string, stack and output bounds remain explicit.