@eyeauras/insight-cli 0.1.0 → 0.2.1

package/runtime/native/binary/notices/utfcpp-4.0.9--utfcpp-4.0.9__LICENSE

@@ -0,0 +1,23 @@
+Boost Software License - Version 1.0 - August 17th, 2003
+
+Permission is hereby granted, free of charge, to any person or organization
+obtaining a copy of the software and accompanying documentation covered by
+this license (the "Software") to use, reproduce, display, distribute,
+execute, and transmit the Software, and to prepare derivative works of the
+Software, and to permit third-parties to whom the Software is furnished to
+do so, all subject to the following:
+
+The copyright notices in the Software and this entire statement, including
+the above license grant, this restriction and the following disclaimer,
+must be included in all copies of the Software, in whole or in part, and
+all derivative works of the Software, unless such copies or derivative
+works are solely in the form of machine-executable object code generated by
+a source language processor.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. IN NO EVENT
+SHALL THE COPYRIGHT HOLDERS OR ANYONE DISTRIBUTING THE SOFTWARE BE LIABLE
+FOR ANY DAMAGES OR OTHER LIABILITY, WHETHER IN CONTRACT, TORT OR OTHERWISE,
+ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.

package/runtime/native/binary/provenance.json

@@ -0,0 +1,48 @@
+{
+  "schema": 1,
+  "compiler": "Apple clang version 17.0.0 (clang-1700.3.19.1)",
+  "platform": "darwin-arm64",
+  "minimumSystem": "macOS14+",
+  "sdkVersion": "26.0",
+  "inputs": {
+    "helper.cpp": "2350499d7db21318791027cc859c714d9902cc746525cf5e2b9a560285ec69fe",
+    "dependencies.json": "e9d5960a2d4920ca442df3ecc77730588708fc7e934ba4a6831a1cc6ed4f6819",
+    "notices/LIEF-LICENSE.txt": "998dc6a9d251b4d9d4274d8a7e121fe20c33b1dfd4300bca276e87da23dc582e",
+    "notices/LIEF-attribution.txt": "14353f94305648fa88cf28a78fe92ea24420e7851802b8f01930b3f09eee2656",
+    "notices/Catch2-3.12.0--Catch2-3.12.0__LICENSE.txt": "c9bff75738922193e67fa726fa225535870d2aa1059f91452c411736284ad566",
+    "notices/Melkor_ELF_Fuzzer-ac2495b--elf_fuzzer-master__LICENSE.txt": "8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903",
+    "notices/expected-1.3.1--expected-1.3.1__COPYING": "a2010f343487d3f7618affe54f789f5487602331c0a8d03f49e9a7c547cf0499",
+    "notices/frozen-61dce5a--frozen-61dce5ae18ca59931e27675c468e64118aba8744__AUTHORS": "e87cb6aaac199b412d4a0c85b3507891dfa5054a5b80169b07e39142a9226264",
+    "notices/frozen-61dce5a--frozen-61dce5ae18ca59931e27675c468e64118aba8744__LICENSE": "f6099ed23682840ae60a76fce378faae9b5c75f7d162188883e13b790ca18b98",
+    "notices/mbedtls-4.0.0.r0.gec4044008d--LICENSE": "9b405ef4c89342f5eae1dd828882f931747f71001cfba7d114801039b52ad09b",
+    "notices/mbedtls-4.0.0.r0.gec4044008d--framework__LICENSE": "11402351e38392230bb8934ba1095c0c0049a296c0f8821f76e4672dff54b490",
+    "notices/mbedtls-4.0.0.r0.gec4044008d--tf-psa-crypto__framework__LICENSE": "11402351e38392230bb8934ba1095c0c0049a296c0f8821f76e4672dff54b490",
+    "notices/mbedtls-4.0.0.r0.gec4044008d--tf-psa-crypto__LICENSE": "da8c58f05f135a9d15e9ffad4ecf854cfcc1f014c8abfd75ba05f62630ccc118",
+    "notices/nanobind-2.13.0.r18.g4db9ed3f--LICENSE": "f305091a4e57805870b217a28ea4b1f16610eece8457d2370f822a9696b75836",
+    "notices/nanobind-2.13.0.r18.g4db9ed3f--ext__robin_map__LICENSE": "11f2c685ba565a31aef1219f63a7a8845602c97bff70016b9e3278dfe51a2ec5",
+    "notices/spdlog-1.17.0--spdlog-1.17.0__LICENSE": "d678c20826e1392578508e1c78649a1e3c31bda05ef4388d967dbd654461b140",
+    "notices/span-attribution.txt": "2bb98c5155725644491fe894aa468d0b76f17b90d378d0990d723b36e17cab85",
+    "notices/utfcpp-4.0.9--utfcpp-4.0.9__LICENSE": "c9bff75738922193e67fa726fa225535870d2aa1059f91452c411736284ad566",
+    "notices/json-LICENSE.MIT": "46a65cffd1ea955132d95a8dd921640714a8d6b537d2e4e482d31145ae95b603",
+    "notices/span-LICENSE_1_0.txt": "c9bff75738922193e67fa726fa225535870d2aa1059f91452c411736284ad566"
+  },
+  "files": {
+    "insight-binary-darwin-arm64": {
+      "size": 3038984,
+      "sha256": "ffbe5f37ec336a96fe4e885247e321b63cbd5b8f5d7809d8fa00f812ac0d25b9"
+    }
+  },
+  "sourceLicense": "MIT",
+  "dependencies": "dependencies.json",
+  "reproducible": true,
+  "staticLibrary": {
+    "name": "LIEF-1.0.0-Darwin-arm64.tar.gz",
+    "sha256": "c7bedf2e2acab9bced1c8701b06261fc6f4eba1957f80cbf86323a3f5e172167",
+    "url": "https://github.com/lief-project/LIEF/releases/download/1.0.0/LIEF-1.0.0-Darwin-arm64.tar.gz",
+    "mirror": "https://github.com/iXab3r/insight-cli/releases/download/tool-lief-1.0.0-r1/LIEF-1.0.0-Darwin-arm64.tar.gz"
+  },
+  "linkedSystemLibraries": [
+    "/usr/lib/libc++.1.dylib",
+    "/usr/lib/libSystem.B.dylib"
+  ]
+}

package/runtime/native/child-deadline-linux.c

@@ -0,0 +1,24 @@
+/* MIT; first-party owned Linux launcher. PDEATHSIG also bounds tools that replace SIGALRM. */
+#define _GNU_SOURCE
+#include <errno.h>
+#include <signal.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <sys/prctl.h>
+#include <sys/types.h>
+#include <sys/wait.h>
+#include <unistd.h>
+static long integer(const char *s,long maximum){char *end=NULL;errno=0;long v=strtol(s,&end,10);return errno||!end||*end||v<1||v>maximum?-1:v;}
+int main(int argc,char **argv){
+ if(argc<4||argv[3][0]!='/')return 64;
+ long seconds=integer(argv[1],600),owner=integer(argv[2],2147483647);if(seconds<0||owner<0)return 64;
+ if(prctl(PR_SET_PDEATHSIG,SIGKILL)||getppid()!=(pid_t)owner)return 70;
+ sigset_t signals;sigemptyset(&signals);sigaddset(&signals,SIGALRM);sigaddset(&signals,SIGTERM);sigaddset(&signals,SIGINT);
+ if(sigprocmask(SIG_UNBLOCK,&signals,NULL)||signal(SIGALRM,SIG_DFL)==SIG_ERR)return 70;
+ alarm((unsigned)seconds);pid_t parent=getpid(),child=fork();if(child<0)return 70;
+ if(!child){if(prctl(PR_SET_PDEATHSIG,SIGKILL)||getppid()!=parent)_exit(70);alarm(0);execv(argv[3],argv+3);perror("Owned native executable could not start");_exit(127);}
+ int status;while(waitpid(child,&status,0)<0){if(errno!=EINTR)return 70;}
+ if(WIFEXITED(status))return WEXITSTATUS(status);
+ if(WIFSIGNALED(status)){int sig=WTERMSIG(status);signal(sig,SIG_DFL);kill(getpid(),sig);return 128+sig;}
+ return 70;
+}

package/runtime/native/child-deadline-linux.provenance.json

@@ -0,0 +1,17 @@
+{
+  "schema": 1,
+  "sourceSha256": "bc2a95954cdd1d1bb4851228ea93ca2719bc3be84b1a7eaba2e3127a9db0bd15",
+  "sha256": "e070e2de9a21aea78f224062877cdc0264be11229af314d3b88ff3b6bd77e26f",
+  "size": 16720,
+  "compiler": "cc (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0",
+  "libc": "glibc 2.35",
+  "nativeVerification": "https://github.com/iXab3r/insight-cli/actions/runs/39050776071",
+  "checks": {
+    "actualOwnedConfigRead": true,
+    "killOnExitTerminatesDescendants": true,
+    "systemLibcOnly": true,
+    "launcherKillBounded": true,
+    "timeoutBounded": true,
+    "ownerLossBounded": true
+  }
+}

package/runtime/native/deadline-alarm.c

@@ -0,0 +1,33 @@
+/* MIT; first-party constructor for owned Frida helper execs, never injected into the target. */
+#include <errno.h>
+#include <fcntl.h>
+#include <libproc.h>
+#include <signal.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <time.h>
+#include <unistd.h>
+__attribute__((constructor)) static void arm_owned_deadline(void) {
+    const char *raw = getenv("INSIGHT_NATIVE_DEADLINE_UNIX_SECONDS");
+    const char *directory = getenv("INSIGHT_NATIVE_DEADLINE_RECEIPTS");
+    if (!raw || !directory || directory[0] != '/') _exit(70);
+    errno = 0; char *end = NULL;
+    long long deadline = strtoll(raw, &end, 10), now = (long long)time(NULL);
+    if (errno || !end || *end || deadline <= now || deadline - now > 600) _exit(70);
+    sigset_t signals;
+    if (sigemptyset(&signals) || sigaddset(&signals, SIGALRM) ||
+        sigprocmask(SIG_UNBLOCK, &signals, NULL) || signal(SIGALRM, SIG_DFL) == SIG_ERR) _exit(70);
+    alarm((unsigned int)(deadline - now));
+    struct proc_bsdinfo info;
+    if (proc_pidinfo(getpid(), PROC_PIDTBSDINFO, 0, &info, sizeof(info)) != sizeof(info)) _exit(70);
+    char path[4096], body[512];
+    int length = snprintf(path, sizeof(path), "%s/%d.json", directory, getpid());
+    if (length < 0 || length >= (int)sizeof(path)) _exit(70);
+    int fd = open(path, O_WRONLY | O_CREAT | O_EXCL | O_NOFOLLOW, 0600);
+    if (fd < 0) _exit(70);
+    length = snprintf(body, sizeof(body), "{\"protocol\":1,\"pid\":%d,\"parentPid\":%d,\"birthSeconds\":%llu,\"birthMicroseconds\":%llu,\"deadlineUnixSeconds\":%lld}\n",
+        getpid(), getppid(), info.pbi_start_tvsec, info.pbi_start_tvusec, deadline);
+    if (length < 0 || length >= (int)sizeof(body) || write(fd, body, (size_t)length) != length || fsync(fd)) _exit(70);
+    close(fd);
+}

package/runtime/native/deadline-alarm.provenance.json

@@ -0,0 +1,22 @@
+{
+  "platform": "darwin-arm64-and-arm64e",
+  "compiler": "Apple clang version 17.0.0 (clang-1700.3.19.1)",
+  "sdk": "26.0",
+  "sourceSha256": "8c0673605c86736c2a694fbb344bcc1dee136ee68aa042ebd889eb84572bc635",
+  "sha256": "cd5ebd65aa419b79cb327f2ae872f98f3fd222b93049c909e409776eab65b8ef",
+  "size": 99648,
+  "flags": [
+    "-arch",
+    "arm64",
+    "-arch",
+    "arm64e",
+    "-mmacosx-version-min=13.0",
+    "-dynamiclib",
+    "-Oz",
+    "-g0",
+    "-fno-ident",
+    "-fno-stack-protector",
+    "-Wl,-install_name,@rpath/insight-deadline-alarm.dylib"
+  ],
+  "reproducibility": "Two independent builds in different temporary directories produced identical bytes. ARM64e requires the Apple ABI and LC_UUID; both slices only link system libSystem."
+}

package/runtime/native/deadline-exec.c

@@ -0,0 +1,24 @@
+/* MIT; first-party internal exec helper. A kernel alarm survives exec and owner loss. */
+#include <errno.h>
+#include <signal.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+int main(int argc, char **argv) {
+    if (argc == 2 && strcmp(argv[1], "--version") == 0) {
+        puts("insight-deadline-exec 1"); return 0;
+    }
+    if (argc < 4 || strcmp(argv[2], "--") != 0 || argv[3][0] != '/') return 64;
+    char *end = NULL;
+    errno = 0;
+    long seconds = strtol(argv[1], &end, 10);
+    if (errno || !end || *end || seconds < 1 || seconds > 600) return 64;
+    sigset_t signals;
+    if (sigemptyset(&signals) || sigaddset(&signals, SIGALRM) ||
+        sigprocmask(SIG_UNBLOCK, &signals, NULL) || signal(SIGALRM, SIG_DFL) == SIG_ERR) return 70;
+    alarm((unsigned int)seconds);
+    execv(argv[3], &argv[3]);
+    perror("Owned deadline executable could not start");
+    return 127;
+}

package/runtime/native/deadline-exec.provenance.json

@@ -0,0 +1,17 @@
+{
+  "platform": "darwin-arm64",
+  "compiler": "LLVM 22.1.8",
+  "sourceSha256": "d4f17b44fe6703073fd090aff5a2770441e185c1ece07f06228ee0f21dbec47e",
+  "sha256": "32c146075d1c83422b068eeedd4a244d5e30cb768b279b185756c5d3b8008d88",
+  "size": 33824,
+  "flags": [
+    "--target=arm64-apple-macos13.0",
+    "-Oz",
+    "-g0",
+    "-fno-ident",
+    "-fno-stack-protector",
+    "-Wl,-no_uuid",
+    "-Wl,-platform_version,macos,13.0,13.0"
+  ],
+  "reproducibility": "Two builds in different temporary directories produced identical bytes. Ad-hoc signature verified; only libSystem is dynamically linked."
+}

package/runtime/native/dnspy-extension/Bridge.cs

@@ -0,0 +1,58 @@
+// MIT; first-party typed extension. No user C# expression or arbitrary command is evaluated.
+using System.ComponentModel.Composition;using System.Globalization;using System.IO;using System.Text;using System.Text.Json;using System.Windows;using dnSpy.Contracts.App;using dnSpy.Contracts.Documents;using dnSpy.Contracts.Debugger;using dnSpy.Contracts.Debugger.Breakpoints.Code;using dnSpy.Contracts.Debugger.DotNet.Code;using dnSpy.Contracts.Debugger.DotNet.CorDebug;using dnSpy.Contracts.Debugger.DotNet.Evaluation;using dnSpy.Contracts.Debugger.Evaluation;using dnSpy.Contracts.Metadata;using dnlib.DotNet;using dnlib.DotNet.Emit;using dnlib.DotNet.Writer;using System.Security.Cryptography;using System.Runtime.InteropServices;using Microsoft.Win32.SafeHandles;
+namespace Insight.DnSpy;
+public sealed class Plan {public int Schema{get;set;}public string Nonce{get;set;}="";public string Mode{get;set;}="";public string Input{get;set;}="";public string Result{get;set;}="";public string Module{get;set;}="";public string Output{get;set;}="";public string BuildKey{get;set;}="";public string Runtime{get;set;}="framework";public uint Token{get;set;}public uint Offset{get;set;}public uint[] Parameters{get;set;}=[];public string[] Arguments{get;set;}=[];public int? ExpectedConstant{get;set;}public int? ReplacementConstant{get;set;}}
+[Export(typeof(IAppCommandLineArgsHandler))]
+sealed class Bridge:IAppCommandLineArgsHandler {
+ readonly Lazy<DbgManager> manager;readonly Lazy<DbgCodeBreakpointsService> breakpoints;readonly Lazy<DbgDotNetCodeLocationFactory> locations;readonly Lazy<DbgLanguageService> languages;readonly Lazy<IDsDocumentService> documents;readonly Queue<string> messages=new();Plan? plan;DbgCodeBreakpoint? breakpoint;DbgThread? paused;bool done,started;System.Threading.Timer? deadline;
+ [ImportingConstructor] public Bridge(Lazy<DbgManager> manager,Lazy<DbgCodeBreakpointsService> breakpoints,Lazy<DbgDotNetCodeLocationFactory> locations,Lazy<DbgLanguageService> languages,Lazy<IDsDocumentService> documents){this.manager=manager;this.breakpoints=breakpoints;this.locations=locations;this.languages=languages;this.documents=documents;}
+ public double Order=>10000;
+ [DllImport("kernel32.dll",EntryPoint="GetFinalPathNameByHandleW",CharSet=CharSet.Unicode,SetLastError=true)]static extern uint FinalPath(SafeFileHandle handle,StringBuilder path,uint length,uint flags);
+ static string CanonicalFile(string path){using var handle=File.OpenHandle(path,FileMode.Open,FileAccess.Read,FileShare.ReadWrite|FileShare.Delete);var name=new StringBuilder(32768);uint length=FinalPath(handle,name,(uint)name.Capacity,0);if(length==0||length>=name.Capacity)throw new IOException("Could not authenticate the managed module's native path");return name.ToString();}
+ static bool SameFile(string? left,string right)=>left!=null&&string.Equals(CanonicalFile(left),CanonicalFile(right),StringComparison.OrdinalIgnoreCase);
+ static string Quote(string text){var b=new StringBuilder("\"");int slashes=0;foreach(char c in text){if(c=='\\'){slashes++;continue;}b.Append('\\',c=='"'?slashes*2+1:slashes);b.Append(c);slashes=0;}return b.Append('\\',slashes*2).Append('"').ToString();}
+ public void OnNewArgs(IAppCommandLineArgs args){var path=args.GetArgumentValue("--insight-plan");if(path is null)return;if(plan!=null)throw new InvalidOperationException("A private bridge accepts one operation");try{
+  if(new FileInfo(path).Length>16384)throw new InvalidOperationException("Plan exceeds its bound");plan=JsonSerializer.Deserialize<Plan>(File.ReadAllText(path))??throw new InvalidOperationException("Plan is missing");if(plan.Schema!=1)throw new InvalidOperationException("Private plan schema differs");if(!Guid.TryParse(plan.Nonce,out _))throw new InvalidOperationException("Private plan nonce is invalid");if(!Path.IsPathFullyQualified(plan.Input))throw new InvalidOperationException("Private plan input must be absolute");if(!Path.IsPathFullyQualified(plan.Result))throw new InvalidOperationException("Private plan result must be absolute");if(!string.Equals(Path.GetDirectoryName(Path.GetFullPath(plan.Result)),Path.GetDirectoryName(Path.GetFullPath(path)),StringComparison.OrdinalIgnoreCase))throw new InvalidOperationException("Private plan result must remain beside its plan");if(plan.Parameters.Length>32||plan.Arguments.Length>64)throw new InvalidOperationException("Private plan arrays exceed their bounds");
+  if(plan.Mode=="patch-engine"){PatchEngine();return;}if(plan.Mode=="edit-constant"){Edit();return;}if(plan.Mode!="debug")throw new InvalidOperationException("Unknown typed operation");
+  if(string.IsNullOrEmpty(plan.Module))plan.Module=plan.Input;if(!Path.IsPathFullyQualified(plan.Module)||Path.GetDirectoryName(plan.Module)!=Path.GetDirectoryName(plan.Input))throw new InvalidOperationException("The selected managed module must be a captured input companion");
+  var m=manager.Value;if(m.IsDebugging)throw new InvalidOperationException("A private debugger must start empty");
+  breakpoint=breakpoints.Value.Add(new DbgCodeBreakpointInfo(locations.Value.Create(ModuleId.Create(plan.Module),plan.Token,plan.Offset),new DbgCodeBreakpointSettings{IsEnabled=true}));if(breakpoint==null)throw new InvalidOperationException("Breakpoint could not be reserved");
+  m.MessageProcessExited+=(_,e)=>Note("process_exit:0x"+unchecked((uint)e.ExitCode).ToString("x8"));m.MessageModuleLoaded+=(_,e)=>Note("module:"+e.Module.Filename);m.MessageUserMessage+=(_,e)=>Note("engine:"+e.Message);m.MessageProgramMessage+=(_,e)=>Note("program:"+e.Message);m.DbgManagerMessage+=(_,e)=>Note(e.MessageKind+":"+e.Message);
+  m.MessageBoundBreakpoint+=(_,e)=>{if(e.BoundBreakpoint.Breakpoint==breakpoint){paused=e.Thread;e.Pause=true;}};
+  m.ProcessPaused+=(_,e)=>{if(paused!=null&&!done){var thread=paused;paused=null;try{Snapshot(thread);}catch(Exception error){Fail(error);}}};
+  m.IsDebuggingChanged+=(_,_)=>{if(!m.IsDebugging&&started){if(!done)Fail(new InvalidOperationException("Debuggee exited before the selected breakpoint"));Quit(done?0:70);}};
+  deadline=new System.Threading.Timer(_=>m.Dispatcher.BeginInvoke(()=>Fail(new TimeoutException("Private debugger deadline exceeded"))),null,TimeSpan.FromSeconds(45),Timeout.InfiniteTimeSpan);
+  CorDebugStartDebuggingOptions options=plan.Runtime=="framework"?new DotNetFrameworkStartDebuggingOptions():plan.Runtime=="core"?new DotNetStartDebuggingOptions{UseHost=false}:throw new InvalidOperationException("Select framework or core runtime");options.Filename=plan.Input;options.CommandLine=string.Join(" ",plan.Arguments.Select(Quote));options.WorkingDirectory=Path.GetDirectoryName(plan.Input);options.BreakKind=PredefinedBreakKinds.DontBreak;started=true;var error=m.Start(options);if(error!=null)throw new InvalidOperationException(error);
+ }catch(Exception error){Console.Error.WriteLine(error.ToString());try{if(Path.IsPathFullyQualified(path))File.WriteAllText(path+".bridge-error.txt",error.ToString());}catch{}Fail(error);}}
+ void PatchEngine(){var p=plan!;const string original="13e0c4ea5396d071cdc7e31f0e5e9036c51da734a00b27d9d3dfeda9fa5b722f";
+  string Hash(string file)=>Convert.ToHexStringLower(SHA256.HashData(File.ReadAllBytes(file)));
+  if(Hash(p.Input)!=original||!Path.IsPathFullyQualified(p.Output)||File.Exists(p.Output)||!Path.IsPathFullyQualified(p.BuildKey)||Hash(p.BuildKey)!="6f84725f0755f4428cc8c95c5d1d0997445a057266bf810dc090607d4a2d0ae6")throw new InvalidOperationException("Pinned engine, public upstream build key and a new output are required");
+  using(var module=ModuleDefMD.Load(p.Input)){var key=new StrongNameKey(File.ReadAllBytes(p.BuildKey));if(!module.IsStrongNameSigned||!module.Assembly.PublicKey.Data.SequenceEqual(key.PublicKey))throw new InvalidOperationException("Upstream public build key does not match the engine identity");
+   var method=module.GetTypes().Single(t=>t.FullName=="dndbg.Engine.NativeMethods").Methods.Single(m=>m.Name=="LoadLibraryEx");var map=method.ImplMap??throw new InvalidOperationException("Native loader import is absent");
+   if(map.Name!="LoadLibraryEx"||map.Module.Name!="kernel32"||!map.IsCharSetAnsi||method.ParamDefs.Single(d=>d.Sequence==1).MarshalType?.NativeType!=NativeType.LPStr)throw new InvalidOperationException("Upstream native loader declaration changed");
+   map.Name="LoadLibraryExW";map.Attributes=(map.Attributes&~PInvokeAttributes.CharSetMask)|PInvokeAttributes.CharSetUnicode|PInvokeAttributes.NoMangle;method.ParamDefs.Single(d=>d.Sequence==1).MarshalType=new MarshalType(NativeType.LPWStr);
+   var options=new ModuleWriterOptions(module);options.MetadataOptions.Flags|=MetadataFlags.PreserveAll;options.PEHeadersOptions.TimeDateStamp=0;options.InitializeStrongNameSigning(module,key);module.Write(p.Output,options);
+   using(var check=ModuleDefMD.Load(p.Output)){var rewritten=check.ResolveToken(method.MDToken) as MethodDef;if(check.Assembly.FullName!=module.Assembly.FullName||!check.IsStrongNameSigned||rewritten?.ImplMap?.Name!="LoadLibraryExW"||rewritten.ParamDefs.Single(d=>d.Sequence==1).MarshalType?.NativeType!=NativeType.LPWStr)throw new InvalidOperationException("Rewritten native loader failed identity/readback verification");}
+  }Save(new{state="completed",mode=p.Mode,beforeSha256=original,afterSha256=Hash(p.Output),unicodeLoader=true,strongNameIdentityPreserved=true});Quit(0);
+ }
+ void Edit(){var p=plan!;if(p.ExpectedConstant is null||p.ReplacementConstant is null||!Path.IsPathFullyQualified(p.Output)||File.Exists(p.Output)||Path.GetFullPath(p.Output)==Path.GetFullPath(p.Input))throw new InvalidOperationException("A new output and explicit expected/replacement constants are required");
+  var document=documents.Value.TryGetOrCreate(DsDocumentInfo.CreateDocument(p.Input))??throw new InvalidOperationException("dnSpy could not load the document");var module=document.ModuleDef??throw new InvalidOperationException("No managed module");var method=module.ResolveToken(p.Token) as MethodDef??throw new InvalidOperationException("Token is not a method");var instruction=method.Body?.Instructions.SingleOrDefault(i=>i.Offset==p.Offset)??throw new InvalidOperationException("No IL instruction at the selected offset");if(!instruction.IsLdcI4()||instruction.GetLdcI4Value()!=p.ExpectedConstant)throw new InvalidOperationException("Expected IL constant changed");instruction.OpCode=OpCodes.Ldc_I4;instruction.Operand=p.ReplacementConstant.Value;module.Write(p.Output);Save(new{state="completed",mode=p.Mode,method=method.FullName,token=p.Token,offset=p.Offset,before=p.ExpectedConstant,after=p.ReplacementConstant,editorDocumentLoaded=true});Quit(0);
+ }
+ void Snapshot(DbgThread thread){var p=plan!;var frames=thread.GetFrames(64);try{var frame=frames.FirstOrDefault(f=>f.FunctionToken==p.Token&&SameFile(f.Module?.Filename,p.Module))??throw new InvalidOperationException("Selected breakpoint frame is unavailable");var runtime=frame.Runtime.GetDotNetRuntime();var values=runtime.Dispatcher.Invoke(()=>{
+   var context=languages.Value.GetCurrentLanguage(frame.Runtime.RuntimeKindGuid).CreateContext(frame);try{var info=new DbgEvaluationInfo(context,frame);return p.Parameters.Select(index=>{var value=runtime.GetParameterValue(info,index);if(!value.IsNormalResult||value.Value==null)throw new InvalidOperationException(value.ErrorMessage??"Parameter unavailable");using(value.Value){var raw=value.Value.GetRawValue();if(!raw.HasRawValue)throw new InvalidOperationException("Parameter has no primitive raw value");var text=Convert.ToString(raw.RawValue,CultureInfo.InvariantCulture)??"";if(text.Length>4096)throw new InvalidOperationException("Parameter value exceeds its bound");return new{index,type=value.Value.Type.FullName,value=text};}}).ToArray();}finally{context.Close();}});
+   Save(new{state="completed",mode=p.Mode,pid=thread.Process.Id,thread=thread.Id,token=p.Token,offset=frame.FunctionOffset,parameters=values,nativeMessages=Messages(),frames=frames.Select(f=>new{token=f.FunctionToken,offset=f.FunctionOffset,module=f.Module?.Filename}).ToArray()});Quit(0);
+  }finally{foreach(var frame in frames)frame.Close();}}
+ void Note(string value){lock(messages){if(messages.Count==64)messages.Dequeue();messages.Enqueue(value.Length>4096?value.Substring(0,4096):value);}}
+ string[] Messages(){lock(messages)return messages.ToArray();}
+ void Save(object data){if(done)return;using(var file=new FileStream(plan!.Result,FileMode.CreateNew,FileAccess.Write,FileShare.Read)){JsonSerializer.Serialize(file,new{schema=1,nonce=plan.Nonce,data});file.Flush(true);}done=true;deadline?.Dispose();}
+ void Fail(Exception error){if(done)return;try{if(plan!=null)Save(new{state="failed",error=error.Message,nativeMessages=Messages()});}finally{Quit(70);}}
+ // One-shot results are flushed first. The native owned Job Object terminates remaining debuggees.
+ // Avoid upstream asynchronous UI teardown reading metadata after the engine has disposed it.
+ static void Quit(int code)=>Environment.Exit(code);
+}
+[dnSpy.Contracts.Extension.ExportExtension]
+sealed class ExtensionEntry:dnSpy.Contracts.Extension.IExtension {
+ public IEnumerable<string> MergedResourceDictionaries=>[];
+ public dnSpy.Contracts.Extension.ExtensionInfo ExtensionInfo=>new(){ShortDescription="Insight typed managed debugger and copy editor"};
+ public void OnEvent(dnSpy.Contracts.Extension.ExtensionEvent value,object? argument){}
+}

package/runtime/native/dnspy-extension/Insight.DnSpy.csproj

@@ -0,0 +1,13 @@
+<Project Sdk="Microsoft.NET.Sdk">
+ <PropertyGroup><TargetFramework>net10.0-windows</TargetFramework><UseWPF>true</UseWPF><EnableWindowsTargeting>true</EnableWindowsTargeting><AssemblyName>Insight.DnSpy.x</AssemblyName><Nullable>enable</Nullable><ImplicitUsings>enable</ImplicitUsings><Deterministic>true</Deterministic><DebugType>none</DebugType><RestorePackagesWithLockFile>true</RestorePackagesWithLockFile></PropertyGroup>
+ <ItemGroup>
+  <Reference Include="dnSpy.Contracts.DnSpy"><HintPath>$(DnSpyRuntime)/dnSpy.Contracts.DnSpy.dll</HintPath><Private>false</Private></Reference>
+  <Reference Include="dnSpy.Contracts.Logic"><HintPath>$(DnSpyRuntime)/dnSpy.Contracts.Logic.dll</HintPath><Private>false</Private></Reference>
+  <Reference Include="dnSpy.Contracts.Debugger"><HintPath>$(DnSpyRuntime)/dnSpy.Contracts.Debugger.dll</HintPath><Private>false</Private></Reference>
+  <Reference Include="dnSpy.Contracts.Debugger.DotNet"><HintPath>$(DnSpyRuntime)/dnSpy.Contracts.Debugger.DotNet.dll</HintPath><Private>false</Private></Reference>
+  <Reference Include="dnSpy.Contracts.Debugger.DotNet.CorDebug"><HintPath>$(DnSpyRuntime)/dnSpy.Contracts.Debugger.DotNet.CorDebug.dll</HintPath><Private>false</Private></Reference>
+  <Reference Include="dnSpy.Debugger.DotNet.Metadata"><HintPath>$(DnSpyRuntime)/dnSpy.Debugger.DotNet.Metadata.dll</HintPath><Private>false</Private></Reference>
+  <Reference Include="dnlib"><HintPath>$(DnSpyRuntime)/dnlib.dll</HintPath><Private>false</Private></Reference>
+  <Reference Include="System.ComponentModel.Composition"><HintPath>$(DnSpyRuntime)/System.ComponentModel.Composition.dll</HintPath><Private>false</Private></Reference>
+ </ItemGroup>
+</Project>

package/runtime/native/dnspy-extension/NuGet.Config

@@ -0,0 +1 @@
+<configuration><packageSources><clear/><add key="nuget.org" value="https://api.nuget.org/v3/index.json" /></packageSources></configuration>

package/runtime/native/dnspy-extension/UNICODE-LOADER.md

@@ -0,0 +1,26 @@
+# Local Unicode loader correction
+
+Pinned dnSpyEx 6.6.0 (`e2bada24b1c63683f41bdc0ae2b0119c686ce88a`)
+uses an ANSI `LoadLibraryEx` declaration in
+`Extensions/dnSpy.Debugger/dnSpy.Debugger.DotNet.CorDebug/dndbg/Engine/NativeMethods.cs`.
+Its Core debugger consequently cannot load dbgshim from a Unicode installation path.
+
+The first-party typed extension locally rewrites only the pinned GPL engine's import
+into `LoadLibraryExW`, Unicode charset, exact spelling and LPWStr first argument.
+It preserves metadata tokens, assembly identity and strong-name signing. The bundled
+596-byte `upstream-public-build.snk` is dnSpy's intentionally public reproducible source
+build key, NOT a secret credential. Original source:
+https://github.com/dnSpyEx/dnSpy/blob/e2bada24b1c63683f41bdc0ae2b0119c686ce88a/dnSpy.snk
+SHA256: 6f84725f0755f4428cc8c95c5d1d0997445a057266bf810dc090607d4a2d0ae6.
+The readback verifies the original public key matches before signing and the assembly
+identity/import after writing. A different input engine or key is refused.
+
+Preparation executes once under the native owned Job; the original engine is replaced
+only after that bootstrap process exits. Managed software is prepared in installation
+staging. External software remains byte-for-byte unchanged: only the 867 known pinned
+vendor files are copied into owned installation storage, prepared and fingerprinted.
+Both external originals and the owned execution tree are checked before every use.
+Uninstall removes the owned copy and preserves the external original and research.
+The upstream archive is cached unmodified. No modified vendor DLL is redistributed.
+The upstream GPL text and corresponding source remain identified by the vendor bundle
+and the pinned source repository. The patch logic itself is supplied as Bridge.cs.

package/runtime/native/dnspy-extension/packages.lock.json

@@ -0,0 +1,6 @@
+{
+  "version": 1,
+  "dependencies": {
+    "net10.0-windows7.0": {}
+  }
+}

package/runtime/native/dnspy-extension/provenance.json

@@ -0,0 +1,27 @@
+{
+  "schema": 1,
+  "sdk": "10.0.303",
+  "target": "net10.0-windows",
+  "sourceLicense": "MIT",
+  "inputs": {
+    "Bridge.cs": "09b58439dc85dfdc15a1c0d578e133d8a43383929b39ee29f1c83937fcb4b1cb",
+    "Insight.DnSpy.csproj": "006adc7b2b8090d6a7273a00805aab82b1d496f33542d8cdf6216412018801e9",
+    "NuGet.Config": "17f8588bd0874138a10e92eb9efee6e346a173591124ab57872f019475f8f81a",
+    "packages.lock.json": "3ea8c3864c8f23b39364f9f40beb868ce4d8ecb62c5a25188dca037417beed3b",
+    "upstream-public-build.snk": "6f84725f0755f4428cc8c95c5d1d0997445a057266bf810dc090607d4a2d0ae6",
+    "vendor-files.json": "692277fde179ae44574ec115cdfdbb685fccbb1c2a489117d26993c413a90d1a"
+  },
+  "contracts": {
+    "dnSpy.Contracts.DnSpy.dll": "1b883b87bb52dad1b1ef677ad7e80e288df2cdf913c791f7bd3072a36e2839e2",
+    "dnSpy.Contracts.Logic.dll": "871b92de3f8dbde673c2a97a0644711acc200b36f5047479e379cc1b2877e56d",
+    "dnSpy.Contracts.Debugger.dll": "ae4959c879de0542a3da9fc41038799ab8b3f5a49a9b196aa93592f6a170121d",
+    "dnSpy.Contracts.Debugger.DotNet.dll": "d646e9daa14f6013bbdcaa3527b14e71da5a046e03a50cfd067d77f493bc0637",
+    "dnSpy.Contracts.Debugger.DotNet.CorDebug.dll": "a719d08143b03e327eb98618e209efdfd790ec611a91f89429d85e647f36e755",
+    "dnSpy.Debugger.DotNet.Metadata.dll": "360ef98e9d0c222d6c52c2c4573ea09098dad147f59208e60a9eb94267959f57",
+    "dnlib.dll": "3b88e0948e2a6c49e5372c7e7d27817f5d2fb7ffed949b40cc98a2e5037b73ef",
+    "System.ComponentModel.Composition.dll": "b2365dd9e0ced7cfa274d44ff668b8b0df28d4417b8e5e660e1c82df1239d7d8"
+  },
+  "sha256": "99bb8ddb2c771d68d6d95beb0b90bc69188a22d42556663929bf9d24b5dc61b8",
+  "size": 37376,
+  "reproducible": true
+}