feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds

src/application/managed/ManagedMemberComparisonService.ts

@@ -97,14 +97,18 @@ interface ManagedMemberComparisonPathDependencies {
   readonly readSnapshot: typeof readManagedSnapshot;
 }
 
+interface ManagedMemberComparisonPathInput {
+  readonly leftPath: string;
+  readonly rightPath: string;
+  /** Applied to both sides with inspect_managed_members selection semantics. */
+  readonly typeNames?: readonly string[];
+  readonly maxSnapshotBytes?: number;
+  readonly maxRepresentationBytes?: number;
+}
+
 /** Inspect two local PE artifacts and return one derived comparison Evidence. */
 export const compareManagedMemberPaths = async (
-  input: {
-    readonly leftPath: string;
-    readonly rightPath: string;
-    /** Applied to both sides with inspect_managed_members selection semantics. */
-    readonly typeNames?: readonly string[];
-  },
+  input: ManagedMemberComparisonPathInput,
   dependencies: Partial<ManagedMemberComparisonPathDependencies> = {},
   resources?: ArtifactResourceScope,
 ): Promise<Result<Evidence, AnalysisError>> => {
@@ -146,6 +150,9 @@ export const compareManagedMemberPaths = async (
       let snapshot: Awaited<ReturnType<typeof readManagedSnapshot>>;
       try {
         snapshot = await readSnapshot(path, operation, {
+          ...(input.maxSnapshotBytes === undefined
+            ? {}
+            : { maxBytes: input.maxSnapshotBytes }),
           expectedSha256: target.sha256,
           ...(resources === undefined ? {} : { resources }),
         });
@@ -161,6 +168,9 @@ export const compareManagedMemberPaths = async (
       try {
         inspection = inspectManagedMembersBytes(snapshot.bytes, target, {
           userStrings: false,
+          ...(input.maxRepresentationBytes === undefined
+            ? {}
+            : { maxRepresentationBytes: input.maxRepresentationBytes }),
           ...(input.typeNames === undefined
             ? {}
             : { typeNames: input.typeNames }),
@@ -177,10 +187,19 @@ export const compareManagedMemberPaths = async (
       }
       const evidence = createEvidence(target, MANAGED_STATIC_PROVIDER, {
         operation: "inspect_managed_members",
-        parameters:
-          input.typeNames === undefined
+        parameters: {
+          ...(input.typeNames === undefined
             ? {}
-            : { type_names: [...input.typeNames] },
+            : { type_names: [...input.typeNames] }),
+          ...(input.maxSnapshotBytes === undefined
+            ? {}
+            : { max_snapshot_bytes: input.maxSnapshotBytes }),
+          ...(input.maxRepresentationBytes === undefined
+            ? {}
+            : {
+                max_metadata_representation_bytes: input.maxRepresentationBytes,
+              }),
+        },
         result: inspection,
         rawResult: null,
         limitations: inspection.limitations,
@@ -223,11 +242,7 @@ const createManagedMemberComparisonEvidence = (
   left: Evidence,
   right: Evidence,
   result: ManagedMemberComparisonResult,
-  sourcePaths?: {
-    readonly leftPath: string;
-    readonly rightPath: string;
-    readonly typeNames?: readonly string[];
-  },
+  pathRequest?: ManagedMemberComparisonPathInput,
 ): Evidence =>
   createEvidence(undefined, MANAGED_WORKFLOW_PROVIDER, {
     predicateType: "rea.managed-member-comparison",
@@ -235,15 +250,24 @@ const createManagedMemberComparisonEvidence = (
     parameters: {
       left_evidence_id: left.evidence_id,
       right_evidence_id: right.evidence_id,
-      ...(sourcePaths === undefined
+      ...(pathRequest === undefined
         ? {}
         : {
-            left_path: sourcePaths.leftPath,
-            right_path: sourcePaths.rightPath,
+            left_path: pathRequest.leftPath,
+            right_path: pathRequest.rightPath,
           }),
-      ...(sourcePaths?.typeNames === undefined
+      ...(pathRequest?.typeNames === undefined
         ? {}
-        : { type_names: [...sourcePaths.typeNames] }),
+        : { type_names: [...pathRequest.typeNames] }),
+      ...(pathRequest?.maxSnapshotBytes === undefined
+        ? {}
+        : { max_snapshot_bytes: pathRequest.maxSnapshotBytes }),
+      ...(pathRequest?.maxRepresentationBytes === undefined
+        ? {}
+        : {
+            max_metadata_representation_bytes:
+              pathRequest.maxRepresentationBytes,
+          }),
     },
     result,
     rawResult: null,
@@ -252,11 +276,11 @@ const createManagedMemberComparisonEvidence = (
     environment: null,
     limitations: result.limitations,
     locations:
-      sourcePaths === undefined
+      pathRequest === undefined
         ? []
         : [
-            { kind: "artifact-path", path: sourcePaths.leftPath },
-            { kind: "artifact-path", path: sourcePaths.rightPath },
+            { kind: "artifact-path", path: pathRequest.leftPath },
+            { kind: "artifact-path", path: pathRequest.rightPath },
           ],
     evidenceLinks: result.evidence_links,
   });