feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds

src/cli/apktoolCommands.ts

@@ -76,6 +76,23 @@ export const registerApktoolCommands = (
       decodeTimeoutMs: cliDecimalField(
         apktoolInputSchemas.decode_android_resources.shape.decode_timeout_ms,
       ),
+      stringOffset: cliDecimalField(
+        apktoolInputSchemas.decode_android_resources.shape.string_offset,
+      ),
+      stringLimit: cliDecimalField(
+        apktoolInputSchemas.decode_android_resources.shape.string_limit,
+      ),
+      maxTotalStrings: cliDecimalField(
+        apktoolInputSchemas.decode_android_resources.shape.max_total_strings,
+      ),
+      maxStringTableBytes: cliDecimalField(
+        apktoolInputSchemas.decode_android_resources.shape
+          .max_string_table_bytes,
+      ),
+      maxTotalStringTableBytes: cliDecimalField(
+        apktoolInputSchemas.decode_android_resources.shape
+          .max_total_string_table_bytes,
+      ),
       strings: z
         .boolean()
         .default(
@@ -104,6 +121,23 @@ export const registerApktoolCommands = (
           ...(options.decodeTimeoutMs === undefined
             ? {}
             : { decode_timeout_ms: options.decodeTimeoutMs }),
+          ...(options.stringOffset === undefined
+            ? {}
+            : { string_offset: options.stringOffset }),
+          ...(options.stringLimit === undefined
+            ? {}
+            : { string_limit: options.stringLimit }),
+          ...(options.maxTotalStrings === undefined
+            ? {}
+            : { max_total_strings: options.maxTotalStrings }),
+          ...(options.maxStringTableBytes === undefined
+            ? {}
+            : { max_string_table_bytes: options.maxStringTableBytes }),
+          ...(options.maxTotalStringTableBytes === undefined
+            ? {}
+            : {
+                max_total_string_table_bytes: options.maxTotalStringTableBytes,
+              }),
         },
         args.path,
       ),