feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds

src/cli/captureCommands.ts

@@ -18,6 +18,7 @@ import { finishCliEvidenceCommand } from "./cliEvidenceCallerPath.js";
 import { cliDecimalField, cliDecimalShape } from "./options.js";
 import { localPathStringSchema } from "../domain/localPath.js";
 import { absoluteCallerPath } from "../filesystem/callerPath.js";
+import { producerLimitsOption } from "./producerLimitsOption.js";
 export const registerCaptureCommands = (
   cli: CliInstance,
   logger: Logger,
@@ -27,11 +28,16 @@ export const registerCaptureCommands = (
     "inspect" | "inspectFields" | "close"
   > = createPacketCaptureService(environment),
 ): void => {
+  const { producer_limits: discoveryLimits, ...discoveryShape } =
+    inspectPacketFieldsInputSchema.shape;
+  const { producer_limits: selectedLimits, ...selectedShape } =
+    packetCaptureOptionsSchema.shape;
   cli.command(CLI_COMMANDS.inspectPacketFields, {
     description: "Search installed TShark protocol and field definitions",
     options: z
       .object({
-        ...cliDecimalShape(inspectPacketFieldsInputSchema.shape),
+        ...cliDecimalShape(discoveryShape),
+        producerLimits: producerLimitsOption(discoveryLimits.unwrap()),
         limit: cliDecimalField(
           z
             .number()
@@ -54,13 +60,19 @@ export const registerCaptureCommands = (
             message: "all and limit are mutually exclusive",
           });
       }),
-    run: ({ options: { all, ...options } }) =>
+    run: ({ options: { all, producerLimits, ...options } }) =>
       withCommandCancellation((signal) =>
         logCliCommand(logger, CLI_COMMANDS.inspectPacketFields, async () =>
           finishAnalysisCommand(
             () =>
               service.inspectFields(
-                { ...options, ...(all ? { limit: null } : {}) },
+                {
+                  ...options,
+                  ...(producerLimits === undefined
+                    ? {}
+                    : { producer_limits: producerLimits }),
+                  ...(all ? { limit: null } : {}),
+                },
                 { signal },
               ),
             service,
@@ -79,7 +91,8 @@ export const registerCaptureCommands = (
     }),
     options: z
       .object({
-        ...cliDecimalShape(packetCaptureOptionsSchema.shape),
+        ...cliDecimalShape(selectedShape),
+        producerLimits: producerLimitsOption(selectedLimits.unwrap()),
         match_limit: cliDecimalField(
           z
             .number()
@@ -107,7 +120,7 @@ export const registerCaptureCommands = (
         withinPacketCaptureSelectorBudget,
         packetCaptureSelectorBudgetIssue,
       ),
-    run: ({ args, options: { all_matches, ...options } }) =>
+    run: ({ args, options: { all_matches, producerLimits, ...options } }) =>
       withCommandCancellation((signal) =>
         logCliCommand(logger, CLI_COMMANDS.inspectPacketCapture, async () => {
           return finishCliEvidenceCommand(
@@ -116,6 +129,9 @@ export const registerCaptureCommands = (
               service.inspect(
                 {
                   ...options,
+                  ...(producerLimits === undefined
+                    ? {}
+                    : { producer_limits: producerLimits }),
                   ...(all_matches ? { match_limit: null } : {}),
                   path: absoluteCallerPath(args.path),
                 },