feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds

src/cli/flutterCommands.ts

@@ -1,3 +1,4 @@
+import { safeParseJson } from "../domain/safeJson.js";
 import { projectCliAnalysisResult } from "./projectCliAnalysisResult.js";
 import {
   evidenceSchema,
@@ -11,6 +12,7 @@ import { CLI_COMMANDS } from "../cliCommandNames.js";
 import { logCliCommand } from "../cliLogging.js";
 import {
   flutterInputSchemas,
+  dartPoolPolicySchema,
   type FlutterOperation,
 } from "../domain/flutter/flutterBuildAnalysis.js";
 import type { Logger } from "pino";
@@ -58,11 +60,32 @@ export const registerFlutterCommands = (
       }),
       optionSchema: z.object({
         abi: flutterInputSchemas.inspect_dart_aot.shape.abi,
+        poolPolicy: z
+          .string()
+          .transform((text, context) => {
+            const parsed = safeParseJson(text);
+            if (!parsed.ok) {
+              context.addIssue({
+                code: "custom",
+                message: "pool-policy must be a JSON object",
+              });
+              return z.NEVER;
+            }
+            return parsed.value;
+          })
+          .pipe(dartPoolPolicySchema)
+          .optional()
+          .describe(
+            "JSON printable-run selection: contains, uri_limit (500), token_limit (2000), run_bytes (1024), token_bytes (128). Filters apply before bounded collection; URI/token counts cover matches. Positive safe integers; next call, no restart. Does not raise APK/library/ELF/reply limits.",
+          ),
       }),
       operation: "inspect_dart_aot",
       toInput: (arguments_, options) => ({
         path: arguments_.path,
         ...(options.abi === undefined ? {} : { abi: options.abi }),
+        ...(options.poolPolicy === undefined
+          ? {}
+          : { pool_policy: options.poolPolicy }),
       }),
     },
   ];