feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds
This commit is contained in:
morluto authored and GitHub committed 2026-11-10 05:11:20 -05:00
1 parent 55b6d2ca20
commit cb4e5cfbff
515 files changed
+21066 -3637

No files matched your search

+51
View File
@@ -1,3 +1,4 @@
import { fridaCapturePolicyInputSchema } from "../domain/fridaCapturePolicy.js";
import { projectCliAnalysisResult } from "./projectCliAnalysisResult.js";
import { z } from "incur";
@@ -176,6 +177,23 @@ export const registerFridaCommands = (
.array(z.string())
.optional()
.describe("Arguments passed to a spawned target"),
captureSessionBytes: cliDecimalField(
fridaCapturePolicyInputSchema.shape.session_bytes,
).describe(
"Session retention bytes including encoded payloads; select before starting the experiment",
),
captureMessageTextBytes: cliDecimalField(
fridaCapturePolicyInputSchema.shape.message_text_bytes,
).describe("Retained bytes per Frida error text field"),
captureMessageTypeBytes: cliDecimalField(
fridaCapturePolicyInputSchema.shape.message_type_bytes,
).describe("Retained bytes per Frida message type"),
captureJsonNodes: cliDecimalField(
fridaCapturePolicyInputSchema.shape.json_nodes,
).describe("Retained JSON nodes per Frida payload"),
captureJsonDepth: cliDecimalField(
fridaCapturePolicyInputSchema.shape.json_depth,
).describe("Retained JSON nesting depth per Frida payload"),
durationMs: cliDecimalField(
z
.number()
@@ -274,6 +292,39 @@ export const registerFridaCommands = (
const result = await service.instrument(
{
...targetInput,
...([
options.captureSessionBytes,
options.captureMessageTextBytes,
options.captureMessageTypeBytes,
options.captureJsonNodes,
options.captureJsonDepth,
].every((value) => value === undefined)
? {}
: {
captureLimits: {
...(options.captureSessionBytes === undefined
? {}
: { session_bytes: options.captureSessionBytes }),
...(options.captureMessageTextBytes === undefined
? {}
: {
message_text_bytes:
options.captureMessageTextBytes,
}),
...(options.captureMessageTypeBytes === undefined
? {}
: {
message_type_bytes:
options.captureMessageTypeBytes,
}),
...(options.captureJsonNodes === undefined
? {}
: { json_nodes: options.captureJsonNodes }),
...(options.captureJsonDepth === undefined
? {}
: { json_depth: options.captureJsonDepth }),
},
}),
source:
options.scriptFile === undefined
? { sourceKind: "inline", source: options.script ?? "" }