feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds

src/cli/goCommands.ts

@@ -12,11 +12,7 @@ import {
 import { localPathStringSchema } from "../domain/localPath.js";
 import { absoluteCallerPath } from "../filesystem/callerPath.js";
 import { machoSliceArchitectureSchema } from "../domain/apple/machoTargetSelection.js";
-import {
-  DEFAULT_MAX_GO_STRING_LITERALS,
-  MAX_GO_STRING_LITERALS_LIMIT,
-  goMaxStringLiteralsSchema,
-} from "../domain/go/goBinary.js";
+import { goResourceBudgetFields } from "../domain/go/goBinary.js";
 import { cliDecimalField } from "./options.js";
 
 /** Resolve caller paths and inspect static build metadata through the shared workflow. */
@@ -42,10 +38,26 @@ export const registerGoCommands = (cli: CliInstance, logger: Logger): void => {
         .describe(
           "Also recover bounded inferred Go UTF-8 string literals from static (ptr, len) headers",
         ),
+      maxInputBytes: cliDecimalField(goResourceBudgetFields.max_input_bytes),
+      maxReportBytes: cliDecimalField(goResourceBudgetFields.max_report_bytes),
+      maxBuildInfoBytes: cliDecimalField(
+        goResourceBudgetFields.max_build_info_bytes,
+      ),
+      maxHeaderSearchBytes: cliDecimalField(
+        goResourceBudgetFields.max_header_search_bytes,
+      ),
       maxStringLiterals: cliDecimalField(
-        goMaxStringLiteralsSchema.optional(),
-      ).describe(
-        `Maximum distinct recovered string literals (1-${String(MAX_GO_STRING_LITERALS_LIMIT)}; default ${String(DEFAULT_MAX_GO_STRING_LITERALS)}; requires --include-string-literals)`,
+        goResourceBudgetFields.max_string_literals,
+      ),
+      maxStringLiteralBytes: cliDecimalField(
+        goResourceBudgetFields.max_string_literal_bytes,
+      ),
+      maxStringBytes: cliDecimalField(goResourceBudgetFields.max_string_bytes),
+      maxStringHeaderScanBytes: cliDecimalField(
+        goResourceBudgetFields.max_string_header_scan_bytes,
+      ),
+      maxStringCandidates: cliDecimalField(
+        goResourceBudgetFields.max_string_candidates,
       ),
     }),
     run: ({ args, options }) =>
@@ -70,9 +82,41 @@ export const registerGoCommands = (cli: CliInstance, logger: Logger): void => {
                           include_string_literals:
                             options.includeStringLiterals,
                         }),
+                    ...(options.maxInputBytes === undefined
+                      ? {}
+                      : { max_input_bytes: options.maxInputBytes }),
+                    ...(options.maxReportBytes === undefined
+                      ? {}
+                      : { max_report_bytes: options.maxReportBytes }),
+                    ...(options.maxBuildInfoBytes === undefined
+                      ? {}
+                      : { max_build_info_bytes: options.maxBuildInfoBytes }),
+                    ...(options.maxHeaderSearchBytes === undefined
+                      ? {}
+                      : {
+                          max_header_search_bytes: options.maxHeaderSearchBytes,
+                        }),
                     ...(options.maxStringLiterals === undefined
                       ? {}
                       : { max_string_literals: options.maxStringLiterals }),
+                    ...(options.maxStringLiteralBytes === undefined
+                      ? {}
+                      : {
+                          max_string_literal_bytes:
+                            options.maxStringLiteralBytes,
+                        }),
+                    ...(options.maxStringBytes === undefined
+                      ? {}
+                      : { max_string_bytes: options.maxStringBytes }),
+                    ...(options.maxStringHeaderScanBytes === undefined
+                      ? {}
+                      : {
+                          max_string_header_scan_bytes:
+                            options.maxStringHeaderScanBytes,
+                        }),
+                    ...(options.maxStringCandidates === undefined
+                      ? {}
+                      : { max_string_candidates: options.maxStringCandidates }),
                   },
                   { signal },
                 ),