feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds

src/cli/reverseEngineeringCommands.ts

@@ -17,6 +17,7 @@ import { projectAnalysisError } from "../domain/analysisErrorProjection.js";
 import {
   OBJDUMP_ARTIFACT_OPERATIONS,
   reverseCommandTimeoutSchema,
+  reverseCommandOutputBytesSchema,
   rizinInputSchema,
 } from "../domain/reverseEngineering.js";
 import { logCliCommand } from "../cliLogging.js";
@@ -173,6 +174,7 @@ export const registerReverseEngineeringCommands = (
           "Follow local DWARF debug links. External debug-file identity is not bound to Evidence.",
         ),
       commandTimeoutMs: cliDecimalField(reverseCommandTimeoutSchema),
+      maxOutputBytes: cliDecimalField(reverseCommandOutputBytesSchema),
     }),
     run: ({ args, options }) =>
       withCommandCancellation((signal) =>
@@ -197,6 +199,9 @@ export const registerReverseEngineeringCommands = (
                   ...(options.symbol === undefined
                     ? {}
                     : { symbol: options.symbol }),
+                  ...(options.maxOutputBytes === undefined
+                    ? {}
+                    : { max_output_bytes: options.maxOutputBytes }),
                   ...(options.commandTimeoutMs === undefined
                     ? {}
                     : { command_timeout_ms: options.commandTimeoutMs }),
@@ -220,6 +225,7 @@ export const registerReverseEngineeringCommands = (
     options: z.object({
       ...analysisEvidenceDeliveryOptions,
       commandTimeoutMs: cliDecimalField(reverseCommandTimeoutSchema),
+      maxOutputBytes: cliDecimalField(reverseCommandOutputBytesSchema),
     }),
     run: ({ options }) =>
       withCommandCancellation((signal) =>
@@ -244,6 +250,9 @@ export const registerReverseEngineeringCommands = (
                 service.inspectWithObjdump(
                   {
                     operation: "architectures",
+                    ...(options.maxOutputBytes === undefined
+                      ? {}
+                      : { max_output_bytes: options.maxOutputBytes }),
                     ...(options.commandTimeoutMs === undefined
                       ? {}
                       : { command_timeout_ms: options.commandTimeoutMs }),
@@ -277,6 +286,7 @@ export const registerReverseEngineeringCommands = (
       asmCpu: rizinInputSchema.shape.asm_cpu,
       baseAddress: rizinInputSchema.shape.base_address,
       commandTimeoutMs: cliDecimalField(reverseCommandTimeoutSchema),
+      maxOutputBytes: cliDecimalField(reverseCommandOutputBytesSchema),
     }),
     run: ({ args, options }) =>
       withCommandCancellation((signal) =>
@@ -300,6 +310,9 @@ export const registerReverseEngineeringCommands = (
                   ...(options.baseAddress === undefined
                     ? {}
                     : { base_address: options.baseAddress }),
+                  ...(options.maxOutputBytes === undefined
+                    ? {}
+                    : { max_output_bytes: options.maxOutputBytes }),
                   ...(options.commandTimeoutMs === undefined
                     ? {}
                     : { command_timeout_ms: options.commandTimeoutMs }),