feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds

src/cli/rustCommands.ts

@@ -1,4 +1,8 @@
 import { z } from "incur";
+import { producerLimitsOption } from "./producerLimitsOption.js";
+import { rustProducerLimitsSchema } from "../domain/rust/rustResourceLimits.js";
+import { inspectRustBinaryInputSchema } from "../domain/rust/rustBinary.js";
+import { cliDecimalField } from "./options.js";
 import { createRustBinaryService } from "../composition/rust.js";
 import { CLI_COMMANDS } from "../cliCommandNames.js";
 import { logCliCommand } from "../cliLogging.js";
@@ -33,6 +37,10 @@ export const registerRustCommands = (
     }),
     options: z.object({
       ...analysisEvidenceDeliveryOptions,
+      producerLimits: producerLimitsOption(rustProducerLimitsSchema),
+      maxRustcHashes: cliDecimalField(
+        inspectRustBinaryInputSchema.shape.max_rustc_hashes,
+      ),
       architecture: machoSliceArchitectureSchema
         .optional()
         .describe(
@@ -76,6 +84,12 @@ export const registerRustCommands = (
           const view = decoded.value;
           const input = inspectRustBinaryRequestSchema.safeParse({
             path: absoluteCallerPath(args.path),
+            ...(options.producerLimits === undefined
+              ? {}
+              : { producer_limits: options.producerLimits }),
+            ...(options.maxRustcHashes === undefined
+              ? {}
+              : { max_rustc_hashes: options.maxRustcHashes }),
             ...(options.architecture === undefined
               ? {}
               : { architecture: options.architecture }),
@@ -97,6 +111,12 @@ export const registerRustCommands = (
               service.inspect(
                 {
                   path: input.data.path,
+                  ...(input.data.producer_limits === undefined
+                    ? {}
+                    : { producer_limits: input.data.producer_limits }),
+                  ...(input.data.max_rustc_hashes === undefined
+                    ? {}
+                    : { max_rustc_hashes: input.data.max_rustc_hashes }),
                   ...(input.data.architecture === undefined
                     ? {}
                     : { architecture: input.data.architecture }),