feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds
This commit is contained in:
morluto authored and GitHub committed 2026-11-10 05:11:20 -05:00
1 parent 55b6d2ca20
commit cb4e5cfbff
515 files changed
+21066 -3637

No files matched your search

@@ -1,3 +1,7 @@
import {
JAVASCRIPT_SEMANTIC_PRECISION_DEFAULTS,
type JavaScriptSemanticPrecision,
} from "./javascriptSemanticPrecision.js";
import type {
JavaScriptSemanticPrimitive,
JavaScriptSemanticValue,
@@ -5,7 +9,6 @@ import type {
import { compareUnicodeCodePoints } from "../unicodeCodePointOrder.js";
import { semanticPrimitiveKey } from "./javascriptSemanticProvenance.js";
import {
SEMANTIC_PRIMITIVE_CANDIDATE_LIMIT,
exceedsSemanticPrimitiveStringByteBudget,
semanticResourceLimitUnknown,
} from "./javascriptSemanticResourceLimits.js";
@@ -13,6 +16,7 @@ import {
/** Normalize one bounded collection of possible primitive values. */
export const semanticPrimitiveSet = (
values: readonly JavaScriptSemanticPrimitive[],
precision: JavaScriptSemanticPrecision = JAVASCRIPT_SEMANTIC_PRECISION_DEFAULTS,
): JavaScriptSemanticValue => {
let uniqueValues: Set<JavaScriptSemanticPrimitive> | undefined;
for (const value of values) {
@@ -30,13 +34,13 @@ export const semanticPrimitiveSet = (
// or canonical-key allocation. Check strings before retaining the value.
if (values.length === 1)
return typeof value === "string" &&
exceedsSemanticPrimitiveStringByteBudget([value])
? semanticResourceLimitUnknown("primitive-bytes")
exceedsSemanticPrimitiveStringByteBudget([value], precision)
? semanticResourceLimitUnknown("primitive-bytes", precision)
: { status: "literal", value };
uniqueValues ??= new Set<JavaScriptSemanticPrimitive>();
uniqueValues.add(value);
if (uniqueValues.size > SEMANTIC_PRIMITIVE_CANDIDATE_LIMIT)
return semanticResourceLimitUnknown("primitive-candidates");
if (uniqueValues.size > precision.primitive_candidates)
return semanticResourceLimitUnknown("primitive-candidates", precision);
}
if (uniqueValues === undefined) return { status: "union", values: [] };
if (
@@ -44,9 +48,10 @@ export const semanticPrimitiveSet = (
[...uniqueValues].flatMap((value) =>
typeof value === "string" ? [value] : [],
),
precision,
)
)
return semanticResourceLimitUnknown("primitive-bytes");
return semanticResourceLimitUnknown("primitive-bytes", precision);
const unique = [...uniqueValues]
.map((value) => ({ key: semanticPrimitiveKey(value), value }))
.sort((left, right) => compareUnicodeCodePoints(left.key, right.key))