feat(analysis): make resource budgets recoverable across CLI and MCP (#9706)

* refactor(analysis): centralize resource budgets and recovery facts

* feat(analysis): expose ASAR and Ghidra runtime admission controls

* feat(artifacts): expose reader admission and preserve limited recognition

* feat(javascript): expose recoverable semantic precision budgets

* feat(web): add recoverable source-map budgets and compact retained views

* feat(web): make historical capture decoding budgets recoverable

* fix(desktop): enforce selected view policies across capture and export

* feat(runtime): make Frida and LLDB retention budgets selectable

* feat(native): expose diagnostic budgets and preserve exhaustion causes

* feat(managed): expose recoverable snapshot and representation budgets

* feat(metadata): make Go and Rust inspection budgets recoverable

* feat(wasm): expose representation and producer admissions

* feat(evm): expose per-call worker resource budgets

* feat(android): make resource and string-pool omissions recoverable

* feat(producers): expose command and recorded-capture budgets

* docs(analysis): record recovery contracts and integrated validation

* fix(docs): link calibration oracle from published verification pages

* fix(docs): restore desktop task anchors and receipt links

* test(analysis): align fixtures with selectable budget contracts

* fix(analysis): remove source-location projector dependency cycle

* test(analysis): refresh budget recovery and verifier regressions

* test(analysis): preserve format and publication recovery expectations

* test(windows): align conformance with owned runtime admission

* fix(desktop): preserve selected alias kinds in exported state

* test(analysis): align provider fixtures with recoverable budgets

* test(desktop): validate emitted alias metadata structurally

* fix(ghidra): classify bounded Windows endpoint refusals

* test(cli): assert selectable artifact admission recovery

* fix(cli): preserve capture provenance in environment builds

src/javascript/analysis/JavaScriptAnalysisWorker.ts

@@ -348,6 +348,9 @@ export class JavaScriptAnalysisWorker {
         id,
         node_budget: capacity.nodes,
         unknown_budget: capacity.unknowns,
+        ...(this.limits.semanticPrecision === undefined
+          ? {}
+          : { semantic_precision: this.limits.semanticPrecision }),
         text_sha256: createHash("sha256").update(file.text.value).digest("hex"),
         file: metadata,
         package_type: packageType,

src/javascript/analysis/JavaScriptAnalysisWorkerProtocol.ts

@@ -1,3 +1,4 @@
+import { javaScriptSemanticPrecisionSchema } from "../../domain/javascript/javascriptSemanticPrecision.js";
 import { z } from "zod";
 import { ANALYSIS_RESOURCE_KINDS } from "../../domain/analysisErrorCore.js";
 import { jsonValueSchema } from "../../domain/jsonValue.js";
@@ -25,6 +26,7 @@ export const javaScriptCheckpointCeilingRemediation = (
 /** Caller-selected artifact identity, separate from the decoded source-text digest. */
 export const javaScriptWorkerRequestSchema = z.strictObject({
   id: z.uuid(),
+  semantic_precision: javaScriptSemanticPrecisionSchema.optional(),
   unknown_budget: z.int().min(0).max(JAVASCRIPT_SEMANTIC_ITEM_MAXIMUM),
   node_budget: z.int().min(0).max(JAVASCRIPT_SEMANTIC_ITEM_MAXIMUM),
   text_sha256: digestSchema,

src/javascript/analysis/JavaScriptAnalysisWorkerSchemas.ts

@@ -1,3 +1,7 @@
+import {
+  resolveJavaScriptSemanticPrecision,
+  javaScriptSemanticPrecisionSchema,
+} from "../../domain/javascript/javascriptSemanticPrecision.js";
 import {
   javaScriptSemanticUnknownOmissionsSchema,
   javaScriptSemanticNodeSchema,
@@ -609,18 +613,27 @@ const coverage = z
       status: z.literal("complete"),
       omittedCount: z.literal(0),
       resourceLimits: z.array(javaScriptSemanticResourceLimitSchema).optional(),
+      precision: javaScriptSemanticPrecisionSchema
+        .transform((value) => resolveJavaScriptSemanticPrecision(value))
+        .exactOptional(),
       widenedReturnedReferences: z.array(range).optional(),
     }),
     z.strictObject({
       status: z.literal("partial"),
       omittedCount: z.union([z.literal(0), z.null()]),
       resourceLimits: z.array(javaScriptSemanticResourceLimitSchema).optional(),
+      precision: javaScriptSemanticPrecisionSchema
+        .transform((value) => resolveJavaScriptSemanticPrecision(value))
+        .exactOptional(),
       widenedReturnedReferences: z.array(range).optional(),
     }),
     z.strictObject({
       status: z.literal("failed"),
       omittedCount: z.null(),
       resourceLimits: z.array(javaScriptSemanticResourceLimitSchema).optional(),
+      precision: javaScriptSemanticPrecisionSchema
+        .transform((value) => resolveJavaScriptSemanticPrecision(value))
+        .exactOptional(),
       widenedReturnedReferences: z.array(range).optional(),
     }),
   ])

src/javascript/analysis/JavaScriptAnalysisWorkerServer.ts

@@ -1,3 +1,4 @@
+import type { JavaScriptSemanticPrecisionInput } from "../../domain/javascript/javascriptSemanticPrecision.js";
 import { fitJavaScriptRouteSourceFacts } from "../../domain/javascript/javascriptRouteResultBudget.js";
 import { jsonValueByteLength } from "../../domain/jsonValueByteLength.js";
 import type { JsonValue } from "../../domain/jsonValue.js";
@@ -46,6 +47,7 @@ export interface JavaScriptSourceWorkerAnalyzer {
     },
     packageType: JavaScriptPackageType,
     purpose: "analysis" | "preload-discovery",
+    precision?: JavaScriptSemanticPrecisionInput,
   ): Promise<{
     readonly module: JavaScriptModuleSemanticIr;
     readonly projection: JavaScriptSemanticFileProjection;
@@ -191,6 +193,7 @@ const analyzeJob = async (
       },
       request.package_type,
       request.purpose,
+      request.semantic_precision,
     );
     await send({ kind: "phase", id: request.id, phase: "transfer" });
     const descriptor =