fix: 为 WebProbe 增加物理内存门禁

scripts/src/hwlab-node/web-probe-observe.ts

@@ -483,7 +483,7 @@ export function parseNodeWebProbeObserveOptions(
     "--workspace-root",
     "--workspace-root-ref",
     "--root",
-  ]), new Set(["--force", "--full", "--raw", "--text-stdin", "--require-composer-ready", "--wait-project-management-ready", "--blocking", "--non-blocking", "--dry-run", "--confirm"]));
+  ]), new Set(["--force", "--full", "--raw", "--text-stdin", "--require-composer-ready", "--wait-project-management-ready", "--blocking", "--non-blocking", "--dry-run", "--confirm", "--sentinel-cadence"]));
   const commandTypeRaw = optionValue(args, "--type") ?? null;
   const commandType = commandTypeRaw === null ? null : parseNodeWebProbeObserveCommandType(commandTypeRaw);
   const stateDir = optionValue(args, "--state-dir") ?? indexed?.stateDir ?? null;
@@ -528,6 +528,9 @@ export function parseNodeWebProbeObserveOptions(
   if (observeActionRaw !== "start" && (requestedOrigin !== undefined || customUrl !== undefined || browserProxyModeRaw !== undefined)) {
     throw new Error("web-probe observe --origin/--url/--browser-proxy-mode is only valid for start; later actions inherit the observer origin");
   }
+  if (observeActionRaw !== "start" && args.includes("--sentinel-cadence")) {
+    throw new Error("web-probe observe --sentinel-cadence is only valid for start");
+  }
   const requestedBrowserProxyMode = browserProxyModeRaw === undefined ? undefined : parseWebProbeBrowserProxyMode(browserProxyModeRaw);
   const selectedOrigin = observeActionRaw === "start"
     ? resolveNodeWebProbeCliOrigin(spec, requestedOrigin, customUrl, requestedBrowserProxyMode)
@@ -645,6 +648,11 @@ export function parseNodeWebProbeObserveOptions(
       throw new Error("owning YAML 未启用 validateWorkbenchTraceReadability");
     }
   }
+  const resourcePolicy = spec.webProbe?.resourcePolicy;
+  if (resourcePolicy === undefined) {
+    throw new Error(`web-probe resource policy is missing from ${hwlabRuntimeLaneConfigPath} for ${node}/${lane}`);
+  }
+  const observerLifecycle = resourcePolicy.observerLifecycle;
   return {
     action: "observe",
     observeAction: observeActionRaw,
@@ -659,11 +667,12 @@ export function parseNodeWebProbeObserveOptions(
     viewport: optionValue(args, "--viewport") ?? "1440x900",
     browserProxyMode: selectedOrigin.browserProxyMode,
     browserProxyModeSource: selectedOrigin.browserProxyModeSource,
+    memoryGuardMode: args.includes("--sentinel-cadence") ? "sentinel-cadence" : "manual-start",
     sampleIntervalMs: positiveIntegerOption(args, "--sample-interval-ms", 5000, 600000),
     screenshotIntervalMs: positiveIntegerOption(args, "--screenshot-interval-ms", 300000, 86_400_000),
     observerRefreshIntervalMs: positiveIntegerOption(args, "--observer-refresh-interval-ms", 180000, 86_400_000),
-    maxSamples: positiveIntegerOption(args, "--max-samples", 0, 10_000_000),
-    maxRunSeconds: positiveIntegerOption(args, "--max-run-seconds", 0, 86_400),
+    maxSamples: observerLifecycleOption(args, "--max-samples", observerLifecycle.maxSamples),
+    maxRunSeconds: observerLifecycleOption(args, "--max-run-seconds", observerLifecycle.maxRunSeconds),
     commandTimeoutSeconds: positiveIntegerOption(args, "--command-timeout-seconds", 55, 3600),
     waitMs: positiveIntegerOption(args, "--wait-ms", 0, 600000),
     tailLines: positiveIntegerOption(args, "--tail-lines", 5, 200),
@@ -728,6 +737,17 @@ export function parseNodeWebProbeObserveOptions(
   };
 }
 
+function observerLifecycleOption(args: string[], name: string, yamlMaximum: number): number {
+  const raw = optionValue(args, name);
+  if (raw === undefined) return yamlMaximum;
+  const value = Number(raw);
+  if (!Number.isInteger(value) || value < 1) throw new Error(`${name} must be a positive integer`);
+  if (value > yamlMaximum) {
+    throw new Error(`${name}=${value} exceeds the owning YAML observer lifecycle cap ${yamlMaximum}`);
+  }
+  return value;
+}
+
 export function parseNodeWebProbeObserveCommandType(value: string): NodeWebProbeObserveCommandType {
   if (
     value === "login"