fix: 收敛 PaC 自动交付提示

scripts/src/hwlab-node/entry.ts

@@ -46,6 +46,7 @@ import { emitNodeRuntimeStatusWorkerEvent, isNodeRuntimeStatusWorker, readNodeRu
 import { legacyHwlabNodeWebProbeUnsupported } from "../web-probe";
 import { startNodeDelegatedJob } from "./web-probe";
 import { assertKnownOptions } from "./web-probe-observe";
+import { hwlabNodeDeliveryMutationDecision } from "./delivery-authority";
 
 export { hwlabNodeHelp, hwlabNodeWebProbeHelp, hwlabNodeObservabilityHelp } from "../hwlab-node-help";
 
@@ -571,7 +572,10 @@ export async function runHwlabNodeCommand(_config: Config, args: string[]): Prom
     if (args.length === 1 || args.includes("--help") || args.includes("-h") || args[1] === "help") return hwlabNodeObservabilityHelp();
     return runNodeObservability(parseNodeObservabilityOptions(args.slice(1)));
   }
-  if (args.includes("--help") || args.includes("-h")) return hwlabNodeHelp();
+  if (args.includes("--help") || args.includes("-h")) {
+    const scope = args.includes("legacy-cicd") ? "legacy-cicd" : args.includes("platform-maintenance") ? "platform-maintenance" : null;
+    return hwlabNodeHelp(scope);
+  }
   if (domain === "control-plane" || domain === "git-mirror") {
     return runNodeDelegatedDomain(_config, domain, args.slice(1));
   }
@@ -614,6 +618,17 @@ export function parseNodeObservabilityOptions(args: string[]): NodeObservability
 
 export async function runNodeDelegatedDomain(config: Config, domain: DelegatedNodeDomain, args: string[]): Promise<Record<string, unknown> | RenderedCliResult> {
   const scoped = parseNodeScopedDelegatedOptions(domain, args);
+  const guardedDeliveryAction = domain === "git-mirror" && (scoped.action === "sync" || scoped.action === "flush")
+    || domain === "control-plane" && (scoped.action === "trigger-current" || scoped.action === "refresh" || scoped.action === "sync")
+    || domain === "control-plane" && scoped.action === "source-workspace" && scoped.originalArgs[1] === "sync";
+  if (guardedDeliveryAction) {
+    const decision = hwlabNodeDeliveryMutationDecision(
+      scoped,
+      `hwlab nodes ${domain} ${scoped.action}${scoped.action === "source-workspace" ? " sync" : ""}`,
+      scoped.action === "source-workspace" ? "source-workspace-sync" : scoped.action,
+    );
+    if (!decision.allowed) return decision.result;
+  }
   if (domain === "control-plane" && scoped.action === "public-exposure") {
     return runNodePublicExposure({
       action: "public-exposure",