feat(sms): 新增节点短信提醒（审核未通过/被租用需辅助/上架未成交）

backend/internal/modules/auth/sms_resolver_test.go

@@ -20,6 +20,11 @@ func (p *recordProvider) SendLoginCode(ctx context.Context, phone string, code s
 	return nil
 }
 
+func (p *recordProvider) SendTemplate(ctx context.Context, req smsprovider.TemplateRequest) error {
+	p.sentPhones = append(p.sentPhones, req.Phone)
+	return nil
+}
+
 type mockResolver struct {
 	customProvider smsprovider.Provider
 	calledSites    []string

backend/internal/modules/distribution/dto.go

@@ -597,14 +597,15 @@ type DistributionTrendPoint struct {
 
 // 分销站点独立短信配置结构体
 type SiteSMSConfigDTO struct {
-	Enabled           bool   `json:"enabled"`
-	Provider          string `json:"provider"`
-	AccessKeyID       string `json:"access_key_id"`
-	MaskedSecret      string `json:"masked_secret"`
-	HasSecret         bool   `json:"has_secret"`
-	Endpoint          string `json:"endpoint"`
-	SignName          string `json:"sign_name"`
-	LoginTemplateCode string `json:"login_template_code"`
+	Enabled           bool              `json:"enabled"`
+	Provider          string            `json:"provider"`
+	AccessKeyID       string            `json:"access_key_id"`
+	MaskedSecret      string            `json:"masked_secret"`
+	HasSecret         bool              `json:"has_secret"`
+	Endpoint          string            `json:"endpoint"`
+	SignName          string            `json:"sign_name"`
+	LoginTemplateCode string            `json:"login_template_code"`
+	BusinessTemplates map[string]string `json:"business_templates"`
 }
 
 type UpdateSiteSMSConfigRequest struct {
@@ -615,6 +616,8 @@ type UpdateSiteSMSConfigRequest struct {
 	Endpoint          *string `json:"endpoint"`
 	SignName          *string `json:"sign_name"`
 	LoginTemplateCode *string `json:"login_template_code"`
+	// BusinessTemplates 传入时整体覆盖站点节点模板映射，传空对象即清空。
+	BusinessTemplates *map[string]string `json:"business_templates"`
 }
 
 type TestSiteSMSConfigRequest struct {

backend/internal/modules/distribution/repository.go

@@ -1045,6 +1045,10 @@ func (r *Repository) UpdateSiteSMSConfig(ctx context.Context, adminID, siteID ui
 	if req.LoginTemplateCode != nil {
 		cfg.LoginTemplateCode = strings.TrimSpace(*req.LoginTemplateCode)
 	}
+	if req.BusinessTemplates != nil {
+		// 整体覆盖语义：后台按节点逐一提交，空对象表示清空并回退主站模板。
+		cfg.BusinessTemplates = normalizeBusinessTemplates(*req.BusinessTemplates)
+	}
 
 	// 完整性校验：必须属于合法 provider 白名单，且开启时必须提供完整凭据
 	providerType, err := r.validateSMSProvider(cfg.Provider)

backend/internal/modules/distribution/sms_business_templates_test.go

@@ -0,0 +1,230 @@
+package distribution
+
+import (
+	"context"
+	"testing"
+
+	"hfb_sys/backend/internal/model"
+	smsnode "hfb_sys/backend/internal/modules/sms"
+
+	"go.uber.org/zap"
+)
+
+func TestParseSiteSMSConfigNormalizesBusinessTemplates(t *testing.T) {
+	cfg, err := ParseSiteSMSConfig(`{
+		"enabled": true,
+		"sign_name": "分站签名",
+		"business_templates": {
+			"order_handoff_assist": " SMS_512540945 ",
+			"listing_review_rejected": "   ",
+			"unknown_node": "SMS_BAD",
+			"": "SMS_EMPTY"
+		}
+	}`)
+	if err != nil {
+		t.Fatalf("ParseSiteSMSConfig() error = %v", err)
+	}
+	if len(cfg.BusinessTemplates) != 1 {
+		t.Fatalf("business_templates = %+v, want 仅保留已登记且非空的模板", cfg.BusinessTemplates)
+	}
+	if got := cfg.BusinessTemplates[smsnode.NodeOrderHandoffAssist]; got != "SMS_512540945" {
+		t.Fatalf("order_handoff_assist = %q, want SMS_512540945", got)
+	}
+	if _, ok := cfg.BusinessTemplates["unknown_node"]; ok {
+		t.Fatal("未登记节点不应保留")
+	}
+}
+
+func TestUpdateSiteSMSConfigPersistsBusinessTemplates(t *testing.T) {
+	db := distributionTestDB(t)
+	repo := NewRepository(db, nil)
+	ctx := context.Background()
+
+	site := model.DistributionSite{
+		SiteCode: "site_sms_node",
+		SiteName: "节点短信站",
+		Domain:   "smsnode.com",
+		Status:   "active",
+	}
+	if err := db.Create(&site).Error; err != nil {
+		t.Fatal(err)
+	}
+
+	templates := map[string]string{
+		smsnode.NodeOrderHandoffAssist:    "SMS_512540945",
+		smsnode.NodeListingReviewRejected: "SMS_512520993",
+		"unknown_node":                    "SMS_BAD",
+	}
+	updated, err := repo.UpdateSiteSMSConfig(ctx, 0, site.ID, UpdateSiteSMSConfigRequest{
+		BusinessTemplates: &templates,
+	})
+	if err != nil {
+		t.Fatalf("UpdateSiteSMSConfig() error = %v", err)
+	}
+	if len(updated.BusinessTemplates) != 2 {
+		t.Fatalf("business_templates = %+v, want 2 项（过滤未登记节点）", updated.BusinessTemplates)
+	}
+
+	// 未传 BusinessTemplates 时不能被清空。
+	newSign := "分站签名"
+	if _, err := repo.UpdateSiteSMSConfig(ctx, 0, site.ID, UpdateSiteSMSConfigRequest{SignName: &newSign}); err != nil {
+		t.Fatalf("UpdateSiteSMSConfig() error = %v", err)
+	}
+	reloaded, err := repo.GetSiteSMSConfig(ctx, 0, site.ID)
+	if err != nil {
+		t.Fatalf("GetSiteSMSConfig() error = %v", err)
+	}
+	if reloaded.BusinessTemplates[smsnode.NodeOrderHandoffAssist] != "SMS_512540945" {
+		t.Fatalf("未传该字段时模板应保留，实际 = %+v", reloaded.BusinessTemplates)
+	}
+
+	// 传空对象表示清空，节点回退主站模板。
+	empty := map[string]string{}
+	cleared, err := repo.UpdateSiteSMSConfig(ctx, 0, site.ID, UpdateSiteSMSConfigRequest{BusinessTemplates: &empty})
+	if err != nil {
+		t.Fatalf("UpdateSiteSMSConfig() error = %v", err)
+	}
+	if len(cleared.BusinessTemplates) != 0 {
+		t.Fatalf("business_templates 应被清空, 实际 = %+v", cleared.BusinessTemplates)
+	}
+}
+
+// 后台改了站点短信凭据后，长期运行的任务必须能自动重建 Provider，
+// 否则更换 AccessKey 要重启进程才会生效。
+func TestResolveBusinessSenderRebuildsProviderAfterCredentialChange(t *testing.T) {
+	db := distributionTestDB(t)
+	repo := NewRepository(db, nil)
+	repo.SetAllowMockSMS(true)
+	ctx := context.Background()
+
+	site := model.DistributionSite{
+		SiteCode: "site_sms_rotate",
+		SiteName: "凭据轮换站",
+		Domain:   "smsrotate.com",
+		Status:   "active",
+	}
+	if err := db.Create(&site).Error; err != nil {
+		t.Fatal(err)
+	}
+
+	enabled := true
+	provider := "mock"
+	sign := "【分站签名】"
+	oldKey := "LTAI_OLD_KEY"
+	if _, err := repo.UpdateSiteSMSConfig(ctx, 0, site.ID, UpdateSiteSMSConfigRequest{
+		Enabled:     &enabled,
+		Provider:    &provider,
+		SignName:    &sign,
+		AccessKeyID: &oldKey,
+	}); err != nil {
+		t.Fatalf("UpdateSiteSMSConfig() error = %v", err)
+	}
+
+	resolver := NewSMSResolver(repo, zap.NewNop())
+	first, _, _, err := resolver.ResolveBusinessSender(ctx, site.ID)
+	if err != nil {
+		t.Fatalf("ResolveBusinessSender() error = %v", err)
+	}
+	if first == nil {
+		t.Fatal("站点已启用独立短信时应返回通道")
+	}
+
+	// 凭据未变化时应命中缓存，返回同一实例。
+	again, _, _, err := resolver.ResolveBusinessSender(ctx, site.ID)
+	if err != nil {
+		t.Fatalf("ResolveBusinessSender() error = %v", err)
+	}
+	if again != first {
+		t.Fatal("凭据未变化时应复用缓存 Provider")
+	}
+
+	newKey := "LTAI_NEW_KEY"
+	if _, err := repo.UpdateSiteSMSConfig(ctx, 0, site.ID, UpdateSiteSMSConfigRequest{
+		AccessKeyID: &newKey,
+	}); err != nil {
+		t.Fatalf("UpdateSiteSMSConfig() error = %v", err)
+	}
+
+	rebuilt, _, _, err := resolver.ResolveBusinessSender(ctx, site.ID)
+	if err != nil {
+		t.Fatalf("ResolveBusinessSender() error = %v", err)
+	}
+	if rebuilt == nil {
+		t.Fatal("凭据轮换后仍应返回可用通道")
+	}
+	if rebuilt == first {
+		t.Fatal("凭据轮换后应重建 Provider，而不是继续复用旧缓存")
+	}
+}
+
+func TestResolveBusinessSenderReturnsSiteTemplates(t *testing.T) {
+	db := distributionTestDB(t)
+	repo := NewRepository(db, nil)
+	repo.SetAllowMockSMS(true)
+	ctx := context.Background()
+
+	site := model.DistributionSite{
+		SiteCode: "site_sms_sender",
+		SiteName: "节点短信通道站",
+		Domain:   "smssender.com",
+		Status:   "active",
+	}
+	if err := db.Create(&site).Error; err != nil {
+		t.Fatal(err)
+	}
+
+	enabled := true
+	provider := "mock"
+	sign := "【分站签名】"
+	templates := map[string]string{smsnode.NodeOrderHandoffAssist: "SMS_SITE"}
+	if _, err := repo.UpdateSiteSMSConfig(ctx, 0, site.ID, UpdateSiteSMSConfigRequest{
+		Enabled:           &enabled,
+		Provider:          &provider,
+		SignName:          &sign,
+		BusinessTemplates: &templates,
+	}); err != nil {
+		t.Fatalf("UpdateSiteSMSConfig() error = %v", err)
+	}
+
+	resolver := NewSMSResolver(repo, zap.NewNop())
+	sender, signName, siteTemplates, err := resolver.ResolveBusinessSender(ctx, site.ID)
+	if err != nil {
+		t.Fatalf("ResolveBusinessSender() error = %v", err)
+	}
+	if sender == nil {
+		t.Fatal("站点已启用独立短信时应返回通道")
+	}
+	if signName != sign {
+		t.Fatalf("signName = %q, want %q", signName, sign)
+	}
+	if siteTemplates[smsnode.NodeOrderHandoffAssist] != "SMS_SITE" {
+		t.Fatalf("站点模板 = %+v", siteTemplates)
+	}
+
+	// 站点未启用独立短信时返回 nil，调用方回退主站通道。
+	other := model.DistributionSite{
+		SiteCode: "site_sms_off",
+		SiteName: "未启用短信站",
+		Domain:   "smsoff.com",
+		Status:   "active",
+	}
+	if err := db.Create(&other).Error; err != nil {
+		t.Fatal(err)
+	}
+	disabledSender, _, _, err := resolver.ResolveBusinessSender(ctx, other.ID)
+	if err != nil {
+		t.Fatalf("ResolveBusinessSender() error = %v", err)
+	}
+	if disabledSender != nil {
+		t.Fatal("站点未启用时应返回 nil 以便回退主站")
+	}
+
+	// 站点不存在（或非 active）时同样返回 nil，不报错。
+	missingSender, _, _, err := resolver.ResolveBusinessSender(ctx, 999999)
+	if err != nil {
+		t.Fatalf("ResolveBusinessSender() error = %v", err)
+	}
+	if missingSender != nil {
+		t.Fatal("站点不存在时应返回 nil")
+	}
+}

backend/internal/modules/distribution/sms_resolver.go

@@ -3,6 +3,8 @@ package distribution
 import (
 	"context"
 	"crypto/rand"
+	"crypto/sha256"
+	"encoding/hex"
 	"encoding/json"
 	"errors"
 	"fmt"
@@ -13,6 +15,7 @@ import (
 
 	smsprovider "hfb_sys/backend/internal/integrations/sms"
 	"hfb_sys/backend/internal/model"
+	smsnode "hfb_sys/backend/internal/modules/sms"
 
 	"go.uber.org/zap"
 	"gorm.io/gorm"
@@ -33,6 +36,30 @@ type SiteSMSConfig struct {
 	Endpoint          string `json:"endpoint,omitempty"`
 	SignName          string `json:"sign_name"`
 	LoginTemplateCode string `json:"login_template_code"`
+	// BusinessTemplates 站点自有的节点短信模板 CODE，key 为 sms 模块登记的节点标识。
+	// 站点启用独立短信后，这里配置了模板的节点走站点通道与站点签名；
+	// 未配置的节点回退主站通道与主站模板。
+	BusinessTemplates map[string]string `json:"business_templates,omitempty"`
+}
+
+// normalizeBusinessTemplates 只保留已登记节点且模板 CODE 非空的配置项。
+func normalizeBusinessTemplates(in map[string]string) map[string]string {
+	if len(in) == 0 {
+		return nil
+	}
+	out := make(map[string]string, len(in))
+	for code, template := range in {
+		code = strings.TrimSpace(code)
+		template = strings.TrimSpace(template)
+		if code == "" || template == "" || !smsnode.IsKnownNode(code) {
+			continue
+		}
+		out[code] = template
+	}
+	if len(out) == 0 {
+		return nil
+	}
+	return out
 }
 
 // MaskSecret 对敏感密钥进行掩码脱敏
@@ -62,6 +89,7 @@ func (c *SiteSMSConfig) ToDTO() *SiteSMSConfigDTO {
 		Endpoint:          c.Endpoint,
 		SignName:          c.SignName,
 		LoginTemplateCode: c.LoginTemplateCode,
+		BusinessTemplates: normalizeBusinessTemplates(c.BusinessTemplates),
 	}
 }
 
@@ -75,6 +103,7 @@ func ParseSiteSMSConfig(raw string) (*SiteSMSConfig, error) {
 	if err := json.Unmarshal([]byte(raw), &cfg); err != nil {
 		return nil, err
 	}
+	cfg.BusinessTemplates = normalizeBusinessTemplates(cfg.BusinessTemplates)
 	return &cfg, nil
 }
 
@@ -115,12 +144,35 @@ func BuildProvider(cfg SiteSMSConfig, logger *zap.Logger) (smsprovider.Provider,
 	}
 }
 
+// cachedSMSProvider 是站点 Provider 的缓存项。
+// fingerprint 取自站点凭据与关键字段，凭据轮换后指纹变化即自动重建，
+// 避免「后台改了 AccessKey，长期运行的任务仍在用旧缓存」。
+type cachedSMSProvider struct {
+	provider    smsprovider.Provider
+	fingerprint string
+}
+
+// cacheFingerprint 用凭据密文与关键字段生成缓存指纹。
+// 密文即每次保存都会变化，因此重复保存同一份配置最多只是重建一次 Provider，不影响正确性。
+func (c *SiteSMSConfig) cacheFingerprint() string {
+	raw := strings.Join([]string{
+		strings.TrimSpace(c.Provider),
+		strings.TrimSpace(c.AccessKeyID),
+		strings.TrimSpace(c.AccessKeySecret),
+		strings.TrimSpace(c.Endpoint),
+		strings.TrimSpace(c.SignName),
+		strings.TrimSpace(c.LoginTemplateCode),
+	}, "|")
+	sum := sha256.Sum256([]byte(raw))
+	return hex.EncodeToString(sum[:])
+}
+
 // SMSResolver 管理分销站点的 SMS Provider 实例与缓存
 type SMSResolver struct {
 	repo         *Repository
 	logger       *zap.Logger
 	mu           sync.RWMutex
-	providers    map[uint64]smsprovider.Provider
+	providers    map[uint64]cachedSMSProvider
 	testCooldown sync.Map
 }
 
@@ -128,7 +180,7 @@ func NewSMSResolver(repo *Repository, logger *zap.Logger) *SMSResolver {
 	return &SMSResolver{
 		repo:      repo,
 		logger:    logger,
-		providers: make(map[uint64]smsprovider.Provider),
+		providers: make(map[uint64]cachedSMSProvider),
 	}
 }
 
@@ -139,6 +191,23 @@ func (r *SMSResolver) InvalidateCache(siteID uint64) {
 	delete(r.providers, siteID)
 }
 
+// cached 返回指纹一致的缓存 Provider，指纹不一致（凭据已轮换）时返回 nil 由调用方重建。
+func (r *SMSResolver) cached(siteID uint64, fingerprint string) smsprovider.Provider {
+	r.mu.RLock()
+	entry, ok := r.providers[siteID]
+	r.mu.RUnlock()
+	if !ok || entry.provider == nil || entry.fingerprint != fingerprint {
+		return nil
+	}
+	return entry.provider
+}
+
+func (r *SMSResolver) store(siteID uint64, fingerprint string, provider smsprovider.Provider) {
+	r.mu.Lock()
+	r.providers[siteID] = cachedSMSProvider{provider: provider, fingerprint: fingerprint}
+	r.mu.Unlock()
+}
+
 // ResolveSMSProvider 根据 siteCode 或 domain 解析分销站点专属的 SMS Provider。
 // 若分销站点未启用自定义短信或配置不完整，则返回 nil，调用方将优雅降级为主站默认 Provider。
 func (r *SMSResolver) ResolveSMSProvider(ctx context.Context, siteCode, domain string) (smsprovider.Provider, error) {
@@ -168,12 +237,10 @@ func (r *SMSResolver) ResolveSMSProvider(ctx context.Context, siteCode, domain s
 		return nil, nil
 	}
 
-	// 检查内存缓存
-	r.mu.RLock()
-	p, ok := r.providers[site.ID]
-	r.mu.RUnlock()
-	if ok && p != nil {
-		return p, nil
+	// 检查内存缓存；凭据已轮换（指纹不一致）时视为未命中，重建 Provider
+	fingerprint := cfg.cacheFingerprint()
+	if cached := r.cached(site.ID, fingerprint); cached != nil {
+		return cached, nil
 	}
 
 	// 解密 AccessKeySecret；解密失败说明密钥轮换或密文损坏，回退主站并留下告警
@@ -203,13 +270,70 @@ func (r *SMSResolver) ResolveSMSProvider(ctx context.Context, siteCode, domain s
 		return nil, nil
 	}
 
-	r.mu.Lock()
-	r.providers[site.ID] = provider
-	r.mu.Unlock()
+	r.store(site.ID, fingerprint, provider)
 
 	return provider, nil
 }
 
+// ResolveBusinessSender 返回启用独立短信的分站通道，用于业务节点短信。
+// 返回值为站点 Provider、站点签名与该站点的节点模板映射；
+// 站点未启用、配置破损或密钥解密失败时返回 nil Provider，调用方回退主站通道。
+func (r *SMSResolver) ResolveBusinessSender(ctx context.Context, siteID uint64) (smsprovider.Provider, string, map[string]string, error) {
+	if r == nil || r.repo == nil || siteID == 0 {
+		return nil, "", nil, nil
+	}
+
+	site, err := r.repo.FindActiveSiteByID(ctx, siteID)
+	if err != nil {
+		if errors.Is(err, ErrSiteNotFound) {
+			return nil, "", nil, nil
+		}
+		return nil, "", nil, err
+	}
+	if site == nil || strings.TrimSpace(site.SMSConfigJSON) == "" {
+		return nil, "", nil, nil
+	}
+
+	cfg, err := ParseSiteSMSConfig(site.SMSConfigJSON)
+	if err != nil || cfg == nil || !cfg.Enabled {
+		return nil, "", nil, nil
+	}
+
+	fingerprint := cfg.cacheFingerprint()
+	if cached := r.cached(site.ID, fingerprint); cached != nil {
+		return cached, strings.TrimSpace(cfg.SignName), cfg.BusinessTemplates, nil
+	}
+
+	plainSecret, decErr := r.repo.decryptSecret(cfg.AccessKeySecret)
+	if decErr != nil {
+		if r.logger != nil {
+			r.logger.Warn("解密分销站点短信密钥失败，节点短信将回退主站通道",
+				zap.Uint64("site_id", site.ID),
+				zap.String("site_code", site.SiteCode),
+				zap.Error(decErr),
+			)
+		}
+		return nil, "", cfg.BusinessTemplates, nil
+	}
+	cfg.AccessKeySecret = plainSecret
+
+	provider, buildErr := BuildProvider(*cfg, r.logger)
+	if buildErr != nil || provider == nil {
+		if r.logger != nil {
+			r.logger.Warn("分销站点自定义短信配置无效，节点短信将回退主站通道",
+				zap.Uint64("site_id", site.ID),
+				zap.String("site_code", site.SiteCode),
+				zap.Error(buildErr),
+			)
+		}
+		return nil, "", cfg.BusinessTemplates, nil
+	}
+
+	r.store(site.ID, fingerprint, provider)
+
+	return provider, strings.TrimSpace(cfg.SignName), cfg.BusinessTemplates, nil
+}
+
 // TestSendSMS 使用给定的短信配置，向指定手机号发送一条测试验证码以检验连通性
 func (r *SMSResolver) TestSendSMS(ctx context.Context, siteID uint64, cfg SiteSMSConfig, phone string) error {
 	phone = strings.TrimSpace(phone)
@@ -303,3 +427,22 @@ func (r *Repository) FindActiveSiteByCodeOrDomain(ctx context.Context, code, dom
 	}
 	return &site, nil
 }
+
+// FindActiveSiteByID 按主键查询状态为 active 的分销站点实体。
+func (r *Repository) FindActiveSiteByID(ctx context.Context, siteID uint64) (*model.DistributionSite, error) {
+	if r == nil || r.db == nil {
+		return nil, ErrDependencyUnavailable
+	}
+	if siteID == 0 {
+		return nil, ErrSiteNotFound
+	}
+
+	var site model.DistributionSite
+	if err := r.db.WithContext(ctx).Where("id = ? AND status = 'active'", siteID).First(&site).Error; err != nil {
+		if errors.Is(err, gorm.ErrRecordNotFound) {
+			return nil, ErrSiteNotFound
+		}
+		return nil, err
+	}
+	return &site, nil
+}

backend/internal/modules/listing/review.go

@@ -9,6 +9,7 @@ import (
 	"hfb_sys/backend/internal/listingstatus"
 	"hfb_sys/backend/internal/model"
 	"hfb_sys/backend/internal/modules/notification"
+	smsnode "hfb_sys/backend/internal/modules/sms"
 
 	"gorm.io/datatypes"
 	"gorm.io/gorm"
@@ -389,6 +390,16 @@ func (r *Repository) Reject(ctx context.Context, listingID uint64, req ReviewReq
 		}); err != nil {
 			return err
 		}
+		// 节点短信：审核未通过提醒号主修改后重新上架。只入队，由后台任务异步发送。
+		if _, err := smsnode.Enqueue(tx, smsnode.Entry{
+			UserID:             listing.OwnerID,
+			Node:               smsnode.NodeListingReviewRejected,
+			BizType:            "listing",
+			BizID:              listingID,
+			DistributionSiteID: listing.DistributionSiteID,
+		}); err != nil {
+			return err
+		}
 		dto = toDTO(*account, *listing)
 		return nil
 	})

backend/internal/modules/listing/sms_node_test.go

@@ -0,0 +1,79 @@
+package listing
+
+import (
+	"context"
+	"testing"
+
+	"hfb_sys/backend/internal/database"
+	"hfb_sys/backend/internal/model"
+	smsnode "hfb_sys/backend/internal/modules/sms"
+)
+
+// 审核未通过时必须给号主入队一条短信（只落库，发送交给后台任务）。
+func TestRejectEnqueuesOwnerSms(t *testing.T) {
+	db := database.NewTestDB()
+	if err := database.AutoMigrateIfMissing(db, &model.SmsMessage{}); err != nil {
+		t.Fatalf("AutoMigrate() error = %v", err)
+	}
+	repo := NewRepository(db, nil)
+
+	owner := model.User{Phone: "13700009001", Nickname: "号主"}
+	if err := db.Create(&owner).Error; err != nil {
+		t.Fatalf("创建号主失败: %v", err)
+	}
+	siteID := uint64(31)
+	account := model.GameAccount{
+		OwnerID:       owner.ID,
+		Status:        "draft",
+		ServerRegion:  "国服",
+		LoginPlatform: "steam",
+		Title:         "审核未通过账号",
+	}
+	if err := db.Create(&account).Error; err != nil {
+		t.Fatalf("创建账号失败: %v", err)
+	}
+	listing := model.RentalListing{
+		ListingNo:          "LST-REJECT-SMS-001",
+		AccountID:          account.ID,
+		OwnerID:            owner.ID,
+		Status:             "pending_review",
+		ReviewStatus:       "pending",
+		DistributionSiteID: &siteID,
+	}
+	if err := db.Create(&listing).Error; err != nil {
+		t.Fatalf("创建商品失败: %v", err)
+	}
+
+	if _, err := repo.Reject(context.Background(), listing.ID, ReviewRequest{Reason: "截图不清晰"}); err != nil {
+		t.Fatalf("Reject() error = %v", err)
+	}
+
+	var row model.SmsMessage
+	if err := db.Where("node = ? AND biz_type = ? AND biz_id = ?",
+		smsnode.NodeListingReviewRejected, "listing", listing.ID).First(&row).Error; err != nil {
+		t.Fatalf("应给号主入队审核未通过短信, 查询失败: %v", err)
+	}
+	if row.UserID != owner.ID || row.Phone != owner.Phone {
+		t.Fatalf("收件人 = %d/%s, want %d/%s", row.UserID, row.Phone, owner.ID, owner.Phone)
+	}
+	if row.Status != model.SmsStatusPending {
+		t.Fatalf("status = %q, want %q", row.Status, model.SmsStatusPending)
+	}
+	if row.DistributionSiteID == nil || *row.DistributionSiteID != siteID {
+		t.Fatalf("distribution_site_id = %v, want %d", row.DistributionSiteID, siteID)
+	}
+
+	// 后台重复点「拒绝」不应重复入队。
+	if _, err := repo.Reject(context.Background(), listing.ID, ReviewRequest{Reason: "截图不清晰"}); err != nil {
+		t.Fatalf("重复 Reject() error = %v", err)
+	}
+	var count int64
+	if err := db.Model(&model.SmsMessage{}).
+		Where("node = ? AND biz_id = ?", smsnode.NodeListingReviewRejected, listing.ID).
+		Count(&count).Error; err != nil {
+		t.Fatalf("统计失败: %v", err)
+	}
+	if count != 1 {
+		t.Fatalf("短信记录数 = %d, want 1（同一账号只发一次）", count)
+	}
+}

backend/internal/modules/order/lifecycle.go

@@ -14,6 +14,7 @@ import (
 	listingpkg "hfb_sys/backend/internal/modules/listing"
 	"hfb_sys/backend/internal/modules/notification"
 	"hfb_sys/backend/internal/modules/rentergrowth"
+	smsnode "hfb_sys/backend/internal/modules/sms"
 	"hfb_sys/backend/internal/processlog"
 
 	"gorm.io/datatypes"
@@ -406,6 +407,17 @@ func (r *Repository) ConfirmPaidFromChannelTx(tx *gorm.DB, orderID uint64) (uint
 		); err != nil {
 			return 0, err
 		}
+		// 节点短信：账号被租用、需要号主辅助登录，提醒及时处理避免被强制结束订单。
+		// 代管订单由客服提交交接说明，不触达号主，因此只在这个分支入队。
+		if _, err := smsnode.Enqueue(tx, smsnode.Entry{
+			UserID:             order.OwnerID,
+			Node:               smsnode.NodeOrderHandoffAssist,
+			BizType:            "order",
+			BizID:              orderID,
+			DistributionSiteID: order.DistributionSiteID,
+		}); err != nil {
+			return 0, err
+		}
 	}
 	if err := tx.Save(order).Error; err != nil {
 		return 0, err

backend/internal/modules/order/sms_node_test.go

@@ -0,0 +1,116 @@
+package order
+
+import (
+	"testing"
+
+	"hfb_sys/backend/internal/model"
+	smsnode "hfb_sys/backend/internal/modules/sms"
+
+	"gorm.io/gorm"
+)
+
+func seedHandoffAssistOrder(t *testing.T, db *gorm.DB, handoffMode string) (model.User, model.RentalOrder) {
+	t.Helper()
+
+	owner := model.User{Phone: "13800009001"}
+	renter := model.User{Phone: "13900009001"}
+	if err := db.Create(&owner).Error; err != nil {
+		t.Fatalf("创建号主失败: %v", err)
+	}
+	if err := db.Create(&renter).Error; err != nil {
+		t.Fatalf("创建租客失败: %v", err)
+	}
+
+	account := model.GameAccount{
+		OwnerID:       owner.ID,
+		Status:        accountStatusPublished,
+		ServerRegion:  "国服",
+		LoginPlatform: "steam",
+		Title:         "节点短信测试账号",
+	}
+	if err := db.Create(&account).Error; err != nil {
+		t.Fatalf("创建账号失败: %v", err)
+	}
+
+	listing := model.RentalListing{
+		ListingNo:     "LST-SMS-NODE-001",
+		OwnerID:       owner.ID,
+		AccountID:     account.ID,
+		Status:        listingStatusPublished,
+		ReviewStatus:  listingReviewStatusApproved,
+		InTransaction: true,
+		PriceCent:     1000,
+	}
+	if handoffMode != "" {
+		listing.HandoffMode = handoffMode
+	}
+	if err := db.Create(&listing).Error; err != nil {
+		t.Fatalf("创建商品失败: %v", err)
+	}
+
+	order := model.RentalOrder{
+		OrderNo:        "ORD-SMS-NODE-001",
+		ListingID:      listing.ID,
+		AccountID:      account.ID,
+		OwnerID:        owner.ID,
+		RenterID:       renter.ID,
+		RentAmountCent: 1000,
+		Status:         orderStatusPendingPayment,
+		HandoffStatus:  handoffStatusNone,
+	}
+	if handoffMode != "" {
+		// 代管判定读的是订单自己的交接模式，仅在商品上标记不会生效。
+		order.HandoffMode = handoffMode
+	}
+	if err := db.Create(&order).Error; err != nil {
+		t.Fatalf("创建订单失败: %v", err)
+	}
+	return owner, order
+}
+
+// 支付成功进入待交接时，必须给号主入队一条「需要辅助登录」短信（仅落库，不在此处发送）。
+func TestConfirmPaidEnqueuesHandoffAssistSms(t *testing.T) {
+	db := setupOrderTestDB(t)
+	repo := NewRepository(db)
+	owner, order := seedHandoffAssistOrder(t, db, "")
+
+	if _, err := repo.ConfirmPaidFromChannelTx(db, order.ID); err != nil {
+		t.Fatalf("ConfirmPaidFromChannelTx() error = %v", err)
+	}
+
+	var row model.SmsMessage
+	if err := db.Where("node = ? AND biz_type = ? AND biz_id = ?",
+		smsnode.NodeOrderHandoffAssist, "order", order.ID).First(&row).Error; err != nil {
+		t.Fatalf("应给号主入队辅助登录短信, 查询失败: %v", err)
+	}
+	if row.UserID != owner.ID {
+		t.Fatalf("user_id = %d, want %d（收件人应是号主）", row.UserID, owner.ID)
+	}
+	if row.Phone != owner.Phone {
+		t.Fatalf("phone = %q, want %q", row.Phone, owner.Phone)
+	}
+	if row.Status != model.SmsStatusPending {
+		t.Fatalf("status = %q, want %q", row.Status, model.SmsStatusPending)
+	}
+}
+
+// 代管订单由客服提交交接说明，不触达号主，因此不应产生号主短信。
+func TestConfirmPaidSkipsSmsForPlatformManagedOrder(t *testing.T) {
+	db := setupOrderTestDB(t)
+	repo := NewRepository(db)
+	_, order := seedHandoffAssistOrder(t, db, handoffModePlatform)
+
+	if _, err := repo.ConfirmPaidFromChannelTx(db, order.ID); err != nil {
+		t.Fatalf("ConfirmPaidFromChannelTx() error = %v", err)
+	}
+
+	var count int64
+	if err := db.Model(&model.SmsMessage{}).
+		Where("node = ? AND biz_id = ?", smsnode.NodeOrderHandoffAssist, order.ID).
+		Count(&count).Error; err != nil {
+		t.Fatalf("统计短信记录失败: %v", err)
+	}
+	if count != 0 {
+		t.Fatalf("代管订单不应给号主发短信, 实际 %d 条", count)
+	}
+}

backend/internal/modules/sms/config.go

@@ -0,0 +1,148 @@
+package sms
+
+import (
+	"context"
+	"encoding/json"
+	"strings"
+)
+
+// ConfigKey 主站节点短信配置项，与分销站点的 business_templates 同构。
+const ConfigKey = "sms.business_templates"
+
+// DefaultStaleDays 上架未成交提醒的默认天数阈值。
+const DefaultStaleDays = 3
+
+// ConfigReader 读取系统配置文本，由 systemconfig.Repository 实现。
+type ConfigReader interface {
+	FindValue(ctx context.Context, key string) (string, error)
+}
+
+// LoadConfig 从系统配置读取并解析节点短信配置。
+func LoadConfig(ctx context.Context, reader ConfigReader) (Config, error) {
+	if reader == nil {
+		return DefaultConfig(), nil
+	}
+	value, err := reader.FindValue(ctx, ConfigKey)
+	if err != nil {
+		return Config{}, err
+	}
+	return ParseConfigValue(value)
+}
+
+// NodeConfig 是单个节点的开关与模板 CODE。
+type NodeConfig struct {
+	Enabled      bool   `json:"enabled"`
+	TemplateCode string `json:"template_code"`
+	// StaleDays 仅上架未成交提醒使用：上架满多少天仍未成交才提醒，0 表示取默认值。
+	StaleDays int `json:"stale_days,omitempty"`
+}
+
+// Config 是主站节点短信配置（系统配置 sms.business_templates 的 JSON 结构）。
+type Config struct {
+	Enabled bool                  `json:"enabled"`
+	Nodes   map[string]NodeConfig `json:"nodes"`
+}
+
+// DefaultConfig 返回默认配置：总开关关闭（避免误发产生短信费用），
+// 三个节点默认各自开启，模板 CODE 留空由运营在后台填写。
+func DefaultConfig() Config {
+	nodes := make(map[string]NodeConfig, len(nodeMetas))
+	for _, meta := range nodeMetas {
+		node := NodeConfig{Enabled: true}
+		if meta.SupportsStaleDays {
+			node.StaleDays = DefaultStaleDays
+		}
+		nodes[meta.Code] = node
+	}
+	return Config{Enabled: false, Nodes: nodes}
+}
+
+// DefaultConfigValue 返回默认配置的 JSON 文本。
+func DefaultConfigValue() string {
+	raw, err := MarshalConfig(DefaultConfig())
+	if err != nil {
+		return `{"enabled":false,"nodes":{}}`
+	}
+	return raw
+}
+
+// ParseConfigValue 解析系统配置里的 JSON 文本，缺失字段回落到默认值。
+func ParseConfigValue(value string) (Config, error) {
+	cfg := DefaultConfig()
+	value = strings.TrimSpace(value)
+	if value == "" {
+		return cfg, nil
+	}
+	var raw struct {
+		Enabled *bool                 `json:"enabled"`
+		Nodes   map[string]NodeConfig `json:"nodes"`
+	}
+	if err := json.Unmarshal([]byte(value), &raw); err != nil {
+		return Config{}, err
+	}
+	if raw.Enabled != nil {
+		cfg.Enabled = *raw.Enabled
+	}
+	if raw.Nodes != nil {
+		// 以已登记节点为基准合并，避免后台配置里出现未知节点。
+		for code, node := range raw.Nodes {
+			if !IsKnownNode(code) {
+				continue
+			}
+			node.TemplateCode = strings.TrimSpace(node.TemplateCode)
+			if node.StaleDays < 0 {
+				node.StaleDays = 0
+			}
+			cfg.Nodes[code] = node
+		}
+	}
+	return cfg, nil
+}
+
+// MarshalConfig 规范化并序列化配置。
+func MarshalConfig(cfg Config) (string, error) {
+	normalized := DefaultConfig()
+	normalized.Enabled = cfg.Enabled
+	for code, node := range cfg.Nodes {
+		if !IsKnownNode(code) {
+			continue
+		}
+		node.TemplateCode = strings.TrimSpace(node.TemplateCode)
+		if node.StaleDays < 0 {
+			node.StaleDays = 0
+		}
+		normalized.Nodes[code] = node
+	}
+	raw, err := json.Marshal(normalized)
+	if err != nil {
+		return "", err
+	}
+	return string(raw), nil
+}
+
+// Node 返回指定节点的配置。
+func (c Config) Node(code string) (NodeConfig, bool) {
+	node, ok := c.Nodes[code]
+	return node, ok
+}
+
+// NodeActive 判断节点是否可发送：总开关、节点开关与模板 CODE 都必须就绪。
+func (c Config) NodeActive(code string) bool {
+	if !c.Enabled {
+		return false
+	}
+	node, ok := c.Node(code)
+	if !ok || !node.Enabled {
+		return false
+	}
+	return strings.TrimSpace(node.TemplateCode) != ""
+}
+
+// StaleDaysFor 返回上架未成交提醒的天数阈值，未配置时取默认值。
+func (c Config) StaleDaysFor(code string) int {
+	node, ok := c.Node(code)
+	if !ok || node.StaleDays <= 0 {
+		return DefaultStaleDays
+	}
+	return node.StaleDays
+}

backend/internal/modules/sms/config_test.go

@@ -0,0 +1,150 @@
+package sms
+
+import (
+	"strings"
+	"testing"
+)
+
+func TestDefaultConfigCoversRegisteredNodes(t *testing.T) {
+	cfg := DefaultConfig()
+	if cfg.Enabled {
+		t.Fatal("默认配置的总开关必须关闭，避免未配置模板就产生短信费用")
+	}
+	for _, meta := range NodeMetas() {
+		node, ok := cfg.Node(meta.Code)
+		if !ok {
+			t.Fatalf("默认配置缺少节点 %s", meta.Code)
+		}
+		if !node.Enabled {
+			t.Fatalf("默认配置节点 %s 应默认启用", meta.Code)
+		}
+		if node.TemplateCode != "" {
+			t.Fatalf("默认配置节点 %s 的模板 CODE 应为空，实际 %q", meta.Code, node.TemplateCode)
+		}
+	}
+	if days := cfg.StaleDaysFor(NodeListingStalePriceSuggestion); days != DefaultStaleDays {
+		t.Fatalf("StaleDaysFor() = %d, want %d", days, DefaultStaleDays)
+	}
+}
+
+func TestParseConfigValueMergesAndFiltersUnknownNodes(t *testing.T) {
+	cfg, err := ParseConfigValue(`{
+		"enabled": true,
+		"nodes": {
+			"order_handoff_assist": {"enabled": true, "template_code": " SMS_512540945 "},
+			"listing_stale_price_suggestion": {"enabled": false, "template_code": "SMS_1", "stale_days": 5},
+			"not_registered_node": {"enabled": true, "template_code": "SMS_BAD"}
+		}
+	}`)
+	if err != nil {
+		t.Fatalf("ParseConfigValue() error = %v", err)
+	}
+	if !cfg.Enabled {
+		t.Fatal("ParseConfigValue() 应保留总开关")
+	}
+	if _, ok := cfg.Node("not_registered_node"); ok {
+		t.Fatal("ParseConfigValue() 不应保留未登记节点")
+	}
+	node, ok := cfg.Node(NodeOrderHandoffAssist)
+	if !ok || node.TemplateCode != "SMS_512540945" {
+		t.Fatalf("handoff node = %+v, want template trimmed to SMS_512540945", node)
+	}
+	// 未在 JSON 中出现的已登记节点应保留默认值。
+	rejected, ok := cfg.Node(NodeListingReviewRejected)
+	if !ok || !rejected.Enabled {
+		t.Fatalf("未配置节点应保留默认值, got %+v ok=%v", rejected, ok)
+	}
+	stale, _ := cfg.Node(NodeListingStalePriceSuggestion)
+	if stale.StaleDays != 5 {
+		t.Fatalf("stale_days = %d, want 5", stale.StaleDays)
+	}
+}
+
+func TestParseConfigValueEmptyAndInvalid(t *testing.T) {
+	cfg, err := ParseConfigValue("   ")
+	if err != nil {
+		t.Fatalf("空配置不应报错: %v", err)
+	}
+	if cfg.Enabled {
+		t.Fatal("空配置应回落到默认（总开关关闭）")
+	}
+
+	if _, err := ParseConfigValue("{not json}"); err == nil {
+		t.Fatal("非法 JSON 应返回错误")
+	}
+}
+
+func TestMarshalConfigNormalizes(t *testing.T) {
+	raw, err := MarshalConfig(Config{
+		Enabled: true,
+		Nodes: map[string]NodeConfig{
+			NodeListingReviewRejected:       {Enabled: true, TemplateCode: " SMS_512520993 ", StaleDays: -3},
+			"unknown_node":                  {Enabled: true, TemplateCode: "SMS_X"},
+			NodeListingStalePriceSuggestion: {Enabled: true, TemplateCode: "SMS_512620985", StaleDays: 0},
+		},
+	})
+	if err != nil {
+		t.Fatalf("MarshalConfig() error = %v", err)
+	}
+	if strings.Contains(raw, "unknown_node") {
+		t.Fatalf("MarshalConfig() 不应输出未登记节点: %s", raw)
+	}
+	parsed, err := ParseConfigValue(raw)
+	if err != nil {
+		t.Fatalf("ParseConfigValue() error = %v", err)
+	}
+	rejected, _ := parsed.Node(NodeListingReviewRejected)
+	if rejected.TemplateCode != "SMS_512520993" {
+		t.Fatalf("template_code = %q, want SMS_512520993", rejected.TemplateCode)
+	}
+	if rejected.StaleDays != 0 {
+		t.Fatalf("负的 stale_days 应被归零, got %d", rejected.StaleDays)
+	}
+	if days := parsed.StaleDaysFor(NodeListingStalePriceSuggestion); days != DefaultStaleDays {
+		t.Fatalf("stale_days=0 时应回落默认值 %d, got %d", DefaultStaleDays, days)
+	}
+}
+
+func TestConfigNodeActive(t *testing.T) {
+	base := Config{
+		Enabled: true,
+		Nodes: map[string]NodeConfig{
+			NodeListingReviewRejected:       {Enabled: true, TemplateCode: "SMS_512520993"},
+			NodeOrderHandoffAssist:          {Enabled: false, TemplateCode: "SMS_512540945"},
+			NodeListingStalePriceSuggestion: {Enabled: true, TemplateCode: ""},
+		},
+	}
+	if !base.NodeActive(NodeListingReviewRejected) {
+		t.Fatal("总开关与节点开关都开且模板非空时应可发送")
+	}
+	if base.NodeActive(NodeOrderHandoffAssist) {
+		t.Fatal("节点关闭时不应发送")
+	}
+	if base.NodeActive(NodeListingStalePriceSuggestion) {
+		t.Fatal("模板 CODE 为空时不应发送")
+	}
+	if base.NodeActive("unknown_node") {
+		t.Fatal("未登记节点不应发送")
+	}
+
+	disabled := base
+	disabled.Enabled = false
+	if disabled.NodeActive(NodeListingReviewRejected) {
+		t.Fatal("总开关关闭时不应发送")
+	}
+}
+
+func TestIsKnownNode(t *testing.T) {
+	for _, code := range []string{
+		NodeListingReviewRejected,
+		NodeOrderHandoffAssist,
+		NodeListingStalePriceSuggestion,
+	} {
+		if !IsKnownNode(code) {
+			t.Fatalf("IsKnownNode(%q) = false, want true", code)
+		}
+	}
+	if IsKnownNode("") || IsKnownNode("nope") {
+		t.Fatal("未登记节点应为 false")
+	}
+}

backend/internal/modules/sms/nodes.go

@@ -0,0 +1,78 @@
+package sms
+
+// 节点标识：与系统配置 sms.business_templates 中 nodes 的 key 一一对应，
+// 也与分销站点短信配置 business_templates 的 key 一一对应。
+const (
+	// NodeListingReviewRejected 账号审核未通过，提醒号主修改后重新上架。
+	NodeListingReviewRejected = "listing_review_rejected"
+	// NodeOrderHandoffAssist 账号被租用需要号主辅助登录，提醒号主及时处理。
+	NodeOrderHandoffAssist = "order_handoff_assist"
+	// NodeListingStalePriceSuggestion 账号上架多日仍未成交，建议号主调整比例。
+	NodeListingStalePriceSuggestion = "listing_stale_price_suggestion"
+)
+
+// NodeMeta 描述一个节点短信，用于后台配置页展示与文案预览。
+type NodeMeta struct {
+	Code        string `json:"code"`
+	Name        string `json:"name"`
+	Recipient   string `json:"recipient"`
+	Description string `json:"description"`
+	// TemplateCode 是该节点在阿里云报备的模板 CODE，
+	// 这里只是后台首次配置时的参考值，真实值以系统配置/站点配置为准。
+	TemplateCode string `json:"template_code"`
+	// Sample 是报备模板的参考文案，仅供后台预览；真实发送以供应商模板为准。
+	Sample string `json:"sample"`
+	// SupportsStaleDays 标记该节点是否需要「上架天数」阈值（仅闲置降价提醒使用）。
+	SupportsStaleDays bool `json:"supports_stale_days"`
+}
+
+var nodeMetas = []NodeMeta{
+	{
+		Code:         NodeListingReviewRejected,
+		Name:         "账号审核未通过",
+		Recipient:    "号主",
+		Description:  "号主上架的账号被后台审核拒绝时，提醒登录网站修改后重新上架。",
+		TemplateCode: "SMS_512520993",
+		Sample:       "板板，您在我们商行上架的账号审核未通过，请登录网站进行修改重新上架",
+	},
+	{
+		Code:         NodeOrderHandoffAssist,
+		Name:         "账号被租用需辅助登录",
+		Recipient:    "号主",
+		Description:  "订单支付成功进入待交接后，提醒号主及时辅助登录，避免订单被强制结束。",
+		TemplateCode: "SMS_512540945",
+		Sample:       "板板，您的订单已有人下单，下单方需要辅助登录，请及时留意平台信息！长时间未辅助平台会强制结束订单",
+	},
+	{
+		Code:              NodeListingStalePriceSuggestion,
+		Name:              "上架多日未成交降价建议",
+		Recipient:         "号主",
+		Description:       "账号上架满指定天数仍未被租用，建议号主适当调整比例，加快出租。",
+		TemplateCode:      "SMS_512620985",
+		Sample:            "板板，您的三角洲账号上架三天还未成功出售，建议您比例适当让一点，比例越高，出租越快、匹配越顺。具体调多少按自己心理价位定",
+		SupportsStaleDays: true,
+	},
+}
+
+// NodeMetas 返回全部节点短信定义（副本，调用方不可修改内部数据）。
+func NodeMetas() []NodeMeta {
+	out := make([]NodeMeta, len(nodeMetas))
+	copy(out, nodeMetas)
+	return out
+}
+
+// NodeMetaOf 返回指定节点的定义。
+func NodeMetaOf(code string) (NodeMeta, bool) {
+	for _, meta := range nodeMetas {
+		if meta.Code == code {
+			return meta, true
+		}
+	}
+	return NodeMeta{}, false
+}
+
+// IsKnownNode 判断节点标识是否在已登记的节点清单内。
+func IsKnownNode(code string) bool {
+	_, ok := NodeMetaOf(code)
+	return ok
+}

backend/internal/modules/sms/repository.go

@@ -0,0 +1,167 @@
+package sms
+
+import (
+	"context"
+	"encoding/json"
+	"strings"
+	"time"
+
+	"hfb_sys/backend/internal/model"
+
+	"gorm.io/datatypes"
+	"gorm.io/gorm"
+	"gorm.io/gorm/clause"
+)
+
+type Repository struct {
+	db *gorm.DB
+}
+
+func NewRepository(db *gorm.DB) *Repository {
+	return &Repository{db: db}
+}
+
+// Entry 描述一条待发送的节点短信。
+// 去重口径为 (Node, BizType, BizID, UserID)：
+//   - 审核未通过：同一账号只发一次；
+//   - 被租用需辅助：每个订单发一次，同一账号被反复租用会分别提醒；
+//   - 上架未成交：同一账号只发一次。
+type Entry struct {
+	UserID             uint64
+	Phone              string
+	Node               string
+	BizType            string
+	BizID              uint64
+	DistributionSiteID *uint64
+	Params             map[string]string
+}
+
+// Enqueue 在业务事务内写入待发送记录，返回是否真正插入了新记录。
+// 与站内信 notification.Append 相同的用法：只落库不发送，
+// 短信通道异常不会影响业务提交；重复入队由唯一索引静默忽略（返回 false, nil）。
+func Enqueue(tx *gorm.DB, entry Entry) (bool, error) {
+	if tx == nil {
+		return false, nil
+	}
+	node := strings.TrimSpace(entry.Node)
+	if node == "" || entry.UserID == 0 || !IsKnownNode(node) {
+		return false, nil
+	}
+
+	phone := strings.TrimSpace(entry.Phone)
+	if phone == "" {
+		var user model.User
+		if err := tx.Select("id", "phone").First(&user, entry.UserID).Error; err == nil {
+			phone = strings.TrimSpace(user.Phone)
+		}
+	}
+
+	var params datatypes.JSON
+	if len(entry.Params) > 0 {
+		raw, err := json.Marshal(entry.Params)
+		if err != nil {
+			return false, err
+		}
+		params = datatypes.JSON(raw)
+	}
+
+	row := model.SmsMessage{
+		UserID:             entry.UserID,
+		Phone:              phone,
+		Node:               node,
+		BizType:            strings.TrimSpace(entry.BizType),
+		BizID:              entry.BizID,
+		DistributionSiteID: entry.DistributionSiteID,
+		TemplateParams:     params,
+		Status:             model.SmsStatusPending,
+	}
+	result := tx.Clauses(clause.OnConflict{DoNothing: true}).Create(&row)
+	if result.Error != nil {
+		return false, result.Error
+	}
+	return result.RowsAffected > 0, nil
+}
+
+// ListPending 拉取待发送记录。重试过的记录要等到 retryAfter 之后才再次尝试，避免密集重试。
+func (r *Repository) ListPending(ctx context.Context, limit int, retryAfter time.Time) ([]model.SmsMessage, error) {
+	if r == nil || r.db == nil {
+		return nil, gorm.ErrInvalidDB
+	}
+	if limit <= 0 {
+		limit = 100
+	}
+	var rows []model.SmsMessage
+	err := r.db.WithContext(ctx).
+		Where("status = ? AND (retry_count = 0 OR updated_at <= ?)", model.SmsStatusPending, retryAfter).
+		Order("id ASC").
+		Limit(limit).
+		Find(&rows).Error
+	return rows, err
+}
+
+// MarkSent 记录发送成功，并回写实际使用的模板 CODE 与签名。
+func (r *Repository) MarkSent(ctx context.Context, id uint64, templateCode string, signName string, sentAt time.Time) error {
+	return r.update(ctx, id, map[string]any{
+		"status":        model.SmsStatusSent,
+		"template_code": strings.TrimSpace(templateCode),
+		"sign_name":     strings.TrimSpace(signName),
+		"last_error":    "",
+		"skip_reason":   "",
+		"sent_at":       sentAt,
+	})
+}
+
+// MarkRetry 记录一次失败并留在待发送状态，由下一轮任务重试。
+func (r *Repository) MarkRetry(ctx context.Context, id uint64, retryCount int, lastError string) error {
+	return r.update(ctx, id, map[string]any{
+		"status":      model.SmsStatusPending,
+		"retry_count": retryCount,
+		"last_error":  truncateError(lastError),
+	})
+}
+
+// MarkFailed 重试次数用尽后标记为失败。
+func (r *Repository) MarkFailed(ctx context.Context, id uint64, retryCount int, lastError string) error {
+	return r.update(ctx, id, map[string]any{
+		"status":      model.SmsStatusFailed,
+		"retry_count": retryCount,
+		"last_error":  truncateError(lastError),
+	})
+}
+
+// MarkSkipped 记录因配置缺失（总开关关闭、模板未配置等）未发送。
+func (r *Repository) MarkSkipped(ctx context.Context, id uint64, reason string) error {
+	return r.update(ctx, id, map[string]any{
+		"status":      model.SmsStatusSkipped,
+		"skip_reason": truncate(reason, 128),
+	})
+}
+
+func (r *Repository) update(ctx context.Context, id uint64, fields map[string]any) error {
+	if r == nil || r.db == nil {
+		return gorm.ErrInvalidDB
+	}
+	if id == 0 {
+		return nil
+	}
+	return r.db.WithContext(ctx).
+		Model(&model.SmsMessage{}).
+		Where("id = ?", id).
+		Updates(fields).Error
+}
+
+func truncateError(value string) string {
+	return truncate(value, 512)
+}
+
+func truncate(value string, limit int) string {
+	value = strings.TrimSpace(value)
+	if limit <= 0 {
+		return value
+	}
+	runes := []rune(value)
+	if len(runes) <= limit {
+		return value
+	}
+	return string(runes[:limit])
+}

backend/internal/modules/sms/repository_test.go

@@ -0,0 +1,199 @@
+package sms
+
+import (
+	"context"
+	"testing"
+	"time"
+
+	"hfb_sys/backend/internal/database"
+	"hfb_sys/backend/internal/model"
+
+	"gorm.io/gorm"
+)
+
+func newSmsTestDB(t *testing.T) *gorm.DB {
+	t.Helper()
+	db := database.NewTestDB()
+	if err := database.AutoMigrateIfMissing(db, &model.SmsMessage{}); err != nil {
+		t.Fatalf("AutoMigrate() error = %v", err)
+	}
+	return db
+}
+
+func TestEnqueueResolvesPhoneAndDeduplicates(t *testing.T) {
+	db := newSmsTestDB(t)
+	ctx := context.Background()
+
+	user := model.User{Phone: "13800001111", Nickname: "号主"}
+	if err := db.Create(&user).Error; err != nil {
+		t.Fatalf("创建用户失败: %v", err)
+	}
+
+	entry := Entry{
+		UserID:  user.ID,
+		Node:    NodeListingReviewRejected,
+		BizType: "listing",
+		BizID:   9001,
+	}
+	if inserted, err := Enqueue(db.WithContext(ctx), entry); err != nil {
+		t.Fatalf("Enqueue() error = %v", err)
+	} else if !inserted {
+		t.Fatal("Enqueue() 首次入队应插入新记录")
+	}
+	// 同一业务对象重复入队应被唯一索引静默忽略。
+	if inserted, err := Enqueue(db.WithContext(ctx), entry); err != nil {
+		t.Fatalf("Enqueue() 重复调用 error = %v", err)
+	} else if inserted {
+		t.Fatal("Enqueue() 重复入队不应插入新记录")
+	}
+
+	var rows []model.SmsMessage
+	if err := db.Where("node = ? AND biz_id = ?", NodeListingReviewRejected, 9001).Find(&rows).Error; err != nil {
+		t.Fatalf("查询短信记录失败: %v", err)
+	}
+	if len(rows) != 1 {
+		t.Fatalf("记录数 = %d, want 1（唯一索引应保证幂等）", len(rows))
+	}
+	if rows[0].Phone != user.Phone {
+		t.Fatalf("phone = %q, want %q（应从用户表补齐手机号）", rows[0].Phone, user.Phone)
+	}
+	if rows[0].Status != model.SmsStatusPending {
+		t.Fatalf("status = %q, want %q", rows[0].Status, model.SmsStatusPending)
+	}
+}
+
+func TestEnqueueIgnoresUnknownNodeAndMissingUser(t *testing.T) {
+	db := newSmsTestDB(t)
+	ctx := context.Background()
+
+	if _, err := Enqueue(db.WithContext(ctx), Entry{UserID: 1, Node: "not_registered", BizType: "listing", BizID: 1}); err != nil {
+		t.Fatalf("未登记节点不应报错: %v", err)
+	}
+	if _, err := Enqueue(db.WithContext(ctx), Entry{UserID: 0, Node: NodeOrderHandoffAssist, BizType: "order", BizID: 1}); err != nil {
+		t.Fatalf("缺少用户不应报错: %v", err)
+	}
+
+	var count int64
+	if err := db.Model(&model.SmsMessage{}).Count(&count).Error; err != nil {
+		t.Fatalf("统计失败: %v", err)
+	}
+	if count != 0 {
+		t.Fatalf("记录数 = %d, want 0", count)
+	}
+}
+
+func TestRepositoryStatusTransitions(t *testing.T) {
+	db := newSmsTestDB(t)
+	ctx := context.Background()
+	repo := NewRepository(db)
+
+	row := model.SmsMessage{
+		UserID:  11,
+		Phone:   "13800002222",
+		Node:    NodeOrderHandoffAssist,
+		BizType: "order",
+		BizID:   7001,
+		Status:  model.SmsStatusPending,
+	}
+	if err := db.Create(&row).Error; err != nil {
+		t.Fatalf("创建记录失败: %v", err)
+	}
+
+	// 首次拉取应命中，重试退避窗口内的记录应被排除。
+	pending, err := repo.ListPending(ctx, 10, time.Now().Add(-time.Hour))
+	if err != nil {
+		t.Fatalf("ListPending() error = %v", err)
+	}
+	if len(pending) != 1 {
+		t.Fatalf("ListPending() = %d 条, want 1", len(pending))
+	}
+
+	if err := repo.MarkRetry(ctx, row.ID, 1, "渠道限流"); err != nil {
+		t.Fatalf("MarkRetry() error = %v", err)
+	}
+	var retried model.SmsMessage
+	if err := db.First(&retried, row.ID).Error; err != nil {
+		t.Fatalf("查询失败: %v", err)
+	}
+	if retried.Status != model.SmsStatusPending || retried.RetryCount != 1 || retried.LastError != "渠道限流" {
+		t.Fatalf("重试后记录 = %+v", retried)
+	}
+	// 退避窗口内不应再次被拉取。
+	pending, err = repo.ListPending(ctx, 10, time.Now().Add(-time.Hour))
+	if err != nil {
+		t.Fatalf("ListPending() error = %v", err)
+	}
+	if len(pending) != 0 {
+		t.Fatalf("退避窗口内 ListPending() = %d 条, want 0", len(pending))
+	}
+	// 退避窗口外应重新进入待发送队列。
+	pending, err = repo.ListPending(ctx, 10, time.Now().Add(time.Hour))
+	if err != nil {
+		t.Fatalf("ListPending() error = %v", err)
+	}
+	if len(pending) != 1 {
+		t.Fatalf("退避窗口外 ListPending() = %d 条, want 1", len(pending))
+	}
+
+	sentAt := time.Now()
+	if err := repo.MarkSent(ctx, row.ID, "SMS_512540945", "大锤商行", sentAt); err != nil {
+		t.Fatalf("MarkSent() error = %v", err)
+	}
+	var sent model.SmsMessage
+	if err := db.First(&sent, row.ID).Error; err != nil {
+		t.Fatalf("查询失败: %v", err)
+	}
+	if sent.Status != model.SmsStatusSent || sent.TemplateCode != "SMS_512540945" || sent.SignName != "大锤商行" || sent.SentAt == nil {
+		t.Fatalf("发送成功后记录 = %+v", sent)
+	}
+
+	if err := repo.MarkSkipped(ctx, row.ID, "节点短信总开关未开启"); err != nil {
+		t.Fatalf("MarkSkipped() error = %v", err)
+	}
+	var skipped model.SmsMessage
+	if err := db.First(&skipped, row.ID).Error; err != nil {
+		t.Fatalf("查询失败: %v", err)
+	}
+	if skipped.Status != model.SmsStatusSkipped || skipped.SkipReason != "节点短信总开关未开启" {
+		t.Fatalf("跳过记录 = %+v", skipped)
+	}
+
+	if err := repo.MarkFailed(ctx, row.ID, 3, "渠道异常"); err != nil {
+		t.Fatalf("MarkFailed() error = %v", err)
+	}
+	var failed model.SmsMessage
+	if err := db.First(&failed, row.ID).Error; err != nil {
+		t.Fatalf("查询失败: %v", err)
+	}
+	if failed.Status != model.SmsStatusFailed || failed.RetryCount != 3 {
+		t.Fatalf("失败记录 = %+v", failed)
+	}
+}
+
+func TestEnqueueKeepsSiteID(t *testing.T) {
+	db := newSmsTestDB(t)
+	ctx := context.Background()
+	siteID := uint64(77)
+
+	user := model.User{Phone: "13800003333"}
+	if err := db.Create(&user).Error; err != nil {
+		t.Fatalf("创建用户失败: %v", err)
+	}
+	if _, err := Enqueue(db.WithContext(ctx), Entry{
+		UserID:             user.ID,
+		Node:               NodeListingStalePriceSuggestion,
+		BizType:            "listing",
+		BizID:              5001,
+		DistributionSiteID: &siteID,
+	}); err != nil {
+		t.Fatalf("Enqueue() error = %v", err)
+	}
+
+	var row model.SmsMessage
+	if err := db.Where("biz_id = ?", 5001).First(&row).Error; err != nil {
+		t.Fatalf("查询失败: %v", err)
+	}
+	if row.DistributionSiteID == nil || *row.DistributionSiteID != siteID {
+		t.Fatalf("distribution_site_id = %v, want %d", row.DistributionSiteID, siteID)
+	}
+}

backend/internal/modules/systemconfig/distribution.go

@@ -3,6 +3,8 @@ package systemconfig
 import (
 	"strconv"
 	"strings"
+
+	smsnode "hfb_sys/backend/internal/modules/sms"
 )
 
 // DistributionSettlementHoldDaysKey 是「新建分销站点默认结算冷却天数」的系统配置键。
@@ -29,6 +31,11 @@ func validateConfigValue(key, value string) error {
 	switch key {
 	case DistributionSettlementHoldDaysKey:
 		return validateDistributionSettlementHoldDays(value)
+	case smsnode.ConfigKey:
+		if _, err := smsnode.ParseConfigValue(value); err != nil {
+			return ErrInvalidConfig
+		}
+		return nil
 	default:
 		return nil
 	}

backend/internal/modules/systemconfig/repository.go

@@ -10,6 +10,7 @@ import (
 	"hfb_sys/backend/internal/auditlog"
 	"hfb_sys/backend/internal/model"
 	"hfb_sys/backend/internal/modules/rentergrowth"
+	smsnode "hfb_sys/backend/internal/modules/sms"
 
 	"gorm.io/gorm"
 	"gorm.io/gorm/clause"
@@ -41,6 +42,7 @@ var defaultConfigs = []defaultConfig{
 	{Key: orderAgreementsConfigKey, Value: defaultOrderAgreementsConfigValue(), Description: "下单前协议配置 JSON"},
 	{Key: postRentalNoticeConfigKey, Value: defaultPostRentalNoticeConfigValue(), Description: "租后须知配置 JSON"},
 	{Key: rentergrowth.ConfigKey, Value: rentergrowth.DefaultConfigValue(), Description: "租客成长等级规则（积分门槛、租金折扣、等级免押额度）"},
+	{Key: smsnode.ConfigKey, Value: smsnode.DefaultConfigValue(), Description: "节点短信模板配置（总开关、各业务节点模板 CODE）"},
 	{Key: "chat.default_support_admin_id", Value: "2", Description: "默认客服 ID（必须是启用状态的客服角色）"},
 	{Key: "chat.auto_welcome_message", Value: "欢迎加入订单群聊！如有任何问题，请随时沟通。", Description: "建群后自动发送的欢迎话术"},
 	{Key: "chat.listing_group_welcome", Value: "欢迎加入账号群！请号主扫描下方二维码加入企业微信群，方便客服与您及时联系。", Description: "发布群创建后自动发送的欢迎语"},
@@ -87,6 +89,7 @@ var adminVisibleConfigKeys = []string{
 	"order.return_overdue_grace_minutes",
 	"profile.post_rental_notice",
 	"renter.growth_level_rules",
+	"sms.business_templates",
 }
 
 func NewRepository(db *gorm.DB) *Repository {

backend/internal/modules/systemconfig/service_update.go

@@ -6,6 +6,7 @@ import (
 	"strings"
 
 	"hfb_sys/backend/internal/modules/rentergrowth"
+	smsnode "hfb_sys/backend/internal/modules/sms"
 )
 
 func (s *Service) Update(ctx context.Context, actorID uint64, key string, req UpdateRequest, meta AuditMeta) (*ConfigDTO, error) {
@@ -36,6 +37,17 @@ func (s *Service) Update(ctx context.Context, actorID uint64, key string, req Up
 		}
 		req.Value = value
 	}
+	if key == smsnode.ConfigKey {
+		cfg, err := smsnode.ParseConfigValue(req.Value)
+		if err != nil {
+			return nil, ErrInvalidConfig
+		}
+		value, err := smsnode.MarshalConfig(cfg)
+		if err != nil {
+			return nil, ErrInvalidConfig
+		}
+		req.Value = value
+	}
 	return s.repo.Update(ctx, actorID, key, req, meta)
 }