@h-ai/reach 1.0.0-beta.2 → 1.0.0-beta.20

package/dist/index.js

@@ -1,8 +1,9 @@
 import { z } from 'zod';
 import { core, err, ok } from '@h-ai/core';
 import process from 'process';
-import { reldb, migrateSchema, schemaColumns, BaseReldbCrudRepository } from '@h-ai/reldb';
+import { reldb, BaseReldbCrudRepository } from '@h-ai/reldb';
 import { randomUUID, createHash, createHmac } from 'crypto';
+import { addAbortListener } from 'events';
 import { createRequire } from 'module';
 import { cache } from '@h-ai/cache';
 
@@ -22,6 +23,7 @@ var en_US_default = {
   reach_providerRequired: "No provider specified, set provider field in message or template",
   reach_dndBlocked: "Message discarded by Do Not Disturb period",
   reach_dndPersistenceRequired: "DND delay requires an initialized database and a ready queue table",
+  reach_templatePersistenceRequired: "Configured notification templates require an initialized database and successful template persistence",
   reach_dndEnqueueFailed: "The message could not be reliably queued; try again later",
   reach_sendRecordSaveFailed: "Failed to persist the reach send record",
   reach_invalidStoredInteger: "Send record {field} is not a safe non-negative integer",
@@ -29,8 +31,13 @@ var en_US_default = {
   reach_unknownResolutionFailed: "Unknown delivery was not found or has already been resolved",
   reach_queueInputInvalid: "Invalid queue receipt or manual resolution parameters",
   reach_deliveryUnknown: "The external delivery outcome is unknown; manual review is required and automatic redelivery has stopped",
-  reach_smsSendFailed: "SMS send failed: {error}",
-  reach_emailSendFailed: "Email send failed: {error}",
+  reach_smsSendFailed: "SMS send failed. Please try again later.",
+  reach_smsGatewayFailed: "The SMS gateway request failed or timed out. Delivery is unconfirmed",
+  reach_gatewayUrlInvalid: "Use a full HTTPS gateway URL without credentials, a query, or a fragment. For HTTP on a trusted private network, explicitly enable allowInsecureHttp",
+  reach_gatewayHeadersInvalid: "Gateway headers are invalid or include a header managed by the HTTP client",
+  reach_gatewayBodyInvalid: "The gateway request body must be a JSON object, an array, or text",
+  reach_gatewayHookInvalid: "Gateway hooks must be bound to an SMS provider with a gateway configured",
+  reach_emailSendFailed: "Email send failed. Please try again later.",
   reach_apiSendFailed: "API callback send failed: {error}",
   reach_configError: "Reach config validation failed: {error}",
   reach_config_nameRequired: "Provider name is required",
@@ -57,7 +64,8 @@ var en_US_default = {
   reach_apiResponseTooLarge: "API acknowledgement exceeds the 64 KiB limit",
   reach_apiResponseInvalid: "API acknowledgement must be empty or a JSON object with an optional messageId string",
   reach_apiRequestFailed: "API request failed or timed out; delivery is unconfirmed",
-  reach_apiHttpsRequired: "This API policy requires HTTPS and disallows automatic redirects"
+  reach_apiHttpsRequired: "This API policy requires HTTPS and disallows automatic redirects",
+  reach_config_providerNameDuplicate: "Provider names must be unique"
 };
 
 // messages/ja-JP.json
@@ -74,6 +82,7 @@ var ja_JP_default = {
   reach_providerRequired: "\u30D7\u30ED\u30D0\u30A4\u30C0\u30FC\u304C\u6307\u5B9A\u3055\u308C\u3066\u3044\u307E\u305B\u3093\u3002\u30E1\u30C3\u30BB\u30FC\u30B8\u307E\u305F\u306F\u30C6\u30F3\u30D7\u30EC\u30FC\u30C8\u306Eprovider\u3092\u8A2D\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044",
   reach_dndBlocked: "\u901A\u77E5\u3092\u505C\u6B62\u3059\u308B\u6642\u9593\u5E2F\u306E\u305F\u3081\u3001\u30E1\u30C3\u30BB\u30FC\u30B8\u3092\u7834\u68C4\u3057\u307E\u3057\u305F",
   reach_dndPersistenceRequired: "\u901A\u77E5\u5236\u9650\u6642\u9593\u5E2F\u306E\u914D\u4FE1\u5EF6\u671F\u306B\u306F\u521D\u671F\u5316\u6E08\u307F\u306E\u30C7\u30FC\u30BF\u30D9\u30FC\u30B9\u3068\u6E96\u5099\u6E08\u307F\u306E\u30AD\u30E5\u30FC\u30C6\u30FC\u30D6\u30EB\u304C\u5FC5\u8981\u3067\u3059",
+  reach_templatePersistenceRequired: "\u901A\u77E5\u30C6\u30F3\u30D7\u30EC\u30FC\u30C8\u306E\u8A2D\u5B9A\u306B\u306F\u521D\u671F\u5316\u6E08\u307F\u306E\u30C7\u30FC\u30BF\u30D9\u30FC\u30B9\u3068\u30C6\u30F3\u30D7\u30EC\u30FC\u30C8\u306E\u4FDD\u5B58\u6210\u529F\u304C\u5FC5\u8981\u3067\u3059",
   reach_dndEnqueueFailed: "\u30E1\u30C3\u30BB\u30FC\u30B8\u3092\u78BA\u5B9F\u306B\u30AD\u30E5\u30FC\u3078\u767B\u9332\u3067\u304D\u307E\u305B\u3093\u3067\u3057\u305F\u3002\u3057\u3070\u3089\u304F\u3057\u3066\u304B\u3089\u518D\u8A66\u884C\u3057\u3066\u304F\u3060\u3055\u3044",
   reach_sendRecordSaveFailed: "\u914D\u4FE1\u8A18\u9332\u306E\u6C38\u7D9A\u5316\u306B\u5931\u6557\u3057\u307E\u3057\u305F",
   reach_invalidStoredInteger: "\u914D\u4FE1\u8A18\u9332\u306E {field} \u306F\u5B89\u5168\u306A\u975E\u8CA0\u6574\u6570\u3067\u306F\u3042\u308A\u307E\u305B\u3093",
@@ -81,8 +90,13 @@ var ja_JP_default = {
   reach_unknownResolutionFailed: "\u7D50\u679C\u4E0D\u660E\u306E\u914D\u4FE1\u304C\u898B\u3064\u304B\u3089\u306A\u3044\u304B\u3001\u65E2\u306B\u89E3\u6C7A\u3055\u308C\u3066\u3044\u307E\u3059",
   reach_queueInputInvalid: "\u30AD\u30E5\u30FC\u306E\u53D7\u9818\u8A18\u9332\u307E\u305F\u306F\u624B\u52D5\u89E3\u6C7A\u306E\u30D1\u30E9\u30E1\u30FC\u30BF\u30FC\u304C\u7121\u52B9\u3067\u3059",
   reach_deliveryUnknown: "\u5916\u90E8\u3078\u306E\u914D\u4FE1\u7D50\u679C\u306F\u4E0D\u660E\u3067\u3059\u3002\u624B\u52D5\u78BA\u8A8D\u304C\u5FC5\u8981\u306A\u305F\u3081\u3001\u81EA\u52D5\u518D\u914D\u4FE1\u3092\u505C\u6B62\u3057\u307E\u3057\u305F",
-  reach_smsSendFailed: "SMS\u306E\u9001\u4FE1\u306B\u5931\u6557\u3057\u307E\u3057\u305F: {error}",
-  reach_emailSendFailed: "\u30E1\u30FC\u30EB\u306E\u9001\u4FE1\u306B\u5931\u6557\u3057\u307E\u3057\u305F: {error}",
+  reach_smsSendFailed: "SMS\u306E\u9001\u4FE1\u306B\u5931\u6557\u3057\u307E\u3057\u305F\u3002\u3057\u3070\u3089\u304F\u3057\u3066\u304B\u3089\u3082\u3046\u4E00\u5EA6\u304A\u8A66\u3057\u304F\u3060\u3055\u3044",
+  reach_smsGatewayFailed: "SMS \u30B2\u30FC\u30C8\u30A6\u30A7\u30A4\u3078\u306E\u30EA\u30AF\u30A8\u30B9\u30C8\u304C\u5931\u6557\u307E\u305F\u306F\u30BF\u30A4\u30E0\u30A2\u30A6\u30C8\u3057\u3001\u914D\u4FE1\u3092\u78BA\u8A8D\u3067\u304D\u307E\u305B\u3093\u3067\u3057\u305F",
+  reach_gatewayUrlInvalid: "\u30B2\u30FC\u30C8\u30A6\u30A7\u30A4\u306B\u306F\u8A8D\u8A3C\u60C5\u5831\u3001\u30AF\u30A8\u30EA\u3001\u30D5\u30E9\u30B0\u30E1\u30F3\u30C8\u3092\u542B\u307E\u306A\u3044\u5B8C\u5168\u306A HTTPS URL \u3092\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044\u3002\u4FE1\u983C\u3067\u304D\u308B\u5185\u90E8\u30CD\u30C3\u30C8\u30EF\u30FC\u30AF\u3067 HTTP \u3092\u4F7F\u7528\u3059\u308B\u5834\u5408\u306F allowInsecureHttp \u3092\u660E\u793A\u7684\u306B\u6709\u52B9\u306B\u3057\u3066\u304F\u3060\u3055\u3044",
+  reach_gatewayHeadersInvalid: "\u30B2\u30FC\u30C8\u30A6\u30A7\u30A4\u306E\u30EA\u30AF\u30A8\u30B9\u30C8\u30D8\u30C3\u30C0\u30FC\u304C\u7121\u52B9\u304B\u3001HTTP \u30AF\u30E9\u30A4\u30A2\u30F3\u30C8\u304C\u7BA1\u7406\u3059\u308B\u30D8\u30C3\u30C0\u30FC\u304C\u542B\u307E\u308C\u3066\u3044\u307E\u3059",
+  reach_gatewayBodyInvalid: "\u30B2\u30FC\u30C8\u30A6\u30A7\u30A4\u306E\u30EA\u30AF\u30A8\u30B9\u30C8\u30DC\u30C7\u30A3\u306B\u306F JSON \u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u3001\u914D\u5217\u3001\u307E\u305F\u306F\u30C6\u30AD\u30B9\u30C8\u3092\u6307\u5B9A\u3057\u3066\u304F\u3060\u3055\u3044",
+  reach_gatewayHookInvalid: "\u30B2\u30FC\u30C8\u30A6\u30A7\u30A4\u306E\u30D5\u30C3\u30AF\u306F\u3001\u30B2\u30FC\u30C8\u30A6\u30A7\u30A4\u3092\u8A2D\u5B9A\u3057\u305F SMS Provider \u306B\u5272\u308A\u5F53\u3066\u3066\u304F\u3060\u3055\u3044",
+  reach_emailSendFailed: "\u30E1\u30FC\u30EB\u306E\u9001\u4FE1\u306B\u5931\u6557\u3057\u307E\u3057\u305F\u3002\u3057\u3070\u3089\u304F\u3057\u3066\u304B\u3089\u3082\u3046\u4E00\u5EA6\u304A\u8A66\u3057\u304F\u3060\u3055\u3044",
   reach_apiSendFailed: "API\u30B3\u30FC\u30EB\u30D0\u30C3\u30AF\u306E\u9001\u4FE1\u306B\u5931\u6557\u3057\u307E\u3057\u305F: {error}",
   reach_configError: "\u901A\u77E5\u8A2D\u5B9A\u306E\u691C\u8A3C\u306B\u5931\u6557\u3057\u307E\u3057\u305F: {error}",
   reach_config_nameRequired: "\u30D7\u30ED\u30D0\u30A4\u30C0\u30FC\u540D\u306F\u5FC5\u9808\u3067\u3059",
@@ -109,7 +123,8 @@ var ja_JP_default = {
   reach_apiResponseTooLarge: "API \u5FDC\u7B54\u304C 64 KiB \u306E\u4E0A\u9650\u3092\u8D85\u3048\u3066\u3044\u307E\u3059",
   reach_apiResponseInvalid: "API \u5FDC\u7B54\u306F\u7A7A\u304B\u3001\u7701\u7565\u53EF\u80FD\u306A messageId \u6587\u5B57\u5217\u3092\u6301\u3064 JSON \u30AA\u30D6\u30B8\u30A7\u30AF\u30C8\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059",
   reach_apiRequestFailed: "API \u30EA\u30AF\u30A8\u30B9\u30C8\u304C\u5931\u6557\u307E\u305F\u306F\u30BF\u30A4\u30E0\u30A2\u30A6\u30C8\u3057\u307E\u3057\u305F\u3002\u914D\u4FE1\u7D50\u679C\u306F\u672A\u78BA\u8A8D\u3067\u3059",
-  reach_apiHttpsRequired: "\u3053\u306E API \u30DD\u30EA\u30B7\u30FC\u3067\u306F HTTPS \u304C\u5FC5\u8981\u3067\u3001\u81EA\u52D5\u30EA\u30C0\u30A4\u30EC\u30AF\u30C8\u306F\u7981\u6B62\u3055\u308C\u3066\u3044\u307E\u3059"
+  reach_apiHttpsRequired: "\u3053\u306E API \u30DD\u30EA\u30B7\u30FC\u3067\u306F HTTPS \u304C\u5FC5\u8981\u3067\u3001\u81EA\u52D5\u30EA\u30C0\u30A4\u30EC\u30AF\u30C8\u306F\u7981\u6B62\u3055\u308C\u3066\u3044\u307E\u3059",
+  reach_config_providerNameDuplicate: "Provider \u540D\u306F\u4E00\u610F\u3067\u3042\u308B\u5FC5\u8981\u304C\u3042\u308A\u307E\u3059"
 };
 
 // messages/zh-CN.json
@@ -126,6 +141,7 @@ var zh_CN_default = {
   reach_providerRequired: "\u672A\u6307\u5B9A Provider\uFF0C\u8BF7\u5728\u6D88\u606F\u6216\u6A21\u677F\u4E2D\u8BBE\u7F6E provider \u5B57\u6BB5",
   reach_dndBlocked: "\u5F53\u524D\u5904\u4E8E\u514D\u6253\u6270\u65F6\u6BB5\uFF0C\u6D88\u606F\u5DF2\u4E22\u5F03",
   reach_dndPersistenceRequired: "\u542F\u7528\u514D\u6253\u6270\u5EF6\u8FDF\u53D1\u9001\u9700\u8981\u5148\u521D\u59CB\u5316\u6570\u636E\u5E93\u5E76\u786E\u4FDD\u961F\u5217\u8868\u53EF\u7528",
+  reach_templatePersistenceRequired: "\u914D\u7F6E\u901A\u77E5\u6A21\u677F\u524D\u9700\u8981\u5148\u521D\u59CB\u5316\u6570\u636E\u5E93\uFF0C\u5E76\u786E\u4FDD\u6A21\u677F\u80FD\u591F\u4FDD\u5B58",
   reach_dndEnqueueFailed: "\u6D88\u606F\u672A\u80FD\u53EF\u9760\u4FDD\u5B58\u5230\u5EF6\u8FDF\u961F\u5217\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",
   reach_sendRecordSaveFailed: "\u4FDD\u5B58\u89E6\u8FBE\u53D1\u9001\u8BB0\u5F55\u5931\u8D25",
   reach_invalidStoredInteger: "\u53D1\u9001\u8BB0\u5F55\u7684 {field} \u4E0D\u662F\u5B89\u5168\u7684\u975E\u8D1F\u6574\u6570",
@@ -133,8 +149,13 @@ var zh_CN_default = {
   reach_unknownResolutionFailed: "\u672A\u77E5\u6295\u9012\u7ED3\u679C\u4E0D\u5B58\u5728\u6216\u5DF2\u88AB\u5176\u5B83\u64CD\u4F5C\u88C1\u5B9A",
   reach_queueInputInvalid: "\u961F\u5217\u56DE\u6267\u6216\u4EBA\u5DE5\u88C1\u5B9A\u53C2\u6570\u65E0\u6548",
   reach_deliveryUnknown: "\u5916\u90E8\u6295\u9012\u7ED3\u679C\u672A\u77E5\uFF0C\u9700\u8981\u4EBA\u5DE5\u6838\u5BF9\uFF0C\u5DF2\u505C\u6B62\u81EA\u52A8\u91CD\u53D1",
-  reach_smsSendFailed: "\u77ED\u4FE1\u53D1\u9001\u5931\u8D25: {error}",
-  reach_emailSendFailed: "\u90AE\u4EF6\u53D1\u9001\u5931\u8D25: {error}",
+  reach_smsSendFailed: "\u77ED\u4FE1\u53D1\u9001\u5931\u8D25\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",
+  reach_smsGatewayFailed: "\u77ED\u4FE1\u7F51\u5173\u8BF7\u6C42\u5931\u8D25\u6216\u8D85\u65F6\uFF0C\u6295\u9012\u7ED3\u679C\u672A\u786E\u8BA4",
+  reach_gatewayUrlInvalid: "\u7F51\u5173\u987B\u4F7F\u7528\u5B8C\u6574\u7684 HTTPS URL\uFF0C\u4E14\u4E0D\u80FD\u5305\u542B\u51ED\u636E\u3001\u67E5\u8BE2\u53C2\u6570\u6216\u7247\u6BB5\u3002\u53D7\u4FE1\u5185\u7F51\u4F7F\u7528 HTTP \u65F6\u987B\u663E\u5F0F\u542F\u7528 allowInsecureHttp",
+  reach_gatewayHeadersInvalid: "\u7F51\u5173\u8BF7\u6C42\u5934\u683C\u5F0F\u65E0\u6548\uFF0C\u6216\u5305\u542B\u7531 HTTP \u5BA2\u6237\u7AEF\u7BA1\u7406\u7684\u8BF7\u6C42\u5934",
+  reach_gatewayBodyInvalid: "\u7F51\u5173\u8BF7\u6C42\u4F53\u5FC5\u987B\u662F JSON \u5BF9\u8C61\u3001\u6570\u7EC4\u6216\u6587\u672C",
+  reach_gatewayHookInvalid: "\u7F51\u5173\u51FD\u6570\u5FC5\u987B\u7ED1\u5B9A\u5230\u542F\u7528\u4E86\u7F51\u5173\u7684\u77ED\u4FE1 Provider",
+  reach_emailSendFailed: "\u90AE\u4EF6\u53D1\u9001\u5931\u8D25\uFF0C\u8BF7\u7A0D\u540E\u91CD\u8BD5",
   reach_apiSendFailed: "API \u56DE\u8C03\u53D1\u9001\u5931\u8D25: {error}",
   reach_configError: "\u89E6\u8FBE\u914D\u7F6E\u6821\u9A8C\u5931\u8D25\uFF1A{error}",
   reach_config_nameRequired: "Provider \u540D\u79F0\u4E0D\u80FD\u4E3A\u7A7A",
@@ -161,7 +182,8 @@ var zh_CN_default = {
   reach_apiResponseTooLarge: "API \u56DE\u6267\u8D85\u8FC7 64 KiB \u4E0A\u9650",
   reach_apiResponseInvalid: "API \u56DE\u6267\u5FC5\u987B\u4E3A\u7A7A\u6216\u542B\u53EF\u9009 messageId \u5B57\u7B26\u4E32\u7684 JSON \u5BF9\u8C61",
   reach_apiRequestFailed: "API \u8BF7\u6C42\u5931\u8D25\u6216\u8D85\u65F6\uFF0C\u6295\u9012\u7ED3\u679C\u672A\u786E\u8BA4",
-  reach_apiHttpsRequired: "\u6B64 API \u7B56\u7565\u8981\u6C42 HTTPS \u4E14\u7981\u6B62\u81EA\u52A8\u91CD\u5B9A\u5411"
+  reach_apiHttpsRequired: "\u6B64 API \u7B56\u7565\u8981\u6C42 HTTPS \u4E14\u7981\u6B62\u81EA\u52A8\u91CD\u5B9A\u5411",
+  reach_config_providerNameDuplicate: "Provider \u540D\u79F0\u4E0D\u80FD\u91CD\u590D"
 };
 
 // src/reach-i18n.ts
@@ -171,6 +193,42 @@ var reachM = core.i18n.createMessageGetter({
   "ja-JP": ja_JP_default
 });
 
+// src/reach-gateway-config.ts
+var transportHeader = /^(?:connection|content-length|host|keep-alive|proxy-connection|te|trailer|transfer-encoding|upgrade)$/i;
+var jsonValue = z.json();
+var gatewayFields = {
+  /** 网关自定义请求头；连接与消息长度相关的头由 HTTP 客户端管理。 */
+  headers: z.record(z.string(), z.string()).refine((headers) => {
+    try {
+      return [
+        ...new Headers(headers).keys()
+      ].every((name) => !transportHeader.test(name));
+    } catch {
+      return false;
+    }
+  }, reachM("reach_gatewayHeadersInvalid")).optional(),
+  /** 网关请求体；对象和数组序列化为 JSON，字符串原样发送。省略时不发请求体。 */
+  body: z.union([
+    z.string(),
+    z.array(jsonValue),
+    z.record(z.string(), jsonValue)
+  ], reachM("reach_gatewayBodyInvalid")).optional()
+};
+var ReachGatewayFieldsSchema = z.strictObject(gatewayFields);
+var ReachGatewayConfigSchema = z.strictObject({
+  /** 网关的完整 HTTP(S) URL；包含路径，不允许凭据、查询参数或片段。 */
+  url: z.url(reachM("reach_gatewayUrlInvalid")),
+  /** 仅在受信内网显式允许明文 HTTP。 */
+  allowInsecureHttp: z.boolean().default(false),
+  ...gatewayFields
+}).refine(({ url, allowInsecureHttp }) => {
+  const target = URL.parse(url);
+  return target !== null && /^https?:\/\//i.test(url) && !/[?#]/.test(url) && !target.username && !target.password && (target.protocol === "https:" || target.protocol === "http:" && allowInsecureHttp);
+}, {
+  path: ["url"],
+  message: reachM("reach_gatewayUrlInvalid")
+});
+
 // src/reach-config.ts
 var ConsoleProviderConfigSchema = z.object({
   /** Provider 唯一名称 */
@@ -204,8 +262,10 @@ var AliyunSmsProviderConfigSchema = z.object({
   accessKeySecret: z.string().min(1, reachM("reach_config_accessKeySecretRequired")),
   /** 短信签名 */
   signName: z.string().min(1, reachM("reach_config_signNameRequired")),
-  /** API 端点（默认 dysmsapi.aliyuncs.com） */
-  endpoint: z.string().default("dysmsapi.aliyuncs.com")
+  /** 直连 API 端点（默认 dysmsapi.aliyuncs.com）；配置网关时使用网关 URL。 */
+  endpoint: z.string().default("dysmsapi.aliyuncs.com"),
+  /** 可选的短信隔离网关，以 POST 请求转发已签名的查询参数。 */
+  gateway: ReachGatewayConfigSchema.optional()
 });
 var ApiProviderConfigSchema = z.object({
   /** Provider 唯一名称 */
@@ -240,11 +300,11 @@ var ReachUnknownResolutionSchema = z.object({
 });
 var ReachQueueIdSchema = z.string().uuid();
 var ReachQueueConfigSchema = z.object({
-  /** 自动领取次数上限（含首次及崩溃恢复，默认 5，范围 1–100）。 */
+  /** 每条队列消息最多处理多少次，包含首次发送、失败重试和异常退出后的重新处理；默认 5，范围 1–100。 */
   maxAttempts: z.number().int().min(1).max(100).default(5),
-  /** 首次失败后的退避毫秒数（默认 60000，范围 1000–86400000）。 */
+  /** 第一次发送失败后，等待多少毫秒再试；默认 60000（1 分钟），范围 1000–86400000。 */
   retryDelayMs: z.number().int().min(1e3).max(864e5).default(6e4),
-  /** 指数退避上限毫秒数，不得小于 retryDelayMs（默认 3600000）。 */
+  /** 后续失败时等待时间逐次加倍，但不超过此值；默认 3600000（1 小时），不得小于 retryDelayMs。 */
   maxRetryDelayMs: z.number().int().min(1e3).max(864e5).default(36e5)
 }).refine((value) => value.maxRetryDelayMs >= value.retryDelayMs, {
   message: reachM("reach_queueRetryInvalid")
@@ -279,7 +339,7 @@ var TemplateConfigSchema = z.object({
 });
 var ReachConfigSchema = z.object({
   /** Provider 配置列表 */
-  providers: z.array(ProviderConfigSchema).min(1, reachM("reach_config_providersRequired")),
+  providers: z.array(ProviderConfigSchema).min(1, reachM("reach_config_providersRequired")).refine((providers2) => new Set(providers2.map((provider) => provider.name)).size === providers2.length, reachM("reach_config_providerNameDuplicate")),
   /** 模板配置（通过配置文件注册） */
   templates: z.array(TemplateConfigSchema).optional(),
   /** 免打扰配置 */
@@ -305,17 +365,17 @@ var HaiReachError = core.error.buildHaiErrorsDef("reach", ReachErrorInfo);
 // src/providers/reach-provider-aliyun-sms.ts
 var logger = core.logger.child({ module: "reach", scope: "provider-aliyun-sms" });
 var ISO_MILLISECONDS_SUFFIX_REGEX = /\.\d{3}Z$/;
-function toReachError(error) {
+var RFC3986_RESERVED_CHARACTERS_REGEX = /[!'()*]/g;
+var GATEWAY_TIMEOUT_MS = 1e4;
+var GATEWAY_RESPONSE_LIMIT_BYTES = 64 * 1024;
+function toReachError() {
   return {
-    code: HaiReachError.SEND_FAILED.code,
-    message: reachM("reach_smsSendFailed", {
-      params: { error: error instanceof Error ? error.message : String(error) }
-    }),
-    cause: error
+    ...HaiReachError.SEND_FAILED,
+    message: reachM("reach_smsSendFailed")
   };
 }
 function percentEncode(str) {
-  return encodeURIComponent(str).replace(/\+/g, "%20").replace(/\*/g, "%2A").replace(/~/g, "%7E");
+  return encodeURIComponent(str).replace(RFC3986_RESERVED_CHARACTERS_REGEX, (char) => `%${char.charCodeAt(0).toString(16).toUpperCase()}`);
 }
 function signRequest(params, accessKeySecret, method) {
   const sortedKeys = Object.keys(params).sort();
@@ -325,7 +385,70 @@ function signRequest(params, accessKeySecret, method) {
   hmac.update(stringToSign);
   return hmac.digest("base64");
 }
-function createAliyunSmsProvider() {
+async function prepareGatewayRequest(gateway, url, signal, hook) {
+  let body = gateway.body;
+  const headers = new Headers();
+  for (const [name, value] of Object.entries(gateway.headers ?? {}))
+    headers.set(name, value);
+  if (hook) {
+    signal.throwIfAborted();
+    let listener;
+    const aborted = new Promise((_resolve, reject) => {
+      listener = addAbortListener(signal, () => reject(signal.reason));
+    });
+    try {
+      const output = await Promise.race([
+        Promise.resolve().then(() => hook({
+          method: "POST",
+          url,
+          body: typeof body === "string" ? body : JSON.stringify(body),
+          signal
+        })),
+        aborted
+      ]);
+      const patch = ReachGatewayFieldsSchema.parse(output === void 0 ? {} : output);
+      body = patch.body ?? body;
+      for (const [name, value] of Object.entries(patch.headers ?? {}))
+        headers.set(name, value);
+    } finally {
+      listener?.[Symbol.dispose]();
+    }
+  }
+  if (body !== void 0 && !headers.has("Content-Type")) {
+    headers.set("Content-Type", typeof body === "string" ? "text/plain; charset=utf-8" : "application/json");
+  }
+  return {
+    method: "POST",
+    headers,
+    body: typeof body === "string" ? body : JSON.stringify(body),
+    redirect: "error",
+    signal
+  };
+}
+async function readGatewayResponse(response) {
+  if (response.ok && response.body) {
+    let bytes = 0;
+    const stream = response.body.pipeThrough(new TransformStream({
+      transform(chunk, controller) {
+        bytes += chunk.byteLength;
+        if (bytes > GATEWAY_RESPONSE_LIMIT_BYTES)
+          throw new Error("SMS gateway response exceeded the size limit");
+        controller.enqueue(chunk);
+      }
+    }));
+    const body = await new Response(stream).json();
+    if (body && typeof body === "object" && "Code" in body && body.Code === "OK") {
+      const messageId = "BizId" in body ? body.BizId : void 0;
+      if (messageId === void 0 || typeof messageId === "string" && messageId.length <= 255)
+        return ok({ success: true, messageId });
+    }
+  } else {
+    await response.body?.cancel();
+  }
+  logger.warn("SMS gateway returned an unsuccessful receipt", { status: response.status });
+  return err(HaiReachError.SEND_FAILED, reachM("reach_smsGatewayFailed"));
+}
+function createAliyunSmsProvider(gatewayHook) {
   let smsConfig = null;
   return {
     name: "aliyun-sms",
@@ -334,11 +457,13 @@ function createAliyunSmsProvider() {
       if (config.type !== "aliyun-sms") {
         return err(
           HaiReachError.CONFIG_ERROR,
-          reachM("reach_unsupportedType", { params: { type: config.type } })
+          reachM("reach_unsupportedType", {
+            params: { type: config.type }
+          })
         );
       }
       smsConfig = config;
-      logger.info("Aliyun SMS provider connected", { endpoint: config.endpoint });
+      logger.info("Aliyun SMS provider connected", config.gateway ? { gateway: true } : { endpoint: config.endpoint });
       return ok(void 0);
     },
     async close() {
@@ -349,21 +474,23 @@ function createAliyunSmsProvider() {
       return smsConfig !== null;
     },
     async send(message) {
-      if (!smsConfig) {
+      const config = smsConfig;
+      if (!config) {
         return err(
           HaiReachError.NOT_INITIALIZED,
           reachM("reach_notInitialized")
         );
       }
       const templateCode = message.extra?.templateCode;
-      logger.debug("Sending SMS", { to: message.to, templateCode });
+      if (!config.gateway)
+        logger.debug("Sending SMS", { to: message.to, templateCode });
       try {
         const params = {
-          AccessKeyId: smsConfig.accessKeyId,
+          AccessKeyId: config.accessKeyId,
           Action: "SendSms",
           Format: "JSON",
           PhoneNumbers: message.to,
-          SignName: smsConfig.signName,
+          SignName: config.signName,
           SignatureMethod: "HMAC-SHA1",
           SignatureNonce: randomUUID(),
           SignatureVersion: "1.0",
@@ -374,23 +501,39 @@ function createAliyunSmsProvider() {
         if (message.vars) {
           params.TemplateParam = JSON.stringify(message.vars);
         }
-        params.Signature = signRequest(params, smsConfig.accessKeySecret, "GET");
+        params.Signature = signRequest(params, config.accessKeySecret, config.gateway ? "POST" : "GET");
         const queryString = Object.entries(params).map(([k, v]) => `${percentEncode(k)}=${percentEncode(v)}`).join("&");
-        const url = `https://${smsConfig.endpoint}/?${queryString}`;
+        if (config.gateway) {
+          const deadline = performance.now() + GATEWAY_TIMEOUT_MS;
+          const signal = AbortSignal.timeout(GATEWAY_TIMEOUT_MS);
+          const url2 = `${new URL(config.gateway.url).href}?${queryString}`;
+          const request = await prepareGatewayRequest(config.gateway, url2, signal, gatewayHook);
+          signal.throwIfAborted();
+          if (smsConfig !== config || performance.now() >= deadline)
+            return err(HaiReachError.SEND_FAILED, reachM("reach_smsGatewayFailed"));
+          if (message.sensitive && message.expiresAt !== void 0 && Date.now() >= message.expiresAt)
+            return err(HaiReachError.MESSAGE_EXPIRED, reachM("reach_messageExpired"));
+          return await readGatewayResponse(await fetch(url2, request));
+        }
+        const url = `https://${config.endpoint}/?${queryString}`;
         const response = await fetch(url);
         const body = await response.json();
         if (body.Code !== "OK") {
-          logger.warn("SMS send returned non-OK status", { code: body.Code, message: body.Message });
+          logger.warn("SMS send returned non-OK status", { code: body.Code });
           return err(
             HaiReachError.SEND_FAILED,
-            reachM("reach_smsSendFailed", { params: { error: body.Message } })
+            reachM("reach_smsSendFailed")
           );
         }
         logger.info("SMS sent", { to: message.to, bizId: body.BizId });
         return ok({ success: true, messageId: body.BizId });
       } catch (error) {
+        if (config.gateway) {
+          logger.warn("SMS gateway request failed");
+          return err(HaiReachError.SEND_FAILED, reachM("reach_smsGatewayFailed"));
+        }
         logger.error("SMS send failed", { to: message.to, error });
-        return err(toReachError(error));
+        return err(toReachError());
       }
     }
   };
@@ -405,9 +548,11 @@ function getSafeEndpoint(url) {
 }
 function toReachError2() {
   return {
-    code: HaiReachError.SEND_FAILED.code,
+    ...HaiReachError.SEND_FAILED,
     message: reachM("reach_apiSendFailed", {
-      params: { error: reachM("reach_apiRequestFailed") }
+      params: {
+        error: reachM("reach_apiRequestFailed")
+      }
     })
   };
 }
@@ -439,7 +584,10 @@ async function readAcknowledgement(response) {
     const messageId = "messageId" in result ? result.messageId : void 0;
     if (messageId !== void 0 && (typeof messageId !== "string" || messageId.length > 255))
       return err(HaiReachError.SEND_FAILED, reachM("reach_apiResponseInvalid"));
-    return ok({ success: true, ...messageId === void 0 ? {} : { messageId } });
+    return ok({
+      success: true,
+      ...messageId === void 0 ? {} : { messageId }
+    });
   } catch {
     return err(HaiReachError.SEND_FAILED, reachM("reach_apiResponseInvalid"));
   } finally {
@@ -459,7 +607,9 @@ function createApiProvider() {
       if (config.type !== "api") {
         return err(
           HaiReachError.CONFIG_ERROR,
-          reachM("reach_unsupportedType", { params: { type: config.type } })
+          reachM("reach_unsupportedType", {
+            params: { type: config.type }
+          })
         );
       }
       apiConfig = config;
@@ -467,7 +617,10 @@ function createApiProvider() {
         apiConfig = null;
         return err(HaiReachError.CONFIG_ERROR, reachM("reach_apiHttpsRequired"));
       }
-      logger2.info("API provider connected", { endpoint: getSafeEndpoint(config.url), method: config.method });
+      logger2.info("API provider connected", {
+        endpoint: getSafeEndpoint(config.url),
+        method: config.method
+      });
       return ok(void 0);
     },
     async close() {
@@ -484,7 +637,9 @@ function createApiProvider() {
           reachM("reach_notInitialized")
         );
       }
-      logger2.debug("Sending via API callback", { endpoint: getSafeEndpoint(apiConfig.url) });
+      logger2.debug("Sending via API callback", {
+        endpoint: getSafeEndpoint(apiConfig.url)
+      });
       const requireHttps = apiConfig.requireHttps ?? (message.sensitive === true && core.module.requiresSharedState(process.env));
       if (requireHttps && new URL(apiConfig.url).protocol !== "https:")
         return err(HaiReachError.CONFIG_ERROR, reachM("reach_apiHttpsRequired"));
@@ -518,7 +673,9 @@ function createApiProvider() {
             const rejected = response.status >= 300 && response.status < 400 || response.status >= 400 && response.status < 500 && ![408, 425, 429].includes(response.status);
             return err(
               rejected ? HaiReachError.DELIVERY_REJECTED : HaiReachError.SEND_FAILED,
-              reachM("reach_apiSendFailed", { params: { error: `HTTP ${response.status}` } })
+              reachM("reach_apiSendFailed", {
+                params: { error: `HTTP ${response.status}` }
+              })
             );
           }
           const result = await readAcknowledgement(response);
@@ -568,13 +725,10 @@ function createConsoleProvider() {
   };
 }
 var logger4 = core.logger.child({ module: "reach", scope: "provider-smtp" });
-function toReachError3(error) {
+function toReachError3() {
   return {
-    code: HaiReachError.SEND_FAILED.code,
-    message: reachM("reach_emailSendFailed", {
-      params: { error: error instanceof Error ? error.message : String(error) }
-    }),
-    cause: error
+    ...HaiReachError.SEND_FAILED,
+    message: reachM("reach_emailSendFailed")
   };
 }
 function createSmtpProvider() {
@@ -587,7 +741,9 @@ function createSmtpProvider() {
       if (config.type !== "smtp") {
         return err(
           HaiReachError.CONFIG_ERROR,
-          reachM("reach_unsupportedType", { params: { type: config.type } })
+          reachM("reach_unsupportedType", {
+            params: { type: config.type }
+          })
         );
       }
       try {
@@ -604,7 +760,7 @@ function createSmtpProvider() {
         return ok(void 0);
       } catch (error) {
         logger4.error("SMTP connection failed", { error });
-        return err(toReachError3(error));
+        return err(toReachError3());
       }
     },
     async close() {
@@ -638,7 +794,7 @@ function createSmtpProvider() {
         return ok({ success: true, messageId: info.messageId });
       } catch (error) {
         logger4.error("Email send failed", { to: message.to, error });
-        return err(toReachError3(error));
+        return err(toReachError3());
       }
     }
   };
@@ -730,14 +886,25 @@ function previousResult(row) {
   return row.status === "sent" ? ok({ success: true, receiptId: row.queueId ?? void 0 }) : unconfirmed(row.queueId);
 }
 function unconfirmed(receiptId) {
-  return { success: false, error: { ...HaiReachError.SEND_FAILED, message: reachM("reach_sensitiveDeliveryUnconfirmed"), ext: { receiptId } } };
+  return {
+    success: false,
+    error: {
+      ...HaiReachError.SEND_FAILED,
+      message: reachM("reach_sensitiveDeliveryUnconfirmed"),
+      ext: { receiptId }
+    }
+  };
 }
 async function sendSensitive(message, provider, repo, blocked) {
   if (!repo || !message.idempotencyKey?.trim() || message.idempotencyKey.length > 255 || !Number.isSafeInteger(message.expiresAt))
     return err(HaiReachError.CONFIG_ERROR, reachM("reach_sensitivePolicyRequired"));
   const hash = createHash("sha256").update(JSON.stringify([message.provider, message.to, message.idempotencyKey])).digest("hex");
   const queueId = `${hash.slice(0, 8)}-${hash.slice(8, 12)}-5${hash.slice(13, 16)}-a${hash.slice(17, 20)}-${hash.slice(20, 32)}`;
-  const find = () => repo.findAll({ where: "queue_id = ?", params: [queueId], limit: 1 });
+  const find = () => repo.findAll({
+    where: "queue_id = ?",
+    params: [queueId],
+    limit: 1
+  });
   const existing = await find();
   if (!existing.success)
     return existing;
@@ -786,6 +953,106 @@ async function sendSensitive(message, provider, repo, blocked) {
     return unconfirmed(queueId);
   return ok({ success: true, receiptId: queueId });
 }
+function renderString(template, vars) {
+  return template.replace(/\{(\w+)\}/g, (match, key) => {
+    return Object.hasOwn(vars, key) ? vars[key] : match;
+  });
+}
+function renderTemplate(template, vars) {
+  try {
+    const rendered = {
+      subject: template.subject ? renderString(template.subject, vars) : void 0,
+      body: renderString(template.body, vars)
+    };
+    return ok(rendered);
+  } catch (error) {
+    return err(
+      HaiReachError.TEMPLATE_RENDER_FAILED,
+      reachM("reach_templateRenderFailed", {
+        params: {
+          error: error instanceof Error ? error.message : String(error)
+        }
+      }),
+      error
+    );
+  }
+}
+function noDbError(msgKey) {
+  return err(
+    HaiReachError.SEND_FAILED,
+    reachM(msgKey, {
+      params: { error: "database not available" }
+    })
+  );
+}
+function createTemplateRegistry(repo) {
+  return {
+    async resolve(name) {
+      if (!repo) {
+        return err(
+          HaiReachError.TEMPLATE_NOT_FOUND,
+          reachM("reach_templateNotFound", {
+            params: { template: name }
+          })
+        );
+      }
+      const dbResult = await repo.findByName(name);
+      if (!dbResult.success) {
+        return dbResult;
+      }
+      if (dbResult.data) {
+        return ok({
+          name: dbResult.data.name,
+          provider: dbResult.data.provider,
+          subject: dbResult.data.subject ?? void 0,
+          body: dbResult.data.body
+        });
+      }
+      return err(
+        HaiReachError.TEMPLATE_NOT_FOUND,
+        reachM("reach_templateNotFound", {
+          params: { template: name }
+        })
+      );
+    },
+    async save(template) {
+      if (!repo) {
+        return noDbError("reach_templateSaveFailed");
+      }
+      return repo.upsert(template);
+    },
+    async saveBatch(templates) {
+      if (!repo) {
+        return noDbError("reach_templateSaveFailed");
+      }
+      const results = await Promise.all(templates.map((t) => repo.upsert(t)));
+      const failed = results.find((r) => !r.success);
+      if (failed) {
+        return failed;
+      }
+      return ok(void 0);
+    },
+    async remove(name) {
+      if (!repo) {
+        return noDbError("reach_templateDeleteFailed");
+      }
+      return repo.deleteByName(name);
+    },
+    async list() {
+      if (!repo) {
+        return ok([]);
+      }
+      return repo.listTemplates();
+    },
+    async render(name, vars) {
+      const resolved = await this.resolve(name);
+      if (!resolved.success) {
+        return resolved;
+      }
+      return renderTemplate(resolved.data, vars);
+    }
+  };
+}
 
 // src/reach-send.ts
 var logger6 = core.logger.child({ module: "reach", scope: "send" });
@@ -827,14 +1094,16 @@ async function preprocessMessage(message, templateRegistry2) {
   if (!message.template) {
     return ok(message);
   }
-  const rendered = await templateRegistry2.render(message.template, message.vars ?? {});
+  const template = await templateRegistry2.resolve(message.template);
+  if (!template.success)
+    return template;
+  const rendered = renderTemplate(template.data, message.vars ?? {});
   if (!rendered.success) {
     return rendered;
   }
-  const template = await templateRegistry2.resolve(message.template);
   const processed = {
     ...message,
-    provider: message.provider || (template.success ? template.data.provider : "") || "",
+    provider: message.provider || template.data.provider || "",
     subject: message.subject ?? rendered.data.subject,
     body: message.body ?? rendered.data.body
   };
@@ -998,7 +1267,9 @@ async function executeSend(message, providers2, templateRegistry2, dndConfig2, r
   if (!message.to) {
     return err(
       HaiReachError.INVALID_RECIPIENT,
-      reachM("reach_invalidRecipient", { params: { recipient: "" } })
+      reachM("reach_invalidRecipient", {
+        params: { recipient: "" }
+      })
     );
   }
   const preprocessed = await preprocessMessage(message, templateRegistry2);
@@ -1015,7 +1286,9 @@ async function executeSend(message, providers2, templateRegistry2, dndConfig2, r
   if (!providers2.has(providerName)) {
     return err(
       HaiReachError.PROVIDER_NOT_FOUND,
-      reachM("reach_providerNotFound", { params: { provider: providerName } })
+      reachM("reach_providerNotFound", {
+        params: { provider: providerName }
+      })
     );
   }
   if (preprocessed.data.sensitive)
@@ -1069,202 +1342,130 @@ async function executeSend(message, providers2, templateRegistry2, dndConfig2, r
   }
   return result;
 }
-function renderString(template, vars) {
-  return template.replace(/\{(\w+)\}/g, (match, key) => {
-    return Object.hasOwn(vars, key) ? vars[key] : match;
-  });
-}
-function renderTemplate(template, vars) {
-  try {
-    const rendered = {
-      subject: template.subject ? renderString(template.subject, vars) : void 0,
-      body: renderString(template.body, vars)
-    };
-    return ok(rendered);
-  } catch (error) {
-    return err(
-      HaiReachError.TEMPLATE_RENDER_FAILED,
-      reachM("reach_templateRenderFailed", {
-        params: { error: error instanceof Error ? error.message : String(error) }
-      }),
-      error
-    );
-  }
-}
-function noDbError(msgKey) {
-  return err(
-    HaiReachError.SEND_FAILED,
-    reachM(msgKey, { params: { error: "database not available" } })
-  );
-}
-function createTemplateRegistry(repo) {
-  return {
-    async resolve(name) {
-      if (!repo) {
-        return err(
-          HaiReachError.TEMPLATE_NOT_FOUND,
-          reachM("reach_templateNotFound", { params: { template: name } })
-        );
-      }
-      const dbResult = await repo.findByName(name);
-      if (!dbResult.success) {
-        return dbResult;
-      }
-      if (dbResult.data) {
-        return ok({
-          name: dbResult.data.name,
-          provider: dbResult.data.provider,
-          subject: dbResult.data.subject ?? void 0,
-          body: dbResult.data.body
-        });
-      }
-      return err(
-        HaiReachError.TEMPLATE_NOT_FOUND,
-        reachM("reach_templateNotFound", { params: { template: name } })
-      );
-    },
-    async save(template) {
-      if (!repo) {
-        return noDbError("reach_templateSaveFailed");
-      }
-      return repo.upsert(template);
-    },
-    async saveBatch(templates) {
-      if (!repo) {
-        return noDbError("reach_templateSaveFailed");
-      }
-      const results = await Promise.all(templates.map((t) => repo.upsert(t)));
-      const failed = results.find((r) => !r.success);
-      if (failed) {
-        return failed;
-      }
-      return ok(void 0);
-    },
-    async remove(name) {
-      if (!repo) {
-        return noDbError("reach_templateDeleteFailed");
-      }
-      return repo.deleteByName(name);
-    },
-    async list() {
-      if (!repo) {
-        return ok([]);
-      }
-      return repo.listTemplates();
-    },
-    async render(name, vars) {
-      const resolved = await this.resolve(name);
-      if (!resolved.success) {
-        return resolved;
-      }
-      return renderTemplate(resolved.data, vars);
-    }
-  };
-}
 function migrateReach(options = {}, db = reldb) {
-  const definitions = { queue_id: db.config?.type === "mysql" ? "VARCHAR(255)" : "TEXT", retry_safe: "BOOLEAN NOT NULL DEFAULT FALSE", attempt_count: "BIGINT NOT NULL DEFAULT 0", max_attempts: "BIGINT NOT NULL DEFAULT 5", next_attempt_at: "BIGINT NOT NULL DEFAULT 0", retry_delay_ms: "BIGINT NOT NULL DEFAULT 60000", max_retry_delay_ms: "BIGINT NOT NULL DEFAULT 3600000", last_failure: "TEXT" };
-  const steps = [{
-    version: 1,
-    name: "durable-delivery-ledger",
-    async needed(sql) {
-      const found = await schemaColumns(db, "hai_reach_send_log", sql);
-      return found.success ? ok(found.data.length > 0 && Object.keys(definitions).some((name) => !found.data.includes(name))) : found;
-    },
-    async apply(sql) {
-      const found = await schemaColumns(db, "hai_reach_send_log", sql);
-      if (!found.success)
-        return found;
-      for (const [name, definition] of Object.entries(definitions)) {
-        if (found.data.includes(name))
-          continue;
-        const added = await sql.execute(`ALTER TABLE hai_reach_send_log ADD COLUMN ${name} ${definition}`);
-        if (!added.success)
-          return added;
+  const definitions = {
+    queue_id: db.config?.type === "mysql" ? "VARCHAR(255)" : "TEXT",
+    retry_safe: "BOOLEAN NOT NULL DEFAULT FALSE",
+    attempt_count: "BIGINT NOT NULL DEFAULT 0",
+    max_attempts: "BIGINT NOT NULL DEFAULT 5",
+    next_attempt_at: "BIGINT NOT NULL DEFAULT 0",
+    retry_delay_ms: "BIGINT NOT NULL DEFAULT 60000",
+    max_retry_delay_ms: "BIGINT NOT NULL DEFAULT 3600000",
+    last_failure: "TEXT"
+  };
+  const steps = [
+    {
+      version: 1,
+      name: "durable-delivery-ledger",
+      async needed(sql) {
+        const found = await db.schemaColumns("hai_reach_send_log", sql);
+        return found.success ? ok(found.data.length > 0 && Object.keys(definitions).some((name) => !found.data.includes(name))) : found;
+      },
+      async apply(sql) {
+        const found = await db.schemaColumns("hai_reach_send_log", sql);
+        if (!found.success)
+          return found;
+        for (const [name, definition] of Object.entries(definitions)) {
+          if (found.data.includes(name))
+            continue;
+          const added = await sql.execute(`ALTER TABLE hai_reach_send_log ADD COLUMN ${name} ${definition}`);
+          if (!added.success)
+            return added;
+        }
+        return ok(void 0);
       }
-      return ok(void 0);
-    }
-  }, {
-    version: 2,
-    name: "legacy-delivery-isolation",
-    async needed(sql) {
-      const found = await schemaColumns(db, "hai_reach_send_log", sql);
-      if (!found.success || !found.data.length)
-        return found.success ? ok(false) : found;
-      if (!found.data.includes("queue_id"))
-        return ok(true);
-      const row = await sql.get("SELECT id FROM hai_reach_send_log WHERE queue_id IS NULL AND status IN ('pending','processing','unknown') LIMIT 1");
-      return row.success ? ok(Boolean(row.data)) : row;
     },
-    async apply(sql) {
-      const isolated = await sql.execute("UPDATE hai_reach_send_log SET status='unknown',processing_owner=NULL,locked_until=NULL WHERE status='processing' AND queue_id IS NULL");
-      if (!isolated.success)
-        return isolated;
-      while (true) {
-        const rows = await sql.query("SELECT id FROM hai_reach_send_log WHERE queue_id IS NULL AND status IN ('pending','unknown') ORDER BY id LIMIT 100");
-        if (!rows.success)
-          return rows;
-        for (const row of rows.data) {
-          const saved = await sql.execute("UPDATE hai_reach_send_log SET queue_id=? WHERE id=? AND queue_id IS NULL", [randomUUID(), row.id]);
-          if (!saved.success)
-            return saved;
+    {
+      version: 2,
+      name: "legacy-delivery-isolation",
+      async needed(sql) {
+        const found = await db.schemaColumns("hai_reach_send_log", sql);
+        if (!found.success || !found.data.length) {
+          return found.success ? ok(false) : found;
+        }
+        if (!found.data.includes("queue_id"))
+          return ok(true);
+        const row = await sql.get("SELECT id FROM hai_reach_send_log WHERE queue_id IS NULL AND status IN ('pending','processing','unknown') LIMIT 1");
+        return row.success ? ok(Boolean(row.data)) : row;
+      },
+      async apply(sql) {
+        const isolated = await sql.execute("UPDATE hai_reach_send_log SET status='unknown',processing_owner=NULL,locked_until=NULL WHERE status='processing' AND queue_id IS NULL");
+        if (!isolated.success)
+          return isolated;
+        while (true) {
+          const rows = await sql.query("SELECT id FROM hai_reach_send_log WHERE queue_id IS NULL AND status IN ('pending','unknown') ORDER BY id LIMIT 100");
+          if (!rows.success)
+            return rows;
+          for (const row of rows.data) {
+            const saved = await sql.execute("UPDATE hai_reach_send_log SET queue_id=? WHERE id=? AND queue_id IS NULL", [
+              randomUUID(),
+              row.id
+            ]);
+            if (!saved.success)
+              return saved;
+          }
+          if (rows.data.length < 100)
+            return ok(void 0);
         }
-        if (rows.data.length < 100)
-          return ok(void 0);
       }
-    }
-  }, {
-    version: 3,
-    name: "credential-payload-retirement",
-    async needed(sql) {
-      const found = await schemaColumns(db, "hai_reach_send_log", sql);
-      if (!found.success || !found.data.length)
-        return found.success ? ok(false) : found;
-      const ledger = await schemaColumns(db, "hai_schema_migrations", sql);
-      if (!ledger.success)
-        return ledger;
-      const version = ledger.data.length ? await sql.get("SELECT version FROM hai_schema_migrations WHERE module=?", ["reach"]) : ok(null);
-      if (!version.success)
-        return version;
-      if (Number(version.data?.version ?? 0) >= 3)
-        return ok(false);
-      const row = await sql.get("SELECT id FROM hai_reach_send_log WHERE subject IS NOT NULL OR body IS NOT NULL OR template IS NOT NULL OR vars_json IS NOT NULL OR extra_json IS NOT NULL LIMIT 1");
-      return row.success ? ok(Boolean(row.data)) : row;
     },
-    async apply(sql) {
-      return sql.execute("UPDATE hai_reach_send_log SET body=NULL,subject=NULL,vars_json=NULL,extra_json=NULL,template=NULL,status=CASE WHEN status IN ('pending','processing') THEN 'discarded' WHEN status='sending' THEN 'unknown' ELSE status END,processing_owner=NULL,locked_until=NULL WHERE subject IS NOT NULL OR body IS NOT NULL OR template IS NOT NULL OR vars_json IS NOT NULL OR extra_json IS NOT NULL");
-    }
-  }, {
-    version: 4,
-    name: "unique-operation-receipts",
-    async needed(sql) {
-      const columns = await schemaColumns(db, "hai_reach_send_log", sql);
-      if (!columns.success || !columns.data.length)
-        return columns.success ? ok(false) : columns;
-      if (!columns.data.includes("queue_id"))
-        return ok(true);
-      if (db.config?.type === "sqlite") {
-        const indexes = await sql.query("PRAGMA index_list(hai_reach_send_log)");
-        if (!indexes.success)
-          return indexes;
-        for (const index of indexes.data) {
-          if (!index.unique || !/^\w+$/.test(index.name))
-            continue;
-          const fields = await sql.query(`PRAGMA index_info(${index.name})`);
-          if (!fields.success)
-            return fields;
-          if (fields.data.length === 1 && fields.data[0]?.name === "queue_id")
-            return ok(false);
+    {
+      version: 3,
+      name: "credential-payload-retirement",
+      async needed(sql) {
+        const found = await db.schemaColumns("hai_reach_send_log", sql);
+        if (!found.success || !found.data.length) {
+          return found.success ? ok(false) : found;
         }
-        return ok(true);
+        const ledger = await db.schemaColumns("hai_schema_migrations", sql);
+        if (!ledger.success)
+          return ledger;
+        const version = ledger.data.length ? await sql.get("SELECT version FROM hai_schema_migrations WHERE module=?", ["reach"]) : ok(null);
+        if (!version.success)
+          return version;
+        if (Number(version.data?.version ?? 0) >= 3)
+          return ok(false);
+        const row = await sql.get("SELECT id FROM hai_reach_send_log WHERE subject IS NOT NULL OR body IS NOT NULL OR template IS NOT NULL OR vars_json IS NOT NULL OR extra_json IS NOT NULL LIMIT 1");
+        return row.success ? ok(Boolean(row.data)) : row;
+      },
+      async apply(sql) {
+        return sql.execute("UPDATE hai_reach_send_log SET body=NULL,subject=NULL,vars_json=NULL,extra_json=NULL,template=NULL,status=CASE WHEN status IN ('pending','processing') THEN 'discarded' WHEN status='sending' THEN 'unknown' ELSE status END,processing_owner=NULL,locked_until=NULL WHERE subject IS NOT NULL OR body IS NOT NULL OR template IS NOT NULL OR vars_json IS NOT NULL OR extra_json IS NOT NULL");
       }
-      const found = db.config?.type === "mysql" ? await sql.get("SELECT index_name FROM information_schema.statistics WHERE table_schema=DATABASE() AND table_name=? AND non_unique=0 GROUP BY index_name HAVING COUNT(*)=1 AND MAX(column_name)=?", ["hai_reach_send_log", "queue_id"]) : await sql.get("SELECT i.indexrelid FROM pg_index i JOIN pg_class t ON t.oid=i.indrelid JOIN pg_namespace n ON n.oid=t.relnamespace JOIN pg_attribute a ON a.attrelid=t.oid AND a.attnum=ANY(i.indkey) WHERE t.relname=? AND n.nspname=current_schema() AND i.indisunique AND i.indnatts=1 AND a.attname=?", ["hai_reach_send_log", "queue_id"]);
-      return found.success ? ok(!found.data) : found;
     },
-    async apply(sql) {
-      return sql.execute("CREATE UNIQUE INDEX uq_hai_reach_queue_v1 ON hai_reach_send_log(queue_id)");
+    {
+      version: 4,
+      name: "unique-operation-receipts",
+      async needed(sql) {
+        const columns = await db.schemaColumns("hai_reach_send_log", sql);
+        if (!columns.success || !columns.data.length) {
+          return columns.success ? ok(false) : columns;
+        }
+        if (!columns.data.includes("queue_id"))
+          return ok(true);
+        if (db.config?.type === "sqlite") {
+          const indexes = await sql.query("PRAGMA index_list(hai_reach_send_log)");
+          if (!indexes.success)
+            return indexes;
+          for (const index of indexes.data) {
+            if (!index.unique || !/^\w+$/.test(index.name))
+              continue;
+            const fields = await sql.query(`PRAGMA index_info(${index.name})`);
+            if (!fields.success)
+              return fields;
+            if (fields.data.length === 1 && fields.data[0]?.name === "queue_id")
+              return ok(false);
+          }
+          return ok(true);
+        }
+        const found = db.config?.type === "mysql" ? await sql.get("SELECT index_name FROM information_schema.statistics WHERE table_schema=DATABASE() AND table_name=? AND non_unique=0 GROUP BY index_name HAVING COUNT(*)=1 AND MAX(column_name)=?", ["hai_reach_send_log", "queue_id"]) : await sql.get("SELECT i.indexrelid FROM pg_index i JOIN pg_class t ON t.oid=i.indrelid JOIN pg_namespace n ON n.oid=t.relnamespace JOIN pg_attribute a ON a.attrelid=t.oid AND a.attnum=ANY(i.indkey) WHERE t.relname=? AND n.nspname=current_schema() AND i.indisunique AND i.indnatts=1 AND a.attname=?", ["hai_reach_send_log", "queue_id"]);
+        return found.success ? ok(!found.data) : found;
+      },
+      async apply(sql) {
+        return sql.execute("CREATE UNIQUE INDEX uq_hai_reach_queue_v1 ON hai_reach_send_log(queue_id)");
+      }
     }
-  }];
-  return migrateSchema(db, "reach", steps, options);
+  ];
+  return db.migrateSchema("reach", steps, options);
 }
 
 // src/repositories/reach-repository-send-log.ts
@@ -1275,25 +1476,47 @@ function claimableWhere(clock) {
   return `(attempt_count < max_attempts AND ((status = ? AND next_attempt_at <= ?) OR (status = ? AND updated_at < ? AND (locked_until IS NULL OR locked_until <= ${clock})) OR (status = ? AND updated_at < ? AND retry_safe = TRUE AND locked_until <= ${clock})))`;
 }
 function claimableParams(eligibleBefore) {
-  return ["pending", eligibleBefore, "processing", eligibleBefore, "sending", eligibleBefore];
+  return [
+    "pending",
+    eligibleBefore,
+    "processing",
+    eligibleBefore,
+    "sending",
+    eligibleBefore
+  ];
 }
 function buildSendLogError(detail, cause) {
   return err(
     HaiReachError.SEND_FAILED,
-    reachM("reach_sendFailed", { params: { error: detail } }),
+    reachM("reach_sendFailed", {
+      params: { error: detail }
+    }),
     cause
   );
 }
 function normalizeSendLog(row) {
   const normalized = { ...row };
-  for (const field of ["id", "createdAt", "updatedAt", "lockedUntil", "nextAttemptAt", "attemptCount", "maxAttempts", "retryDelayMs", "maxRetryDelayMs"]) {
+  for (const field of [
+    "id",
+    "createdAt",
+    "updatedAt",
+    "lockedUntil",
+    "nextAttemptAt",
+    "attemptCount",
+    "maxAttempts",
+    "retryDelayMs",
+    "maxRetryDelayMs"
+  ]) {
     const value = row[field];
     if (value === void 0 && (field === "updatedAt" || field === "lockedUntil"))
       continue;
     const validType = typeof value === "number" || typeof value === "bigint" || typeof value === "string" && /^\d+$/.test(value);
     const integer = validType ? Number(value) : Number.NaN;
-    if (!Number.isSafeInteger(integer) || integer < 0)
-      return buildSendLogError(reachM("reach_invalidStoredInteger", { params: { field } }));
+    if (!Number.isSafeInteger(integer) || integer < 0) {
+      return buildSendLogError(reachM("reach_invalidStoredInteger", {
+        params: { field }
+      }));
+    }
     Object.assign(normalized, { [field]: integer });
   }
   return ok(normalized);
@@ -1477,7 +1700,9 @@ async function createSendLogRepository(db) {
   if (!initResult.success) {
     return err(
       HaiReachError.SEND_FAILED,
-      reachM("reach_sendFailed", { params: { error: initResult.error.message } }),
+      reachM("reach_sendFailed", {
+        params: { error: initResult.error.message }
+      }),
       initResult.error
     );
   }
@@ -1501,7 +1726,12 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
   async settleSensitive(queueId, status, messageId) {
     const settled = await this.sql().execute(
       `UPDATE ${TABLE_NAME} SET status = ?, message_id = ?, locked_until = NULL, updated_at = ? WHERE queue_id = ? AND status = 'sending' AND body IS NULL AND vars_json IS NULL AND retry_safe = FALSE`,
-      [status, messageId ?? null, Date.now(), queueId]
+      [
+        status,
+        messageId ?? null,
+        Date.now(),
+        queueId
+      ]
     );
     if (!settled.success)
       return settled;
@@ -1543,7 +1773,11 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
   }
   /** 获取所有待发送记录 */
   async findPending(tx) {
-    const result = await this.findAll({ where: "status = ?", params: ["pending"], orderBy: "created_at ASC" }, tx);
+    const result = await this.findAll({
+      where: "status = ?",
+      params: ["pending"],
+      orderBy: "created_at ASC"
+    }, tx);
     if (!result.success) {
       return result;
     }
@@ -1565,7 +1799,10 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
        ORDER BY created_at ASC
        LIMIT ?
        FOR UPDATE SKIP LOCKED`,
-      [...claimableParams(eligibleBefore), limit]
+      [
+        ...claimableParams(eligibleBefore),
+        limit
+      ]
     );
     if (!lockedRowsResult.success) {
       throw lockedRowsResult.error;
@@ -1585,7 +1822,12 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
       `UPDATE ${TABLE_NAME}
        SET status = ?, processing_owner = ?, locked_until = ${clock} + ?, updated_at = ${clock}, attempt_count = attempt_count + 1
        WHERE id IN (${placeholders})`,
-      ["processing", owner, lockMs, ...claimedIds]
+      [
+        "processing",
+        owner,
+        lockMs,
+        ...claimedIds
+      ]
     );
     if (!updateResult.success) {
       throw updateResult.error;
@@ -1615,7 +1857,13 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
         `UPDATE ${TABLE_NAME}
          SET status = ?, processing_owner = ?, locked_until = ${clock} + ?, updated_at = ${clock}, attempt_count = attempt_count + 1
          WHERE id = ? AND ${claimableWhere(clock)}`,
-        ["processing", owner, lockMs, row.id, ...claimableParams(eligibleBefore)]
+        [
+          "processing",
+          owner,
+          lockMs,
+          row.id,
+          ...claimableParams(eligibleBefore)
+        ]
       );
       if (!updateResult.success) {
         throw updateResult.error;
@@ -1669,7 +1917,13 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
          WHERE attempt_count >= max_attempts
            AND (status = ? OR (status = ? AND (locked_until IS NULL OR locked_until <= ${clock}))
              OR (status = ? AND retry_safe = TRUE AND locked_until <= ${clock}))`,
-        ["dead", "attempts_exhausted", "pending", "processing", "sending"]
+        [
+          "dead",
+          "attempts_exhausted",
+          "pending",
+          "processing",
+          "sending"
+        ]
       );
       if (!exhausted.success)
         throw exhausted.error;
@@ -1709,7 +1963,16 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
        SET status = ?, last_failure = ?, next_attempt_at = ${dead ? "0" : `${clock} + ?`}, processing_owner = NULL, locked_until = NULL, updated_at = ${clock}
        WHERE id = ? AND processing_owner = ? AND locked_until > ${clock} AND attempt_count = ?
          AND (status = ? OR (status = ? AND retry_safe = TRUE))`,
-      [dead ? "dead" : "pending", reason, ...dead ? [] : [delay], row.id, owner, row.attemptCount, "processing", "sending"]
+      [
+        dead ? "dead" : "pending",
+        reason,
+        ...dead ? [] : [delay],
+        row.id,
+        owner,
+        row.attemptCount,
+        "processing",
+        "sending"
+      ]
     );
     if (!result.success) {
       return buildSendLogError(result.error.message, result.error);
@@ -1725,7 +1988,12 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
     const result = await this.sql().execute(
       `UPDATE ${TABLE_NAME} SET status = ?, attempt_count = 0, next_attempt_at = ${clock}, last_failure = NULL, updated_at = CASE WHEN updated_at >= ${clock} THEN updated_at + 1 ELSE ${clock} END
        WHERE queue_id = ? AND status = ? AND updated_at = ?`,
-      ["pending", queueId, "dead", expectedUpdatedAt]
+      [
+        "pending",
+        queueId,
+        "dead",
+        expectedUpdatedAt
+      ]
     );
     return result.success && result.data.changes === 1 ? ok(void 0) : buildSendLogError(reachM("reach_deadRequeueFailed"));
   }
@@ -1736,7 +2004,14 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
     const result = await this.sql().execute(
       `UPDATE ${TABLE_NAME} SET status = ?, retry_safe = ?, locked_until = ${clock} + ?, updated_at = ${clock}
        WHERE id = ? AND status = ? AND processing_owner = ? AND locked_until > ${clock}`,
-      ["sending", flag, lockMs, id, "processing", owner]
+      [
+        "sending",
+        flag,
+        lockMs,
+        id,
+        "processing",
+        owner
+      ]
     );
     return result.success && result.data.changes === 1 ? ok(void 0) : buildSendLogError(reachM("reach_claimLost"));
   }
@@ -1746,7 +2021,13 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
     const result = await this.sql().execute(
       `UPDATE ${TABLE_NAME} SET locked_until = ${clock} + ?, updated_at = ${clock}
        WHERE id = ? AND processing_owner = ? AND status IN (?, ?) AND locked_until > ${clock}`,
-      [lockMs, id, owner, "processing", "sending"]
+      [
+        lockMs,
+        id,
+        owner,
+        "processing",
+        "sending"
+      ]
     );
     return result.success && result.data.changes === 1 ? ok(void 0) : buildSendLogError(reachM("reach_claimLost"));
   }
@@ -1755,7 +2036,13 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
     const result = await this.sql().execute(
       `UPDATE ${TABLE_NAME} SET status = ?, processing_owner = NULL, locked_until = NULL, next_attempt_at = 0, updated_at = ${this.clockSql()}
        WHERE id = ? AND processing_owner = ? AND status IN (?, ?)`,
-      ["unknown", id, owner, "processing", "sending"]
+      [
+        "unknown",
+        id,
+        owner,
+        "processing",
+        "sending"
+      ]
     );
     return result.success && result.data.changes === 1 ? ok(void 0) : buildSendLogError(reachM("reach_claimLost"));
   }
@@ -1763,7 +2050,12 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
   async resolveUnknown(queueId, resolution) {
     const result = await this.sql().execute(
       `UPDATE ${TABLE_NAME} SET status = ?, message_id = ?, next_attempt_at = 0, updated_at = ${this.clockSql()} WHERE queue_id = ? AND status = ?`,
-      [resolution.status, resolution.messageId ?? null, queueId, "unknown"]
+      [
+        resolution.status,
+        resolution.messageId ?? null,
+        queueId,
+        "unknown"
+      ]
     );
     return result.success && result.data.changes === 1 ? ok(void 0) : buildSendLogError(reachM("reach_unknownResolutionFailed"));
   }
@@ -1774,7 +2066,13 @@ var DbSendLogRepository = class extends BaseReldbCrudRepository {
       `UPDATE ${TABLE_NAME}
        SET status = ?, message_id = ?, processing_owner = NULL, locked_until = NULL, next_attempt_at = 0, updated_at = ${clock}
        WHERE id = ? AND status = ? AND processing_owner = ? AND locked_until > ${clock}`,
-      ["sent", messageId ?? null, id, "sending", owner]
+      [
+        "sent",
+        messageId ?? null,
+        id,
+        "sending",
+        owner
+      ]
     );
     if (!result.success) {
       return buildSendLogError(result.error.message, result.error);
@@ -1858,7 +2156,9 @@ async function createTemplateRepository(db) {
   if (!initResult.success) {
     return err(
       HaiReachError.SEND_FAILED,
-      reachM("reach_templateDbInitFailed", { params: { error: initResult.error.message } }),
+      reachM("reach_templateDbInitFailed", {
+        params: { error: initResult.error.message }
+      }),
       initResult.error
     );
   }
@@ -1886,7 +2186,11 @@ var DbTemplateRepository = class extends BaseReldbCrudRepository {
   }
   /** 按名称查找模板 */
   async findByName(name, tx) {
-    const result = await this.findAll({ where: "name = ?", params: [name], limit: 1 }, tx);
+    const result = await this.findAll({
+      where: "name = ?",
+      params: [name],
+      limit: 1
+    }, tx);
     if (!result.success) {
       return result;
     }
@@ -1963,16 +2267,17 @@ var currentConfig = null;
 var dndConfig;
 var templateRegistry = createTemplateRegistry();
 var sendLogRepo = null;
-var templateRepo = null;
 var initInProgress = false;
-function createProvider(config) {
+var initCompletion = null;
+var closeInProgress = null;
+function createProvider(config, gatewayHook) {
   switch (config.type) {
     case "console":
       return createConsoleProvider();
     case "smtp":
       return createSmtpProvider();
     case "aliyun-sms":
-      return createAliyunSmsProvider();
+      return createAliyunSmsProvider(gatewayHook);
     case "api":
       return createApiProvider();
   }
@@ -1993,7 +2298,9 @@ async function tryInitSendLogRepo() {
     }
     return result.data;
   } catch (error) {
-    logger7.debug("Send log repository not initialized", { error: error instanceof Error ? error.message : String(error) });
+    logger7.debug("Send log repository not initialized", {
+      error: error instanceof Error ? error.message : String(error)
+    });
     return null;
   }
 }
@@ -2010,7 +2317,9 @@ async function tryInitTemplateRepo() {
     }
     return result.data;
   } catch (error) {
-    logger7.debug("Template repository not initialized", { error: error instanceof Error ? error.message : String(error) });
+    logger7.debug("Template repository not initialized", {
+      error: error instanceof Error ? error.message : String(error)
+    });
     return null;
   }
 }
@@ -2036,13 +2345,12 @@ async function doClose() {
   dndConfig = void 0;
   templateRegistry = createTemplateRegistry();
   sendLogRepo = null;
-  templateRepo = null;
   resetSendLogRepoSingleton();
   resetTemplateRepoSingleton();
   resetSendState();
   logger7.info("Reach module closed");
 }
-async function doInit(config) {
+async function doInit(config, options) {
   if (providers.size > 0) {
     logger7.warn("Reach module is already initialized, reinitializing");
     await doClose();
@@ -2053,13 +2361,24 @@ async function doInit(config) {
     logger7.error("Reach config validation failed", { error: parseResult.error.message });
     return err(
       HaiReachError.CONFIG_ERROR,
-      reachM("reach_configError", { params: { error: parseResult.error.message } }),
+      reachM("reach_configError", {
+        params: { error: parseResult.error.message }
+      }),
       parseResult.error
     );
   }
   const parsed = parseResult.data;
+  const gatewayHooks = new Map(Object.entries(options?.gatewayHooks ?? {}));
+  for (const [name, hook] of gatewayHooks) {
+    if (typeof hook !== "function" || !parsed.providers.some((provider) => provider.name === name && provider.type === "aliyun-sms" && provider.gateway))
+      return err(HaiReachError.CONFIG_ERROR, reachM("reach_gatewayHookInvalid"));
+  }
   if (core.module.requiresSharedState(process.env) && parsed.providers.some((provider) => provider.type === "console"))
     return err(HaiReachError.CONFIG_ERROR, reachM("reach_productionProviderRequired"));
+  if (parsed.templates?.length && !reldb.isInitialized)
+    return err(HaiReachError.CONFIG_ERROR, reachM("reach_templatePersistenceRequired"));
+  const newProviders = /* @__PURE__ */ new Map();
+  let published = false;
   try {
     let requiredQueue = null;
     if (parsed.dnd?.enabled && parsed.dnd.strategy === "delay") {
@@ -2070,9 +2389,9 @@ async function doInit(config) {
         return err(HaiReachError.CONFIG_ERROR, reachM("reach_dndPersistenceRequired"), queue.error);
       requiredQueue = queue.data;
     }
-    const newProviders = /* @__PURE__ */ new Map();
     for (const providerConfig of parsed.providers) {
-      const provider = createProvider(providerConfig);
+      const provider = createProvider(providerConfig, gatewayHooks.get(providerConfig.name));
+      newProviders.set(providerConfig.name, provider);
       const connectResult = await provider.connect(providerConfig);
       if (!connectResult.success) {
         logger7.error("Provider initialization failed", {
@@ -2081,30 +2400,27 @@ async function doInit(config) {
           code: connectResult.error.code,
           message: connectResult.error.message
         });
-        logger7.info("Rolling back connected providers", { count: newProviders.size });
-        for (const [name, p] of newProviders.entries()) {
-          try {
-            await p.close();
-          } catch (rollbackError) {
-            logger7.error("Provider rollback close failed", { name, error: rollbackError });
-          }
-        }
         return connectResult;
       }
-      newProviders.set(providerConfig.name, provider);
     }
-    providers = newProviders;
-    currentConfig = parsed;
-    dndConfig = parsed.dnd;
-    templateRepo = await tryInitTemplateRepo();
-    templateRegistry = createTemplateRegistry(templateRepo);
-    if (parsed.templates && templateRepo) {
-      const saveResult = await templateRegistry.saveBatch(parsed.templates);
+    const candidateTemplateRepo = await tryInitTemplateRepo();
+    if (parsed.templates?.length && !candidateTemplateRepo)
+      return err(HaiReachError.CONFIG_ERROR, reachM("reach_templatePersistenceRequired"));
+    const candidateRegistry = createTemplateRegistry(candidateTemplateRepo);
+    if (parsed.templates?.length) {
+      const saveResult = await candidateRegistry.saveBatch(parsed.templates);
       if (!saveResult.success) {
-        logger7.warn("Failed to save config templates to database", { error: saveResult.error.message });
+        logger7.warn("Failed to save config templates to database", { errorCode: saveResult.error.code });
+        return err(HaiReachError.CONFIG_ERROR, reachM("reach_templatePersistenceRequired"), saveResult.error);
       }
     }
-    sendLogRepo = requiredQueue ?? await tryInitSendLogRepo();
+    const candidateSendLogRepo = requiredQueue ?? await tryInitSendLogRepo();
+    providers = newProviders;
+    currentConfig = parsed;
+    dndConfig = parsed.dnd;
+    templateRegistry = candidateRegistry;
+    sendLogRepo = candidateSendLogRepo;
+    published = true;
     if (dndConfig) {
       startDndScheduler(dndConfig, providers, sendLogRepo);
     }
@@ -2116,10 +2432,22 @@ async function doInit(config) {
     return err(
       HaiReachError.CONFIG_ERROR,
       reachM("reach_initFailed", {
-        params: { error: error instanceof Error ? error.message : String(error) }
+        params: {
+          error: error instanceof Error ? error.message : String(error)
+        }
       }),
       error
     );
+  } finally {
+    if (!published) {
+      for (const [name, provider] of newProviders) {
+        try {
+          await provider.close();
+        } catch {
+          logger7.error("Candidate provider cleanup failed", { name });
+        }
+      }
+    }
   }
 }
 function queueEntry(row) {
@@ -2144,7 +2472,11 @@ var reach = {
         return err(HaiReachError.CONFIG_ERROR, reachM("reach_dndPersistenceRequired"));
       if (!ReachQueueIdSchema.safeParse(queueId).success)
         return err(HaiReachError.CONFIG_ERROR, reachM("reach_queueInputInvalid"));
-      const rows = await sendLogRepo.findAll({ where: "queue_id = ?", params: [queueId], limit: 1 });
+      const rows = await sendLogRepo.findAll({
+        where: "queue_id = ?",
+        params: [queueId],
+        limit: 1
+      });
       if (!rows.success)
         return rows;
       const row = rows.data[0];
@@ -2188,19 +2520,23 @@ var reach = {
       return sendLogRepo.resolveUnknown(queueId, parsed.data);
     }
   },
-  async init(config) {
-    if (initInProgress) {
+  async init(config, options) {
+    if (initInProgress || closeInProgress) {
       logger7.warn("Reach module init already in progress, skipping");
       return err(
         HaiReachError.CONFIG_ERROR,
-        reachM("reach_configError", { params: { error: "init already in progress" } })
+        reachM("reach_configError", {
+          params: { error: "init already in progress" }
+        })
       );
     }
     initInProgress = true;
     try {
-      return await doInit(config);
+      initCompletion = doInit(config, options);
+      return await initCompletion;
     } finally {
       initInProgress = false;
+      initCompletion = null;
     }
   },
   async send(message) {
@@ -2214,13 +2550,40 @@ var reach = {
     return templateRegistry;
   },
   get config() {
-    return currentConfig ? core.sanitize.sanitizeSensitiveFields(currentConfig) : null;
+    if (!currentConfig)
+      return null;
+    const safeProviders = currentConfig.providers.map((provider) => {
+      if (provider.type === "api" && provider.headers) {
+        return {
+          ...provider,
+          headers: Object.fromEntries(Object.keys(provider.headers).map((name) => [name, core.sanitize.defaultSensitiveReplacement]))
+        };
+      }
+      if (provider.type !== "aliyun-sms" || !provider.gateway)
+        return provider;
+      const { url, allowInsecureHttp } = provider.gateway;
+      return {
+        ...provider,
+        gateway: { url, allowInsecureHttp }
+      };
+    });
+    return core.sanitize.sanitizeSensitiveFields({ ...currentConfig, providers: safeProviders });
   },
   get isInitialized() {
     return providers.size > 0;
   },
   async close() {
-    await doClose();
+    if (closeInProgress)
+      return closeInProgress;
+    closeInProgress = (async () => {
+      await initCompletion;
+      await doClose();
+    })();
+    try {
+      await closeInProgress;
+    } finally {
+      closeInProgress = null;
+    }
   }
 };