feat: add carrier-aware signature retirement alerts

api/src/send-chain/send-gateway-submit.service.ts

@@ -162,7 +162,7 @@ async submitMessageToGateway(
   ) {
     const channel = routed.channel;
     const upstreamSrcId = composeUpstreamSrcId(channel.srcId, message.applicationExtension);
-    await this.facade.ensureSignatureReportedForChannel(message, channel.id);
+    await this.facade.ensureSignatureReportedForChannel(message, channel.id, routed.carrier);
     await this.facade.waitForChannelRateLimit(channel.id, channel.rateLimitPerSecond);
     const submitId = `SUB-${randomUUID()}`;
     try {
@@ -321,7 +321,13 @@ async selectChannelForMessage(
     const signatureId = await this.facade.resolveMessageSignatureId(message);
     if (!signatureId) throw new BadRequestException('短信签名未配置，无法选择已报备通道');
     const approvedTasks = await this.prisma.channelSignatureReportTask.findMany({
-      where: { signatureId, reportType: 'signature', status: 'approved', channelId: { in: route.group.items.map((item) => item.channelId) } },
+      where: {
+        signatureId,
+        reportType: 'signature',
+        status: 'approved',
+        channelId: { in: route.group.items.map((item) => item.channelId) },
+        OR: signatureReportApprovalScopes(carrier),
+      },
       select: { channelId: true },
     });
     const approvedChannelIds = new Set(approvedTasks.map((task) => task.channelId));
@@ -386,13 +392,20 @@ async ensureSignatureReportedForChannel(
       signature?: { id?: string | null; name?: string | null } | null;
     },
     channelId: string,
+    carrier: string,
   ) {
     const signatureId = await this.facade.resolveMessageSignatureId(message);
     if (!signatureId) {
       throw new BadRequestException('短信签名未配置，不能提交到通道');
     }
     const reportTask = await this.prisma.channelSignatureReportTask.findFirst({
-      where: { signatureId, channelId, reportType: 'signature', status: 'approved' },
+      where: {
+        signatureId,
+        channelId,
+        reportType: 'signature',
+        status: 'approved',
+        OR: signatureReportApprovalScopes(carrier),
+      },
       select: { id: true },
     });
     if (!reportTask) {
@@ -489,3 +502,11 @@ return streamId`,
     return typeof result === 'string' ? result : String(result ?? '');
   }
 }
+
+function signatureReportApprovalScopes(carrier: string) {
+  const exact = { carrier, approvalScope: 'carrier_specific' };
+  // 迁移期默认双读；全部历史数据人工拆分后可通过环境开关进入严格运营商口径。
+  return process.env.SIGNATURE_REPORT_STRICT_CARRIER === 'true'
+    ? [exact]
+    : [exact, { carrier: null, approvalScope: 'legacy_channel' }];
+}