feat: harden CMPP delivery and platform workflows

api/src/open-api/open-api.service.ts

@@ -151,7 +151,7 @@ export class OpenApiService implements OnModuleInit, OnModuleDestroy {
     return { ...endpoint, ...(secret ? { secret, secretShownOnce: true } : {}) };
   }
 
-  async sendMessage(auth: OpenApiAuthContext, input: { mobile?: string; content?: string; templateId?: string; clientMessageId?: string }, meta: { idempotencyKey?: string; bodyHash: string; userAgent?: string }) {
+  async sendMessage(auth: OpenApiAuthContext, input: { mobile?: string; content?: string; clientMessageId?: string }, meta: { idempotencyKey?: string; bodyHash: string; userAgent?: string }) {
     if (!auth.config.sendEnabled) throw new ForbiddenException({ code: 'SEND_NOT_ENABLED', message: '该应用未开通HTTP短信发送' });
     const mobile = String(input.mobile ?? '').trim();
     const content = String(input.content ?? '');
@@ -188,13 +188,11 @@ export class OpenApiService implements OnModuleInit, OnModuleDestroy {
       throw error;
     }
     try {
-      const task = await this.sendChain.createBatchTask({
+      const task = await this.sendChain.createHttpBatchTask({
         tenantId: auth.application.tenantId,
         applicationId: auth.application.id,
-        templateId: input.templateId,
         content,
         phones: [mobile],
-        sourceType: 'api',
         sourceIp: auth.sourceIp,
         userAgent: meta.userAgent,
         clientMessageId: input.clientMessageId,