From 8e295e48cd39fa515ecc828dcfa902f037b8717a Mon Sep 17 00:00:00 2001
From: WuYongJie <WuYongJie@local>
Date: Wed, 15 Jul 2026 17:44:08 +0800
Subject: [PATCH] =?UTF-8?q?=E6=8E=A5=E5=85=A5=E7=94=B1=E5=A3=B9=E7=82=B9?=
 =?UTF-8?q?=E7=BB=9F=E4=B8=80=E9=80=9A=E7=9F=A5=E4=B8=AD=E5=BF=83?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .env.example                                  |   6 +
 .../20260715_dingtalk_robot_oto/migration.sql |   2 +
 backend/prisma/schema.prisma                  |   1 +
 backend/src/controllers/dingtalkController.ts |   2 +
 .../__tests__/dingtalkClient.channel.test.ts  |  19 +
 .../__tests__/dingtalkClient.robot.test.ts    | 140 ++++++
 .../youyidianNotificationClient.test.ts       |  61 +++
 .../services/businessNotificationService.ts   |   2 +
 backend/src/services/dingtalkClient.ts        | 154 ++++++-
 .../src/services/dingtalkDeliveryService.ts   |  74 ++-
 .../services/youyidianNotificationClient.ts   | 111 +++++
 docker-compose.yml                            |   6 +
 ...‰é’‰æœºå™¨äººå�•è�Šé€šçŸ¥æŽ¥å…¥å®žæ–½è¯´æ˜Ž-2026-07-15.md | 434 ++++++++++++++++++
 frontend/src/api/dingtalk.ts                  |   1 +
 14 files changed, 997 insertions(+), 16 deletions(-)
 create mode 100644 backend/prisma/migrations/20260715_dingtalk_robot_oto/migration.sql
 create mode 100644 backend/src/services/__tests__/dingtalkClient.channel.test.ts
 create mode 100644 backend/src/services/__tests__/dingtalkClient.robot.test.ts
 create mode 100644 backend/src/services/__tests__/youyidianNotificationClient.test.ts
 create mode 100644 backend/src/services/youyidianNotificationClient.ts
 create mode 100644 docs/钉钉机器人��通知接入实施说明-2026-07-15.md

diff --git a/.env.example b/.env.example
index add7d1b..e766941 100644
--- a/.env.example
+++ b/.env.example
@@ -23,6 +23,12 @@ HR_SYNC_EXCLUDED_NAME_KEYWORDS=
 DINGTALK_APP_KEY=
 DINGTALK_APP_SECRET=
 DINGTALK_AGENT_ID=
+DINGTALK_ROBOT_CODE=
 DINGTALK_CORP_ID=
 DINGTALK_PUBLIC_BASE_URL=https://asset.example.com
 DINGTALK_SEND_ENABLED=false
+DINGTALK_NOTIFICATION_CHANNEL=work_notice
+YYD_NOTIFICATION_CENTER_URL=
+YYD_NOTIFICATION_CENTER_PROJECT_CODE=fixed_asset
+YYD_NOTIFICATION_CENTER_PROJECT_SECRET=
+YYD_NOTIFICATION_CENTER_TEST_USER_IDS=
diff --git a/backend/prisma/migrations/20260715_dingtalk_robot_oto/migration.sql b/backend/prisma/migrations/20260715_dingtalk_robot_oto/migration.sql
new file mode 100644
index 0000000..bfc5a12
--- /dev/null
+++ b/backend/prisma/migrations/20260715_dingtalk_robot_oto/migration.sql
@@ -0,0 +1,2 @@
+ALTER TABLE `dingtalk_delivery`
+  ADD COLUMN `provider_type` VARCHAR(20) NOT NULL DEFAULT 'work_notice' AFTER `lease_expires_at`;
diff --git a/backend/prisma/schema.prisma b/backend/prisma/schema.prisma
index 54c08ba..d993261 100644
--- a/backend/prisma/schema.prisma
+++ b/backend/prisma/schema.prisma
@@ -739,6 +739,7 @@ model DingTalkDelivery {
   next_attempt_at            DateTime  @default(now())
   lease_owner                String?   @db.VarChar(100)
   lease_expires_at           DateTime?
+  provider_type              String    @default("work_notice") @db.VarChar(20)
   dingtalk_task_id           String?   @db.VarChar(100)
   payload_json               String    @db.Text
   last_error_code            String?   @db.VarChar(100)
diff --git a/backend/src/controllers/dingtalkController.ts b/backend/src/controllers/dingtalkController.ts
index dac5a59..e2f863d 100644
--- a/backend/src/controllers/dingtalkController.ts
+++ b/backend/src/controllers/dingtalkController.ts
@@ -78,6 +78,7 @@ export const getDingTalkDeliveryStatus = async (_req: Request, res: Response) =>
     const config = getDingTalkConfigStatus()
     successResponse(res, {
       configured: config.configured,
+      channel: config.channel,
       send_enabled: config.send_enabled,
       enabled: config.send_enabled,
       missing: config.missing,
@@ -130,6 +131,7 @@ export const getDingTalkDeliveries = async (req: Request, res: Response) => {
         attempt_count: item.attempt_count,
         max_attempts: item.max_attempts,
         next_attempt_at: item.next_attempt_at,
+        provider_type: item.provider_type,
         dingtalk_task_id: item.dingtalk_task_id,
         last_error_code: item.last_error_code,
         last_error: item.last_error_message,
diff --git a/backend/src/services/__tests__/dingtalkClient.channel.test.ts b/backend/src/services/__tests__/dingtalkClient.channel.test.ts
new file mode 100644
index 0000000..c38e7ce
--- /dev/null
+++ b/backend/src/services/__tests__/dingtalkClient.channel.test.ts
@@ -0,0 +1,19 @@
+import test from 'node:test'
+import assert from 'node:assert/strict'
+import { getDingTalkNotificationChannelForUser } from '../dingtalkClient'
+
+test('通知中心�度��以外的员工继续使用工作通知', () => {
+  const originalChannel = process.env.DINGTALK_NOTIFICATION_CHANNEL
+  const originalUsers = process.env.YYD_NOTIFICATION_CENTER_TEST_USER_IDS
+  process.env.DINGTALK_NOTIFICATION_CHANNEL = 'notification_center'
+  process.env.YYD_NOTIFICATION_CENTER_TEST_USER_IDS = 'ding-test-1,ding-test-2'
+  try {
+    assert.equal(getDingTalkNotificationChannelForUser('ding-test-1'), 'notification_center')
+    assert.equal(getDingTalkNotificationChannelForUser('ding-other'), 'work_notice')
+  } finally {
+    if (originalChannel === undefined) delete process.env.DINGTALK_NOTIFICATION_CHANNEL
+    else process.env.DINGTALK_NOTIFICATION_CHANNEL = originalChannel
+    if (originalUsers === undefined) delete process.env.YYD_NOTIFICATION_CENTER_TEST_USER_IDS
+    else process.env.YYD_NOTIFICATION_CENTER_TEST_USER_IDS = originalUsers
+  }
+})
diff --git a/backend/src/services/__tests__/dingtalkClient.robot.test.ts b/backend/src/services/__tests__/dingtalkClient.robot.test.ts
new file mode 100644
index 0000000..f010db8
--- /dev/null
+++ b/backend/src/services/__tests__/dingtalkClient.robot.test.ts
@@ -0,0 +1,140 @@
+import test from 'node:test'
+import assert from 'node:assert/strict'
+
+import {
+  DingTalkApiError,
+  getDingTalkConfigStatus,
+  getDingTalkRobotSendResult,
+  sendDingTalkRobotNotification
+} from '../dingtalkClient'
+
+const envKeys = [
+  'DINGTALK_APP_KEY',
+  'DINGTALK_APP_SECRET',
+  'DINGTALK_AGENT_ID',
+  'DINGTALK_ROBOT_CODE',
+  'DINGTALK_CORP_ID',
+  'DINGTALK_PUBLIC_BASE_URL',
+  'DINGTALK_SEND_ENABLED',
+  'DINGTALK_NOTIFICATION_CHANNEL'
+] as const
+
+const originalEnv = Object.fromEntries(envKeys.map((key) => [key, process.env[key]]))
+const originalFetch = global.fetch
+
+const configureDingTalk = () => {
+  process.env.DINGTALK_APP_KEY = 'ding-app-key'
+  process.env.DINGTALK_APP_SECRET = 'ding-app-secret'
+  process.env.DINGTALK_AGENT_ID = '10001'
+  process.env.DINGTALK_ROBOT_CODE = 'ding-robot-code'
+  process.env.DINGTALK_CORP_ID = 'ding-corp'
+  process.env.DINGTALK_PUBLIC_BASE_URL = 'https://asset.example.com'
+  process.env.DINGTALK_SEND_ENABLED = 'true'
+  process.env.DINGTALK_NOTIFICATION_CHANNEL = 'robot_oto'
+}
+
+test.after(() => {
+  global.fetch = originalFetch
+  for (const key of envKeys) {
+    if (originalEnv[key] === undefined) delete process.env[key]
+    else process.env[key] = originalEnv[key]
+  }
+})
+
+test('机器人���置状��求 RobotCode 且�返回任何密钥值', () => {
+  configureDingTalk()
+  const status = getDingTalkConfigStatus()
+  assert.deepEqual(status, {
+    configured: true,
+    channel: 'robot_oto',
+    send_enabled: true,
+    missing: []
+  })
+  assert.equal(JSON.stringify(status).includes('ding-app-secret'), false)
+  assert.equal(JSON.stringify(status).includes('ding-robot-code'), false)
+})
+
+test('机器人��使用 batchSend 并返回 processQueryKey', async () => {
+  configureDingTalk()
+  const calls: Array<{ url: string; init?: RequestInit }> = []
+  global.fetch = (async (url: string | URL | Request, init?: RequestInit) => {
+    calls.push({ url: String(url), init })
+    if (String(url).includes('/gettoken?')) {
+      return new Response(JSON.stringify({ errcode: 0, access_token: 'access-token', expires_in: 7200 }), {
+        status: 200,
+        headers: { 'Content-Type': 'application/json' }
+      })
+    }
+    return new Response(JSON.stringify({ processQueryKey: 'query-key-1' }), {
+      status: 200,
+      headers: { 'Content-Type': 'application/json' }
+    })
+  }) as typeof fetch
+
+  const taskId = await sendDingTalkRobotNotification({
+    userId: 'ding-user-1',
+    title: '报废审批�醒',
+    content: '有一�报废申请等待审批',
+    actionUrl: '/workflows/disposals/53'
+  })
+
+  assert.equal(taskId, 'query-key-1')
+  const sendCall = calls.find((call) => call.url.includes('/v1.0/robot/oToMessages/batchSend'))
+  assert.ok(sendCall)
+  assert.equal((sendCall.init?.headers as Record<string, string>)['x-acs-dingtalk-access-token'], 'access-token')
+  const body = JSON.parse(String(sendCall.init?.body))
+  assert.equal(body.robotCode, 'ding-robot-code')
+  assert.deepEqual(body.userIds, ['ding-user-1'])
+  assert.equal(body.msgKey, 'sampleActionCard')
+  const msgParam = JSON.parse(body.msgParam)
+  assert.equal(msgParam.singleTitle, '查看详情')
+  assert.equal(
+    msgParam.singleURL,
+    'https://asset.example.com/dingtalk-entry?redirect=%2Fworkflows%2Fdisposals%2F53'
+  )
+})
+
+test('机器人��通过 processQueryKey 查询已读状�', async () => {
+  configureDingTalk()
+  global.fetch = (async (url: string | URL | Request) => {
+    assert.ok(String(url).includes('/v1.0/robot/oToMessages/readStatus'))
+    return new Response(JSON.stringify({
+      sendStatus: 'success',
+      messageReadInfoList: [
+        { userId: 'ding-read', readStatus: 'read' },
+        { userId: 'ding-unread', readStatus: 'unread' }
+      ]
+    }), {
+      status: 200,
+      headers: { 'Content-Type': 'application/json' }
+    })
+  }) as typeof fetch
+
+  const result = await getDingTalkRobotSendResult('query-key-1')
+  assert.deepEqual(result, {
+    read_user_id_list: ['ding-read'],
+    unread_user_id_list: ['ding-unread'],
+    delivery_failed: false
+  })
+})
+
+test('无效收件人会作为确定性错误�止�试', async () => {
+  configureDingTalk()
+  global.fetch = (async () => new Response(JSON.stringify({
+    invalidStaffIdList: ['ding-invalid']
+  }), {
+    status: 200,
+    headers: { 'Content-Type': 'application/json' }
+  })) as typeof fetch
+
+  await assert.rejects(
+    sendDingTalkRobotNotification({
+      userId: 'ding-invalid',
+      title: '通知',
+      content: '内容',
+      actionUrl: '/dashboard'
+    }),
+    (error: unknown) => error instanceof DingTalkApiError &&
+      error.code === 'INVALID_USER' && error.deterministic
+  )
+})
diff --git a/backend/src/services/__tests__/youyidianNotificationClient.test.ts b/backend/src/services/__tests__/youyidianNotificationClient.test.ts
new file mode 100644
index 0000000..0453e14
--- /dev/null
+++ b/backend/src/services/__tests__/youyidianNotificationClient.test.ts
@@ -0,0 +1,61 @@
+import test from 'node:test'
+import assert from 'node:assert/strict'
+import { submitYouyidianNotification } from '../youyidianNotificationClient'
+
+const originalFetch = global.fetch
+const originalEnv = {
+  url: process.env.YYD_NOTIFICATION_CENTER_URL,
+  code: process.env.YYD_NOTIFICATION_CENTER_PROJECT_CODE,
+  secret: process.env.YYD_NOTIFICATION_CENTER_PROJECT_SECRET,
+  publicBaseUrl: process.env.DINGTALK_PUBLIC_BASE_URL
+}
+
+test.after(() => {
+  global.fetch = originalFetch
+  if (originalEnv.url === undefined) delete process.env.YYD_NOTIFICATION_CENTER_URL
+  else process.env.YYD_NOTIFICATION_CENTER_URL = originalEnv.url
+  if (originalEnv.code === undefined) delete process.env.YYD_NOTIFICATION_CENTER_PROJECT_CODE
+  else process.env.YYD_NOTIFICATION_CENTER_PROJECT_CODE = originalEnv.code
+  if (originalEnv.secret === undefined) delete process.env.YYD_NOTIFICATION_CENTER_PROJECT_SECRET
+  else process.env.YYD_NOTIFICATION_CENTER_PROJECT_SECRET = originalEnv.secret
+  if (originalEnv.publicBaseUrl === undefined) delete process.env.DINGTALK_PUBLIC_BASE_URL
+  else process.env.DINGTALK_PUBLIC_BASE_URL = originalEnv.publicBaseUrl
+})
+
+test('固定资产通过独立项目签��交到由壹点通知中心', async () => {
+  process.env.YYD_NOTIFICATION_CENTER_URL = 'https://notify.example.com'
+  process.env.YYD_NOTIFICATION_CENTER_PROJECT_CODE = 'fixed_asset'
+  process.env.YYD_NOTIFICATION_CENTER_PROJECT_SECRET = '123456789012345678901234'
+  process.env.DINGTALK_PUBLIC_BASE_URL = 'https://asset.example.com'
+  let captured: { url?: string; init?: RequestInit } = {}
+  global.fetch = (async (url: string | URL | Request, init?: RequestInit) => {
+    captured = { url: String(url), init }
+    return {
+      ok: true,
+      status: 202,
+      json: async () => ({
+        id: 'notification-1',
+        projectCode: 'fixed_asset',
+        status: 'pending',
+        recipientUserId: 'ding-user-1',
+        title: '�由壹点·固定资产】待审批报废'
+      })
+    } as Response
+  }) as typeof fetch
+
+  const result = await submitYouyidianNotification({
+    idempotencyKey: 'disposal_applied:disposal:53:1',
+    recipientUserId: 'ding-user-1',
+    title: '待审批报废',
+    content: '有一项报废申请等待审批',
+    actionUrl: '/workflows/disposals/53'
+  })
+
+  assert.equal(result.id, 'notification-1')
+  assert.equal(captured.url, 'https://notify.example.com/v1/notifications')
+  const headers = captured.init?.headers as Record<string, string>
+  assert.equal(headers['x-yyd-project-code'], 'fixed_asset')
+  assert.match(headers['x-yyd-signature'], /^[a-f0-9]{64}$/)
+  const body = JSON.parse(String(captured.init?.body))
+  assert.equal(body.actionUrl, 'https://asset.example.com/dingtalk-entry?redirect=%2Fworkflows%2Fdisposals%2F53')
+})
diff --git a/backend/src/services/businessNotificationService.ts b/backend/src/services/businessNotificationService.ts
index f3cd909..0a3a075 100644
--- a/backend/src/services/businessNotificationService.ts
+++ b/backend/src/services/businessNotificationService.ts
@@ -1,4 +1,5 @@
 import type { Prisma } from '@prisma/client'
+import { getDingTalkNotificationChannelForUser } from './dingtalkClient'
 
 type TransactionClient = Prisma.TransactionClient
 
@@ -88,6 +89,7 @@ export const createBusinessNotification = async (
       business_id: input.businessId,
       recipient_user_id: recipient.id,
       recipient_dingtalk_userid: recipient.person?.source_userid || null,
+      provider_type: getDingTalkNotificationChannelForUser(recipient.person?.source_userid),
       payload_json: JSON.stringify({
         title: input.title,
         content: input.content,
diff --git a/backend/src/services/dingtalkClient.ts b/backend/src/services/dingtalkClient.ts
index 0558c43..bffef3d 100644
--- a/backend/src/services/dingtalkClient.ts
+++ b/backend/src/services/dingtalkClient.ts
@@ -1,3 +1,5 @@
+import { getNotificationCenterConfigStatus } from './youyidianNotificationClient'
+
 type DingTalkResponse = {
   errcode?: number
   errmsg?: string
@@ -17,28 +19,57 @@ export class DingTalkApiError extends Error {
 }
 
 const API_BASE_URL = 'https://oapi.dingtalk.com'
+const ROBOT_API_BASE_URL = 'https://api.dingtalk.com'
 const REQUEST_TIMEOUT_MS = 8_000
 
+export type DingTalkNotificationChannel = 'work_notice' | 'robot_oto' | 'notification_center'
+
+export const getDingTalkNotificationChannel = (): DingTalkNotificationChannel => {
+  const value = String(process.env.DINGTALK_NOTIFICATION_CHANNEL || 'work_notice').trim().toLowerCase()
+  if (value === 'work_notice' || value === 'robot_oto' || value === 'notification_center') return value
+  throw new Error('DINGTALK_NOTIFICATION_CHANNEL 仅支� work_notice�robot_oto 或 notification_center')
+}
+
+export const getDingTalkNotificationChannelForUser = (dingtalkUserId: string | null | undefined) => {
+  const channel = getDingTalkNotificationChannel()
+  if (channel !== 'notification_center') return channel
+  const testUserIds = Array.from(new Set(
+    String(process.env.YYD_NOTIFICATION_CENTER_TEST_USER_IDS || '')
+      .split(',')
+      .map((item) => item.trim())
+      .filter(Boolean)
+  ))
+  if (testUserIds.length === 0) return channel
+  return testUserIds.includes(String(dingtalkUserId || '').trim()) ? 'notification_center' : 'work_notice'
+}
+
 const requiredConfig = () => ({
   appKey: process.env.DINGTALK_APP_KEY || '',
   appSecret: process.env.DINGTALK_APP_SECRET || '',
   agentId: process.env.DINGTALK_AGENT_ID || '',
+  robotCode: process.env.DINGTALK_ROBOT_CODE || '',
   corpId: process.env.DINGTALK_CORP_ID || '',
   publicBaseUrl: (process.env.DINGTALK_PUBLIC_BASE_URL || '').replace(/\/$/, '')
 })
 
 export const getDingTalkConfigStatus = () => {
   const config = requiredConfig()
+  const channel = getDingTalkNotificationChannel()
   const missing: string[] = []
-  if (!config.appKey) missing.push('AppKey')
-  if (!config.appSecret) missing.push('AppSecret')
-  if (!config.agentId) missing.push('AgentId')
-  if (!config.corpId) missing.push('CorpId')
-  if (!config.publicBaseUrl) missing.push('PublicBaseUrl')
+  if (channel === 'notification_center') {
+    missing.push(...getNotificationCenterConfigStatus().missing)
+    if (!config.publicBaseUrl) missing.push('PublicBaseUrl')
+  } else {
+    if (!config.appKey) missing.push('AppKey')
+    if (!config.appSecret) missing.push('AppSecret')
+    if (!config.agentId) missing.push('AgentId')
+    if (channel === 'robot_oto' && !config.robotCode) missing.push('RobotCode')
+    if (!config.corpId) missing.push('CorpId')
+    if (!config.publicBaseUrl) missing.push('PublicBaseUrl')
+  }
   return {
-    configured: Boolean(
-      config.appKey && config.appSecret && config.agentId && config.corpId && config.publicBaseUrl
-    ),
+    configured: missing.length === 0,
+    channel,
     send_enabled: process.env.DINGTALK_SEND_ENABLED === 'true',
     missing
   }
@@ -161,6 +192,113 @@ const buildCardUrl = (actionUrl: string) => {
   return `dingtalk://dingtalkclient/action/openapp?corpid=${encodeURIComponent(corpId)}&container_type=work_platform&app_id=0_${encodeURIComponent(agentId)}&redirect_type=jump&redirect_url=${encodeURIComponent(entryUrl)}`
 }
 
+const buildRobotActionUrl = (actionUrl: string) => {
+  const { publicBaseUrl } = requiredConfig()
+  const safeActionUrl = actionUrl.startsWith('/') && !actionUrl.startsWith('//') ? actionUrl : '/'
+  return `${publicBaseUrl}/dingtalk-entry?redirect=${encodeURIComponent(safeActionUrl)}`
+}
+
+const truncateText = (value: string, maxLength: number) => {
+  const normalized = String(value || '').trim()
+  return normalized.length > maxLength ? `${normalized.slice(0, maxLength)}...` : normalized
+}
+
+const stringList = (value: unknown) => Array.isArray(value)
+  ? value.map((item) => String(item || '').trim()).filter(Boolean)
+  : []
+
+export const sendDingTalkRobotNotification = async (input: {
+  userId: string
+  title: string
+  content: string
+  actionUrl: string
+}) => {
+  const config = requiredConfig()
+  if (!config.robotCode) {
+    throw new DingTalkApiError('钉钉机器人��未�置 RobotCode', 'CONFIG_INCOMPLETE', true)
+  }
+  const userId = String(input.userId || '').trim()
+  if (!userId) {
+    throw new DingTalkApiError('机器人��收件人�能为空', 'RECIPIENT_MISSING', true)
+  }
+
+  const token = await getDingTalkAccessToken()
+  const payload = await requestJson<DingTalkResponse>(
+    `${ROBOT_API_BASE_URL}/v1.0/robot/oToMessages/batchSend`,
+    {
+      method: 'POST',
+      headers: { 'x-acs-dingtalk-access-token': token },
+      body: JSON.stringify({
+        robotCode: config.robotCode,
+        userIds: [userId],
+        msgKey: 'sampleActionCard',
+        msgParam: JSON.stringify({
+          title: truncateText(input.title, 120),
+          text: truncateText(input.content, 4800),
+          singleTitle: '查看详情',
+          singleURL: buildRobotActionUrl(input.actionUrl)
+        })
+      })
+    }
+  )
+
+  const invalidUserIds = stringList(payload.invalidStaffIdList)
+  const filteredUserIds = stringList(payload.filteredStaffIdList)
+  const flowControlledUserIds = stringList(payload.flowControlledStaffIdList)
+  if (invalidUserIds.includes(userId)) {
+    throw new DingTalkApiError('收件人钉钉 userid 无效', 'INVALID_USER', true)
+  }
+  if (filteredUserIds.includes(userId)) {
+    throw new DingTalkApiError('收件人�在机器人��范围内', 'FILTERED_USER', true)
+  }
+  if (flowControlledUserIds.includes(userId)) {
+    throw new DingTalkApiError('钉钉机器人����被��', 'FLOW_CONTROLLED', false)
+  }
+
+  const processQueryKey = String(payload.processQueryKey || '').trim()
+  if (!processQueryKey) {
+    throw new DingTalkApiError('钉钉未返回机器人��任务编�', 'TASK_ID_MISSING', false)
+  }
+  return processQueryKey
+}
+
+export const getDingTalkRobotSendResult = async (processQueryKey: string) => {
+  const config = requiredConfig()
+  if (!config.robotCode) {
+    throw new DingTalkApiError('钉钉机器人��未�置 RobotCode', 'CONFIG_INCOMPLETE', true)
+  }
+  const normalizedKey = String(processQueryKey || '').trim()
+  if (!normalizedKey) {
+    throw new DingTalkApiError('机器人��任务编��能为空', 'TASK_ID_MISSING', true)
+  }
+
+  const token = await getDingTalkAccessToken()
+  const url = new URL(`${ROBOT_API_BASE_URL}/v1.0/robot/oToMessages/readStatus`)
+  url.searchParams.set('robotCode', config.robotCode)
+  url.searchParams.set('processQueryKey', normalizedKey)
+  const payload = await requestJson<DingTalkResponse>(url.toString(), {
+    method: 'GET',
+    headers: { 'x-acs-dingtalk-access-token': token }
+  })
+
+  const readUserIds: string[] = []
+  const unreadUserIds: string[] = []
+  const rows = Array.isArray(payload.messageReadInfoList) ? payload.messageReadInfoList : []
+  for (const row of rows) {
+    const userId = String(row?.userId || '').trim()
+    const readStatus = String(row?.readStatus || '').trim().toLowerCase()
+    if (!userId) continue
+    if (readStatus === 'read') readUserIds.push(userId)
+    if (readStatus === 'unread') unreadUserIds.push(userId)
+  }
+
+  return {
+    read_user_id_list: readUserIds,
+    unread_user_id_list: unreadUserIds,
+    delivery_failed: String(payload.sendStatus || '').trim().toLowerCase().includes('fail')
+  }
+}
+
 export const sendDingTalkWorkNotification = async (input: {
   userId: string
   title: string
diff --git a/backend/src/services/dingtalkDeliveryService.ts b/backend/src/services/dingtalkDeliveryService.ts
index 4ff677e..0c8617f 100644
--- a/backend/src/services/dingtalkDeliveryService.ts
+++ b/backend/src/services/dingtalkDeliveryService.ts
@@ -3,9 +3,16 @@ import type { Prisma } from '@prisma/client'
 import prisma from '../utils/prisma'
 import {
   DingTalkApiError,
+  getDingTalkRobotSendResult,
   getDingTalkSendResult,
+  sendDingTalkRobotNotification,
   sendDingTalkWorkNotification
 } from './dingtalkClient'
+import {
+  getYouyidianNotificationStatus,
+  NotificationCenterError,
+  submitYouyidianNotification
+} from './youyidianNotificationClient'
 import {
   createBusinessNotification,
   findActiveUsersByRoles
@@ -67,7 +74,8 @@ const scheduleDeliveryFailure = async (
   delivery: NonNullable<Awaited<ReturnType<typeof claimNextDelivery>>>,
   error: any
 ) => {
-  const deterministic = error instanceof DingTalkApiError && error.deterministic
+  const deterministic = (error instanceof DingTalkApiError && error.deterministic) ||
+    (error instanceof NotificationCenterError && error.deterministic)
   const exhausted = delivery.attempt_count >= delivery.max_attempts
   const failed = deterministic || exhausted
   const delayMinutes = BACKOFF_MINUTES[Math.min(delivery.attempt_count - 1, BACKOFF_MINUTES.length - 1)]
@@ -96,12 +104,28 @@ const processDelivery = async (
       content?: string
       action_url?: string
     }
-    const taskId = await sendDingTalkWorkNotification({
-      userId: delivery.recipient_dingtalk_userid,
-      title: payload.title || '固定资产通知',
-      content: payload.content || '',
-      actionUrl: payload.action_url || '/'
-    })
+    const taskId = delivery.provider_type === 'notification_center'
+      ? (await submitYouyidianNotification({
+          idempotencyKey: delivery.idempotency_key,
+          recipientUserId: delivery.recipient_dingtalk_userid,
+          title: payload.title || '固定资产通知',
+          content: payload.content || '',
+          actionTitle: '查看详情',
+          actionUrl: payload.action_url || '/'
+        })).id
+      : delivery.provider_type === 'robot_oto'
+        ? await sendDingTalkRobotNotification({
+            userId: delivery.recipient_dingtalk_userid,
+            title: payload.title || '固定资产通知',
+            content: payload.content || '',
+            actionUrl: payload.action_url || '/'
+          })
+        : await sendDingTalkWorkNotification({
+            userId: delivery.recipient_dingtalk_userid,
+            title: payload.title || '固定资产通知',
+            content: payload.content || '',
+            actionUrl: payload.action_url || '/'
+          })
     await updateSendingDeliveryIfLeaseOwned(delivery.id, {
       status: 'sent',
       dingtalk_task_id: taskId,
@@ -129,7 +153,40 @@ const refreshOneDeliveryResult = async () => {
   if (!delivery?.dingtalk_task_id || !delivery.recipient_dingtalk_userid) return
 
   try {
-    const result = await getDingTalkSendResult(delivery.dingtalk_task_id)
+    if (delivery.provider_type === 'notification_center') {
+      const result = await getYouyidianNotificationStatus(delivery.dingtalk_task_id)
+      if (result.status === 'read') {
+        await prisma.dingTalkDelivery.update({
+          where: { id: delivery.id },
+          data: { status: 'read', read_at: result.readAt ? new Date(result.readAt) : new Date() }
+        })
+        return
+      }
+      if (result.status === 'failed') {
+        await prisma.dingTalkDelivery.update({
+          where: { id: delivery.id },
+          data: {
+            status: 'failed',
+            last_error_code: result.lastErrorCode || 'NOTIFICATION_CENTER_FAILED',
+            last_error_message: result.lastErrorMessage || '由壹点通知中心返回��失败'
+          }
+        })
+        return
+      }
+      await prisma.dingTalkDelivery.update({
+        where: { id: delivery.id },
+        data: {
+          status: result.status === 'unread' ? 'unread' : 'sent',
+          sent_at: result.sentAt ? new Date(result.sentAt) : delivery.sent_at,
+          next_attempt_at: new Date(Date.now() + 5 * 60_000)
+        }
+      })
+      return
+    }
+
+    const result = delivery.provider_type === 'robot_oto'
+      ? await getDingTalkRobotSendResult(delivery.dingtalk_task_id)
+      : await getDingTalkSendResult(delivery.dingtalk_task_id)
     const includesUser = (value: unknown) =>
       Array.isArray(value) && value.map(String).includes(delivery.recipient_dingtalk_userid as string)
 
@@ -141,6 +198,7 @@ const refreshOneDeliveryResult = async () => {
       return
     }
     if (
+      result.delivery_failed === true ||
       includesUser(result.invalid_user_id_list) || includesUser(result.forbidden_user_id_list) ||
       includesUser(result.failed_user_id_list)
     ) {
diff --git a/backend/src/services/youyidianNotificationClient.ts b/backend/src/services/youyidianNotificationClient.ts
new file mode 100644
index 0000000..1dfd9c6
--- /dev/null
+++ b/backend/src/services/youyidianNotificationClient.ts
@@ -0,0 +1,111 @@
+import crypto from 'crypto'
+
+export type NotificationCenterDelivery = {
+  id: string
+  projectCode: string
+  status: 'pending' | 'sending' | 'retrying' | 'sent' | 'unread' | 'read' | 'failed'
+  recipientUserId: string
+  title: string
+  processQueryKey?: string | null
+  lastErrorCode?: string | null
+  lastErrorMessage?: string | null
+  sentAt?: string | null
+  readAt?: string | null
+}
+
+export class NotificationCenterError extends Error {
+  constructor(message: string, public readonly deterministic = false) {
+    super(message)
+    this.name = 'NotificationCenterError'
+  }
+}
+
+const config = () => ({
+  baseUrl: String(process.env.YYD_NOTIFICATION_CENTER_URL || '').trim().replace(/\/$/, ''),
+  projectCode: String(process.env.YYD_NOTIFICATION_CENTER_PROJECT_CODE || '').trim(),
+  secret: String(process.env.YYD_NOTIFICATION_CENTER_PROJECT_SECRET || '').trim()
+})
+
+export const getNotificationCenterConfigStatus = () => {
+  const value = config()
+  const missing: string[] = []
+  if (!value.baseUrl) missing.push('YYD_NOTIFICATION_CENTER_URL')
+  if (!value.projectCode) missing.push('YYD_NOTIFICATION_CENTER_PROJECT_CODE')
+  if (!value.secret) missing.push('YYD_NOTIFICATION_CENTER_PROJECT_SECRET')
+  return { configured: missing.length === 0, missing }
+}
+
+const sha256 = (value: string) => crypto.createHash('sha256').update(value).digest('hex')
+
+const signedHeaders = (method: string, path: string, body: string) => {
+  const value = config()
+  const timestamp = String(Math.floor(Date.now() / 1000))
+  const nonce = crypto.randomBytes(18).toString('base64url')
+  const canonical = [timestamp, nonce, method.toUpperCase(), path, sha256(body)].join('\n')
+  const signature = crypto.createHmac('sha256', value.secret).update(canonical).digest('hex')
+  return {
+    'Content-Type': 'application/json',
+    'x-yyd-project-code': value.projectCode,
+    'x-yyd-timestamp': timestamp,
+    'x-yyd-nonce': nonce,
+    'x-yyd-signature': signature
+  }
+}
+
+const request = async (path: string, method: 'GET' | 'POST', payload?: Record<string, unknown>) => {
+  const value = config()
+  const status = getNotificationCenterConfigStatus()
+  if (!status.configured) throw new NotificationCenterError(`由壹点通知中心�置�完整: ${status.missing.join(', ')}`, true)
+  const body = payload ? JSON.stringify(payload) : ''
+  const controller = new AbortController()
+  const timeout = setTimeout(() => controller.abort(), 8_000)
+  let response: Response
+  try {
+    response = await fetch(`${value.baseUrl}${path}`, {
+      method,
+      headers: signedHeaders(method, path, body),
+      body: body || undefined,
+      signal: controller.signal
+    })
+  } catch (error: any) {
+    if (error?.name === 'AbortError') throw new NotificationCenterError('由壹点通知中心请求超时')
+    throw new NotificationCenterError(error?.message || '由壹点通知中心网络请求失败')
+  } finally {
+    clearTimeout(timeout)
+  }
+  const data = await response.json().catch(() => ({})) as Record<string, any>
+  if (!response.ok) {
+    throw new NotificationCenterError(
+      `由壹点通知中心请求失败: ${data.error || response.status}`,
+      response.status >= 400 && response.status < 500 && response.status !== 429
+    )
+  }
+  return data as NotificationCenterDelivery
+}
+
+const buildActionUrl = (actionUrl: string) => {
+  const publicBaseUrl = String(process.env.DINGTALK_PUBLIC_BASE_URL || '').trim().replace(/\/$/, '')
+  const safePath = actionUrl.startsWith('/') && !actionUrl.startsWith('//') ? actionUrl : '/'
+  return `${publicBaseUrl}/dingtalk-entry?redirect=${encodeURIComponent(safePath)}`
+}
+
+export const submitYouyidianNotification = (input: {
+  idempotencyKey: string
+  recipientUserId: string
+  title: string
+  content: string
+  actionTitle?: string
+  actionUrl: string
+}) => request('/v1/notifications', 'POST', {
+  idempotencyKey: input.idempotencyKey,
+  recipientUserId: input.recipientUserId,
+  title: input.title,
+  content: input.content,
+  actionTitle: input.actionTitle || '查看详情',
+  actionUrl: buildActionUrl(input.actionUrl)
+})
+
+export const getYouyidianNotificationStatus = (id: string) => {
+  const path = `/v1/notifications/${encodeURIComponent(id)}`
+  return request(path, 'GET')
+}
diff --git a/docker-compose.yml b/docker-compose.yml
index fe9e0e4..4202d78 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -54,9 +54,15 @@ services:
       DINGTALK_APP_KEY: ${DINGTALK_APP_KEY:-}
       DINGTALK_APP_SECRET: ${DINGTALK_APP_SECRET:-}
       DINGTALK_AGENT_ID: ${DINGTALK_AGENT_ID:-}
+      DINGTALK_ROBOT_CODE: ${DINGTALK_ROBOT_CODE:-}
       DINGTALK_CORP_ID: ${DINGTALK_CORP_ID:-}
       DINGTALK_PUBLIC_BASE_URL: ${DINGTALK_PUBLIC_BASE_URL:-}
       DINGTALK_SEND_ENABLED: ${DINGTALK_SEND_ENABLED:-false}
+      DINGTALK_NOTIFICATION_CHANNEL: ${DINGTALK_NOTIFICATION_CHANNEL:-work_notice}
+      YYD_NOTIFICATION_CENTER_URL: ${YYD_NOTIFICATION_CENTER_URL:-}
+      YYD_NOTIFICATION_CENTER_PROJECT_CODE: ${YYD_NOTIFICATION_CENTER_PROJECT_CODE:-fixed_asset}
+      YYD_NOTIFICATION_CENTER_PROJECT_SECRET: ${YYD_NOTIFICATION_CENTER_PROJECT_SECRET:-}
+      YYD_NOTIFICATION_CENTER_TEST_USER_IDS: ${YYD_NOTIFICATION_CENTER_TEST_USER_IDS:-}
       DOWNLOADS_DIR: /app/downloads
     depends_on:
       mysql:
diff --git a/docs/钉钉机器人��通知接入实施说明-2026-07-15.md b/docs/钉钉机器人��通知接入实施说明-2026-07-15.md
new file mode 100644
index 0000000..fa7f051
--- /dev/null
+++ b/docs/钉钉机器人��通知接入实施说明-2026-07-15.md
@@ -0,0 +1,434 @@
+# 由壹点统一钉钉��通知中心接入指�
+
+更新日期：2026-07-15
+
+适用对象：由壹点旗下素�库�产�开�平��固定资产�脉象�AI 平���续新项目的开� Agent
+
+通知中心��：`D:\AI Code\YouYiDianNotificationCenter`
+
+> 本文是�直接交给其他项目 Agent 的实施契约。文中�包�真实钉钉密钥�项目密钥�员工 `userId`��务器密�或数�库连接；这些内容必须通过生产环境���置，�止写入 Git�日志或交接文档。
+
+## 1. 统一结论
+
+由壹点旗下所有项目共用一个显示�称为“由壹点�的�业内部应用机器人，但业务项目�直接�存或调用该机器人的 `AppKey / AppSecret / RobotCode`。
+
+所有钉钉��统一由独立的“由壹点通知中心���。�个业务项目��有自己的：
+
+- `projectCode`ï¼›
+- HMAC 项目密钥；
+- �许跳转的公网 HTTPS 域�；
+- 本项目员工的钉钉 `userId`；
+- 本项目业务消��幂等键和跳转地�。
+
+通知中心统一负责：
+
+- �管钉钉应用密钥和 `RobotCode`；
+- 获�并缓存钉钉 `accessToken`；
+- ��机器人��；
+- 自动给标题加项目��，例如 `�由壹点·固定资产】`；
+- 项目鉴��请求防�放和项目隔离；
+- 异步投递�失败�试�幂等和已读状�查询；
+- �制按钮�能跳转到该项目登记过的 HTTPS 域�。
+
+```mermaid
+flowchart LR
+    A[业务项目事件] --> B[项目本地通知记录]
+    B --> C[项目投递 Worker]
+    C -->|HMAC HTTPS| D[由壹点通知中心]
+    D --> E[(通知中心数�库)]
+    D --> F[由壹点机器人]
+    F --> G[员工钉钉��]
+    G --> H[已读状�]
+    H --> D
+    D --> C
+```
+
+## 2. 钉钉开�者��由�负责
+
+### 2.1 新业务项目通常�需�创建机器人
+
+��新项目属于�一�业，并通过通知中心��消�，就�需�：
+
+- 新建钉钉机器人；
+- �制统一机器人的 `AppKey / AppSecret / RobotCode`；
+- 申请机器人����；
+- 自己调用 `/v1.0/robot/oToMessages/batchSend`；
+- 自己维护钉钉访问令牌。
+
+新项目�需�由通知中心管�员登记项目�置，然�按本文接�接入。
+
+### 2.2 统一机器人�在通知中心�置一次
+
+钉钉开�者��需�人工确认以下事项：
+
+1. 机器人显示�称为“由壹点�；
+2. 使用统一头�和介�；
+3. 应用��范围包�实际收件人；
+4. 已开通机器人消�����，常���标识为 `qyapi_robot_sendmsg`；
+5. 如控制��独列出已读状�查询��，也一并开通；
+6. 修改机器人���或��范围�，创建并�布应用版本；
+7. `AppKey / AppSecret / RobotCode` �写入通知中心生产环境。
+
+这些���作�会因为接入一个新业务项目而��执行。�有收件人超出现有��范围����生�化或统一机器人资料需�调整时，�需��次修改钉钉开�者��。
+
+### 2.3 登录应用与通知机器人相互独立
+
+业务项目现有的钉钉登录应用继续使用自己的 `AppKey / AppSecret / AgentId / CorpId`。��为了��通知而替�登录�置。
+
+- 登录应用：负责�登�身份绑定和获�本项目员工钉钉 `userId`；
+- 通知中心机器人：�负责统一��个人��通知。
+
+## 3. 新项目接入�需��供的信�
+
+业务项目 Agent 需�先整�：
+
+| 信� | 示例 | 说明 |
+|---|---|---|
+| 项目代� | `fixed_asset` | �写字��数字和下划线，创建�����修改 |
+| 项目显示� | `固定资产` | 通知中心用于生� `�由壹点·固定资产】` |
+| �许跳转域� | `asset.example.com` | 必须是公网 HTTPS 域�，�能使用 IP�内网地�或任�外链 |
+| 通知事件 | `workflow_pending` | 说明哪些业务节点需�通知 |
+| 收件人�� | 员工钉钉 `userId` | �能用邮箱�手机��花��工�或本地用户 ID 代替 |
+| 幂等业务键 | `审批�ID + 审批节点 + 收件人` | �一业务事件�试时必须���� |
+| �度人员 | 1～3 个测试员工 | 上线�期�让这些人员走通知中心 |
+
+通知中心管�员�此新增项目�置，并�业务项目生产环境安全交付独立项目密钥。��项目�能共用项目密钥。
+
+当�已约定项目代�：
+
+| 项目 | `projectCode` |
+|---|---|
+| 素�库 | `material_library` |
+| 固定资产 | `fixed_asset` |
+
+## 4. 业务项目环境��
+
+�个项目至少增加：
+
+```dotenv
+# 默认先��项目当�旧通知通�，上线�度时�切�
+DINGTALK_NOTIFICATION_CHANNEL=work_notice
+
+# 由壹点通知中心公网 HTTPS 地�
+YYD_NOTIFICATION_CENTER_URL=https://notify.example.com
+
+# 本项目独立身份
+YYD_NOTIFICATION_CENTER_PROJECT_CODE=your_project_code
+YYD_NOTIFICATION_CENTER_PROJECT_SECRET=
+
+# �度钉钉 userId，多个用英文逗�分隔；���交真实值
+YYD_NOTIFICATION_CENTER_TEST_USER_IDS=
+```
+
+�求：
+
+- `PROJECT_SECRET` �存在�务器环境��，�进入�端和 Git；
+- �览器�能直接调用通知中心；
+- 生产地�必须是 HTTPS；
+- 切�通知通�和调整�度��必须�独立完�；
+- 通知中心��用时，��自动跨通���一�，��用户收到��消�。
+
+## 5. HTTP 接�契约
+
+### 5.1 创建通知
+
+```http
+POST /v1/notifications
+Content-Type: application/json
+x-yyd-project-code: <projectCode>
+x-yyd-timestamp: <Unix 秒时间戳>
+x-yyd-nonce: <�次请求唯一�机值>
+x-yyd-signature: <HMAC-SHA256 �六进制�写签�>
+```
+
+请求体：
+
+```json
+{
+  "idempotencyKey": "workflow_pending:order-123:node-2:user-456",
+  "recipientUserId": "DINGTALK_USER_ID",
+  "title": "新的待审批任务",
+  "content": "### ◆ 固定资产待审批\n\n**资产编�** ZC-2026-001\n\n> 请�时处�",
+  "actionTitle": "立�处�",
+  "actionUrl": "https://asset.example.com/dingtalk-entry?redirect=%2Fworkflows%2F123"
+}
+```
+
+规则：
+
+- `idempotencyKey` 必须稳定，�能使用当�时间或�机 UUID；
+- `recipientUserId` 是一个钉钉员工 `userId`；如需通知多人，由业务项目为��收件人创建独立投递记录和幂等键；
+- 标题�写业务标题，��自己添加 `�由壹点】`；
+- 以 `�由壹点` 开头的标题会被通知中心拒�，�牌�缀由中心统一生�；
+- `actionUrl` 必须属于该项目登记的 HTTPS 域�；
+- �一个 `projectCode + idempotencyKey` �试�会返回原通知，�����。
+
+�功�应示例：
+
+```json
+{
+  "id": "通知中心任务ID",
+  "projectCode": "fixed_asset",
+  "status": "pending",
+  "recipientUserId": "DINGTALK_USER_ID",
+  "title": "�由壹点·固定资产】新的待审批任务"
+}
+```
+
+业务项目应把通知中心任务 `id` �存到本地投递记录，�能�凭 HTTP 200 标记最终�达。
+
+### 5.2 查询通知状�
+
+```http
+GET /v1/notifications/<notificationId>
+x-yyd-project-code: <projectCode>
+x-yyd-timestamp: <Unix 秒时间戳>
+x-yyd-nonce: <�次请求唯一�机值>
+x-yyd-signature: <签�>
+```
+
+状�按通知中心实际�应处�，业务侧至少映射：
+
+| 通知中心状� | 业务项目建议状� |
+|---|---|
+| `pending` / `processing` | �留待处�，延迟查询 |
+| `sent` / `unread` | 已���未读 |
+| `read` | 已读，�时�存已读时间 |
+| `failed` | 失败，�存�脱�错误摘� |
+
+查询�能读�本项目创建的通知。跨项目任务 ID 会被拒�。
+
+## 6. HMAC 签�算法
+
+签�原文按以下顺�拼接，中间使用�行符 `\n`：
+
+```text
+TIMESTAMP
+NONCE
+HTTP_METHOD
+REQUEST_PATH
+SHA256_HEX_OF_RAW_BODY
+```
+
+然�计算：
+
+```text
+signature = HMAC_SHA256_HEX(projectSecret, canonicalString)
+```
+
+约�：
+
+- 方法统一使用大写；
+- 路径�包�实际 API path，�包��议�域�和查询字符串；当�接�本身�使用查询字符串；
+- POST 的 body hash 必须基于实际��的原始 UTF-8 字符串；
+- GET 没有正文时，对空字符串计算 SHA-256；
+- 时间戳使用 Unix 秒；
+- �次请求生�新 nonce；
+- 通知中心�接��许时间�差内的请求，并拒� nonce �放。
+
+TypeScript �考实现：
+
+```ts
+import crypto from 'node:crypto'
+
+const sha256 = (value: string) =>
+  crypto.createHash('sha256').update(value, 'utf8').digest('hex')
+
+const sign = (input: {
+  method: string
+  path: string
+  timestamp: string
+  nonce: string
+  rawBody: string
+  secret: string
+}) => {
+  const canonical = [
+    input.timestamp,
+    input.nonce,
+    input.method.toUpperCase(),
+    input.path,
+    sha256(input.rawBody)
+  ].join('\n')
+
+  return crypto
+    .createHmac('sha256', input.secret)
+    .update(canonical, 'utf8')
+    .digest('hex')
+}
+```
+
+��在日志中打� `canonicalString`�签�请求头�项目密钥或完整消�正文。
+
+## 7. 业务项目必须实施的代�结构
+
+### 7.1 �留本地投递记录
+
+业务事件�生时，先在本项目数�库创建本地投递记录，�由 Worker 调用通知中心。��在用户请求接�内�步等待钉钉��完�。
+
+本地记录至少包�：
+
+- 本地投递 ID；
+- 事件类型和业务键；
+- 收件人钉钉 `userId`；
+- 稳定幂等键；
+- `provider_type`，例如 `work_notice` 或 `notification_center`；
+- 通知中心任务 ID；
+- `pending / sent / unread / read / failed`ï¼›
+- �试次数�下次�试时间�错误摘�和已读时间。
+
+已有通知队列�租约��试和幂等机制的项目应�用现有能力，�增加通知中心 provider，���造第二套队列。
+
+### 7.2 收件人必须�自��身份绑定
+
+通知中心�会根�邮箱�姓�或手机��查钉钉员工。业务项目必须��把本地用户与钉钉唯一 `userId` ��绑定。
+
+缺少有效 `userId` 时应：
+
+1. �调用通知中心；
+2. 把本地投递记录标为明确的确定性失败；
+3. �示管�员修�人员绑定；
+4. �止猜测姓�或用邮箱代替。
+
+### 7.3 �度切�
+
+推�通�选择：
+
+```ts
+const channelFor = (dingTalkUserId: string) => {
+  const configured = process.env.DINGTALK_NOTIFICATION_CHANNEL || 'work_notice'
+  if (configured !== 'notification_center') return 'work_notice'
+
+  const allowlist = (process.env.YYD_NOTIFICATION_CENTER_TEST_USER_IDS || '')
+    .split(',')
+    .map((item) => item.trim())
+    .filter(Boolean)
+
+  return allowlist.length === 0 || allowlist.includes(dingTalkUserId)
+    ? 'notification_center'
+    : 'work_notice'
+}
+```
+
+�度��外走旧通�是�布策略；通知中心调用已�开始�，失败时�止自动改走旧通�补�。
+
+### 7.4 超时与错误
+
+- �次 HTTP 请求建议超时 8 秒；
+- 连接超时�5xx 和暂时性��进入延迟�试；
+- 签�错误�域���许�收件人缺失等确定性错误直接失败；
+- �试必须�用�一 `idempotencyKey`；
+- 日志�记录项目代��本地投递 ID�通知中心任务 ID�状�和脱�错误；
+- �记录 Secret�钉钉令牌或完整个人信�。
+
+## 8. 项目 Agent 的标准实施步骤
+
+收到本文�，接入 Agent 按以下顺�执行：
+
+1. �读检查项目现有登录�人员绑定�通知入��队列�数�库和部署方�；
+2. 列出所有需�通知的业务事件�真实收件人规则和稳定幂等键；
+3. 确认能够�得员工钉钉 `userId`；
+4. �通知中心管�员申请 `projectCode / 项目� / allowedHost / 项目密钥`；
+5. 新增独立的通知中心�端客户端和 HMAC �元测试；
+6. �用本地投递表，增加 `provider_type` 与通知中心任务 ID；
+7. 在 Worker 中增加 `notification_center` 分支和状�轮询；
+8. 增加环境����度��，但默认��旧通�；
+9. 跑数�库�移�类型检查��元测试和构建；
+10. 用本地或测试通知中心验�签��幂等�域��制和项目隔离；
+11. 先部署代�但�切全�；
+12. ��置 1～3 �测试员工�度；
+13. 验�收到�����标题�按钮跳转�数�库状��已读回写；
+14. 扩大�度，观察无��投递��全�切�；
+15. �留旧通�一个观察周期，�评估是�下线。
+
+## 9. 最低测试与�布门�
+
+### 9.1 �元和集�测试
+
+至少覆盖：
+
+- 签�原文�body hash 和 HMAC 结果固定；
+- POST 与 GET 空正文签�；
+- 缺�置时拒���；
+- 请求超时会结�，�会永久挂起；
+- �一幂等键�会生�第二�通知；
+- ��项目�能读�彼此任务；
+- � HTTPS 或未登记域�被拒�；
+- 标题�会��添加“由壹点��缀；
+- �度人员走通知中心，其他人员走旧通�；
+- 通知中心失败�会自动跨通�����；
+- `pending / sent / unread / read / failed` 映射正确；
+- 项目密钥和钉钉凭��会进入日志��端包或 Git。
+
+### 9.2 生产验�
+
+1. 通知中心 `/health` 显示�务和数�库�用；
+2. 业务项目先��旧通�部署�功；
+3. �加入开�人员自己的钉钉 `userId`；
+4. ��明确标注为测试且�产生真实业务影�的通知；
+5. 确认消�进入“由壹点�机器人个人��，�进入公�群；
+6. 确认标题包�正确项目��；
+7. 确认按钮进入本项目 HTTPS 地�并完��登；
+8. 确认本地�存通知中心任务 ID；
+9. 点击�确认已读状�能够回写；
+10. 用��幂等键验��会收到第二�；
+11. 观察日志无密钥�令牌和完整个人信�；
+12. �扩大到��部门的 2～3 �测试员工。
+
+## 10. 明确�止的�法
+
+- ��为�个由壹点项目创建一个��机器人；
+- ��把统一机器人凭��制到业务项目；
+- ��让�端直接调用通知中心或钉钉接�；
+- ��使用群机器人 Webhook 代替个人��；
+- ��用邮箱�手机��花�或本地用户 ID 冒充钉钉 `userId`；
+- ��用�机值或当�时间作为业务幂等键；
+- ��在通知中心失败�自动�通���一次；
+- ���许任�外部链接作为通知按钮地�；
+- ��仅凭 HTTP 200 就认为员工已�收到或已读；
+- ��在未�布钉钉应用版本时认为����修改已�生效。
+
+## 11. 常�故障定�
+
+| 现象 | 优先检查 |
+|---|---|
+| 通知中心返回 401 | 项目代��项目密钥�时间戳�nonce 和签�原文 |
+| 返回域���许 | `actionUrl` 是� HTTPS，host 是�已登记在该项目�置中 |
+| 返回��请求 | nonce 被�用；�试必须生�新 nonce，但�留相�幂等键 |
+| 通知一直 pending | 通知中心 Worker�数�库和钉钉访问令牌状� |
+| 钉钉返回无�� | 统一机器人���应用版本和机器人所在应用凭�是�匹� |
+| 收件人无效或被过滤 | 是�使用真实钉钉 `userId`，应用��范围是�包�该员工 |
+| 用户收到两� | 业务幂等键�稳定�多个 Worker 未正确抢�，或失败�跨通�补� |
+| 按钮打�开 | 公网 HTTPS���代��项目�登入���定�白�� |
+| 能收到但查�到已读 | 是��存通知中心任务 ID，通知中心已读轮询是�正常 |
+
+## 12. 当�实现�置
+
+### 通知中心
+
+`D:\AI Code\YouYiDianNotificationCenter`
+
+关键能力和部署方��该项目 `README.md`�`.env.example`�`docker-compose.yml` 和 `prisma/schema.prisma`。
+
+### 素�库适�器
+
+`D:\AI Code\gongxiangp2\lib\youyidian-notification-center.ts`
+
+素�库通过现有考核调研通知链路调用通知中心，默认���旧通知通�，支�按钉钉 `userId` �度。
+
+### 固定资产适�器
+
+`D:\AI Code\GuDingZiChan\backend\src\services\youyidianNotificationClient.ts`
+
+固定资产�用原有 `DingTalkDelivery`�Worker�租约��试和状�刷新，�新增通知中心 provider。
+
+## 13. 交给下一个 Agent 的任务模�
+
+�把下�这段连�本文路径一起交给其他项目 Agent：
+
+> 请按《由壹点统一钉钉��通知中心接入指�》为当�项目接入钉钉个人��。先�读排查项目的钉钉身份绑定�通知事件�投递队列�数�库�幂等和部署方�；业务项目�得�存统一机器人的 AppKey�AppSecret 或 RobotCode，�得直接调用钉钉机器人接�。请�用现有通知投递机制，增加 notification_center provider�稳定幂等键�HMAC 客户端�状�轮询和钉钉 userId �度��。首次部署��旧通�，完�测试��对指定测试员工�度，��许失败�自动跨通�补�。实施�先列出 projectCode�项目显示���许跳转的 HTTPS 域��通知事件�收件人��和数�库�移影�；修改�完��元测试�构建�部署和生产�度验�，并确�任何密钥都�进入 Git��端或日志。
+
+## 14. 关于接�真值
+
+业务项目��赖本文定义的通知中心接�，��赖钉钉开放平�的底层字段。钉钉机器人接��访问令牌���和已读状�的�化统一由通知中心适�，���个项目��维护。
+
+当�实现已在 2026-07-15 完�本地构建�签��项目隔离�幂等�域��制�数�库�康和业务适�器�调。生产地��项目密钥和�度人员属于部署�置，应以当�生产环境为准，�写入本文。
diff --git a/frontend/src/api/dingtalk.ts b/frontend/src/api/dingtalk.ts
index 39e5047..a0c1c72 100644
--- a/frontend/src/api/dingtalk.ts
+++ b/frontend/src/api/dingtalk.ts
@@ -20,6 +20,7 @@ export interface DingTalkLoginResponse {
 
 export interface DingTalkDeliveryStatus {
   configured: boolean
+  channel?: 'robot_oto' | 'work_notice' | 'notification_center'
   send_enabled?: boolean
   enabled?: boolean
   missing?: string[]