From 1298a558e8140b8f93c28f943e26947e5de3ef35 Mon Sep 17 00:00:00 2001
From: marsal <wangyuhang@sino-assistance.com>
Date: Wed, 8 Jul 2026 16:23:09 +0800
Subject: [PATCH] wip: baseline changes before channel-conversation-task
 boundary implementation

---
 .env.example                                  |  32 +
 .gitignore                                    |   5 +
 admin-web/src/api/account.ts                  |  60 +-
 admin-web/src/api/channel.ts                  |  30 +-
 admin-web/src/api/channelAccount.ts           |  33 +
 admin-web/src/api/channelSubject.ts           |  21 +
 admin-web/src/api/client.ts                   |   8 +-
 admin-web/src/api/crm.ts                      |  36 +-
 admin-web/src/api/inboundFlow.ts              |  75 ++
 admin-web/src/api/inboundWebhook.ts           |  13 +
 admin-web/src/api/ivrFlow.ts                  |  75 ++
 admin-web/src/api/sendPolicy.ts               |  25 +
 admin-web/src/api/sendRecord.ts               |  31 +
 admin-web/src/components/Layout.vue           |   9 +
 admin-web/src/router/index.ts                 |   6 +
 admin-web/src/stores/auth.ts                  |  18 +-
 admin-web/src/views/ChannelAccount.vue        | 340 ++++++--
 admin-web/src/views/ChannelSubject.vue        | 239 +++++-
 admin-web/src/views/Conversation.vue          | 348 ++++++--
 admin-web/src/views/FlowTrace.vue             |  15 +-
 admin-web/src/views/InboundFlow.vue           | 763 +++++++++++++++--
 admin-web/src/views/InboundWebhook.vue        |  83 ++
 admin-web/src/views/IvrFlow.vue               | 780 ++++++++++++++++++
 admin-web/src/views/Login.vue                 |   9 +
 admin-web/src/views/MessageTest.vue           |   1 -
 admin-web/src/views/Person.vue                | 383 ++++++++-
 admin-web/src/views/SendPolicy.vue            | 183 ++++
 admin-web/src/views/SendRecord.vue            | 472 +++++++++--
 admin-web/src/views/Tag.vue                   | 197 ++++-
 admin-web/src/views/TenantManagement.vue      | 199 ++++-
 admin-web/src/views/UserManagement.vue        | 288 ++++++-
 admin-web/tsconfig.app.tsbuildinfo            |   2 +-
 backend/mci-server/Dockerfile                 |  10 +-
 backend/mci-server/pom.xml                    |   5 +
 .../admin/controller/AccountController.java   |  39 +-
 .../admin/controller/TenantController.java    |  36 +
 .../mci/admin/dto/CreateTenantRequest.java    |   4 +
 .../mci/admin/dto/TenantWebhookResponse.java  |  16 +
 .../mci/admin/dto/TestWebhookRequest.java     |  11 +
 .../mci/admin/dto/TestWebhookResponse.java    |  14 +
 .../mci/admin/dto/UpdateTenantRequest.java    |  15 +
 .../admin/dto/UpdateTenantWebhookRequest.java |  18 +
 .../sino/mci/admin/dto/UpdateUserRequest.java |  19 +
 .../com/sino/mci/admin/entity/Tenant.java     |   1 +
 .../sino/mci/admin/init/DataInitializer.java  | 117 +++
 .../mci/admin/service/AccountService.java     | 148 +++-
 .../sino/mci/admin/service/TenantService.java | 129 +++
 .../controller/ChannelAccountController.java  |  32 +
 .../controller/ChannelSubjectController.java  |  25 +
 .../controller/ConversationController.java    |  17 +
 .../dto/ChannelAccountInitRequest.java        |   2 +
 .../dto/UpdateConversationRequest.java        |  18 +
 .../mci/channel/dto/UpdateStatusRequest.java  |  11 +
 .../mci/channel/messaging/RabbitConfig.java   |  11 +
 .../mci/channel/service/AccountSelector.java  | 102 +++
 .../service/ChannelSubjectService.java        |  52 ++
 .../channel/service/ConversationService.java  |  27 +
 .../service/SessionArchivePullService.java    |   3 +
 .../mci/crm/controller/PersonController.java  |  26 +
 .../mci/crm/controller/TagController.java     |  17 +
 .../sino/mci/crm/dto/UpdatePersonRequest.java |  17 +
 .../sino/mci/crm/dto/UpdateTagRequest.java    |  13 +
 .../sino/mci/crm/service/PersonService.java   |  41 +
 .../com/sino/mci/crm/service/TagService.java  |  25 +
 .../mci/exception/WebhookPushException.java   |  20 +
 .../controller/FlowDefinitionController.java  |   8 +
 .../flow/controller/IvrFlowController.java    |  69 ++
 .../flow/service/FlowDefinitionService.java   |  17 +-
 .../inbound/controller/IntentController.java  |  31 +
 .../inbound/dto/IntentRecognizeRequest.java   |  15 +
 .../sino/mci/inbound/engine/FlowContext.java  |  54 ++
 .../inbound/engine/FlowDefinitionParser.java  |  85 ++
 .../com/sino/mci/inbound/engine/FlowEdge.java |   7 +
 .../sino/mci/inbound/engine/FlowEngine.java   | 203 ++++-
 .../com/sino/mci/inbound/engine/FlowNode.java |   9 +
 .../engine/IntentRecognitionService.java      |   4 +-
 .../engine/MockIntentRecognitionService.java  |  57 +-
 .../engine/SpelConditionEvaluator.java        |  38 +
 .../inbound/engine/WebhookPushService.java    | 113 ++-
 .../intent/IntentRecognitionService.java      | 287 +++++++
 .../sino/mci/inbound/intent/IntentResult.java |  35 +
 .../intent/OpenAiChatClientConfig.java        |  40 +
 .../inbound/intent/OpenAiRestChatModel.java   |  89 ++
 .../mci/inbound/mq/InboundEventMessage.java   |  35 +
 .../mci/inbound/mq/InboundFlowConsumer.java   |  39 +
 .../mq/InboundFlowMessageProducer.java        |  56 ++
 .../inbound/mq/InboundMessageConsumer.java    |  79 ++
 .../inbound/mq/InboundMessageProducer.java    |  52 ++
 .../service/InboundContextService.java        | 146 ++++
 .../service/InboundMessageService.java        |  20 +
 .../webhook/WebhookPayloadBuilder.java        |  81 ++
 .../mci/inbound/webhook/WebhookSignature.java |  11 +
 .../webhook/WebhookSignatureService.java      |  67 ++
 .../java/com/sino/mci/mq/config/MqConfig.java | 119 +++
 .../com/sino/mci/policy/engine/Policy.java    |  44 +
 .../mci/policy/engine/PolicyCheckResult.java  |  18 +
 .../sino/mci/policy/engine/PolicyEngine.java  | 240 ++++++
 .../mci/policy/engine/PolicyGroupConfig.java  |  47 ++
 .../policy/engine/PolicyPreviewResult.java    |  17 +
 .../sino/mci/policy/engine/PolicyType.java    |  18 +
 .../sino/mci/policy/engine/RetryConfig.java   |  16 +
 .../mci/send/controller/SendController.java   |  78 +-
 .../sino/mci/send/dto/ChannelStatistics.java  |  14 +
 .../sino/mci/send/dto/SendPreviewRequest.java |  19 +
 .../mci/send/dto/SendPreviewResponse.java     |  25 +
 .../sino/mci/send/dto/SendRecordResponse.java |   3 +
 .../mci/send/dto/SendStatisticsResponse.java  |  17 +
 .../mci/send/dto/SendTaskStatusResponse.java  |  14 +
 .../com/sino/mci/send/entity/SendRecord.java  |   3 +
 .../sino/mci/send/mq/SendMessageConsumer.java | 116 +++
 .../sino/mci/send/mq/SendMessageProducer.java |  29 +
 .../sino/mci/send/mq/SendRecordMessage.java   |  22 +
 .../mci/send/service/SendCallbackService.java |  70 ++
 .../mci/send/service/SendPreviewService.java  | 200 +++++
 .../sino/mci/send/service/SendService.java    | 485 ++++++++---
 .../com/sino/mci/send/service/SendTarget.java |  15 +
 .../src/main/resources/application-dev.yml    |  11 +
 .../V18__add_send_record_retry_fields.sql     |   5 +
 .../db/migration/V19__add_tenant_ext_info.sql |   2 +
 .../TenantWebhookControllerTest.java          | 148 ++++
 .../channel/service/AccountSelectorTest.java  | 123 +++
 .../controller/IvrFlowControllerTest.java     |  83 ++
 .../mci/inbound/engine/FlowEngineTest.java    | 165 ++++
 .../inbound/engine/InboundEndToEndTest.java   | 142 ++++
 .../intent/IntentRecognitionServiceTest.java  |  63 ++
 .../service/InboundContextServiceTest.java    | 161 ++++
 .../webhook/WebhookPayloadBuilderTest.java    | 117 +++
 .../webhook/WebhookSignatureServiceTest.java  |  79 ++
 .../controller/SendPreviewControllerTest.java | 266 ++++++
 .../mci/send/mq/SendMessageConsumerTest.java  | 211 +++++
 .../mci/send/service/PolicyEngineTest.java    | 130 +++
 .../mci/send/service/SendEndToEndTest.java    | 130 +++
 .../send/service/SendServiceFailoverTest.java | 202 +++++
 backend/pom.xml                               |  11 +
 docker-compose.yml                            |  58 +-
 ...7-08-channel-conversation-task-boundary.md | 577 +++++++++++++
 ...annel-conversation-task-boundary-design.md | 178 ++++
 docs/testing/2026-07-07-test-plan.md          | 326 ++++++++
 scripts/local-up.sh                           |  63 +-
 139 files changed, 11781 insertions(+), 666 deletions(-)
 create mode 100644 .env.example
 create mode 100644 admin-web/src/api/channelAccount.ts
 create mode 100644 admin-web/src/api/channelSubject.ts
 create mode 100644 admin-web/src/api/inboundFlow.ts
 create mode 100644 admin-web/src/api/inboundWebhook.ts
 create mode 100644 admin-web/src/api/ivrFlow.ts
 create mode 100644 admin-web/src/api/sendPolicy.ts
 create mode 100644 admin-web/src/api/sendRecord.ts
 create mode 100644 admin-web/src/views/InboundWebhook.vue
 create mode 100644 admin-web/src/views/IvrFlow.vue
 create mode 100644 admin-web/src/views/SendPolicy.vue
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/admin/controller/TenantController.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/admin/dto/TenantWebhookResponse.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/admin/dto/TestWebhookRequest.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/admin/dto/TestWebhookResponse.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/admin/dto/UpdateTenantRequest.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/admin/dto/UpdateTenantWebhookRequest.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/admin/dto/UpdateUserRequest.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/admin/init/DataInitializer.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/admin/service/TenantService.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/channel/dto/UpdateConversationRequest.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/channel/dto/UpdateStatusRequest.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/channel/service/AccountSelector.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/crm/dto/UpdatePersonRequest.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/crm/dto/UpdateTagRequest.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/exception/WebhookPushException.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/flow/controller/IvrFlowController.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/controller/IntentController.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/dto/IntentRecognizeRequest.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowContext.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowDefinitionParser.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowEdge.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowNode.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/engine/SpelConditionEvaluator.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/intent/IntentRecognitionService.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/intent/IntentResult.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/intent/OpenAiChatClientConfig.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/intent/OpenAiRestChatModel.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundEventMessage.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundFlowConsumer.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundFlowMessageProducer.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundMessageConsumer.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundMessageProducer.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/service/InboundContextService.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/webhook/WebhookPayloadBuilder.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/webhook/WebhookSignature.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/inbound/webhook/WebhookSignatureService.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/mq/config/MqConfig.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/policy/engine/Policy.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyCheckResult.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyEngine.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyGroupConfig.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyPreviewResult.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyType.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/policy/engine/RetryConfig.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/send/dto/ChannelStatistics.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/send/dto/SendPreviewRequest.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/send/dto/SendPreviewResponse.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/send/dto/SendStatisticsResponse.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/send/dto/SendTaskStatusResponse.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/send/mq/SendMessageConsumer.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/send/mq/SendMessageProducer.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/send/mq/SendRecordMessage.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/send/service/SendCallbackService.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/send/service/SendPreviewService.java
 create mode 100644 backend/mci-server/src/main/java/com/sino/mci/send/service/SendTarget.java
 create mode 100644 backend/mci-server/src/main/resources/db/migration/V18__add_send_record_retry_fields.sql
 create mode 100644 backend/mci-server/src/main/resources/db/migration/V19__add_tenant_ext_info.sql
 create mode 100644 backend/mci-server/src/test/java/com/sino/mci/admin/controller/TenantWebhookControllerTest.java
 create mode 100644 backend/mci-server/src/test/java/com/sino/mci/channel/service/AccountSelectorTest.java
 create mode 100644 backend/mci-server/src/test/java/com/sino/mci/flow/controller/IvrFlowControllerTest.java
 create mode 100644 backend/mci-server/src/test/java/com/sino/mci/inbound/engine/FlowEngineTest.java
 create mode 100644 backend/mci-server/src/test/java/com/sino/mci/inbound/engine/InboundEndToEndTest.java
 create mode 100644 backend/mci-server/src/test/java/com/sino/mci/inbound/intent/IntentRecognitionServiceTest.java
 create mode 100644 backend/mci-server/src/test/java/com/sino/mci/inbound/service/InboundContextServiceTest.java
 create mode 100644 backend/mci-server/src/test/java/com/sino/mci/inbound/webhook/WebhookPayloadBuilderTest.java
 create mode 100644 backend/mci-server/src/test/java/com/sino/mci/inbound/webhook/WebhookSignatureServiceTest.java
 create mode 100644 backend/mci-server/src/test/java/com/sino/mci/send/controller/SendPreviewControllerTest.java
 create mode 100644 backend/mci-server/src/test/java/com/sino/mci/send/mq/SendMessageConsumerTest.java
 create mode 100644 backend/mci-server/src/test/java/com/sino/mci/send/service/PolicyEngineTest.java
 create mode 100644 backend/mci-server/src/test/java/com/sino/mci/send/service/SendEndToEndTest.java
 create mode 100644 backend/mci-server/src/test/java/com/sino/mci/send/service/SendServiceFailoverTest.java
 create mode 100644 docs/superpowers/plans/2026-07-08-channel-conversation-task-boundary.md
 create mode 100644 docs/superpowers/specs/2026-07-08-channel-conversation-task-boundary-design.md
 create mode 100644 docs/testing/2026-07-07-test-plan.md

diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..ce94b9e
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,32 @@
+# MySQL
+MYSQL_ROOT_PASSWORD=root
+MYSQL_DATABASE=sino_mci
+MYSQL_USER=root
+MYSQL_PORT=3306
+
+# Redis
+REDIS_PORT=6379
+
+# RabbitMQ
+RABBITMQ_DEFAULT_USER=guest
+RABBITMQ_DEFAULT_PASS=guest
+RABBITMQ_AMQP_PORT=5672
+RABBITMQ_MGMT_PORT=15672
+
+# SeaweedFS
+SEAWEEDFS_MASTER_PORT=9333
+SEAWEEDFS_S3_PORT=8888
+
+# Application ports
+MCI_SERVER_PORT=8080
+ADMIN_WEB_PORT=80
+CHANNEL_SERVICE_PORT=8000
+
+# JVM options for mci-server
+JAVA_OPTS=-XX:+UseContainerSupport -XX:MaxRAMPercentage=75.0
+
+# Spring profile
+SPRING_PROFILES_ACTIVE=dev
+
+# OpenAI API key (optional)
+OPENAI_API_KEY=your-openai-api-key-here
diff --git a/.gitignore b/.gitignore
index 03fd31a..86912da 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,6 +15,11 @@ __pycache__/
 venv/
 .env
 
+# Local runtime data
+data/
+*-data/
+logs/
+
 # Node
 node_modules/
 dist/
diff --git a/admin-web/src/api/account.ts b/admin-web/src/api/account.ts
index 6cd6004..151b060 100644
--- a/admin-web/src/api/account.ts
+++ b/admin-web/src/api/account.ts
@@ -6,20 +6,70 @@ export function login(data: { tenantCode: string; username: string; password: st
   })
 }
 
-export function createTenant(data: { tenantCode: string; tenantName: string }) {
+export function createTenant(data: {
+  tenantCode: string
+  tenantName: string
+  inboundWebhookUrl?: string
+  initAdminUsername?: string
+  initAdminPassword?: string
+}) {
   return client.post('/api/v1/account/tenant', data)
 }
 
+export function updateTenant(
+  id: number,
+  data: { tenantName: string; inboundWebhookUrl?: string; status?: number }
+) {
+  return client.put(`/api/v1/account/tenant/${id}`, data)
+}
+
+export function deleteTenant(id: number) {
+  return client.delete(`/api/v1/account/tenant/${id}`)
+}
+
 export function listTenants() {
   return client.get('/api/v1/account/tenant/list')
 }
 
-export function createUser(data: { username: string; password: string; realName?: string; roleCodes?: string[] }) {
-  return client.post('/api/v1/account/user', data)
+export function listRoles() {
+  return client.get('/api/v1/account/role/list')
 }
 
-export function listUsers() {
-  return client.get('/api/v1/account/user/list')
+export function createUser(
+  tenantCode: string,
+  data: {
+    username: string
+    password: string
+    realName?: string
+    phone?: string
+    roleCodes?: string[]
+  }
+) {
+  return client.post('/api/v1/account/user', data, {
+    headers: { 'X-Tenant-Code': tenantCode },
+  })
+}
+
+export function updateUser(
+  id: number,
+  data: {
+    realName: string
+    phone?: string
+    status?: number
+    roleCodes?: string[]
+  }
+) {
+  return client.put(`/api/v1/account/user/${id}`, data)
+}
+
+export function deleteUser(id: number) {
+  return client.delete(`/api/v1/account/user/${id}`)
+}
+
+export function listUsers(tenantCode?: string) {
+  return client.get('/api/v1/account/user/list', {
+    params: tenantCode ? { tenantCode } : {},
+  })
 }
 
 export function me() {
diff --git a/admin-web/src/api/channel.ts b/admin-web/src/api/channel.ts
index d9d33cc..066edf2 100644
--- a/admin-web/src/api/channel.ts
+++ b/admin-web/src/api/channel.ts
@@ -1,24 +1,6 @@
 import client from './client'
-
-export function createChannelSubject(data: any) {
-  return client.post('/api/v1/channel-subject', data)
-}
-
-export function listChannelSubjects() {
-  return client.get('/api/v1/channel-subject/list')
-}
-
-export function createChannelAccount(data: any) {
-  return client.post('/api/v1/channel-account', data)
-}
-
-export function listChannelAccounts() {
-  return client.get('/api/v1/channel-account/list')
-}
-
-export function initChannelAccount(data: any) {
-  return client.post('/api/v1/channel-account/init', data)
-}
+export * from './channelSubject'
+export * from './channelAccount'
 
 export function createConversation(data: any) {
   return client.post('/api/v1/conversation', data)
@@ -28,6 +10,14 @@ export function listConversations() {
   return client.get('/api/v1/conversation/list')
 }
 
+export function updateConversation(id: number, data: any) {
+  return client.put(`/api/v1/conversation/${id}`, data)
+}
+
+export function deleteConversation(id: number) {
+  return client.delete(`/api/v1/conversation/${id}`)
+}
+
 export function bindConversationAccount(conversationId: number, data: any) {
   return client.post(`/api/v1/conversation/${conversationId}/bind-account`, data)
 }
diff --git a/admin-web/src/api/channelAccount.ts b/admin-web/src/api/channelAccount.ts
new file mode 100644
index 0000000..2522951
--- /dev/null
+++ b/admin-web/src/api/channelAccount.ts
@@ -0,0 +1,33 @@
+import client from './client'
+
+export function createChannelAccount(data: any) {
+  return client.post('/api/v1/channel-account', data)
+}
+
+export function listChannelAccounts() {
+  return client.get('/api/v1/channel-account/list')
+}
+
+export function updateChannelAccount(id: number, data: any) {
+  return client.put(`/api/v1/channel-account/${id}`, data)
+}
+
+export function deleteChannelAccount(id: number) {
+  return client.delete(`/api/v1/channel-account/${id}`)
+}
+
+export function updateChannelAccountStatus(id: number, data: any) {
+  return client.patch(`/api/v1/channel-account/${id}/status`, data)
+}
+
+export function getChannelAccountStatus(id: number) {
+  return client.get(`/api/v1/channel-account/${id}/status`)
+}
+
+export function initChannelAccount(data: any) {
+  return client.post('/api/v1/channel-account/init', data)
+}
+
+export function syncChannelAccountConversations(id: number) {
+  return client.post(`/api/v1/channel-account/${id}/sync-conversations`)
+}
diff --git a/admin-web/src/api/channelSubject.ts b/admin-web/src/api/channelSubject.ts
new file mode 100644
index 0000000..14c385b
--- /dev/null
+++ b/admin-web/src/api/channelSubject.ts
@@ -0,0 +1,21 @@
+import client from './client'
+
+export function createChannelSubject(data: any) {
+  return client.post('/api/v1/channel-subject', data)
+}
+
+export function listChannelSubjects() {
+  return client.get('/api/v1/channel-subject/list')
+}
+
+export function updateChannelSubject(id: number, data: any) {
+  return client.put(`/api/v1/channel-subject/${id}`, data)
+}
+
+export function deleteChannelSubject(id: number) {
+  return client.delete(`/api/v1/channel-subject/${id}`)
+}
+
+export function updateChannelSubjectStatus(id: number, data: any) {
+  return client.patch(`/api/v1/channel-subject/${id}/status`, data)
+}
diff --git a/admin-web/src/api/client.ts b/admin-web/src/api/client.ts
index fccfa25..2c9fb72 100644
--- a/admin-web/src/api/client.ts
+++ b/admin-web/src/api/client.ts
@@ -21,7 +21,13 @@ client.interceptors.request.use((config) => {
 })
 
 client.interceptors.response.use(
-  (response) => response.data,
+  (response) => {
+    const data = response.data
+    if (data && typeof data === 'object' && 'code' in data && data.code !== 0) {
+      return Promise.reject(new Error(data.message || '请求失败'))
+    }
+    return data
+  },
   (error) => {
     if (error.response?.status === 401) {
       localStorage.clear()
diff --git a/admin-web/src/api/crm.ts b/admin-web/src/api/crm.ts
index 4e023b2..b149bcc 100644
--- a/admin-web/src/api/crm.ts
+++ b/admin-web/src/api/crm.ts
@@ -8,10 +8,42 @@ export function listPersons() {
   return client.get('/api/v1/person/list')
 }
 
-export function listTags() {
-  return client.get('/api/v1/tag/list')
+export function updatePerson(id: number, data: any) {
+  return client.put(`/api/v1/person/${id}`, data)
+}
+
+export function deletePerson(id: number) {
+  return client.delete(`/api/v1/person/${id}`)
+}
+
+export function listPersonIdentities(personId: number) {
+  return client.get(`/api/v1/person/${personId}/identities`)
+}
+
+export function createPersonIdentity(personId: number, data: any) {
+  return client.post(`/api/v1/person/${personId}/identities`, data)
+}
+
+export function deletePersonIdentity(personId: number, identityId: number) {
+  return client.delete(`/api/v1/person/${personId}/identities/${identityId}`)
+}
+
+export function bindPersonTags(personId: number, data: any) {
+  return client.post(`/api/v1/person/${personId}/bind-tags`, data)
 }
 
 export function createTag(data: any) {
   return client.post('/api/v1/tag', data)
 }
+
+export function listTags() {
+  return client.get('/api/v1/tag/list')
+}
+
+export function updateTag(id: number, data: any) {
+  return client.put(`/api/v1/tag/${id}`, data)
+}
+
+export function deleteTag(id: number) {
+  return client.delete(`/api/v1/tag/${id}`)
+}
diff --git a/admin-web/src/api/inboundFlow.ts b/admin-web/src/api/inboundFlow.ts
new file mode 100644
index 0000000..c3a398d
--- /dev/null
+++ b/admin-web/src/api/inboundFlow.ts
@@ -0,0 +1,75 @@
+import client from './client'
+
+export interface FlowNodeConfig {
+  [key: string]: any
+}
+
+export interface FlowNode {
+  id: string
+  type: string
+  config: FlowNodeConfig
+}
+
+export interface FlowEdge {
+  source: string
+  target: string
+  label?: string
+}
+
+export interface FlowDefinition {
+  nodes: FlowNode[]
+  edges: FlowEdge[]
+}
+
+export interface FlowRecord {
+  id: number
+  flowCode: string
+  flowName: string
+  flowType: number
+  status: number
+  definitionJson: string | FlowDefinition
+  version?: number
+  createTime?: string
+  updateTime?: string
+}
+
+export interface SaveFlowPayload {
+  flowCode: string
+  flowName: string
+  flowType?: string
+  definitionJson: FlowDefinition
+}
+
+export function listFlows() {
+  return client.get('/api/v1/inbound/flow/list')
+}
+
+export function getFlow(flowCode: string) {
+  return client.get(`/api/v1/inbound/flow/${flowCode}`)
+}
+
+export function saveFlow(data: SaveFlowPayload) {
+  return client.post('/api/v1/inbound/flow', {
+    ...data,
+    flowType: data.flowType || 'inbound',
+  })
+}
+
+export function updateFlow(flowCode: string, data: SaveFlowPayload) {
+  return client.post(`/api/v1/inbound/flow/${flowCode}`, {
+    ...data,
+    flowType: data.flowType || 'inbound',
+  })
+}
+
+export function publishFlow(flowCode: string) {
+  return client.post(`/api/v1/inbound/flow/${flowCode}/publish`)
+}
+
+export function offlineFlow(flowCode: string) {
+  return client.post(`/api/v1/inbound/flow/${flowCode}/offline`)
+}
+
+export function deleteFlow(flowCode: string) {
+  return client.delete(`/api/v1/inbound/flow/${flowCode}`)
+}
diff --git a/admin-web/src/api/inboundWebhook.ts b/admin-web/src/api/inboundWebhook.ts
new file mode 100644
index 0000000..c388053
--- /dev/null
+++ b/admin-web/src/api/inboundWebhook.ts
@@ -0,0 +1,13 @@
+import client from './client'
+
+export function getInboundWebhookConfig() {
+  return client.get('/api/v1/account/tenant/webhook')
+}
+
+export function updateInboundWebhookConfig(data: any) {
+  return client.post('/api/v1/account/tenant/webhook', data)
+}
+
+export function testInboundWebhook(data: { url: string }) {
+  return client.post('/api/v1/account/tenant/webhook/test', data)
+}
diff --git a/admin-web/src/api/ivrFlow.ts b/admin-web/src/api/ivrFlow.ts
new file mode 100644
index 0000000..a18c30c
--- /dev/null
+++ b/admin-web/src/api/ivrFlow.ts
@@ -0,0 +1,75 @@
+import client from './client'
+
+export interface FlowNodeConfig {
+  [key: string]: any
+}
+
+export interface FlowNode {
+  id: string
+  type: string
+  config: FlowNodeConfig
+}
+
+export interface FlowEdge {
+  source: string
+  target: string
+  label?: string
+}
+
+export interface FlowDefinition {
+  nodes: FlowNode[]
+  edges: FlowEdge[]
+}
+
+export interface FlowRecord {
+  id: number
+  flowCode: string
+  flowName: string
+  flowType: number
+  status: number
+  definitionJson: string | FlowDefinition
+  version?: number
+  createTime?: string
+  updateTime?: string
+}
+
+export interface SaveFlowPayload {
+  flowCode: string
+  flowName: string
+  flowType?: string
+  definitionJson: FlowDefinition
+}
+
+export function listFlows() {
+  return client.get('/api/v1/flow/list')
+}
+
+export function getFlow(flowCode: string) {
+  return client.get(`/api/v1/flow/${flowCode}`)
+}
+
+export function saveFlow(data: SaveFlowPayload) {
+  return client.post('/api/v1/flow', {
+    ...data,
+    flowType: data.flowType || 'ivr',
+  })
+}
+
+export function updateFlow(flowCode: string, data: SaveFlowPayload) {
+  return client.post(`/api/v1/flow/${flowCode}`, {
+    ...data,
+    flowType: data.flowType || 'ivr',
+  })
+}
+
+export function publishFlow(flowCode: string) {
+  return client.post(`/api/v1/flow/${flowCode}/publish`)
+}
+
+export function offlineFlow(flowCode: string) {
+  return client.post(`/api/v1/flow/${flowCode}/offline`)
+}
+
+export function deleteFlow(flowCode: string) {
+  return client.delete(`/api/v1/flow/${flowCode}`)
+}
diff --git a/admin-web/src/api/sendPolicy.ts b/admin-web/src/api/sendPolicy.ts
new file mode 100644
index 0000000..26a9d42
--- /dev/null
+++ b/admin-web/src/api/sendPolicy.ts
@@ -0,0 +1,25 @@
+import client from './client'
+
+export function listPolicyGroups() {
+  return client.get('/api/v1/policy-group/list')
+}
+
+export function getPolicyGroup(groupCode: string) {
+  return client.get(`/api/v1/policy-group/${groupCode}`)
+}
+
+export function createPolicyGroup(data: any) {
+  return client.post('/api/v1/policy-group', data)
+}
+
+export function updatePolicyGroup(groupCode: string, data: any) {
+  return client.post(`/api/v1/policy-group/${groupCode}`, data)
+}
+
+export function updatePolicyGroupStatus(groupCode: string, status: number) {
+  return client.post(`/api/v1/policy-group/${groupCode}/status`, { status })
+}
+
+export function deletePolicyGroup(groupCode: string) {
+  return client.post(`/api/v1/policy-group/${groupCode}/delete`)
+}
diff --git a/admin-web/src/api/sendRecord.ts b/admin-web/src/api/sendRecord.ts
new file mode 100644
index 0000000..3c8de4a
--- /dev/null
+++ b/admin-web/src/api/sendRecord.ts
@@ -0,0 +1,31 @@
+import client from './client'
+
+export interface QueryRecordsParams {
+  taskId?: string
+  start?: string
+  end?: string
+  channelType?: string
+  status?: number | string
+  page?: number
+  size?: number
+}
+
+export function queryRecords(params: QueryRecordsParams) {
+  return client.get('/api/v1/send/records', { params })
+}
+
+export function getTaskStatus(taskId: string) {
+  return client.get(`/api/v1/send/${taskId}/status`)
+}
+
+export function cancelTask(taskId: string) {
+  return client.post(`/api/v1/send/${taskId}/cancel`)
+}
+
+export function testSend(data: any) {
+  return client.post('/api/v1/send/test', data)
+}
+
+export function getStatistics(start: string, end: string) {
+  return client.get('/api/v1/send/statistics', { params: { start, end } })
+}
diff --git a/admin-web/src/components/Layout.vue b/admin-web/src/components/Layout.vue
index 15444aa..bd42040 100644
--- a/admin-web/src/components/Layout.vue
+++ b/admin-web/src/components/Layout.vue
@@ -27,12 +27,21 @@
         <el-menu-item index="/inbound-flow">
           <span>入站流程</span>
         </el-menu-item>
+        <el-menu-item index="/ivr-flow">
+          <span>IVR 流程</span>
+        </el-menu-item>
         <el-menu-item index="/flow-trace">
           <span>流程追踪</span>
         </el-menu-item>
         <el-menu-item index="/message-test">
           <span>消息测试</span>
         </el-menu-item>
+        <el-menu-item index="/inbound-webhook">
+          <span>入站 Webhook</span>
+        </el-menu-item>
+        <el-menu-item index="/send-policy">
+          <span>发送策略</span>
+        </el-menu-item>
         <el-menu-item v-if="authStore.roleCodes.includes('platform_admin')" index="/tenant-management">
           <span>租户管理</span>
         </el-menu-item>
diff --git a/admin-web/src/router/index.ts b/admin-web/src/router/index.ts
index 9b7d78a..84472df 100644
--- a/admin-web/src/router/index.ts
+++ b/admin-web/src/router/index.ts
@@ -8,10 +8,13 @@ import Person from '../views/Person.vue'
 import Tag from '../views/Tag.vue'
 import SendRecord from '../views/SendRecord.vue'
 import InboundFlow from '../views/InboundFlow.vue'
+import IvrFlow from '../views/IvrFlow.vue'
 import FlowTrace from '../views/FlowTrace.vue'
 import MessageTest from '../views/MessageTest.vue'
 import TenantManagement from '../views/TenantManagement.vue'
 import UserManagement from '../views/UserManagement.vue'
+import InboundWebhook from '../views/InboundWebhook.vue'
+import SendPolicy from '../views/SendPolicy.vue'
 import Login from '../views/Login.vue'
 import { useAuthStore } from '../stores/auth'
 
@@ -34,8 +37,11 @@ const routes = [
       { path: 'tag', component: Tag, meta: { title: '标签' } },
       { path: 'send-record', component: SendRecord, meta: { title: '发送记录' } },
       { path: 'inbound-flow', component: InboundFlow, meta: { title: '入站流程' } },
+      { path: 'ivr-flow', component: IvrFlow, meta: { title: 'IVR 流程' } },
       { path: 'flow-trace', component: FlowTrace, meta: { title: '流程追踪' } },
       { path: 'message-test', component: MessageTest, meta: { title: '消息测试' } },
+      { path: 'inbound-webhook', component: InboundWebhook, meta: { title: '入站 Webhook' } },
+      { path: 'send-policy', component: SendPolicy, meta: { title: '发送策略' } },
       { path: 'tenant-management', component: TenantManagement, meta: { title: '租户管理' } },
       { path: 'user-management', component: UserManagement, meta: { title: '用户管理' } },
     ],
diff --git a/admin-web/src/stores/auth.ts b/admin-web/src/stores/auth.ts
index 8ee8c1f..5f74f6c 100644
--- a/admin-web/src/stores/auth.ts
+++ b/admin-web/src/stores/auth.ts
@@ -1,11 +1,21 @@
 import { defineStore } from 'pinia'
 import { ref, computed } from 'vue'
 
+function parseJson(value: string | null): string[] {
+  if (!value) return []
+  try {
+    const parsed = JSON.parse(value)
+    return Array.isArray(parsed) ? parsed : []
+  } catch {
+    return []
+  }
+}
+
 export const useAuthStore = defineStore('auth', () => {
   const token = ref(localStorage.getItem('mci-token') || '')
   const tenantCode = ref(localStorage.getItem('mci-tenant-code') || '')
-  const username = ref('')
-  const roleCodes = ref<string[]>([])
+  const username = ref(localStorage.getItem('mci-username') || '')
+  const roleCodes = ref<string[]>(parseJson(localStorage.getItem('mci-role-codes')))
 
   const isLoggedIn = computed(() => !!token.value)
 
@@ -16,6 +26,8 @@ export const useAuthStore = defineStore('auth', () => {
     roleCodes.value = roles
     localStorage.setItem('mci-token', t)
     localStorage.setItem('mci-tenant-code', tc)
+    localStorage.setItem('mci-username', user)
+    localStorage.setItem('mci-role-codes', JSON.stringify(roles))
   }
 
   function clearAuth() {
@@ -25,6 +37,8 @@ export const useAuthStore = defineStore('auth', () => {
     roleCodes.value = []
     localStorage.removeItem('mci-token')
     localStorage.removeItem('mci-tenant-code')
+    localStorage.removeItem('mci-username')
+    localStorage.removeItem('mci-role-codes')
   }
 
   return { token, tenantCode, username, roleCodes, isLoggedIn, setAuth, clearAuth }
diff --git a/admin-web/src/views/ChannelAccount.vue b/admin-web/src/views/ChannelAccount.vue
index 2620fb2..0c30cbb 100644
--- a/admin-web/src/views/ChannelAccount.vue
+++ b/admin-web/src/views/ChannelAccount.vue
@@ -1,68 +1,192 @@
 <template>
   <div>
-    <el-form :model="form" inline>
-      <el-form-item label="账号类型">
-        <el-select v-model="form.accountType" placeholder="类型">
-          <el-option label="企微内部账号" :value="1" />
-          <el-option label="企微应用" :value="2" />
-          <el-option label="pywechat 个人号" :value="3" />
-        </el-select>
-      </el-form-item>
-      <el-form-item label="渠道">
-        <el-input v-model="form.channelType" placeholder="wecom" />
-      </el-form-item>
-      <el-form-item label="所属主体">
-        <el-select v-model="form.subjectId" placeholder="选择主体">
-          <el-option
-            v-for="s in subjects"
-            :key="s.id"
-            :label="s.subjectName"
-            :value="s.id"
-          />
-        </el-select>
-      </el-form-item>
-      <el-form-item label="账号ID">
-        <el-input v-model="form.accountId" placeholder="账号唯一标识" />
-      </el-form-item>
-      <el-form-item label="名称">
-        <el-input v-model="form.accountName" placeholder="名称" />
-      </el-form-item>
-      <el-form-item label="会话存档">
-        <el-switch v-model="form.sessionArchiveEnabled" />
-      </el-form-item>
-      <el-form-item>
-        <el-button type="primary" @click="handleCreate">创建</el-button>
-      </el-form-item>
-    </el-form>
+    <div class="toolbar">
+      <el-button type="primary" @click="openCreateDialog">创建渠道账号</el-button>
+    </div>
 
     <el-table :data="accounts" border>
       <el-table-column prop="id" label="ID" width="80" />
-      <el-table-column prop="accountType" label="类型" />
-      <el-table-column prop="channelType" label="渠道" />
+      <el-table-column prop="accountType" label="类型" width="140">
+        <template #default="{ row }">
+          {{ accountTypeLabel(row.accountType) }}
+        </template>
+      </el-table-column>
+      <el-table-column prop="channelType" label="渠道" width="100">
+        <template #default="{ row }">
+          {{ channelLabel(row.channelType) }}
+        </template>
+      </el-table-column>
       <el-table-column prop="accountId" label="账号ID" />
       <el-table-column prop="accountName" label="名称" />
-      <el-table-column prop="loginStatus" label="登录状态" />
-      <el-table-column prop="onlineStatus" label="在线状态" />
+      <el-table-column prop="loginStatus" label="登录状态" width="100">
+        <template #default="{ row }">
+          <el-tag :type="row.loginStatus === 1 ? 'success' : 'info'">
+            {{ row.loginStatus === 1 ? '已登录' : '未登录' }}
+          </el-tag>
+        </template>
+      </el-table-column>
+      <el-table-column label="在线状态" width="160">
+        <template #default="{ row }">
+          <span class="status-dot" :class="row.onlineStatus === 1 ? 'online' : 'offline'" />
+          {{ row.onlineStatus === 1 ? '在线' : '离线' }}
+          <div v-if="row.lastHeartbeat" class="heartbeat">{{ row.lastHeartbeat }}</div>
+        </template>
+      </el-table-column>
+      <el-table-column prop="status" label="状态" width="90">
+        <template #default="{ row }">
+          <el-tag :type="row.status === 1 ? 'success' : 'info'">
+            {{ row.status === 1 ? '启用' : '禁用' }}
+          </el-tag>
+        </template>
+      </el-table-column>
+      <el-table-column label="操作" width="420">
+        <template #default="{ row }">
+          <el-button size="small" @click="openEditDialog(row)">编辑</el-button>
+          <el-button size="small" type="danger" @click="handleDelete(row)">删除</el-button>
+          <el-switch
+            v-model="row.status"
+            :active-value="1"
+            :inactive-value="0"
+            style="margin: 0 8px"
+            @change="(val: any) => handleStatusChange(row, val)"
+          />
+          <el-button size="small" type="primary" @click="handleInit(row)">初始化</el-button>
+          <el-button size="small" @click="handleSync(row)">同步会话</el-button>
+          <el-button size="small" @click="handleRefreshStatus(row)">刷新状态</el-button>
+        </template>
+      </el-table-column>
     </el-table>
+
+    <el-dialog v-model="dialogVisible" :title="isEdit ? '编辑渠道账号' : '创建渠道账号'" width="600px">
+      <el-form :model="dialogForm" label-width="120px">
+        <el-form-item label="账号类型">
+          <el-select v-model="dialogForm.accountType" placeholder="类型">
+            <el-option label="企微内部账号" :value="1" />
+            <el-option label="企微应用" :value="2" />
+            <el-option label="pywechat 个人号" :value="3" />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="渠道">
+          <el-input v-model="dialogForm.channelType" placeholder="wecom" />
+        </el-form-item>
+        <el-form-item label="所属主体">
+          <el-select v-model="dialogForm.subjectId" placeholder="选择主体" clearable>
+            <el-option
+              v-for="s in subjects"
+              :key="s.id"
+              :label="s.subjectName"
+              :value="s.id"
+            />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="账号ID">
+          <el-input v-model="dialogForm.accountId" placeholder="账号唯一标识" />
+        </el-form-item>
+        <el-form-item label="名称">
+          <el-input v-model="dialogForm.accountName" placeholder="名称" />
+        </el-form-item>
+        <el-form-item label="会话存档">
+          <el-switch v-model="dialogForm.sessionArchiveEnabled" :active-value="1" :inactive-value="0" />
+        </el-form-item>
+        <el-form-item label="Server Host">
+          <el-input v-model="dialogForm.serverHost" placeholder="服务地址" />
+        </el-form-item>
+        <el-form-item label="扩展信息">
+          <el-input v-model="dialogForm.extInfo" type="textarea" :rows="3" placeholder="JSON 扩展信息" />
+        </el-form-item>
+      </el-form>
+      <template #footer>
+        <el-button @click="dialogVisible = false">取消</el-button>
+        <el-button type="primary" @click="handleSave">保存</el-button>
+      </template>
+    </el-dialog>
+
+    <el-dialog v-model="initDialogVisible" title="初始化结果" width="480px">
+      <div v-if="initResult">
+        <el-result
+          :icon="initResult.success ? 'success' : 'warning'"
+          :title="initResult.success ? '初始化成功' : '初始化失败'"
+          :sub-title="initResult.message"
+        />
+        <div v-if="initResult.qrCodeUrl" class="qr-code">
+          <p>请使用微信扫描二维码登录：</p>
+          <el-image :src="initResult.qrCodeUrl" fit="contain" style="width: 200px; height: 200px" />
+        </div>
+      </div>
+    </el-dialog>
   </div>
 </template>
 
 <script setup lang="ts">
 import { onMounted, reactive, ref } from 'vue'
-import { ElMessage } from 'element-plus'
-import { createChannelAccount, listChannelAccounts, listChannelSubjects } from '@/api/channel'
+import { ElMessage, ElMessageBox } from 'element-plus'
+import { listChannelSubjects } from '@/api/channelSubject'
+import {
+  createChannelAccount,
+  listChannelAccounts,
+  updateChannelAccount,
+  deleteChannelAccount,
+  updateChannelAccountStatus,
+  getChannelAccountStatus,
+  initChannelAccount,
+  syncChannelAccountConversations,
+} from '@/api/channelAccount'
 
-const form = reactive({
+const accounts = ref<any[]>([])
+const subjects = ref<any[]>([])
+const dialogVisible = ref(false)
+const isEdit = ref(false)
+const editingId = ref<number | null>(null)
+
+const dialogForm = reactive({
   accountType: 1,
   channelType: 'wecom',
   subjectId: undefined as number | undefined,
   accountId: '',
   accountName: '',
-  sessionArchiveEnabled: false,
+  sessionArchiveEnabled: 0,
+  serverHost: '',
+  extInfo: '',
 })
 
-const accounts = ref<any[]>([])
-const subjects = ref<any[]>([])
+const initDialogVisible = ref(false)
+const initResult = ref<any>(null)
+
+function resetDialogForm() {
+  dialogForm.accountType = 1
+  dialogForm.channelType = 'wecom'
+  dialogForm.subjectId = undefined
+  dialogForm.accountId = ''
+  dialogForm.accountName = ''
+  dialogForm.sessionArchiveEnabled = 0
+  dialogForm.serverHost = ''
+  dialogForm.extInfo = ''
+}
+
+function fillDialogForm(row: any) {
+  dialogForm.accountType = row.accountType ?? 1
+  dialogForm.channelType = row.channelType ?? 'wecom'
+  dialogForm.subjectId = row.subjectId
+  dialogForm.accountId = row.accountId ?? ''
+  dialogForm.accountName = row.accountName ?? ''
+  dialogForm.sessionArchiveEnabled = row.sessionArchiveEnabled ?? 0
+  dialogForm.serverHost = row.serverHost ?? ''
+  dialogForm.extInfo = row.extInfo ?? ''
+}
+
+function openCreateDialog() {
+  isEdit.value = false
+  editingId.value = null
+  resetDialogForm()
+  dialogVisible.value = true
+}
+
+function openEditDialog(row: any) {
+  isEdit.value = true
+  editingId.value = row.id
+  fillDialogForm(row)
+  dialogVisible.value = true
+}
 
 async function loadAccounts() {
   try {
@@ -82,18 +206,138 @@ async function loadSubjects() {
   }
 }
 
-async function handleCreate() {
+async function handleSave() {
   try {
-    const res: any = await createChannelAccount(form)
-    accounts.value.unshift(res.data)
-    ElMessage.success('创建成功')
+    if (isEdit.value && editingId.value != null) {
+      await updateChannelAccount(editingId.value, dialogForm)
+      ElMessage.success('更新成功')
+    } else {
+      await createChannelAccount(dialogForm)
+      ElMessage.success('创建成功')
+    }
+    dialogVisible.value = false
+    await loadAccounts()
   } catch (e: any) {
     ElMessage.error(e.message)
   }
 }
 
+async function handleDelete(row: any) {
+  try {
+    await ElMessageBox.confirm('确认删除该渠道账号？', '提示', { type: 'warning' })
+    await deleteChannelAccount(row.id)
+    ElMessage.success('删除成功')
+    await loadAccounts()
+  } catch (e: any) {
+    if (e !== 'cancel') {
+      ElMessage.error(e.message)
+    }
+  }
+}
+
+async function handleStatusChange(row: any, val: any) {
+  try {
+    await updateChannelAccountStatus(row.id, { status: val })
+    ElMessage.success('状态更新成功')
+    await loadAccounts()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+    await loadAccounts()
+  }
+}
+
+async function handleInit(row: any) {
+  try {
+    const res: any = await initChannelAccount({
+      channelType: row.channelType,
+      accountType: row.accountType,
+      accountId: row.id,
+      subjectId: row.subjectId,
+      config: {},
+    })
+    initResult.value = res.data || null
+    initDialogVisible.value = true
+    if (initResult.value?.success) {
+      await loadAccounts()
+    }
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handleSync(row: any) {
+  try {
+    const res: any = await syncChannelAccountConversations(row.id)
+    ElMessage.success(`同步完成，共 ${res.data?.syncedCount ?? 0} 条会话`)
+    await loadAccounts()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handleRefreshStatus(row: any) {
+  try {
+    const res: any = await getChannelAccountStatus(row.id)
+    const idx = accounts.value.findIndex((a) => a.id === row.id)
+    if (idx >= 0) {
+      accounts.value[idx] = { ...accounts.value[idx], ...res.data }
+    }
+    ElMessage.success('状态已刷新')
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+function accountTypeLabel(type: number) {
+  const map: Record<number, string> = {
+    1: '企微内部账号',
+    2: '企微应用',
+    3: 'pywechat 个人号',
+  }
+  return map[type] || type
+}
+
+function channelLabel(type: string) {
+  const map: Record<string, string> = {
+    wecom: '企微',
+    wechat_personal: '个微',
+    dingtalk: '钉钉',
+    feishu: '飞书',
+    ivr: 'IVR',
+  }
+  return map[type] || type
+}
+
 onMounted(() => {
   loadAccounts()
   loadSubjects()
 })
 </script>
+
+<style scoped>
+.toolbar {
+  margin-bottom: 16px;
+}
+.status-dot {
+  display: inline-block;
+  width: 8px;
+  height: 8px;
+  border-radius: 50%;
+  margin-right: 6px;
+}
+.status-dot.online {
+  background-color: #67c23a;
+}
+.status-dot.offline {
+  background-color: #909399;
+}
+.heartbeat {
+  font-size: 12px;
+  color: #909399;
+  margin-top: 4px;
+}
+.qr-code {
+  text-align: center;
+  margin-top: 12px;
+}
+</style>
diff --git a/admin-web/src/views/ChannelSubject.vue b/admin-web/src/views/ChannelSubject.vue
index 736c9e4..ceacfda 100644
--- a/admin-web/src/views/ChannelSubject.vue
+++ b/admin-web/src/views/ChannelSubject.vue
@@ -1,59 +1,173 @@
 <template>
   <div>
-    <el-form :model="form" inline>
-      <el-form-item label="渠道">
-        <el-select v-model="form.channelType" placeholder="选择渠道">
-          <el-option label="企微" value="wecom" />
-          <el-option label="钉钉" value="dingtalk" />
-          <el-option label="飞书" value="feishu" />
-        </el-select>
-      </el-form-item>
-      <el-form-item label="主体编码">
-        <el-input v-model="form.subjectCode" placeholder="主体编码" />
-      </el-form-item>
-      <el-form-item label="主体名称">
-        <el-input v-model="form.subjectName" placeholder="主体名称" />
-      </el-form-item>
-      <el-form-item label="CorpID">
-        <el-input v-model="form.corpId" placeholder="CorpID" />
-      </el-form-item>
-      <el-form-item label="AgentID">
-        <el-input v-model="form.agentId" placeholder="AgentID" />
-      </el-form-item>
-      <el-form-item label="AgentSecret">
-        <el-input v-model="form.agentSecret" placeholder="AgentSecret" />
-      </el-form-item>
-      <el-form-item>
-        <el-button type="primary" @click="handleCreate">创建</el-button>
-      </el-form-item>
-    </el-form>
+    <div class="toolbar">
+      <el-button type="primary" @click="openCreateDialog">创建渠道主体</el-button>
+    </div>
 
     <el-table :data="subjects" border>
       <el-table-column prop="id" label="ID" width="80" />
-      <el-table-column prop="channelType" label="渠道" />
+      <el-table-column prop="channelType" label="渠道">
+        <template #default="{ row }">
+          {{ channelLabel(row.channelType) }}
+        </template>
+      </el-table-column>
       <el-table-column prop="subjectCode" label="编码" />
       <el-table-column prop="subjectName" label="名称" />
       <el-table-column prop="corpId" label="CorpID" />
-      <el-table-column prop="status" label="状态" />
+      <el-table-column prop="status" label="状态" width="100">
+        <template #default="{ row }">
+          <el-tag :type="row.status === 1 ? 'success' : 'info'">
+            {{ row.status === 1 ? '启用' : '禁用' }}
+          </el-tag>
+        </template>
+      </el-table-column>
+      <el-table-column label="操作" width="340">
+        <template #default="{ row }">
+          <el-button size="small" @click="openEditDialog(row)">编辑</el-button>
+          <el-button size="small" type="danger" @click="handleDelete(row)">删除</el-button>
+          <el-switch
+            v-model="row.status"
+            :active-value="1"
+            :inactive-value="0"
+            style="margin: 0 12px"
+            @change="(val: any) => handleStatusChange(row, val)"
+          />
+          <el-button size="small" @click="openDetail(row)">详情</el-button>
+        </template>
+      </el-table-column>
     </el-table>
+
+    <el-dialog v-model="dialogVisible" :title="isEdit ? '编辑渠道主体' : '创建渠道主体'" width="600px">
+      <el-form :model="dialogForm" label-width="120px">
+        <el-form-item label="渠道">
+          <el-select v-model="dialogForm.channelType" placeholder="选择渠道">
+            <el-option label="企微" value="wecom" />
+            <el-option label="钉钉" value="dingtalk" />
+            <el-option label="飞书" value="feishu" />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="主体编码">
+          <el-input v-model="dialogForm.subjectCode" placeholder="主体编码" />
+        </el-form-item>
+        <el-form-item label="主体名称">
+          <el-input v-model="dialogForm.subjectName" placeholder="主体名称" />
+        </el-form-item>
+        <el-form-item label="CorpID">
+          <el-input v-model="dialogForm.corpId" placeholder="CorpID" />
+        </el-form-item>
+        <el-form-item label="CorpSecret">
+          <el-input v-model="dialogForm.corpSecret" placeholder="CorpSecret" />
+        </el-form-item>
+        <el-form-item label="AgentID">
+          <el-input v-model="dialogForm.agentId" placeholder="AgentID" />
+        </el-form-item>
+        <el-form-item label="AgentSecret">
+          <el-input v-model="dialogForm.agentSecret" placeholder="AgentSecret" />
+        </el-form-item>
+        <el-form-item label="会话存档">
+          <el-switch v-model="dialogForm.sessionArchiveEnabled" :active-value="1" :inactive-value="0" />
+        </el-form-item>
+        <el-form-item label="会话存档私钥">
+          <el-input v-model="dialogForm.sessionArchivePrivateKey" type="textarea" :rows="3" placeholder="会话存档私钥" />
+        </el-form-item>
+      </el-form>
+      <template #footer>
+        <el-button @click="dialogVisible = false">取消</el-button>
+        <el-button type="primary" @click="handleSave">保存</el-button>
+      </template>
+    </el-dialog>
+
+    <el-drawer v-model="drawerVisible" title="渠道主体详情" size="420px">
+      <el-descriptions :column="1" border>
+        <el-descriptions-item label="ID">{{ currentSubject.id }}</el-descriptions-item>
+        <el-descriptions-item label="渠道">{{ channelLabel(currentSubject.channelType) }}</el-descriptions-item>
+        <el-descriptions-item label="主体编码">{{ currentSubject.subjectCode }}</el-descriptions-item>
+        <el-descriptions-item label="主体名称">{{ currentSubject.subjectName }}</el-descriptions-item>
+        <el-descriptions-item label="CorpID">{{ mask(currentSubject.corpId) }}</el-descriptions-item>
+        <el-descriptions-item label="CorpSecret">{{ mask(currentSubject.corpSecret) }}</el-descriptions-item>
+        <el-descriptions-item label="AgentID">{{ mask(currentSubject.agentId) }}</el-descriptions-item>
+        <el-descriptions-item label="AgentSecret">{{ mask(currentSubject.agentSecret) }}</el-descriptions-item>
+        <el-descriptions-item label="会话存档">{{ currentSubject.sessionArchiveEnabled === 1 ? '开启' : '关闭' }}</el-descriptions-item>
+        <el-descriptions-item label="状态">{{ currentSubject.status === 1 ? '启用' : '禁用' }}</el-descriptions-item>
+        <el-descriptions-item label="创建时间">{{ currentSubject.createTime }}</el-descriptions-item>
+      </el-descriptions>
+    </el-drawer>
   </div>
 </template>
 
 <script setup lang="ts">
 import { onMounted, reactive, ref } from 'vue'
-import { ElMessage } from 'element-plus'
-import { createChannelSubject, listChannelSubjects } from '@/api/channel'
+import { ElMessage, ElMessageBox } from 'element-plus'
+import {
+  createChannelSubject,
+  listChannelSubjects,
+  updateChannelSubject,
+  deleteChannelSubject,
+  updateChannelSubjectStatus,
+} from '@/api/channelSubject'
 
-const form = reactive({
+const subjects = ref<any[]>([])
+const dialogVisible = ref(false)
+const isEdit = ref(false)
+const editingId = ref<number | null>(null)
+
+const dialogForm = reactive({
   channelType: 'wecom',
   subjectCode: '',
   subjectName: '',
   corpId: '',
+  corpSecret: '',
   agentId: '',
   agentSecret: '',
+  sessionArchiveEnabled: 0,
+  sessionArchivePrivateKey: '',
 })
 
-const subjects = ref<any[]>([])
+const drawerVisible = ref(false)
+const currentSubject = ref<any>({})
+
+function resetDialogForm() {
+  dialogForm.channelType = 'wecom'
+  dialogForm.subjectCode = ''
+  dialogForm.subjectName = ''
+  dialogForm.corpId = ''
+  dialogForm.corpSecret = ''
+  dialogForm.agentId = ''
+  dialogForm.agentSecret = ''
+  dialogForm.sessionArchiveEnabled = 0
+  dialogForm.sessionArchivePrivateKey = ''
+}
+
+function fillDialogForm(row: any) {
+  dialogForm.channelType = row.channelType ?? 'wecom'
+  dialogForm.subjectCode = row.subjectCode ?? ''
+  dialogForm.subjectName = row.subjectName ?? ''
+  dialogForm.corpId = row.corpId ?? ''
+  dialogForm.corpSecret = row.corpSecret ?? ''
+  dialogForm.agentId = row.agentId ?? ''
+  dialogForm.agentSecret = row.agentSecret ?? ''
+  dialogForm.sessionArchiveEnabled = row.sessionArchiveEnabled ?? 0
+  dialogForm.sessionArchivePrivateKey = row.sessionArchivePrivateKey ?? ''
+}
+
+function openCreateDialog() {
+  isEdit.value = false
+  editingId.value = null
+  resetDialogForm()
+  dialogVisible.value = true
+}
+
+function openEditDialog(row: any) {
+  isEdit.value = true
+  editingId.value = row.id
+  fillDialogForm(row)
+  dialogVisible.value = true
+}
+
+function openDetail(row: any) {
+  currentSubject.value = { ...row }
+  drawerVisible.value = true
+}
 
 async function loadSubjects() {
   try {
@@ -64,15 +178,66 @@ async function loadSubjects() {
   }
 }
 
-async function handleCreate() {
+async function handleSave() {
   try {
-    const res: any = await createChannelSubject(form)
-    subjects.value.unshift(res.data)
-    ElMessage.success('创建成功')
+    if (isEdit.value && editingId.value != null) {
+      await updateChannelSubject(editingId.value, dialogForm)
+      ElMessage.success('更新成功')
+    } else {
+      await createChannelSubject(dialogForm)
+      ElMessage.success('创建成功')
+    }
+    dialogVisible.value = false
+    await loadSubjects()
   } catch (e: any) {
     ElMessage.error(e.message)
   }
 }
 
+async function handleDelete(row: any) {
+  try {
+    await ElMessageBox.confirm('确认删除该渠道主体？', '提示', { type: 'warning' })
+    await deleteChannelSubject(row.id)
+    ElMessage.success('删除成功')
+    await loadSubjects()
+  } catch (e: any) {
+    if (e !== 'cancel') {
+      ElMessage.error(e.message)
+    }
+  }
+}
+
+async function handleStatusChange(row: any, val: any) {
+  try {
+    await updateChannelSubjectStatus(row.id, { status: val })
+    ElMessage.success('状态更新成功')
+    await loadSubjects()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+    await loadSubjects()
+  }
+}
+
+function channelLabel(type: string) {
+  const map: Record<string, string> = {
+    wecom: '企微',
+    dingtalk: '钉钉',
+    feishu: '飞书',
+  }
+  return map[type] || type
+}
+
+function mask(value: string) {
+  if (!value) return '-'
+  if (value.length <= 4) return '****'
+  return value.slice(0, 2) + '****' + value.slice(-2)
+}
+
 onMounted(loadSubjects)
 </script>
+
+<style scoped>
+.toolbar {
+  margin-bottom: 16px;
+}
+</style>
diff --git a/admin-web/src/views/Conversation.vue b/admin-web/src/views/Conversation.vue
index 5f90592..06e23ca 100644
--- a/admin-web/src/views/Conversation.vue
+++ b/admin-web/src/views/Conversation.vue
@@ -1,54 +1,99 @@
 <template>
   <div>
-    <el-form :model="form" inline>
-      <el-form-item label="会话类型">
-        <el-select v-model="form.conversationType" placeholder="类型">
-          <el-option label="单聊" :value="1" />
-          <el-option label="群聊" :value="2" />
-        </el-select>
-      </el-form-item>
-      <el-form-item label="渠道">
-        <el-input v-model="form.channelType" placeholder="wecom" />
-      </el-form-item>
-      <el-form-item label="渠道会话ID">
-        <el-input v-model="form.channelConversationId" placeholder="roomid_xxx" />
-      </el-form-item>
-      <el-form-item label="名称">
-        <el-input v-model="form.conversationName" placeholder="群名称" />
-      </el-form-item>
-      <el-form-item label="负责人">
-        <el-select v-model="form.ownerAccountId" placeholder="选择负责人账号">
-          <el-option
-            v-for="a in accounts"
-            :key="a.id"
-            :label="a.accountName"
-            :value="a.id"
-          />
-        </el-select>
-      </el-form-item>
-      <el-form-item>
-        <el-button type="primary" @click="handleCreate">创建</el-button>
-      </el-form-item>
-    </el-form>
+    <div class="toolbar">
+      <el-button type="primary" @click="openCreateDialog">创建会话</el-button>
+    </div>
 
     <el-table :data="conversations" border>
       <el-table-column prop="id" label="ID" width="80" />
-      <el-table-column prop="conversationType" label="类型" />
-      <el-table-column prop="channelType" label="渠道" />
-      <el-table-column prop="channelConversationId" label="渠道会话ID" />
-      <el-table-column prop="conversationName" label="名称" />
-      <el-table-column prop="status" label="状态" />
-      <el-table-column label="操作" width="120">
+      <el-table-column prop="conversationType" label="类型" width="100">
         <template #default="{ row }">
-          <el-button link type="primary" @click="openBind(row)">绑定账号</el-button>
+          {{ formatConversationType(row.conversationType) }}
+        </template>
+      </el-table-column>
+      <el-table-column prop="channelType" label="渠道" />
+      <el-table-column prop="channelConversationId" label="渠道会话ID" show-overflow-tooltip />
+      <el-table-column prop="conversationName" label="名称" />
+      <el-table-column prop="ownerAccountId" label="负责人">
+        <template #default="{ row }">
+          {{ formatAccountName(row.ownerAccountId) }}
+        </template>
+      </el-table-column>
+      <el-table-column prop="status" label="状态" width="100">
+        <template #default="{ row }">
+          <el-tag :type="row.status === 1 ? 'success' : 'info'">
+            {{ row.status === 1 ? '启用' : '禁用' }}
+          </el-tag>
+        </template>
+      </el-table-column>
+      <el-table-column label="操作" width="260">
+        <template #default="{ row }">
+          <div class="op-row">
+            <el-button size="small" @click="openEditDialog(row)">编辑</el-button>
+            <el-button size="small" type="danger" @click="handleDelete(row)">删除</el-button>
+            <el-switch
+              v-model="row.status"
+              :active-value="1"
+              :inactive-value="0"
+              style="margin-left: 12px"
+              @change="(val: any) => handleStatusChange(row, val)"
+            />
+          </div>
+          <div class="op-row" style="margin-top: 6px;">
+            <el-button link type="primary" size="small" @click="openBindAccount(row)">绑定账号</el-button>
+            <el-button link type="primary" size="small" @click="openBindTags(row)">绑定标签</el-button>
+          </div>
         </template>
       </el-table-column>
     </el-table>
 
-    <el-dialog v-model="bindVisible" title="绑定账号" width="500px">
-      <el-form :model="bindForm" label-width="100px">
+    <el-dialog v-model="dialogVisible" :title="isEdit ? '编辑会话' : '创建会话'" width="600px">
+      <el-form :model="dialogForm" label-width="120px">
+        <el-form-item label="会话类型">
+          <el-select v-model="dialogForm.conversationType" placeholder="类型" style="width: 100%">
+            <el-option label="单聊" :value="1" />
+            <el-option label="群聊" :value="2" />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="渠道">
+          <el-input v-model="dialogForm.channelType" placeholder="wecom" />
+        </el-form-item>
+        <el-form-item label="渠道会话ID">
+          <el-input v-model="dialogForm.channelConversationId" :disabled="isEdit" placeholder="roomid_xxx" />
+        </el-form-item>
+        <el-form-item label="名称">
+          <el-input v-model="dialogForm.conversationName" placeholder="群名称" />
+        </el-form-item>
+        <el-form-item label="负责人">
+          <el-select v-model="dialogForm.ownerAccountId" placeholder="选择负责人账号" style="width: 100%">
+            <el-option
+              v-for="a in accounts"
+              :key="a.id"
+              :label="a.accountName"
+              :value="a.id"
+            />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="状态">
+          <el-switch
+            v-model="dialogForm.status"
+            :active-value="1"
+            :inactive-value="0"
+            active-text="启用"
+            inactive-text="禁用"
+          />
+        </el-form-item>
+      </el-form>
+      <template #footer>
+        <el-button @click="dialogVisible = false">取消</el-button>
+        <el-button type="primary" @click="handleSave">保存</el-button>
+      </template>
+    </el-dialog>
+
+    <el-dialog v-model="bindAccountVisible" title="绑定账号" width="500px">
+      <el-form :model="bindAccountForm" label-width="100px">
         <el-form-item label="账号">
-          <el-select v-model="bindForm.accountId" placeholder="选择账号">
+          <el-select v-model="bindAccountForm.accountId" placeholder="选择账号" style="width: 100%">
             <el-option
               v-for="a in accounts"
               :key="a.id"
@@ -58,7 +103,7 @@
           </el-select>
         </el-form-item>
         <el-form-item label="绑定类型">
-          <el-select v-model="bindForm.bindingType" placeholder="选择绑定类型">
+          <el-select v-model="bindAccountForm.bindingType" placeholder="选择绑定类型" style="width: 100%">
             <el-option label="发送主号" :value="1" />
             <el-option label="发送备用号" :value="2" />
             <el-option label="接收主号" :value="3" />
@@ -67,40 +112,114 @@
         </el-form-item>
       </el-form>
       <template #footer>
-        <el-button @click="bindVisible = false">取消</el-button>
-        <el-button type="primary" @click="handleBind">确认</el-button>
+        <el-button @click="bindAccountVisible = false">取消</el-button>
+        <el-button type="primary" @click="handleBindAccount">确认</el-button>
+      </template>
+    </el-dialog>
+
+    <el-dialog v-model="bindTagsVisible" title="绑定标签" width="500px">
+      <el-form :model="bindTagsForm" label-width="80px">
+        <el-form-item label="标签">
+          <el-select v-model="bindTagsForm.tagIds" multiple placeholder="选择标签" style="width: 100%">
+            <el-option
+              v-for="t in tags"
+              :key="t.id"
+              :label="t.tagName"
+              :value="t.id"
+            />
+          </el-select>
+        </el-form-item>
+      </el-form>
+      <template #footer>
+        <el-button @click="bindTagsVisible = false">取消</el-button>
+        <el-button type="primary" @click="handleBindTags">确认</el-button>
       </template>
     </el-dialog>
   </div>
 </template>
 
 <script setup lang="ts">
-import { onMounted, reactive, ref } from 'vue'
-import { ElMessage } from 'element-plus'
+import { computed, onMounted, reactive, ref } from 'vue'
+import { ElMessage, ElMessageBox } from 'element-plus'
 import {
   bindConversationAccount,
+  bindConversationTags,
   createConversation,
+  deleteConversation,
   listChannelAccounts,
   listConversations,
+  updateConversation,
 } from '@/api/channel'
+import { listTags } from '@/api/crm'
 
-const form = reactive({
+const conversations = ref<any[]>([])
+const accounts = ref<any[]>([])
+const tags = ref<any[]>([])
+
+const dialogVisible = ref(false)
+const isEdit = ref(false)
+const editingId = ref<number | null>(null)
+
+const dialogForm = reactive({
   conversationType: 2,
   channelType: 'wecom',
   channelConversationId: '',
   conversationName: '',
   ownerAccountId: undefined as number | undefined,
+  status: 1,
 })
 
-const conversations = ref<any[]>([])
-const accounts = ref<any[]>([])
-const bindVisible = ref(false)
-const currentConversationId = ref<number | undefined>()
-const bindForm = reactive({
-  accountId: undefined as number | undefined,
-  bindingType: 1,
+function resetDialogForm() {
+  dialogForm.conversationType = 2
+  dialogForm.channelType = 'wecom'
+  dialogForm.channelConversationId = ''
+  dialogForm.conversationName = ''
+  dialogForm.ownerAccountId = undefined
+  dialogForm.status = 1
+}
+
+function fillDialogForm(row: any) {
+  dialogForm.conversationType = row.conversationType ?? 2
+  dialogForm.channelType = row.channelType ?? 'wecom'
+  dialogForm.channelConversationId = row.channelConversationId ?? ''
+  dialogForm.conversationName = row.conversationName ?? ''
+  dialogForm.ownerAccountId = row.ownerAccountId
+  dialogForm.status = row.status ?? 1
+}
+
+function openCreateDialog() {
+  isEdit.value = false
+  editingId.value = null
+  resetDialogForm()
+  dialogVisible.value = true
+}
+
+function openEditDialog(row: any) {
+  isEdit.value = true
+  editingId.value = row.id
+  fillDialogForm(row)
+  dialogVisible.value = true
+}
+
+const accountMap = computed(() => {
+  const map = new Map<number, string>()
+  for (const a of accounts.value) {
+    map.set(a.id, a.accountName)
+  }
+  return map
 })
 
+function formatAccountName(id: number | undefined) {
+  if (id == null) return '-'
+  return accountMap.value.get(id) || id
+}
+
+function formatConversationType(type: number | undefined) {
+  if (type === 1) return '单聊'
+  if (type === 2) return '群聊'
+  return type ?? '-'
+}
+
 async function loadConversations() {
   try {
     const res: any = await listConversations()
@@ -119,37 +238,136 @@ async function loadAccounts() {
   }
 }
 
-async function handleCreate() {
+async function loadTags() {
   try {
-    const res: any = await createConversation(form)
-    conversations.value.unshift(res.data)
-    ElMessage.success('创建成功')
+    const res: any = await listTags()
+    tags.value = res.data || []
   } catch (e: any) {
     ElMessage.error(e.message)
   }
 }
 
-function openBind(row: any) {
-  currentConversationId.value = row.id
-  bindForm.accountId = undefined
-  bindForm.bindingType = 1
-  bindVisible.value = true
+async function handleSave() {
+  if (!dialogForm.channelType || !dialogForm.channelConversationId) {
+    ElMessage.warning('请填写渠道和渠道会话ID')
+    return
+  }
+  try {
+    const payload = {
+      conversationType: dialogForm.conversationType,
+      channelType: dialogForm.channelType,
+      channelConversationId: dialogForm.channelConversationId,
+      conversationName: dialogForm.conversationName,
+      ownerAccountId: dialogForm.ownerAccountId,
+      status: dialogForm.status,
+    }
+    if (isEdit.value && editingId.value != null) {
+      await updateConversation(editingId.value, payload)
+      ElMessage.success('更新成功')
+    } else {
+      const res: any = await createConversation(payload)
+      conversations.value.unshift(res.data)
+      ElMessage.success('创建成功')
+    }
+    dialogVisible.value = false
+    await loadConversations()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
 }
 
-async function handleBind() {
+async function handleStatusChange(row: any, val: any) {
+  try {
+    await updateConversation(row.id, {
+      conversationType: row.conversationType,
+      channelType: row.channelType,
+      channelConversationId: row.channelConversationId,
+      conversationName: row.conversationName,
+      ownerAccountId: row.ownerAccountId,
+      status: val,
+    })
+    ElMessage.success('状态更新成功')
+    await loadConversations()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+    await loadConversations()
+  }
+}
+
+async function handleDelete(row: any) {
+  try {
+    await ElMessageBox.confirm(
+      `确定删除会话「${row.conversationName || row.channelConversationId}」吗？`,
+      '删除确认',
+      { confirmButtonText: '删除', cancelButtonText: '取消', type: 'warning' }
+    )
+    await deleteConversation(row.id)
+    ElMessage.success('删除成功')
+    await loadConversations()
+  } catch (e: any) {
+    if (e !== 'cancel') {
+      ElMessage.error(e.message || '删除失败')
+    }
+  }
+}
+
+const bindAccountVisible = ref(false)
+const currentConversationId = ref<number | undefined>()
+const bindAccountForm = reactive({
+  accountId: undefined as number | undefined,
+  bindingType: 1,
+})
+
+function openBindAccount(row: any) {
+  currentConversationId.value = row.id
+  bindAccountForm.accountId = undefined
+  bindAccountForm.bindingType = 1
+  bindAccountVisible.value = true
+}
+
+async function handleBindAccount() {
   if (!currentConversationId.value) return
   try {
-    await bindConversationAccount(currentConversationId.value, bindForm)
+    await bindConversationAccount(currentConversationId.value, bindAccountForm)
     ElMessage.success('绑定成功')
-    bindVisible.value = false
+    bindAccountVisible.value = false
     await loadConversations()
   } catch (e: any) {
     ElMessage.error(e.message)
   }
 }
 
+const bindTagsVisible = ref(false)
+const bindTagsForm = reactive({
+  tagIds: [] as number[],
+})
+
+function openBindTags(row: any) {
+  currentConversationId.value = row.id
+  bindTagsForm.tagIds = []
+  bindTagsVisible.value = true
+}
+
+async function handleBindTags() {
+  if (!currentConversationId.value) return
+  try {
+    await bindConversationTags(currentConversationId.value, { tagIds: bindTagsForm.tagIds })
+    ElMessage.success('绑定成功')
+    bindTagsVisible.value = false
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
 onMounted(() => {
   loadConversations()
   loadAccounts()
+  loadTags()
 })
 </script>
+
+<style scoped>
+.toolbar {
+  margin-bottom: 16px;
+}
+</style>
diff --git a/admin-web/src/views/FlowTrace.vue b/admin-web/src/views/FlowTrace.vue
index 3b48999..1f35977 100644
--- a/admin-web/src/views/FlowTrace.vue
+++ b/admin-web/src/views/FlowTrace.vue
@@ -1,13 +1,9 @@
 <template>
   <div>
-    <el-form inline>
-      <el-form-item label="事件ID">
-        <el-input v-model="eventId" placeholder="请输入 eventId" clearable />
-      </el-form-item>
-      <el-form-item>
-        <el-button type="primary" @click="handleQuery">查询</el-button>
-      </el-form-item>
-    </el-form>
+    <div class="toolbar">
+      <el-input v-model="eventId" placeholder="请输入 eventId" clearable style="width: 300px; margin-right: 12px" />
+      <el-button type="primary" @click="handleQuery">查询</el-button>
+    </div>
 
     <el-timeline v-if="traces.length > 0">
       <el-timeline-item
@@ -50,6 +46,9 @@ async function handleQuery() {
 </script>
 
 <style scoped>
+.toolbar {
+  margin-bottom: 16px;
+}
 .error-msg {
   color: #f56c6c;
 }
diff --git a/admin-web/src/views/InboundFlow.vue b/admin-web/src/views/InboundFlow.vue
index fd40b63..834af80 100644
--- a/admin-web/src/views/InboundFlow.vue
+++ b/admin-web/src/views/InboundFlow.vue
@@ -1,111 +1,734 @@
 <template>
   <div class="inbound-flow">
-    <el-form :model="form" label-width="100px">
-      <el-form-item label="流程编码">
-        <el-input v-model="form.flowCode" placeholder="flow_code" />
-      </el-form-item>
-      <el-form-item label="流程名称">
-        <el-input v-model="form.flowName" placeholder="流程名称" />
-      </el-form-item>
-      <el-form-item>
-        <el-button type="primary" @click="handleCreate">保存流程</el-button>
-      </el-form-item>
-    </el-form>
+    <div class="flow-layout">
+      <!-- Left sidebar: flow list + node palette -->
+      <div class="left-panel">
+        <div class="panel-section flow-list">
+          <div class="section-header">
+            <span class="section-title">流程列表</span>
+            <el-button type="primary" size="small" @click="createNewFlow">新建</el-button>
+          </div>
+          <el-table
+            :data="flows"
+            highlight-current-row
+            size="small"
+            @row-click="handleFlowRowClick"
+          >
+            <el-table-column prop="flowCode" label="编码" show-overflow-tooltip />
+            <el-table-column prop="flowName" label="名称" show-overflow-tooltip />
+            <el-table-column prop="status" label="状态" width="70">
+              <template #default="scope">
+                <el-tag :type="statusTagType(scope.row.status)" size="small">
+                  {{ statusText(scope.row.status) }}
+                </el-tag>
+              </template>
+            </el-table-column>
+            <el-table-column prop="version" label="版本" width="55">
+              <template #default="scope">
+                <span>v{{ scope.row.version || 1 }}</span>
+              </template>
+            </el-table-column>
+          </el-table>
+        </div>
 
-    <div class="flow-canvas">
-      <VueFlow v-model="elements" fit-view-on-init>
-        <Background pattern-color="#aaa" :gap="16" />
-        <Controls />
-      </VueFlow>
+        <div class="panel-section node-palette">
+          <div class="section-header">
+            <span class="section-title">节点组件</span>
+          </div>
+          <div class="palette-grid">
+            <div
+              v-for="item in paletteNodes"
+              :key="item.type"
+              class="palette-item"
+              :class="`palette-${item.type}`"
+              draggable
+              @click="addNode(item.type)"
+              @dragstart="onDragStart($event, item.type)"
+            >
+              {{ item.label }}
+            </div>
+          </div>
+        </div>
+      </div>
+
+      <!-- Center canvas -->
+      <div class="canvas-area" @drop="onDrop" @dragover="onDragOver">
+        <div class="flow-toolbar">
+          <el-input
+            v-model="form.flowCode"
+            placeholder="流程编码"
+            style="width: 160px"
+            :disabled="isEdit"
+          />
+          <el-input
+            v-model="form.flowName"
+            placeholder="流程名称"
+            style="width: 180px"
+          />
+          <el-button type="primary" @click="handleSave">保存</el-button>
+          <el-button type="success" @click="handlePublish">发布</el-button>
+          <el-button type="warning" @click="handleOffline">下线</el-button>
+          <el-button type="danger" @click="handleDelete">删除</el-button>
+          <el-button @click="resetCanvas">清空画布</el-button>
+        </div>
+
+        <div class="flow-canvas">
+          <VueFlow
+            v-model="elements"
+            fit-view-on-init
+            :default-zoom="1"
+            @node-click="onNodeClick"
+            @edge-click="onEdgeClick"
+            @pane-click="onPaneClick"
+          >
+            <Background pattern-color="#aaa" :gap="16" />
+            <Controls />
+            <template #node-flowNode="nodeProps">
+              <div
+                class="flow-node"
+                :class="[
+                  `node-${nodeProps.data.nodeType}`,
+                  { 'node-selected': nodeProps.selected },
+                ]"
+              >
+                <Handle type="target" :position="Position.Top" />
+                <div class="node-icon">{{ nodeTypeIcon(nodeProps.data.nodeType) }}</div>
+                <div class="node-label">{{ nodeProps.label }}</div>
+                <Handle type="source" :position="Position.Bottom" />
+              </div>
+            </template>
+          </VueFlow>
+        </div>
+      </div>
+
+      <!-- Right config panel -->
+      <div v-if="selectedNode || selectedEdge" class="right-panel">
+        <template v-if="selectedNode">
+          <div class="section-header">
+            <span class="section-title">节点配置</span>
+            <span class="node-type-tag">{{ nodeTypeLabel(selectedNode.data.nodeType) }}</span>
+          </div>
+
+          <el-form label-width="80px" class="config-form">
+            <!-- receive -->
+            <template v-if="selectedNode.data.nodeType === 'receive'">
+              <el-form-item label="渠道类型">
+                <el-select v-model="selectedNode.data.config.channel_type" style="width: 100%">
+                  <el-option label="企业微信" value="wecom" />
+                  <el-option label="个人微信" value="wechat_personal" />
+                </el-select>
+              </el-form-item>
+            </template>
+
+            <!-- intent -->
+            <template v-if="selectedNode.data.nodeType === 'intent'">
+              <el-form-item label="识别模式">
+                <el-select v-model="selectedNode.data.config.mode" style="width: 100%">
+                  <el-option label="规则" value="rule" />
+                  <el-option label="LLM" value="llm" />
+                  <el-option label="混合" value="both" />
+                </el-select>
+              </el-form-item>
+              <el-form-item label="提示词" v-if="showIntentPrompt(selectedNode.data.config.mode)">
+                <el-input
+                  v-model="selectedNode.data.config.prompt"
+                  type="textarea"
+                  :rows="6"
+                  placeholder="请输入 LLM 识别提示词"
+                />
+              </el-form-item>
+            </template>
+
+            <!-- condition -->
+            <template v-if="selectedNode.data.nodeType === 'condition'">
+              <el-form-item label="表达式">
+                <el-input
+                  v-model="selectedNode.data.config.expression"
+                  type="textarea"
+                  :rows="4"
+                  placeholder="例如：intent.intent == 'create_order'"
+                />
+              </el-form-item>
+              <div class="form-hint">提示：出边标签可填写 true / false 用于分支判断</div>
+            </template>
+
+            <!-- webhook -->
+            <template v-if="selectedNode.data.nodeType === 'webhook'">
+              <el-form-item label="请求地址">
+                <el-input v-model="selectedNode.data.config.url" placeholder="https://" />
+              </el-form-item>
+              <el-form-item label="请求方法">
+                <el-select v-model="selectedNode.data.config.method" style="width: 100%">
+                  <el-option label="POST" value="POST" />
+                  <el-option label="GET" value="GET" />
+                  <el-option label="PUT" value="PUT" />
+                </el-select>
+              </el-form-item>
+            </template>
+
+            <!-- reply -->
+            <template v-if="selectedNode.data.nodeType === 'reply'">
+              <el-form-item label="内容类型">
+                <el-select v-model="selectedNode.data.config.content.type" style="width: 100%">
+                  <el-option label="文本" value="text" />
+                  <el-option label="图片" value="image" />
+                  <el-option label="图文卡片" value="news" />
+                </el-select>
+              </el-form-item>
+              <el-form-item label="内容">
+                <el-input
+                  v-model="selectedNode.data.config.content.body"
+                  type="textarea"
+                  :rows="6"
+                  placeholder="请输入回复内容"
+                />
+              </el-form-item>
+            </template>
+          </el-form>
+        </template>
+
+        <template v-if="selectedEdge">
+          <div class="section-header">
+            <span class="section-title">边配置</span>
+          </div>
+          <el-form label-width="80px" class="config-form">
+            <el-form-item label="标签">
+              <el-input v-model="selectedEdge.label" placeholder="true / false" />
+            </el-form-item>
+          </el-form>
+        </template>
+      </div>
     </div>
   </div>
 </template>
 
 <script setup lang="ts">
-import { reactive, ref } from 'vue'
-import { ElMessage } from 'element-plus'
-import { VueFlow } from '@vue-flow/core'
+import { onMounted, reactive, ref } from 'vue'
+import { ElMessage, ElMessageBox } from 'element-plus'
+import { VueFlow, Handle, Position, useVueFlow } from '@vue-flow/core'
 import { Background } from '@vue-flow/background'
 import { Controls } from '@vue-flow/controls'
-import { createFlowDefinition } from '@/api/flow'
+import {
+  listFlows,
+  getFlow,
+  saveFlow,
+  updateFlow,
+  publishFlow,
+  offlineFlow,
+  deleteFlow,
+} from '@/api/inboundFlow'
 import '@vue-flow/core/dist/style.css'
 import '@vue-flow/core/dist/theme-default.css'
 
-const form = reactive({
+const { project } = useVueFlow()
+
+interface FlowForm {
+  flowCode: string
+  flowName: string
+}
+
+const form = reactive<FlowForm>({
   flowCode: '',
   flowName: '',
 })
 
-const elements = ref<any[]>([
-  {
-    id: '1',
-    type: 'input',
-    label: '接收消息',
-    position: { x: 250, y: 5 },
-    data: { nodeType: 'receive' },
-  },
-  {
-    id: '2',
-    label: '意图识别',
-    position: { x: 250, y: 120 },
-    data: { nodeType: 'intent', intent: 'rescue_request' },
-  },
-  {
-    id: '3',
-    label: 'Webhook 推送',
-    position: { x: 250, y: 240 },
-    data: { nodeType: 'webhook', webhookUrl: '' },
-  },
-  { id: 'e1-2', source: '1', target: '2' },
-  { id: 'e2-3', source: '2', target: '3' },
-])
+const flows = ref<any[]>([])
+const elements = ref<any[]>([])
+const selectedNode = ref<any>(null)
+const selectedEdge = ref<any>(null)
+const isEdit = ref(false)
 
-async function handleCreate() {
+const paletteNodes = [
+  { type: 'receive', label: '接收消息' },
+  { type: 'intent', label: '意图识别' },
+  { type: 'condition', label: '条件判断' },
+  { type: 'webhook', label: 'Webhook' },
+  { type: 'reply', label: '回复消息' },
+]
+
+const nodeTypeConfig: Record<string, () => any> = {
+  receive: () => ({ channel_type: 'wecom' }),
+  intent: () => ({ mode: 'llm', prompt: '' }),
+  condition: () => ({ expression: '' }),
+  webhook: () => ({ url: '', method: 'POST' }),
+  reply: () => ({ content: { type: 'text', body: '' } }),
+}
+
+const nodeTypeLabels: Record<string, string> = {
+  receive: '接收消息',
+  intent: '意图识别',
+  condition: '条件判断',
+  webhook: 'Webhook',
+  reply: '回复消息',
+}
+
+const nodeTypeIcons: Record<string, string> = {
+  receive: '▶',
+  intent: '💡',
+  condition: '◆',
+  webhook: '⚡',
+  reply: '💬',
+}
+
+function nodeTypeLabel(type: string) {
+  return nodeTypeLabels[type] || type
+}
+
+function nodeTypeIcon(type: string) {
+  return nodeTypeIcons[type] || '•'
+}
+
+function statusText(status: number) {
+  if (status === 1) return '已发布'
+  if (status === 2) return '已下线'
+  return '草稿'
+}
+
+function statusTagType(status: number) {
+  if (status === 1) return 'success'
+  if (status === 2) return 'warning'
+  return 'info'
+}
+
+function showIntentPrompt(mode: string) {
+  return mode === 'llm' || mode === 'both'
+}
+
+function createNodeId() {
+  return `node_${Date.now()}_${Math.floor(Math.random() * 1000)}`
+}
+
+function createEdgeId(source: string, target: string) {
+  return `e_${source}_${target}`
+}
+
+function getDefaultPosition() {
+  const count = elements.value.filter((el) => !('source' in el)).length
+  const row = Math.floor(count / 2)
+  const col = count % 2
+  return { x: 200 + col * 220, y: 80 + row * 140 }
+}
+
+function addNode(type: string, position?: { x: number; y: number }) {
+  const id = createNodeId()
+  const config = nodeTypeConfig[type]()
+  elements.value.push({
+    id,
+    type: 'flowNode',
+    label: nodeTypeLabels[type],
+    position: position || getDefaultPosition(),
+    data: { nodeType: type, config },
+  })
+}
+
+function onDragStart(event: DragEvent, type: string) {
+  if (event.dataTransfer) {
+    event.dataTransfer.setData('application/vueflow-node', type)
+    event.dataTransfer.effectAllowed = 'move'
+  }
+}
+
+function onDragOver(event: DragEvent) {
+  event.preventDefault()
+  if (event.dataTransfer) {
+    event.dataTransfer.dropEffect = 'move'
+  }
+}
+
+function onDrop(event: DragEvent) {
+  event.preventDefault()
+  if (!event.dataTransfer) return
+  const type = event.dataTransfer.getData('application/vueflow-node')
+  if (!type) return
+
+  const bounds = (event.currentTarget as HTMLElement).getBoundingClientRect()
+  const position = project({
+    x: event.clientX - bounds.left,
+    y: event.clientY - bounds.top,
+  })
+  addNode(type, position)
+}
+
+function onNodeClick(event: any) {
+  const node = event.node
+  selectedEdge.value = null
+  const found = elements.value.find((el) => el.id === node.id)
+  selectedNode.value = found || node
+}
+
+function onEdgeClick(event: any) {
+  const edge = event.edge
+  selectedNode.value = null
+  const found = elements.value.find((el) => el.id === edge.id)
+  selectedEdge.value = found || edge
+}
+
+function onPaneClick() {
+  selectedNode.value = null
+  selectedEdge.value = null
+}
+
+function resetCanvas() {
+  elements.value = []
+  form.flowCode = ''
+  form.flowName = ''
+  isEdit.value = false
+  selectedNode.value = null
+  selectedEdge.value = null
+}
+
+function createNewFlow() {
+  resetCanvas()
+  form.flowCode = `flow_${Date.now()}`
+  form.flowName = '新建入站流程'
+  addNode('receive')
+  addNode('intent')
+}
+
+function handleFlowRowClick(row: any) {
+  loadFlow(row.flowCode)
+}
+
+function parseDefinitionJson(row: any): { nodes: any[]; edges: any[] } {
+  if (!row.definitionJson) return { nodes: [], edges: [] }
+  if (typeof row.definitionJson === 'string') {
+    try {
+      return JSON.parse(row.definitionJson)
+    } catch {
+      return { nodes: [], edges: [] }
+    }
+  }
+  return row.definitionJson
+}
+
+async function loadFlow(flowCode: string) {
   try {
-    const nodes = elements.value
-      .filter((el) => !('source' in el))
-      .map((el) => {
-        const { nodeType, ...config } = el.data || {}
-        return {
-          nodeType,
-          config,
-          position: el.position,
-        }
-      })
+    const res: any = await getFlow(flowCode)
+    const row = res.data
+    if (!row) {
+      ElMessage.warning('流程不存在')
+      return
+    }
 
-    const edges = elements.value
-      .filter((el) => 'source' in el)
-      .map((el) => ({
-        source: el.source,
-        target: el.target,
-      }))
+    form.flowCode = row.flowCode
+    form.flowName = row.flowName
+    isEdit.value = true
 
-    const res: any = await createFlowDefinition({
-      flowCode: form.flowCode,
-      flowName: form.flowName,
-      flowType: 'inbound',
-      definitionJson: { nodes, edges },
+    const definition = parseDefinitionJson(row)
+    const nodes = (definition.nodes || []).map((n: any, index: number) => {
+      const type = n.type || n.nodeType || 'receive'
+      const config = n.config || {}
+      return {
+        id: n.id || createNodeId(),
+        type: 'flowNode',
+        label: nodeTypeLabels[type] || type,
+        position: n.position || {
+          x: 200 + (index % 3) * 220,
+          y: 80 + Math.floor(index / 3) * 140,
+        },
+        data: { nodeType: type, config },
+      }
     })
 
-    ElMessage.success('保存成功')
-    console.log(res)
+    const nodeIds = new Set(nodes.map((n) => n.id))
+    const edges = (definition.edges || [])
+      .filter((e: any) => nodeIds.has(e.source) && nodeIds.has(e.target))
+      .map((e: any) => ({
+        id: e.id || createEdgeId(e.source, e.target),
+        source: e.source,
+        target: e.target,
+        label: e.label,
+      }))
+
+    elements.value = [...nodes, ...edges]
+    selectedNode.value = null
+    selectedEdge.value = null
   } catch (e: any) {
     ElMessage.error(e.message)
   }
 }
+
+async function loadFlows() {
+  try {
+    const res: any = await listFlows()
+    flows.value = res.data || []
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+function buildPayload() {
+  const nodes = elements.value
+    .filter((el) => !('source' in el))
+    .map((el) => ({
+      id: el.id,
+      type: el.data?.nodeType,
+      config: el.data?.config || {},
+      position: el.position,
+    }))
+
+  const edges = elements.value
+    .filter((el) => 'source' in el)
+    .map((el) => ({
+      source: el.source,
+      target: el.target,
+      label: el.label,
+    }))
+
+  return {
+    flowCode: form.flowCode,
+    flowName: form.flowName,
+    flowType: 'inbound',
+    definitionJson: { nodes, edges },
+  }
+}
+
+async function handleSave() {
+  if (!form.flowCode.trim()) {
+    ElMessage.warning('请输入流程编码')
+    return
+  }
+  if (!form.flowName.trim()) {
+    ElMessage.warning('请输入流程名称')
+    return
+  }
+
+  try {
+    const payload = buildPayload()
+    if (isEdit.value) {
+      await updateFlow(form.flowCode, payload)
+      ElMessage.success('更新成功')
+    } else {
+      await saveFlow(payload)
+      ElMessage.success('保存成功')
+      isEdit.value = true
+    }
+    await loadFlows()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handlePublish() {
+  if (!form.flowCode.trim()) {
+    ElMessage.warning('请先选择或保存流程')
+    return
+  }
+  try {
+    await publishFlow(form.flowCode)
+    ElMessage.success('发布成功')
+    await loadFlows()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handleOffline() {
+  if (!form.flowCode.trim()) {
+    ElMessage.warning('请先选择流程')
+    return
+  }
+  try {
+    await offlineFlow(form.flowCode)
+    ElMessage.success('已下线')
+    await loadFlows()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handleDelete() {
+  if (!form.flowCode.trim()) {
+    ElMessage.warning('请先选择流程')
+    return
+  }
+  try {
+    await ElMessageBox.confirm(`确定删除流程 ${form.flowCode} 吗？`, '提示', { type: 'warning' })
+    await deleteFlow(form.flowCode)
+    ElMessage.success('删除成功')
+    resetCanvas()
+    await loadFlows()
+  } catch (e: any) {
+    if (e !== 'cancel') {
+      ElMessage.error(e.message)
+    }
+  }
+}
+
+onMounted(() => {
+  loadFlows()
+})
 </script>
 
 <style scoped>
 .inbound-flow {
+  height: calc(100vh - 120px);
   display: flex;
   flex-direction: column;
-  height: calc(100vh - 120px);
+}
+
+.flow-layout {
+  display: flex;
+  flex: 1;
+  gap: 12px;
+  min-height: 0;
+}
+
+.left-panel {
+  width: 260px;
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+  min-height: 0;
+}
+
+.panel-section {
+  background: #fff;
+  border: 1px solid #e4e7ed;
+  border-radius: 4px;
+  padding: 12px;
+  overflow: auto;
+}
+
+.flow-list {
+  flex: 1;
+  min-height: 0;
+}
+
+.node-palette {
+  flex-shrink: 0;
+}
+
+.section-header {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  margin-bottom: 12px;
+}
+
+.section-title {
+  font-weight: 500;
+  font-size: 14px;
+}
+
+.palette-grid {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 8px;
+}
+
+.palette-item {
+  padding: 10px 8px;
+  border: 1px solid #dcdfe6;
+  border-radius: 4px;
+  text-align: center;
+  font-size: 13px;
+  cursor: pointer;
+  transition: all 0.2s;
+  user-select: none;
+}
+
+.palette-item:hover {
+  border-color: #409eff;
+  color: #409eff;
+  background: #ecf5ff;
+}
+
+.canvas-area {
+  flex: 1;
+  display: flex;
+  flex-direction: column;
+  min-width: 0;
+  border: 1px solid #e4e7ed;
+  border-radius: 4px;
+  background: #fff;
+}
+
+.flow-toolbar {
+  padding: 12px;
+  border-bottom: 1px solid #e4e7ed;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  flex-wrap: wrap;
 }
 
 .flow-canvas {
   flex: 1;
+  min-height: 0;
+}
+
+.right-panel {
+  width: 300px;
+  background: #fff;
   border: 1px solid #e4e7ed;
   border-radius: 4px;
-  min-height: 400px;
+  padding: 12px;
+  overflow: auto;
+}
+
+.config-form {
+  margin-top: 12px;
+}
+
+.form-hint {
+  font-size: 12px;
+  color: #909399;
+  line-height: 1.5;
+  padding: 0 0 12px 80px;
+}
+
+.node-type-tag {
+  font-size: 12px;
+  color: #409eff;
+  background: #ecf5ff;
+  padding: 2px 8px;
+  border-radius: 4px;
+}
+
+.flow-node {
+  padding: 10px 16px;
+  border-radius: 6px;
+  border: 1px solid #dcdfe6;
+  background: #fff;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  min-width: 110px;
+  box-shadow: 0 2px 4px rgba(0, 0, 0, 0.06);
+}
+
+.flow-node.node-selected {
+  border-color: #409eff;
+  box-shadow: 0 0 0 2px rgba(64, 158, 255, 0.2);
+}
+
+.node-icon {
+  font-size: 16px;
+}
+
+.node-label {
+  font-size: 13px;
+  font-weight: 500;
+}
+
+.node-receive {
+  border-left: 4px solid #67c23a;
+}
+
+.node-intent {
+  border-left: 4px solid #e6a23c;
+}
+
+.node-condition {
+  border-left: 4px solid #f56c6c;
+}
+
+.node-webhook {
+  border-left: 4px solid #409eff;
+}
+
+.node-reply {
+  border-left: 4px solid #909399;
 }
 </style>
diff --git a/admin-web/src/views/InboundWebhook.vue b/admin-web/src/views/InboundWebhook.vue
new file mode 100644
index 0000000..5db5b7c
--- /dev/null
+++ b/admin-web/src/views/InboundWebhook.vue
@@ -0,0 +1,83 @@
+<template>
+  <div>
+    <el-form :model="form" label-width="140px" style="max-width: 600px;">
+      <el-form-item label="入站 Webhook URL">
+        <el-input v-model="form.inbound_webhook_url" placeholder="https://example.com/webhook" />
+      </el-form-item>
+      <el-form-item label="签名算法">
+        <el-select v-model="form.sign_algorithm" placeholder="选择签名算法">
+          <el-option label="HMAC-SHA256" value="hmac-sha256" />
+          <el-option label="HMAC-SHA512" value="hmac-sha512" />
+        </el-select>
+      </el-form-item>
+      <el-form-item label="Webhook Secret">
+        <el-input v-model="form.webhook_secret" type="password" show-password placeholder="用于签名验证的密钥" />
+      </el-form-item>
+      <el-form-item>
+        <el-button type="primary" @click="handleSave">保存</el-button>
+        <el-button @click="handleTest">测试推送</el-button>
+      </el-form-item>
+    </el-form>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { onMounted, reactive } from 'vue'
+import { ElMessage, ElMessageBox } from 'element-plus'
+import { getInboundWebhookConfig, updateInboundWebhookConfig, testInboundWebhook } from '@/api/inboundWebhook'
+
+const form = reactive({
+  inbound_webhook_url: '',
+  sign_algorithm: 'hmac-sha256',
+  webhook_secret: '',
+})
+
+async function loadConfig() {
+  try {
+    const res: any = await getInboundWebhookConfig()
+    const data = res.data || {}
+    form.inbound_webhook_url = data.inbound_webhook_url || ''
+    const authConfig = data.auth_config || {}
+    form.sign_algorithm = authConfig.sign_algorithm || 'hmac-sha256'
+    form.webhook_secret = authConfig.webhook_secret || ''
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handleSave() {
+  try {
+    await updateInboundWebhookConfig({
+      inbound_webhook_url: form.inbound_webhook_url,
+      auth_config: {
+        sign_algorithm: form.sign_algorithm,
+        webhook_secret: form.webhook_secret,
+      },
+    })
+    ElMessage.success('保存成功')
+    await loadConfig()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handleTest() {
+  if (!form.inbound_webhook_url) {
+    ElMessage.warning('请先填写 Webhook URL')
+    return
+  }
+  try {
+    const res: any = await testInboundWebhook({ url: form.inbound_webhook_url })
+    const result = res.data || {}
+    ElMessageBox.alert(result.message || '测试完成', result.success ? '测试成功' : '测试失败', {
+      type: result.success ? 'success' : 'error',
+    })
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+onMounted(() => {
+  loadConfig()
+})
+</script>
diff --git a/admin-web/src/views/IvrFlow.vue b/admin-web/src/views/IvrFlow.vue
new file mode 100644
index 0000000..30fbf0a
--- /dev/null
+++ b/admin-web/src/views/IvrFlow.vue
@@ -0,0 +1,780 @@
+<template>
+  <div class="ivr-flow">
+    <div class="flow-layout">
+      <!-- Left sidebar: flow list + node palette -->
+      <div class="left-panel">
+        <div class="panel-section flow-list">
+          <div class="section-header">
+            <span class="section-title">流程列表</span>
+            <el-button type="primary" size="small" @click="createNewFlow">新建</el-button>
+          </div>
+          <el-table
+            :data="flows"
+            highlight-current-row
+            size="small"
+            @row-click="handleFlowRowClick"
+          >
+            <el-table-column prop="flowCode" label="编码" show-overflow-tooltip />
+            <el-table-column prop="flowName" label="名称" show-overflow-tooltip />
+            <el-table-column prop="status" label="状态" width="70">
+              <template #default="scope">
+                <el-tag :type="statusTagType(scope.row.status)" size="small">
+                  {{ statusText(scope.row.status) }}
+                </el-tag>
+              </template>
+            </el-table-column>
+            <el-table-column prop="version" label="版本" width="55">
+              <template #default="scope">
+                <span>v{{ scope.row.version || 1 }}</span>
+              </template>
+            </el-table-column>
+          </el-table>
+        </div>
+
+        <div class="panel-section node-palette">
+          <div class="section-header">
+            <span class="section-title">节点组件</span>
+          </div>
+          <div class="palette-grid">
+            <div
+              v-for="item in paletteNodes"
+              :key="item.type"
+              class="palette-item"
+              :class="`palette-${item.type}`"
+              draggable
+              @click="addNode(item.type)"
+              @dragstart="onDragStart($event, item.type)"
+            >
+              {{ item.label }}
+            </div>
+          </div>
+        </div>
+      </div>
+
+      <!-- Center canvas -->
+      <div class="canvas-area" @drop="onDrop" @dragover="onDragOver">
+        <div class="flow-toolbar">
+          <el-input
+            v-model="form.flowCode"
+            placeholder="流程编码"
+            style="width: 160px"
+            :disabled="isEdit"
+          />
+          <el-input
+            v-model="form.flowName"
+            placeholder="流程名称"
+            style="width: 180px"
+          />
+          <el-button type="primary" @click="handleSave">保存</el-button>
+          <el-button type="success" @click="handlePublish">发布</el-button>
+          <el-button type="warning" @click="handleOffline">下线</el-button>
+          <el-button type="danger" @click="handleDelete">删除</el-button>
+          <el-button @click="resetCanvas">清空画布</el-button>
+        </div>
+
+        <div class="flow-canvas">
+          <VueFlow
+            v-model="elements"
+            fit-view-on-init
+            :default-zoom="1"
+            @node-click="onNodeClick"
+            @edge-click="onEdgeClick"
+            @pane-click="onPaneClick"
+          >
+            <Background pattern-color="#aaa" :gap="16" />
+            <Controls />
+            <template #node-flowNode="nodeProps">
+              <div
+                class="flow-node"
+                :class="[
+                  `node-${nodeProps.data.nodeType}`,
+                  { 'node-selected': nodeProps.selected },
+                ]"
+              >
+                <Handle type="target" :position="Position.Top" />
+                <div class="node-icon">{{ nodeTypeIcon(nodeProps.data.nodeType) }}</div>
+                <div class="node-label">{{ nodeProps.label }}</div>
+                <Handle type="source" :position="Position.Bottom" />
+              </div>
+            </template>
+          </VueFlow>
+        </div>
+      </div>
+
+      <!-- Right config panel -->
+      <div v-if="selectedNode || selectedEdge" class="right-panel">
+        <template v-if="selectedNode">
+          <div class="section-header">
+            <span class="section-title">节点配置</span>
+            <span class="node-type-tag">{{ nodeTypeLabel(selectedNode.data.nodeType) }}</span>
+          </div>
+
+          <el-form label-width="90px" class="config-form">
+            <!-- start -->
+            <template v-if="selectedNode.data.nodeType === 'start'">
+              <el-form-item label="触发类型">
+                <el-select v-model="selectedNode.data.config.triggerType" style="width: 100%">
+                  <el-option label="呼入电话" value="inbound_call" />
+                  <el-option label="外呼触发" value="outbound_call" />
+                </el-select>
+              </el-form-item>
+              <el-form-item label="电话号码">
+                <el-input v-model="selectedNode.data.config.phoneNumber" placeholder="接入号码/外呼号码" />
+              </el-form-item>
+            </template>
+
+            <!-- play -->
+            <template v-if="selectedNode.data.nodeType === 'play'">
+              <el-form-item label="播放类型">
+                <el-select v-model="selectedNode.data.config.playType" style="width: 100%">
+                  <el-option label="音频文件" value="audio" />
+                  <el-option label="TTS 文本" value="tts" />
+                </el-select>
+              </el-form-item>
+              <el-form-item label="音频 URL" v-if="selectedNode.data.config.playType === 'audio'">
+                <el-input v-model="selectedNode.data.config.audioUrl" placeholder="https://" />
+              </el-form-item>
+              <el-form-item label="TTS 文本" v-if="selectedNode.data.config.playType === 'tts'">
+                <el-input
+                  v-model="selectedNode.data.config.ttsText"
+                  type="textarea"
+                  :rows="4"
+                  placeholder="请输入语音播报文本"
+                />
+              </el-form-item>
+            </template>
+
+            <!-- menu -->
+            <template v-if="selectedNode.data.nodeType === 'menu'">
+              <el-form-item label="播报提示">
+                <el-input
+                  v-model="selectedNode.data.config.prompt"
+                  type="textarea"
+                  :rows="3"
+                  placeholder="请输入按键菜单播报内容"
+                />
+              </el-form-item>
+              <el-form-item label="超时时间">
+                <el-input-number v-model="selectedNode.data.config.timeout" :min="1" :max="60" style="width: 100%" />
+              </el-form-item>
+              <el-form-item label="按键选项">
+                <div class="menu-options">
+                  <div v-for="(opt, index) in selectedNode.data.config.options" :key="index" class="menu-option-row">
+                    <el-input v-model="opt.key" placeholder="键" style="width: 60px" />
+                    <el-input v-model="opt.label" placeholder="描述" style="flex: 1" />
+                    <el-button type="danger" link size="small" @click="removeMenuOption(index)">删除</el-button>
+                  </div>
+                  <el-button type="primary" link size="small" @click="addMenuOption">+ 添加选项</el-button>
+                </div>
+              </el-form-item>
+            </template>
+
+            <!-- transfer -->
+            <template v-if="selectedNode.data.nodeType === 'transfer'">
+              <el-form-item label="转接号码">
+                <el-input v-model="selectedNode.data.config.destination" placeholder="坐席/队列号码" />
+              </el-form-item>
+            </template>
+
+            <!-- hangup -->
+            <template v-if="selectedNode.data.nodeType === 'hangup'">
+              <el-form-item label="挂断原因">
+                <el-input v-model="selectedNode.data.config.reason" placeholder="正常结束" />
+              </el-form-item>
+            </template>
+
+            <!-- api -->
+            <template v-if="selectedNode.data.nodeType === 'api'">
+              <el-form-item label="请求地址">
+                <el-input v-model="selectedNode.data.config.url" placeholder="https://" />
+              </el-form-item>
+              <el-form-item label="请求方法">
+                <el-select v-model="selectedNode.data.config.method" style="width: 100%">
+                  <el-option label="POST" value="POST" />
+                  <el-option label="GET" value="GET" />
+                  <el-option label="PUT" value="PUT" />
+                </el-select>
+              </el-form-item>
+              <el-form-item label="请求体模板">
+                <el-input
+                  v-model="selectedNode.data.config.bodyTemplate"
+                  type="textarea"
+                  :rows="6"
+                  placeholder='{"phone":"{{phone}}"}'
+                />
+              </el-form-item>
+            </template>
+          </el-form>
+        </template>
+
+        <template v-if="selectedEdge">
+          <div class="section-header">
+            <span class="section-title">边配置</span>
+          </div>
+          <el-form label-width="80px" class="config-form">
+            <el-form-item label="标签">
+              <el-input v-model="selectedEdge.label" placeholder="分支标签，如 1 / 2 / default" />
+            </el-form-item>
+          </el-form>
+        </template>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { onMounted, reactive, ref } from 'vue'
+import { ElMessage, ElMessageBox } from 'element-plus'
+import { VueFlow, Handle, Position, useVueFlow } from '@vue-flow/core'
+import { Background } from '@vue-flow/background'
+import { Controls } from '@vue-flow/controls'
+import {
+  listFlows,
+  getFlow,
+  saveFlow,
+  updateFlow,
+  publishFlow,
+  offlineFlow,
+  deleteFlow,
+} from '@/api/ivrFlow'
+import '@vue-flow/core/dist/style.css'
+import '@vue-flow/core/dist/theme-default.css'
+
+const { project } = useVueFlow()
+
+interface FlowForm {
+  flowCode: string
+  flowName: string
+}
+
+const form = reactive<FlowForm>({
+  flowCode: '',
+  flowName: '',
+})
+
+const flows = ref<any[]>([])
+const elements = ref<any[]>([])
+const selectedNode = ref<any>(null)
+const selectedEdge = ref<any>(null)
+const isEdit = ref(false)
+
+const paletteNodes = [
+  { type: 'start', label: '开始' },
+  { type: 'play', label: '播放语音' },
+  { type: 'menu', label: '按键菜单' },
+  { type: 'transfer', label: '转人工' },
+  { type: 'hangup', label: '挂断' },
+  { type: 'api', label: 'API 调用' },
+]
+
+const defaultMenuOptions = () => [
+  { key: '1', label: '' },
+  { key: '2', label: '' },
+]
+
+const nodeTypeConfig: Record<string, () => any> = {
+  start: () => ({ triggerType: 'inbound_call', phoneNumber: '' }),
+  play: () => ({ playType: 'audio', audioUrl: '', ttsText: '' }),
+  menu: () => ({ prompt: '', timeout: 10, options: defaultMenuOptions() }),
+  transfer: () => ({ destination: '' }),
+  hangup: () => ({ reason: '' }),
+  api: () => ({ url: '', method: 'POST', bodyTemplate: '' }),
+}
+
+const nodeTypeLabels: Record<string, string> = {
+  start: '开始',
+  play: '播放语音',
+  menu: '按键菜单',
+  transfer: '转人工',
+  hangup: '挂断',
+  api: 'API 调用',
+}
+
+const nodeTypeIcons: Record<string, string> = {
+  start: '▶',
+  play: '🔊',
+  menu: '⌨',
+  transfer: '📞',
+  hangup: '⏹',
+  api: '⚡',
+}
+
+function nodeTypeLabel(type: string) {
+  return nodeTypeLabels[type] || type
+}
+
+function nodeTypeIcon(type: string) {
+  return nodeTypeIcons[type] || '•'
+}
+
+function statusText(status: number) {
+  if (status === 1) return '已发布'
+  if (status === 2) return '已下线'
+  return '草稿'
+}
+
+function statusTagType(status: number) {
+  if (status === 1) return 'success'
+  if (status === 2) return 'warning'
+  return 'info'
+}
+
+function createNodeId() {
+  return `node_${Date.now()}_${Math.floor(Math.random() * 1000)}`
+}
+
+function createEdgeId(source: string, target: string) {
+  return `e_${source}_${target}`
+}
+
+function getDefaultPosition() {
+  const count = elements.value.filter((el) => !('source' in el)).length
+  const row = Math.floor(count / 2)
+  const col = count % 2
+  return { x: 200 + col * 220, y: 80 + row * 140 }
+}
+
+function addNode(type: string, position?: { x: number; y: number }) {
+  const id = createNodeId()
+  const config = nodeTypeConfig[type]()
+  elements.value.push({
+    id,
+    type: 'flowNode',
+    label: nodeTypeLabels[type],
+    position: position || getDefaultPosition(),
+    data: { nodeType: type, config },
+  })
+}
+
+function addMenuOption() {
+  if (!selectedNode.value) return
+  const options = selectedNode.value.data.config.options
+  options.push({ key: String(options.length + 1), label: '' })
+}
+
+function removeMenuOption(index: number | string) {
+  if (!selectedNode.value) return
+  selectedNode.value.data.config.options.splice(Number(index), 1)
+}
+
+function onDragStart(event: DragEvent, type: string) {
+  if (event.dataTransfer) {
+    event.dataTransfer.setData('application/vueflow-node', type)
+    event.dataTransfer.effectAllowed = 'move'
+  }
+}
+
+function onDragOver(event: DragEvent) {
+  event.preventDefault()
+  if (event.dataTransfer) {
+    event.dataTransfer.dropEffect = 'move'
+  }
+}
+
+function onDrop(event: DragEvent) {
+  event.preventDefault()
+  if (!event.dataTransfer) return
+  const type = event.dataTransfer.getData('application/vueflow-node')
+  if (!type) return
+
+  const bounds = (event.currentTarget as HTMLElement).getBoundingClientRect()
+  const position = project({
+    x: event.clientX - bounds.left,
+    y: event.clientY - bounds.top,
+  })
+  addNode(type, position)
+}
+
+function onNodeClick(event: any) {
+  const node = event.node
+  selectedEdge.value = null
+  const found = elements.value.find((el) => el.id === node.id)
+  selectedNode.value = found || node
+}
+
+function onEdgeClick(event: any) {
+  const edge = event.edge
+  selectedNode.value = null
+  const found = elements.value.find((el) => el.id === edge.id)
+  selectedEdge.value = found || edge
+}
+
+function onPaneClick() {
+  selectedNode.value = null
+  selectedEdge.value = null
+}
+
+function resetCanvas() {
+  elements.value = []
+  form.flowCode = ''
+  form.flowName = ''
+  isEdit.value = false
+  selectedNode.value = null
+  selectedEdge.value = null
+}
+
+function createNewFlow() {
+  resetCanvas()
+  form.flowCode = `ivr_${Date.now()}`
+  form.flowName = '新建 IVR 流程'
+  addNode('start')
+  addNode('play')
+}
+
+function handleFlowRowClick(row: any) {
+  loadFlow(row.flowCode)
+}
+
+function parseDefinitionJson(row: any): { nodes: any[]; edges: any[] } {
+  if (!row.definitionJson) return { nodes: [], edges: [] }
+  if (typeof row.definitionJson === 'string') {
+    try {
+      return JSON.parse(row.definitionJson)
+    } catch {
+      return { nodes: [], edges: [] }
+    }
+  }
+  return row.definitionJson
+}
+
+async function loadFlow(flowCode: string) {
+  try {
+    const res: any = await getFlow(flowCode)
+    const row = res.data
+    if (!row) {
+      ElMessage.warning('流程不存在')
+      return
+    }
+
+    form.flowCode = row.flowCode
+    form.flowName = row.flowName
+    isEdit.value = true
+
+    const definition = parseDefinitionJson(row)
+    const nodes = (definition.nodes || []).map((n: any, index: number) => {
+      const type = n.type || n.nodeType || 'start'
+      const config = n.config || nodeTypeConfig[type]()
+      return {
+        id: n.id || createNodeId(),
+        type: 'flowNode',
+        label: nodeTypeLabels[type] || type,
+        position: n.position || {
+          x: 200 + (index % 3) * 220,
+          y: 80 + Math.floor(index / 3) * 140,
+        },
+        data: { nodeType: type, config },
+      }
+    })
+
+    const nodeIds = new Set(nodes.map((n) => n.id))
+    const edges = (definition.edges || [])
+      .filter((e: any) => nodeIds.has(e.source) && nodeIds.has(e.target))
+      .map((e: any) => ({
+        id: e.id || createEdgeId(e.source, e.target),
+        source: e.source,
+        target: e.target,
+        label: e.label,
+      }))
+
+    elements.value = [...nodes, ...edges]
+    selectedNode.value = null
+    selectedEdge.value = null
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function loadFlows() {
+  try {
+    const res: any = await listFlows()
+    flows.value = res.data || []
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+function buildPayload() {
+  const nodes = elements.value
+    .filter((el) => !('source' in el))
+    .map((el) => ({
+      id: el.id,
+      type: el.data?.nodeType,
+      config: el.data?.config || {},
+      position: el.position,
+    }))
+
+  const edges = elements.value
+    .filter((el) => 'source' in el)
+    .map((el) => ({
+      source: el.source,
+      target: el.target,
+      label: el.label,
+    }))
+
+  return {
+    flowCode: form.flowCode,
+    flowName: form.flowName,
+    flowType: 'ivr',
+    definitionJson: { nodes, edges },
+  }
+}
+
+async function handleSave() {
+  if (!form.flowCode.trim()) {
+    ElMessage.warning('请输入流程编码')
+    return
+  }
+  if (!form.flowName.trim()) {
+    ElMessage.warning('请输入流程名称')
+    return
+  }
+
+  try {
+    const payload = buildPayload()
+    if (isEdit.value) {
+      await updateFlow(form.flowCode, payload)
+      ElMessage.success('更新成功')
+    } else {
+      await saveFlow(payload)
+      ElMessage.success('保存成功')
+      isEdit.value = true
+    }
+    await loadFlows()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handlePublish() {
+  if (!form.flowCode.trim()) {
+    ElMessage.warning('请先选择或保存流程')
+    return
+  }
+  try {
+    await publishFlow(form.flowCode)
+    ElMessage.success('发布成功')
+    await loadFlows()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handleOffline() {
+  if (!form.flowCode.trim()) {
+    ElMessage.warning('请先选择流程')
+    return
+  }
+  try {
+    await offlineFlow(form.flowCode)
+    ElMessage.success('已下线')
+    await loadFlows()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handleDelete() {
+  if (!form.flowCode.trim()) {
+    ElMessage.warning('请先选择流程')
+    return
+  }
+  try {
+    await ElMessageBox.confirm(`确定删除流程 ${form.flowCode} 吗？`, '提示', { type: 'warning' })
+    await deleteFlow(form.flowCode)
+    ElMessage.success('删除成功')
+    resetCanvas()
+    await loadFlows()
+  } catch (e: any) {
+    if (e !== 'cancel') {
+      ElMessage.error(e.message)
+    }
+  }
+}
+
+onMounted(() => {
+  loadFlows()
+})
+</script>
+
+<style scoped>
+.ivr-flow {
+  height: calc(100vh - 120px);
+  display: flex;
+  flex-direction: column;
+}
+
+.flow-layout {
+  display: flex;
+  flex: 1;
+  gap: 12px;
+  min-height: 0;
+}
+
+.left-panel {
+  width: 260px;
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+  min-height: 0;
+}
+
+.panel-section {
+  background: #fff;
+  border: 1px solid #e4e7ed;
+  border-radius: 4px;
+  padding: 12px;
+  overflow: auto;
+}
+
+.flow-list {
+  flex: 1;
+  min-height: 0;
+}
+
+.node-palette {
+  flex-shrink: 0;
+}
+
+.section-header {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  margin-bottom: 12px;
+}
+
+.section-title {
+  font-weight: 500;
+  font-size: 14px;
+}
+
+.palette-grid {
+  display: grid;
+  grid-template-columns: 1fr 1fr;
+  gap: 8px;
+}
+
+.palette-item {
+  padding: 10px 8px;
+  border: 1px solid #dcdfe6;
+  border-radius: 4px;
+  text-align: center;
+  font-size: 13px;
+  cursor: pointer;
+  transition: all 0.2s;
+  user-select: none;
+}
+
+.palette-item:hover {
+  border-color: #409eff;
+  color: #409eff;
+  background: #ecf5ff;
+}
+
+.canvas-area {
+  flex: 1;
+  display: flex;
+  flex-direction: column;
+  min-width: 0;
+  border: 1px solid #e4e7ed;
+  border-radius: 4px;
+  background: #fff;
+}
+
+.flow-toolbar {
+  padding: 12px;
+  border-bottom: 1px solid #e4e7ed;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  flex-wrap: wrap;
+}
+
+.flow-canvas {
+  flex: 1;
+  min-height: 0;
+}
+
+.right-panel {
+  width: 320px;
+  background: #fff;
+  border: 1px solid #e4e7ed;
+  border-radius: 4px;
+  padding: 12px;
+  overflow: auto;
+}
+
+.config-form {
+  margin-top: 12px;
+}
+
+.node-type-tag {
+  font-size: 12px;
+  color: #409eff;
+  background: #ecf5ff;
+  padding: 2px 8px;
+  border-radius: 4px;
+}
+
+.menu-options {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  width: 100%;
+}
+
+.menu-option-row {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+}
+
+.flow-node {
+  padding: 10px 16px;
+  border-radius: 6px;
+  border: 1px solid #dcdfe6;
+  background: #fff;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  min-width: 110px;
+  box-shadow: 0 2px 4px rgba(0, 0, 0, 0.06);
+}
+
+.flow-node.node-selected {
+  border-color: #409eff;
+  box-shadow: 0 0 0 2px rgba(64, 158, 255, 0.2);
+}
+
+.node-icon {
+  font-size: 16px;
+}
+
+.node-label {
+  font-size: 13px;
+  font-weight: 500;
+}
+
+.node-start {
+  border-left: 4px solid #67c23a;
+}
+
+.node-play {
+  border-left: 4px solid #409eff;
+}
+
+.node-menu {
+  border-left: 4px solid #e6a23c;
+}
+
+.node-transfer {
+  border-left: 4px solid #f56c6c;
+}
+
+.node-hangup {
+  border-left: 4px solid #909399;
+}
+
+.node-api {
+  border-left: 4px solid #9254de;
+}
+</style>
diff --git a/admin-web/src/views/Login.vue b/admin-web/src/views/Login.vue
index f8eb947..8cda350 100644
--- a/admin-web/src/views/Login.vue
+++ b/admin-web/src/views/Login.vue
@@ -34,6 +34,9 @@
           登录
         </el-button>
       </el-form>
+      <div class="login-hint">
+        全局管理员：租户 system / 用户名 superadmin / 密码 admin123
+      </div>
     </el-card>
   </div>
 </template>
@@ -107,4 +110,10 @@ async function handleSubmit() {
   width: 100%;
   margin-top: 8px;
 }
+.login-hint {
+  margin-top: 16px;
+  font-size: 12px;
+  color: #909399;
+  text-align: center;
+}
 </style>
diff --git a/admin-web/src/views/MessageTest.vue b/admin-web/src/views/MessageTest.vue
index ea162af..2b87ec0 100644
--- a/admin-web/src/views/MessageTest.vue
+++ b/admin-web/src/views/MessageTest.vue
@@ -1,6 +1,5 @@
 <template>
   <div>
-    <h2>消息测试</h2>
     <el-tabs v-model="activeTab">
       <el-tab-pane label="出站测试" name="outbound">
         <el-form :model="outboundForm" label-width="120px">
diff --git a/admin-web/src/views/Person.vue b/admin-web/src/views/Person.vue
index 402a7d1..5b8e285 100644
--- a/admin-web/src/views/Person.vue
+++ b/admin-web/src/views/Person.vue
@@ -1,52 +1,201 @@
 <template>
   <div>
-    <el-form :model="form" inline>
-      <el-form-item label="编码">
-        <el-input v-model="form.personCode" placeholder="人员编码" />
-      </el-form-item>
-      <el-form-item label="姓名">
-        <el-input v-model="form.personName" placeholder="姓名" />
-      </el-form-item>
-      <el-form-item label="手机">
-        <el-input v-model="form.phone" placeholder="手机号" />
-      </el-form-item>
-      <el-form-item label="类型">
-        <el-select v-model="form.personType" placeholder="类型">
-          <el-option label="内部人员" :value="1" />
-          <el-option label="供应商人员" :value="2" />
-          <el-option label="客户" :value="3" />
-          <el-option label="司机" :value="4" />
-        </el-select>
-      </el-form-item>
-      <el-form-item>
-        <el-button type="primary" @click="handleCreate">创建</el-button>
-      </el-form-item>
-    </el-form>
+    <div class="toolbar">
+      <el-button type="primary" @click="openCreateDialog">创建联系人</el-button>
+    </div>
 
     <el-table :data="persons" border>
       <el-table-column prop="id" label="ID" width="80" />
       <el-table-column prop="personCode" label="编码" />
       <el-table-column prop="personName" label="姓名" />
       <el-table-column prop="phone" label="手机" />
-      <el-table-column prop="personType" label="类型" />
-      <el-table-column prop="status" label="状态" />
+      <el-table-column prop="personType" label="类型" width="100">
+        <template #default="{ row }">
+          {{ formatPersonType(row.personType) }}
+        </template>
+      </el-table-column>
+      <el-table-column prop="status" label="状态" width="100">
+        <template #default="{ row }">
+          <el-tag :type="row.status === 1 ? 'success' : 'info'">
+            {{ row.status === 1 ? '启用' : '禁用' }}
+          </el-tag>
+        </template>
+      </el-table-column>
+      <el-table-column label="操作" width="260">
+        <template #default="{ row }">
+          <div class="op-row">
+            <el-button size="small" @click="openEditDialog(row)">编辑</el-button>
+            <el-button size="small" type="danger" @click="handleDelete(row)">删除</el-button>
+            <el-switch
+              v-model="row.status"
+              :active-value="1"
+              :inactive-value="0"
+              style="margin-left: 12px"
+              @change="(val: any) => handleStatusChange(row, val)"
+            />
+          </div>
+          <div class="op-row" style="margin-top: 6px;">
+            <el-button link type="primary" size="small" @click="openIdentities(row)">渠道身份</el-button>
+            <el-button link type="primary" size="small" @click="openBindTags(row)">绑定标签</el-button>
+          </div>
+        </template>
+      </el-table-column>
     </el-table>
+
+    <el-dialog v-model="dialogVisible" :title="isEdit ? '编辑联系人' : '创建联系人'" width="600px">
+      <el-form :model="dialogForm" label-width="100px">
+        <el-form-item label="编码">
+          <el-input v-model="dialogForm.personCode" placeholder="人员编码" />
+        </el-form-item>
+        <el-form-item label="姓名">
+          <el-input v-model="dialogForm.personName" placeholder="姓名" />
+        </el-form-item>
+        <el-form-item label="手机">
+          <el-input v-model="dialogForm.phone" placeholder="手机号" />
+        </el-form-item>
+        <el-form-item label="类型">
+          <el-select v-model="dialogForm.personType" placeholder="类型" style="width: 100%">
+            <el-option label="内部人员" :value="1" />
+            <el-option label="供应商人员" :value="2" />
+            <el-option label="客户" :value="3" />
+            <el-option label="司机" :value="4" />
+          </el-select>
+        </el-form-item>
+        <el-form-item v-if="isEdit" label="状态">
+          <el-switch
+            v-model="dialogForm.status"
+            :active-value="1"
+            :inactive-value="0"
+            active-text="启用"
+            inactive-text="禁用"
+          />
+        </el-form-item>
+      </el-form>
+      <template #footer>
+        <el-button @click="dialogVisible = false">取消</el-button>
+        <el-button type="primary" @click="handleSave">保存</el-button>
+      </template>
+    </el-dialog>
+
+    <el-dialog v-model="identitiesVisible" title="渠道身份" width="700px">
+      <el-table :data="identities" border style="margin-bottom: 16px;">
+        <el-table-column prop="id" label="ID" width="80" />
+        <el-table-column prop="channelType" label="渠道" />
+        <el-table-column prop="channelUserId" label="渠道用户ID" />
+        <el-table-column prop="channelUserName" label="渠道用户名" />
+        <el-table-column label="操作" width="120">
+          <template #default="{ row }">
+            <el-button link type="danger" size="small" @click="handleDeleteIdentity(row)">删除</el-button>
+          </template>
+        </el-table-column>
+      </el-table>
+      <el-divider />
+      <el-form :model="identityForm" label-width="100px">
+        <el-form-item label="渠道">
+          <el-input v-model="identityForm.channelType" placeholder="wecom" />
+        </el-form-item>
+        <el-form-item label="渠道用户ID">
+          <el-input v-model="identityForm.channelUserId" placeholder="渠道用户ID" />
+        </el-form-item>
+        <el-form-item label="渠道用户名">
+          <el-input v-model="identityForm.channelUserName" placeholder="渠道用户名" />
+        </el-form-item>
+        <el-form-item label="主体ID">
+          <el-input-number v-model="identityForm.subjectId" :min="0" :controls="false" placeholder="主体ID" style="width: 100%" />
+        </el-form-item>
+      </el-form>
+      <template #footer>
+        <el-button @click="identitiesVisible = false">关闭</el-button>
+        <el-button type="primary" @click="handleCreateIdentity">新增身份</el-button>
+      </template>
+    </el-dialog>
+
+    <el-dialog v-model="bindTagsVisible" title="绑定标签" width="500px">
+      <el-form :model="bindTagsForm" label-width="80px">
+        <el-form-item label="标签">
+          <el-select v-model="bindTagsForm.tagIds" multiple placeholder="选择标签" style="width: 100%">
+            <el-option
+              v-for="t in tags"
+              :key="t.id"
+              :label="t.tagName"
+              :value="t.id"
+            />
+          </el-select>
+        </el-form-item>
+      </el-form>
+      <template #footer>
+        <el-button @click="bindTagsVisible = false">取消</el-button>
+        <el-button type="primary" @click="handleBindTags">确认</el-button>
+      </template>
+    </el-dialog>
   </div>
 </template>
 
 <script setup lang="ts">
 import { onMounted, reactive, ref } from 'vue'
-import { ElMessage } from 'element-plus'
-import { createPerson, listPersons } from '@/api/crm'
+import { ElMessage, ElMessageBox } from 'element-plus'
+import {
+  bindPersonTags,
+  createPerson,
+  createPersonIdentity,
+  deletePerson,
+  deletePersonIdentity,
+  listPersonIdentities,
+  listPersons,
+  listTags,
+  updatePerson,
+} from '@/api/crm'
 
-const form = reactive({
+const persons = ref<any[]>([])
+const tags = ref<any[]>([])
+
+const dialogVisible = ref(false)
+const isEdit = ref(false)
+const editingId = ref<number | null>(null)
+
+const dialogForm = reactive({
   personCode: '',
   personName: '',
   phone: '',
   personType: 3,
+  status: 1,
 })
 
-const persons = ref<any[]>([])
+function resetDialogForm() {
+  dialogForm.personCode = ''
+  dialogForm.personName = ''
+  dialogForm.phone = ''
+  dialogForm.personType = 3
+  dialogForm.status = 1
+}
+
+function fillDialogForm(row: any) {
+  dialogForm.personCode = row.personCode ?? ''
+  dialogForm.personName = row.personName ?? ''
+  dialogForm.phone = row.phone ?? ''
+  dialogForm.personType = row.personType ?? 3
+  dialogForm.status = row.status ?? 1
+}
+
+function openCreateDialog() {
+  isEdit.value = false
+  editingId.value = null
+  resetDialogForm()
+  dialogVisible.value = true
+}
+
+function openEditDialog(row: any) {
+  isEdit.value = true
+  editingId.value = row.id
+  fillDialogForm(row)
+  dialogVisible.value = true
+}
+
+function formatPersonType(type: number | undefined) {
+  if (type === 3) return '客户'
+  if (type === 1 || type === 2 || type === 4) return '员工'
+  return '未知'
+}
 
 async function loadPersons() {
   try {
@@ -57,15 +206,183 @@ async function loadPersons() {
   }
 }
 
-async function handleCreate() {
+async function loadTags() {
   try {
-    const res: any = await createPerson(form)
-    persons.value.unshift(res.data)
-    ElMessage.success('创建成功')
+    const res: any = await listTags()
+    tags.value = res.data || []
   } catch (e: any) {
     ElMessage.error(e.message)
   }
 }
 
-onMounted(loadPersons)
+async function handleSave() {
+  if (!dialogForm.personName) {
+    ElMessage.warning('请填写姓名')
+    return
+  }
+  try {
+    const payload = {
+      personCode: dialogForm.personCode,
+      personName: dialogForm.personName,
+      phone: dialogForm.phone,
+      personType: dialogForm.personType,
+      status: dialogForm.status,
+    }
+    if (isEdit.value && editingId.value != null) {
+      await updatePerson(editingId.value, payload)
+      ElMessage.success('更新成功')
+    } else {
+      const res: any = await createPerson(payload)
+      persons.value.unshift(res.data)
+      ElMessage.success('创建成功')
+    }
+    dialogVisible.value = false
+    await loadPersons()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handleStatusChange(row: any, val: any) {
+  try {
+    await updatePerson(row.id, {
+      personCode: row.personCode,
+      personName: row.personName,
+      phone: row.phone,
+      personType: row.personType,
+      status: val,
+    })
+    ElMessage.success('状态更新成功')
+    await loadPersons()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+    await loadPersons()
+  }
+}
+
+async function handleDelete(row: any) {
+  try {
+    await ElMessageBox.confirm(
+      `确定删除联系人「${row.personName || row.personCode}」吗？`,
+      '删除确认',
+      { confirmButtonText: '删除', cancelButtonText: '取消', type: 'warning' }
+    )
+    await deletePerson(row.id)
+    ElMessage.success('删除成功')
+    await loadPersons()
+  } catch (e: any) {
+    if (e !== 'cancel') {
+      ElMessage.error(e.message || '删除失败')
+    }
+  }
+}
+
+const identitiesVisible = ref(false)
+const identities = ref<any[]>([])
+const currentPersonId = ref<number | undefined>()
+const identityForm = reactive({
+  channelType: '',
+  channelUserId: '',
+  channelUserName: '',
+  subjectId: undefined as number | undefined,
+})
+
+function resetIdentityForm() {
+  identityForm.channelType = ''
+  identityForm.channelUserId = ''
+  identityForm.channelUserName = ''
+  identityForm.subjectId = undefined
+}
+
+async function openIdentities(row: any) {
+  currentPersonId.value = row.id
+  identitiesVisible.value = true
+  resetIdentityForm()
+  await loadIdentities()
+}
+
+async function loadIdentities() {
+  if (!currentPersonId.value) return
+  try {
+    const res: any = await listPersonIdentities(currentPersonId.value)
+    identities.value = res.data || []
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handleCreateIdentity() {
+  if (!currentPersonId.value) return
+  if (!identityForm.channelType || !identityForm.channelUserId) {
+    ElMessage.warning('请填写渠道和渠道用户ID')
+    return
+  }
+  try {
+    const payload: any = {
+      channelType: identityForm.channelType,
+      channelUserId: identityForm.channelUserId,
+      channelUserName: identityForm.channelUserName,
+    }
+    if (identityForm.subjectId != null) {
+      payload.subjectId = identityForm.subjectId
+    }
+    await createPersonIdentity(currentPersonId.value, payload)
+    ElMessage.success('新增成功')
+    resetIdentityForm()
+    await loadIdentities()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handleDeleteIdentity(row: any) {
+  if (!currentPersonId.value) return
+  try {
+    await ElMessageBox.confirm('确定删除该渠道身份吗？', '删除确认', {
+      confirmButtonText: '删除',
+      cancelButtonText: '取消',
+      type: 'warning',
+    })
+    await deletePersonIdentity(currentPersonId.value, row.id)
+    ElMessage.success('删除成功')
+    await loadIdentities()
+  } catch (e: any) {
+    if (e !== 'cancel') {
+      ElMessage.error(e.message || '删除失败')
+    }
+  }
+}
+
+const bindTagsVisible = ref(false)
+const bindTagsForm = reactive({
+  tagIds: [] as number[],
+})
+
+function openBindTags(row: any) {
+  currentPersonId.value = row.id
+  bindTagsForm.tagIds = []
+  bindTagsVisible.value = true
+}
+
+async function handleBindTags() {
+  if (!currentPersonId.value) return
+  try {
+    await bindPersonTags(currentPersonId.value, { tagIds: bindTagsForm.tagIds })
+    ElMessage.success('绑定成功')
+    bindTagsVisible.value = false
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+onMounted(() => {
+  loadPersons()
+  loadTags()
+})
 </script>
+
+<style scoped>
+.toolbar {
+  margin-bottom: 16px;
+}
+</style>
diff --git a/admin-web/src/views/SendPolicy.vue b/admin-web/src/views/SendPolicy.vue
new file mode 100644
index 0000000..f4b5dcc
--- /dev/null
+++ b/admin-web/src/views/SendPolicy.vue
@@ -0,0 +1,183 @@
+<template>
+  <div>
+    <div style="margin-bottom: 16px;">
+      <el-button type="primary" @click="openCreateDialog">新增策略组</el-button>
+    </div>
+
+    <el-table :data="policyGroups" border>
+      <el-table-column prop="id" label="ID" width="80" />
+      <el-table-column prop="groupCode" label="策略组编码" />
+      <el-table-column prop="groupName" label="策略组名称" />
+      <el-table-column prop="channelType" label="渠道类型" />
+      <el-table-column prop="status" label="状态">
+        <template #default="scope">
+          <el-tag v-if="scope.row.status === 1" type="success">启用</el-tag>
+          <el-tag v-else type="info">禁用</el-tag>
+        </template>
+      </el-table-column>
+      <el-table-column prop="createTime" label="创建时间" />
+      <el-table-column label="操作" width="220">
+        <template #default="scope">
+          <el-button link type="primary" @click="openEditDialog(scope.row)">编辑</el-button>
+          <el-button v-if="scope.row.status === 1" link type="warning" @click="handleToggleStatus(scope.row, 0)">禁用</el-button>
+          <el-button v-else link type="success" @click="handleToggleStatus(scope.row, 1)">启用</el-button>
+          <el-button link type="danger" @click="handleDelete(scope.row)">删除</el-button>
+        </template>
+      </el-table-column>
+    </el-table>
+
+    <el-dialog v-model="dialogVisible" :title="isEdit ? '编辑策略组' : '新增策略组'" width="600px">
+      <el-form :model="dialogForm" label-width="100px">
+        <el-form-item label="策略组编码">
+          <el-input v-model="dialogForm.group_code" :disabled="isEdit" placeholder="唯一编码" />
+        </el-form-item>
+        <el-form-item label="策略组名称">
+          <el-input v-model="dialogForm.group_name" placeholder="显示名称" />
+        </el-form-item>
+        <el-form-item label="渠道类型">
+          <el-select v-model="dialogForm.channel_type" placeholder="选择渠道类型" style="width: 100%">
+            <el-option label="企微" value="wecom" />
+            <el-option label="个人微信" value="wechat_personal" />
+            <el-option label="短信" value="sms" />
+            <el-option label="IVR" value="ivr" />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="状态">
+          <el-select v-model="dialogForm.status" placeholder="状态">
+            <el-option label="启用" :value="1" />
+            <el-option label="禁用" :value="0" />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="策略配置">
+          <el-input v-model="dialogForm.policies" type="textarea" :rows="10" placeholder='JSON 数组，例如：[{"rule":"channel_type","value":"wecom"}]' />
+        </el-form-item>
+      </el-form>
+      <template #footer>
+        <el-button @click="dialogVisible = false">取消</el-button>
+        <el-button type="primary" @click="handleSave">保存</el-button>
+      </template>
+    </el-dialog>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { onMounted, reactive, ref } from 'vue'
+import { ElMessage, ElMessageBox } from 'element-plus'
+import {
+  listPolicyGroups,
+  createPolicyGroup,
+  updatePolicyGroup,
+  updatePolicyGroupStatus,
+  deletePolicyGroup,
+} from '@/api/sendPolicy'
+
+const policyGroups = ref<any[]>([])
+const dialogVisible = ref(false)
+const isEdit = ref(false)
+
+const dialogForm = reactive({
+  group_code: '',
+  group_name: '',
+  channel_type: '',
+  status: 1,
+  policies: '[]',
+})
+
+async function loadPolicyGroups() {
+  try {
+    const res: any = await listPolicyGroups()
+    policyGroups.value = res.data || []
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+function resetDialogForm() {
+  dialogForm.group_code = ''
+  dialogForm.group_name = ''
+  dialogForm.channel_type = ''
+  dialogForm.status = 1
+  dialogForm.policies = '[]'
+}
+
+function openCreateDialog() {
+  isEdit.value = false
+  resetDialogForm()
+  dialogVisible.value = true
+}
+
+function openEditDialog(row: any) {
+  isEdit.value = true
+  dialogForm.group_code = row.groupCode
+  dialogForm.group_name = row.groupName
+  dialogForm.channel_type = row.channelType
+  dialogForm.status = row.status
+  try {
+    const policies = row.policies ? JSON.parse(row.policies) : []
+    dialogForm.policies = JSON.stringify(policies, null, 2)
+  } catch {
+    dialogForm.policies = row.policies || '[]'
+  }
+  dialogVisible.value = true
+}
+
+function buildPayload() {
+  let policies
+  try {
+    policies = JSON.parse(dialogForm.policies)
+  } catch {
+    throw new Error('策略配置不是有效的 JSON')
+  }
+  return {
+    groupCode: dialogForm.group_code,
+    groupName: dialogForm.group_name,
+    channelType: dialogForm.channel_type,
+    status: dialogForm.status,
+    policies,
+  }
+}
+
+async function handleSave() {
+  try {
+    const payload = buildPayload()
+    if (isEdit.value) {
+      await updatePolicyGroup(dialogForm.group_code, payload)
+      ElMessage.success('更新成功')
+    } else {
+      await createPolicyGroup(payload)
+      ElMessage.success('创建成功')
+    }
+    dialogVisible.value = false
+    await loadPolicyGroups()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handleToggleStatus(row: any, status: number) {
+  try {
+    await updatePolicyGroupStatus(row.groupCode, status)
+    ElMessage.success(status === 1 ? '已启用' : '已禁用')
+    await loadPolicyGroups()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handleDelete(row: any) {
+  try {
+    await ElMessageBox.confirm('确定删除该策略组吗？', '提示', { type: 'warning' })
+    await deletePolicyGroup(row.groupCode)
+    ElMessage.success('删除成功')
+    await loadPolicyGroups()
+  } catch (e: any) {
+    if (e !== 'cancel') {
+      ElMessage.error(e.message)
+    }
+  }
+}
+
+onMounted(() => {
+  loadPolicyGroups()
+})
+</script>
diff --git a/admin-web/src/views/SendRecord.vue b/admin-web/src/views/SendRecord.vue
index c1eeb06..2c75a17 100644
--- a/admin-web/src/views/SendRecord.vue
+++ b/admin-web/src/views/SendRecord.vue
@@ -1,93 +1,439 @@
 <template>
   <div>
-    <el-form :model="form" label-width="80px">
-      <el-form-item label="目标类型">
-        <el-select v-model="form.targetType">
-          <el-option label="会话" value="conversation" />
-          <el-option label="人员" value="person" />
-        </el-select>
-      </el-form-item>
-      <el-form-item label="目标" v-if="form.targetType === 'conversation'">
-        <el-select v-model="selectedConversationId" placeholder="选择会话">
-          <el-option v-for="c in conversations" :key="c.id" :label="c.conversationName" :value="c.id" />
-        </el-select>
-      </el-form-item>
-      <el-form-item label="内容类型"><el-input v-model="form.contentType" disabled /></el-form-item>
-      <el-form-item label="内容">
-        <el-input v-model="textContent" type="textarea" :rows="3" placeholder="输入文本消息" />
-      </el-form-item>
-      <el-form-item>
-        <el-button type="primary" @click="handleTestSend">测试发送</el-button>
-      </el-form-item>
-    </el-form>
+    <!-- 统计卡片 -->
+    <el-row :gutter="16">
+      <el-col :span="6">
+        <el-card shadow="hover">
+          <el-statistic title="今日发送总数" :value="statistics.total" />
+        </el-card>
+      </el-col>
+      <el-col :span="6">
+        <el-card shadow="hover">
+          <el-statistic title="成功" :value="statistics.successCount">
+            <template #suffix>
+              <el-tag type="success" size="small">成功</el-tag>
+            </template>
+          </el-statistic>
+        </el-card>
+      </el-col>
+      <el-col :span="6">
+        <el-card shadow="hover">
+          <el-statistic title="失败" :value="statistics.failedCount">
+            <template #suffix>
+              <el-tag type="danger" size="small">失败</el-tag>
+            </template>
+          </el-statistic>
+        </el-card>
+      </el-col>
+      <el-col :span="6">
+        <el-card shadow="hover">
+          <el-statistic title="待发送" :value="statistics.pendingCount">
+            <template #suffix>
+              <el-tag type="info" size="small">待发送</el-tag>
+            </template>
+          </el-statistic>
+        </el-card>
+      </el-col>
+    </el-row>
 
-    <el-divider />
+    <!-- 测试发送 -->
+    <el-card class="mt-4" shadow="never">
+      <template #header>
+        <span>测试发送</span>
+      </template>
+      <el-form :model="testForm" label-width="80px" inline>
+        <el-form-item label="目标类型">
+          <el-select v-model="testForm.targetType" style="width: 140px">
+            <el-option label="会话" value="conversation" />
+            <el-option label="人员" value="person" />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="目标" v-if="testForm.targetType === 'conversation'" style="width: 280px">
+          <el-select v-model="selectedConversationId" placeholder="选择会话" clearable>
+            <el-option
+              v-for="c in conversations"
+              :key="c.id"
+              :label="c.conversationName"
+              :value="c.id"
+            />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="目标" v-if="testForm.targetType === 'person'" style="width: 280px">
+          <el-input v-model="personIdInput" placeholder="输入 person_id" />
+        </el-form-item>
+        <el-form-item label="渠道">
+          <el-select v-model="testForm.channelStrategy.channel_type" style="width: 140px">
+            <el-option label="企微" value="wecom" />
+            <el-option label="微信个人号" value="wechat_personal" />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="内容">
+          <el-input v-model="textContent" placeholder="输入文本消息" style="width: 260px" />
+        </el-form-item>
+        <el-form-item>
+          <el-button type="primary" @click="handleTestSend">测试发送</el-button>
+        </el-form-item>
+      </el-form>
+    </el-card>
 
-    <el-table :data="records" border>
-      <el-table-column prop="id" label="ID" width="80" />
-      <el-table-column prop="taskId" label="任务ID" />
-      <el-table-column prop="targetType" label="目标类型" />
-      <el-table-column prop="channelType" label="渠道" />
-      <el-table-column prop="contentType" label="内容类型" />
-      <el-table-column prop="sendStatus" label="状态">
-        <template #default="scope">
-          <el-tag v-if="scope.row.sendStatus === 2" type="success">成功</el-tag>
-          <el-tag v-else-if="scope.row.sendStatus === 3" type="danger">失败</el-tag>
-          <el-tag v-else type="info">待发送</el-tag>
-        </template>
-      </el-table-column>
-      <el-table-column prop="createTime" label="创建时间" />
-    </el-table>
+    <!-- 筛选栏 -->
+    <el-card class="mt-4" shadow="never">
+      <el-form :model="query" inline>
+        <el-form-item label="任务 ID">
+          <el-input v-model="query.taskId" placeholder="SND..." clearable style="width: 220px" />
+        </el-form-item>
+        <el-form-item label="发送时间">
+          <el-date-picker
+            v-model="dateRange"
+            type="datetimerange"
+            range-separator="至"
+            start-placeholder="开始时间"
+            end-placeholder="结束时间"
+            value-format="YYYY-MM-DD[T]HH:mm:ss"
+            style="width: 360px"
+          />
+        </el-form-item>
+        <el-form-item label="渠道">
+          <el-select v-model="query.channelType" placeholder="全部" clearable style="width: 140px">
+            <el-option label="企微" value="wecom" />
+            <el-option label="微信个人号" value="wechat_personal" />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="状态">
+          <el-select v-model="query.status" placeholder="全部" clearable style="width: 120px">
+            <el-option label="待发送" :value="0" />
+            <el-option label="发送中" :value="1" />
+            <el-option label="成功" :value="2" />
+            <el-option label="失败" :value="3" />
+          </el-select>
+        </el-form-item>
+        <el-form-item>
+          <el-button type="primary" @click="handleSearch">查询</el-button>
+          <el-button @click="handleReset">重置</el-button>
+        </el-form-item>
+      </el-form>
+    </el-card>
+
+    <!-- 记录列表 -->
+    <el-card class="mt-4" shadow="never">
+      <el-table :data="records" border v-loading="loading">
+        <el-table-column prop="taskId" label="任务 ID" min-width="180" show-overflow-tooltip />
+        <el-table-column prop="targetType" label="目标类型" width="110" />
+        <el-table-column prop="channelType" label="渠道" width="120" />
+        <el-table-column prop="sendStatus" label="状态" width="100">
+          <template #default="{ row }">
+            <el-tag v-if="row.sendStatus === 0" type="info">待发送</el-tag>
+            <el-tag v-else-if="row.sendStatus === 1" type="warning">发送中</el-tag>
+            <el-tag v-else-if="row.sendStatus === 2" type="success">成功</el-tag>
+            <el-tag v-else-if="row.sendStatus === 3" type="danger">失败</el-tag>
+            <el-tag v-else type="info">未知</el-tag>
+          </template>
+        </el-table-column>
+        <el-table-column prop="sendTime" label="发送时间" min-width="160" />
+        <el-table-column prop="finishTime" label="完成时间" min-width="160" />
+        <el-table-column label="操作" width="160" fixed="right">
+          <template #default="{ row }">
+            <el-button link type="primary" @click="openDetail(row)">详情</el-button>
+            <el-button
+              v-if="row.sendStatus === 0"
+              link
+              type="danger"
+              @click="handleCancel(row.taskId)"
+            >
+              取消
+            </el-button>
+          </template>
+        </el-table-column>
+      </el-table>
+
+      <div class="pagination-bar">
+        <el-pagination
+          v-model:current-page="pagination.page"
+          v-model:page-size="pagination.size"
+          :total="pagination.total"
+          :page-sizes="[10, 20, 50, 100]"
+          layout="total, sizes, prev, pager, next"
+          @size-change="handleSizeChange"
+          @current-change="loadRecords"
+        />
+      </div>
+    </el-card>
+
+    <!-- 详情抽屉 -->
+    <el-drawer v-model="detailVisible" title="发送详情" size="520px">
+      <div v-if="currentRecord" class="detail-content">
+        <div class="detail-item">
+          <span class="detail-label">任务 ID</span>
+          <span class="detail-value">{{ currentRecord.taskId }}</span>
+        </div>
+        <div class="detail-item">
+          <span class="detail-label">目标类型</span>
+          <span class="detail-value">{{ currentRecord.targetType }}</span>
+        </div>
+        <div class="detail-item">
+          <span class="detail-label">目标值</span>
+          <pre>{{ formatJson(currentRecord.targetValue) }}</pre>
+        </div>
+        <div class="detail-item">
+          <span class="detail-label">渠道</span>
+          <span class="detail-value">{{ currentRecord.channelType }}</span>
+        </div>
+        <div class="detail-item">
+          <span class="detail-label">内容</span>
+          <pre>{{ formatJson(currentRecord.contentBody) }}</pre>
+        </div>
+        <div class="detail-item">
+          <span class="detail-label">渠道结果</span>
+          <pre>{{ formatJson(currentRecord.channelResult) }}</pre>
+        </div>
+        <div class="detail-item">
+          <span class="detail-label">回调地址</span>
+          <span class="detail-value">{{ currentRecord.callbackUrl || '-' }}</span>
+        </div>
+        <div class="detail-item">
+          <span class="detail-label">发送时间</span>
+          <span class="detail-value">{{ currentRecord.sendTime || '-' }}</span>
+        </div>
+        <div class="detail-item">
+          <span class="detail-label">完成时间</span>
+          <span class="detail-value">{{ currentRecord.finishTime || '-' }}</span>
+        </div>
+      </div>
+    </el-drawer>
   </div>
 </template>
 
 <script setup lang="ts">
-import { onMounted, reactive, ref, computed } from 'vue'
-import { ElMessage } from 'element-plus'
-import { testSendMessage, listSendRecords } from '@/api/send'
+import { onMounted, reactive, ref } from 'vue'
+import { ElMessage, ElMessageBox } from 'element-plus'
+import {
+  queryRecords,
+  getStatistics,
+  cancelTask,
+  testSend,
+  type QueryRecordsParams,
+} from '@/api/sendRecord'
 import { listConversations } from '@/api/channel'
 
-const form = reactive({ targetType: 'conversation', contentType: 'text', channelStrategy: { channel_type: 'wecom', strategy: 'primary' } })
-const selectedConversationId = ref<number | null>(null)
-const textContent = ref('')
-const records = ref<any[]>([])
-const conversations = ref<any[]>([])
-
-const targetValue = computed(() => {
-  if (form.targetType === 'conversation' && selectedConversationId.value) {
-    return { conversation_id: selectedConversationId.value }
-  }
-  return {}
-})
-
-async function loadRecords() {
-  const res: any = await listSendRecords()
-  records.value = res.data || []
+interface RecordItem {
+  id: number
+  taskId: string
+  targetType: string
+  targetValue?: string
+  channelType: string
+  sendStatus: number
+  sendTime?: string
+  finishTime?: string
+  contentBody?: string
+  channelResult?: string
+  callbackUrl?: string
 }
 
-async function loadConversations() {
-  const res: any = await listConversations()
-  conversations.value = res.data || []
+const statistics = reactive({
+  total: 0,
+  pendingCount: 0,
+  sendingCount: 0,
+  successCount: 0,
+  failedCount: 0,
+})
+
+const query = reactive<QueryRecordsParams>({
+  taskId: '',
+  channelType: '',
+  status: '',
+})
+const dateRange = ref<string[]>([])
+
+const pagination = reactive({
+  page: 1,
+  size: 20,
+  total: 0,
+})
+
+const records = ref<RecordItem[]>([])
+const loading = ref(false)
+const detailVisible = ref(false)
+const currentRecord = ref<RecordItem | null>(null)
+
+const testForm = reactive({
+  targetType: 'conversation',
+  contentType: 'text',
+  channelStrategy: { channel_type: 'wecom', strategy: 'primary' },
+})
+const selectedConversationId = ref<number | null>(null)
+const personIdInput = ref('')
+const textContent = ref('')
+const conversations = ref<any[]>([])
+
+function buildTargetValue() {
+  if (testForm.targetType === 'conversation' && selectedConversationId.value) {
+    return { conversation_id: selectedConversationId.value }
+  }
+  if (testForm.targetType === 'person' && personIdInput.value) {
+    return { person_id: Number(personIdInput.value) }
+  }
+  return {}
+}
+
+async function loadRecords() {
+  loading.value = true
+  try {
+    const params: QueryRecordsParams = {
+      page: pagination.page,
+      size: pagination.size,
+      taskId: query.taskId || undefined,
+      channelType: query.channelType || undefined,
+      status: query.status === '' ? undefined : query.status,
+    }
+    if (dateRange.value && dateRange.value.length === 2) {
+      params.start = dateRange.value[0]
+      params.end = dateRange.value[1]
+    }
+    const res: any = await queryRecords(params)
+    const data = res.data || {}
+    records.value = data.records || data || []
+    pagination.total = data.total || records.value.length
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  } finally {
+    loading.value = false
+  }
+}
+
+function handleSearch() {
+  pagination.page = 1
+  loadRecords()
+}
+
+function handleReset() {
+  query.taskId = ''
+  query.channelType = ''
+  query.status = ''
+  dateRange.value = []
+  pagination.page = 1
+  loadRecords()
+}
+
+function handleSizeChange() {
+  pagination.page = 1
+  loadRecords()
+}
+
+async function loadStatistics() {
+  const now = new Date()
+  const start = formatDateTime(new Date(now.getFullYear(), now.getMonth(), now.getDate(), 0, 0, 0))
+  const end = formatDateTime(now)
+  try {
+    const res: any = await getStatistics(start, end)
+    Object.assign(statistics, res.data || {})
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
 }
 
 async function handleTestSend() {
+  const targetValue = buildTargetValue()
+  if (Object.keys(targetValue).length === 0) {
+    ElMessage.warning('请选择或填写目标')
+    return
+  }
   try {
-    await testSendMessage({
-      targetType: form.targetType,
-      targetValue: targetValue.value,
+    await testSend({
+      targetType: testForm.targetType,
+      targetValue,
       contentType: 'text',
       content: { text: textContent.value },
-      channelStrategy: form.channelStrategy,
+      channelStrategy: testForm.channelStrategy,
     })
     ElMessage.success('测试发送已提交')
+    textContent.value = ''
     await loadRecords()
+    await loadStatistics()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function handleCancel(taskId: string) {
+  try {
+    await ElMessageBox.confirm('确定取消该任务的待发送记录？', '提示', { type: 'warning' })
+    await cancelTask(taskId)
+    ElMessage.success('取消成功')
+    await loadRecords()
+    await loadStatistics()
+  } catch (e: any) {
+    if (e !== 'cancel') {
+      ElMessage.error(e.message || '取消失败')
+    }
+  }
+}
+
+function openDetail(row: RecordItem) {
+  currentRecord.value = row
+  detailVisible.value = true
+}
+
+function formatJson(value?: string) {
+  if (!value) return '-'
+  try {
+    return JSON.stringify(JSON.parse(value), null, 2)
+  } catch {
+    return value
+  }
+}
+
+function formatDateTime(date: Date): string {
+  const pad = (n: number) => String(n).padStart(2, '0')
+  return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())}T${pad(date.getHours())}:${pad(date.getMinutes())}:${pad(date.getSeconds())}`
+}
+
+async function loadConversations() {
+  try {
+    const res: any = await listConversations()
+    conversations.value = res.data || []
   } catch (e: any) {
     ElMessage.error(e.message)
   }
 }
 
 onMounted(() => {
-  loadRecords()
   loadConversations()
+  loadRecords()
+  loadStatistics()
 })
 </script>
+
+<style scoped>
+.mt-4 {
+  margin-top: 16px;
+}
+.pagination-bar {
+  margin-top: 16px;
+  display: flex;
+  justify-content: flex-end;
+}
+.detail-content {
+  font-size: 14px;
+}
+.detail-item {
+  margin-bottom: 16px;
+}
+.detail-label {
+  display: block;
+  color: #606266;
+  margin-bottom: 6px;
+}
+.detail-value {
+  color: #303133;
+  word-break: break-all;
+}
+pre {
+  margin: 0;
+  padding: 12px;
+  background: #f5f7fa;
+  border-radius: 4px;
+  overflow-x: auto;
+  white-space: pre-wrap;
+  word-break: break-all;
+}
+</style>
diff --git a/admin-web/src/views/Tag.vue b/admin-web/src/views/Tag.vue
index 37bc6c9..33d6a4d 100644
--- a/admin-web/src/views/Tag.vue
+++ b/admin-web/src/views/Tag.vue
@@ -1,47 +1,124 @@
 <template>
   <div>
-    <el-form :model="form" inline>
-      <el-form-item label="标签名">
-        <el-input v-model="form.tagName" placeholder="标签名" />
-      </el-form-item>
-      <el-form-item label="父标签">
-        <el-select v-model="form.parentId" placeholder="选择父标签">
-          <el-option label="无" :value="0" />
-          <el-option
-            v-for="t in tags"
-            :key="t.id"
-            :label="t.tagName"
-            :value="t.id"
-          />
-        </el-select>
-      </el-form-item>
-      <el-form-item>
-        <el-button type="primary" @click="handleCreate">创建</el-button>
-      </el-form-item>
-    </el-form>
+    <div class="toolbar">
+      <el-button type="primary" @click="openCreateDialog">创建标签</el-button>
+    </div>
 
     <el-table :data="tags" border>
       <el-table-column prop="id" label="ID" width="80" />
       <el-table-column prop="tagName" label="名称" />
-      <el-table-column prop="tagPath" label="路径" />
-      <el-table-column prop="level" label="层级" />
-      <el-table-column prop="status" label="状态" />
+      <el-table-column prop="tagPath" label="路径" show-overflow-tooltip />
+      <el-table-column prop="level" label="层级" width="100">
+        <template #default="{ row }">
+          {{ formatLevel(row.level) }}
+        </template>
+      </el-table-column>
+      <el-table-column prop="status" label="状态" width="100">
+        <template #default="{ row }">
+          <el-tag :type="row.status === 1 ? 'success' : 'info'">
+            {{ row.status === 1 ? '启用' : '禁用' }}
+          </el-tag>
+        </template>
+      </el-table-column>
+      <el-table-column label="操作" width="260">
+        <template #default="{ row }">
+          <div class="op-row">
+            <el-button size="small" @click="openEditDialog(row)">编辑</el-button>
+            <el-button size="small" type="danger" @click="handleDelete(row)">删除</el-button>
+            <el-switch
+              v-model="row.status"
+              :active-value="1"
+              :inactive-value="0"
+              style="margin-left: 12px"
+              @change="(val: any) => handleStatusChange(row, val)"
+            />
+          </div>
+        </template>
+      </el-table-column>
     </el-table>
+
+    <el-dialog v-model="dialogVisible" :title="isEdit ? '编辑标签' : '创建标签'" width="600px">
+      <el-form :model="dialogForm" label-width="100px">
+        <el-form-item label="标签名">
+          <el-input v-model="dialogForm.tagName" placeholder="标签名" />
+        </el-form-item>
+        <el-form-item label="父标签">
+          <el-select v-model="dialogForm.parentId" placeholder="选择父标签" style="width: 100%">
+            <el-option label="无" :value="0" />
+            <el-option
+              v-for="t in tags"
+              :key="t.id"
+              :label="t.tagName"
+              :value="t.id"
+            />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="状态">
+          <el-switch
+            v-model="dialogForm.status"
+            :active-value="1"
+            :inactive-value="0"
+            active-text="启用"
+            inactive-text="禁用"
+          />
+        </el-form-item>
+      </el-form>
+      <template #footer>
+        <el-button @click="dialogVisible = false">取消</el-button>
+        <el-button type="primary" @click="handleSave">保存</el-button>
+      </template>
+    </el-dialog>
   </div>
 </template>
 
 <script setup lang="ts">
 import { onMounted, reactive, ref } from 'vue'
-import { ElMessage } from 'element-plus'
-import { createTag, listTags } from '@/api/crm'
-
-const form = reactive({
-  tagName: '',
-  parentId: 0,
-})
+import { ElMessage, ElMessageBox } from 'element-plus'
+import { createTag, deleteTag, listTags, updateTag } from '@/api/crm'
 
 const tags = ref<any[]>([])
 
+const dialogVisible = ref(false)
+const isEdit = ref(false)
+const editingId = ref<number | null>(null)
+
+const dialogForm = reactive({
+  tagName: '',
+  parentId: 0,
+  status: 1,
+})
+
+function resetDialogForm() {
+  dialogForm.tagName = ''
+  dialogForm.parentId = 0
+  dialogForm.status = 1
+}
+
+function fillDialogForm(row: any) {
+  dialogForm.tagName = row.tagName ?? ''
+  dialogForm.parentId = row.parentId ?? 0
+  dialogForm.status = row.status ?? 1
+}
+
+function openCreateDialog() {
+  isEdit.value = false
+  editingId.value = null
+  resetDialogForm()
+  dialogVisible.value = true
+}
+
+function openEditDialog(row: any) {
+  isEdit.value = true
+  editingId.value = row.id
+  fillDialogForm(row)
+  dialogVisible.value = true
+}
+
+function formatLevel(level: number | undefined) {
+  if (level == null) return '-'
+  return `第 ${level} 级`
+}
+
 async function loadTags() {
   try {
     const res: any = await listTags()
@@ -51,15 +128,69 @@ async function loadTags() {
   }
 }
 
-async function handleCreate() {
+async function handleSave() {
+  if (!dialogForm.tagName) {
+    ElMessage.warning('请填写标签名')
+    return
+  }
   try {
-    const res: any = await createTag(form)
-    tags.value.unshift(res.data)
-    ElMessage.success('创建成功')
+    const payload = {
+      tagName: dialogForm.tagName,
+      parentId: dialogForm.parentId,
+      status: dialogForm.status,
+    }
+    if (isEdit.value && editingId.value != null) {
+      await updateTag(editingId.value, payload)
+      ElMessage.success('更新成功')
+    } else {
+      const res: any = await createTag(payload)
+      tags.value.unshift(res.data)
+      ElMessage.success('创建成功')
+    }
+    dialogVisible.value = false
+    await loadTags()
   } catch (e: any) {
     ElMessage.error(e.message)
   }
 }
 
+async function handleStatusChange(row: any, val: any) {
+  try {
+    await updateTag(row.id, {
+      tagName: row.tagName,
+      parentId: row.parentId,
+      status: val,
+    })
+    ElMessage.success('状态更新成功')
+    await loadTags()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+    await loadTags()
+  }
+}
+
+async function handleDelete(row: any) {
+  try {
+    await ElMessageBox.confirm(
+      `确定删除标签「${row.tagName}」吗？`,
+      '删除确认',
+      { confirmButtonText: '删除', cancelButtonText: '取消', type: 'warning' }
+    )
+    await deleteTag(row.id)
+    ElMessage.success('删除成功')
+    await loadTags()
+  } catch (e: any) {
+    if (e !== 'cancel') {
+      ElMessage.error(e.message || '删除失败')
+    }
+  }
+}
+
 onMounted(loadTags)
 </script>
+
+<style scoped>
+.toolbar {
+  margin-bottom: 16px;
+}
+</style>
diff --git a/admin-web/src/views/TenantManagement.vue b/admin-web/src/views/TenantManagement.vue
index bc82c71..d748e46 100644
--- a/admin-web/src/views/TenantManagement.vue
+++ b/admin-web/src/views/TenantManagement.vue
@@ -1,38 +1,126 @@
 <template>
   <div>
-    <h2>租户管理</h2>
-    <el-form :model="form" inline>
-      <el-form-item label="租户编码">
-        <el-input v-model="form.tenantCode" placeholder="租户编码" />
-      </el-form-item>
-      <el-form-item label="租户名称">
-        <el-input v-model="form.tenantName" placeholder="租户名称" />
-      </el-form-item>
-      <el-form-item>
-        <el-button type="primary" @click="handleCreate">创建</el-button>
-      </el-form-item>
-    </el-form>
+    <div class="toolbar">
+      <el-button type="primary" @click="openCreateDialog">创建租户</el-button>
+    </div>
 
     <el-table :data="tenants" border>
       <el-table-column prop="id" label="ID" width="80" />
       <el-table-column prop="tenantCode" label="租户编码" />
       <el-table-column prop="tenantName" label="租户名称" />
-      <el-table-column prop="status" label="状态" />
+      <el-table-column prop="inboundWebhookUrl" label="入站 Webhook" show-overflow-tooltip />
+      <el-table-column prop="status" label="状态" width="100">
+        <template #default="{ row }">
+          <el-tag :type="row.status === 1 ? 'success' : 'info'">
+            {{ row.status === 1 ? '启用' : '禁用' }}
+          </el-tag>
+        </template>
+      </el-table-column>
+      <el-table-column label="操作" width="260">
+        <template #default="{ row }">
+          <el-button size="small" @click="openEditDialog(row)">编辑</el-button>
+          <el-button size="small" type="danger" @click="handleDelete(row)">删除</el-button>
+          <el-switch
+            v-model="row.status"
+            :active-value="1"
+            :inactive-value="0"
+            style="margin: 0 12px"
+            @change="(val: any) => handleStatusChange(row, val)"
+          />
+        </template>
+      </el-table-column>
     </el-table>
+
+    <el-dialog v-model="dialogVisible" :title="isEdit ? '编辑租户' : '创建租户'" width="600px">
+      <el-form :model="dialogForm" label-width="140px">
+        <el-form-item label="租户编码">
+          <el-input v-model="dialogForm.tenantCode" :disabled="isEdit" placeholder="租户编码" />
+        </el-form-item>
+        <el-form-item label="租户名称">
+          <el-input v-model="dialogForm.tenantName" placeholder="租户名称" />
+        </el-form-item>
+        <el-form-item label="入站 Webhook">
+          <el-input v-model="dialogForm.inboundWebhookUrl" placeholder="https://example.com/webhook" />
+        </el-form-item>
+        <el-form-item label="状态">
+          <el-switch
+            v-model="dialogForm.status"
+            :active-value="1"
+            :inactive-value="0"
+            active-text="启用"
+            inactive-text="禁用"
+          />
+        </el-form-item>
+        <template v-if="!isEdit">
+          <el-form-item label="初始化管理员">
+            <el-checkbox v-model="dialogForm.createAdmin">同时创建租户管理员</el-checkbox>
+          </el-form-item>
+          <el-form-item v-if="dialogForm.createAdmin" label="管理员账号">
+            <el-input v-model="dialogForm.initAdminUsername" placeholder="admin" />
+          </el-form-item>
+          <el-form-item v-if="dialogForm.createAdmin" label="初始密码">
+            <el-input v-model="dialogForm.initAdminPassword" type="password" placeholder="初始密码" />
+          </el-form-item>
+        </template>
+      </el-form>
+      <template #footer>
+        <el-button @click="dialogVisible = false">取消</el-button>
+        <el-button type="primary" @click="handleSave">保存</el-button>
+      </template>
+    </el-dialog>
   </div>
 </template>
 
 <script setup lang="ts">
 import { onMounted, reactive, ref } from 'vue'
-import { ElMessage } from 'element-plus'
-import { createTenant, listTenants } from '@/api/account'
-
-const form = reactive({
-  tenantCode: '',
-  tenantName: '',
-})
+import { ElMessage, ElMessageBox } from 'element-plus'
+import { createTenant, deleteTenant, listTenants, updateTenant } from '@/api/account'
 
 const tenants = ref<any[]>([])
+const dialogVisible = ref(false)
+const isEdit = ref(false)
+const editingId = ref<number | null>(null)
+
+const dialogForm = reactive({
+  tenantCode: '',
+  tenantName: '',
+  inboundWebhookUrl: '',
+  status: 1,
+  createAdmin: true,
+  initAdminUsername: 'admin',
+  initAdminPassword: '',
+})
+
+function resetDialogForm() {
+  dialogForm.tenantCode = ''
+  dialogForm.tenantName = ''
+  dialogForm.inboundWebhookUrl = ''
+  dialogForm.status = 1
+  dialogForm.createAdmin = true
+  dialogForm.initAdminUsername = 'admin'
+  dialogForm.initAdminPassword = ''
+}
+
+function fillDialogForm(row: any) {
+  dialogForm.tenantCode = row.tenantCode ?? ''
+  dialogForm.tenantName = row.tenantName ?? ''
+  dialogForm.inboundWebhookUrl = row.inboundWebhookUrl ?? ''
+  dialogForm.status = row.status ?? 1
+}
+
+function openCreateDialog() {
+  isEdit.value = false
+  editingId.value = null
+  resetDialogForm()
+  dialogVisible.value = true
+}
+
+function openEditDialog(row: any) {
+  isEdit.value = true
+  editingId.value = row.id
+  fillDialogForm(row)
+  dialogVisible.value = true
+}
 
 async function loadTenants() {
   try {
@@ -43,15 +131,80 @@ async function loadTenants() {
   }
 }
 
-async function handleCreate() {
+async function handleSave() {
+  if (!dialogForm.tenantCode || !dialogForm.tenantName) {
+    ElMessage.warning('请填写租户编码和租户名称')
+    return
+  }
   try {
-    await createTenant(form)
-    ElMessage.success('创建成功')
+    if (isEdit.value && editingId.value != null) {
+      await updateTenant(editingId.value, {
+        tenantName: dialogForm.tenantName,
+        inboundWebhookUrl: dialogForm.inboundWebhookUrl,
+        status: dialogForm.status,
+      })
+      ElMessage.success('更新成功')
+    } else {
+      const payload: any = {
+        tenantCode: dialogForm.tenantCode,
+        tenantName: dialogForm.tenantName,
+        inboundWebhookUrl: dialogForm.inboundWebhookUrl,
+      }
+      if (dialogForm.createAdmin) {
+        if (!dialogForm.initAdminUsername || !dialogForm.initAdminPassword) {
+          ElMessage.warning('请填写初始化管理员账号和密码')
+          return
+        }
+        payload.initAdminUsername = dialogForm.initAdminUsername
+        payload.initAdminPassword = dialogForm.initAdminPassword
+      }
+      await createTenant(payload)
+      ElMessage.success('创建成功')
+    }
+    dialogVisible.value = false
     await loadTenants()
   } catch (e: any) {
     ElMessage.error(e.message)
   }
 }
 
+async function handleStatusChange(row: any, val: any) {
+  try {
+    await updateTenant(row.id, {
+      tenantName: row.tenantName,
+      inboundWebhookUrl: row.inboundWebhookUrl,
+      status: val,
+    })
+    ElMessage.success('状态更新成功')
+    await loadTenants()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+    await loadTenants()
+  }
+}
+
+async function handleDelete(row: any) {
+  try {
+    await ElMessageBox.confirm(
+      `确定删除租户「${row.tenantName}（${row.tenantCode}）」吗？`,
+      '删除确认',
+      { confirmButtonText: '删除', cancelButtonText: '取消', type: 'warning' }
+    )
+    await deleteTenant(row.id)
+    ElMessage.success('删除成功')
+    await loadTenants()
+  } catch (e: any) {
+    if (e !== 'cancel') {
+      ElMessage.error(e.message || '删除失败')
+    }
+  }
+}
+
 onMounted(loadTenants)
 </script>
+
+<style scoped>
+.toolbar {
+  margin-bottom: 16px;
+}
+</style>
diff --git a/admin-web/src/views/UserManagement.vue b/admin-web/src/views/UserManagement.vue
index dbc95f5..083b93a 100644
--- a/admin-web/src/views/UserManagement.vue
+++ b/admin-web/src/views/UserManagement.vue
@@ -1,62 +1,296 @@
 <template>
   <div>
-    <h2>用户管理</h2>
-    <el-form :model="form" inline>
-      <el-form-item label="用户名">
-        <el-input v-model="form.username" placeholder="用户名" />
-      </el-form-item>
-      <el-form-item label="密码">
-        <el-input v-model="form.password" type="password" placeholder="密码" />
-      </el-form-item>
-      <el-form-item label="真实姓名">
-        <el-input v-model="form.realName" placeholder="真实姓名" />
-      </el-form-item>
-      <el-form-item>
-        <el-button type="primary" @click="handleCreate">创建</el-button>
-      </el-form-item>
-    </el-form>
+    <div class="toolbar">
+      <el-select
+        v-model="selectedTenant"
+        placeholder="选择租户"
+        clearable
+        style="width: 200px; margin-right: 12px"
+        :disabled="!isPlatformAdmin"
+        @change="loadUsers"
+      >
+        <el-option
+          v-for="t in tenants"
+          :key="t.id"
+          :label="`${t.tenantName}（${t.tenantCode}）`"
+          :value="t.tenantCode"
+        />
+      </el-select>
+      <el-button type="primary" @click="openCreateDialog">创建用户</el-button>
+    </div>
 
     <el-table :data="users" border>
       <el-table-column prop="id" label="ID" width="80" />
+      <el-table-column prop="tenantCode" label="租户编码" />
       <el-table-column prop="username" label="用户名" />
       <el-table-column prop="realName" label="真实姓名" />
-      <el-table-column prop="roleCodes" label="角色" />
-      <el-table-column prop="status" label="状态" />
+      <el-table-column prop="phone" label="手机号" />
+      <el-table-column prop="roleCodes" label="角色">
+        <template #default="{ row }">
+          {{ formatRoles(row.roleCodes) }}
+        </template>
+      </el-table-column>
+      <el-table-column prop="status" label="状态" width="100">
+        <template #default="{ row }">
+          <el-tag :type="row.status === 1 ? 'success' : 'info'">
+            {{ row.status === 1 ? '启用' : '禁用' }}
+          </el-tag>
+        </template>
+      </el-table-column>
+      <el-table-column label="操作" width="260">
+        <template #default="{ row }">
+          <el-button size="small" @click="openEditDialog(row)">编辑</el-button>
+          <el-button size="small" type="danger" @click="handleDelete(row)">删除</el-button>
+          <el-switch
+            v-model="row.status"
+            :active-value="1"
+            :inactive-value="0"
+            style="margin: 0 12px"
+            @change="(val: any) => handleStatusChange(row, val)"
+          />
+        </template>
+      </el-table-column>
     </el-table>
+
+    <el-dialog v-model="dialogVisible" :title="isEdit ? '编辑用户' : '创建用户'" width="600px">
+      <el-form :model="dialogForm" label-width="100px">
+        <el-form-item label="租户">
+          <el-select v-model="dialogForm.tenantCode" :disabled="isEdit" style="width: 100%">
+            <el-option
+              v-for="t in tenants"
+              :key="t.id"
+              :label="`${t.tenantName}（${t.tenantCode}）`"
+              :value="t.tenantCode"
+            />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="用户名">
+          <el-input v-model="dialogForm.username" :disabled="isEdit" placeholder="用户名" />
+        </el-form-item>
+        <el-form-item v-if="!isEdit" label="密码">
+          <el-input v-model="dialogForm.password" type="password" placeholder="密码" />
+        </el-form-item>
+        <el-form-item label="真实姓名">
+          <el-input v-model="dialogForm.realName" placeholder="真实姓名" />
+        </el-form-item>
+        <el-form-item label="手机号">
+          <el-input v-model="dialogForm.phone" placeholder="手机号" />
+        </el-form-item>
+        <el-form-item label="角色">
+          <el-select v-model="dialogForm.roleCodes" multiple placeholder="选择角色" style="width: 100%">
+            <el-option
+              v-for="r in roles"
+              :key="r.id"
+              :label="r.roleName"
+              :value="r.roleCode"
+            />
+          </el-select>
+        </el-form-item>
+        <el-form-item label="状态">
+          <el-switch
+            v-model="dialogForm.status"
+            :active-value="1"
+            :inactive-value="0"
+            active-text="启用"
+            inactive-text="禁用"
+          />
+        </el-form-item>
+      </el-form>
+      <template #footer>
+        <el-button @click="dialogVisible = false">取消</el-button>
+        <el-button type="primary" @click="handleSave">保存</el-button>
+      </template>
+    </el-dialog>
   </div>
 </template>
 
 <script setup lang="ts">
-import { onMounted, reactive, ref } from 'vue'
-import { ElMessage } from 'element-plus'
-import { createUser, listUsers } from '@/api/account'
+import { computed, onMounted, reactive, ref } from 'vue'
+import { ElMessage, ElMessageBox } from 'element-plus'
+import { useAuthStore } from '@/stores/auth'
+import {
+  createUser,
+  deleteUser,
+  listRoles,
+  listTenants,
+  listUsers,
+  updateUser,
+} from '@/api/account'
 
-const form = reactive({
+const authStore = useAuthStore()
+const isPlatformAdmin = computed(() => authStore.roleCodes.includes('platform_admin'))
+
+const users = ref<any[]>([])
+const tenants = ref<any[]>([])
+const roles = ref<any[]>([])
+const selectedTenant = ref(authStore.tenantCode || '')
+
+const dialogVisible = ref(false)
+const isEdit = ref(false)
+const editingId = ref<number | null>(null)
+
+const dialogForm = reactive({
+  tenantCode: '',
   username: '',
   password: '',
   realName: '',
+  phone: '',
+  roleCodes: [] as string[],
+  status: 1,
 })
 
-const users = ref<any[]>([])
+function resetDialogForm() {
+  dialogForm.tenantCode = isPlatformAdmin.value ? '' : (authStore.tenantCode || '')
+  dialogForm.username = ''
+  dialogForm.password = ''
+  dialogForm.realName = ''
+  dialogForm.phone = ''
+  dialogForm.roleCodes = []
+  dialogForm.status = 1
+}
+
+function fillDialogForm(row: any) {
+  dialogForm.tenantCode = row.tenantCode ?? ''
+  dialogForm.username = row.username ?? ''
+  dialogForm.password = ''
+  dialogForm.realName = row.realName ?? ''
+  dialogForm.phone = row.phone ?? ''
+  dialogForm.roleCodes = row.roleCodes || []
+  dialogForm.status = row.status ?? 1
+}
+
+function openCreateDialog() {
+  isEdit.value = false
+  editingId.value = null
+  resetDialogForm()
+  dialogVisible.value = true
+}
+
+function openEditDialog(row: any) {
+  isEdit.value = true
+  editingId.value = row.id
+  fillDialogForm(row)
+  dialogVisible.value = true
+}
+
+function formatRoles(codes: string[] | undefined) {
+  if (!codes || codes.length === 0) return '-'
+  return codes
+    .map((code) => {
+      const role = roles.value.find((r) => r.roleCode === code)
+      return role ? role.roleName : code
+    })
+    .join('，')
+}
+
+async function loadTenants() {
+  try {
+    const res: any = await listTenants()
+    tenants.value = res.data || []
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
+
+async function loadRoles() {
+  try {
+    const res: any = await listRoles()
+    roles.value = res.data || []
+  } catch (e: any) {
+    ElMessage.error(e.message)
+  }
+}
 
 async function loadUsers() {
   try {
-    const res: any = await listUsers()
+    const res: any = await listUsers(selectedTenant.value || undefined)
     users.value = res.data || []
   } catch (e: any) {
     ElMessage.error(e.message)
   }
 }
 
-async function handleCreate() {
+async function handleSave() {
+  if (!dialogForm.username) {
+    ElMessage.warning('请填写用户名')
+    return
+  }
+  if (!isEdit.value && !dialogForm.password) {
+    ElMessage.warning('请填写密码')
+    return
+  }
+  if (!dialogForm.tenantCode) {
+    ElMessage.warning('请选择租户')
+    return
+  }
   try {
-    await createUser({ ...form, roleCodes: ['tenant_admin'] })
-    ElMessage.success('创建成功')
+    if (isEdit.value && editingId.value != null) {
+      await updateUser(editingId.value, {
+        realName: dialogForm.realName,
+        phone: dialogForm.phone,
+        status: dialogForm.status,
+        roleCodes: dialogForm.roleCodes,
+      })
+      ElMessage.success('更新成功')
+    } else {
+      await createUser(dialogForm.tenantCode, {
+        username: dialogForm.username,
+        password: dialogForm.password,
+        realName: dialogForm.realName,
+        phone: dialogForm.phone,
+        roleCodes: dialogForm.roleCodes,
+      })
+      ElMessage.success('创建成功')
+    }
+    dialogVisible.value = false
     await loadUsers()
   } catch (e: any) {
     ElMessage.error(e.message)
   }
 }
 
-onMounted(loadUsers)
+async function handleStatusChange(row: any, val: any) {
+  try {
+    await updateUser(row.id, {
+      realName: row.realName,
+      phone: row.phone,
+      status: val,
+      roleCodes: row.roleCodes || [],
+    })
+    ElMessage.success('状态更新成功')
+    await loadUsers()
+  } catch (e: any) {
+    ElMessage.error(e.message)
+    await loadUsers()
+  }
+}
+
+async function handleDelete(row: any) {
+  try {
+    await ElMessageBox.confirm(
+      `确定删除用户「${row.username}（${row.tenantCode}）」吗？`,
+      '删除确认',
+      { confirmButtonText: '删除', cancelButtonText: '取消', type: 'warning' }
+    )
+    await deleteUser(row.id)
+    ElMessage.success('删除成功')
+    await loadUsers()
+  } catch (e: any) {
+    if (e !== 'cancel') {
+      ElMessage.error(e.message || '删除失败')
+    }
+  }
+}
+
+onMounted(() => {
+  loadTenants()
+  loadRoles()
+  loadUsers()
+})
 </script>
+
+<style scoped>
+.toolbar {
+  margin-bottom: 16px;
+}
+</style>
diff --git a/admin-web/tsconfig.app.tsbuildinfo b/admin-web/tsconfig.app.tsbuildinfo
index 068433b..f2200c8 100644
--- a/admin-web/tsconfig.app.tsbuildinfo
+++ b/admin-web/tsconfig.app.tsbuildinfo
@@ -1 +1 @@
-{"root":["./src/main.ts","./src/vite-env.d.ts","./src/api/account.ts","./src/api/channel.ts","./src/api/client.ts","./src/api/crm.ts","./src/api/flow.ts","./src/api/send.ts","./src/router/index.ts","./src/app.vue","./src/components/layout.vue","./src/views/channelaccount.vue","./src/views/channelsubject.vue","./src/views/conversation.vue","./src/views/dashboard.vue","./src/views/inboundflow.vue","./src/views/person.vue","./src/views/sendrecord.vue","./src/views/tag.vue"],"version":"6.0.3"}
\ No newline at end of file
+{"root":["./src/main.ts","./src/vite-env.d.ts","./src/api/account.ts","./src/api/channel.ts","./src/api/channelaccount.ts","./src/api/channelsubject.ts","./src/api/client.ts","./src/api/crm.ts","./src/api/dashboard.ts","./src/api/flow.ts","./src/api/inbound.ts","./src/api/inboundflow.ts","./src/api/inboundwebhook.ts","./src/api/ivrflow.ts","./src/api/send.ts","./src/api/sendpolicy.ts","./src/api/sendrecord.ts","./src/router/index.ts","./src/stores/auth.ts","./src/app.vue","./src/components/layout.vue","./src/views/channelaccount.vue","./src/views/channelsubject.vue","./src/views/conversation.vue","./src/views/dashboard.vue","./src/views/flowtrace.vue","./src/views/inboundflow.vue","./src/views/inboundwebhook.vue","./src/views/ivrflow.vue","./src/views/login.vue","./src/views/messagetest.vue","./src/views/person.vue","./src/views/sendpolicy.vue","./src/views/sendrecord.vue","./src/views/tag.vue","./src/views/tenantmanagement.vue","./src/views/usermanagement.vue"],"version":"6.0.3"}
\ No newline at end of file
diff --git a/backend/mci-server/Dockerfile b/backend/mci-server/Dockerfile
index 2e14e54..e0fd782 100644
--- a/backend/mci-server/Dockerfile
+++ b/backend/mci-server/Dockerfile
@@ -1,10 +1,14 @@
 # syntax=docker/dockerfile:1
-FROM eclipse-temurin:21-jre-alpine
+FROM eclipse-temurin:21-jre
 
-RUN apk add --no-cache curl
+RUN groupadd -g 1001 app && \
+    useradd -u 1001 -g app -s /usr/sbin/nologin -M app
 
 WORKDIR /app
 COPY target/*.jar app.jar
+RUN chown app:app app.jar
+
+USER app
 
 EXPOSE 8080
-ENTRYPOINT ["java", "-jar", "app.jar"]
+ENTRYPOINT ["sh", "-c", "exec java $JAVA_OPTS -jar app.jar"]
diff --git a/backend/mci-server/pom.xml b/backend/mci-server/pom.xml
index 7950359..0369174 100644
--- a/backend/mci-server/pom.xml
+++ b/backend/mci-server/pom.xml
@@ -70,6 +70,11 @@
             <artifactId>sa-token-spring-boot3-starter</artifactId>
             <version>1.39.0</version>
         </dependency>
+        <dependency>
+            <groupId>org.springframework.ai</groupId>
+            <artifactId>spring-ai-openai-spring-boot-starter</artifactId>
+            <version>1.0.0-M6</version>
+        </dependency>
         <dependency>
             <groupId>org.projectlombok</groupId>
             <artifactId>lombok</artifactId>
diff --git a/backend/mci-server/src/main/java/com/sino/mci/admin/controller/AccountController.java b/backend/mci-server/src/main/java/com/sino/mci/admin/controller/AccountController.java
index 8bd9767..a1091a3 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/admin/controller/AccountController.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/admin/controller/AccountController.java
@@ -5,7 +5,10 @@ import com.sino.mci.admin.dto.CreateUserRequest;
 import com.sino.mci.admin.dto.LoginRequest;
 import com.sino.mci.admin.dto.PlatformUserResponse;
 import com.sino.mci.admin.dto.TokenResponse;
+import com.sino.mci.admin.dto.UpdateTenantRequest;
+import com.sino.mci.admin.dto.UpdateUserRequest;
 import com.sino.mci.admin.dto.UserResponse;
+import com.sino.mci.admin.entity.PlatformRole;
 import com.sino.mci.admin.entity.Tenant;
 import com.sino.mci.admin.security.AuthContext;
 import com.sino.mci.admin.service.AccountService;
@@ -28,11 +31,29 @@ public class AccountController {
         return ApiResponse.ok(accountService.createTenant(request));
     }
 
+    @PutMapping("/tenant/{id}")
+    public ApiResponse<Tenant> updateTenant(
+            @PathVariable Long id,
+            @Valid @RequestBody UpdateTenantRequest request) {
+        return ApiResponse.ok(accountService.updateTenant(id, request));
+    }
+
+    @DeleteMapping("/tenant/{id}")
+    public ApiResponse<Void> deleteTenant(@PathVariable Long id) {
+        accountService.deleteTenant(id);
+        return ApiResponse.ok();
+    }
+
     @GetMapping("/tenant/list")
     public ApiResponse<List<Tenant>> listTenants() {
         return ApiResponse.ok(accountService.listTenants());
     }
 
+    @GetMapping("/role/list")
+    public ApiResponse<List<PlatformRole>> listRoles() {
+        return ApiResponse.ok(accountService.listRoles());
+    }
+
     @PostMapping("/user")
     public ApiResponse<UserResponse> createUser(
             @RequestHeader("X-Tenant-Code") String tenantCode,
@@ -40,9 +61,23 @@ public class AccountController {
         return ApiResponse.ok(accountService.createUser(tenantCode, request));
     }
 
+    @PutMapping("/user/{id}")
+    public ApiResponse<UserResponse> updateUser(
+            @PathVariable Long id,
+            @Valid @RequestBody UpdateUserRequest request) {
+        return ApiResponse.ok(accountService.updateUser(id, request));
+    }
+
+    @DeleteMapping("/user/{id}")
+    public ApiResponse<Void> deleteUser(@PathVariable Long id) {
+        accountService.deleteUser(id);
+        return ApiResponse.ok();
+    }
+
     @GetMapping("/user/list")
-    public ApiResponse<List<PlatformUserResponse>> listUsers() {
-        return ApiResponse.ok(accountService.listUsers(AuthContext.currentTenantCode()));
+    public ApiResponse<List<PlatformUserResponse>> listUsers(
+            @RequestParam(required = false) String tenantCode) {
+        return ApiResponse.ok(accountService.listUsers(tenantCode));
     }
 
     @PostMapping("/login")
diff --git a/backend/mci-server/src/main/java/com/sino/mci/admin/controller/TenantController.java b/backend/mci-server/src/main/java/com/sino/mci/admin/controller/TenantController.java
new file mode 100644
index 0000000..765be37
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/admin/controller/TenantController.java
@@ -0,0 +1,36 @@
+package com.sino.mci.admin.controller;
+
+import com.sino.mci.admin.dto.TestWebhookRequest;
+import com.sino.mci.admin.dto.TestWebhookResponse;
+import com.sino.mci.admin.dto.TenantWebhookResponse;
+import com.sino.mci.admin.dto.UpdateTenantWebhookRequest;
+import com.sino.mci.admin.security.AuthContext;
+import com.sino.mci.admin.service.TenantService;
+import com.sino.mci.shared.web.ApiResponse;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.*;
+
+@RestController
+@RequestMapping("/api/v1/account/tenant")
+@RequiredArgsConstructor
+public class TenantController {
+
+    private final TenantService tenantService;
+
+    @GetMapping("/webhook")
+    public ApiResponse<TenantWebhookResponse> getWebhookConfig() {
+        return ApiResponse.ok(tenantService.getWebhookConfig(AuthContext.currentTenantCode()));
+    }
+
+    @PostMapping("/webhook")
+    public ApiResponse<TenantWebhookResponse> updateWebhookConfig(
+            @Valid @RequestBody UpdateTenantWebhookRequest request) {
+        return ApiResponse.ok(tenantService.updateWebhookConfig(AuthContext.currentTenantCode(), request));
+    }
+
+    @PostMapping("/webhook/test")
+    public ApiResponse<TestWebhookResponse> testWebhook(@Valid @RequestBody TestWebhookRequest request) {
+        return ApiResponse.ok(tenantService.testWebhook(AuthContext.currentTenantCode(), request));
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/admin/dto/CreateTenantRequest.java b/backend/mci-server/src/main/java/com/sino/mci/admin/dto/CreateTenantRequest.java
index a3cf092..5539602 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/admin/dto/CreateTenantRequest.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/admin/dto/CreateTenantRequest.java
@@ -13,4 +13,8 @@ public class CreateTenantRequest {
     private String tenantName;
 
     private String inboundWebhookUrl;
+
+    private String initAdminUsername;
+
+    private String initAdminPassword;
 }
diff --git a/backend/mci-server/src/main/java/com/sino/mci/admin/dto/TenantWebhookResponse.java b/backend/mci-server/src/main/java/com/sino/mci/admin/dto/TenantWebhookResponse.java
new file mode 100644
index 0000000..7a14fee
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/admin/dto/TenantWebhookResponse.java
@@ -0,0 +1,16 @@
+package com.sino.mci.admin.dto;
+
+import com.fasterxml.jackson.annotation.JsonProperty;
+import lombok.Data;
+
+import java.util.Map;
+
+@Data
+public class TenantWebhookResponse {
+
+    @JsonProperty("inbound_webhook_url")
+    private String inboundWebhookUrl;
+
+    @JsonProperty("auth_config")
+    private Map<String, Object> authConfig;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/admin/dto/TestWebhookRequest.java b/backend/mci-server/src/main/java/com/sino/mci/admin/dto/TestWebhookRequest.java
new file mode 100644
index 0000000..03338bf
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/admin/dto/TestWebhookRequest.java
@@ -0,0 +1,11 @@
+package com.sino.mci.admin.dto;
+
+import jakarta.validation.constraints.NotBlank;
+import lombok.Data;
+
+@Data
+public class TestWebhookRequest {
+
+    @NotBlank
+    private String url;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/admin/dto/TestWebhookResponse.java b/backend/mci-server/src/main/java/com/sino/mci/admin/dto/TestWebhookResponse.java
new file mode 100644
index 0000000..b159e27
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/admin/dto/TestWebhookResponse.java
@@ -0,0 +1,14 @@
+package com.sino.mci.admin.dto;
+
+import lombok.AllArgsConstructor;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+public class TestWebhookResponse {
+
+    private boolean success;
+    private String message;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/admin/dto/UpdateTenantRequest.java b/backend/mci-server/src/main/java/com/sino/mci/admin/dto/UpdateTenantRequest.java
new file mode 100644
index 0000000..dcd4268
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/admin/dto/UpdateTenantRequest.java
@@ -0,0 +1,15 @@
+package com.sino.mci.admin.dto;
+
+import jakarta.validation.constraints.NotBlank;
+import lombok.Data;
+
+@Data
+public class UpdateTenantRequest {
+
+    @NotBlank
+    private String tenantName;
+
+    private String inboundWebhookUrl;
+
+    private Integer status;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/admin/dto/UpdateTenantWebhookRequest.java b/backend/mci-server/src/main/java/com/sino/mci/admin/dto/UpdateTenantWebhookRequest.java
new file mode 100644
index 0000000..5073bb7
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/admin/dto/UpdateTenantWebhookRequest.java
@@ -0,0 +1,18 @@
+package com.sino.mci.admin.dto;
+
+import com.fasterxml.jackson.annotation.JsonProperty;
+import jakarta.validation.constraints.NotBlank;
+import lombok.Data;
+
+import java.util.Map;
+
+@Data
+public class UpdateTenantWebhookRequest {
+
+    @NotBlank
+    @JsonProperty("inbound_webhook_url")
+    private String inboundWebhookUrl;
+
+    @JsonProperty("auth_config")
+    private Map<String, Object> authConfig;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/admin/dto/UpdateUserRequest.java b/backend/mci-server/src/main/java/com/sino/mci/admin/dto/UpdateUserRequest.java
new file mode 100644
index 0000000..2b24cbb
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/admin/dto/UpdateUserRequest.java
@@ -0,0 +1,19 @@
+package com.sino.mci.admin.dto;
+
+import jakarta.validation.constraints.NotBlank;
+import lombok.Data;
+
+import java.util.List;
+
+@Data
+public class UpdateUserRequest {
+
+    @NotBlank
+    private String realName;
+
+    private String phone;
+
+    private Integer status;
+
+    private List<String> roleCodes;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/admin/entity/Tenant.java b/backend/mci-server/src/main/java/com/sino/mci/admin/entity/Tenant.java
index c92f7d0..6d62393 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/admin/entity/Tenant.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/admin/entity/Tenant.java
@@ -14,5 +14,6 @@ public class Tenant extends BaseEntity {
     private String tenantName;
     private String authConfig;
     private String inboundWebhookUrl;
+    private String extInfo;
     private Integer status;
 }
diff --git a/backend/mci-server/src/main/java/com/sino/mci/admin/init/DataInitializer.java b/backend/mci-server/src/main/java/com/sino/mci/admin/init/DataInitializer.java
new file mode 100644
index 0000000..797de86
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/admin/init/DataInitializer.java
@@ -0,0 +1,117 @@
+package com.sino.mci.admin.init;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.sino.mci.admin.entity.PlatformRole;
+import com.sino.mci.admin.entity.PlatformUser;
+import com.sino.mci.admin.entity.Tenant;
+import com.sino.mci.admin.entity.UserRole;
+import com.sino.mci.admin.repository.PlatformRoleMapper;
+import com.sino.mci.admin.repository.PlatformUserMapper;
+import com.sino.mci.admin.repository.TenantMapper;
+import com.sino.mci.admin.repository.UserRoleMapper;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.boot.CommandLineRunner;
+import org.springframework.security.crypto.bcrypt.BCrypt;
+import org.springframework.stereotype.Component;
+import org.springframework.transaction.annotation.Transactional;
+
+@Slf4j
+@Component
+@RequiredArgsConstructor
+public class DataInitializer implements CommandLineRunner {
+
+    private static final String DEFAULT_TENANT_CODE = "system";
+    private static final String DEFAULT_TENANT_NAME = "系统默认租户";
+    private static final String GLOBAL_ADMIN_USERNAME = "superadmin";
+    private static final String GLOBAL_ADMIN_PASSWORD = "admin123";
+    private static final String GLOBAL_ADMIN_ROLE_CODE = "platform_admin";
+    private static final String TENANT_ADMIN_ROLE_CODE = "tenant_admin";
+
+    private final TenantMapper tenantMapper;
+    private final PlatformUserMapper userMapper;
+    private final PlatformRoleMapper roleMapper;
+    private final UserRoleMapper userRoleMapper;
+
+    @Override
+    @Transactional
+    public void run(String... args) {
+        initDefaultTenant();
+        initPlatformAdminRole();
+        initTenantAdminRole();
+        initGlobalAdmin();
+    }
+
+    private void initDefaultTenant() {
+        Tenant existing = tenantMapper.selectOne(
+                new LambdaQueryWrapper<Tenant>().eq(Tenant::getTenantCode, DEFAULT_TENANT_CODE));
+        if (existing != null) {
+            return;
+        }
+        Tenant tenant = new Tenant();
+        tenant.setTenantCode(DEFAULT_TENANT_CODE);
+        tenant.setTenantName(DEFAULT_TENANT_NAME);
+        tenant.setStatus(1);
+        tenantMapper.insert(tenant);
+        log.info("已创建默认租户: {}", DEFAULT_TENANT_CODE);
+    }
+
+    private void initPlatformAdminRole() {
+        PlatformRole existing = roleMapper.selectOne(
+                new LambdaQueryWrapper<PlatformRole>().eq(PlatformRole::getRoleCode, GLOBAL_ADMIN_ROLE_CODE));
+        if (existing != null) {
+            return;
+        }
+        PlatformRole role = new PlatformRole();
+        role.setRoleCode(GLOBAL_ADMIN_ROLE_CODE);
+        role.setRoleName("平台管理员");
+        role.setPermissions("[\"tenant:manage\", \"user:manage\", \"*\"]");
+        role.setStatus(1);
+        roleMapper.insert(role);
+        log.info("已创建平台管理员角色: {}", GLOBAL_ADMIN_ROLE_CODE);
+    }
+
+    private void initTenantAdminRole() {
+        PlatformRole existing = roleMapper.selectOne(
+                new LambdaQueryWrapper<PlatformRole>().eq(PlatformRole::getRoleCode, TENANT_ADMIN_ROLE_CODE));
+        if (existing != null) {
+            return;
+        }
+        PlatformRole role = new PlatformRole();
+        role.setRoleCode(TENANT_ADMIN_ROLE_CODE);
+        role.setRoleName("租户管理员");
+        role.setPermissions("[\"user:manage\", \"tenant:view\"]");
+        role.setStatus(1);
+        roleMapper.insert(role);
+        log.info("已创建租户管理员角色: {}", TENANT_ADMIN_ROLE_CODE);
+    }
+
+    private void initGlobalAdmin() {
+        PlatformUser existing = userMapper.selectOne(
+                new LambdaQueryWrapper<PlatformUser>()
+                        .eq(PlatformUser::getTenantCode, DEFAULT_TENANT_CODE)
+                        .eq(PlatformUser::getUsername, GLOBAL_ADMIN_USERNAME));
+        if (existing != null) {
+            return;
+        }
+
+        PlatformUser user = new PlatformUser();
+        user.setTenantCode(DEFAULT_TENANT_CODE);
+        user.setUsername(GLOBAL_ADMIN_USERNAME);
+        user.setPassword(BCrypt.hashpw(GLOBAL_ADMIN_PASSWORD, BCrypt.gensalt()));
+        user.setRealName("平台管理员");
+        user.setStatus(1);
+        userMapper.insert(user);
+
+        PlatformRole role = roleMapper.selectOne(
+                new LambdaQueryWrapper<PlatformRole>().eq(PlatformRole::getRoleCode, GLOBAL_ADMIN_ROLE_CODE));
+        if (role != null) {
+            UserRole userRole = new UserRole();
+            userRole.setUserId(user.getId());
+            userRole.setRoleId(role.getId());
+            userRoleMapper.insert(userRole);
+        }
+
+        log.info("已创建全局管理员: {}/{}", DEFAULT_TENANT_CODE, GLOBAL_ADMIN_USERNAME);
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/admin/service/AccountService.java b/backend/mci-server/src/main/java/com/sino/mci/admin/service/AccountService.java
index 5b8e6ef..782b5c2 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/admin/service/AccountService.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/admin/service/AccountService.java
@@ -7,6 +7,8 @@ import com.sino.mci.admin.dto.CreateUserRequest;
 import com.sino.mci.admin.dto.LoginResponse;
 import com.sino.mci.admin.dto.PlatformUserResponse;
 import com.sino.mci.admin.dto.TokenResponse;
+import com.sino.mci.admin.dto.UpdateTenantRequest;
+import com.sino.mci.admin.dto.UpdateUserRequest;
 import com.sino.mci.admin.dto.UserResponse;
 import com.sino.mci.admin.entity.PlatformRole;
 import com.sino.mci.admin.entity.PlatformUser;
@@ -16,6 +18,7 @@ import com.sino.mci.admin.repository.PlatformRoleMapper;
 import com.sino.mci.admin.repository.PlatformUserMapper;
 import com.sino.mci.admin.repository.TenantMapper;
 import com.sino.mci.admin.repository.UserRoleMapper;
+import com.sino.mci.admin.security.AuthContext;
 import com.sino.mci.exception.BusinessException;
 import com.sino.mci.exception.UnauthorizedException;
 import lombok.RequiredArgsConstructor;
@@ -23,14 +26,21 @@ import org.springframework.security.crypto.bcrypt.BCrypt;
 import org.springframework.stereotype.Service;
 import org.springframework.transaction.annotation.Transactional;
 import org.springframework.util.CollectionUtils;
+import org.springframework.util.StringUtils;
 
 import java.util.List;
+import java.util.Objects;
 import java.util.stream.Collectors;
 
 @Service
 @RequiredArgsConstructor
 public class AccountService {
 
+    private static final String TENANT_ADMIN_ROLE_CODE = "tenant_admin";
+    private static final String PLATFORM_ADMIN_ROLE_CODE = "platform_admin";
+    private static final String SYSTEM_TENANT_CODE = "system";
+    private static final String GLOBAL_ADMIN_USERNAME = "superadmin";
+
     private final TenantMapper tenantMapper;
     private final PlatformUserMapper userMapper;
     private final PlatformRoleMapper roleMapper;
@@ -50,11 +60,51 @@ public class AccountService {
         tenant.setInboundWebhookUrl(request.getInboundWebhookUrl());
         tenant.setStatus(1);
         tenantMapper.insert(tenant);
+
+        if (StringUtils.hasText(request.getInitAdminUsername()) && StringUtils.hasText(request.getInitAdminPassword())) {
+            createUserInternal(tenant.getTenantCode(), request.getInitAdminUsername(), request.getInitAdminPassword(),
+                    request.getInitAdminUsername(), null, List.of(TENANT_ADMIN_ROLE_CODE));
+        }
+
         return tenant;
     }
 
+    @Transactional
+    public Tenant updateTenant(Long id, UpdateTenantRequest request) {
+        Tenant tenant = tenantMapper.selectById(id);
+        if (tenant == null) {
+            throw new BusinessException("租户不存在: " + id);
+        }
+        tenant.setTenantName(request.getTenantName());
+        tenant.setInboundWebhookUrl(request.getInboundWebhookUrl());
+        if (request.getStatus() != null) {
+            tenant.setStatus(request.getStatus());
+        }
+        tenantMapper.updateById(tenant);
+        return tenant;
+    }
+
+    @Transactional
+    public void deleteTenant(Long id) {
+        Tenant tenant = tenantMapper.selectById(id);
+        if (tenant == null) {
+            throw new BusinessException("租户不存在: " + id);
+        }
+        if (SYSTEM_TENANT_CODE.equals(tenant.getTenantCode())) {
+            throw new BusinessException("不能删除系统默认租户");
+        }
+        tenantMapper.deleteById(id);
+    }
+
     @Transactional
     public UserResponse createUser(String tenantCode, CreateUserRequest request) {
+        PlatformUser user = createUserInternal(tenantCode, request.getUsername(), request.getPassword(),
+                request.getRealName(), request.getPhone(), request.getRoleCodes());
+        return toUserResponse(user);
+    }
+
+    private PlatformUser createUserInternal(String tenantCode, String username, String password,
+                                            String realName, String phone, List<String> roleCodes) {
         Tenant tenant = tenantMapper.selectOne(
                 new LambdaQueryWrapper<Tenant>().eq(Tenant::getTenantCode, tenantCode));
         if (tenant == null) {
@@ -64,37 +114,57 @@ public class AccountService {
         PlatformUser existing = userMapper.selectOne(
                 new LambdaQueryWrapper<PlatformUser>()
                         .eq(PlatformUser::getTenantCode, tenantCode)
-                        .eq(PlatformUser::getUsername, request.getUsername()));
+                        .eq(PlatformUser::getUsername, username));
         if (existing != null) {
-            throw new BusinessException("用户名已存在: " + request.getUsername());
+            throw new BusinessException("用户名已存在: " + username);
         }
 
         PlatformUser user = new PlatformUser();
         user.setTenantCode(tenantCode);
-        user.setUsername(request.getUsername());
-        user.setPassword(BCrypt.hashpw(request.getPassword(), BCrypt.gensalt()));
-        user.setRealName(request.getRealName());
-        user.setPhone(request.getPhone());
+        user.setUsername(username);
+        user.setPassword(BCrypt.hashpw(password, BCrypt.gensalt()));
+        user.setRealName(realName);
+        user.setPhone(phone);
         user.setStatus(1);
         userMapper.insert(user);
 
-        if (!CollectionUtils.isEmpty(request.getRoleCodes())) {
-            for (String roleCode : request.getRoleCodes()) {
-                PlatformRole role = roleMapper.selectOne(
-                        new LambdaQueryWrapper<PlatformRole>().eq(PlatformRole::getRoleCode, roleCode));
-                if (role == null) {
-                    throw new BusinessException("角色不存在: " + roleCode);
-                }
-                UserRole userRole = new UserRole();
-                userRole.setUserId(user.getId());
-                userRole.setRoleId(role.getId());
-                userRoleMapper.insert(userRole);
-            }
-        }
+        bindUserRoles(user.getId(), roleCodes);
+        return user;
+    }
 
+    @Transactional
+    public UserResponse updateUser(Long id, UpdateUserRequest request) {
+        PlatformUser user = userMapper.selectById(id);
+        if (user == null) {
+            throw new BusinessException("用户不存在: " + id);
+        }
+        user.setRealName(request.getRealName());
+        user.setPhone(request.getPhone());
+        if (request.getStatus() != null) {
+            user.setStatus(request.getStatus());
+        }
+        userMapper.updateById(user);
+
+        bindUserRoles(user.getId(), request.getRoleCodes());
         return toUserResponse(user);
     }
 
+    @Transactional
+    public void deleteUser(Long id) {
+        PlatformUser user = userMapper.selectById(id);
+        if (user == null) {
+            throw new BusinessException("用户不存在: " + id);
+        }
+        if (SYSTEM_TENANT_CODE.equals(user.getTenantCode()) && GLOBAL_ADMIN_USERNAME.equals(user.getUsername())) {
+            throw new BusinessException("不能删除全局管理员");
+        }
+        AuthContext.AuthUser current = AuthContext.get();
+        if (current != null && Objects.equals(current.getUserId(), user.getId())) {
+            throw new BusinessException("不能删除当前登录用户");
+        }
+        userMapper.deleteById(id);
+    }
+
     public TokenResponse login(String tenantCode, String username, String password) {
         PlatformUser user = userMapper.selectOne(
                 new LambdaQueryWrapper<PlatformUser>()
@@ -125,12 +195,48 @@ public class AccountService {
         return tenantMapper.selectList(null);
     }
 
+    public List<PlatformRole> listRoles() {
+        return roleMapper.selectList(null);
+    }
+
     public List<PlatformUserResponse> listUsers(String tenantCode) {
-        List<PlatformUser> users = userMapper.selectList(
-                new LambdaQueryWrapper<PlatformUser>().eq(PlatformUser::getTenantCode, tenantCode));
+        LambdaQueryWrapper<PlatformUser> wrapper = new LambdaQueryWrapper<>();
+        if (StringUtils.hasText(tenantCode)) {
+            wrapper.eq(PlatformUser::getTenantCode, tenantCode);
+        } else if (!isPlatformAdmin()) {
+            String currentTenant = AuthContext.currentTenantCode();
+            if (currentTenant != null) {
+                wrapper.eq(PlatformUser::getTenantCode, currentTenant);
+            }
+        }
+        List<PlatformUser> users = userMapper.selectList(wrapper);
         return users.stream().map(this::toPlatformUserResponse).collect(Collectors.toList());
     }
 
+    private boolean isPlatformAdmin() {
+        AuthContext.AuthUser current = AuthContext.get();
+        return current != null && current.getRoleCodes() != null
+                && current.getRoleCodes().contains(PLATFORM_ADMIN_ROLE_CODE);
+    }
+
+    private void bindUserRoles(Long userId, List<String> roleCodes) {
+        if (CollectionUtils.isEmpty(roleCodes)) {
+            return;
+        }
+        userRoleMapper.delete(new LambdaQueryWrapper<UserRole>().eq(UserRole::getUserId, userId));
+        for (String roleCode : roleCodes) {
+            PlatformRole role = roleMapper.selectOne(
+                    new LambdaQueryWrapper<PlatformRole>().eq(PlatformRole::getRoleCode, roleCode));
+            if (role == null) {
+                throw new BusinessException("角色不存在: " + roleCode);
+            }
+            UserRole userRole = new UserRole();
+            userRole.setUserId(userId);
+            userRole.setRoleId(role.getId());
+            userRoleMapper.insert(userRole);
+        }
+    }
+
     private UserResponse toUserResponse(PlatformUser user) {
         UserResponse response = new UserResponse();
         response.setId(user.getId());
diff --git a/backend/mci-server/src/main/java/com/sino/mci/admin/service/TenantService.java b/backend/mci-server/src/main/java/com/sino/mci/admin/service/TenantService.java
new file mode 100644
index 0000000..d9a91f3
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/admin/service/TenantService.java
@@ -0,0 +1,129 @@
+package com.sino.mci.admin.service;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.sino.mci.admin.dto.TestWebhookRequest;
+import com.sino.mci.admin.dto.TestWebhookResponse;
+import com.sino.mci.admin.dto.TenantWebhookResponse;
+import com.sino.mci.admin.dto.UpdateTenantWebhookRequest;
+import com.sino.mci.admin.entity.Tenant;
+import com.sino.mci.admin.repository.TenantMapper;
+import com.sino.mci.exception.BusinessException;
+import com.sino.mci.inbound.webhook.WebhookSignature;
+import com.sino.mci.inbound.webhook.WebhookSignatureService;
+import com.sino.mci.shared.util.JsonUtils;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.http.HttpEntity;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.HttpMethod;
+import org.springframework.http.MediaType;
+import org.springframework.http.ResponseEntity;
+import org.springframework.stereotype.Service;
+import org.springframework.transaction.annotation.Transactional;
+import org.springframework.util.StringUtils;
+import org.springframework.web.client.RestClientException;
+import org.springframework.web.client.RestTemplate;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class TenantService {
+
+    private static final String AUTH_CONFIG_WEBHOOK_SECRET = "webhook_secret";
+    private static final String AUTH_CONFIG_SIGN_ALGORITHM = "sign_algorithm";
+    private static final String DEFAULT_ALGORITHM = "hmac-sha256";
+
+    private final TenantMapper tenantMapper;
+    private final RestTemplate restTemplate;
+    private final WebhookSignatureService signatureService;
+
+    public TenantWebhookResponse getWebhookConfig(String tenantCode) {
+        Tenant tenant = getTenant(tenantCode);
+        TenantWebhookResponse response = new TenantWebhookResponse();
+        response.setInboundWebhookUrl(tenant.getInboundWebhookUrl() != null ? tenant.getInboundWebhookUrl() : "");
+        response.setAuthConfig(parseAuthConfig(tenant.getAuthConfig()));
+        return response;
+    }
+
+    @Transactional
+    public TenantWebhookResponse updateWebhookConfig(String tenantCode, UpdateTenantWebhookRequest request) {
+        Tenant tenant = getTenant(tenantCode);
+        tenant.setInboundWebhookUrl(request.getInboundWebhookUrl());
+        tenant.setAuthConfig(JsonUtils.toJson(request.getAuthConfig()));
+        tenantMapper.updateById(tenant);
+        return getWebhookConfig(tenantCode);
+    }
+
+    public TestWebhookResponse testWebhook(String tenantCode, TestWebhookRequest request) {
+        Tenant tenant = getTenant(tenantCode);
+        Map<String, Object> authConfig = parseAuthConfig(tenant.getAuthConfig());
+        String secret = getString(authConfig, AUTH_CONFIG_WEBHOOK_SECRET);
+        if (!StringUtils.hasText(secret)) {
+            return new TestWebhookResponse(false, "未配置 webhook_secret，无法签名测试请求");
+        }
+        String algorithm = getString(authConfig, AUTH_CONFIG_SIGN_ALGORITHM);
+        if (!StringUtils.hasText(algorithm)) {
+            algorithm = DEFAULT_ALGORITHM;
+        }
+
+        String payloadJson = JsonUtils.toJson(buildSamplePayload(tenantCode));
+        WebhookSignature signature = signatureService.sign(tenantCode, payloadJson, secret, algorithm);
+
+        HttpHeaders headers = new HttpHeaders();
+        headers.setContentType(MediaType.APPLICATION_JSON);
+        headers.set("X-Msg-Platform-Signature", signature.signature());
+        headers.set("X-Msg-Platform-Timestamp", String.valueOf(signature.timestamp()));
+        headers.set("X-Msg-Platform-Tenant", tenantCode);
+
+        HttpEntity<String> entity = new HttpEntity<>(payloadJson, headers);
+        try {
+            ResponseEntity<String> response = restTemplate.exchange(
+                    request.getUrl(), HttpMethod.POST, entity, String.class);
+            if (response.getStatusCode().is2xxSuccessful()) {
+                return new TestWebhookResponse(true, "测试推送成功，HTTP " + response.getStatusCode());
+            }
+            return new TestWebhookResponse(false, "测试推送失败，HTTP " + response.getStatusCode());
+        } catch (RestClientException e) {
+            log.warn("Webhook test failed for tenant {} to {}", tenantCode, request.getUrl(), e);
+            return new TestWebhookResponse(false, "测试推送失败: " + e.getMessage());
+        }
+    }
+
+    private Tenant getTenant(String tenantCode) {
+        Tenant tenant = tenantMapper.selectOne(
+                new LambdaQueryWrapper<Tenant>().eq(Tenant::getTenantCode, tenantCode));
+        if (tenant == null) {
+            throw new BusinessException("租户不存在: " + tenantCode);
+        }
+        return tenant;
+    }
+
+    @SuppressWarnings("unchecked")
+    private Map<String, Object> parseAuthConfig(String authConfigJson) {
+        if (authConfigJson == null || authConfigJson.isBlank()) {
+            return new LinkedHashMap<>();
+        }
+        Map<String, Object> config = JsonUtils.fromJson(authConfigJson, Map.class);
+        return config != null ? config : new LinkedHashMap<>();
+    }
+
+    private String getString(Map<String, Object> config, String key) {
+        Object value = config.get(key);
+        return value != null ? value.toString() : null;
+    }
+
+    private Map<String, Object> buildSamplePayload(String tenantCode) {
+        Map<String, Object> payload = new LinkedHashMap<>();
+        payload.put("event_id", "test_evt_001");
+        payload.put("tenant_code", tenantCode);
+        payload.put("channel_type", "wecom");
+        payload.put("direction", "in");
+        payload.put("event_type", "message");
+        payload.put("content", Map.of("text", "这是一条 webhook 测试消息"));
+        payload.put("timestamp", System.currentTimeMillis() / 1000);
+        return payload;
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/channel/controller/ChannelAccountController.java b/backend/mci-server/src/main/java/com/sino/mci/channel/controller/ChannelAccountController.java
index 7bf640a..4a392d5 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/channel/controller/ChannelAccountController.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/channel/controller/ChannelAccountController.java
@@ -5,6 +5,7 @@ import com.sino.mci.channel.dto.ChannelAccountInitRequest;
 import com.sino.mci.channel.dto.CreateChannelAccountRequest;
 import com.sino.mci.channel.dto.HeartbeatRequest;
 import com.sino.mci.channel.dto.SyncResult;
+import com.sino.mci.channel.dto.UpdateStatusRequest;
 import com.sino.mci.channel.entity.ChannelAccount;
 import com.sino.mci.channel.service.ChannelAccountService;
 import com.sino.mci.shared.web.ApiResponse;
@@ -28,6 +29,37 @@ public class ChannelAccountController {
         return ApiResponse.ok(accountService.createAccount(tenantCode, request));
     }
 
+    @PutMapping("/{id}")
+    public ApiResponse<?> updateAccount(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("id") Long id,
+            @Valid @RequestBody CreateChannelAccountRequest request) {
+        return ApiResponse.ok(accountService.updateAccount(id, tenantCode, request));
+    }
+
+    @DeleteMapping("/{id}")
+    public ApiResponse<?> deleteAccount(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("id") Long id) {
+        accountService.deleteAccount(id, tenantCode);
+        return ApiResponse.ok(null);
+    }
+
+    @PatchMapping("/{id}/status")
+    public ApiResponse<?> updateAccountStatus(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("id") Long id,
+            @Valid @RequestBody UpdateStatusRequest request) {
+        return ApiResponse.ok(accountService.updateAccountStatus(id, tenantCode, request));
+    }
+
+    @GetMapping("/{id}/status")
+    public ApiResponse<ChannelAccount> getAccountStatus(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("id") Long id) {
+        return ApiResponse.ok(accountService.getAccountStatus(id, tenantCode));
+    }
+
     @PostMapping("/heartbeat")
     public ApiResponse<ChannelAccount> heartbeat(@Valid @RequestBody HeartbeatRequest request) {
         return ApiResponse.ok(accountService.heartbeat(request.getAccountId(), request));
diff --git a/backend/mci-server/src/main/java/com/sino/mci/channel/controller/ChannelSubjectController.java b/backend/mci-server/src/main/java/com/sino/mci/channel/controller/ChannelSubjectController.java
index f325edf..564edc9 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/channel/controller/ChannelSubjectController.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/channel/controller/ChannelSubjectController.java
@@ -2,6 +2,7 @@ package com.sino.mci.channel.controller;
 
 import com.sino.mci.admin.security.AuthContext;
 import com.sino.mci.channel.dto.CreateChannelSubjectRequest;
+import com.sino.mci.channel.dto.UpdateStatusRequest;
 import com.sino.mci.channel.entity.ChannelSubject;
 import com.sino.mci.channel.service.ChannelSubjectService;
 import com.sino.mci.shared.web.ApiResponse;
@@ -25,6 +26,30 @@ public class ChannelSubjectController {
         return ApiResponse.ok(subjectService.createSubject(tenantCode, request));
     }
 
+    @PutMapping("/{id}")
+    public ApiResponse<?> updateSubject(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("id") Long id,
+            @Valid @RequestBody CreateChannelSubjectRequest request) {
+        return ApiResponse.ok(subjectService.updateSubject(id, tenantCode, request));
+    }
+
+    @DeleteMapping("/{id}")
+    public ApiResponse<?> deleteSubject(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("id") Long id) {
+        subjectService.deleteSubject(id, tenantCode);
+        return ApiResponse.ok(null);
+    }
+
+    @PatchMapping("/{id}/status")
+    public ApiResponse<?> updateSubjectStatus(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("id") Long id,
+            @Valid @RequestBody UpdateStatusRequest request) {
+        return ApiResponse.ok(subjectService.updateSubjectStatus(id, tenantCode, request));
+    }
+
     @GetMapping("/list")
     public ApiResponse<List<ChannelSubject>> listSubjects() {
         return ApiResponse.ok(subjectService.listSubjects(AuthContext.currentTenantCode()));
diff --git a/backend/mci-server/src/main/java/com/sino/mci/channel/controller/ConversationController.java b/backend/mci-server/src/main/java/com/sino/mci/channel/controller/ConversationController.java
index d3a940f..716e8a2 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/channel/controller/ConversationController.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/channel/controller/ConversationController.java
@@ -4,6 +4,7 @@ import com.sino.mci.admin.security.AuthContext;
 import com.sino.mci.channel.dto.BindConversationAccountRequest;
 import com.sino.mci.channel.dto.BindConversationTagsRequest;
 import com.sino.mci.channel.dto.CreateConversationRequest;
+import com.sino.mci.channel.dto.UpdateConversationRequest;
 import com.sino.mci.channel.entity.Conversation;
 import com.sino.mci.channel.service.ConversationService;
 import com.sino.mci.shared.web.ApiResponse;
@@ -39,6 +40,22 @@ public class ConversationController {
         return ApiResponse.ok(conversationService.getConversation(tenantCode, conversationId));
     }
 
+    @PutMapping("/{conversation_id}")
+    public ApiResponse<?> updateConversation(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("conversation_id") Long conversationId,
+            @Valid @RequestBody UpdateConversationRequest request) {
+        return ApiResponse.ok(conversationService.updateConversation(tenantCode, conversationId, request));
+    }
+
+    @DeleteMapping("/{conversation_id}")
+    public ApiResponse<?> deleteConversation(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("conversation_id") Long conversationId) {
+        conversationService.deleteConversation(tenantCode, conversationId);
+        return ApiResponse.ok();
+    }
+
     @PostMapping("/{conversation_id}/bind-account")
     public ApiResponse<?> bindAccount(
             @RequestHeader("X-Tenant-Code") String tenantCode,
diff --git a/backend/mci-server/src/main/java/com/sino/mci/channel/dto/ChannelAccountInitRequest.java b/backend/mci-server/src/main/java/com/sino/mci/channel/dto/ChannelAccountInitRequest.java
index 0952b6e..7d04739 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/channel/dto/ChannelAccountInitRequest.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/channel/dto/ChannelAccountInitRequest.java
@@ -15,6 +15,8 @@ public class ChannelAccountInitRequest {
     @NotNull
     private Integer accountType;
 
+    private Long accountId;
+
     private Long subjectId;
 
     private Map<String, Object> config;
diff --git a/backend/mci-server/src/main/java/com/sino/mci/channel/dto/UpdateConversationRequest.java b/backend/mci-server/src/main/java/com/sino/mci/channel/dto/UpdateConversationRequest.java
new file mode 100644
index 0000000..739e9d6
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/channel/dto/UpdateConversationRequest.java
@@ -0,0 +1,18 @@
+package com.sino.mci.channel.dto;
+
+import jakarta.validation.constraints.NotBlank;
+import lombok.Data;
+
+import java.util.Map;
+
+@Data
+public class UpdateConversationRequest {
+
+    @NotBlank
+    private String conversationName;
+
+    private Long ownerAccountId;
+    private Long subjectId;
+    private Integer status;
+    private Map<String, Object> receiveConfig;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/channel/dto/UpdateStatusRequest.java b/backend/mci-server/src/main/java/com/sino/mci/channel/dto/UpdateStatusRequest.java
new file mode 100644
index 0000000..155601a
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/channel/dto/UpdateStatusRequest.java
@@ -0,0 +1,11 @@
+package com.sino.mci.channel.dto;
+
+import jakarta.validation.constraints.NotNull;
+import lombok.Data;
+
+@Data
+public class UpdateStatusRequest {
+
+    @NotNull
+    private Integer status;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/channel/messaging/RabbitConfig.java b/backend/mci-server/src/main/java/com/sino/mci/channel/messaging/RabbitConfig.java
index ba31324..ce3c378 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/channel/messaging/RabbitConfig.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/channel/messaging/RabbitConfig.java
@@ -4,6 +4,7 @@ import org.springframework.amqp.core.Binding;
 import org.springframework.amqp.core.BindingBuilder;
 import org.springframework.amqp.core.Queue;
 import org.springframework.amqp.core.TopicExchange;
+import org.springframework.amqp.rabbit.config.SimpleRabbitListenerContainerFactory;
 import org.springframework.amqp.rabbit.connection.ConnectionFactory;
 import org.springframework.amqp.rabbit.core.RabbitTemplate;
 import org.springframework.amqp.support.converter.Jackson2JsonMessageConverter;
@@ -41,4 +42,14 @@ public class RabbitConfig {
         template.setMessageConverter(new Jackson2JsonMessageConverter());
         return template;
     }
+
+    @Bean
+    public SimpleRabbitListenerContainerFactory rabbitListenerContainerFactory(ConnectionFactory connectionFactory) {
+        SimpleRabbitListenerContainerFactory factory = new SimpleRabbitListenerContainerFactory();
+        factory.setConnectionFactory(connectionFactory);
+        Jackson2JsonMessageConverter converter = new Jackson2JsonMessageConverter(
+                "com.sino.mci.*", "java.util", "java.lang");
+        factory.setMessageConverter(converter);
+        return factory;
+    }
 }
diff --git a/backend/mci-server/src/main/java/com/sino/mci/channel/service/AccountSelector.java b/backend/mci-server/src/main/java/com/sino/mci/channel/service/AccountSelector.java
new file mode 100644
index 0000000..a0313c3
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/channel/service/AccountSelector.java
@@ -0,0 +1,102 @@
+package com.sino.mci.channel.service;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.sino.mci.channel.common.model.ChannelType;
+import com.sino.mci.channel.entity.ChannelAccount;
+import com.sino.mci.channel.entity.ChannelAccountConversation;
+import com.sino.mci.channel.repository.ChannelAccountConversationMapper;
+import com.sino.mci.channel.repository.ChannelAccountMapper;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+import org.springframework.util.CollectionUtils;
+
+import java.time.LocalDateTime;
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.Comparator;
+import java.util.List;
+
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class AccountSelector {
+
+    private static final int BINDING_SEND_PRIMARY = 1;
+    private static final int BINDING_SEND_BACKUP = 2;
+
+    private static final int STATUS_ENABLED = 1;
+    private static final int ONLINE_STATUS_ONLINE = 1;
+    private static final int RISK_LEVEL_HIGH = 3;
+    private static final int ACCOUNT_TYPE_PYWECHAT = 3;
+    private static final int HEARTBEAT_TIMEOUT_MINUTES = 5;
+
+    private final ChannelAccountConversationMapper accountConversationMapper;
+    private final ChannelAccountMapper accountMapper;
+
+    public Long selectSendAccount(String tenantCode, Long conversationId, ChannelType channelType, String preferredStrategy) {
+        List<Long> accounts = selectSendAccounts(tenantCode, conversationId, channelType, preferredStrategy);
+        return CollectionUtils.isEmpty(accounts) ? null : accounts.get(0);
+    }
+
+    public List<Long> selectSendAccounts(String tenantCode, Long conversationId, ChannelType channelType, String preferredStrategy) {
+        if (conversationId == null || channelType == null) {
+            return Collections.emptyList();
+        }
+
+        List<ChannelAccountConversation> bindings = accountConversationMapper.selectList(
+                new LambdaQueryWrapper<ChannelAccountConversation>()
+                        .eq(ChannelAccountConversation::getConversationId, conversationId)
+                        .in(ChannelAccountConversation::getBindingType, BINDING_SEND_PRIMARY, BINDING_SEND_BACKUP)
+                        .eq(ChannelAccountConversation::getStatus, STATUS_ENABLED)
+                        .orderByAsc(ChannelAccountConversation::getBindingType)
+                        .orderByAsc(ChannelAccountConversation::getSortOrder));
+
+        if (CollectionUtils.isEmpty(bindings)) {
+            return Collections.emptyList();
+        }
+
+        if ("backup".equals(preferredStrategy)) {
+            bindings.sort(Comparator.comparingInt(ChannelAccountConversation::getBindingType).reversed()
+                    .thenComparingInt(b -> b.getSortOrder() == null ? 0 : b.getSortOrder()));
+        }
+
+        List<Long> healthyAccountIds = new ArrayList<>();
+        for (ChannelAccountConversation binding : bindings) {
+            ChannelAccount account = accountMapper.selectById(binding.getAccountId());
+            if (isHealthy(account, tenantCode, channelType)) {
+                healthyAccountIds.add(account.getId());
+            }
+        }
+        return healthyAccountIds;
+    }
+
+    private boolean isHealthy(ChannelAccount account, String tenantCode, ChannelType channelType) {
+        if (account == null) {
+            return false;
+        }
+        if (tenantCode != null && !tenantCode.equals(account.getTenantCode())) {
+            return false;
+        }
+        if (account.getStatus() == null || account.getStatus() != STATUS_ENABLED) {
+            return false;
+        }
+        if (!channelType.name().equalsIgnoreCase(account.getChannelType())) {
+            return false;
+        }
+        if (account.getRiskLevel() != null && account.getRiskLevel() >= RISK_LEVEL_HIGH) {
+            return false;
+        }
+        if (account.getAccountType() != null && account.getAccountType() == ACCOUNT_TYPE_PYWECHAT) {
+            if (account.getOnlineStatus() == null || account.getOnlineStatus() != ONLINE_STATUS_ONLINE) {
+                return false;
+            }
+            LocalDateTime lastHeartbeat = account.getLastHeartbeat();
+            if (lastHeartbeat == null
+                    || lastHeartbeat.isBefore(LocalDateTime.now().minusMinutes(HEARTBEAT_TIMEOUT_MINUTES))) {
+                return false;
+            }
+        }
+        return true;
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/channel/service/ChannelSubjectService.java b/backend/mci-server/src/main/java/com/sino/mci/channel/service/ChannelSubjectService.java
index b0e0806..6205617 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/channel/service/ChannelSubjectService.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/channel/service/ChannelSubjectService.java
@@ -2,6 +2,7 @@ package com.sino.mci.channel.service;
 
 import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
 import com.sino.mci.channel.dto.CreateChannelSubjectRequest;
+import com.sino.mci.channel.dto.UpdateStatusRequest;
 import com.sino.mci.channel.entity.ChannelSubject;
 import com.sino.mci.channel.repository.ChannelSubjectMapper;
 import com.sino.mci.exception.BusinessException;
@@ -25,6 +26,14 @@ public class ChannelSubjectService {
                         .orderByDesc(ChannelSubject::getId));
     }
 
+    public ChannelSubject getSubject(Long id, String tenantCode) {
+        ChannelSubject subject = subjectMapper.selectById(id);
+        if (subject == null || !tenantCode.equals(subject.getTenantCode())) {
+            throw new BusinessException("渠道主体不存在: " + id);
+        }
+        return subject;
+    }
+
     @Transactional
     public ChannelSubject createSubject(String tenantCode, CreateChannelSubjectRequest request) {
         ChannelSubject existing = subjectMapper.selectOne(
@@ -51,4 +60,47 @@ public class ChannelSubjectService {
         subjectMapper.insert(subject);
         return subject;
     }
+
+    @Transactional
+    public ChannelSubject updateSubject(Long id, String tenantCode, CreateChannelSubjectRequest request) {
+        ChannelSubject subject = getSubject(id, tenantCode);
+
+        if (!subject.getSubjectCode().equals(request.getSubjectCode())) {
+            ChannelSubject existing = subjectMapper.selectOne(
+                    new LambdaQueryWrapper<ChannelSubject>()
+                            .eq(ChannelSubject::getTenantCode, tenantCode)
+                            .eq(ChannelSubject::getChannelType, request.getChannelType())
+                            .eq(ChannelSubject::getSubjectCode, request.getSubjectCode()));
+            if (existing != null) {
+                throw new BusinessException("渠道主体编码已存在: " + request.getSubjectCode());
+            }
+        }
+
+        subject.setChannelType(request.getChannelType());
+        subject.setSubjectCode(request.getSubjectCode());
+        subject.setSubjectName(request.getSubjectName());
+        subject.setCorpId(request.getCorpId());
+        subject.setCorpSecret(request.getCorpSecret());
+        subject.setAgentId(request.getAgentId());
+        subject.setAgentSecret(request.getAgentSecret());
+        subject.setSessionArchiveEnabled(request.getSessionArchiveEnabled() != null ? request.getSessionArchiveEnabled() : 0);
+        subject.setSessionArchivePrivateKey(request.getSessionArchivePrivateKey());
+        subjectMapper.updateById(subject);
+        return subject;
+    }
+
+    @Transactional
+    public void deleteSubject(Long id, String tenantCode) {
+        ChannelSubject subject = getSubject(id, tenantCode);
+        subject.setStatus(0);
+        subjectMapper.updateById(subject);
+    }
+
+    @Transactional
+    public ChannelSubject updateSubjectStatus(Long id, String tenantCode, UpdateStatusRequest request) {
+        ChannelSubject subject = getSubject(id, tenantCode);
+        subject.setStatus(request.getStatus());
+        subjectMapper.updateById(subject);
+        return subject;
+    }
 }
diff --git a/backend/mci-server/src/main/java/com/sino/mci/channel/service/ConversationService.java b/backend/mci-server/src/main/java/com/sino/mci/channel/service/ConversationService.java
index 05fe45e..4bcedeb 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/channel/service/ConversationService.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/channel/service/ConversationService.java
@@ -4,6 +4,7 @@ import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
 import com.sino.mci.channel.dto.BindConversationAccountRequest;
 import com.sino.mci.channel.dto.BindConversationTagsRequest;
 import com.sino.mci.channel.dto.CreateConversationRequest;
+import com.sino.mci.channel.dto.UpdateConversationRequest;
 import com.sino.mci.channel.entity.ChannelAccountConversation;
 import com.sino.mci.channel.entity.Conversation;
 import com.sino.mci.channel.entity.ConversationTagBinding;
@@ -73,6 +74,32 @@ public class ConversationService {
         return conversation;
     }
 
+    @Transactional
+    public Conversation updateConversation(String tenantCode, Long conversationId, UpdateConversationRequest request) {
+        Conversation conversation = getConversation(tenantCode, conversationId);
+        conversation.setConversationName(request.getConversationName());
+        if (request.getOwnerAccountId() != null) {
+            conversation.setOwnerAccountId(request.getOwnerAccountId());
+        }
+        if (request.getSubjectId() != null) {
+            conversation.setSubjectId(request.getSubjectId());
+        }
+        if (request.getStatus() != null) {
+            conversation.setStatus(request.getStatus());
+        }
+        if (request.getReceiveConfig() != null) {
+            conversation.setReceiveConfig(JsonUtils.toJson(request.getReceiveConfig()));
+        }
+        conversationMapper.updateById(conversation);
+        return conversation;
+    }
+
+    @Transactional
+    public void deleteConversation(String tenantCode, Long conversationId) {
+        getConversation(tenantCode, conversationId);
+        conversationMapper.deleteById(conversationId);
+    }
+
     @Transactional
     public void bindAccount(String tenantCode, Long conversationId, BindConversationAccountRequest request) {
         getConversation(tenantCode, conversationId);
diff --git a/backend/mci-server/src/main/java/com/sino/mci/channel/service/SessionArchivePullService.java b/backend/mci-server/src/main/java/com/sino/mci/channel/service/SessionArchivePullService.java
index f826fcd..d9561c5 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/channel/service/SessionArchivePullService.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/channel/service/SessionArchivePullService.java
@@ -6,6 +6,7 @@ import com.sino.mci.channel.wecom.archive.FinanceSdkClient;
 import com.sino.mci.channel.wecom.archive.model.FinanceMessage;
 import com.sino.mci.inbound.entity.MessageEvent;
 import com.sino.mci.inbound.repository.MessageEventMapper;
+import com.sino.mci.inbound.service.InboundMessageService;
 import com.sino.mci.message.entity.MessageMedia;
 import com.sino.mci.message.repository.MessageMediaMapper;
 import com.sino.mci.shared.util.JsonUtils;
@@ -40,6 +41,7 @@ public class SessionArchivePullService {
     private final StringRedisTemplate redisTemplate;
     private final MessageEventMapper messageEventMapper;
     private final MessageMediaMapper messageMediaMapper;
+    private final InboundMessageService inboundMessageService;
 
     /**
      * 消费会话存档拉取命令。
@@ -131,6 +133,7 @@ public class SessionArchivePullService {
         event.setIsProcessed(0);
         event.setStatus(1);
         messageEventMapper.insert(event);
+        inboundMessageService.processInboundMessage(event);
     }
 
     private void saveMediaIfNeeded(SessionArchivePullCommand command, FinanceMessage msg, String decryptedJson) {
diff --git a/backend/mci-server/src/main/java/com/sino/mci/crm/controller/PersonController.java b/backend/mci-server/src/main/java/com/sino/mci/crm/controller/PersonController.java
index 7c92854..4db256e 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/crm/controller/PersonController.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/crm/controller/PersonController.java
@@ -4,6 +4,7 @@ import com.sino.mci.admin.security.AuthContext;
 import com.sino.mci.crm.dto.BindTagsRequest;
 import com.sino.mci.crm.dto.CreateIdentityRequest;
 import com.sino.mci.crm.dto.CreatePersonRequest;
+import com.sino.mci.crm.dto.UpdatePersonRequest;
 import com.sino.mci.crm.entity.Person;
 import com.sino.mci.crm.service.PersonService;
 import com.sino.mci.shared.web.ApiResponse;
@@ -39,6 +40,22 @@ public class PersonController {
         return ApiResponse.ok(personService.getPerson(tenantCode, personId));
     }
 
+    @PutMapping("/{person_id}")
+    public ApiResponse<?> updatePerson(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("person_id") Long personId,
+            @Valid @RequestBody UpdatePersonRequest request) {
+        return ApiResponse.ok(personService.updatePerson(tenantCode, personId, request));
+    }
+
+    @DeleteMapping("/{person_id}")
+    public ApiResponse<?> deletePerson(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("person_id") Long personId) {
+        personService.deletePerson(tenantCode, personId);
+        return ApiResponse.ok();
+    }
+
     @PostMapping("/{person_id}/identities")
     public ApiResponse<?> createIdentity(
             @RequestHeader("X-Tenant-Code") String tenantCode,
@@ -55,6 +72,15 @@ public class PersonController {
         return ApiResponse.ok(personService.listIdentities(tenantCode, personId));
     }
 
+    @DeleteMapping("/{person_id}/identities/{identity_id}")
+    public ApiResponse<?> deleteIdentity(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("person_id") Long personId,
+            @PathVariable("identity_id") Long identityId) {
+        personService.deleteIdentity(tenantCode, personId, identityId);
+        return ApiResponse.ok();
+    }
+
     @PostMapping("/{person_id}/bind-tags")
     public ApiResponse<?> bindTags(
             @RequestHeader("X-Tenant-Code") String tenantCode,
diff --git a/backend/mci-server/src/main/java/com/sino/mci/crm/controller/TagController.java b/backend/mci-server/src/main/java/com/sino/mci/crm/controller/TagController.java
index bdc1eae..346d3e5 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/crm/controller/TagController.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/crm/controller/TagController.java
@@ -1,6 +1,7 @@
 package com.sino.mci.crm.controller;
 
 import com.sino.mci.crm.dto.CreateTagRequest;
+import com.sino.mci.crm.dto.UpdateTagRequest;
 import com.sino.mci.crm.service.TagService;
 import com.sino.mci.shared.web.ApiResponse;
 import jakarta.validation.Valid;
@@ -25,4 +26,20 @@ public class TagController {
     public ApiResponse<?> listTags(@RequestHeader("X-Tenant-Code") String tenantCode) {
         return ApiResponse.ok(tagService.listTags(tenantCode));
     }
+
+    @PutMapping("/{id}")
+    public ApiResponse<?> updateTag(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable Long id,
+            @Valid @RequestBody UpdateTagRequest request) {
+        return ApiResponse.ok(tagService.updateTag(tenantCode, id, request));
+    }
+
+    @DeleteMapping("/{id}")
+    public ApiResponse<?> deleteTag(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable Long id) {
+        tagService.deleteTag(tenantCode, id);
+        return ApiResponse.ok();
+    }
 }
diff --git a/backend/mci-server/src/main/java/com/sino/mci/crm/dto/UpdatePersonRequest.java b/backend/mci-server/src/main/java/com/sino/mci/crm/dto/UpdatePersonRequest.java
new file mode 100644
index 0000000..a575624
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/crm/dto/UpdatePersonRequest.java
@@ -0,0 +1,17 @@
+package com.sino.mci.crm.dto;
+
+import jakarta.validation.constraints.NotBlank;
+import lombok.Data;
+
+@Data
+public class UpdatePersonRequest {
+
+    @NotBlank
+    private String personName;
+
+    private String phone;
+    private Integer personType;
+    private Integer status;
+    private Long institutionId;
+    private Long supplierId;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/crm/dto/UpdateTagRequest.java b/backend/mci-server/src/main/java/com/sino/mci/crm/dto/UpdateTagRequest.java
new file mode 100644
index 0000000..cf746f8
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/crm/dto/UpdateTagRequest.java
@@ -0,0 +1,13 @@
+package com.sino.mci.crm.dto;
+
+import jakarta.validation.constraints.NotBlank;
+import lombok.Data;
+
+@Data
+public class UpdateTagRequest {
+
+    @NotBlank
+    private String tagName;
+
+    private Integer status;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/crm/service/PersonService.java b/backend/mci-server/src/main/java/com/sino/mci/crm/service/PersonService.java
index 23fb464..e4c473b 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/crm/service/PersonService.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/crm/service/PersonService.java
@@ -4,6 +4,7 @@ import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
 import com.sino.mci.crm.dto.BindTagsRequest;
 import com.sino.mci.crm.dto.CreateIdentityRequest;
 import com.sino.mci.crm.dto.CreatePersonRequest;
+import com.sino.mci.crm.dto.UpdatePersonRequest;
 import com.sino.mci.crm.entity.ChannelIdentity;
 import com.sino.mci.crm.entity.Person;
 import com.sino.mci.crm.entity.PersonTagBinding;
@@ -62,6 +63,35 @@ public class PersonService {
         return person;
     }
 
+    @Transactional
+    public Person updatePerson(String tenantCode, Long personId, UpdatePersonRequest request) {
+        Person person = getPerson(tenantCode, personId);
+        person.setPersonName(request.getPersonName());
+        if (request.getPhone() != null) {
+            person.setPhone(request.getPhone());
+        }
+        if (request.getPersonType() != null) {
+            person.setPersonType(request.getPersonType());
+        }
+        if (request.getStatus() != null) {
+            person.setStatus(request.getStatus());
+        }
+        if (request.getInstitutionId() != null) {
+            person.setInstitutionId(request.getInstitutionId());
+        }
+        if (request.getSupplierId() != null) {
+            person.setSupplierId(request.getSupplierId());
+        }
+        personMapper.updateById(person);
+        return person;
+    }
+
+    @Transactional
+    public void deletePerson(String tenantCode, Long personId) {
+        getPerson(tenantCode, personId);
+        personMapper.deleteById(personId);
+    }
+
     public List<ChannelIdentity> listIdentities(String tenantCode, Long personId) {
         getPerson(tenantCode, personId);
         return identityMapper.selectList(
@@ -96,6 +126,17 @@ public class PersonService {
         return identity;
     }
 
+    @Transactional
+    public void deleteIdentity(String tenantCode, Long personId, Long identityId) {
+        getPerson(tenantCode, personId);
+        ChannelIdentity identity = identityMapper.selectById(identityId);
+        if (identity == null || !tenantCode.equals(identity.getTenantCode())
+                || !personId.equals(identity.getPersonId())) {
+            throw new BusinessException("渠道身份不存在");
+        }
+        identityMapper.deleteById(identityId);
+    }
+
     @Transactional
     public void bindTags(String tenantCode, Long personId, BindTagsRequest request) {
         getPerson(tenantCode, personId);
diff --git a/backend/mci-server/src/main/java/com/sino/mci/crm/service/TagService.java b/backend/mci-server/src/main/java/com/sino/mci/crm/service/TagService.java
index ecc9c08..4a7f4f9 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/crm/service/TagService.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/crm/service/TagService.java
@@ -2,6 +2,7 @@ package com.sino.mci.crm.service;
 
 import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
 import com.sino.mci.crm.dto.CreateTagRequest;
+import com.sino.mci.crm.dto.UpdateTagRequest;
 import com.sino.mci.crm.entity.Tag;
 import com.sino.mci.crm.repository.TagMapper;
 import com.sino.mci.exception.BusinessException;
@@ -54,6 +55,30 @@ public class TagService {
         return tag;
     }
 
+    public Tag getTag(String tenantCode, Long tagId) {
+        Tag tag = tagMapper.selectById(tagId);
+        if (tag == null || !tenantCode.equals(tag.getTenantCode())) {
+            throw new BusinessException("标签不存在");
+        }
+        return tag;
+    }
+
+    @Transactional
+    public Tag updateTag(String tenantCode, Long tagId, UpdateTagRequest request) {
+        Tag tag = getTag(tenantCode, tagId);
+        if (request.getStatus() != null) {
+            tag.setStatus(request.getStatus());
+        }
+        tagMapper.updateById(tag);
+        return tag;
+    }
+
+    @Transactional
+    public void deleteTag(String tenantCode, Long tagId) {
+        getTag(tenantCode, tagId);
+        tagMapper.deleteById(tagId);
+    }
+
     public List<Tag> listTags(String tenantCode) {
         return tagMapper.selectList(
                 new LambdaQueryWrapper<Tag>()
diff --git a/backend/mci-server/src/main/java/com/sino/mci/exception/WebhookPushException.java b/backend/mci-server/src/main/java/com/sino/mci/exception/WebhookPushException.java
new file mode 100644
index 0000000..b21355e
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/exception/WebhookPushException.java
@@ -0,0 +1,20 @@
+package com.sino.mci.exception;
+
+/**
+ * 入站 webhook 推送异常。
+ *
+ * <p>当向业务系统推送入站消息失败时抛出，由流程引擎捕获并记录执行轨迹。</p>
+ */
+public class WebhookPushException extends BusinessException {
+
+    public WebhookPushException(String message) {
+        super(message);
+    }
+
+    public WebhookPushException(String message, Throwable cause) {
+        super(message);
+        if (cause != null) {
+            initCause(cause);
+        }
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/flow/controller/FlowDefinitionController.java b/backend/mci-server/src/main/java/com/sino/mci/flow/controller/FlowDefinitionController.java
index d54a367..aa5eb80 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/flow/controller/FlowDefinitionController.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/flow/controller/FlowDefinitionController.java
@@ -56,4 +56,12 @@ public class FlowDefinitionController {
         flowDefinitionService.offlineFlow(tenantCode, flowCode);
         return ApiResponse.ok();
     }
+
+    @DeleteMapping("/{flow_code}")
+    public ApiResponse<?> deleteFlow(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("flow_code") String flowCode) {
+        flowDefinitionService.deleteFlow(tenantCode, flowCode);
+        return ApiResponse.ok();
+    }
 }
diff --git a/backend/mci-server/src/main/java/com/sino/mci/flow/controller/IvrFlowController.java b/backend/mci-server/src/main/java/com/sino/mci/flow/controller/IvrFlowController.java
new file mode 100644
index 0000000..c130c9b
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/flow/controller/IvrFlowController.java
@@ -0,0 +1,69 @@
+package com.sino.mci.flow.controller;
+
+import com.sino.mci.flow.dto.CreateFlowRequest;
+import com.sino.mci.flow.service.FlowDefinitionService;
+import com.sino.mci.shared.web.ApiResponse;
+import jakarta.validation.Valid;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.*;
+
+@RestController
+@RequestMapping("/api/v1/flow")
+@RequiredArgsConstructor
+public class IvrFlowController {
+
+    private final FlowDefinitionService flowDefinitionService;
+
+    private static final Integer IVR_FLOW_TYPE = 2;
+
+    @PostMapping
+    public ApiResponse<?> createFlow(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @Valid @RequestBody CreateFlowRequest request) {
+        return ApiResponse.ok(flowDefinitionService.createFlow(tenantCode, request));
+    }
+
+    @GetMapping("/{flow_code}")
+    public ApiResponse<?> getFlow(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("flow_code") String flowCode) {
+        return ApiResponse.ok(flowDefinitionService.getFlow(tenantCode, flowCode));
+    }
+
+    @GetMapping("/list")
+    public ApiResponse<?> listFlows(@RequestHeader("X-Tenant-Code") String tenantCode) {
+        return ApiResponse.ok(flowDefinitionService.listFlowsByType(tenantCode, IVR_FLOW_TYPE));
+    }
+
+    @PostMapping("/{flow_code}")
+    public ApiResponse<?> updateFlow(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("flow_code") String flowCode,
+            @Valid @RequestBody CreateFlowRequest request) {
+        return ApiResponse.ok(flowDefinitionService.updateFlow(tenantCode, flowCode, request));
+    }
+
+    @PostMapping("/{flow_code}/publish")
+    public ApiResponse<?> publishFlow(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("flow_code") String flowCode) {
+        flowDefinitionService.publishFlow(tenantCode, flowCode);
+        return ApiResponse.ok();
+    }
+
+    @PostMapping("/{flow_code}/offline")
+    public ApiResponse<?> offlineFlow(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("flow_code") String flowCode) {
+        flowDefinitionService.offlineFlow(tenantCode, flowCode);
+        return ApiResponse.ok();
+    }
+
+    @DeleteMapping("/{flow_code}")
+    public ApiResponse<?> deleteFlow(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("flow_code") String flowCode) {
+        flowDefinitionService.deleteFlow(tenantCode, flowCode);
+        return ApiResponse.ok();
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/flow/service/FlowDefinitionService.java b/backend/mci-server/src/main/java/com/sino/mci/flow/service/FlowDefinitionService.java
index e2a3929..5dcd49c 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/flow/service/FlowDefinitionService.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/flow/service/FlowDefinitionService.java
@@ -58,6 +58,15 @@ public class FlowDefinitionService {
                         .orderByDesc(FlowDefinition::getCreateTime));
     }
 
+    public List<FlowDefinition> listFlowsByType(String tenantCode, Integer flowType) {
+        return flowDefinitionMapper.selectList(
+                new LambdaQueryWrapper<FlowDefinition>()
+                        .eq(FlowDefinition::getTenantCode, tenantCode)
+                        .eq(FlowDefinition::getFlowType, flowType)
+                        .eq(FlowDefinition::getDeleted, 0)
+                        .orderByDesc(FlowDefinition::getCreateTime));
+    }
+
     @Transactional
     public FlowDefinition updateFlow(String tenantCode, String flowCode, CreateFlowRequest request) {
         FlowDefinition flow = getFlow(tenantCode, flowCode);
@@ -78,10 +87,16 @@ public class FlowDefinitionService {
     @Transactional
     public void offlineFlow(String tenantCode, String flowCode) {
         FlowDefinition flow = getFlow(tenantCode, flowCode);
-        flow.setStatus(0);
+        flow.setStatus(2);
         flowDefinitionMapper.updateById(flow);
     }
 
+    @Transactional
+    public void deleteFlow(String tenantCode, String flowCode) {
+        FlowDefinition flow = getFlow(tenantCode, flowCode);
+        flowDefinitionMapper.deleteById(flow.getId());
+    }
+
     private Integer parseFlowType(String flowType) {
         if (flowType == null || flowType.isBlank()) {
             return 1;
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/controller/IntentController.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/controller/IntentController.java
new file mode 100644
index 0000000..d92aafd
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/controller/IntentController.java
@@ -0,0 +1,31 @@
+package com.sino.mci.inbound.controller;
+
+import com.sino.mci.inbound.dto.IntentRecognizeRequest;
+import com.sino.mci.inbound.intent.IntentRecognitionService;
+import com.sino.mci.inbound.intent.IntentResult;
+import com.sino.mci.shared.web.ApiResponse;
+import lombok.RequiredArgsConstructor;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestHeader;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RestController;
+
+/**
+ * 意图识别调试接口。
+ */
+@RestController
+@RequestMapping("/api/v1/intent")
+@RequiredArgsConstructor
+public class IntentController {
+
+    private final IntentRecognitionService intentRecognitionService;
+
+    @PostMapping("/recognize")
+    public ApiResponse<IntentResult> recognize(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @RequestBody IntentRecognizeRequest request) {
+        return ApiResponse.ok(intentRecognitionService.recognize(
+                tenantCode, request.getText(), request.getContext()));
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/dto/IntentRecognizeRequest.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/dto/IntentRecognizeRequest.java
new file mode 100644
index 0000000..3a31996
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/dto/IntentRecognizeRequest.java
@@ -0,0 +1,15 @@
+package com.sino.mci.inbound.dto;
+
+import lombok.Data;
+
+import java.util.Map;
+
+/**
+ * 意图识别调试请求。
+ */
+@Data
+public class IntentRecognizeRequest {
+
+    private String text;
+    private Map<String, Object> context;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowContext.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowContext.java
new file mode 100644
index 0000000..92d99a9
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowContext.java
@@ -0,0 +1,54 @@
+package com.sino.mci.inbound.engine;
+
+import com.sino.mci.inbound.entity.MessageEvent;
+import com.sino.mci.inbound.intent.IntentResult;
+import lombok.Data;
+
+import java.util.HashMap;
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+/**
+ * 流程执行上下文。
+ *
+ * <p>包含当前消息事件、业务上下文、意图识别结果以及流程变量，
+ * 供条件表达式（SpEL）与节点执行使用。</p>
+ */
+@Data
+public class FlowContext {
+
+    private final MessageEvent event;
+    private final Map<String, Object> businessContext;
+    private IntentResult intent;
+    private final Map<String, Object> variables = new HashMap<>();
+
+    public FlowContext(MessageEvent event, Map<String, Object> businessContext) {
+        this.event = event;
+        this.businessContext = businessContext != null ? businessContext : new LinkedHashMap<>();
+    }
+
+    /**
+     * 构建用于 SpEL 表达式求值的根对象。
+     */
+    public Map<String, Object> toEvaluationMap() {
+        Map<String, Object> root = new HashMap<>();
+        root.put("event", event);
+        root.put("businessContext", businessContext);
+        root.put("intent", toIntentMap());
+        root.put("variables", variables);
+        return root;
+    }
+
+    private Map<String, Object> toIntentMap() {
+        if (intent == null) {
+            return null;
+        }
+        Map<String, Object> map = new LinkedHashMap<>();
+        map.put("intent", intent.getIntent());
+        map.put("confidence", intent.getConfidence());
+        map.put("slots", intent.getSlots());
+        map.put("missingSlots", intent.getMissingSlots());
+        map.put("requiresConfirmation", intent.isRequiresConfirmation());
+        return map;
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowDefinitionParser.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowDefinitionParser.java
new file mode 100644
index 0000000..47ccccc
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowDefinitionParser.java
@@ -0,0 +1,85 @@
+package com.sino.mci.inbound.engine;
+
+import com.sino.mci.shared.util.JsonUtils;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * 流程定义 JSON 解析器。
+ *
+ * <p>将 {@code mci_flow_definition.definition_json} 中的 {@code nodes} 与 {@code edges}
+ * 解析为 {@link FlowNode} 与 {@link FlowEdge} 对象。</p>
+ */
+public final class FlowDefinitionParser {
+
+    private FlowDefinitionParser() {
+    }
+
+    @SuppressWarnings("unchecked")
+    public static List<FlowNode> parseNodes(String definitionJson) {
+        Map<String, Object> definition = JsonUtils.fromJson(definitionJson, Map.class);
+        if (definition == null) {
+            return List.of();
+        }
+        Object nodesObj = definition.get("nodes");
+        if (!(nodesObj instanceof List<?>)) {
+            return List.of();
+        }
+        List<FlowNode> nodes = new ArrayList<>();
+        for (Object item : (List<?>) nodesObj) {
+            if (!(item instanceof Map<?, ?> map)) {
+                continue;
+            }
+            String id = toString(map.get("id"));
+            String type = toString(map.get("type"));
+            if (id == null || type == null) {
+                continue;
+            }
+            nodes.add(new FlowNode(id, type, toConfigMap(map.get("config"))));
+        }
+        return nodes;
+    }
+
+    @SuppressWarnings("unchecked")
+    public static List<FlowEdge> parseEdges(String definitionJson) {
+        Map<String, Object> definition = JsonUtils.fromJson(definitionJson, Map.class);
+        if (definition == null) {
+            return List.of();
+        }
+        Object edgesObj = definition.get("edges");
+        if (!(edgesObj instanceof List<?>)) {
+            return List.of();
+        }
+        List<FlowEdge> edges = new ArrayList<>();
+        for (Object item : (List<?>) edgesObj) {
+            if (!(item instanceof Map<?, ?> map)) {
+                continue;
+            }
+            String source = toString(map.get("source"));
+            String target = toString(map.get("target"));
+            if (source == null || target == null) {
+                continue;
+            }
+            edges.add(new FlowEdge(source, target, toString(map.get("label"))));
+        }
+        return edges;
+    }
+
+    private static Map<String, Object> toConfigMap(Object configObj) {
+        if (!(configObj instanceof Map<?, ?> map)) {
+            return new HashMap<>();
+        }
+        Map<String, Object> config = new HashMap<>();
+        for (Map.Entry<?, ?> entry : map.entrySet()) {
+            config.put(String.valueOf(entry.getKey()), entry.getValue());
+        }
+        return config;
+    }
+
+    private static String toString(Object value) {
+        return value != null ? value.toString() : null;
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowEdge.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowEdge.java
new file mode 100644
index 0000000..5350e60
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowEdge.java
@@ -0,0 +1,7 @@
+package com.sino.mci.inbound.engine;
+
+/**
+ * 入站流程定义边。
+ */
+public record FlowEdge(String source, String target, String label) {
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowEngine.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowEngine.java
index 3204952..6130fdf 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowEngine.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowEngine.java
@@ -5,15 +5,21 @@ import com.sino.mci.flow.entity.FlowDefinition;
 import com.sino.mci.flow.repository.FlowDefinitionMapper;
 import com.sino.mci.inbound.entity.FlowExecutionTrace;
 import com.sino.mci.inbound.entity.MessageEvent;
+import com.sino.mci.inbound.intent.IntentResult;
 import com.sino.mci.inbound.repository.FlowExecutionTraceMapper;
 import com.sino.mci.inbound.repository.MessageEventMapper;
+import com.sino.mci.send.dto.SendRequest;
+import com.sino.mci.send.service.SendService;
 import com.sino.mci.shared.util.JsonUtils;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 import org.springframework.stereotype.Component;
 
+import java.util.HashMap;
+import java.util.LinkedHashMap;
 import java.util.List;
 import java.util.Map;
+import java.util.stream.Collectors;
 
 @Slf4j
 @Component
@@ -25,6 +31,7 @@ public class FlowEngine {
     private final IntentRecognitionService intentRecognitionService;
     private final WebhookPushService webhookPushService;
     private final FlowExecutionTraceMapper flowExecutionTraceMapper;
+    private final SendService sendService;
 
     public void executeInboundFlow(Long eventId) {
         MessageEvent event = messageEventMapper.selectById(eventId);
@@ -33,7 +40,7 @@ public class FlowEngine {
             return;
         }
 
-        trace(event, null, "flow_start", event.getEventId(), null, 1, now(), null);
+        trace(event, null, "flow_start", null, event.getEventId(), null, 1, now(), null);
 
         FlowDefinition flow = findPublishedFlow(event.getTenantCode());
         Long flowDefinitionId = flow != null ? flow.getId() : null;
@@ -44,35 +51,184 @@ public class FlowEngine {
         }
 
         try {
-            Map<String, Object> definition = JsonUtils.fromJson(flow.getDefinitionJson(), Map.class);
-            if (definition == null) {
-                log.warn("Invalid flow definition JSON for flow {}", flow.getFlowCode());
+            List<FlowNode> nodes = FlowDefinitionParser.parseNodes(flow.getDefinitionJson());
+            List<FlowEdge> edges = FlowDefinitionParser.parseEdges(flow.getDefinitionJson());
+            if (nodes.isEmpty()) {
+                log.warn("Flow {} has no nodes", flow.getFlowCode());
                 markProcessed(event, flowDefinitionId);
                 return;
             }
 
-            long recognizeStart = now();
-            IntentRecognitionService.IntentResult intent = intentRecognitionService.recognize(event);
-            trace(event, flowDefinitionId, "intent_recognition",
-                    event.getContent(), JsonUtils.toJson(intent), 1, recognizeStart, null);
-            log.info("Intent recognized: eventId={}, intent={}, confidence={}",
-                    event.getEventId(), intent.intent(), intent.confidence());
-
-            long pushStart = now();
-            try {
-                webhookPushService.pushToBusiness(event.getTenantCode(), event, intent);
-                trace(event, flowDefinitionId, "webhook_push", event.getEventId(), "ok", 1, pushStart, null);
-            } catch (Exception e) {
-                trace(event, flowDefinitionId, "webhook_push", event.getEventId(), null, 2, pushStart, e.getMessage());
-                throw e;
+            FlowNode receiveNode = nodes.stream()
+                    .filter(n -> "receive".equals(n.type()))
+                    .findFirst()
+                    .orElse(null);
+            if (receiveNode == null) {
+                log.warn("Flow {} has no receive node", flow.getFlowCode());
+                markProcessed(event, flowDefinitionId);
+                return;
             }
 
-            markProcessed(event, flowDefinitionId);
+            Map<String, FlowNode> nodeMap = nodes.stream()
+                    .collect(Collectors.toMap(FlowNode::id, n -> n));
+            Map<String, List<FlowEdge>> adjacency = edges.stream()
+                    .collect(Collectors.groupingBy(FlowEdge::source));
+
+            Map<String, Object> businessContext = parseBusinessContext(event.getBusinessContext());
+            FlowContext context = new FlowContext(event, businessContext);
+
+            FlowNode current = receiveNode;
+            while (current != null) {
+                long nodeStart = now();
+                NodeResult result;
+                try {
+                    result = executeNode(current, context, flowDefinitionId, adjacency, nodeStart);
+                } catch (Exception e) {
+                    trace(event, flowDefinitionId, current.type(), JsonUtils.toJson(current.config()),
+                            current.id(), e.getMessage(), 2, nodeStart, e.getMessage());
+                    log.error("Node execution failed: eventId={}, nodeId={}, nodeType={}",
+                            event.getEventId(), current.id(), current.type(), e);
+                    return;
+                }
+
+                if (result.terminal() || result.nextNodeId() == null) {
+                    if (result.success()) {
+                        markProcessed(event, flowDefinitionId);
+                    }
+                    return;
+                }
+
+                current = nodeMap.get(result.nextNodeId());
+                if (current == null) {
+                    log.warn("Next node {} not found in flow {}", result.nextNodeId(), flow.getFlowCode());
+                    return;
+                }
+            }
         } catch (Exception e) {
             log.error("Flow execution failed for event {}", eventId, e);
         }
     }
 
+    private NodeResult executeNode(FlowNode node, FlowContext context, Long flowDefinitionId,
+                                   Map<String, List<FlowEdge>> adjacency, long startMs) {
+        String nodeConfigJson = JsonUtils.toJson(node.config());
+        MessageEvent event = context.getEvent();
+
+        switch (node.type()) {
+            case "receive" -> {
+                Object expectedChannel = node.config().get("channel_type");
+                if (expectedChannel != null && !expectedChannel.toString().equalsIgnoreCase(event.getChannelType())) {
+                    throw new IllegalStateException("Channel type mismatch: expected " + expectedChannel
+                            + ", actual " + event.getChannelType());
+                }
+                trace(event, flowDefinitionId, node.type(), nodeConfigJson,
+                        event.getEventId(), event.getChannelType(), 1, startMs, null);
+                return new NodeResult(firstTarget(adjacency.get(node.id())), false, true, "ok");
+            }
+            case "intent" -> {
+                IntentResult intent = intentRecognitionService.recognize(event);
+                context.setIntent(intent);
+                String intentJson = JsonUtils.toJson(intent);
+                trace(event, flowDefinitionId, node.type(), nodeConfigJson,
+                        event.getContent(), intentJson, 1, startMs, null);
+                return new NodeResult(firstTarget(adjacency.get(node.id())), false, true, intentJson);
+            }
+            case "condition" -> {
+                String expression = node.config().get("expression") != null
+                        ? node.config().get("expression").toString() : "";
+                if (expression.isBlank()) {
+                    String nextNodeId = firstTarget(adjacency.get(node.id()));
+                    trace(event, flowDefinitionId, node.type(), nodeConfigJson,
+                            expression, "empty -> first", 1, startMs, null);
+                    return new NodeResult(nextNodeId, false, true, "empty");
+                }
+                boolean expressionResult = SpelConditionEvaluator.evaluate(expression, context);
+                String nextNodeId = selectConditionTarget(adjacency.get(node.id()), expressionResult);
+                trace(event, flowDefinitionId, node.type(), nodeConfigJson,
+                        expression, String.valueOf(expressionResult), 1, startMs, null);
+                return new NodeResult(nextNodeId, false, true, String.valueOf(expressionResult));
+            }
+            case "webhook" -> {
+                String customUrl = node.config().get("url") != null
+                        ? node.config().get("url").toString() : null;
+                webhookPushService.pushToBusiness(event.getTenantCode(), event, context.getIntent(), customUrl);
+                trace(event, flowDefinitionId, node.type(), nodeConfigJson,
+                        event.getEventId(), "pushed", 1, startMs, null);
+                return new NodeResult(null, true, true, "pushed");
+            }
+            case "reply" -> {
+                SendRequest request = buildReplyRequest(event, node.config());
+                sendService.send(event.getTenantCode(), request);
+                trace(event, flowDefinitionId, node.type(), nodeConfigJson,
+                        event.getEventId(), JsonUtils.toJson(request), 1, startMs, null);
+                return new NodeResult(null, true, true, "sent");
+            }
+            default -> throw new IllegalArgumentException("Unsupported node type: " + node.type());
+        }
+    }
+
+    private String firstTarget(List<FlowEdge> edges) {
+        if (edges == null || edges.isEmpty()) {
+            return null;
+        }
+        return edges.get(0).target();
+    }
+
+    private String selectConditionTarget(List<FlowEdge> edges, boolean result) {
+        if (edges == null || edges.isEmpty()) {
+            return null;
+        }
+        String expectedLabel = String.valueOf(result);
+        return edges.stream()
+                .filter(e -> expectedLabel.equalsIgnoreCase(e.label()))
+                .findFirst()
+                .map(FlowEdge::target)
+                .orElseGet(() -> edges.get(0).target());
+    }
+
+    private SendRequest buildReplyRequest(MessageEvent event, Map<String, Object> config) {
+        Object contentObj = config.get("content");
+        Map<String, Object> content;
+        if (contentObj instanceof Map<?, ?> map) {
+            content = new HashMap<>();
+            for (Map.Entry<?, ?> entry : map.entrySet()) {
+                content.put(String.valueOf(entry.getKey()), entry.getValue());
+            }
+        } else {
+            content = new HashMap<>();
+            content.put("type", "text");
+            content.put("body", contentObj != null ? contentObj.toString() : "");
+        }
+
+        SendRequest request = new SendRequest();
+        request.setContentType(String.valueOf(content.get("type")));
+        request.setContent(content);
+
+        Map<String, Object> channelStrategy = new HashMap<>();
+        channelStrategy.put("channel_type", event.getChannelType());
+        request.setChannelStrategy(channelStrategy);
+
+        if (event.getConversationId() != null) {
+            request.setTargetType("conversation");
+            request.setTargetValue(Map.of("conversation_id", event.getConversationId()));
+        } else if (event.getPersonId() != null) {
+            request.setTargetType("person");
+            request.setTargetValue(Map.of("person_id", event.getPersonId()));
+        } else {
+            throw new IllegalStateException("Cannot reply: message event has no conversation_id or person_id");
+        }
+        return request;
+    }
+
+    @SuppressWarnings("unchecked")
+    private Map<String, Object> parseBusinessContext(String businessContextJson) {
+        if (businessContextJson == null || businessContextJson.isBlank()) {
+            return new LinkedHashMap<>();
+        }
+        Map<String, Object> context = JsonUtils.fromJson(businessContextJson, Map.class);
+        return context != null ? context : new LinkedHashMap<>();
+    }
+
     private FlowDefinition findPublishedFlow(String tenantCode) {
         List<FlowDefinition> flows = flowDefinitionMapper.selectList(
                 new LambdaQueryWrapper<FlowDefinition>()
@@ -86,16 +242,16 @@ public class FlowEngine {
     private void markProcessed(MessageEvent event, Long flowDefinitionId) {
         event.setIsProcessed(1);
         messageEventMapper.updateById(event);
-        trace(event, flowDefinitionId, "mark_processed", event.getEventId(), "processed", 1, now(), null);
+        trace(event, flowDefinitionId, "mark_processed", null, event.getEventId(), "processed", 1, now(), null);
     }
 
-    private void trace(MessageEvent event, Long flowDefinitionId, String nodeType,
+    private void trace(MessageEvent event, Long flowDefinitionId, String nodeType, String nodeConfig,
                        String input, String output, int status, long startMs, String errorMsg) {
         FlowExecutionTrace record = new FlowExecutionTrace();
         record.setEventId(event.getEventId());
         record.setFlowDefinitionId(flowDefinitionId);
         record.setNodeType(nodeType);
-        record.setNodeConfig(null);
+        record.setNodeConfig(nodeConfig);
         record.setInput(input);
         record.setOutput(output);
         record.setStatus(status);
@@ -107,4 +263,7 @@ public class FlowEngine {
     private long now() {
         return System.currentTimeMillis();
     }
+
+    private record NodeResult(String nextNodeId, boolean terminal, boolean success, String output) {
+    }
 }
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowNode.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowNode.java
new file mode 100644
index 0000000..3f2c9d3
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/FlowNode.java
@@ -0,0 +1,9 @@
+package com.sino.mci.inbound.engine;
+
+import java.util.Map;
+
+/**
+ * 入站流程定义节点。
+ */
+public record FlowNode(String id, String type, Map<String, Object> config) {
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/IntentRecognitionService.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/IntentRecognitionService.java
index fd06df4..bf8f7e3 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/IntentRecognitionService.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/IntentRecognitionService.java
@@ -1,11 +1,9 @@
 package com.sino.mci.inbound.engine;
 
 import com.sino.mci.inbound.entity.MessageEvent;
+import com.sino.mci.inbound.intent.IntentResult;
 
 public interface IntentRecognitionService {
 
     IntentResult recognize(MessageEvent event);
-
-    record IntentResult(String intent, double confidence, String reason) {
-    }
 }
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/MockIntentRecognitionService.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/MockIntentRecognitionService.java
index c3e265d..68c389b 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/MockIntentRecognitionService.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/MockIntentRecognitionService.java
@@ -1,31 +1,43 @@
 package com.sino.mci.inbound.engine;
 
 import com.sino.mci.inbound.entity.MessageEvent;
+import com.sino.mci.inbound.intent.IntentResult;
 import com.sino.mci.shared.util.JsonUtils;
 import org.springframework.stereotype.Service;
 
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
 import java.util.Map;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
 
 @Service
 public class MockIntentRecognitionService implements IntentRecognitionService {
 
+    private static final Pattern CUSTOMER_NAME_PATTERN = Pattern.compile("客户\\s*[:：]?\\s*([^\\s,，]+)");
+    private static final Pattern ADDRESS_PATTERN = Pattern.compile("(?:地址|在)\\s*[:：]?\\s*([^\\s,，]+)");
+    private static final Pattern PHONE_PATTERN = Pattern.compile("(1[3-9]\\d{9})");
+
     @Override
     public IntentResult recognize(MessageEvent event) {
         String text = extractText(event);
         if (text == null || text.isBlank()) {
-            return new IntentResult("unknown", 0.0, "empty content");
+            return unknownResult();
         }
         String lower = text.toLowerCase();
         if (lower.contains("救援") || lower.contains("拖车") || lower.contains("故障")) {
-            return new IntentResult("rescue_request", 0.95, "contains rescue keywords");
+            Map<String, String> slots = extractSlots(text);
+            List<String> missing = resolveMissingSlots(List.of("location", "contact_phone"), slots);
+            return new IntentResult("rescue_request", 0.95, slots, missing, !missing.isEmpty());
         }
         if (lower.contains("咨询") || lower.contains("问一下")) {
-            return new IntentResult("consult", 0.85, "contains consult keywords");
+            return new IntentResult("consult", 0.85, Map.of(), List.of(), false);
         }
         if (lower.contains("投诉") || lower.contains("不满")) {
-            return new IntentResult("complaint", 0.88, "contains complaint keywords");
+            return new IntentResult("complaint", 0.88, Map.of(), List.of(), false);
         }
-        return new IntentResult("other", 0.6, "no clear intent matched");
+        return new IntentResult("other", 0.6, Map.of(), List.of(), false);
     }
 
     private String extractText(MessageEvent event) {
@@ -40,4 +52,39 @@ public class MockIntentRecognitionService implements IntentRecognitionService {
         Object body = content.get("body");
         return body != null ? body.toString() : null;
     }
+
+    private Map<String, String> extractSlots(String text) {
+        Map<String, String> slots = new HashMap<>();
+
+        Matcher customerMatcher = CUSTOMER_NAME_PATTERN.matcher(text);
+        if (customerMatcher.find()) {
+            slots.put("customer_name", customerMatcher.group(1).trim());
+        }
+
+        Matcher addressMatcher = ADDRESS_PATTERN.matcher(text);
+        if (addressMatcher.find()) {
+            slots.put("address", addressMatcher.group(1).trim());
+        }
+
+        Matcher phoneMatcher = PHONE_PATTERN.matcher(text);
+        if (phoneMatcher.find()) {
+            slots.put("phone", phoneMatcher.group(1).trim());
+        }
+
+        return slots;
+    }
+
+    private List<String> resolveMissingSlots(List<String> expectedSlots, Map<String, String> slots) {
+        List<String> missing = new ArrayList<>();
+        for (String slot : expectedSlots) {
+            if (!slots.containsKey(slot) || slots.get(slot) == null || slots.get(slot).isBlank()) {
+                missing.add(slot);
+            }
+        }
+        return missing;
+    }
+
+    private IntentResult unknownResult() {
+        return new IntentResult("unknown", 0.0, Map.of(), List.of(), false);
+    }
 }
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/SpelConditionEvaluator.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/SpelConditionEvaluator.java
new file mode 100644
index 0000000..aa9f45d
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/SpelConditionEvaluator.java
@@ -0,0 +1,38 @@
+package com.sino.mci.inbound.engine;
+
+import org.springframework.expression.spel.standard.SpelExpressionParser;
+import org.springframework.expression.spel.support.MapAccessor;
+import org.springframework.expression.spel.support.StandardEvaluationContext;
+import org.springframework.util.StringUtils;
+
+/**
+ * SpEL 条件表达式求值器。
+ */
+public final class SpelConditionEvaluator {
+
+    private static final SpelExpressionParser PARSER = new SpelExpressionParser();
+
+    private SpelConditionEvaluator() {
+    }
+
+    /**
+     * 对给定表达式进行求值。
+     *
+     * @param expression SpEL 表达式；为空或空白时返回 {@code true}
+     * @param context    流程执行上下文
+     * @return 表达式求值结果
+     */
+    public static boolean evaluate(String expression, FlowContext context) {
+        if (!StringUtils.hasText(expression)) {
+            return true;
+        }
+        try {
+            StandardEvaluationContext evaluationContext = new StandardEvaluationContext(context.toEvaluationMap());
+            evaluationContext.addPropertyAccessor(new MapAccessor());
+            Boolean result = PARSER.parseExpression(expression).getValue(evaluationContext, Boolean.class);
+            return Boolean.TRUE.equals(result);
+        } catch (Exception e) {
+            throw new IllegalArgumentException("Failed to evaluate condition expression: " + expression, e);
+        }
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/WebhookPushService.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/WebhookPushService.java
index 9c84f22..1ece297 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/WebhookPushService.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/engine/WebhookPushService.java
@@ -3,16 +3,25 @@ package com.sino.mci.inbound.engine;
 import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
 import com.sino.mci.admin.entity.Tenant;
 import com.sino.mci.admin.repository.TenantMapper;
+import com.sino.mci.exception.WebhookPushException;
 import com.sino.mci.inbound.entity.MessageEvent;
+import com.sino.mci.inbound.intent.IntentResult;
+import com.sino.mci.inbound.webhook.WebhookPayloadBuilder;
+import com.sino.mci.inbound.webhook.WebhookSignature;
+import com.sino.mci.inbound.webhook.WebhookSignatureService;
 import com.sino.mci.shared.util.JsonUtils;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
+import org.springframework.http.HttpEntity;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.HttpMethod;
+import org.springframework.http.MediaType;
 import org.springframework.http.ResponseEntity;
 import org.springframework.stereotype.Service;
+import org.springframework.util.StringUtils;
 import org.springframework.web.client.RestClientException;
 import org.springframework.web.client.RestTemplate;
 
-import java.util.HashMap;
 import java.util.Map;
 
 @Slf4j
@@ -20,39 +29,91 @@ import java.util.Map;
 @RequiredArgsConstructor
 public class WebhookPushService {
 
-    private final TenantMapper tenantMapper;
-    private final RestTemplate restTemplate = new RestTemplate();
+    private static final String AUTH_CONFIG_WEBHOOK_SECRET = "webhook_secret";
+    private static final String AUTH_CONFIG_SIGN_ALGORITHM = "sign_algorithm";
 
-    public void pushToBusiness(String tenantCode, MessageEvent event, IntentRecognitionService.IntentResult intent) {
+    private final TenantMapper tenantMapper;
+    private final RestTemplate restTemplate;
+    private final WebhookPayloadBuilder payloadBuilder;
+    private final WebhookSignatureService signatureService;
+
+    public void pushToBusiness(String tenantCode, MessageEvent event, IntentResult intent) {
+        pushToBusiness(tenantCode, event, intent, null);
+    }
+
+    public void pushToBusiness(String tenantCode, MessageEvent event, IntentResult intent, String customUrl) {
+        Tenant tenant = loadTenant(tenantCode);
+        String webhookUrl = resolveWebhookUrl(tenant, customUrl);
+
+        Map<String, Object> authConfig = parseAuthConfig(tenant.getAuthConfig());
+        String secret = getString(authConfig, AUTH_CONFIG_WEBHOOK_SECRET);
+        if (!StringUtils.hasText(secret)) {
+            throw new WebhookPushException("Tenant " + tenantCode + " has no webhook_secret configured");
+        }
+        String algorithm = getString(authConfig, AUTH_CONFIG_SIGN_ALGORITHM);
+        if (!StringUtils.hasText(algorithm)) {
+            algorithm = "hmac-sha256";
+        }
+
+        Map<String, Object> payload = payloadBuilder.buildPayload(event, intent);
+        String payloadJson = JsonUtils.toJson(payload);
+        if (payloadJson == null) {
+            throw new WebhookPushException("Failed to serialize webhook payload for tenant " + tenantCode);
+        }
+
+        WebhookSignature signature = signatureService.sign(tenantCode, payloadJson, secret, algorithm);
+
+        HttpHeaders headers = new HttpHeaders();
+        headers.setContentType(MediaType.APPLICATION_JSON);
+        headers.set("X-Msg-Platform-Signature", signature.signature());
+        headers.set("X-Msg-Platform-Timestamp", String.valueOf(signature.timestamp()));
+        headers.set("X-Msg-Platform-Tenant", tenantCode);
+
+        HttpEntity<String> entity = new HttpEntity<>(payloadJson, headers);
+        try {
+            ResponseEntity<String> response = restTemplate.exchange(
+                    webhookUrl, HttpMethod.POST, entity, String.class);
+            if (!response.getStatusCode().is2xxSuccessful()) {
+                throw new WebhookPushException("Webhook push failed with status " + response.getStatusCode()
+                        + " for tenant " + tenantCode);
+            }
+            log.info("Webhook pushed to {}, status={}, tenant={}", webhookUrl, response.getStatusCode(), tenantCode);
+        } catch (RestClientException e) {
+            throw new WebhookPushException("Webhook push failed for tenant " + tenantCode + ": " + e.getMessage(), e);
+        }
+    }
+
+    private Tenant loadTenant(String tenantCode) {
         Tenant tenant = tenantMapper.selectOne(
                 new LambdaQueryWrapper<Tenant>().eq(Tenant::getTenantCode, tenantCode));
         if (tenant == null) {
-            log.warn("Tenant not found for webhook push: {}", tenantCode);
-            return;
+            throw new WebhookPushException("Tenant not found for webhook push: " + tenantCode);
+        }
+        return tenant;
+    }
+
+    private String resolveWebhookUrl(Tenant tenant, String customUrl) {
+        if (StringUtils.hasText(customUrl)) {
+            return customUrl;
         }
         String webhookUrl = tenant.getInboundWebhookUrl();
-        if (webhookUrl == null || webhookUrl.isBlank()) {
-            log.warn("Tenant {} has no inbound webhook URL configured", tenantCode);
-            return;
+        if (!StringUtils.hasText(webhookUrl)) {
+            throw new WebhookPushException("Tenant " + tenant.getTenantCode() + " has no inbound webhook URL configured");
         }
+        return webhookUrl;
+    }
 
-        Map<String, Object> payload = new HashMap<>();
-        payload.put("eventId", event.getEventId());
-        payload.put("tenantCode", tenantCode);
-        payload.put("channelType", event.getChannelType());
-        payload.put("conversationId", event.getConversationId());
-        payload.put("personId", event.getPersonId());
-        payload.put("accountId", event.getAccountId());
-        payload.put("content", event.getContent());
-        payload.put("intent", intent.intent());
-        payload.put("confidence", intent.confidence());
-        payload.put("reason", intent.reason());
-
-        try {
-            ResponseEntity<String> response = restTemplate.postForEntity(webhookUrl, payload, String.class);
-            log.info("Webhook pushed to {}, status={}", webhookUrl, response.getStatusCode());
-        } catch (RestClientException e) {
-            log.warn("Webhook push failed: {}", e.getMessage());
+    @SuppressWarnings("unchecked")
+    private Map<String, Object> parseAuthConfig(String authConfigJson) {
+        if (authConfigJson == null || authConfigJson.isBlank()) {
+            return Map.of();
         }
+        Map<String, Object> config = JsonUtils.fromJson(authConfigJson, Map.class);
+        return config != null ? config : Map.of();
+    }
+
+    private String getString(Map<String, Object> config, String key) {
+        Object value = config.get(key);
+        return value != null ? value.toString() : null;
     }
 }
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/intent/IntentRecognitionService.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/intent/IntentRecognitionService.java
new file mode 100644
index 0000000..0f3ce57
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/intent/IntentRecognitionService.java
@@ -0,0 +1,287 @@
+package com.sino.mci.inbound.intent;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.sino.mci.admin.entity.Tenant;
+import com.sino.mci.admin.repository.TenantMapper;
+import com.sino.mci.shared.util.JsonUtils;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.ai.chat.client.ChatClient;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.stereotype.Service;
+
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.HashMap;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.regex.Matcher;
+import java.util.regex.Pattern;
+
+/**
+ * 规则 + LLM 意图识别服务。
+ *
+ * <p>优先使用租户自定义规则（配置在 {@code mci_tenant.ext_info.intent_rules}），
+ * 其次使用默认规则；规则未命中时调用 LLM；LLM 未配置时返回 {@code unknown}。</p>
+ */
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class IntentRecognitionService {
+
+    private static final double RULE_CONFIDENCE_THRESHOLD = 0.9;
+
+    private static final List<IntentRule> DEFAULT_RULES = List.of(
+            new IntentRule(List.of("下单", "我要下单"), "create_order", 1.0,
+                    List.of("customer_name", "address", "phone")),
+            new IntentRule(List.of("查状态", "状态"), "query_status", 1.0, List.of())
+    );
+
+    private static final Pattern CUSTOMER_NAME_PATTERN = Pattern.compile("客户\\s*[:：]?\\s*([^\\s,，]+)");
+    private static final Pattern ADDRESS_PATTERN = Pattern.compile("(?:地址|在)\\s*[:：]?\\s*([^\\s,，]+)");
+    private static final Pattern PHONE_PATTERN = Pattern.compile("(1[3-9]\\d{9})");
+
+    private final TenantMapper tenantMapper;
+
+    @Autowired(required = false)
+    private ChatClient.Builder chatClientBuilder;
+
+    @Value("${spring.ai.openai.api-key:}")
+    private String apiKey;
+
+    /**
+     * 识别用户消息的意图。
+     *
+     * @param tenantCode     租户编码
+     * @param text           用户消息文本
+     * @param businessContext 业务上下文
+     * @return 意图识别结果
+     */
+    public IntentResult recognize(String tenantCode, String text, Map<String, Object> businessContext) {
+        if (text == null || text.isBlank()) {
+            return unknownResult();
+        }
+
+        List<IntentRule> rules = resolveRules(tenantCode);
+        for (IntentRule rule : rules) {
+            if (matches(rule, text)) {
+                Map<String, String> slots = extractSlots(text);
+                List<String> missingSlots = resolveMissingSlots(rule, slots);
+                return new IntentResult(rule.intent(), rule.confidence(), slots,
+                        missingSlots, !missingSlots.isEmpty());
+            }
+        }
+
+        if (!isLlmConfigured()) {
+            log.debug("No rule matched and LLM is not configured, returning unknown intent");
+            return unknownResult();
+        }
+
+        return callLlm(text, businessContext);
+    }
+
+    private List<IntentRule> resolveRules(String tenantCode) {
+        List<IntentRule> rules = new ArrayList<>(loadTenantRules(tenantCode));
+        rules.addAll(DEFAULT_RULES);
+        return rules;
+    }
+
+    private List<IntentRule> loadTenantRules(String tenantCode) {
+        Tenant tenant;
+        try {
+            tenant = tenantMapper.selectOne(
+                    new LambdaQueryWrapper<Tenant>().eq(Tenant::getTenantCode, tenantCode));
+        } catch (Exception e) {
+            log.warn("Failed to load tenant rules for {}", tenantCode, e);
+            return List.of();
+        }
+        if (tenant == null || tenant.getExtInfo() == null || tenant.getExtInfo().isBlank()) {
+            return List.of();
+        }
+
+        Map<String, Object> ext = JsonUtils.fromJson(tenant.getExtInfo(), Map.class);
+        if (ext == null) {
+            return List.of();
+        }
+
+        Object rulesObj = ext.get("intent_rules");
+        if (!(rulesObj instanceof List<?>)) {
+            return List.of();
+        }
+
+        List<IntentRule> rules = new ArrayList<>();
+        for (Object item : (List<?>) rulesObj) {
+            if (!(item instanceof Map<?, ?> map)) {
+                continue;
+            }
+            List<String> keywords = toStringList(map.get("keywords"));
+            String intent = toString(map.get("intent"));
+            Double confidence = toDouble(map.get("confidence"));
+            List<String> expectedSlots = toStringList(map.get("expectedSlots"));
+            if (intent != null && !intent.isBlank() && !keywords.isEmpty()) {
+                rules.add(new IntentRule(keywords, intent,
+                        confidence != null ? confidence : 1.0,
+                        expectedSlots));
+            }
+        }
+        return rules;
+    }
+
+    private boolean matches(IntentRule rule, String text) {
+        for (String keyword : rule.keywords()) {
+            if (text.contains(keyword)) {
+                return true;
+            }
+        }
+        return false;
+    }
+
+    private Map<String, String> extractSlots(String text) {
+        Map<String, String> slots = new LinkedHashMap<>();
+
+        Matcher customerMatcher = CUSTOMER_NAME_PATTERN.matcher(text);
+        if (customerMatcher.find()) {
+            slots.put("customer_name", customerMatcher.group(1).trim());
+        }
+
+        Matcher addressMatcher = ADDRESS_PATTERN.matcher(text);
+        if (addressMatcher.find()) {
+            slots.put("address", addressMatcher.group(1).trim());
+        }
+
+        Matcher phoneMatcher = PHONE_PATTERN.matcher(text);
+        if (phoneMatcher.find()) {
+            slots.put("phone", phoneMatcher.group(1).trim());
+        }
+
+        return slots;
+    }
+
+    private List<String> resolveMissingSlots(IntentRule rule, Map<String, String> slots) {
+        List<String> missing = new ArrayList<>();
+        for (String slot : rule.expectedSlots()) {
+            if (!slots.containsKey(slot) || slots.get(slot) == null || slots.get(slot).isBlank()) {
+                missing.add(slot);
+            }
+        }
+        return missing;
+    }
+
+    private boolean isLlmConfigured() {
+        return chatClientBuilder != null && apiKey != null && !apiKey.isBlank();
+    }
+
+    private IntentResult callLlm(String text, Map<String, Object> businessContext) {
+        String prompt = buildPrompt(text, businessContext);
+        try {
+            String content = chatClientBuilder.build()
+                    .prompt()
+                    .user(prompt)
+                    .call()
+                    .content();
+            return parseLlmResponse(content);
+        } catch (Exception e) {
+            log.warn("LLM intent recognition failed: {}", e.getMessage());
+            return unknownResult();
+        }
+    }
+
+    private String buildPrompt(String text, Map<String, Object> businessContext) {
+        return "You are an intent classifier. Given the user message and context, output ONLY a JSON object "
+                + "with fields: intent, confidence (0-1), slots (object), missingSlots (array), "
+                + "requiresConfirmation (boolean).\n\n"
+                + "User message: " + text + "\n"
+                + "Context: " + JsonUtils.toJson(businessContext);
+    }
+
+    @SuppressWarnings("unchecked")
+    private IntentResult parseLlmResponse(String content) {
+        if (content == null || content.isBlank()) {
+            return unknownResult();
+        }
+        String json = stripMarkdownCodeBlock(content);
+        Map<String, Object> map = JsonUtils.fromJson(json, Map.class);
+        if (map == null) {
+            return unknownResult();
+        }
+
+        String intent = toString(map.get("intent"));
+        if (intent == null || intent.isBlank()) {
+            intent = "unknown";
+        }
+        double confidence = toDouble(map.get("confidence"));
+        Map<String, String> slots = toStringMap(map.get("slots"));
+        List<String> missingSlots = toStringList(map.get("missingSlots"));
+        boolean requiresConfirmation = Boolean.TRUE.equals(map.get("requiresConfirmation"));
+
+        return new IntentResult(intent, confidence, slots, missingSlots, requiresConfirmation);
+    }
+
+    private String stripMarkdownCodeBlock(String content) {
+        String trimmed = content.trim();
+        if (trimmed.startsWith("```")) {
+            int firstNewline = trimmed.indexOf('\n');
+            int lastFence = trimmed.lastIndexOf("```");
+            if (firstNewline > 0 && lastFence > firstNewline) {
+                return trimmed.substring(firstNewline + 1, lastFence).trim();
+            }
+        }
+        return trimmed;
+    }
+
+    private IntentResult unknownResult() {
+        return new IntentResult("unknown", 0.0, Map.of(), List.of(), false);
+    }
+
+    private static String toString(Object value) {
+        return value != null ? value.toString() : null;
+    }
+
+    private static Double toDouble(Object value) {
+        if (value == null) {
+            return null;
+        }
+        if (value instanceof Number number) {
+            return number.doubleValue();
+        }
+        try {
+            return Double.parseDouble(value.toString());
+        } catch (NumberFormatException e) {
+            return null;
+        }
+    }
+
+    @SuppressWarnings("unchecked")
+    private static List<String> toStringList(Object value) {
+        if (!(value instanceof Collection<?> collection)) {
+            return List.of();
+        }
+        List<String> result = new ArrayList<>();
+        for (Object item : collection) {
+            if (item != null) {
+                result.add(item.toString());
+            }
+        }
+        return result;
+    }
+
+    @SuppressWarnings("unchecked")
+    private static Map<String, String> toStringMap(Object value) {
+        if (!(value instanceof Map<?, ?> map)) {
+            return new HashMap<>();
+        }
+        Map<String, String> result = new LinkedHashMap<>();
+        for (Map.Entry<?, ?> entry : map.entrySet()) {
+            if (entry.getValue() != null) {
+                result.put(entry.getKey().toString(), entry.getValue().toString());
+            }
+        }
+        return result;
+    }
+
+    private record IntentRule(List<String> keywords, String intent, double confidence,
+                              List<String> expectedSlots) {
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/intent/IntentResult.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/intent/IntentResult.java
new file mode 100644
index 0000000..c94789e
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/intent/IntentResult.java
@@ -0,0 +1,35 @@
+package com.sino.mci.inbound.intent;
+
+import lombok.Data;
+
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+/**
+ * 意图识别结果。
+ */
+@Data
+public class IntentResult {
+
+    private String intent;
+    private double confidence;
+    private Map<String, String> slots;
+    private List<String> missingSlots;
+    private boolean requiresConfirmation;
+
+    public IntentResult() {
+        this.slots = new HashMap<>();
+        this.missingSlots = new ArrayList<>();
+    }
+
+    public IntentResult(String intent, double confidence, Map<String, String> slots,
+                        List<String> missingSlots, boolean requiresConfirmation) {
+        this.intent = intent;
+        this.confidence = confidence;
+        this.slots = slots != null ? slots : new HashMap<>();
+        this.missingSlots = missingSlots != null ? missingSlots : new ArrayList<>();
+        this.requiresConfirmation = requiresConfirmation;
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/intent/OpenAiChatClientConfig.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/intent/OpenAiChatClientConfig.java
new file mode 100644
index 0000000..bb92154
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/intent/OpenAiChatClientConfig.java
@@ -0,0 +1,40 @@
+package com.sino.mci.inbound.intent;
+
+import org.springframework.ai.chat.client.ChatClient;
+import org.springframework.ai.chat.model.ChatModel;
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.boot.autoconfigure.condition.ConditionalOnExpression;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+
+/**
+ * 手动装配 OpenAI ChatClient。
+ *
+ * <p>Spring AI 1.0.0-M6 的 {@code OpenAiAutoConfiguration} 引用了 Spring Boot 4.1 中
+ * 不再存在的 {@code RestClientAutoConfiguration}，因此排除官方自动配置；本配置在
+ * {@code spring.ai.openai.api-key} 存在时创建一个基于 {@code RestClient} 的
+ * {@link ChatModel}，并据此生成 {@link ChatClient.Builder}。</p>
+ */
+@Configuration
+@ConditionalOnExpression("'${spring.ai.openai.api-key:}'.trim() != ''")
+public class OpenAiChatClientConfig {
+
+    @Value("${spring.ai.openai.api-key}")
+    private String apiKey;
+
+    @Value("${spring.ai.openai.base-url:https://api.openai.com}")
+    private String baseUrl;
+
+    @Value("${spring.ai.openai.chat.options.model:gpt-4o-mini}")
+    private String model;
+
+    @Bean
+    public ChatModel openAiChatModel() {
+        return new OpenAiRestChatModel(baseUrl, apiKey, model);
+    }
+
+    @Bean
+    public ChatClient.Builder openAiChatClientBuilder(ChatModel openAiChatModel) {
+        return ChatClient.builder(openAiChatModel);
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/intent/OpenAiRestChatModel.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/intent/OpenAiRestChatModel.java
new file mode 100644
index 0000000..81301c8
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/intent/OpenAiRestChatModel.java
@@ -0,0 +1,89 @@
+package com.sino.mci.inbound.intent;
+
+import com.fasterxml.jackson.databind.ObjectMapper;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.ai.chat.model.ChatModel;
+import org.springframework.ai.chat.model.ChatResponse;
+import org.springframework.ai.chat.model.Generation;
+import org.springframework.ai.chat.messages.AssistantMessage;
+import org.springframework.ai.chat.prompt.Prompt;
+import org.springframework.web.client.RestClient;
+
+import java.util.List;
+import java.util.Map;
+
+/**
+ * 基于 {@code RestClient} 的 OpenAI ChatModel 最小实现。
+ *
+ * <p>Spring AI 1.0.0-M6 的 {@code OpenAiChatModel} 与当前 Spring Boot 4.1 / Spring Framework 7
+ * 存在二进制不兼容（{@code HttpHeaders.addAll} 返回类型变化），因此使用该实现替代，
+ * 仍通过 Spring AI {@link ChatModel} 接入 {@code ChatClient}。</p>
+ */
+@Slf4j
+public class OpenAiRestChatModel implements ChatModel {
+
+    private static final ObjectMapper OBJECT_MAPPER = new ObjectMapper();
+
+    private final String baseUrl;
+    private final String apiKey;
+    private final String model;
+    private final RestClient restClient;
+
+    public OpenAiRestChatModel(String baseUrl, String apiKey, String model) {
+        this.baseUrl = baseUrl.endsWith("/") ? baseUrl.substring(0, baseUrl.length() - 1) : baseUrl;
+        this.apiKey = apiKey;
+        this.model = model;
+        this.restClient = RestClient.builder()
+                .baseUrl(this.baseUrl)
+                .defaultHeader("Authorization", "Bearer " + apiKey)
+                .build();
+    }
+
+    @Override
+    public ChatResponse call(Prompt prompt) {
+        String text = prompt.getContents();
+        Map<String, Object> request = Map.of(
+                "model", model,
+                "messages", List.of(Map.of("role", "user", "content", text)));
+
+        try {
+            String responseBody = restClient.post()
+                    .uri("/v1/chat/completions")
+                    .body(request)
+                    .retrieve()
+                    .body(String.class);
+            String content = extractContent(responseBody);
+            return new ChatResponse(List.of(new Generation(new AssistantMessage(content))));
+        } catch (Exception e) {
+            log.warn("OpenAI REST call failed: {}", e.getMessage());
+            throw new RuntimeException("LLM call failed", e);
+        }
+    }
+
+    @SuppressWarnings("unchecked")
+    private String extractContent(String responseBody) {
+        if (responseBody == null || responseBody.isBlank()) {
+            return "";
+        }
+        try {
+            Map<String, Object> root = OBJECT_MAPPER.readValue(responseBody, Map.class);
+            Object choices = root.get("choices");
+            if (!(choices instanceof List<?> list) || list.isEmpty()) {
+                return "";
+            }
+            Object first = list.get(0);
+            if (!(first instanceof Map<?, ?> choice)) {
+                return "";
+            }
+            Object message = choice.get("message");
+            if (!(message instanceof Map<?, ?> msg)) {
+                return "";
+            }
+            Object content = msg.get("content");
+            return content != null ? content.toString() : "";
+        } catch (Exception e) {
+            log.warn("Failed to parse LLM response: {}", e.getMessage());
+            return "";
+        }
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundEventMessage.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundEventMessage.java
new file mode 100644
index 0000000..4ded556
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundEventMessage.java
@@ -0,0 +1,35 @@
+package com.sino.mci.inbound.mq;
+
+import lombok.Data;
+
+import java.io.Serializable;
+
+/**
+ * 入站消息事件 MQ 消息体。
+ *
+ * <p>用于将已丰富业务上下文的消息事件发送到 {@code mci.inbound.exchange}，
+ * 供下游阶段（意图识别、流程编排等）消费。</p>
+ */
+@Data
+public class InboundEventMessage implements Serializable {
+
+    private static final long serialVersionUID = 1L;
+
+    private Long id;
+    private String eventId;
+    private String tenantCode;
+    private String channelType;
+    private Long channelSubjectId;
+    private Integer direction;
+    private String eventType;
+    private String messageSource;
+    private Long conversationId;
+    private Long personId;
+    private Long accountId;
+    private String content;
+    private String rawPayload;
+    private String businessContext;
+    private Integer isProcessed;
+    private Integer status;
+    private String createTime;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundFlowConsumer.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundFlowConsumer.java
new file mode 100644
index 0000000..8e31845
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundFlowConsumer.java
@@ -0,0 +1,39 @@
+package com.sino.mci.inbound.mq;
+
+import com.sino.mci.inbound.engine.FlowEngine;
+import com.sino.mci.inbound.entity.MessageEvent;
+import com.sino.mci.inbound.repository.MessageEventMapper;
+import com.sino.mci.mq.config.MqConfig;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.amqp.rabbit.annotation.RabbitListener;
+import org.springframework.stereotype.Component;
+
+/**
+ * 入站流程事件消费者。
+ *
+ * <p>消费 {@code mci.inbound.flow.queue} 中意图识别后的事件，
+ * 加载完整 {@link MessageEvent} 并交由 {@link FlowEngine} 执行入站流程。</p>
+ */
+@Slf4j
+@Component
+@RequiredArgsConstructor
+public class InboundFlowConsumer {
+
+    private final FlowEngine flowEngine;
+    private final MessageEventMapper messageEventMapper;
+
+    @RabbitListener(queues = MqConfig.INBOUND_FLOW_QUEUE)
+    public void handle(InboundEventMessage message) {
+        log.info("收到入站流程事件: eventId={}", message.getEventId());
+
+        MessageEvent event = messageEventMapper.selectById(message.getId());
+        if (event == null) {
+            log.warn("入站流程事件不存在: eventId={}", message.getEventId());
+            return;
+        }
+
+        flowEngine.executeInboundFlow(event.getId());
+        log.info("入站流程执行完成: eventId={}", event.getEventId());
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundFlowMessageProducer.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundFlowMessageProducer.java
new file mode 100644
index 0000000..3403aef
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundFlowMessageProducer.java
@@ -0,0 +1,56 @@
+package com.sino.mci.inbound.mq;
+
+import com.sino.mci.inbound.entity.MessageEvent;
+import com.sino.mci.mq.config.MqConfig;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.amqp.rabbit.core.RabbitTemplate;
+import org.springframework.stereotype.Component;
+
+/**
+ * 意图识别后的事件 MQ 生产者。
+ *
+ * <p>将已识别意图的入站消息事件发送到 {@code mci.inbound.flow.exchange}，
+ * 供下游流程引擎（Phase 3.8）消费。</p>
+ */
+@Slf4j
+@Component
+@RequiredArgsConstructor
+public class InboundFlowMessageProducer {
+
+    private final RabbitTemplate rabbitTemplate;
+
+    /**
+     * 发布意图识别后的入站消息事件。
+     *
+     * @param event 消息事件
+     */
+    public void publish(MessageEvent event) {
+        InboundEventMessage message = convert(event);
+        rabbitTemplate.convertAndSend(MqConfig.INBOUND_FLOW_EXCHANGE,
+                MqConfig.INBOUND_FLOW_ROUTING_KEY, message);
+        log.info("Inbound flow event published: eventId={}", event.getEventId());
+    }
+
+    private InboundEventMessage convert(MessageEvent event) {
+        InboundEventMessage message = new InboundEventMessage();
+        message.setId(event.getId());
+        message.setEventId(event.getEventId());
+        message.setTenantCode(event.getTenantCode());
+        message.setChannelType(event.getChannelType());
+        message.setChannelSubjectId(event.getChannelSubjectId());
+        message.setDirection(event.getDirection());
+        message.setEventType(event.getEventType());
+        message.setMessageSource(event.getMessageSource());
+        message.setConversationId(event.getConversationId());
+        message.setPersonId(event.getPersonId());
+        message.setAccountId(event.getAccountId());
+        message.setContent(event.getContent());
+        message.setRawPayload(event.getRawPayload());
+        message.setBusinessContext(event.getBusinessContext());
+        message.setIsProcessed(event.getIsProcessed());
+        message.setStatus(event.getStatus());
+        message.setCreateTime(event.getCreateTime() != null ? event.getCreateTime().toString() : null);
+        return message;
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundMessageConsumer.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundMessageConsumer.java
new file mode 100644
index 0000000..2913261
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundMessageConsumer.java
@@ -0,0 +1,79 @@
+package com.sino.mci.inbound.mq;
+
+import com.sino.mci.inbound.entity.MessageEvent;
+import com.sino.mci.inbound.intent.IntentRecognitionService;
+import com.sino.mci.inbound.intent.IntentResult;
+import com.sino.mci.inbound.repository.MessageEventMapper;
+import com.sino.mci.mq.config.MqConfig;
+import com.sino.mci.shared.util.JsonUtils;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.amqp.rabbit.annotation.RabbitListener;
+import org.springframework.stereotype.Component;
+
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+/**
+ * 入站消息事件消费者。
+ *
+ * <p>消费 {@code mci.inbound.queue} 中的事件，进行意图识别，
+ * 将识别结果写回业务上下文，并发布到 {@code mci.inbound.flow.exchange}
+ * 供流程引擎处理。</p>
+ */
+@Slf4j
+@Component
+@RequiredArgsConstructor
+public class InboundMessageConsumer {
+
+    private final MessageEventMapper messageEventMapper;
+    private final IntentRecognitionService intentRecognitionService;
+    private final InboundFlowMessageProducer inboundFlowMessageProducer;
+
+    @RabbitListener(queues = MqConfig.INBOUND_QUEUE)
+    public void handle(InboundEventMessage message) {
+        log.info("收到入站消息事件: eventId={}", message.getEventId());
+
+        MessageEvent event = messageEventMapper.selectById(message.getId());
+        if (event == null) {
+            log.warn("入站消息事件不存在: eventId={}", message.getEventId());
+            return;
+        }
+
+        String text = extractText(message.getContent());
+        Map<String, Object> businessContext = parseBusinessContext(event.getBusinessContext());
+
+        IntentResult intent = intentRecognitionService.recognize(
+                event.getTenantCode(), text, businessContext);
+
+        businessContext.put("intent", intent);
+        event.setBusinessContext(JsonUtils.toJson(businessContext));
+        event.setIsProcessed(0);
+        messageEventMapper.updateById(event);
+
+        inboundFlowMessageProducer.publish(event);
+        log.info("入站消息意图识别完成: eventId={}, intent={}, confidence={}",
+                event.getEventId(), intent.getIntent(), intent.getConfidence());
+    }
+
+    private String extractText(String contentJson) {
+        if (contentJson == null || contentJson.isBlank()) {
+            return null;
+        }
+        Map<String, Object> content = JsonUtils.fromJson(contentJson, Map.class);
+        if (content == null) {
+            return null;
+        }
+        Object body = content.get("body");
+        return body != null ? body.toString() : null;
+    }
+
+    @SuppressWarnings("unchecked")
+    private Map<String, Object> parseBusinessContext(String businessContextJson) {
+        if (businessContextJson == null || businessContextJson.isBlank()) {
+            return new LinkedHashMap<>();
+        }
+        Map<String, Object> context = JsonUtils.fromJson(businessContextJson, Map.class);
+        return context != null ? context : new LinkedHashMap<>();
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundMessageProducer.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundMessageProducer.java
new file mode 100644
index 0000000..3768d96
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/mq/InboundMessageProducer.java
@@ -0,0 +1,52 @@
+package com.sino.mci.inbound.mq;
+
+import com.sino.mci.inbound.entity.MessageEvent;
+import com.sino.mci.mq.config.MqConfig;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.amqp.rabbit.core.RabbitTemplate;
+import org.springframework.stereotype.Component;
+
+/**
+ * 入站消息事件 MQ 生产者。
+ */
+@Slf4j
+@Component
+@RequiredArgsConstructor
+public class InboundMessageProducer {
+
+    private final RabbitTemplate rabbitTemplate;
+
+    /**
+     * 发布已丰富的入站消息事件。
+     *
+     * @param event 消息事件
+     */
+    public void publish(MessageEvent event) {
+        InboundEventMessage message = convert(event);
+        rabbitTemplate.convertAndSend(MqConfig.INBOUND_EXCHANGE, MqConfig.INBOUND_ROUTING_KEY, message);
+        log.info("Inbound event published: eventId={}", event.getEventId());
+    }
+
+    private InboundEventMessage convert(MessageEvent event) {
+        InboundEventMessage message = new InboundEventMessage();
+        message.setId(event.getId());
+        message.setEventId(event.getEventId());
+        message.setTenantCode(event.getTenantCode());
+        message.setChannelType(event.getChannelType());
+        message.setChannelSubjectId(event.getChannelSubjectId());
+        message.setDirection(event.getDirection());
+        message.setEventType(event.getEventType());
+        message.setMessageSource(event.getMessageSource());
+        message.setConversationId(event.getConversationId());
+        message.setPersonId(event.getPersonId());
+        message.setAccountId(event.getAccountId());
+        message.setContent(event.getContent());
+        message.setRawPayload(event.getRawPayload());
+        message.setBusinessContext(event.getBusinessContext());
+        message.setIsProcessed(event.getIsProcessed());
+        message.setStatus(event.getStatus());
+        message.setCreateTime(event.getCreateTime() != null ? event.getCreateTime().toString() : null);
+        return message;
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/service/InboundContextService.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/service/InboundContextService.java
new file mode 100644
index 0000000..6c043b6
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/service/InboundContextService.java
@@ -0,0 +1,146 @@
+package com.sino.mci.inbound.service;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.sino.mci.channel.entity.Conversation;
+import com.sino.mci.channel.entity.ConversationTagBinding;
+import com.sino.mci.channel.repository.ConversationMapper;
+import com.sino.mci.channel.repository.ConversationTagBindingMapper;
+import com.sino.mci.crm.entity.Person;
+import com.sino.mci.crm.entity.PersonTagBinding;
+import com.sino.mci.crm.entity.Tag;
+import com.sino.mci.crm.repository.PersonMapper;
+import com.sino.mci.crm.repository.PersonTagBindingMapper;
+import com.sino.mci.crm.repository.TagMapper;
+import com.sino.mci.inbound.entity.MessageEvent;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Service;
+
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+import java.util.stream.Collectors;
+
+/**
+ * 入站消息上下文匹配服务。
+ *
+ * <p>根据消息事件关联的会话与联系人，解析业务上下文（合同、机构、服务商、标签等），
+ * 供后续入站流程编排（意图识别、webhook 推送）使用。</p>
+ */
+@Service
+@RequiredArgsConstructor
+public class InboundContextService {
+
+    private final ConversationMapper conversationMapper;
+    private final PersonMapper personMapper;
+    private final ConversationTagBindingMapper conversationTagBindingMapper;
+    private final PersonTagBindingMapper personTagBindingMapper;
+    private final TagMapper tagMapper;
+
+    /**
+     * 根据消息事件解析业务上下文。
+     *
+     * <p>解析规则：</p>
+     * <ul>
+     *   <li>会话维度：合同、服务商、机构、业务渠道编码、会话标签、群主账号；</li>
+     *   <li>联系人维度：人员类型、机构、服务商、人员标签；</li>
+     *   <li>事件维度：渠道类型、收发账号。</li>
+     * </ul>
+     * <p>当会话与联系人的机构/服务商不一致时，优先保留会话维度的值。</p>
+     *
+     * @param event 消息事件
+     * @return 业务上下文键值对
+     */
+    public Map<String, Object> resolveContext(MessageEvent event) {
+        Map<String, Object> context = new LinkedHashMap<>();
+
+        resolveConversationContext(event, context);
+        resolvePersonContext(event, context);
+
+        if (event.getChannelType() != null) {
+            context.put("channel_type", event.getChannelType());
+        }
+        if (event.getAccountId() != null) {
+            context.put("account_id", event.getAccountId());
+        }
+
+        return context;
+    }
+
+    private void resolveConversationContext(MessageEvent event, Map<String, Object> context) {
+        Long conversationId = event.getConversationId();
+        if (conversationId == null) {
+            return;
+        }
+
+        Conversation conversation = conversationMapper.selectById(conversationId);
+        if (conversation == null) {
+            return;
+        }
+
+        putIfNotNull(context, "contract_id", conversation.getContractId());
+        putIfNotNull(context, "supplier_id", conversation.getSupplierId());
+        putIfNotNull(context, "institution_id", conversation.getInstitutionId());
+        putIfNotNull(context, "channel_code", conversation.getChannelCode());
+
+        List<String> tagPaths = conversationTagBindingMapper.selectList(
+                        new LambdaQueryWrapper<ConversationTagBinding>()
+                                .eq(ConversationTagBinding::getConversationId, conversationId))
+                .stream()
+                .map(ConversationTagBinding::getTagId)
+                .map(tagMapper::selectById)
+                .filter(Objects::nonNull)
+                .map(Tag::getTagPath)
+                .filter(Objects::nonNull)
+                .distinct()
+                .collect(Collectors.toList());
+        if (!tagPaths.isEmpty()) {
+            context.put("conversation_tags", tagPaths);
+        }
+
+        putIfNotNull(context, "owner_account_id", conversation.getOwnerAccountId());
+    }
+
+    private void resolvePersonContext(MessageEvent event, Map<String, Object> context) {
+        Long personId = event.getPersonId();
+        if (personId == null) {
+            return;
+        }
+
+        Person person = personMapper.selectById(personId);
+        if (person == null) {
+            return;
+        }
+
+        putIfNotNull(context, "person_type", person.getPersonType());
+        putIfAbsentAndNotNull(context, "institution_id", person.getInstitutionId());
+        putIfAbsentAndNotNull(context, "supplier_id", person.getSupplierId());
+
+        List<String> tagPaths = personTagBindingMapper.selectList(
+                        new LambdaQueryWrapper<PersonTagBinding>()
+                                .eq(PersonTagBinding::getPersonId, personId))
+                .stream()
+                .map(PersonTagBinding::getTagId)
+                .map(tagMapper::selectById)
+                .filter(Objects::nonNull)
+                .map(Tag::getTagPath)
+                .filter(Objects::nonNull)
+                .distinct()
+                .collect(Collectors.toList());
+        if (!tagPaths.isEmpty()) {
+            context.put("person_tags", tagPaths);
+        }
+    }
+
+    private void putIfNotNull(Map<String, Object> context, String key, Object value) {
+        if (value != null) {
+            context.put(key, value);
+        }
+    }
+
+    private void putIfAbsentAndNotNull(Map<String, Object> context, String key, Object value) {
+        if (value != null) {
+            context.computeIfAbsent(key, k -> value);
+        }
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/service/InboundMessageService.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/service/InboundMessageService.java
index e8379fd..916d8d5 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/inbound/service/InboundMessageService.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/service/InboundMessageService.java
@@ -5,6 +5,7 @@ import com.sino.mci.inbound.dto.ReceiveMessageRequest;
 import com.sino.mci.inbound.entity.FlowExecutionTrace;
 import com.sino.mci.inbound.entity.MessageEvent;
 import com.sino.mci.inbound.engine.FlowEngine;
+import com.sino.mci.inbound.mq.InboundMessageProducer;
 import com.sino.mci.inbound.repository.FlowExecutionTraceMapper;
 import com.sino.mci.inbound.repository.MessageEventMapper;
 import com.sino.mci.shared.util.JsonUtils;
@@ -14,6 +15,7 @@ import org.springframework.stereotype.Service;
 import org.springframework.transaction.annotation.Transactional;
 
 import java.util.List;
+import java.util.Map;
 
 @Slf4j
 @Service
@@ -23,6 +25,8 @@ public class InboundMessageService {
     private final MessageEventMapper messageEventMapper;
     private final FlowExecutionTraceMapper flowExecutionTraceMapper;
     private final FlowEngine flowEngine;
+    private final InboundContextService inboundContextService;
+    private final InboundMessageProducer inboundMessageProducer;
 
     @Transactional
     public MessageEvent receiveMessage(String tenantCode, ReceiveMessageRequest request) {
@@ -46,6 +50,8 @@ public class InboundMessageService {
         log.info("Inbound message received: tenant={}, eventId={}, conversationId={}",
                 tenantCode, request.getEventId(), request.getConversationId());
 
+        processInboundMessage(event);
+
         FlowExecutionTrace receiveTrace = new FlowExecutionTrace();
         receiveTrace.setEventId(event.getEventId());
         receiveTrace.setNodeType("receive");
@@ -58,6 +64,20 @@ public class InboundMessageService {
         return messageEventMapper.selectById(event.getId());
     }
 
+    /**
+     * 处理入站消息：解析上下文、持久化并发布到 MQ。
+     *
+     * @param event 已持久化的入站消息事件
+     */
+    public void processInboundMessage(MessageEvent event) {
+        Map<String, Object> context = inboundContextService.resolveContext(event);
+        event.setBusinessContext(JsonUtils.toJson(context));
+        messageEventMapper.updateById(event);
+        inboundMessageProducer.publish(event);
+        log.info("Inbound message processed and published: eventId={}, conversationId={}, personId={}",
+                event.getEventId(), event.getConversationId(), event.getPersonId());
+    }
+
     public List<FlowExecutionTrace> listTraces(String eventId) {
         return flowExecutionTraceMapper.selectList(
                 new LambdaQueryWrapper<FlowExecutionTrace>()
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/webhook/WebhookPayloadBuilder.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/webhook/WebhookPayloadBuilder.java
new file mode 100644
index 0000000..b221b73
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/webhook/WebhookPayloadBuilder.java
@@ -0,0 +1,81 @@
+package com.sino.mci.inbound.webhook;
+
+import com.sino.mci.inbound.entity.MessageEvent;
+import com.sino.mci.inbound.intent.IntentResult;
+import com.sino.mci.shared.util.JsonUtils;
+import org.springframework.stereotype.Component;
+
+import java.time.LocalDateTime;
+import java.time.format.DateTimeFormatter;
+import java.util.LinkedHashMap;
+import java.util.Map;
+
+/**
+ * 入站 webhook 结构化 payload 构造器。
+ *
+ * <p>将 {@link MessageEvent} 与意图识别结果转换为业务系统可消费的标准 JSON 结构，
+ * 字段命名与架构文档 1.8 节保持一致（snake_case）。</p>
+ */
+@Component
+public class WebhookPayloadBuilder {
+
+    private static final DateTimeFormatter ISO_FORMATTER = DateTimeFormatter.ISO_LOCAL_DATE_TIME;
+
+    public Map<String, Object> buildPayload(MessageEvent event, IntentResult intent) {
+        Map<String, Object> payload = new LinkedHashMap<>();
+        payload.put("event_id", event.getEventId());
+        payload.put("tenant_code", event.getTenantCode());
+        payload.put("channel_type", event.getChannelType());
+        payload.put("direction", mapDirection(event.getDirection()));
+        payload.put("event_type", event.getEventType());
+        payload.put("conversation_id", event.getConversationId());
+        payload.put("person_id", event.getPersonId());
+        payload.put("account_id", event.getAccountId());
+        payload.put("content", parseJson(event.getContent()));
+        payload.put("intent", buildIntentMap(intent));
+        payload.put("business_context", parseJson(event.getBusinessContext()));
+        payload.put("raw_payload", parseJson(event.getRawPayload()));
+        payload.put("create_time", formatTime(event.getCreateTime()));
+        return payload;
+    }
+
+    private Object buildIntentMap(IntentResult intent) {
+        if (intent == null) {
+            return null;
+        }
+        Map<String, Object> map = new LinkedHashMap<>();
+        map.put("intent", intent.getIntent());
+        map.put("confidence", intent.getConfidence());
+        map.put("slots", intent.getSlots());
+        map.put("missing_slots", intent.getMissingSlots());
+        map.put("requires_confirmation", intent.isRequiresConfirmation());
+        return map;
+    }
+
+    @SuppressWarnings("unchecked")
+    private Object parseJson(String json) {
+        if (json == null || json.isBlank()) {
+            return null;
+        }
+        Object result = JsonUtils.fromJson(json, Object.class);
+        return result != null ? result : json;
+    }
+
+    private String mapDirection(Integer direction) {
+        if (direction == null) {
+            return "in";
+        }
+        return switch (direction) {
+            case 1 -> "in";
+            case 2 -> "out";
+            default -> String.valueOf(direction);
+        };
+    }
+
+    private String formatTime(LocalDateTime time) {
+        if (time == null) {
+            return null;
+        }
+        return time.format(ISO_FORMATTER);
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/webhook/WebhookSignature.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/webhook/WebhookSignature.java
new file mode 100644
index 0000000..4c81353
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/webhook/WebhookSignature.java
@@ -0,0 +1,11 @@
+package com.sino.mci.inbound.webhook;
+
+/**
+ * 入站 webhook 签名结果。
+ *
+ * @param signature  Base64 编码的 HMAC 签名
+ * @param algorithm  签名算法，如 hmac-sha256 / hmac-sha512
+ * @param timestamp  签名时的时间戳（Unix 秒）
+ */
+public record WebhookSignature(String signature, String algorithm, long timestamp) {
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/inbound/webhook/WebhookSignatureService.java b/backend/mci-server/src/main/java/com/sino/mci/inbound/webhook/WebhookSignatureService.java
new file mode 100644
index 0000000..7e98786
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/inbound/webhook/WebhookSignatureService.java
@@ -0,0 +1,67 @@
+package com.sino.mci.inbound.webhook;
+
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.stereotype.Service;
+
+import javax.crypto.Mac;
+import javax.crypto.spec.SecretKeySpec;
+import java.nio.charset.StandardCharsets;
+import java.security.InvalidKeyException;
+import java.security.NoSuchAlgorithmException;
+import java.util.Base64;
+
+/**
+ * 入站 webhook 签名服务。
+ *
+ * <p>使用 HMAC-SHA256 / HMAC-SHA512 对原始 payload 进行签名，
+ * 输出 Base64 编码签名、算法标识及时间戳，供业务系统验签使用。</p>
+ */
+@Slf4j
+@Service
+public class WebhookSignatureService {
+
+    private static final String DEFAULT_ALGORITHM = "hmac-sha256";
+    private static final String HMAC_SHA256 = "HmacSHA256";
+    private static final String HMAC_SHA512 = "HmacSHA512";
+
+    /**
+     * 对原始 payload 进行签名。
+     *
+     * @param tenantCode 租户编码（用于日志/追踪，不参与签名计算）
+     * @param payload    待签名的原始 payload 字符串
+     * @param secret     租户 webhook 密钥
+     * @param algorithm  签名算法，支持 hmac-sha256（默认）和 hmac-sha512
+     * @return 签名结果，包含签名值、算法及时间戳
+     */
+    public WebhookSignature sign(String tenantCode, String payload, String secret, String algorithm) {
+        String normalizedAlgorithm = normalizeAlgorithm(algorithm);
+        String signature = hmacSign(tenantCode, payload, secret, normalizedAlgorithm);
+        long timestamp = System.currentTimeMillis() / 1000;
+        return new WebhookSignature(signature, normalizedAlgorithm, timestamp);
+    }
+
+    private String normalizeAlgorithm(String algorithm) {
+        if (algorithm == null || algorithm.isBlank()) {
+            return DEFAULT_ALGORITHM;
+        }
+        return switch (algorithm.toLowerCase().replace("_", "-")) {
+            case "hmac-sha256", "sha256" -> "hmac-sha256";
+            case "hmac-sha512", "sha512" -> "hmac-sha512";
+            default -> DEFAULT_ALGORITHM;
+        };
+    }
+
+    private String hmacSign(String tenantCode, String payload, String secret, String algorithm) {
+        String hmacAlgorithm = algorithm.equals("hmac-sha512") ? HMAC_SHA512 : HMAC_SHA256;
+        try {
+            Mac mac = Mac.getInstance(hmacAlgorithm);
+            SecretKeySpec keySpec = new SecretKeySpec(secret.getBytes(StandardCharsets.UTF_8), hmacAlgorithm);
+            mac.init(keySpec);
+            byte[] signatureBytes = mac.doFinal(payload.getBytes(StandardCharsets.UTF_8));
+            return Base64.getEncoder().encodeToString(signatureBytes);
+        } catch (NoSuchAlgorithmException | InvalidKeyException e) {
+            log.error("Failed to sign webhook payload for tenant {}", tenantCode, e);
+            throw new IllegalStateException("Webhook signature failed: " + algorithm, e);
+        }
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/mq/config/MqConfig.java b/backend/mci-server/src/main/java/com/sino/mci/mq/config/MqConfig.java
new file mode 100644
index 0000000..ebff1cb
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/mq/config/MqConfig.java
@@ -0,0 +1,119 @@
+package com.sino.mci.mq.config;
+
+import org.springframework.amqp.core.Binding;
+import org.springframework.amqp.core.BindingBuilder;
+import org.springframework.amqp.core.DirectExchange;
+import org.springframework.amqp.core.Queue;
+import org.springframework.context.annotation.Bean;
+import org.springframework.context.annotation.Configuration;
+import org.springframework.web.client.RestTemplate;
+
+import java.util.HashMap;
+import java.util.Map;
+
+/**
+ * 消息发送 RabbitMQ 配置。
+ * <p>
+ * 重试机制：主队列设置死信交换机（DLX）和死信路由键；发送失败需要延迟重试时，
+ * 将消息发送到 DLX 并设置 per-message TTL，到期后由 DLX 重新路由回主队列消费。
+ */
+@Configuration
+public class MqConfig {
+
+    public static final String SEND_EXCHANGE = "mci.send.exchange";
+    public static final String SEND_QUEUE = "mci.send.queue";
+    public static final String SEND_ROUTING_KEY = "mci.send";
+
+    public static final String SEND_DLX_EXCHANGE = "mci.send.dlx.exchange";
+    public static final String SEND_DLX_ROUTING_KEY = "mci.send.retry";
+
+    public static final String CALLBACK_EXCHANGE = "mci.callback.exchange";
+    public static final String CALLBACK_QUEUE = "mci.callback.queue";
+    public static final String CALLBACK_ROUTING_KEY = "mci.callback";
+
+    public static final String INBOUND_EXCHANGE = "mci.inbound.exchange";
+    public static final String INBOUND_QUEUE = "mci.inbound.queue";
+    public static final String INBOUND_ROUTING_KEY = "mci.inbound";
+
+    public static final String INBOUND_FLOW_EXCHANGE = "mci.inbound.flow.exchange";
+    public static final String INBOUND_FLOW_QUEUE = "mci.inbound.flow.queue";
+    public static final String INBOUND_FLOW_ROUTING_KEY = "mci.inbound.flow";
+
+    @Bean
+    public Queue sendQueue() {
+        Map<String, Object> args = new HashMap<>();
+        args.put("x-dead-letter-exchange", SEND_DLX_EXCHANGE);
+        args.put("x-dead-letter-routing-key", SEND_DLX_ROUTING_KEY);
+        return new Queue(SEND_QUEUE, true, false, false, args);
+    }
+
+    @Bean
+    public DirectExchange sendExchange() {
+        return new DirectExchange(SEND_EXCHANGE, true, false);
+    }
+
+    @Bean
+    public Binding sendBinding(Queue sendQueue, DirectExchange sendExchange) {
+        return BindingBuilder.bind(sendQueue).to(sendExchange).with(SEND_ROUTING_KEY);
+    }
+
+    @Bean
+    public DirectExchange sendDlxExchange() {
+        return new DirectExchange(SEND_DLX_EXCHANGE, true, false);
+    }
+
+    @Bean
+    public Binding sendDlxBinding(Queue sendQueue, DirectExchange sendDlxExchange) {
+        return BindingBuilder.bind(sendQueue).to(sendDlxExchange).with(SEND_DLX_ROUTING_KEY);
+    }
+
+    @Bean
+    public Queue callbackQueue() {
+        return new Queue(CALLBACK_QUEUE, true);
+    }
+
+    @Bean
+    public DirectExchange callbackExchange() {
+        return new DirectExchange(CALLBACK_EXCHANGE, true, false);
+    }
+
+    @Bean
+    public Binding callbackBinding(Queue callbackQueue, DirectExchange callbackExchange) {
+        return BindingBuilder.bind(callbackQueue).to(callbackExchange).with(CALLBACK_ROUTING_KEY);
+    }
+
+    @Bean
+    public Queue inboundQueue() {
+        return new Queue(INBOUND_QUEUE, true);
+    }
+
+    @Bean
+    public DirectExchange inboundExchange() {
+        return new DirectExchange(INBOUND_EXCHANGE, true, false);
+    }
+
+    @Bean
+    public Binding inboundBinding(Queue inboundQueue, DirectExchange inboundExchange) {
+        return BindingBuilder.bind(inboundQueue).to(inboundExchange).with(INBOUND_ROUTING_KEY);
+    }
+
+    @Bean
+    public Queue inboundFlowQueue() {
+        return new Queue(INBOUND_FLOW_QUEUE, true);
+    }
+
+    @Bean
+    public DirectExchange inboundFlowExchange() {
+        return new DirectExchange(INBOUND_FLOW_EXCHANGE, true, false);
+    }
+
+    @Bean
+    public Binding inboundFlowBinding(Queue inboundFlowQueue, DirectExchange inboundFlowExchange) {
+        return BindingBuilder.bind(inboundFlowQueue).to(inboundFlowExchange).with(INBOUND_FLOW_ROUTING_KEY);
+    }
+
+    @Bean
+    public RestTemplate restTemplate() {
+        return new RestTemplate();
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/policy/engine/Policy.java b/backend/mci-server/src/main/java/com/sino/mci/policy/engine/Policy.java
new file mode 100644
index 0000000..adad6e8
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/policy/engine/Policy.java
@@ -0,0 +1,44 @@
+package com.sino.mci.policy.engine;
+
+import com.fasterxml.jackson.annotation.JsonProperty;
+import lombok.AllArgsConstructor;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+import java.util.List;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+public class Policy {
+
+    private PolicyType type;
+
+    // rate_limit
+    @JsonProperty("scope")
+    private String scope;
+
+    @JsonProperty("limit")
+    private Integer limit;
+
+    @JsonProperty("window")
+    private String window;
+
+    // time_window
+    @JsonProperty("allow")
+    private List<String> allow;
+
+    // blacklist
+    @JsonProperty("person_ids")
+    private List<Long> personIds;
+
+    @JsonProperty("conversation_ids")
+    private List<Long> conversationIds;
+
+    // retry
+    @JsonProperty("max_retry")
+    private Integer maxRetry;
+
+    @JsonProperty("interval")
+    private List<Integer> intervals;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyCheckResult.java b/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyCheckResult.java
new file mode 100644
index 0000000..4aa9d8e
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyCheckResult.java
@@ -0,0 +1,18 @@
+package com.sino.mci.policy.engine;
+
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class PolicyCheckResult {
+
+    private boolean allowed;
+    private String reasonCode;
+    private String reasonMessage;
+    private RetryConfig retryConfig;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyEngine.java b/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyEngine.java
new file mode 100644
index 0000000..2b5c2d0
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyEngine.java
@@ -0,0 +1,240 @@
+package com.sino.mci.policy.engine;
+
+import com.sino.mci.send.entity.SendRecord;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.data.redis.core.StringRedisTemplate;
+import org.springframework.stereotype.Service;
+import org.springframework.util.CollectionUtils;
+
+import java.time.Duration;
+import java.time.LocalDateTime;
+import java.time.LocalTime;
+import java.time.format.DateTimeFormatter;
+import java.util.List;
+import java.util.Optional;
+
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class PolicyEngine {
+
+    private static final DateTimeFormatter HOURLY_FORMATTER = DateTimeFormatter.ofPattern("yyyyMMddHH");
+    private static final DateTimeFormatter DAILY_FORMATTER = DateTimeFormatter.ofPattern("yyyyMMdd");
+    private static final DateTimeFormatter WEEKLY_FORMATTER = DateTimeFormatter.ofPattern("YYYYww");
+
+    private final StringRedisTemplate redisTemplate;
+
+    public PolicyCheckResult check(SendRecord record, PolicyGroupConfig config) {
+        return check(record, config, LocalDateTime.now());
+    }
+
+    public PolicyCheckResult check(SendRecord record, PolicyGroupConfig config, LocalDateTime now) {
+        if (config == null || CollectionUtils.isEmpty(config.getPolicies())) {
+            return allowed(null);
+        }
+
+        PolicyCheckResult blacklistResult = checkBlacklist(record, config);
+        if (blacklistResult != null) {
+            return blacklistResult;
+        }
+
+        PolicyCheckResult timeWindowResult = checkTimeWindow(config, now);
+        if (timeWindowResult != null) {
+            return timeWindowResult;
+        }
+
+        PolicyCheckResult rateLimitResult = checkRateLimit(record, config, now);
+        if (rateLimitResult != null) {
+            return rateLimitResult;
+        }
+
+        return allowed(config.getRetryConfig().orElse(null));
+    }
+
+    public PolicyPreviewResult previewCheck(SendRecord record, PolicyGroupConfig config, LocalDateTime now) {
+        PolicyPreviewResult result = PolicyPreviewResult.builder()
+                .timeWindowOk(true)
+                .blacklistHit(0)
+                .build();
+        if (config == null || CollectionUtils.isEmpty(config.getPolicies())) {
+            return result;
+        }
+
+        if (isBlacklisted(record, config)) {
+            result.setBlacklistHit(1);
+        }
+
+        PolicyCheckResult timeWindowResult = checkTimeWindow(config, now);
+        result.setTimeWindowOk(timeWindowResult == null);
+
+        result.setRateLimitWarning(checkRateLimitDryRun(record, config, now));
+        return result;
+    }
+
+    private PolicyCheckResult allowed(RetryConfig retryConfig) {
+        return PolicyCheckResult.builder()
+                .allowed(true)
+                .retryConfig(retryConfig)
+                .build();
+    }
+
+    private PolicyCheckResult reject(String reasonCode, String reasonMessage) {
+        return PolicyCheckResult.builder()
+                .allowed(false)
+                .reasonCode(reasonCode)
+                .reasonMessage(reasonMessage)
+                .build();
+    }
+
+    private PolicyCheckResult checkBlacklist(SendRecord record, PolicyGroupConfig config) {
+        for (Policy policy : config.getPolicies()) {
+            if (policy.getType() != PolicyType.BLACKLIST) {
+                continue;
+            }
+            if (!CollectionUtils.isEmpty(policy.getPersonIds())
+                    && record.getPersonId() != null
+                    && policy.getPersonIds().contains(record.getPersonId())) {
+                return reject("blacklist_person", "发送目标人员在黑名单中");
+            }
+            if (!CollectionUtils.isEmpty(policy.getConversationIds())
+                    && record.getConversationId() != null
+                    && policy.getConversationIds().contains(record.getConversationId())) {
+                return reject("blacklist_conversation", "发送目标会话在黑名单中");
+            }
+        }
+        return null;
+    }
+
+    private boolean isBlacklisted(SendRecord record, PolicyGroupConfig config) {
+        return checkBlacklist(record, config) != null;
+    }
+
+    private PolicyCheckResult checkTimeWindow(PolicyGroupConfig config, LocalDateTime now) {
+        LocalTime current = now.toLocalTime();
+        for (Policy policy : config.getPolicies()) {
+            if (policy.getType() != PolicyType.TIME_WINDOW || CollectionUtils.isEmpty(policy.getAllow())) {
+                continue;
+            }
+            boolean insideAny = policy.getAllow().stream()
+                    .map(this::parseTimeRange)
+                    .filter(Optional::isPresent)
+                    .map(Optional::get)
+                    .anyMatch(range -> range.contains(current));
+            if (!insideAny) {
+                return reject("time_window_not_allowed", "当前时间不在允许发送窗口内");
+            }
+        }
+        return null;
+    }
+
+    private Optional<TimeRange> parseTimeRange(String range) {
+        if (range == null || !range.contains("-")) {
+            return Optional.empty();
+        }
+        String[] parts = range.split("-", 2);
+        try {
+            LocalTime start = LocalTime.parse(parts[0].trim());
+            LocalTime end = LocalTime.parse(parts[1].trim());
+            return Optional.of(new TimeRange(start, end));
+        } catch (Exception e) {
+            log.warn("时间窗口格式错误: {}", range);
+            return Optional.empty();
+        }
+    }
+
+    private PolicyCheckResult checkRateLimit(SendRecord record, PolicyGroupConfig config, LocalDateTime now) {
+        for (Policy policy : config.getPolicies()) {
+            if (policy.getType() != PolicyType.RATE_LIMIT) {
+                continue;
+            }
+            Long scopeId = resolveScopeId(record, policy.getScope());
+            if (scopeId == null || policy.getLimit() == null || policy.getLimit() <= 0) {
+                continue;
+            }
+
+            String key = buildRateLimitKey(record.getTenantCode(), policy.getScope(), scopeId, policy.getWindow(), now);
+            long ttlSeconds = resolveTtlSeconds(policy.getWindow());
+
+            Long count = redisTemplate.opsForValue().increment(key);
+            if (count != null && count == 1L) {
+                redisTemplate.expire(key, Duration.ofSeconds(ttlSeconds));
+            }
+
+            if (count != null && count > policy.getLimit()) {
+                return reject("rate_limit_exceeded",
+                        String.format("发送频率超过限制: scope=%s, limit=%d, window=%s", policy.getScope(), policy.getLimit(), policy.getWindow()));
+            }
+        }
+        return null;
+    }
+
+    private String checkRateLimitDryRun(SendRecord record, PolicyGroupConfig config, LocalDateTime now) {
+        for (Policy policy : config.getPolicies()) {
+            if (policy.getType() != PolicyType.RATE_LIMIT) {
+                continue;
+            }
+            Long scopeId = resolveScopeId(record, policy.getScope());
+            if (scopeId == null || policy.getLimit() == null || policy.getLimit() <= 0) {
+                continue;
+            }
+
+            String key = buildRateLimitKey(record.getTenantCode(), policy.getScope(), scopeId, policy.getWindow(), now);
+            String value = redisTemplate.opsForValue().get(key);
+            long count = 0L;
+            if (value != null) {
+                try {
+                    count = Long.parseLong(value);
+                } catch (NumberFormatException e) {
+                    log.warn("Redis 限流计数格式错误: key={}, value={}", key, value);
+                }
+            }
+
+            if (count >= policy.getLimit()) {
+                return String.format("scope=%s, id=%d 已超过频率限制: limit=%d, window=%s, current=%d",
+                        policy.getScope(), scopeId, policy.getLimit(), policy.getWindow(), count);
+            }
+            if (count >= policy.getLimit() * 0.8) {
+                return String.format("scope=%s, id=%d 接近频率上限: limit=%d, window=%s, current=%d",
+                        policy.getScope(), scopeId, policy.getLimit(), policy.getWindow(), count);
+            }
+        }
+        return null;
+    }
+
+    private Long resolveScopeId(SendRecord record, String scope) {
+        return switch (scope) {
+            case "account" -> record.getAccountId();
+            case "person" -> record.getPersonId();
+            case "conversation" -> record.getConversationId();
+            default -> null;
+        };
+    }
+
+    private String buildRateLimitKey(String tenantCode, String scope, Long scopeId, String window, LocalDateTime now) {
+        String period = switch (window) {
+            case "1h" -> now.format(HOURLY_FORMATTER);
+            case "7d" -> now.format(WEEKLY_FORMATTER);
+            default -> now.format(DAILY_FORMATTER);
+        };
+        return String.format("mci:rate:%s:%s:%s:%s", tenantCode, scope, scopeId, period);
+    }
+
+    private long resolveTtlSeconds(String window) {
+        return switch (window) {
+            case "1h" -> 3600L;
+            case "7d" -> 7 * 86400L;
+            default -> 86400L;
+        };
+    }
+
+    private record TimeRange(LocalTime start, LocalTime end) {
+
+        boolean contains(LocalTime time) {
+            if (!start.isAfter(end)) {
+                return !time.isBefore(start) && !time.isAfter(end);
+            }
+            return !time.isBefore(start) || !time.isAfter(end);
+        }
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyGroupConfig.java b/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyGroupConfig.java
new file mode 100644
index 0000000..ae7eb12
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyGroupConfig.java
@@ -0,0 +1,47 @@
+package com.sino.mci.policy.engine;
+
+import com.fasterxml.jackson.core.JsonProcessingException;
+import com.fasterxml.jackson.core.type.TypeReference;
+import com.fasterxml.jackson.databind.ObjectMapper;
+import lombok.AllArgsConstructor;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.util.StringUtils;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Optional;
+
+@Slf4j
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+public class PolicyGroupConfig {
+
+    private List<Policy> policies = new ArrayList<>();
+
+    public static PolicyGroupConfig parseJson(String json) {
+        if (!StringUtils.hasText(json)) {
+            return new PolicyGroupConfig();
+        }
+        ObjectMapper mapper = new ObjectMapper();
+        try {
+            List<Policy> list = mapper.readValue(json, new TypeReference<List<Policy>>() {
+            });
+            return new PolicyGroupConfig(list != null ? list : new ArrayList<>());
+        } catch (JsonProcessingException e) {
+            log.warn("解析策略组配置失败: {}", json, e);
+            return new PolicyGroupConfig();
+        }
+    }
+
+    public Optional<RetryConfig> getRetryConfig() {
+        return policies.stream()
+                .filter(p -> p.getType() == PolicyType.RETRY)
+                .findFirst()
+                .map(p -> new RetryConfig(
+                        p.getMaxRetry() == null ? 0 : p.getMaxRetry(),
+                        p.getIntervals()));
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyPreviewResult.java b/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyPreviewResult.java
new file mode 100644
index 0000000..3c212aa
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyPreviewResult.java
@@ -0,0 +1,17 @@
+package com.sino.mci.policy.engine;
+
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class PolicyPreviewResult {
+
+    private String rateLimitWarning;
+    private boolean timeWindowOk;
+    private int blacklistHit;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyType.java b/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyType.java
new file mode 100644
index 0000000..f6bab1f
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/policy/engine/PolicyType.java
@@ -0,0 +1,18 @@
+package com.sino.mci.policy.engine;
+
+import com.fasterxml.jackson.annotation.JsonProperty;
+
+public enum PolicyType {
+
+    @JsonProperty("rate_limit")
+    RATE_LIMIT,
+
+    @JsonProperty("time_window")
+    TIME_WINDOW,
+
+    @JsonProperty("blacklist")
+    BLACKLIST,
+
+    @JsonProperty("retry")
+    RETRY
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/policy/engine/RetryConfig.java b/backend/mci-server/src/main/java/com/sino/mci/policy/engine/RetryConfig.java
new file mode 100644
index 0000000..3274817
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/policy/engine/RetryConfig.java
@@ -0,0 +1,16 @@
+package com.sino.mci.policy.engine;
+
+import lombok.AllArgsConstructor;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+import java.util.List;
+
+@Data
+@NoArgsConstructor
+@AllArgsConstructor
+public class RetryConfig {
+
+    private int maxRetry;
+    private List<Integer> intervals;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/controller/SendController.java b/backend/mci-server/src/main/java/com/sino/mci/send/controller/SendController.java
index c44ad0c..0cd68da 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/send/controller/SendController.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/controller/SendController.java
@@ -1,16 +1,33 @@
 package com.sino.mci.send.controller;
 
+import com.baomidou.mybatisplus.core.metadata.IPage;
 import com.sino.mci.admin.security.AuthContext;
+import com.sino.mci.send.dto.SendPreviewRequest;
+import com.sino.mci.send.dto.SendPreviewResponse;
 import com.sino.mci.send.dto.SendRecordResponse;
 import com.sino.mci.send.dto.SendRequest;
 import com.sino.mci.send.dto.SendResponse;
+import com.sino.mci.send.dto.SendStatisticsResponse;
+import com.sino.mci.send.dto.SendTaskStatusResponse;
 import com.sino.mci.send.dto.SendTestRequest;
+import com.sino.mci.send.service.SendPreviewService;
 import com.sino.mci.send.service.SendService;
 import com.sino.mci.shared.web.ApiResponse;
 import jakarta.validation.Valid;
 import lombok.RequiredArgsConstructor;
-import org.springframework.web.bind.annotation.*;
+import org.springframework.util.StringUtils;
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
+import org.springframework.web.bind.annotation.RequestBody;
+import org.springframework.web.bind.annotation.RequestHeader;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestMethod;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
 
+import java.time.LocalDateTime;
+import java.time.format.DateTimeFormatter;
 import java.util.List;
 
 @RestController
@@ -19,6 +36,9 @@ import java.util.List;
 public class SendController {
 
     private final SendService sendService;
+    private final SendPreviewService sendPreviewService;
+
+    private static final DateTimeFormatter DATE_TIME_FORMATTER = DateTimeFormatter.ISO_LOCAL_DATE_TIME;
 
     @PostMapping
     public ApiResponse<SendResponse> send(
@@ -34,15 +54,69 @@ public class SendController {
         return ApiResponse.ok(sendService.testSend(tenantCode, request));
     }
 
-    @GetMapping("/{task_id}/records")
+    @PostMapping("/preview")
+    public ApiResponse<SendPreviewResponse> preview(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @Valid @RequestBody SendPreviewRequest request) {
+        return ApiResponse.ok(sendPreviewService.preview(tenantCode, request));
+    }
+
+    @RequestMapping(value = "/{task_id}/records", method = {RequestMethod.GET, RequestMethod.POST})
     public ApiResponse<List<SendRecordResponse>> listRecords(
             @RequestHeader("X-Tenant-Code") String tenantCode,
             @PathVariable("task_id") String taskId) {
         return ApiResponse.ok(sendService.listRecords(tenantCode, taskId));
     }
 
+    @GetMapping("/{task_id}/status")
+    public ApiResponse<SendTaskStatusResponse> getTaskStatus(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("task_id") String taskId) {
+        return ApiResponse.ok(sendService.getTaskStatus(tenantCode, taskId));
+    }
+
+    @PostMapping("/{task_id}/cancel")
+    public ApiResponse<Integer> cancelTask(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @PathVariable("task_id") String taskId) {
+        return ApiResponse.ok(sendService.cancelTask(tenantCode, taskId));
+    }
+
+    @GetMapping("/records")
+    public ApiResponse<IPage<SendRecordResponse>> queryRecords(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @RequestParam(required = false) String taskId,
+            @RequestParam(required = false) String start,
+            @RequestParam(required = false) String end,
+            @RequestParam(required = false) String channelType,
+            @RequestParam(required = false) Integer status,
+            @RequestParam(defaultValue = "1") long page,
+            @RequestParam(defaultValue = "20") long size) {
+        LocalDateTime startTime = parseDateTime(start);
+        LocalDateTime endTime = parseDateTime(end);
+        return ApiResponse.ok(sendService.queryRecords(tenantCode, taskId, startTime, endTime,
+                channelType, status, page, size));
+    }
+
+    @GetMapping("/statistics")
+    public ApiResponse<SendStatisticsResponse> statistics(
+            @RequestHeader("X-Tenant-Code") String tenantCode,
+            @RequestParam(required = false) String start,
+            @RequestParam(required = false) String end) {
+        LocalDateTime startTime = parseDateTime(start);
+        LocalDateTime endTime = parseDateTime(end);
+        return ApiResponse.ok(sendService.getStatistics(tenantCode, startTime, endTime));
+    }
+
     @GetMapping("/list")
     public ApiResponse<List<SendRecordResponse>> listRecentRecords() {
         return ApiResponse.ok(sendService.listRecentRecords(AuthContext.currentTenantCode()));
     }
+
+    private LocalDateTime parseDateTime(String value) {
+        if (!StringUtils.hasText(value)) {
+            return null;
+        }
+        return LocalDateTime.parse(value, DATE_TIME_FORMATTER);
+    }
 }
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/dto/ChannelStatistics.java b/backend/mci-server/src/main/java/com/sino/mci/send/dto/ChannelStatistics.java
new file mode 100644
index 0000000..21f0f43
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/dto/ChannelStatistics.java
@@ -0,0 +1,14 @@
+package com.sino.mci.send.dto;
+
+import lombok.Data;
+
+@Data
+public class ChannelStatistics {
+
+    private String channelType;
+    private long total;
+    private long pendingCount;
+    private long sendingCount;
+    private long successCount;
+    private long failedCount;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendPreviewRequest.java b/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendPreviewRequest.java
new file mode 100644
index 0000000..32bb903
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendPreviewRequest.java
@@ -0,0 +1,19 @@
+package com.sino.mci.send.dto;
+
+import jakarta.validation.constraints.NotBlank;
+import jakarta.validation.constraints.NotNull;
+import lombok.Data;
+
+import java.util.Map;
+
+@Data
+public class SendPreviewRequest {
+
+    @NotBlank
+    private String targetType;
+
+    @NotNull
+    private Map<String, Object> targetValue;
+
+    private Map<String, Object> channelStrategy;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendPreviewResponse.java b/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendPreviewResponse.java
new file mode 100644
index 0000000..5e4eb40
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendPreviewResponse.java
@@ -0,0 +1,25 @@
+package com.sino.mci.send.dto;
+
+import lombok.Data;
+
+import java.util.Map;
+
+@Data
+public class SendPreviewResponse {
+
+    private int totalPersonCount;
+    private int totalConversationCount;
+    private Map<String, Integer> channelBreakdown;
+    private int unreachableCount;
+    private Map<String, Integer> accountUsage;
+    private PolicyCheckInfo policyCheck;
+    private int estimatedTimeSeconds;
+
+    @Data
+    public static class PolicyCheckInfo {
+
+        private String rateLimitWarning;
+        private boolean timeWindowOk;
+        private int blacklistHit;
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendRecordResponse.java b/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendRecordResponse.java
index 4ea24d6..efb0cb6 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendRecordResponse.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendRecordResponse.java
@@ -18,6 +18,9 @@ public class SendRecordResponse {
     private String contentType;
     private Integer sendStatus;
     private String channelResult;
+    private String contentBody;
+    private String callbackUrl;
     private LocalDateTime sendTime;
+    private LocalDateTime finishTime;
     private LocalDateTime createTime;
 }
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendStatisticsResponse.java b/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendStatisticsResponse.java
new file mode 100644
index 0000000..ac7b3e6
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendStatisticsResponse.java
@@ -0,0 +1,17 @@
+package com.sino.mci.send.dto;
+
+import lombok.Data;
+
+import java.util.ArrayList;
+import java.util.List;
+
+@Data
+public class SendStatisticsResponse {
+
+    private long total;
+    private long pendingCount;
+    private long sendingCount;
+    private long successCount;
+    private long failedCount;
+    private List<ChannelStatistics> channelStats = new ArrayList<>();
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendTaskStatusResponse.java b/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendTaskStatusResponse.java
new file mode 100644
index 0000000..8ae5a4b
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/dto/SendTaskStatusResponse.java
@@ -0,0 +1,14 @@
+package com.sino.mci.send.dto;
+
+import lombok.Data;
+
+@Data
+public class SendTaskStatusResponse {
+
+    private String taskId;
+    private long total;
+    private long pendingCount;
+    private long sendingCount;
+    private long successCount;
+    private long failedCount;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/entity/SendRecord.java b/backend/mci-server/src/main/java/com/sino/mci/send/entity/SendRecord.java
index e330deb..9fc282e 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/send/entity/SendRecord.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/entity/SendRecord.java
@@ -26,6 +26,9 @@ public class SendRecord extends BaseEntity {
     private String contentBody;
     private String callbackUrl;
     private Integer sendStatus;
+    private Integer retryCount;
+    private Integer maxRetry;
+    private LocalDateTime nextRetryTime;
     private String channelResult;
     private LocalDateTime sendTime;
     private LocalDateTime finishTime;
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/mq/SendMessageConsumer.java b/backend/mci-server/src/main/java/com/sino/mci/send/mq/SendMessageConsumer.java
new file mode 100644
index 0000000..43938dd
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/mq/SendMessageConsumer.java
@@ -0,0 +1,116 @@
+package com.sino.mci.send.mq;
+
+import com.sino.mci.mq.config.MqConfig;
+import com.sino.mci.policy.engine.RetryConfig;
+import com.sino.mci.send.entity.SendRecord;
+import com.sino.mci.send.repository.SendRecordMapper;
+import com.sino.mci.send.service.SendCallbackService;
+import com.sino.mci.send.service.SendService;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.amqp.rabbit.annotation.RabbitListener;
+import org.springframework.stereotype.Component;
+
+import java.time.LocalDateTime;
+
+@Slf4j
+@Component
+@RequiredArgsConstructor
+public class SendMessageConsumer {
+
+    private static final int SEND_STATUS_SUCCESS = 2;
+    private static final int SEND_STATUS_FAILED = 3;
+
+    private final SendRecordMapper sendRecordMapper;
+    private final SendService sendService;
+    private final SendMessageProducer sendMessageProducer;
+    private final SendCallbackService sendCallbackService;
+
+    @RabbitListener(queues = MqConfig.SEND_QUEUE)
+    public void handle(SendRecordMessage message) {
+        log.info("收到异步发送消息: recordId={}, attempt={}", message.getRecordId(), message.getAttempt());
+        SendRecord record = sendRecordMapper.selectById(message.getRecordId());
+        if (record == null) {
+            log.warn("发送记录不存在: recordId={}", message.getRecordId());
+            return;
+        }
+
+        if (record.getSendStatus() != null && record.getSendStatus() == SEND_STATUS_SUCCESS) {
+            sendCallbackService.sendCallback(record);
+            return;
+        }
+
+        if (record.getSendStatus() != null && record.getSendStatus() == SEND_STATUS_FAILED) {
+            sendCallbackService.sendCallback(record);
+            return;
+        }
+
+        int attempt = message.getAttempt();
+        int maxRetry = record.getMaxRetry() != null ? record.getMaxRetry() : 0;
+        int currentRetry = record.getRetryCount() != null ? record.getRetryCount() : 0;
+
+        if (attempt < currentRetry) {
+            log.warn("丢弃过期重试消息: recordId={}, attempt={}, currentRetry={}",
+                    record.getId(), attempt, currentRetry);
+            return;
+        }
+
+        if (attempt > maxRetry) {
+            record.setSendStatus(SEND_STATUS_FAILED);
+            record.setFinishTime(LocalDateTime.now());
+            sendRecordMapper.updateById(record);
+            sendCallbackService.sendCallback(record);
+            return;
+        }
+
+        try {
+            sendService.dispatchRecord(record);
+
+            record = sendRecordMapper.selectById(record.getId());
+            if (record == null) {
+                return;
+            }
+
+            if (record.getSendStatus() != null && record.getSendStatus() == SEND_STATUS_SUCCESS) {
+                sendCallbackService.sendCallback(record);
+            } else if (record.getSendStatus() != null && record.getSendStatus() == SEND_STATUS_FAILED) {
+                handleRetry(record, message);
+            }
+        } catch (Exception e) {
+            log.error("异步发送处理异常: recordId={}", message.getRecordId(), e);
+        }
+    }
+
+    private void handleRetry(SendRecord record, SendRecordMessage message) {
+        int currentRetry = record.getRetryCount() != null ? record.getRetryCount() : 0;
+        int maxRetry = record.getMaxRetry() != null ? record.getMaxRetry() : 0;
+        if (currentRetry >= maxRetry) {
+            sendCallbackService.sendCallback(record);
+            return;
+        }
+
+        int attempt = message.getAttempt() + 1;
+        int delaySeconds = resolveDelaySeconds(message.getRetryPlan(), attempt);
+        SendRecordMessage retryMessage = SendRecordMessage.builder()
+                .recordId(message.getRecordId())
+                .taskId(message.getTaskId())
+                .tenantCode(message.getTenantCode())
+                .attempt(attempt)
+                .retryPlan(message.getRetryPlan())
+                .build();
+
+        record.setRetryCount(attempt);
+        record.setNextRetryTime(LocalDateTime.now().plusSeconds(delaySeconds));
+        sendRecordMapper.updateById(record);
+
+        sendMessageProducer.publishRetryMessage(retryMessage, delaySeconds);
+    }
+
+    private int resolveDelaySeconds(RetryConfig retryPlan, int attempt) {
+        if (retryPlan != null && retryPlan.getIntervals() != null && !retryPlan.getIntervals().isEmpty()) {
+            int index = Math.min(attempt - 1, retryPlan.getIntervals().size() - 1);
+            return retryPlan.getIntervals().get(index);
+        }
+        return 5;
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/mq/SendMessageProducer.java b/backend/mci-server/src/main/java/com/sino/mci/send/mq/SendMessageProducer.java
new file mode 100644
index 0000000..344baff
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/mq/SendMessageProducer.java
@@ -0,0 +1,29 @@
+package com.sino.mci.send.mq;
+
+import com.sino.mci.mq.config.MqConfig;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.amqp.rabbit.core.RabbitTemplate;
+import org.springframework.stereotype.Component;
+
+@Slf4j
+@Component
+@RequiredArgsConstructor
+public class SendMessageProducer {
+
+    private final RabbitTemplate rabbitTemplate;
+
+    public void publishSendMessage(SendRecordMessage message) {
+        log.info("发布异步发送消息: recordId={}, taskId={}", message.getRecordId(), message.getTaskId());
+        rabbitTemplate.convertAndSend(MqConfig.SEND_EXCHANGE, MqConfig.SEND_ROUTING_KEY, message);
+    }
+
+    public void publishRetryMessage(SendRecordMessage message, int delaySeconds) {
+        long delayMillis = delaySeconds * 1000L;
+        log.info("发布重试消息: recordId={}, attempt={}, delay={}ms", message.getRecordId(), message.getAttempt(), delayMillis);
+        rabbitTemplate.convertAndSend(MqConfig.SEND_DLX_EXCHANGE, MqConfig.SEND_DLX_ROUTING_KEY, message, msg -> {
+            msg.getMessageProperties().setExpiration(String.valueOf(delayMillis));
+            return msg;
+        });
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/mq/SendRecordMessage.java b/backend/mci-server/src/main/java/com/sino/mci/send/mq/SendRecordMessage.java
new file mode 100644
index 0000000..eaf8219
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/mq/SendRecordMessage.java
@@ -0,0 +1,22 @@
+package com.sino.mci.send.mq;
+
+import com.sino.mci.policy.engine.RetryConfig;
+import lombok.AllArgsConstructor;
+import lombok.Builder;
+import lombok.Data;
+import lombok.NoArgsConstructor;
+
+import java.io.Serializable;
+
+@Data
+@Builder
+@NoArgsConstructor
+@AllArgsConstructor
+public class SendRecordMessage implements Serializable {
+
+    private Long recordId;
+    private String taskId;
+    private String tenantCode;
+    private int attempt;
+    private RetryConfig retryPlan;
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/service/SendCallbackService.java b/backend/mci-server/src/main/java/com/sino/mci/send/service/SendCallbackService.java
new file mode 100644
index 0000000..eefdbcc
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/service/SendCallbackService.java
@@ -0,0 +1,70 @@
+package com.sino.mci.send.service;
+
+import com.sino.mci.send.entity.SendRecord;
+import com.sino.mci.shared.util.JsonUtils;
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+import org.springframework.http.HttpEntity;
+import org.springframework.http.HttpHeaders;
+import org.springframework.http.MediaType;
+import org.springframework.stereotype.Service;
+import org.springframework.util.StringUtils;
+import org.springframework.web.client.RestTemplate;
+
+import java.time.LocalDateTime;
+import java.util.HashMap;
+import java.util.Map;
+
+@Slf4j
+@Service
+@RequiredArgsConstructor
+public class SendCallbackService {
+
+    private static final int CALLBACK_STATUS_DELIVERED = 1;
+    private static final int CALLBACK_STATUS_FAILED = 3;
+
+    private final RestTemplate restTemplate;
+
+    public void sendCallback(SendRecord record) {
+        if (record == null || !StringUtils.hasText(record.getCallbackUrl())) {
+            return;
+        }
+        String event;
+        int status;
+        if (record.getSendStatus() != null && record.getSendStatus() == 2) {
+            event = "delivered";
+            status = CALLBACK_STATUS_DELIVERED;
+        } else {
+            event = "failed";
+            status = CALLBACK_STATUS_FAILED;
+        }
+        Map<String, Object> payload = new HashMap<>();
+        payload.put("task_id", record.getTaskId());
+        payload.put("record_id", record.getId());
+        payload.put("conversation_id", record.getConversationId());
+        payload.put("person_id", record.getPersonId());
+        payload.put("channel_type", record.getChannelType());
+        payload.put("event", event);
+        payload.put("status", status);
+        payload.put("channel_result", parseChannelResult(record.getChannelResult()));
+        payload.put("event_time", record.getFinishTime() != null ? record.getFinishTime() : LocalDateTime.now());
+
+        HttpHeaders headers = new HttpHeaders();
+        headers.setContentType(MediaType.APPLICATION_JSON);
+        HttpEntity<Map<String, Object>> entity = new HttpEntity<>(payload, headers);
+        try {
+            restTemplate.postForEntity(record.getCallbackUrl(), entity, String.class);
+            log.info("发送回调成功: recordId={}, event={}", record.getId(), event);
+        } catch (Exception e) {
+            log.warn("发送回调失败: recordId={}, url={}", record.getId(), record.getCallbackUrl(), e);
+        }
+    }
+
+    private Object parseChannelResult(String channelResult) {
+        if (!StringUtils.hasText(channelResult)) {
+            return new HashMap<>();
+        }
+        Object result = JsonUtils.fromJson(channelResult, Object.class);
+        return result != null ? result : new HashMap<>();
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/service/SendPreviewService.java b/backend/mci-server/src/main/java/com/sino/mci/send/service/SendPreviewService.java
new file mode 100644
index 0000000..779adcd
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/service/SendPreviewService.java
@@ -0,0 +1,200 @@
+package com.sino.mci.send.service;
+
+import com.sino.mci.channel.entity.ChannelAccount;
+import com.sino.mci.channel.repository.ChannelAccountMapper;
+import com.sino.mci.policy.engine.PolicyEngine;
+import com.sino.mci.policy.engine.PolicyGroupConfig;
+import com.sino.mci.policy.engine.PolicyPreviewResult;
+import com.sino.mci.policy.entity.PolicyGroup;
+import com.sino.mci.policy.repository.PolicyGroupMapper;
+import com.sino.mci.send.dto.SendPreviewRequest;
+import com.sino.mci.send.dto.SendPreviewResponse;
+import com.sino.mci.send.entity.SendRecord;
+import lombok.RequiredArgsConstructor;
+import org.springframework.stereotype.Service;
+import org.springframework.util.CollectionUtils;
+import org.springframework.util.StringUtils;
+
+import java.time.LocalDateTime;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Map;
+import java.util.Objects;
+import java.util.Set;
+
+@Service
+@RequiredArgsConstructor
+public class SendPreviewService {
+
+    private static final int STATUS_ENABLED = 1;
+
+    private final SendService sendService;
+    private final ChannelAccountMapper accountMapper;
+    private final PolicyEngine policyEngine;
+    private final PolicyGroupMapper policyGroupMapper;
+
+    public SendPreviewResponse preview(String tenantCode, SendPreviewRequest request) {
+        List<SendTarget> targets = sendService.resolveByType(tenantCode, request.getTargetType(),
+                request.getTargetValue(), request.getChannelStrategy());
+
+        int totalPersonCount = 0;
+        int totalConversationCount = 0;
+        int unreachableCount = 0;
+        Map<String, Integer> channelBreakdown = new HashMap<>();
+        Map<Long, Integer> accountIdUsage = new HashMap<>();
+
+        for (SendTarget target : targets) {
+            if (target.getPersonId() != null) {
+                totalPersonCount++;
+            }
+            if (target.getConversationId() != null) {
+                totalConversationCount++;
+            }
+            if (target.getAccountId() == null) {
+                unreachableCount++;
+            } else {
+                accountIdUsage.merge(target.getAccountId(), 1, Integer::sum);
+            }
+            String channelType = target.getChannelType() != null ? target.getChannelType().name().toLowerCase() : "unknown";
+            channelBreakdown.merge(channelType, 1, Integer::sum);
+        }
+
+        Map<String, Integer> accountUsage = buildAccountUsage(accountIdUsage);
+        SendPreviewResponse.PolicyCheckInfo policyCheck = dryRunPolicyCheck(tenantCode, request, targets, accountIdUsage.keySet());
+
+        int estimatedTimeSeconds = (int) (1 + targets.size() * 0.5 + totalConversationCount * 2);
+
+        SendPreviewResponse response = new SendPreviewResponse();
+        response.setTotalPersonCount(totalPersonCount);
+        response.setTotalConversationCount(totalConversationCount);
+        response.setChannelBreakdown(channelBreakdown);
+        response.setUnreachableCount(unreachableCount);
+        response.setAccountUsage(accountUsage);
+        response.setPolicyCheck(policyCheck);
+        response.setEstimatedTimeSeconds(estimatedTimeSeconds);
+        return response;
+    }
+
+    private Map<String, Integer> buildAccountUsage(Map<Long, Integer> accountIdUsage) {
+        Map<String, Integer> accountUsage = new HashMap<>();
+        if (accountIdUsage.isEmpty()) {
+            return accountUsage;
+        }
+        Set<Long> accountIds = accountIdUsage.keySet();
+        List<ChannelAccount> accounts = accountMapper.selectBatchIds(accountIds);
+        Map<Long, String> accountNames = new HashMap<>();
+        for (ChannelAccount account : accounts) {
+            accountNames.put(account.getId(),
+                    StringUtils.hasText(account.getAccountName()) ? account.getAccountName() : String.valueOf(account.getId()));
+        }
+        for (Map.Entry<Long, Integer> entry : accountIdUsage.entrySet()) {
+            String name = accountNames.getOrDefault(entry.getKey(), String.valueOf(entry.getKey()));
+            accountUsage.put(name, entry.getValue());
+        }
+        return accountUsage;
+    }
+
+    private SendPreviewResponse.PolicyCheckInfo dryRunPolicyCheck(String tenantCode, SendPreviewRequest request,
+                                                                  List<SendTarget> targets, Set<Long> accountIds) {
+        SendPreviewResponse.PolicyCheckInfo info = new SendPreviewResponse.PolicyCheckInfo();
+        info.setTimeWindowOk(true);
+        info.setBlacklistHit(0);
+        info.setRateLimitWarning(null);
+
+        PolicyGroup policyGroup = loadPolicyGroup(tenantCode, extractChannelType(request.getChannelStrategy()));
+        if (policyGroup == null) {
+            return info;
+        }
+
+        PolicyGroupConfig config = PolicyGroupConfig.parseJson(policyGroup.getPolicies());
+        if (CollectionUtils.isEmpty(config.getPolicies())) {
+            return info;
+        }
+
+        LocalDateTime now = LocalDateTime.now();
+        int blacklistHit = 0;
+        boolean timeWindowOk = true;
+        StringBuilder warning = new StringBuilder();
+
+        Set<Long> checkedAccounts = new HashSet<>(accountIds);
+        if (checkedAccounts.isEmpty()) {
+            checkedAccounts.add(null);
+        }
+        for (Long accountId : checkedAccounts) {
+            SendTarget representative = targets.stream()
+                    .filter(t -> Objects.equals(t.getAccountId(), accountId))
+                    .findFirst()
+                    .orElse(null);
+            SendRecord dummy = new SendRecord();
+            dummy.setTenantCode(tenantCode);
+            dummy.setAccountId(accountId);
+            dummy.setPersonId(representative != null ? representative.getPersonId() : null);
+            dummy.setConversationId(representative != null ? representative.getConversationId() : null);
+            dummy.setChannelType(extractChannelType(request.getChannelStrategy()));
+
+            PolicyPreviewResult result = policyEngine.previewCheck(dummy, config, now);
+            if (!result.isTimeWindowOk()) {
+                timeWindowOk = false;
+            }
+            blacklistHit += result.getBlacklistHit();
+            if (result.getRateLimitWarning() != null) {
+                if (warning.length() > 0) {
+                    warning.append("; ");
+                }
+                warning.append(result.getRateLimitWarning());
+            }
+        }
+
+        info.setTimeWindowOk(timeWindowOk);
+        info.setBlacklistHit(blacklistHit);
+        info.setRateLimitWarning(warning.length() > 0 ? warning.toString() : null);
+        return info;
+    }
+
+    private PolicyGroup loadPolicyGroup(String tenantCode, String channelType) {
+        com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper<PolicyGroup> wrapper =
+                new com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper<>();
+        wrapper.eq(PolicyGroup::getTenantCode, tenantCode)
+                .eq(PolicyGroup::getStatus, STATUS_ENABLED);
+        if (StringUtils.hasText(channelType)) {
+            wrapper.eq(PolicyGroup::getChannelType, channelType);
+        } else {
+            wrapper.and(w -> w.isNull(PolicyGroup::getChannelType).or().eq(PolicyGroup::getChannelType, ""));
+        }
+        wrapper.orderByDesc(PolicyGroup::getId).last("LIMIT 1");
+        PolicyGroup group = policyGroupMapper.selectOne(wrapper);
+        if (group != null) {
+            return group;
+        }
+
+        group = policyGroupMapper.selectOne(
+                new com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper<PolicyGroup>()
+                        .eq(PolicyGroup::getTenantCode, tenantCode)
+                        .eq(PolicyGroup::getStatus, STATUS_ENABLED)
+                        .and(w -> w.isNull(PolicyGroup::getChannelType).or().eq(PolicyGroup::getChannelType, ""))
+                        .orderByDesc(PolicyGroup::getId)
+                        .last("LIMIT 1"));
+        if (group != null) {
+            return group;
+        }
+
+        return policyGroupMapper.selectOne(
+                new com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper<PolicyGroup>()
+                        .eq(PolicyGroup::getGroupCode, "default")
+                        .eq(PolicyGroup::getStatus, STATUS_ENABLED)
+                        .orderByDesc(PolicyGroup::getId)
+                        .last("LIMIT 1"));
+    }
+
+    private String extractChannelType(Map<String, Object> channelStrategy) {
+        if (channelStrategy == null) {
+            return "wecom";
+        }
+        Object value = channelStrategy.get("channel_type");
+        if (value == null) {
+            value = channelStrategy.get("channelType");
+        }
+        return value != null ? String.valueOf(value) : "wecom";
+    }
+}
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/service/SendService.java b/backend/mci-server/src/main/java/com/sino/mci/send/service/SendService.java
index 4b9b796..4d345b0 100644
--- a/backend/mci-server/src/main/java/com/sino/mci/send/service/SendService.java
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/service/SendService.java
@@ -1,17 +1,18 @@
 package com.sino.mci.send.service;
 
 import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.baomidou.mybatisplus.core.conditions.update.LambdaUpdateWrapper;
+import com.baomidou.mybatisplus.extension.plugins.pagination.Page;
 import com.sino.mci.channel.adapter.registry.ChannelAdapterRegistry;
 import com.sino.mci.channel.common.dto.SendMessageRequest;
 import com.sino.mci.channel.common.dto.SendMessageResult;
 import com.sino.mci.channel.common.model.ChannelType;
 import com.sino.mci.channel.common.spi.ChannelAdapter;
 import com.sino.mci.channel.entity.ChannelAccount;
-import com.sino.mci.channel.entity.ChannelAccountConversation;
 import com.sino.mci.channel.entity.Conversation;
-import com.sino.mci.channel.repository.ChannelAccountConversationMapper;
 import com.sino.mci.channel.repository.ChannelAccountMapper;
 import com.sino.mci.channel.repository.ConversationMapper;
+import com.sino.mci.channel.service.AccountSelector;
 import com.sino.mci.channel.entity.ConversationTagBinding;
 import com.sino.mci.crm.entity.ChannelIdentity;
 import com.sino.mci.crm.entity.Person;
@@ -23,11 +24,22 @@ import com.sino.mci.crm.repository.PersonMapper;
 import com.sino.mci.crm.repository.PersonTagBindingMapper;
 import com.sino.mci.crm.repository.TagMapper;
 import com.sino.mci.exception.BusinessException;
+import com.sino.mci.policy.engine.PolicyCheckResult;
+import com.sino.mci.policy.engine.PolicyEngine;
+import com.sino.mci.policy.engine.PolicyGroupConfig;
+import com.sino.mci.policy.entity.PolicyGroup;
+import com.sino.mci.policy.repository.PolicyGroupMapper;
+import com.sino.mci.policy.engine.RetryConfig;
+import com.sino.mci.send.dto.ChannelStatistics;
 import com.sino.mci.send.dto.SendRecordResponse;
 import com.sino.mci.send.dto.SendRequest;
+import com.sino.mci.send.dto.SendStatisticsResponse;
+import com.sino.mci.send.dto.SendTaskStatusResponse;
 import com.sino.mci.send.dto.SendResponse;
 import com.sino.mci.send.dto.SendTestRequest;
 import com.sino.mci.send.entity.SendRecord;
+import com.sino.mci.send.mq.SendMessageProducer;
+import com.sino.mci.send.mq.SendRecordMessage;
 import com.sino.mci.send.repository.SendRecordMapper;
 import com.sino.mci.shared.util.JsonUtils;
 import lombok.RequiredArgsConstructor;
@@ -41,8 +53,10 @@ import com.baomidou.mybatisplus.core.mapper.BaseMapper;
 import com.baomidou.mybatisplus.core.toolkit.support.SFunction;
 
 import java.time.LocalDateTime;
+import java.time.format.DateTimeFormatter;
 import java.util.ArrayList;
 import java.util.Collections;
+import java.util.HashMap;
 import java.util.HashSet;
 import java.util.List;
 import java.util.Map;
@@ -57,8 +71,6 @@ import java.util.stream.Collectors;
 @RequiredArgsConstructor
 public class SendService {
 
-    private static final int BINDING_SEND_PRIMARY = 1;
-    private static final int BINDING_SEND_BACKUP = 2;
     private static final int STATUS_ENABLED = 1;
     private static final int SEND_STATUS_PENDING = 0;
     private static final int SEND_STATUS_SENDING = 1;
@@ -68,33 +80,36 @@ public class SendService {
     private final SendRecordMapper sendRecordMapper;
     private final ConversationMapper conversationMapper;
     private final ChannelAccountMapper accountMapper;
-    private final ChannelAccountConversationMapper accountConversationMapper;
     private final ChannelIdentityMapper channelIdentityMapper;
     private final PersonMapper personMapper;
     private final TagMapper tagMapper;
     private final PersonTagBindingMapper personTagBindingMapper;
     private final ConversationTagBindingMapper conversationTagBindingMapper;
     private final ChannelAdapterRegistry adapterRegistry;
+    private final PolicyGroupMapper policyGroupMapper;
+    private final PolicyEngine policyEngine;
+    private final AccountSelector accountSelector;
+    private final SendMessageProducer sendMessageProducer;
 
     @Transactional
     public SendResponse send(String tenantCode, SendRequest request) {
         String taskId = generateTaskId();
         List<SendTarget> targets = resolveTargets(tenantCode, request);
-        List<SendRecord> records = createRecords(taskId, tenantCode, request, targets);
+        RetryConfig retryConfig = loadRetryConfig(tenantCode, request);
+        List<SendRecord> records = createRecords(taskId, tenantCode, request, targets, retryConfig);
 
-        int successCount = 0;
-        int failedCount = 0;
         for (SendRecord record : records) {
-            dispatchRecord(record);
-            if (record.getSendStatus() == SEND_STATUS_SUCCESS) {
-                successCount++;
-            } else if (record.getSendStatus() == SEND_STATUS_FAILED) {
-                failedCount++;
-            }
+            SendRecordMessage message = SendRecordMessage.builder()
+                    .recordId(record.getId())
+                    .taskId(record.getTaskId())
+                    .tenantCode(record.getTenantCode())
+                    .attempt(0)
+                    .retryPlan(retryConfig)
+                    .build();
+            sendMessageProducer.publishSendMessage(message);
         }
 
-        String status = failedCount == 0 ? "success" : (successCount == 0 ? "failed" : "partial");
-        return new SendResponse(taskId, records.size(), status);
+        return new SendResponse(taskId, records.size(), "accepted");
     }
 
     @Transactional
@@ -122,21 +137,148 @@ public class SendService {
         return records.stream().limit(50).map(this::toResponse).collect(Collectors.toList());
     }
 
+    public com.baomidou.mybatisplus.core.metadata.IPage<SendRecordResponse> queryRecords(String tenantCode, String taskId, LocalDateTime start,
+                                                  LocalDateTime end, String channelType, Integer status,
+                                                  long page, long size) {
+        LambdaQueryWrapper<SendRecord> wrapper = new LambdaQueryWrapper<SendRecord>()
+                .eq(SendRecord::getTenantCode, tenantCode)
+                .orderByDesc(SendRecord::getId);
+        if (StringUtils.hasText(taskId)) {
+            wrapper.eq(SendRecord::getTaskId, taskId);
+        }
+        if (start != null) {
+            wrapper.ge(SendRecord::getSendTime, start);
+        }
+        if (end != null) {
+            wrapper.le(SendRecord::getSendTime, end);
+        }
+        if (StringUtils.hasText(channelType)) {
+            wrapper.eq(SendRecord::getChannelType, channelType);
+        }
+        if (status != null) {
+            wrapper.eq(SendRecord::getSendStatus, status);
+        }
+        Page<SendRecord> pageParam = new Page<>(page, size);
+        sendRecordMapper.selectPage(pageParam, wrapper);
+        return pageParam.convert(this::toResponse);
+    }
+
+    public SendTaskStatusResponse getTaskStatus(String tenantCode, String taskId) {
+        List<SendRecord> records = sendRecordMapper.selectList(
+                new LambdaQueryWrapper<SendRecord>()
+                        .eq(SendRecord::getTenantCode, tenantCode)
+                        .eq(SendRecord::getTaskId, taskId));
+        SendTaskStatusResponse response = new SendTaskStatusResponse();
+        response.setTaskId(taskId);
+        response.setTotal(records.size());
+        for (SendRecord record : records) {
+            switch (record.getSendStatus()) {
+                case SEND_STATUS_PENDING:
+                    response.setPendingCount(response.getPendingCount() + 1);
+                    break;
+                case SEND_STATUS_SENDING:
+                    response.setSendingCount(response.getSendingCount() + 1);
+                    break;
+                case SEND_STATUS_SUCCESS:
+                    response.setSuccessCount(response.getSuccessCount() + 1);
+                    break;
+                case SEND_STATUS_FAILED:
+                    response.setFailedCount(response.getFailedCount() + 1);
+                    break;
+                default:
+                    break;
+            }
+        }
+        return response;
+    }
+
+    @Transactional
+    public int cancelTask(String tenantCode, String taskId) {
+        return sendRecordMapper.update(null,
+                new LambdaUpdateWrapper<SendRecord>()
+                        .eq(SendRecord::getTenantCode, tenantCode)
+                        .eq(SendRecord::getTaskId, taskId)
+                        .eq(SendRecord::getSendStatus, SEND_STATUS_PENDING)
+                        .set(SendRecord::getSendStatus, SEND_STATUS_FAILED)
+                        .set(SendRecord::getFinishTime, LocalDateTime.now())
+                        .set(SendRecord::getChannelResult,
+                                JsonUtils.toJson(Collections.singletonMap("canceled", true))));
+    }
+
+    public SendStatisticsResponse getStatistics(String tenantCode, LocalDateTime start, LocalDateTime end) {
+        LambdaQueryWrapper<SendRecord> wrapper = new LambdaQueryWrapper<SendRecord>()
+                .eq(SendRecord::getTenantCode, tenantCode);
+        if (start != null) {
+            wrapper.ge(SendRecord::getSendTime, start);
+        }
+        if (end != null) {
+            wrapper.le(SendRecord::getSendTime, end);
+        }
+        List<SendRecord> records = sendRecordMapper.selectList(wrapper);
+
+        SendStatisticsResponse response = new SendStatisticsResponse();
+        Map<String, ChannelStatistics> channelMap = new HashMap<>();
+        for (SendRecord record : records) {
+            response.setTotal(response.getTotal() + 1);
+            switch (record.getSendStatus()) {
+                case SEND_STATUS_PENDING:
+                    response.setPendingCount(response.getPendingCount() + 1);
+                    break;
+                case SEND_STATUS_SENDING:
+                    response.setSendingCount(response.getSendingCount() + 1);
+                    break;
+                case SEND_STATUS_SUCCESS:
+                    response.setSuccessCount(response.getSuccessCount() + 1);
+                    break;
+                case SEND_STATUS_FAILED:
+                    response.setFailedCount(response.getFailedCount() + 1);
+                    break;
+                default:
+                    break;
+            }
+            ChannelStatistics channelStats = channelMap.computeIfAbsent(record.getChannelType(),
+                    k -> {
+                        ChannelStatistics cs = new ChannelStatistics();
+                        cs.setChannelType(k);
+                        return cs;
+                    });
+            channelStats.setTotal(channelStats.getTotal() + 1);
+            switch (record.getSendStatus()) {
+                case SEND_STATUS_PENDING:
+                    channelStats.setPendingCount(channelStats.getPendingCount() + 1);
+                    break;
+                case SEND_STATUS_SENDING:
+                    channelStats.setSendingCount(channelStats.getSendingCount() + 1);
+                    break;
+                case SEND_STATUS_SUCCESS:
+                    channelStats.setSuccessCount(channelStats.getSuccessCount() + 1);
+                    break;
+                case SEND_STATUS_FAILED:
+                    channelStats.setFailedCount(channelStats.getFailedCount() + 1);
+                    break;
+                default:
+                    break;
+            }
+        }
+        response.setChannelStats(new ArrayList<>(channelMap.values()));
+        return response;
+    }
+
     private String generateTaskId() {
         return "SND" + UUID.randomUUID().toString().replace("-", "").toUpperCase();
     }
 
-    private List<SendTarget> resolveTargets(String tenantCode, SendRequest request) {
+    List<SendTarget> resolveTargets(String tenantCode, SendRequest request) {
         return resolveByType(tenantCode, request.getTargetType(), request.getTargetValue(), request.getChannelStrategy());
     }
 
-    private List<SendTarget> resolveTestTargets(String tenantCode, SendTestRequest request) {
+    List<SendTarget> resolveTestTargets(String tenantCode, SendTestRequest request) {
         return resolveByType(tenantCode, request.getTargetType(), request.getTargetValue(), request.getChannelStrategy());
     }
 
     @SuppressWarnings("unchecked")
-    private List<SendTarget> resolveByType(String tenantCode, String targetType, Map<String, Object> targetValue,
-                                           Map<String, Object> channelStrategy) {
+    List<SendTarget> resolveByType(String tenantCode, String targetType, Map<String, Object> targetValue,
+                                   Map<String, Object> channelStrategy) {
         String channelTypeStr = extractChannelType(channelStrategy);
         ChannelType channelType = parseChannelType(channelTypeStr);
 
@@ -183,7 +325,7 @@ public class SendService {
         if (conversation == null || !tenantCode.equals(conversation.getTenantCode())) {
             throw new BusinessException("会话不存在: " + conversationId);
         }
-        Long accountId = selectSendAccount(conversationId, channelType, channelStrategy);
+        Long accountId = selectSendAccount(tenantCode, conversationId, channelType, channelStrategy);
         if (accountId == null) {
             accountId = conversation.getOwnerAccountId();
         }
@@ -532,22 +674,8 @@ public class SendService {
         return value != null ? String.valueOf(value) : null;
     }
 
-    private Long selectSendAccount(Long conversationId, ChannelType channelType, Map<String, Object> channelStrategy) {
-        String strategy = extractStrategy(channelStrategy);
-        int bindingType = "backup".equals(strategy) ? BINDING_SEND_BACKUP : BINDING_SEND_PRIMARY;
-        ChannelAccountConversation binding = accountConversationMapper.selectOne(
-                new LambdaQueryWrapper<ChannelAccountConversation>()
-                        .eq(ChannelAccountConversation::getConversationId, conversationId)
-                        .eq(ChannelAccountConversation::getBindingType, bindingType)
-                        .eq(ChannelAccountConversation::getStatus, STATUS_ENABLED));
-        if (binding != null) {
-            ChannelAccount account = accountMapper.selectById(binding.getAccountId());
-            if (account != null && STATUS_ENABLED == account.getStatus()
-                    && channelType.name().equalsIgnoreCase(account.getChannelType())) {
-                return account.getId();
-            }
-        }
-        return null;
+    private Long selectSendAccount(String tenantCode, Long conversationId, ChannelType channelType, Map<String, Object> channelStrategy) {
+        return accountSelector.selectSendAccount(tenantCode, conversationId, channelType, extractStrategy(channelStrategy));
     }
 
     private Long selectDefaultAccount(String tenantCode, ChannelType channelType) {
@@ -589,9 +717,20 @@ public class SendService {
         }
     }
 
+    private RetryConfig loadRetryConfig(String tenantCode, SendRequest request) {
+        String channelTypeStr = extractChannelType(request.getChannelStrategy());
+        PolicyGroup policyGroup = loadPolicyGroup(tenantCode, channelTypeStr);
+        if (policyGroup == null) {
+            return null;
+        }
+        PolicyGroupConfig config = PolicyGroupConfig.parseJson(policyGroup.getPolicies());
+        return config.getRetryConfig().orElse(null);
+    }
+
     private List<SendRecord> createRecords(String taskId, String tenantCode, SendRequest request,
-                                           List<SendTarget> targets) {
+                                           List<SendTarget> targets, RetryConfig retryConfig) {
         List<SendRecord> records = new ArrayList<>();
+        int maxRetry = retryConfig != null ? retryConfig.getMaxRetry() : 0;
         for (SendTarget target : targets) {
             SendRecord record = new SendRecord();
             record.setTaskId(taskId);
@@ -607,6 +746,8 @@ public class SendService {
             record.setContentBody(JsonUtils.toJson(request.getContent()));
             record.setCallbackUrl(request.getCallbackUrl());
             record.setSendStatus(SEND_STATUS_PENDING);
+            record.setRetryCount(0);
+            record.setMaxRetry(maxRetry);
             record.setSendTime(LocalDateTime.now());
             sendRecordMapper.insert(record);
             records.add(record);
@@ -641,7 +782,9 @@ public class SendService {
         return records;
     }
 
-    private void dispatchRecord(SendRecord record) {
+    @Transactional
+    public void dispatchRecord(SendRecord record) {
+
         ChannelType channelType = parseChannelType(record.getChannelType());
         ChannelAdapter adapter = adapterRegistry.getAdapter(channelType);
         if (adapter == null) {
@@ -652,26 +795,200 @@ public class SendService {
             return;
         }
 
-        record.setSendStatus(SEND_STATUS_SENDING);
+        PolicyCheckResult policyResult = checkPolicy(record);
+        if (policyResult != null && !policyResult.isAllowed()) {
+            record.setSendStatus(SEND_STATUS_FAILED);
+            Map<String, Object> resultMap = new HashMap<>();
+            resultMap.put("policy_rejected", true);
+            resultMap.put("reason", policyResult.getReasonCode());
+            resultMap.put("message", policyResult.getReasonMessage());
+            record.setChannelResult(JsonUtils.toJson(resultMap));
+            record.setFinishTime(LocalDateTime.now());
+            sendRecordMapper.updateById(record);
+            return;
+        }
+
+        List<Long> candidateAccountIds = selectSendAccountCandidates(record, channelType);
+        if (candidateAccountIds.isEmpty()) {
+            record.setSendStatus(SEND_STATUS_FAILED);
+            record.setChannelResult(JsonUtils.toJson(Collections.singletonMap("error", "no_healthy_account")));
+            record.setFinishTime(LocalDateTime.now());
+            sendRecordMapper.updateById(record);
+            return;
+        }
+
+        List<Map<String, Object>> attempts = new ArrayList<>();
+        boolean success = false;
+        SendMessageResult lastResult = null;
+
+        for (Long accountId : candidateAccountIds) {
+            record.setAccountId(accountId);
+            record.setSendStatus(SEND_STATUS_SENDING);
+            sendRecordMapper.updateById(record);
+
+            ChannelAccount account = accountMapper.selectById(accountId);
+            SendMessageResult result = doSendAttempt(record, adapter, account);
+            lastResult = result;
+
+            attempts.add(buildAttemptResult(accountId, result));
+
+            if (result != null && result.isSuccess()) {
+                success = true;
+                break;
+            }
+
+            markAccountUnhealthy(account);
+        }
+
+        record.setFinishTime(LocalDateTime.now());
+        if (success) {
+            record.setSendStatus(SEND_STATUS_SUCCESS);
+            record.setChannelResult(JsonUtils.toJson(buildSuccessResult(lastResult, record.getAccountId(), attempts)));
+        } else {
+            record.setSendStatus(SEND_STATUS_FAILED);
+            record.setChannelResult(JsonUtils.toJson(buildAllAttemptsFailureResult(attempts, policyResult)));
+        }
         sendRecordMapper.updateById(record);
+    }
+
+    private List<Long> selectSendAccountCandidates(SendRecord record, ChannelType channelType) {
+        if (record.getConversationId() == null) {
+            return record.getAccountId() != null ? Collections.singletonList(record.getAccountId()) : Collections.emptyList();
+        }
+        String preferredStrategy = extractStrategy(parseChannelStrategy(record.getChannelStrategy()));
+        return accountSelector.selectSendAccounts(record.getTenantCode(), record.getConversationId(), channelType, preferredStrategy);
+    }
+
+    private Map<String, Object> parseChannelStrategy(String strategyJson) {
+        if (!StringUtils.hasText(strategyJson)) {
+            return null;
+        }
+        Map<?, ?> map = JsonUtils.fromJson(strategyJson, Map.class);
+        if (map == null) {
+            return null;
+        }
+        Map<String, Object> result = new HashMap<>();
+        for (Map.Entry<?, ?> entry : map.entrySet()) {
+            result.put(String.valueOf(entry.getKey()), entry.getValue());
+        }
+        return result;
+    }
+
+    private SendMessageResult doSendAttempt(SendRecord record, ChannelAdapter adapter, ChannelAccount account) {
+        SendMessageRequest messageRequest = new SendMessageRequest();
+        messageRequest.setConversationId(record.getConversationId() != null ? String.valueOf(record.getConversationId()) : null);
+        messageRequest.setReceiverId(record.getPersonId() != null ? String.valueOf(record.getPersonId()) : null);
+        messageRequest.setContentType(record.getContentType());
+        messageRequest.setContent(JsonUtils.fromJson(record.getContentBody(), Map.class));
+
+        Map<String, Object> extra = new HashMap<>();
+        if (account != null && StringUtils.hasText(account.getAccountId())) {
+            extra.put("account_id", account.getAccountId());
+        }
+        messageRequest.setExtra(extra);
 
         try {
-            SendMessageRequest messageRequest = new SendMessageRequest();
-            messageRequest.setConversationId(record.getConversationId() != null ? String.valueOf(record.getConversationId()) : null);
-            messageRequest.setReceiverId(record.getPersonId() != null ? String.valueOf(record.getPersonId()) : null);
-            messageRequest.setContentType(record.getContentType());
-            messageRequest.setContent(JsonUtils.fromJson(record.getContentBody(), Map.class));
-
-            SendMessageResult result = adapter.sendMessage(messageRequest);
-            record.setSendStatus(result.isSuccess() ? SEND_STATUS_SUCCESS : SEND_STATUS_FAILED);
-            record.setChannelResult(JsonUtils.toJson(result));
+            return adapter.sendMessage(messageRequest);
         } catch (Exception e) {
-            log.warn("发送消息失败: task_id={}, record_id={}", record.getTaskId(), record.getId(), e);
-            record.setSendStatus(SEND_STATUS_FAILED);
-            record.setChannelResult(JsonUtils.toJson(Collections.singletonMap("error", e.getMessage())));
+            log.warn("发送消息失败: task_id={}, record_id={}, account_id={}", record.getTaskId(), record.getId(),
+                    account != null ? account.getId() : null, e);
+            SendMessageResult result = new SendMessageResult();
+            result.setSuccess(false);
+            result.setMessage(e.getMessage());
+            return result;
+        }
+    }
+
+    private void markAccountUnhealthy(ChannelAccount account) {
+        if (account == null || account.getAccountType() == null || account.getAccountType() != 3) {
+            return;
+        }
+        account.setRiskLevel(2);
+        account.setOnlineStatus(0);
+        accountMapper.updateById(account);
+    }
+
+    private Map<String, Object> buildAttemptResult(Long accountId, SendMessageResult result) {
+        Map<String, Object> map = new HashMap<>();
+        map.put("account_id", accountId);
+        if (result != null) {
+            map.put("success", result.isSuccess());
+            map.put("message", result.getMessage());
+        } else {
+            map.put("success", false);
+            map.put("message", "unknown error");
+        }
+        return map;
+    }
+
+    private Map<String, Object> buildSuccessResult(SendMessageResult result, Long accountId, List<Map<String, Object>> attempts) {
+        Map<String, Object> map = new HashMap<>();
+        map.put("success", true);
+        map.put("account_id", accountId);
+        if (result != null) {
+            map.put("channel_message_id", result.getChannelMessageId());
+            map.put("message", result.getMessage());
+        }
+        map.put("attempts", attempts);
+        return map;
+    }
+
+    private Map<String, Object> buildAllAttemptsFailureResult(List<Map<String, Object>> attempts, PolicyCheckResult policyResult) {
+        Map<String, Object> map = new HashMap<>();
+        map.put("error", "all_accounts_failed");
+        map.put("attempts", attempts);
+        appendRetryPlan(map, policyResult);
+        return map;
+    }
+
+    private PolicyCheckResult checkPolicy(SendRecord record) {
+        PolicyGroup policyGroup = loadPolicyGroup(record.getTenantCode(), record.getChannelType());
+        if (policyGroup == null) {
+            return null;
+        }
+        PolicyGroupConfig config = PolicyGroupConfig.parseJson(policyGroup.getPolicies());
+        return policyEngine.check(record, config);
+    }
+
+    private PolicyGroup loadPolicyGroup(String tenantCode, String channelType) {
+        LambdaQueryWrapper<PolicyGroup> wrapper = new LambdaQueryWrapper<>();
+        wrapper.eq(PolicyGroup::getTenantCode, tenantCode)
+                .eq(PolicyGroup::getStatus, STATUS_ENABLED);
+        if (StringUtils.hasText(channelType)) {
+            wrapper.eq(PolicyGroup::getChannelType, channelType);
+        } else {
+            wrapper.and(w -> w.isNull(PolicyGroup::getChannelType).or().eq(PolicyGroup::getChannelType, ""));
+        }
+        wrapper.orderByDesc(PolicyGroup::getId).last("LIMIT 1");
+        PolicyGroup group = policyGroupMapper.selectOne(wrapper);
+        if (group != null) {
+            return group;
+        }
+
+        group = policyGroupMapper.selectOne(
+                new LambdaQueryWrapper<PolicyGroup>()
+                        .eq(PolicyGroup::getTenantCode, tenantCode)
+                        .eq(PolicyGroup::getStatus, STATUS_ENABLED)
+                        .and(w -> w.isNull(PolicyGroup::getChannelType).or().eq(PolicyGroup::getChannelType, ""))
+                        .orderByDesc(PolicyGroup::getId)
+                        .last("LIMIT 1"));
+        if (group != null) {
+            return group;
+        }
+
+        return policyGroupMapper.selectOne(
+                new LambdaQueryWrapper<PolicyGroup>()
+                        .eq(PolicyGroup::getGroupCode, "default")
+                        .eq(PolicyGroup::getStatus, STATUS_ENABLED)
+                        .orderByDesc(PolicyGroup::getId)
+                        .last("LIMIT 1"));
+    }
+
+    private void appendRetryPlan(Map<String, Object> map, PolicyCheckResult policyResult) {
+        if (policyResult != null && policyResult.getRetryConfig() != null) {
+            map.put("retry_plan", policyResult.getRetryConfig());
+            log.info("发送失败，按策略计划重试: {}", policyResult.getRetryConfig().getIntervals());
         }
-        record.setFinishTime(LocalDateTime.now());
-        sendRecordMapper.updateById(record);
     }
 
     private SendRecordResponse toResponse(SendRecord record) {
@@ -687,7 +1004,10 @@ public class SendService {
         response.setContentType(record.getContentType());
         response.setSendStatus(record.getSendStatus());
         response.setChannelResult(record.getChannelResult());
+        response.setContentBody(record.getContentBody());
+        response.setCallbackUrl(record.getCallbackUrl());
         response.setSendTime(record.getSendTime());
+        response.setFinishTime(record.getFinishTime());
         response.setCreateTime(record.getCreateTime());
         return response;
     }
@@ -755,61 +1075,4 @@ public class SendService {
         }
     }
 
-    private static class SendTarget {
-
-        private Long conversationId;
-        private Long personId;
-        private Long accountId;
-        private ChannelType channelType;
-        private String channelConversationId;
-        private String receiverId;
-
-        public Long getConversationId() {
-            return conversationId;
-        }
-
-        public void setConversationId(Long conversationId) {
-            this.conversationId = conversationId;
-        }
-
-        public Long getPersonId() {
-            return personId;
-        }
-
-        public void setPersonId(Long personId) {
-            this.personId = personId;
-        }
-
-        public Long getAccountId() {
-            return accountId;
-        }
-
-        public void setAccountId(Long accountId) {
-            this.accountId = accountId;
-        }
-
-        public ChannelType getChannelType() {
-            return channelType;
-        }
-
-        public void setChannelType(ChannelType channelType) {
-            this.channelType = channelType;
-        }
-
-        public String getChannelConversationId() {
-            return channelConversationId;
-        }
-
-        public void setChannelConversationId(String channelConversationId) {
-            this.channelConversationId = channelConversationId;
-        }
-
-        public String getReceiverId() {
-            return receiverId;
-        }
-
-        public void setReceiverId(String receiverId) {
-            this.receiverId = receiverId;
-        }
-    }
 }
diff --git a/backend/mci-server/src/main/java/com/sino/mci/send/service/SendTarget.java b/backend/mci-server/src/main/java/com/sino/mci/send/service/SendTarget.java
new file mode 100644
index 0000000..879b92b
--- /dev/null
+++ b/backend/mci-server/src/main/java/com/sino/mci/send/service/SendTarget.java
@@ -0,0 +1,15 @@
+package com.sino.mci.send.service;
+
+import com.sino.mci.channel.common.model.ChannelType;
+import lombok.Data;
+
+@Data
+class SendTarget {
+
+    private Long conversationId;
+    private Long personId;
+    private Long accountId;
+    private ChannelType channelType;
+    private String channelConversationId;
+    private String receiverId;
+}
diff --git a/backend/mci-server/src/main/resources/application-dev.yml b/backend/mci-server/src/main/resources/application-dev.yml
index 68fc8f0..0d24ad6 100644
--- a/backend/mci-server/src/main/resources/application-dev.yml
+++ b/backend/mci-server/src/main/resources/application-dev.yml
@@ -14,6 +14,17 @@ spring:
     port: 5672
     username: guest
     password: guest
+  ai:
+    openai:
+      api-key: ${OPENAI_API_KEY:}
+      base-url: ${OPENAI_BASE_URL:https://api.openai.com}
+      chat:
+        options:
+          model: gpt-4o-mini
+  autoconfigure:
+    exclude:
+      - org.springframework.ai.autoconfigure.openai.OpenAiAutoConfiguration
+      - org.springframework.ai.autoconfigure.chat.client.ChatClientAutoConfiguration
   flyway:
     enabled: true
     locations: classpath:db/migration
diff --git a/backend/mci-server/src/main/resources/db/migration/V18__add_send_record_retry_fields.sql b/backend/mci-server/src/main/resources/db/migration/V18__add_send_record_retry_fields.sql
new file mode 100644
index 0000000..0cacacd
--- /dev/null
+++ b/backend/mci-server/src/main/resources/db/migration/V18__add_send_record_retry_fields.sql
@@ -0,0 +1,5 @@
+-- Phase 3.4: 出站发送记录增加重试相关字段
+ALTER TABLE mci_send_record
+    ADD COLUMN retry_count INT NOT NULL DEFAULT 0 COMMENT '已重试次数' AFTER send_status,
+    ADD COLUMN max_retry INT NOT NULL DEFAULT 0 COMMENT '最大重试次数' AFTER retry_count,
+    ADD COLUMN next_retry_time DATETIME NULL COMMENT '下次重试时间' AFTER max_retry;
diff --git a/backend/mci-server/src/main/resources/db/migration/V19__add_tenant_ext_info.sql b/backend/mci-server/src/main/resources/db/migration/V19__add_tenant_ext_info.sql
new file mode 100644
index 0000000..47f4b36
--- /dev/null
+++ b/backend/mci-server/src/main/resources/db/migration/V19__add_tenant_ext_info.sql
@@ -0,0 +1,2 @@
+ALTER TABLE mci_tenant
+    ADD COLUMN ext_info JSON NULL COMMENT '扩展信息 JSON';
diff --git a/backend/mci-server/src/test/java/com/sino/mci/admin/controller/TenantWebhookControllerTest.java b/backend/mci-server/src/test/java/com/sino/mci/admin/controller/TenantWebhookControllerTest.java
new file mode 100644
index 0000000..c5df7bb
--- /dev/null
+++ b/backend/mci-server/src/test/java/com/sino/mci/admin/controller/TenantWebhookControllerTest.java
@@ -0,0 +1,148 @@
+package com.sino.mci.admin.controller;
+
+import com.sun.net.httpserver.HttpServer;
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.webmvc.test.autoconfigure.AutoConfigureMockMvc;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.http.MediaType;
+import org.springframework.test.web.servlet.MockMvc;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.io.IOException;
+import java.net.InetSocketAddress;
+import java.util.UUID;
+
+import static com.sino.mci.test.AuthTestHelper.createTenantAndLogin;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.get;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.post;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+@SpringBootTest
+@AutoConfigureMockMvc
+@Transactional
+public class TenantWebhookControllerTest {
+
+    @Autowired
+    private MockMvc mockMvc;
+
+    private HttpServer localServer;
+
+    @AfterEach
+    void stopLocalServer() {
+        if (localServer != null) {
+            localServer.stop(0);
+            localServer = null;
+        }
+    }
+
+    @Test
+    void shouldReturnCurrentTenantWebhookConfig() throws Exception {
+        String tenantCode = "wh-" + UUID.randomUUID().toString().substring(0, 8);
+        String authToken = createTenantAndLogin(mockMvc, tenantCode, "Webhook 测试");
+
+        mockMvc.perform(get("/msg-platform/api/v1/account/tenant/webhook")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.inbound_webhook_url").isEmpty())
+                .andExpect(jsonPath("$.data.auth_config").isMap());
+    }
+
+    @Test
+    void shouldUpdateWebhookConfig() throws Exception {
+        String tenantCode = "wh-" + UUID.randomUUID().toString().substring(0, 8);
+        String authToken = createTenantAndLogin(mockMvc, tenantCode, "Webhook 测试");
+
+        String payload = "{\"inbound_webhook_url\":\"https://example.com/webhook\",\"auth_config\":{\"sign_algorithm\":\"hmac-sha256\",\"webhook_secret\":\"secret-123\"}}";
+
+        mockMvc.perform(post("/msg-platform/api/v1/account/tenant/webhook")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(payload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.inbound_webhook_url").value("https://example.com/webhook"))
+                .andExpect(jsonPath("$.data.auth_config.sign_algorithm").value("hmac-sha256"))
+                .andExpect(jsonPath("$.data.auth_config.webhook_secret").value("secret-123"));
+
+        mockMvc.perform(get("/msg-platform/api/v1/account/tenant/webhook")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.inbound_webhook_url").value("https://example.com/webhook"))
+                .andExpect(jsonPath("$.data.auth_config.webhook_secret").value("secret-123"));
+    }
+
+    @Test
+    void shouldReturnSuccessWhenTestWebhookReceives2xx() throws Exception {
+        String tenantCode = "wh-" + UUID.randomUUID().toString().substring(0, 8);
+        String authToken = createTenantAndLogin(mockMvc, tenantCode, "Webhook 测试");
+
+        updateWebhookConfig(authToken, tenantCode);
+
+        int port = startLocalHttpServer(200, "ok");
+
+        mockMvc.perform(post("/msg-platform/api/v1/account/tenant/webhook/test")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(String.format("{\"url\":\"http://localhost:%d/webhook\"}", port)))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.success").value(true))
+                .andExpect(jsonPath("$.data.message").value("测试推送成功，HTTP 200 OK"));
+    }
+
+    @Test
+    void shouldReturnFailureWhenTestWebhookThrows() throws Exception {
+        String tenantCode = "wh-" + UUID.randomUUID().toString().substring(0, 8);
+        String authToken = createTenantAndLogin(mockMvc, tenantCode, "Webhook 测试");
+
+        updateWebhookConfig(authToken, tenantCode);
+
+        mockMvc.perform(post("/msg-platform/api/v1/account/tenant/webhook/test")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content("{\"url\":\"http://localhost:1/webhook\"}"))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.success").value(false))
+                .andExpect(jsonPath("$.data.message").value(org.hamcrest.Matchers.containsString("Connection refused")));
+    }
+
+    private void updateWebhookConfig(String authToken, String tenantCode) throws Exception {
+        String payload = "{\"inbound_webhook_url\":\"https://example.com/webhook\",\"auth_config\":{\"sign_algorithm\":\"hmac-sha256\",\"webhook_secret\":\"secret-123\"}}";
+        mockMvc.perform(post("/msg-platform/api/v1/account/tenant/webhook")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(payload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0));
+    }
+
+    private int startLocalHttpServer(int statusCode, String responseBody) throws IOException {
+        localServer = HttpServer.create(new InetSocketAddress(0), 0);
+        localServer.createContext("/webhook", exchange -> {
+            byte[] bytes = responseBody.getBytes();
+            exchange.sendResponseHeaders(statusCode, bytes.length);
+            exchange.getResponseBody().write(bytes);
+            exchange.close();
+        });
+        localServer.start();
+        return localServer.getAddress().getPort();
+    }
+}
diff --git a/backend/mci-server/src/test/java/com/sino/mci/channel/service/AccountSelectorTest.java b/backend/mci-server/src/test/java/com/sino/mci/channel/service/AccountSelectorTest.java
new file mode 100644
index 0000000..87aa18b
--- /dev/null
+++ b/backend/mci-server/src/test/java/com/sino/mci/channel/service/AccountSelectorTest.java
@@ -0,0 +1,123 @@
+package com.sino.mci.channel.service;
+
+import com.sino.mci.channel.common.model.ChannelType;
+import com.sino.mci.channel.entity.ChannelAccount;
+import com.sino.mci.channel.entity.ChannelAccountConversation;
+import com.sino.mci.channel.repository.ChannelAccountConversationMapper;
+import com.sino.mci.channel.repository.ChannelAccountMapper;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+
+import java.time.LocalDateTime;
+import java.util.Arrays;
+import java.util.Collections;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.when;
+
+@ExtendWith(MockitoExtension.class)
+class AccountSelectorTest {
+
+    @Mock
+    private ChannelAccountConversationMapper accountConversationMapper;
+
+    @Mock
+    private ChannelAccountMapper accountMapper;
+
+    private AccountSelector accountSelector;
+
+    @BeforeEach
+    void setUp() {
+        accountSelector = new AccountSelector(accountConversationMapper, accountMapper);
+    }
+
+    @Test
+    void primarySelectedWhenHealthy() {
+        ChannelAccountConversation primary = createBinding(1L, 1, 1);
+        when(accountConversationMapper.selectList(any())).thenReturn(Collections.singletonList(primary));
+        when(accountMapper.selectById(1L)).thenReturn(createHealthyAccount(1L));
+
+        Long accountId = accountSelector.selectSendAccount("tenant", 100L, ChannelType.WECHAT_PERSONAL, "primary");
+
+        assertEquals(1L, accountId);
+    }
+
+    @Test
+    void backupSelectedWhenPrimaryUnhealthy() {
+        ChannelAccountConversation primary = createBinding(1L, 1, 1);
+        ChannelAccountConversation backup = createBinding(2L, 2, 1);
+        when(accountConversationMapper.selectList(any())).thenReturn(Arrays.asList(primary, backup));
+        when(accountMapper.selectById(1L)).thenReturn(createOfflineAccount(1L));
+        when(accountMapper.selectById(2L)).thenReturn(createHealthyAccount(2L));
+
+        Long accountId = accountSelector.selectSendAccount("tenant", 100L, ChannelType.WECHAT_PERSONAL, "primary");
+
+        assertEquals(2L, accountId);
+    }
+
+    @Test
+    void returnsNullWhenNoHealthyAccount() {
+        ChannelAccountConversation primary = createBinding(1L, 1, 1);
+        ChannelAccountConversation backup = createBinding(2L, 2, 1);
+        when(accountConversationMapper.selectList(any())).thenReturn(Arrays.asList(primary, backup));
+        when(accountMapper.selectById(1L)).thenReturn(createOfflineAccount(1L));
+        when(accountMapper.selectById(2L)).thenReturn(createHighRiskAccount(2L));
+
+        Long accountId = accountSelector.selectSendAccount("tenant", 100L, ChannelType.WECHAT_PERSONAL, "primary");
+
+        assertNull(accountId);
+    }
+
+    @Test
+    void preferredBackupStrategySelectsBackupFirst() {
+        ChannelAccountConversation primary = createBinding(1L, 1, 1);
+        ChannelAccountConversation backup = createBinding(2L, 2, 1);
+        when(accountConversationMapper.selectList(any())).thenReturn(Arrays.asList(primary, backup));
+        when(accountMapper.selectById(1L)).thenReturn(createHealthyAccount(1L));
+        when(accountMapper.selectById(2L)).thenReturn(createHealthyAccount(2L));
+
+        Long accountId = accountSelector.selectSendAccount("tenant", 100L, ChannelType.WECHAT_PERSONAL, "backup");
+
+        assertEquals(2L, accountId);
+    }
+
+    private ChannelAccountConversation createBinding(Long accountId, int bindingType, int sortOrder) {
+        ChannelAccountConversation binding = new ChannelAccountConversation();
+        binding.setAccountId(accountId);
+        binding.setBindingType(bindingType);
+        binding.setSortOrder(sortOrder);
+        binding.setStatus(1);
+        return binding;
+    }
+
+    private ChannelAccount createHealthyAccount(Long id) {
+        ChannelAccount account = new ChannelAccount();
+        account.setId(id);
+        account.setTenantCode("tenant");
+        account.setAccountType(3);
+        account.setChannelType("wechat_personal");
+        account.setAccountId("wxid-" + id);
+        account.setStatus(1);
+        account.setOnlineStatus(1);
+        account.setRiskLevel(1);
+        account.setLastHeartbeat(LocalDateTime.now());
+        return account;
+    }
+
+    private ChannelAccount createOfflineAccount(Long id) {
+        ChannelAccount account = createHealthyAccount(id);
+        account.setOnlineStatus(0);
+        return account;
+    }
+
+    private ChannelAccount createHighRiskAccount(Long id) {
+        ChannelAccount account = createHealthyAccount(id);
+        account.setRiskLevel(3);
+        return account;
+    }
+}
diff --git a/backend/mci-server/src/test/java/com/sino/mci/flow/controller/IvrFlowControllerTest.java b/backend/mci-server/src/test/java/com/sino/mci/flow/controller/IvrFlowControllerTest.java
new file mode 100644
index 0000000..84eff33
--- /dev/null
+++ b/backend/mci-server/src/test/java/com/sino/mci/flow/controller/IvrFlowControllerTest.java
@@ -0,0 +1,83 @@
+package com.sino.mci.flow.controller;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.webmvc.test.autoconfigure.AutoConfigureMockMvc;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.http.MediaType;
+import org.springframework.test.web.servlet.MockMvc;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.util.UUID;
+
+import static com.sino.mci.test.AuthTestHelper.createTenantAndLogin;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.delete;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.get;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.post;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+@SpringBootTest
+@AutoConfigureMockMvc
+@Transactional
+public class IvrFlowControllerTest {
+
+    @Autowired
+    private MockMvc mockMvc;
+
+    @Test
+    void shouldManageIvrFlowLifecycle() throws Exception {
+        String tenantCode = "ivr-" + UUID.randomUUID().toString().substring(0, 8);
+        String authToken = createTenantAndLogin(mockMvc, tenantCode, "IVR 测试租户");
+
+        String flowPayload = "{\"flowCode\":\"ivr_default\",\"flowName\":\"默认 IVR 流程\",\"flowType\":\"ivr\",\"definitionJson\":{\"nodes\":[{\"id\":\"start\",\"type\":\"start\",\"config\":{\"triggerType\":\"inbound_call\",\"phoneNumber\":\"10086\"}},{\"id\":\"menu\",\"type\":\"menu\",\"config\":{\"prompt\":\"按 1 转人工\",\"timeout\":10,\"options\":[{\"key\":\"1\",\"label\":\"人工\"}]}}],\"edges\":[]}}";
+
+        mockMvc.perform(post("/msg-platform/api/v1/flow")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(flowPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.flowType").value(2));
+
+        mockMvc.perform(get("/msg-platform/api/v1/flow/list")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.length()").value(1))
+                .andExpect(jsonPath("$.data[0].flowCode").value("ivr_default"));
+
+        mockMvc.perform(get("/msg-platform/api/v1/flow/ivr_default")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.flowCode").value("ivr_default"));
+
+        mockMvc.perform(post("/msg-platform/api/v1/flow/ivr_default/publish")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0));
+
+        mockMvc.perform(get("/msg-platform/api/v1/flow/ivr_default")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.data.status").value(1));
+
+        mockMvc.perform(delete("/msg-platform/api/v1/flow/ivr_default")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0));
+    }
+}
diff --git a/backend/mci-server/src/test/java/com/sino/mci/inbound/engine/FlowEngineTest.java b/backend/mci-server/src/test/java/com/sino/mci/inbound/engine/FlowEngineTest.java
new file mode 100644
index 0000000..fb4dd8f
--- /dev/null
+++ b/backend/mci-server/src/test/java/com/sino/mci/inbound/engine/FlowEngineTest.java
@@ -0,0 +1,165 @@
+package com.sino.mci.inbound.engine;
+
+import com.baomidou.mybatisplus.core.conditions.query.LambdaQueryWrapper;
+import com.sino.mci.flow.entity.FlowDefinition;
+import com.sino.mci.flow.repository.FlowDefinitionMapper;
+import com.sino.mci.inbound.entity.MessageEvent;
+import com.sino.mci.inbound.intent.IntentResult;
+import com.sino.mci.inbound.repository.FlowExecutionTraceMapper;
+import com.sino.mci.inbound.repository.MessageEventMapper;
+import com.sino.mci.send.dto.SendRequest;
+import com.sino.mci.send.dto.SendResponse;
+import com.sino.mci.send.service.SendService;
+import com.sino.mci.shared.util.JsonUtils;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.ArgumentCaptor;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+
+import java.util.Collections;
+import java.util.List;
+import java.util.Map;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+@ExtendWith(MockitoExtension.class)
+class FlowEngineTest {
+
+    @Mock
+    private FlowDefinitionMapper flowDefinitionMapper;
+    @Mock
+    private MessageEventMapper messageEventMapper;
+    @Mock
+    private IntentRecognitionService intentRecognitionService;
+    @Mock
+    private WebhookPushService webhookPushService;
+    @Mock
+    private FlowExecutionTraceMapper flowExecutionTraceMapper;
+    @Mock
+    private SendService sendService;
+
+    @InjectMocks
+    private FlowEngine flowEngine;
+
+    @Test
+    void shouldExecuteWebhookPathWhenConditionIsTrue() {
+        MessageEvent event = createEvent();
+        FlowDefinition flow = createFlowDefinition();
+        IntentResult intentResult =
+                new IntentResult("create_order", 0.95, Map.of("customer_name", "张三"), List.of("phone"), true);
+
+        when(messageEventMapper.selectById(event.getId())).thenReturn(event);
+        when(flowDefinitionMapper.selectList(any(LambdaQueryWrapper.class))).thenReturn(List.of(flow));
+        when(intentRecognitionService.recognize(event)).thenReturn(intentResult);
+
+        flowEngine.executeInboundFlow(event.getId());
+
+        verify(webhookPushService, times(1))
+                .pushToBusiness(eq("rescue"), eq(event), eq(intentResult), eq("https://order.sino.com/webhook"));
+        verify(sendService, never()).send(any(), any(SendRequest.class));
+        assertEventMarkedProcessed(event);
+    }
+
+    @Test
+    void shouldExecuteReplyPathWhenConditionIsFalse() {
+        MessageEvent event = createEvent();
+        FlowDefinition flow = createFlowDefinition();
+        IntentResult intentResult =
+                new IntentResult("other", 0.6, Map.of(), List.of(), false);
+
+        when(messageEventMapper.selectById(event.getId())).thenReturn(event);
+        when(flowDefinitionMapper.selectList(any(LambdaQueryWrapper.class))).thenReturn(List.of(flow));
+        when(intentRecognitionService.recognize(event)).thenReturn(intentResult);
+        when(sendService.send(any(), any(SendRequest.class)))
+                .thenReturn(new SendResponse("SND001", 1, "accepted"));
+
+        flowEngine.executeInboundFlow(event.getId());
+
+        verify(webhookPushService, never()).pushToBusiness(any(), any(), any(), any());
+
+        ArgumentCaptor<SendRequest> requestCaptor = ArgumentCaptor.forClass(SendRequest.class);
+        verify(sendService, times(1)).send(eq("rescue"), requestCaptor.capture());
+        SendRequest request = requestCaptor.getValue();
+        assertThat(request.getTargetType()).isEqualTo("conversation");
+        assertThat(request.getTargetValue()).containsEntry("conversation_id", 100L);
+        assertThat(request.getContentType()).isEqualTo("text");
+        assertThat(request.getContent()).containsEntry("type", "text")
+                .containsEntry("body", "已收到，正在处理");
+        assertThat(request.getChannelStrategy()).containsEntry("channel_type", "wecom");
+
+        assertEventMarkedProcessed(event);
+    }
+
+    @Test
+    void shouldMarkEventProcessedWhenNoPublishedFlow() {
+        MessageEvent event = createEvent();
+
+        when(messageEventMapper.selectById(event.getId())).thenReturn(event);
+        when(flowDefinitionMapper.selectList(any(LambdaQueryWrapper.class))).thenReturn(Collections.emptyList());
+
+        flowEngine.executeInboundFlow(event.getId());
+
+        verify(webhookPushService, never()).pushToBusiness(any(), any(), any(), any());
+        verify(sendService, never()).send(any(), any(SendRequest.class));
+        assertEventMarkedProcessed(event);
+    }
+
+    private MessageEvent createEvent() {
+        MessageEvent event = new MessageEvent();
+        event.setId(1L);
+        event.setEventId("evt_20260707_001");
+        event.setTenantCode("rescue");
+        event.setChannelType("wecom");
+        event.setConversationId(100L);
+        event.setPersonId(200L);
+        event.setContent("{\"type\":\"text\",\"body\":\"我要下单\"}");
+        event.setBusinessContext("{}");
+        event.setIsProcessed(0);
+        return event;
+    }
+
+    private FlowDefinition createFlowDefinition() {
+        FlowDefinition flow = new FlowDefinition();
+        flow.setId(10L);
+        flow.setTenantCode("rescue");
+        flow.setFlowCode("inbound_default");
+        flow.setFlowName("默认入站流程");
+        flow.setFlowType(1);
+        flow.setStatus(1);
+
+        Map<String, Object> definition = Map.of(
+                "nodes", List.of(
+                        Map.of("id", "n1", "type", "receive", "config", Map.of("channel_type", "wecom")),
+                        Map.of("id", "n2", "type", "intent", "config", Map.of("mode", "llm")),
+                        Map.of("id", "n3", "type", "condition",
+                                "config", Map.of("expression", "intent.intent == 'create_order'")),
+                        Map.of("id", "n4", "type", "webhook",
+                                "config", Map.of("url", "https://order.sino.com/webhook")),
+                        Map.of("id", "n5", "type", "reply",
+                                "config", Map.of("content", Map.of("type", "text", "body", "已收到，正在处理")))
+                ),
+                "edges", List.of(
+                        Map.of("source", "n1", "target", "n2"),
+                        Map.of("source", "n2", "target", "n3"),
+                        Map.of("source", "n3", "target", "n4", "label", "true"),
+                        Map.of("source", "n3", "target", "n5", "label", "false")
+                )
+        );
+        flow.setDefinitionJson(JsonUtils.toJson(definition));
+        return flow;
+    }
+
+    private void assertEventMarkedProcessed(MessageEvent event) {
+        ArgumentCaptor<MessageEvent> captor = ArgumentCaptor.forClass(MessageEvent.class);
+        verify(messageEventMapper, times(1)).updateById(captor.capture());
+        assertThat(captor.getValue().getIsProcessed()).isEqualTo(1);
+    }
+}
diff --git a/backend/mci-server/src/test/java/com/sino/mci/inbound/engine/InboundEndToEndTest.java b/backend/mci-server/src/test/java/com/sino/mci/inbound/engine/InboundEndToEndTest.java
new file mode 100644
index 0000000..7cd1752
--- /dev/null
+++ b/backend/mci-server/src/test/java/com/sino/mci/inbound/engine/InboundEndToEndTest.java
@@ -0,0 +1,142 @@
+package com.sino.mci.inbound.engine;
+
+import com.jayway.jsonpath.JsonPath;
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.context.TestConfiguration;
+import org.springframework.boot.webmvc.test.autoconfigure.AutoConfigureMockMvc;
+import org.springframework.context.annotation.Bean;
+import org.springframework.http.HttpEntity;
+import org.springframework.http.HttpMethod;
+import org.springframework.http.MediaType;
+import org.springframework.http.ResponseEntity;
+import org.springframework.test.context.TestPropertySource;
+import org.springframework.test.web.servlet.MockMvc;
+import org.springframework.transaction.annotation.Transactional;
+import org.springframework.web.client.RestTemplate;
+
+import java.util.UUID;
+
+import static com.sino.mci.test.AuthTestHelper.createTenantAndLogin;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.atLeastOnce;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.post;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+/**
+ * 入站消息端到端测试。
+ *
+ * <p>覆盖完整业务链路：创建租户并配置入站 webhook → 创建并发布入站流程 →
+ * 接收消息事件 → 上下文解析 → 意图识别 → webhook 推送（RestTemplate 被 mock）。</p>
+ */
+@SpringBootTest
+@AutoConfigureMockMvc
+@TestPropertySource(properties = {
+        "spring.rabbitmq.listener.simple.auto-startup=false",
+        "spring.main.allow-bean-definition-overriding=true"
+})
+@Transactional
+class InboundEndToEndTest {
+
+    @Autowired
+    private MockMvc mockMvc;
+
+    @Autowired
+    private RestTemplate restTemplate;
+
+    @Test
+    void shouldPushInboundMessageToBusinessWebhook() throws Exception {
+        String tenantCode = "inbound-e2e-" + UUID.randomUUID().toString().substring(0, 8);
+        String authToken = createTenantAndLogin(mockMvc, tenantCode, "入站端到端测试");
+        String webhookUrl = "https://example.com/inbound-webhook";
+
+        // 1. 配置租户入站 webhook 与签名密钥
+        String webhookConfig = String.format(
+                "{\"inbound_webhook_url\":\"%s\",\"auth_config\":{\"sign_algorithm\":\"hmac-sha256\",\"webhook_secret\":\"e2e-secret\"}}",
+                webhookUrl);
+        mockMvc.perform(post("/msg-platform/api/v1/account/tenant/webhook")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(webhookConfig))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0));
+
+        // 2. 创建入站流程：receive -> intent -> webhook
+        String flowPayload = """
+                {
+                  "flowCode": "inbound_default",
+                  "flowName": "E2E Inbound",
+                  "flowType": "inbound",
+                  "definitionJson": {
+                    "nodes": [
+                      {"id": "n1", "type": "receive", "config": {"channel_type": "wecom"}},
+                      {"id": "n2", "type": "intent"},
+                      {"id": "n3", "type": "webhook"}
+                    ],
+                    "edges": [
+                      {"source": "n1", "target": "n2"},
+                      {"source": "n2", "target": "n3"}
+                    ]
+                  }
+                }
+                """;
+        mockMvc.perform(post("/msg-platform/api/v1/inbound/flow")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(flowPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0));
+
+        // 3. 发布流程
+        mockMvc.perform(post("/msg-platform/api/v1/inbound/flow/inbound_default/publish")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0));
+
+        when(restTemplate.exchange(anyString(), eq(HttpMethod.POST), any(HttpEntity.class), eq(String.class)))
+                .thenReturn(ResponseEntity.ok("ok"));
+
+        // 4. 接收入站消息
+        String eventId = "evt-" + UUID.randomUUID().toString().substring(0, 8);
+        String messagePayload = String.format(
+                "{\"eventId\":\"%s\",\"channelType\":\"wecom\",\"eventType\":\"message\",\"messageSource\":\"realtime\",\"conversationId\":1,\"personId\":1,\"content\":{\"type\":\"text\",\"body\":\"我要救援，客户张三，地址北京\"}}",
+                eventId);
+        String receiveResponse = mockMvc.perform(post("/msg-platform/api/v1/inbound/receive")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(messagePayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.eventId").value(eventId))
+                .andReturn().getResponse().getContentAsString();
+        Integer isProcessed = JsonPath.read(receiveResponse, "$.data.isProcessed");
+        org.junit.jupiter.api.Assertions.assertEquals(1, isProcessed);
+
+        // 5. 验证 webhook 被推送到业务系统
+        verify(restTemplate, atLeastOnce()).exchange(eq(webhookUrl), eq(HttpMethod.POST), any(HttpEntity.class), eq(String.class));
+    }
+
+    @TestConfiguration
+    static class MockConfig {
+
+        @Bean
+        public RestTemplate restTemplate() {
+            return mock(RestTemplate.class);
+        }
+    }
+}
diff --git a/backend/mci-server/src/test/java/com/sino/mci/inbound/intent/IntentRecognitionServiceTest.java b/backend/mci-server/src/test/java/com/sino/mci/inbound/intent/IntentRecognitionServiceTest.java
new file mode 100644
index 0000000..c2a1572
--- /dev/null
+++ b/backend/mci-server/src/test/java/com/sino/mci/inbound/intent/IntentRecognitionServiceTest.java
@@ -0,0 +1,63 @@
+package com.sino.mci.inbound.intent;
+
+import com.sino.mci.admin.repository.TenantMapper;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+
+import java.util.Map;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.when;
+
+@ExtendWith(MockitoExtension.class)
+class IntentRecognitionServiceTest {
+
+    @Mock
+    private TenantMapper tenantMapper;
+
+    @InjectMocks
+    private IntentRecognitionService intentRecognitionService;
+
+    @Test
+    void shouldRecognizeCreateOrderByRule() {
+        when(tenantMapper.selectOne(any())).thenReturn(null);
+
+        IntentResult result = intentRecognitionService.recognize("test", "我要下单", Map.of());
+
+        assertThat(result.getIntent()).isEqualTo("create_order");
+        assertThat(result.getConfidence()).isEqualTo(1.0);
+    }
+
+    @Test
+    void shouldExtractCustomerNameSlot() {
+        when(tenantMapper.selectOne(any())).thenReturn(null);
+
+        IntentResult result = intentRecognitionService.recognize(
+                "test", "我要下单，客户张三，地址北京", Map.of());
+
+        assertThat(result.getIntent()).isEqualTo("create_order");
+        assertThat(result.getSlots())
+                .containsEntry("customer_name", "张三")
+                .containsEntry("address", "北京");
+        assertThat(result.getMissingSlots()).contains("phone");
+        assertThat(result.isRequiresConfirmation()).isTrue();
+    }
+
+    @Test
+    void shouldReturnUnknownWhenNoRuleMatchesAndLlmNotConfigured() {
+        when(tenantMapper.selectOne(any())).thenReturn(null);
+
+        IntentResult result = intentRecognitionService.recognize(
+                "test", "今天天气不错", Map.of());
+
+        assertThat(result.getIntent()).isEqualTo("unknown");
+        assertThat(result.getConfidence()).isEqualTo(0.0);
+        assertThat(result.getSlots()).isEmpty();
+        assertThat(result.getMissingSlots()).isEmpty();
+        assertThat(result.isRequiresConfirmation()).isFalse();
+    }
+}
diff --git a/backend/mci-server/src/test/java/com/sino/mci/inbound/service/InboundContextServiceTest.java b/backend/mci-server/src/test/java/com/sino/mci/inbound/service/InboundContextServiceTest.java
new file mode 100644
index 0000000..56b1841
--- /dev/null
+++ b/backend/mci-server/src/test/java/com/sino/mci/inbound/service/InboundContextServiceTest.java
@@ -0,0 +1,161 @@
+package com.sino.mci.inbound.service;
+
+import com.sino.mci.channel.entity.Conversation;
+import com.sino.mci.channel.entity.ConversationTagBinding;
+import com.sino.mci.channel.repository.ConversationMapper;
+import com.sino.mci.channel.repository.ConversationTagBindingMapper;
+import com.sino.mci.crm.entity.Person;
+import com.sino.mci.crm.entity.PersonTagBinding;
+import com.sino.mci.crm.entity.Tag;
+import com.sino.mci.crm.repository.PersonMapper;
+import com.sino.mci.crm.repository.PersonTagBindingMapper;
+import com.sino.mci.crm.repository.TagMapper;
+import com.sino.mci.inbound.entity.MessageEvent;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+
+import java.util.List;
+import java.util.Map;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.when;
+
+@ExtendWith(MockitoExtension.class)
+class InboundContextServiceTest {
+
+    @Mock
+    private ConversationMapper conversationMapper;
+    @Mock
+    private PersonMapper personMapper;
+    @Mock
+    private ConversationTagBindingMapper conversationTagBindingMapper;
+    @Mock
+    private PersonTagBindingMapper personTagBindingMapper;
+    @Mock
+    private TagMapper tagMapper;
+
+    @InjectMocks
+    private InboundContextService inboundContextService;
+
+    @Test
+    void shouldResolveConversationContext() {
+        MessageEvent event = new MessageEvent();
+        event.setConversationId(1L);
+        event.setChannelType("wecom");
+        event.setAccountId(100L);
+
+        Conversation conversation = new Conversation();
+        conversation.setId(1L);
+        conversation.setContractId(10L);
+        conversation.setSupplierId(20L);
+        conversation.setInstitutionId(30L);
+        conversation.setChannelCode("C001");
+        conversation.setOwnerAccountId(200L);
+
+        when(conversationMapper.selectById(1L)).thenReturn(conversation);
+
+        ConversationTagBinding binding = new ConversationTagBinding();
+        binding.setTagId(101L);
+        when(conversationTagBindingMapper.selectList(any())).thenReturn(List.of(binding));
+
+        Tag tag = new Tag();
+        tag.setId(101L);
+        tag.setTagPath("销售/华北组");
+        when(tagMapper.selectById(101L)).thenReturn(tag);
+
+        Map<String, Object> context = inboundContextService.resolveContext(event);
+
+        assertThat(context)
+                .containsEntry("contract_id", 10L)
+                .containsEntry("supplier_id", 20L)
+                .containsEntry("institution_id", 30L)
+                .containsEntry("channel_code", "C001")
+                .containsEntry("owner_account_id", 200L)
+                .containsEntry("channel_type", "wecom")
+                .containsEntry("account_id", 100L);
+        assertThat(context).containsKey("conversation_tags");
+        @SuppressWarnings("unchecked")
+        List<String> tags = (List<String>) context.get("conversation_tags");
+        assertThat(tags).containsExactly("销售/华北组");
+    }
+
+    @Test
+    void shouldResolvePersonContext() {
+        MessageEvent event = new MessageEvent();
+        event.setPersonId(2L);
+        event.setChannelType("wecom");
+        event.setAccountId(100L);
+
+        Person person = new Person();
+        person.setId(2L);
+        person.setPersonType(2);
+        person.setInstitutionId(40L);
+        person.setSupplierId(50L);
+
+        when(personMapper.selectById(2L)).thenReturn(person);
+
+        PersonTagBinding binding = new PersonTagBinding();
+        binding.setTagId(102L);
+        when(personTagBindingMapper.selectList(any())).thenReturn(List.of(binding));
+
+        Tag tag = new Tag();
+        tag.setId(102L);
+        tag.setTagPath("供应商/技师");
+        when(tagMapper.selectById(102L)).thenReturn(tag);
+
+        Map<String, Object> context = inboundContextService.resolveContext(event);
+
+        assertThat(context)
+                .containsEntry("person_type", 2)
+                .containsEntry("institution_id", 40L)
+                .containsEntry("supplier_id", 50L)
+                .containsEntry("channel_type", "wecom")
+                .containsEntry("account_id", 100L);
+        assertThat(context).containsKey("person_tags");
+        @SuppressWarnings("unchecked")
+        List<String> tags = (List<String>) context.get("person_tags");
+        assertThat(tags).containsExactly("供应商/技师");
+    }
+
+    @Test
+    void shouldMergeContextsWithoutOverwriting() {
+        MessageEvent event = new MessageEvent();
+        event.setConversationId(1L);
+        event.setPersonId(2L);
+        event.setChannelType("wecom");
+        event.setAccountId(100L);
+
+        Conversation conversation = new Conversation();
+        conversation.setId(1L);
+        conversation.setContractId(10L);
+        conversation.setSupplierId(20L);
+        conversation.setInstitutionId(30L);
+        conversation.setChannelCode("C001");
+        conversation.setOwnerAccountId(200L);
+
+        Person person = new Person();
+        person.setId(2L);
+        person.setPersonType(3);
+        person.setInstitutionId(40L);
+        person.setSupplierId(60L);
+
+        when(conversationMapper.selectById(1L)).thenReturn(conversation);
+        when(personMapper.selectById(2L)).thenReturn(person);
+        when(conversationTagBindingMapper.selectList(any())).thenReturn(List.of());
+        when(personTagBindingMapper.selectList(any())).thenReturn(List.of());
+
+        Map<String, Object> context = inboundContextService.resolveContext(event);
+
+        assertThat(context)
+                .containsEntry("contract_id", 10L)
+                .containsEntry("channel_code", "C001")
+                .containsEntry("owner_account_id", 200L)
+                .containsEntry("person_type", 3)
+                .containsEntry("institution_id", 30L)
+                .containsEntry("supplier_id", 20L);
+    }
+}
diff --git a/backend/mci-server/src/test/java/com/sino/mci/inbound/webhook/WebhookPayloadBuilderTest.java b/backend/mci-server/src/test/java/com/sino/mci/inbound/webhook/WebhookPayloadBuilderTest.java
new file mode 100644
index 0000000..e8abc27
--- /dev/null
+++ b/backend/mci-server/src/test/java/com/sino/mci/inbound/webhook/WebhookPayloadBuilderTest.java
@@ -0,0 +1,117 @@
+package com.sino.mci.inbound.webhook;
+
+import com.sino.mci.inbound.entity.MessageEvent;
+import com.sino.mci.inbound.intent.IntentResult;
+import org.junit.jupiter.api.Test;
+
+import java.time.LocalDateTime;
+import java.util.List;
+import java.util.Map;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+class WebhookPayloadBuilderTest {
+
+    private final WebhookPayloadBuilder builder = new WebhookPayloadBuilder();
+
+    @Test
+    void shouldBuildPayloadWithAllStandardFields() {
+        MessageEvent event = createEvent();
+        IntentResult intent = new IntentResult("create_order", 0.95,
+                Map.of("customer_name", "张三", "address", "北京"),
+                List.of("phone"), true);
+
+        Map<String, Object> payload = builder.buildPayload(event, intent);
+
+        assertThat(payload).containsEntry("event_id", "evt_20260707_001")
+                .containsEntry("tenant_code", "rescue")
+                .containsEntry("channel_type", "wecom")
+                .containsEntry("direction", "in")
+                .containsEntry("event_type", "message")
+                .containsEntry("conversation_id", 1001L)
+                .containsEntry("person_id", 2001L)
+                .containsEntry("account_id", 3001L)
+                .containsEntry("create_time", "2026-07-03T12:00:00");
+
+        assertThat(payload).containsKey("content");
+        @SuppressWarnings("unchecked")
+        Map<String, Object> content = (Map<String, Object>) payload.get("content");
+        assertThat(content).containsEntry("type", "text")
+                .containsEntry("body", "我要下单");
+
+        assertThat(payload).containsKey("intent");
+        @SuppressWarnings("unchecked")
+        Map<String, Object> intentMap = (Map<String, Object>) payload.get("intent");
+        assertThat(intentMap).containsEntry("intent", "create_order")
+                .containsEntry("confidence", 0.95)
+                .containsEntry("requires_confirmation", true);
+        @SuppressWarnings("unchecked")
+        Map<String, Object> slots = (Map<String, Object>) intentMap.get("slots");
+        assertThat(slots).containsEntry("customer_name", "张三")
+                .containsEntry("address", "北京");
+        @SuppressWarnings("unchecked")
+        List<String> missingSlots = (List<String>) intentMap.get("missing_slots");
+        assertThat(missingSlots).containsExactly("phone");
+
+        assertThat(payload).containsKey("business_context");
+        @SuppressWarnings("unchecked")
+        Map<String, Object> businessContext = (Map<String, Object>) payload.get("business_context");
+        assertThat(businessContext).containsEntry("contract_id", "C001");
+
+        assertThat(payload).containsKey("raw_payload");
+    }
+
+    @Test
+    void shouldMapOutboundDirection() {
+        MessageEvent event = createEvent();
+        event.setDirection(2);
+
+        Map<String, Object> payload = builder.buildPayload(event, unknownIntent());
+
+        assertThat(payload).containsEntry("direction", "out");
+    }
+
+    @Test
+    void shouldHandleNullIntent() {
+        MessageEvent event = createEvent();
+
+        Map<String, Object> payload = builder.buildPayload(event, null);
+
+        assertThat(payload).containsEntry("intent", null);
+    }
+
+    @Test
+    void shouldHandleBlankJsonFields() {
+        MessageEvent event = createEvent();
+        event.setContent(null);
+        event.setBusinessContext("");
+        event.setRawPayload(null);
+
+        Map<String, Object> payload = builder.buildPayload(event, unknownIntent());
+
+        assertThat(payload).containsEntry("content", null);
+        assertThat(payload).containsEntry("business_context", null);
+        assertThat(payload).containsEntry("raw_payload", null);
+    }
+
+    private MessageEvent createEvent() {
+        MessageEvent event = new MessageEvent();
+        event.setEventId("evt_20260707_001");
+        event.setTenantCode("rescue");
+        event.setChannelType("wecom");
+        event.setDirection(1);
+        event.setEventType("message");
+        event.setConversationId(1001L);
+        event.setPersonId(2001L);
+        event.setAccountId(3001L);
+        event.setContent("{\"type\":\"text\",\"body\":\"我要下单\"}");
+        event.setRawPayload("{\"seq\":12345}");
+        event.setBusinessContext("{\"contract_id\":\"C001\"}");
+        event.setCreateTime(LocalDateTime.of(2026, 7, 3, 12, 0, 0));
+        return event;
+    }
+
+    private IntentResult unknownIntent() {
+        return new IntentResult("unknown", 0.0, Map.of(), List.of(), false);
+    }
+}
diff --git a/backend/mci-server/src/test/java/com/sino/mci/inbound/webhook/WebhookSignatureServiceTest.java b/backend/mci-server/src/test/java/com/sino/mci/inbound/webhook/WebhookSignatureServiceTest.java
new file mode 100644
index 0000000..50dd3d3
--- /dev/null
+++ b/backend/mci-server/src/test/java/com/sino/mci/inbound/webhook/WebhookSignatureServiceTest.java
@@ -0,0 +1,79 @@
+package com.sino.mci.inbound.webhook;
+
+import org.junit.jupiter.api.Test;
+
+import javax.crypto.Mac;
+import javax.crypto.spec.SecretKeySpec;
+import java.nio.charset.StandardCharsets;
+import java.util.Base64;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+class WebhookSignatureServiceTest {
+
+    private final WebhookSignatureService signatureService = new WebhookSignatureService();
+
+    @Test
+    void shouldSignPayloadWithHmacSha256() throws Exception {
+        String payload = "{\"event_id\":\"evt_001\",\"tenant_code\":\"rescue\"}";
+        String secret = "tenant-secret";
+
+        WebhookSignature signature = signatureService.sign("rescue", payload, secret, "hmac-sha256");
+
+        String expected = manualHmac(payload, secret, "HmacSHA256");
+        assertThat(signature.signature()).isEqualTo(expected);
+        assertThat(signature.algorithm()).isEqualTo("hmac-sha256");
+        assertThat(signature.timestamp()).isGreaterThan(0);
+    }
+
+    @Test
+    void shouldSignPayloadWithHmacSha512() throws Exception {
+        String payload = "{\"event_id\":\"evt_001\"}";
+        String secret = "tenant-secret";
+
+        WebhookSignature signature = signatureService.sign("rescue", payload, secret, "hmac-sha512");
+
+        String expected = manualHmac(payload, secret, "HmacSHA512");
+        assertThat(signature.signature()).isEqualTo(expected);
+        assertThat(signature.algorithm()).isEqualTo("hmac-sha512");
+    }
+
+    @Test
+    void shouldDefaultToHmacSha256WhenAlgorithmIsBlank() {
+        String payload = "{\"event_id\":\"evt_001\"}";
+        String secret = "tenant-secret";
+
+        WebhookSignature signature = signatureService.sign("rescue", payload, secret, null);
+
+        assertThat(signature.algorithm()).isEqualTo("hmac-sha256");
+    }
+
+    @Test
+    void shouldProduceDifferentSignaturesForDifferentSecrets() {
+        String payload = "{\"event_id\":\"evt_001\"}";
+
+        WebhookSignature first = signatureService.sign("rescue", payload, "secret-a", "hmac-sha256");
+        WebhookSignature second = signatureService.sign("rescue", payload, "secret-b", "hmac-sha256");
+
+        assertThat(first.signature()).isNotEqualTo(second.signature());
+    }
+
+    @Test
+    void shouldProduceDifferentSignaturesForDifferentAlgorithms() {
+        String payload = "{\"event_id\":\"evt_001\"}";
+        String secret = "tenant-secret";
+
+        WebhookSignature sha256 = signatureService.sign("rescue", payload, secret, "hmac-sha256");
+        WebhookSignature sha512 = signatureService.sign("rescue", payload, secret, "hmac-sha512");
+
+        assertThat(sha256.signature()).isNotEqualTo(sha512.signature());
+    }
+
+    private String manualHmac(String payload, String secret, String algorithm) throws Exception {
+        Mac mac = Mac.getInstance(algorithm);
+        SecretKeySpec keySpec = new SecretKeySpec(secret.getBytes(StandardCharsets.UTF_8), algorithm);
+        mac.init(keySpec);
+        byte[] signatureBytes = mac.doFinal(payload.getBytes(StandardCharsets.UTF_8));
+        return Base64.getEncoder().encodeToString(signatureBytes);
+    }
+}
diff --git a/backend/mci-server/src/test/java/com/sino/mci/send/controller/SendPreviewControllerTest.java b/backend/mci-server/src/test/java/com/sino/mci/send/controller/SendPreviewControllerTest.java
new file mode 100644
index 0000000..a7aed44
--- /dev/null
+++ b/backend/mci-server/src/test/java/com/sino/mci/send/controller/SendPreviewControllerTest.java
@@ -0,0 +1,266 @@
+package com.sino.mci.send.controller;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.webmvc.test.autoconfigure.AutoConfigureMockMvc;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.data.redis.core.StringRedisTemplate;
+import org.springframework.http.MediaType;
+import org.springframework.test.web.servlet.MockMvc;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.util.UUID;
+
+import static com.sino.mci.test.AuthTestHelper.createTenantAndLogin;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.post;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+@SpringBootTest
+@AutoConfigureMockMvc
+@Transactional
+public class SendPreviewControllerTest {
+
+    @Autowired
+    private MockMvc mockMvc;
+
+    @Autowired
+    private StringRedisTemplate redisTemplate;
+
+    @Test
+    void shouldPreviewConversationTarget() throws Exception {
+        String tenantCode = "preview-" + UUID.randomUUID().toString().substring(0, 8);
+        String authToken = createTenantAndLogin(mockMvc, tenantCode, "预览测试");
+
+        Long accountId = createChannelAccount(authToken, tenantCode, "ZhangSan", "张三");
+        Long conversationId = createConversation(authToken, tenantCode, "wecom", "room-preview-001");
+        bindConversationAccount(authToken, tenantCode, conversationId, accountId);
+
+        String payload = String.format(
+                "{\"targetType\":\"conversation\",\"targetValue\":{\"conversation_id\":%d},\"channelStrategy\":{\"channel_type\":\"wecom\",\"strategy\":\"primary\"}}",
+                conversationId);
+
+        mockMvc.perform(post("/msg-platform/api/v1/send/preview")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(payload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.totalPersonCount").value(0))
+                .andExpect(jsonPath("$.data.totalConversationCount").value(1))
+                .andExpect(jsonPath("$.data.channelBreakdown.wecom").value(1))
+                .andExpect(jsonPath("$.data.unreachableCount").value(0))
+                .andExpect(jsonPath("$.data.accountUsage.张三").value(1))
+                .andExpect(jsonPath("$.data.policyCheck.blacklistHit").value(0))
+                .andExpect(jsonPath("$.data.policyCheck.timeWindowOk").value(true))
+                .andExpect(jsonPath("$.data.estimatedTimeSeconds").value(3));
+    }
+
+    @Test
+    void shouldPreviewRuleTargetWithChannelBreakdownAndAccountUsage() throws Exception {
+        String tenantCode = "preview-" + UUID.randomUUID().toString().substring(0, 8);
+        String authToken = createTenantAndLogin(mockMvc, tenantCode, "预览测试");
+
+        Long account1 = createChannelAccount(authToken, tenantCode, "Bot01", "机器人一号");
+        Long account2 = createChannelAccount(authToken, tenantCode, "Bot02", "机器人二号");
+
+        Long tagId = createTag(authToken, tenantCode, "preview-rule");
+
+        Long personId = createPerson(authToken, tenantCode, 3);
+        bindPersonTag(authToken, tenantCode, personId, tagId);
+        createPersonIdentity(authToken, tenantCode, personId, "wecom", "user-preview-001");
+
+        Long conversationId = createConversation(authToken, tenantCode, "wecom", "room-preview-rule-001");
+        bindConversationTag(authToken, tenantCode, conversationId, tagId);
+        bindConversationAccount(authToken, tenantCode, conversationId, account2);
+
+        String payload = String.format(
+                "{\"targetType\":\"rule\",\"targetValue\":{\"rules\":[{\"field\":\"tag\",\"operator\":\"in\",\"value\":[%d]}],\"logic\":\"and\"},\"channelStrategy\":{\"channel_type\":\"wecom\",\"strategy\":\"primary\"}}",
+                tagId);
+
+        mockMvc.perform(post("/msg-platform/api/v1/send/preview")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(payload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.totalPersonCount").value(1))
+                .andExpect(jsonPath("$.data.totalConversationCount").value(1))
+                .andExpect(jsonPath("$.data.channelBreakdown.wecom").value(2))
+                .andExpect(jsonPath("$.data.accountUsage.机器人一号").value(1))
+                .andExpect(jsonPath("$.data.accountUsage.机器人二号").value(1));
+    }
+
+    @Test
+    void shouldDetectBlacklistHitWithoutIncrementingRateLimitCounter() throws Exception {
+        String tenantCode = "preview-" + UUID.randomUUID().toString().substring(0, 8);
+        String authToken = createTenantAndLogin(mockMvc, tenantCode, "预览测试");
+
+        Long accountId = createChannelAccount(authToken, tenantCode, "ZhangSan", "张三");
+        Long personId = createPerson(authToken, tenantCode, 3);
+        createPersonIdentity(authToken, tenantCode, personId, "wecom", "user-preview-002");
+        Long conversationId = createConversation(authToken, tenantCode, "wecom", "room-preview-blacklist-001");
+        bindConversationAccount(authToken, tenantCode, conversationId, accountId);
+
+        String policies = "[{\"type\":\"blacklist\",\"person_ids\":["
+                + personId + "]},{\"type\":\"rate_limit\",\"scope\":\"account\",\"limit\":2,\"window\":\"1h\"}]";
+        createPolicyGroup(authToken, tenantCode, "default", "wecom", policies);
+
+        String rateKey = String.format("mci:rate:%s:account:%d:%s", tenantCode, accountId,
+                java.time.LocalDateTime.now().format(java.time.format.DateTimeFormatter.ofPattern("yyyyMMddHH")));
+        redisTemplate.opsForValue().set(rateKey, "1");
+        try {
+            String payload = String.format(
+                    "{\"targetType\":\"rule\",\"targetValue\":{\"rules\":[{\"field\":\"person_type\",\"operator\":\"eq\",\"value\":3},{\"field\":\"channel_type\",\"operator\":\"eq\",\"value\":\"wecom\"}],\"logic\":\"or\"},\"channelStrategy\":{\"channel_type\":\"wecom\",\"strategy\":\"primary\"}}");
+
+            mockMvc.perform(post("/msg-platform/api/v1/send/preview")
+                            .contextPath("/msg-platform")
+                            .header("Authorization", authToken)
+                            .header("X-Tenant-Code", tenantCode)
+                            .contentType(MediaType.APPLICATION_JSON)
+                            .content(payload))
+                    .andExpect(status().isOk())
+                    .andExpect(jsonPath("$.code").value(0))
+                    .andExpect(jsonPath("$.data.policyCheck.blacklistHit").value(1))
+                    .andExpect(jsonPath("$.data.totalPersonCount").value(1))
+                    .andExpect(jsonPath("$.data.totalConversationCount").value(1));
+
+            String value = redisTemplate.opsForValue().get(rateKey);
+            org.junit.jupiter.api.Assertions.assertEquals("1", value, "预览不应修改 Redis 限流计数器");
+        } finally {
+            redisTemplate.delete(rateKey);
+        }
+    }
+
+    private Long createChannelAccount(String authToken, String tenantCode, String accountId, String accountName) throws Exception {
+        String accountPayload = String.format(
+                "{\"accountType\":1,\"channelType\":\"wecom\",\"accountId\":\"%s\",\"accountName\":\"%s\"}",
+                accountId, accountName);
+        String accountResponse = mockMvc.perform(post("/msg-platform/api/v1/channel-account")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(accountPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andReturn().getResponse().getContentAsString();
+        return ((Number) com.jayway.jsonpath.JsonPath.read(accountResponse, "$.data.id")).longValue();
+    }
+
+    private Long createTag(String authToken, String tenantCode, String tagName) throws Exception {
+        String tagPayload = String.format("{\"parentId\":0,\"tagName\":\"%s\"}", tagName);
+        String tagResponse = mockMvc.perform(post("/msg-platform/api/v1/tag")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(tagPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andReturn().getResponse().getContentAsString();
+        return ((Number) com.jayway.jsonpath.JsonPath.read(tagResponse, "$.data.id")).longValue();
+    }
+
+    private Long createPerson(String authToken, String tenantCode, int personType) throws Exception {
+        String personPayload = String.format(
+                "{\"personCode\":\"P-%d\",\"personName\":\"张三\",\"phone\":\"13800138000\",\"personType\":%d}",
+                personType, personType);
+        String personResponse = mockMvc.perform(post("/msg-platform/api/v1/person")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(personPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andReturn().getResponse().getContentAsString();
+        return ((Number) com.jayway.jsonpath.JsonPath.read(personResponse, "$.data.id")).longValue();
+    }
+
+    private void createPersonIdentity(String authToken, String tenantCode, Long personId,
+                                      String channelType, String channelUserId) throws Exception {
+        String identityPayload = String.format("{\"channelType\":\"%s\",\"channelUserId\":\"%s\"}", channelType, channelUserId);
+        mockMvc.perform(post("/msg-platform/api/v1/person/" + personId + "/identities")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(identityPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0));
+    }
+
+    private void bindPersonTag(String authToken, String tenantCode, Long personId, Long tagId) throws Exception {
+        String bindPayload = String.format("{\"tagIds\":[%d]}", tagId);
+        mockMvc.perform(post("/msg-platform/api/v1/person/" + personId + "/bind-tags")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(bindPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0));
+    }
+
+    private Long createConversation(String authToken, String tenantCode, String channelType,
+                                    String channelConversationId) throws Exception {
+        String conversationPayload = String.format(
+                "{\"conversationType\":2,\"channelType\":\"%s\",\"channelConversationId\":\"%s\",\"conversationName\":\"测试群\"}",
+                channelType, channelConversationId);
+        String conversationResponse = mockMvc.perform(post("/msg-platform/api/v1/conversation")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(conversationPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andReturn().getResponse().getContentAsString();
+        return ((Number) com.jayway.jsonpath.JsonPath.read(conversationResponse, "$.data.id")).longValue();
+    }
+
+    private void bindConversationTag(String authToken, String tenantCode, Long conversationId, Long tagId) throws Exception {
+        String bindPayload = String.format("{\"tagIds\":[%d]}", tagId);
+        mockMvc.perform(post("/msg-platform/api/v1/conversation/" + conversationId + "/bind-tags")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(bindPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0));
+    }
+
+    private void bindConversationAccount(String authToken, String tenantCode, Long conversationId,
+                                         Long accountId) throws Exception {
+        String bindPayload = String.format("{\"accountId\":%d,\"bindingType\":1,\"sortOrder\":1}", accountId);
+        mockMvc.perform(post("/msg-platform/api/v1/conversation/" + conversationId + "/bind-account")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(bindPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0));
+    }
+
+    private void createPolicyGroup(String authToken, String tenantCode, String groupCode,
+                                   String channelType, String policiesJson) throws Exception {
+        String payload = String.format(
+                "{\"groupCode\":\"%s\",\"groupName\":\"%s\",\"channelType\":\"%s\",\"policies\":%s}",
+                groupCode, groupCode, channelType, policiesJson);
+        mockMvc.perform(post("/msg-platform/api/v1/policy-group")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(payload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0));
+    }
+}
diff --git a/backend/mci-server/src/test/java/com/sino/mci/send/mq/SendMessageConsumerTest.java b/backend/mci-server/src/test/java/com/sino/mci/send/mq/SendMessageConsumerTest.java
new file mode 100644
index 0000000..2ec26f7
--- /dev/null
+++ b/backend/mci-server/src/test/java/com/sino/mci/send/mq/SendMessageConsumerTest.java
@@ -0,0 +1,211 @@
+package com.sino.mci.send.mq;
+
+import com.sino.mci.channel.adapter.registry.ChannelAdapterRegistry;
+import com.sino.mci.channel.common.dto.SendMessageRequest;
+import com.sino.mci.channel.common.dto.SendMessageResult;
+import com.sino.mci.channel.common.model.ChannelType;
+import com.sino.mci.channel.common.spi.ChannelAdapter;
+import com.sino.mci.policy.engine.RetryConfig;
+import com.sino.mci.send.entity.SendRecord;
+import com.sino.mci.send.repository.SendRecordMapper;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.mockito.ArgumentCaptor;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.test.context.TestConfiguration;
+import org.springframework.context.annotation.Bean;
+import org.springframework.http.HttpEntity;
+import org.springframework.http.ResponseEntity;
+import org.springframework.test.context.TestPropertySource;
+import org.springframework.transaction.annotation.Transactional;
+import org.springframework.web.client.RestTemplate;
+
+import java.util.Arrays;
+import java.util.Map;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyInt;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.reset;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+@SpringBootTest
+@TestPropertySource(properties = {
+        "spring.rabbitmq.listener.simple.auto-startup=false",
+        "spring.main.allow-bean-definition-overriding=true"
+})
+@Transactional
+class SendMessageConsumerTest {
+
+    @Autowired
+    private SendMessageConsumer consumer;
+
+    @Autowired
+    private SendRecordMapper sendRecordMapper;
+
+    @Autowired
+    private ChannelAdapterRegistry adapterRegistry;
+
+    @Autowired
+    private SendMessageProducer sendMessageProducer;
+
+    @Autowired
+    private RestTemplate restTemplate;
+
+    private ChannelAdapter adapter;
+
+    @BeforeEach
+    void setUp() {
+        reset(adapterRegistry, sendMessageProducer, restTemplate);
+        adapter = mock(ChannelAdapter.class);
+        when(adapter.getChannelType()).thenReturn(ChannelType.WECHAT_PERSONAL);
+        when(adapterRegistry.getAdapter(ChannelType.WECHAT_PERSONAL)).thenReturn(adapter);
+        when(restTemplate.postForEntity(any(String.class), any(), eq(String.class)))
+                .thenReturn(ResponseEntity.ok("ok"));
+    }
+
+    @Test
+    void successfulSendTriggersCallbackWithExpectedPayloadStructure() {
+        SendRecord record = createRecord();
+        SendRecordMessage message = createMessage(record, null);
+
+        SendMessageResult successResult = new SendMessageResult();
+        successResult.setSuccess(true);
+        successResult.setChannelMessageId("msg-ok-001");
+        when(adapter.sendMessage(any(SendMessageRequest.class))).thenReturn(successResult);
+
+        consumer.handle(message);
+
+        SendRecord updated = sendRecordMapper.selectById(record.getId());
+        assertEquals(2, updated.getSendStatus().intValue());
+
+        ArgumentCaptor<HttpEntity> captor = ArgumentCaptor.forClass(HttpEntity.class);
+        verify(restTemplate).postForEntity(eq("http://example.com/callback"), captor.capture(), eq(String.class));
+        @SuppressWarnings("unchecked")
+        Map<String, Object> payload = (Map<String, Object>) captor.getValue().getBody();
+        assertEquals(record.getTaskId(), payload.get("task_id"));
+        assertEquals(record.getId(), payload.get("record_id"));
+        assertEquals(record.getConversationId(), payload.get("conversation_id"));
+        assertEquals(record.getPersonId(), payload.get("person_id"));
+        assertEquals("wechat_personal", payload.get("channel_type"));
+        assertEquals("delivered", payload.get("event"));
+        assertEquals(1, payload.get("status"));
+        assertNotNull(payload.get("channel_result"));
+        assertNotNull(payload.get("event_time"));
+
+        verify(sendMessageProducer, never()).publishRetryMessage(any(), anyInt());
+    }
+
+    @Test
+    void failedSendWithRetryPublishesRetryMessage() {
+        SendRecord record = createRecord();
+        record.setMaxRetry(3);
+        sendRecordMapper.updateById(record);
+
+        RetryConfig retryPlan = new RetryConfig(3, Arrays.asList(1, 2, 3));
+        SendRecordMessage message = createMessage(record, retryPlan);
+
+        SendMessageResult failureResult = new SendMessageResult();
+        failureResult.setSuccess(false);
+        failureResult.setMessage("network error");
+        when(adapter.sendMessage(any(SendMessageRequest.class))).thenReturn(failureResult);
+
+        consumer.handle(message);
+
+        SendRecord updated = sendRecordMapper.selectById(record.getId());
+        assertEquals(3, updated.getSendStatus().intValue());
+        assertEquals(1, updated.getRetryCount().intValue());
+        assertNotNull(updated.getNextRetryTime());
+
+        ArgumentCaptor<SendRecordMessage> retryCaptor = ArgumentCaptor.forClass(SendRecordMessage.class);
+        verify(sendMessageProducer).publishRetryMessage(retryCaptor.capture(), eq(1));
+        SendRecordMessage retryMessage = retryCaptor.getValue();
+        assertEquals(record.getId(), retryMessage.getRecordId());
+        assertEquals(1, retryMessage.getAttempt());
+        assertEquals(retryPlan, retryMessage.getRetryPlan());
+
+        verify(restTemplate, never()).postForEntity(any(String.class), any(), eq(String.class));
+    }
+
+    @Test
+    void maxRetryExceededTriggersFinalCallback() {
+        SendRecord record = createRecord();
+        record.setRetryCount(4);
+        record.setMaxRetry(3);
+        sendRecordMapper.updateById(record);
+
+        RetryConfig retryPlan = new RetryConfig(3, Arrays.asList(1, 2, 3));
+        SendRecordMessage message = createMessage(record, retryPlan);
+
+        consumer.handle(message);
+
+        SendRecord updated = sendRecordMapper.selectById(record.getId());
+        assertEquals(3, updated.getSendStatus().intValue());
+
+        ArgumentCaptor<HttpEntity> captor = ArgumentCaptor.forClass(HttpEntity.class);
+        verify(restTemplate).postForEntity(eq("http://example.com/callback"), captor.capture(), eq(String.class));
+        @SuppressWarnings("unchecked")
+        Map<String, Object> payload = (Map<String, Object>) captor.getValue().getBody();
+        assertEquals(record.getId(), payload.get("record_id"));
+        assertEquals("failed", payload.get("event"));
+        assertEquals(3, payload.get("status"));
+
+        verify(sendMessageProducer, never()).publishRetryMessage(any(), anyInt());
+        verify(adapter, never()).sendMessage(any());
+    }
+
+    private SendRecord createRecord() {
+        SendRecord record = new SendRecord();
+        record.setTaskId("SNDTEST001");
+        record.setTenantCode("test-tenant");
+        record.setTargetType("person");
+        record.setTargetValue("{\"person_id\":2001}");
+        record.setPersonId(2001L);
+        record.setAccountId(100L);
+        record.setChannelType("wechat_personal");
+        record.setChannelStrategy("{\"channel_type\":\"wechat_personal\",\"strategy\":\"primary\"}");
+        record.setContentType("text");
+        record.setContentBody("{\"text\":\"hello\"}");
+        record.setCallbackUrl("http://example.com/callback");
+        record.setSendStatus(0);
+        record.setRetryCount(0);
+        record.setMaxRetry(0);
+        sendRecordMapper.insert(record);
+        return record;
+    }
+
+    private SendRecordMessage createMessage(SendRecord record, RetryConfig retryPlan) {
+        return SendRecordMessage.builder()
+                .recordId(record.getId())
+                .taskId(record.getTaskId())
+                .tenantCode(record.getTenantCode())
+                .attempt(record.getRetryCount() != null ? record.getRetryCount() : 0)
+                .retryPlan(retryPlan)
+                .build();
+    }
+
+    @TestConfiguration
+    static class MockConfig {
+
+        @Bean
+        public ChannelAdapterRegistry channelAdapterRegistry() {
+            return mock(ChannelAdapterRegistry.class);
+        }
+
+        @Bean
+        public SendMessageProducer sendMessageProducer() {
+            return mock(SendMessageProducer.class);
+        }
+
+        @Bean
+        public RestTemplate restTemplate() {
+            return mock(RestTemplate.class);
+        }
+    }
+}
diff --git a/backend/mci-server/src/test/java/com/sino/mci/send/service/PolicyEngineTest.java b/backend/mci-server/src/test/java/com/sino/mci/send/service/PolicyEngineTest.java
new file mode 100644
index 0000000..0910009
--- /dev/null
+++ b/backend/mci-server/src/test/java/com/sino/mci/send/service/PolicyEngineTest.java
@@ -0,0 +1,130 @@
+package com.sino.mci.send.service;
+
+import com.sino.mci.policy.engine.PolicyCheckResult;
+import com.sino.mci.policy.engine.PolicyEngine;
+import com.sino.mci.policy.engine.PolicyGroupConfig;
+import com.sino.mci.send.entity.SendRecord;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.data.redis.core.StringRedisTemplate;
+import org.springframework.data.redis.core.ValueOperations;
+
+import java.time.Duration;
+import java.time.LocalDateTime;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.atLeastOnce;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+@ExtendWith(MockitoExtension.class)
+public class PolicyEngineTest {
+
+    @Mock
+    private StringRedisTemplate redisTemplate;
+
+    @Mock
+    private ValueOperations<String, String> valueOperations;
+
+    @Test
+    void rateLimitBlocksAfterNMessagesInWindow() {
+        when(redisTemplate.opsForValue()).thenReturn(valueOperations);
+        when(valueOperations.increment(anyString())).thenReturn(1L, 2L, 3L);
+
+        PolicyEngine engine = new PolicyEngine(redisTemplate);
+        PolicyGroupConfig config = PolicyGroupConfig.parseJson(
+                "[{\"type\":\"rate_limit\",\"scope\":\"account\",\"limit\":2,\"window\":\"1h\"}]");
+
+        SendRecord record = createRecord("rescue", 1001L, 2001L, 3001L);
+        LocalDateTime now = LocalDateTime.of(2026, 7, 7, 14, 30);
+
+        PolicyCheckResult first = engine.check(record, config, now);
+        assertTrue(first.isAllowed());
+
+        PolicyCheckResult second = engine.check(record, config, now);
+        assertTrue(second.isAllowed());
+
+        PolicyCheckResult third = engine.check(record, config, now);
+        assertFalse(third.isAllowed());
+        assertEquals("rate_limit_exceeded", third.getReasonCode());
+
+        verify(valueOperations, times(3)).increment(anyString());
+        verify(redisTemplate, atLeastOnce()).expire(anyString(), eq(Duration.ofHours(1)));
+    }
+
+    @Test
+    void timeWindowRejectsOutsideAllowedRange() {
+        PolicyEngine engine = new PolicyEngine(redisTemplate);
+        PolicyGroupConfig config = PolicyGroupConfig.parseJson(
+                "[{\"type\":\"time_window\",\"allow\":[\"09:00-21:00\"]}]");
+
+        SendRecord record = createRecord("rescue", 1001L, 2001L, 3001L);
+        LocalDateTime inside = LocalDateTime.of(2026, 7, 7, 10, 0);
+        LocalDateTime outside = LocalDateTime.of(2026, 7, 7, 22, 0);
+
+        assertTrue(engine.check(record, config, inside).isAllowed());
+
+        PolicyCheckResult rejected = engine.check(record, config, outside);
+        assertFalse(rejected.isAllowed());
+        assertEquals("time_window_not_allowed", rejected.getReasonCode());
+    }
+
+    @Test
+    void blacklistRejectsBlockedPersonOrConversation() {
+        PolicyEngine engine = new PolicyEngine(redisTemplate);
+        PolicyGroupConfig config = PolicyGroupConfig.parseJson(
+                "[{\"type\":\"blacklist\",\"person_ids\":[1001],\"conversation_ids\":[3001]}]");
+
+        SendRecord normal = createRecord("rescue", 1L, 2L, 3L);
+        assertTrue(engine.check(normal, config, LocalDateTime.now()).isAllowed());
+
+        SendRecord blockedPerson = createRecord("rescue", 1L, 1001L, 3L);
+        PolicyCheckResult personResult = engine.check(blockedPerson, config, LocalDateTime.now());
+        assertFalse(personResult.isAllowed());
+        assertEquals("blacklist_person", personResult.getReasonCode());
+
+        SendRecord blockedConversation = createRecord("rescue", 1L, 2L, 3001L);
+        PolicyCheckResult conversationResult = engine.check(blockedConversation, config, LocalDateTime.now());
+        assertFalse(conversationResult.isAllowed());
+        assertEquals("blacklist_conversation", conversationResult.getReasonCode());
+    }
+
+    @Test
+    void combinedPoliciesAllowAndRejectCorrectly() {
+        when(redisTemplate.opsForValue()).thenReturn(valueOperations);
+        when(valueOperations.increment(anyString())).thenReturn(1L, 2L, 3L);
+
+        PolicyEngine engine = new PolicyEngine(redisTemplate);
+        PolicyGroupConfig config = PolicyGroupConfig.parseJson("["
+                + "{\"type\":\"blacklist\",\"person_ids\":[999]},"
+                + "{\"type\":\"time_window\",\"allow\":[\"09:00-21:00\"]},"
+                + "{\"type\":\"rate_limit\",\"scope\":\"account\",\"limit\":2,\"window\":\"1d\"}"
+                + "]");
+
+        SendRecord record = createRecord("rescue", 1001L, 2001L, 3001L);
+        LocalDateTime now = LocalDateTime.of(2026, 7, 7, 10, 0);
+
+        assertTrue(engine.check(record, config, now).isAllowed());
+        assertTrue(engine.check(record, config, now).isAllowed());
+
+        PolicyCheckResult rejected = engine.check(record, config, now);
+        assertFalse(rejected.isAllowed());
+        assertEquals("rate_limit_exceeded", rejected.getReasonCode());
+    }
+
+    private SendRecord createRecord(String tenantCode, Long accountId, Long personId, Long conversationId) {
+        SendRecord record = new SendRecord();
+        record.setTenantCode(tenantCode);
+        record.setAccountId(accountId);
+        record.setPersonId(personId);
+        record.setConversationId(conversationId);
+        return record;
+    }
+}
diff --git a/backend/mci-server/src/test/java/com/sino/mci/send/service/SendEndToEndTest.java b/backend/mci-server/src/test/java/com/sino/mci/send/service/SendEndToEndTest.java
new file mode 100644
index 0000000..a299875
--- /dev/null
+++ b/backend/mci-server/src/test/java/com/sino/mci/send/service/SendEndToEndTest.java
@@ -0,0 +1,130 @@
+package com.sino.mci.send.service;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.annotation.Autowired;
+import org.springframework.boot.test.context.SpringBootTest;
+import org.springframework.boot.webmvc.test.autoconfigure.AutoConfigureMockMvc;
+import org.springframework.http.MediaType;
+import org.springframework.test.web.servlet.MockMvc;
+import org.springframework.transaction.annotation.Transactional;
+
+import java.util.UUID;
+
+import static com.sino.mci.test.AuthTestHelper.createTenantAndLogin;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.get;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.post;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.jsonPath;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+/**
+ * 出站发送端到端测试。
+ *
+ * <p>覆盖完整业务链路：创建租户 → 创建渠道主体 → 创建渠道账号 → 创建会话 → 绑定发送账号 →
+ * 调用模拟发送接口 → 查询发送记录并校验字段。</p>
+ */
+@SpringBootTest
+@AutoConfigureMockMvc
+@Transactional
+class SendEndToEndTest {
+
+    @Autowired
+    private MockMvc mockMvc;
+
+    @Test
+    void shouldCompleteSendFlowFromTenantToRecord() throws Exception {
+        String tenantCode = "send-e2e-" + UUID.randomUUID().toString().substring(0, 8);
+        String authToken = createTenantAndLogin(mockMvc, tenantCode, "发送端到端测试");
+
+        // 1. 创建渠道主体
+        String subjectCode = "sub-" + UUID.randomUUID().toString().substring(0, 8);
+        String subjectPayload = String.format(
+                "{\"channelType\":\"wecom\",\"subjectCode\":\"%s\",\"subjectName\":\"E2E Subject\"}",
+                subjectCode);
+        String subjectResponse = mockMvc.perform(post("/msg-platform/api/v1/channel-subject")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(subjectPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.channelType").value("wecom"))
+                .andReturn().getResponse().getContentAsString();
+        Long subjectId = ((Number) com.jayway.jsonpath.JsonPath.read(subjectResponse, "$.data.id")).longValue();
+
+        // 2. 创建渠道账号
+        String accountPayload = String.format(
+                "{\"accountType\":1,\"channelType\":\"wecom\",\"subjectId\":%d,\"accountId\":\"ZhangSan\",\"accountName\":\"张三\"}",
+                subjectId);
+        String accountResponse = mockMvc.perform(post("/msg-platform/api/v1/channel-account")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(accountPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andReturn().getResponse().getContentAsString();
+        Long accountId = ((Number) com.jayway.jsonpath.JsonPath.read(accountResponse, "$.data.id")).longValue();
+
+        // 3. 创建会话
+        String channelConversationId = "room-" + UUID.randomUUID().toString().substring(0, 8);
+        String conversationPayload = String.format(
+                "{\"conversationType\":2,\"channelType\":\"wecom\",\"channelConversationId\":\"%s\",\"conversationName\":\"E2E群\",\"subjectId\":%d}",
+                channelConversationId, subjectId);
+        String conversationResponse = mockMvc.perform(post("/msg-platform/api/v1/conversation")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(conversationPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andReturn().getResponse().getContentAsString();
+        Long conversationId = ((Number) com.jayway.jsonpath.JsonPath.read(conversationResponse, "$.data.id")).longValue();
+
+        // 4. 绑定发送主号
+        String bindPayload = String.format("{\"accountId\":%d,\"bindingType\":1,\"sortOrder\":1}", accountId);
+        mockMvc.perform(post("/msg-platform/api/v1/conversation/" + conversationId + "/bind-account")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(bindPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0));
+
+        // 5. 发送消息（模拟发送）
+        String sendPayload = String.format(
+                "{\"targetType\":\"conversation\",\"targetValue\":{\"conversation_id\":%d},\"contentType\":\"text\",\"content\":{\"text\":\"hello e2e\"},\"channelStrategy\":{\"channel_type\":\"wecom\",\"strategy\":\"primary\"}}",
+                conversationId);
+        String sendResponse = mockMvc.perform(post("/msg-platform/api/v1/send/test")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode)
+                        .contentType(MediaType.APPLICATION_JSON)
+                        .content(sendPayload))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.totalCount").value(1))
+                .andExpect(jsonPath("$.data.status").value("simulated"))
+                .andReturn().getResponse().getContentAsString();
+        String taskId = com.jayway.jsonpath.JsonPath.read(sendResponse, "$.data.taskId");
+
+        // 6. 查询发送记录并校验
+        mockMvc.perform(get("/msg-platform/api/v1/send/" + taskId + "/records")
+                        .contextPath("/msg-platform")
+                        .header("Authorization", authToken)
+                        .header("X-Tenant-Code", tenantCode))
+                .andExpect(status().isOk())
+                .andExpect(jsonPath("$.code").value(0))
+                .andExpect(jsonPath("$.data.length()").value(1))
+                .andExpect(jsonPath("$.data[0].taskId").value(taskId))
+                .andExpect(jsonPath("$.data[0].sendStatus").value(2))
+                .andExpect(jsonPath("$.data[0].channelType").value("wecom"))
+                .andExpect(jsonPath("$.data[0].conversationId").value(conversationId))
+                .andExpect(jsonPath("$.data[0].accountId").value(accountId))
+                .andExpect(jsonPath("$.data[0].contentType").value("text"))
+                .andExpect(jsonPath("$.data[0].contentBody").value(org.hamcrest.Matchers.containsString("hello e2e")));
+    }
+}
diff --git a/backend/mci-server/src/test/java/com/sino/mci/send/service/SendServiceFailoverTest.java b/backend/mci-server/src/test/java/com/sino/mci/send/service/SendServiceFailoverTest.java
new file mode 100644
index 0000000..5acbc0a
--- /dev/null
+++ b/backend/mci-server/src/test/java/com/sino/mci/send/service/SendServiceFailoverTest.java
@@ -0,0 +1,202 @@
+package com.sino.mci.send.service;
+
+import com.sino.mci.channel.adapter.registry.ChannelAdapterRegistry;
+import com.sino.mci.channel.common.dto.SendMessageRequest;
+import com.sino.mci.channel.common.dto.SendMessageResult;
+import com.sino.mci.channel.common.model.ChannelType;
+import com.sino.mci.channel.common.spi.ChannelAdapter;
+import com.sino.mci.channel.entity.ChannelAccount;
+import com.sino.mci.channel.repository.ChannelAccountMapper;
+import com.sino.mci.channel.repository.ConversationMapper;
+import com.sino.mci.channel.repository.ConversationTagBindingMapper;
+import com.sino.mci.channel.service.AccountSelector;
+import com.sino.mci.crm.repository.ChannelIdentityMapper;
+import com.sino.mci.crm.repository.PersonMapper;
+import com.sino.mci.crm.repository.PersonTagBindingMapper;
+import com.sino.mci.crm.repository.TagMapper;
+import com.sino.mci.policy.engine.PolicyEngine;
+import com.sino.mci.policy.repository.PolicyGroupMapper;
+import com.sino.mci.send.entity.SendRecord;
+import com.sino.mci.send.repository.SendRecordMapper;
+import com.sino.mci.shared.util.JsonUtils;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.ArgumentCaptor;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+
+import java.util.Arrays;
+import java.util.Collections;
+import java.util.List;
+import java.util.Map;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.never;
+import static org.mockito.Mockito.times;
+import static org.mockito.Mockito.verify;
+import static org.mockito.Mockito.when;
+
+@ExtendWith(MockitoExtension.class)
+class SendServiceFailoverTest {
+
+    @Mock
+    private SendRecordMapper sendRecordMapper;
+    @Mock
+    private ConversationMapper conversationMapper;
+    @Mock
+    private ChannelAccountMapper accountMapper;
+    @Mock
+    private ChannelIdentityMapper channelIdentityMapper;
+    @Mock
+    private PersonMapper personMapper;
+    @Mock
+    private TagMapper tagMapper;
+    @Mock
+    private PersonTagBindingMapper personTagBindingMapper;
+    @Mock
+    private ConversationTagBindingMapper conversationTagBindingMapper;
+    @Mock
+    private ChannelAdapterRegistry adapterRegistry;
+    @Mock
+    private PolicyGroupMapper policyGroupMapper;
+    @Mock
+    private PolicyEngine policyEngine;
+    @Mock
+    private AccountSelector accountSelector;
+    @Mock
+    private ChannelAdapter adapter;
+
+    @InjectMocks
+    private SendService sendService;
+
+    @BeforeEach
+    void setUp() {
+        when(adapterRegistry.getAdapter(ChannelType.WECHAT_PERSONAL)).thenReturn(adapter);
+    }
+
+    @Test
+    void dispatchRecordSucceedsAfterFailoverToBackup() {
+        SendRecord record = createRecord();
+        Long primaryAccountId = 100L;
+        Long backupAccountId = 200L;
+
+        when(accountSelector.selectSendAccounts("tenant", 1L, ChannelType.WECHAT_PERSONAL, "primary"))
+                .thenReturn(Arrays.asList(primaryAccountId, backupAccountId));
+        when(accountMapper.selectById(primaryAccountId)).thenReturn(createPywechatAccount(primaryAccountId, "wxid-primary"));
+        when(accountMapper.selectById(backupAccountId)).thenReturn(createPywechatAccount(backupAccountId, "wxid-backup"));
+
+        SendMessageResult failureResult = new SendMessageResult();
+        failureResult.setSuccess(false);
+        failureResult.setMessage("login expired");
+
+        SendMessageResult successResult = new SendMessageResult();
+        successResult.setSuccess(true);
+        successResult.setChannelMessageId("msg-backup-001");
+
+        when(adapter.sendMessage(any(SendMessageRequest.class))).thenReturn(failureResult, successResult);
+
+        sendService.dispatchRecord(record);
+
+        assertEquals(2, record.getSendStatus().intValue());
+        assertEquals(backupAccountId, record.getAccountId());
+
+        ArgumentCaptor<SendMessageRequest> requestCaptor = ArgumentCaptor.forClass(SendMessageRequest.class);
+        verify(adapter, times(2)).sendMessage(requestCaptor.capture());
+        List<SendMessageRequest> requests = requestCaptor.getAllValues();
+        assertEquals("wxid-primary", requests.get(0).getExtra().get("account_id"));
+        assertEquals("wxid-backup", requests.get(1).getExtra().get("account_id"));
+
+        ArgumentCaptor<ChannelAccount> accountCaptor = ArgumentCaptor.forClass(ChannelAccount.class);
+        verify(accountMapper, times(1)).updateById(accountCaptor.capture());
+        ChannelAccount markedAccount = accountCaptor.getValue();
+        assertEquals(primaryAccountId, markedAccount.getId());
+        assertEquals(2, markedAccount.getRiskLevel().intValue());
+        assertEquals(0, markedAccount.getOnlineStatus().intValue());
+    }
+
+    @Test
+    void dispatchRecordFailsWhenAllAccountsUnhealthy() {
+        SendRecord record = createRecord();
+        Long accountId = 100L;
+
+        when(accountSelector.selectSendAccounts("tenant", 1L, ChannelType.WECHAT_PERSONAL, "primary"))
+                .thenReturn(Collections.singletonList(accountId));
+        when(accountMapper.selectById(accountId)).thenReturn(createPywechatAccount(accountId, "wxid-primary"));
+
+        SendMessageResult failureResult = new SendMessageResult();
+        failureResult.setSuccess(false);
+        failureResult.setMessage("network error");
+        when(adapter.sendMessage(any(SendMessageRequest.class))).thenReturn(failureResult);
+
+        sendService.dispatchRecord(record);
+
+        assertEquals(3, record.getSendStatus().intValue());
+        assertEquals(accountId, record.getAccountId());
+
+        verify(adapter, times(1)).sendMessage(any(SendMessageRequest.class));
+
+        ArgumentCaptor<ChannelAccount> accountCaptor = ArgumentCaptor.forClass(ChannelAccount.class);
+        verify(accountMapper, times(1)).updateById(accountCaptor.capture());
+        ChannelAccount markedAccount = accountCaptor.getValue();
+        assertEquals(2, markedAccount.getRiskLevel().intValue());
+        assertEquals(0, markedAccount.getOnlineStatus().intValue());
+
+        Map<String, Object> result = JsonUtils.fromJson(record.getChannelResult(), Map.class);
+        assertNotNull(result);
+        assertEquals("all_accounts_failed", result.get("error"));
+        List<?> attempts = (List<?>) result.get("attempts");
+        assertFalse(attempts.isEmpty());
+        assertEquals(accountId, ((Number) ((Map<?, ?>) attempts.get(0)).get("account_id")).longValue());
+    }
+
+    @Test
+    void dispatchRecordFailsWithNoHealthyAccount() {
+        SendRecord record = createRecord();
+
+        when(accountSelector.selectSendAccounts("tenant", 1L, ChannelType.WECHAT_PERSONAL, "primary"))
+                .thenReturn(Collections.emptyList());
+
+        sendService.dispatchRecord(record);
+
+        assertEquals(3, record.getSendStatus().intValue());
+        verify(adapter, never()).sendMessage(any(SendMessageRequest.class));
+        verify(accountMapper, never()).updateById(any(ChannelAccount.class));
+
+        Map<String, Object> result = JsonUtils.fromJson(record.getChannelResult(), Map.class);
+        assertEquals("no_healthy_account", result.get("error"));
+    }
+
+    private SendRecord createRecord() {
+        SendRecord record = new SendRecord();
+        record.setId(1L);
+        record.setTaskId("SND001");
+        record.setTenantCode("tenant");
+        record.setConversationId(1L);
+        record.setAccountId(100L);
+        record.setChannelType("wechat_personal");
+        record.setChannelStrategy("{\"channel_type\":\"wechat_personal\",\"strategy\":\"primary\"}");
+        record.setContentType("text");
+        record.setContentBody("{\"text\":\"hello\"}");
+        record.setSendStatus(0);
+        return record;
+    }
+
+    private ChannelAccount createPywechatAccount(Long id, String accountId) {
+        ChannelAccount account = new ChannelAccount();
+        account.setId(id);
+        account.setTenantCode("tenant");
+        account.setAccountType(3);
+        account.setChannelType("wechat_personal");
+        account.setAccountId(accountId);
+        account.setStatus(1);
+        account.setOnlineStatus(1);
+        account.setRiskLevel(1);
+        return account;
+    }
+}
diff --git a/backend/pom.xml b/backend/pom.xml
index 57c1d82..2557d3a 100644
--- a/backend/pom.xml
+++ b/backend/pom.xml
@@ -85,4 +85,15 @@
             </plugins>
         </pluginManagement>
     </build>
+
+    <repositories>
+        <repository>
+            <id>spring-milestones</id>
+            <name>Spring Milestones</name>
+            <url>https://repo.spring.io/milestone</url>
+            <snapshots>
+                <enabled>false</enabled>
+            </snapshots>
+        </repository>
+    </repositories>
 </project>
diff --git a/docker-compose.yml b/docker-compose.yml
index 32840e2..95228e7 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -5,17 +5,18 @@ services:
     image: mysql:8.0.36
     container_name: mci-mysql
     profiles: ["infra"]
+    restart: unless-stopped
     environment:
-      MYSQL_ROOT_PASSWORD: root
-      MYSQL_DATABASE: sino_mci
+      MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD:-root}
+      MYSQL_DATABASE: ${MYSQL_DATABASE:-sino_mci}
     ports:
-      - "3306:3306"
+      - "${MYSQL_PORT:-3306}:3306"
     volumes:
       - mci-mysql-data:/var/lib/mysql
     networks:
       - mci-network
     healthcheck:
-      test: ["CMD", "mysqladmin", "ping", "-h", "localhost", "-u", "root", "-proot"]
+      test: ["CMD-SHELL", "mysqladmin ping -h localhost -u root -p\"$${MYSQL_ROOT_PASSWORD}\" || exit 1"]
       interval: 5s
       timeout: 5s
       retries: 20
@@ -25,8 +26,9 @@ services:
     image: redis:7.2
     container_name: mci-redis
     profiles: ["infra"]
+    restart: unless-stopped
     ports:
-      - "6379:6379"
+      - "${REDIS_PORT:-6379}:6379"
     networks:
       - mci-network
     healthcheck:
@@ -40,16 +42,17 @@ services:
     image: rabbitmq:3.13-management
     container_name: mci-rabbitmq
     profiles: ["infra"]
+    restart: unless-stopped
     environment:
-      RABBITMQ_DEFAULT_USER: guest
-      RABBITMQ_DEFAULT_PASS: guest
+      RABBITMQ_DEFAULT_USER: ${RABBITMQ_DEFAULT_USER:-guest}
+      RABBITMQ_DEFAULT_PASS: ${RABBITMQ_DEFAULT_PASS:-guest}
     ports:
-      - "5672:5672"
-      - "15672:15672"
+      - "${RABBITMQ_AMQP_PORT:-5672}:5672"
+      - "${RABBITMQ_MGMT_PORT:-15672}:15672"
     networks:
       - mci-network
     healthcheck:
-      test: ["CMD", "rabbitmq-diagnostics", "ping"]
+      test: ["CMD-SHELL", "rabbitmq-diagnostics ping || exit 1"]
       interval: 5s
       timeout: 5s
       retries: 15
@@ -59,14 +62,21 @@ services:
     image: chrislusf/seaweedfs:3.62
     container_name: mci-seaweedfs
     profiles: ["infra"]
+    restart: unless-stopped
     ports:
-      - "9333:9333"
-      - "8888:8888"
+      - "${SEAWEEDFS_MASTER_PORT:-9333}:9333"
+      - "${SEAWEEDFS_S3_PORT:-8888}:8888"
     command: server -dir=/data
     volumes:
       - mci-seaweedfs-data:/data
     networks:
       - mci-network
+    healthcheck:
+      test: ["CMD-SHELL", "wget -qO- http://localhost:9333/cluster/status >/dev/null 2>&1 || exit 1"]
+      interval: 15s
+      timeout: 10s
+      retries: 8
+      start_period: 60s
 
   mci-server:
     build:
@@ -74,15 +84,22 @@ services:
       dockerfile: Dockerfile
     container_name: mci-server
     profiles: ["app"]
+    restart: unless-stopped
     ports:
-      - "8080:8080"
+      - "${MCI_SERVER_PORT:-8080}:8080"
     environment:
-      - SPRING_PROFILES_ACTIVE=dev
-      - SPRING_DATASOURCE_URL=jdbc:mysql://mci-mysql:3306/sino_mci?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai&useSSL=false&allowPublicKeyRetrieval=true
-      - SPRING_DATASOURCE_USERNAME=root
-      - SPRING_DATASOURCE_PASSWORD=root
+      - SPRING_PROFILES_ACTIVE=${SPRING_PROFILES_ACTIVE:-dev}
+      - SPRING_DATASOURCE_URL=jdbc:mysql://mci-mysql:3306/${MYSQL_DATABASE:-sino_mci}?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai&useSSL=false&allowPublicKeyRetrieval=true
+      - SPRING_DATASOURCE_USERNAME=${MYSQL_USER:-root}
+      - SPRING_DATASOURCE_PASSWORD=${MYSQL_ROOT_PASSWORD:-root}
       - SPRING_DATA_REDIS_HOST=mci-redis
+      - SPRING_DATA_REDIS_PORT=6379
       - SPRING_RABBITMQ_HOST=mci-rabbitmq
+      - SPRING_RABBITMQ_PORT=5672
+      - SPRING_RABBITMQ_USERNAME=${RABBITMQ_DEFAULT_USER:-guest}
+      - SPRING_RABBITMQ_PASSWORD=${RABBITMQ_DEFAULT_PASS:-guest}
+      - JAVA_OPTS=${JAVA_OPTS:--XX:+UseContainerSupport -XX:MaxRAMPercentage=75.0}
+      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
     networks:
       - mci-network
     depends_on:
@@ -105,8 +122,9 @@ services:
       dockerfile: Dockerfile
     container_name: mci-admin-web
     profiles: ["app"]
+    restart: unless-stopped
     ports:
-      - "80:80"
+      - "${ADMIN_WEB_PORT:-80}:80"
     networks:
       - mci-network
     depends_on:
@@ -119,10 +137,12 @@ services:
       dockerfile: Dockerfile
     container_name: mci-channel-service
     profiles: ["app"]
+    restart: unless-stopped
     ports:
-      - "8000:8000"
+      - "${CHANNEL_SERVICE_PORT:-8000}:8000"
     environment:
       - MCI_SERVER_URL=http://mci-server:8080/msg-platform
+      - OPENAI_API_KEY=${OPENAI_API_KEY:-}
     networks:
       - mci-network
     depends_on:
diff --git a/docs/superpowers/plans/2026-07-08-channel-conversation-task-boundary.md b/docs/superpowers/plans/2026-07-08-channel-conversation-task-boundary.md
new file mode 100644
index 0000000..4252a47
--- /dev/null
+++ b/docs/superpowers/plans/2026-07-08-channel-conversation-task-boundary.md
@@ -0,0 +1,577 @@
+# 渠道账号、会话与发送任务数据边界落地计划
+
+> **For agentic workers:** REQUIRED SUB-SKILL: Use superpowers:subagent-driven-development (recommended) or superpowers:executing-plans to implement this plan task-by-task. Steps use checkbox (`- [ ]`) syntax for tracking.
+
+**Goal:** 在现有 `mci-server` / `admin-web` 内完成方案 A：明确中台与业务系统的数据边界，保护业务字段不被企微同步覆盖；完善账号-会话收发主备绑定；增强发送任务目标解析校验；补齐前端测试发送与绑定配置 UI；最终跑通“第三方维护资源 → 任务发送 → 查询记录”的完整链路。
+
+**Architecture:** 沿用 `mci_send_record` 任务+日志合并表，通过 `target_type` + `target_value` 描述业务语义目标，由 `SendService` 解析为具体会话/人员并选择 `ChannelAccount` 实际发送。数据边界通过 Service 层校验与同步方法字段白名单实现。
+
+**Tech Stack:** Spring Boot 4.1 / Java 21 / MyBatis-Plus / MySQL 8 / RabbitMQ / Vue 3 / Element Plus / Docker Compose
+
+---
+
+## 文件结构
+
+| 文件 | 职责 | 操作 |
+|------|------|------|
+| `backend/mci-server/src/main/java/com/sino/mci/channel/service/ChannelAccountService.java` | 渠道账号初始化、同步通讯录/群聊 | 修改：同步时不覆盖业务字段 |
+| `backend/mci-server/src/main/java/com/sino/mci/channel/service/ConversationService.java` | 会话 CRUD、账号绑定、标签绑定 | 修改：校验 binding_type、支持 4 种绑定 |
+| `backend/mci-server/src/main/java/com/sino/mci/send/service/SendService.java` | 发送任务解析、拆解、调度 | 修改：目标存在性/租户隔离/账号可用性校验 |
+| `backend/mci-server/src/main/java/com/sino/mci/send/service/SendTarget.java` | 发送目标中间对象 | 修改：补充字段 |
+| `backend/mci-server/src/main/java/com/sino/mci/send/dto/SendTestRequest.java` | 测试发送请求 DTO | 修改：扩展字段 |
+| `admin-web/src/views/SendRecord.vue` | 发送记录与测试发送页面 | 修改：支持 tag/rule 测试 |
+| `admin-web/src/api/sendRecord.ts` | 发送记录 API 封装 | 修改（如需要） |
+| `admin-web/src/views/Conversation.vue` | 会话管理页面 | 修改：账号绑定抽屉 |
+| `admin-web/src/api/channel.ts` | 会话/账号 API 封装 | 修改（如需要） |
+
+---
+
+## Task 1：保护业务字段不被企微同步覆盖
+
+**Files:**
+- Modify: `backend/mci-server/src/main/java/com/sino/mci/channel/service/ChannelAccountService.java`
+- Test: 通过接口测试或单元测试验证同步后业务字段不变
+
+**背景：** 企微 `syncContacts` / `syncConversations` 只能写入渠道侧字段，不能覆盖 `mci_person.institution_id/supplier_id`、`mci_conversation.institution_id/supplier_id/contract_id/channel_code`。
+
+- [ ] **Step 1: 读取现有 `syncContacts` 与 `syncConversations` 方法**
+
+  ```bash
+  sed -n '1,100p' backend/mci-server/src/main/java/com/sino/mci/channel/service/ChannelAccountService.java
+  ```
+
+- [ ] **Step 2: 在更新 Person 前读取旧记录并保留业务字段**
+
+  修改点：找到 `personMapper.updateById(person)` 或类似逻辑，改为：
+
+  ```java
+  Person existing = personMapper.selectById(person.getId());
+  if (existing != null) {
+      person.setInstitutionId(existing.getInstitutionId());
+      person.setSupplierId(existing.getSupplierId());
+      // person_type 如需保护也一并保留
+  }
+  ```
+
+- [ ] **Step 3: 在更新 Conversation 前读取旧记录并保留业务字段**
+
+  修改点：找到 `conversationMapper.updateById(conversation)` 或类似逻辑，改为：
+
+  ```java
+  Conversation existing = conversationMapper.selectById(conversation.getId());
+  if (existing != null) {
+      conversation.setInstitutionId(existing.getInstitutionId());
+      conversation.setSupplierId(existing.getSupplierId());
+      conversation.setContractId(existing.getContractId());
+      conversation.setChannelCode(existing.getChannelCode());
+  }
+  ```
+
+- [ ] **Step 4: 编译验证**
+
+  ```bash
+  cd /Users/marsal/Projects/sino-project/sino-mci/backend/mci-server
+  ./mvnw compile -q
+  ```
+
+  Expected: BUILD SUCCESS
+
+- [ ] **Step 5: 写接口回归测试脚本（curl 或 devtools）**
+
+  1. 通过 API 创建 Conversation 并设置 `contractId=100`；
+  2. 调用 `sync-conversations`；
+  3. 查询 Conversation，断言 `contractId` 仍为 `100`。
+
+- [ ] **Step 6: Commit**
+
+  ```bash
+  git add backend/mci-server/src/main/java/com/sino/mci/channel/service/ChannelAccountService.java
+  git commit -m "fix: protect business fields during wecom sync"
+  ```
+
+---
+
+## Task 2：账号-会话绑定支持收发主备 4 种类型
+
+**Files:**
+- Modify: `backend/mci-server/src/main/java/com/sino/mci/channel/service/ConversationService.java`
+- Modify: `backend/mci-server/src/main/java/com/sino/mci/channel/dto/BindConversationAccountRequest.java`
+- Modify: `backend/mci-server/src/main/java/com/sino/mci/send/service/SendService.java`
+- Test: 接口测试
+
+**背景：** `mci_channel_account_conversation.binding_type` 已定义 1发送主号/2发送备用号/3接收主号/4接收备用号，需要确保 Service 层正确识别并使用。
+
+- [ ] **Step 1: 读取 `BindConversationAccountRequest` 与 `ConversationService.bindAccount`**
+
+  ```bash
+  cat backend/mci-server/src/main/java/com/sino/mci/channel/dto/BindConversationAccountRequest.java
+  sed -n '1,80p' backend/mci-server/src/main/java/com/sino/mci/channel/service/ConversationService.java
+  ```
+
+- [ ] **Step 2: 扩展 DTO 支持全部 binding_type**
+
+  若 DTO 只有 `accountId`，确保包含：
+
+  ```java
+  @Data
+  public class BindConversationAccountRequest {
+      @NotNull
+      private Long accountId;
+      @NotNull
+      @Range(min = 1, max = 4)
+      private Integer bindingType;
+      private Integer sortOrder;
+  }
+  ```
+
+- [ ] **Step 3: 在 `ConversationService.bindAccount` 中按 binding_type 处理**
+
+  逻辑示例：
+
+  ```java
+  ChannelAccountConversation binding = new ChannelAccountConversation();
+  binding.setAccountId(request.getAccountId());
+  binding.setConversationId(conversationId);
+  binding.setBindingType(request.getBindingType());
+  binding.setSortOrder(request.getSortOrder() != null ? request.getSortOrder() : 0);
+  binding.setStatus(1);
+  // 先删除同类型同账号旧绑定，再插入
+  channelAccountConversationMapper.delete(
+      new LambdaQueryWrapper<ChannelAccountConversation>()
+          .eq(ChannelAccountConversation::getAccountId, request.getAccountId())
+          .eq(ChannelAccountConversation::getConversationId, conversationId)
+          .eq(ChannelAccountConversation::getBindingType, request.getBindingType()));
+  channelAccountConversationMapper.insert(binding);
+  ```
+
+- [ ] **Step 4: 修改 `SendService.selectSendAccount` 按发送主备选择**
+
+  当前实现若已支持主备，检查逻辑是否优先 `binding_type=1`，再 `binding_type=2`，且只选择 `status=1` 的账号。若未实现，补充：
+
+  ```java
+  private Long selectSendAccount(String tenantCode, Long conversationId, ChannelType channelType,
+                                 Map<String, Object> channelStrategy) {
+      List<Integer> bindingTypes = Arrays.asList(1, 2); // 发送主号、发送备用号
+      for (Integer bindingType : bindingTypes) {
+          List<ChannelAccountConversation> bindings = channelAccountConversationMapper.selectList(
+              new LambdaQueryWrapper<ChannelAccountConversation>()
+                  .eq(ChannelAccountConversation::getConversationId, conversationId)
+                  .eq(ChannelAccountConversation::getBindingType, bindingType)
+                  .eq(ChannelAccountConversation::getStatus, 1)
+                  .orderByAsc(ChannelAccountConversation::getSortOrder));
+          for (ChannelAccountConversation binding : bindings) {
+              ChannelAccount account = accountMapper.selectById(binding.getAccountId());
+              if (account != null && tenantCode.equals(account.getTenantCode())
+                      && channelType.name().equalsIgnoreCase(account.getChannelType())
+                      && account.getStatus() == 1) {
+                  return account.getId();
+              }
+          }
+      }
+      return null;
+  }
+  ```
+
+- [ ] **Step 5: 编译并跑现有测试**
+
+  ```bash
+  cd /Users/marsal/Projects/sino-project/sino-mci/backend/mci-server
+  ./mvnw test -q
+  ```
+
+  Expected: BUILD SUCCESS（若测试失败先修复）
+
+- [ ] **Step 6: Commit**
+
+  ```bash
+  git add backend/mci-server/src/main/java/com/sino/mci/channel/service/ConversationService.java
+  git add backend/mci-server/src/main/java/com/sino/mci/channel/dto/BindConversationAccountRequest.java
+  git add backend/mci-server/src/main/java/com/sino/mci/send/service/SendService.java
+  git commit -m "feat: support send/receive primary/backup account binding"
+  ```
+
+---
+
+## Task 3：发送目标解析增加校验与错误信息
+
+**Files:**
+- Modify: `backend/mci-server/src/main/java/com/sino/mci/send/service/SendService.java`
+- Modify: `backend/mci-server/src/main/java/com/sino/mci/send/dto/SendTestRequest.java`
+- Test: 接口测试
+
+**背景：** 当前 `resolveConversationTarget` / `resolvePersonTarget` 已做基本校验，但缺少对账号可用状态、租户隔离、单聊 channel_type 一致性的校验。
+
+- [ ] **Step 1: 读取 `resolveConversationTarget` 与 `resolvePersonTarget`**
+
+  ```bash
+  sed -n '320,370p' backend/mci-server/src/main/java/com/sino/mci/send/service/SendService.java
+  ```
+
+- [ ] **Step 2: 增加账号可用性校验**
+
+  在 `resolveConversationTarget` 返回前校验选中的 `accountId`：
+
+  ```java
+  ChannelAccount account = accountMapper.selectById(accountId);
+  if (account == null || !tenantCode.equals(account.getTenantCode()) || account.getStatus() != 1) {
+      throw new BusinessException("会话没有可用的发送账号: " + conversationId);
+  }
+  ```
+
+- [ ] **Step 3: 增加单聊 channel_type 一致性校验**
+
+  在 `resolvePersonTarget` 中：
+
+  ```java
+  ChannelAccount account = accountMapper.selectById(accountId);
+  if (account == null || !tenantCode.equals(account.getTenantCode()) || account.getStatus() != 1) {
+      throw new BusinessException("租户没有可用的发送账号: channel=" + channelType);
+  }
+  if (!channelType.name().equalsIgnoreCase(account.getChannelType())) {
+      throw new BusinessException("单聊发送账号渠道类型与目标身份不一致");
+  }
+  ```
+
+- [ ] **Step 4: 扩展 `SendTestRequest` 以支持 tag/rule 测试**
+
+  当前 `SendTestRequest` 可能只继承 `SendRequest` 或字段相同。确认它包含：
+
+  ```java
+  @Data
+  public class SendTestRequest {
+      @NotBlank
+      private String targetType;
+      @NotNull
+      private Map<String, Object> targetValue;
+      @NotBlank
+      private String contentType;
+      @NotNull
+      private Map<String, Object> content;
+      private Map<String, Object> channelStrategy;
+      private String callbackUrl;
+  }
+  ```
+
+- [ ] **Step 5: 编译并测试**
+
+  ```bash
+  cd /Users/marsal/Projects/sino-project/sino-mci/backend/mci-server
+  ./mvnw test -q
+  ```
+
+- [ ] **Step 6: Commit**
+
+  ```bash
+  git add backend/mci-server/src/main/java/com/sino/mci/send/service/SendService.java
+  git add backend/mci-server/src/main/java/com/sino/mci/send/dto/SendTestRequest.java
+  git commit -m "feat: add send target validation and extend test request"
+  ```
+
+---
+
+## Task 4：前端测试发送支持 tag / rule 目标
+
+**Files:**
+- Modify: `admin-web/src/views/SendRecord.vue`
+- Modify（如需要）: `admin-web/src/api/sendRecord.ts`
+
+**背景：** 当前 `SendRecord.vue` 测试发送只支持 conversation / person，需要增加 tag / rule，方便运营人员验证按标签/规则发送。
+
+- [ ] **Step 1: 读取现有测试表单**
+
+  ```bash
+  sed -n '40,80p' admin-web/src/views/SendRecord.vue
+  ```
+
+- [ ] **Step 2: 在目标类型选择器中增加 tag / rule**
+
+  ```vue
+  <el-select v-model="testForm.targetType" style="width: 140px">
+    <el-option label="会话" value="conversation" />
+    <el-option label="人员" value="person" />
+    <el-option label="标签" value="tag" />
+    <el-option label="规则" value="rule" />
+  </el-select>
+  ```
+
+- [ ] **Step 3: 增加 tag / rule 的目标输入表单**
+
+  在 `buildTargetValue` 中补充：
+
+  ```typescript
+  if (testForm.targetType === 'tag' && selectedTagId.value) {
+    return { tag_id: Number(selectedTagId.value), scope: tagScope.value }
+  }
+  if (testForm.targetType === 'rule' && ruleJson.value) {
+    try {
+      return JSON.parse(ruleJson.value)
+    } catch {
+      ElMessage.error('规则 JSON 格式错误')
+      return {}
+    }
+  }
+  ```
+
+  模板中增加对应输入控件：
+
+  ```vue
+  <el-form-item v-if="testForm.targetType === 'tag'" label="标签">
+    <el-select v-model="selectedTagId" placeholder="选择标签" clearable>
+      <el-option v-for="t in tags" :key="t.id" :label="t.tagName" :value="t.id" />
+    </el-select>
+    <el-select v-model="tagScope" style="width: 120px; margin-left: 8px;">
+      <el-option label="全部" value="all" />
+      <el-option label="会话" value="conversation" />
+      <el-option label="人员" value="person" />
+    </el-select>
+  </el-form-item>
+
+  <el-form-item v-if="testForm.targetType === 'rule'" label="规则 JSON">
+    <el-input v-model="ruleJson" type="textarea" :rows="4" placeholder='{"logic":"and","rules":[{"field":"tag","operator":"eq","value":1}]}' />
+  </el-form-item>
+  ```
+
+- [ ] **Step 4: 加载标签列表**
+
+  ```typescript
+  import { listTags } from '@/api/tag'
+
+  const tags = ref<any[]>([])
+  const selectedTagId = ref<number | null>(null)
+  const tagScope = ref('all')
+  const ruleJson = ref('')
+
+  async function loadTags() {
+    const res: any = await listTags()
+    tags.value = res.data || []
+  }
+
+  onMounted(() => {
+    loadConversations()
+    loadTags()
+    loadRecords()
+    loadStatistics()
+  })
+  ```
+
+- [ ] **Step 5: 本地构建验证**
+
+  ```bash
+  cd /Users/marsal/Projects/sino-project/sino-mci/admin-web
+  npm run build
+  ```
+
+  Expected: 构建成功，无类型错误。
+
+- [ ] **Step 6: Commit**
+
+  ```bash
+  git add admin-web/src/views/SendRecord.vue
+  git add admin-web/src/api/sendRecord.ts
+  git commit -m "feat(ui): support tag and rule target in test send"
+  ```
+
+---
+
+## Task 5：会话管理页面增加账号绑定抽屉
+
+**Files:**
+- Modify: `admin-web/src/views/Conversation.vue`
+- Modify（如需要）: `admin-web/src/api/channel.ts`
+
+**背景：** 当前 `ConversationController` 已提供 `bind-account` 接口，前端需要 UI 配置发送主备、接收主备。
+
+- [ ] **Step 1: 读取现有 Conversation.vue**
+
+  ```bash
+  sed -n '1,80p' admin-web/src/views/Conversation.vue
+  ```
+
+- [ ] **Step 2: 在表格操作列增加“绑定账号”按钮**
+
+  ```vue
+  <el-button link type="primary" @click="openBindAccountDialog(row)">绑定账号</el-button>
+  ```
+
+- [ ] **Step 3: 新增绑定抽屉/弹窗**
+
+  ```vue
+  <el-dialog v-model="bindDialogVisible" title="绑定账号" width="500px">
+    <el-form :model="bindForm" label-width="100px">
+      <el-form-item label="账号">
+        <el-select v-model="bindForm.accountId" placeholder="选择渠道账号">
+          <el-option v-for="a in accounts" :key="a.id" :label="a.accountName" :value="a.id" />
+        </el-select>
+      </el-form-item>
+      <el-form-item label="绑定类型">
+        <el-select v-model="bindForm.bindingType">
+          <el-option label="发送主号" :value="1" />
+          <el-option label="发送备用号" :value="2" />
+          <el-option label="接收主号" :value="3" />
+          <el-option label="接收备用号" :value="4" />
+        </el-select>
+      </el-form-item>
+      <el-form-item label="优先级">
+        <el-input-number v-model="bindForm.sortOrder" :min="0" />
+      </el-form-item>
+    </el-form>
+    <template #footer>
+      <el-button @click="bindDialogVisible = false">取消</el-button>
+      <el-button type="primary" @click="handleBindAccount">保存</el-button>
+    </template>
+  </el-dialog>
+  ```
+
+- [ ] **Step 4: 实现数据与接口调用**
+
+  ```typescript
+  import { bindConversationAccount, listChannelAccounts } from '@/api/channel'
+
+  const bindDialogVisible = ref(false)
+  const currentConversation = ref<any>(null)
+  const accounts = ref<any[]>([])
+  const bindForm = reactive({ accountId: undefined, bindingType: 1, sortOrder: 0 })
+
+  async function openBindAccountDialog(row: any) {
+    currentConversation.value = row
+    bindForm.accountId = undefined
+    bindForm.bindingType = 1
+    bindForm.sortOrder = 0
+    const res: any = await listChannelAccounts()
+    accounts.value = (res.data || []).filter((a: any) => a.channelType === row.channelType)
+    bindDialogVisible.value = true
+  }
+
+  async function handleBindAccount() {
+    if (!bindForm.accountId || !currentConversation.value) return
+    await bindConversationAccount(currentConversation.value.id, bindForm)
+    ElMessage.success('绑定成功')
+    bindDialogVisible.value = false
+    await loadConversations()
+  }
+  ```
+
+- [ ] **Step 5: 确认 API 封装存在**
+
+  若 `admin-web/src/api/channel.ts` 没有 `bindConversationAccount`，补充：
+
+  ```typescript
+  export function bindConversationAccount(conversationId: number, data: any) {
+    return request.post(`/api/v1/conversation/${conversationId}/bind-account`, data)
+  }
+  ```
+
+- [ ] **Step 6: 构建验证**
+
+  ```bash
+  cd /Users/marsal/Projects/sino-project/sino-mci/admin-web
+  npm run build
+  ```
+
+- [ ] **Step 7: Commit**
+
+  ```bash
+  git add admin-web/src/views/Conversation.vue
+  git add admin-web/src/api/channel.ts
+  git commit -m "feat(ui): conversation account binding for send/receive primary/backup"
+  ```
+
+---
+
+## Task 6：端到端集成验证
+
+**Files:**
+- 全栈
+- Test: 手工或脚本
+
+- [ ] **Step 1: 重启服务确保最新代码生效**
+
+  ```bash
+  cd /Users/marsal/Projects/sino-project/sino-mci
+  docker compose down
+  docker compose up -d --build
+  ```
+
+- [ ] **Step 2: 等待服务 healthy**
+
+  ```bash
+  docker compose ps
+  ```
+
+  Expected: `mci-server`, `admin-web`, `mysql`, `rabbitmq`, `redis`, `seaweedfs` 均为 healthy。
+
+- [ ] **Step 3: 登录并创建测试租户/用户**
+
+  通过 admin-web 登录全局管理员，创建租户 `test`，创建租户管理员。
+
+- [ ] **Step 4: 创建渠道主体与账号**
+
+  在 admin-web 的“渠道主体”页面创建企微主体；
+  在“渠道账号”页面调用 init 初始化一个测试账号（可用 mock 或真实企微测试号）。
+
+- [ ] **Step 5: 创建 Person 并绑定 ChannelIdentity**
+
+  通过 API 或页面创建 Person，并绑定 `channel_type=wecom` 的 identity。
+
+- [ ] **Step 6: 创建 Conversation 并绑定发送账号**
+
+  通过 API 或页面创建 Conversation，绑定发送主号。
+
+- [ ] **Step 7: 测试发送**
+
+  在 `SendRecord.vue` 页面选择 conversation 目标，输入文本，点击“测试发送”。
+
+- [ ] **Step 8: 查询记录**
+
+  发送后刷新 `SendRecord.vue` 列表，确认出现一条 `send_status` 记录；
+  若使用 mock 适配器，状态应为 `success`；
+  若使用真实企微，状态按实际返回。
+
+- [ ] **Step 9: 标签发送测试**
+
+  创建标签，绑定到 Person/Conversation；
+  在 `SendRecord.vue` 选择标签目标发送；
+  确认产生多条 `mci_send_record`。
+
+- [ ] **Step 10: 验证业务字段保护**
+
+  调用 API 设置 Conversation 的 `contractId`；
+  调用 `sync-conversations`；
+  查询 Conversation，确认 `contractId` 未被覆盖。
+
+- [ ] **Step 11: 写验证报告并 Commit**
+
+  在 `docs/superpowers/plans/2026-07-08-channel-conversation-task-boundary.md` 末尾或新建文件记录验证结果。
+
+  ```bash
+  git add docs/superpowers/plans/2026-07-08-channel-conversation-task-boundary.md
+  git commit -m "docs: add verification report for channel-conversation-task boundary"
+  ```
+
+---
+
+## 自测清单
+
+| 检查项 | 验证方式 |
+|--------|---------|
+| 企微同步不覆盖 `contractId` / `institutionId` / `supplierId` | Task 1 回归测试 |
+| 会话可绑定发送主号/备用号/接收主号/接收备用号 | Task 2 接口测试 + Task 5 UI |
+| 发送任务按主备顺序选号 | Task 2 单元/接口测试 |
+| 发送目标解析对不可用账号给出明确错误 | Task 3 接口测试 |
+| 前端支持 conversation/person/tag/rule 四种测试发送 | Task 4 UI 点击 |
+| 前端会话页面可绑定账号 | Task 5 UI 点击 |
+| Docker 全栈 healthy | Task 6 Step 2 |
+| 端到端发送成功并可在记录列表查看 | Task 6 Step 7-8 |
+
+---
+
+## 执行方式
+
+**Plan complete and saved to `docs/superpowers/plans/2026-07-08-channel-conversation-task-boundary.md`.**
+
+Two execution options:
+
+1. **Subagent-Driven (recommended)** - Dispatch a fresh coder subagent per task, review between tasks, fast iteration.
+2. **Inline Execution** - Execute tasks in this session using executing-plans, batch execution with checkpoints.
+
+Recommended: **Subagent-Driven** for parallelizable UI/backend work and clear boundaries.
diff --git a/docs/superpowers/specs/2026-07-08-channel-conversation-task-boundary-design.md b/docs/superpowers/specs/2026-07-08-channel-conversation-task-boundary-design.md
new file mode 100644
index 0000000..da013d3
--- /dev/null
+++ b/docs/superpowers/specs/2026-07-08-channel-conversation-task-boundary-design.md
@@ -0,0 +1,178 @@
+# 渠道账号、会话与发送任务数据边界设计
+
+> **版本**：v1.0  
+> **日期**：2026-07-08  
+> **状态**：已确认，待实施  
+> **关联文档**：`docs/architecture/2026-07-06-message-customer-interaction-design.md`
+
+---
+
+## 1. 背景与目标
+
+在 `2026-07-06-message-customer-interaction-design.md` 已完成整体架构与数据模型设计的基础上，进一步明确中台与业务系统之间的数据边界，以及“配置 + 选取人员 → 任务发送”的最小可用实现路径。
+
+**本次目标**：
+- 业务系统通过中台 API 维护人员（Person）、渠道身份（ChannelIdentity）、会话（Conversation）、群聊关系；
+- 中台只保存渠道侧最小数据集，业务属性（机构、供应商、合同等）由业务系统写入；
+- 企微官方接口只能拿到有限信息（`userid`、`external_userid`、`chat_id`、群名等），同步接口不得覆盖业务系统写入的字段；
+- 所有出站发送通过 `/api/v1/send` 任务接口驱动，任务与发送日志合并为 `mci_send_record`；
+- 当前阶段不拆分 `openapi` 包，所有修改在现有 `mci-server` 与 `admin-web` 内完成；跑通后下一阶段再独立拆分第三方接入包。
+
+---
+
+## 2. 数据边界设计
+
+### 2.1 中台保存 vs 业务系统维护
+
+| 数据 | 中台保存 | 业务系统维护 | 说明 |
+|------|---------|-------------|------|
+| 人员基础信息 `mci_person` | 是 | 可同步 | 中台保存 `person_code`、`person_name`、`phone`、`person_type`；业务系统可写入或同步，中台不强制唯一来源。 |
+| 业务属性（机构/供应商/合同） | 是字段，业务系统写入 | 是 | `institution_id`、`supplier_id`、`contract_id` 由业务系统赋值，企微同步不覆盖。 |
+| 渠道身份 `mci_channel_identity` | 是 | 可同步 | 中台保存渠道用户 ID（`userid`、`external_userid`、个微 `wxid` 等），属于渠道侧最小数据集。 |
+| 会话 `mci_conversation` | 是 | 可同步/创建 | 中台保存 `channel_conversation_id`、群名、群主等；业务属性由业务系统写入。 |
+| 标签 `mci_tag` | 是 | 可同步 | 标签表达角色、合同、机构、供应商等业务属性，支持层级；业务系统可通过 API 维护。 |
+| 账号-会话绑定 `mci_channel_account_conversation` | 是 | 否 | 发送主备、接收主备属于渠道调度能力，由中台管理。 |
+| 发送内容 | 否（接收最终内容） | 是 | 业务系统渲染最终消息后调用中台发送接口。 |
+| 模板与变量 | 否 | 是 | 中台不保存模板。 |
+
+### 2.2 企微同步的边界
+
+`ChannelAccountService.syncContacts` 与 `syncConversations` 只能写入/更新以下字段：
+
+- `mci_person`：`person_name`（企微返回的昵称/姓名）、`phone`（如有）
+- `mci_channel_identity`：`channel_user_id`、`channel_user_name`、`subject_id`、`channel_type`
+- `mci_conversation`：`conversation_type`、`channel_type`、`channel_conversation_id`、`conversation_name`、`owner_account_id`、`subject_id`、`create_source=1`
+- `mci_conversation_participant`：群成员关系
+
+**禁止行为**：
+- 不得覆盖 `institution_id`、`supplier_id`、`contract_id`；
+- 不得删除业务系统已绑定的标签；
+- 不得修改 `channel_account_conversation` 中业务系统未授权的主备绑定。
+
+---
+
+## 3. 发送任务模型
+
+沿用 `mci_send_record` 单表设计：一次 API 调用产生一个 `task_id`，每个最终目标（人/会话）一条记录。
+
+### 3.1 支持的目标类型
+
+| target_type | 说明 | target_value 示例 |
+|-------------|------|-------------------|
+| `conversation` | 单个会话 | `{"conversation_id": 1001}` |
+| `person` | 单个联系人（单聊） | `{"person_id": 2001}` |
+| `person_list` | 联系人列表 | `{"person_ids": [2001, 2002]}` |
+| `tag` | 标签人群/群聊 | `{"tag_id": 3001, "scope": "all"}` |
+| `rule` | 复合受众规则 | `{"logic": "and", "rules": [...]}` |
+
+### 3.2 渠道策略
+
+`channel_strategy` 描述渠道选择偏好：
+
+```json
+{
+  "channel_type": "wecom",
+  "strategy": "primary",
+  "fallback": true
+}
+```
+
+中台根据目标解析结果选择实际账号：
+- 群聊：从 `mci_channel_account_conversation` 取发送主号，主号不可用 fallback 到备用号；
+- 单聊：取目标人对应的 `ChannelIdentity`，再选择默认 `ChannelAccount`。
+
+### 3.3 结果回调
+
+发送请求可携带 `callback_url`，任务完成后按条或按任务聚合回调业务系统。
+
+---
+
+## 4. 本次实施范围（方案 A）
+
+### 4.1 后端
+
+1. **校验与边界保护**
+   - 在 `ConversationService`、`ChannelAccountService` 的同步方法中增加“业务字段保护”：企微同步不覆盖 `institution_id`、`supplier_id`、`contract_id`。
+   - 在 `SendService.resolveByType` 中增加目标存在性、租户隔离、账号可用性校验。
+
+2. **账号-会话绑定补全**
+   - 确认 `ConversationController.bindAccount` 支持 `binding_type`：1 发送主号、2 发送备用号、3 接收主号、4 接收备用号。
+   - 确认 `SendService.selectSendAccount` 按主备顺序选择。
+
+3. **发送任务端到端**
+   - 验证 `POST /api/v1/send`、`POST /api/v1/send/test` 可正常创建任务、拆解记录、返回 `task_id`。
+   - 验证 `SendMessageConsumer` 可调用 `ChannelAdapter` 实际发送并回写状态。
+
+4. **渠道账号初始化**
+   - 验证 `POST /api/v1/channel-account/init` 支持企微内部账号、企微应用、个微、钉钉/飞书机器人；返回初始化结果或二维码信息。
+
+5. **会话/群聊同步**
+   - 验证 `POST /api/v1/channel-account/{account_id}/sync-conversations` 能拉取账号所在群聊并创建 `Conversation`、`ConversationParticipant`、`ChannelAccountConversation` 默认绑定。
+
+### 4.2 前端
+
+1. **发送页面完善**
+   - `SendRecord.vue` 已支持测试发送和记录查询，补充“选择标签发送”和“选择规则发送”的测试入口。
+   - 在会话/人员列表中提供“发送消息”快捷入口，跳转或填充 `SendRecord.vue` 测试表单。
+
+2. **账号-群绑定页面**
+   - 在 `Conversation.vue` 或新增页面中，支持为会话绑定发送主备号、接收主备号。
+
+3. **标签层级展示**
+   - `Tag.vue` 已支持层级，确认在人员/会话绑定时可以展示多级标签并直接选择。
+
+4. **管理后台权限**
+   - 确认租户管理员、运营操作员、只读用户三类角色已落地，页面按钮按角色显隐。
+
+### 4.3 测试验证
+
+1. **单元/接口测试**
+   - 发送目标解析：conversation、person、tag、rule；
+   - 同步边界：企微同步不覆盖业务字段；
+   - 主备切换：发送主号不可用时启用备用号。
+
+2. **端到端流程**
+   - 使用 mock 渠道适配器或企微测试企业号，完成：
+     1. 创建租户/用户；
+     2. 创建渠道主体；
+     3. 初始化渠道账号；
+     4. 同步/创建会话；
+     5. 绑定发送账号；
+     6. 调用发送任务；
+     7. 查询发送记录与统计。
+
+---
+
+## 5. 验收标准
+
+- [ ] 第三方平台可通过 API 完成：创建 Person、绑定 ChannelIdentity、创建/更新 Conversation、绑定标签、绑定发送账号；
+- [ ] 企微 `sync-contacts` / `sync-conversations` 不覆盖 `institution_id`、`supplier_id`、`contract_id`；
+- [ ] `POST /api/v1/send` 支持 conversation / person / person_list / tag / rule 五种目标类型；
+- [ ] 发送任务按目标拆解为 `mci_send_record` 记录，可查询任务状态、记录列表、统计；
+- [ ] 前端可在“会话/人员/标签”维度完成测试发送，并查看发送记录；
+- [ ] Docker 全栈服务健康，接口可通。
+
+---
+
+## 6. 未来工作
+
+下一阶段（方案 A 验证通过后）将拆分独立的 `openapi` 包：
+- 路径前缀 `/api/v1/open/**`；
+- 面向业务系统的 DTO 更严格，隐藏内部状态字段；
+- 独立的鉴权方式（`X-Tenant-Code` + `X-App-Key`）；
+- 管理后台 API 与第三方 API 代码分离，便于文档生成和权限控制。
+
+---
+
+## 7. 关键文件清单
+
+| 模块 | 文件 |
+|------|------|
+| 发送核心 | `backend/mci-server/src/main/java/com/sino/mci/send/service/SendService.java` |
+| 发送控制器 | `backend/mci-server/src/main/java/com/sino/mci/send/controller/SendController.java` |
+| 会话管理 | `backend/mci-server/src/main/java/com/sino/mci/channel/service/ConversationService.java` |
+| 渠道账号 | `backend/mci-server/src/main/java/com/sino/mci/channel/service/ChannelAccountService.java` |
+| 人员管理 | `backend/mci-server/src/main/java/com/sino/mci/crm/service/PersonService.java` |
+| 发送页面 | `admin-web/src/views/SendRecord.vue` |
+| 会话页面 | `admin-web/src/views/Conversation.vue` |
+| 标签页面 | `admin-web/src/views/Tag.vue` |
diff --git a/docs/testing/2026-07-07-test-plan.md b/docs/testing/2026-07-07-test-plan.md
new file mode 100644
index 0000000..fe8d0fd
--- /dev/null
+++ b/docs/testing/2026-07-07-test-plan.md
@@ -0,0 +1,326 @@
+# sino-mci 测试补齐计划
+
+> **日期**：2026-07-07  
+> **范围**：backend（mci-server）单元/集成测试、API 冒烟测试、前端手工测试、Chrome DevTools 测试场景、Docker 部署验证  
+> **执行标准命令**：见第 7 节
+
+---
+
+## 1. 单元测试（已存在）
+
+| 测试类 | 路径 | 覆盖内容 |
+|--------|------|---------|
+| `PolicyEngineTest` | `send/service/PolicyEngineTest.java` | 频率限制（rate_limit）、时间窗（time_window）、黑名单（blacklist）及组合策略的允许/拒绝判定 |
+| `SendServiceFailoverTest` | `send/service/SendServiceFailoverTest.java` | 发送记录主备账号切换、全部账号不可用、无健康账号三种场景下的 `SendService.dispatchRecord` |
+| `AccountSelectorTest` | `channel/service/AccountSelectorTest.java` | 会话发送账号选择：主号健康、主号不健康切备用、`backup` 策略优先、无健康账号返回 null |
+| `FlowEngineTest` | `inbound/engine/FlowEngineTest.java` | 入站流程引擎：条件分支命中 webhook、未命中执行 reply、无发布流程时标记已处理 |
+| `IntentRecognitionServiceTest` | `inbound/intent/IntentRecognitionServiceTest.java` | 规则 + 槽位抽取的意图识别，无规则/无 LLM 时返回 `unknown` |
+| `InboundContextServiceTest` | `inbound/service/InboundContextServiceTest.java` | 根据会话/联系人解析业务上下文，合并时优先保留会话维度字段 |
+| `WebhookPayloadBuilderTest` | `inbound/webhook/WebhookPayloadBuilderTest.java` | 入站 webhook payload 结构、方向映射、`null` 意图/空白 JSON 处理 |
+| `WebhookSignatureServiceTest` | `inbound/webhook/WebhookSignatureServiceTest.java` | HMAC-SHA256/512 签名、默认算法、不同 secret/算法签名差异 |
+| `AccountControllerTest` | `admin/controller/AccountControllerTest.java` | 租户创建接口 |
+| `ChannelControllerTest` | `channel/controller/ChannelControllerTest.java` | 渠道主体与渠道账号创建、企微回调 echo 校验 |
+| `ChannelAccountHeartbeatTest` | `channel/ChannelAccountHeartbeatTest.java` | 心跳更新账号在线/风险状态、超时离线检测 |
+| `WeComSessionArchiveTest` | `channel/controller/WeComSessionArchiveTest.java` | 企微 `msgaudit_notify` 回调、会话存档拉取并保存消息事件/媒体记录 |
+| `WeComSyncTest` | `channel/controller/WeComSyncTest.java` | 企微通讯录同步（人员+渠道身份）、群聊同步（会话+参与者+账号绑定） |
+| `CrmControllerTest` | `crm/controller/CrmControllerTest.java` | 联系人、标签、会话的创建与列表查询 |
+| `IvrFlowControllerTest` | `flow/controller/IvrFlowControllerTest.java` | IVR 流程的增删改查、发布、下线生命周期 |
+| `InboundFlowControllerTest` | `inbound/controller/InboundFlowControllerTest.java` | 入站流程创建/发布、接收消息事件 |
+| `SendControllerTest` | `send/controller/SendControllerTest.java` | 发送接口：单聊发送、规则目标 `and/or` 逻辑、发送记录查询 |
+| `SendPreviewControllerTest` | `send/controller/SendPreviewControllerTest.java` | 发送预览：会话/规则目标、渠道拆分、账号用量、黑名单命中但不做限流计数 |
+| `SendMessageConsumerTest` | `send/mq/SendMessageConsumerTest.java` | MQ 异步消费：成功回调、失败重试、超过最大重试后的失败回调 |
+| `TenantWebhookControllerTest` | `admin/controller/TenantWebhookControllerTest.java` | 租户 webhook 配置查询/更新、测试推送成功/失败 |
+
+---
+
+## 2. 集成测试（补齐）
+
+### 2.1 现有集成测试缺口
+
+- 现有 controller 级测试大多聚焦单接口或局部链路，缺少**从租户创建到发送记录生成**的完整出站链路。
+- 缺少**从消息事件接收到 webhook 推送**的完整入站链路验证。
+
+### 2.2 新增集成测试
+
+#### `SendEndToEndTest.java`
+
+- **路径**：`backend/mci-server/src/test/java/com/sino/mci/send/service/SendEndToEndTest.java`
+- **技术**：`@SpringBootTest` + `@AutoConfigureMockMvc` + `@Transactional`，直接复用真实数据库（Docker 中 MySQL）。
+- **覆盖步骤**：
+  1. 创建租户并登录，获取 `authToken`；
+  2. 创建渠道主体（wecom）；
+  3. 创建渠道账号并关联主体；
+  4. 创建会话并关联主体；
+  5. 绑定账号为会话发送主号；
+  6. 调用 `/api/v1/send/test` 模拟发送；
+  7. 查询 `/api/v1/send/{taskId}/records`，校验记录数、状态、渠道类型、会话/账号 ID、内容。
+
+#### `InboundEndToEndTest.java`
+
+- **路径**：`backend/mci-server/src/test/java/com/sino/mci/inbound/engine/InboundEndToEndTest.java`
+- **技术**：`@SpringBootTest` + `@AutoConfigureMockMvc` + `@Transactional`，通过 `@TestConfiguration` 将 `RestTemplate` bean 替换为 mock。
+- **覆盖步骤**：
+  1. 创建租户并登录；
+  2. 配置租户入站 webhook URL 与签名密钥；
+  3. 创建并发布入站流程：`receive -> intent -> webhook`；
+  4. 调用 `/api/v1/inbound/receive` 发送消息事件；
+  5. 校验返回事件 `isProcessed=1`；
+  6. 验证 `RestTemplate.exchange` 被调用，且目标 URL 为租户配置的 webhook URL。
+
+---
+
+## 3. API 冒烟测试
+
+> 基础地址：`http://localhost:8080/msg-platform`  
+> 所有业务接口需携带 `X-Tenant-Code` 与 `Authorization: Bearer <token>`。
+
+### 3.1 健康检查
+
+```bash
+curl -fsS http://localhost:8080/msg-platform/api/v1/health
+```
+
+### 3.2 创建租户
+
+```bash
+curl -X POST http://localhost:8080/msg-platform/api/v1/account/tenant \
+  -H 'Content-Type: application/json' \
+  -d '{"tenantCode":"rescue","tenantName":"救援业务"}'
+```
+
+### 3.3 登录（获取 token）
+
+```bash
+TOKEN=$(curl -s -X POST http://localhost:8080/msg-platform/api/v1/account/login \
+  -H 'X-Tenant-Code: rescue' \
+  -H 'Content-Type: application/json' \
+  -d '{"username":"admin","password":"admin123"}' | jq -r '.data.token')
+echo "Bearer $TOKEN"
+```
+
+### 3.4 渠道主体 CRUD
+
+```bash
+curl -X POST http://localhost:8080/msg-platform/api/v1/channel-subject \
+  -H 'X-Tenant-Code: rescue' \
+  -H "Authorization: Bearer $TOKEN" \
+  -H 'Content-Type: application/json' \
+  -d '{"channelType":"wecom","subjectCode":"sino","subjectName":"Sino"}'
+
+curl -s http://localhost:8080/msg-platform/api/v1/channel-subject/list \
+  -H 'X-Tenant-Code: rescue' \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+### 3.5 渠道账号创建
+
+```bash
+curl -X POST http://localhost:8080/msg-platform/api/v1/channel-account \
+  -H 'X-Tenant-Code: rescue' \
+  -H "Authorization: Bearer $TOKEN" \
+  -H 'Content-Type: application/json' \
+  -d '{"accountType":1,"channelType":"wecom","accountId":"ZhangSan","accountName":"张三"}'
+```
+
+### 3.6 会话创建与账号绑定
+
+```bash
+CONV_ID=$(curl -s -X POST http://localhost:8080/msg-platform/api/v1/conversation \
+  -H 'X-Tenant-Code: rescue' \
+  -H "Authorization: Bearer $TOKEN" \
+  -H 'Content-Type: application/json' \
+  -d '{"conversationType":2,"channelType":"wecom","channelConversationId":"room-001","conversationName":"测试群"}' | jq -r '.data.id')
+
+curl -X POST "http://localhost:8080/msg-platform/api/v1/conversation/$CONV_ID/bind-account" \
+  -H 'X-Tenant-Code: rescue' \
+  -H "Authorization: Bearer $TOKEN" \
+  -H 'Content-Type: application/json' \
+  -d '{"accountId":1,"bindingType":1,"sortOrder":1}'
+```
+
+### 3.7 发送消息（模拟发送）
+
+```bash
+TASK_ID=$(curl -s -X POST http://localhost:8080/msg-platform/api/v1/send/test \
+  -H 'X-Tenant-Code: rescue' \
+  -H "Authorization: Bearer $TOKEN" \
+  -H 'Content-Type: application/json' \
+  -d "{\"targetType\":\"conversation\",\"targetValue\":{\"conversation_id\":$CONV_ID},\"contentType\":\"text\",\"content\":{\"text\":\"hello\"},\"channelStrategy\":{\"channel_type\":\"wecom\",\"strategy\":\"primary\"}}" | jq -r '.data.taskId')
+
+curl -s "http://localhost:8080/msg-platform/api/v1/send/$TASK_ID/records" \
+  -H 'X-Tenant-Code: rescue' \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+### 3.8 入站消息接收
+
+```bash
+curl -X POST http://localhost:8080/msg-platform/api/v1/inbound/receive \
+  -H 'X-Tenant-Code: rescue' \
+  -H "Authorization: Bearer $TOKEN" \
+  -H 'Content-Type: application/json' \
+  -d '{"eventId":"evt-001","channelType":"wecom","eventType":"message","messageSource":"realtime","conversationId":1,"personId":1,"content":{"type":"text","body":"我要救援"}}'
+```
+
+### 3.9 入站流程管理
+
+```bash
+curl -X POST http://localhost:8080/msg-platform/api/v1/inbound/flow \
+  -H 'X-Tenant-Code: rescue' \
+  -H "Authorization: Bearer $TOKEN" \
+  -H 'Content-Type: application/json' \
+  -d '{"flowCode":"inbound_default","flowName":"默认入站流程","flowType":"inbound","definitionJson":{"nodes":[{"id":"n1","type":"receive"},{"id":"n2","type":"intent"},{"id":"n3","type":"webhook"}],"edges":[{"source":"n1","target":"n2"},{"source":"n2","target":"n3"}]}}'
+
+curl -X POST http://localhost:8080/msg-platform/api/v1/inbound/flow/inbound_default/publish \
+  -H 'X-Tenant-Code: rescue' \
+  -H "Authorization: Bearer $TOKEN"
+```
+
+### 3.10 租户 webhook 配置
+
+```bash
+curl -X POST http://localhost:8080/msg-platform/api/v1/account/tenant/webhook \
+  -H 'X-Tenant-Code: rescue' \
+  -H "Authorization: Bearer $TOKEN" \
+  -H 'Content-Type: application/json' \
+  -d '{"inbound_webhook_url":"https://example.com/webhook","auth_config":{"sign_algorithm":"hmac-sha256","webhook_secret":"secret-123"}}'
+```
+
+---
+
+## 4. 前端手工测试
+
+前端地址：`http://localhost`
+
+| 页面 | 路由 | 测试步骤 | 预期结果 |
+|------|------|---------|---------|
+| 登录 | `/login` | 输入租户编码、用户名 `admin`、密码 `admin123` 登录 | 跳转 `/dashboard`，本地存储 token |
+| 渠道主体 | `/channel-subject` | 新增 wecom 主体 → 保存 → 刷新列表 → 编辑主体名称 | 列表展示新增/更新后的主体，无报错 |
+| 渠道账号 | `/channel-account` | 选择主体 → 新增企微内部账号 → 保存 → 触发同步通讯录/群聊 | 账号列表更新，同步返回成功提示 |
+| 会话/群聊 | `/conversation` | 新增群聊 → 绑定发送/接收账号 → 绑定标签 | 会话详情正确显示绑定关系 |
+| 发送策略 | `/send-policy` | 新建策略组 → 添加限流/时间窗/黑名单规则 → 保存 | 策略列表展示，规则 JSON 可预览 |
+| 入站 Webhook | `/inbound-webhook` | 配置 URL 与签名密钥 → 点击测试推送 | 页面提示推送结果（200/失败原因） |
+| 入站流程编排 | `/inbound-flow` | 拖拽 receive / intent / condition / webhook 节点 → 连线 → 保存并发布 | 流程定义持久化，发布状态变为已发布 |
+| 发送记录 | `/send-record` | 发送消息后进入页面 → 按任务 ID/时间/状态筛选 | 列表展示发送记录及状态 |
+| IVR 流程 | `/ivr-flow` | 新建 IVR 流程 → 配置 start / menu 节点 → 保存/发布/下线 | 生命周期状态正常切换 |
+| 消息测试 | `/message-test` | 选择会话 → 填写内容 → 点击发送 | 返回任务 ID，发送记录可查询 |
+
+---
+
+## 5. Chrome DevTools 测试场景
+
+### 5.1 通用检查项
+
+1. 打开 `DevTools → Console`，切换页面/提交表单，确认无未处理异常。
+2. 打开 `Network` 面板，过滤 `XHR/Fetch`，确认所有 API 请求：
+   - 携带 `X-Tenant-Code`；
+   - 携带 `Authorization: Bearer <token>`；
+   - 返回 `code: 0`（业务成功）。
+3. 检查请求/响应 Payload 与架构文档字段是否一致（snake_case / camelCase）。
+4. 模拟弱网：在 `Network` 面板选择 `Slow 3G`，观察加载状态与超时提示。
+5. 模拟后端 500：在 `Network` 面板对 `/api/v1/send/test` 请求右键 `Block request URL`，观察前端错误处理。
+
+### 5.2 页面级场景
+
+| 页面 | DevTools 操作 | 验证点 |
+|------|---------------|--------|
+| `/login` | 登录后查看 `Application → Local Storage` | `auth-store` 中保存 token、tenantCode、userInfo |
+| `/channel-subject` | 新增主体后查看 Network | POST `/api/v1/channel-subject` 返回 `code: 0`，列表 GET 包含新主体 |
+| `/channel-account` | 点击同步通讯录 | POST `/api/v1/channel-account/{id}/sync-contacts` 返回 `syncedCount` |
+| `/conversation` | 绑定账号 | POST `/api/v1/conversation/{id}/bind-account` 请求体字段正确 |
+| `/send-policy` | 保存策略 | POST `/api/v1/policy-group` 请求体 `policies` JSON 与表单一致 |
+| `/inbound-webhook` | 点击测试推送 | POST `/api/v1/account/tenant/webhook/test` 返回 `success` 与 `message` |
+| `/inbound-flow` | 保存/发布流程 | POST `/api/v1/inbound/flow` 与 `/publish` 顺序正确，payload 含 nodes/edges |
+| `/message-test` | 发送消息 | POST `/api/v1/send/test` 返回 `taskId`，随后 GET `/api/v1/send/{taskId}/records` 返回状态 2 |
+| `/send-record` | 筛选/分页 | GET `/api/v1/send/records` 含 page/size 参数，响应 `records` 非空 |
+| `/ivr-flow` | 发布/下线 | POST `/api/v1/flow/{code}/publish` 与 `/offline` 后状态码正确 |
+
+---
+
+## 6. Docker 部署测试
+
+### 6.1 启动基础设施
+
+```bash
+cd /Users/marsal/Projects/sino-project/sino-mci
+cp .env.example .env
+# 按需编辑 .env
+docker compose --profile infra up -d
+```
+
+等待所有 `infra` 服务 healthy：
+
+```bash
+docker compose --profile infra ps
+```
+
+### 6.2 启动应用服务
+
+```bash
+docker compose --profile app up -d
+```
+
+### 6.3 验证健康检查
+
+```bash
+# MySQL
+docker exec mci-mysql mysqladmin ping -h localhost -u root -proot
+
+# Redis
+docker exec mci-redis redis-cli ping
+
+# RabbitMQ
+docker exec mci-rabbitmq rabbitmq-diagnostics ping
+
+# mci-server
+curl -fsS http://localhost:8080/msg-platform/api/v1/health
+
+# channel-service
+curl -fsS http://localhost:8000/health
+
+# admin-web（通过首页判断）
+curl -fsS -o /dev/null -w '%{http_code}' http://localhost/
+```
+
+### 6.4 查看日志
+
+```bash
+docker compose --profile app logs -f mci-server
+docker compose --profile app logs -f channel-service
+```
+
+---
+
+## 7. 标准测试命令与结果
+
+### 7.1 命令
+
+```bash
+cd /Users/marsal/Projects/sino-project/sino-mci/backend
+docker run --rm --network sino-mci_mci-network --dns 8.8.8.8 \
+  -v "$HOME/.m2:/root/.m2" -v "$(pwd):/app" -w /app \
+  -e SPRING_DATASOURCE_URL='jdbc:mysql://mci-mysql:3306/sino_mci?useUnicode=true&characterEncoding=utf8&serverTimezone=Asia/Shanghai&useSSL=false&allowPublicKeyRetrieval=true' \
+  -e SPRING_DATASOURCE_USERNAME=root -e SPRING_DATASOURCE_PASSWORD=root \
+  -e SPRING_DATA_REDIS_HOST=mci-redis -e SPRING_RABBITMQ_HOST=mci-rabbitmq \
+  maven:3.9-eclipse-temurin-21-alpine \
+  mvn -B -pl mci-server -am test
+```
+
+### 7.2 运行结果
+
+- **总测试数**：59
+- **失败**：0
+- **错误**：0
+- **跳过**：0
+- **构建状态**：`BUILD SUCCESS`
+
+新增测试类 `SendEndToEndTest` 与 `InboundEndToEndTest` 均通过。
+
+---
+
+## 8. 后续可补充项
+
+- 引入 Testcontainers 或 H2 以支持无 Docker 环境的本地单元测试运行。
+- 为 `channel-service` 增加 Python 侧端到端测试。
+- 补充前端自动化测试（Playwright / Cypress）覆盖第 4、5 节手工场景。
+- 增加性能/稳定性测试：高并发发送、MQ 堆积恢复、会话存档大批量拉取。
diff --git a/scripts/local-up.sh b/scripts/local-up.sh
index 08118e0..c1a8954 100755
--- a/scripts/local-up.sh
+++ b/scripts/local-up.sh
@@ -1,9 +1,48 @@
 #!/bin/bash
-set -e
+set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 cd "$SCRIPT_DIR/.."
 
+# Load local environment overrides when present.
+[ -f .env ] && source .env
+
+# Defaults (kept in sync with docker-compose.yml defaults).
+MYSQL_PORT=${MYSQL_PORT:-3306}
+REDIS_PORT=${REDIS_PORT:-6379}
+RABBITMQ_AMQP_PORT=${RABBITMQ_AMQP_PORT:-5672}
+RABBITMQ_MGMT_PORT=${RABBITMQ_MGMT_PORT:-15672}
+SEAWEEDFS_MASTER_PORT=${SEAWEEDFS_MASTER_PORT:-9333}
+MCI_SERVER_PORT=${MCI_SERVER_PORT:-8080}
+ADMIN_WEB_PORT=${ADMIN_WEB_PORT:-80}
+CHANNEL_SERVICE_PORT=${CHANNEL_SERVICE_PORT:-8000}
+
+WITH_APPS=""
+BUILD_FLAG=""
+
+usage() {
+  cat <<EOF
+Usage: $0 [OPTIONS]
+
+Start local Docker infrastructure (and optionally application services).
+
+Options:
+  --with-apps   Also start mci-server, admin-web and channel-service
+  --build       Force (re)build images before starting services
+  -h, --help    Show this help message and exit
+EOF
+}
+
+while [ $# -gt 0 ]; do
+  case "$1" in
+    --with-apps) WITH_APPS=1 ;;
+    --build) BUILD_FLAG="--build" ;;
+    -h|--help) usage; exit 0 ;;
+    *) echo "Unknown option: $1" >&2; usage; exit 1 ;;
+  esac
+  shift
+done
+
 wait_for_healthy() {
   local service=$1
   local max_retries=${2:-60}
@@ -12,7 +51,7 @@ wait_for_healthy() {
 
   echo "Waiting for $service to become healthy..."
   while [ "$retry_count" -lt "$max_retries" ]; do
-    container_name=$(docker compose --profile infra --profile app ps -q "$service" 2>/dev/null | head -n1)
+    container_name=$(docker compose --profile infra --profile app ps -q "$service" 2>/dev/null | head -n1 || true)
 
     if [ -n "$container_name" ]; then
       local status
@@ -33,28 +72,28 @@ wait_for_healthy() {
 }
 
 echo "Starting infrastructure services..."
-docker compose --profile infra up -d
+docker compose --profile infra up -d $BUILD_FLAG
 
 wait_for_healthy mysql 60
 wait_for_healthy redis 30
 wait_for_healthy rabbitmq 60
 
 echo "Infrastructure is ready."
-echo "MySQL: jdbc:mysql://localhost:3306/sino_mci"
-echo "Redis: localhost:6379"
-echo "RabbitMQ: localhost:5672 / http://localhost:15672"
-echo "SeaweedFS: http://localhost:9333"
+echo "MySQL: jdbc:mysql://localhost:${MYSQL_PORT}/${MYSQL_DATABASE:-sino_mci}"
+echo "Redis: localhost:${REDIS_PORT}"
+echo "RabbitMQ: localhost:${RABBITMQ_AMQP_PORT} / http://localhost:${RABBITMQ_MGMT_PORT}"
+echo "SeaweedFS: http://localhost:${SEAWEEDFS_MASTER_PORT}"
 
-if [ "$1" == "--with-apps" ]; then
+if [ -n "$WITH_APPS" ]; then
   echo "Starting application services..."
   # Include infra profile so that depends_on conditions can resolve.
-  docker compose --profile infra --profile app up -d --build
+  docker compose --profile infra --profile app up -d $BUILD_FLAG
 
   wait_for_healthy mci-server 90
   wait_for_healthy channel-service 60
 
   echo "Application services are ready."
-  echo "Admin Web: http://localhost"
-  echo "Backend API: http://localhost:8080/msg-platform"
-  echo "Channel Service: http://localhost:8000"
+  echo "Admin Web: http://localhost:${ADMIN_WEB_PORT}"
+  echo "Backend API: http://localhost:${MCI_SERVER_PORT}/msg-platform"
+  echo "Channel Service: http://localhost:${CHANNEL_SERVICE_PORT}"
 fi