feat: KOC详情弹窗 + 任务中心单入口改版 + 资源池默认合作方/采集兜底

KOC 详情弹窗（合作方/数据回收/工作台三处入口）：
- 新增 KocDetailModal：基本信息 / 绑定KOC账号画像 / 参与任务记录 / 履约漏斗
- 工作台最近分发、回收队列账号名、截图回收合作方名、合作方页名称、分发详情头部合作方均可点开
- 分发表行点击仍打开分发详情（stopPropagation 隔离）

任务中心单入口改版（对齐"单任务双阶段"模型）：
- 任务卡发布/回收面板整块可点，全卡仅保留一个「查看明细」，回收面板重复按钮移除
- 详情页自述身份：动态 label（任务详情·分发与回收一体/仅分发）+ 阶段徽章（含回收·截止/未开通回收）
- 内容分发表新增阶段筛选 chips（全部/待发布/已发布待数据/待收截图，未开通回收不显示截图项），筛选落空给专用空态文案
- 数据回收页入口文案改为「选择一个任务进入回收队列」，全站不再区分发布/回收两种任务类型

资源池 KOC 默认加入合作方 + 采集兜底：
- partners 新增 released_account_id（mysql/0023）：显式解绑/被顶替的账号不再被默认合作方同步回填
- 任务未设置采集计划时，默认按发布时间起连续采集 7 天，等待文案显示「等待D1 · 默认7天」

.gitignore

@@ -58,3 +58,6 @@ next-env.d.ts
 /.wrangler/
 /outputs/
 /work/
+
+# local runtime data (self-hosted uploads)
+/.data/

app/api/action/route.ts

@@ -10,12 +10,12 @@ import {
   ensureSchema,
   getDashboardData,
   getRawDb,
-  getTaskReportData,
   uid,
 } from "../../../lib/mvp-db";
 import {
   collectDistributionMetrics,
   createCollectionRunTasks,
+  parseCollectionDays,
   retryFailedCollections,
   runDueScheduledCollections,
   shanghaiDateFromTimestamp,
@@ -25,6 +25,7 @@ import {
   type CollectionMcpBindings,
 } from "../../../lib/mcp-collection-client";
 import { adminForbidden, isAdminRequest } from "../../../lib/admin-auth";
+import { refreshTaskStatus } from "../../../lib/task-service";
 import {
   FeishuSourceError,
   readFeishuSource,
@@ -32,7 +33,8 @@ import {
 } from "../../../lib/feishu-client";
 import {
   createDistributionTask,
-  createScreenshotTask,
+  enableTaskRecovery,
+  updateTask,
 } from "../../../lib/task-service";
 import {
   DistributionReleaseError,
@@ -58,7 +60,21 @@ import {
   pushTaskToGroupChats,
   syncGroupChats,
 } from "../../../lib/wecom-group-push-service";
-import { isManagerRequest } from "../../../lib/user-auth";
+import {
+  bindTaskCustomerChat,
+  unbindTaskCustomerChat,
+} from "../../../lib/task-customer-chat-service";
+import { isManagerRequest, managerForbidden } from "../../../lib/user-auth";
+import {
+  getOwnerScope,
+  isDistributionOwner,
+  isProjectOwner,
+  isTaskOwner,
+  isTaskProjectOwner,
+  ownerForbidden,
+  ownerScopeUserid,
+  projectForbidden,
+} from "../../../lib/owner-scope";
 import { extractPublishUrl } from "../../../lib/publish-url";
 import {
   getAccountFieldRefreshStatus,
@@ -66,22 +82,17 @@ import {
 } from "../../../lib/account-field-refresh-service";
 import {
   deleteProject,
+  ensureProjectMainChat,
+  findOrCreateGroupOwnerPartner,
   getProjectDetail,
   listGroupOwnerPartners,
   listProjects,
   ProjectError,
   saveGroupOwnerPartner,
   saveProject,
-  setProjectGroupChats,
 } from "../../../lib/project-service";
+import { assignTaskOwner } from "../../../lib/task-group-service";
 import { pushProjectTask } from "../../../lib/project-push-service";
-import {
-  findTodayTaskPushLog,
-  listBoundWecomPartners,
-  listTaskPushLogs,
-  OneClickPushError,
-  oneClickPushTask,
-} from "../../../lib/task-one-click-push-service";
 
 type ActionBody = {
   action?: string;
@@ -93,12 +104,92 @@ function numberValue(value: unknown, fallback = 0) {
   return Number.isFinite(parsed) ? parsed : fallback;
 }
 
+async function assignOwnerQuietly(taskId: string, ownerUserid: unknown) {
+  const owner = String(ownerUserid ?? "").trim();
+  if (!owner) return "";
+  try {
+    const assignment = await assignTaskOwner(
+      getRawDb(),
+      { taskId, ownerUserid: owner },
+      resolveWecomConfig(env as unknown as WecomBindings),
+    );
+    return assignment.warning ?? "";
+  } catch (error) {
+    return error instanceof Error ? error.message : String(error);
+  }
+}
+
+type PartnerAccountHolderRow = {
+  id: string;
+  name: string;
+  partner_type: string | null;
+  wecom_external_user_id: string | null;
+  wecom_userid: string;
+};
+
+/**
+ * 占用方是否只是资源池默认同步生成的空壳合作方：
+ * 无企微绑定、无领取和分发记录。空壳可在换绑时直接让位。
+ */
+async function isShellAccountHolder(
+  db: ReturnType<typeof getRawDb>,
+  holder: PartnerAccountHolderRow,
+) {
+  if ((holder.partner_type ?? "external_koc") !== "external_koc") return false;
+  if ((holder.wecom_external_user_id ?? "").trim() || holder.wecom_userid.trim()) {
+    return false;
+  }
+  const claim = await db
+    .prepare("SELECT 1 FROM claims WHERE partner_id = ? LIMIT 1")
+    .bind(holder.id)
+    .first();
+  if (claim) return false;
+  const distribution = await db
+    .prepare("SELECT 1 FROM distributions WHERE partner_id = ? LIMIT 1")
+    .bind(holder.id)
+    .first();
+  return !distribution;
+}
+
 export async function POST(request: Request) {
   if (!(await isAdminRequest(request))) return adminForbidden();
   try {
     await ensureSchema();
     const body = (await request.json()) as ActionBody;
     const db = getRawDb();
+    let ownerWarning = "";
+    const scope = await getOwnerScope(request);
+    const managerGate = () =>
+      scope.kind === "owner" ? managerForbidden() : null;
+    const taskOwnerGate = async (taskId: unknown, options?: { strict?: boolean }) => {
+      if (scope.kind === "full") return null;
+      const id = String(taskId ?? "").trim();
+      return id &&
+        (await isTaskOwner(db, id, scope.wecomUserId, options))
+        ? null
+        : ownerForbidden();
+    };
+    const distributionOwnerGate = async (distributionId: unknown) => {
+      if (scope.kind === "full") return null;
+      const id = String(distributionId ?? "").trim();
+      return id && (await isDistributionOwner(db, id, scope.wecomUserId))
+        ? null
+        : ownerForbidden();
+    };
+    const projectOwnerGate = async (projectId: unknown) => {
+      if (scope.kind === "full") return null;
+      const id = String(projectId ?? "").trim();
+      return id && (await isProjectOwner(db, id, scope.wecomUserId))
+        ? null
+        : projectForbidden();
+    };
+    const taskProjectOwnerGate = async (taskId: unknown) => {
+      if (scope.kind === "full") return null;
+      const id = String(taskId ?? "").trim();
+      return id && (await isTaskProjectOwner(db, id, scope.wecomUserId))
+        ? null
+        : projectForbidden();
+    };
 
     if (body.action === "inspect_feishu") {
       const source = await readFeishuSource(
@@ -124,6 +215,8 @@ export async function POST(request: Request) {
     }
 
     if (body.action === "create_task") {
+      const forbidden = await projectOwnerGate(body.projectId);
+      if (forbidden) return forbidden;
       const name = String(body.name ?? "").trim();
       const brand = String(body.brand ?? "").trim();
       const dueAt = String(body.dueAt ?? "").trim();
@@ -135,7 +228,7 @@ export async function POST(request: Request) {
           { status: 400 },
         );
       }
-      await createDistributionTask(
+      const creation = await createDistributionTask(
         {
           feishuUrl: String(body.feishuUrl ?? "").trim(),
           name,
@@ -144,21 +237,38 @@ export async function POST(request: Request) {
           platform,
           contentFormat,
           projectId: String(body.projectId ?? "").trim(),
+          ownerUserid: String(body.ownerUserid ?? "").trim(),
+          recoveryEnabled: body.recoveryEnabled !== false,
+          recoveryDueAt: String(body.recoveryDueAt ?? "").trim(),
+          recoveryInstructions: String(body.recoveryInstructions ?? "").trim(),
+          recoveryExampleImageKey: String(body.recoveryExampleImageKey ?? "").trim(),
         },
         env as unknown as FeishuBindings,
       );
-    } else if (body.action === "create_screenshot_task") {
-      await createScreenshotTask({
-        name: String(body.name ?? "").trim(),
-        brand: String(body.brand ?? "").trim(),
-        dueAt: String(body.dueAt ?? "").trim(),
-        keyword: String(body.keyword ?? "").trim(),
-        instructions: String(body.instructions ?? "").trim(),
-        quantity: numberValue(body.quantity),
-        exampleImageKey: String(body.exampleImageKey ?? "").trim(),
-        projectId: String(body.projectId ?? "").trim(),
+      ownerWarning = await assignOwnerQuietly(creation.taskId, body.ownerUserid);
+    } else if (body.action === "task_enable_recovery") {
+      const taskId = String(body.taskId ?? "").trim();
+      if (!taskId) {
+        return Response.json({ error: "缺少 taskId" }, { status: 400 });
+      }
+      const taskRow = await db
+        .prepare("SELECT project_id FROM tasks WHERE id = ?")
+        .bind(taskId)
+        .first<{ project_id: string }>();
+      if (!taskRow) {
+        return Response.json({ error: "任务不存在" }, { status: 404 });
+      }
+      const forbidden = await projectOwnerGate(taskRow.project_id);
+      if (forbidden) return forbidden;
+      await enableTaskRecovery({
+        taskId,
+        recoveryDueAt: String(body.recoveryDueAt ?? "").trim(),
+        recoveryInstructions: String(body.recoveryInstructions ?? "").trim(),
+        recoveryExampleImageKey: String(body.recoveryExampleImageKey ?? "").trim(),
       });
     } else if (body.action === "claim") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       const partnerId = String(body.partnerId ?? "");
       const taskId = String(body.taskId ?? "");
       const quantity = Math.max(1, Math.min(50, numberValue(body.quantity, 1)));
@@ -261,20 +371,7 @@ export async function POST(request: Request) {
       if (current.publish_url === publishUrl) {
         return Response.json(await getDashboardData());
       }
-      let collectionDays: number[] = [];
-      try {
-        const parsed = JSON.parse(current.collection_days || "[]");
-        if (Array.isArray(parsed)) {
-          collectionDays = [...new Set(parsed.map(Number))]
-            .filter(
-              (day) =>
-                Number.isInteger(day) && day >= 1 && day <= 7,
-            )
-            .sort((a, b) => a - b);
-        }
-      } catch {
-        collectionDays = [];
-      }
+      const collectionDays = parseCollectionDays(current.collection_days);
       const isScheduled = Boolean(
         current.collection_start_date && collectionDays.length > 0,
       );
@@ -307,10 +404,10 @@ export async function POST(request: Request) {
           )
           .bind(
             publishUrl,
-            isScheduled ? "scheduled" : "pending",
+            "scheduled",
             isScheduled
               ? `管理员已更新链接，等待${collectionDays.length}个采集日`
-              : "管理员已更新链接，等待设置采集计划",
+              : "管理员已更新链接，默认发布后7天自动采集",
             distributionId,
           ),
         db
@@ -335,19 +432,20 @@ export async function POST(request: Request) {
           current.collection_start_date,
           collectionDays,
         );
-        runInBackground(
-          runDueScheduledCollections(
-            db,
-            Date.now(),
-            resolveCollectionMcpConfig(
-              env as unknown as CollectionMcpBindings,
-            ),
-            "catchup",
-            current.task_id,
-          ).catch(() => undefined),
-          "collection catchup after publish URL update",
-        );
       }
+      // 未设置计划的任务同样追采：调度器会按默认 7 天（自发布日起）执行。
+      runInBackground(
+        runDueScheduledCollections(
+          db,
+          Date.now(),
+          resolveCollectionMcpConfig(
+            env as unknown as CollectionMcpBindings,
+          ),
+          "catchup",
+          current.task_id,
+        ).catch(() => undefined),
+        "collection catchup after publish URL update",
+      );
       runInBackground(
         enrichDistributionAccount(
           db,
@@ -361,6 +459,8 @@ export async function POST(request: Request) {
         "account enrichment after publish URL update",
       );
     } else if (body.action === "save_collection_schedule") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       const taskId = String(body.taskId ?? "").trim();
       const startDate = String(body.startDate ?? "").trim();
       const days = Array.isArray(body.days)
@@ -439,6 +539,8 @@ export async function POST(request: Request) {
       ).catch(() => undefined);
       runInBackground(catchup, "collection catchup");
     } else if (body.action === "run_due_collections") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       await runDueScheduledCollections(
         db,
         Date.now(),
@@ -451,6 +553,8 @@ export async function POST(request: Request) {
       body.action === "collect_now" ||
       body.action === "collect"
     ) {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       const distributionId = String(body.distributionId ?? "");
       const rawDay =
         body.day === null || body.day === undefined
@@ -492,6 +596,8 @@ export async function POST(request: Request) {
         ),
       );
     } else if (body.action === "retry_failed_collections") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       const taskId = String(body.taskId ?? "").trim();
       if (!taskId) {
         return Response.json({ error: "请选择需要补采的任务" }, { status: 400 });
@@ -517,6 +623,8 @@ export async function POST(request: Request) {
         ),
       );
     } else if (body.action === "backfill_account_profiles") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       const backfill = backfillAccountProfiles(
         db,
         resolveCollectionMcpConfig(
@@ -526,6 +634,8 @@ export async function POST(request: Request) {
       ).catch(() => undefined);
       runInBackground(backfill, "account profile backfill");
     } else if (body.action === "set_public_account_ids") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       const items = Array.isArray(body.items) ? body.items.slice(0, 50) : [];
       const normalized = items
         .map((item) => {
@@ -564,22 +674,76 @@ export async function POST(request: Request) {
         ),
       );
     } else if (body.action === "manual_metrics") {
+      const forbidden = await distributionOwnerGate(body.distributionId);
+      if (forbidden) return forbidden;
       const distributionId = String(body.distributionId ?? "");
-      const exposure = Math.max(0, numberValue(body.exposure));
-      const views = Math.max(0, numberValue(body.views));
+      const hasCreatorMetrics =
+        body.exposure !== undefined &&
+        body.exposure !== null &&
+        body.views !== undefined &&
+        body.views !== null;
+      const exposure = hasCreatorMetrics
+        ? Math.max(0, numberValue(body.exposure))
+        : null;
+      const views = hasCreatorMetrics ? Math.max(0, numberValue(body.views)) : null;
+      // 采集失败兜底：运营按 KOC 补交的数据截图核对补录公开互动数据
+      const hasPublicMetrics =
+        body.publicLikes !== undefined ||
+        body.publicCollects !== undefined ||
+        body.publicComments !== undefined;
+      const publicLikes = Math.max(0, numberValue(body.publicLikes));
+      const publicCollects = Math.max(0, numberValue(body.publicCollects));
+      const publicComments = Math.max(0, numberValue(body.publicComments));
       await db
         .prepare(
           `UPDATE distributions SET
-            exposure = ?,
-            views = ?,
-            ocr_status = 'manual',
-            status = CASE WHEN d7_likes IS NOT NULL THEN 'complete' ELSE status END,
+            exposure = CASE WHEN ? THEN ? ELSE exposure END,
+            views = CASE WHEN ? THEN ? ELSE views END,
+            ocr_status = CASE WHEN ? THEN 'manual' ELSE ocr_status END,
+            status = CASE WHEN exposure IS NOT NULL AND views IS NOT NULL THEN 'complete' ELSE status END,
+            latest_likes = CASE WHEN ? THEN ? ELSE latest_likes END,
+            latest_collects = CASE WHEN ? THEN ? ELSE latest_collects END,
+            latest_comments = CASE WHEN ? THEN ? ELSE latest_comments END,
+            collection_status = CASE WHEN ? THEN 'success' ELSE collection_status END,
+            collection_status_description = CASE
+              WHEN ? THEN '运营已按补交截图核对补录'
+              ELSE collection_status_description
+            END,
+            collection_updated_at = CASE
+              WHEN ? THEN CURRENT_TIMESTAMP
+              ELSE collection_updated_at
+            END,
             updated_at = CURRENT_TIMESTAMP
            WHERE id = ?`,
         )
-        .bind(exposure, views, distributionId)
+        .bind(
+          hasCreatorMetrics ? 1 : 0,
+          exposure,
+          hasCreatorMetrics ? 1 : 0,
+          views,
+          hasCreatorMetrics ? 1 : 0,
+          hasPublicMetrics ? 1 : 0,
+          publicLikes,
+          hasPublicMetrics ? 1 : 0,
+          publicCollects,
+          hasPublicMetrics ? 1 : 0,
+          publicComments,
+          hasPublicMetrics ? 1 : 0,
+          hasPublicMetrics ? 1 : 0,
+          hasPublicMetrics ? 1 : 0,
+          distributionId,
+        )
         .run();
+      const ownerTask = await db
+        .prepare("SELECT task_id FROM distributions WHERE id = ?")
+        .bind(distributionId)
+        .first<{ task_id: string }>();
+      if (ownerTask) {
+        await refreshTaskStatus(ownerTask.task_id, db).catch(() => undefined);
+      }
     } else if (body.action === "bind_wecom_external_id") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       const partnerId = String(body.partnerId ?? "").trim().slice(0, 80);
       const externalId = String(body.wecomExternalUserId ?? "")
         .trim()
@@ -611,7 +775,112 @@ export async function POST(request: Request) {
         wecomExternalUserId: externalId || null,
         wecomName,
       });
+    } else if (body.action === "partner_bind_account") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
+      const partnerId = String(body.partnerId ?? "").trim();
+      const accountId = String(body.accountId ?? "").trim();
+      if (!partnerId) {
+        return Response.json({ error: "缺少 partnerId" }, { status: 400 });
+      }
+      const partner = await db
+        .prepare("SELECT id, name, partner_type, account_id FROM partners WHERE id = ?")
+        .bind(partnerId)
+        .first<{ id: string; name: string; partner_type: string | null; account_id: string | null }>();
+      if (!partner) return Response.json({ error: "合作方不存在" }, { status: 404 });
+      if ((partner.partner_type ?? "external_koc") !== "external_koc") {
+        return Response.json({ error: "群主合作方不绑定 KOC 资源" }, { status: 400 });
+      }
+      if (!accountId) {
+        await db
+          .prepare(
+            "UPDATE partners SET account_id = '', released_account_id = ? WHERE id = ?",
+          )
+          .bind((partner.account_id ?? "").trim(), partnerId)
+          .run();
+        return Response.json({ partnerId, accountId: "" });
+      }
+      const account = await db
+        .prepare("SELECT id, nickname FROM accounts WHERE id = ?")
+        .bind(accountId)
+        .first<{ id: string; nickname: string }>();
+      if (!account) return Response.json({ error: "KOC 资源不存在" }, { status: 404 });
+      const holder = await db
+        .prepare(
+          `SELECT id, name, partner_type, wecom_external_user_id, wecom_userid
+           FROM partners WHERE account_id = ? AND id != ? LIMIT 1`,
+        )
+        .bind(accountId, partnerId)
+        .first<PartnerAccountHolderRow>();
+      let displacedShellName: string | null = null;
+      if (holder) {
+        if (!(await isShellAccountHolder(db, holder))) {
+          return Response.json(
+            { error: `该 KOC 资源已绑定合作方「${holder.name}」，请先在对方条目上解绑` },
+            { status: 400 },
+          );
+        }
+        displacedShellName = holder.name;
+        await db
+          .prepare(
+            "UPDATE partners SET account_id = '', released_account_id = ? WHERE id = ?",
+          )
+          .bind(accountId, holder.id)
+          .run();
+      }
+      await db
+        .prepare(
+          "UPDATE partners SET account_id = ?, released_account_id = '' WHERE id = ?",
+        )
+        .bind(accountId, partnerId)
+        .run();
+      return Response.json({
+        partnerId,
+        accountId,
+        nickname: account.nickname,
+        displacedShellName,
+      });
+    } else if (body.action === "partner_create_from_account") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
+      const accountId = String(body.accountId ?? "").trim();
+      if (!accountId) {
+        return Response.json({ error: "缺少 accountId" }, { status: 400 });
+      }
+      const account = await db
+        .prepare("SELECT id, nickname, current_contact FROM accounts WHERE id = ?")
+        .bind(accountId)
+        .first<{ id: string; nickname: string; current_contact: string }>();
+      if (!account) return Response.json({ error: "KOC 资源不存在" }, { status: 404 });
+      const holder = await db
+        .prepare("SELECT id, name FROM partners WHERE account_id = ? LIMIT 1")
+        .bind(accountId)
+        .first<{ id: string; name: string }>();
+      if (holder) {
+        return Response.json(
+          { error: `该 KOC 已是合作方「${holder.name}」，无需重复创建` },
+          { status: 400 },
+        );
+      }
+      const partnerId = `partner-koc-${crypto.randomUUID().slice(0, 12)}`;
+      await db
+        .prepare(
+          `INSERT INTO partners
+            (id, name, wecom_name, owner, claimed_total, completed_total,
+             partner_type, wecom_userid, account_id, created_at)
+           VALUES (?, ?, '', '运营组', 0, 0, 'external_koc', '', ?, ?)`,
+        )
+        .bind(partnerId, account.nickname, accountId, new Date().toISOString())
+        .run();
+      return Response.json({
+        partnerId,
+        accountId,
+        nickname: account.nickname,
+        contact: account.current_contact ?? "",
+      });
     } else if (body.action === "send_test_wecom") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       const wecomConfig = resolveWecomConfig(
         env as unknown as WecomBindings,
       );
@@ -662,16 +931,23 @@ export async function POST(request: Request) {
         dueDays: wecomConfig.dueDays,
       });
     } else if (body.action === "trigger_wecom_due_soon") {
+      const taskId = String(body.taskId ?? "").trim();
+      const forbidden = await taskOwnerGate(taskId || undefined);
+      if (forbidden) return forbidden;
       const wecomConfig = resolveWecomConfig(
         env as unknown as WecomBindings,
       );
       const summary = await runDueSoonWecomNotifications(
         db,
         wecomConfig,
+        undefined,
+        undefined,
+        taskId || undefined,
       );
       return Response.json(summary);
     } else if (body.action === "trigger_wecom_overdue_escalation") {
-      if (!isManagerRequest(request)) return adminForbidden();
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       const wecomConfig = resolveWecomConfig(
         env as unknown as WecomBindings,
       );
@@ -679,6 +955,8 @@ export async function POST(request: Request) {
       const autoRelease = await runOverdueAutoRelease(db, wecomConfig);
       return Response.json({ escalation, autoRelease });
     } else if (body.action === "wecom_list_external_contacts") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       const wecomConfig = resolveWecomConfig(
         env as unknown as WecomBindings,
       );
@@ -691,12 +969,16 @@ export async function POST(request: Request) {
       const contacts = await listInternalContacts(wecomConfig);
       return Response.json({ contacts });
     } else if (body.action === "wecom_sync_group_chats") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       const wecomConfig = resolveWecomConfig(
         env as unknown as WecomBindings,
       );
       const groups = await syncGroupChats(db, wecomConfig);
       return Response.json({ groups, syncedCount: groups.length });
     } else if (body.action === "wecom_push_task_to_groups") {
+      const forbidden = await taskOwnerGate(body.taskId);
+      if (forbidden) return forbidden;
       const wecomConfig = resolveWecomConfig(
         env as unknown as WecomBindings,
       );
@@ -725,34 +1007,124 @@ export async function POST(request: Request) {
       });
     } else if (body.action === "wecom_task_group_pushes") {
       const taskId = String(body.taskId ?? "").trim();
+      const forbidden = await taskOwnerGate(taskId || undefined);
+      if (forbidden) return forbidden;
       const pushes = await listGroupPushes(db, taskId || undefined);
       return Response.json({ pushes });
     } else if (body.action === "project_list") {
-      return Response.json({ projects: await listProjects(db) });
+      return Response.json({
+        projects: await listProjects(db, ownerScopeUserid(scope)),
+      });
     } else if (body.action === "project_detail") {
+      const forbidden = await projectOwnerGate(body.projectId);
+      if (forbidden) return forbidden;
       return Response.json(await getProjectDetail(db, String(body.projectId ?? "")));
     } else if (body.action === "project_save") {
-      return Response.json({
-        project: await saveProject(db, {
+      const projectId = String(body.id ?? "").trim();
+      // 项目负责人只能更新自己负责的项目，且归属 ownerUserid 强制保留原值
+      if (scope.kind === "owner" && !projectId) return managerForbidden();
+      const forbidden = await projectOwnerGate(projectId);
+      if (forbidden) return forbidden;
+      let nextOwnerUserid = body.ownerUserid;
+      if (scope.kind === "owner") {
+        const current = await db
+          .prepare("SELECT owner_userid FROM projects WHERE id = ?")
+          .bind(projectId)
+          .first<{ owner_userid: string }>();
+        nextOwnerUserid = current?.owner_userid ?? "";
+      }
+      const saved = await saveProject(
+        db,
+        {
           id: body.id,
           name: body.name,
           brand: body.brand,
           mainGroupMemberIds: body.mainGroupMemberIds,
-          ownerUserid: body.ownerUserid,
+          ownerUserid: nextOwnerUserid,
           note: body.note,
-        }),
-      });
+        },
+        resolveWecomConfig(env as unknown as WecomBindings),
+      );
+      return Response.json(saved);
     } else if (body.action === "project_delete") {
+      const forbidden = await projectOwnerGate(body.projectId);
+      if (forbidden) return forbidden;
       await deleteProject(db, String(body.projectId ?? ""));
       return Response.json({ ok: true });
-    } else if (body.action === "project_set_group_chats") {
-      const detail = await setProjectGroupChats(
+    } else if (body.action === "project_ensure_main_chat") {
+      const forbidden = await projectOwnerGate(body.projectId);
+      if (forbidden) return forbidden;
+      const result = await ensureProjectMainChat(
         db,
         String(body.projectId ?? ""),
-        Array.isArray(body.items) ? body.items : [],
+        resolveWecomConfig(env as unknown as WecomBindings),
       );
-      return Response.json(detail);
+      return Response.json(result);
+    } else if (body.action === "task_set_owner") {
+      const forbidden = await taskProjectOwnerGate(body.taskId);
+      if (forbidden) return forbidden;
+      const taskId = String(body.taskId ?? "").trim();
+      const ownerUserid = String(body.ownerUserid ?? "").trim();
+      if (!taskId) {
+        return Response.json({ error: "缺少 taskId" }, { status: 400 });
+      }
+      if (!ownerUserid) {
+        return Response.json({ error: "请选择任务负责人" }, { status: 400 });
+      }
+      const existing = await db
+        .prepare("SELECT id FROM tasks WHERE id = ?")
+        .bind(taskId)
+        .first<{ id: string }>();
+      if (!existing) {
+        return Response.json({ error: "任务不存在" }, { status: 404 });
+      }
+      const assignment = await assignTaskOwner(
+        db,
+        { taskId, ownerUserid },
+        resolveWecomConfig(env as unknown as WecomBindings),
+      );
+      const task = await db
+        .prepare("SELECT owner_userid, task_chat_id FROM tasks WHERE id = ?")
+        .bind(taskId)
+        .first<{ owner_userid: string; task_chat_id: string }>();
+      return Response.json({ ok: true, assignment, task });
+    } else if (body.action === "task_update") {
+      const forbidden = await taskProjectOwnerGate(body.taskId);
+      if (forbidden) return forbidden;
+      if (scope.kind === "owner") {
+        // 迁移目标也必须是本人负责的项目；置空（脱离项目）同样拒绝
+        const nextProjectId = String(body.projectId ?? "").trim();
+        const projectForbiddenResponse = nextProjectId
+          ? await projectOwnerGate(nextProjectId)
+          : projectForbidden();
+        if (projectForbiddenResponse) return projectForbiddenResponse;
+      }
+      const platform = body.platform === "抖音" || body.platform === "小红书"
+        ? (body.platform as "小红书" | "抖音")
+        : undefined;
+      const contentFormat = body.contentFormat === "video" || body.contentFormat === "image_text"
+        ? (body.contentFormat as "image_text" | "video")
+        : undefined;
+      const update = await updateTask({
+        taskId: String(body.taskId ?? ""),
+        name: String(body.name ?? ""),
+        brand: String(body.brand ?? ""),
+        dueAt: String(body.dueAt ?? ""),
+        projectId: String(body.projectId ?? ""),
+        platform,
+        contentFormat,
+        recoveryEnabled:
+          body.recoveryEnabled === undefined
+            ? undefined
+            : Boolean(body.recoveryEnabled),
+        recoveryDueAt: String(body.recoveryDueAt ?? ""),
+        recoveryInstructions: String(body.recoveryInstructions ?? ""),
+        recoveryExampleImageKey: String(body.recoveryExampleImageKey ?? ""),
+      });
+      ownerWarning = await assignOwnerQuietly(update.taskId, body.ownerUserid);
     } else if (body.action === "partner_save") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       return Response.json({
         partner: await saveGroupOwnerPartner(db, {
           id: body.id,
@@ -761,8 +1133,12 @@ export async function POST(request: Request) {
         }),
       });
     } else if (body.action === "partner_group_owners") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       return Response.json({ partners: await listGroupOwnerPartners(db) });
     } else if (body.action === "project_push_task") {
+      const forbidden = await taskProjectOwnerGate(body.taskId);
+      if (forbidden) return forbidden;
       const wecomConfig = resolveWecomConfig(env as unknown as WecomBindings);
       const outcome = await pushProjectTask(
         db,
@@ -779,41 +1155,11 @@ export async function POST(request: Request) {
         ...outcome,
         appSent: outcome.appResults.length - appFailed.length,
         appFailedCount: appFailed.length,
-        hint: "任务群走企业群发，群主需在企微客户端「群发助手」点击发送后，消息才会送达客户群",
+        hint: "任务群消息已直接发送至任务内部群（负责人与领取人即时可见）",
       });
-    } else if (body.action === "wecom_bound_partners") {
-      const partners = await listBoundWecomPartners(db);
-      const taskId = String(body.taskId ?? "").trim();
-      const pushedToday = taskId
-        ? await findTodayTaskPushLog(db, taskId, "task_open")
-        : null;
-      return Response.json({ partners, pushedToday });
-    } else if (body.action === "task_one_click_push") {
-      const wecomConfig = resolveWecomConfig(env as unknown as WecomBindings);
-      const outcome = await oneClickPushTask(
-        db,
-        {
-          taskId: body.taskId,
-          sendMainGroup: body.sendMainGroup,
-          sendKoc: body.sendKoc,
-          createGroupTemplate: body.createGroupTemplate,
-          selectedKocPartnerIds: body.selectedKocPartnerIds,
-          force: body.force,
-          text: body.text,
-        },
-        wecomConfig,
-      );
-      return Response.json({
-        ...outcome,
-        hint: "KOC 直达消息已即时送达；任务群走企业群发，群主需在企微客户端「群发助手」点击发送后才会送达客户群",
-      });
-    } else if (body.action === "task_push_logs") {
-      const logs = await listTaskPushLogs(db, String(body.taskId ?? "").trim());
-      return Response.json({ logs });
-    } else if (body.action === "task_report_list") {
-      if (!isManagerRequest(request)) return adminForbidden();
-      return Response.json({ reports: await getTaskReportData(db) });
     } else if (body.action === "refresh_account_fields") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       const status = startAccountFieldRefresh(
         db,
         resolveCollectionMcpConfig(env as unknown as CollectionMcpBindings),
@@ -821,12 +1167,16 @@ export async function POST(request: Request) {
       );
       return Response.json({ refresh: status });
     } else if (body.action === "account_field_refresh_status") {
+      const forbidden = managerGate();
+      if (forbidden) return forbidden;
       return Response.json({ refresh: getAccountFieldRefreshStatus() });
     } else if (body.action === "task_group_links") {
       const taskId = String(body.taskId ?? "").trim();
+      const forbidden = await taskOwnerGate(taskId);
+      if (forbidden) return forbidden;
       const task = await db
         .prepare(
-          "SELECT id, name, share_token, task_chat_id FROM tasks WHERE id = ?",
+          "SELECT id, name, share_token, task_chat_id, owner_userid FROM tasks WHERE id = ?",
         )
         .bind(taskId)
         .first<{
@@ -834,71 +1184,145 @@ export async function POST(request: Request) {
           name: string;
           share_token: string | null;
           task_chat_id: string;
+          owner_userid: string;
         }>();
       if (!task) return Response.json({ error: "任务不存在" }, { status: 404 });
       const portalUrl = String(env.KOC_PORTAL_URL ?? "").replace(/\/$/, "");
-      const owners = await listGroupOwnerPartners(db);
+      const ownerUserid = String(task.owner_userid ?? "").trim();
+      let owners: {
+        partnerId: string;
+        name: string;
+        wecomUserid: string;
+        isInternal: boolean;
+        link: string;
+      }[] = [];
+      if (task.share_token && ownerUserid) {
+        try {
+          const partner = await findOrCreateGroupOwnerPartner(db, ownerUserid);
+          owners = [
+            {
+              partnerId: partner.id,
+              name: partner.name,
+              wecomUserid: partner.wecom_userid,
+              isInternal: Boolean(partner.wecom_userid),
+              link: `${portalUrl}/?task=${task.share_token}&owner=${partner.id}`,
+            },
+          ];
+        } catch {
+          owners = [];
+        }
+      }
       return Response.json({
         taskName: task.name,
         taskChatId: task.task_chat_id ?? "",
         claimUrl: task.share_token
           ? `${portalUrl}/?task=${task.share_token}`
           : "",
-        owners: task.share_token
-          ? owners.map((owner) => ({
-              partnerId: owner.id,
-              name: owner.name,
-              wecomUserid: owner.wecom_userid,
-              isInternal: Boolean(owner.wecom_userid),
-              link: `${portalUrl}/?task=${task.share_token}&owner=${owner.id}`,
-            }))
-          : [],
+        owners,
+      });
+    } else if (body.action === "task_customer_chats") {
+      const taskId = String(body.taskId ?? "").trim();
+      const forbidden = await taskOwnerGate(taskId, { strict: true });
+      if (forbidden) return forbidden;
+      const task = await db
+        .prepare("SELECT id, customer_chat_id FROM tasks WHERE id = ?")
+        .bind(taskId)
+        .first<{ id: string; customer_chat_id: string }>();
+      if (!task) return Response.json({ error: "任务不存在" }, { status: 404 });
+      const wecomConfig = resolveWecomConfig(env as unknown as WecomBindings);
+      // 列表来自全量群缓存（所有群主的外部客户群），缓存为空或要求刷新时全量同步
+      let rows = body.sync === true ? [] : await listGroupChatRows(db);
+      if (rows.length === 0) {
+        rows = await syncGroupChats(db, wecomConfig);
+      }
+      return Response.json({
+        chats: rows.map((row) => ({
+          chatId: row.chat_id,
+          name: row.name,
+          ownerUserId: row.owner_user_id,
+          memberCount: row.member_count,
+          status: row.status,
+        })),
+        boundChatId: String(task.customer_chat_id ?? ""),
+      });
+    } else if (body.action === "task_bind_customer_chat") {
+      const taskId = String(body.taskId ?? "").trim();
+      const forbidden = await taskOwnerGate(taskId, { strict: true });
+      if (forbidden) return forbidden;
+      const task = await db
+        .prepare("SELECT id, customer_chat_id FROM tasks WHERE id = ?")
+        .bind(taskId)
+        .first<{ id: string; customer_chat_id: string }>();
+      if (!task) return Response.json({ error: "任务不存在" }, { status: 404 });
+      const chatId = String(body.chatId ?? "").trim();
+      const wecomConfig = resolveWecomConfig(env as unknown as WecomBindings);
+      if (chatId) {
+        const chatName = String(body.chatName ?? "").trim();
+        const result = await bindTaskCustomerChat(
+          db,
+          { taskId, chatId, chatName },
+          wecomConfig,
+        );
+        return Response.json({ task: result });
+      }
+      await unbindTaskCustomerChat(db, taskId, wecomConfig);
+      return Response.json({
+        task: {
+          customerChatId: "",
+          customerChatName: "",
+          joinConfigId: "",
+          joinQrCode: "",
+        },
       });
     } else if (body.action === "task_group_push") {
       const taskId = String(body.taskId ?? "").trim();
       const task = await db
         .prepare(
-          "SELECT id, name, share_token FROM tasks WHERE id = ?",
+          "SELECT id, name, share_token, owner_userid FROM tasks WHERE id = ?",
         )
         .bind(taskId)
-        .first<{ id: string; name: string; share_token: string | null }>();
+        .first<{
+          id: string;
+          name: string;
+          share_token: string | null;
+          owner_userid: string;
+        }>();
       if (!task) return Response.json({ error: "任务不存在" }, { status: 404 });
+      const forbidden = await taskOwnerGate(taskId);
+      if (forbidden) return forbidden;
       if (!task.share_token) {
         return Response.json({ error: "任务缺少领取链接" }, { status: 400 });
       }
-      const owners = (await listGroupOwnerPartners(db)).filter(
-        (owner) => owner.wecom_userid,
-      );
-      if (owners.length === 0) {
+      const ownerUserid = String(task.owner_userid ?? "").trim();
+      if (!ownerUserid) {
         return Response.json(
-          { error: "没有可推送的内部群主，请先在后台登记群主 userid" },
+          { error: "该任务未分配负责人，请先在任务中心分配" },
           { status: 400 },
         );
       }
+      const owner = await findOrCreateGroupOwnerPartner(db, ownerUserid);
       const portalUrl = String(env.KOC_PORTAL_URL ?? "").replace(/\/$/, "");
       const wecomConfig = resolveWecomConfig(env as unknown as WecomBindings);
       let sent = 0;
       let failed = 0;
       const failList: string[] = [];
-      for (const owner of owners) {
-        const link = `${portalUrl}/?task=${task.share_token}&owner=${owner.id}`;
-        try {
-          const result = await sendWecomAppMessage(
-            [owner.wecom_userid],
-            `【任务派发】${task.name}\n请把领取链接转发给你的 KOC（链接已绑定你的群主身份）：\n${link}`,
-            wecomConfig,
-          );
-          if (result.skipped) {
-            failed += 1;
-            failList.push(owner.name);
-          } else {
-            sent += result.sent;
-            failed += result.failed;
-          }
-        } catch {
+      const link = `${portalUrl}/?task=${task.share_token}&owner=${owner.id}`;
+      try {
+        const result = await sendWecomAppMessage(
+          [owner.wecom_userid],
+          `【任务派发】${task.name}\n请把领取链接转发给你的 KOC（链接已绑定你的群主身份）：\n${link}`,
+          wecomConfig,
+        );
+        if (result.skipped) {
           failed += 1;
           failList.push(owner.name);
+        } else {
+          sent += result.sent;
+          failed += result.failed;
         }
+      } catch {
+        failed += 1;
+        failList.push(owner.name);
       }
       return Response.json({ sent, failed, failList });
     } else if (body.action === "wecom_group_chats") {
@@ -908,7 +1332,10 @@ export async function POST(request: Request) {
       return Response.json({ error: "不支持的操作" }, { status: 400 });
     }
 
-    return Response.json(await getDashboardData());
+    const dashboard = await getDashboardData(ownerScopeUserid(scope));
+    return Response.json(
+      ownerWarning ? { ...dashboard, ownerWarning } : dashboard,
+    );
   } catch (error) {
     return Response.json(
       { error: error instanceof Error ? error.message : "操作失败" },
@@ -917,8 +1344,7 @@ export async function POST(request: Request) {
           error instanceof FeishuSourceError ||
           error instanceof DistributionReleaseError ||
           error instanceof WecomClientError ||
-          error instanceof ProjectError ||
-          error instanceof OneClickPushError
+          error instanceof ProjectError
             ? error.status
             : 500,
       },

app/api/auth/login/route.ts

@@ -16,7 +16,7 @@ export async function POST(request: Request) {
     const password = String(body.password ?? "");
     const user = await getRawDb()
       .prepare(
-        `SELECT id, username, role, password_hash, password_salt, password_iterations
+        `SELECT id, username, role, wecom_userid, password_hash, password_salt, password_iterations
          FROM users WHERE username = ? LIMIT 1`,
       )
       .bind(username)
@@ -24,6 +24,7 @@ export async function POST(request: Request) {
         id: string;
         username: string;
         role: string;
+        wecom_userid: string | null;
         password_hash: string;
         password_salt: string;
         password_iterations: number;
@@ -34,7 +35,14 @@ export async function POST(request: Request) {
     const token = await createSession(user.id);
     const secure = requestUsesHttps(request);
     return Response.json(
-      { user: { id: user.id, username: user.username, role: user.role } },
+      {
+        user: {
+          id: user.id,
+          username: user.username,
+          role: user.role,
+          wecom_userid: String(user.wecom_userid ?? ""),
+        },
+      },
       { headers: { "Set-Cookie": createSessionCookie(token, secure) } },
     );
   } catch (error) {

app/api/bootstrap/route.ts

@@ -14,7 +14,9 @@ import {
   getRawDb,
   seedIfEmpty,
 } from "../../../lib/mvp-db";
+import { ensurePartnersForPoolAccounts } from "../../../lib/resource-write";
 import { authForbidden, getRequestPrincipal } from "../../../lib/user-auth";
+import { getOwnerScope, ownerScopeUserid } from "../../../lib/owner-scope";
 
 export async function GET(request: Request) {
   const principal = await getRequestPrincipal(request);
@@ -22,6 +24,13 @@ export async function GET(request: Request) {
   try {
     await ensureSchema();
     await seedIfEmpty();
+    // 资源池 KOC 默认加入合作方：在返回面板数据前补齐，失败不阻塞看板
+    await ensurePartnersForPoolAccounts().catch((error) => {
+      console.error(
+        "KOC pool partner sync failed",
+        error instanceof Error ? error.message : "unknown error",
+      );
+    });
     const db = getRawDb();
     const mcpConfig = resolveCollectionMcpConfig(
       env as unknown as CollectionMcpBindings,
@@ -56,12 +65,9 @@ export async function GET(request: Request) {
       accountBackfill,
     ]);
     runInBackground(catchup, "bootstrap catchup");
-    const dashboard = await getDashboardData();
-    return Response.json(
-      principal.kind === "user" && principal.user.role === "user"
-        ? { ...dashboard, accounts: [] }
-        : dashboard,
-    );
+    const scope = await getOwnerScope(request);
+    const dashboard = await getDashboardData(ownerScopeUserid(scope));
+    return Response.json(dashboard);
   } catch (error) {
     return Response.json(
       { error: error instanceof Error ? error.message : "加载失败" },

app/api/creator-screenshot/route.ts

@@ -10,20 +10,33 @@ export async function GET(request: Request) {
   const isAdmin = await isAdminRequest(request);
   try {
     await ensureSchema();
-    const distributionId = new URL(request.url).searchParams
-      .get("distribution")
-      ?.trim();
+    const url = new URL(request.url);
+    const distributionId = url.searchParams.get("distribution")?.trim();
+    // kind=public-metrics 时返回 KOC 补交的公开数据截图（仅后台核对用）
+    const imageKind = url.searchParams.get("kind") === "public-metrics"
+      ? "public-metrics"
+      : "creator";
     if (!distributionId) {
       return Response.json({ error: "缺少分发记录" }, { status: 400 });
     }
     const row = await getRawDb()
       .prepare(
-        `SELECT screenshot_key FROM distributions
+        `SELECT screenshot_key, public_metrics_screenshot_key FROM distributions
          WHERE id = ?`,
       )
       .bind(distributionId)
-      .first<{ screenshot_key: string | null }>();
-    const mcpToken = new URL(request.url).searchParams.get("mcp_token") || "";
+      .first<{
+        screenshot_key: string | null;
+        public_metrics_screenshot_key: string | null;
+      }>();
+    const mcpToken = url.searchParams.get("mcp_token") || "";
+    const key =
+      imageKind === "public-metrics"
+        ? row?.public_metrics_screenshot_key ?? null
+        : row?.screenshot_key ?? null;
+    if (imageKind === "public-metrics" && !isAdmin) {
+      return adminForbidden();
+    }
     if (
       !isAdmin &&
       (!row?.screenshot_key ||
@@ -36,18 +49,20 @@ export async function GET(request: Request) {
       return adminForbidden();
     }
     if (
-      !row?.screenshot_key ||
-      !row.screenshot_key.startsWith("creator-center/")
+      !key ||
+      !key.startsWith(
+        imageKind === "public-metrics" ? "public-metrics/" : "creator-center/",
+      )
     ) {
-      return Response.json({ error: "创作者截图不存在" }, { status: 404 });
+      return Response.json({ error: "截图不存在" }, { status: 404 });
     }
-    const object = await getUploadBucket().get(row.screenshot_key);
+    const object = await getUploadBucket().get(key);
     if (!object) {
-      return Response.json({ error: "创作者截图不存在" }, { status: 404 });
+      return Response.json({ error: "截图不存在" }, { status: 404 });
     }
     const headers = new Headers({
       "Cache-Control": "private, no-store",
-      "Content-Disposition": 'inline; filename="creator-center-screenshot"',
+      "Content-Disposition": `inline; filename="${imageKind}-screenshot"`,
       "X-Content-Type-Options": "nosniff",
     });
     object.writeHttpMetadata(headers);

app/api/partner-batch-workbook/route.ts

@@ -38,6 +38,7 @@ import {
 import { enrichDistributionAccount } from "../../../lib/account-enrichment-service";
 import {
   createCollectionRunTasks,
+  parseCollectionDays,
   runDueScheduledCollections,
 } from "../../../lib/collection-service";
 import { normalizeWorkbookImage } from "../../../lib/workbook-image";
@@ -664,49 +665,48 @@ async function handlePost(request: Request) {
         updatedRows += 1;
       }
     }
-    if (
-      (publishedCount > 0 || publishUrlChangedCount > 0) &&
-      access.task.collection_start_date &&
-      access.task.collection_days !== "[]"
-    ) {
-      let collectionDays: number[] = [];
-      try {
-        const parsed = JSON.parse(access.task.collection_days);
-        if (Array.isArray(parsed)) collectionDays = parsed.map(Number);
-      } catch {
-        collectionDays = [];
-      }
-      if (collectionDays.length > 0) {
-        await db
-          .prepare(
-            `UPDATE distributions SET collection_status = 'scheduled',
-               collection_status_description = ?
-             WHERE task_id = ? AND publish_url IS NOT NULL AND publish_url != ''`,
-          )
-          .bind(
-            `已安排${collectionDays.length}个采集日，每日09:00执行`,
-            access.task.id,
-          )
-          .run();
+    if (publishedCount > 0 || publishUrlChangedCount > 0) {
+      const collectionDays = parseCollectionDays(
+        access.task.collection_days,
+      );
+      const isScheduled = Boolean(
+        access.task.collection_start_date &&
+          collectionDays.length > 0,
+      );
+      await db
+        .prepare(
+          `UPDATE distributions SET collection_status = 'scheduled',
+             collection_status_description = ?
+           WHERE task_id = ? AND publish_url IS NOT NULL AND publish_url != ''`,
+        )
+        .bind(
+          isScheduled
+            ? `已安排${collectionDays.length}个采集日，每日09:00执行`
+            : "默认发布后7天自动采集，每日09:00执行",
+          access.task.id,
+        )
+        .run();
+      if (isScheduled && access.task.collection_start_date) {
         await createCollectionRunTasks(
           db,
           access.task.id,
           access.task.collection_start_date,
           collectionDays,
         );
-        runInBackground(
-          runDueScheduledCollections(
-            db,
-            Date.now(),
-            resolveCollectionMcpConfig(
-              env as unknown as CollectionMcpBindings,
-            ),
-            "catchup",
-            access.task.id,
-          ).catch(() => undefined),
-          "collection catchup after batch publish update",
-        );
       }
+      // 未设置计划时调度器同样兜底：默认自发布日起 7 天自动采集。
+      runInBackground(
+        runDueScheduledCollections(
+          db,
+          Date.now(),
+          resolveCollectionMcpConfig(
+            env as unknown as CollectionMcpBindings,
+          ),
+          "catchup",
+          access.task.id,
+        ).catch(() => undefined),
+        "collection catchup after batch publish update",
+      );
     }
     for (const enrichment of enrichments) {
       runInBackground(

app/api/partner-image/route.ts

@@ -75,9 +75,12 @@ async function handleGet(request: Request) {
                     c.video_assets,
                     d.result_screenshot_key,
                     d.publish_screenshot_key,
-                    d.screenshot_key
+                    d.screenshot_key,
+                    d.public_metrics_screenshot_key,
+                    t.recovery_example_images
              FROM distributions d
              JOIN contents c ON c.id = d.content_id
+             JOIN tasks t ON t.id = d.task_id
              JOIN delegation_bundles b ON b.id = d.delegation_bundle_id
              WHERE d.id = ?
                AND b.share_token = ?
@@ -90,6 +93,8 @@ async function handleGet(request: Request) {
             result_screenshot_key: string | null;
             publish_screenshot_key: string | null;
             screenshot_key: string | null;
+            public_metrics_screenshot_key: string | null;
+            recovery_example_images: string;
           }>()
       : await getRawDb()
           .prepare(
@@ -97,7 +102,9 @@ async function handleGet(request: Request) {
                     c.video_assets,
                     d.result_screenshot_key,
                     d.publish_screenshot_key,
-                    d.screenshot_key
+                    d.screenshot_key,
+                    d.public_metrics_screenshot_key,
+                    t.recovery_example_images
              FROM distributions d
              JOIN contents c ON c.id = d.content_id
              JOIN claims cl ON cl.id = d.claim_id
@@ -114,6 +121,8 @@ async function handleGet(request: Request) {
             result_screenshot_key: string | null;
             publish_screenshot_key: string | null;
             screenshot_key: string | null;
+            public_metrics_screenshot_key: string | null;
+            recovery_example_images: string;
           }>();
     const asset =
       imageKind === "result"
@@ -125,6 +134,10 @@ async function handleGet(request: Request) {
               ],
             }
           : undefined
+        : imageKind === "task-example"
+          ? row
+            ? findAsset(row.recovery_example_images, imageIndex, ["task-assets/"])
+            : undefined
         : imageKind === "publish"
           ? row?.publish_screenshot_key?.startsWith("publish-evidence/")
             ? { index: 1, key: row.publish_screenshot_key }
@@ -133,6 +146,10 @@ async function handleGet(request: Request) {
           ? row?.screenshot_key?.startsWith("creator-center/")
             ? { index: 1, key: row.screenshot_key }
             : undefined
+        : imageKind === "public-metrics"
+          ? row?.public_metrics_screenshot_key?.startsWith("public-metrics/")
+            ? { index: 1, key: row.public_metrics_screenshot_key }
+            : undefined
         : imageKind === "video"
           ? row
             ? findAsset(row.video_assets, imageIndex, ["content-videos/"])
@@ -187,7 +204,9 @@ async function handleGet(request: Request) {
     const headers = new Headers();
     object.writeHttpMetadata(headers);
     const isMutableEvidence =
-      imageKind === "publish" || imageKind === "creator";
+      imageKind === "publish" ||
+      imageKind === "creator" ||
+      imageKind === "public-metrics";
     headers.set(
       "Cache-Control",
       isMutableEvidence ? "private, no-store" : "private, max-age=3600",

app/api/partner-upload/route.ts

@@ -87,13 +87,18 @@ async function handlePost(request: Request) {
     }
     const isCreatorCenter = upload.uploadKind === "creator-center";
     const isTaskResult = upload.uploadKind === "task-result";
-    if (!["publish", "creator-center", "task-result"].includes(upload.uploadKind)) {
+    const isPublicMetrics = upload.uploadKind === "public-metrics";
+    if (
+      !["publish", "creator-center", "task-result", "public-metrics"].includes(
+        upload.uploadKind,
+      )
+    ) {
       return Response.json({ error: "不支持的截图类型" }, { status: 400 });
     }
     const assignment = upload.delegationToken
       ? await getRawDb()
           .prepare(
-            `SELECT d.id, d.publish_url, d.result_screenshot_key, t.task_type
+            `SELECT d.id, d.publish_url, d.result_screenshot_key, t.recovery_enabled
              FROM distributions d
              JOIN delegation_bundles b ON b.id = d.delegation_bundle_id
              JOIN tasks t ON t.id = d.task_id
@@ -102,10 +107,10 @@ async function handlePost(request: Request) {
                AND b.status = 'active'`,
           )
           .bind(upload.distributionId, upload.delegationToken)
-          .first<{ id: string; publish_url: string | null; result_screenshot_key: string | null; task_type: string }>()
+          .first<{ id: string; publish_url: string | null; result_screenshot_key: string | null; recovery_enabled: number }>()
       : await getRawDb()
           .prepare(
-            `SELECT d.id, d.publish_url, d.result_screenshot_key, t.task_type
+            `SELECT d.id, d.publish_url, d.result_screenshot_key, t.recovery_enabled
              FROM distributions d
              JOIN claims c ON c.id = d.claim_id
              JOIN tasks t ON t.id = d.task_id
@@ -115,21 +120,18 @@ async function handlePost(request: Request) {
                AND c.task_id = t.id`,
           )
           .bind(upload.distributionId, upload.claimToken, upload.taskToken)
-          .first<{ id: string; publish_url: string | null; result_screenshot_key: string | null; task_type: string }>();
+          .first<{ id: string; publish_url: string | null; result_screenshot_key: string | null; recovery_enabled: number }>();
     if (!assignment) {
       return Response.json({ error: "笔记与领取凭证不匹配" }, { status: 403 });
     }
-    if (isCreatorCenter && !assignment.publish_url) {
+    if ((isCreatorCenter || isPublicMetrics) && !assignment.publish_url) {
       return Response.json(
         { error: "请先回填这篇笔记的发布信息" },
         { status: 409 },
       );
     }
-    if (isTaskResult && assignment.task_type !== "screenshot_collect") {
-      return Response.json({ error: "当前任务不支持截图结果回填" }, { status: 400 });
-    }
-    if (!isTaskResult && assignment.task_type === "screenshot_collect") {
-      return Response.json({ error: "截图回收任务请上传任务结果截图" }, { status: 400 });
+    if (isTaskResult && Number(assignment.recovery_enabled) !== 1) {
+      return Response.json({ error: "该任务未开通截图回收" }, { status: 400 });
     }
     const existingResultKeys = isTaskResult
       ? parseResultScreenshotKeys(assignment.result_screenshot_key)
@@ -146,6 +148,8 @@ async function handlePost(request: Request) {
       ? `task-results/${upload.distributionId}/${uid("shot")}.${extension}`
       : isCreatorCenter
       ? `creator-center/${upload.distributionId}/${uid("shot")}.${extension}`
+      : isPublicMetrics
+      ? `public-metrics/${upload.distributionId}/${uid("shot")}.${extension}`
       : `publish-evidence/${upload.distributionId}/${uid("shot")}.${extension}`;
     await getUploadBucket().put(key, upload.fileBytes, {
       httpMetadata: { contentType: upload.fileType },
@@ -163,6 +167,18 @@ async function handlePost(request: Request) {
           upload.distributionId,
         )
         .run();
+    } else if (isPublicMetrics) {
+      // 公开数据自动采集失败时的兜底凭证：运营据此核对补录互动数据
+      await getRawDb()
+        .prepare(
+          `UPDATE distributions SET
+            public_metrics_screenshot_key = ?,
+            collection_status_description = 'KOC已补交数据截图，待运营核对',
+            updated_at = CURRENT_TIMESTAMP
+           WHERE id = ?`,
+        )
+        .bind(key, upload.distributionId)
+        .run();
     } else if (isCreatorCenter) {
       await getRawDb()
         .prepare(
@@ -229,7 +245,9 @@ async function handlePost(request: Request) {
         ? "task-result"
         : isCreatorCenter
           ? "creator-center"
-          : "publish",
+          : isPublicMetrics
+            ? "public-metrics"
+            : "publish",
       ocrStatus: isCreatorCenter ? "failed" : undefined,
     });
   } catch (error) {

app/api/partner/route.ts

@@ -6,6 +6,7 @@ const env = getRuntimeEnv();
 import { enrichDistributionAccount } from "../../../lib/account-enrichment-service";
 import {
   createCollectionRunTasks,
+  parseCollectionDays,
   runDueScheduledCollections,
 } from "../../../lib/collection-service";
 import {
@@ -23,6 +24,7 @@ import {
 } from "../../../lib/partner-utils";
 import { extractPublishUrl } from "../../../lib/publish-url";
 import { parseClaimantIdentifier } from "../../../lib/claimant-identifier";
+import { refreshTaskStatus } from "../../../lib/task-service";
 import {
   resolveWecomClaimant,
   verifyWecomIdentityTicket,
@@ -101,6 +103,15 @@ function idList(value: unknown) {
   ];
 }
 
+function recoveryPayload(task: PartnerTask) {
+  return {
+    recoveryEnabled: Number(task?.recovery_enabled) === 1,
+    recoveryDueAt: String(task?.recovery_due_at ?? ""),
+    recoveryInstructions: String(task?.recovery_instructions ?? ""),
+    recoveryExampleImages: publicImageAssets(task?.recovery_example_images),
+  };
+}
+
 function publicImageAssets(value: unknown): ImageAsset[] {
   try {
     const assets = JSON.parse(String(value ?? "[]")) as Array<
@@ -136,13 +147,18 @@ type PartnerTask = {
   task_type: string;
   platform: string;
   content_format: string;
+  recovery_enabled: number;
+  recovery_due_at: string;
+  recovery_instructions: string | null;
+  recovery_example_images: string;
 };
 
 async function findTask(taskToken: string) {
   return getRawDb()
     .prepare(
       `SELECT id, name, brand, quantity, claimed_quantity, due_at, status,
-              task_type, platform, content_format
+              task_type, platform, content_format,
+              recovery_enabled, recovery_due_at, recovery_instructions, recovery_example_images
        FROM tasks WHERE share_token = ?`,
     )
     .bind(taskToken)
@@ -163,6 +179,10 @@ async function findDelegationAccess(delegationToken: string) {
         t.task_type,
         t.platform,
         t.content_format,
+        t.recovery_enabled,
+        t.recovery_due_at,
+        t.recovery_instructions,
+        t.recovery_example_images,
         b.id AS bundle_id,
         b.label AS bundle_label,
         b.quantity AS bundle_quantity,
@@ -307,6 +327,12 @@ async function handleGet(request: Request) {
             d.ocr_status,
             d.exposure,
             d.views,
+            d.collection_status,
+            d.latest_likes,
+            d.latest_comments,
+            d.latest_collects,
+            d.collection_updated_at,
+            d.public_metrics_screenshot_key,
             c.title,
             c.body,
             c.source_row,
@@ -346,6 +372,11 @@ async function handleGet(request: Request) {
         )
         .bind(claimRow.id)
         .all();
+      const joinQrRow = await getRawDb()
+        .prepare("SELECT join_qr_code FROM tasks WHERE id = ?")
+        .bind(task.id)
+        .first<{ join_qr_code: string | null }>();
+      const joinQrCode = String(joinQrRow?.join_qr_code ?? "").trim();
       claim = {
         id: claimRow.id,
         claimantName: claimRow.claimant_name,
@@ -359,6 +390,7 @@ async function handleGet(request: Request) {
           video_assets: undefined,
         })),
         delegations: delegations.results,
+        joinQrCode,
       };
     } else if (delegationAccess) {
       const assignments = await getRawDb()
@@ -375,6 +407,12 @@ async function handleGet(request: Request) {
             d.ocr_status,
             d.exposure,
             d.views,
+            d.collection_status,
+            d.latest_likes,
+            d.latest_comments,
+            d.latest_collects,
+            d.collection_updated_at,
+            d.public_metrics_screenshot_key,
             c.title,
             c.body,
             c.source_row,
@@ -391,7 +429,7 @@ async function handleGet(request: Request) {
         .all();
       delegation = {
         id: delegationAccess.bundle_id,
-        label: task.task_type === "screenshot_collect" ? "转派截图任务包" : "转派发布包",
+        label: "转派发布包",
         quantity: delegationAccess.bundle_quantity,
         createdAt: delegationAccess.bundle_created_at,
         assignments: assignments.results.map((assignment) => ({
@@ -414,6 +452,8 @@ async function handleGet(request: Request) {
             type: task.task_type,
             platform: task.platform,
             contentFormat: task.content_format,
+            recoveryEnabled: recoveryPayload(task).recoveryEnabled,
+            recoveryDueAt: recoveryPayload(task).recoveryDueAt,
           }
         : {
             name: task.name,
@@ -426,6 +466,7 @@ async function handleGet(request: Request) {
             platform: task.platform,
             contentFormat: task.content_format,
             availableQuantity: available?.count ?? 0,
+            ...recoveryPayload(task),
           },
       claim,
       delegation,
@@ -527,8 +568,7 @@ async function handlePost(request: Request) {
             c.created_at,
             COUNT(d.id) AS note_count,
             SUM(CASE
-              WHEN ? = 'screenshot_collect' AND d.result_submitted_at IS NOT NULL THEN 1
-              WHEN ? != 'screenshot_collect' AND d.publish_url IS NOT NULL AND d.publish_url != '' THEN 1
+              WHEN d.publish_url IS NOT NULL AND d.publish_url != '' THEN 1
               ELSE 0 END) AS completed_count,
             MIN(co.title) AS first_title
            FROM claims c
@@ -541,7 +581,7 @@ async function handlePost(request: Request) {
            ORDER BY c.created_at DESC, c.id DESC
            LIMIT 20`,
         )
-        .bind(task.task_type, task.task_type, task.id, ...partnerCandidates)
+        .bind(task.id, ...partnerCandidates)
         .all<{
           claim_token: string;
           quantity: number;
@@ -562,7 +602,7 @@ async function handlePost(request: Request) {
           quantity: claim.note_count || claim.quantity,
           completedCount: claim.completed_count || 0,
           createdAt: claim.created_at,
-            firstTitle: claim.first_title || (task.task_type === "screenshot_collect" ? "领取的截图任务" : "领取的笔记"),
+            firstTitle: claim.first_title || "领取的笔记",
         })),
       });
     }
@@ -781,7 +821,7 @@ async function handlePost(request: Request) {
       }
       if (distributionIds.length === 0) {
         return Response.json(
-          { error: task.task_type === "screenshot_collect" ? "请至少选择一份待提交任务" : "请至少选择一篇待发布笔记" },
+          { error: "请至少选择一篇待发布笔记" },
           { status: 400 },
         );
       }
@@ -816,13 +856,9 @@ async function handlePost(request: Request) {
           { status: 403 },
         );
       }
-      if (selected.results.some((item) =>
-        task.task_type === "screenshot_collect"
-          ? item.result_submitted_at
-          : item.publish_url,
-      )) {
+      if (selected.results.some((item) => item.publish_url)) {
         return Response.json(
-          { error: task.task_type === "screenshot_collect" ? "已提交的截图任务不能再次转派" : "已发布的笔记不能再次转派" },
+          { error: "已发布的笔记不能再次转派" },
           { status: 409 },
         );
       }
@@ -935,7 +971,7 @@ async function handlePost(request: Request) {
         .first<{ count: number }>();
       if ((completed?.count ?? 0) > 0) {
         return Response.json(
-          { error: task.task_type === "screenshot_collect" ? "该分享包已有截图提交，不能撤销" : "该分享包已有笔记发布，需保留链接继续完成第7天数据回收" },
+          { error: "该分享包已有笔记发布，需保留链接继续完成第7天数据回收" },
           { status: 409 },
         );
       }
@@ -961,9 +997,6 @@ async function handlePost(request: Request) {
     }
 
     if (body.action === "submit") {
-      if (task.task_type === "screenshot_collect") {
-        return Response.json({ error: "截图回收任务无需填写发布链接" }, { status: 400 });
-      }
       const claimToken = textValue(body.claimToken, 80);
       const distributionId = textValue(body.distributionId, 80);
       const publishInput = textValue(body.publishUrl, 5000);
@@ -1121,47 +1154,47 @@ async function handlePost(request: Request) {
           collection_start_date: string | null;
           collection_days: string;
         }>();
-      if (
-        collectionSchedule?.collection_start_date &&
-        collectionSchedule.collection_days !== "[]"
-      ) {
-        let collectionDays: number[] = [];
-        try {
-          const parsed = JSON.parse(collectionSchedule.collection_days);
-          if (Array.isArray(parsed)) collectionDays = parsed.map(Number);
-        } catch {
-          collectionDays = [];
-        }
-        if (collectionDays.length > 0) {
-          await db
-            .prepare(
-              `UPDATE distributions SET collection_status = 'scheduled',
-                 collection_status_description = ? WHERE id = ?`,
-            )
-            .bind(
-              `已安排${collectionDays.length}个采集日，每日09:00执行`,
-              assignment.id,
-            )
-            .run();
+      if (collectionSchedule) {
+        const collectionDays = parseCollectionDays(
+          collectionSchedule.collection_days,
+        );
+        const isScheduled = Boolean(
+          collectionSchedule.collection_start_date &&
+            collectionDays.length > 0,
+        );
+        await db
+          .prepare(
+            `UPDATE distributions SET collection_status = 'scheduled',
+               collection_status_description = ? WHERE id = ?`,
+          )
+          .bind(
+            isScheduled
+              ? `已安排${collectionDays.length}个采集日，每日09:00执行`
+              : "默认发布后7天自动采集，每日09:00执行",
+            assignment.id,
+          )
+          .run();
+        if (isScheduled && collectionSchedule.collection_start_date) {
           await createCollectionRunTasks(
             db,
             task.id,
             collectionSchedule.collection_start_date,
             collectionDays,
           );
-          runInBackground(
-            runDueScheduledCollections(
-              db,
-              Date.now(),
-              resolveCollectionMcpConfig(
-                env as unknown as CollectionMcpBindings,
-              ),
-              "catchup",
-              task.id,
-            ).catch(() => undefined),
-            "collection catchup after partner publish update",
-          );
         }
+        // 未设置计划时调度器同样兜底：默认自发布日起 7 天自动采集。
+        runInBackground(
+          runDueScheduledCollections(
+            db,
+            Date.now(),
+            resolveCollectionMcpConfig(
+              env as unknown as CollectionMcpBindings,
+            ),
+            "catchup",
+            task.id,
+          ).catch(() => undefined),
+          "collection catchup after partner publish update",
+        );
       }
       const enrichment = enrichDistributionAccount(
         db,
@@ -1181,13 +1214,11 @@ async function handlePost(request: Request) {
         ).catch(() => undefined);
         runInBackground(feedback, "wecom publish feedback");
       }
+      await refreshTaskStatus(task.id, db).catch(() => undefined);
       return Response.json({ ok: true });
     }
 
     if (body.action === "submit_creator_metrics") {
-      if (task.task_type === "screenshot_collect") {
-        return Response.json({ error: "截图回收任务不需要创作者数据" }, { status: 400 });
-      }
       const claimToken = textValue(body.claimToken, 80);
       const distributionId = textValue(body.distributionId, 80);
       const exposure = creatorMetricValue(body.exposure);
@@ -1225,18 +1256,19 @@ async function handlePost(request: Request) {
             exposure = ?,
             views = ?,
             ocr_status = 'manual',
-            status = CASE WHEN d7_likes IS NOT NULL THEN 'complete' ELSE status END,
+            status = CASE WHEN exposure IS NOT NULL AND views IS NOT NULL THEN 'complete' ELSE status END,
             updated_at = CURRENT_TIMESTAMP
            WHERE id = ?`,
         )
         .bind(exposure, views, assignment.id)
         .run();
+      await refreshTaskStatus(task.id, db).catch(() => undefined);
       return Response.json({ submitted: true });
     }
 
     if (body.action === "submit_screenshot_result") {
-      if (task.task_type !== "screenshot_collect") {
-        return Response.json({ error: "当前任务不支持这种回填方式" }, { status: 400 });
+      if (Number(task.recovery_enabled) !== 1) {
+        return Response.json({ error: "该任务未开通截图回收" }, { status: 400 });
       }
       const claimToken = textValue(body.claimToken, 80);
       const distributionId = textValue(body.distributionId, 80);
@@ -1247,17 +1279,22 @@ async function handlePost(request: Request) {
         delegationToken,
       );
       if (!assignment) {
-        return Response.json({ error: "任务与领取凭证不匹配" }, { status: 403 });
+        return Response.json({ error: "笔记与领取凭证不匹配" }, { status: 403 });
+      }
+      if (!assignment.publish_url) {
+        return Response.json(
+          { error: "请先回填这篇笔记的发布链接，再提交回收截图" },
+          { status: 409 },
+        );
       }
       if (!assignment.result_screenshot_key) {
-        return Response.json({ error: "请先上传任务截图" }, { status: 400 });
+        return Response.json({ error: "请先上传回收截图" }, { status: 400 });
       }
       const statements: DatabaseStatement[] = [
         db
           .prepare(
             `UPDATE distributions SET
               result_submitted_at = CURRENT_TIMESTAMP,
-              status = 'complete',
               updated_at = CURRENT_TIMESTAMP
              WHERE id = ?`,
           )
@@ -1274,6 +1311,7 @@ async function handlePost(request: Request) {
         );
       }
       await db.batch(statements);
+      await refreshTaskStatus(task.id, db).catch(() => undefined);
       if (isWecomFeedbackEnabled()) {
         const feedback = notifyPartnerSubmitted(
           db,

app/api/recovery-export/route.ts

@@ -1,6 +1,7 @@
 import { getRuntimeEnv } from "../../../lib/runtime-env";
 import type { StoredObjectBody } from "../../../lib/object-store";
 import { adminForbidden, isAdminRequest } from "../../../lib/admin-auth";
+import { getOwnerScope, isTaskOwner, ownerForbidden } from "../../../lib/owner-scope";
 import { parseStoredDate } from "../../../lib/date-utils";
 import {
   downloadFeishuMedia,
@@ -39,6 +40,7 @@ type ExportRow = {
   publish_url: string | null;
   publish_time: string | null;
   publish_screenshot_key: string | null;
+  result_submitted_at: string | null;
   screenshot_key: string | null;
   exposure: number | null;
   views: number | null;
@@ -241,10 +243,27 @@ export async function GET(request: Request) {
       return Response.json({ error: "缺少导出任务" }, { status: 400 });
     }
     const db = getRawDb();
+    if (!tokenPayload) {
+      const scope = await getOwnerScope(request);
+      if (
+        scope.kind === "owner" &&
+        !(await isTaskOwner(db, taskId, scope.wecomUserId))
+      ) {
+        return ownerForbidden();
+      }
+    }
     const task = await db
-      .prepare("SELECT id, name, brand, platform FROM tasks WHERE id = ?")
+      .prepare(
+        "SELECT id, name, brand, platform, recovery_enabled FROM tasks WHERE id = ?",
+      )
       .bind(taskId)
-      .first<{ id: string; name: string; brand: string; platform: string }>();
+      .first<{
+        id: string;
+        name: string;
+        brand: string;
+        platform: string;
+        recovery_enabled: number;
+      }>();
     if (!task) {
       return Response.json({ error: "没有找到这个任务" }, { status: 404 });
     }
@@ -260,6 +279,7 @@ export async function GET(request: Request) {
           d.publish_url,
           d.publish_time,
           d.publish_screenshot_key,
+          d.result_submitted_at,
           d.screenshot_key,
           d.exposure,
           d.views,
@@ -294,6 +314,7 @@ export async function GET(request: Request) {
       .bind(taskId)
       .all<ExportRow>();
     const rows = result.results;
+    const recoveryEnabled = Number(task.recovery_enabled) === 1;
     const assetsByContent = new Map(
       rows.map((row) => [row.content_id, parseAssets(row.image_assets)]),
     );
@@ -346,6 +367,7 @@ export async function GET(request: Request) {
       "采集状态",
       "合作方",
       "领取人微信号/手机号",
+      ...(recoveryEnabled ? ["收录截图"] : []),
     ];
     const originalImageStart = 3;
     const accountColumn = originalImageStart + maxContentImages;
@@ -388,6 +410,15 @@ export async function GET(request: Request) {
         row.distribution_id ? collectionLabel(row) : "未领取",
         row.partner_name || "",
         row.claimant_name || "",
+        ...(recoveryEnabled
+          ? [
+              row.distribution_id
+                ? row.result_submitted_at
+                  ? "已提交"
+                  : "未提交"
+                : "—",
+            ]
+          : []),
       ];
       const images: RecoveryWorkbookRow["images"] = [];
       for (const asset of contentAssets) {
@@ -423,6 +454,7 @@ export async function GET(request: Request) {
       24,
       18,
       22,
+      ...(recoveryEnabled ? [12] : []),
     ];
     const workbook = buildRecoveryWorkbook({
       sheetName: `${task.name}-数据回收`,

app/api/resources-import/route.ts

@@ -9,6 +9,7 @@ import {
 } from "../../../lib/resource-import";
 import {
   analyzeRows,
+  ensurePartnersForPoolAccounts,
   enrichRows,
   loadAccounts,
   mergeExistingFields,
@@ -137,6 +138,10 @@ export async function POST(request: Request) {
       tagUntaggedAccounts(importableRows),
       "resource account tagging",
     );
+    runInBackground(
+      ensurePartnersForPoolAccounts(),
+      "pool partner sync after resource import",
+    );
     if (deferredEnrichment > 0) {
       const importableSourceRows = rows.filter((row) =>
         importableRowNumbers.has(row.rowNumber),

app/api/resources-insert/route.ts

@@ -3,6 +3,7 @@ import { runInBackground } from "../../../lib/background";
 import { buildManualRow, type ManualResourceInput } from "../../../lib/resource-import";
 import {
   analyzeRows,
+  ensurePartnersForPoolAccounts,
   enrichRows,
   loadAccounts,
   tagUntaggedAccounts,
@@ -54,6 +55,10 @@ export async function POST(request: Request) {
       tagUntaggedAccounts(analyzed),
       "resource account tagging",
     );
+    runInBackground(
+      ensurePartnersForPoolAccounts(),
+      "pool partner sync after manual resource insert",
+    );
     const result = analyzed[0];
     const outcome: InsertResult = {
       action: result.action === "update" ? "update" : "create",

app/api/screenshot-task-export/route.ts

@@ -2,6 +2,7 @@ import { zipSync, strToU8 } from "fflate";
 import { adminForbidden, isAdminRequest } from "../../../lib/admin-auth";
 import { ensureSchema, getRawDb, getUploadBucket } from "../../../lib/mvp-db";
 import { parseResultScreenshotKeys } from "../../../lib/result-screenshots";
+import { getOwnerScope, isTaskOwner, ownerForbidden } from "../../../lib/owner-scope";
 
 function safeName(value: string) {
   return value.replace(/[\\/:*?"<>|\r\n]/g, "_").trim().slice(0, 60) || "KOC";
@@ -20,12 +21,19 @@ export async function GET(request: Request) {
     if (!taskId) {
       return Response.json({ error: "缺少任务参数" }, { status: 400 });
     }
+    const scope = await getOwnerScope(request);
+    if (
+      scope.kind === "owner" &&
+      !(await isTaskOwner(getRawDb(), taskId, scope.wecomUserId))
+    ) {
+      return ownerForbidden();
+    }
     const task = await getRawDb()
-      .prepare("SELECT name, task_type FROM tasks WHERE id = ?")
+      .prepare("SELECT name FROM tasks WHERE id = ?")
       .bind(taskId)
-      .first<{ name: string; task_type: string }>();
-    if (!task || task.task_type !== "screenshot_collect") {
-      return Response.json({ error: "没有找到截图回收任务" }, { status: 404 });
+      .first<{ name: string }>();
+    if (!task) {
+      return Response.json({ error: "没有找到任务" }, { status: 404 });
     }
     const rows = await getRawDb()
       .prepare(
@@ -52,7 +60,7 @@ export async function GET(request: Request) {
       }>();
     const files: Record<string, Uint8Array> = {};
     const manifest = [
-      ["序号", "搜索关键词", "领取人", "领取时间", "提交时间", "文件名"],
+      ["序号", "笔记标题", "领取人", "领取时间", "提交时间", "文件名"],
     ];
     let exported = 0;
     for (const [rowIndex, row] of rows.results.entries()) {
@@ -70,7 +78,7 @@ export async function GET(request: Request) {
         exported += 1;
       }
       manifest.push([
-        String(row.source_row ?? ""),
+        String(row.source_row ?? rowIndex + 1),
         row.title,
         row.claimant_name || row.partner_name,
         row.claimed_at,

app/api/task-report-export/route.ts

@@ -1,29 +0,0 @@
-import { adminForbidden, isAdminRequest } from "../../../lib/admin-auth";
-import { buildTaskReportCsv } from "../../../lib/task-report-csv";
-import {
-  ensureSchema,
-  getRawDb,
-  getTaskReportData,
-} from "../../../lib/mvp-db";
-
-export async function GET(request: Request) {
-  try {
-    if (!(await isAdminRequest(request))) return adminForbidden();
-    await ensureSchema();
-    const rows = await getTaskReportData(getRawDb());
-    const fileName = `任务复盘报表.csv`;
-    return new Response(buildTaskReportCsv(rows), {
-      headers: {
-        "Cache-Control": "private, no-store",
-        "Content-Type": "text/csv; charset=utf-8",
-        "Content-Disposition": `attachment; filename="koc-task-report.csv"; filename*=UTF-8''${encodeURIComponent(fileName)}`,
-        "X-Content-Type-Options": "nosniff",
-      },
-    });
-  } catch (error) {
-    return Response.json(
-      { error: error instanceof Error ? error.message : "导出失败" },
-      { status: 500 },
-    );
-  }
-}

app/api/task-result-image/route.ts

@@ -1,31 +1,46 @@
 import { adminForbidden, isAdminRequest } from "../../../lib/admin-auth";
 import { ensureSchema, getRawDb, getUploadBucket } from "../../../lib/mvp-db";
 import { parseResultScreenshotKeys } from "../../../lib/result-screenshots";
+import { getOwnerScope, isDistributionOwner, ownerForbidden } from "../../../lib/owner-scope";
 
 export async function GET(request: Request) {
   if (!(await isAdminRequest(request))) return adminForbidden();
   try {
     await ensureSchema();
-    const distributionId = new URL(request.url).searchParams
-      .get("distribution")
-      ?.trim();
+    const url = new URL(request.url);
+    const distributionId = url.searchParams.get("distribution")?.trim();
+    const scope = await getOwnerScope(request);
+    if (
+      scope.kind === "owner" &&
+      !(await isDistributionOwner(getRawDb(), distributionId ?? "", scope.wecomUserId))
+    ) {
+      return ownerForbidden();
+    }
+    // kind=publish 时返回 KOC 上传的发布截图（分发详情页核对用）
+    const imageKind = url.searchParams.get("kind") === "publish" ? "publish" : "result";
     const imageIndex = Math.max(
       1,
-      Number(new URL(request.url).searchParams.get("index") || 1),
+      Number(url.searchParams.get("index") || 1),
     );
     if (!distributionId) {
       return Response.json({ error: "缺少任务记录" }, { status: 400 });
     }
     const row = await getRawDb()
       .prepare(
-        `SELECT result_screenshot_key FROM distributions
+        `SELECT result_screenshot_key, publish_screenshot_key FROM distributions
          WHERE id = ?`,
       )
       .bind(distributionId)
-      .first<{ result_screenshot_key: string | null }>();
-    const screenshotKey = row
-      ? parseResultScreenshotKeys(row.result_screenshot_key)[imageIndex - 1]
-      : undefined;
+      .first<{
+        result_screenshot_key: string | null;
+        publish_screenshot_key: string | null;
+      }>();
+    const screenshotKey =
+      imageKind === "publish"
+        ? row?.publish_screenshot_key ?? null
+        : row
+          ? parseResultScreenshotKeys(row.result_screenshot_key)[imageIndex - 1]
+          : undefined;
     if (!screenshotKey) {
       return Response.json({ error: "任务截图不存在" }, { status: 404 });
     }

app/api/users/route.ts

@@ -13,6 +13,7 @@ type UserRow = {
   id: string;
   username: string;
   role: UserRole;
+  wecom_userid: string | null;
   created_at: string;
   updated_at: string;
 };
@@ -28,7 +29,7 @@ async function manager(request: Request) {
 async function listUsers() {
   const result = await getRawDb()
     .prepare(
-      `SELECT id, username, role, created_at, updated_at
+      `SELECT id, username, role, wecom_userid, created_at, updated_at
        FROM users
        ORDER BY CASE role WHEN 'super_admin' THEN 1 WHEN 'admin' THEN 2 ELSE 3 END,
                 created_at ASC`,
@@ -54,6 +55,7 @@ export async function POST(request: Request) {
       password?: string;
       role?: UserRole;
       userId?: string;
+      wecomUserid?: string;
     };
     const db = getRawDb();
 
@@ -65,6 +67,9 @@ export async function POST(request: Request) {
       const passwordRecord = await createPasswordRecord(password);
       const username = normalizeUsername(body.username);
       const role = body.role === "admin" ? "admin" : "user";
+      const wecomUserid = String(body.wecomUserid ?? "")
+        .trim()
+        .slice(0, 128);
       if (!validateUsername(username)) {
         return Response.json(
           { error: "账号需为2—32位中文、字母、数字或 _ . @ + -" },
@@ -77,8 +82,8 @@ export async function POST(request: Request) {
       await db
         .prepare(
           `INSERT INTO users
-            (id, username, password_hash, password_salt, password_iterations, role)
-           VALUES (?, ?, ?, ?, ?, ?)`,
+            (id, username, password_hash, password_salt, password_iterations, role, wecom_userid)
+           VALUES (?, ?, ?, ?, ?, ?, ?)`,
         )
         .bind(
           crypto.randomUUID(),
@@ -87,8 +92,36 @@ export async function POST(request: Request) {
           passwordRecord.passwordSalt,
           passwordRecord.passwordIterations,
           role,
+          wecomUserid,
         )
         .run();
+    } else if (body.action === "set_wecom") {
+      const wecomUserid = String(body.wecomUserid ?? "")
+        .trim()
+        .slice(0, 128);
+      const target = await db
+        .prepare("SELECT id, role FROM users WHERE id = ?")
+        .bind(String(body.userId ?? ""))
+        .first<{ id: string; role: UserRole }>();
+      if (!target) {
+        return Response.json({ error: "没有找到这个账号" }, { status: 404 });
+      }
+      if (target.role === "super_admin") {
+        return Response.json(
+          { error: "不能修改超级管理员账号" },
+          { status: 403 },
+        );
+      }
+      if (currentUser.role !== "super_admin" && target.role !== "user") {
+        return managerForbidden();
+      }
+      await db
+        .prepare(
+          `UPDATE users SET wecom_userid = ?, updated_at = CURRENT_TIMESTAMP
+           WHERE id = ?`,
+        )
+        .bind(wecomUserid, target.id)
+        .run();
     } else if (body.action === "reset_password") {
       const password = String(body.password ?? "");
       if (!validatePassword(password)) {

app/api/wecom-bind/route.ts

@@ -0,0 +1,177 @@
+import { ensureSchema, getRawDb } from "../../../lib/mvp-db";
+import { getRuntimeEnv } from "../../../lib/runtime-env";
+import {
+  buildWecomOAuthUrl,
+  exchangeWecomOAuthCode,
+  resolveWecomConfig,
+  WecomClientError,
+  type WecomBindings,
+} from "../../../lib/wecom-client";
+import { getRequestPrincipal } from "../../../lib/user-auth";
+import {
+  signWecomBindState,
+  verifyWecomBindState,
+} from "../../../lib/wecom-oauth-service";
+
+const env = getRuntimeEnv();
+
+function bindResultPage(
+  title: string,
+  message: string,
+  options: { ok?: boolean; status?: number; redirectHome?: boolean } = {},
+) {
+  const ok = options.ok ?? false;
+  const html = `<!doctype html>
+<html lang="zh-CN">
+<head>
+<meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1" />
+<title>${title}</title>
+<style>
+  body { margin:0; min-height:100vh; display:flex; align-items:center; justify-content:center;
+    background:#f4f6f5; font-family:-apple-system,"PingFang SC","Microsoft YaHei",sans-serif; color:#1f2a26; }
+  .card { width:min(420px, calc(100% - 40px)); padding:32px 28px; border:1px solid #e3e8e5; border-radius:16px;
+    background:#fff; text-align:center; }
+  .icon { width:44px; height:44px; margin:0 auto 14px; border-radius:50%; display:flex; align-items:center;
+    justify-content:center; font-size:22px; font-weight:700; color:#fff; }
+  .ok .icon { background:#2f9e75; } .fail .icon { background:#c9503f; }
+  h1 { margin:0 0 10px; font-size:17px; }
+  p { margin:0 0 18px; font-size:13px; line-height:1.8; color:#5f6a65; word-break:break-all; }
+  a { display:inline-block; padding:9px 22px; border-radius:10px; background:#2f9e75; color:#fff;
+    font-size:13px; text-decoration:none; }
+</style>
+</head>
+<body>
+<div class="card ${ok ? "ok" : "fail"}">
+  <div class="icon">${ok ? "✓" : "!"}</div>
+  <h1>${title}</h1>
+  <p>${message}</p>
+  <a href="/">回到工作台</a>
+</div>
+${options.redirectHome ? "<script>setTimeout(function(){location.href = '/';},1500)</script>" : ""}
+</body>
+</html>`;
+  return new Response(html, {
+    status: options.status ?? 200,
+    headers: {
+      "content-type": "text/html; charset=utf-8",
+      "cache-control": "private, no-store",
+    },
+  });
+}
+
+function appOrigin(requestUrl: URL) {
+  const configured = String(env.APP_ORIGIN ?? "").trim().replace(/\/$/, "");
+  return configured || requestUrl.origin;
+}
+
+async function handleStart(request: Request, requestUrl: URL) {
+  const principal = await getRequestPrincipal(request);
+  if (!principal || principal.kind !== "user") {
+    return Response.redirect(new URL("/", requestUrl).toString(), 302);
+  }
+  const config = resolveWecomConfig(env as unknown as WecomBindings);
+  if (!config.corpId || !config.agentId || !config.secret) {
+    return bindResultPage(
+      "暂不可用",
+      "服务器未配置企业微信自建应用（WECOM_CORP_ID / WECOM_AGENT_ID / WECOM_SECRET），请联系管理员。",
+      { status: 503 },
+    );
+  }
+  const state = await signWecomBindState(principal.user.id);
+  const redirectUri = `${appOrigin(requestUrl)}/api/wecom-bind`;
+  return new Response(null, {
+    status: 302,
+    headers: {
+      location: buildWecomOAuthUrl({
+        corpId: config.corpId,
+        agentId: config.agentId,
+        redirectUri,
+        state,
+      }),
+      "cache-control": "private, no-store",
+    },
+  });
+}
+
+async function handleCallback(request: Request, requestUrl: URL) {
+  const code = String(requestUrl.searchParams.get("code") ?? "").trim();
+  const state = String(requestUrl.searchParams.get("state") ?? "").trim();
+  if (!code || !state) {
+    return bindResultPage("绑定失败", "缺少企业微信授权参数，请回到工作台重新发起绑定。", {
+      status: 400,
+    });
+  }
+  const verified = await verifyWecomBindState(state);
+  if (!verified) {
+    return bindResultPage(
+      "绑定链接已过期",
+      "本次授权会话已失效（10 分钟内有效），请回到工作台重新点击「企业微信授权绑定」。",
+      { status: 400 },
+    );
+  }
+  const principal = await getRequestPrincipal(request);
+  if (
+    !principal ||
+    principal.kind !== "user" ||
+    principal.user.id !== verified.userId
+  ) {
+    return bindResultPage(
+      "登录态校验失败",
+      "请先在本浏览器登录发起绑定的那个后台账号，再重新完成企业微信授权。",
+      { status: 403 },
+    );
+  }
+  const config = resolveWecomConfig(env as unknown as WecomBindings);
+  let identity: { userId?: string; externalUserId?: string };
+  try {
+    identity = await exchangeWecomOAuthCode(config, code);
+  } catch (error) {
+    const message =
+      error instanceof WecomClientError
+        ? error.message
+        : "企业微信授权身份换取失败，请稍后重试。";
+    return bindResultPage("绑定失败", message, { status: 502 });
+  }
+  if (!identity.userId) {
+    return bindResultPage(
+      "无法绑定",
+      "当前企微身份不是企业内部成员（外部联系人不能绑定后台账号），请用企业内部成员身份授权。",
+      { status: 400 },
+    );
+  }
+  await ensureSchema();
+  const db = getRawDb();
+  const conflict = await db
+    .prepare(
+      "SELECT id, username FROM users WHERE wecom_userid = ? AND id <> ? LIMIT 1",
+    )
+    .bind(identity.userId, principal.user.id)
+    .first<{ id: string; username: string }>();
+  if (conflict) {
+    return bindResultPage(
+      "该企微账号已被绑定",
+      `企微账号 ${identity.userId} 已绑定到后台账号「${conflict.username}」，如需换绑请联系管理员在「用户管理」中处理。`,
+      { status: 409 },
+    );
+  }
+  await db
+    .prepare(
+      "UPDATE users SET wecom_userid = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?",
+    )
+    .bind(identity.userId, principal.user.id)
+    .run();
+  return bindResultPage(
+    "绑定成功",
+    `已将企微账号 ${identity.userId} 绑定到当前后台账号，正在返回工作台…`,
+    { ok: true, redirectHome: true },
+  );
+}
+
+export async function GET(request: Request) {
+  const requestUrl = new URL(request.url);
+  if (requestUrl.searchParams.has("code")) {
+    return handleCallback(request, requestUrl);
+  }
+  return handleStart(request, requestUrl);
+}

app/task-customer-chat-modal.tsx

@@ -0,0 +1,224 @@
+"use client";
+
+import { useCallback, useEffect, useState } from "react";
+import { readApiResponse } from "./wecom-user-picker";
+
+type CustomerChat = {
+  chatId: string;
+  name: string;
+  ownerUserId: string;
+  memberCount: number;
+  status: number;
+};
+
+type BindResult = {
+  customerChatId: string;
+  customerChatName: string;
+  joinConfigId: string;
+  joinQrCode: string;
+  qrError?: string;
+};
+
+export function TaskCustomerChatModal({
+  task,
+  onClose,
+  onBound,
+}: {
+  task: { id: string; name: string; customerChatId: string; customerChatName: string };
+  onClose: () => void;
+  onBound: () => void;
+}) {
+  const [chats, setChats] = useState<CustomerChat[]>([]);
+  const [boundChatId, setBoundChatId] = useState(task.customerChatId);
+  const [loading, setLoading] = useState(true);
+  const [saving, setSaving] = useState(false);
+  const [error, setError] = useState("");
+  const [notice, setNotice] = useState("");
+  const [selectedChatId, setSelectedChatId] = useState(task.customerChatId);
+  const [bindResult, setBindResult] = useState<BindResult | null>(null);
+
+  const loadChats = useCallback(async (options?: { sync?: boolean }) => {
+    setLoading(true);
+    setError("");
+    try {
+      const response = await fetch("/api/action", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          action: "task_customer_chats",
+          taskId: task.id,
+          sync: options?.sync === true,
+        }),
+      });
+      const parsed = await readApiResponse<{
+        chats?: CustomerChat[];
+        boundChatId?: string;
+        error?: string;
+      }>(response, "获取客户群列表失败");
+      if (!response.ok) {
+        throw new Error(parsed.error || "获取客户群列表失败");
+      }
+      setChats(Array.isArray(parsed.chats) ? parsed.chats : []);
+      const bound = String(parsed.boundChatId ?? "");
+      setBoundChatId(bound);
+      setSelectedChatId(bound);
+    } catch (reason) {
+      setError(reason instanceof Error ? reason.message : "获取客户群列表失败");
+    } finally {
+      setLoading(false);
+    }
+  }, [task.id]);
+
+  useEffect(() => {
+    const timer = window.setTimeout(() => {
+      void loadChats();
+    }, 0);
+    return () => window.clearTimeout(timer);
+  }, [loadChats]);
+
+  const submitBind = async (chatId: string) => {
+    const chat = chats.find((item) => item.chatId === chatId);
+    setSaving(true);
+    setError("");
+    setNotice("");
+    try {
+      const response = await fetch("/api/action", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          action: "task_bind_customer_chat",
+          taskId: task.id,
+          chatId,
+          chatName: chat?.name ?? "",
+        }),
+      });
+      const parsed = await readApiResponse<{ task?: BindResult; error?: string }>(
+        response,
+        "绑定客户群失败",
+      );
+      if (!response.ok) {
+        throw new Error(parsed.error || "绑定客户群失败");
+      }
+      const result = parsed.task ?? null;
+      setBindResult(result);
+      setBoundChatId(chatId);
+      setSelectedChatId(chatId);
+      setNotice(
+        chatId
+          ? result?.qrError
+            ? `已绑定，但${result.qrError}，可重新保存刷新`
+            : `已绑定「${result?.customerChatName || chat?.name || chatId}」，认领人扫码即可进群`
+          : "已解绑，认领页不再展示进群二维码",
+      );
+      onBound();
+    } catch (reason) {
+      setError(reason instanceof Error ? reason.message : "绑定客户群失败");
+    } finally {
+      setSaving(false);
+    }
+  };
+
+  const unbind = async () => {
+    if (!window.confirm("解绑后认领页将不再展示进群二维码，确定解绑？")) return;
+    await submitBind("");
+  };
+
+  return (
+    <div className="modal-backdrop" role="presentation" onMouseDown={onClose}>
+      <div
+        className="modal-card wecom-picker-modal"
+        onMouseDown={(event) => event.stopPropagation()}
+      >
+        <div className="modal-heading">
+          <div>
+            <h2>绑定客户群</h2>
+            <p>
+              列出全部成员名下的企业微信客户群（含各群主的外部群），绑定后生成进群活码，认领人在领取页扫码进群。
+            </p>
+          </div>
+          <button type="button" onClick={onClose} aria-label="关闭">×</button>
+        </div>
+        <div className="import-guide-strip">
+          <span className="wecom-picker-cache-hint">
+            任务：{task.name}
+            {boundChatId ? ` · 当前绑定：${task.customerChatName || boundChatId}` : " · 未绑定"}
+          </span>
+          <button
+            type="button"
+            className="ghost-button"
+            onClick={() => void loadChats({ sync: true })}
+            disabled={loading || saving}
+          >
+            {loading ? "同步中…" : "同步最新群列表"}
+          </button>
+        </div>
+        {error && <p className="form-error">{error}</p>}
+        {notice && <p className="wecom-picker-cache-hint">{notice}</p>}
+        {bindResult?.joinQrCode && (
+          <div className="join-qr-preview">
+            <img src={bindResult.joinQrCode} alt="进群活码" />
+            <span>进群活码（已同步展示在认领页）</span>
+          </div>
+        )}
+        <div className="wecom-picker-list">
+          {loading ? (
+            <div className="wecom-picker-empty">正在拉取客户群列表…</div>
+          ) : chats.length === 0 ? (
+            <div className="wecom-picker-empty">
+              未拉取到客户群——请群主先在企微客户端创建客户群（内外部成员都可拉入，且群主需在应用可见范围内），
+              再点击「同步最新群列表」。
+            </div>
+          ) : (
+            chats.map((chat) => {
+              const isBound = chat.chatId === boundChatId;
+              return (
+                <label key={chat.chatId} className="wecom-picker-row">
+                  <span className="wecom-picker-avatar placeholder" aria-hidden="true">
+                    {(chat.name || chat.chatId).slice(0, 1)}
+                  </span>
+                  <span className="wecom-picker-meta">
+                    <span className="wecom-picker-name">{chat.name || chat.chatId}</span>
+                    <span className="wecom-picker-sub">
+                      群主 {chat.ownerUserId || "—"} · {chat.memberCount} 人
+                    </span>
+                    <code className="wecom-picker-id">{chat.chatId}</code>
+                  </span>
+                  <input
+                    type="radio"
+                    name="customer-chat"
+                    checked={selectedChatId === chat.chatId}
+                    onChange={() => setSelectedChatId(chat.chatId)}
+                  />
+                  {isBound ? <span className="wecom-picker-current">已绑定</span> : null}
+                </label>
+              );
+            })
+          )}
+        </div>
+        <div className="modal-actions">
+          {boundChatId ? (
+            <button
+              type="button"
+              className="ghost-button"
+              onClick={() => void unbind()}
+              disabled={saving}
+            >
+              解绑当前群
+            </button>
+          ) : null}
+          <button type="button" className="ghost-button" onClick={onClose} disabled={saving}>
+            关闭
+          </button>
+          <button
+            type="button"
+            className="primary-button"
+            onClick={() => void submitBind(selectedChatId)}
+            disabled={saving || loading || !selectedChatId || selectedChatId === boundChatId}
+          >
+            {saving ? "保存中…" : selectedChatId === boundChatId ? "已绑定" : "绑定所选群"}
+          </button>
+        </div>
+      </div>
+    </div>
+  );
+}

app/users-page.tsx

@@ -2,11 +2,13 @@
 
 import { FormEvent, useCallback, useEffect, useState } from "react";
 import type { AuthUser, UserRole } from "../lib/user-auth";
+import { WecomUserPickerModal } from "./wecom-user-picker";
 
 type ManagedUser = {
   id: string;
   username: string;
   role: UserRole;
+  wecom_userid: string | null;
   created_at: string;
   updated_at: string;
 };
@@ -31,6 +33,9 @@ export default function UsersPage({ currentUser }: { currentUser: AuthUser }) {
   const [resetTarget, setResetTarget] = useState<ManagedUser | null>(null);
   const [resetPassword, setResetPassword] = useState("");
   const [deleteTarget, setDeleteTarget] = useState<ManagedUser | null>(null);
+  const [createWecom, setCreateWecom] = useState("");
+  const [createPickerOpen, setCreatePickerOpen] = useState(false);
+  const [bindTarget, setBindTarget] = useState<ManagedUser | null>(null);
   const [message, setMessage] = useState("");
   const [working, setWorking] = useState(false);
 
@@ -58,13 +63,20 @@ export default function UsersPage({ currentUser }: { currentUser: AuthUser }) {
         await fetch("/api/users", {
           method: "POST",
           headers: { "Content-Type": "application/json" },
-          body: JSON.stringify({ action: "create", username, password, role }),
+          body: JSON.stringify({
+            action: "create",
+            username,
+            password,
+            role,
+            wecomUserid: createWecom,
+          }),
         }),
       );
       setUsers(next);
       setUsername("");
       setPassword("");
       setRole("user");
+      setCreateWecom("");
       setMessage("账号已创建，可以把账号和密码交给用户登录");
     } catch (reason) {
       setMessage(reason instanceof Error ? reason.message : "创建失败");
@@ -126,6 +138,27 @@ export default function UsersPage({ currentUser }: { currentUser: AuthUser }) {
     }
   };
 
+  const bindWecom = async (userId: string, wecomUserid: string) => {
+    setWorking(true);
+    setMessage("");
+    try {
+      const next = await userApi(
+        await fetch("/api/users", {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ action: "set_wecom", userId, wecomUserid }),
+        }),
+      );
+      setUsers(next);
+      setBindTarget(null);
+      setMessage(wecomUserid ? "企微绑定已更新，立即生效" : "已解除企微绑定");
+    } catch (reason) {
+      setMessage(reason instanceof Error ? reason.message : "绑定失败");
+    } finally {
+      setWorking(false);
+    }
+  };
+
   const canReset = (item: ManagedUser) => {
     if (currentUser.role === "super_admin") {
       return item.role !== "super_admin" || item.id === currentUser.id;
@@ -133,6 +166,11 @@ export default function UsersPage({ currentUser }: { currentUser: AuthUser }) {
     return item.role === "user";
   };
 
+  const canBind = (item: ManagedUser) => {
+    if (item.role === "super_admin") return false;
+    return currentUser.role === "super_admin" || item.role === "user";
+  };
+
   const canDelete = (item: ManagedUser) => {
     if (item.id === currentUser.id || item.role === "super_admin") return false;
     return currentUser.role === "super_admin" || item.role === "user";
@@ -182,6 +220,22 @@ export default function UsersPage({ currentUser }: { currentUser: AuthUser }) {
               </select>
             </label>
           )}
+          <label className="user-role-field">
+            <span>企微 userid（任务负责人，可选）</span>
+            <input
+              value={createWecom}
+              onChange={(event) => setCreateWecom(event.target.value)}
+              placeholder="绑定后该账号只看自己负责的任务"
+              autoComplete="off"
+            />
+            <button
+              type="button"
+              className="ghost-button"
+              onClick={() => setCreatePickerOpen(true)}
+            >
+              从企微选择
+            </button>
+          </label>
           <button className="primary-button" disabled={working}>
             {working ? "处理中…" : "创建账号"}
           </button>
@@ -198,12 +252,45 @@ export default function UsersPage({ currentUser }: { currentUser: AuthUser }) {
         </div>
         <div className="user-table">
           <div className="user-table-head">
-            <span>登录账号</span><span>角色</span><span>更新时间</span><span>操作</span>
+            <span>登录账号</span><span>角色</span><span>企微绑定</span><span>更新时间</span><span>操作</span>
           </div>
           {users.map((item) => (
             <div className="user-table-row" key={item.id}>
               <strong>{item.username}</strong>
               <span className={`role-pill ${item.role}`}>{ROLE_LABEL[item.role]}</span>
+              <span className="user-wecom-cell">
+                {item.wecom_userid ? (
+                  <code>{item.wecom_userid}</code>
+                ) : (
+                  <span>—</span>
+                )}
+                {canBind(item) && (
+                  item.wecom_userid ? (
+                    <>
+                    <button
+                      className="user-action-button"
+                      onClick={() => setBindTarget(item)}
+                    >
+                      换绑
+                    </button>
+                    <button
+                      className="user-action-button danger"
+                      disabled={working}
+                      onClick={() => void bindWecom(item.id, "")}
+                    >
+                      解绑
+                    </button>
+                    </>
+                  ) : (
+                    <button
+                      className="user-action-button"
+                      onClick={() => setBindTarget(item)}
+                    >
+                      绑定
+                    </button>
+                  )
+                )}
+              </span>
               <span>{new Date(item.updated_at).toLocaleDateString("zh-CN", { timeZone: "Asia/Shanghai" })}</span>
               <div className="user-row-actions">
                 {canReset(item) && (
@@ -307,6 +394,28 @@ export default function UsersPage({ currentUser }: { currentUser: AuthUser }) {
           </div>
         </div>
       )}
+      {createPickerOpen && (
+        <WecomUserPickerModal
+          mode="single"
+          selected={createWecom ? [createWecom] : []}
+          onClose={() => setCreatePickerOpen(false)}
+          onConfirm={(userids) => {
+            setCreateWecom(userids[0] ?? "");
+            setCreatePickerOpen(false);
+          }}
+        />
+      )}
+
+      {bindTarget && (
+        <WecomUserPickerModal
+          mode="single"
+          selected={bindTarget.wecom_userid ? [bindTarget.wecom_userid] : []}
+          onClose={() => setBindTarget(null)}
+          onConfirm={(userids) => {
+            void bindWecom(bindTarget.id, userids[0] ?? "");
+          }}
+        />
+      )}
     </div>
   );
 }

app/wecom-user-picker.tsx

@@ -0,0 +1,239 @@
+"use client";
+
+import { useCallback, useEffect, useState } from "react";
+
+export async function readApiResponse<T>(
+  response: Response,
+  fallback: string,
+) {
+  const text = await response.text();
+  const contentType = response.headers.get("content-type") ?? "";
+  if (!contentType.includes("json")) {
+    if (response.status === 403) {
+      throw new Error("请求被安全网关拦截，请刷新页面后重试");
+    }
+    throw new Error(`${fallback}（服务返回异常，HTTP ${response.status}）`);
+  }
+  try {
+    return JSON.parse(text) as T & { error?: string };
+  } catch {
+    throw new Error(`${fallback}（服务返回的数据无法解析）`);
+  }
+}
+
+export type InternalWecomContact = {
+  userid: string;
+  name: string;
+  departmentNames: string[];
+};
+
+let internalWecomContactsCache: {
+  contacts: InternalWecomContact[];
+  fetchedAt: number;
+} | null = null;
+
+const INTERNAL_WECOM_CONTACTS_TTL_MS = 5 * 60 * 1000;
+
+export function WecomUserPickerModal({
+  mode,
+  selected,
+  onClose,
+  onConfirm,
+}: {
+  mode: "single" | "multi";
+  selected: string[];
+  onClose: () => void;
+  onConfirm: (userids: string[]) => void;
+}) {
+  const [contacts, setContacts] = useState<InternalWecomContact[]>(
+    internalWecomContactsCache?.contacts ?? [],
+  );
+  const [fetchedAt, setFetchedAt] = useState(0);
+  const [loading, setLoading] = useState(true);
+  const [error, setError] = useState("");
+  const [search, setSearch] = useState("");
+  const [checked, setChecked] = useState<string[]>(selected.filter(Boolean));
+
+  const loadContacts = useCallback(async (force = false) => {
+    const snapshot = internalWecomContactsCache;
+    if (
+      !force &&
+      snapshot &&
+      Date.now() - snapshot.fetchedAt <= INTERNAL_WECOM_CONTACTS_TTL_MS
+    ) {
+      setContacts(snapshot.contacts);
+      setFetchedAt(snapshot.fetchedAt);
+      setLoading(false);
+      return;
+    }
+    setLoading(true);
+    setError("");
+    try {
+      const response = await fetch("/api/action", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ action: "wecom_list_internal_contacts" }),
+      });
+      const parsed = await readApiResponse<{
+        contacts?: InternalWecomContact[];
+        error?: string;
+      }>(response, "获取企业微信通讯录失败");
+      if (!response.ok) {
+        throw new Error(parsed.error || "获取企业微信通讯录失败");
+      }
+      const list = Array.isArray(parsed.contacts) ? parsed.contacts : [];
+      internalWecomContactsCache = { contacts: list, fetchedAt: Date.now() };
+      setContacts(list);
+      setFetchedAt(internalWecomContactsCache.fetchedAt);
+    } catch (reason) {
+      setError(
+        reason instanceof Error ? reason.message : "获取企业微信通讯录失败",
+      );
+    } finally {
+      setLoading(false);
+    }
+  }, []);
+
+  useEffect(() => {
+    const timer = window.setTimeout(() => {
+      void loadContacts();
+    }, 0);
+    return () => window.clearTimeout(timer);
+  }, [loadContacts]);
+
+  const keyword = search.trim().toLowerCase();
+  const filteredContacts =
+    keyword.length === 0
+      ? contacts
+      : contacts.filter((contact) =>
+          `${contact.name} ${contact.userid}`.toLowerCase().includes(keyword),
+        );
+
+  const toggleChecked = (userid: string) => {
+    setChecked((previous) =>
+      previous.includes(userid)
+        ? previous.filter((item) => item !== userid)
+        : [...previous, userid],
+    );
+  };
+
+  return (
+    <div className="modal-backdrop" role="presentation" onMouseDown={onClose}>
+      <div
+        className="modal-card wecom-picker-modal"
+        onMouseDown={(event) => event.stopPropagation()}
+      >
+        <div className="modal-heading">
+          <div>
+            <h2>选择企业微信成员</h2>
+            <p>
+              从企业微信通讯录（自建应用可见范围）中挑选，
+              {mode === "multi" ? "勾选后点击确定" : "点击成员即填入"}。
+            </p>
+          </div>
+          <button type="button" onClick={onClose} aria-label="关闭">×</button>
+        </div>
+        <div className="import-guide-strip">
+          <input
+            type="search"
+            className="wecom-picker-search"
+            placeholder="按姓名 / userid 搜索"
+            value={search}
+            onChange={(event) => setSearch(event.target.value)}
+            disabled={loading}
+          />
+          <button
+            type="button"
+            className="ghost-button"
+            onClick={() => void loadContacts(true)}
+            disabled={loading}
+          >
+            {loading ? "拉取中…" : "刷新列表"}
+          </button>
+          {fetchedAt > 0 && !loading && (
+            <span className="wecom-picker-cache-hint">
+              缓存于 {new Date(fetchedAt).toLocaleTimeString()}（5 分钟内复用）
+            </span>
+          )}
+        </div>
+        {error && (
+          <p className="form-error">
+            {error} 可关闭此弹窗，直接在输入框手动填写 userid。
+          </p>
+        )}
+        <div className="wecom-picker-list">
+          {loading && contacts.length === 0 ? (
+            <div className="wecom-picker-empty">正在拉取企业微信通讯录…</div>
+          ) : contacts.length === 0 ? (
+            <div className="wecom-picker-empty">
+              {error
+                ? "拉取失败，请检查应用配置（通讯录权限 / 可信 IP）后重试"
+                : "未拉取到通讯录成员——仅显示自建应用可见范围内的成员，也可手动填写 userid"}
+            </div>
+          ) : filteredContacts.length === 0 ? (
+            <div className="wecom-picker-empty">没有匹配的成员</div>
+          ) : (
+            filteredContacts.map((contact) => {
+              const isSelected =
+                mode === "multi"
+                  ? checked.includes(contact.userid)
+                  : selected.includes(contact.userid);
+              const rowBody = (
+                <>
+                  <span className="wecom-picker-avatar placeholder" aria-hidden="true">
+                    {(contact.name || contact.userid).slice(0, 1)}
+                  </span>
+                  <span className="wecom-picker-meta">
+                    <span className="wecom-picker-name">
+                      {contact.name || contact.userid}
+                    </span>
+                    <span className="wecom-picker-sub">
+                      {contact.departmentNames.join(" / ") || "—"}
+                    </span>
+                    <code className="wecom-picker-id">{contact.userid}</code>
+                  </span>
+                </>
+              );
+              return mode === "multi" ? (
+                <label key={contact.userid} className="wecom-picker-row">
+                  {rowBody}
+                  <input
+                    type="checkbox"
+                    checked={isSelected}
+                    onChange={() => toggleChecked(contact.userid)}
+                  />
+                </label>
+              ) : (
+                <button
+                  key={contact.userid}
+                  type="button"
+                  className="wecom-picker-row"
+                  onClick={() => onConfirm([contact.userid])}
+                >
+                  {rowBody}
+                  {isSelected ? (
+                    <span className="wecom-picker-current">当前</span>
+                  ) : null}
+                </button>
+              );
+            })
+          )}
+        </div>
+        {mode === "multi" && (
+          <div className="modal-actions">
+            <button type="button" className="ghost-button" onClick={onClose}>
+              取消
+            </button>
+            <button
+              type="button"
+              className="primary-button"
+              onClick={() => onConfirm(checked)}
+            >
+              {checked.length > 0 ? `确定（${checked.length} 人）` : "确定"}
+            </button>
+          </div>
+        )}
+      </div>
+    </div>
+  );
+}

db/schema.ts

@@ -59,6 +59,28 @@ export const tasks = mysqlTable(
     }),
     projectId: varchar("project_id", { length: 64 }).notNull().default(""),
     taskChatId: varchar("task_chat_id", { length: 64 }).notNull().default(""),
+    ownerUserid: varchar("owner_userid", { length: 64 }).notNull().default(""),
+    customerChatId: varchar("customer_chat_id", { length: 128 })
+      .notNull()
+      .default(""),
+    customerChatName: varchar("customer_chat_name", { length: 255 })
+      .notNull()
+      .default(""),
+    joinConfigId: varchar("join_config_id", { length: 128 })
+      .notNull()
+      .default(""),
+    joinQrCode: text("join_qr_code").notNull().default(""),
+    relatedTaskId: varchar("related_task_id", { length: 64 })
+      .notNull()
+      .default(""),
+    recoveryEnabled: int("recovery_enabled").notNull().default(1),
+    recoveryDueAt: varchar("recovery_due_at", { length: 32 })
+      .notNull()
+      .default(""),
+    recoveryInstructions: text("recovery_instructions").notNull().default(""),
+    recoveryExampleImages: text("recovery_example_images")
+      .notNull()
+      .default("[]"),
     createdAt: timestamp("created_at"),
   },
   (table) => [uniqueIndex("tasks_share_token_idx").on(table.shareToken)],
@@ -74,6 +96,9 @@ export const contents = mysqlTable("contents", {
   status: varchar("status", { length: 32 }).notNull().default("available"),
   source: varchar("source", { length: 255 }).notNull().default("飞书内容表"),
   sourceRow: int("source_row"),
+  relatedContentId: varchar("related_content_id", { length: 64 })
+    .notNull()
+    .default(""),
   createdAt: timestamp("created_at"),
 });
 
@@ -184,6 +209,7 @@ export const distributions = mysqlTable("distributions", {
   latestComments: int("latest_comments"),
   latestCollects: int("latest_collects"),
   latestShares: int("latest_shares"),
+  publicMetricsScreenshotKey: text("public_metrics_screenshot_key"),
   collectionStatus: varchar("collection_status", { length: 32 })
     .notNull()
     .default("pending"),
@@ -230,6 +256,7 @@ export const users = mysqlTable(
     passwordSalt: varchar("password_salt", { length: 255 }).notNull(),
     passwordIterations: int("password_iterations").notNull(),
     role: varchar("role", { length: 32 }).notNull(),
+    wecomUserid: varchar("wecom_userid", { length: 128 }).notNull().default(""),
     createdAt: timestamp("created_at"),
     updatedAt: timestamp("updated_at"),
   },
@@ -315,26 +342,12 @@ export const projects = mysqlTable("projects", {
   brand: varchar("brand", { length: 255 }).notNull().default(""),
   mainGroupMemberIds: text("main_group_member_ids").notNull(),
   ownerUserid: varchar("owner_userid", { length: 64 }).notNull().default(""),
+  mainChatId: varchar("main_chat_id", { length: 64 }).notNull().default(""),
   status: varchar("status", { length: 32 }).notNull().default("active"),
   note: text("note").notNull(),
   createdAt: timestamp("created_at"),
 });
 
-export const projectGroupChats = mysqlTable(
-  "project_group_chats",
-  {
-    id: varchar("id", { length: 64 }).primaryKey(),
-    projectId: varchar("project_id", { length: 64 }).notNull(),
-    chatId: varchar("chat_id", { length: 128 }).notNull(),
-    partnerId: varchar("partner_id", { length: 64 }).notNull().default(""),
-    createdAt: timestamp("created_at"),
-  },
-  (table) => [
-    uniqueIndex("project_group_chats_uniq").on(table.projectId, table.chatId),
-    index("project_group_chats_project_idx").on(table.projectId),
-  ],
-);
-
 export const backgroundJobs = mysqlTable(
   "background_jobs",
   {

koc-portal/app/globals.css

@@ -702,6 +702,19 @@ footer {
     linear-gradient(130deg, #142721, #235b47);
 }
 
+.hero-progress {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 8px;
+}
+
+.recovery-progress {
+  color: #96b8ab;
+  font-size: 9px;
+  font-weight: 600;
+}
+
 .claimed-hero h1 {
   margin: 0;
   font-size: clamp(25px, 4vw, 38px);
@@ -718,6 +731,48 @@ footer {
   color: #74cfa9;
 }
 
+.join-qr-card {
+  margin-top: 14px;
+  padding: 18px 20px;
+  border-radius: 18px;
+  background: white;
+}
+
+.join-qr-body {
+  display: flex;
+  align-items: center;
+  gap: 18px;
+}
+
+.join-qr-body img {
+  width: 132px;
+  height: 132px;
+  border-radius: 12px;
+  border: 1px solid rgb(20 40 34 / 0.1);
+  background: white;
+  flex: none;
+}
+
+.join-qr-body h2 {
+  margin: 0;
+  font-size: 17px;
+  color: #17241f;
+}
+
+.join-qr-body p {
+  margin: 8px 0 0;
+  font-size: 12px;
+  color: rgb(23 36 31 / 0.6);
+  line-height: 1.6;
+}
+
+@media (max-width: 560px) {
+  .join-qr-body {
+    flex-direction: column;
+    text-align: center;
+  }
+}
+
 .completion-ring {
   display: grid;
   width: 90px;
@@ -1628,6 +1683,28 @@ footer {
   line-height: 1.65;
 }
 
+/* 公开数据自动采集状态行：让 KOC 明白数据不用每天手动填 */
+.auto-collect-line {
+  margin: 10px 0 0;
+  padding: 8px 11px;
+  border-radius: 8px;
+  background: #e9f5f0;
+  border: 1px solid #cdeade;
+  color: #27775b;
+  font-size: 8px;
+  line-height: 1.6;
+}
+
+/* 公开数据补交（采集失败兜底）区块 */
+.metrics-fallback {
+  border-top-color: #f3c6cf;
+}
+
+.metrics-fallback .creator-recovery-heading > span {
+  background: #ffeef1;
+  color: #be123c;
+}
+
 .screenshot-picker.compact {
   min-height: 96px;
 }

koc-portal/app/page.tsx

@@ -23,6 +23,12 @@ type Assignment = {
   ocr_status: string;
   exposure: number | null;
   views: number | null;
+  collection_status?: string | null;
+  latest_likes?: number | null;
+  latest_comments?: number | null;
+  latest_collects?: number | null;
+  collection_updated_at?: string | null;
+  public_metrics_screenshot_key?: string | null;
   title: string;
   body: string;
   source_row: number | null;
@@ -71,9 +77,17 @@ type TaskPayload = {
     availableQuantity?: number;
     dueAt: string;
     status: string;
-    type: "content_publish" | "screenshot_collect";
+    type: "content_publish";
     platform: "小红书" | "抖音";
     contentFormat: "image_text" | "video";
+    recoveryEnabled?: boolean;
+    recoveryDueAt?: string;
+    recoveryInstructions?: string;
+    recoveryExampleImages?: Array<{
+      index: number;
+      width: number | null;
+      height: number | null;
+    }>;
   };
   claim: null | {
     id: string;
@@ -82,6 +96,7 @@ type TaskPayload = {
     createdAt: string;
     assignments: Assignment[];
     delegations: DelegationSummary[];
+    joinQrCode?: string;
   };
   delegation: null | {
     id: string;
@@ -249,10 +264,7 @@ function isMobilePortalViewport() {
   );
 }
 
-function statusLabel(item: Assignment, taskType = "content_publish") {
-  if (taskType === "screenshot_collect") {
-    return item.result_submitted_at ? "已提交" : "待提交";
-  }
+function statusLabel(item: Assignment) {
   return item.publish_url ? "已回填" : "待发布";
 }
 
@@ -454,6 +466,7 @@ export default function Home() {
   const [creatorScreenshot, setCreatorScreenshot] = useState<File | null>(null);
   const [creatorExposure, setCreatorExposure] = useState("");
   const [creatorViews, setCreatorViews] = useState("");
+  const [publicMetricsShot, setPublicMetricsShot] = useState<File | null>(null);
   const [entryMode, setEntryMode] = useState<"claim" | "recover">("claim");
   const [recoveredClaims, setRecoveredClaims] = useState<RecoveredClaim[]>([]);
   const [wecomIdentity, setWecomIdentity] = useState<WecomPortalIdentity | null>(
@@ -479,6 +492,7 @@ export default function Home() {
   const batchWorkbookInputRef = useRef<HTMLInputElement | null>(null);
   const publishScreenshotPreview = useFilePreview(screenshot);
   const creatorScreenshotPreview = useFilePreview(creatorScreenshot);
+  const publicMetricsPreview = useFilePreview(publicMetricsShot);
   const taskResultPreviews = useMemo(
     () =>
       taskResultScreenshots.map((file) => ({
@@ -672,6 +686,7 @@ export default function Home() {
       setScreenshot(null);
       setTaskResultScreenshots([]);
       setCreatorScreenshot(null);
+      setPublicMetricsShot(null);
       setCreatorExposure(
         selected.exposure === null ? "" : String(selected.exposure),
       );
@@ -713,11 +728,7 @@ export default function Home() {
       setDelegationToken("");
       updateUrl(result.claimToken);
       await loadTask(taskToken, result.claimToken);
-      setToast(
-        payload?.task.type === "screenshot_collect"
-          ? `已领取 ${result.claimedCount} 份，完成后逐份上传截图`
-          : `已领取 ${result.claimedCount} 篇，逐篇发布即可`,
-      );
+      setToast(`已领取 ${result.claimedCount} 篇，逐篇发布即可`);
     } catch (reason) {
       setToast(reason instanceof Error ? reason.message : "领取失败");
     } finally {
@@ -794,6 +805,21 @@ export default function Home() {
     return `${adminOrigin}/api/partner-image?${params}`;
   };
 
+  const recoveryExampleImageUrl = (imageIndex: number) => {
+    if (!selected) return "";
+    const params = new URLSearchParams({
+      distribution: selected.id,
+      index: String(imageIndex),
+      kind: "task-example",
+    });
+    if (delegationToken) params.set("share", delegationToken);
+    else {
+      params.set("task", taskToken);
+      params.set("claim", claimToken);
+    }
+    return `${adminOrigin}/api/partner-image?${params}`;
+  };
+
   const noteVideoUrl = (
     item: Assignment,
     videoIndex: number,
@@ -827,6 +853,36 @@ export default function Home() {
     return `${adminOrigin}/api/partner-image?${params}`;
   };
 
+  const publicMetricsImageUrl = () => {
+    if (!selected) return "";
+    const params = new URLSearchParams({
+      distribution: selected.id,
+      index: "1",
+      kind: "public-metrics",
+    });
+    if (delegationToken) params.set("share", delegationToken);
+    else {
+      params.set("task", taskToken);
+      params.set("claim", claimToken);
+    }
+    return `${adminOrigin}/api/partner-image?${params}`;
+  };
+
+  const submitPublicMetricsShot = async () => {
+    if (!selected || !publicMetricsShot) return;
+    try {
+      setWorking(true);
+      await uploadEvidence(selected, publicMetricsShot, "public-metrics");
+      setPublicMetricsShot(null);
+      await loadTask(taskToken, claimToken, delegationToken);
+      setToast("数据截图已补交，运营核对后会补录公开数据");
+    } catch (reason) {
+      setToast(reason instanceof Error ? reason.message : "数据截图上传失败");
+    } finally {
+      setWorking(false);
+    }
+  };
+
   const evidenceImageUrl = (
     item: Assignment,
     kind: "publish" | "creator",
@@ -1190,7 +1246,7 @@ export default function Home() {
   const uploadEvidence = async (
     selectedItem: Assignment,
     file: File,
-    kind: "publish" | "creator-center" | "task-result",
+    kind: "publish" | "creator-center" | "task-result" | "public-metrics",
   ): Promise<{ exposure?: number | null; views?: number | null; ocrStatus?: string }> => {
     const compressed = await compressScreenshot(file);
     const headers: Record<string, string> = {
@@ -1274,9 +1330,13 @@ export default function Home() {
     }
   };
 
-  const submitScreenshotTask = async (event: FormEvent) => {
-    event.preventDefault();
+  const submitRecoveryScreenshots = async (event?: FormEvent) => {
+    event?.preventDefault();
     if (!selected) return;
+    if (!selected.publish_url) {
+      setToast("请先回填这篇笔记的发布链接，再提交回收截图");
+      return;
+    }
     try {
       setWorking(true);
       const existingScreenshots = resultScreenshotKeys(
@@ -1290,7 +1350,7 @@ export default function Home() {
           );
         }
       } else if (existingScreenshots.length === 0) {
-        throw new Error("请上传任务要求的截图");
+        throw new Error("请上传发布后的笔记截图");
       }
       const response = await fetch(partnerApi("/api/partner"), {
         method: "POST",
@@ -1309,8 +1369,8 @@ export default function Home() {
       setTaskResultScreenshots([]);
       setToast(
         taskResultScreenshots.length > 1
-          ? `${taskResultScreenshots.length}张任务截图已提交`
-          : "任务截图已提交",
+          ? `${taskResultScreenshots.length}张回收截图已提交`
+          : "回收截图已提交",
       );
     } catch (reason) {
       setToast(reason instanceof Error ? reason.message : "截图提交失败");
@@ -1406,149 +1466,6 @@ export default function Home() {
   }
 
   if (selected && activeBatch) {
-    if (payload.task.type === "screenshot_collect") {
-      return (
-        <main className="portal-shell detail-shell">
-          <header className="portal-topbar">
-            <div className="portal-brand"><span>K</span><strong>KOC LOOP</strong></div>
-            <div className="claimant-chip">
-              {payload.claim ? payload.claim.claimantName : "合作社转派 · 无需登录"}
-            </div>
-          </header>
-          <button className="back-link" onClick={closeNote}>← 返回我的任务</button>
-          <div className="detail-grid screenshot-task-detail">
-            <article className="note-document">
-              <div className="note-document-meta">
-                <span>截图任务 {activeBatch.assignments.findIndex((item) => item.id === selected.id) + 1}</span>
-                <span>只需上传结果截图</span>
-              </div>
-              <div className="document-label-row">
-                <p className="document-label">小红书搜索关键词</p>
-                <PlatformBadge platform={payload.task.platform} compact />
-              </div>
-              <div className="note-title-row">
-                <h1>{selected.title}</h1>
-                <button
-                  type="button"
-                  className="inline-copy"
-                  onClick={() => void copyText(selected.title, "搜索关键词已复制")}
-                >
-                  复制关键词
-                </button>
-              </div>
-              <div className="document-rule" />
-              <p className="document-label">任务说明</p>
-              <div className="note-body">{selected.body}</div>
-              {selected.images.length > 0 && (
-                <section className="note-images">
-                  <div className="note-images-heading">
-                    <div>
-                      <p className="document-label">示例截图</p>
-                      <span>请参考示例，确保小红书 AI 总结完整可见</span>
-                    </div>
-                  </div>
-                  <div className="note-image-grid">
-                    {selected.images.map((image, index) => (
-                      <div className="note-image-card" key={image.index}>
-                        <a className="note-image-preview" href={noteImageUrl(selected, image.index)} target="_blank" rel="noreferrer">
-                          {/* eslint-disable-next-line @next/next/no-img-element */}
-                          <img src={noteImageUrl(selected, image.index)} alt={`示例截图 ${index + 1}`} />
-                        </a>
-                      </div>
-                    ))}
-                  </div>
-                </section>
-              )}
-            </article>
-            <form className="submit-card" onSubmit={submitScreenshotTask}>
-              <div className="submit-heading">
-                <div>
-                  <p className="micro">截图回收</p>
-                  <h2>上传小红书 AI 总结截图</h2>
-                </div>
-                <span className={selected.result_submitted_at ? "done" : "pending"}>
-                  {statusLabel(selected, payload.task.type)}
-                </span>
-              </div>
-              <div className="mapping-note">
-                <span>1 : N</span>
-                <p>这些截图只会绑定到当前任务，不需要填写发布链接或其他数据。</p>
-              </div>
-              <label>
-                <span className="task-result-label-row">
-                  <span>任务结果截图</span>
-                  <small>
-                    已选择 {resultScreenshotKeys(selected.result_screenshot_key).length + taskResultScreenshots.length}/{MAX_TASK_RESULT_SCREENSHOTS} 张
-                  </small>
-                </span>
-                <div className="task-result-gallery">
-                  {resultScreenshotKeys(selected.result_screenshot_key).map((_, index) => {
-                    const imageUrl = taskResultImageUrl(selected, index + 1);
-                    return (
-                    <button
-                      type="button"
-                      className="task-result-thumb uploaded"
-                      onClick={() =>
-                        setPreviewImage({
-                          src: imageUrl,
-                          alt: `已上传任务截图 ${index + 1}`,
-                        })
-                      }
-                      key={`uploaded-${index}`}
-                    >
-                      <img src={imageUrl} alt={`已上传任务截图 ${index + 1}`} />
-                      <span>已上传</span>
-                    </button>
-                  )})}
-                  {taskResultPreviews.map(({ file, url }, index) => (
-                    <div className="task-result-thumb pending-upload" key={`${file.name}-${file.lastModified}`}>
-                      <img src={url} alt={`待上传任务截图 ${index + 1}`} />
-                      <button
-                        type="button"
-                        aria-label={`移除 ${file.name}`}
-                        onClick={() => removeTaskResultScreenshot(file)}
-                      >
-                        ×
-                      </button>
-                      <span>待提交</span>
-                    </div>
-                  ))}
-                  {resultScreenshotKeys(selected.result_screenshot_key).length + taskResultScreenshots.length < MAX_TASK_RESULT_SCREENSHOTS && (
-                    <div className="task-result-add">
-                      <input
-                        type="file"
-                        accept="image/*"
-                        multiple
-                        onChange={chooseTaskResultScreenshots}
-                      />
-                      <b>＋</b>
-                      <strong>
-                        {taskResultScreenshots.length || selected.result_screenshot_key
-                          ? "继续添加"
-                          : "选择截图"}
-                      </strong>
-                    </div>
-                  )}
-                </div>
-                <small className="task-result-hint">支持一次选择或继续追加，最多9张，每张不超过8MB；点击图片可在当前页面查看大图。</small>
-              </label>
-              <button className="submit-primary" disabled={working}>
-                {working
-                  ? "正在提交…"
-                  : selected.result_submitted_at
-                    ? "更新任务截图"
-                    : "确认提交任务截图"}
-              </button>
-              {selected.result_submitted_at && (
-                <p className="submitted-at">上次提交：{formatDate(selected.result_submitted_at, true)}</p>
-              )}
-            </form>
-          </div>
-          <ImageLightbox image={previewImage} onClose={() => setPreviewImage(null)} />
-          {toast && <div className={toastClassName(toast)}>{toast}</div>}
-        </main>
-      );
-    }
     const creatorDueAt = creatorScreenshotDueAt(selected.publish_time);
     const creatorDataReady =
       Boolean(selected.creator_screenshot_key) &&
@@ -1788,12 +1705,97 @@ export default function Home() {
                 </label>
               </div>
             </div>
-            <button className="submit-primary" disabled={working}>
+            <button
+              className="submit-primary"
+              disabled={working || !(screenshot || selected.publish_screenshot_key)}
+            >
               {working ? "正在提交…" : selected.publish_url ? "更新这篇笔记" : "确认回填这篇笔记"}
             </button>
+            {!(screenshot || selected.publish_screenshot_key) && (
+              <p className="submitted-at">先上传发布截图，链接回填需以截图为凭证</p>
+            )}
             {selected.publish_time && (
               <p className="submitted-at">上次回填：{formatDate(selected.publish_time, true)}</p>
             )}
+            {selected.publish_url && selected.collection_status === "failed" && (
+              <section className="creator-recovery metrics-fallback">
+                <div className="creator-recovery-heading">
+                  <div>
+                    <p className="micro">公开数据补交</p>
+                    <h3>自动采集失败，请补交数据截图</h3>
+                  </div>
+                  <span className={selected.public_metrics_screenshot_key ? "done" : ""}>
+                    {selected.public_metrics_screenshot_key ? "已补交，待核对" : "待补交"}
+                  </span>
+                </div>
+                <p className="creator-recovery-tip">
+                  系统自动采集这篇笔记的公开数据失败了。请打开笔记页面，
+                  截一张包含点赞、收藏、评论数字的截图上传，运营核对后会补录数据。
+                </p>
+                <div className="evidence-field compact-field">
+                  <span>数据截图</span>
+                  <div
+                    className={`screenshot-picker compact ${
+                      publicMetricsShot || selected.public_metrics_screenshot_key
+                        ? "has-file preview-mode"
+                        : ""
+                    }`}
+                  >
+                    {publicMetricsShot || selected.public_metrics_screenshot_key ? (
+                      <button
+                        type="button"
+                        className="evidence-preview-button compact-preview"
+                        onClick={() =>
+                          setPreviewImage({
+                            src:
+                              publicMetricsPreview ||
+                              publicMetricsImageUrl(),
+                            alt: "公开数据截图",
+                          })
+                        }
+                      >
+                        {/* eslint-disable-next-line @next/next/no-img-element */}
+                        <img
+                          src={publicMetricsPreview || publicMetricsImageUrl()}
+                          alt="公开数据截图"
+                        />
+                        <span>点击查看大图</span>
+                      </button>
+                    ) : (
+                      <div className="evidence-empty-state">
+                        <b>＋</b>
+                        <strong>点击上传笔记数据页截图</strong>
+                        <small>需包含点赞、收藏、评论数字，最大8MB</small>
+                      </div>
+                    )}
+                    <label className="evidence-upload-action">
+                      <input
+                        type="file"
+                        accept="image/*"
+                        onChange={(event) =>
+                          setPublicMetricsShot(event.target.files?.[0] ?? null)
+                        }
+                      />
+                      {publicMetricsShot || selected.public_metrics_screenshot_key
+                        ? "重新选择"
+                        : "选择图片"}
+                    </label>
+                  </div>
+                </div>
+                <button
+                  type="button"
+                  className="creator-submit"
+                  disabled={!publicMetricsShot || working}
+                  onClick={() => void submitPublicMetricsShot()}
+                >
+                  {working
+                    ? "正在上传…"
+                    : selected.public_metrics_screenshot_key
+                      ? "更新数据截图"
+                      : "提交数据截图"}
+                </button>
+              </section>
+            )}
             {selected.publish_url && (
               <section className="creator-recovery">
                 <div className="creator-recovery-heading">
@@ -1805,8 +1807,23 @@ export default function Home() {
                     {creatorDataReady ? "已提交" : "待提交"}
                   </span>
                 </div>
+                {selected.latest_likes !== null &&
+                selected.latest_likes !== undefined ? (
+                  <p className="auto-collect-line">
+                    公开数据系统自动采集中：赞 {selected.latest_likes ?? "—"} · 藏{" "}
+                    {selected.latest_collects ?? "—"} · 评 {selected.latest_comments ?? "—"}
+                    {selected.collection_updated_at
+                      ? `（${formatDate(selected.collection_updated_at, true)}）`
+                      : ""}
+                    ，无需你填写。
+                  </p>
+                ) : (
+                  <p className="auto-collect-line">
+                    点赞、收藏、评论等公开数据由系统每天自动采集，无需你填写。
+                  </p>
+                )}
                 <p className="creator-recovery-tip">
-                  请在发布满7天后，上传创作者中心数据页完整截图，并填写页面显示的数据。
+                  这一步只需做一次：发布满7天后，上传创作者中心数据页截图，系统自动识别曝光量和阅读量；仅当识别失败时才需要手动填写这两个数字。
                   {creatorDueAt && ` 建议上传日期：${formatDate(creatorDueAt)}。`}
                 </p>
                 <div className="evidence-field compact-field">
@@ -1888,6 +1905,9 @@ export default function Home() {
                     />
                   </label>
                 </div>
+                <small className="task-result-hint">
+                  两个数字一般由截图自动识别填入；只有识别失败时才需要手动修改。
+                </small>
                 <button
                   type="button"
                   className="creator-submit"
@@ -1907,6 +1927,156 @@ export default function Home() {
                 </button>
               </section>
             )}
+            {payload.task.recoveryEnabled && (
+              <section className="creator-recovery task-recovery">
+                <div className="creator-recovery-heading">
+                  <div>
+                    <p className="micro">截图回收</p>
+                    <h3>上传发布后的笔记截图</h3>
+                  </div>
+                  <span className={selected.result_submitted_at ? "done" : ""}>
+                    {selected.result_submitted_at ? "已提交" : "待提交"}
+                  </span>
+                </div>
+                {selected.publish_url && (
+                  <p className="creator-recovery-tip">
+                    {payload.task.recoveryInstructions || "请提交发布后的笔记截图"}
+                    {payload.task.recoveryDueAt
+                      ? ` 截止：${formatDate(payload.task.recoveryDueAt)}。`
+                      : ""}
+                  </p>
+                )}
+                {selected.publish_url &&
+                  (payload.task.recoveryExampleImages?.length ?? 0) > 0 && (
+                  <div className="task-result-gallery recovery-example">
+                    {payload.task.recoveryExampleImages?.map((image) => (
+                      <button
+                        type="button"
+                        className="task-result-thumb uploaded"
+                        key={`recovery-example-${image.index}`}
+                        onClick={() =>
+                          setPreviewImage({
+                            src: recoveryExampleImageUrl(image.index),
+                            alt: "回收示例截图",
+                          })
+                        }
+                      >
+                        {/* eslint-disable-next-line @next/next/no-img-element */}
+                        <img
+                          src={recoveryExampleImageUrl(image.index)}
+                          alt="回收示例截图"
+                        />
+                        <span>示例</span>
+                      </button>
+                    ))}
+                  </div>
+                )}
+                {selected.publish_url ? (
+                  <>
+                    <div className="evidence-field compact-field">
+                      <span className="task-result-label-row">
+                        <span>回收截图</span>
+                        <small>
+                          已选择{" "}
+                          {resultScreenshotKeys(selected.result_screenshot_key)
+                            .length +
+                            taskResultScreenshots.length}
+                          /{MAX_TASK_RESULT_SCREENSHOTS} 张
+                        </small>
+                      </span>
+                      <div className="task-result-gallery">
+                        {resultScreenshotKeys(selected.result_screenshot_key).map(
+                          (_, index) => {
+                            const imageUrl = taskResultImageUrl(selected, index + 1);
+                            return (
+                              <button
+                                type="button"
+                                className="task-result-thumb uploaded"
+                                onClick={() =>
+                                  setPreviewImage({
+                                    src: imageUrl,
+                                    alt: `已上传回收截图 ${index + 1}`,
+                                  })
+                                }
+                                key={`uploaded-${index}`}
+                              >
+                                {/* eslint-disable-next-line @next/next/no-img-element */}
+                                <img
+                                  src={imageUrl}
+                                  alt={`已上传回收截图 ${index + 1}`}
+                                />
+                                <span>已上传</span>
+                              </button>
+                            );
+                          },
+                        )}
+                        {taskResultPreviews.map(({ file, url }, index) => (
+                          <div
+                            className="task-result-thumb pending-upload"
+                            key={`${file.name}-${file.lastModified}`}
+                          >
+                            {/* eslint-disable-next-line @next/next/no-img-element */}
+                            <img src={url} alt={`待上传回收截图 ${index + 1}`} />
+                            <button
+                              type="button"
+                              aria-label={`移除 ${file.name}`}
+                              onClick={() => removeTaskResultScreenshot(file)}
+                            >
+                              ×
+                            </button>
+                            <span>待提交</span>
+                          </div>
+                        ))}
+                        {resultScreenshotKeys(selected.result_screenshot_key)
+                          .length +
+                          taskResultScreenshots.length <
+                          MAX_TASK_RESULT_SCREENSHOTS && (
+                          <div className="task-result-add">
+                            <input
+                              type="file"
+                              accept="image/*"
+                              multiple
+                              onChange={chooseTaskResultScreenshots}
+                            />
+                            <b>＋</b>
+                            <strong>
+                              {taskResultScreenshots.length ||
+                              selected.result_screenshot_key
+                                ? "继续添加"
+                                : "选择截图"}
+                            </strong>
+                          </div>
+                        )}
+                      </div>
+                      <small className="task-result-hint">
+                        支持一次选择或继续追加，最多9张，每张不超过8MB；点击图片可在当前页面查看大图。
+                      </small>
+                    </div>
+                    <button
+                      type="button"
+                      className="creator-submit"
+                      disabled={working}
+                      onClick={() => void submitRecoveryScreenshots()}
+                    >
+                      {working
+                        ? "正在提交…"
+                        : selected.result_submitted_at
+                          ? "更新回收截图"
+                          : "确认提交回收截图"}
+                    </button>
+                    {selected.result_submitted_at && (
+                      <p className="submitted-at">
+                        上次提交：{formatDate(selected.result_submitted_at, true)}
+                      </p>
+                    )}
+                  </>
+                ) : (
+                  <p className="creator-recovery-tip">
+                    回填发布链接后，这里会开放回收截图上传。
+                  </p>
+                )}
+              </section>
+            )}
           </form>
         </div>
         <ImageLightbox image={previewImage} onClose={() => setPreviewImage(null)} />
@@ -1916,16 +2086,18 @@ export default function Home() {
   }
 
   if (activeBatch) {
-    const isScreenshotTask = payload.task.type === "screenshot_collect";
-    const completed = activeBatch.assignments.filter((item) =>
-      isScreenshotTask ? item.result_submitted_at : item.publish_url,
+    const recoveryEnabled = payload.task.recoveryEnabled === true;
+    const completed = activeBatch.assignments.filter(
+      (item) => item.publish_url,
     ).length;
+    const recoverySubmitted = recoveryEnabled
+      ? activeBatch.assignments.filter((item) => item.result_submitted_at).length
+      : 0;
     const isClaimOwner = Boolean(payload.claim);
-    const shareableCount = payload.claim?.assignments.filter(
-      (item) =>
-        !(isScreenshotTask ? item.result_submitted_at : item.publish_url) &&
-        !item.delegation_bundle_id,
-    ).length ?? 0;
+    const shareableCount =
+      payload.claim?.assignments.filter(
+        (item) => !item.publish_url && !item.delegation_bundle_id,
+      ).length ?? 0;
     return (
       <main className="portal-shell">
         <header className="portal-topbar">
@@ -1942,70 +2114,79 @@ export default function Home() {
         <section className="claimed-hero">
           <div>
             <p className="micro">
-              {isClaimOwner
-                ? "我的领取任务"
-                : isScreenshotTask
-                  ? "合作社转派截图任务包"
-                  : "合作社转派发布包"}
+              {isClaimOwner ? "我的领取任务" : "合作社转派发布包"}
             </p>
             <h1>{payload.task.name}</h1>
             <p className="platform-meta-line">
               <span>{payload.task.brand}</span>
               <PlatformBadge platform={payload.task.platform} compact />
-              <span>{formatDate(payload.task.dueAt)}前{isScreenshotTask ? "提交" : "发布"}</span>
+              <span>{formatDate(payload.task.dueAt)}前发布</span>
+              {recoveryEnabled && payload.task.recoveryDueAt
+                ? ` · 截图回收 ${formatDate(payload.task.recoveryDueAt)}截止`
+                : ""}
               {payload.delegation ? ` · ${payload.delegation.label}` : ""}
             </p>
           </div>
-          <div className="completion-ring">
-            <strong>{completed}/{activeBatch.assignments.length}</strong>
-            <span>已回填</span>
+          <div className="hero-progress">
+            <div className="completion-ring">
+              <strong>{completed}/{activeBatch.assignments.length}</strong>
+              <span>已回填</span>
+            </div>
+            {recoveryEnabled && (
+              <small className="recovery-progress">
+                截图已收 {recoverySubmitted}/{activeBatch.assignments.length}
+              </small>
+            )}
           </div>
         </section>
+        {isClaimOwner && payload.claim?.joinQrCode ? (
+          <section className="join-qr-card">
+            <div className="join-qr-body">
+              <img src={payload.claim.joinQrCode} alt="扫码进任务群二维码" />
+              <div>
+                <h2>扫码加入任务群</h2>
+                <p>用微信扫描二维码进入本任务沟通群，进群后按群内指引发布内容。</p>
+              </div>
+            </div>
+          </section>
+        ) : null}
         <section className="notes-section">
           <div className="section-heading">
             <div>
               <h2>
-                {isClaimOwner
-                  ? isScreenshotTask ? "我领取的截图任务" : "我领取的笔记"
-                  : isScreenshotTask ? "需要完成的截图任务" : "需要发布的笔记"}
+                {isClaimOwner ? "我领取的笔记" : "需要发布的笔记"}
               </h2>
               <p>
                 {isClaimOwner
-                  ? isScreenshotTask
-                    ? "打开一份查看关键词和要求，完成后单独上传截图；也可以转派给底层KOC"
-                    : "可逐篇回填，也可导出Excel填写后批量上传；还可以选择笔记转派给底层KOC"
-                  : isScreenshotTask
-                    ? "打开任务查看搜索关键词和要求，完成后逐份上传截图"
-                    : "打开一篇查看完整内容，发布后逐篇回填"}
+                  ? "可逐篇回填，也可导出Excel填写后批量上传；还可以选择笔记转派给底层KOC"
+                  : "打开一篇查看完整内容，发布后逐篇回填"}
               </p>
             </div>
             <div className="section-actions">
-              <span>{activeBatch.assignments.length} {isScreenshotTask ? "份" : "篇"}</span>
-              {!isScreenshotTask && (
-                <>
-                  <button
-                    type="button"
-                    disabled={batchWorkbookWorking}
-                    onClick={() => void exportBatchWorkbook()}
-                  >
-                    {batchWorkbookWorking ? "处理中…" : "导出Excel"}
-                  </button>
-                  <button
-                    type="button"
-                    disabled={batchWorkbookWorking}
-                    onClick={() => batchWorkbookInputRef.current?.click()}
-                  >
-                    上传回填表
-                  </button>
-                  <input
-                    ref={batchWorkbookInputRef}
-                    className="batch-workbook-input"
-                    type="file"
-                    accept=".xlsx,application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
-                    onChange={(event) => void importBatchWorkbook(event)}
-                  />
-                </>
-              )}
+              <span>{activeBatch.assignments.length} 篇</span>
+              <>
+                <button
+                  type="button"
+                  disabled={batchWorkbookWorking}
+                  onClick={() => void exportBatchWorkbook()}
+                >
+                  {batchWorkbookWorking ? "处理中…" : "导出Excel"}
+                </button>
+                <button
+                  type="button"
+                  disabled={batchWorkbookWorking}
+                  onClick={() => batchWorkbookInputRef.current?.click()}
+                >
+                  上传回填表
+                </button>
+                <input
+                  ref={batchWorkbookInputRef}
+                  className="batch-workbook-input"
+                  type="file"
+                  accept=".xlsx,application/vnd.openxmlformats-officedocument.spreadsheetml.sheet"
+                  onChange={(event) => void importBatchWorkbook(event)}
+                />
+              </>
               {isClaimOwner && (
                 <button
                   type="button"
@@ -2017,7 +2198,7 @@ export default function Home() {
                     setShareLabel("");
                   }}
                 >
-                  {shareComposerOpen ? "取消选择" : isScreenshotTask ? "选择任务并分享" : "选择笔记并分享"}
+                  {shareComposerOpen ? "取消选择" : "选择笔记并分享"}
                 </button>
               )}
             </div>
@@ -2028,9 +2209,7 @@ export default function Home() {
                 <p className="micro">合作社转派</p>
                 <h3>生成免登录分享链接</h3>
                 <p>
-                  {isScreenshotTask
-                    ? "勾选待提交任务，底层KOC打开链接即可查看要求并上传截图。"
-                    : "勾选待发布笔记，底层KOC打开链接即可查看内容并逐篇回填。"}
+                  勾选待发布笔记，底层KOC打开链接即可查看内容并逐篇回填。
                 </p>
               </div>
               <label>
@@ -2044,7 +2223,7 @@ export default function Home() {
                 />
               </label>
               <div className="share-composer-action">
-                <strong>已选 {selectedForShare.length} {isScreenshotTask ? "份" : "篇"}</strong>
+                <strong>已选 {selectedForShare.length} 篇</strong>
                 <button
                   className="share-primary"
                   disabled={
@@ -2064,8 +2243,7 @@ export default function Home() {
           <div className="note-list">
             {activeBatch.assignments.map((item, index) => {
               const shareDisabled = Boolean(
-                (isScreenshotTask ? item.result_submitted_at : item.publish_url) ||
-                  item.delegation_bundle_id,
+                item.publish_url || item.delegation_bundle_id,
               );
               return (
               <article
@@ -2076,8 +2254,8 @@ export default function Home() {
                   <label
                     className={`share-checkbox ${shareDisabled ? "disabled" : ""}`}
                     title={
-                      (isScreenshotTask ? item.result_submitted_at : item.publish_url)
-                        ? isScreenshotTask ? "已提交任务不能转派" : "已发布笔记不能转派"
+                      item.publish_url
+                        ? "已发布笔记不能转派"
                         : item.delegation_bundle_id
                           ? `已转派给 ${item.delegation_label}`
                           : "选择这篇笔记"
@@ -2093,7 +2271,7 @@ export default function Home() {
                     <span>✓</span>
                   </label>
                 )}
-                <span className={`note-index ${(isScreenshotTask ? item.result_submitted_at : item.publish_url) ? "done" : ""}`}>
+                <span className={`note-index ${item.publish_url ? "done" : ""}`}>
                   {String(index + 1).padStart(2, "0")}
                 </span>
                 {item.images[0] ? (
@@ -2117,36 +2295,35 @@ export default function Home() {
                 <div>
                   <h3>{item.title}</h3>
                   <p>
-                    {isScreenshotTask
-                      ? `搜索关键词 · ${statusLabel(item, payload.task.type)}`
-                      : <>
-                          <span>{item.videos.length > 0 ? `${item.videos.length} 个视频` : `${item.images.length} 张配图`}</span>
-                          <PlatformBadge platform={payload.task.platform} compact />
-                          <span>飞书源行 {item.source_row ?? "—"} · {statusLabel(item, payload.task.type)}</span>
-                        </>}
-                    {!isScreenshotTask && item.creator_screenshot_key ? " · D7截图已交" : ""}
+                    <span>{item.videos.length > 0 ? `${item.videos.length} 个视频` : `${item.images.length} 张配图`}</span>
+                    <PlatformBadge platform={payload.task.platform} compact />
+                    <span>飞书源行 {item.source_row ?? "—"} · {statusLabel(item)}</span>
+                    {recoveryEnabled && item.publish_url
+                      ? item.result_submitted_at
+                        ? " · 截图已交"
+                        : " · 截图待交"
+                      : ""}
+                    {item.creator_screenshot_key ? " · D7截图已交" : ""}
                     {item.delegation_label ? ` · 已转派给 ${item.delegation_label}` : ""}
                   </p>
                 </div>
                 <span
                   className={`note-status ${
-                    (isScreenshotTask ? item.result_submitted_at : item.publish_url)
+                    item.publish_url
                       ? "done"
                       : item.delegation_bundle_id
                         ? "delegated"
                         : ""
                   }`}
                 >
-                  {(isScreenshotTask ? item.result_submitted_at : item.publish_url)
-                    ? isScreenshotTask ? "已提交" : "已回填"
+                  {item.publish_url
+                    ? "已回填"
                     : item.delegation_bundle_id
                       ? "已转派"
-                      : isScreenshotTask ? "待提交" : "待发布"}
+                      : "待发布"}
                 </span>
                 <button onClick={() => openNote(item)}>
-                  {(isScreenshotTask ? item.result_submitted_at : item.publish_url)
-                    ? "查看 / 修改"
-                    : isScreenshotTask ? "查看并上传" : "查看并回填"} →
+                  {item.publish_url ? "查看 / 修改" : "查看并回填"} →
                 </button>
               </article>
               );
@@ -2157,7 +2334,7 @@ export default function Home() {
               <div className="delegation-heading">
                 <div>
                   <p className="micro">分享记录</p>
-                  <h3>{isScreenshotTask ? "转派截图任务包" : "转派发布包"}</h3>
+                  <h3>转派发布包</h3>
                 </div>
                 <span>{payload.claim.delegations.length} 个</span>
               </div>
@@ -2170,9 +2347,9 @@ export default function Home() {
                     <div>
                       <strong>{bundle.label}</strong>
                       <span>
-                        {bundle.quantity} {isScreenshotTask ? "份" : "篇"} · {isScreenshotTask ? "已提交" : "已发布"}{" "}
-                        {Number(isScreenshotTask ? bundle.result_completed_count ?? bundle.completed_count : bundle.completed_count ?? 0)}/{bundle.quantity}
-                        {!isScreenshotTask && ` · D7完成 ${Number(bundle.creator_completed_count ?? 0)}`}
+                        {bundle.quantity} 篇 · 已发布{" "}
+                        {Number(bundle.completed_count ?? 0)}/{bundle.quantity}
+                        {` · D7完成 ${Number(bundle.creator_completed_count ?? 0)}`}
                       </span>
                     </div>
                     <small>{formatDate(bundle.created_at, true)}</small>
@@ -2192,7 +2369,7 @@ export default function Home() {
                         >
                           复制链接
                         </button>
-                        {Number(isScreenshotTask ? bundle.result_completed_count ?? bundle.completed_count : bundle.completed_count ?? 0) === 0 && (
+                        {Number(bundle.completed_count ?? 0) === 0 && (
                           <button
                             type="button"
                             className="danger"
@@ -2213,9 +2390,7 @@ export default function Home() {
         <div className="safe-tip">
           {isClaimOwner
             ? "以后再次打开原任务链接，填写相同微信号或手机号即可找回全部领取批次和分享记录。"
-            : isScreenshotTask
-              ? "请保存当前分享链接；完成任务后通过此链接上传截图即可。"
-              : "请保存当前分享链接；发布后仍需通过此链接回填第7天截图、曝光量和阅读量。"}
+            : "请保存当前分享链接；发布后仍需通过此链接回填第7天截图、曝光量和阅读量。"}
         </div>
         {toast && <div className={toastClassName(toast)}>{toast}</div>}
       </main>
@@ -2236,13 +2411,15 @@ export default function Home() {
           </div>
           <h1>{payload.task.name}</h1>
           <p>
-            {payload.task.type === "screenshot_collect"
-              ? "领取后查看搜索关键词和任务要求，完成后逐份上传截图。"
-              : "领取后可查看完整笔记正文，每篇笔记独立回填发布信息。"}
+            领取后可查看完整笔记正文，每篇笔记独立回填发布信息。
+            {payload.task.recoveryEnabled ? "发布后还需提交回收截图。" : ""}
           </p>
           <div className="hero-meta">
             <span>截止 {formatDate(payload.task.dueAt)}</span>
-            <span>剩余 {payload.task.availableQuantity} {payload.task.type === "screenshot_collect" ? "份" : "篇"}</span>
+            {payload.task.recoveryEnabled && payload.task.recoveryDueAt ? (
+              <span>截图回收截止 {formatDate(payload.task.recoveryDueAt)}</span>
+            ) : null}
+            <span>剩余 {payload.task.availableQuantity} 篇</span>
           </div>
         </div>
         <aside className="claim-card">
@@ -2255,7 +2432,7 @@ export default function Home() {
                 setRecoveredClaims([]);
               }}
             >
-              {payload.task.type === "screenshot_collect" ? "领取新任务" : "领取新笔记"}
+              领取新笔记
             </button>
             <button
               type="button"
@@ -2281,7 +2458,7 @@ export default function Home() {
             <form onSubmit={claimNotes}>
               <div>
                 <p className="micro">01 · 确认领取</p>
-                <h2>你要领取多少{payload.task.type === "screenshot_collect" ? "份" : "篇"}？</h2>
+                <h2>你要领取多少篇？</h2>
               </div>
               {(!wecomIdentity || manualEntry) && (
                 <label>
@@ -2300,7 +2477,7 @@ export default function Home() {
               )}
               <div className="quantity-control">
                 <button type="button" onClick={() => setQuantity(Math.max(1, quantity - 1))}>−</button>
-                <div><strong>{quantity}</strong><span>{payload.task.type === "screenshot_collect" ? "份" : "篇"}</span></div>
+                <div><strong>{quantity}</strong><span>篇</span></div>
                 <button
                   type="button"
                   onClick={() =>
@@ -2318,15 +2495,15 @@ export default function Home() {
                   ? "当前任务已领完"
                   : working
                     ? "领取中…"
-                    : `确认领取 ${quantity} ${payload.task.type === "screenshot_collect" ? "份" : "篇"}`}
+                    : `确认领取 ${quantity} 篇`}
               </button>
-              <small>领取后系统会生成你的专属{payload.task.type === "screenshot_collect" ? "任务清单" : "笔记清单"}</small>
+              <small>领取后系统会生成你的专属笔记清单</small>
             </form>
           ) : (
             <form onSubmit={recoverClaims}>
               <div>
                 <p className="micro">找回历史记录</p>
-                <h2>继续之前领取的{payload.task.type === "screenshot_collect" ? "任务" : "笔记"}</h2>
+                <h2>继续之前领取的笔记</h2>
                 <p className="recover-intro">
                   {wecomIdentity && !manualEntry
                     ? "已用企微身份查找，同一任务多次领取会分批展示。"
@@ -2374,9 +2551,9 @@ export default function Home() {
       <section className="steps">
         <div><span>1</span><strong>选择数量</strong><p>一次可领多篇</p></div>
         <i />
-        <div><span>2</span><strong>{payload.task.type === "screenshot_collect" ? "逐份查看" : "逐篇查看"}</strong><p>{payload.task.type === "screenshot_collect" ? "关键词与要求完整展示" : "标题正文完整展示"}</p></div>
+        <div><span>2</span><strong>逐篇查看</strong><p>标题正文完整展示</p></div>
         <i />
-        <div><span>3</span><strong>{payload.task.type === "screenshot_collect" ? "上传截图" : "单篇回填"}</strong><p>{payload.task.type === "screenshot_collect" ? "每份任务与截图一一对应" : "昵称、链接、截图一一对应"}</p></div>
+        <div><span>3</span><strong>单篇回填</strong><p>昵称、链接、截图一一对应</p></div>
       </section>
       <footer>由 KOC LOOP 提供任务与数据安全保障</footer>
       {toast && <div className={toastClassName(toast)}>{toast}</div>}

koc-portal/next.config.ts

@@ -8,6 +8,7 @@ const nextConfig: NextConfig = {
   trailingSlash: true,
   images: { unoptimized: true },
   turbopack: { root: path.resolve(process.cwd()) },
+  allowedDevOrigins: ["192.168.30.90", "localhost", "127.0.0.1"],
 };
 
 export default nextConfig;

koc-portal/tests/rendered-html.test.mjs

@@ -106,7 +106,7 @@ test("keeps claiming minimal and backfill one-to-one", async () => {
   assert.match(page, /placeholder="填写截图中的曝光量"\s*\/>/);
   assert.match(page, /placeholder="填写截图中的阅读量"\s*\/>/);
   assert.doesNotMatch(page, /recognizeCreatorMetrics/);
-  assert.match(page, /note-index \$\{\(isScreenshotTask \? item\.result_submitted_at : item\.publish_url\) \? "done" : ""\}/);
+  assert.match(page, /note-index \$\{item\.publish_url \? "done" : ""\}/);
   assert.match(packageJson, /"fflate":\s*"0\.7\.4"/);
   assert.doesNotMatch(packageJson, /tesseract\.js/);
   assert.match(layout, /逐篇查看笔记详情并一一回填/);
@@ -118,18 +118,24 @@ test("keeps claiming minimal and backfill one-to-one", async () => {
   await access(new URL("../public/favicon.svg", import.meta.url));
 });
 
-test("renders screenshot-only tasks with anonymous delegation and multi-image uploads", async () => {
+test("renders merged task recovery screenshots with anonymous delegation and multi-image uploads", async () => {
   const [page, styles] = await Promise.all([
     readFile(new URL("../app/page.tsx", import.meta.url), "utf8"),
     readFile(new URL("../app/globals.css", import.meta.url), "utf8"),
   ]);
 
-  assert.match(page, /screenshot_collect/);
-  assert.match(page, /小红书搜索关键词/);
-  assert.match(page, /上传小红书 AI 总结截图/);
+  assert.match(page, /payload\.task\.recoveryEnabled/);
+  assert.doesNotMatch(page, /screenshot_collect|isScreenshotTask/);
+  assert.match(page, /上传发布后的笔记截图/);
+  assert.match(page, /recoveryInstructions \|\| "请提交发布后的笔记截图"/);
+  assert.match(page, /回收示例截图/);
   assert.match(page, /submit_screenshot_result/);
+  assert.match(page, /submitRecoveryScreenshots/);
+  assert.match(page, /请先回填这篇笔记的发布链接，再提交回收截图/);
+  assert.match(page, /回填发布链接后，这里会开放回收截图上传。/);
+  assert.match(page, /截图已收/);
+  assert.match(page, /更新回收截图/);
   assert.match(page, /"task-result"/);
-  assert.match(page, /不需要填写发布链接或其他数据/);
   assert.match(page, /multiple/);
   assert.match(page, /taskResultScreenshots/);
   assert.match(page, /task-result-thumb/);
@@ -138,6 +144,7 @@ test("renders screenshot-only tasks with anonymous delegation and multi-image up
   assert.match(styles, /\.task-result-gallery/);
   assert.match(styles, /\.image-lightbox/);
   assert.match(styles, /\.evidence-preview-button/);
+  assert.match(styles, /\.recovery-progress/);
 });
 
 test("shows D1 and MySQL UTC timestamps in Beijing time", () => {

lib/collection-service.ts

@@ -4,6 +4,7 @@ import {
 } from "./mcp-collection-client";
 import { uid } from "./mvp-db";
 import type { DatabaseClient, DatabaseStatement } from "./database";
+import { refreshTaskStatus } from "./task-service";
 
 type DistributionForCollection = {
   id: string;
@@ -15,7 +16,8 @@ type DistributionForCollection = {
 
 type ScheduledTask = {
   id: string;
-  collection_start_date: string;
+  task_type: string | null;
+  collection_start_date: string | null;
   collection_days: string;
 };
 
@@ -62,9 +64,9 @@ function dateForScheduleDay(startDate: string, scheduleDay: number) {
     .slice(0, 10);
 }
 
-function parseDays(value: string) {
+function parseDays(value: string | null | undefined) {
   try {
-    const parsed = JSON.parse(value) as unknown;
+    const parsed = JSON.parse(value ?? "[]") as unknown;
     if (!Array.isArray(parsed)) return [];
     return [...new Set(parsed.map(Number))]
       .filter((day) => Number.isInteger(day) && day >= 1 && day <= 7)
@@ -74,12 +76,35 @@ function parseDays(value: string) {
   }
 }
 
+export function parseCollectionDays(value: string | null | undefined) {
+  return parseDays(value);
+}
+
+// 数据回收（自动采集）兜底：任务未设置采集日时默认连续采集 7 天。
+export const DEFAULT_COLLECTION_DAYS = [1, 2, 3, 4, 5, 6, 7];
+
+export function effectiveCollectionDays(value: string | null | undefined) {
+  const days = parseDays(value);
+  return days.length > 0 ? days : [...DEFAULT_COLLECTION_DAYS];
+}
+
 export function shanghaiDateFromTimestamp(timestamp: number) {
   return new Date(timestamp + 8 * 60 * 60 * 1000)
     .toISOString()
     .slice(0, 10);
 }
 
+// publish_time 等列以 UTC 文本存储（CURRENT_TIMESTAMP），统一换算成上海日期。
+function shanghaiDateFromSqlTimestamp(value: string | null | undefined) {
+  if (!value) return null;
+  const normalized = value.includes("T")
+    ? value
+    : `${value.replace(" ", "T")}Z`;
+  const epoch = Date.parse(normalized);
+  if (Number.isNaN(epoch)) return null;
+  return shanghaiDateFromTimestamp(epoch);
+}
+
 function shanghaiHourFromTimestamp(timestamp: number) {
   return Number(
     new Date(timestamp + 8 * 60 * 60 * 1000)
@@ -336,6 +361,7 @@ export async function collectDistributionMetrics(
           distributionId,
         ),
     ]);
+    await refreshTaskStatus(current.task_id, db).catch(() => undefined);
     return { skipped: false, likes, comments, collects, shares };
   } catch (error) {
     const detail = error instanceof Error ? error.message : String(error);
@@ -353,14 +379,25 @@ export async function collectDistributionMetrics(
         .bind(message, run.id),
       db
         .prepare(
+          // 已有历史数据（此前采集成功过）的分行失败时不降级为 failed：
+          // 保留 success 状态与数据时间，仅在描述里说明本次刷新失败。
           `UPDATE distributions
-           SET collection_status = 'failed',
-               collection_status_description = ?,
-               collection_updated_at = CURRENT_TIMESTAMP,
+           SET collection_status = CASE
+             WHEN latest_likes IS NULL THEN 'failed'
+             ELSE 'success'
+           END,
+               collection_status_description = CASE
+             WHEN latest_likes IS NULL THEN ?
+             ELSE ?
+           END,
+               collection_updated_at = CASE
+             WHEN latest_likes IS NULL THEN CURRENT_TIMESTAMP
+             ELSE collection_updated_at
+           END,
                updated_at = CURRENT_TIMESTAMP
            WHERE id = ?`,
         )
-        .bind(message, distributionId),
+        .bind(message, `${message}，沿用上次采集数据`, distributionId),
     ]);
     throw error;
   }
@@ -379,6 +416,42 @@ export async function runScheduledCollections(
   );
 }
 
+async function distributionIdsNeedingCollection(
+  db: DatabaseClient,
+  taskId: string,
+  scheduledDate: string,
+  distributionId?: string,
+) {
+  const scoped = distributionId ? "AND d.id = ?" : "";
+  const { results } = await db
+    .prepare(
+      `SELECT d.id FROM distributions d
+       WHERE d.task_id = ?
+         AND d.publish_url IS NOT NULL
+         AND d.publish_url != ''
+         ${scoped}
+         AND NOT EXISTS (
+           SELECT 1 FROM collection_runs r
+           WHERE r.distribution_id = d.id
+             AND r.scheduled_date = ?
+             AND (
+               r.status = 'success'
+               OR (
+                 r.status = 'collecting'
+                 AND r.started_at >= datetime('now', '-30 minutes')
+               )
+               OR (
+                 r.status = 'failed'
+                 AND r.completed_at >= datetime('now', '-15 minutes')
+               )
+             )
+         )`,
+    )
+    .bind(...(distributionId ? [taskId, distributionId, scheduledDate] : [taskId, scheduledDate]))
+    .all<{ id: string }>();
+  return results.map((row) => row.id);
+}
+
 export async function runDueScheduledCollections(
   db: DatabaseClient,
   timestamp: number,
@@ -389,12 +462,9 @@ export async function runDueScheduledCollections(
   const currentDate = shanghaiDateFromTimestamp(timestamp);
   const tasks = await db
     .prepare(
-      `SELECT id, collection_start_date, collection_days
+      `SELECT id, task_type, collection_start_date, collection_days
        FROM tasks
-       WHERE collection_start_date IS NOT NULL
-         AND collection_start_date != ''
-         AND collection_days IS NOT NULL
-         AND collection_days != '[]'
+       WHERE COALESCE(task_type, 'content_publish') != 'screenshot_collect'
          AND (? IS NULL OR id = ?)`,
     )
     .bind(onlyTaskId ?? null, onlyTaskId ?? null)
@@ -404,46 +474,25 @@ export async function runDueScheduledCollections(
   let succeeded = 0;
   let failed = 0;
 
-  for (const task of tasks.results) {
-    const schedules = dueSchedules(
-      task.collection_start_date,
-      parseDays(task.collection_days),
-      timestamp,
-    );
+  const collectDue = async (
+    taskId: string,
+    schedules: { scheduleDay: number; scheduledDate: string }[],
+    distributionId?: string,
+  ) => {
     for (const { scheduleDay, scheduledDate } of schedules) {
       dueTasks += 1;
-      const distributions = await db
-        .prepare(
-          `SELECT d.id FROM distributions d
-           WHERE d.task_id = ?
-             AND d.publish_url IS NOT NULL
-             AND d.publish_url != ''
-             AND NOT EXISTS (
-               SELECT 1 FROM collection_runs r
-               WHERE r.distribution_id = d.id
-                 AND r.scheduled_date = ?
-                 AND (
-                   r.status = 'success'
-                   OR (
-                     r.status = 'collecting'
-                     AND r.started_at >= datetime('now', '-30 minutes')
-                   )
-                   OR (
-                     r.status = 'failed'
-                     AND r.completed_at >= datetime('now', '-15 minutes')
-                   )
-                 )
-             )`,
-        )
-        .bind(task.id, scheduledDate)
-        .all<{ id: string }>();
-
-      for (const distribution of distributions.results) {
+      const ids = await distributionIdsNeedingCollection(
+        db,
+        taskId,
+        scheduledDate,
+        distributionId,
+      );
+      for (const id of ids) {
         attempted += 1;
         try {
           await collectDistributionMetrics(
             db,
-            distribution.id,
+            id,
             scheduledDate,
             scheduleDay,
             source,
@@ -455,6 +504,47 @@ export async function runDueScheduledCollections(
         }
       }
     }
+  };
+
+  for (const task of tasks.results) {
+    const parsedDays = parseDays(task.collection_days);
+    if (task.collection_start_date && parsedDays.length > 0) {
+      await collectDue(
+        task.id,
+        dueSchedules(task.collection_start_date, parsedDays, timestamp),
+      );
+      continue;
+    }
+    // 未设置采集计划：默认按每篇作品的发布时间起连续采集 7 天。
+    const days = effectiveCollectionDays(task.collection_days);
+    const published = await db
+      .prepare(
+        `SELECT d.id, COALESCE(d.publish_time, d.claimed_at) AS publish_anchor
+         FROM distributions d
+         WHERE d.task_id = ?
+           AND d.publish_url IS NOT NULL
+           AND d.publish_url != ''`,
+      )
+      .bind(task.id)
+      .all<{ id: string; publish_anchor: string | null }>();
+    for (const distribution of published.results) {
+      const anchorDate = shanghaiDateFromSqlTimestamp(
+        distribution.publish_anchor,
+      );
+      if (!anchorDate) continue;
+      const windowEndDate = dateForScheduleDay(
+        anchorDate,
+        days[days.length - 1],
+      );
+      // 默认窗口已过（发布超过 7 天且从未配置计划）不再补采历史天，
+      // 避免 D1 快照与真实发布时间脱节；确需补采时由管理员设置明确计划。
+      if (!windowEndDate || currentDate > windowEndDate) continue;
+      await collectDue(
+        task.id,
+        dueSchedules(anchorDate, days, timestamp),
+        distribution.id,
+      );
+    }
   }
 
   return { currentDate, dueTasks, attempted, succeeded, failed };

lib/distribution-release-service.ts

@@ -1,9 +1,9 @@
 import type { DatabaseClient } from "./database";
+import { refreshTaskStatus } from "./task-service";
 
 type ReleasableDistribution = {
   id: string;
   task_id: string;
-  task_type: string;
   content_id: string;
   content_title: string;
   partner_id: string;
@@ -27,7 +27,6 @@ export class DistributionReleaseError extends Error {
 export function distributionReleaseBlockReason(input: {
   publishUrl?: string | null;
   resultSubmittedAt?: string | null;
-  taskType?: string | null;
 }) {
   if (input.publishUrl) return "已回填发布链接的笔记不能释放";
   if (input.resultSubmittedAt) return "已提交结果截图的任务不能释放";
@@ -42,13 +41,12 @@ export async function releaseUnfinishedDistribution(
     throw new DistributionReleaseError("请选择需要释放的领取记录", 400);
   }
 
-  return database.transaction(async (db) => {
+  const result = await database.transaction(async (db) => {
     const distribution = await db
       .prepare(
         `SELECT
           d.id,
           d.task_id,
-          t.task_type,
           d.content_id,
           c.title AS content_title,
           d.partner_id,
@@ -73,7 +71,6 @@ export async function releaseUnfinishedDistribution(
     const blocked = distributionReleaseBlockReason({
       publishUrl: distribution.publish_url,
       resultSubmittedAt: distribution.result_submitted_at,
-      taskType: distribution.task_type,
     });
     if (blocked) throw new DistributionReleaseError(blocked, 409);
 
@@ -150,4 +147,7 @@ export async function releaseUnfinishedDistribution(
       partnerName: distribution.partner_name,
     };
   });
+  // 释放会让任务从 completed 回到 active（content 重新 available）
+  await refreshTaskStatus(result.taskId, database).catch(() => undefined);
+  return result;
 }

lib/mcp-tools.ts

@@ -127,7 +127,7 @@ export function registerMcpOperationTools(server: McpServer, options: Options) {
     "collection_plan_set",
     {
       title: "设置自动采集计划",
-      description: "为任务设置开始日期及第1至第7天的自动采集日，系统在北京时间09:00执行。",
+      description: "为任务设置开始日期及第1至第7天的自动采集日，系统在北京时间09:00执行；未设置时默认自每篇发布时间起连续采集7天。",
       inputSchema: z.object({
         task_id: z.string().min(1),
         start_date: z.string().regex(/^\d{4}-\d{2}-\d{2}$/).describe("北京时间开始日期 YYYY-MM-DD"),

lib/mvp-db.ts

@@ -104,6 +104,10 @@ export async function ensureSchema(database?: DatabaseClient) {
       collection_start_date TEXT,
       collection_days TEXT NOT NULL DEFAULT '[]',
       collection_schedule_updated_at TEXT,
+      customer_chat_id TEXT NOT NULL DEFAULT '',
+      customer_chat_name TEXT NOT NULL DEFAULT '',
+      join_config_id TEXT NOT NULL DEFAULT '',
+      join_qr_code TEXT NOT NULL DEFAULT '',
       created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP
     )`,
     `CREATE TABLE IF NOT EXISTS contents (
@@ -371,6 +375,51 @@ export async function ensureSchema(database?: DatabaseClient) {
     "wecom_external_user_id",
     "wecom_external_user_id TEXT",
   );
+  await ensureColumn(
+    "partners",
+    "account_id",
+    "account_id TEXT NOT NULL DEFAULT ''",
+  );
+  await ensureColumn(
+    "partners",
+    "released_account_id",
+    "released_account_id TEXT NOT NULL DEFAULT ''",
+  );
+  await ensureColumn(
+    "users",
+    "wecom_userid",
+    "wecom_userid TEXT NOT NULL DEFAULT ''",
+  );
+  await ensureColumn(
+    "tasks",
+    "customer_chat_id",
+    "customer_chat_id TEXT NOT NULL DEFAULT ''",
+  );
+  await ensureColumn(
+    "tasks",
+    "customer_chat_name",
+    "customer_chat_name TEXT NOT NULL DEFAULT ''",
+  );
+  await ensureColumn(
+    "tasks",
+    "join_config_id",
+    "join_config_id TEXT NOT NULL DEFAULT ''",
+  );
+  await ensureColumn(
+    "tasks",
+    "join_qr_code",
+    "join_qr_code TEXT NOT NULL DEFAULT ''",
+  );
+  await ensureColumn(
+    "tasks",
+    "related_task_id",
+    "related_task_id TEXT NOT NULL DEFAULT ''",
+  );
+  await ensureColumn(
+    "contents",
+    "related_content_id",
+    "related_content_id TEXT NOT NULL DEFAULT ''",
+  );
 
   const tasksWithoutShare = await db
     .prepare(
@@ -526,8 +575,8 @@ export async function seedIfEmpty() {
     db
       .prepare(
         `INSERT INTO tasks
-          (id, name, brand, quantity, claimed_quantity, due_at, status)
-         VALUES (?, ?, ?, ?, ?, ?, ?)`,
+          (id, name, brand, quantity, claimed_quantity, due_at, status, join_qr_code)
+         VALUES (?, ?, ?, ?, ?, ?, ?, '')`,
       )
       .bind(
         "task-summer",
@@ -541,8 +590,8 @@ export async function seedIfEmpty() {
     db
       .prepare(
         `INSERT INTO tasks
-          (id, name, brand, quantity, claimed_quantity, due_at, status)
-         VALUES (?, ?, ?, ?, ?, ?, ?)`,
+          (id, name, brand, quantity, claimed_quantity, due_at, status, join_qr_code)
+         VALUES (?, ?, ?, ?, ?, ?, ?, '')`,
       )
       .bind(
         "task-living",
@@ -596,8 +645,8 @@ export async function seedIfEmpty() {
     batch.push(
       db
         .prepare(
-          `INSERT INTO contents (id, task_id, title, body, status)
-           VALUES (?, ?, ?, ?, ?)`,
+          `INSERT INTO contents (id, task_id, title, body, status, source_row)
+           VALUES (?, ?, ?, ?, ?, ?)`,
         )
         .bind(
           `content-s-${index + 1}`,
@@ -605,6 +654,7 @@ export async function seedIfEmpty() {
           title,
           "来自飞书内容表的完整笔记正文与素材说明。",
           index < 9 ? "allocated" : "available",
+          index + 1,
         ),
     );
   });
@@ -612,8 +662,8 @@ export async function seedIfEmpty() {
     batch.push(
       db
         .prepare(
-          `INSERT INTO contents (id, task_id, title, body, status)
-           VALUES (?, ?, ?, ?, ?)`,
+          `INSERT INTO contents (id, task_id, title, body, status, source_row)
+           VALUES (?, ?, ?, ?, ?, ?)`,
         )
         .bind(
           `content-l-${index + 1}`,
@@ -621,6 +671,7 @@ export async function seedIfEmpty() {
           title,
           "来自飞书内容表的完整笔记正文与素材说明。",
           index < 6 ? "allocated" : "available",
+          index + 1,
         ),
     );
   });
@@ -809,18 +860,90 @@ export async function seedIfEmpty() {
     );
   }
 
+  // 任务卡与详情的「已领取」以 claimed_quantity 为口径，领取/释放路径会
+  // 增减它；种子阶段的手写数字与实际分发行数容易漂移，最后统一对账。
+  batch.push(
+    db
+      .prepare(
+        `UPDATE tasks
+         SET claimed_quantity = (
+           SELECT COUNT(*) FROM distributions d WHERE d.task_id = tasks.id
+         )`,
+      ),
+  );
+
   await db.batch(batch);
 }
 
-export async function getDashboardData() {
+export async function getDashboardData(ownerUserid?: string) {
   const db = getRawDb();
+  // null=全量；""=已登录未绑定企微（空范围）；非空=按负责人过滤
+  const ownerFilter = ownerUserid === undefined ? null : String(ownerUserid).trim();
+  const emptyResult = () =>
+    Promise.resolve({
+      results: [] as Record<string, unknown>[],
+      success: true,
+      meta: { changes: 0, last_row_id: 0 },
+    });
+  const tasksBase = `SELECT t.*,
+            (SELECT c.title FROM contents c WHERE c.task_id = t.id ORDER BY c.source_row LIMIT 1) AS keyword,
+            (SELECT c.body FROM contents c WHERE c.task_id = t.id ORDER BY c.source_row LIMIT 1) AS instructions,
+            (SELECT COUNT(*) FROM distributions d WHERE d.task_id = t.id) AS dist_total,
+            (SELECT COUNT(*) FROM distributions d WHERE d.task_id = t.id AND d.status = 'complete') AS dist_complete,
+            (SELECT COUNT(*) FROM distributions d WHERE d.task_id = t.id AND d.result_submitted_at IS NOT NULL) AS dist_submitted
+           FROM tasks t
+           LEFT JOIN projects pj ON pj.id = t.project_id`;
+  const distributionsBase = `SELECT
+            d.*,
+            c.title AS content_title,
+            p.name AS partner_name,
+            cl.claimant_name AS claimant_name,
+            a.nickname AS account_nickname,
+            a.platform AS account_platform,
+            t.name AS task_name,
+            t.brand AS task_brand,
+            t.task_type AS task_type,
+            t.platform AS task_platform,
+            t.content_format AS content_format,
+            t.due_at AS due_at,
+            t.collection_days AS task_collection_days,
+            t.collection_start_date AS task_collection_start_date
+          FROM distributions d
+          JOIN contents c ON c.id = d.content_id
+          JOIN partners p ON p.id = d.partner_id
+          LEFT JOIN claims cl ON cl.id = d.claim_id
+          JOIN tasks t ON t.id = d.task_id
+          LEFT JOIN projects pj ON pj.id = t.project_id
+          LEFT JOIN accounts a ON a.id = d.account_id`;
   const [partnersResult, tasksResult, accountsResult, distributionsResult] =
     await Promise.all([
-      db.prepare("SELECT * FROM partners ORDER BY created_at DESC").all(),
-      db.prepare("SELECT * FROM tasks ORDER BY created_at DESC").all(),
-      db
-        .prepare(
-          `SELECT
+      ownerFilter === null
+        ? db
+            .prepare(
+              `SELECT p.*, a.nickname AS account_nickname,
+                      a.public_account_id AS account_public_id,
+                      a.current_contact AS account_contact,
+                      a.profile_url AS account_profile_url
+               FROM partners p
+               LEFT JOIN accounts a ON a.id = p.account_id
+               ORDER BY p.created_at DESC`,
+            )
+            .all()
+        : emptyResult(),
+      ownerFilter
+        ? db
+            .prepare(
+              `${tasksBase} WHERE (t.owner_userid = ? OR (t.project_id != '' AND pj.owner_userid = ?)) ORDER BY t.created_at DESC`,
+            )
+            .bind(ownerFilter, ownerFilter)
+            .all()
+        : ownerFilter === null
+          ? db.prepare(`${tasksBase} ORDER BY t.created_at DESC`).all()
+          : emptyResult(),
+      ownerFilter === null
+        ? db
+            .prepare(
+              `SELECT
             a.*,
             COALESCE(
               (
@@ -835,32 +958,23 @@ export async function getDashboardData() {
             ) AS latest_publish_url
           FROM accounts a
           ORDER BY a.last_seen_at DESC`,
-        )
-        .all(),
-      db
-        .prepare(
-          `SELECT
-            d.*,
-            c.title AS content_title,
-            p.name AS partner_name,
-            cl.claimant_name AS claimant_name,
-            a.nickname AS account_nickname,
-            a.platform AS account_platform,
-            t.name AS task_name,
-            t.brand AS task_brand,
-            t.task_type AS task_type,
-            t.platform AS task_platform,
-            t.content_format AS content_format,
-            t.due_at AS due_at
-          FROM distributions d
-          JOIN contents c ON c.id = d.content_id
-          JOIN partners p ON p.id = d.partner_id
-          LEFT JOIN claims cl ON cl.id = d.claim_id
-          JOIN tasks t ON t.id = d.task_id
-          LEFT JOIN accounts a ON a.id = d.account_id
-          ORDER BY d.updated_at DESC, d.claimed_at DESC`,
-        )
-        .all(),
+            )
+            .all()
+        : emptyResult(),
+      ownerFilter
+        ? db
+            .prepare(
+              `${distributionsBase} WHERE (t.owner_userid = ? OR (t.project_id != '' AND pj.owner_userid = ?)) ORDER BY d.updated_at DESC, d.claimed_at DESC`,
+            )
+            .bind(ownerFilter, ownerFilter)
+            .all()
+        : ownerFilter === null
+          ? db
+              .prepare(
+                `${distributionsBase} ORDER BY d.updated_at DESC, d.claimed_at DESC`,
+              )
+              .all()
+          : emptyResult(),
     ]);
 
   return {
@@ -872,79 +986,6 @@ export async function getDashboardData() {
   };
 }
 
-export type TaskReportRow = {
-  id: string;
-  name: string;
-  task_type: string;
-  brand: string;
-  platform: string;
-  status: string;
-  due_at: string;
-  created_at: string;
-  quantity: number;
-  project_name: string | null;
-  claimed_count: number;
-  published_count: number;
-  completed_count: number;
-  exposure_total: number | null;
-  views_total: number | null;
-  d2_likes: number | null;
-  d2_comments: number | null;
-  d2_collects: number | null;
-  d5_likes: number | null;
-  d5_comments: number | null;
-  d5_collects: number | null;
-  d7_likes: number | null;
-  d7_comments: number | null;
-  d7_collects: number | null;
-  latest_likes: number | null;
-  latest_comments: number | null;
-  latest_collects: number | null;
-  latest_shares: number | null;
-};
-
-export async function getTaskReportData(db: DatabaseClient) {
-  const result = await db
-    .prepare(
-      `SELECT
-        t.id,
-        t.name,
-        t.task_type,
-        t.brand,
-        t.platform,
-        t.status,
-        t.due_at,
-        t.created_at,
-        t.quantity,
-        p.name AS project_name,
-        COUNT(d.id) AS claimed_count,
-        SUM(CASE WHEN TRIM(COALESCE(d.publish_url, '')) != '' THEN 1 ELSE 0 END) AS published_count,
-        SUM(CASE WHEN d.status = 'complete' THEN 1 ELSE 0 END) AS completed_count,
-        SUM(d.exposure) AS exposure_total,
-        SUM(d.views) AS views_total,
-        SUM(d.d2_likes) AS d2_likes,
-        SUM(d.d2_comments) AS d2_comments,
-        SUM(d.d2_collects) AS d2_collects,
-        SUM(d.d5_likes) AS d5_likes,
-        SUM(d.d5_comments) AS d5_comments,
-        SUM(d.d5_collects) AS d5_collects,
-        SUM(d.d7_likes) AS d7_likes,
-        SUM(d.d7_comments) AS d7_comments,
-        SUM(d.d7_collects) AS d7_collects,
-        SUM(d.latest_likes) AS latest_likes,
-        SUM(d.latest_comments) AS latest_comments,
-        SUM(d.latest_collects) AS latest_collects,
-        SUM(d.latest_shares) AS latest_shares
-       FROM tasks t
-       LEFT JOIN distributions d ON d.task_id = t.id
-       LEFT JOIN projects p ON p.id = t.project_id
-       GROUP BY t.id
-       ORDER BY t.created_at DESC`,
-    )
-    .all<TaskReportRow>();
-  return result.results;
-}
-
 export function uid(prefix: string) {
   return `${prefix}-${crypto.randomUUID().slice(0, 8)}`;
 }

lib/owner-scope.ts

@@ -0,0 +1,109 @@
+import type { DatabaseClient } from "./database";
+import { getRequestPrincipal } from "./user-auth";
+
+export type OwnerScope =
+  | { kind: "full" }
+  | { kind: "owner"; wecomUserId: string };
+
+export async function getOwnerScope(request: Request): Promise<OwnerScope> {
+  const principal = await getRequestPrincipal(request);
+  if (!principal) return { kind: "owner", wecomUserId: "" };
+  if (principal.kind === "internal") return { kind: "full" };
+  if (
+    principal.user.role === "super_admin" ||
+    principal.user.role === "admin"
+  ) {
+    return { kind: "full" };
+  }
+  return { kind: "owner", wecomUserId: principal.user.wecom_userid ?? "" };
+}
+
+export function ownerScopeUserid(scope: OwnerScope): string | undefined {
+  return scope.kind === "owner" ? scope.wecomUserId : undefined;
+}
+
+export async function isTaskOwner(
+  db: DatabaseClient,
+  taskId: string,
+  wecomUserId: string,
+  options?: { strict?: boolean },
+) {
+  const id = String(taskId ?? "").trim();
+  if (!id || !wecomUserId) return false;
+  const row = await db
+    .prepare(
+      options?.strict
+        ? "SELECT id FROM tasks WHERE id = ? AND owner_userid = ? LIMIT 1"
+        : `SELECT t.id
+           FROM tasks t
+           LEFT JOIN projects p ON p.id = t.project_id
+           WHERE t.id = ? AND (t.owner_userid = ? OR p.owner_userid = ?)
+           LIMIT 1`,
+    )
+    .bind(...(options?.strict ? [id, wecomUserId] : [id, wecomUserId, wecomUserId]))
+    .first<{ id: string }>();
+  return Boolean(row);
+}
+
+export async function isDistributionOwner(
+  db: DatabaseClient,
+  distributionId: string,
+  wecomUserId: string,
+) {
+  const id = String(distributionId ?? "").trim();
+  if (!id || !wecomUserId) return false;
+  const row = await db
+    .prepare(
+      `SELECT d.id
+       FROM distributions d
+       JOIN tasks t ON t.id = d.task_id
+       LEFT JOIN projects p ON p.id = t.project_id
+       WHERE d.id = ? AND (t.owner_userid = ? OR p.owner_userid = ?)
+       LIMIT 1`,
+    )
+    .bind(id, wecomUserId, wecomUserId)
+    .first<{ id: string }>();
+  return Boolean(row);
+}
+
+export async function isProjectOwner(
+  db: DatabaseClient,
+  projectId: string,
+  wecomUserId: string,
+) {
+  const id = String(projectId ?? "").trim();
+  if (!id || !wecomUserId) return false;
+  const row = await db
+    .prepare("SELECT id FROM projects WHERE id = ? AND owner_userid = ? LIMIT 1")
+    .bind(id, wecomUserId)
+    .first<{ id: string }>();
+  return Boolean(row);
+}
+
+export async function isTaskProjectOwner(
+  db: DatabaseClient,
+  taskId: string,
+  wecomUserId: string,
+) {
+  const id = String(taskId ?? "").trim();
+  if (!id || !wecomUserId) return false;
+  const row = await db
+    .prepare(
+      `SELECT t.id
+       FROM tasks t
+       JOIN projects p ON p.id = t.project_id
+       WHERE t.id = ? AND p.owner_userid = ?
+       LIMIT 1`,
+    )
+    .bind(id, wecomUserId)
+    .first<{ id: string }>();
+  return Boolean(row);
+}
+
+export function ownerForbidden() {
+  return Response.json({ error: "该任务未分配给您，无权操作" }, { status: 403 });
+}
+
+export function projectForbidden() {
+  return Response.json({ error: "您不是该项目负责人，无权操作" }, { status: 403 });
+}

lib/project-push-service.ts

@@ -1,16 +1,17 @@
 import type { DatabaseClient } from "./database";
 import { getRuntimeEnv } from "./runtime-env";
 import {
+  sendAppChatMessage,
   sendWecomAppMessage,
   WecomClientError,
   type WecomConfig,
 } from "./wecom-client";
 import {
-  pushTaskToGroupChats,
-  type GroupPushResult,
-  type TaskPushRow,
-} from "./wecom-group-push-service";
+  ensureTaskChatForMembers,
+  sendTaskChatMessage,
+} from "./task-group-service";
 import { getProjectDetail, ProjectError } from "./project-service";
+import type { TaskPushRow } from "./wecom-group-push-service";
 
 type FetchLike = typeof fetch;
 
@@ -20,10 +21,18 @@ export type AppMessageResult = {
   error: string;
 };
 
+export type MainChatMode = "group" | "per_member" | "skipped";
+
+export type TaskChatPushResult = {
+  sent: boolean;
+  chatId: string;
+  reason?: string;
+};
+
 export type ProjectPushOutcome = {
+  mainChatMode: MainChatMode;
   appResults: AppMessageResult[];
-  groupResults: GroupPushResult[];
-  groupChatCount: number;
+  taskChat: TaskChatPushResult;
   skippedReasons: string[];
   linkUrl: string;
 };
@@ -49,12 +58,7 @@ export function buildProjectAppMessage(
   const portal = text(portalUrl).replace(/\/$/, "");
   const claimUrl =
     portal && task.share_token ? `${portal}/?task=${task.share_token}` : "";
-  const formatLabel =
-    task.task_type === "screenshot_collect"
-      ? "截图回收"
-      : task.content_format === "video"
-        ? "视频"
-        : "图文";
+  const formatLabel = task.content_format === "video" ? "视频" : "图文";
   return [
     `【项目任务】${task.name}`,
     `品牌：${task.brand}｜数量：${task.quantity} 份｜截止：${task.due_at}`,
@@ -64,6 +68,13 @@ export function buildProjectAppMessage(
   ].join("\n");
 }
 
+const TASK_CHAT_SKIP_REASONS: Record<string, string> = {
+  no_task: "任务不存在",
+  no_owner: "任务与项目都未填负责人",
+  not_enough_members: "任务群成员不足 2 人",
+  no_credentials: "企业微信未配置",
+};
+
 export async function pushProjectTask(
   db: DatabaseClient,
   params: {
@@ -86,7 +97,7 @@ export async function pushProjectTask(
   const task = await db
     .prepare(
       `SELECT id, name, brand, quantity, due_at, task_type, platform,
-              content_format, share_token
+              content_format, share_token, project_id
        FROM tasks WHERE id = ?`,
     )
     .bind(taskId)
@@ -103,55 +114,78 @@ export async function pushProjectTask(
 
   const skippedReasons: string[] = [];
   const appResults: AppMessageResult[] = [];
-  if (sendMainGroup) {
+  let mainChatMode: MainChatMode = "skipped";
+
+  const sendPerMember = async () => {
     const members = detail.project.mainGroupMemberIds;
     if (members.length === 0) {
-      skippedReasons.push("项目总群未配置成员");
-    } else {
-      for (const userid of members) {
-        try {
-          await sendWecomAppMessage([userid], message, config, fetchImpl);
-          appResults.push({ userid, ok: true, error: "" });
-        } catch (error) {
-          appResults.push({
-            userid,
-            ok: false,
-            error: error instanceof Error ? error.message : "发送失败",
-          });
-        }
+      skippedReasons.push("项目总群未建且未配置成员");
+      return;
+    }
+    for (const userid of members) {
+      try {
+        await sendWecomAppMessage([userid], message, config, fetchImpl);
+        appResults.push({ userid, ok: true, error: "" });
+      } catch (error) {
+        appResults.push({
+          userid,
+          ok: false,
+          error: error instanceof Error ? error.message : "发送失败",
+        });
       }
     }
+    mainChatMode = "per_member";
+  };
+
+  if (sendMainGroup) {
+    if (detail.project.mainChatId) {
+      try {
+        await sendAppChatMessage(
+          config,
+          { chatid: detail.project.mainChatId, text: message },
+          fetchImpl,
+        );
+        mainChatMode = "group";
+      } catch (error) {
+        skippedReasons.push(
+          `项目总群群发失败（${
+            error instanceof Error ? error.message : "未知错误"
+          }），已降级逐人私信`,
+        );
+        await sendPerMember();
+      }
+    } else {
+      skippedReasons.push("项目总群未建，已逐人私信");
+      await sendPerMember();
+    }
   }
 
-  let groupResults: GroupPushResult[] = [];
-  let groupChatCount = 0;
-  let linkUrl =
+  let taskChat: TaskChatPushResult = { sent: false, chatId: "" };
+  if (sendGroupChats) {
+    const ensure = await ensureTaskChatForMembers(db, { taskId }, config, fetchImpl);
+    if (ensure.chatId) {
+      const sent = await sendTaskChatMessage(db, taskId, message, config, fetchImpl);
+      taskChat = sent
+        ? { sent: true, chatId: ensure.chatId }
+        : { sent: false, chatId: ensure.chatId, reason: "消息发送失败" };
+      if (!sent) skippedReasons.push("任务群消息发送失败");
+    } else {
+      const reason =
+        TASK_CHAT_SKIP_REASONS[ensure.reason ?? ""] ?? "任务群暂不可用";
+      taskChat = { sent: false, chatId: "", reason };
+      skippedReasons.push(`任务群未发送：${reason}`);
+    }
+  }
+
+  const linkUrl =
     task.share_token && portalUrl
       ? `${portalUrl.replace(/\/$/, "")}/?task=${task.share_token}`
       : "";
-  if (sendGroupChats) {
-    const chatIds = detail.groupChats
-      .filter((chat) => !chat.missing)
-      .map((chat) => chat.chatId);
-    if (chatIds.length === 0) {
-      skippedReasons.push("项目没有可用的任务群");
-    } else {
-      const summary = await pushTaskToGroupChats(
-        db,
-        { taskId, chatIds, text: message },
-        config,
-        fetchImpl,
-      );
-      groupResults = summary.results;
-      groupChatCount = chatIds.length;
-      linkUrl = summary.linkUrl;
-    }
-  }
 
   return {
+    mainChatMode,
     appResults,
-    groupResults,
-    groupChatCount,
+    taskChat,
     skippedReasons,
     linkUrl,
   };

lib/project-service.ts

@@ -1,4 +1,14 @@
 import type { DatabaseClient } from "./database";
+import {
+  createAppChat,
+  getAppChat,
+  hasAppCredentials,
+  sanitizeChatid,
+  updateAppChat,
+  type WecomConfig,
+} from "./wecom-client";
+
+type FetchLike = typeof fetch;
 
 export type ProjectRow = {
   id: string;
@@ -6,6 +16,7 @@ export type ProjectRow = {
   brand: string;
   main_group_member_ids: string;
   owner_userid: string;
+  main_chat_id: string;
   status: string;
   note: string;
   created_at: string;
@@ -20,8 +31,8 @@ export type ProjectSummary = {
   createdAt: string;
   mainGroupMemberIds: string[];
   ownerUserid: string;
+  mainChatId: string;
   taskCount: number;
-  groupChatCount: number;
 };
 
 export type ProjectTaskRow = {
@@ -36,23 +47,35 @@ export type ProjectTaskRow = {
   platform: string;
   content_format: string;
   share_token: string | null;
+  owner_userid: string;
+  task_chat_id: string;
+  recovery_enabled: number;
+  recovery_due_at: string;
+  dist_total: number;
+  recovery_submitted: number;
 };
 
-export type ProjectGroupChat = {
+export type ProjectMainChat = {
   chatId: string;
-  name: string;
-  ownerUserId: string;
-  memberCount: number;
-  status: number;
-  partnerId: string;
-  partnerName: string;
-  missing: boolean;
+  members: string[];
 };
 
 export type ProjectDetail = {
   project: ProjectSummary;
   tasks: ProjectTaskRow[];
-  groupChats: ProjectGroupChat[];
+  mainChat: ProjectMainChat;
+};
+
+export type MainChatEnsureReason =
+  | "no_project"
+  | "no_credentials"
+  | "not_enough_members";
+
+export type MainChatEnsureResult = {
+  chatId: string | null;
+  members: string[];
+  reason?: MainChatEnsureReason;
+  warning?: string;
 };
 
 export type GroupOwnerPartnerRow = {
@@ -94,16 +117,144 @@ function parseJsonArray(value: string): string[] {
   }
 }
 
-export async function listProjects(db: DatabaseClient): Promise<ProjectSummary[]> {
-  const result = await db
+export function effectiveProjectMembers(
+  memberIdsValue: unknown,
+  ownerUserid: unknown,
+): string[] {
+  const raw =
+    typeof memberIdsValue === "string" && memberIdsValue.trim().startsWith("[")
+      ? parseJsonArray(memberIdsValue)
+      : memberIdsValue;
+  const members = parseMemberIds(raw);
+  const owner = text(ownerUserid);
+  if (owner && !members.includes(owner)) members.push(owner);
+  return members;
+}
+
+export function projectMainChatId(projectId: string) {
+  return `pgc${sanitizeChatid(text(projectId))}`;
+}
+
+export async function ensureProjectMainChat(
+  db: DatabaseClient,
+  projectId: string,
+  config: WecomConfig,
+  fetchImpl: FetchLike = fetch,
+): Promise<MainChatEnsureResult> {
+  const id = text(projectId);
+  if (!id) return { chatId: null, members: [], reason: "no_project" };
+  const project = await db
     .prepare(
-      `SELECT p.id, p.name, p.brand, p.main_group_member_ids, p.owner_userid, p.status, p.note, p.created_at,
-              (SELECT COUNT(*) FROM tasks t WHERE t.project_id = p.id) AS task_count,
-              (SELECT COUNT(*) FROM project_group_chats g WHERE g.project_id = p.id) AS group_chat_count
-       FROM projects p
-       ORDER BY p.created_at DESC`,
+      "SELECT id, name, main_group_member_ids, owner_userid, main_chat_id FROM projects WHERE id = ?",
     )
-    .all<ProjectRow & { task_count: number; group_chat_count: number }>();
+    .bind(id)
+    .first<ProjectRow>();
+  if (!project) return { chatId: null, members: [], reason: "no_project" };
+
+  const members = effectiveProjectMembers(
+    project.main_group_member_ids,
+    project.owner_userid,
+  );
+  const existingChatId = text(project.main_chat_id);
+  if (!hasAppCredentials(config)) {
+    return {
+      chatId: existingChatId || null,
+      members,
+      reason: existingChatId ? undefined : "no_credentials",
+    };
+  }
+
+  if (existingChatId) {
+    try {
+      const info = await getAppChat(config, existingChatId, fetchImpl);
+      if (info) {
+        const inGroup = new Set(info.userlist);
+        const addUserList = members.filter((userid) => !inGroup.has(userid));
+        const delUserList = info.userlist.filter(
+          (userid) => !members.includes(userid),
+        );
+        if (addUserList.length > 0 || delUserList.length > 0) {
+          await updateAppChat(
+            config,
+            { chatid: existingChatId, addUserList, delUserList },
+            fetchImpl,
+          );
+        }
+      } else {
+        // appchat/get 要求应用可见范围为根部门，查不到成员时降级为只增同步（重复添加按成功处理）
+        await updateAppChat(
+          config,
+          { chatid: existingChatId, addUserList: members },
+          fetchImpl,
+        );
+      }
+      return { chatId: existingChatId, members };
+    } catch (error) {
+      return {
+        chatId: existingChatId,
+        members,
+        warning: `项目总群成员同步失败：${error instanceof Error ? error.message : String(error)}`,
+      };
+    }
+  }
+
+  if (members.length < 3) {
+    return { chatId: null, members, reason: "not_enough_members" };
+  }
+
+  const candidate = projectMainChatId(id);
+  try {
+    const probed = await getAppChat(config, candidate, fetchImpl);
+    let chatId = candidate;
+    if (!probed) {
+      const created = await createAppChat(
+        config,
+        { name: `【总群】${project.name}`, userlist: members, chatid: candidate },
+        fetchImpl,
+      );
+      chatId = created.chatid || candidate;
+    }
+    await db
+      .prepare("UPDATE projects SET main_chat_id = ? WHERE id = ?")
+      .bind(chatId, id)
+      .run();
+    return { chatId, members };
+  } catch (error) {
+    return {
+      chatId: null,
+      members,
+      warning: `项目总群创建失败：${error instanceof Error ? error.message : String(error)}`,
+    };
+  }
+}
+
+export async function listProjects(
+  db: DatabaseClient,
+  ownerUserid?: string,
+): Promise<ProjectSummary[]> {
+  // undefined=全量；""=已登录未绑定企微（空范围，不能绑定 '' 否则漏出无主项目）
+  if (ownerUserid !== undefined && String(ownerUserid).trim() === "") {
+    return [];
+  }
+  const ownerFilter = String(ownerUserid ?? "").trim();
+  const result = await (ownerFilter
+    ? db
+        .prepare(
+          `SELECT p.id, p.name, p.brand, p.main_group_member_ids, p.owner_userid, p.main_chat_id, p.status, p.note, p.created_at,
+                  (SELECT COUNT(*) FROM tasks t WHERE t.project_id = p.id) AS task_count
+           FROM projects p
+           WHERE p.owner_userid = ?
+           ORDER BY p.created_at DESC`,
+        )
+        .bind(ownerFilter)
+    : db
+        .prepare(
+          `SELECT p.id, p.name, p.brand, p.main_group_member_ids, p.owner_userid, p.main_chat_id, p.status, p.note, p.created_at,
+                  (SELECT COUNT(*) FROM tasks t WHERE t.project_id = p.id) AS task_count
+           FROM projects p
+           ORDER BY p.created_at DESC`,
+        )
+  ).all<ProjectRow & { task_count: number }>();
   return result.results.map((row) => ({
     id: row.id,
     name: row.name,
@@ -113,8 +264,8 @@ export async function listProjects(db: DatabaseClient): Promise<ProjectSummary[]
     createdAt: row.created_at,
     mainGroupMemberIds: parseJsonArray(row.main_group_member_ids),
     ownerUserid: row.owner_userid ?? "",
+    mainChatId: row.main_chat_id ?? "",
     taskCount: Number(row.task_count),
-    groupChatCount: Number(row.group_chat_count),
   }));
 }
 
@@ -125,7 +276,7 @@ export async function getProjectDetail(
   const id = text(projectId);
   const project = await db
     .prepare(
-      `SELECT id, name, brand, main_group_member_ids, owner_userid, status, note, created_at
+      `SELECT id, name, brand, main_group_member_ids, owner_userid, main_chat_id, status, note, created_at
        FROM projects WHERE id = ?`,
     )
     .bind(id)
@@ -135,35 +286,16 @@ export async function getProjectDetail(
   const tasks = await db
     .prepare(
       `SELECT id, name, brand, quantity, claimed_quantity, due_at, status,
-              task_type, platform, content_format, share_token
-       FROM tasks WHERE project_id = ?
-       ORDER BY created_at DESC`,
+              task_type, platform, content_format, share_token, owner_userid, task_chat_id,
+              recovery_enabled, recovery_due_at,
+              (SELECT COUNT(*) FROM distributions d WHERE d.task_id = t.id) AS dist_total,
+              (SELECT COUNT(*) FROM distributions d WHERE d.task_id = t.id AND d.result_submitted_at IS NOT NULL) AS recovery_submitted
+       FROM tasks t WHERE t.project_id = ?
+       ORDER BY t.created_at DESC`,
     )
     .bind(id)
     .all<ProjectTaskRow>();
 
-  const chats = await db
-    .prepare(
-      `SELECT g.chat_id, g.partner_id,
-              c.name AS chat_name, c.owner_user_id, c.member_count, c.status AS chat_status,
-              p.name AS partner_name
-       FROM project_group_chats g
-       LEFT JOIN wecom_group_chats c ON c.chat_id = g.chat_id
-       LEFT JOIN partners p ON p.id = g.partner_id
-       WHERE g.project_id = ?
-       ORDER BY g.created_at`,
-    )
-    .bind(id)
-    .all<{
-      chat_id: string;
-      partner_id: string;
-      chat_name: string | null;
-      owner_user_id: string | null;
-      member_count: number | null;
-      chat_status: number | null;
-      partner_name: string | null;
-    }>();
-
   return {
     project: {
       id: project.id,
@@ -174,20 +306,17 @@ export async function getProjectDetail(
       createdAt: project.created_at,
       mainGroupMemberIds: parseJsonArray(project.main_group_member_ids),
       ownerUserid: project.owner_userid ?? "",
+      mainChatId: project.main_chat_id ?? "",
       taskCount: tasks.results.length,
-      groupChatCount: chats.results.length,
     },
     tasks: tasks.results,
-    groupChats: chats.results.map((row) => ({
-      chatId: row.chat_id,
-      name: row.chat_name ?? "",
-      ownerUserId: row.owner_user_id ?? "",
-      memberCount: Number(row.member_count ?? 0),
-      status: Number(row.chat_status ?? 0),
-      partnerId: row.partner_id,
-      partnerName: row.partner_name ?? "",
-      missing: row.chat_name === null,
-    })),
+    mainChat: {
+      chatId: project.main_chat_id ?? "",
+      members: effectiveProjectMembers(
+        project.main_group_member_ids,
+        project.owner_userid,
+      ),
+    },
   };
 }
 
@@ -203,13 +332,15 @@ export type SaveProjectInput = {
 export async function saveProject(
   db: DatabaseClient,
   input: SaveProjectInput,
-): Promise<ProjectSummary> {
+  config?: WecomConfig,
+  fetchImpl: FetchLike = fetch,
+): Promise<{ project: ProjectSummary; mainChat: MainChatEnsureResult }> {
   const id = text(input.id);
   const name = text(input.name);
   const brand = text(input.brand);
   const note = text(input.note ?? "");
-  const memberIds = parseMemberIds(input.mainGroupMemberIds);
   const ownerUserid = text(input.ownerUserid).slice(0, 64);
+  const memberIds = effectiveProjectMembers(input.mainGroupMemberIds, ownerUserid);
   if (!name) throw new ProjectError("请填写项目名称");
 
   const now = new Date().toISOString();
@@ -243,8 +374,15 @@ export async function saveProject(
       )
       .run();
   }
+  const mainChat = config
+    ? await ensureProjectMainChat(db, projectId, config, fetchImpl)
+    : {
+        chatId: null,
+        members: memberIds,
+        reason: "no_credentials" as MainChatEnsureReason,
+      };
   const detail = await getProjectDetail(db, projectId);
-  return detail.project;
+  return { project: detail.project, mainChat };
 }
 
 export async function deleteProject(
@@ -258,74 +396,10 @@ export async function deleteProject(
     .bind(id)
     .run();
   if (result.meta.changes === 0) throw new ProjectError("项目不存在", 404);
-  await db.batch([
-    db.prepare("DELETE FROM project_group_chats WHERE project_id = ?").bind(id),
-    db
-      .prepare("UPDATE tasks SET project_id = '' WHERE project_id = ?")
-      .bind(id),
-  ]);
-}
-
-export type ProjectGroupChatInput = {
-  chatId: string;
-  partnerId?: string;
-};
-
-export async function setProjectGroupChats(
-  db: DatabaseClient,
-  projectId: string,
-  items: ProjectGroupChatInput[],
-): Promise<ProjectDetail> {
-  const id = text(projectId);
-  await getProjectDetail(db, id);
-  const seen = new Set<string>();
-  const rows: ProjectGroupChatInput[] = [];
-  for (const item of Array.isArray(items) ? items : []) {
-    const chatId = text(item?.chatId);
-    if (!chatId || seen.has(chatId)) continue;
-    seen.add(chatId);
-    rows.push({ chatId, partnerId: text(item?.partnerId) });
-  }
-  const statements = [
-    db.prepare("DELETE FROM project_group_chats WHERE project_id = ?").bind(id),
-    ...rows.map((row) =>
-      db
-        .prepare(
-          `INSERT INTO project_group_chats
-            (id, project_id, chat_id, partner_id, created_at)
-           VALUES (?, ?, ?, ?, ?)`,
-        )
-        .bind(
-          `pgc-${crypto.randomUUID().slice(0, 12)}`,
-          id,
-          row.chatId,
-          row.partnerId ?? "",
-          new Date().toISOString(),
-        ),
-    ),
-  ];
-  await db.batch(statements);
-  return getProjectDetail(db, id);
-}
-
-export type ProjectPushTargets = {
-  project: { id: string; name: string; mainGroupMemberIds: string[] };
-  chatIds: string[];
-};
-
-export async function getProjectPushTargets(
-  db: DatabaseClient,
-  projectId: string,
-): Promise<ProjectPushTargets> {
-  const detail = await getProjectDetail(db, projectId);
-  return {
-    project: {
-      id: detail.project.id,
-      name: detail.project.name,
-      mainGroupMemberIds: detail.project.mainGroupMemberIds,
-    },
-    chatIds: detail.groupChats.filter((chat) => !chat.missing).map((chat) => chat.chatId),
-  };
+  await db
+    .prepare("UPDATE tasks SET project_id = '' WHERE project_id = ?")
+    .bind(id)
+    .run();
 }
 
 export async function listGroupOwnerPartners(
@@ -390,3 +464,23 @@ export async function saveGroupOwnerPartner(
   if (!row) throw new ProjectError("合作方保存失败", 500);
   return row;
 }
+
+export async function findOrCreateGroupOwnerPartner(
+  db: DatabaseClient,
+  wecomUserid: string,
+): Promise<GroupOwnerPartnerRow> {
+  const userid = text(wecomUserid).slice(0, 128);
+  if (!userid) throw new ProjectError("缺少企业微信 userid");
+  const existing = await db
+    .prepare(
+      `SELECT id, name, wecom_userid, partner_type
+       FROM partners
+       WHERE partner_type = 'group_owner' AND wecom_userid = ?
+       ORDER BY created_at
+       LIMIT 1`,
+    )
+    .bind(userid)
+    .first<GroupOwnerPartnerRow>();
+  if (existing) return existing;
+  return saveGroupOwnerPartner(db, { name: userid, wecomUserid: userid });
+}

lib/resource-write.ts

@@ -1,4 +1,5 @@
-import { ensureSchema, getRawDb } from "./mvp-db";
+import { type DatabaseClient } from "./database";
+import { ensureSchema, getRawDb, hashText } from "./mvp-db";
 import {
   generateAccountTagsFromMcp,
   resolveCollectionMcpConfig,
@@ -448,3 +449,130 @@ export async function writeAnalyzedRows(rows: AnalyzedRow[]) {
     await db.batch(statements.slice(index, index + RESOURCE_IMPORT_DB_BATCH_SIZE));
   }
 }
+
+const POOL_PARTNER_PLACEHOLDER_NICKNAME = "待识别账号";
+export const POOL_PARTNER_SYNC_BATCH_SIZE = 500;
+const POOL_PARTNER_SYNC_MAX_ITERATIONS = 30;
+
+type PoolAccountRow = {
+  id: string;
+  platform: string;
+  platform_uid: string;
+  public_account_id: string;
+  nickname: string;
+};
+
+type ShellPartnerNameRow = PoolAccountRow & {
+  partner_id: string;
+  partner_name: string;
+};
+
+export function poolPartnerDisplayName(account: {
+  nickname?: string | null;
+  public_account_id?: string | null;
+  platform_uid?: string | null;
+  id: string;
+}) {
+  const nickname = (account.nickname ?? "").trim();
+  if (nickname && nickname !== POOL_PARTNER_PLACEHOLDER_NICKNAME) return nickname;
+  return (
+    (account.public_account_id ?? "").trim() ||
+    (account.platform_uid ?? "").trim() ||
+    account.id
+  );
+}
+
+/**
+ * 资源池中的 KOC 默认加入合作方：为尚未绑定合作方的资源账号自动创建
+ * external_koc 合作方。运营显式解绑或被换绑顶替过的账号
+ * （partners.released_account_id）不回填，保留人工决定。
+ * 合作方 id 由账号身份哈希派生，配合 INSERT OR IGNORE 保证并发下幂等。
+ */
+export async function ensurePartnersForPoolAccounts(database?: DatabaseClient) {
+  const db = database ?? getRawDb();
+  for (
+    let iteration = 0;
+    iteration < POOL_PARTNER_SYNC_MAX_ITERATIONS;
+    iteration += 1
+  ) {
+    const unbound = await db
+      .prepare(
+        `SELECT a.id, a.platform, a.platform_uid, a.public_account_id, a.nickname
+           FROM accounts a
+          WHERE NOT EXISTS (SELECT 1 FROM partners p WHERE p.account_id = a.id)
+            AND NOT EXISTS (
+              SELECT 1 FROM partners r WHERE r.released_account_id = a.id
+            )
+          ORDER BY a.first_seen_at, a.id
+          LIMIT ${POOL_PARTNER_SYNC_BATCH_SIZE}`,
+      )
+      .all<PoolAccountRow>();
+    if (unbound.results.length === 0) break;
+    const statements = unbound.results.map((account) =>
+      db
+        .prepare(
+          `INSERT OR IGNORE INTO partners
+            (id, name, wecom_name, owner, claimed_total, completed_total,
+             partner_type, wecom_userid, account_id, created_at)
+           VALUES (?, ?, '', '运营组', 0, 0, 'external_koc', '', ?, ?)`,
+        )
+        .bind(
+          `partner-koc-${hashText(`${account.platform}:${account.platform_uid}`)}`,
+          poolPartnerDisplayName(account),
+          account.id,
+          new Date().toISOString(),
+        ),
+    );
+    for (
+      let index = 0;
+      index < statements.length;
+      index += RESOURCE_IMPORT_DB_BATCH_SIZE
+    ) {
+      await db.batch(statements.slice(index, index + RESOURCE_IMPORT_DB_BATCH_SIZE));
+    }
+    if (unbound.results.length < POOL_PARTNER_SYNC_BATCH_SIZE) break;
+  }
+  await refreshPoolPartnerNames(db);
+}
+
+/**
+ * 补全默认合作方的展示名：仅处理无企微绑定、无领取/分发记录的空壳合作方，
+ * 昵称补全后把占位名（待识别账号）或账号 ID 兜底名更新为当前昵称，
+ * 不碰运营可能手工维护过含义的名称。
+ */
+async function refreshPoolPartnerNames(db: DatabaseClient) {
+  const rows = await db
+    .prepare(
+      `SELECT p.id AS partner_id, p.name AS partner_name,
+              a.id, a.nickname, a.public_account_id, a.platform_uid
+         FROM partners p
+         JOIN accounts a ON a.id = p.account_id
+        WHERE p.partner_type = 'external_koc'
+          AND (p.wecom_external_user_id IS NULL OR p.wecom_external_user_id = '')
+          AND p.wecom_userid = ''
+          AND NOT EXISTS (SELECT 1 FROM claims c WHERE c.partner_id = p.id)
+          AND NOT EXISTS (SELECT 1 FROM distributions d WHERE d.partner_id = p.id)
+          AND (
+            p.name IN ('', '${POOL_PARTNER_PLACEHOLDER_NICKNAME}')
+            OR (p.name IN (a.public_account_id, a.platform_uid)
+                AND a.nickname NOT IN ('', '${POOL_PARTNER_PLACEHOLDER_NICKNAME}'))
+          )`,
+    )
+    .all<ShellPartnerNameRow>();
+  const updates = rows.results
+    .filter(
+      (row) => poolPartnerDisplayName(row) !== row.partner_name.trim(),
+    )
+    .map((row) =>
+      db
+        .prepare(`UPDATE partners SET name = ? WHERE id = ?`)
+        .bind(poolPartnerDisplayName(row), row.partner_id),
+    );
+  for (
+    let index = 0;
+    index < updates.length;
+    index += RESOURCE_IMPORT_DB_BATCH_SIZE
+  ) {
+    await db.batch(updates.slice(index, index + RESOURCE_IMPORT_DB_BATCH_SIZE));
+  }
+}

lib/task-customer-chat-service.ts

@@ -0,0 +1,111 @@
+import type { DatabaseClient } from "./database";
+import {
+  addTaskJoinWay,
+  deleteJoinWay,
+  getJoinWayQrCode,
+  updateTaskJoinWay,
+  type WecomConfig,
+} from "./wecom-client";
+
+type FetchLike = typeof fetch;
+
+function text(value: unknown) {
+  return String(value ?? "").trim();
+}
+
+export type BindTaskCustomerChatResult = {
+  customerChatId: string;
+  customerChatName: string;
+  joinConfigId: string;
+  joinQrCode: string;
+  qrError?: string;
+};
+
+export async function bindTaskCustomerChat(
+  db: DatabaseClient,
+  params: { taskId: string; chatId: string; chatName: string },
+  config: WecomConfig,
+  fetchImpl: FetchLike = fetch,
+): Promise<BindTaskCustomerChatResult> {
+  const taskId = text(params.taskId);
+  const chatId = text(params.chatId);
+  const chatName = text(params.chatName).slice(0, 255);
+  if (!taskId) throw new Error("缺少 taskId");
+  if (!chatId) throw new Error("请选择要绑定的客户群");
+
+  const task = await db
+    .prepare("SELECT id, name, join_config_id FROM tasks WHERE id = ?")
+    .bind(taskId)
+    .first<{ id: string; name: string; join_config_id: string | null }>();
+  if (!task) throw new Error("任务不存在");
+
+  const joinInput = {
+    chatIdList: [chatId],
+    roomBaseName: task.name,
+    state: `task-${taskId}`,
+  };
+
+  let configId = text(task.join_config_id);
+  if (configId) {
+    try {
+      await updateTaskJoinWay(config, { ...joinInput, configId }, fetchImpl);
+    } catch {
+      // 活码配置可能已被企微侧清理，降级为重新创建
+      configId = (await addTaskJoinWay(config, joinInput, fetchImpl)).configId;
+    }
+  } else {
+    configId = (await addTaskJoinWay(config, joinInput, fetchImpl)).configId;
+  }
+
+  let joinQrCode = "";
+  let qrError: string | undefined;
+  try {
+    joinQrCode = (await getJoinWayQrCode(config, configId, fetchImpl)).qrCode;
+  } catch (error) {
+    qrError = `活码二维码获取失败：${error instanceof Error ? error.message : String(error)}`;
+  }
+
+  await db
+    .prepare(
+      `UPDATE tasks
+       SET customer_chat_id = ?, customer_chat_name = ?, join_config_id = ?, join_qr_code = ?
+       WHERE id = ?`,
+    )
+    .bind(chatId, chatName, configId, joinQrCode, taskId)
+    .run();
+
+  return {
+    customerChatId: chatId,
+    customerChatName: chatName,
+    joinConfigId: configId,
+    joinQrCode,
+    qrError,
+  };
+}
+
+export async function unbindTaskCustomerChat(
+  db: DatabaseClient,
+  taskId: string,
+  config: WecomConfig,
+  fetchImpl: FetchLike = fetch,
+): Promise<void> {
+  const id = text(taskId);
+  if (!id) throw new Error("缺少 taskId");
+  const task = await db
+    .prepare("SELECT join_config_id FROM tasks WHERE id = ?")
+    .bind(id)
+    .first<{ join_config_id: string | null }>();
+  if (!task) throw new Error("任务不存在");
+  const configId = text(task.join_config_id);
+  if (configId) {
+    await deleteJoinWay(config, configId, fetchImpl);
+  }
+  await db
+    .prepare(
+      `UPDATE tasks
+       SET customer_chat_id = '', customer_chat_name = '', join_config_id = '', join_qr_code = ''
+       WHERE id = ?`,
+    )
+    .bind(id)
+    .run();
+}

lib/task-group-service.ts

@@ -1,8 +1,14 @@
 import type { DatabaseClient } from "./database";
+import {
+  effectiveProjectMembers,
+  ensureProjectMainChat,
+  findOrCreateGroupOwnerPartner,
+} from "./project-service";
 import {
   createAppChat,
   getAppChat,
   hasAppCredentials,
+  sanitizeChatid,
   sendAppChatMessage,
   updateAppChat,
   type WecomConfig,
@@ -20,7 +26,8 @@ type TaskChatRow = {
   id: string;
   name: string;
   task_chat_id: string | null;
-  owner_userid: string | null;
+  task_owner_userid: string | null;
+  project_owner_userid: string | null;
 };
 
 function text(value: unknown) {
@@ -28,7 +35,7 @@ function text(value: unknown) {
 }
 
 export function taskChatId(taskId: string) {
-  return `tgc_${text(taskId)}`;
+  return `tgc${sanitizeChatid(text(taskId))}`;
 }
 
 function chatNameForTask(taskName: string) {
@@ -42,7 +49,11 @@ async function syncMembers(
   fetchImpl: FetchLike,
 ) {
   const info = await getAppChat(config, chatid, fetchImpl);
-  if (!info) return;
+  if (!info) {
+    // appchat/get 要求应用可见范围为根部门，查不到时降级为只增同步（重复添加成员企微按成功处理）
+    await updateAppChat(config, { chatid, addUserList: members }, fetchImpl);
+    return;
+  }
   const existing = new Set(info.userlist);
   const missing = members.filter((userid) => !existing.has(userid));
   if (missing.length > 0) {
@@ -63,7 +74,8 @@ export async function ensureTaskChatForMembers(
   }
   const task = await db
     .prepare(
-      `SELECT t.id, t.name, t.task_chat_id, p.owner_userid AS owner_userid
+      `SELECT t.id, t.name, t.task_chat_id, t.owner_userid AS task_owner_userid,
+              p.owner_userid AS project_owner_userid
        FROM tasks t
        LEFT JOIN projects p ON p.id = t.project_id
        WHERE t.id = ?`,
@@ -71,15 +83,18 @@ export async function ensureTaskChatForMembers(
     .bind(taskId)
     .first<TaskChatRow>();
   if (!task) return { chatId: null, created: false, reason: "no_task" };
-  const ownerUserid = text(task.owner_userid);
-  if (!ownerUserid) {
+  const ownerUserid = text(task.project_owner_userid);
+  const taskOwnerUserid = text(task.task_owner_userid);
+  if (!ownerUserid && !taskOwnerUserid) {
     return { chatId: null, created: false, reason: "no_owner" };
   }
   const members = [
     ...new Set(
-      [ownerUserid, ...(params.addUserids ?? []).map((id) => text(id))].filter(
-        Boolean,
-      ),
+      [
+        ownerUserid,
+        taskOwnerUserid,
+        ...(params.addUserids ?? []).map((id) => text(id)),
+      ].filter(Boolean),
     ),
   ];
 
@@ -110,6 +125,100 @@ export async function ensureTaskChatForMembers(
   return { chatId, created: createdNow };
 }
 
+export type TaskOwnerAssignment = {
+  ownerUserid: string;
+  partnerId: string;
+  chatId: string | null;
+  chatCreated: boolean;
+  warning?: string;
+};
+
+export async function assignTaskOwner(
+  db: DatabaseClient,
+  params: { taskId: string; ownerUserid: string },
+  config: WecomConfig,
+  fetchImpl: FetchLike = fetch,
+): Promise<TaskOwnerAssignment> {
+  const taskId = text(params.taskId);
+  const ownerUserid = text(params.ownerUserid).slice(0, 64);
+  if (!taskId) throw new Error("缺少 taskId");
+  if (!ownerUserid) throw new Error("请填写任务负责人");
+
+  const task = await db
+    .prepare(
+      "SELECT id, name, brand, quantity, due_at, project_id FROM tasks WHERE id = ?",
+    )
+    .bind(taskId)
+    .first<{
+      id: string;
+      name: string;
+      brand: string;
+      quantity: number;
+      due_at: string;
+      project_id: string;
+    }>();
+  if (!task) throw new Error("任务不存在");
+
+  await db
+    .prepare("UPDATE tasks SET owner_userid = ? WHERE id = ?")
+    .bind(ownerUserid, taskId)
+    .run();
+
+  const partner = await findOrCreateGroupOwnerPartner(db, ownerUserid);
+
+  const warnings: string[] = [];
+  const projectId = text(task.project_id);
+  if (projectId) {
+    const project = await db
+      .prepare(
+        "SELECT main_group_member_ids, owner_userid FROM projects WHERE id = ?",
+      )
+      .bind(projectId)
+      .first<{ main_group_member_ids: string; owner_userid: string }>();
+    if (project) {
+      // 负责人不在成员列表则并入，保持「负责人都在总群」
+      const stored = effectiveProjectMembers(project.main_group_member_ids, "");
+      if (!stored.includes(ownerUserid)) {
+        await db
+          .prepare("UPDATE projects SET main_group_member_ids = ? WHERE id = ?")
+          .bind(JSON.stringify([...stored, ownerUserid]), projectId)
+          .run();
+      }
+      const mainChat = await ensureProjectMainChat(db, projectId, config, fetchImpl);
+      if (mainChat.warning) warnings.push(mainChat.warning);
+    }
+  }
+
+  let ensure: TaskChatEnsureResult = { chatId: null, created: false };
+  try {
+    ensure = await ensureTaskChatForMembers(db, { taskId }, config, fetchImpl);
+    if (ensure.chatId && ensure.created) {
+      await sendTaskChatMessage(
+        db,
+        taskId,
+        taskChatIntroText({
+          name: task.name,
+          brand: task.brand,
+          quantity: task.quantity,
+          dueAt: task.due_at,
+        }),
+        config,
+        fetchImpl,
+      );
+    }
+  } catch (error) {
+    warnings.push(`任务群创建失败：${error instanceof Error ? error.message : String(error)}`);
+  }
+
+  return {
+    ownerUserid,
+    partnerId: partner.id,
+    chatId: ensure.chatId,
+    chatCreated: ensure.created,
+    warning: warnings.length > 0 ? warnings.join("；") : undefined,
+  };
+}
+
 export async function sendTaskChatMessage(
   db: DatabaseClient,
   taskId: string,

lib/task-one-click-push-service.ts

@@ -1,355 +0,0 @@
-import type { DatabaseClient } from "./database";
-import { getRuntimeEnv } from "./runtime-env";
-import {
-  sendWecomAppMessage,
-  type WecomConfig,
-} from "./wecom-client";
-import { pushProjectTask, type ProjectPushOutcome } from "./project-push-service";
-import type { TaskPushRow } from "./wecom-group-push-service";
-
-type FetchLike = typeof fetch;
-
-export class OneClickPushError extends Error {
-  status: number;
-
-  constructor(message: string, status = 400) {
-    super(message);
-    this.name = "OneClickPushError";
-    this.status = status;
-  }
-}
-
-export type BoundWecomPartner = {
-  id: string;
-  name: string;
-  wecomExternalUserId: string;
-};
-
-export type KocPushResult = {
-  partnerId: string;
-  partnerName: string;
-  externalUserId: string;
-  ok: boolean;
-  error: string;
-};
-
-export type TaskPushLogRow = {
-  id: string;
-  task_id: string;
-  project_id: string;
-  push_kind: string;
-  main_group_count: number;
-  koc_userids: string;
-  koc_ok_count: number;
-  koc_fail_list: string;
-  group_push_id: string;
-  detail: string;
-  created_at: string;
-};
-
-export type OneClickPushOutcome = {
-  linkUrl: string;
-  projectOutcome: ProjectPushOutcome | null;
-  kocResults: KocPushResult[];
-  kocSent: number;
-  kocFailed: number;
-  skippedReasons: string[];
-  logId: string;
-};
-
-function text(value: unknown) {
-  return String(value ?? "").trim();
-}
-
-export function buildKocDirectMessage(
-  task: Pick<
-    TaskPushRow,
-    | "name"
-    | "brand"
-    | "quantity"
-    | "due_at"
-    | "task_type"
-    | "platform"
-    | "content_format"
-    | "share_token"
-  >,
-  portalUrl: string,
-): string {
-  const portal = text(portalUrl).replace(/\/$/, "");
-  const claimUrl =
-    portal && task.share_token ? `${portal}/?task=${task.share_token}` : "";
-  const formatLabel =
-    task.task_type === "screenshot_collect"
-      ? "截图回收"
-      : task.content_format === "video"
-        ? "视频"
-        : "图文";
-  return [
-    `【新任务】${task.name}`,
-    `品牌：${task.brand}｜数量：${task.quantity} 份｜截止：${task.due_at}`,
-    `平台：${task.platform}｜形式：${formatLabel}`,
-    "数量有限，先到先得，点击链接直接领取（企微内打开免输身份）：",
-    claimUrl || "领取链接生成失败，请联系管理员",
-  ].join("\n");
-}
-
-export async function listBoundWecomPartners(
-  db: DatabaseClient,
-): Promise<BoundWecomPartner[]> {
-  const result = await db
-    .prepare(
-      `SELECT id, name, wecom_external_user_id
-       FROM partners
-       WHERE wecom_external_user_id IS NOT NULL
-         AND wecom_external_user_id != ''
-       ORDER BY name ASC`,
-    )
-    .all<{
-      id: string;
-      name: string;
-      wecom_external_user_id: string;
-    }>();
-  return result.results.map((row) => ({
-    id: row.id,
-    name: row.name,
-    wecomExternalUserId: row.wecom_external_user_id,
-  }));
-}
-
-export async function findTodayTaskPushLog(
-  db: DatabaseClient,
-  taskId: string,
-  pushKind = "task_open",
-): Promise<TaskPushLogRow | null> {
-  const result = await db
-    .prepare(
-      `SELECT id, task_id, project_id, push_kind, main_group_count,
-              koc_userids, koc_ok_count, koc_fail_list, group_push_id,
-              detail, created_at
-       FROM wecom_push_logs
-       WHERE task_id = ? AND push_kind = ?
-         AND DATE(created_at) = CURDATE()
-       ORDER BY created_at DESC
-       LIMIT 1`,
-    )
-    .bind(taskId, pushKind)
-    .first<TaskPushLogRow>();
-  return result ?? null;
-}
-
-export async function listTaskPushLogs(
-  db: DatabaseClient,
-  taskId: string,
-): Promise<TaskPushLogRow[]> {
-  const filter = taskId ? "WHERE task_id = ?" : "";
-  const statement = db
-    .prepare(
-      `SELECT id, task_id, project_id, push_kind, main_group_count,
-              koc_userids, koc_ok_count, koc_fail_list, group_push_id,
-              detail, created_at
-       FROM wecom_push_logs
-       ${filter}
-       ORDER BY created_at DESC
-       LIMIT 50`,
-    )
-    .bind(...(taskId ? [taskId] : []));
-  const result = await statement.all<TaskPushLogRow>();
-  return result.results;
-}
-
-export async function recordCardAck(
-  db: DatabaseClient,
-  params: { cardTaskId: string; btnKey: string; operator: string },
-) {
-  const taskId = /^task:([^:]+):/.exec(params.cardTaskId)?.[1] ?? "";
-  await db
-    .prepare(
-      `INSERT INTO wecom_push_logs
-        (id, task_id, project_id, push_kind, main_group_count,
-         koc_userids, koc_ok_count, koc_fail_list, group_push_id, detail)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
-    )
-    .bind(
-      `wpl-${crypto.randomUUID().slice(0, 12)}`,
-      taskId || params.cardTaskId,
-      "",
-      "card_ack",
-      0,
-      "[]",
-      0,
-      "[]",
-      "",
-      JSON.stringify({
-        cardTaskId: params.cardTaskId,
-        btnKey: params.btnKey,
-        operator: params.operator,
-      }),
-    )
-    .run();
-}
-
-export async function oneClickPushTask(
-  db: DatabaseClient,
-  params: {
-    taskId: unknown;
-    sendMainGroup?: unknown;
-    sendKoc?: unknown;
-    createGroupTemplate?: unknown;
-    selectedKocPartnerIds?: unknown;
-    force?: unknown;
-    text?: unknown;
-  },
-  config: WecomConfig,
-  fetchImpl: FetchLike = fetch,
-): Promise<OneClickPushOutcome> {
-  const taskId = text(params.taskId);
-  if (!taskId) throw new OneClickPushError("缺少 taskId");
-
-  const sendMainGroup = params.sendMainGroup !== false;
-  const sendKoc = params.sendKoc !== false;
-  const createGroupTemplate = params.createGroupTemplate === true;
-  if (!sendMainGroup && !sendKoc && !createGroupTemplate) {
-    throw new OneClickPushError("请至少选择一个推送目标");
-  }
-
-  const task = await db
-    .prepare(
-      `SELECT id, name, brand, quantity, due_at, task_type, platform,
-              content_format, share_token, project_id
-       FROM tasks WHERE id = ?`,
-    )
-    .bind(taskId)
-    .first<TaskPushRow & { project_id: string }>();
-  if (!task) throw new OneClickPushError("任务不存在", 404);
-  if (!text(task.share_token)) {
-    throw new OneClickPushError("任务尚未生成领取链接，请先开放领取", 400);
-  }
-
-  if (params.force !== true) {
-    const existing = await findTodayTaskPushLog(db, taskId, "task_open");
-    if (existing) {
-      throw new OneClickPushError(
-        "今天已推送过该任务；如确需再次推送，请勾选「仍要推送」",
-        409,
-      );
-    }
-  }
-
-  const skippedReasons: string[] = [];
-  const wantsProjectTargets = sendMainGroup || createGroupTemplate;
-  let projectOutcome: ProjectPushOutcome | null = null;
-  if (wantsProjectTargets) {
-    if (!text(task.project_id)) {
-      skippedReasons.push("任务未挂项目，已跳过项目总群与任务群");
-    } else {
-      projectOutcome = await pushProjectTask(
-        db,
-        {
-          taskId,
-          sendMainGroup,
-          sendGroupChats: createGroupTemplate,
-          text: params.text,
-        },
-        config,
-        fetchImpl,
-      );
-      skippedReasons.push(...projectOutcome.skippedReasons);
-    }
-  }
-
-  const portalUrl = text(getRuntimeEnv().KOC_PORTAL_URL);
-  const linkUrl = task.share_token
-    ? `${portalUrl.replace(/\/$/, "")}/?task=${task.share_token}`
-    : "";
-
-  const kocResults: KocPushResult[] = [];
-  if (sendKoc) {
-    const bound = await listBoundWecomPartners(db);
-    const selected = Array.isArray(params.selectedKocPartnerIds)
-      ? params.selectedKocPartnerIds.map((id) => text(id)).filter(Boolean)
-      : null;
-    const targets = selected
-      ? bound.filter((partner) => selected.includes(partner.id))
-      : bound;
-    if (targets.length === 0) {
-      skippedReasons.push("没有可直达的合作方（未勾选或均未绑定企微身份）");
-    } else {
-      const message = buildKocDirectMessage(task, portalUrl);
-      for (const partner of targets) {
-        try {
-          const sent = await sendWecomAppMessage(
-            [partner.wecomExternalUserId],
-            message,
-            config,
-            fetchImpl,
-          );
-          const failed = sent.sent === 0;
-          kocResults.push({
-            partnerId: partner.id,
-            partnerName: partner.name,
-            externalUserId: partner.wecomExternalUserId,
-            ok: !failed,
-            error: failed ? "企业微信未送达（invaliduser）" : "",
-          });
-        } catch (error) {
-          kocResults.push({
-            partnerId: partner.id,
-            partnerName: partner.name,
-            externalUserId: partner.wecomExternalUserId,
-            ok: false,
-            error: error instanceof Error ? error.message : "发送失败",
-          });
-        }
-      }
-    }
-  }
-
-  const kocSent = kocResults.filter((item) => item.ok).length;
-  const kocFailed = kocResults.length - kocSent;
-  const logId = `wpl-${crypto.randomUUID().slice(0, 12)}`;
-  const groupPushId =
-    projectOutcome?.groupResults.map((item) => item.msgid).join(",") ?? "";
-
-  await db
-    .prepare(
-      `INSERT INTO wecom_push_logs
-        (id, task_id, project_id, push_kind, main_group_count,
-         koc_userids, koc_ok_count, koc_fail_list, group_push_id, detail)
-       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
-    )
-    .bind(
-      logId,
-      taskId,
-      text(task.project_id),
-      "task_open",
-      projectOutcome ? projectOutcome.appResults.length : 0,
-      JSON.stringify(
-        kocResults.map((item) => ({
-          partnerId: item.partnerId,
-          name: item.partnerName,
-          externalUserId: item.externalUserId,
-          ok: item.ok,
-          error: item.error,
-        })),
-      ),
-      kocSent,
-      JSON.stringify(kocResults.filter((item) => !item.ok)),
-      groupPushId,
-      JSON.stringify({
-        skippedReasons,
-        createGroupTemplate,
-        linkUrl,
-      }),
-    )
-    .run();
-
-  return {
-    linkUrl,
-    projectOutcome,
-    kocResults,
-    kocSent,
-    kocFailed,
-    skippedReasons,
-    logId,
-  };
-}

lib/task-report-csv.ts

@@ -1,94 +0,0 @@
-import type { TaskReportRow } from "./mvp-db";
-
-const CSV_HEADERS = [
-  "任务ID",
-  "任务名称",
-  "任务类型",
-  "品牌",
-  "平台",
-  "所属项目",
-  "任务状态",
-  "计划数量",
-  "领取数",
-  "发布数",
-  "完成数",
-  "完成率",
-  "截止日期",
-  "创建时间",
-  "曝光量合计",
-  "阅读量合计",
-  "D2点赞",
-  "D2评论",
-  "D2收藏",
-  "D5点赞",
-  "D5评论",
-  "D5收藏",
-  "D7点赞",
-  "D7评论",
-  "D7收藏",
-  "最新点赞",
-  "最新评论",
-  "最新收藏",
-  "最新转发",
-];
-
-function taskTypeLabel(value: string) {
-  return value === "screenshot_collect" ? "截图采集" : "内容发布";
-}
-
-function taskStatusLabel(value: string) {
-  return value === "active" ? "进行中" : value === "completed" ? "已完结" : value;
-}
-
-function completionRate(row: TaskReportRow) {
-  if (!row.claimed_count) return "";
-  return `${Math.round((row.completed_count / row.claimed_count) * 100)}%`;
-}
-
-function csvCell(value: string | number | null | undefined) {
-  const text = value === null || value === undefined ? "" : String(value);
-  if (/[",\r\n]/.test(text)) return `"${text.replaceAll('"', '""')}"`;
-  return text;
-}
-
-export function buildTaskReportCsv(rows: TaskReportRow[]) {
-  const lines = [CSV_HEADERS.join(",")];
-  for (const row of rows) {
-    lines.push(
-      [
-        row.id,
-        row.name,
-        taskTypeLabel(row.task_type),
-        row.brand,
-        row.platform,
-        row.project_name ?? "",
-        taskStatusLabel(row.status),
-        row.quantity,
-        row.claimed_count,
-        row.published_count,
-        row.completed_count,
-        completionRate(row),
-        row.due_at,
-        row.created_at,
-        row.exposure_total,
-        row.views_total,
-        row.d2_likes,
-        row.d2_comments,
-        row.d2_collects,
-        row.d5_likes,
-        row.d5_comments,
-        row.d5_collects,
-        row.d7_likes,
-        row.d7_comments,
-        row.d7_collects,
-        row.latest_likes,
-        row.latest_comments,
-        row.latest_collects,
-        row.latest_shares,
-      ]
-        .map(csvCell)
-        .join(","),
-    );
-  }
-  return `\uFEFF${lines.join("\r\n")}`;
-}

lib/task-service.ts

@@ -1,4 +1,5 @@
 import { ensureSchema, getRawDb, uid } from "./mvp-db";
+import type { DatabaseClient } from "./database";
 import {
   readFeishuSource,
   type FeishuBindings,
@@ -13,18 +14,14 @@ export type CreateDistributionTaskInput = {
   platform?: "小红书" | "抖音";
   contentFormat?: "image_text" | "video";
   projectId?: string;
+  ownerUserid?: string;
+  recoveryEnabled?: boolean;
+  recoveryDueAt?: string;
+  recoveryInstructions?: string;
+  recoveryExampleImageKey?: string;
 };
 
-export type CreateScreenshotTaskInput = {
-  name: string;
-  brand: string;
-  dueAt: string;
-  keyword: string;
-  instructions: string;
-  quantity: number;
-  exampleImageKey?: string;
-  projectId?: string;
-};
+;
 
 export type DistributionTaskCreation = {
   created: boolean;
@@ -41,15 +38,7 @@ export type DistributionTaskCreation = {
   contentFormat: "image_text" | "video";
 };
 
-export type ScreenshotTaskCreation = {
-  created: true;
-  taskId: string;
-  shareToken: string;
-  name: string;
-  brand: string;
-  dueAt: string;
-  quantity: number;
-};
+
 
 type TaskRow = {
   id: string;
@@ -131,9 +120,25 @@ async function findExistingTask(
     .first<TaskRow>();
 }
 
+type RecoveryConfig = {
+  enabled: boolean;
+  dueAt: string;
+  instructions: string;
+  exampleImages: string;
+};
+
+function recoveryExampleImagesJson(exampleImageKey: string) {
+  return exampleImageKey.startsWith("task-assets/")
+    ? JSON.stringify([
+        { index: 1, key: exampleImageKey, width: null, height: null },
+      ])
+    : "[]";
+}
+
 async function insertTaskFromSource(
   source: FeishuSource,
   input: CreateDistributionTaskInput,
+  recovery: RecoveryConfig,
 ) {
   const db = getRawDb();
   const taskId = uid("task");
@@ -142,10 +147,12 @@ async function insertTaskFromSource(
     .prepare(
       `INSERT INTO tasks
         (id, name, brand, quantity, claimed_quantity, due_at, status,
-         platform, content_format, project_id,
+         platform, content_format, project_id, owner_userid,
          source_url, source_sheet_id, source_sheet_name, source_synced_at,
-         share_token)
-       VALUES (?, ?, ?, ?, 0, ?, 'importing', ?, ?, ?, ?, ?, ?, ?, ?)`,
+         share_token, join_qr_code,
+         recovery_enabled, recovery_due_at, recovery_instructions, recovery_example_images)
+       VALUES (?, ?, ?, ?, 0, ?, 'importing', ?, ?, ?, ?, ?, ?, ?, ?, ?, '',
+               ?, ?, ?, ?)`,
     )
     .bind(
       taskId,
@@ -156,11 +163,16 @@ async function insertTaskFromSource(
       input.platform ?? "小红书",
       input.contentFormat ?? "image_text",
       input.projectId,
+      input.ownerUserid,
       source.url,
       source.sheetId,
       source.sheetName,
       source.syncedAt,
       shareToken,
+      recovery.enabled ? 1 : 0,
+      recovery.dueAt,
+      recovery.instructions,
+      recovery.exampleImages,
     )
     .run();
 
@@ -224,6 +236,11 @@ export async function createDistributionTask(
     platform: rawInput.platform === "抖音" ? "抖音" : "小红书",
     contentFormat: rawInput.contentFormat === "video" ? "video" : "image_text",
     projectId: normalizedValue(rawInput.projectId ?? ""),
+    ownerUserid: normalizedValue(rawInput.ownerUserid ?? "").slice(0, 64),
+    recoveryEnabled: rawInput.recoveryEnabled !== false,
+    recoveryDueAt: normalizedValue(rawInput.recoveryDueAt ?? ""),
+    recoveryInstructions: normalizedValue(rawInput.recoveryInstructions ?? ""),
+    recoveryExampleImageKey: normalizedValue(rawInput.recoveryExampleImageKey ?? ""),
   };
   if (!input.feishuUrl || !input.name || !input.brand) {
     throw new Error("请补全飞书链接、任务名称和品牌/项目");
@@ -256,7 +273,17 @@ export async function createDistributionTask(
   ) {
     throw new Error("视频任务中存在未识别到视频的内容行，请检查飞书“视频”列");
   }
-  const inserted = await insertTaskFromSource(source, input);
+  const recoveryDueAt = normalizedValue(rawInput.recoveryDueAt ?? "");
+  const inserted = await insertTaskFromSource(source, input, {
+    enabled: rawInput.recoveryEnabled !== false,
+    dueAt: recoveryDueAt ? normalizedDueDate(recoveryDueAt) : input.dueAt,
+    instructions:
+      normalizedValue(rawInput.recoveryInstructions ?? "") ||
+      "请提交发布后的笔记截图",
+    exampleImages: recoveryExampleImagesJson(
+      normalizedValue(rawInput.recoveryExampleImageKey ?? ""),
+    ),
+  });
   return {
     created: true,
     taskId: inserted.taskId,
@@ -273,94 +300,164 @@ export async function createDistributionTask(
   };
 }
 
-export async function createScreenshotTask(
-  rawInput: CreateScreenshotTaskInput,
-): Promise<ScreenshotTaskCreation> {
-  await ensureSchema();
+export type UpdateTaskInput = {
+  taskId: string;
+  name: string;
+  brand: string;
+  dueAt: string;
+  projectId?: string;
+  platform?: "小红书" | "抖音";
+  contentFormat?: "image_text" | "video";
+  recoveryEnabled?: boolean;
+  recoveryDueAt?: string;
+  recoveryInstructions?: string;
+  recoveryExampleImageKey?: string;
+};
+
+export type TaskUpdateResult = {
+  taskId: string;
+  quantity: number;
+  claimedQuantity: number;
+};
+
+type UpdatableTaskRow = {
+  id: string;
+  quantity: number;
+  claimed_quantity: number;
+  platform: "小红书" | "抖音";
+  content_format: "image_text" | "video";
+  recovery_enabled: number;
+  recovery_due_at: string;
+  recovery_instructions: string | null;
+  recovery_example_images: string;
+};
+
+export async function updateTask(
+  rawInput: UpdateTaskInput,
+  db: DatabaseClient = getRawDb(),
+): Promise<TaskUpdateResult> {
+  const taskId = normalizedValue(rawInput.taskId);
+  if (!taskId) throw new Error("缺少 taskId");
   const input = {
     name: normalizedValue(rawInput.name),
     brand: normalizedValue(rawInput.brand),
     dueAt: normalizedDueDate(rawInput.dueAt),
-    keyword: normalizedValue(rawInput.keyword),
-    instructions: normalizedValue(rawInput.instructions),
-    quantity: Math.floor(Number(rawInput.quantity)),
-    exampleImageKey: normalizedValue(rawInput.exampleImageKey ?? ""),
     projectId: normalizedValue(rawInput.projectId ?? ""),
+    platform: rawInput.platform === "抖音" || rawInput.platform === "小红书"
+      ? rawInput.platform
+      : undefined,
+    contentFormat: rawInput.contentFormat === "video" || rawInput.contentFormat === "image_text"
+      ? rawInput.contentFormat
+      : undefined,
+    recoveryExampleImageKey: normalizedValue(rawInput.recoveryExampleImageKey ?? ""),
   };
-  if (!input.name || !input.brand || !input.keyword || !input.instructions) {
-    throw new Error("请补全任务名称、品牌/项目、搜索关键词和任务说明");
-  }
-  if (!Number.isInteger(input.quantity) || input.quantity < 1 || input.quantity > 500) {
-    throw new Error("任务数量需为 1—500 份");
-  }
-  if (input.exampleImageKey && !input.exampleImageKey.startsWith("task-assets/")) {
-    throw new Error("示例截图无效，请重新上传");
+  if (!input.name || !input.brand) {
+    throw new Error("请补全任务名称和品牌");
   }
 
-  const db = getRawDb();
-  const taskId = uid("task");
-  const shareToken = crypto.randomUUID().replaceAll("-", "");
-  const imageAssets = input.exampleImageKey
-    ? JSON.stringify([
-        { index: 1, key: input.exampleImageKey, width: null, height: null },
-      ])
-    : "[]";
+  const row = await db
+    .prepare(
+      `SELECT id, quantity, claimed_quantity, platform, content_format,
+              recovery_enabled, recovery_due_at, recovery_instructions, recovery_example_images
+       FROM tasks WHERE id = ?`,
+    )
+    .bind(taskId)
+    .first<UpdatableTaskRow>();
+  if (!row) throw new Error("任务不存在");
+
+  const quantity = Number(row.quantity);
+  const claimed = Number(row.claimed_quantity);
+  const recoveryEnabled =
+    rawInput.recoveryEnabled === undefined
+      ? row.recovery_enabled
+      : rawInput.recoveryEnabled
+        ? 1
+        : 0;
+  const recoveryDueAtInput = normalizedValue(rawInput.recoveryDueAt ?? "");
+  const recoveryDueAt = recoveryDueAtInput
+    ? normalizedDueDate(recoveryDueAtInput)
+    : row.recovery_due_at || input.dueAt;
+  const recoveryInstructions =
+    normalizedValue(rawInput.recoveryInstructions ?? "") ||
+    row.recovery_instructions ||
+    "";
+  const recoveryExampleImages = input.recoveryExampleImageKey
+    ? recoveryExampleImagesJson(input.recoveryExampleImageKey)
+    : row.recovery_example_images;
+
   await db
     .prepare(
-      `INSERT INTO tasks
-        (id, name, brand, quantity, claimed_quantity, due_at, status,
-         task_type, project_id, source_url, source_sheet_id, source_sheet_name,
-         share_token, collection_days)
-       VALUES (?, ?, ?, ?, 0, ?, 'active', 'screenshot_collect', ?, '', '', '', ?, '[]')`,
+      `UPDATE tasks
+       SET name = ?, brand = ?, due_at = ?, project_id = ?,
+           platform = ?, content_format = ?, quantity = ?,
+           recovery_enabled = ?, recovery_due_at = ?, recovery_instructions = ?,
+           recovery_example_images = ?
+       WHERE id = ?`,
     )
     .bind(
-      taskId,
       input.name,
       input.brand,
-      input.quantity,
       input.dueAt,
       input.projectId,
-      shareToken,
+      input.platform ?? row.platform,
+      input.contentFormat ?? row.content_format,
+      quantity,
+      recoveryEnabled,
+      recoveryDueAt,
+      recoveryInstructions,
+      recoveryExampleImages,
+      taskId,
     )
     .run();
+  await refreshTaskStatus(taskId, db).catch(() => undefined);
 
-  try {
-    const statements = Array.from({ length: input.quantity }, (_, index) =>
-      db
-        .prepare(
-          `INSERT INTO contents
-            (id, task_id, title, body, image_assets, video_assets, status, source, source_row)
-           VALUES (?, ?, ?, ?, ?, '[]', 'available', '截图回收任务', ?)`,
-        )
-        .bind(
-          uid("content"),
-          taskId,
-          input.keyword,
-          input.instructions,
-          imageAssets,
-          index + 1,
-        ),
-    );
-    for (let index = 0; index < statements.length; index += 100) {
-      await db.batch(statements.slice(index, index + 100));
-    }
-  } catch (error) {
-    await db.batch([
-      db.prepare("DELETE FROM contents WHERE task_id = ?").bind(taskId),
-      db.prepare("DELETE FROM tasks WHERE id = ?").bind(taskId),
-    ]);
-    throw error;
-  }
+  return { taskId, quantity, claimedQuantity: claimed };
+}
 
-  return {
-    created: true,
-    taskId,
-    shareToken,
-    name: input.name,
-    brand: input.brand,
-    dueAt: input.dueAt,
-    quantity: input.quantity,
-  };
+export type EnableRecoveryInput = {
+  taskId: string;
+  recoveryDueAt?: string;
+  recoveryInstructions?: string;
+  recoveryExampleImageKey?: string;
+};
+
+export async function enableTaskRecovery(
+  rawInput: EnableRecoveryInput,
+  db: DatabaseClient = getRawDb(),
+): Promise<{ taskId: string; recoveryDueAt: string }> {
+  const taskId = normalizedValue(rawInput.taskId);
+  if (!taskId) throw new Error("缺少 taskId");
+  const row = await db
+    .prepare(
+      "SELECT id, due_at, recovery_example_images FROM tasks WHERE id = ?",
+    )
+    .bind(taskId)
+    .first<{
+      id: string;
+      due_at: string;
+      recovery_example_images: string;
+    }>();
+  if (!row) throw new Error("任务不存在");
+  const dueAtInput = normalizedValue(rawInput.recoveryDueAt ?? "");
+  const dueAt = dueAtInput ? normalizedDueDate(dueAtInput) : row.due_at;
+  const exampleImageKey = normalizedValue(rawInput.recoveryExampleImageKey ?? "");
+  await db
+    .prepare(
+      `UPDATE tasks SET recovery_enabled = 1, recovery_due_at = ?,
+         recovery_instructions = ?, recovery_example_images = ?
+       WHERE id = ?`,
+    )
+    .bind(
+      dueAt,
+      normalizedValue(rawInput.recoveryInstructions ?? "") ||
+        "请提交发布后的笔记截图",
+      exampleImageKey
+        ? recoveryExampleImagesJson(exampleImageKey)
+        : row.recovery_example_images,
+      taskId,
+    )
+    .run();
+  return { taskId, recoveryDueAt: dueAt };
 }
 
 export function buildClaimUrl(portalOrigin: string, shareToken: string) {
@@ -370,3 +467,54 @@ export function buildClaimUrl(portalOrigin: string, shareToken: string) {
   url.searchParams.set("task", shareToken);
   return url.toString();
 }
+
+type TaskStatusRow = {
+  id: string;
+  status: string;
+};
+
+type DistributionProgressRow = {
+  total: number;
+  complete_count: number;
+};
+
+// 纯重算任务状态：条件满足置 completed，不满足回 active（释放重开等场景）；
+// importing 是导入中间态，不参与推导。完成判定取发布阶段口径（complete_count）
+export async function refreshTaskStatus(
+  taskId: string,
+  db: DatabaseClient = getRawDb(),
+): Promise<string> {
+  const row = await db
+    .prepare("SELECT id, status FROM tasks WHERE id = ?")
+    .bind(taskId)
+    .first<TaskStatusRow>();
+  if (!row || row.status === "importing") return row?.status ?? "";
+  const progress = await db
+    .prepare(
+      `SELECT COUNT(*) AS total,
+              COALESCE(SUM(CASE WHEN status = 'complete' THEN 1 ELSE 0 END), 0) AS complete_count
+       FROM distributions WHERE task_id = ?`,
+    )
+    .bind(taskId)
+    .first<DistributionProgressRow>();
+  const available = await db
+    .prepare(
+      "SELECT COUNT(*) AS available_count FROM contents WHERE task_id = ? AND status = 'available'",
+    )
+    .bind(taskId)
+    .first<{ available_count: number }>();
+  const total = Number(progress?.total ?? 0);
+  const availableCount = Number(available?.available_count ?? 0);
+  const completed =
+    total > 0 &&
+    availableCount === 0 &&
+    Number(progress?.complete_count ?? 0) === total;
+  const next = completed ? "completed" : "active";
+  if (next !== row.status) {
+    await db
+      .prepare("UPDATE tasks SET status = ? WHERE id = ?")
+      .bind(next, taskId)
+      .run();
+  }
+  return next;
+}

lib/user-auth.ts

@@ -9,6 +9,7 @@ export type AuthUser = {
   id: string;
   username: string;
   role: UserRole;
+  wecom_userid: string;
 };
 
 export type RequestPrincipal =
@@ -244,19 +245,31 @@ export async function getUserFromSessionToken(token: string): Promise<AuthUser |
   await ensureSchema();
   const row = await getRawDb()
     .prepare(
-      `SELECT u.id, u.username, u.role
+      `SELECT u.id, u.username, u.role, u.wecom_userid
        FROM auth_sessions s
        JOIN users u ON u.id = s.user_id
        WHERE s.token_hash = ? AND s.expires_at > ?
        LIMIT 1`,
     )
     .bind(await sha256(token), new Date().toISOString())
-    .first<{ id: string; username: string; role: string }>();
+    .first<{
+      id: string;
+      username: string;
+      role: string;
+      wecom_userid: string | null;
+    }>();
   if (!row || !["super_admin", "admin", "user"].includes(row.role)) return null;
-  return { id: row.id, username: row.username, role: row.role as UserRole };
+  return {
+    id: row.id,
+    username: row.username,
+    role: row.role as UserRole,
+    wecom_userid: String(row.wecom_userid ?? ""),
+  };
 }
 
-export async function getUserFromCookieHeader(cookieHeader: string | null) {
+export async function getUserFromCookieHeader(
+  cookieHeader: string | null,
+): Promise<AuthUser | null> {
   return getUserFromSessionToken(sessionCookieFromHeader(cookieHeader));
 }
 
@@ -266,12 +279,18 @@ function hasInternalToken(request: Request) {
   return Boolean(expected && received && safeEqual(expected, received));
 }
 
+// Turbopack dev 会把 `!user` 误判为编译期常量并删掉判空分支，这里用不透明函数调用兜住
+function isNullish(value: unknown): value is null | undefined {
+  return value === null || value === undefined;
+}
+
 export async function getRequestPrincipal(
   request: Request,
 ): Promise<RequestPrincipal | null> {
   if (hasInternalToken(request)) return { kind: "internal" };
   const user = await getUserFromCookieHeader(request.headers.get("cookie"));
-  return user ? { kind: "user", user } : null;
+  if (isNullish(user)) return null;
+  return { kind: "user", user };
 }
 
 export async function isAppRequest(request: Request) {

lib/wecom-callback-events.ts

@@ -1,5 +1,4 @@
 import type { DatabaseClient } from "./database";
-import { recordCardAck } from "./task-one-click-push-service";
 
 export type WecomCallbackFields = Record<string, string>;
 
@@ -30,6 +29,37 @@ export function extractWecomEncryptField(body: string): string {
   return fields.Encrypt ?? "";
 }
 
+export async function recordCardAck(
+  db: DatabaseClient,
+  params: { cardTaskId: string; btnKey: string; operator: string },
+) {
+  const taskId = /^task:([^:]+):/.exec(params.cardTaskId)?.[1] ?? "";
+  await db
+    .prepare(
+      `INSERT INTO wecom_push_logs
+        (id, task_id, project_id, push_kind, main_group_count,
+         koc_userids, koc_ok_count, koc_fail_list, group_push_id, detail)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,
+    )
+    .bind(
+      `wpl-${crypto.randomUUID().slice(0, 12)}`,
+      taskId || params.cardTaskId,
+      "",
+      "card_ack",
+      0,
+      "[]",
+      0,
+      "[]",
+      "",
+      JSON.stringify({
+        cardTaskId: params.cardTaskId,
+        btnKey: params.btnKey,
+        operator: params.operator,
+      }),
+    )
+    .run();
+}
+
 export async function handleWecomCallbackEvent(
   db: DatabaseClient,
   fields: WecomCallbackFields,

lib/wecom-client.ts

@@ -96,6 +96,11 @@ function parseDueDays(value: string | undefined) {
   return Math.min(30, Math.floor(parsed));
 }
 
+// 企微 appchat 的 chatid 只接受字母和数字（下划线/连字符都会报 86001 chatid invalid）
+export function sanitizeChatid(value: string) {
+  return String(value ?? "").replace(/[^a-zA-Z0-9]/g, "");
+}
+
 export function hasAppCredentials(config: WecomConfig) {
   return Boolean(config.corpId && config.agentId && config.secret);
 }
@@ -118,9 +123,10 @@ async function readEnvelope(
 function ensureOk(
   payload: WecomEnvelope,
   fallbackMessage: string,
+  allowErrcodes: number[] = [],
 ) {
   const code = Number(payload.errcode ?? 0);
-  if (code === 0) return;
+  if (code === 0 || allowErrcodes.includes(code)) return;
   const message = safeMessage(payload.errmsg) || fallbackMessage;
   if (code === 40014 || code === 42001) {
     throw new WecomClientError(`企业微信 access_token 无效：${message}`, 401);
@@ -336,10 +342,14 @@ export type WecomGroupChat = {
 export async function listCustomerGroupChats(
   config: WecomConfig,
   fetchImpl: FetchLike = fetch,
+  ownerUserids?: string[],
 ): Promise<WecomGroupChat[]> {
   if (!hasAppCredentials(config)) return [];
   const token = await fetchAccessToken(config, fetchImpl);
 
+  const ownerFilterUserids = (ownerUserids ?? [])
+    .map((id) => bindingValue(id))
+    .filter((id) => id.length > 0);
   const chatIds: Array<{ chatId: string; status: number }> = [];
   let cursor = "";
   do {
@@ -347,7 +357,13 @@ export async function listCustomerGroupChats(
     const listResp = await fetchImpl(listUrl, {
       method: "POST",
       headers: { "Content-Type": "application/json; charset=utf-8" },
-      body: JSON.stringify({ limit: 100, cursor }),
+      body: JSON.stringify({
+        limit: 100,
+        cursor,
+        ...(ownerFilterUserids.length > 0
+          ? { owner_filter: { userid_list: ownerFilterUserids } }
+          : {}),
+      }),
       signal: AbortSignal.timeout(12_000),
     });
     const listPayload = await readEnvelope(listResp, "获取企业微信客户群列表失败");
@@ -378,12 +394,23 @@ export async function listCustomerGroupChats(
     const getPayload = await readEnvelope(getResp, "获取企业微信客户群详情失败");
     if (!getResp.ok) continue;
     if (Number(getPayload.errcode ?? 0) !== 0) continue;
-    const detail = getPayload.group_chat;
+    const detail = getPayload.group_chat as
+      | {
+          name?: unknown;
+          owner?: unknown;
+          member_count?: unknown;
+          member_list?: unknown[];
+        }
+      | undefined;
+    // 企微实际响应不带 member_count（只有 member_list），以成员列表长度为准
+    const memberCount = Array.isArray(detail?.member_list)
+      ? detail.member_list.length
+      : Number(detail?.member_count ?? 0);
     groups.push({
       chatId,
       name: bindingValue(detail?.name),
       ownerUserId: bindingValue(detail?.owner),
-      memberCount: Number(detail?.member_count ?? 0),
+      memberCount,
       status,
     });
   }
@@ -642,6 +669,7 @@ async function postAppChat(
   body: Record<string, unknown>,
   errorLabel: string,
   fetchImpl: FetchLike,
+  allowErrcodes: number[] = [],
 ): Promise<Record<string, unknown>> {
   if (!hasAppCredentials(config)) {
     throw new WecomClientError(
@@ -661,7 +689,7 @@ async function postAppChat(
   if (!response.ok) {
     throw new WecomClientError(`${errorLabel}（HTTP ${response.status}）`, 502);
   }
-  ensureOk(payload, errorLabel);
+  ensureOk(payload, errorLabel, allowErrcodes);
   return payload;
 }
 
@@ -684,9 +712,12 @@ export async function createAppChat(
   const payload = await postAppChat(
     config,
     "/cgi-bin/appchat/create",
-    { name, owner: Number(config.agentId), userlist, chatid },
+    // owner 不传：默认建群应用自己为群主，避免把 agentId 误当 userid
+    { name, userlist, chatid },
     "创建企业微信群聊会话失败",
     fetchImpl,
+    // 86215 = chatid 已存在：chatid 由本项目派生（pgc/tgc+ID），视为本应用已建过的群
+    [86215],
   );
   return { chatid: bindingValue(payload.chatid) || chatid };
 }
@@ -767,6 +798,105 @@ export async function sendAppChatMessage(
   );
 }
 
+export type TaskJoinWayInput = {
+  chatIdList: string[];
+  roomBaseName: string;
+  state: string;
+};
+
+function joinWayBody(input: TaskJoinWayInput): Record<string, unknown> {
+  return {
+    scene: 2,
+    chat_id_list: input.chatIdList
+      .map((id) => bindingValue(id))
+      .filter((id) => id.length > 0)
+      .slice(0, 5),
+    auto_create_room: 1,
+    room_base_name: Array.from(input.roomBaseName).slice(0, 40).join(""),
+    state: Array.from(input.state).slice(0, 30).join(""),
+  };
+}
+
+export async function addTaskJoinWay(
+  config: WecomConfig,
+  input: TaskJoinWayInput,
+  fetchImpl: FetchLike = fetch,
+): Promise<{ configId: string }> {
+  const payload = await postAppChat(
+    config,
+    "/cgi-bin/externalcontact/groupchat/add_join_way",
+    joinWayBody(input),
+    "创建企业微信进群活码失败",
+    fetchImpl,
+  );
+  const configId = bindingValue(payload.config_id);
+  if (!configId) {
+    throw new WecomClientError("创建企业微信进群活码失败（未返回 config_id）", 502);
+  }
+  return { configId };
+}
+
+export async function getJoinWayQrCode(
+  config: WecomConfig,
+  configId: string,
+  fetchImpl: FetchLike = fetch,
+): Promise<{ qrCode: string }> {
+  const payload = await postAppChat(
+    config,
+    "/cgi-bin/externalcontact/groupchat/get_join_way",
+    { config_id: bindingValue(configId) },
+    "获取企业微信进群活码二维码失败",
+    fetchImpl,
+  );
+  const joinWay = payload.join_way as { qr_code?: unknown } | undefined;
+  const qrCode = bindingValue(joinWay?.qr_code);
+  if (!qrCode) {
+    throw new WecomClientError("获取企业微信进群活码二维码失败（未返回二维码）", 502);
+  }
+  return { qrCode };
+}
+
+export async function updateTaskJoinWay(
+  config: WecomConfig,
+  input: TaskJoinWayInput & { configId: string },
+  fetchImpl: FetchLike = fetch,
+): Promise<void> {
+  const configId = bindingValue(input.configId);
+  if (!configId) {
+    throw new WecomClientError("更新企业微信进群活码失败（缺少 config_id）", 400);
+  }
+  // update_join_way 为覆盖式更新，需重传全部字段（含 scene / auto_create_room）
+  await postAppChat(
+    config,
+    "/cgi-bin/externalcontact/groupchat/update_join_way",
+    { ...joinWayBody(input), config_id: configId },
+    "更新企业微信进群活码失败",
+    fetchImpl,
+  );
+}
+
+export async function deleteJoinWay(
+  config: WecomConfig,
+  configId: string,
+  fetchImpl: FetchLike = fetch,
+): Promise<void> {
+  const configIdValue = bindingValue(configId);
+  if (!configIdValue) return;
+  try {
+    await postAppChat(
+      config,
+      "/cgi-bin/externalcontact/groupchat/del_join_way",
+      { config_id: configIdValue },
+      "删除企业微信进群活码失败",
+      fetchImpl,
+    );
+  } catch (error) {
+    // 活码配置可能已被企微侧清理（群解散等），删除是尽力而为，不阻断本地解绑
+    if (error instanceof WecomClientError) return;
+    throw error;
+  }
+}
+
 async function getWecomJson(
   config: WecomConfig,
   path: string,

lib/wecom-group-push-service.ts

@@ -80,12 +80,7 @@ export function buildTaskGroupPushMessage(
   const portal = portalUrl.trim().replace(/\/$/, "");
   const shareToken = bindingValue(task.share_token);
   const claimUrl = portal && shareToken ? `${portal}/?task=${shareToken}` : "";
-  const formatLabel =
-    task.task_type === "screenshot_collect"
-      ? "截图回收"
-      : task.content_format === "video"
-        ? "视频"
-        : "图文";
+  const formatLabel = task.content_format === "video" ? "视频" : "图文";
   const lines = [
     `【新任务】${task.name}`,
     `品牌：${task.brand}｜数量：${task.quantity} 份｜截止：${task.due_at}`,

lib/wecom-notifier-service.ts

@@ -27,10 +27,29 @@ type DueSoonRow = {
   wecom_external_user_id: string | null;
   task_id: string;
   task_name: string;
-  due_at: string;
+  pending_phase: "publish" | "recovery" | "metrics";
+  pending_due_at: string;
   content_title: string;
 };
 
+function pendingActionLabel(pendingPhase: string) {
+  if (pendingPhase === "recovery") return "截图待提交";
+  if (pendingPhase === "metrics") return "公开数据待补交";
+  return "待发布";
+}
+
+function pendingSummary(rows: DueSoonRow[]) {
+  const shot = rows.filter((row) => row.pending_phase === "recovery").length;
+  const metrics = rows.filter((row) => row.pending_phase === "metrics").length;
+  const publish = rows.length - shot - metrics;
+  const parts: string[] = [];
+  if (publish > 0) parts.push(`${publish} 条笔记待发布`);
+  if (shot > 0) parts.push(`${shot} 份截图待提交`);
+  if (metrics > 0) parts.push(`${metrics} 条公开数据待补交`);
+  if (parts.length === 0) return `${rows.length} 条待跟进`;
+  return parts.join("、");
+}
+
 export function computeDueCutoff(today: string, dueDays: number) {
   const match = /^(\d{4})-(\d{2})-(\d{2})$/.exec(today);
   if (!match) return today;
@@ -46,37 +65,57 @@ export async function runDueSoonWecomNotifications(
   config: WecomConfig,
   fetchImpl: FetchLike = fetch,
   now: number = Date.now(),
+  taskId?: string,
 ): Promise<WecomNotifySummary> {
   const today = shanghaiDateFromTimestamp(now);
   const cutoff = computeDueCutoff(today, config.dueDays);
   const portalUrl = bindingValue(getRuntimeEnv().KOC_PORTAL_URL);
+  const taskFilter = String(taskId ?? "").trim();
 
-  const result = await db
-    .prepare(
-      `SELECT
+  // 双阶段催办：发布阶段（未回填链接）看 due_at；回收阶段（已发布未收截图）看 recovery_due_at；
+  // 采集失败兜底：已发布但公开数据采集失败时催 KOC 补交数据截图（不限日期，尽快补）
+  const dueSoonBase = `SELECT
         d.id AS distribution_id,
         d.partner_id,
         p.name AS partner_name,
         p.wecom_external_user_id,
         t.id AS task_id,
         t.name AS task_name,
-        t.due_at,
+        CASE
+          WHEN d.publish_url IS NULL OR d.publish_url = '' THEN 'publish'
+          WHEN d.collection_status = 'failed' THEN 'metrics'
+          ELSE 'recovery'
+        END AS pending_phase,
+        CASE
+          WHEN d.publish_url IS NULL OR d.publish_url = '' THEN t.due_at
+          WHEN d.collection_status = 'failed'
+            THEN COALESCE(NULLIF(t.recovery_due_at, ''), t.due_at)
+          ELSE t.recovery_due_at
+        END AS pending_due_at,
         c.title AS content_title
        FROM distributions d
        JOIN tasks t ON t.id = d.task_id
        JOIN partners p ON p.id = d.partner_id
        JOIN contents c ON c.id = d.content_id
        WHERE (
-             (t.task_type = 'screenshot_collect' AND d.result_submitted_at IS NULL)
-             OR (t.task_type != 'screenshot_collect'
-                 AND (d.publish_url IS NULL OR d.publish_url = ''))
-           )
-         AND t.due_at IS NOT NULL AND t.due_at != ''
-         AND t.due_at <= ?
-       ORDER BY t.due_at ASC, p.name ASC`,
+             ((d.publish_url IS NULL OR d.publish_url = '')
+               AND t.due_at IS NOT NULL AND t.due_at != '' AND t.due_at <= ?)
+             OR (t.recovery_enabled = 1
+               AND d.publish_url IS NOT NULL AND d.publish_url != ''
+               AND d.result_submitted_at IS NULL
+               AND t.recovery_due_at IS NOT NULL AND t.recovery_due_at != ''
+               AND t.recovery_due_at <= ?)
+             OR (d.publish_url IS NOT NULL AND d.publish_url != ''
+               AND d.collection_status = 'failed')
+           )`;
+  const statement = db
+    .prepare(
+      taskFilter
+        ? `${dueSoonBase} AND t.id = ? ORDER BY pending_due_at ASC, p.name ASC`
+        : `${dueSoonBase} ORDER BY pending_due_at ASC, p.name ASC`,
     )
-    .bind(cutoff)
-    .all<DueSoonRow>();
+    .bind(...(taskFilter ? [cutoff, cutoff, taskFilter] : [cutoff, cutoff]));
+  const result = await statement.all<DueSoonRow>();
 
   const grouped = new Map<
     string,
@@ -111,13 +150,13 @@ export async function runDueSoonWecomNotifications(
       ? [entry.externalUserId]
       : [];
     const lines = entry.rows.slice(0, 5).map((row) => {
-      return `· 《${truncate(row.task_name, 24)}》— ${truncate(row.content_title, 24)}（截止 ${row.due_at}）`;
+      return `· 《${truncate(row.task_name, 24)}》— ${truncate(row.content_title, 24)}（${pendingActionLabel(row.pending_phase)}，截止 ${row.pending_due_at}）`;
     });
     const overflow =
       entry.rows.length > 5 ? `\n…还有 ${entry.rows.length - 5} 条` : "";
     const link = portalUrl ? `\n领取链接：${portalUrl}` : "";
     const content =
-      `${entry.partnerName}，你有 ${entry.rows.length} 条内容待发布：\n${lines.join("\n")}${overflow}${link}`;
+      `${entry.partnerName}，你有 ${pendingSummary(entry.rows)}：\n${lines.join("\n")}${overflow}${link}`;
     const appResult = await sendWecomAppMessage(
       external,
       content,
@@ -137,7 +176,7 @@ export async function runDueSoonWecomNotifications(
     } else {
       dueSoonSent += 1;
     }
-    const earliestDue = entry.rows[0]?.due_at ?? "";
+    const earliestDue = entry.rows[0]?.pending_due_at ?? "";
     digestTasks.push(
       `· ${entry.partnerName}（${entry.rows.length} 条，最近截止 ${earliestDue}）`,
     );
@@ -150,26 +189,26 @@ export async function runDueSoonWecomNotifications(
   for (const row of result.results) {
     const entry = byTask.get(row.task_id) ?? {
       taskName: row.task_name,
-      dueAt: row.due_at,
+      dueAt: row.pending_due_at,
       rows: [],
     };
     entry.rows.push(row);
     byTask.set(row.task_id, entry);
   }
-  for (const [taskId, entry] of byTask) {
+  for (const [groupTaskId, entry] of byTask) {
     const partners = [...new Set(entry.rows.map((row) => row.partner_name))];
     const overflow = partners.length > 5 ? ` 等 ${partners.length} 位` : "";
     await sendTaskChatMessage(
       db,
-      taskId,
-      `【催办】《${truncate(entry.taskName, 24)}》有 ${entry.rows.length} 条内容待发布（截止 ${entry.dueAt}）：\n${partners.slice(0, 5).join("、")}${overflow}`,
+      groupTaskId,
+      `【催办】《${truncate(entry.taskName, 24)}》有 ${pendingSummary(entry.rows)}（截止 ${entry.dueAt}）：\n${partners.slice(0, 5).join("、")}${overflow}`,
       config,
       fetchImpl,
     );
   }
 
   let digestSent = false;
-  if (config.robotWebhook && digestTasks.length > 0) {
+  if (config.robotWebhook && digestTasks.length > 0 && !taskFilter) {
     const digest =
       `今日待发布催办（${today}，截止 ≤ ${cutoff}）：\n${digestTasks.join("\n")}`;
     try {
@@ -206,7 +245,8 @@ type OverdueRow = {
   id: string;
   task_id: string;
   task_name: string;
-  due_at: string;
+  pending_phase: "publish" | "recovery";
+  pending_due_at: string;
   project_id: string;
   partner_id: string;
   partner_name: string;
@@ -223,24 +263,33 @@ export type OverdueEscalationSummary = {
 async function queryOverdueUnpublished(
   db: DatabaseClient,
   cutoff: string,
+  options: { phases: "publish" | "all" } = { phases: "all" },
 ): Promise<OverdueRow[]> {
+  const publishBranch = `(d.publish_url IS NULL OR d.publish_url = '')
+             AND t.due_at IS NOT NULL AND t.due_at != ''
+             AND t.due_at < ?`;
+  const recoveryBranch = `t.recovery_enabled = 1
+             AND d.publish_url IS NOT NULL AND d.publish_url != ''
+             AND d.result_submitted_at IS NULL
+             AND t.recovery_due_at IS NOT NULL AND t.recovery_due_at != ''
+             AND t.recovery_due_at < ?`;
+  const where =
+    options.phases === "publish"
+      ? publishBranch
+      : `(${publishBranch}) OR (${recoveryBranch})`;
   const result = await db
     .prepare(
-      `SELECT d.id, t.id AS task_id, t.name AS task_name, t.due_at,
+      `SELECT d.id, t.id AS task_id, t.name AS task_name,
+              CASE WHEN d.publish_url IS NULL OR d.publish_url = '' THEN 'publish' ELSE 'recovery' END AS pending_phase,
+              CASE WHEN d.publish_url IS NULL OR d.publish_url = '' THEN t.due_at ELSE t.recovery_due_at END AS pending_due_at,
               t.project_id, p.id AS partner_id, p.name AS partner_name
        FROM distributions d
        JOIN tasks t ON t.id = d.task_id
        JOIN partners p ON p.id = d.partner_id
-       WHERE (
-             (t.task_type = 'screenshot_collect' AND d.result_submitted_at IS NULL)
-             OR (t.task_type != 'screenshot_collect'
-                 AND (d.publish_url IS NULL OR d.publish_url = ''))
-           )
-         AND t.due_at IS NOT NULL AND t.due_at != ''
-         AND t.due_at < ?
-       ORDER BY t.due_at ASC, t.name ASC`,
+       WHERE ${where}
+       ORDER BY pending_due_at ASC, t.name ASC`,
     )
-    .bind(cutoff)
+    .bind(...(options.phases === "publish" ? [cutoff] : [cutoff, cutoff]))
     .all<OverdueRow>();
   return result.results;
 }
@@ -256,19 +305,28 @@ export async function runOverdueEscalation(
 
   const byTask = new Map<
     string,
-    { taskName: string; dueAt: string; projectId: string; count: number; partners: Set<string> }
+    {
+      taskName: string;
+      dueAt: string;
+      phase: "publish" | "recovery";
+      projectId: string;
+      count: number;
+      partners: Set<string>;
+    }
   >();
   for (const row of rows) {
-    const entry = byTask.get(row.task_id) ?? {
+    const key = `${row.task_id}:${row.pending_phase}`;
+    const entry = byTask.get(key) ?? {
       taskName: row.task_name,
-      dueAt: row.due_at,
+      dueAt: row.pending_due_at,
+      phase: row.pending_phase,
       projectId: bindingValue(row.project_id),
       count: 0,
       partners: new Set<string>(),
     };
     entry.count += 1;
     entry.partners.add(row.partner_name || row.partner_id);
-    byTask.set(row.task_id, entry);
+    byTask.set(key, entry);
   }
 
   const summary: OverdueEscalationSummary = {
@@ -285,7 +343,8 @@ export async function runOverdueEscalation(
     const lines = [...byTask.values()].map((entry) => {
       const partners = [...entry.partners].slice(0, 5).join("、");
       const overflow = entry.partners.size > 5 ? ` 等 ${entry.partners.size} 位` : "";
-      return `· ${truncate(entry.taskName, 24)}（截止 ${entry.dueAt}）：${entry.count} 条超期未发布 — ${partners}${overflow}`;
+      const label = entry.phase === "recovery" ? "截图超期未提交" : "超期未发布";
+      return `· ${truncate(entry.taskName, 24)}（截止 ${entry.dueAt}）：${entry.count} 条${label} — ${partners}${overflow}`;
     });
     try {
       await sendWecomRobotMessage(
@@ -303,11 +362,16 @@ export async function runOverdueEscalation(
 
   const env = getRuntimeEnv();
   const cardUrl = bindingValue(env.APP_ORIGIN) || bindingValue(env.KOC_PORTAL_URL);
-  for (const [taskId, entry] of byTask) {
+  for (const [key, entry] of byTask) {
+    const taskId = key.split(":")[0];
+    const overdueText =
+      entry.phase === "recovery"
+        ? `${entry.count} 份截图超期未提交`
+        : `${entry.count} 条内容超期未发布`;
     await sendTaskChatMessage(
       db,
       taskId,
-      `【超期催办】《${truncate(entry.taskName, 24)}》（截止 ${entry.dueAt}）有 ${entry.count} 条内容超期未发布，请跟进催办或释放。`,
+      `【超期催办】《${truncate(entry.taskName, 24)}》（截止 ${entry.dueAt}）有 ${overdueText}，请跟进催办或释放。`,
       config,
       fetchImpl,
     );
@@ -325,7 +389,7 @@ export async function runOverdueEscalation(
           touser: members,
           taskId: `task:${taskId}:due`,
           title: `超期催办：${truncate(entry.taskName, 20)}`,
-          description: `${entry.count} 条内容超期未发布（截止 ${entry.dueAt}），请跟进催办或释放`,
+          description: `${entry.phase === "recovery" ? `${entry.count} 份截图超期未提交` : `${entry.count} 条内容超期未发布`}（截止 ${entry.dueAt}），请跟进催办或释放`,
           url: cardUrl,
           buttons: [
             { key: "view_task", name: "查看任务", url: cardUrl },
@@ -380,7 +444,10 @@ export async function runOverdueAutoRelease(
 
   const today = shanghaiDateFromTimestamp(now);
   summary.cutoff = computeDueCutoff(today, -days);
-  const rows = await queryOverdueUnpublished(db, summary.cutoff);
+  // 自动释放只处理发布阶段超期：回收超期的笔记已发布，释放重派无意义
+  const rows = await queryOverdueUnpublished(db, summary.cutoff, {
+    phases: "publish",
+  });
 
   for (const row of rows) {
     try {

lib/wecom-oauth-service.ts

@@ -156,6 +156,71 @@ export function wecomClaimantPartnerId(externalUserId: string): string {
   return `partner-ext-${hashText(`claimant:wecom:${externalUserId}`)}`;
 }
 
+export const WECOM_BIND_STATE_TTL_MS = 10 * 60 * 1_000;
+
+type WecomBindStatePayload = {
+  v: 2;
+  uid: string;
+  iat: number;
+  exp: number;
+  jti: string;
+};
+
+export async function signWecomBindState(
+  userId: string,
+  options: { secret?: string; nowMs?: number; ttlMs?: number } = {},
+): Promise<string> {
+  const secret = options.secret ?? getWecomOAuthSecret();
+  const issuedAt = options.nowMs ?? Date.now();
+  const ttl = options.ttlMs ?? WECOM_BIND_STATE_TTL_MS;
+  const uid = String(userId ?? "").trim().slice(0, 64);
+  if (!uid) throw new Error("缺少后台账号 ID，无法发起企微绑定");
+  const payload: WecomBindStatePayload = {
+    v: 2,
+    uid,
+    iat: issuedAt,
+    exp: issuedAt + ttl,
+    jti: toBase64Url(crypto.getRandomValues(new Uint8Array(12))),
+  };
+  const payloadSegment = toBase64Url(
+    new TextEncoder().encode(JSON.stringify(payload)),
+  );
+  const signature = await hmacSha256(secret, payloadSegment);
+  return `${payloadSegment}.${toBase64Url(signature)}`;
+}
+
+export async function verifyWecomBindState(
+  state: string,
+  options: { secret?: string; nowMs?: number } = {},
+): Promise<{ userId: string } | null> {
+  const raw = String(state ?? "").trim();
+  const dotIndex = raw.indexOf(".");
+  if (dotIndex <= 0 || dotIndex === raw.length - 1) return null;
+  const payloadSegment = raw.slice(0, dotIndex);
+  const signatureSegment = raw.slice(dotIndex + 1);
+  if (/[^A-Za-z0-9_-]/.test(payloadSegment) || /[^A-Za-z0-9_-]/.test(signatureSegment)) {
+    return null;
+  }
+  let payload: WecomBindStatePayload;
+  try {
+    payload = JSON.parse(
+      new TextDecoder().decode(fromBase64Url(payloadSegment)),
+    ) as WecomBindStatePayload;
+  } catch {
+    return null;
+  }
+  if (payload?.v !== 2 || typeof payload.uid !== "string") return null;
+  const uid = payload.uid.trim().slice(0, 64);
+  if (!uid) return null;
+  const secret = options.secret ?? getWecomOAuthSecret();
+  const expected = await hmacSha256(secret, payloadSegment);
+  const provided = fromBase64Url(signatureSegment);
+  if (!constantTimeEquals(expected, provided)) return null;
+  const now = options.nowMs ?? Date.now();
+  if (now > payload.exp + WECOM_IDENTITY_GRACE_MS) return null;
+  return { userId: uid };
+}
+
 export async function resolveWecomClaimant(
   db: DatabaseClient,
   externalUserId: string,

mysql/0013_project_main_chat_task_owner.sql

@@ -0,0 +1,5 @@
+ALTER TABLE `projects` ADD COLUMN `main_chat_id` VARCHAR(64) NOT NULL DEFAULT '' AFTER `owner_userid`;
+-- statement-breakpoint
+ALTER TABLE `tasks` ADD COLUMN `owner_userid` VARCHAR(64) NOT NULL DEFAULT '' AFTER `task_chat_id`;
+-- statement-breakpoint
+DROP TABLE IF EXISTS `project_group_chats`;

mysql/0014_users_wecom_userid.sql

@@ -0,0 +1 @@
+ALTER TABLE `users` ADD COLUMN `wecom_userid` VARCHAR(128) NOT NULL DEFAULT '' AFTER `role`;

mysql/0015_task_customer_chat.sql

@@ -0,0 +1,7 @@
+ALTER TABLE `tasks` ADD COLUMN `customer_chat_id` VARCHAR(128) NOT NULL DEFAULT '' AFTER `owner_userid`;
+-- statement-breakpoint
+ALTER TABLE `tasks` ADD COLUMN `customer_chat_name` VARCHAR(255) NOT NULL DEFAULT '' AFTER `customer_chat_id`;
+-- statement-breakpoint
+ALTER TABLE `tasks` ADD COLUMN `join_config_id` VARCHAR(128) NOT NULL DEFAULT '' AFTER `customer_chat_name`;
+-- statement-breakpoint
+ALTER TABLE `tasks` ADD COLUMN `join_qr_code` TEXT NOT NULL AFTER `join_config_id`;

mysql/0016_task_content_relation.sql

@@ -0,0 +1,5 @@
+ALTER TABLE `tasks` ADD COLUMN `related_task_id` VARCHAR(64) NOT NULL DEFAULT '' AFTER `join_qr_code`;
+-- statement-breakpoint
+ALTER TABLE `contents` ADD COLUMN `related_content_id` VARCHAR(64) NOT NULL DEFAULT '' AFTER `source_row`;
+-- statement-breakpoint
+CREATE INDEX `contents_related_content_idx` ON `contents` (`related_content_id`);

mysql/0017_project_parent.sql

@@ -0,0 +1,3 @@
+ALTER TABLE `projects` ADD COLUMN `parent_id` VARCHAR(64) NOT NULL DEFAULT '';
+-- statement-breakpoint
+ALTER TABLE `projects` ADD INDEX `projects_parent_idx` (`parent_id`);

mysql/0018_partner_resource_binding.sql

@@ -0,0 +1,3 @@
+ALTER TABLE `partners` ADD COLUMN `account_id` VARCHAR(64) NOT NULL DEFAULT '' AFTER wecom_userid;
+-- statement-breakpoint
+ALTER TABLE `partners` ADD INDEX `partners_account_idx` (`account_id`);

mysql/0019_project_drop_parent.sql

@@ -0,0 +1 @@
+ALTER TABLE `projects` DROP COLUMN `parent_id`;

mysql/0020_task_recovery_merge.sql

@@ -0,0 +1,125 @@
+-- 任务模型物理合并：回收成为分发任务的第二阶段（单任务双阶段）
+-- 上线前请先备份生产库；本迁移有 DELETE，回滚需依赖备份
+
+ALTER TABLE tasks ADD COLUMN recovery_enabled INTEGER NOT NULL DEFAULT 1 AFTER related_task_id;
+-- statement-breakpoint
+ALTER TABLE tasks ADD COLUMN recovery_due_at TEXT NOT NULL DEFAULT ('') AFTER recovery_enabled;
+-- statement-breakpoint
+ALTER TABLE tasks ADD COLUMN recovery_instructions TEXT NOT NULL DEFAULT ('') AFTER recovery_due_at;
+-- statement-breakpoint
+ALTER TABLE tasks ADD COLUMN recovery_example_images TEXT NOT NULL DEFAULT ('[]') AFTER recovery_instructions;
+-- statement-breakpoint
+-- 老分发任务默认关回收；下方为有伴生回收的父任务重新置 1
+UPDATE tasks SET recovery_enabled = 0 WHERE task_type = 'content_publish';
+-- statement-breakpoint
+-- 配对回收：回收字段并入父任务（说明/示例图取回收任务首条内容，截止取回收任务截止）
+UPDATE tasks parent
+JOIN tasks child ON child.related_task_id = parent.id
+JOIN (
+  SELECT task_id, body, image_assets
+  FROM contents
+  WHERE id IN (SELECT MIN(id) FROM contents GROUP BY task_id)
+) first_content ON first_content.task_id = child.id
+SET parent.recovery_due_at = child.due_at,
+    parent.recovery_instructions = first_content.body,
+    parent.recovery_example_images = first_content.image_assets,
+    parent.recovery_enabled = 1
+WHERE child.task_type = 'screenshot_collect';
+-- statement-breakpoint
+-- 配对回收：父任务无内容兜底（回收任务没有 contents 行时仍开通回收）
+UPDATE tasks parent
+JOIN tasks child ON child.related_task_id = parent.id
+SET parent.recovery_due_at = child.due_at,
+    parent.recovery_instructions = '请提交发布后的笔记截图',
+    parent.recovery_example_images = '[]',
+    parent.recovery_enabled = 1
+WHERE child.task_type = 'screenshot_collect'
+  AND parent.recovery_enabled = 0;
+-- statement-breakpoint
+-- 配对回收：截图提交记录搬到父任务同 content+partner 的分发行（父行已有提交时保留父行）
+UPDATE distributions target
+JOIN contents legacy_content ON legacy_content.id = target.content_id
+JOIN distributions legacy ON legacy.content_id = legacy_content.related_content_id
+  AND legacy.partner_id = target.partner_id
+JOIN tasks legacy_task ON legacy_task.id = legacy.task_id
+SET target.result_screenshot_key = legacy.result_screenshot_key,
+    target.result_submitted_at = legacy.result_submitted_at
+WHERE legacy_task.task_type = 'screenshot_collect'
+  AND legacy_task.related_task_id = target.task_id
+  AND target.result_submitted_at IS NULL;
+-- statement-breakpoint
+-- 配对回收：父任务里没有对应分发行时，保留为一条只挂回收字段的分发记录
+INSERT INTO distributions (id, task_id, content_id, partner_id, status, result_screenshot_key, result_submitted_at, claimed_at)
+SELECT
+  CONCAT('dist-m', LEFT(REPLACE(UUID(), '-', ''), 20)),
+  legacy_task.related_task_id,
+  legacy_content.related_content_id,
+  legacy.partner_id,
+  'claimed',
+  legacy.result_screenshot_key,
+  legacy.result_submitted_at,
+  legacy.claimed_at
+FROM distributions legacy
+JOIN contents legacy_content ON legacy_content.id = legacy.content_id
+JOIN tasks legacy_task ON legacy_task.id = legacy.task_id
+WHERE legacy_task.task_type = 'screenshot_collect'
+  AND legacy_task.related_task_id != ''
+  AND legacy_content.related_content_id != ''
+  AND NOT EXISTS (
+    SELECT 1 FROM distributions parent_dist
+    WHERE parent_dist.task_id = legacy_task.related_task_id
+      AND parent_dist.content_id = legacy_content.related_content_id
+      AND parent_dist.partner_id = legacy.partner_id
+  );
+-- statement-breakpoint
+-- 配对回收：清理伴生回收任务的分发/领取/内容/任务行
+DELETE FROM distributions
+WHERE task_id IN (SELECT id FROM (SELECT id FROM tasks WHERE task_type = 'screenshot_collect' AND related_task_id != '') AS doomed);
+-- statement-breakpoint
+DELETE FROM claims
+WHERE task_id IN (SELECT id FROM (SELECT id FROM tasks WHERE task_type = 'screenshot_collect' AND related_task_id != '') AS doomed);
+-- statement-breakpoint
+DELETE FROM contents
+WHERE task_id IN (SELECT id FROM (SELECT id FROM tasks WHERE task_type = 'screenshot_collect' AND related_task_id != '') AS doomed);
+-- statement-breakpoint
+DELETE FROM tasks WHERE task_type = 'screenshot_collect' AND related_task_id != '';
+-- statement-breakpoint
+-- 独立回收（无关联分发）：无领取记录的直接删除
+DELETE FROM contents
+WHERE task_id IN (
+  SELECT id FROM (
+    SELECT t.id FROM tasks t
+    WHERE t.task_type = 'screenshot_collect'
+      AND (t.related_task_id IS NULL OR t.related_task_id = '')
+      AND NOT EXISTS (SELECT 1 FROM distributions d WHERE d.task_id = t.id)
+  ) AS doomed
+);
+-- statement-breakpoint
+DELETE FROM tasks
+WHERE task_type = 'screenshot_collect'
+  AND (related_task_id IS NULL OR related_task_id = '')
+  AND id NOT IN (SELECT DISTINCT task_id FROM distributions);
+-- statement-breakpoint
+-- 独立回收（有领取记录）：原地转正为单模型任务（发布阶段字段留空，仅存历史数据）
+UPDATE tasks standalone
+JOIN (
+  SELECT task_id, body, image_assets
+  FROM contents
+  WHERE id IN (SELECT MIN(id) FROM contents GROUP BY task_id)
+) first_content ON first_content.task_id = standalone.id
+SET standalone.task_type = 'content_publish',
+    standalone.recovery_due_at = standalone.due_at,
+    standalone.recovery_instructions = first_content.body,
+    standalone.recovery_example_images = first_content.image_assets,
+    standalone.recovery_enabled = 1
+WHERE standalone.task_type = 'screenshot_collect';
+-- statement-breakpoint
+UPDATE tasks standalone
+SET standalone.task_type = 'content_publish',
+    standalone.recovery_due_at = standalone.due_at,
+    standalone.recovery_instructions = '请提交发布后的笔记截图',
+    standalone.recovery_example_images = '[]',
+    standalone.recovery_enabled = 1
+WHERE standalone.task_type = 'screenshot_collect';
+-- statement-breakpoint
+UPDATE contents SET related_content_id = '' WHERE related_content_id IS NOT NULL AND related_content_id != '';

mysql/0021_reconcile_claimed_quantity.sql

@@ -0,0 +1,13 @@
+-- 校准任务领取计数：0020 物理合并删除了伴生回收任务的分发/领取行、并搬运了
+-- 部分回收到父任务分发行，但没有同步父任务 claimed_quantity，任务卡「已领取」
+-- 会与实际分发行数漂移。领取(+1)/释放(-1) 路径共同维护的不变式是：
+-- content_publish 任务的 claimed_quantity = 当前分发行数，此处按此对账。
+UPDATE tasks
+SET claimed_quantity = (
+  SELECT COUNT(*) FROM distributions d
+  WHERE d.task_id = tasks.id
+)
+WHERE claimed_quantity <> (
+  SELECT COUNT(*) FROM distributions d
+  WHERE d.task_id = tasks.id
+);

mysql/0022_public_metrics_screenshot.sql

@@ -0,0 +1,2 @@
+-- 公开数据采集失败兜底：KOC 补交数据截图，运营核对后补录
+ALTER TABLE distributions ADD COLUMN public_metrics_screenshot_key TEXT;

mysql/0023_partner_released_account.sql

@@ -0,0 +1,5 @@
+-- 资源池 KOC 默认加入合作方：released_account_id 记录运营显式解绑/被顶替的资源账号，
+-- 自动同步 ensurePartnersForPoolAccounts 不再为这些账号回填默认合作方
+ALTER TABLE `partners` ADD COLUMN `released_account_id` VARCHAR(64) NOT NULL DEFAULT '' AFTER account_id;
+-- statement-breakpoint
+ALTER TABLE `partners` ADD INDEX `partners_released_account_idx` (`released_account_id`);

public/kocdev@43.139.210.125

@@ -0,0 +1 @@
+9mrNk9UbWcjjhPZc

tests/claimed-quantity.test.mjs

@@ -0,0 +1,53 @@
+import assert from "node:assert/strict";
+import { readFile } from "node:fs/promises";
+import test from "node:test";
+
+// claimed_quantity 口径：领取(+1)/释放(-1) 维护的不变式是
+// claimed_quantity == 当前分发行数。种子与 0020 迁移都可能造成漂移，
+// 这里钉住三道防线：种子末尾对账、0021 生产对账、UI 一律读实时 dist_total。
+
+test("seed reconciles claimed_quantity with actual distribution rows", async () => {
+  const source = await readFile(
+    new URL("../lib/mvp-db.ts", import.meta.url),
+    "utf8",
+  );
+  const reconcile = source.indexOf(
+    "SET claimed_quantity = (\n           SELECT COUNT(*) FROM distributions d WHERE d.task_id = tasks.id",
+  );
+  assert.ok(reconcile > 0, "种子阶段缺少 claimed_quantity 对账 UPDATE");
+  const lastDistributionInsert = source.lastIndexOf(
+    "INSERT INTO distributions",
+  );
+  assert.ok(
+    reconcile > lastDistributionInsert,
+    "对账必须发生在所有分发 INSERT 之后",
+  );
+  const batchEnd = source.indexOf("await db.batch(batch);", reconcile);
+  assert.ok(batchEnd > reconcile, "对账语句必须在 seedIfEmpty 的 batch 内执行");
+});
+
+test("migration 0021 recalculates drifted claimed_quantity in production", async () => {
+  const migration = await readFile(
+    new URL("../mysql/0021_reconcile_claimed_quantity.sql", import.meta.url),
+    "utf8",
+  );
+  assert.match(migration, /UPDATE tasks\s+SET claimed_quantity = \(\s+SELECT COUNT\(\*\) FROM distributions d\s+WHERE d\.task_id = tasks\.id\s+\)/);
+  assert.match(migration, /WHERE claimed_quantity <> \(/);
+});
+
+test("admin surfaces read the live distribution count, not the counter", async () => {
+  const [adminApp, projectService] = await Promise.all([
+    readFile(new URL("../app/admin-app.tsx", import.meta.url), "utf8"),
+    readFile(new URL("../lib/project-service.ts", import.meta.url), "utf8"),
+  ]);
+
+  // 任务卡双面板 + 概览统计
+  assert.match(adminApp, /panelMetric\(task\.dist_total \?\? 0, task\.quantity, "已领取"/);
+  assert.match(adminApp, /panelMetric\(task\.dist_submitted \?\? 0, task\.dist_total \?\? 0, "已收取"/);
+  assert.match(adminApp, /sum \+ \(task\.dist_total \?\? 0\)/);
+  // 项目树明细同样用实时口径
+  assert.match(projectService, /AS dist_total/);
+  assert.match(adminApp, /\{task\.dist_total\} \/ \{task\.quantity\}/);
+  // 展示层不再读反规范化计数器
+  assert.doesNotMatch(adminApp, /task\.claimed_quantity/);
+});

tests/collection-schedule.test.mjs

@@ -1,6 +1,13 @@
 import assert from "node:assert/strict";
+import { readFile } from "node:fs/promises";
 import test from "node:test";
-import { isCollectionScheduleDue } from "../lib/collection-service.ts";
+import {
+  DEFAULT_COLLECTION_DAYS,
+  effectiveCollectionDays,
+  isCollectionScheduleDue,
+  parseCollectionDays,
+  runDueScheduledCollections,
+} from "../lib/collection-service.ts";
 import { sortWithNullsLast } from "../lib/sort-utils.ts";
 
 test("runs the Beijing collection schedule from 09:00", () => {
@@ -56,3 +63,197 @@ test("sorts both directions while keeping missing values last", () => {
     ["high", "middle", "low", "missing-a", "missing-b"],
   );
 });
+
+test("a failed collection keeps historically successful rows on success", async () => {
+  const source = await readFile(
+    new URL("../lib/collection-service.ts", import.meta.url),
+    "utf8",
+  );
+
+  // 失败写入必须按 latest_likes 分流：无数据 → failed；
+  // 已有历史数据 → 保持 success，仅描述里说明沿用上次数据。
+  assert.match(
+    source,
+    /collection_status = CASE\s+WHEN latest_likes IS NULL THEN 'failed'\s+ELSE 'success'\s+END/,
+  );
+  assert.match(
+    source,
+    /ELSE \?\s+END,\s+collection_updated_at = CASE\s+WHEN latest_likes IS NULL THEN CURRENT_TIMESTAMP\s+ELSE collection_updated_at/,
+  );
+  assert.match(source, /`\$\{message\}，沿用上次采集数据`/);
+  // run 行照实记录失败，保留可观测性
+  assert.match(source, /UPDATE collection_runs\s+SET status = 'failed'/);
+});
+
+// —— 未设置采集计划时默认连采 7 天 ——
+
+test("effective collection days fall back to 7 days when unset", () => {
+  assert.deepEqual(effectiveCollectionDays(null), [1, 2, 3, 4, 5, 6, 7]);
+  assert.deepEqual(effectiveCollectionDays("[]"), DEFAULT_COLLECTION_DAYS);
+  assert.deepEqual(effectiveCollectionDays('{"bad":1}'), DEFAULT_COLLECTION_DAYS);
+  assert.deepEqual(effectiveCollectionDays("[0,9]"), DEFAULT_COLLECTION_DAYS);
+  assert.deepEqual(effectiveCollectionDays("[3,1,2,2]"), [1, 2, 3]);
+  assert.deepEqual(parseCollectionDays("[7,2]"), [2, 7]);
+});
+
+function fakeSchedulerDb({ tasks = [], published = [] } = {}) {
+  const executed = [];
+  const record = (sql, values) => executed.push({ sql, values });
+  const db = {
+    prepare(sql) {
+      return {
+        bind(...values) {
+          return {
+            async first() {
+              record(sql, values);
+              return null;
+            },
+            async run() {
+              record(sql, values);
+              return { meta: { changes: 0 } };
+            },
+            async all() {
+              record(sql, values);
+              if (/FROM tasks/.test(sql)) {
+                const scoped = tasks.filter(
+                  (task) => !values[0] || task.id === values[0],
+                );
+                return {
+                  results: scoped.filter(
+                    (task) =>
+                      (task.task_type ?? "content_publish") !==
+                      "screenshot_collect",
+                  ),
+                };
+              }
+              if (/COALESCE\(d\.publish_time, d\.claimed_at\)/.test(sql)) {
+                return {
+                  results: published.filter((row) => row.task_id === values[0]),
+                };
+              }
+              // 无待采集行，避免触发真实 MCP 采集
+              return { results: [] };
+            },
+          };
+        },
+      };
+    },
+    async batch() {
+      return [];
+    },
+  };
+  return { db, executed };
+}
+
+test("collects unplanned tasks on the default 7-day schedule from publish date", async () => {
+  const { db, executed } = fakeSchedulerDb({
+    tasks: [
+      {
+        id: "task-a",
+        task_type: "content_publish",
+        collection_start_date: null,
+        collection_days: "[]",
+      },
+    ],
+    published: [
+      // UTC 2026-10-09 01:30 → 上海 2026-10-09，D1–D4 在 10-12 09:00 前到期
+      { id: "dist-a", task_id: "task-a", publish_anchor: "2026-10-09 01:30:00" },
+    ],
+  });
+  const summary = await runDueScheduledCollections(
+    db,
+    Date.parse("2026-10-12T01:00:00Z"),
+    {},
+  );
+  assert.equal(summary.dueTasks, 4);
+  const anchorQuery = executed.find((entry) =>
+    /COALESCE\(d\.publish_time/.test(entry.sql),
+  );
+  assert.ok(anchorQuery, "未设置计划时应查询每篇的发布时间");
+  assert.equal(anchorQuery.values[0], "task-a");
+  const scoped = executed.filter((entry) =>
+    /SELECT d\.id FROM distributions d/.test(entry.sql),
+  );
+  assert.equal(scoped.length, 4);
+  assert.ok(scoped.every((entry) => entry.values.includes("dist-a")));
+});
+
+test("skips the default window once 7 days have passed since publish", async () => {
+  const { db, executed } = fakeSchedulerDb({
+    tasks: [
+      {
+        id: "task-old",
+        task_type: "content_publish",
+        collection_start_date: null,
+        collection_days: "[]",
+      },
+    ],
+    published: [
+      { id: "dist-old", task_id: "task-old", publish_anchor: "2026-09-01 00:00:00" },
+    ],
+  });
+  const summary = await runDueScheduledCollections(
+    db,
+    Date.parse("2026-10-12T01:00:00Z"),
+    {},
+  );
+  assert.equal(summary.dueTasks, 0);
+  assert.ok(
+    !executed.some((entry) =>
+      /SELECT d\.id FROM distributions d/.test(entry.sql),
+    ),
+  );
+});
+
+test("keeps the explicit task-level schedule when a plan is saved", async () => {
+  const { db, executed } = fakeSchedulerDb({
+    tasks: [
+      {
+        id: "task-b",
+        task_type: "content_publish",
+        collection_start_date: "2026-10-10",
+        collection_days: "[2]",
+      },
+    ],
+  });
+  const summary = await runDueScheduledCollections(
+    db,
+    Date.parse("2026-10-12T01:00:00Z"),
+    {},
+  );
+  assert.equal(summary.dueTasks, 1);
+  const needing = executed.filter((entry) =>
+    /SELECT d\.id FROM distributions d/.test(entry.sql),
+  );
+  assert.deepEqual(needing.map((entry) => entry.values), [
+    ["task-b", "2026-10-11"],
+  ]);
+  assert.ok(
+    !executed.some((entry) => /COALESCE\(d\.publish_time/.test(entry.sql)),
+  );
+});
+
+test("ignores screenshot collection tasks in the scheduler", async () => {
+  const { db, executed } = fakeSchedulerDb({
+    tasks: [
+      {
+        id: "task-shot",
+        task_type: "screenshot_collect",
+        collection_start_date: null,
+        collection_days: "[]",
+      },
+    ],
+    published: [
+      { id: "dist-shot", task_id: "task-shot", publish_anchor: "2026-10-11 00:00:00" },
+    ],
+  });
+  const summary = await runDueScheduledCollections(
+    db,
+    Date.parse("2026-10-12T01:00:00Z"),
+    {},
+  );
+  assert.equal(summary.dueTasks, 0);
+  assert.ok(
+    !executed.some((entry) => /COALESCE\(d\.publish_time/.test(entry.sql)),
+  );
+});

tests/distribution-detail.test.mjs

@@ -0,0 +1,56 @@
+import assert from "node:assert/strict";
+import { readFile } from "node:fs/promises";
+import test from "node:test";
+
+// 任务中心优化（2026-10-09）：内容分发表的行可点击查看分发详情；
+// 详情弹窗按单任务双阶段自适应（发布 / 数据回收 / 创作者数据 / 截图回收）。
+
+test("distribution rows open a detail modal from both task center and recovery queue", async () => {
+  const [adminApp, globalCss, resultImageRoute] = await Promise.all([
+    readFile(new URL("../app/admin-app.tsx", import.meta.url), "utf8"),
+    readFile(new URL("../app/globals.css", import.meta.url), "utf8"),
+    readFile(new URL("../app/api/task-result-image/route.ts", import.meta.url), "utf8"),
+  ]);
+
+  // 弹窗组件 + 两处入口（分发明细表 / 回收队列表）行可点击
+  assert.match(adminApp, /function DistributionDetailModal/);
+  assert.match(adminApp, /const \[detailDistributionId, setDetailDistributionId\]/);
+  assert.match(adminApp, /title=\{onOpenDetail \? "点击查看分发详情" : undefined\}/);
+  assert.match(adminApp, /className=\{onOpenDetail \? "clickable" : ""\}/);
+  assert.match(adminApp, /className="clickable"\s*\n\s*onClick=\{\(\) => onOpenDetail\(item\)\}/);
+  // 行内操作（释放/立即采集/核对补录）不冒泡误开详情
+  assert.match(adminApp, /<td onClick=\{\(event\) => event\.stopPropagation\(\)\}>/);
+  assert.match(globalCss, /\.data-table tbody tr\.clickable\s*\{/);
+  // 详情数据实时刷新：任何操作重拉数据后弹窗按 id 重新取行
+  assert.match(adminApp, /data\.distributions\.find\(\(item\) => item\.id === detailDistributionId\)/);
+
+  // 发布截图：管理端通过 task-result-image?kind=publish 核对发布凭证
+  assert.match(resultImageRoute, /get\("kind"\) === "publish" \? "publish" : "result"/);
+  assert.match(resultImageRoute, /publish_screenshot_key/);
+  assert.match(adminApp, /kind=publish/);
+  assert.match(adminApp, /function PublishEvidencePreview/);
+});
+
+test("detail modal sections adapt to the dual-phase task model", async () => {
+  const adminApp = await readFile(
+    new URL("../app/admin-app.tsx", import.meta.url),
+    "utf8",
+  );
+
+  // 四个区块按阶段组织；未开通回收的任务不展示截图回收区块
+  assert.match(adminApp, /① 发布阶段/);
+  assert.match(adminApp, /② 数据回收（自动采集）/);
+  assert.match(adminApp, /③ 创作者数据（第7天）/);
+  assert.match(adminApp, /④ 截图回收/);
+  assert.match(adminApp, /recoveryEnabled && \(\s*<section className="detail-section">/);
+  // 抖音任务多展示转发，口径与回收队列一致
+  assert.match(adminApp, /item\.task_platform === "抖音" && \(\s*<div className="detail-metric">\s*<span>转发<\/span>/);
+  // 详情内集成兜底闭环：补交截图直达 + 核对补录入口
+  assert.match(adminApp, /KOC补交截图 ↗/);
+  assert.match(adminApp, /核对补录/);
+  // 详情内可执行的动作：更新/填写链接、立即采集、手动填写、释放（带确认）
+  assert.match(adminApp, /更新链接" : "填写链接"/);
+  assert.match(adminApp, /确认释放“\$\{distribution\.content_title\}”/);
+  // 采集计划随详情展示
+  assert.match(adminApp, /起 D\$\{collectionDays\.join\("\/D"\)\}/);
+});

tests/interaction-fixes.test.mjs

@@ -0,0 +1,105 @@
+import assert from "node:assert/strict";
+import { readFile } from "node:fs/promises";
+import test from "node:test";
+
+// 2026-10-08 第二轮交互走查修复：
+// 1) 完成态判据统一为「曝光量+阅读量齐即 complete」（原 d7_likes 条件全库无赋值方，永不触发）
+// 2) 回收队列头部统计改为「已发布 N / 总数」口径，未回填行不再计入
+// 3) 行内更新/补填链接从原生 prompt() 改为弹窗表单，失败保留已输入内容
+// 4) 顶栏「获取KOC领取链接」从导航跳转改为直接弹出各任务领取链接列表
+
+test("creator metrics completion follows the exposure+views criterion", async () => {
+  const sources = await Promise.all([
+    readFile(new URL("../app/api/partner/route.ts", import.meta.url), "utf8"),
+    readFile(new URL("../app/api/action/route.ts", import.meta.url), "utf8"),
+  ]);
+  for (const source of sources) {
+    assert.match(
+      source,
+      /status = CASE WHEN exposure IS NOT NULL AND views IS NOT NULL THEN 'complete' ELSE status END/,
+    );
+  }
+  // 死条件必须清除：d7_likes 只被置 NULL 从不赋值，不能作为完成判据
+  for (const source of sources) {
+    assert.doesNotMatch(
+      source,
+      /CASE WHEN d7_likes IS NOT NULL THEN 'complete'/,
+    );
+  }
+});
+
+test("manual metrics refreshes the task status afterwards", async () => {
+  const source = await readFile(
+    new URL("../app/api/action/route.ts", import.meta.url),
+    "utf8",
+  );
+  assert.match(source, /import \{ refreshTaskStatus \} from "\.\.\/\.\.\/\.\.\/lib\/task-service";/);
+  const manual = source.slice(
+    source.indexOf('body.action === "manual_metrics"'),
+    source.indexOf('body.action === "bind_wecom_external_id"'),
+  );
+  assert.ok(manual.includes("manual_metrics"), "必须截取到 manual_metrics 分支");
+  assert.match(manual, /SELECT task_id FROM distributions WHERE id = \?/);
+  assert.match(manual, /refreshTaskStatus\(ownerTask\.task_id, db\)/);
+});
+
+test("recovery queue header counts only published rows", async () => {
+  const source = await readFile(
+    new URL("../app/admin-app.tsx", import.meta.url),
+    "utf8",
+  );
+  assert.match(
+    source,
+    /const publishedCount = taskDistributions\.filter\(/,
+  );
+  assert.match(
+    source,
+    /已发布 \{publishedCount\} \/ \{taskDistributions\.length\} 篇/,
+  );
+});
+
+test("publish url editing uses a modal instead of window.prompt", async () => {
+  const source = await readFile(
+    new URL("../app/admin-app.tsx", import.meta.url),
+    "utf8",
+  );
+  assert.match(source, /const \[publishUrlModal, setPublishUrlModal\]/);
+  assert.match(source, /onSubmit=\{submitPublishUrl\}/);
+  assert.match(source, /支持长链、短链或完整分享文案/);
+  // 提交失败保留弹窗内容（runAction 失败返回 false）
+  assert.match(source, /if \(updated\) setPublishUrlModal\(null\);/);
+  // 更新链接流程本身不再用 prompt（剪贴板复制失败兜底的 prompt 保留）
+  const updateFn = source.slice(
+    source.indexOf("const updateDistributionPublishUrl"),
+    source.indexOf("const submitPublishUrl"),
+  );
+  assert.ok(updateFn.includes("updateDistributionPublishUrl"), "必须截取到函数体");
+  assert.doesNotMatch(updateFn, /prompt/);
+});
+
+test("claim links button opens a modal listing every task link", async () => {
+  const source = await readFile(
+    new URL("../app/admin-app.tsx", import.meta.url),
+    "utf8",
+  );
+  assert.match(source, /const \[claimLinksOpen, setClaimLinksOpen\] = useState\(false\);/);
+  // 顶栏按钮不再是导航跳转
+  assert.match(source, /onClick=\{\(\) => setClaimLinksOpen\(true\)\}/);
+  assert.doesNotMatch(
+    source,
+    /onClick=\{\(\) => setActiveNav\("tasks"\)\}\s*\n\s*获取KOC领取链接/,
+  );
+  // 弹窗里每个任务给出复制按钮，无链接的任务明示未生成
+  assert.match(source, /claim-links-list/);
+  assert.match(source, /KOC领取链接已复制/);
+  assert.match(source, /尚未生成领取链接/);
+  // 弹窗内点击（含复制按钮）不能冒泡到 backdrop 导致误关闭
+  const modal = source.slice(
+    source.indexOf('className="modal-card compact claim-links-modal"'),
+    source.indexOf('<div className="claim-links-list">'),
+  );
+  assert.match(
+    modal,
+    /onMouseDown=\{\(event\) => event\.stopPropagation\(\)\}/,
+  );
+});

tests/koc-detail.test.mjs

@@ -0,0 +1,90 @@
+import { strict as assert } from "node:assert";
+import { readFileSync } from "node:fs";
+import test from "node:test";
+
+const source = readFileSync(new URL("../app/admin-app.tsx", import.meta.url), "utf8");
+
+test("KOC 详情弹窗组件：三段式（基本信息 / 绑定账号 / 参与记录）", () => {
+  const start = source.indexOf("function KocDetailModal");
+  assert.ok(start > 0, "应存在 KocDetailModal 组件");
+  const body = source.slice(start, source.indexOf("function RecoveryPage"));
+  assert.match(body, /KOC详情：\$\{partner\.name\}/);
+  assert.match(body, /① 基本信息/);
+  assert.match(body, /② 绑定 KOC 账号（资源）/);
+  assert.match(body, /③ 参与任务记录/);
+  assert.match(body, /暂无领取记录/);
+  // 概览漏斗：领取 → 发布 → 回收完成
+  assert.match(body, /领取 <b>\{history\.length\}<\/b>/);
+  assert.match(body, /发布 <b>\{publishedCount\}<\/b>/);
+  assert.match(body, /回收完成 <b>\{completedCount\}<\/b>/);
+  // 绑定账号缺失时的兜底文案区分群主与外部KOC
+  assert.match(body, /群主合作方无需绑定 KOC 资源账号/);
+});
+
+test("工作台：按 id 挂载 KOC 详情，操作刷新后内容自动更新", () => {
+  assert.match(source, /const \[detailPartnerId, setDetailPartnerId\] = useState<string \| null>\(null\);/);
+  assert.match(
+    source,
+    /data\.partners\.find\(\(partner\) => partner\.id === detailPartnerId\)/,
+  );
+  assert.match(source, /item\.partner_id === partnerRow\.id/);
+  assert.match(source, /<KocDetailModal/);
+});
+
+test("工作台最近分发：行可点开分发详情，合作方可点开 KOC 详情", () => {
+  const start = source.indexOf("function OverviewPage");
+  const body = source.slice(start, source.indexOf("function OwnerLinkRow"));
+  assert.match(body, /onOpenDetail=\{onOpenDetail\}/);
+  assert.match(body, /onOpenPartner=\{onOpenPartner\}/);
+});
+
+test("分发表/截图回收表：合作方名为 KOC 详情入口且不触发行点击", () => {
+  const tableStart = source.indexOf("function DistributionTable");
+  const tableBody = source.slice(tableStart, source.indexOf("type AdminPreviewImage"));
+  assert.match(tableBody, /onOpenPartner\?: \(partnerId: string\) => void;/);
+  assert.match(tableBody, /className="koc-link"/);
+  assert.match(tableBody, /event\.stopPropagation\(\);\s*onOpenPartner\(item\.partner_id\)/);
+
+  const shotStart = source.indexOf("function ScreenshotTaskTable");
+  const shotBody = source.slice(shotStart, source.indexOf("const RESOURCE_PAGE_SIZE"));
+  assert.match(shotBody, /onOpenPartner\?: \(partnerId: string\) => void;/);
+  assert.match(shotBody, /onOpenPartner\(item\.partner_id\)/);
+});
+
+test("数据回收页：回收队列账号名与截图回收合作方均可点开 KOC 详情", () => {
+  const start = source.indexOf("function RecoveryPage");
+  const body = source.slice(start);
+  assert.match(body, /onOpenPartner: \(partnerId: string\) => void;/);
+  // 回收队列：账号名（待识别账号兜底）为入口，且阻断行点击冒泡
+  assert.match(body, /\{item\.account_nickname \|\| "待识别账号"\}\s*<\/button>/);
+  assert.match(
+    body,
+    /event\.stopPropagation\(\);\s*onOpenPartner\(item\.partner_id\)/,
+  );
+  // 截图回收表透传
+  assert.match(body, /<ScreenshotTaskTable\s+distributions=\{taskDistributions\}\s+onOpenPartner=\{onOpenPartner\}/);
+});
+
+test("合作方页：合作方名称单元格可点开 KOC 详情", () => {
+  const start = source.indexOf("function PartnersPage");
+  const body = source.slice(start, source.indexOf("function ResourcesPage"));
+  assert.match(body, /onOpenPartner: \(partner: Partner\) => void;/);
+  assert.match(body, /className="partner-name-cell"/);
+  assert.match(body, /onClick=\{\(\) => onOpenPartner\(partner\)\}/);
+});
+
+test("分发详情弹窗：头部合作方可跳转 KOC 详情", () => {
+  const start = source.indexOf("function DistributionDetailModal");
+  const body = source.slice(start, source.indexOf("function KocDetailModal"));
+  assert.match(body, /onOpenPartner\?: \(partnerId: string\) => void;/);
+  assert.match(body, /detail-meta-koc/);
+  assert.match(body, /onOpenPartner\(item\.partner_id\)/);
+});
+
+test("KOC 详情样式：入口链接与历史记录列表", () => {
+  const css = readFileSync(new URL("../app/globals.css", import.meta.url), "utf8");
+  assert.match(css, /^\.koc-link \{/m);
+  assert.match(css, /^\.partner-name-cell \{/m);
+  assert.match(css, /^\.koc-history-list \{/m);
+  assert.match(css, /^\.koc-summary-strip \{/m);
+});

tests/owner-permissions.test.mjs

@@ -0,0 +1,338 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { readFileSync } from "node:fs";
+
+const actionRoute = readFileSync(
+  new URL("../app/api/action/route.ts", import.meta.url),
+  "utf8",
+);
+const bootstrapRoute = readFileSync(
+  new URL("../app/api/bootstrap/route.ts", import.meta.url),
+  "utf8",
+);
+const recoveryExportRoute = readFileSync(
+  new URL("../app/api/recovery-export/route.ts", import.meta.url),
+  "utf8",
+);
+const screenshotTaskExportRoute = readFileSync(
+  new URL("../app/api/screenshot-task-export/route.ts", import.meta.url),
+  "utf8",
+);
+const taskResultImageRoute = readFileSync(
+  new URL("../app/api/task-result-image/route.ts", import.meta.url),
+  "utf8",
+);
+const usersRoute = readFileSync(
+  new URL("../app/api/users/route.ts", import.meta.url),
+  "utf8",
+);
+const mvpDb = readFileSync(
+  new URL("../lib/mvp-db.ts", import.meta.url),
+  "utf8",
+);
+const ownerScope = readFileSync(
+  new URL("../lib/owner-scope.ts", import.meta.url),
+  "utf8",
+);
+
+function section(source, action) {
+  const start = source.indexOf(`"${action}"`);
+  assert.ok(start >= 0, `action ${action} 不存在于路由源码`);
+  const next = source.indexOf("} else if (body.action ===", start);
+  return source.slice(start, next === -1 ? undefined : next);
+}
+
+test("manager-only actions gate on owner scope", () => {
+  const managerOnly = [
+    "claim",
+    "save_collection_schedule",
+    "run_due_collections",
+    "retry_failed_collections",
+    "backfill_account_profiles",
+    "set_public_account_ids",
+    "bind_wecom_external_id",
+    "partner_bind_account",
+    "partner_create_from_account",
+    "send_test_wecom",
+    "trigger_wecom_overdue_escalation",
+    "wecom_list_external_contacts",
+    "wecom_sync_group_chats",
+    "partner_save",
+    "partner_group_owners",
+    "refresh_account_fields",
+    "account_field_refresh_status",
+  ];
+  for (const action of managerOnly) {
+    const body = section(actionRoute, action);
+    assert.match(
+      body,
+      /managerGate\(\)/,
+      `${action} 必须 managerGate() 拒绝任务负责人`,
+    );
+  }
+});
+
+test("project-owner management actions gate on project ownership", () => {
+  for (const action of [
+    "project_detail",
+    "project_delete",
+    "project_ensure_main_chat",
+    "create_task",
+    "task_enable_recovery",
+  ]) {
+    const body = section(actionRoute, action);
+    assert.match(
+      body,
+      /projectOwnerGate\(/,
+      `${action} 必须校验项目负责人归属（owner 空 projectId 也 403）`,
+    );
+  }
+  for (const action of ["task_set_owner", "task_update", "project_push_task"]) {
+    const body = section(actionRoute, action);
+    assert.match(
+      body,
+      /taskProjectOwnerGate\(/,
+      `${action} 必须按任务→项目链校验项目负责人归属`,
+    );
+  }
+});
+
+test("project_save blocks creation and ownership transfer for project owners", () => {
+  const body = section(actionRoute, "project_save");
+  assert.match(body, /managerForbidden\(\)/, "项目负责人不可新建项目");
+  assert.match(body, /projectOwnerGate\(/, "项目负责人只能保存自己负责的项目");
+  assert.match(
+    body,
+    /SELECT owner_userid FROM projects WHERE id = \?/,
+    "owner 路径必须回填 DB 现值，堵死 ownerUserid 转移",
+  );
+  assert.match(body, /nextOwnerUserid/);
+});
+
+test("task_update blocks project migration by project owners", () => {
+  const body = section(actionRoute, "task_update");
+  assert.match(
+    body,
+    /projectOwnerGate\(nextProjectId\)/,
+    "迁移目标项目也必须本人负责",
+  );
+});
+
+test("read-only dependencies open to any logged-in user", () => {
+  for (const action of ["inspect_feishu", "wecom_list_internal_contacts"]) {
+    const body = section(actionRoute, action);
+    assert.ok(
+      !/managerGate\(\)/.test(body),
+      `${action} 不再是管理员专属（项目负责人建任务/选人依赖）`,
+    );
+  }
+});
+
+test("owner-scope exposes strict project ownership helpers", () => {
+  assert.match(ownerScope, /export async function isProjectOwner\(/);
+  const projectOwner = ownerScope.slice(
+    ownerScope.indexOf("export async function isProjectOwner"),
+    ownerScope.indexOf("export async function isTaskProjectOwner"),
+  );
+  assert.match(
+    projectOwner,
+    /SELECT id FROM projects WHERE id = \? AND owner_userid = \? LIMIT 1/,
+  );
+
+  assert.match(ownerScope, /export async function isTaskProjectOwner\(/);
+  const taskProjectOwner = ownerScope.slice(
+    ownerScope.indexOf("export async function isTaskProjectOwner"),
+    ownerScope.indexOf("export function ownerForbidden"),
+  );
+  assert.match(taskProjectOwner, /JOIN projects p/);
+  assert.ok(!/LEFT JOIN/.test(taskProjectOwner), "无项目归属的任务不放行");
+  assert.ok(
+    !/t\.owner_userid = \?/.test(taskProjectOwner),
+    "任务负责人本人不因此获得编辑权",
+  );
+});
+
+test("collect actions stay manager-only", () => {
+  const body = section(actionRoute, "collect_now");
+  assert.match(body, /managerGate\(\)/);
+});
+
+test("task-scoped actions verify ownership for task owners", () => {
+  for (const action of [
+    "wecom_push_task_to_groups",
+    "task_group_links",
+    "task_group_push",
+    "task_customer_chats",
+    "task_bind_customer_chat",
+  ]) {
+    const body = section(actionRoute, action);
+    assert.match(
+      body,
+      /taskOwnerGate\(/,
+      `${action} 必须校验任务归属`,
+    );
+  }
+  const dueSoon = section(actionRoute, "trigger_wecom_due_soon");
+  assert.match(dueSoon, /taskOwnerGate\(/);
+  assert.match(dueSoon, /runDueSoonWecomNotifications\(\s*db,\s*wecomConfig,\s*undefined,\s*undefined,\s*taskId \|\| undefined,/);
+
+  const pushes = section(actionRoute, "wecom_task_group_pushes");
+  assert.match(pushes, /taskOwnerGate\(/);
+
+  const manual = section(actionRoute, "manual_metrics");
+  assert.match(manual, /distributionOwnerGate\(/);
+});
+
+test("project_list opens to owner scope with server-side filtering", () => {
+  const body = section(actionRoute, "project_list");
+  assert.match(
+    body,
+    /listProjects\(db, ownerScopeUserid\(scope\)\)/,
+    "project_list 按负责人范围过滤，不再 managerGate",
+  );
+  assert.ok(
+    !/managerGate\(\)/.test(body),
+    "project_list 已放开给项目负责人（只读）",
+  );
+});
+
+test("customer chat actions keep strict task-owner gate", () => {
+  for (const action of ["task_customer_chats", "task_bind_customer_chat"]) {
+    const body = section(actionRoute, action);
+    assert.match(
+      body,
+      /strict: true/,
+      `${action} 保持严格任务负责人门，项目负责人不可代绑`,
+    );
+  }
+});
+
+test("no unawaited isManagerRequest gates remain", () => {
+  assert.ok(
+    !actionRoute.includes("if (!isManagerRequest(request))"),
+    "isManagerRequest 返回 Promise，缺 await 的门形同虚设",
+  );
+});
+
+test("action fallthrough dashboard is owner-scoped", () => {
+  assert.match(
+    actionRoute,
+    /getDashboardData\(ownerScopeUserid\(scope\)\)/,
+  );
+});
+
+test("customer chat actions list all owners' groups without owner prerequisite", () => {
+  const list = section(actionRoute, "task_customer_chats");
+  assert.match(
+    list,
+    /listGroupChatRows\(db\)/,
+    "task_customer_chats 读全量群缓存（所有群主的外部群）",
+  );
+  assert.match(
+    list,
+    /syncGroupChats\(db, wecomConfig\)/,
+    "缓存为空（或要求刷新）时自动全量同步",
+  );
+  assert.ok(
+    !/请先设置任务负责人/.test(list),
+    "列表不再要求任务先设负责人",
+  );
+  const bind = section(actionRoute, "task_bind_customer_chat");
+  assert.ok(
+    !/请先设置任务负责人/.test(bind),
+    "绑定活码用应用身份，不依赖任务负责人",
+  );
+  assert.match(bind, /bindTaskCustomerChat\(/);
+  assert.match(bind, /unbindTaskCustomerChat\(/);
+  for (const action of ["task_customer_chats", "task_bind_customer_chat"]) {
+    const body = section(actionRoute, action);
+    assert.match(body, /Response\.json\(/);
+    assert.ok(
+      !/getDashboardData/.test(body),
+      `${action} 显式返回，不能落兜底 dashboard`,
+    );
+  }
+});
+
+test("partner claim detail exposes join qr only for claimed tasks", () => {
+  const partnerRoute = readFileSync(
+    new URL("../app/api/partner/route.ts", import.meta.url),
+    "utf8",
+  );
+  assert.match(partnerRoute, /join_qr_code FROM tasks/);
+  assert.match(partnerRoute, /joinQrCode,/);
+  const portalPage = readFileSync(
+    new URL("../koc-portal/app/page.tsx", import.meta.url),
+    "utf8",
+  );
+  assert.match(portalPage, /joinQrCode\?: string/);
+  assert.match(portalPage, /join-qr-card/);
+  assert.match(portalPage, /isClaimOwner && payload\.claim\?\.joinQrCode/);
+});
+
+test("bootstrap scopes dashboard data by owner scope", () => {
+  assert.match(bootstrapRoute, /getOwnerScope\(request\)/);
+  assert.match(bootstrapRoute, /getDashboardData\(ownerScopeUserid\(scope\)\)/);
+});
+
+test("getDashboardData filters tasks and distributions by owner", () => {
+  const dashboard = mvpDb.slice(
+    mvpDb.indexOf("export async function getDashboardData"),
+    mvpDb.indexOf("export function uid(prefix: string)"),
+  );
+  const occurrences =
+    dashboard.match(
+      /WHERE \(t\.owner_userid = \? OR \(t\.project_id != '' AND pj\.owner_userid = \?\)\)/g,
+    ) ?? [];
+  assert.equal(
+    occurrences.length,
+    2,
+    "tasks 与 distributions 两条查询都要按 union scope 过滤（任务负责人 OR 项目负责人）",
+  );
+});
+
+test("export routes enforce owner scope", () => {
+  assert.match(recoveryExportRoute, /isTaskOwner\(/);
+  assert.match(screenshotTaskExportRoute, /isTaskOwner\(/);
+  assert.match(taskResultImageRoute, /isDistributionOwner\(/);
+});
+
+test("users route supports wecom binding lifecycle", () => {
+  assert.match(usersRoute, /action === "set_wecom"/);
+  assert.match(usersRoute, /INSERT INTO users[\s\S]*?wecom_userid/);
+  assert.match(usersRoute, /SELECT id, username, role, wecom_userid, created_at/);
+});
+
+test("project detail exposes inline main-chat member management", () => {
+  const adminApp = readFileSync(
+    new URL("../app/admin-app.tsx", import.meta.url),
+    "utf8",
+  );
+  const globalsCss = readFileSync(
+    new URL("../app/globals.css", import.meta.url),
+    "utf8",
+  );
+  assert.match(adminApp, /memberPickerOpen/);
+  assert.match(adminApp, /mainGroupMemberIds: nextMembers/);
+  assert.match(adminApp, /project-member-remove/);
+  assert.match(adminApp, /userid !== detail\.project\.ownerUserid/);
+  assert.match(globalsCss, /\.project-member-remove/);
+});
+
+test("no project_save payload carries parentProjectId（项目层级已移除）", () => {
+  const adminApp = readFileSync(
+    new URL("../app/admin-app.tsx", import.meta.url),
+    "utf8",
+  );
+  const starts = [...adminApp.matchAll(/action: "project_save"/g)].map(
+    (match) => match.index,
+  );
+  assert.ok(starts.length >= 2, "至少应有两处 project_save 调用（编辑器/总群成员）");
+  for (const start of starts) {
+    const payload = adminApp.slice(start, start + 600);
+    assert.ok(
+      !/parentProjectId/.test(payload),
+      "project_save 载荷不应再带 parentProjectId（项目层级已移除）",
+    );
+  }
+});

tests/owner-scope.test.mjs

@@ -0,0 +1,122 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import {
+  isDistributionOwner,
+  isTaskOwner,
+  ownerScopeUserid,
+} from "../lib/owner-scope.ts";
+
+function captureDb(rowsByPattern) {
+  const captured = [];
+  const makeStatement = (sql, values) => ({
+    async first() {
+      captured.push({ sql, values });
+      for (const [pattern, rows] of rowsByPattern) {
+        if (pattern.test(sql)) return rows(values) ?? null;
+      }
+      return null;
+    },
+    async all() {
+      captured.push({ sql, values });
+      for (const [pattern, rows] of rowsByPattern) {
+        if (pattern.test(sql)) return { results: rows(values) ?? [] };
+      }
+      return { results: [] };
+    },
+  });
+  const db = {
+    prepare(sql) {
+      const unbound = makeStatement(sql, []);
+      return {
+        bind(...values) {
+          return makeStatement(sql, values);
+        },
+        first: unbound.first,
+        all: unbound.all,
+      };
+    },
+  };
+  return { db, captured };
+}
+
+test("isTaskOwner union-matches task owner or project owner", async () => {
+  const { db, captured } = captureDb([
+    [
+      /FROM tasks t\s+LEFT JOIN projects p ON p\.id = t\.project_id/,
+      (values) =>
+        values[0] === "task-1" &&
+        values[1] === "zhangsan" &&
+        values[2] === "zhangsan"
+          ? { id: "task-1" }
+          : null,
+    ],
+  ]);
+  assert.equal(await isTaskOwner(db, "task-1", "zhangsan"), true);
+  assert.equal(await isTaskOwner(db, "task-2", "zhangsan"), false);
+  assert.equal(captured.length, 2);
+  assert.match(
+    captured[0].sql,
+    /t\.owner_userid = \? OR p\.owner_userid = \?/,
+  );
+  assert.deepEqual(captured[0].values, ["task-1", "zhangsan", "zhangsan"]);
+});
+
+test("isTaskOwner strict mode only matches task owner_userid", async () => {
+  const { db, captured } = captureDb([
+    [
+      /FROM tasks WHERE id = \? AND owner_userid = \?/,
+      (values) =>
+        values[0] === "task-1" && values[1] === "zhangsan"
+          ? { id: "task-1" }
+          : null,
+    ],
+  ]);
+  assert.equal(await isTaskOwner(db, "task-1", "zhangsan", { strict: true }), true);
+  assert.equal(
+    await isTaskOwner(db, "task-1", "project-owner", { strict: true }),
+    false,
+    "strict 门不允许项目负责人代操作任务负责人的客户群",
+  );
+  assert.equal(captured.length, 2);
+  assert.ok(
+    !/LEFT JOIN projects/.test(captured[0].sql),
+    "strict 查询不应 JOIN projects",
+  );
+  assert.deepEqual(captured[0].values, ["task-1", "zhangsan"]);
+});
+
+test("isTaskOwner guards empty taskId / wecomUserId without querying", async () => {
+  const { db, captured } = captureDb([]);
+  assert.equal(await isTaskOwner(db, "task-1", ""), false);
+  assert.equal(await isTaskOwner(db, "", "zhangsan"), false);
+  assert.equal(await isTaskOwner(db, "  ", "zhangsan"), false);
+  assert.equal(captured.length, 0);
+});
+
+test("isDistributionOwner union-matches via task or project owner", async () => {
+  const { db, captured } = captureDb([
+    [
+      /FROM distributions d\s+JOIN tasks t ON t\.id = d\.task_id\s+LEFT JOIN projects p ON p\.id = t\.project_id/,
+      (values) =>
+        values[0] === "dist-1" &&
+        values[1] === "zhangsan" &&
+        values[2] === "zhangsan"
+          ? { id: "dist-1" }
+          : null,
+    ],
+  ]);
+  assert.equal(await isDistributionOwner(db, "dist-1", "zhangsan"), true);
+  assert.equal(await isDistributionOwner(db, "dist-9", "zhangsan"), false);
+  assert.equal(await isDistributionOwner(db, "dist-1", ""), false);
+  assert.match(
+    captured[0].sql,
+    /t\.owner_userid = \? OR p\.owner_userid = \?/,
+  );
+  assert.deepEqual(captured[0].values, ["dist-1", "zhangsan", "zhangsan"]);
+});
+
+test("ownerScopeUserid maps scope kinds to filter value", () => {
+  assert.equal(ownerScopeUserid({ kind: "full" }), undefined);
+  assert.equal(ownerScopeUserid({ kind: "owner", wecomUserId: "zhangsan" }), "zhangsan");
+  assert.equal(ownerScopeUserid({ kind: "owner", wecomUserId: "" }), "");
+});

tests/partner-resource-binding.test.mjs

@@ -0,0 +1,91 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { readFileSync } from "node:fs";
+
+const actionRoute = readFileSync(
+  new URL("../app/api/action/route.ts", import.meta.url),
+  "utf8",
+);
+const mvpDb = readFileSync(
+  new URL("../lib/mvp-db.ts", import.meta.url),
+  "utf8",
+);
+const adminApp = readFileSync(
+  new URL("../app/admin-app.tsx", import.meta.url),
+  "utf8",
+);
+const migration = readFileSync(
+  new URL("../mysql/0018_partner_resource_binding.sql", import.meta.url),
+  "utf8",
+);
+
+function section(source, action) {
+  const start = source.indexOf(`"${action}"`);
+  assert.ok(start >= 0, `action ${action} 不存在于路由源码`);
+  const next = source.indexOf("} else if (body.action ===", start);
+  return source.slice(start, next === -1 ? undefined : next);
+}
+
+test("partner_bind_account enforces one partner per resource account", () => {
+  const body = section(actionRoute, "partner_bind_account");
+  assert.match(
+    body,
+    /SELECT id, name, partner_type, wecom_external_user_id, wecom_userid\s+FROM partners WHERE account_id = \? AND id != \? LIMIT 1/,
+    "绑定前必须检查资源账号是否已被其它合作方占用",
+  );
+  assert.match(body, /该 KOC 资源已绑定合作方/, "占用时返回可读错误");
+  assert.match(
+    body,
+    /UPDATE partners SET account_id = '', released_account_id = \? WHERE id = \?/,
+    "空 accountId 表示解绑，并记录释放的资源账号避免默认合作方同步回填",
+  );
+  assert.match(body, /群主合作方不绑定 KOC 资源/);
+});
+
+test("partner_create_from_account creates external_koc bound to account", () => {
+  const body = section(actionRoute, "partner_create_from_account");
+  assert.match(
+    body,
+    /SELECT id, name FROM partners WHERE account_id = \? LIMIT 1/,
+    "一键创建前必须确认资源未被绑定",
+  );
+  assert.match(
+    body,
+    /partner-koc-/,
+    "合作方 id 使用 partner-koc- 前缀，避免与领取流程冲突",
+  );
+  assert.match(body, /'external_koc'/);
+  assert.match(
+    body,
+    /INSERT INTO partners[\s\S]*account_id[\s\S]*VALUES/,
+    "INSERT 必须写入 account_id",
+  );
+});
+
+test("dashboard partners query joins accounts for contact display", () => {
+  assert.match(
+    mvpDb,
+    /FROM partners p\s+LEFT JOIN accounts a ON a\.id = p\.account_id/,
+    "partners 列表需带出资源昵称与联系方式",
+  );
+  assert.match(mvpDb, /a\.current_contact AS account_contact/);
+  assert.match(
+    mvpDb,
+    /ensureColumn\(\s*"partners",\s*"account_id"/,
+    "自托管路径也要补 account_id 列",
+  );
+});
+
+test("migration 0018 adds partners.account_id with index", () => {
+  assert.match(migration, /ADD COLUMN `account_id`/);
+  assert.match(migration, /partners_account_idx/);
+});
+
+test("admin app renders resource binding affordances", () => {
+  assert.match(adminApp, /partner_bind_account/);
+  assert.match(adminApp, /partner_create_from_account/);
+  assert.match(adminApp, /绑定资源/, "未绑合作方有绑定入口");
+  assert.match(adminApp, /换绑/, "已绑合作方可换绑");
+  assert.match(adminApp, /解绑中…/, "已绑合作方可解绑");
+  assert.match(adminApp, /设为合作方/, "资源页支持一键创建合作方");
+});

tests/partner-wecom-claim.test.mjs

@@ -109,5 +109,5 @@ test("recover builds dynamic partner candidates including wecom identity", () =>
     routeSource,
     /wecomPartnerId \? \[wecomPartnerId\] : \[partnerId, legacyPartnerId\]/,
   );
-  assert.match(routeSource, /\.bind\(task\.task_type, task\.task_type, task\.id, \.\.\.partnerCandidates\)/);
+  assert.match(routeSource, /\.bind\(task\.id, \.\.\.partnerCandidates\)/);
 });

tests/pool-partner-default.test.mjs

@@ -0,0 +1,126 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { readFileSync } from "node:fs";
+
+const resourceWrite = readFileSync(
+  new URL("../lib/resource-write.ts", import.meta.url),
+  "utf8",
+);
+const bootstrapRoute = readFileSync(
+  new URL("../app/api/bootstrap/route.ts", import.meta.url),
+  "utf8",
+);
+const resourcesImport = readFileSync(
+  new URL("../app/api/resources-import/route.ts", import.meta.url),
+  "utf8",
+);
+const resourcesInsert = readFileSync(
+  new URL("../app/api/resources-insert/route.ts", import.meta.url),
+  "utf8",
+);
+const actionRoute = readFileSync(
+  new URL("../app/api/action/route.ts", import.meta.url),
+  "utf8",
+);
+const migration = readFileSync(
+  new URL("../mysql/0023_partner_released_account.sql", import.meta.url),
+  "utf8",
+);
+
+function section(source, action) {
+  const start = source.indexOf(`"${action}"`);
+  assert.ok(start >= 0, `action ${action} 不存在于路由源码`);
+  const next = source.indexOf("} else if (body.action ===", start);
+  return source.slice(start, next === -1 ? undefined : next);
+}
+
+test("ensurePartnersForPoolAccounts 为资源池未绑定账号创建默认合作方", () => {
+  assert.match(resourceWrite, /export async function ensurePartnersForPoolAccounts/);
+  assert.match(
+    resourceWrite,
+    /NOT EXISTS \(SELECT 1 FROM partners p WHERE p\.account_id = a\.id\)/,
+    "只为尚未绑定合作方的资源账号建档",
+  );
+  assert.match(
+    resourceWrite,
+    /INSERT OR IGNORE INTO partners/,
+    "并发同步幂等：主键冲突直接忽略",
+  );
+  assert.match(resourceWrite, /'external_koc'/, "默认合作方为外部KOC类型");
+  assert.match(
+    resourceWrite,
+    /partner-koc-\$\{hashText/,
+    "合作方 id 由账号身份派生，与领取流程的前缀约定一致",
+  );
+});
+
+test("默认合作方同步尊重运营显式解绑（released_account_id 不回填）", () => {
+  assert.match(
+    resourceWrite,
+    /NOT EXISTS \(\s*SELECT 1 FROM partners r WHERE r\.released_account_id = a\.id\s*\)/,
+    "被显式解绑/顶替过的资源账号不再自动加入合作方",
+  );
+  assert.match(migration, /ADD COLUMN `released_account_id`/);
+  assert.match(migration, /partners_released_account_idx/);
+});
+
+test("空壳默认合作方的名称随昵称补全刷新且不碰有业绩合作方", () => {
+  assert.match(resourceWrite, /async function refreshPoolPartnerNames/);
+  assert.match(
+    resourceWrite,
+    /NOT EXISTS \(SELECT 1 FROM claims c WHERE c\.partner_id = p\.id\)/,
+    "有领取记录的合作方不刷新名称",
+  );
+  assert.match(
+    resourceWrite,
+    /NOT EXISTS \(SELECT 1 FROM distributions d WHERE d\.partner_id = p\.id\)/,
+    "有分发记录的合作方不刷新名称",
+  );
+  assert.match(
+    resourceWrite,
+    /p\.wecom_external_user_id IS NULL OR p\.wecom_external_user_id = ''/,
+    "已绑企微的合作方不刷新名称",
+  );
+});
+
+test("bootstrap 在返回面板数据前同步默认合作方", () => {
+  const syncIndex = bootstrapRoute.indexOf("await ensurePartnersForPoolAccounts");
+  const dashboardIndex = bootstrapRoute.indexOf("await getDashboardData(");
+  assert.ok(syncIndex >= 0, "bootstrap 需要调用默认合作方同步");
+  assert.ok(
+    dashboardIndex > syncIndex,
+    "同步必须发生在 getDashboardData 之前，首次加载即可见",
+  );
+});
+
+test("资源导入与手动新增后都会触发默认合作方同步", () => {
+  assert.match(
+    resourcesImport,
+    /runInBackground\(\s*ensurePartnersForPoolAccounts\(\)/,
+    "批量导入 commit 后同步",
+  );
+  assert.match(
+    resourcesInsert,
+    /runInBackground\(\s*ensurePartnersForPoolAccounts\(\)/,
+    "手动新增后同步",
+  );
+});
+
+test("partner_bind_account 换绑时可顶替空壳占用方", () => {
+  const body = section(actionRoute, "partner_bind_account");
+  assert.match(body, /isShellAccountHolder/, "占用方为空壳时判断是否可顶替");
+  assert.match(
+    body,
+    /UPDATE partners SET account_id = \?, released_account_id = '' WHERE id = \?/,
+    "绑定目标时清掉自身的释放标记",
+  );
+  const helper = actionRoute.slice(
+    actionRoute.indexOf("async function isShellAccountHolder"),
+  );
+  assert.match(helper, /SELECT 1 FROM claims WHERE partner_id = \? LIMIT 1/);
+  assert.match(
+    helper,
+    /SELECT 1 FROM distributions WHERE partner_id = \? LIMIT 1/,
+    "有领取或分发记录的占用方不可顶替，仍走人工解绑",
+  );
+});

tests/project-push.test.mjs

@@ -27,32 +27,23 @@ const taskRow = {
   content_format: "image_text",
   share_token: "tok-123",
   project_id: "proj-1",
-  claimed_quantity: 0,
-  status: "active",
+  owner_userid: "owner-task",
+  task_chat_id: null,
 };
 
 const projectRow = {
   id: "proj-1",
   name: "项目一",
   brand: "品牌A",
-  main_group_member_ids: JSON.stringify(["zhangsan", "lisi"]),
+  main_group_member_ids: JSON.stringify(["zhangsan", "lisi", "owner-proj"]),
+  owner_userid: "owner-proj",
+  main_chat_id: "",
   status: "active",
   note: "",
   created_at: "2026-08-01",
 };
 
-function fakePushDb({
-  task = taskRow,
-  project = projectRow,
-  links = [
-    { project_id: "proj-1", chat_id: "wr-1", partner_id: "p-1" },
-    { project_id: "proj-1", chat_id: "wr-2", partner_id: "" },
-  ],
-  groupChats = [
-    { chat_id: "wr-1", name: "一群", owner_user_id: "zhangsan", member_count: 10, status: 0 },
-    { chat_id: "wr-2", name: "二群", owner_user_id: "lisi", member_count: 5, status: 0 },
-  ],
-} = {}) {
+function fakePushDb({ task = { ...taskRow }, project = { ...projectRow } } = {}) {
   const executed = [];
   const makeStatement = (sql, params = []) => ({
     sql,
@@ -62,10 +53,25 @@ function fakePushDb({
     },
     async run() {
       executed.push({ sql, params });
+      if (/UPDATE tasks SET task_chat_id/.test(sql)) {
+        task.task_chat_id = params[0];
+      }
       return { meta: { changes: 1 } };
     },
     async first() {
       executed.push({ sql, params });
+      if (/FROM tasks t\s+LEFT JOIN projects p/.test(sql)) {
+        return {
+          id: task.id,
+          name: task.name,
+          task_chat_id: task.task_chat_id ?? null,
+          task_owner_userid: task.owner_userid ?? null,
+          project_owner_userid: project ? (project.owner_userid ?? null) : null,
+        };
+      }
+      if (/SELECT task_chat_id FROM tasks/.test(sql)) {
+        return { task_chat_id: task.task_chat_id ?? null };
+      }
       if (/FROM tasks WHERE id = \?/.test(sql)) return task;
       if (/FROM projects WHERE id = \?/.test(sql)) return project;
       return null;
@@ -75,36 +81,12 @@ function fakePushDb({
       if (/FROM tasks WHERE project_id/.test(sql)) {
         return { results: task ? [{ ...task }] : [] };
       }
-      if (/FROM project_group_chats g/.test(sql)) {
-        return {
-          results: links
-            .filter((link) => link.project_id === params[0])
-            .map((link) => {
-              const chat = groupChats.find((item) => item.chat_id === link.chat_id);
-              return {
-                chat_id: link.chat_id,
-                partner_id: link.partner_id,
-                chat_name: chat ? chat.name : null,
-                owner_user_id: chat ? chat.owner_user_id : null,
-                member_count: chat ? chat.member_count : null,
-                chat_status: chat ? chat.status : null,
-                partner_name: null,
-              };
-            }),
-        };
-      }
-      if (/FROM wecom_group_chats/.test(sql)) {
-        return {
-          results: sql.includes(" IN (")
-            ? groupChats.filter((row) => params.includes(row.chat_id))
-            : groupChats,
-        };
-      }
       return { results: [] };
     },
   });
   return {
     executed,
+    task,
     prepare(sql) {
       return makeStatement(sql);
     },
@@ -114,7 +96,7 @@ function fakePushDb({
   };
 }
 
-function fakeWecomFetch(calls, { failAppFor = [] } = {}) {
+function fakeWecomFetch(calls, chats, { failAppFor = [], failChatSend = [] } = {}) {
   return async (input, init = {}) => {
     const url = new URL(String(input));
     calls.push({ url, init });
@@ -133,8 +115,40 @@ function fakeWecomFetch(calls, { failAppFor = [] } = {}) {
       }
       return Response.json({ errcode: 0, errmsg: "ok" });
     }
-    if (url.pathname.endsWith("/cgi-bin/externalcontact/add_msg_template")) {
-      return Response.json({ errcode: 0, errmsg: "ok", msgid: "msg-1", fail_list: [] });
+    if (url.pathname.endsWith("/cgi-bin/appchat/create")) {
+      const body = JSON.parse(String(init.body ?? "{}"));
+      chats.set(body.chatid, { name: body.name, userlist: body.userlist });
+      return Response.json({ errcode: 0, errmsg: "ok", chatid: body.chatid });
+    }
+    if (url.pathname.endsWith("/cgi-bin/appchat/get")) {
+      const body = JSON.parse(String(init.body ?? "{}"));
+      const chat = chats.get(body.chatid);
+      if (!chat) {
+        return Response.json({ errcode: 60111, errmsg: "chat not found" });
+      }
+      return Response.json({
+        errcode: 0,
+        errmsg: "ok",
+        chat_info: { chatid: body.chatid, name: chat.name, userlist: chat.userlist },
+      });
+    }
+    if (url.pathname.endsWith("/cgi-bin/appchat/update")) {
+      const body = JSON.parse(String(init.body ?? "{}"));
+      const chat = chats.get(body.chatid);
+      if (!chat) {
+        return Response.json({ errcode: 60111, errmsg: "chat not found" });
+      }
+      for (const userid of body.add_user_list ?? []) {
+        if (!chat.userlist.includes(userid)) chat.userlist.push(userid);
+      }
+      return Response.json({ errcode: 0, errmsg: "ok" });
+    }
+    if (url.pathname.endsWith("/cgi-bin/appchat/send")) {
+      const body = JSON.parse(String(init.body ?? "{}"));
+      if (failChatSend.includes(body.chatid) || !chats.has(body.chatid)) {
+        return Response.json({ errcode: 60111, errmsg: "chat not found" });
+      }
+      return Response.json({ errcode: 0, errmsg: "ok" });
     }
     return new Response("not found", { status: 404 });
   };
@@ -151,86 +165,150 @@ test("buildProjectAppMessage targets internal members with claim url", () => {
   assert.match(message, /领取链接：https:\/\/portal\.example\.com\/\?task=tok-123/);
 });
 
-test("pushProjectTask sends per-member app messages and group templates", async () => {
+test("pushProjectTask broadcasts once into the main chat and sends the task chat", async () => {
   process.env.KOC_PORTAL_URL = "https://portal.example.com";
   try {
-    const db = fakePushDb();
+    const db = fakePushDb({
+      project: { ...projectRow, main_chat_id: "pgcproj1" },
+    });
+    const chats = new Map([
+      ["pgcproj1", { name: "【总群】项目一", userlist: ["zhangsan", "lisi", "owner-proj"] }],
+    ]);
     const calls = [];
     const outcome = await pushProjectTask(
       db,
       { taskId: "task-1", sendMainGroup: true, sendGroupChats: true },
       resolveWecomConfig(baseBindings),
-      fakeWecomFetch(calls),
+      fakeWecomFetch(calls, chats),
     );
-    const appCalls = calls.filter((call) =>
-      call.url.pathname.endsWith("/cgi-bin/message/send"),
+    assert.equal(outcome.mainChatMode, "group");
+    assert.deepEqual(outcome.appResults, [], "no per-member sends when chat exists");
+    const chatSends = calls.filter((call) =>
+      call.url.pathname.endsWith("/cgi-bin/appchat/send"),
     );
     assert.deepEqual(
-      appCalls.map((call) => JSON.parse(String(call.init.body)).touser),
-      ["zhangsan", "lisi"],
-      "one message/send per main group member",
+      chatSends.map((call) => JSON.parse(String(call.init.body)).chatid).sort(),
+      ["pgcproj1", "tgctask1"],
+      "one send into main chat and one into task chat",
     );
-    for (const call of appCalls) {
-      assert.match(JSON.parse(String(call.init.body)).text.content, /【项目任务】测试任务/);
-    }
-    assert.equal(outcome.appResults.length, 2);
-    assert.ok(outcome.appResults.every((item) => item.ok));
-    const templateCalls = calls.filter((call) =>
-      call.url.pathname.endsWith("/cgi-bin/externalcontact/add_msg_template"),
-    );
-    assert.equal(templateCalls.length, 2, "one template per owner");
-    assert.equal(outcome.groupResults.length, 2);
-    assert.equal(outcome.groupChatCount, 2);
+    assert.equal(calls.filter((call) => call.url.pathname.endsWith("/cgi-bin/message/send")).length, 0);
     assert.deepEqual(outcome.skippedReasons, []);
+    assert.equal(outcome.taskChat.sent, true);
+    assert.equal(outcome.taskChat.chatId, "tgctask1");
     assert.equal(outcome.linkUrl, "https://portal.example.com/?task=tok-123");
   } finally {
     delete process.env.KOC_PORTAL_URL;
   }
 });
 
-test("single member failure does not block the rest of the push", async () => {
+test("pushProjectTask falls back to per-member messages when main chat missing", async () => {
   process.env.KOC_PORTAL_URL = "https://portal.example.com";
   try {
-    const db = fakePushDb();
+    const db = fakePushDb({ project: { ...projectRow, main_chat_id: "" } });
+    const chats = new Map();
     const calls = [];
     const outcome = await pushProjectTask(
       db,
-      { taskId: "task-1" },
+      { taskId: "task-1", sendMainGroup: true, sendGroupChats: true },
       resolveWecomConfig(baseBindings),
-      fakeWecomFetch(calls, { failAppFor: ["zhangsan"] }),
+      fakeWecomFetch(calls, chats),
     );
+    assert.equal(outcome.mainChatMode, "per_member");
     assert.deepEqual(
-      outcome.appResults.map((item) => [item.userid, item.ok]),
-      [
-        ["zhangsan", false],
-        ["lisi", true],
-      ],
+      outcome.appResults.map((item) => item.userid).sort(),
+      ["lisi", "owner-proj", "zhangsan"],
     );
-    assert.match(outcome.appResults[0].error, /userid not found/);
-    const templateCalls = calls.filter((call) =>
-      call.url.pathname.endsWith("/cgi-bin/externalcontact/add_msg_template"),
-    );
-    assert.equal(templateCalls.length, 2, "group push still runs");
+    assert.ok(outcome.appResults.every((item) => item.ok));
+    assert.ok(outcome.skippedReasons.includes("项目总群未建，已逐人私信"));
+    assert.equal(outcome.taskChat.sent, true);
   } finally {
     delete process.env.KOC_PORTAL_URL;
   }
 });
 
-test("pushProjectTask skips empty targets instead of failing", async () => {
+test("single member failure does not block the rest of the per-member push", async () => {
+  process.env.KOC_PORTAL_URL = "https://portal.example.com";
+  try {
+    const db = fakePushDb({ project: { ...projectRow, main_chat_id: "" } });
+    const calls = [];
+    const outcome = await pushProjectTask(
+      db,
+      { taskId: "task-1", sendMainGroup: true, sendGroupChats: false },
+      resolveWecomConfig(baseBindings),
+      fakeWecomFetch(calls, new Map(), { failAppFor: ["zhangsan"] }),
+    );
+    const byUserid = Object.fromEntries(
+      outcome.appResults.map((item) => [item.userid, item.ok]),
+    );
+    assert.equal(byUserid.zhangsan, false, "failed member recorded");
+    assert.equal(byUserid.lisi, true, "other members still sent");
+    assert.equal(byUserid["owner-proj"], true, "project owner also notified");
+    assert.match(
+      outcome.appResults.find((item) => !item.ok).error,
+      /userid not found/,
+    );
+  } finally {
+    delete process.env.KOC_PORTAL_URL;
+  }
+});
+
+test("main chat send failure degrades to per-member push", async () => {
+  process.env.KOC_PORTAL_URL = "https://portal.example.com";
+  try {
+    const db = fakePushDb({
+      project: { ...projectRow, main_chat_id: "pgcproj1" },
+    });
+    const chats = new Map([
+      ["pgcproj1", { name: "【总群】项目一", userlist: ["zhangsan"] }],
+    ]);
+    const calls = [];
+    const outcome = await pushProjectTask(
+      db,
+      { taskId: "task-1", sendMainGroup: true, sendGroupChats: false },
+      resolveWecomConfig(baseBindings),
+      fakeWecomFetch(calls, chats, { failChatSend: ["pgcproj1"] }),
+    );
+    assert.equal(outcome.mainChatMode, "per_member");
+    assert.ok(
+      outcome.skippedReasons.some((reason) => /降级逐人私信/.test(reason)),
+    );
+    assert.equal(outcome.appResults.length, 3);
+  } finally {
+    delete process.env.KOC_PORTAL_URL;
+  }
+});
+
+test("task chat is skipped with reason when no owner at all", async () => {
   const db = fakePushDb({
-    project: { ...projectRow, main_group_member_ids: "[]" },
-    links: [{ project_id: "proj-1", chat_id: "wr-gone", partner_id: "" }],
-    groupChats: [],
+    task: { ...taskRow, owner_userid: "" },
+    project: { ...projectRow, owner_userid: "", main_group_member_ids: "[]" },
   });
   const calls = [];
   const outcome = await pushProjectTask(
     db,
-    { taskId: "task-1" },
+    { taskId: "task-1", sendMainGroup: false, sendGroupChats: true },
     resolveWecomConfig(baseBindings),
-    fakeWecomFetch(calls),
+    fakeWecomFetch(calls, new Map()),
   );
-  assert.deepEqual(outcome.skippedReasons, ["项目总群未配置成员", "项目没有可用的任务群"]);
-  assert.equal(calls.length, 0, "no wecom api calls expected");
+  assert.equal(outcome.taskChat.sent, false);
+  assert.equal(outcome.taskChat.chatId, "");
+  assert.equal(outcome.taskChat.reason, "任务与项目都未填负责人");
+  assert.ok(outcome.skippedReasons.includes("任务群未发送：任务与项目都未填负责人"));
+  assert.equal(calls.length, 0);
+});
+
+test("task chat is skipped when fewer than 2 members", async () => {
+  const db = fakePushDb({
+    task: { ...taskRow, owner_userid: "" },
+    project: { ...projectRow, owner_userid: "owner-proj", main_group_member_ids: "[]" },
+  });
+  const outcome = await pushProjectTask(
+    db,
+    { taskId: "task-1", sendMainGroup: false, sendGroupChats: true },
+    resolveWecomConfig(baseBindings),
+    fakeWecomFetch([], new Map()),
+  );
+  assert.equal(outcome.taskChat.reason, "任务群成员不足 2 人");
 });
 
 test("pushProjectTask rejects task without project or unknown task", async () => {
@@ -241,7 +319,7 @@ test("pushProjectTask rejects task without project or unknown task", async () =>
         unlinked,
         { taskId: "task-1" },
         resolveWecomConfig(baseBindings),
-        fakeWecomFetch([]),
+        fakeWecomFetch([], new Map()),
       ),
     (error) => error instanceof ProjectError && /未挂项目/.test(error.message),
   );
@@ -257,7 +335,7 @@ test("pushProjectTask rejects task without project or unknown task", async () =>
         fakePushDb(),
         { taskId: "task-1", sendMainGroup: false, sendGroupChats: false },
         resolveWecomConfig(baseBindings),
-        fakeWecomFetch([]),
+        fakeWecomFetch([], new Map()),
       ),
     (error) => error instanceof ProjectError && /至少选择一个发送目标/.test(error.message),
   );

tests/project-service.test.mjs

@@ -1,23 +1,100 @@
 import assert from "node:assert/strict";
 import test from "node:test";
 import {
+  projectMainChatId,
   deleteProject,
+  ensureProjectMainChat,
+  effectiveProjectMembers,
+  findOrCreateGroupOwnerPartner,
   getProjectDetail,
   listProjects,
   parseMemberIds,
   ProjectError,
   saveGroupOwnerPartner,
   saveProject,
-  setProjectGroupChats,
 } from "../lib/project-service.ts";
+import {
+  clearWecomAccessTokenCacheForTests,
+  resolveWecomConfig,
+} from "../lib/wecom-client.ts";
 
-function fakeProjectDb({
-  projects = [],
-  links = [],
-  tasks = [],
-  groupChats = [],
-  partners = [],
-} = {}) {
+const baseBindings = {
+  WECOM_CORP_ID: "corp-test",
+  WECOM_AGENT_ID: "1000001",
+  WECOM_SECRET: "secret-test",
+};
+
+test.beforeEach(() => {
+  clearWecomAccessTokenCacheForTests();
+});
+
+function fakeWecom(options = {}) {
+  const calls = [];
+  const chats = new Map(options.chats ?? []);
+  const failCreate = options.failCreate ?? false;
+  const failGet = options.failGet ?? false;
+  const createExisted = options.createExisted ?? false;
+  const fetchImpl = async (input, init = {}) => {
+    const url = new URL(String(input));
+    calls.push({ url, init });
+    if (url.pathname.endsWith("/cgi-bin/gettoken")) {
+      return Response.json({
+        errcode: 0,
+        errmsg: "ok",
+        access_token: "token-test",
+        expires_in: 7200,
+      });
+    }
+    if (url.pathname.endsWith("/cgi-bin/appchat/create")) {
+      if (createExisted) {
+        return Response.json({ errcode: 86215, errmsg: "chatid existed" });
+      }
+      if (failCreate) {
+        return Response.json({ errcode: 60111, errmsg: "user not in scope" });
+      }
+      const body = JSON.parse(String(init.body ?? "{}"));
+      chats.set(body.chatid, { name: body.name, userlist: body.userlist });
+      return Response.json({ errcode: 0, errmsg: "ok", chatid: body.chatid });
+    }
+    if (url.pathname.endsWith("/cgi-bin/appchat/update")) {
+      const body = JSON.parse(String(init.body ?? "{}"));
+      const chat = chats.get(body.chatid);
+      if (!chat) {
+        return Response.json({ errcode: 60111, errmsg: "chat not found" });
+      }
+      for (const userid of body.add_user_list ?? []) {
+        if (!chat.userlist.includes(userid)) chat.userlist.push(userid);
+      }
+      for (const userid of body.del_user_list ?? []) {
+        chat.userlist = chat.userlist.filter((id) => id !== userid);
+      }
+      return Response.json({ errcode: 0, errmsg: "ok" });
+    }
+    if (url.pathname.endsWith("/cgi-bin/appchat/get")) {
+      if (failGet) {
+        return Response.json({ errcode: 86001, errmsg: "chatid invalid" });
+      }
+      const body = JSON.parse(String(init.body ?? "{}"));
+      const chat = chats.get(body.chatid);
+      if (!chat) {
+        return Response.json({ errcode: 60111, errmsg: "chat not found" });
+      }
+      return Response.json({
+        errcode: 0,
+        errmsg: "ok",
+        chat_info: {
+          chatid: body.chatid,
+          name: chat.name,
+          userlist: chat.userlist,
+        },
+      });
+    }
+    return new Response("not found", { status: 404 });
+  };
+  return { calls, fetchImpl, chats };
+}
+
+function fakeProjectDb({ projects = [], tasks = [], partners = [] } = {}) {
   const executed = [];
   const applyWrite = (sql, params) => {
     const normalized = sql.trim();
@@ -28,12 +105,18 @@ function fakeProjectDb({
         brand: params[2],
         main_group_member_ids: params[3],
         owner_userid: params[4],
+        main_chat_id: "",
         status: "active",
         note: params[5],
         created_at: params[6],
       });
       return 1;
     }
+    if (/^UPDATE projects SET main_chat_id/.test(normalized)) {
+      const row = projects.find((item) => item.id === params[1]);
+      if (row) row.main_chat_id = params[0];
+      return row ? 1 : 0;
+    }
     if (/^UPDATE projects/.test(normalized)) {
       const row = projects.find((item) => item.id === params[5]);
       if (!row) return 0;
@@ -52,16 +135,6 @@ function fakeProjectDb({
       projects.splice(index, 1);
       return 1;
     }
-    if (/^INSERT INTO project_group_chats/.test(normalized)) {
-      links.push({ project_id: params[1], chat_id: params[2], partner_id: params[3] });
-      return 1;
-    }
-    if (/^DELETE FROM project_group_chats/.test(normalized)) {
-      for (let index = links.length - 1; index >= 0; index -= 1) {
-        if (links[index].project_id === params[0]) links.splice(index, 1);
-      }
-      return 1;
-    }
     if (/^UPDATE tasks SET project_id = ''/.test(normalized)) {
       for (const task of tasks) {
         if (task.project_id === params[0]) task.project_id = "";
@@ -103,43 +176,42 @@ function fakeProjectDb({
       if (/FROM partners WHERE id = \?/.test(sql)) {
         return partners.find((item) => item.id === params[0]) ?? null;
       }
+      if (/partner_type = 'group_owner' AND wecom_userid = \?/.test(sql)) {
+        return (
+          partners.find(
+            (item) =>
+              item.partner_type === "group_owner" &&
+              item.wecom_userid === params[0],
+          ) ?? null
+        );
+      }
       return null;
     },
     async all() {
       executed.push({ sql, params });
       if (/FROM projects p/.test(sql)) {
+        const ownerFiltered = /WHERE p\.owner_userid = \?/.test(sql);
+        let rows = projects;
+        if (ownerFiltered) {
+          rows = rows.filter((item) => item.owner_userid === params[0]);
+        }
         return {
-          results: projects.map((item) => ({
+          results: rows.map((item) => ({
             ...item,
             task_count: tasks.filter((task) => task.project_id === item.id).length,
-            group_chat_count: links.filter((link) => link.project_id === item.id).length,
           })),
         };
       }
-      if (/FROM tasks WHERE project_id/.test(sql)) {
+      if (/FROM tasks( t)? WHERE (t\.)?project_id/.test(sql)) {
         return {
           results: tasks
             .filter((task) => task.project_id === params[0])
-            .map((task) => ({ ...task })),
-        };
-      }
-      if (/FROM project_group_chats g/.test(sql)) {
-        return {
-          results: links
-            .filter((link) => link.project_id === params[0])
-            .map((link) => {
-              const chat = groupChats.find((item) => item.chat_id === link.chat_id);
-              return {
-                chat_id: link.chat_id,
-                partner_id: link.partner_id,
-                chat_name: chat ? chat.name : null,
-                owner_user_id: chat ? chat.owner_user_id : null,
-                member_count: chat ? chat.member_count : null,
-                chat_status: chat ? chat.status : null,
-                partner_name:
-                  partners.find((item) => item.id === link.partner_id)?.name ?? null,
-              };
-            }),
+            .map((task) => ({
+              recovery_enabled: 1,
+              recovery_due_at: "",
+              recovery_submitted: 0,
+              ...task,
+            })),
         };
       }
       if (/FROM partners/.test(sql)) {
@@ -150,9 +222,7 @@ function fakeProjectDb({
   });
   return {
     projects,
-    links,
     tasks,
-    groupChats,
     partners,
     executed,
     prepare(sql) {
@@ -166,6 +236,19 @@ function fakeProjectDb({
   };
 }
 
+const projectRow = (overrides = {}) => ({
+  id: "proj-1",
+  name: "A",
+  brand: "",
+  main_group_member_ids: "[]",
+  owner_userid: "",
+  main_chat_id: "",
+  status: "active",
+  note: "",
+  created_at: "2026-08-01",
+  ...overrides,
+});
+
 test("parseMemberIds accepts lines, arrays and mixed separators, dedupes", () => {
   assert.deepEqual(parseMemberIds("zhangsan\nlisi zhangsan"), ["zhangsan", "lisi"]);
   assert.deepEqual(parseMemberIds(["a", " b ", "a"]), ["a", "b"]);
@@ -173,9 +256,18 @@ test("parseMemberIds accepts lines, arrays and mixed separators, dedupes", () =>
   assert.deepEqual(parseMemberIds("  \n  "), []);
 });
 
-test("saveProject inserts with proj- prefixed id and JSON members", async () => {
+test("effectiveProjectMembers parses stored JSON and merges owner", () => {
+  assert.deepEqual(
+    effectiveProjectMembers('["u1","u2"]', "owner-a"),
+    ["u1", "u2", "owner-a"],
+  );
+  assert.deepEqual(effectiveProjectMembers("u1\nu1,u2", ""), ["u1", "u2"]);
+  assert.deepEqual(effectiveProjectMembers('["u1"]', "u1"), ["u1"]);
+});
+
+test("saveProject inserts with proj- prefixed id and JSON members incl owner", async () => {
   const db = fakeProjectDb();
-  const project = await saveProject(db, {
+  const { project, mainChat } = await saveProject(db, {
     name: "暑期焕新",
     brand: "青柠实验室",
     mainGroupMemberIds: "zhangsan\nlisi\nzhangsan",
@@ -185,24 +277,20 @@ test("saveProject inserts with proj- prefixed id and JSON members", async () =>
   assert.match(project.id, /^proj-/);
   assert.equal(project.name, "暑期焕新");
   assert.equal(project.ownerUserid, "owner-zhang");
-  assert.deepEqual(project.mainGroupMemberIds, ["zhangsan", "lisi"]);
+  assert.deepEqual(project.mainGroupMemberIds, ["zhangsan", "lisi", "owner-zhang"]);
   assert.equal(db.projects.length, 1);
   assert.equal(db.projects[0].status, "active");
+  assert.deepEqual(JSON.parse(db.projects[0].main_group_member_ids), [
+    "zhangsan",
+    "lisi",
+    "owner-zhang",
+  ]);
+  assert.equal(mainChat.reason, "no_credentials", "no config → lazy chat");
 });
 
 test("saveProject updates existing row and rejects blank name", async () => {
   const db = fakeProjectDb({
-    projects: [
-      {
-        id: "proj-1",
-        name: "旧名",
-        brand: "",
-        main_group_member_ids: "[]",
-        status: "active",
-        note: "",
-        created_at: "2026-08-01",
-      },
-    ],
+    projects: [projectRow({ id: "proj-1", name: "旧名" })],
   });
   await saveProject(db, {
     id: "proj-1",
@@ -214,7 +302,10 @@ test("saveProject updates existing row and rejects blank name", async () => {
   assert.equal(db.projects[0].name, "新名");
   assert.equal(db.projects[0].brand, "品牌");
   assert.equal(db.projects[0].owner_userid, "owner-li");
-  assert.deepEqual(JSON.parse(db.projects[0].main_group_member_ids), ["wangwu"]);
+  assert.deepEqual(JSON.parse(db.projects[0].main_group_member_ids), [
+    "wangwu",
+    "owner-li",
+  ]);
   assert.equal(db.projects.length, 1, "update must not insert");
 
   await assert.rejects(
@@ -231,63 +322,110 @@ test("saveProject rejects unknown id on update", async () => {
   );
 });
 
-test("listProjects aggregates task and group chat counts", async () => {
+test("saveProject with config creates main chat once members reach 3", async () => {
+  const db = fakeProjectDb();
+  const wecom = fakeWecom();
+  const { project, mainChat } = await saveProject(
+    db,
+    {
+      name: "满三人群",
+      mainGroupMemberIds: "u1\nu2",
+      ownerUserid: "owner-a",
+    },
+    resolveWecomConfig(baseBindings),
+    wecom.fetchImpl,
+  );
+  assert.equal(mainChat.chatId, projectMainChatId(project.id));
+  assert.equal(mainChat.reason, undefined);
+  assert.equal(db.projects[0].main_chat_id, projectMainChatId(project.id));
+  const createBody = JSON.parse(
+    String(
+      wecom.calls.find((c) => c.url.pathname.endsWith("/cgi-bin/appchat/create"))
+        .init.body,
+    ),
+  );
+  assert.equal(createBody.chatid, projectMainChatId(project.id));
+  assert.deepEqual(createBody.userlist.sort(), ["owner-a", "u1", "u2"]);
+});
+
+test("listProjects aggregates task counts and exposes mainChatId", async () => {
   const db = fakeProjectDb({
     projects: [
-      {
+      projectRow({
         id: "proj-1",
-        name: "A",
-        brand: "",
-        main_group_member_ids: "[\"u1\",\"u2\"]",
-        status: "active",
-        note: "",
-        created_at: "2026-08-01",
-      },
+        main_group_member_ids: '["u1","u2"]',
+        main_chat_id: "pgcproj1",
+      }),
     ],
     tasks: [
       { id: "t1", project_id: "proj-1" },
       { id: "t2", project_id: "proj-1" },
       { id: "t3", project_id: "" },
     ],
-    links: [{ project_id: "proj-1", chat_id: "wr-1", partner_id: "" }],
   });
   const projects = await listProjects(db);
   assert.equal(projects.length, 1);
   assert.equal(projects[0].taskCount, 2);
-  assert.equal(projects[0].groupChatCount, 1);
+  assert.equal(projects[0].mainChatId, "pgcproj1");
   assert.deepEqual(projects[0].mainGroupMemberIds, ["u1", "u2"]);
 });
 
-test("getProjectDetail marks missing chats and dangling partners", async () => {
+test("listProjects filters by project owner when ownerUserid given", async () => {
   const db = fakeProjectDb({
     projects: [
-      {
+      projectRow({ id: "proj-1", owner_userid: "owner-a" }),
+      projectRow({ id: "proj-2", owner_userid: "owner-b" }),
+      projectRow({ id: "proj-3", owner_userid: "" }),
+    ],
+  });
+  const mine = await listProjects(db, "owner-a");
+  assert.deepEqual(
+    mine.map((item) => item.id),
+    ["proj-1"],
+  );
+  const unbound = await listProjects(db, "");
+  assert.deepEqual(
+    unbound,
+    [],
+    "已登录未绑定企微的空范围不应漏出无主项目",
+  );
+  const all = await listProjects(db);
+  assert.equal(all.length, 3);
+});
+
+test("getProjectDetail returns tasks with owner and mainChat members", async () => {
+  const db = fakeProjectDb({
+    projects: [
+      projectRow({
         id: "proj-1",
-        name: "A",
-        brand: "",
-        main_group_member_ids: "[]",
-        status: "active",
-        note: "",
-        created_at: "2026-08-01",
+        main_group_member_ids: '["u1"]',
+        owner_userid: "owner-a",
+        main_chat_id: "pgcproj1",
+      }),
+    ],
+    tasks: [
+      {
+        id: "t1",
+        name: "任务一",
+        project_id: "proj-1",
+        owner_userid: "owner-a",
+        task_chat_id: "tgc_t1",
+        recovery_enabled: 0,
+        recovery_due_at: "2026-08-10",
+        recovery_submitted: 2,
       },
     ],
-    links: [
-      { project_id: "proj-1", chat_id: "wr-1", partner_id: "p-1" },
-      { project_id: "proj-1", chat_id: "wr-gone", partner_id: "" },
-    ],
-    groupChats: [
-      { chat_id: "wr-1", name: "一群", owner_user_id: "zhangsan", member_count: 12, status: 0 },
-    ],
-    partners: [],
   });
   const detail = await getProjectDetail(db, "proj-1");
-  assert.equal(detail.groupChats.length, 2);
-  const alive = detail.groupChats.find((chat) => chat.chatId === "wr-1");
-  assert.equal(alive.missing, false);
-  assert.equal(alive.partnerName, "", "dangling partner shows blank name");
-  const gone = detail.groupChats.find((chat) => chat.chatId === "wr-gone");
-  assert.equal(gone.missing, true);
-  assert.equal(gone.name, "");
+  assert.equal(detail.project.taskCount, 1);
+  assert.equal(detail.project.mainChatId, "pgcproj1");
+  assert.equal(detail.tasks[0].owner_userid, "owner-a");
+  assert.equal(detail.tasks[0].task_chat_id, "tgc_t1");
+  assert.equal(detail.tasks[0].recovery_enabled, 0);
+  assert.equal(detail.tasks[0].recovery_due_at, "2026-08-10");
+  assert.equal(detail.tasks[0].recovery_submitted, 2);
+  assert.equal(detail.mainChat.chatId, "pgcproj1");
+  assert.deepEqual(detail.mainChat.members, ["u1", "owner-a"]);
 });
 
 test("getProjectDetail throws 404 for unknown project", async () => {
@@ -298,51 +436,9 @@ test("getProjectDetail throws 404 for unknown project", async () => {
   );
 });
 
-test("setProjectGroupChats replaces links and dedupes chat ids", async () => {
+test("deleteProject unlinks tasks", async () => {
   const db = fakeProjectDb({
-    projects: [
-      {
-        id: "proj-1",
-        name: "A",
-        brand: "",
-        main_group_member_ids: "[]",
-        status: "active",
-        note: "",
-        created_at: "2026-08-01",
-      },
-    ],
-    links: [{ project_id: "proj-1", chat_id: "wr-old", partner_id: "" }],
-    groupChats: [
-      { chat_id: "wr-1", name: "一群", owner_user_id: "zhangsan", member_count: 12, status: 0 },
-    ],
-    partners: [{ id: "p-1", name: "张三", wecom_userid: "zhangsan" }],
-  });
-  const detail = await setProjectGroupChats(db, "proj-1", [
-    { chatId: "wr-1", partnerId: "p-1" },
-    { chatId: "wr-1", partnerId: "p-1" },
-    { chatId: "  ", partnerId: "" },
-  ]);
-  assert.equal(detail.groupChats.length, 1);
-  assert.equal(detail.groupChats[0].chatId, "wr-1");
-  assert.equal(detail.groupChats[0].partnerName, "张三");
-  assert.equal(db.links.length, 1);
-  assert.equal(db.links[0].chat_id, "wr-1");
-});
-
-test("deleteProject removes links and unlinks tasks", async () => {
-  const db = fakeProjectDb({
-    projects: [
-      {
-        id: "proj-1",
-        name: "A",
-        brand: "",
-        main_group_member_ids: "[]",
-        status: "active",
-        note: "",
-        created_at: "2026-08-01",
-      },
-    ],
-    links: [{ project_id: "proj-1", chat_id: "wr-1", partner_id: "" }],
+    projects: [projectRow({ id: "proj-1" })],
     tasks: [
       { id: "t1", project_id: "proj-1" },
       { id: "t2", project_id: "proj-2" },
@@ -350,7 +446,6 @@ test("deleteProject removes links and unlinks tasks", async () => {
   });
   await deleteProject(db, "proj-1");
   assert.equal(db.projects.length, 0);
-  assert.equal(db.links.length, 0);
   assert.equal(db.tasks[0].project_id, "");
   assert.equal(db.tasks[1].project_id, "proj-2");
 
@@ -360,6 +455,216 @@ test("deleteProject removes links and unlinks tasks", async () => {
   );
 });
 
+test("ensureProjectMainChat returns no_project for unknown ids", async () => {
+  const wecom = fakeWecom();
+  const db = fakeProjectDb();
+  const result = await ensureProjectMainChat(
+    db,
+    "proj-404",
+    resolveWecomConfig(baseBindings),
+    wecom.fetchImpl,
+  );
+  assert.equal(result.reason, "no_project");
+  assert.equal(result.chatId, null);
+});
+
+test("ensureProjectMainChat skips without app credentials", async () => {
+  const wecom = fakeWecom();
+  const db = fakeProjectDb({
+    projects: [projectRow({ main_group_member_ids: '["u1","u2","u3"]' })],
+  });
+  const result = await ensureProjectMainChat(
+    db,
+    "proj-1",
+    resolveWecomConfig({ ...baseBindings, WECOM_SECRET: "" }),
+    wecom.fetchImpl,
+  );
+  assert.equal(result.reason, "no_credentials");
+  assert.equal(result.chatId, null);
+  assert.equal(wecom.calls.length, 0);
+});
+
+test("ensureProjectMainChat skips creation when fewer than 3 members", async () => {
+  const wecom = fakeWecom();
+  const db = fakeProjectDb({
+    projects: [projectRow({ main_group_member_ids: '["u1","u2"]' })],
+  });
+  const result = await ensureProjectMainChat(
+    db,
+    "proj-1",
+    resolveWecomConfig(baseBindings),
+    wecom.fetchImpl,
+  );
+  assert.equal(result.reason, "not_enough_members");
+  assert.equal(result.chatId, null);
+  assert.equal(db.projects[0].main_chat_id, "");
+  assert.equal(
+    wecom.calls.filter((c) => c.url.pathname.endsWith("/cgi-bin/appchat/create"))
+      .length,
+    0,
+  );
+});
+
+test("ensureProjectMainChat probes before creating and persists chat id", async () => {
+  const wecom = fakeWecom();
+  const db = fakeProjectDb({
+    projects: [
+      projectRow({
+        name: "项目一",
+        main_group_member_ids: '["u1","u2"]',
+        owner_userid: "owner-a",
+      }),
+    ],
+  });
+  const result = await ensureProjectMainChat(
+    db,
+    "proj-1",
+    resolveWecomConfig(baseBindings),
+    wecom.fetchImpl,
+  );
+  assert.equal(result.chatId, "pgcproj1");
+  assert.deepEqual(result.members.sort(), ["owner-a", "u1", "u2"]);
+  assert.equal(db.projects[0].main_chat_id, "pgcproj1");
+  const paths = wecom.calls.map((c) => c.url.pathname);
+  assert.ok(paths.some((p) => p.endsWith("/cgi-bin/appchat/get")), "probe first");
+  assert.ok(paths.some((p) => p.endsWith("/cgi-bin/appchat/create")));
+  assert.ok(
+    paths.indexOf(paths.find((p) => p.endsWith("/cgi-bin/appchat/get"))) <
+      paths.indexOf(paths.find((p) => p.endsWith("/cgi-bin/appchat/create"))),
+    "probe precedes create",
+  );
+});
+
+test("ensureProjectMainChat is idempotent when chat already exists remotely", async () => {
+  const wecom = fakeWecom({
+    chats: [["pgcproj1", { name: "【总群】项目一", userlist: ["u1", "u2", "owner-a"] }]],
+  });
+  const db = fakeProjectDb({
+    projects: [
+      projectRow({
+        name: "项目一",
+        main_group_member_ids: '["u1","u2"]',
+        owner_userid: "owner-a",
+      }),
+    ],
+  });
+  const result = await ensureProjectMainChat(
+    db,
+    "proj-1",
+    resolveWecomConfig(baseBindings),
+    wecom.fetchImpl,
+  );
+  assert.equal(result.chatId, "pgcproj1");
+  assert.equal(db.projects[0].main_chat_id, "pgcproj1", "id persisted on recovery");
+  assert.equal(
+    wecom.calls.filter((c) => c.url.pathname.endsWith("/cgi-bin/appchat/create"))
+      .length,
+    0,
+    "no duplicate create",
+  );
+});
+
+test("ensureProjectMainChat diffs members add and del on existing chat", async () => {
+  const wecom = fakeWecom({
+    chats: [["pgcproj1", { name: "【总群】项目一", userlist: ["u1", "gone-user"] }]],
+  });
+  const db = fakeProjectDb({
+    projects: [
+      projectRow({
+        main_group_member_ids: '["u1","u2"]',
+        owner_userid: "owner-a",
+        main_chat_id: "pgcproj1",
+      }),
+    ],
+  });
+  const result = await ensureProjectMainChat(
+    db,
+    "proj-1",
+    resolveWecomConfig(baseBindings),
+    wecom.fetchImpl,
+  );
+  assert.equal(result.chatId, "pgcproj1");
+  const updateBody = JSON.parse(
+    String(
+      wecom.calls.find((c) => c.url.pathname.endsWith("/cgi-bin/appchat/update"))
+        .init.body,
+    ),
+  );
+  assert.deepEqual(updateBody.add_user_list.sort(), ["owner-a", "u2"]);
+  assert.deepEqual(updateBody.del_user_list, ["gone-user"]);
+});
+
+test("ensureProjectMainChat reports warning and keeps main_chat_id empty on create failure", async () => {
+  const wecom = fakeWecom({ failCreate: true });
+  const db = fakeProjectDb({
+    projects: [projectRow({ main_group_member_ids: '["u1","u2","u3"]' })],
+  });
+  const result = await ensureProjectMainChat(
+    db,
+    "proj-1",
+    resolveWecomConfig(baseBindings),
+    wecom.fetchImpl,
+  );
+  assert.equal(result.chatId, null);
+  assert.match(result.warning, /创建失败/);
+  assert.equal(db.projects[0].main_chat_id, "", "chat id not persisted on failure");
+});
+
+test("ensureProjectMainChat adopts chat when create reports chatid existed", async () => {
+  // 可见范围非根部门时 appchat/get 永远 86001，但群实际已建过（create 返回 86215）
+  const wecom = fakeWecom({ failGet: true, createExisted: true });
+  const db = fakeProjectDb({
+    projects: [
+      projectRow({
+        name: "项目一",
+        main_group_member_ids: '["u1","u2"]',
+        owner_userid: "owner-a",
+      }),
+    ],
+  });
+  const result = await ensureProjectMainChat(
+    db,
+    "proj-1",
+    resolveWecomConfig(baseBindings),
+    wecom.fetchImpl,
+  );
+  assert.equal(result.chatId, "pgcproj1");
+  assert.equal(result.warning, undefined);
+  assert.equal(db.projects[0].main_chat_id, "pgcproj1", "existing chat id adopted");
+});
+
+test("ensureProjectMainChat falls back to add-only sync when get is unavailable", async () => {
+  const wecom = fakeWecom({
+    failGet: true,
+    chats: [["pgcproj1", { name: "【总群】项目一", userlist: ["u1", "gone-user"] }]],
+  });
+  const db = fakeProjectDb({
+    projects: [
+      projectRow({
+        main_group_member_ids: '["u1","u2"]',
+        owner_userid: "owner-a",
+        main_chat_id: "pgcproj1",
+      }),
+    ],
+  });
+  const result = await ensureProjectMainChat(
+    db,
+    "proj-1",
+    resolveWecomConfig(baseBindings),
+    wecom.fetchImpl,
+  );
+  assert.equal(result.chatId, "pgcproj1");
+  assert.equal(result.warning, undefined);
+  const updateBody = JSON.parse(
+    String(
+      wecom.calls.find((c) => c.url.pathname.endsWith("/cgi-bin/appchat/update"))
+        .init.body,
+    ),
+  );
+  assert.deepEqual(updateBody.add_user_list.sort(), ["owner-a", "u1", "u2"]);
+  assert.equal(updateBody.del_user_list, undefined, "no removals without member list");
+});
+
 test("saveGroupOwnerPartner inserts and updates group_owner partners", async () => {
   const db = fakeProjectDb();
   const created = await saveGroupOwnerPartner(db, {
@@ -382,3 +687,24 @@ test("saveGroupOwnerPartner inserts and updates group_owner partners", async ()
     (error) => error instanceof ProjectError,
   );
 });
+
+test("findOrCreateGroupOwnerPartner returns existing row without duplicating", async () => {
+  const db = fakeProjectDb({
+    partners: [
+      { id: "partner-go-old", name: "负责人", wecom_userid: "owner-a", partner_type: "group_owner" },
+    ],
+  });
+  const found = await findOrCreateGroupOwnerPartner(db, "owner-a");
+  assert.equal(found.id, "partner-go-old");
+  assert.equal(db.partners.length, 1);
+});
+
+test("findOrCreateGroupOwnerPartner creates partner with userid fallback name", async () => {
+  const db = fakeProjectDb();
+  const created = await findOrCreateGroupOwnerPartner(db, "owner-b");
+  assert.match(created.id, /^partner-go-/);
+  assert.equal(created.name, "owner-b");
+  assert.equal(created.wecom_userid, "owner-b");
+  assert.equal(db.partners.length, 1);
+});
+

tests/public-metrics-fallback.test.mjs

@@ -0,0 +1,101 @@
+import assert from "node:assert/strict";
+import { readFile } from "node:fs/promises";
+import test from "node:test";
+
+// 公开数据采集失败兜底闭环（2026-10-09）：
+// 自动采集优先 → 采集失败时催 KOC 补交数据截图 → 运营按截图核对补录互动数据。
+// 同时修正门户创作者数据区块的表述：公开数据系统自动采集，KOC 不需要每天手动填。
+
+test("koc can submit a public-metrics screenshot when auto collection fails", async () => {
+  const [uploadRoute, imageRoute, partnerRoute, page, schema, migration] =
+    await Promise.all([
+      readFile(new URL("../app/api/partner-upload/route.ts", import.meta.url), "utf8"),
+      readFile(new URL("../app/api/partner-image/route.ts", import.meta.url), "utf8"),
+      readFile(new URL("../app/api/partner/route.ts", import.meta.url), "utf8"),
+      readFile(new URL("../koc-portal/app/page.tsx", import.meta.url), "utf8"),
+      readFile(new URL("../db/schema.ts", import.meta.url), "utf8"),
+      readFile(new URL("../mysql/0022_public_metrics_screenshot.sql", import.meta.url), "utf8"),
+    ]);
+
+  assert.match(migration, /ALTER TABLE distributions ADD COLUMN public_metrics_screenshot_key TEXT/);
+  assert.match(schema, /publicMetricsScreenshotKey/);
+
+  // 上传通道：仅发布后可补交，落 public-metrics/ 目录并标记待核对
+  assert.match(uploadRoute, /"public-metrics"/);
+  assert.match(uploadRoute, /\(isCreatorCenter \|\| isPublicMetrics\) && !assignment\.publish_url/);
+  assert.match(uploadRoute, /public-metrics\/\$\{upload\.distributionId\}/);
+  assert.match(uploadRoute, /public_metrics_screenshot_key = \?/);
+  assert.match(uploadRoute, /KOC已补交数据截图，待运营核对/);
+
+  // 领取载荷：门户能感知采集状态、已采集到的公开数据与补交截图
+  assert.match(partnerRoute, /d\.collection_status,/);
+  assert.match(partnerRoute, /d\.latest_likes,/);
+  assert.match(partnerRoute, /d\.public_metrics_screenshot_key,/);
+
+  // 图片服务：KOC 可查看自己补交的数据截图（可变凭证不缓存）
+  assert.match(imageRoute, /imageKind === "public-metrics"/);
+  assert.match(imageRoute, /d\.public_metrics_screenshot_key/);
+  assert.match(imageRoute, /imageKind === "public-metrics"/);
+
+  // 门户：仅采集失败且已发布时展示补交入口
+  assert.match(page, /collection_status === "failed"/);
+  assert.match(page, /"public-metrics"/);
+  assert.match(page, /submitPublicMetricsShot/);
+  assert.match(page, /自动采集失败，请补交数据截图/);
+  assert.match(page, /运营核对后会补录数据/);
+});
+
+test("creator data section reads as one-time d7 step, not a daily manual form", async () => {
+  const [page, styles] = await Promise.all([
+    readFile(new URL("../koc-portal/app/page.tsx", import.meta.url), "utf8"),
+    readFile(new URL("../koc-portal/app/globals.css", import.meta.url), "utf8"),
+  ]);
+  // 自动采集状态行：有数据时直接展示最近采到的赞藏评
+  assert.match(page, /auto-collect-line/);
+  assert.match(page, /公开数据系统自动采集中/);
+  assert.match(page, /由系统每天自动采集，无需你填写/);
+  // 一次性表述 + 仅识别失败才手动填
+  assert.match(page, /这一步只需做一次/);
+  assert.match(page, /仅当识别失败时才需要手动填写这两个数字/);
+  assert.match(page, /只有识别失败时才需要手动修改/);
+  assert.match(styles, /\.auto-collect-line/);
+  assert.match(styles, /\.metrics-fallback/);
+});
+
+test("admin reviews the fallback screenshot and records engagement metrics", async () => {
+  const [actionRoute, adminApp, creatorRoute] = await Promise.all([
+    readFile(new URL("../app/api/action/route.ts", import.meta.url), "utf8"),
+    readFile(new URL("../app/admin-app.tsx", import.meta.url), "utf8"),
+    readFile(new URL("../app/api/creator-screenshot/route.ts", import.meta.url), "utf8"),
+  ]);
+
+  // manual_metrics：曝光/阅读可留空；补录互动数据并把采集状态置成功
+  assert.match(actionRoute, /publicLikes/);
+  assert.match(actionRoute, /latest_likes = CASE WHEN \? THEN \? ELSE latest_likes END/);
+  assert.match(actionRoute, /collection_status = CASE WHEN \? THEN 'success' ELSE collection_status END/);
+  assert.match(actionRoute, /运营已按补交截图核对补录/);
+
+  // 后台：采集失败行出现「核对补录」入口，状态列可直达补交截图
+  assert.match(adminApp, /核对补录/);
+  assert.match(adminApp, /KOC补交截图/);
+  assert.match(adminApp, /kind=public-metrics/);
+  assert.match(adminApp, /请至少填写创作者数据或公开互动数据中的一项/);
+
+  // 截图服务：kind=public-metrics 仅管理端可读
+  assert.match(creatorRoute, /"public-metrics"/);
+  assert.match(creatorRoute, /public_metrics_screenshot_key/);
+});
+
+test("due-soon reminders include failed collections as a metrics phase", async () => {
+  const [notifier, adminApp] = await Promise.all([
+    readFile(new URL("../lib/wecom-notifier-service.ts", import.meta.url), "utf8"),
+    readFile(new URL("../app/admin-app.tsx", import.meta.url), "utf8"),
+  ]);
+  // 催办查询纳入采集失败（不限日期），文案区分「公开数据待补交」
+  assert.match(notifier, /WHEN d\.collection_status = 'failed' THEN 'metrics'/);
+  assert.match(notifier, /AND d\.collection_status = 'failed'\)/);
+  assert.match(notifier, /公开数据待补交/);
+  // 回收队列的「催办未完成」计数与催办口径对齐（含采集失败行）
+  assert.match(adminApp, /\(recoveryEnabled \? recoveryPending : 0\) \+/);
+  assert.match(adminApp, /\+\s*failedCollectionCount/);
+});

tests/rendered-html.test.mjs

@@ -29,9 +29,9 @@ test("merges distribution detail into the task center", async () => {
     readFile(new URL("../app/globals.css", import.meta.url), "utf8"),
   ]);
 
-  assert.match(adminApp, /分发明细/);
+  assert.match(adminApp, /查看明细/);
   assert.match(adminApp, /function TaskDistributionDetail/);
-  assert.match(adminApp, /选择一个数据回收任务/);
+  assert.match(adminApp, /选择一个任务进入回收队列/);
   assert.doesNotMatch(adminApp, /"distributions"/);
   assert.doesNotMatch(adminApp, /选择一个分发任务/);
   assert.doesNotMatch(adminApp, /distribution-task-/);
@@ -87,7 +87,7 @@ test("organizes distribution and recovery by task and imports the verified Feish
   ]);
   const snapshot = JSON.parse(snapshotText);
 
-  assert.match(adminApp, /选择一个数据回收任务/);
+  assert.match(adminApp, /选择一个任务进入回收队列/);
   assert.match(adminApp, /读取表格/);
   assert.match(adminApp, /当前仅展示/);
   assert.match(adminApp, /release_distribution/);
@@ -212,7 +212,7 @@ test("issues external task links and supports one-to-one note submissions", asyn
   assert.match(adminApp, /platform-logo/);
   assert.match(adminApp, /task-scope-subline/);
   assert.match(adminApp, /识别失败，请手动填写/);
-  assert.match(adminApp, /分发明细/);
+  assert.match(adminApp, /查看明细/);
   assert.match(adminApp, /AdminImageLightbox/);
   assert.match(adminApp, /CreatorScreenshotPreview/);
   assert.match(adminApp, /admin-image-lightbox/);
@@ -362,7 +362,7 @@ test("supports task collection schedules and latest public metrics", async () =>
   assert.doesNotMatch(mcpClient, /"collect_xhs_wen_note_detail"/);
 });
 
-test("supports fixed screenshot collection tasks without publish metrics", async () => {
+test("supports merged task recovery screenshots without publish metrics", async () => {
   const [adminApp, actionRoute, partnerRoute, uploadRoute, migration, multiMigration, exportRoute] =
     await Promise.all([
       readFile(new URL("../app/admin-app.tsx", import.meta.url), "utf8"),
@@ -374,13 +374,13 @@ test("supports fixed screenshot collection tasks without publish metrics", async
       readFile(new URL("../app/api/screenshot-task-export/route.ts", import.meta.url), "utf8"),
     ]);
 
-  assert.match(adminApp, /内容发布/);
-  assert.match(adminApp, /截图回收/);
-  assert.match(adminApp, /小红书搜索关键词/);
+  assert.match(adminApp, /开启截图回收（第二阶段）/);
   assert.match(adminApp, /批量下载截图/);
-  assert.match(actionRoute, /create_screenshot_task/);
+  assert.match(actionRoute, /task_enable_recovery/);
+  assert.doesNotMatch(actionRoute, /create_screenshot_task/);
   assert.match(partnerRoute, /submit_screenshot_result/);
-  assert.match(partnerRoute, /截图回收任务无需填写发布链接/);
+  assert.match(partnerRoute, /请先回填这篇笔记的发布链接，再提交回收截图/);
+  assert.match(partnerRoute, /recovery_enabled/);
   assert.match(uploadRoute, /task-results\//);
   assert.match(uploadRoute, /task-result/);
   assert.match(uploadRoute, /MAX_RESULT_SCREENSHOTS/);
@@ -462,10 +462,13 @@ test("provides simple username-password login and three server-enforced roles",
   assert.match(usersPage, /不开放注册和个人改密/);
   assert.match(usersPage, /普通用户/);
   assert.match(usersPage, /管理员/);
-  assert.match(adminApp, /item\.key === "resources" && currentUser\.role === "user"/);
+  assert.match(
+    adminApp,
+    /isTaskOwnerView && \["resources", "partners"\]\.includes\(item\.key\)/,
+  );
   assert.match(adminApp, /item\.key === "users" && !isManager/);
-  assert.match(bootstrapRoute, /principal\.user\.role === "user"/);
-  assert.match(bootstrapRoute, /accounts: \[\]/);
+  assert.match(bootstrapRoute, /getOwnerScope\(request\)/);
+  assert.match(bootstrapRoute, /getDashboardData\(ownerScopeUserid\(scope\)\)/);
   assert.match(resourceExportRoute, /isManagerRequest/);
   assert.match(schema, /authSessions/);
   assert.match(schema, /backgroundJobs/);

tests/task-center-stage.test.mjs

@@ -0,0 +1,57 @@
+import { strict as assert } from "node:assert";
+import { readFileSync } from "node:fs";
+import test from "node:test";
+
+const adminApp = readFileSync(new URL("../app/admin-app.tsx", import.meta.url), "utf8");
+const adminCss = readFileSync(new URL("../app/globals.css", import.meta.url), "utf8");
+
+test("任务卡单一入口：发布/回收面板整块可点，全卡只有一个「查看明细」", () => {
+  const start = adminApp.indexOf("function TaskRowCard");
+  const end = adminApp.indexOf("function TasksPage");
+  const body = adminApp.slice(start, end);
+  // 两块阶段面板都可整块点击进入任务明细
+  assert.match(body, /className="master-panel publish clickable"/);
+  assert.match(body, /className="master-panel recovery clickable"/);
+  // 回收面板不再有独立的「查看明细」按钮：全卡仅一处
+  assert.equal(body.match(/查看明细/g)?.length, 1);
+  // 未开通回收的面板保持不可点、保留开通入口
+  assert.match(body, /className="master-panel ghost"/);
+  assert.match(body, /开通回收 ›/);
+});
+
+test("详情页自述身份：动态 label 说明任务阶段构成", () => {
+  assert.match(adminApp, /任务详情 · 分发与回收一体/);
+  assert.match(adminApp, /任务详情 · 仅分发/);
+  // 头部阶段徽章：含回收（带截止日或同日说明）/ 未开通回收
+  assert.match(adminApp, /未开通回收"\s*: task\.recovery_due_at/);
+  assert.match(adminApp, /含回收 · 回收截止 \$\{formatDate\(task\.recovery_due_at\)\}/);
+  assert.match(adminApp, /含回收 · 与发布同日截止/);
+});
+
+test("单一列表按阶段筛选：不拆两套列表，用筛选 chips 过滤生命周期阶段", () => {
+  const start = adminApp.indexOf("function TaskDistributionDetail");
+  const end = adminApp.indexOf("\nfunction ", start + 20);
+  const body = adminApp.slice(start, end);
+  assert.match(body, /const \[stageFilter, setStageFilter\] = useState<StageFilterKey>\("all"\);/);
+  assert.match(body, /key: "pending_publish",\s*\n\s*label: "待发布"/);
+  assert.match(body, /label: "已发布待数据"/);
+  assert.match(body, /label: "待收截图"/);
+  // 待收截图仅在开通回收的任务出现
+  assert.match(body, /\.\.\.\(recoveryEnabled\s*\?\s*\[\{/);
+  // 表格使用过滤后的列表；筛选落空时给出专用空态文案
+  assert.match(body, /distributions=\{visibleDistributions\}/);
+  assert.match(body, /当前筛选下没有分发记录/);
+  assert.match(body, /stage-filter-tabs/);
+});
+
+test("阶段面板与筛选 chips 的样式", () => {
+  assert.match(adminCss, /^\.master-panel\.clickable \{/m);
+  assert.match(adminCss, /^\.master-panel\.clickable:hover \{/m);
+  assert.match(adminCss, /^\.stage-filter-tabs \{/m);
+  assert.match(adminCss, /^\.stage-filter-tabs button\.active \{/m);
+});
+
+test("数据回收页入口不再使用「数据回收任务」的说法", () => {
+  assert.match(adminApp, /选择一个任务进入回收队列/);
+  assert.doesNotMatch(adminApp, /选择一个数据回收任务/);
+});

tests/task-customer-chat-service.test.mjs

@@ -0,0 +1,210 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import {
+  bindTaskCustomerChat,
+  unbindTaskCustomerChat,
+} from "../lib/task-customer-chat-service.ts";
+import { resolveWecomConfig } from "../lib/wecom-client.ts";
+
+const baseBindings = {
+  WECOM_CORP_ID: "corp-test",
+  WECOM_AGENT_ID: "1000001",
+  WECOM_SECRET: "secret-test",
+};
+
+function fakeWecom(options = {}) {
+  const calls = [];
+  const fetchImpl = async (input, init = {}) => {
+    const url = new URL(String(input));
+    calls.push({ url, init });
+    if (url.pathname.endsWith("/cgi-bin/gettoken")) {
+      return Response.json({
+        errcode: 0,
+        errmsg: "ok",
+        access_token: "token-test",
+        expires_in: 7200,
+      });
+    }
+    if (url.pathname.endsWith("/cgi-bin/externalcontact/groupchat/add_join_way")) {
+      if (options.addErrcode) {
+        return Response.json({ errcode: options.addErrcode, errmsg: "add failed" });
+      }
+      return Response.json({ errcode: 0, errmsg: "ok", config_id: options.configId ?? "cfg-new" });
+    }
+    if (url.pathname.endsWith("/cgi-bin/externalcontact/groupchat/update_join_way")) {
+      if (options.updateErrcode) {
+        return Response.json({ errcode: options.updateErrcode, errmsg: "update failed" });
+      }
+      return Response.json({ errcode: 0, errmsg: "ok" });
+    }
+    if (url.pathname.endsWith("/cgi-bin/externalcontact/groupchat/get_join_way")) {
+      if (options.getErrcode) {
+        return Response.json({ errcode: options.getErrcode, errmsg: "get failed" });
+      }
+      return Response.json({
+        errcode: 0,
+        errmsg: "ok",
+        join_way: { qr_code: options.qrCode ?? "https://p.qpic.cn/qr-live.png" },
+      });
+    }
+    if (url.pathname.endsWith("/cgi-bin/externalcontact/groupchat/del_join_way")) {
+      if (options.delErrcode) {
+        return Response.json({ errcode: options.delErrcode, errmsg: "del failed" });
+      }
+      return Response.json({ errcode: 0, errmsg: "ok" });
+    }
+    return new Response("not found", { status: 404 });
+  };
+  return { calls, fetchImpl };
+}
+
+function captureDb(taskRow) {
+  const captured = [];
+  const makeStatement = (sql, values) => ({
+    async first() {
+      captured.push({ sql, values });
+      if (/FROM tasks WHERE id = \?/.test(sql)) return taskRow ?? null;
+      return null;
+    },
+    async run() {
+      captured.push({ sql, values });
+      return { changes: 1 };
+    },
+  });
+  const db = {
+    prepare(sql) {
+      const unbound = makeStatement(sql, []);
+      return {
+        bind(...values) {
+          return makeStatement(sql, values);
+        },
+        first: unbound.first,
+        run: unbound.run,
+      };
+    },
+  };
+  return { db, captured };
+}
+
+function callsTo(calls, suffix) {
+  return calls.filter((c) => c.url.pathname.endsWith(suffix));
+}
+
+test("bindTaskCustomerChat creates join way when task has no config", async () => {
+  const { db, captured } = captureDb({
+    id: "task-1",
+    name: "美团探店任务",
+    join_config_id: null,
+  });
+  const { calls, fetchImpl } = fakeWecom();
+  const result = await bindTaskCustomerChat(
+    db,
+    { taskId: "task-1", chatId: "wr-normal-1", chatName: "KOC 一群" },
+    resolveWecomConfig(baseBindings),
+    fetchImpl,
+  );
+  assert.equal(callsTo(calls, "/cgi-bin/externalcontact/groupchat/add_join_way").length, 1);
+  assert.equal(callsTo(calls, "/cgi-bin/externalcontact/groupchat/update_join_way").length, 0);
+  const addBody = JSON.parse(String(callsTo(calls, "/add_join_way")[0].init.body));
+  assert.deepEqual(addBody.chat_id_list, ["wr-normal-1"]);
+  assert.equal(addBody.room_base_name, "美团探店任务");
+  assert.equal(addBody.state, "task-task-1");
+  assert.equal(result.joinConfigId, "cfg-new");
+  assert.equal(result.joinQrCode, "https://p.qpic.cn/qr-live.png");
+  assert.equal(result.qrError, undefined);
+  const update = captured.find((c) => /UPDATE tasks/.test(c.sql));
+  assert.ok(update, "tasks row updated");
+  assert.match(update.sql, /customer_chat_id = \?/);
+  assert.deepEqual(update.values, ["wr-normal-1", "KOC 一群", "cfg-new", "https://p.qpic.cn/qr-live.png", "task-1"]);
+});
+
+test("bindTaskCustomerChat reuses update_join_way on rebind and falls back to add", async () => {
+  const { db } = captureDb({ id: "task-1", name: "任务", join_config_id: "cfg-old" });
+  const { calls, fetchImpl } = fakeWecom();
+  const result = await bindTaskCustomerChat(
+    db,
+    { taskId: "task-1", chatId: "wr-normal-2", chatName: "KOC 二群" },
+    resolveWecomConfig(baseBindings),
+    fetchImpl,
+  );
+  assert.equal(callsTo(calls, "/cgi-bin/externalcontact/groupchat/update_join_way").length, 1);
+  assert.equal(callsTo(calls, "/cgi-bin/externalcontact/groupchat/add_join_way").length, 0);
+  assert.equal(result.joinConfigId, "cfg-old", "config id preserved so qr stays valid");
+
+  const { db: db2 } = captureDb({ id: "task-1", name: "任务", join_config_id: "cfg-old" });
+  const { calls: calls2, fetchImpl: fetch2 } = fakeWecom({
+    updateErrcode: 40068,
+    configId: "cfg-rebuilt",
+  });
+  const result2 = await bindTaskCustomerChat(
+    db2,
+    { taskId: "task-1", chatId: "wr-normal-2", chatName: "KOC 二群" },
+    resolveWecomConfig(baseBindings),
+    fetch2,
+  );
+  assert.equal(callsTo(calls2, "/cgi-bin/externalcontact/groupchat/update_join_way").length, 1);
+  assert.equal(callsTo(calls2, "/cgi-bin/externalcontact/groupchat/add_join_way").length, 1);
+  assert.equal(result2.joinConfigId, "cfg-rebuilt");
+});
+
+test("bindTaskCustomerChat tolerates qr fetch failure and records qrError", async () => {
+  const { db } = captureDb({ id: "task-1", name: "任务", join_config_id: null });
+  const { fetchImpl } = fakeWecom({ getErrcode: 40068 });
+  const result = await bindTaskCustomerChat(
+    db,
+    { taskId: "task-1", chatId: "wr-normal-1", chatName: "KOC 一群" },
+    resolveWecomConfig(baseBindings),
+    fetchImpl,
+  );
+  assert.equal(result.joinQrCode, "");
+  assert.match(result.qrError, /活码二维码获取失败/);
+});
+
+test("bindTaskCustomerChat validates missing task / chat", async () => {
+  const { db: missingTask } = captureDb(null);
+  await assert.rejects(
+    () =>
+      bindTaskCustomerChat(
+        missingTask,
+        { taskId: "task-x", chatId: "wr-1", chatName: "群" },
+        resolveWecomConfig(baseBindings),
+        fakeWecom().fetchImpl,
+      ),
+    /任务不存在/,
+  );
+  const { db } = captureDb({ id: "task-1", name: "任务", join_config_id: null });
+  await assert.rejects(
+    () =>
+      bindTaskCustomerChat(
+        db,
+        { taskId: "task-1", chatId: "", chatName: "" },
+        resolveWecomConfig(baseBindings),
+        fakeWecom().fetchImpl,
+      ),
+    /请选择要绑定的客户群/,
+  );
+});
+
+test("unbindTaskCustomerChat deletes join way (tolerating failure) and clears columns", async () => {
+  const { db, captured } = captureDb({ id: "task-1", join_config_id: "cfg-old" });
+  const { calls, fetchImpl } = fakeWecom();
+  await unbindTaskCustomerChat(db, "task-1", resolveWecomConfig(baseBindings), fetchImpl);
+  assert.equal(callsTo(calls, "/cgi-bin/externalcontact/groupchat/del_join_way").length, 1);
+  const update = captured.find((c) => /UPDATE tasks/.test(c.sql));
+  assert.ok(update);
+  assert.match(update.sql, /customer_chat_id = ''/);
+
+  const { db: db2, captured: captured2 } = captureDb({ id: "task-1", join_config_id: "cfg-old" });
+  const { fetchImpl: fetch2 } = fakeWecom({ delErrcode: 40068 });
+  await unbindTaskCustomerChat(db2, "task-1", resolveWecomConfig(baseBindings), fetch2);
+  assert.ok(
+    captured2.some((c) => /UPDATE tasks/.test(c.sql)),
+    "local columns still cleared when del_join_way fails",
+  );
+
+  const { db: db3, captured: captured3 } = captureDb({ id: "task-1", join_config_id: "" });
+  const { calls: calls3, fetchImpl: fetch3 } = fakeWecom();
+  await unbindTaskCustomerChat(db3, "task-1", resolveWecomConfig(baseBindings), fetch3);
+  assert.equal(calls3.length, 0, "no wecom calls when nothing bound");
+  assert.ok(captured3.some((c) => /UPDATE tasks/.test(c.sql)));
+});

tests/task-group-service.test.mjs

@@ -1,6 +1,7 @@
 import assert from "node:assert/strict";
 import test from "node:test";
 import {
+  assignTaskOwner,
   ensureTaskChatForMembers,
   sendTaskChatMessage,
   taskChatId,
@@ -26,9 +27,10 @@ function fakeWecom(options = {}) {
   const calls = [];
   const chats = new Map(
     options.chats ?? [
-      ["tgc_task-existing", { name: "【任务】已有群", userlist: ["owner-a"] }],
+      ["tgctaskexisting", { name: "【任务】已有群", userlist: ["owner-a"] }],
     ],
   );
+  const failGet = options.failGet ?? false;
   const fetchImpl = async (input, init = {}) => {
     const url = new URL(String(input));
     calls.push({ url, init });
@@ -57,6 +59,9 @@ function fakeWecom(options = {}) {
       return Response.json({ errcode: 0, errmsg: "ok" });
     }
     if (url.pathname.endsWith("/cgi-bin/appchat/get")) {
+      if (failGet) {
+        return Response.json({ errcode: 86001, errmsg: "chatid invalid" });
+      }
       const body = JSON.parse(String(init.body ?? "{}"));
       const chat = chats.get(body.chatid);
       if (!chat) {
@@ -118,7 +123,8 @@ function fakeDb({ task }) {
 test("taskChatId derives a deterministic chatid within 32 chars", () => {
   const taskId = "task-1a2b3c4d";
   const chatid = taskChatId(taskId);
-  assert.equal(chatid, `tgc_${taskId}`);
+  assert.equal(chatid, "tgctask1a2b3c4d");
+  assert.ok(!/-/.test(chatid), "hyphens rejected by wecom chatid rules");
   assert.ok(chatid.length <= 32);
 });
 
@@ -129,7 +135,8 @@ test("ensureTaskChatForMembers skips when project has no owner", async () => {
       id: "task-1",
       name: "任务一",
       task_chat_id: null,
-      owner_userid: null,
+      task_owner_userid: null,
+      project_owner_userid: null,
     },
   });
   const result = await ensureTaskChatForMembers(
@@ -150,7 +157,8 @@ test("ensureTaskChatForMembers skips creation when fewer than 2 members", async
       id: "task-1",
       name: "任务一",
       task_chat_id: null,
-      owner_userid: "owner-a",
+      task_owner_userid: "owner-a",
+      project_owner_userid: null,
     },
   });
   const result = await ensureTaskChatForMembers(
@@ -175,7 +183,8 @@ test("ensureTaskChatForMembers creates the chat lazily and stores chat id", asyn
       id: "task-1a2b3c4d",
       name: "任务一",
       task_chat_id: null,
-      owner_userid: "owner-a",
+      task_owner_userid: "owner-a",
+      project_owner_userid: null,
     },
   });
   const result = await ensureTaskChatForMembers(
@@ -184,7 +193,7 @@ test("ensureTaskChatForMembers creates the chat lazily and stores chat id", asyn
     resolveWecomConfig(baseBindings),
     wecom.fetchImpl,
   );
-  assert.equal(result.chatId, "tgc_task-1a2b3c4d");
+  assert.equal(result.chatId, "tgctask1a2b3c4d");
   assert.equal(result.created, true);
   const createBody = JSON.parse(
     String(
@@ -197,20 +206,48 @@ test("ensureTaskChatForMembers creates the chat lazily and stores chat id", asyn
     statements.some(
       (statement) =>
         /UPDATE tasks SET task_chat_id/.test(statement.sql) &&
-        statement.values[0] === "tgc_task-1a2b3c4d",
+        statement.values[0] === "tgctask1a2b3c4d",
     ),
     "chat id persisted to tasks",
   );
 });
 
+test("ensureTaskChatForMembers dedupes project owner, task owner and claimants", async () => {
+  const wecom = fakeWecom({ chats: [] });
+  const { db } = fakeDb({
+    task: {
+      id: "task-1",
+      name: "任务一",
+      task_chat_id: null,
+      task_owner_userid: "owner-a",
+      project_owner_userid: "owner-a",
+    },
+  });
+  const result = await ensureTaskChatForMembers(
+    db,
+    { taskId: "task-1", addUserids: ["owner-a", "zhangsan"] },
+    resolveWecomConfig(baseBindings),
+    wecom.fetchImpl,
+  );
+  assert.equal(result.chatId, "tgctask1");
+  const createBody = JSON.parse(
+    String(
+      wecom.calls.find((c) => c.url.pathname.endsWith("/cgi-bin/appchat/create"))
+        .init.body,
+    ),
+  );
+  assert.deepEqual(createBody.userlist.sort(), ["owner-a", "zhangsan"]);
+});
+
 test("ensureTaskChatForMembers reuses stored chat and diffs members", async () => {
   const wecom = fakeWecom();
   const { db, statements } = fakeDb({
     task: {
       id: "task-existing",
       name: "已有任务",
-      task_chat_id: "tgc_task-existing",
-      owner_userid: "owner-a",
+      task_chat_id: "tgctaskexisting",
+      task_owner_userid: "owner-a",
+      project_owner_userid: null,
     },
   });
   const result = await ensureTaskChatForMembers(
@@ -219,7 +256,7 @@ test("ensureTaskChatForMembers reuses stored chat and diffs members", async () =
     resolveWecomConfig(baseBindings),
     wecom.fetchImpl,
   );
-  assert.equal(result.chatId, "tgc_task-existing");
+  assert.equal(result.chatId, "tgctaskexisting");
   assert.equal(result.created, false);
   assert.equal(
     statements.filter((s) => /UPDATE tasks/.test(s.sql)).length,
@@ -235,14 +272,19 @@ test("ensureTaskChatForMembers reuses stored chat and diffs members", async () =
   assert.deepEqual(updateBody.add_user_list, ["zhangsan"]);
 });
 
-test("ensureTaskChatForMembers recovers when chat exists remotely but not in db", async () => {
-  const wecom = fakeWecom();
-  const { db, statements } = fakeDb({
+test("ensureTaskChatForMembers syncs add-only when get is unavailable", async () => {
+  // 可见范围非根部门时 appchat/get 拿不到群成员，降级为全量只增同步
+  const wecom = fakeWecom({
+    failGet: true,
+    chats: [["tgctaskexisting", { name: "【任务】已有群", userlist: ["owner-a"] }]],
+  });
+  const { db } = fakeDb({
     task: {
       id: "task-existing",
       name: "已有任务",
-      task_chat_id: null,
-      owner_userid: "owner-a",
+      task_chat_id: "tgctaskexisting",
+      task_owner_userid: "owner-a",
+      project_owner_userid: null,
     },
   });
   const result = await ensureTaskChatForMembers(
@@ -251,7 +293,35 @@ test("ensureTaskChatForMembers recovers when chat exists remotely but not in db"
     resolveWecomConfig(baseBindings),
     wecom.fetchImpl,
   );
-  assert.equal(result.chatId, "tgc_task-existing");
+  assert.equal(result.chatId, "tgctaskexisting");
+  const updateBody = JSON.parse(
+    String(
+      wecom.calls.find((c) => c.url.pathname.endsWith("/cgi-bin/appchat/update"))
+        .init.body,
+    ),
+  );
+  assert.deepEqual(updateBody.add_user_list.sort(), ["owner-a", "zhangsan"]);
+  assert.equal(updateBody.del_user_list, undefined, "add-only fallback");
+});
+
+test("ensureTaskChatForMembers recovers when chat exists remotely but not in db", async () => {
+  const wecom = fakeWecom();
+  const { db, statements } = fakeDb({
+    task: {
+      id: "task-existing",
+      name: "已有任务",
+      task_chat_id: null,
+      task_owner_userid: "owner-a",
+      project_owner_userid: null,
+    },
+  });
+  const result = await ensureTaskChatForMembers(
+    db,
+    { taskId: "task-existing", addUserids: ["zhangsan"] },
+    resolveWecomConfig(baseBindings),
+    wecom.fetchImpl,
+  );
+  assert.equal(result.chatId, "tgctaskexisting");
   assert.equal(result.created, false);
   assert.ok(statements.some((s) => /UPDATE tasks SET task_chat_id/.test(s.sql)));
 });
@@ -263,7 +333,8 @@ test("ensureTaskChatForMembers skips without app credentials", async () => {
       id: "task-1",
       name: "任务一",
       task_chat_id: null,
-      owner_userid: "owner-a",
+      task_owner_userid: "owner-a",
+      project_owner_userid: null,
     },
   });
   const result = await ensureTaskChatForMembers(
@@ -295,7 +366,7 @@ test("sendTaskChatMessage no-ops without chat id and swallows errors", async ()
 
   const failing = fakeWecom({ chats: [] });
   const withChat = fakeDb({
-    task: { id: "task-existing", task_chat_id: "tgc_task-existing" },
+    task: { id: "task-existing", task_chat_id: "tgctaskexisting" },
   });
   assert.equal(
     await sendTaskChatMessage(
@@ -313,7 +384,7 @@ test("sendTaskChatMessage no-ops without chat id and swallows errors", async ()
 test("sendTaskChatMessage sends text into the task chat", async () => {
   const wecom = fakeWecom();
   const { db } = fakeDb({
-    task: { id: "task-existing", task_chat_id: "tgc_task-existing" },
+    task: { id: "task-existing", task_chat_id: "tgctaskexisting" },
   });
   assert.equal(
     await sendTaskChatMessage(
@@ -331,7 +402,7 @@ test("sendTaskChatMessage sends text into the task chat", async () => {
         .init.body,
     ),
   );
-  assert.equal(sendBody.chatid, "tgc_task-existing");
+  assert.equal(sendBody.chatid, "tgctaskexisting");
   assert.equal(sendBody.text.content, "【领取】张三 认领 5 份");
 });
 
@@ -350,3 +421,219 @@ test("broadcast and intro text builders format messages", () => {
   assert.match(intro, /品牌：品牌A/);
   assert.match(intro, /截止：2026-09-30/);
 });
+
+function assignDb({ task, project, partners = [] }) {
+  const store = {
+    task: { ...task },
+    project: project ? { ...project } : null,
+    partners: partners.map((item) => ({ ...item })),
+  };
+  const statements = [];
+  const db = {
+    prepare(sql) {
+      return {
+        bind(...values) {
+          return {
+            async first() {
+              statements.push({ sql, values });
+              if (/FROM tasks t\s+LEFT JOIN projects p/.test(sql)) {
+                return {
+                  id: store.task.id,
+                  name: store.task.name,
+                  task_chat_id: store.task.task_chat_id ?? null,
+                  task_owner_userid: store.task.owner_userid ?? null,
+                  project_owner_userid: store.project?.owner_userid ?? null,
+                };
+              }
+              if (/SELECT task_chat_id FROM tasks/.test(sql)) {
+                return { task_chat_id: store.task.task_chat_id ?? null };
+              }
+              if (/SELECT id, name, brand, quantity, due_at, project_id FROM tasks/.test(sql)) {
+                return { ...store.task };
+              }
+              if (/SELECT main_group_member_ids, owner_userid FROM projects/.test(sql)) {
+                return store.project
+                  ? {
+                      main_group_member_ids: store.project.main_group_member_ids,
+                      owner_userid: store.project.owner_userid ?? "",
+                    }
+                  : null;
+              }
+              if (/SELECT id, name, main_group_member_ids, owner_userid, main_chat_id FROM projects/.test(sql)) {
+                return store.project
+                  ? {
+                      id: store.project.id,
+                      name: store.project.name,
+                      main_group_member_ids: store.project.main_group_member_ids,
+                      owner_userid: store.project.owner_userid ?? "",
+                      main_chat_id: store.project.main_chat_id ?? "",
+                    }
+                  : null;
+              }
+              if (/partner_type = 'group_owner' AND wecom_userid = \?/.test(sql)) {
+                return (
+                  store.partners.find(
+                    (item) =>
+                      item.partner_type === "group_owner" &&
+                      item.wecom_userid === values[0],
+                  ) ?? null
+                );
+              }
+              if (/FROM partners WHERE id = \?/.test(sql)) {
+                return store.partners.find((item) => item.id === values[0]) ?? null;
+              }
+              return null;
+            },
+            async run() {
+              statements.push({ sql, values });
+              if (/UPDATE tasks SET owner_userid/.test(sql)) {
+                store.task.owner_userid = values[0];
+              } else if (/UPDATE tasks SET task_chat_id/.test(sql)) {
+                store.task.task_chat_id = values[0];
+              } else if (/UPDATE projects SET main_group_member_ids/.test(sql)) {
+                if (store.project) store.project.main_group_member_ids = values[0];
+              } else if (/UPDATE projects SET main_chat_id/.test(sql)) {
+                if (store.project) store.project.main_chat_id = values[0];
+              } else if (/INSERT INTO partners/.test(sql)) {
+                store.partners.push({
+                  id: values[0],
+                  name: values[1],
+                  wecom_userid: values[2],
+                  partner_type: "group_owner",
+                });
+              }
+              return { meta: { changes: 1, last_row_id: 0 } };
+            },
+            async all() {
+              statements.push({ sql, values });
+              return { results: [] };
+            },
+          };
+        },
+      };
+    },
+  };
+  return { db, statements, store };
+}
+
+test("assignTaskOwner provisions partner, main chat and task chat with intro", async () => {
+  const wecom = fakeWecom({ chats: [] });
+  const { db, statements, store } = assignDb({
+    task: {
+      id: "task-1",
+      name: "任务一",
+      brand: "品牌A",
+      quantity: 10,
+      due_at: "2026-09-30",
+      project_id: "proj-1",
+      owner_userid: "",
+      task_chat_id: null,
+    },
+    project: {
+      id: "proj-1",
+      name: "项目一",
+      owner_userid: "proj-owner",
+      main_group_member_ids: JSON.stringify(["proj-owner", "u1", "u2"]),
+      main_chat_id: "",
+    },
+  });
+  const result = await assignTaskOwner(
+    db,
+    { taskId: "task-1", ownerUserid: "owner-a" },
+    resolveWecomConfig(baseBindings),
+    wecom.fetchImpl,
+  );
+  assert.equal(result.ownerUserid, "owner-a");
+  assert.equal(result.chatCreated, true);
+  assert.equal(result.chatId, "tgctask1");
+  assert.match(result.partnerId, /^partner-go-/);
+  assert.equal(store.task.owner_userid, "owner-a");
+  assert.deepEqual(
+    JSON.parse(store.project.main_group_member_ids).sort(),
+    ["proj-owner", "u1", "u2", "owner-a"].sort(),
+    "task owner merged into main group members",
+  );
+  assert.equal(store.project.main_chat_id, "pgcproj1", "main chat created lazily");
+  assert.ok(wecom.chats.has("pgcproj1"));
+  assert.ok(wecom.chats.has("tgctask1"));
+  const sendBodies = wecom.calls
+    .filter((c) => c.url.pathname.endsWith("/cgi-bin/appchat/send"))
+    .map((c) => JSON.parse(String(c.init.body)));
+  assert.equal(sendBodies.length, 1, "intro message sent once to task chat");
+  assert.equal(sendBodies[0].chatid, "tgctask1");
+  assert.match(sendBodies[0].text.content, /【新任务】任务一/);
+  assert.ok(
+    statements.some((s) => /INSERT INTO partners/.test(s.sql)),
+    "partner insert recorded",
+  );
+});
+
+test("assignTaskOwner reuses the existing group_owner partner", async () => {
+  const wecom = fakeWecom({ chats: [] });
+  const { db, statements, store } = assignDb({
+    task: {
+      id: "task-1",
+      name: "任务一",
+      brand: "品牌A",
+      quantity: 10,
+      due_at: "2026-09-30",
+      project_id: "",
+      owner_userid: "",
+      task_chat_id: null,
+    },
+    partners: [
+      { id: "partner-go-existing", name: "老负责人", wecom_userid: "owner-a", partner_type: "group_owner" },
+    ],
+  });
+  const result = await assignTaskOwner(
+    db,
+    { taskId: "task-1", ownerUserid: "owner-a" },
+    resolveWecomConfig(baseBindings),
+    wecom.fetchImpl,
+  );
+  assert.equal(result.partnerId, "partner-go-existing");
+  assert.equal(
+    statements.filter((s) => /INSERT INTO partners/.test(s.sql)).length,
+    0,
+    "no duplicate partner insert",
+  );
+  assert.equal(store.partners.length, 1);
+});
+
+test("assignTaskOwner collects wecom failure as warning instead of throwing", async () => {
+  const fetchImpl = async (input) => {
+    const url = new URL(String(input));
+    if (url.pathname.endsWith("/cgi-bin/gettoken")) {
+      return Response.json({ errcode: 0, errmsg: "ok", access_token: "t", expires_in: 7200 });
+    }
+    return Response.json({ errcode: 60111, errmsg: "chat not found" });
+  };
+  const { db, store } = assignDb({
+    task: {
+      id: "task-1",
+      name: "任务一",
+      brand: "品牌A",
+      quantity: 10,
+      due_at: "2026-09-30",
+      project_id: "proj-1",
+      owner_userid: "",
+      task_chat_id: null,
+    },
+    project: {
+      id: "proj-1",
+      name: "项目一",
+      owner_userid: "proj-owner",
+      main_group_member_ids: JSON.stringify(["u1", "u2"]),
+      main_chat_id: "",
+    },
+  });
+  const result = await assignTaskOwner(
+    db,
+    { taskId: "task-1", ownerUserid: "owner-a" },
+    resolveWecomConfig(baseBindings),
+    fetchImpl,
+  );
+  assert.equal(result.ownerUserid, "owner-a");
+  assert.ok(result.warning, "wecom failure surfaced as warning");
+  assert.equal(store.task.owner_userid, "owner-a", "owner still persisted");
+});

tests/task-one-click-push.test.mjs

@@ -1,250 +0,0 @@
-import assert from "node:assert/strict";
-import test from "node:test";
-import {
-  buildKocDirectMessage,
-  oneClickPushTask,
-  OneClickPushError,
-} from "../lib/task-one-click-push-service.ts";
-import {
-  clearWecomAccessTokenCacheForTests,
-  resolveWecomConfig,
-} from "../lib/wecom-client.ts";
-
-const baseBindings = {
-  WECOM_CORP_ID: "corp-test",
-  WECOM_AGENT_ID: "1000001",
-  WECOM_SECRET: "secret-test",
-};
-
-const taskRow = {
-  id: "task-1",
-  name: "测试任务",
-  brand: "品牌A",
-  quantity: 3,
-  due_at: "2026-09-05",
-  task_type: "content_publish",
-  platform: "小红书",
-  content_format: "image_text",
-  share_token: "tok-123",
-  project_id: "",
-};
-
-const boundPartners = [
-  { id: "p-1", name: "合作方甲", wecom_external_user_id: "wmOK1" },
-  { id: "p-2", name: "合作方乙", wecom_external_user_id: "wmOK2" },
-  { id: "p-3", name: "合作方丙", wecom_external_user_id: "wmFAIL" },
-];
-
-function fakePushDb({
-  task = taskRow,
-  partners = boundPartners,
-  todayLog = null,
-} = {}) {
-  const executed = [];
-  const makeStatement = (sql, params = []) => ({
-    sql,
-    params,
-    bind(...args) {
-      return makeStatement(sql, args);
-    },
-    async run() {
-      executed.push({ sql, params });
-      return { meta: { changes: 1 } };
-    },
-    async first() {
-      executed.push({ sql, params });
-      if (/FROM tasks WHERE id = \?/.test(sql)) return task;
-      if (/FROM wecom_push_logs/.test(sql) && /DATE\(created_at\) = CURDATE\(\)/.test(sql)) {
-        return todayLog;
-      }
-      return null;
-    },
-    async all() {
-      executed.push({ sql, params });
-      if (/FROM partners/.test(sql) && /wecom_external_user_id/.test(sql)) {
-        return { results: partners };
-      }
-      return { results: [] };
-    },
-  });
-  return {
-    executed,
-    prepare(sql) {
-      return makeStatement(sql);
-    },
-  };
-}
-
-function fakeWecomFetch(calls, { invalidUsers = [] } = {}) {
-  return async (input, init = {}) => {
-    const url = new URL(String(input));
-    calls.push({ url, init });
-    if (url.pathname.endsWith("/cgi-bin/gettoken")) {
-      return Response.json({
-        errcode: 0,
-        errmsg: "ok",
-        access_token: "token-test",
-        expires_in: 7200,
-      });
-    }
-    if (url.pathname.endsWith("/cgi-bin/message/send")) {
-      const body = JSON.parse(String(init.body));
-      if (invalidUsers.includes(body.touser)) {
-        return Response.json({
-          errcode: 0,
-          errmsg: "ok",
-          invaliduser: body.touser,
-        });
-      }
-      return Response.json({ errcode: 0, errmsg: "ok" });
-    }
-    return new Response("not found", { status: 404 });
-  };
-}
-
-test.beforeEach(() => {
-  clearWecomAccessTokenCacheForTests();
-});
-
-test("buildKocDirectMessage targets KOC with claim url and OAuth hint", () => {
-  const message = buildKocDirectMessage(taskRow, "https://portal.example.com/");
-  assert.match(message, /【新任务】测试任务/);
-  assert.match(message, /先到先得/);
-  assert.match(message, /免输身份/);
-  assert.match(message, /https:\/\/portal\.example\.com\/\?task=tok-123/);
-});
-
-test("oneClickPushTask sends only to selected partners and logs the push", async () => {
-  process.env.KOC_PORTAL_URL = "https://portal.example.com";
-  try {
-    const db = fakePushDb();
-    const calls = [];
-    const outcome = await oneClickPushTask(
-      db,
-      {
-        taskId: "task-1",
-        sendMainGroup: false,
-        sendKoc: true,
-        createGroupTemplate: false,
-        selectedKocPartnerIds: ["p-1", "p-3"],
-      },
-      resolveWecomConfig(baseBindings),
-      fakeWecomFetch(calls, { invalidUsers: ["wmFAIL"] }),
-    );
-    const appCalls = calls.filter((call) =>
-      call.url.pathname.endsWith("/cgi-bin/message/send"),
-    );
-    assert.deepEqual(
-      appCalls.map((call) => JSON.parse(String(call.init.body)).touser),
-      ["wmOK1", "wmFAIL"],
-    );
-    for (const call of appCalls) {
-      assert.match(JSON.parse(String(call.init.body)).text.content, /【新任务】测试任务/);
-    }
-    assert.equal(outcome.kocSent, 1);
-    assert.equal(outcome.kocFailed, 1);
-    assert.equal(outcome.kocResults[1].partnerName, "合作方丙");
-    assert.match(outcome.kocResults[1].error, /invaliduser/);
-    assert.equal(outcome.linkUrl, "https://portal.example.com/?task=tok-123");
-
-    const insert = db.executed.find((item) => /INSERT INTO wecom_push_logs/.test(item.sql));
-    assert.ok(insert, "push log should be written");
-    assert.equal(insert.params[1], "task-1");
-    assert.equal(insert.params[3], "task_open");
-    assert.equal(insert.params[6], 1);
-    const kocUserids = JSON.parse(insert.params[5]);
-    assert.equal(kocUserids.length, 2);
-    assert.equal(kocUserids[0].externalUserId, "wmOK1");
-  } finally {
-    delete process.env.KOC_PORTAL_URL;
-  }
-});
-
-test("oneClickPushTask blocks duplicate same-day push unless forced", async () => {
-  process.env.KOC_PORTAL_URL = "https://portal.example.com";
-  try {
-    const db = fakePushDb({
-      todayLog: { id: "wpl-old", task_id: "task-1", push_kind: "task_open" },
-    });
-    const calls = [];
-    await assert.rejects(
-      () =>
-        oneClickPushTask(
-          db,
-          { taskId: "task-1", sendMainGroup: false, sendKoc: true },
-          resolveWecomConfig(baseBindings),
-          fakeWecomFetch(calls),
-        ),
-      (error) =>
-        error instanceof OneClickPushError && /仍要推送/.test(error.message) && error.status === 409,
-    );
-    assert.equal(calls.length, 0, "no wecom api calls on duplicate block");
-
-    const outcome = await oneClickPushTask(
-      db,
-      {
-        taskId: "task-1",
-        sendMainGroup: false,
-        sendKoc: true,
-        selectedKocPartnerIds: ["p-2"],
-        force: true,
-      },
-      resolveWecomConfig(baseBindings),
-      fakeWecomFetch(calls),
-    );
-    assert.equal(outcome.kocSent, 1);
-  } finally {
-    delete process.env.KOC_PORTAL_URL;
-  }
-});
-
-test("oneClickPushTask without project skips project targets and still reaches KOC", async () => {
-  process.env.KOC_PORTAL_URL = "https://portal.example.com";
-  try {
-    const db = fakePushDb({ task: { ...taskRow, project_id: "" } });
-    const calls = [];
-    const outcome = await oneClickPushTask(
-      db,
-      { taskId: "task-1", sendMainGroup: true, sendKoc: true },
-      resolveWecomConfig(baseBindings),
-      fakeWecomFetch(calls),
-    );
-    assert.ok(
-      outcome.skippedReasons.some((reason) => /未挂项目/.test(reason)),
-      "should explain project skip",
-    );
-    assert.equal(outcome.projectOutcome, null);
-    assert.equal(outcome.kocSent, 3);
-    assert.equal(
-      calls.filter((call) => call.url.pathname.includes("/cgi-bin/externalcontact/")).length,
-      0,
-      "no group template calls expected",
-    );
-  } finally {
-    delete process.env.KOC_PORTAL_URL;
-  }
-});
-
-test("oneClickPushTask requires share token and at least one target", async () => {
-  await assert.rejects(
-    () =>
-      oneClickPushTask(
-        fakePushDb({ task: { ...taskRow, share_token: "" } }),
-        { taskId: "task-1", sendMainGroup: false, sendKoc: true },
-        resolveWecomConfig(baseBindings),
-        fakeWecomFetch([]),
-      ),
-    (error) => error instanceof OneClickPushError && /领取链接/.test(error.message),
-  );
-
-  await assert.rejects(
-    () =>
-      oneClickPushTask(
-        fakePushDb(),
-        { taskId: "task-1", sendMainGroup: false, sendKoc: false, createGroupTemplate: false },
-        resolveWecomConfig(baseBindings),
-        fakeWecomFetch([]),
-      ),
-    (error) => error instanceof OneClickPushError && /至少选择一个推送目标/.test(error.message),
-  );
-});

tests/task-pairing.test.mjs

@@ -0,0 +1,95 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { readFileSync } from "node:fs";
+
+const adminApp = readFileSync(
+  new URL("../app/admin-app.tsx", import.meta.url),
+  "utf8",
+);
+const adminCss = readFileSync(
+  new URL("../app/globals.css", import.meta.url),
+  "utf8",
+);
+const actionRoute = readFileSync(
+  new URL("../app/api/action/route.ts", import.meta.url),
+  "utf8",
+);
+const taskService = readFileSync(
+  new URL("../lib/task-service.ts", import.meta.url),
+  "utf8",
+);
+const projectService = readFileSync(
+  new URL("../lib/project-service.ts", import.meta.url),
+  "utf8",
+);
+const migration = readFileSync(
+  new URL("../mysql/0020_task_recovery_merge.sql", import.meta.url),
+  "utf8",
+);
+
+test("单任务模型：配对聚合与截图任务分支已删除", () => {
+  assert.doesNotMatch(adminApp, /groupTaskMasters/);
+  assert.doesNotMatch(adminApp, /PairableTask/);
+  assert.doesNotMatch(adminApp, /companion/);
+  assert.doesNotMatch(adminApp, /screenshot_collect/);
+  assert.doesNotMatch(adminApp, /withScreenshotTask/);
+  assert.doesNotMatch(adminApp, /仅回收/);
+  assert.doesNotMatch(adminApp, /回收群/);
+  assert.doesNotMatch(taskService, /createScreenshotTask/);
+  assert.doesNotMatch(actionRoute, /create_screenshot_task/);
+  assert.doesNotMatch(adminCss, /\.task-row-companion/);
+});
+
+test("TaskRowCard 双面板：发布面板 + 回收实面板/ghost 开通面板", () => {
+  assert.match(adminApp, /master-panel publish/);
+  assert.match(adminApp, /master-panel recovery/);
+  assert.match(adminApp, /master-panel ghost/);
+  assert.match(adminApp, /未开通回收/);
+  assert.match(adminApp, /开通回收 ›/);
+  assert.match(adminApp, /已收取/);
+  assert.match(adminApp, /recovery_submitted/);
+  assert.match(adminApp, /回收已开通/);
+  assert.match(adminCss, /\.master-panel\.ghost/);
+});
+
+test("创建/编辑表单携带回收设置", () => {
+  assert.match(adminApp, /开启截图回收（第二阶段）/);
+  assert.match(adminApp, /recoveryEnabled/);
+  assert.match(adminApp, /recoveryDueAt/);
+  assert.match(adminApp, /recoveryInstructions/);
+  assert.match(adminApp, /recoveryExampleImageKey/);
+  assert.match(adminApp, /发布截止日期/);
+});
+
+test("create_task / task_update / task_enable_recovery 三个 action 都落 recovery 字段", () => {
+  const createBlock = actionRoute.slice(
+    actionRoute.indexOf('body.action === "create_task"'),
+    actionRoute.indexOf('body.action === "task_update"'),
+  );
+  assert.match(createBlock, /recoveryEnabled/);
+  assert.match(createBlock, /recoveryExampleImageKey/);
+  const enableBlock = actionRoute.slice(
+    actionRoute.indexOf('body.action === "task_enable_recovery"'),
+  );
+  assert.match(enableBlock, /enableTaskRecovery/);
+  assert.match(enableBlock, /recoveryDueAt/);
+  assert.match(taskService, /export async function enableTaskRecovery/);
+  assert.match(taskService, /recovery_enabled, recovery_due_at, recovery_instructions, recovery_example_images/);
+});
+
+test("项目详情查询带回 recovery 字段（不再依赖 related_task_id）", () => {
+  assert.match(projectService, /recovery_enabled, recovery_due_at/);
+  assert.match(projectService, /recovery_submitted/);
+  assert.doesNotMatch(projectService, /related_task_id/);
+});
+
+test("存量迁移 SQL：配对并入、独立转正、删除老截图任务", () => {
+  assert.match(migration, /ALTER TABLE tasks ADD COLUMN recovery_enabled/);
+  assert.match(migration, /ADD COLUMN recovery_due_at/);
+  assert.match(migration, /ADD COLUMN recovery_instructions/);
+  assert.match(migration, /ADD COLUMN recovery_example_images/);
+  assert.match(migration, /child\.related_task_id = parent\.id/);
+  assert.match(migration, /target\.result_screenshot_key = legacy\.result_screenshot_key/);
+  assert.match(migration, /DELETE FROM tasks WHERE task_type = 'screenshot_collect' AND related_task_id != ''/);
+  assert.match(migration, /standalone\.task_type = 'content_publish'/);
+});

tests/task-report.test.mjs

@@ -1,164 +0,0 @@
-import assert from "node:assert/strict";
-import test from "node:test";
-import { buildTaskReportCsv } from "../lib/task-report-csv.ts";
-import { getTaskReportData } from "../lib/mvp-db.ts";
-
-const reportRow = {
-  id: "task-A",
-  name: "夏日种草计划",
-  task_type: "content_publish",
-  brand: "轻食品牌",
-  platform: "小红书",
-  status: "active",
-  due_at: "2026-08-20",
-  created_at: "2026-08-01 10:00:00",
-  quantity: 20,
-  project_name: "八月投放",
-  claimed_count: 10,
-  published_count: 8,
-  completed_count: 5,
-  exposure_total: 12000,
-  views_total: 9000,
-  d2_likes: 100,
-  d2_comments: 20,
-  d2_collects: 30,
-  d5_likes: 150,
-  d5_comments: 25,
-  d5_collects: 40,
-  d7_likes: 180,
-  d7_comments: 30,
-  d7_collects: 50,
-  latest_likes: 200,
-  latest_comments: 40,
-  latest_collects: 60,
-  latest_shares: 10,
-};
-
-test("buildTaskReportCsv writes BOM, headers and mapped rows", () => {
-  const csv = buildTaskReportCsv([reportRow]);
-  assert.ok(csv.startsWith(""), "starts with UTF-8 BOM");
-  const lines = csv.slice(1).split("\r\n");
-  assert.equal(lines.length, 2);
-  assert.equal(
-    lines[0],
-    [
-      "任务ID",
-      "任务名称",
-      "任务类型",
-      "品牌",
-      "平台",
-      "所属项目",
-      "任务状态",
-      "计划数量",
-      "领取数",
-      "发布数",
-      "完成数",
-      "完成率",
-      "截止日期",
-      "创建时间",
-      "曝光量合计",
-      "阅读量合计",
-      "D2点赞",
-      "D2评论",
-      "D2收藏",
-      "D5点赞",
-      "D5评论",
-      "D5收藏",
-      "D7点赞",
-      "D7评论",
-      "D7收藏",
-      "最新点赞",
-      "最新评论",
-      "最新收藏",
-      "最新转发",
-    ].join(","),
-  );
-  assert.equal(
-    lines[1],
-    [
-      "task-A",
-      "夏日种草计划",
-      "内容发布",
-      "轻食品牌",
-      "小红书",
-      "八月投放",
-      "进行中",
-      20,
-      10,
-      8,
-      5,
-      "50%",
-      "2026-08-20",
-      "2026-08-01 10:00:00",
-      12000,
-      9000,
-      100,
-      20,
-      30,
-      150,
-      25,
-      40,
-      180,
-      30,
-      50,
-      200,
-      40,
-      60,
-      10,
-    ].join(","),
-  );
-});
-
-test("buildTaskReportCsv escapes commas and quotes, blanks null metrics", () => {
-  const csv = buildTaskReportCsv([
-    {
-      ...reportRow,
-      name: '含,逗号"引号"任务',
-      project_name: null,
-      claimed_count: 0,
-      exposure_total: null,
-      views_total: null,
-      d2_likes: null,
-      d2_comments: null,
-      d2_collects: null,
-      d5_likes: null,
-      d5_comments: null,
-      d5_collects: null,
-      d7_likes: null,
-      d7_comments: null,
-      d7_collects: null,
-      latest_likes: null,
-      latest_comments: null,
-      latest_collects: null,
-      latest_shares: null,
-    },
-  ]);
-  const rowLine = csv.slice(1).split("\r\n")[1];
-  assert.ok(rowLine.includes('"含,逗号""引号""任务"'));
-  const cells = rowLine.split(",");
-  assert.equal(cells.at(-1), "", "null latest_shares becomes empty");
-  assert.equal(cells.at(-18), "", "no claims means empty completion rate");
-  assert.equal(cells.at(-16), "2026-08-01 10:00:00");
-});
-
-test("getTaskReportData aggregates per task via distributions join", async () => {
-  let capturedSql = "";
-  const db = {
-    prepare(sql) {
-      capturedSql = sql;
-      return {
-        async all() {
-          return { results: [reportRow] };
-        },
-      };
-    },
-  };
-  const rows = await getTaskReportData(db);
-  assert.deepEqual(rows, [reportRow]);
-  assert.match(capturedSql, /FROM tasks t/);
-  assert.match(capturedSql, /LEFT JOIN distributions d ON d\.task_id = t\.id/);
-  assert.match(capturedSql, /LEFT JOIN projects p ON p\.id = t\.project_id/);
-  assert.match(capturedSql, /GROUP BY t\.id/);
-  assert.match(capturedSql, /publish_url/);
-  assert.match(capturedSql, /latest_shares/);
-});

tests/task-update.test.mjs

@@ -0,0 +1,277 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { updateTask, enableTaskRecovery } from "../lib/task-service.ts";
+
+function fakeDb({ task, contents = [] }) {
+  const tasks = task ? [task] : [];
+  const rows = contents.map((row) => ({ ...row }));
+  const db = {
+    prepare(sql) {
+      return {
+        bind(...values) {
+          return {
+            async first() {
+              if (/FROM tasks WHERE id = \?/.test(sql)) {
+                return tasks.find((row) => row.id === values[0]) ?? null;
+              }
+              return null;
+            },
+            async run() {
+              const normalized = sql.trim();
+              if (/^UPDATE tasks\s+SET recovery_enabled = 1/.test(normalized)) {
+                const [recovery_due_at, recovery_instructions, recovery_example_images, id] =
+                  values;
+                const row = tasks.find((item) => item.id === id);
+                if (!row) return { meta: { changes: 0 } };
+                Object.assign(row, {
+                  recovery_enabled: 1,
+                  recovery_due_at,
+                  recovery_instructions,
+                  recovery_example_images,
+                });
+                return { meta: { changes: 1 } };
+              }
+              if (/^UPDATE tasks/.test(normalized)) {
+                const [
+                  name,
+                  brand,
+                  due_at,
+                  project_id,
+                  platform,
+                  content_format,
+                  quantity,
+                  recovery_enabled,
+                  recovery_due_at,
+                  recovery_instructions,
+                  recovery_example_images,
+                  id,
+                ] = values;
+                const row = tasks.find((item) => item.id === id);
+                if (!row) return { meta: { changes: 0 } };
+                Object.assign(row, {
+                  name,
+                  brand,
+                  due_at,
+                  project_id,
+                  platform,
+                  content_format,
+                  quantity,
+                  recovery_enabled,
+                  recovery_due_at,
+                  recovery_instructions,
+                  recovery_example_images,
+                });
+                return { meta: { changes: 1 } };
+              }
+              return { meta: { changes: 0 } };
+            },
+            async all() {
+              return { results: [] };
+            },
+          };
+        },
+      };
+    },
+    async batch(statements) {
+      const results = [];
+      for (const statement of statements) {
+        results.push(await statement.run());
+      }
+      return results;
+    },
+  };
+  return { db, tasks, contents: rows };
+}
+
+function publishTask(overrides = {}) {
+  return {
+    id: "task-pub-1",
+    task_type: "content_publish",
+    quantity: 18,
+    claimed_quantity: 2,
+    platform: "抖音",
+    content_format: "video",
+    name: "旧名称",
+    brand: "旧品牌",
+    due_at: "2026-08-01",
+    project_id: "",
+    status: "active",
+    recovery_enabled: 1,
+    recovery_due_at: "2026-08-10",
+    recovery_instructions: "请提交发布后的笔记截图",
+    recovery_example_images: "[]",
+    ...overrides,
+  };
+}
+
+function publishContents(quantity) {
+  return Array.from({ length: quantity }, (_, index) => ({
+    id: `content-${index + 1}`,
+    task_id: "task-pub-1",
+    title: "笔记标题",
+    body: "笔记正文",
+    image_assets: "[]",
+    status: index < 2 ? "claimed" : "available",
+    source_row: index + 1,
+  }));
+}
+
+test("updateTask rewrites basic fields, quantity and contents stay untouched", async () => {
+  const { db, tasks, contents } = fakeDb({
+    task: publishTask(),
+    contents: publishContents(5),
+  });
+  const result = await updateTask(
+    {
+      taskId: "task-pub-1",
+      name: "新名称",
+      brand: "新品牌",
+      dueAt: "2026-09-30",
+      projectId: "proj-1",
+    },
+    db,
+  );
+  assert.equal(result.quantity, 18);
+  assert.equal(result.claimedQuantity, 2);
+  assert.equal(tasks[0].name, "新名称");
+  assert.equal(tasks[0].brand, "新品牌");
+  assert.equal(tasks[0].due_at, "2026-09-30");
+  assert.equal(tasks[0].project_id, "proj-1");
+  assert.equal(tasks[0].quantity, 18, "quantity 由飞书行数决定，不可编辑");
+  assert.equal(contents.length, 5, "contents 不随编辑变动");
+  assert.equal(contents[0].title, "笔记标题");
+});
+
+test("updateTask keeps platform/contentFormat when not provided", async () => {
+  const { db, tasks } = fakeDb({ task: publishTask() });
+  await updateTask(
+    { taskId: "task-pub-1", name: "n", brand: "b", dueAt: "2026-09-30" },
+    db,
+  );
+  assert.equal(tasks[0].platform, "抖音");
+  assert.equal(tasks[0].content_format, "video");
+});
+
+test("updateTask applies provided platform/contentFormat", async () => {
+  const { db, tasks } = fakeDb({
+    task: publishTask({ platform: "小红书", content_format: "image_text" }),
+  });
+  await updateTask(
+    {
+      taskId: "task-pub-1",
+      name: "n",
+      brand: "b",
+      dueAt: "2026-09-30",
+      platform: "抖音",
+      contentFormat: "video",
+    },
+    db,
+  );
+  assert.equal(tasks[0].platform, "抖音");
+  assert.equal(tasks[0].content_format, "video");
+});
+
+test("updateTask updates recovery fields and can toggle recovery off", async () => {
+  const { db, tasks } = fakeDb({ task: publishTask() });
+  await updateTask(
+    {
+      taskId: "task-pub-1",
+      name: "n",
+      brand: "b",
+      dueAt: "2026-09-30",
+      recoveryEnabled: false,
+      recoveryDueAt: "2026-10-15",
+      recoveryInstructions: "新回收说明",
+    },
+    db,
+  );
+  assert.equal(tasks[0].recovery_enabled, 0);
+  assert.equal(tasks[0].recovery_due_at, "2026-10-15");
+  assert.equal(tasks[0].recovery_instructions, "新回收说明");
+});
+
+test("updateTask keeps row recovery values when input omits them", async () => {
+  const { db, tasks } = fakeDb({
+    task: publishTask({
+      recovery_enabled: 0,
+      recovery_due_at: "",
+      recovery_instructions: "",
+    }),
+  });
+  await updateTask(
+    { taskId: "task-pub-1", name: "n", brand: "b", dueAt: "2026-09-30" },
+    db,
+  );
+  assert.equal(tasks[0].recovery_enabled, 0, "未传开关时保持关闭");
+  assert.equal(
+    tasks[0].recovery_due_at,
+    "2026-09-30",
+    "回收截止为空时兜底为发布截止",
+  );
+});
+
+test("updateTask replaces example image JSON when key provided", async () => {
+  const { db, tasks } = fakeDb({ task: publishTask() });
+  await updateTask(
+    {
+      taskId: "task-pub-1",
+      name: "n",
+      brand: "b",
+      dueAt: "2026-09-30",
+      recoveryExampleImageKey: "task-assets/new.png",
+    },
+    db,
+  );
+  assert.deepEqual(JSON.parse(tasks[0].recovery_example_images), [
+    { index: 1, key: "task-assets/new.png", width: null, height: null },
+  ]);
+});
+
+test("enableTaskRecovery 开通老任务回收：默认截止=发布截止、默认说明、保留示例图", async () => {
+  const { db, tasks } = fakeDb({
+    task: publishTask({
+      recovery_enabled: 0,
+      recovery_due_at: "",
+      recovery_instructions: "",
+      recovery_example_images: "[]",
+    }),
+  });
+  const result = await enableTaskRecovery({ taskId: "task-pub-1" }, db);
+  assert.equal(result.recoveryDueAt, "2026-08-01");
+  assert.equal(tasks[0].recovery_enabled, 1);
+  assert.equal(tasks[0].recovery_due_at, "2026-08-01");
+  assert.equal(tasks[0].recovery_instructions, "请提交发布后的笔记截图");
+  const keepDb = fakeDb({
+    task: publishTask({
+      recovery_example_images:
+        '[{"index":1,"key":"task-assets/keep.png","width":null,"height":null}]',
+    }),
+  });
+  await enableTaskRecovery(
+    { taskId: "task-pub-1", recoveryDueAt: "2026-10-01", recoveryInstructions: "定制说明" },
+    keepDb.db,
+  );
+  assert.equal(keepDb.tasks[0].recovery_due_at, "2026-10-01");
+  assert.equal(keepDb.tasks[0].recovery_instructions, "定制说明");
+  assert.deepEqual(JSON.parse(keepDb.tasks[0].recovery_example_images), [
+    { index: 1, key: "task-assets/keep.png", width: null, height: null },
+  ]);
+});
+
+test("updateTask / enableTaskRecovery reject unknown tasks and invalid dates", async () => {
+  const { db } = fakeDb({ task: publishTask() });
+  await assert.rejects(
+    () =>
+      updateTask({ taskId: "missing", name: "n", brand: "b", dueAt: "2026-09-30" }, db),
+    /任务不存在/,
+  );
+  await assert.rejects(
+    () =>
+      updateTask({ taskId: "task-pub-1", name: "n", brand: "b", dueAt: "2026-13-01" }, db),
+    /截止日期/,
+  );
+  await assert.rejects(
+    () => enableTaskRecovery({ taskId: "missing" }, db),
+    /任务不存在/,
+  );
+});

tests/ui-walkthrough-fixes.test.mjs

@@ -0,0 +1,68 @@
+import assert from "node:assert/strict";
+import { readFile } from "node:fs/promises";
+import test from "node:test";
+
+// 2026-10-08 两端走查发现的 UI 断点修复：
+// 1) 回填提交在缺发布截图时前置禁用并说明原因（原本只在提交后 toast 报错）
+// 2) 未回填链接时收起回收区块的说明/示例图，只留锁定提示
+// 3) 分发表「数据状态」按任务采集计划显示等待日，没计划时明说待设置
+// 4) 截图包回收清单的序号列对无 source_row 的内容回退为行号；种子内容补 source_row
+
+test("portal gates the backfill submit button on the publish screenshot", async () => {
+  const source = await readFile(
+    new URL("../koc-portal/app/page.tsx", import.meta.url),
+    "utf8",
+  );
+  assert.match(
+    source,
+    /disabled=\{working \|\| !\(screenshot \|\| selected\.publish_screenshot_key\)\}/,
+  );
+  assert.match(source, /先上传发布截图，链接回填需以截图为凭证/);
+  // 服务端/提交守卫仍保留，双保险
+  assert.match(source, /请上传这篇笔记的发布截图/);
+});
+
+test("portal collapses recovery instructions until the link is backfilled", async () => {
+  const source = await readFile(
+    new URL("../koc-portal/app/page.tsx", import.meta.url),
+    "utf8",
+  );
+  const lockedHint = "回填发布链接后，这里会开放回收截图上传。";
+  assert.ok(source.includes(lockedHint), "锁定提示必须保留");
+  const tipIndex = source.indexOf(
+    `{selected.publish_url && (\n                  <p className="creator-recovery-tip">`,
+  );
+  assert.ok(tipIndex > 0, "回收说明必须由 publish_url 门控");
+  // 示例图区块同样门控
+  assert.match(
+    source,
+    /\{selected\.publish_url &&\n                  \(payload\.task\.recoveryExampleImages\?\.length \?\? 0\) > 0 && \(/,
+  );
+});
+
+test("admin waiting label follows the task collection plan", async () => {
+  const [adminApp, mvpDb] = await Promise.all([
+    readFile(new URL("../app/admin-app.tsx", import.meta.url), "utf8"),
+    readFile(new URL("../lib/mvp-db.ts", import.meta.url), "utf8"),
+  ]);
+  assert.match(adminApp, /waitingCollectionLabel/);
+  // 未设置计划时走默认 7 天兜底，等待文案随之说明而不是停在“待设置”
+  assert.match(adminApp, /等待D1 · 默认7天/);
+  assert.match(adminApp, /等待D\$\{Math\.min\(\.\.\.days\)\}/);
+  assert.doesNotMatch(adminApp, /"等待D2"/);
+  // 分发查询带上任务级采集计划字段
+  assert.match(mvpDb, /t\.collection_days AS task_collection_days/);
+  assert.match(mvpDb, /t\.collection_start_date AS task_collection_start_date/);
+});
+
+test("export manifest and seed contents always carry a sequence number", async () => {
+  const [exportRoute, seed] = await Promise.all([
+    readFile(
+      new URL("../app/api/screenshot-task-export/route.ts", import.meta.url),
+      "utf8",
+    ),
+    readFile(new URL("../lib/mvp-db.ts", import.meta.url), "utf8"),
+  ]);
+  assert.match(exportRoute, /String\(row\.source_row \?\? rowIndex \+ 1\)/);
+  assert.match(seed, /INSERT INTO contents \(id, task_id, title, body, status, source_row\)/);
+});

tests/wecom-bind.test.mjs

@@ -0,0 +1,92 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { readFileSync } from "node:fs";
+import {
+  signWecomBindState,
+  verifyWecomBindState,
+  signWecomIdentityTicket,
+  WECOM_BIND_STATE_TTL_MS,
+} from "../lib/wecom-oauth-service.ts";
+
+const SECRET = "internal-token-test";
+
+const bindRoute = readFileSync(
+  new URL("../app/api/wecom-bind/route.ts", import.meta.url),
+  "utf8",
+);
+const adminApp = readFileSync(
+  new URL("../app/admin-app.tsx", import.meta.url),
+  "utf8",
+);
+
+test("bind state sign → verify roundtrip", async () => {
+  const state = await signWecomBindState("user-abc", { secret: SECRET });
+  const verified = await verifyWecomBindState(state, { secret: SECRET });
+  assert.deepEqual(verified, { userId: "user-abc" });
+});
+
+test("bind state rejects expiry, tampering, wrong secret", async () => {
+  const state = await signWecomBindState("user-abc", {
+    secret: SECRET,
+    nowMs: Date.now() - WECOM_BIND_STATE_TTL_MS - 120_000,
+  });
+  assert.equal(await verifyWecomBindState(state, { secret: SECRET }), null);
+
+  const fresh = await signWecomBindState("user-abc", { secret: SECRET });
+  const [payload, signature] = fresh.split(".");
+  assert.ok(payload.length > 8);
+  const flip = payload[5] === "a" ? "b" : "a";
+  const tampered = `${payload.slice(0, 5)}${flip}${payload.slice(6)}.${signature}`;
+  assert.notEqual(tampered, fresh);
+  assert.equal(await verifyWecomBindState(tampered, { secret: SECRET }), null);
+  assert.equal(
+    await verifyWecomBindState(fresh, { secret: "other-secret" }),
+    null,
+  );
+  assert.equal(await verifyWecomBindState("garbage", { secret: SECRET }), null);
+  assert.equal(await verifyWecomBindState("", { secret: SECRET }), null);
+});
+
+test("identity ticket cannot be replayed as bind state", async () => {
+  const { ticket } = await signWecomIdentityTicket("wmExt123", "张三", {
+    secret: SECRET,
+  });
+  assert.equal(await verifyWecomBindState(ticket, { secret: SECRET }), null);
+});
+
+test("bind state requires a user id", async () => {
+  await assert.rejects(
+    () => signWecomBindState("", { secret: SECRET }),
+    /后台账号 ID/,
+  );
+});
+
+test("bind route: start redirects logged-in users to wecom oauth", () => {
+  assert.ok(bindRoute.includes("buildWecomOAuthUrl"));
+  assert.ok(bindRoute.includes("signWecomBindState"));
+  assert.ok(bindRoute.includes("redirectUri"));
+  assert.ok(/APP_ORIGIN/.test(bindRoute));
+  assert.ok(/principal\.kind !== "user"/.test(bindRoute));
+});
+
+test("bind route: callback verifies state, session and conflicts", () => {
+  assert.ok(bindRoute.includes("verifyWecomBindState"));
+  assert.ok(/principal\.user\.id !== verified\.userId/.test(bindRoute));
+  assert.ok(bindRoute.includes("exchangeWecomOAuthCode"));
+  assert.ok(bindRoute.includes("!identity.userId"));
+  assert.ok(
+    /SELECT id, username FROM users WHERE wecom_userid = \? AND id <> \?/.test(
+      bindRoute,
+    ),
+  );
+  assert.ok(
+    /UPDATE users SET wecom_userid = \?, updated_at = CURRENT_TIMESTAMP WHERE id = \?/.test(
+      bindRoute,
+    ),
+  );
+});
+
+test("admin banner exposes self-service bind entry", () => {
+  assert.ok(adminApp.includes('href="/api/wecom-bind"'));
+  assert.ok(adminApp.includes("owner-bind-button"));
+});

tests/wecom-client.test.mjs

@@ -1,13 +1,16 @@
 import assert from "node:assert/strict";
 import test from "node:test";
 import {
+  addTaskJoinWay,
   buildWecomOAuthUrl,
   clearWecomAccessTokenCacheForTests,
   createAppChat,
   createGroupMsgTemplate,
+  deleteJoinWay,
   exchangeWecomOAuthCode,
   fetchWecomExternalContactName,
   getAppChat,
+  getJoinWayQrCode,
   listCustomerGroupChats,
   listExternalContacts,
   listInternalContacts,
@@ -16,6 +19,7 @@ import {
   sendWecomAppMessage,
   sendWecomRobotMessage,
   updateAppChat,
+  updateTaskJoinWay,
   WecomClientError,
 } from "../lib/wecom-client.ts";
 
@@ -428,6 +432,14 @@ function fakeGroupPush(options = {}) {
       "wr-normal-1": { name: "KOC 一群", owner: "zhangsan", member_count: 42 },
       "wr-normal-2": { name: "KOC 二群", owner: "lisi", member_count: 7 },
     };
+  const joinWay = {
+    addErrcode: options.joinAddErrcode ?? 0,
+    updateErrcode: options.joinUpdateErrcode ?? 0,
+    getErrcode: options.joinGetErrcode ?? 0,
+    delErrcode: options.joinDelErrcode ?? 0,
+    qrCode: options.joinQrCode ?? "https://p.qpic.cn/qr-test.png",
+    configId: options.joinConfigId ?? "cfgtest123",
+  };
   const fetchImpl = async (input, init = {}) => {
     const url = new URL(String(input));
     calls.push({ url, init });
@@ -466,6 +478,34 @@ function fakeGroupPush(options = {}) {
         fail_list: options.failList ?? [],
       });
     }
+    if (url.pathname.endsWith("/cgi-bin/externalcontact/groupchat/add_join_way")) {
+      if (joinWay.addErrcode !== 0) {
+        return Response.json({ errcode: joinWay.addErrcode, errmsg: "add failed" });
+      }
+      return Response.json({ errcode: 0, errmsg: "ok", config_id: joinWay.configId });
+    }
+    if (url.pathname.endsWith("/cgi-bin/externalcontact/groupchat/get_join_way")) {
+      if (joinWay.getErrcode !== 0) {
+        return Response.json({ errcode: joinWay.getErrcode, errmsg: "get failed" });
+      }
+      return Response.json({
+        errcode: 0,
+        errmsg: "ok",
+        join_way: { qr_code: joinWay.qrCode, scene: 2 },
+      });
+    }
+    if (url.pathname.endsWith("/cgi-bin/externalcontact/groupchat/update_join_way")) {
+      if (joinWay.updateErrcode !== 0) {
+        return Response.json({ errcode: joinWay.updateErrcode, errmsg: "update failed" });
+      }
+      return Response.json({ errcode: 0, errmsg: "ok" });
+    }
+    if (url.pathname.endsWith("/cgi-bin/externalcontact/groupchat/del_join_way")) {
+      if (joinWay.delErrcode !== 0) {
+        return Response.json({ errcode: joinWay.delErrcode, errmsg: "del failed" });
+      }
+      return Response.json({ errcode: 0, errmsg: "ok" });
+    }
     return new Response("not found", { status: 404 });
   };
   return { calls, fetchImpl };
@@ -499,6 +539,32 @@ test("listCustomerGroupChats paginates groupchat/list and keeps only normal grou
   assert.equal(secondBody.cursor, "page-2");
 });
 
+test("listCustomerGroupChats derives memberCount from member_list when member_count absent", async () => {
+  const { fetchImpl } = fakeGroupPush({
+    pages: [{ next_cursor: "", group_chat_list: [{ chat_id: "wr-normal-1", status: 0 }] }],
+    details: {
+      "wr-normal-1": {
+        name: "",
+        owner: "zhangsan",
+        member_list: [
+          { type: 1, userid: "zhangsan" },
+          { type: 1, userid: "lisi" },
+          { type: 2, userid: "wm external 1" },
+          { type: 2, userid: "wm external 2" },
+          { type: 2, userid: "wm external 3" },
+        ],
+      },
+    },
+  });
+  const groups = await listCustomerGroupChats(
+    resolveWecomConfig(baseBindings),
+    fetchImpl,
+  );
+  assert.equal(groups.length, 1);
+  assert.equal(groups[0].name, "");
+  assert.equal(groups[0].memberCount, 5, "member_count falls back to member_list length");
+});
+
 test("listCustomerGroupChats skips groups whose detail lookup fails", async () => {
   const { fetchImpl } = fakeGroupPush({
     pages: [
@@ -524,6 +590,118 @@ test("listCustomerGroupChats skips groups whose detail lookup fails", async () =
   );
 });
 
+test("listCustomerGroupChats sends owner_filter when ownerUserids given", async () => {
+  const { calls, fetchImpl } = fakeGroupPush({
+    pages: [{ next_cursor: "", group_chat_list: [{ chat_id: "wr-normal-1", status: 0 }] }],
+    details: {
+      "wr-normal-1": { name: "KOC 一群", owner: "zhangsan", member_count: 42 },
+    },
+  });
+  const groups = await listCustomerGroupChats(
+    resolveWecomConfig(baseBindings),
+    fetchImpl,
+    ["zhangsan", ""],
+  );
+  assert.equal(groups.length, 1);
+  const listCall = calls.find((c) =>
+    c.url.pathname.endsWith("/cgi-bin/externalcontact/groupchat/list"),
+  );
+  const body = JSON.parse(String(listCall.init.body));
+  assert.deepEqual(body.owner_filter, { userid_list: ["zhangsan"] });
+});
+
+test("addTaskJoinWay posts scene/auto_create_room/payload and returns configId", async () => {
+  const { calls, fetchImpl } = fakeGroupPush();
+  const result = await addTaskJoinWay(
+    resolveWecomConfig(baseBindings),
+    {
+      chatIdList: ["wr-normal-1"],
+      roomBaseName: "每".repeat(50),
+      state: "task-task-baf7fd59",
+    },
+    fetchImpl,
+  );
+  assert.equal(result.configId, "cfgtest123");
+  const call = calls.find((c) =>
+    c.url.pathname.endsWith("/cgi-bin/externalcontact/groupchat/add_join_way"),
+  );
+  assert.ok(call, "add_join_way was called");
+  assert.equal(call.url.searchParams.get("access_token"), "token-test");
+  const body = JSON.parse(String(call.init.body));
+  assert.equal(body.scene, 2);
+  assert.equal(body.auto_create_room, 1);
+  assert.deepEqual(body.chat_id_list, ["wr-normal-1"]);
+  assert.equal(body.room_base_name.length, 40, "room_base_name truncated to 40 code points");
+  assert.equal(body.state, "task-task-baf7fd59");
+});
+
+test("addTaskJoinWay surfaces upstream errcode as WecomClientError", async () => {
+  const { fetchImpl } = fakeGroupPush({ joinAddErrcode: 60011 });
+  await assert.rejects(
+    () =>
+      addTaskJoinWay(
+        resolveWecomConfig(baseBindings),
+        { chatIdList: ["wr-normal-1"], roomBaseName: "群", state: "task-t1" },
+        fetchImpl,
+      ),
+    (error) =>
+      error instanceof WecomClientError && /创建企业微信进群活码失败/.test(error.message),
+  );
+});
+
+test("getJoinWayQrCode returns qr_code url from join_way", async () => {
+  const { calls, fetchImpl } = fakeGroupPush({ joinQrCode: "https://p.qpic.cn/qr-x.png" });
+  const result = await getJoinWayQrCode(
+    resolveWecomConfig(baseBindings),
+    "cfgtest123",
+    fetchImpl,
+  );
+  assert.equal(result.qrCode, "https://p.qpic.cn/qr-x.png");
+  const call = calls.find((c) =>
+    c.url.pathname.endsWith("/cgi-bin/externalcontact/groupchat/get_join_way"),
+  );
+  assert.deepEqual(JSON.parse(String(call.init.body)), { config_id: "cfgtest123" });
+});
+
+test("updateTaskJoinWay re-sends full body including scene for overwrite semantics", async () => {
+  const { calls, fetchImpl } = fakeGroupPush();
+  await updateTaskJoinWay(
+    resolveWecomConfig(baseBindings),
+    {
+      configId: "cfgtest123",
+      chatIdList: ["wr-normal-2"],
+      roomBaseName: "新群名",
+      state: "task-t2",
+    },
+    fetchImpl,
+  );
+  const call = calls.find((c) =>
+    c.url.pathname.endsWith("/cgi-bin/externalcontact/groupchat/update_join_way"),
+  );
+  const body = JSON.parse(String(call.init.body));
+  assert.equal(body.config_id, "cfgtest123");
+  assert.equal(body.scene, 2);
+  assert.equal(body.auto_create_room, 1);
+  assert.deepEqual(body.chat_id_list, ["wr-normal-2"]);
+  assert.equal(body.room_base_name, "新群名");
+});
+
+test("deleteJoinWay tolerates upstream rejection but still calls del endpoint", async () => {
+  const { calls, fetchImpl } = fakeGroupPush({ joinDelErrcode: 40068 });
+  await deleteJoinWay(resolveWecomConfig(baseBindings), "cfgtest123", fetchImpl);
+  const call = calls.find((c) =>
+    c.url.pathname.endsWith("/cgi-bin/externalcontact/groupchat/del_join_way"),
+  );
+  assert.ok(call, "del_join_way was called");
+  assert.deepEqual(JSON.parse(String(call.init.body)), { config_id: "cfgtest123" });
+});
+
+test("deleteJoinWay skips empty configId", async () => {
+  const { calls, fetchImpl } = fakeGroupPush();
+  await deleteJoinWay(resolveWecomConfig(baseBindings), "  ", fetchImpl);
+  assert.equal(calls.length, 0, "no API calls for empty config id");
+});
+
 test("createGroupMsgTemplate posts group payload with text and link attachment", async () => {
   const { calls, fetchImpl } = fakeGroupPush();
   const result = await createGroupMsgTemplate(
@@ -834,6 +1012,7 @@ function fakeAppChat(options = {}) {
       ["tgc_task-existing", { name: "【任务】已有群", userlist: ["owner-a"] }],
     ],
   );
+  const createExisted = options.createExisted ?? false;
   const fetchImpl = async (input, init = {}) => {
     const url = new URL(String(input));
     calls.push({ url, init });
@@ -846,6 +1025,9 @@ function fakeAppChat(options = {}) {
       });
     }
     if (url.pathname.endsWith("/cgi-bin/appchat/create")) {
+      if (createExisted) {
+        return Response.json({ errcode: 86215, errmsg: "chatid existed" });
+      }
       const body = JSON.parse(String(init.body ?? "{}"));
       chats.set(body.chatid, { name: body.name, userlist: body.userlist });
       return Response.json({ errcode: 0, errmsg: "ok", chatid: body.chatid });
@@ -893,15 +1075,15 @@ test("createAppChat posts name/userlist/chatid and returns chatid", async () =>
   const { calls, fetchImpl } = fakeAppChat();
   const result = await createAppChat(
     resolveWecomConfig(baseBindings),
-    { name: "【任务】任务名超长会被截断到二十个字符", userlist: ["owner-a", "owner-b"], chatid: "tgc_task-new" },
+    { name: "【任务】任务名超长会被截断到二十个字符", userlist: ["owner-a", "owner-b"], chatid: "tgcnewchat" },
     fetchImpl,
   );
-  assert.equal(result.chatid, "tgc_task-new");
+  assert.equal(result.chatid, "tgcnewchat");
   const call = calls.find((c) => c.url.pathname.endsWith("/cgi-bin/appchat/create"));
   assert.ok(call, "appchat/create was called");
   assert.equal(call.url.searchParams.get("access_token"), "token-test");
   const body = JSON.parse(String(call.init.body));
-  assert.equal(body.chatid, "tgc_task-new");
+  assert.equal(body.chatid, "tgcnewchat");
   assert.equal(body.userlist.length, 2);
   assert.ok(body.name.length <= 20, "chat name truncated to 20 chars");
 });
@@ -925,6 +1107,16 @@ test("createAppChat rejects fewer than 2 members and oversized chatid", async ()
   assert.equal(calls.length, 0, "no API calls for invalid payload");
 });
 
+test("createAppChat treats chatid existed (86215) as success", async () => {
+  const { fetchImpl } = fakeAppChat({ createExisted: true });
+  const result = await createAppChat(
+    resolveWecomConfig(baseBindings),
+    { name: "【总群】项目一", userlist: ["a", "b"], chatid: "pgcproj1" },
+    fetchImpl,
+  );
+  assert.equal(result.chatid, "pgcproj1");
+});
+
 test("updateAppChat adds and removes members", async () => {
   const { calls, fetchImpl, chats } = fakeAppChat();
   await updateAppChat(
@@ -962,7 +1154,7 @@ test("getAppChat returns member list or null on error", async () => {
   assert.equal(info.chatId, "tgc_task-existing");
   assert.deepEqual(info.userlist, ["owner-a"]);
   assert.equal(
-    await getAppChat(resolveWecomConfig(baseBindings), "tgc_task-missing", fetchImpl),
+    await getAppChat(resolveWecomConfig(baseBindings), "tgcmissingchat", fetchImpl),
     null,
   );
 });
@@ -988,7 +1180,7 @@ test("sendAppChatMessage throws WecomClientError when provider errors", async ()
     () =>
       sendAppChatMessage(
         resolveWecomConfig(baseBindings),
-        { chatid: "tgc_task-missing", text: "hello" },
+        { chatid: "tgcmissingchat", text: "hello" },
         fetchImpl,
       ),
     (error) => {

tests/wecom-escalation.test.mjs

@@ -26,7 +26,8 @@ const overdueRows = [
     task_id: "task-A",
     task_name: "超期任务A",
     due_at: "2026-08-20",
-    task_type: "content_publish",
+    recovery_enabled: 1,
+    recovery_due_at: "2026-08-27",
     publish_url: null,
     result_submitted_at: null,
     project_id: "proj-1",
@@ -38,7 +39,8 @@ const overdueRows = [
     task_id: "task-A",
     task_name: "超期任务A",
     due_at: "2026-08-20",
-    task_type: "content_publish",
+    recovery_enabled: 1,
+    recovery_due_at: "2026-08-27",
     publish_url: null,
     result_submitted_at: null,
     project_id: "proj-1",
@@ -50,7 +52,8 @@ const overdueRows = [
     task_id: "task-B",
     task_name: "无项目任务B",
     due_at: "2026-08-25",
-    task_type: "content_publish",
+    recovery_enabled: 0,
+    recovery_due_at: "",
     publish_url: null,
     result_submitted_at: null,
     project_id: "",
@@ -62,7 +65,6 @@ const overdueRows = [
 const releasableDistribution = {
   id: "d-1",
   task_id: "task-A",
-  task_type: "content_publish",
   content_id: "c-1",
   content_title: "超期内容",
   partner_id: "p-1",
@@ -73,13 +75,30 @@ const releasableDistribution = {
   result_submitted_at: null,
 };
 
-function filterOverdue(rows, cutoff) {
-  return rows.filter((row) => {
-    if (!(row.due_at && row.due_at < cutoff)) return false;
-    return row.task_type === "screenshot_collect"
-      ? !row.result_submitted_at
-      : !row.publish_url;
-  });
+// 双阶段超期判定：发布阶段看 due_at，回收阶段（已发布未收截图）看 recovery_due_at
+function filterOverdue(rows, cutoff, { phases = "all" } = {}) {
+  const output = [];
+  for (const row of rows) {
+    if (!row.publish_url && row.due_at && row.due_at < cutoff) {
+      output.push({ ...row, pending_phase: "publish", pending_due_at: row.due_at });
+      continue;
+    }
+    if (
+      phases === "all" &&
+      row.recovery_enabled === 1 &&
+      row.publish_url &&
+      !row.result_submitted_at &&
+      row.recovery_due_at &&
+      row.recovery_due_at < cutoff
+    ) {
+      output.push({
+        ...row,
+        pending_phase: "recovery",
+        pending_due_at: row.recovery_due_at,
+      });
+    }
+  }
+  return output;
 }
 
 function fakeEscalationDb({ rows = overdueRows } = {}) {
@@ -95,11 +114,12 @@ function fakeEscalationDb({ rows = overdueRows } = {}) {
               return null;
             },
             async all() {
-              if (
-                /FROM distributions d/.test(sql) &&
-                /result_submitted_at IS NULL/.test(sql)
-              ) {
-                return { results: filterOverdue(rows, params[0]) };
+              if (/FROM distributions d/.test(sql)) {
+                return {
+                  results: filterOverdue(rows, params[0], {
+                    phases: sql.includes("t.recovery_enabled") ? "all" : "publish",
+                  }),
+                };
               }
               return { results: [] };
             },
@@ -138,11 +158,12 @@ function fakeReleaseDb({ rows = overdueRows, blockedIds = [] } = {}) {
               return null;
             },
             async all() {
-              if (
-                /FROM distributions d/.test(sql) &&
-                /result_submitted_at IS NULL/.test(sql)
-              ) {
-                return { results: filterOverdue(rows, params[0]) };
+              if (/FROM distributions d/.test(sql)) {
+                return {
+                  results: filterOverdue(rows, params[0], {
+                    phases: sql.includes("t.recovery_enabled") ? "all" : "publish",
+                  }),
+                };
               }
               return { results: [] };
             },
@@ -250,38 +271,44 @@ test("runOverdueEscalation no-ops without overdue rows", async () => {
   assert.equal(calls.length, 0);
 });
 
-test("runOverdueEscalation distinguishes screenshot tasks from content tasks", async () => {
+test("runOverdueEscalation 按发布/回收两阶段分别出文案", async () => {
   const rows = [
     {
-      id: "d-s1",
+      // 回收阶段超期：已发布、未收截图、recovery_due_at 已过
+      id: "d-r1",
       task_id: "task-S",
-      task_name: "截图任务S",
-      due_at: "2026-08-20",
-      task_type: "screenshot_collect",
-      publish_url: null,
+      task_name: "回收任务S",
+      due_at: "2026-08-10",
+      recovery_enabled: 1,
+      recovery_due_at: "2026-08-20",
+      publish_url: "https://www.xiaohongshu.com/note/s1",
       result_submitted_at: null,
       project_id: "",
       partner_id: "p-1",
       partner_name: "合作方甲",
     },
     {
-      id: "d-s2",
+      // 已提交截图：两阶段都不超期
+      id: "d-r2",
       task_id: "task-S",
-      task_name: "截图任务S",
-      due_at: "2026-08-20",
-      task_type: "screenshot_collect",
-      publish_url: null,
+      task_name: "回收任务S",
+      due_at: "2026-08-10",
+      recovery_enabled: 1,
+      recovery_due_at: "2026-08-20",
+      publish_url: "https://www.xiaohongshu.com/note/s2",
       result_submitted_at: "2026-08-21 09:00:00",
       project_id: "",
       partner_id: "p-2",
       partner_name: "合作方乙",
     },
     {
+      // 已发布且回收未到期：不算超期
       id: "d-c1",
       task_id: "task-A",
-      task_name: "内容任务A",
+      task_name: "发布任务A",
       due_at: "2026-08-20",
-      task_type: "content_publish",
+      recovery_enabled: 1,
+      recovery_due_at: "2026-09-10",
       publish_url: "https://www.xiaohongshu.com/note/1",
       result_submitted_at: null,
       project_id: "",
@@ -289,11 +316,13 @@ test("runOverdueEscalation distinguishes screenshot tasks from content tasks", a
       partner_name: "合作方丙",
     },
     {
+      // 发布阶段超期：未回填链接
       id: "d-c2",
       task_id: "task-A",
-      task_name: "内容任务A",
+      task_name: "发布任务A",
       due_at: "2026-08-20",
-      task_type: "content_publish",
+      recovery_enabled: 1,
+      recovery_due_at: "2026-09-10",
       publish_url: null,
       result_submitted_at: null,
       project_id: "",
@@ -308,15 +337,14 @@ test("runOverdueEscalation distinguishes screenshot tasks from content tasks", a
     wecomFetch(calls),
     NOW,
   );
-  // 已提交截图的 d-s2 与已回填链接的 d-c1 不算超期
-  assert.equal(summary.overdueTasks, 2);
+  assert.equal(summary.overdueTasks, 2, "任务×阶段 各一条");
   assert.equal(summary.overdueDistributions, 2);
   const robotBodies = calls
     .filter((call) => call.url.host === "qyapi.example.com")
     .map((call) => JSON.parse(String(call.init.body)));
   assert.equal(robotBodies.length, 1);
-  assert.match(robotBodies[0].text.content, /截图任务S（截止 2026-08-20）：1 条/);
-  assert.match(robotBodies[0].text.content, /内容任务A（截止 2026-08-20）：1 条/);
+  assert.match(robotBodies[0].text.content, /回收任务S（截止 2026-08-20）：1 条截图超期未提交/);
+  assert.match(robotBodies[0].text.content, /发布任务A（截止 2026-08-20）：1 条超期未发布/);
 });
 
 test("runOverdueAutoRelease is disabled without env switch", async () => {

tests/wecom-group-push.test.mjs

@@ -54,17 +54,18 @@ test("buildTaskGroupPushMessage composes text and link with claim url", () => {
   assert.match(message.link.desc, /品牌A · 3 份 · 截止 2026-09-01/);
 });
 
-test("buildTaskGroupPushMessage marks video and screenshot tasks", () => {
+test("buildTaskGroupPushMessage marks video tasks (单模型下不再有截图任务文案)", () => {
   const video = buildTaskGroupPushMessage(
     { ...baseTask, content_format: "video" },
     "https://portal.example.com",
   );
   assert.match(video.text, /形式：视频/);
-  const screenshot = buildTaskGroupPushMessage(
-    { ...baseTask, task_type: "screenshot_collect" },
+  const imageText = buildTaskGroupPushMessage(
+    baseTask,
     "https://portal.example.com",
   );
-  assert.match(screenshot.text, /形式：截图回收/);
+  assert.match(imageText.text, /形式：图文/);
+  assert.doesNotMatch(imageText.text, /截图回收/);
 });
 
 test("buildTaskGroupPushMessage drops link when share_token missing", () => {

tests/wecom-notifier.test.mjs

@@ -1,6 +1,9 @@
 import assert from "node:assert/strict";
 import test from "node:test";
-import { computeDueCutoff } from "../lib/wecom-notifier-service.ts";
+import {
+  computeDueCutoff,
+  runDueSoonWecomNotifications,
+} from "../lib/wecom-notifier-service.ts";
 
 test("computeDueCutoff advances by dueDays and crosses month/year", () => {
   assert.equal(computeDueCutoff("2026-08-18", 3), "2026-08-21");
@@ -13,3 +16,62 @@ test("computeDueCutoff advances by dueDays and crosses month/year", () => {
 test("computeDueCutoff returns input unchanged when malformed", () => {
   assert.equal(computeDueCutoff("not-a-date", 3), "not-a-date");
 });
+
+function captureDb() {
+  const executed = [];
+  const db = {
+    prepare(sql) {
+      const statement = (values) => ({
+        async all() {
+          executed.push({ sql, values });
+          return { results: [] };
+        },
+        async first() {
+          executed.push({ sql, values });
+          return null;
+        },
+      });
+      return {
+        bind(...values) {
+          return statement(values);
+        },
+        ...statement([]),
+      };
+    },
+  };
+  return { db, executed };
+}
+
+const NOTIFY_CONFIG = {
+  corpId: "",
+  agentId: "",
+  secret: "",
+  robotWebhook: "",
+  dueDays: 3,
+};
+
+test("runDueSoonWecomNotifications filters by taskId when given", async () => {
+  const { db, executed } = captureDb();
+  const now = Date.UTC(2026, 7, 18, 2, 0, 0);
+  const summary = await runDueSoonWecomNotifications(
+    db,
+    NOTIFY_CONFIG,
+    undefined,
+    now,
+    "task-9",
+  );
+  assert.equal(executed.length, 1);
+  assert.match(executed[0].sql, /AND t\.id = \?/);
+  assert.deepEqual(executed[0].values, ["2026-08-21", "2026-08-21", "task-9"]);
+  assert.equal(summary.dueSoonAttempted, 0);
+  assert.equal(summary.digestSent, false);
+});
+
+test("runDueSoonWecomNotifications keeps global scan without taskId", async () => {
+  const { db, executed } = captureDb();
+  const now = Date.UTC(2026, 7, 18, 2, 0, 0);
+  await runDueSoonWecomNotifications(db, NOTIFY_CONFIG, undefined, now);
+  assert.equal(executed.length, 1);
+  assert.ok(!/AND t\.id = \?/.test(executed[0].sql));
+  assert.deepEqual(executed[0].values, ["2026-08-21", "2026-08-21"]);
+});