Knonii 内部悬赏任务系统 — 架构方案

前端  Next.js 15 App Router + React 19 + TypeScript
样式  Tailwind（底层引擎）+ shadcn/ui + 语义化设计 token
动效  GSAP 3.13（npm 单包，全插件免费）+ @gsap/react + next-themes
后端  Cloudflare Workers（OpenNext adapter）
数据  D1（SQLite）+ Drizzle ORM
缓存  KV（session + 飞书 tenant_access_token）
定时  Cron Triggers（到期释放）
对象存储  无（描述与提交都是飞书文档链接）

-- 用户表：飞书登录后 upsert
CREATE TABLE users (
  id            TEXT PRIMARY KEY,          -- 内部 uuid
  union_id      TEXT NOT NULL UNIQUE,      -- 飞书 union_id，跨应用稳定，做业务主键
  open_id       TEXT NOT NULL,             -- 当前应用下的 open_id，发消息用
  feishu_user_id TEXT,                     -- 通讯录 member id，调通讯录 API 用
  name          TEXT NOT NULL,
  avatar_url    TEXT,
  email         TEXT,
  role          TEXT NOT NULL DEFAULT 'member',  -- superadmin | boss | member
  active        INTEGER NOT NULL DEFAULT 1,      -- 离职置 0，不删数据
  created_at    INTEGER NOT NULL,
  updated_at    INTEGER NOT NULL
);
CREATE INDEX idx_users_role ON users(role);

-- 悬赏任务表
CREATE TABLE tasks (
  id              TEXT PRIMARY KEY,
  title           TEXT NOT NULL,
  doc_url         TEXT NOT NULL,           -- 飞书云文档链接（任务描述）
  amount_cents    INTEGER NOT NULL,        -- 金额，以分为单位存整数，避免浮点
  publisher_id    TEXT NOT NULL REFERENCES users(id),
  deadline        INTEGER NOT NULL,        -- unix ms，抢单后开始倒计时的终点
  status          TEXT NOT NULL DEFAULT 'open',
                  -- open | claimed | submitted | completed | cancelled
  claimed_by      TEXT REFERENCES users(id),
  claimed_at      INTEGER,
  submit_url      TEXT,                    -- 员工提交的飞书文档链接
  submitted_at    INTEGER,
  rating          INTEGER,                 -- 1-5 星，仅 boss 可见
  rated_by        TEXT REFERENCES users(id),
  rated_at        INTEGER,
  completed_at    INTEGER,                 -- 验收通过时间，月度账单按此聚合
  expire_count    INTEGER NOT NULL DEFAULT 0,  -- 被超时回收过几次
  created_at      INTEGER NOT NULL,
  updated_at      INTEGER NOT NULL
);
CREATE INDEX idx_tasks_status ON tasks(status);
CREATE INDEX idx_tasks_claimed_by ON tasks(claimed_by);
CREATE INDEX idx_tasks_deadline ON tasks(deadline) WHERE status = 'claimed';
CREATE INDEX idx_tasks_completed ON tasks(completed_at) WHERE status = 'completed';

-- 审计日志：金额改动、抢单、超时回收、打星全记
CREATE TABLE audit_logs (
  id          TEXT PRIMARY KEY,
  actor_id    TEXT REFERENCES users(id),   -- 系统操作（超时回收）为 NULL
  action      TEXT NOT NULL,
                -- task.create | task.update | task.amount_change | task.claim
                -- | task.submit | task.rate | task.expire | task.cancel
                -- | user.role_change
  target_id   TEXT NOT NULL,
  before_json TEXT,                        -- 变更前快照（JSON）
  after_json  TEXT,
  created_at  INTEGER NOT NULL
);
CREATE INDEX idx_audit_target ON audit_logs(target_id, created_at);
CREATE INDEX idx_audit_actor ON audit_logs(actor_id, created_at);

SELECT strftime('%Y-%m', completed_at/1000, 'unixepoch', '+8 hours') AS month,
       SUM(amount_cents) AS total, COUNT(*) AS cnt
FROM tasks WHERE status='completed' AND claimed_by=?
GROUP BY month ORDER BY month DESC;

        发布                抢单(乐观锁)         贴链接提交         打星验收
  [–] ──────→ open ──────────────→ claimed ──────────→ submitted ──────→ completed
               ↑                     │                     │
               │   ddl 到期未提交     │                     │  打星后即完成
               └─────────────────────┘                     │  (无打回重做)
                  Cron 自动释放                             │
               expire_count += 1                            │
                                                            
  任何非 completed 状态，boss 可 cancel → cancelled（终态）

UPDATE tasks SET status='claimed', claimed_by=?, claimed_at=?, updated_at=?
WHERE id=? AND status='open';
-- 影响行数 = 1 → 抢到；= 0 → 已被别人抢走

UPDATE tasks SET status='open', claimed_by=NULL, claimed_at=NULL,
                 expire_count = expire_count + 1, updated_at=?
WHERE status='claimed' AND deadline < ?;

1. GET  https://accounts.feishu.cn/open-apis/authen/v1/authorize
        ?client_id=&response_type=code&redirect_uri=&state=&scope=offline_access
2. 回调拿 code（5 分钟过期，只能用一次）
3. POST https://accounts.feishu.cn/oauth/v3/token
        {grant_type:'authorization_code', client_id, client_secret, code, redirect_uri}
4. GET  https://open.feishu.cn/open-apis/authen/v1/user_info
        Authorization: Bearer <user_access_token>
5. 按 union_id upsert users 表，签发自己的 session JWT（jose，HS256）写 httpOnly cookie

POST https://open.feishu.cn/open-apis/im/v1/messages?receive_id_type=chat_id
  Authorization: Bearer <tenant_access_token>
  { receive_id, msg_type: 'interactive', content: JSON.stringify(card) }

im:message:send_as_bot        发群消息
contact:user.email:readonly   拿邮箱（可选）
contact:user.employee_id:readonly  拿 user_id（可选，用于后续通讯录联动）
offline_access                拿 refresh_token

M100,20 L147.02,164.72 L23.92,75.28 L176.08,75.28 L52.98,164.72 Z

gsap.set(el, { fillOpacity: 0, scale: 1, rotation: -360, transformOrigin: '50% 50%' });
const tl = gsap.timeline();
tl.fromTo(el, { drawSVG: '0%' }, { drawSVG: '100%', duration: 1.5, ease: 'power2.inOut' })
  .to(el, { rotation: 0, duration: 1.5, ease: 'power2.inOut' }, 0)
  .to(el, { fillOpacity: 1, duration: 0.45, ease: 'power1.out' }, '-=0.2')
  .to(el, { scale: 1.15, duration: 0.22, ease: 'power2.out' })
  .to(el, { scale: 1, duration: 0.7, ease: 'elastic.out(1, 0.4)' });