fix: 计划总览独立数据源+实际模块表头修复

- 计划月度/季度总览: 改用planFinances计算,不再引用实际模块数据
- 新增computePlanMonthly函数从planFinances计算月度数据
- 实际模块SIGNED_COLS/UNSIGNED_COLS补全client_name列
- theadCols计数修正(14/7)
- 版本号 v1.0.0.28

.gitea/workflows/deploy.yml

@@ -0,0 +1,91 @@
+name: Deploy
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  deploy:
+    runs-on: prod-deploy
+    env:
+      DEPLOY_BASE: /opt/opc-manager
+      REPO_URL: https://qiukai:${{ secrets.DEPLOY_TOKEN }}@git.qiukai.me/qiukai/opc-manager.git
+      SERVICE_NAME: opc-manager
+    steps:
+      - name: Clone and deploy
+        run: |
+          set -e
+          RELEASE_ID="${{ github.sha }}"
+          RELEASE_DIR="${DEPLOY_BASE}/releases/${RELEASE_ID}"
+          CLONE_DIR="/tmp/opc-deploy-${RELEASE_ID}"
+
+          echo "=== 1. Clone repository ==="
+          rm -rf "${CLONE_DIR}"
+          git clone --depth 1 --branch main "${REPO_URL}" "${CLONE_DIR}"
+
+          echo "=== 2. Prepare release directory ==="
+          rm -rf "${RELEASE_DIR}"
+          mkdir -p "${RELEASE_DIR}"
+
+          # Copy repo content to release dir (exclude .git, .env, venv, data)
+          rsync -a --exclude='.git' \
+            --exclude='.env' \
+            --exclude='.env.local' \
+            --exclude='.venv' \
+            --exclude='data/uploads' \
+            --exclude='data/opc.sqlite' \
+            --exclude='__pycache__' \
+            --exclude='.gitea' \
+            "${CLONE_DIR}/" "${RELEASE_DIR}/"
+
+          echo "=== 3. Link shared resources ==="
+          mkdir -p "${RELEASE_DIR}/data"
+          # .env from shared dir (not in git)
+          ln -sfn "${DEPLOY_BASE}/shared/.env" "${RELEASE_DIR}/.env"
+          # uploads directory from shared (persist across releases)
+          mkdir -p "${DEPLOY_BASE}/shared/uploads"
+          ln -sfn "${DEPLOY_BASE}/shared/uploads" "${RELEASE_DIR}/data/uploads"
+
+          echo "=== 4. Setup Python venv ==="
+          cd "${RELEASE_DIR}"
+          python3 -m venv .venv
+          . .venv/bin/activate
+          pip install --no-cache-dir -r requirements.txt
+
+          echo "=== 5. Restart service ==="
+          # Update WorkingDirectory in service via symlink approach
+          # The systemd service points to /opt/opc-manager/current
+          ln -sfn "${RELEASE_DIR}" "${DEPLOY_BASE}/current"
+          systemctl restart "${SERVICE_NAME}"
+          sleep 3
+
+          echo "=== 6. Health check ==="
+          for i in 1 2 3 4 5; do
+            if curl -fsS http://127.0.0.1:5177/api/health >/dev/null 2>&1; then
+              echo "Health check passed"
+              break
+            fi
+            echo "Attempt $i: waiting for service..."
+            sleep 2
+          done
+
+          # Final verify
+          if ! curl -fsS http://127.0.0.1:5177/api/health >/dev/null 2>&1; then
+            echo "ERROR: Health check failed after 5 attempts"
+            echo "Rolling back to previous release..."
+            PREV=$(ls -t "${DEPLOY_BASE}/releases" | sed -n '2p')
+            if [ -n "${PREV}" ]; then
+              ln -sfn "${DEPLOY_BASE}/releases/${PREV}" "${DEPLOY_BASE}/current"
+              systemctl restart "${SERVICE_NAME}"
+              echo "Rolled back to ${PREV}"
+            fi
+            exit 1
+          fi
+
+          echo "=== 7. Cleanup old releases ==="
+          ls -dt "${DEPLOY_BASE}"/releases/*/ | tail -n +6 | xargs -r rm -rf
+
+          echo "=== 8. Cleanup temp ==="
+          rm -rf "${CLONE_DIR}"
+
+          echo "=== Deploy complete: ${RELEASE_ID} ==="

.gitignore

@@ -6,3 +6,4 @@ data/uploads/
 __pycache__/
 .DS_Store
 data/opc.sqlite
+.env

VERSION_LOG.md

@@ -1,5 +1,34 @@
 # OPC Manager Version Log
 
+## v1.1.0-beta — 2026-06-23
+- **安全**：.env 环境变量管理（SECRET_KEY/DB）、debug=False、except 改 mysql.connector.Error + logging
+- **性能**：attach_common 批量 IN 查询消除 N+1、monthly_finance 预解析 budget_data
+- **XSS**：批量添加 esc() 转义 21 处用户可控字段
+- **架构**：app.js 拆分为 7 个模块（utils/home/projects/proposals/products/finance/drawer）+ admin.js
+- **表单统一**：.form-ctrl 统一所有输入控件（替代 drawer-value/fin-input/inline-form 等）
+- **首页**：移除风险提醒卡片；财务趋势拆为 3 图（签约趋势/确收毛利/回款费用）
+- **业务方案**：标准资料库 + 其他资料双 Tab；标准 7 项自动初始化；标准资料支持评论
+- **经营管理**：
+  - 字段改名：客户名称→项目名称、销售人员→商务负责人
+  - 必填约束：项目名称/商务负责人/经营负责人/签约月份/签约金额>0
+  - 新增经营负责人字段；移除转移功能，新增删除项目
+  - 视图切换：确收/毛利 ↔ 回款/费用
+- **重点工作与台账**：
+  - 统计卡片样式与经营管理统一（无图标）
+  - 视图切换 + 新增任务按钮移到卡片外右对齐
+  - 任务状态简化为 3 态（未开始/进行中/已结束）
+  - 优先级点击切换、项目右键菜单（重命名/创建副本）
+  - 新建任务绑定当前选中项目（修复新建到错误项目的 bug）
+  - 任务详情抽屉改为创建到 document.body（避免 innerHTML 清除）
+- **用户体系**：
+  - 新增工作台：MCN·无界、无界·无界
+  - 新增账号：mcn/mcn123、wuji/wuji123
+  - 账号管理后台（admin 限定）：增删改查账号 + 工作台权限分配
+  - sidebar 顶部用户头像（首字母）+ 显示名，点击弹菜单（账号管理/退出）
+  - sidebar sticky 定位，滚动时不消失
+- **登录页**：参考 UOC 业务管理平台样式优化（图标 logo、密码显隐、loading 态、回车提交）
+- **初始化**：启动自动修正任务状态空值/done→进行中等非法值
+
 ## v1.0.1-beta — 2026-06-22
 - 数据库迁移：SQLite → MySQL 9.6，适配占位符/类型/游标
 - 用户体系：管理员 + OPC负责人角色，工作台权限隔离，登录鉴权

backend/db.py

@@ -0,0 +1,76 @@
+# db.py — 基础层：配置常量 + 数据库连接 + SQL 工具 + logger
+# 被 helpers.py, routes.py, migrations/*, flask_app.py 共同依赖
+
+import os
+import sys
+import json
+import logging
+from pathlib import Path
+from datetime import datetime
+
+import mysql.connector
+
+# 确保 backend 目录在 sys.path 中（兼容 gunicorn --preload 模式）
+_backend_dir = os.path.dirname(os.path.abspath(__file__))
+if _backend_dir not in sys.path:
+    sys.path.insert(0, _backend_dir)
+
+logger = logging.getLogger(__name__)
+logging.basicConfig(level=logging.INFO, format="%(asctime)s [%(levelname)s] %(message)s")
+
+# ---------- 路径常量 ----------
+ROOT = Path(__file__).resolve().parents[1]
+DATA_DIR = ROOT / "data"
+UPLOAD_DIR = DATA_DIR / "uploads"
+DB_PATH = DATA_DIR / "opc.sqlite"
+
+# ---------- 环境变量 ----------
+try:
+    from dotenv import load_dotenv
+    load_dotenv(ROOT / ".env")
+except ImportError:
+    pass
+
+WEIXIN_BASE = Path(os.environ.get("WEIXIN_BASE", "/Users/mac/天机阁/地阁/慰心斋"))
+
+# 建目录
+DATA_DIR.mkdir(parents=True, exist_ok=True)
+UPLOAD_DIR.mkdir(parents=True, exist_ok=True)
+
+
+# ---------- 数据库连接 ----------
+def db():
+    return mysql.connector.connect(
+        host=os.environ.get("DB_HOST", "127.0.0.1"),
+        port=int(os.environ.get("DB_PORT", "3306")),
+        user=os.environ.get("DB_USER", "opc"),
+        password=os.environ.get("DB_PASSWORD", "opc123456"),
+        database=os.environ.get("DB_NAME", "opc"),
+        charset="utf8mb4",
+        collation="utf8mb4_unicode_ci",
+    )
+
+
+def now():
+    return datetime.utcnow().isoformat()
+
+
+def _exec(conn, sql, args=()):
+    """执行 SQL，自动将 ? 转为 MySQL 的 %s"""
+    cur = conn.cursor(dictionary=True)
+    cur.execute(sql.replace("?", "%s"), args)
+    return cur
+
+
+def rows(conn, sql, args=()):
+    cur = _exec(conn, sql, args)
+    rows = cur.fetchall()
+    cur.close()
+    return rows
+
+
+def one(conn, sql, args=()):
+    cur = _exec(conn, sql, args)
+    row = cur.fetchone()
+    cur.close()
+    return row

backend/flask_app.py

@@ -1,22 +1,18 @@
-from datetime import date, datetime
-from pathlib import Path
+# flask_app.py — 入口：app 创建 + 蓝图注册 + 迁移 + 启动
+# 拆分后仅 ~35 行，所有路由在 routes.py，业务辅助在 helpers.py，基础设施在 db.py
+
 import os
-import shutil
-import sqlite3  # 保留用于数据迁移
-import mysql.connector
+import sys
 
-from flask import Flask, jsonify, render_template, request, send_file, session, redirect
-from werkzeug.security import generate_password_hash, check_password_hash
+# 确保 backend 目录在 sys.path 中（兼容 gunicorn --preload 模式）
+_backend_dir = os.path.dirname(os.path.abspath(__file__))
+if _backend_dir not in sys.path:
+    sys.path.insert(0, _backend_dir)
 
-
-ROOT = Path(__file__).resolve().parents[1]
-DATA_DIR = ROOT / "data"
-UPLOAD_DIR = DATA_DIR / "uploads"
-DB_PATH = DATA_DIR / "opc.sqlite"
-WEIXIN_BASE = Path("/Users/mac/天机阁/地阁/慰心斋")
-
-DATA_DIR.mkdir(parents=True, exist_ok=True)
-UPLOAD_DIR.mkdir(parents=True, exist_ok=True)
+from flask import Flask
+from db import ROOT  # 触发 load_dotenv + 建目录
+from routes import bp
+from migrations import run_migrations
 
 app = Flask(
     __name__,
@@ -24,765 +20,15 @@ app = Flask(
     static_folder=str(ROOT / "static"),
 )
 app.secret_key = os.environ.get("SECRET_KEY", "opc-dev-secret-2026")
+app.config["TEMPLATES_AUTO_RELOAD"] = True
+app.register_blueprint(bp)
 
-# ---------- 鉴权 ----------
-
-def login_required(f):
-    from functools import wraps
-    @wraps(f)
-    def decorated(*args, **kwargs):
-        if "user_id" not in session:
-            return jsonify({"error": "未登录"}), 401
-        return f(*args, **kwargs)
-    return decorated
-
-@app.route("/login")
-def login_page():
-    return render_template("login.html")
-
-
-@app.route("/api/auth/login", methods=["POST"])
-def auth_login():
-    data = request.get_json(force=True) or {}
-    username = data.get("username", "").strip()
-    password = data.get("password", "")
-    conn = db()
-    try:
-        user = one(conn, "SELECT * FROM users WHERE username=?", (username,))
-        if not user or not check_password_hash(user["password_hash"], password):
-            return jsonify({"error": "用户名或密码错误"}), 401
-        session["user_id"] = user["id"]
-        session["username"] = user["username"]
-        session["display_name"] = user["display_name"]
-        session["role"] = user["role"]
-        # 管理员可看所有工作台，OPC负责人看分配的工作台
-        if user["role"] == "admin":
-            session["tenants"] = ["科普·无界", "科研·无界", "医患·无界"]
-        else:
-            ut = rows(conn, "SELECT tenant FROM user_tenants WHERE user_id=?", (user["id"],))
-            session["tenants"] = [x["tenant"] for x in ut]
-        return jsonify({
-            "ok": True,
-            "user": {"id": user["id"], "username": user["username"], "display_name": user["display_name"], "role": user["role"]},
-            "tenants": session["tenants"],
-        })
-    finally:
-        conn.close()
-
-
-@app.route("/api/auth/logout", methods=["POST"])
-def auth_logout():
-    session.clear()
-    return jsonify({"ok": True})
-
-
-@app.route("/api/auth/me")
-def auth_me():
-    if "user_id" not in session:
-        return jsonify({"logged_in": False})
-    return jsonify({
-        "logged_in": True,
-        "user": {"id": session["user_id"], "username": session["username"], "display_name": session["display_name"], "role": session["role"]},
-        "tenants": session.get("tenants", []),
-    })
-
-
-# ---------- 业务 API ----------
-
-
-def db():
-    return mysql.connector.connect(
-        host="127.0.0.1",
-        port=3306,
-        user="opc",
-        password="opc123456",
-        database="opc",
-        charset="utf8mb4",
-        collation="utf8mb4_unicode_ci",
-    )
-
-
-def now():
-    return datetime.utcnow().isoformat()
-
-
-def _exec(conn, sql, args=()):
-    """执行 SQL，自动将 ? 转为 MySQL 的 %s"""
-    cur = conn.cursor(dictionary=True)
-    cur.execute(sql.replace("?", "%s"), args)
-    return cur
-
-
-def rows(conn, sql, args=()):
-    cur = _exec(conn, sql, args)
-    rows = cur.fetchall()
-    cur.close()
-    return rows
-
-
-def one(conn, sql, args=()):
-    cur = _exec(conn, sql, args)
-    row = cur.fetchone()
-    cur.close()
-    return row
-
-
-def init_db():
-    conn = db()
-    _exec(conn, """CREATE TABLE IF NOT EXISTS sales_leads (
-  id INT AUTO_INCREMENT PRIMARY KEY,
-  target_customer VARCHAR(1000) NOT NULL,
-  priority VARCHAR(1000) NOT NULL DEFAULT 'P1',
-  status VARCHAR(1000) NOT NULL DEFAULT '待跟进',
-  created_at VARCHAR(30) NOT NULL DEFAULT '',
-  updated_at VARCHAR(30) NOT NULL DEFAULT ''
-)""")
-    conn.commit()
-
-    _exec(conn, """CREATE TABLE IF NOT EXISTS follow_up_records (
-  id INT AUTO_INCREMENT PRIMARY KEY,
-  target_type VARCHAR(1000) NOT NULL,
-  target_id INT NOT NULL,
-  followed_at VARCHAR(1000) NOT NULL DEFAULT '',
-  follower VARCHAR(1000) NOT NULL DEFAULT '慰心',
-  follow_up_method VARCHAR(1000) NOT NULL DEFAULT '记录',
-  content VARCHAR(1000) NOT NULL DEFAULT '',
-  next_action VARCHAR(1000) NOT NULL DEFAULT '',
-  next_follow_up_at VARCHAR(1000) NOT NULL DEFAULT '',
-  created_at VARCHAR(30) NOT NULL DEFAULT '',
-  updated_at VARCHAR(30) NOT NULL DEFAULT ''
-)""")
-    conn.commit()
-
-    _exec(conn, """CREATE TABLE IF NOT EXISTS business_proposals (
-  id INT AUTO_INCREMENT PRIMARY KEY,
-  customer_or_project_name VARCHAR(1000) NOT NULL,
-  version VARCHAR(1000) NOT NULL,
-  description VARCHAR(1000) NOT NULL DEFAULT '',
-  status VARCHAR(1000) NOT NULL DEFAULT '草稿',
-  created_date VARCHAR(1000) NOT NULL DEFAULT '',
-  created_at VARCHAR(30) NOT NULL DEFAULT '',
-  updated_at VARCHAR(30) NOT NULL DEFAULT ''
-)""")
-    conn.commit()
-
-    _exec(conn, """CREATE TABLE IF NOT EXISTS operation_projects (
-  id INT AUTO_INCREMENT PRIMARY KEY,
-  project_name VARCHAR(1000) NOT NULL,
-  project_version VARCHAR(1000) NOT NULL DEFAULT 'v1.0',
-  project_type VARCHAR(1000) NOT NULL DEFAULT 'opportunity',
-  project_status VARCHAR(1000) NOT NULL DEFAULT '',
-  current_stage VARCHAR(1000) NOT NULL DEFAULT '',
-  owner VARCHAR(1000) NOT NULL DEFAULT '慰心',
-  start_date VARCHAR(1000) NOT NULL DEFAULT '',
-  end_date VARCHAR(1000) NOT NULL DEFAULT '',
-  target_customer VARCHAR(1000) NOT NULL DEFAULT '',
-  customer_need VARCHAR(1000) NOT NULL DEFAULT '',
-  expected_contract_amount DOUBLE NOT NULL DEFAULT 0,
-  expected_sign_date VARCHAR(1000) NOT NULL DEFAULT '',
-  sign_probability DOUBLE NOT NULL DEFAULT 0,
-  next_action VARCHAR(1000) NOT NULL DEFAULT '',
-  related_business_proposal_id INTEGER,
-  sop_file_id INTEGER,
-  sop_stage VARCHAR(1000) NOT NULL DEFAULT '',
-  execution_progress DOUBLE NOT NULL DEFAULT 0,
-  current_deliverable VARCHAR(1000) NOT NULL DEFAULT '',
-  risks VARCHAR(1000) NOT NULL DEFAULT '',
-  notes VARCHAR(1000) NOT NULL DEFAULT '',
-  created_at VARCHAR(30) NOT NULL DEFAULT '',
-  updated_at VARCHAR(30) NOT NULL DEFAULT ''
-)""")
-    conn.commit()
-
-    _exec(conn, """CREATE TABLE IF NOT EXISTS product_versions (
-  id INT AUTO_INCREMENT PRIMARY KEY,
-  product_name VARCHAR(1000) NOT NULL,
-  version VARCHAR(1000) NOT NULL,
-  version_goal VARCHAR(1000) NOT NULL DEFAULT '',
-  feature_list VARCHAR(1000) NOT NULL DEFAULT '',
-  launch_date VARCHAR(1000) NOT NULL DEFAULT '',
-  status VARCHAR(1000) NOT NULL DEFAULT '规划中',
-  notes VARCHAR(1000) NOT NULL DEFAULT '',
-  created_at VARCHAR(30) NOT NULL DEFAULT '',
-  updated_at VARCHAR(30) NOT NULL DEFAULT ''
-)""")
-    conn.commit()
-
-    _exec(conn, """CREATE TABLE IF NOT EXISTS finance_records (
-  id INT AUTO_INCREMENT PRIMARY KEY,
-  month VARCHAR(1000) NOT NULL,
-  project_name VARCHAR(1000) NOT NULL DEFAULT '科普（慰心斋）',
-  record_type VARCHAR(1000) NOT NULL,
-  category VARCHAR(1000) NOT NULL DEFAULT '',
-  amount DOUBLE NOT NULL DEFAULT 0,
-  occurred_date VARCHAR(1000) NOT NULL DEFAULT '',
-  notes VARCHAR(1000) NOT NULL DEFAULT '',
-  created_at VARCHAR(30) NOT NULL DEFAULT '',
-  updated_at VARCHAR(30) NOT NULL DEFAULT ''
-)""")
-    conn.commit()
-
-    _exec(conn, """CREATE TABLE IF NOT EXISTS file_assets (
-  id INT AUTO_INCREMENT PRIMARY KEY,
-  module VARCHAR(1000) NOT NULL,
-  owner_id INT NOT NULL,
-  owner_version VARCHAR(1000) NOT NULL DEFAULT '',
-  file_category VARCHAR(1000) NOT NULL DEFAULT '',
-  file_name VARCHAR(1000) NOT NULL,
-  file_type VARCHAR(1000) NOT NULL DEFAULT '',
-  file_size INTEGER NOT NULL DEFAULT 0,
-  file_path VARCHAR(1000) NOT NULL,
-  is_external INTEGER NOT NULL DEFAULT 0,
-  notes VARCHAR(1000) NOT NULL DEFAULT '',
-  created_at VARCHAR(30) NOT NULL DEFAULT '',
-  updated_at VARCHAR(30) NOT NULL DEFAULT ''
-)""")
-    conn.commit()
-
-    _exec(conn, """CREATE TABLE IF NOT EXISTS project_tasks (
-  id INT AUTO_INCREMENT PRIMARY KEY,
-  project_id INTEGER NOT NULL,
-  phase VARCHAR(1000) NOT NULL DEFAULT '',
-  milestone VARCHAR(1000) NOT NULL DEFAULT '',
-  task VARCHAR(1000) NOT NULL DEFAULT '',
-  owner VARCHAR(1000) NOT NULL DEFAULT '',
-  due_date VARCHAR(1000) NOT NULL DEFAULT '',
-  blockers VARCHAR(1000) NOT NULL DEFAULT '',
-  notes VARCHAR(1000) NOT NULL DEFAULT '',
-  created_at VARCHAR(30) NOT NULL DEFAULT '',
-  updated_at VARCHAR(30) NOT NULL DEFAULT ''
-)""")
-    conn.commit()
-
-    # 用户表
-    try: _exec(conn, """CREATE TABLE IF NOT EXISTS users (
-  id INT AUTO_INCREMENT PRIMARY KEY,
-  username VARCHAR(100) NOT NULL UNIQUE,
-  password_hash VARCHAR(255) NOT NULL,
-  display_name VARCHAR(100) NOT NULL,
-  role VARCHAR(50) NOT NULL DEFAULT 'opc_owner',
-  created_at VARCHAR(30) NOT NULL DEFAULT ''
-)""")
-    except: pass
-    conn.commit()
-
-    # 用户-工作台关联表
-    try: _exec(conn, """CREATE TABLE IF NOT EXISTS user_tenants (
-  id INT AUTO_INCREMENT PRIMARY KEY,
-  user_id INT NOT NULL,
-  tenant VARCHAR(100) NOT NULL,
-  UNIQUE KEY (user_id, tenant)
-)""")
-    except: pass
-    conn.commit()
-
-    # project_finances 表（月度预算 + 签约信息）
-    try: _exec(conn, """CREATE TABLE IF NOT EXISTS project_finances (
-  id INT AUTO_INCREMENT PRIMARY KEY,
-  tenant VARCHAR(100) NOT NULL DEFAULT '科普·无界',
-  project_id VARCHAR(100) NOT NULL DEFAULT '',
-  business_type VARCHAR(100) NOT NULL DEFAULT '',
-  customer_name VARCHAR(200) NOT NULL DEFAULT '',
-  sign_amount DOUBLE NOT NULL DEFAULT 0,
-  sign_month VARCHAR(20) NOT NULL DEFAULT '',
-  status VARCHAR(50) NOT NULL DEFAULT '待签约',
-  sales_person VARCHAR(100) NOT NULL DEFAULT '',
-  total_rev DOUBLE NOT NULL DEFAULT 0,
-  total_gross DOUBLE NOT NULL DEFAULT 0,
-  budget_data TEXT,
-  created_at VARCHAR(30) NOT NULL DEFAULT '',
-  updated_at VARCHAR(30) NOT NULL DEFAULT ''
-)""")
-    except: pass
-    conn.commit()
-
-    # Schema migrations — 添加后续迁移的列（幂等）
-    migrations = [
-        "ALTER TABLE sales_leads ADD COLUMN tenant VARCHAR(100) NOT NULL DEFAULT '科普·无界'",
-        "ALTER TABLE follow_up_records ADD COLUMN tenant VARCHAR(100) NOT NULL DEFAULT '科普·无界'",
-        "ALTER TABLE business_proposals ADD COLUMN tenant VARCHAR(100) NOT NULL DEFAULT '科普·无界'",
-        "ALTER TABLE business_proposals ADD COLUMN proposal_type VARCHAR(100) NOT NULL DEFAULT '业务方案'",
-        "ALTER TABLE business_proposals ADD COLUMN notes VARCHAR(2000) NOT NULL DEFAULT ''",
-        "ALTER TABLE operation_projects ADD COLUMN tenant VARCHAR(100) NOT NULL DEFAULT '科普·无界'",
-        "ALTER TABLE product_versions ADD COLUMN tenant VARCHAR(100) NOT NULL DEFAULT '科普·无界'",
-        "ALTER TABLE product_versions ADD COLUMN platform VARCHAR(100) NOT NULL DEFAULT ''",
-        "ALTER TABLE finance_records ADD COLUMN tenant VARCHAR(100) NOT NULL DEFAULT '科普·无界'",
-        "ALTER TABLE project_tasks ADD COLUMN tenant VARCHAR(100) NOT NULL DEFAULT '科普·无界'",
-        "ALTER TABLE project_tasks ADD COLUMN status VARCHAR(50) NOT NULL DEFAULT '未开始'",
-        "ALTER TABLE project_tasks ADD COLUMN sort_order INT NOT NULL DEFAULT 0",
-        "ALTER TABLE project_tasks ADD COLUMN priority VARCHAR(10) NOT NULL DEFAULT 'P2'",
-        # 12 月字段（确收/毛利/回款/费用/月度现金流）
-    ]
-    for m in ["01","02","03","04","05","06","07","08","09","10","11","12"]:
-        migrations.append(f"ALTER TABLE project_finances ADD COLUMN rev_2026_{m} DOUBLE NOT NULL DEFAULT 0")
-        migrations.append(f"ALTER TABLE project_finances ADD COLUMN gross_2026_{m} DOUBLE NOT NULL DEFAULT 0")
-        migrations.append(f"ALTER TABLE project_finances ADD COLUMN payment_2026_{m} DOUBLE NOT NULL DEFAULT 0")
-        migrations.append(f"ALTER TABLE project_finances ADD COLUMN cost_2026_{m} DOUBLE NOT NULL DEFAULT 0")
-
-    for mig in migrations:
-        try: _exec(conn, mig)
-        except: pass
-    conn.commit()
-
-    # 初始化默认用户（只执行一次）
-    if not one(conn, "SELECT id FROM users LIMIT 1"):
-        _exec(conn, """INSERT INTO users (username, password_hash, display_name, role, created_at) VALUES (?,?,?,?,?)""",
-            ("qiukai", generate_password_hash("yxcowork2026", "pbkdf2:sha256"), "qiukai", "admin", date.today().isoformat()))
-        _exec(conn, """INSERT INTO users (username, password_hash, display_name, role, created_at) VALUES (?,?,?,?,?)""",
-            ("kepu", generate_password_hash("kepu123", "pbkdf2:sha256"), "科普负责人", "opc_owner", date.today().isoformat()))
-        _exec(conn, """INSERT INTO users (username, password_hash, display_name, role, created_at) VALUES (?,?,?,?,?)""",
-            ("keyan", generate_password_hash("keyan123", "pbkdf2:sha256"), "科研负责人", "opc_owner", date.today().isoformat()))
-        _exec(conn, """INSERT INTO users (username, password_hash, display_name, role, created_at) VALUES (?,?,?,?,?)""",
-            ("yihuan", generate_password_hash("yihuan123", "pbkdf2:sha256"), "医患负责人", "opc_owner", date.today().isoformat()))
-        # 各 OPC 负责人绑定工作台
-        for uname, tenant in [("kepu","科普·无界"),("keyan","科研·无界"),("yihuan","医患·无界")]:
-            u = one(conn, "SELECT id FROM users WHERE username=?", (uname,))
-            if u:
-                _exec(conn, "INSERT INTO user_tenants (user_id, tenant) VALUES (?,?)", (u["id"], tenant))
-        conn.commit()
-
-    if one(conn, "SELECT id FROM sales_leads LIMIT 1"):
-        conn.close()
-        return
-
-    sales = [
-        ("齐鲁制药", "P0", "跟进中", "多产品线科普年度框架，需推进高层沟通。"),
-        ("百利天恒", "P0", "方案中", "BL-B01D1 上市前医生教育机会，准备方案。"),
-        ("信达生物", "P0", "已签约", "现有科普项目升级/续约，重点保障执行。"),
-        ("三生制药", "P1", "待跟进", "多科室医生教育+患者科普机会。"),
-        ("天广实生物", "P1", "待跟进", "血液肿瘤医生教育机会。"),
-    ]
-    for customer, priority, status, note in sales:
-        cur = _exec(conn, 
-            "INSERT INTO sales_leads (target_customer, priority, status) VALUES (?,?,?)",
-            (customer, priority, status),
-        )
-        _exec(conn, 
-            "INSERT INTO follow_up_records (target_type,target_id,followed_at,content,next_action) VALUES (?,?,?,?,?)",
-            ("sales", cur.lastrowid, date.today().isoformat(), note, "明确下一次沟通人和时间"),
-        )
-
-    cur = _exec(conn, 
-        "INSERT INTO business_proposals (customer_or_project_name,version,description,status,created_date) VALUES (?,?,?,?,?)",
-        ("信达生物", "v1.5", "信达科普项目续约与报价方案", "已提交客户", "2026-05-28"),
-    )
-    proposal_id = cur.lastrowid
-    proposal_dir = WEIXIN_BASE / "2、业务方案/信达/v1.5"
-    for category, names in {
-        "方案": ["整体方案.pptx", "整体方案.pdf"],
-        "成本": ["业务报价-2亿方案.xlsx", "业务报价-5250万方案.xlsx", "5、最新报价.xlsx"],
-        "SOP": ["SOP.docx"],
-        "财务流程": ["财务流程.docx"],
-    }.items():
-        for name in names:
-            add_file_index(conn, "proposal", proposal_id, "v1.5", category, proposal_dir / name, external=True)
-
-    projects = [
-        ("圆心科技 科普文章项目", "v2026-文章", "execution", "SOP 执行中", "内容生产", 55, "文章内容生产与审核执行中"),
-        ("圆心科技 科普视频项目", "v2026-视频", "execution", "SOP 执行中", "内容生产", 45, "视频脚本、拍摄与审核推进"),
-        ("圆心科技 科普专访项目", "v2026-专访", "opportunity", "方案已提交", "商务推进", 0, "专访项目推动签约"),
-    ]
-    op_dir = WEIXIN_BASE / "3、运营方案"
-    for name, version, kind, status, stage, progress, note in projects:
-        cur = _exec(conn, 
-            """INSERT INTO operation_projects
-            (project_name,project_version,project_type,project_status,current_stage,target_customer,customer_need,
-             expected_contract_amount,expected_sign_date,sign_probability,next_action,sop_stage,execution_progress,current_deliverable)
-            VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?)""",
-            (name, version, kind, status, stage, "圆心科技", "科普内容项目执行与管理", 0 if kind == "execution" else 200, "2026-06", 100 if kind == "execution" else 70, "补齐版本要求文件并更新下一节点", stage, progress, note),
-        )
-        _exec(conn, 
-            "INSERT INTO follow_up_records (target_type,target_id,followed_at,content,next_action) VALUES (?,?,?,?,?)",
-            ("operation", cur.lastrowid, date.today().isoformat(), note, "补齐版本要求文件并更新下一节点"),
-        )
-
-    file_map = [
-        (1, "v2026-文章", "项目方案", "圆心科技--科普文章项目(1).pptx"),
-        (2, "v2026-视频", "项目方案", "圆心科技-科普视频项目(1).pptx"),
-        (3, "v2026-专访", "项目方案", "圆心科技-科普专访项目-2026年(1).pdf"),
-        (1, "v2026-文章", "项目管理手册", "圆心科技《项目管理手册》-2026年.pdf"),
-        (2, "v2026-视频", "审核标准", "科普项目-审核标准（文章-视频-音频）.pdf"),
-    ]
-    for project_id, version, category, filename in file_map:
-        add_file_index(conn, "operation", project_id, version, category, op_dir / filename, external=True)
-
-    products = [
-        ("妙手医生服务小程序", "v1.1", "视频任务增强 + 积分商城", "草稿箱、批量上传、积分商城、消息通知", "2026-Q3", "规划中", "科普平台"),
-        ("数字化营销后台管理系统", "v1.2", "运营数据看板 + 智能审核", "医生活跃、任务完成率、AI 预审、渠道数据上报", "2026-Q3", "设计中", "真研平台"),
-        ("妙手患者服务", "v0.5", "科普浏览 + 医生主页 MVP", "科普文章/视频浏览、医生主页、搜索", "2026-Q3", "规划中", "科普平台"),
-        ("数字人内容平台", "v0.1", "基础数字人视频生成 MVP", "预设形象、AI 配音、脚本驱动、简单模板", "2026-Q3", "规划中", "科普平台"),
-        ("渠道分发引擎", "v1.0", "六渠道统一分发", "分发 API、内容适配、分发排期、效果追踪", "2027-Q1", "规划中", "科普平台"),
-    ]
-    for product in products:
-        cur = _exec(conn, 
-            "INSERT INTO product_versions (product_name,version,version_goal,feature_list,launch_date,status,platform) VALUES (?,?,?,?,?,?,?)",
-            product,
-        )
-        _exec(conn, 
-            "INSERT INTO follow_up_records (target_type,target_id,followed_at,content,next_action) VALUES (?,?,?,?,?)",
-            ("product", cur.lastrowid, date.today().isoformat(), f"{product[0]} {product[1]}：{product[2]}", "按路线图推进"),
-        )
-
-    for month, record_type, category, amount, notes in [
-        ("2026-05", "revenue", "信达生物续约确认收入", 120, "信达项目阶段确收"),
-        ("2026-06", "revenue", "信达生物续约确认收入", 80, "信达项目尾款预估"),
-        ("2026-05", "cost_expense", "内容生产", 32, "医生劳务与内容制作"),
-        ("2026-05", "cost_expense", "运营管理", 16, "项目管理与渠道协同"),
-        ("2026-06", "cost_expense", "渠道分发", 24, "投放与分发费用"),
-    ]:
-        _exec(conn, 
-            "INSERT INTO finance_records (month,record_type,category,amount,occurred_date,notes) VALUES (?,?,?,?,?,?)",
-            (month, record_type, category, amount, f"{month}-01", notes),
-        )
-
-    # Seed project tasks for 信达科普文章项目 (project_id=1)
-    tasks_seed = [
-        ("阶段1：渠道与商务确认", "商务对接", "合同签订", "Anna", "2026-06-30", "法务审核中", "合同签订后开始执行"),
-        ("阶段1：渠道与商务确认", "官媒渠道确认", "沟通官媒确定", "段丽华", "2026-06-30", "官媒尽力推，以先达成合作为准", "集团支持"),
-        ("阶段1：渠道与商务确认", "官媒渠道确认", "官媒合作签约", "段丽华", "2026-06-18", "", "官媒确认细节"),
-        ("阶段2：系统与标准搭建", "系统开发上线", "音频专访系统开发上线", "戴敏/梁军营", "2026-06-18", "客户比较着急执行，需要技术的资源", ""),
-        ("阶段2：系统与标准搭建", "系统开发上线", "精品视频系统开发上线", "戴敏/梁军营", "2026-06-25", "", ""),
-        ("阶段2：系统与标准搭建", "标准与培训", "业务执行手册SOP", "胡龙飞", "2026-06-12", "", "系统开发上线"),
-        ("阶段3：人员与审核入驻", "团队组建", "医学审核人员到位", "胡龙飞", "2026-06-15", "", "审核人员招聘"),
-        ("阶段3：人员与审核入驻", "团队组建", "视频制作人员到位", "胡龙飞", "2026-06-18", "", "项目经理招聘"),
-        ("阶段4：供应链与制作", "供应商准入", "准入拍摄/剪辑/主持人", "胡龙飞/侯亚凤", "2026-06-18", "", ""),
-        ("阶段2：系统与标准搭建", "脚本生产及审核", "生产脚本", "军营", "2026-06-12", "脚本目前生产比较机械，需要提前准备", "细分标签领域完成"),
-    ]
-    for phase, milestone, task, owner, due_date, blockers, notes in tasks_seed:
-        _exec(conn, 
-            "INSERT INTO project_tasks (project_id,phase,milestone,task,owner,due_date,blockers,notes) VALUES (?,?,?,?,?,?,?,?)",
-            (1, phase, milestone, task, owner, due_date, blockers, notes),
-        )
-
-    conn.commit()
-    conn.close()
-
-
-def add_file_index(conn, module, owner_id, owner_version, category, path, external=True):
-    path = Path(path)
-    if not path.exists():
-        return
-    _exec(conn, 
-        """INSERT INTO file_assets
-        (module,owner_id,owner_version,file_category,file_name,file_type,file_size,file_path,is_external)
-        VALUES (?,?,?,?,?,?,?,?,?)""",
-        (module, owner_id, owner_version, category, path.name, path.suffix.lower().lstrip("."), path.stat().st_size, str(path), 1 if external else 0),
-    )
-
-
-def latest_followup(conn, target_type, target_id):
-    row = one(
-        conn,
-        "SELECT content FROM follow_up_records WHERE target_type=? AND target_id=? ORDER BY followed_at DESC, id DESC LIMIT 1",
-        (target_type, target_id),
-    )
-    return row["content"] if row else ""
-
-
-def attach_common(conn, resource, items):
-    target_map = {"sales": "sales", "proposals": "proposal", "operations": "operation", "products": "product"}
-    for item in items:
-        if resource in target_map:
-            item["followups"] = rows(
-                conn,
-                "SELECT * FROM follow_up_records WHERE target_type=? AND target_id=? ORDER BY followed_at DESC, id DESC",
-                (target_map[resource], item["id"]),
-            )
-            item["latest_follow_up_record"] = item["followups"][0]["content"] if item["followups"] else ""
-        if resource == "proposals":
-            item["files"] = rows(conn, "SELECT * FROM file_assets WHERE module='proposal' AND owner_id=? ORDER BY id DESC", (item["id"],))
-        if resource == "operations":
-            item["files"] = rows(conn, "SELECT * FROM file_assets WHERE module='operation' AND owner_id=? ORDER BY id DESC", (item["id"],))
-    return items
-
-
-def monthly_finance(conn, tenant="科普·无界"):
-    from datetime import date
-    today = date.today()
-    # 6 months: 3 before + current + 2 after
-    from dateutil.relativedelta import relativedelta
-    start = today + relativedelta(months=-3)
-    months = []
-    for i in range(6):
-        m = start + relativedelta(months=i)
-        months.append(m.strftime("%Y-%m"))
-    data = []
-    for month in months:
-        col_month = month.replace("-", "_")
-        col_rev = f"rev_{col_month}"
-        col_gross = f"gross_{col_month}"
-        # Only project_finances has columns for 2026-06 through 2026-09
-        if month in ["2026-06", "2026-07", "2026-08", "2026-09"]:
-            revenue = one(conn, f"SELECT COALESCE(SUM({col_rev}),0) AS v FROM project_finances WHERE tenant=?", (tenant,))["v"]
-            gross = one(conn, f"SELECT COALESCE(SUM({col_gross}),0) AS v FROM project_finances WHERE tenant=?", (tenant,))["v"]
-        else:
-            revenue = 0
-            gross = 0
-        data.append({
-            "month": month, "revenue": revenue,
-            "labor": 0, "expense": 0, "purchase": 0,
-            "net_profit": gross,
-        })
-    return data
-
-
-@app.route("/")
-def index():
-    if "user_id" not in session:
-        return redirect("/login")
-    return render_template("index.html")
-
-
-@app.route("/api/bootstrap")
-def bootstrap():
-    if "user_id" not in session:
-        return jsonify({"error": "未登录"}), 401
-    tenant = request.args.get("tenant", session.get("tenants", ["科普·无界"])[0])
-    # 验证用户是否有权限访问该 workbench
-    allowed = session.get("tenants", [])
-    if tenant not in allowed:
-        tenant = allowed[0]
-    conn = db()
-    try:
-        def q(sql, *args):
-            return rows(conn, sql, args)
-        sales = attach_common(conn, "sales", q("SELECT * FROM sales_leads WHERE tenant=? ORDER BY id DESC", tenant))
-        proposals = attach_common(conn, "proposals", q("SELECT * FROM business_proposals WHERE tenant=? ORDER BY id DESC", tenant))
-        operations = attach_common(conn, "operations", q("SELECT * FROM operation_projects WHERE tenant=? ORDER BY id DESC", tenant))
-        products = attach_common(conn, "products", q("SELECT * FROM product_versions WHERE tenant=? ORDER BY id DESC", tenant))
-        finance = q("SELECT * FROM finance_records WHERE tenant=? ORDER BY month DESC, id DESC", tenant)
-        tasks = q("SELECT * FROM project_tasks WHERE tenant=? ORDER BY phase, sort_order, id", tenant)
-        pfs = q("SELECT * FROM project_finances WHERE tenant=? ORDER BY id DESC", tenant)
-        current_month = "2026-06"
-        # Finance aggregates — from project_finances (project-based)
-        def pf_sum(field):
-            return sum(x[field] or 0 for x in pfs)
-        rev_month = pf_sum("rev_2026_06")
-        gross_month = pf_sum("gross_2026_06")
-        rev_q2 = pf_sum("rev_2026_06")
-        gross_q2 = pf_sum("gross_2026_06")
-        rev_annual = rev_q2
-        gross_annual = gross_q2
-        # Contract aggregates — time-based
-        signed_amount = sum(x["expected_contract_amount"] or 0 for x in operations if x["project_status"] == "已签约")
-        from datetime import date
-        today = date.today()
-        def contract_in_period(op, start, end):
-            if op["project_status"] != "已签约": return False
-            try:
-                d = date.fromisoformat(op["created_at"][:10])
-                return start <= d <= end
-            except: return False
-        signed_annual = sum(x["expected_contract_amount"] or 0 for x in operations if contract_in_period(x, date(2026,1,1), date(2026,12,31)))
-        signed_q2 = sum(x["expected_contract_amount"] or 0 for x in operations if contract_in_period(x, date(2026,4,1), date(2026,6,30)))
-        signed_month = sum(x["expected_contract_amount"] or 0 for x in operations if contract_in_period(x, date(2026,6,1), date(2026,6,30)))
-        pipeline_amount = sum(x["expected_contract_amount"] or 0 for x in operations if x["project_status"] not in ["已签约","已丢单","已归档","已完成"])
-        signed_not_executed = sum(x["expected_contract_amount"] or 0 for x in operations if x["project_type"] == "execution" and x["execution_progress"] < 100)
-        summary = {
-            "project_name": "科普（慰心斋）",
-            "metrics": {
-                "p0_customers": len([x for x in sales if x["priority"] == "P0"]),
-                "active_sales": len([x for x in sales if x["status"] in ["待跟进", "跟进中", "方案中", "商务谈判"]]),
-                "execution_projects": len([x for x in operations if x["project_type"] == "execution"]),
-                "risk_projects": len([x for x in operations if x["project_status"] == "有风险" or x["risks"]]),
-                "monthly_revenue": rev_month,
-                "monthly_net_profit": gross_month,
-                "monthly_gross": gross_month,
-                "upcoming_products": len([x for x in products if x["status"] in ["规划中", "设计中", "开发中", "测试中"]]),
-                "total_projects": len(operations),
-                "total_proposals": len(proposals),
-                "total_products": len(products),
-                # Extended finance metrics
-                "signed_amount": signed_amount,
-                "signed_annual": signed_annual,
-                "signed_q2": signed_q2,
-                "signed_month": signed_month,
-                "pipeline_amount": pipeline_amount,
-                "revenue_annual": rev_annual,
-                "revenue_q2": rev_q2,
-                "gross_annual": gross_annual,
-                "gross_q2": gross_q2,
-                "signed_not_executed": signed_not_executed,
-            },
-            "recent": q("SELECT * FROM follow_up_records WHERE tenant=? ORDER BY id DESC LIMIT 8", tenant),
-            "risks": [{"title": "执行提醒", "content": x["next_action"]} for x in operations if x["next_action"]][:5],
-        }
-        return jsonify({"summary": summary, "sales": sales, "proposals": proposals, "operations": operations, "products": products, "finance": finance, "projectFinances": pfs, "financeMonthly": monthly_finance(conn, tenant), "tasks": tasks, "tenant": tenant, "tenants": allowed})
-    finally:
-        conn.close()
-
-
-TABLES = {
-    "sales": ("sales_leads", ["target_customer", "priority", "status", "tenant"]),
-    "proposals": ("business_proposals", ["customer_or_project_name", "version", "description", "status", "created_date", "proposal_type", "notes", "tenant"]),
-    "operations": ("operation_projects", ["project_name", "project_version", "project_type", "project_status", "current_stage", "owner", "target_customer", "customer_need", "expected_contract_amount", "expected_sign_date", "sign_probability", "next_action", "sop_stage", "execution_progress", "current_deliverable", "risks", "notes", "tenant"]),
-    "products": ("product_versions", ["product_name", "version", "version_goal", "feature_list", "launch_date", "status", "platform", "notes", "tenant"]),
-    "finance": ("finance_records", ["month", "project_name", "record_type", "category", "amount", "occurred_date", "notes", "tenant"]),
-    "tasks": ("project_tasks", ["project_id", "phase", "milestone", "task", "owner", "due_date", "blockers", "notes", "status", "sort_order", "priority", "tenant"]),
-    "projectFinances": ("project_finances", ["project_id", "tenant", "business_type", "customer_name", "sign_amount", "sign_month", "status", "sales_person", "total_rev", "total_gross", "budget_data"]),
-}
-
-
-@app.route("/api/<resource>", methods=["POST"])
-@login_required
-def create_resource(resource):
-    if resource not in TABLES:
-        return jsonify({"error": "unknown resource"}), 404
-    table, cols = TABLES[resource]
-    payload = request.get_json(force=True).get("data", {})
-    values = [payload.get(col, "") for col in cols]
-    conn = db()
-    try:
-        cur = _exec(conn, f"INSERT INTO {table} ({','.join(cols)}) VALUES ({','.join(['?'] * len(cols))})", values)
-        conn.commit()
-        return jsonify({"id": cur.lastrowid})
-    finally:
-        conn.close()
-
-
-@app.route("/api/<resource>/<int:item_id>", methods=["PUT", "DELETE"])
-@login_required
-def update_resource(resource, item_id):
-    if resource not in TABLES:
-        return jsonify({"error": "unknown resource"}), 404
-    table, cols = TABLES[resource]
-    conn = db()
-    try:
-        if request.method == "DELETE":
-            _exec(conn, f"DELETE FROM {table} WHERE id=?", (item_id,))
-            conn.commit()
-            return jsonify({"ok": True})
-        payload = request.get_json(force=True).get("data", {})
-        update_cols = [col for col in cols if col in payload]
-        if update_cols:
-            _exec(conn, 
-                f"UPDATE {table} SET {','.join([col + '=?' for col in update_cols])}, updated_at=? WHERE id=?",
-                [payload[col] for col in update_cols] + [now(), item_id],
-            )
-            conn.commit()
-        return jsonify({"ok": True})
-    finally:
-        conn.close()
-
-
-@app.route("/api/followups/<target_type>/<int:target_id>", methods=["POST"])
-@login_required
-def add_followup(target_type, target_id):
-    payload = request.get_json(force=True).get("data", {})
-    conn = db()
-    try:
-        _exec(conn, 
-            """INSERT INTO follow_up_records
-            (target_type,target_id,followed_at,follower,follow_up_method,content,next_action,next_follow_up_at,tenant)
-            VALUES (?,?,?,?,?,?,?,?,?)""",
-            (
-                target_type,
-                target_id,
-                payload.get("followed_at") or date.today().isoformat(),
-                payload.get("follower") or "慰心",
-                payload.get("follow_up_method") or "记录",
-                payload.get("content") or "",
-                payload.get("next_action") or "",
-                payload.get("next_follow_up_at") or "",
-                payload.get("tenant") or "科普·无界",
-            ),
-        )
-        conn.commit()
-        return jsonify({"ok": True})
-    finally:
-        conn.close()
-
-
-@app.route("/api/followups/<int:followup_id>", methods=["DELETE"])
-@login_required
-def delete_followup(followup_id):
-    conn = db()
-    try:
-        cur = _exec(conn, "DELETE FROM follow_up_records WHERE id=?", (followup_id,))
-        conn.commit()
-        if cur.rowcount == 0:
-            return jsonify({"error": "not found"}), 404
-        return jsonify({"ok": True})
-    finally:
-        conn.close()
-
-
-@app.route("/api/tasks/batch-sort", methods=["POST"])
-@login_required
-def batch_sort_tasks():
-    conn = db()
-    try:
-        items = request.get_json(force=True).get("items", [])
-        for item in items:
-            _exec(conn, "UPDATE project_tasks SET sort_order=? WHERE id=?", (item["sort_order"], item["id"]))
-        conn.commit()
-        return jsonify({"ok": True})
-    finally:
-        conn.close()
-
-
-@app.route("/api/files/upload", methods=["POST"])
-@login_required
-def upload_file():
-    file = request.files["file"]
-    module = request.form["module"]
-    owner_id = int(request.form["owner_id"])
-    owner_version = request.form.get("owner_version", "")
-    category = request.form.get("file_category", "")
-    folder = UPLOAD_DIR / module / str(owner_id)
-    folder.mkdir(parents=True, exist_ok=True)
-    target = folder / file.filename
-    file.save(target)
-    conn = db()
-    try:
-        add_file_index(conn, module, owner_id, owner_version, category, target, external=False)
-        conn.commit()
-        return jsonify({"ok": True})
-    finally:
-        conn.close()
-
-
-@app.route("/api/files/<int:file_id>/content")
-def file_content(file_id):
-    conn = db()
-    try:
-        asset = one(conn, "SELECT * FROM file_assets WHERE id=?", (file_id,))
-        if not asset:
-            return jsonify({"error": "not found"}), 404
-        path = Path(asset["file_path"])
-        if not path.exists():
-            return jsonify({"error": "missing"}), 404
-        return send_file(path, as_attachment=request.args.get("inline") == "false", download_name=asset["file_name"])
-    finally:
-        conn.close()
-
-
-@app.route("/api/files/<int:file_id>", methods=["DELETE"])
-@login_required
-def delete_file(file_id):
-    conn = db()
-    try:
-        asset = one(conn, "SELECT * FROM file_assets WHERE id=?", (file_id,))
-        if not asset:
-            return jsonify({"error": "not found"}), 404
-        # Remove physical file from uploads/ if it was uploaded to our dir
-        path = Path(asset["file_path"])
-        if path.exists() and str(UPLOAD_DIR) in str(path.resolve()):
-            path.unlink(missing_ok=True)
-        _exec(conn, "DELETE FROM file_assets WHERE id=?", (file_id,))
-        conn.commit()
-        return jsonify({"ok": True})
-    finally:
-        conn.close()
-
-
-@app.route("/api/health")
-def health():
-    return jsonify({"ok": True, "db": str(DB_PATH)})
-
-
-init_db()
-
+# 模块级执行迁移（保留 gunicorn --preload 行为：导入即触发）
+run_migrations()
 
 if __name__ == "__main__":
-    app.run(host="127.0.0.1", port=5177, debug=True)
+    app.run(
+        host="127.0.0.1",
+        port=5177,
+        debug=os.environ.get("FLASK_DEBUG", "false").lower() in ("true", "1", "yes"),
+    )

backend/helpers.py

@@ -0,0 +1,128 @@
+# helpers.py — 业务查询辅助函数
+# 依赖：db.py；被 routes.py 和 migrations/seed_data.py 调用
+
+import json
+from datetime import date
+from pathlib import Path
+from db import _exec, rows, one
+
+
+def add_file_index(conn, module, owner_id, owner_version, category, path, external=True):
+    path = Path(path)
+    if not path.exists():
+        return
+    _exec(conn,
+        """INSERT INTO file_assets
+        (module,owner_id,owner_version,file_category,file_name,file_type,file_size,file_path,is_external)
+        VALUES (?,?,?,?,?,?,?,?,?)""",
+        (module, owner_id, owner_version, category, path.name, path.suffix.lower().lstrip("."), path.stat().st_size, str(path), 1 if external else 0),
+    )
+
+
+def attach_common(conn, resource, items):
+    """批量加载 followups 和 files，避免 N+1 查询"""
+    if not items:
+        return items
+    target_map = {"sales": "sales", "proposals": "proposal", "operations": "operation", "products": "product"}
+    target_type = target_map.get(resource)
+    ids = [item["id"] for item in items]
+
+    # 批量查 followups（一次性 IN 查询）
+    if target_type:
+        placeholders = ",".join(["?"] * len(ids))
+        all_followups = rows(
+            conn,
+            f"SELECT * FROM follow_up_records WHERE target_type=? AND target_id IN ({placeholders}) ORDER BY followed_at DESC, id DESC",
+            [target_type] + ids,
+        )
+        followups_by_id = {}
+        for fu in all_followups:
+            followups_by_id.setdefault(fu["target_id"], []).append(fu)
+        for item in items:
+            item["followups"] = followups_by_id.get(item["id"], [])
+            item["latest_follow_up_record"] = item["followups"][0]["content"] if item["followups"] else ""
+
+    # 批量查 files（proposals + operations）
+    file_modules = {"proposals": "proposal", "operations": "operation"}
+    if resource in file_modules:
+        module = file_modules[resource]
+        placeholders = ",".join(["?"] * len(ids))
+        all_files = rows(
+            conn,
+            f"SELECT * FROM file_assets WHERE module=? AND owner_id IN ({placeholders}) ORDER BY id DESC",
+            [module] + ids,
+        )
+        files_by_id = {}
+        for f in all_files:
+            files_by_id.setdefault(f["owner_id"], []).append(f)
+        for item in items:
+            item["files"] = files_by_id.get(item["id"], [])
+
+    return items
+
+
+def monthly_finance(conn, tenant="科普·无界"):
+    _year = date.today().year
+    months = [f"{_year}-{m:02d}" for m in range(1, 13)]
+    pfs = rows(conn,
+        "SELECT sign_amount, sign_month, budget_data, expense_data FROM project_finances WHERE tenant=?",
+        [tenant])
+
+    parsed_budgets = []
+    expense_maps = {}
+    for pf in pfs:
+        try:
+            budget = json.loads(pf.get("budget_data") or "[]")
+        except (json.JSONDecodeError, TypeError):
+            budget = []
+        budget_map = {}
+        for b in budget:
+            key = (b.get("month") or "").replace("-", "_")
+            budget_map[key] = {
+                "rev": float(b.get("rev") or 0),
+                "gross": float(b.get("gross") or 0),
+                "payment": float(b.get("payment") or 0),
+            }
+        parsed_budgets.append((pf, budget_map))
+
+        # Parse expense_data for cost/paid
+        try:
+            ed = json.loads(pf.get("expense_data") or "[]")
+        except (json.JSONDecodeError, TypeError):
+            ed = []
+        em = {}
+        for e in ed:
+            key = (e.get("month") or "").replace("-", "_")
+            em[key] = {
+                "cost": float(e.get("cost") or 0),
+                "paid": float(e.get("paid") or 0),
+            }
+        expense_maps[pf.get("id", id(pf))] = em
+
+    data = []
+    for month in months:
+        key = month.replace("-", "_")
+        revenue = gross = payment = cost = paid = sign = 0
+        for pf, budget_map in parsed_budgets:
+            if (pf.get("sign_month") or "") == month:
+                sign += float(pf["sign_amount"] or 0)
+            b = budget_map.get(key)
+            if b:
+                revenue += b["rev"]
+                gross += b["gross"]
+                payment += b["payment"]
+            em = expense_maps.get(pf.get("id", id(pf)), {})
+            e = em.get(key)
+            if e:
+                cost += e["cost"]
+                paid += e["paid"]
+        data.append({
+            "month": month,
+            "revenue": round(revenue, 2),
+            "gross": round(gross, 2),
+            "payment": round(payment, 2),
+            "cost": round(cost, 2),
+            "paid": round(paid, 2),
+            "sign": round(sign, 2),
+        })
+    return data

backend/migrations/__init__.py

@@ -0,0 +1,33 @@
+"""migrations/__init__.py — 数据库自愈机制入口
+
+应用启动时调用 run_migrations()，自动：
+1. 建表（CREATE TABLE IF NOT EXISTS）
+2. 加列（SHOW COLUMNS 检查后 ALTER TABLE ADD COLUMN）
+3. 数据修正（UPDATE 修复脏数据/变更枚举值）
+4. 初始化默认用户和示例数据（仅空库时）
+
+参考 SalesManager 的 migrations/ 模式，所有迁移函数幂等可重复执行。
+"""
+
+
+def run_migrations():
+    """执行所有迁移（顺序执行，幂等）
+
+    延迟 import 避免 circular import（migrations 各子模块依赖 flask_app 的 db/_exec 等）。
+    """
+    from migrations.tables import migrate_create_tables
+    from migrations.columns import migrate_add_columns
+    from migrations.data_fixes import migrate_fix_task_status, migrate_rename_tenant, migrate_drop_product_fields, migrate_fix_service_fee_standard, migrate_fix_expense_status
+    from migrations.data_split import migrate_data_split
+    from migrations.seed import migrate_seed_users, migrate_seed_demo_data
+
+    migrate_create_tables()
+    migrate_add_columns()
+    migrate_fix_task_status()
+    migrate_rename_tenant()
+    migrate_drop_product_fields()
+    migrate_fix_service_fee_standard()
+    migrate_fix_expense_status()
+    migrate_data_split()
+    migrate_seed_users()
+    migrate_seed_demo_data()

backend/migrations/columns.py

@@ -0,0 +1,143 @@
+"""migrations/columns.py — 加列迁移（老表补字段，幂等）"""
+
+
+def _add_column_if_missing(conn, table, column, ddl):
+    """检查列是否存在，不存在才加（幂等）"""
+    from db import _exec, mysql, logger
+
+    cur = conn.cursor(dictionary=True)
+    cur.execute(f"SHOW COLUMNS FROM {table} LIKE %s", (column,))
+    exists = cur.fetchone()
+    cur.close()
+    if not exists:
+        try:
+            _exec(conn, ddl)
+            print(f"[migrate] {table}.{column} 列已添加")
+        except mysql.connector.Error as e:
+            logger.debug(f"add column {table}.{column} skipped: {e}")
+
+
+def migrate_add_columns():
+    """为老表补齐后续新增的字段"""
+    from db import db
+
+    conn = db()
+    try:
+        # tenant 字段（多工作台支持）
+        for table in ["sales_leads", "follow_up_records", "business_proposals",
+                       "operation_projects", "product_versions", "finance_records",
+                       "project_tasks"]:
+            _add_column_if_missing(conn, table, "tenant",
+                f"ALTER TABLE {table} ADD COLUMN tenant VARCHAR(100) NOT NULL DEFAULT '科普·无界'")
+
+        # business_proposals 扩展字段
+        _add_column_if_missing(conn, "business_proposals", "proposal_type",
+            "ALTER TABLE business_proposals ADD COLUMN proposal_type VARCHAR(100) NOT NULL DEFAULT '业务方案'")
+        _add_column_if_missing(conn, "business_proposals", "notes",
+            "ALTER TABLE business_proposals ADD COLUMN notes VARCHAR(2000) NOT NULL DEFAULT ''")
+
+        # product_versions 扩展字段
+        _add_column_if_missing(conn, "product_versions", "priority",
+            "ALTER TABLE product_versions ADD COLUMN priority VARCHAR(10) NOT NULL DEFAULT 'P2'")
+        _add_column_if_missing(conn, "product_versions", "start_date",
+            "ALTER TABLE product_versions ADD COLUMN start_date VARCHAR(30) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "product_versions", "plan_date",
+            "ALTER TABLE product_versions ADD COLUMN plan_date VARCHAR(30) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "product_versions", "dev_done_date",
+            "ALTER TABLE product_versions ADD COLUMN dev_done_date VARCHAR(30) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "product_versions", "test_date",
+            "ALTER TABLE product_versions ADD COLUMN test_date VARCHAR(30) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "product_versions", "devs",
+            "ALTER TABLE product_versions ADD COLUMN devs VARCHAR(500) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "product_versions", "testers",
+            "ALTER TABLE product_versions ADD COLUMN testers VARCHAR(500) NOT NULL DEFAULT ''")
+
+        # project_tasks 扩展字段
+        _add_column_if_missing(conn, "project_tasks", "status",
+            "ALTER TABLE project_tasks ADD COLUMN status VARCHAR(50) NOT NULL DEFAULT '未开始'")
+        _add_column_if_missing(conn, "project_tasks", "sort_order",
+            "ALTER TABLE project_tasks ADD COLUMN sort_order INT NOT NULL DEFAULT 0")
+        _add_column_if_missing(conn, "project_tasks", "priority",
+            "ALTER TABLE project_tasks ADD COLUMN priority VARCHAR(10) NOT NULL DEFAULT 'P2'")
+
+        # project_finances 12 个月度预算字段（确收/毛利/回款/费用）
+        for m in ["01","02","03","04","05","06","07","08","09","10","11","12"]:
+            for field in ["rev", "gross", "payment", "cost"]:
+                col = f"{field}_2026_{m}"
+                _add_column_if_missing(conn, "project_finances", col,
+                    f"ALTER TABLE project_finances ADD COLUMN {col} DOUBLE NOT NULL DEFAULT 0")
+
+        # project_finances 总视图字段：已回款 / 成本 / 已付
+        _add_column_if_missing(conn, "project_finances", "total_payment",
+            "ALTER TABLE project_finances ADD COLUMN total_payment DOUBLE NOT NULL DEFAULT 0")
+        _add_column_if_missing(conn, "project_finances", "total_cost",
+            "ALTER TABLE project_finances ADD COLUMN total_cost DOUBLE NOT NULL DEFAULT 0")
+        _add_column_if_missing(conn, "project_finances", "total_paid",
+            "ALTER TABLE project_finances ADD COLUMN total_paid DOUBLE NOT NULL DEFAULT 0")
+
+        # project_finances 项目基本信息扩展字段
+        _add_column_if_missing(conn, "project_finances", "project_code",
+            "ALTER TABLE project_finances ADD COLUMN project_code VARCHAR(50) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "project_finances", "start_date",
+            "ALTER TABLE project_finances ADD COLUMN start_date VARCHAR(30) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "project_finances", "end_date",
+            "ALTER TABLE project_finances ADD COLUMN end_date VARCHAR(30) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "project_finances", "task_type",
+            "ALTER TABLE project_finances ADD COLUMN task_type VARCHAR(100) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "project_finances", "task_count",
+            "ALTER TABLE project_finances ADD COLUMN task_count DOUBLE NOT NULL DEFAULT 0")
+        _add_column_if_missing(conn, "project_finances", "service_fee_standard",
+            "ALTER TABLE project_finances ADD COLUMN service_fee_standard DOUBLE NOT NULL DEFAULT 0")
+        _add_column_if_missing(conn, "project_finances", "project_manager",
+            "ALTER TABLE project_finances ADD COLUMN project_manager VARCHAR(100) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "project_finances", "task_data",
+            "ALTER TABLE project_finances ADD COLUMN task_data TEXT")
+        _add_column_if_missing(conn, "project_finances", "contact_name",
+            "ALTER TABLE project_finances ADD COLUMN contact_name VARCHAR(100) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "project_finances", "contact_phone",
+            "ALTER TABLE project_finances ADD COLUMN contact_phone VARCHAR(50) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "project_finances", "other_info",
+            "ALTER TABLE project_finances ADD COLUMN other_info VARCHAR(500) NOT NULL DEFAULT ''")
+        # expense_records 字段迁移（重构为费用类型+月份+金额+已发生金额+费用说明）
+        _add_column_if_missing(conn, "expense_records", "expense_type",
+            "ALTER TABLE expense_records ADD COLUMN expense_type VARCHAR(100) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "expense_records", "expense_month",
+            "ALTER TABLE expense_records ADD COLUMN expense_month VARCHAR(20) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "expense_records", "incurred_amount",
+            "ALTER TABLE expense_records ADD COLUMN incurred_amount DOUBLE NOT NULL DEFAULT 0")
+        _add_column_if_missing(conn, "expense_records", "status",
+            "ALTER TABLE expense_records ADD COLUMN status VARCHAR(50) NOT NULL DEFAULT '计入费用'")
+
+        # project_finances 费用明细 JSON 数据
+        _add_column_if_missing(conn, "project_finances", "expense_data",
+            "ALTER TABLE project_finances ADD COLUMN expense_data TEXT")
+
+        conn.commit()
+        print("[migrate] 加列迁移完成")
+
+        # plan_finances 新增字段
+        _add_column_if_missing(conn, "plan_finances", "client_name",
+            "ALTER TABLE plan_finances ADD COLUMN client_name VARCHAR(200) NOT NULL DEFAULT ''")
+        _add_column_if_missing(conn, "plan_finances", "project_type",
+            "ALTER TABLE plan_finances ADD COLUMN project_type VARCHAR(50) NOT NULL DEFAULT '待签约'")
+        _add_column_if_missing(conn, "plan_finances", "weight",
+            "ALTER TABLE plan_finances ADD COLUMN weight VARCHAR(10) NOT NULL DEFAULT '20%'")
+        # 删除 plan_finances.status 列（计划模块不再需要状态字段）
+        cur = conn.cursor()
+        cur.execute("SHOW COLUMNS FROM plan_finances LIKE 'status'")
+        if cur.fetchone():
+            cur.execute("ALTER TABLE plan_finances DROP COLUMN status")
+            conn.commit()
+            print("[migrate] plan_finances.status 列已删除")
+        # project_finances 新增客户名称字段
+        _add_column_if_missing(conn, "project_finances", "client_name",
+            "ALTER TABLE project_finances ADD COLUMN client_name VARCHAR(200) NOT NULL DEFAULT ''")
+        # 删除 project_finances.status 列（实际模块不再需要状态字段）
+        cur.execute("SHOW COLUMNS FROM project_finances LIKE 'status'")
+        if cur.fetchone():
+            cur.execute("ALTER TABLE project_finances DROP COLUMN status")
+            conn.commit()
+            print("[migrate] project_finances.status 列已删除")
+        cur.close()
+    finally:
+        conn.close()

backend/migrations/data_fixes.py

@@ -0,0 +1,116 @@
+"""migrations/data_fixes.py — 数据修正迁移（修复脏数据、变更枚举值）"""
+
+
+def migrate_fix_task_status():
+    """修正 project_tasks 中非法的 status 值"""
+    from db import db, _exec, mysql, logger
+
+    conn = db()
+    try:
+        fixes = [
+            "UPDATE project_tasks SET status='未开始' WHERE status='' OR status IS NULL",
+            "UPDATE project_tasks SET status='已结束' WHERE status='done'",
+            "UPDATE project_tasks SET status='进行中' WHERE status='验收中'",
+        ]
+        for sql in fixes:
+            try:
+                cur = _exec(conn, sql)
+                affected = cur.rowcount
+                cur.close()
+                if affected:
+                    print(f"[migrate] 修正 {affected} 条任务状态")
+            except mysql.connector.Error as e:
+                logger.warning(f"task status fix skipped: {e}")
+        conn.commit()
+    finally:
+        conn.close()
+
+
+def migrate_rename_tenant():
+    """工作台重命名：无界·无界 → 学会·无界"""
+    from db import db, _exec, mysql
+
+    conn = db()
+    try:
+        tables = ["user_tenants", "sales_leads", "follow_up_records", "business_proposals",
+                  "operation_projects", "product_versions", "finance_records", "project_tasks",
+                  "project_finances"]
+        for table in tables:
+            try:
+                cur = _exec(conn, f"UPDATE {table} SET tenant='学会·无界' WHERE tenant='无界·无界'")
+                affected = cur.rowcount
+                cur.close()
+                if affected:
+                    print(f"[migrate] {table}: {affected} 条记录 tenant 改为 '学会·无界'")
+            except mysql.connector.Error:
+                pass
+        conn.commit()
+    finally:
+        conn.close()
+
+
+def migrate_drop_product_fields():
+    """删除 product_versions 表的 owner / platform / feature_list 字段"""
+    from db import db, mysql
+
+    conn = db()
+    try:
+        for col in ["owner", "platform", "feature_list"]:
+            cur = conn.cursor(dictionary=True)
+            cur.execute("SHOW COLUMNS FROM product_versions LIKE %s", (col,))
+            exists = cur.fetchone()
+            cur.close()
+            if exists:
+                try:
+                    cur = conn.cursor()
+                    cur.execute(f"ALTER TABLE product_versions DROP COLUMN {col}")
+                    cur.close()
+                    conn.commit()
+                    print(f"[migrate] product_versions.{col} 列已删除")
+                except mysql.connector.Error as e:
+                    print(f"[migrate] 删除 {col} 失败: {e}")
+    finally:
+        conn.close()
+
+
+def migrate_fix_service_fee_standard():
+    """修正 project_finances.service_fee_standard 旧数据为默认值 5（5%）"""
+    from db import db
+
+    conn = db()
+    try:
+        cur = conn.cursor()
+        cur.execute(
+            "UPDATE project_finances SET service_fee_standard = 5 "
+            "WHERE service_fee_standard = 0 OR service_fee_standard IS NULL "
+            "OR service_fee_standard NOT IN (5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25)"
+        )
+        affected = cur.rowcount
+        cur.close()
+        if affected:
+            conn.commit()
+            print(f"[migrate] project_finances: {affected} 条记录 service_fee_standard 修正为 5")
+    finally:
+        conn.close()
+
+
+def migrate_fix_expense_status():
+    """修正 expense_records 中空的 status 为默认值「计入费用」"""
+    from db import db
+
+    conn = db()
+    try:
+        cur = conn.cursor()
+        cur.execute(
+            "UPDATE expense_records SET status='计入费用' "
+            "WHERE status IS NULL OR status='' OR status='待审批'"
+        )
+        affected = cur.rowcount
+        cur.close()
+        if affected:
+            conn.commit()
+            print(f"[migrate] expense_records: {affected} 条记录 status 修正为 '计入费用'")
+    finally:
+        conn.close()
+
+

backend/migrations/data_split.py

@@ -0,0 +1,56 @@
+"""migrations/data_split.py — 预算数据拆分迁移：budget_data → expense_data
+
+旧结构：budget_data = [{month, rev, gross, payment, cost, paid}]
+新结构：expense_data = [{month, expense_type, cost, paid, exp_note}]
+
+部署时自动：检测未拆分的旧数据，将 cost/paid 从 budget_data 迁移到 expense_data。
+幂等：只处理 expense_data 为空的记录。
+"""
+
+
+def migrate_data_split():
+    """一次性数据拆分迁移"""
+    from db import db, _exec
+    import json
+
+    conn = db()
+    try:
+        # 查询未迁移的记录
+        cur = conn.cursor(dictionary=True)
+        cur.execute(
+            "SELECT id, budget_data, expense_data FROM project_finances "
+            "WHERE (expense_data IS NULL OR expense_data = '' OR expense_data = '[]') "
+            "AND budget_data IS NOT NULL AND budget_data != '' AND budget_data != '[]'"
+        )
+        rows = cur.fetchall()
+        cur.close()
+
+        migrated = 0
+        for row in rows:
+            try:
+                budget = json.loads(row.get("budget_data") or "[]")
+            except (json.JSONDecodeError, TypeError):
+                continue
+
+            expense_rows = []
+            for b in budget:
+                expense_rows.append({
+                    "month": b.get("month", ""),
+                    "expense_type": "",
+                    "cost": float(b.get("cost") or 0),
+                    "paid": float(b.get("paid") or 0),
+                    "exp_note": "",
+                })
+
+            if expense_rows:
+                _exec(
+                    conn,
+                    "UPDATE project_finances SET expense_data = ? WHERE id = ?",
+                    (json.dumps(expense_rows, ensure_ascii=False), row["id"]),
+                )
+                migrated += 1
+
+        conn.commit()
+        print(f"[migrate] 数据拆分迁移完成：{migrated} 条记录已从 budget_data 提取 cost/paid 到 expense_data")
+    finally:
+        conn.close()

backend/migrations/seed.py

@@ -0,0 +1,57 @@
+"""migrations/seed.py — 初始化默认用户和示例数据（仅在空库时执行）"""
+
+from datetime import date
+
+
+def migrate_seed_users():
+    """初始化默认用户和工作台权限（仅空库时执行）"""
+    from db import db, _exec, one
+    from werkzeug.security import generate_password_hash
+
+    conn = db()
+    try:
+        if one(conn, "SELECT id FROM users LIMIT 1"):
+            return  # 已有用户，跳过
+
+        default_users = [
+            ("qiukai", "yxcowork2026", "qiukai", "admin"),
+            ("kepu", "kepu123", "科普负责人", "opc_owner"),
+            ("keyan", "keyan123", "科研负责人", "opc_owner"),
+            ("yihuan", "yihuan123", "医患负责人", "opc_owner"),
+            ("mcn", "mcn123", "MCN负责人", "opc_owner"),
+            ("wuji", "wuji123", "无界负责人", "opc_owner"),
+        ]
+        for username, pwd, display, role in default_users:
+            _exec(conn, "INSERT INTO users (username, password_hash, display_name, role, created_at) VALUES (?,?,?,?,?)",
+                  (username, generate_password_hash(pwd, "pbkdf2:sha256"), display, role, date.today().isoformat()))
+
+        # 绑定工作台
+        tenant_map = [
+            ("kepu", "科普·无界"), ("keyan", "科研·无界"), ("yihuan", "医患·无界"),
+            ("mcn", "MCN·无界"), ("wuji", "学会·无界"),
+        ]
+        for uname, tenant in tenant_map:
+            u = one(conn, "SELECT id FROM users WHERE username=?", (uname,))
+            if u:
+                _exec(conn, "INSERT INTO user_tenants (user_id, tenant) VALUES (?,?)", (u["id"], tenant))
+
+        conn.commit()
+        print("[migrate] 默认用户已初始化")
+    finally:
+        conn.close()
+
+
+def migrate_seed_demo_data():
+    """填充初始示例数据（仅在空库时执行）"""
+    from db import db, one
+    from migrations.seed_data import seed_db
+
+    conn = db()
+    try:
+        if one(conn, "SELECT id FROM sales_leads LIMIT 1"):
+            return  # 已有数据，跳过
+    finally:
+        conn.close()
+
+    seed_db()
+    print("[migrate] 示例数据已填充")

backend/migrations/seed_data.py

@@ -0,0 +1,285 @@
+# seed_data.py — 丰富示例数据填充（仅在空库时执行一次）
+# 为每个工作台生成 > 1 亿的总规模，覆盖万/十万/百万/千万量级
+
+import json
+import random
+random.seed(42)
+
+from datetime import date
+from db import db, _exec, one
+
+TENANTS = ["科普·无界", "科研·无界", "医患·无界", "MCN·无界", "学会·无界"]
+
+# 每个工作台的差异化客户和项目模板
+TENANT_CUSTOMERS = {
+    "科普·无界": [
+        ("信达生物", ["肿瘤免疫科普年度框架", "信迪利单抗医生教育", "CSCO卫星会项目", "患者随访管理系统"]),
+        ("百利天恒", ["BL-B01D1上市前教育", "双抗药物科普专区", "数字人患教视频"]),
+        ("齐鲁制药", ["多产品线医生教育", "安可达学术推广", "基层医疗科普巡讲"]),
+        ("天广实生物", ["血液肿瘤科普项目", "CD20单抗学术推广"]),
+        ("复星医药", ["复宏汉霖学术年会", "CAR-T患者教育"]),
+    ],
+    "科研·无界": [
+        ("北京协和医院", ["临床研究数据采集系统", "罕见病队列研究", "AI辅助诊断验证"]),
+        ("中国人民解放军总医院", ["战场创伤数据平台", "远程会诊系统"]),
+        ("复旦大学附属华山医院", ["脑卒中AI预警系统", "神经内科临床研究"]),
+        ("中山大学肿瘤防治中心", ["鼻咽癌早筛项目", "真实世界研究平台"]),
+        ("四川大学华西医院", ["精准医学大数据平台", "基层科研能力提升"]),
+    ],
+    "医患·无界": [
+        ("平安好医生", ["在线问诊科普内容", "慢病管理专区", "随访SOP标准化"]),
+        ("微医集团", ["互联网医院患教系统", "云药房科普推送"]),
+        ("丁香园", ["医生社区运营升级", "用药助手科普专区"]),
+        ("圆心科技", ["药房患者教育", "DTP药房随访管理", "罕见病用药指导"]),
+        ("国药控股", ["国药患者管理平台", "肿瘤药房随访系统"]),
+    ],
+    "MCN·无界": [
+        ("抖音健康", ["医学IP孵化矩阵", "短视频科普内容制作", "健康直播运营"]),
+        ("快手健康", ["医生个人IP打造", "快手健康科普专区"]),
+        ("小红书医美", ["皮肤健康科普矩阵", "医美科普合规审核"]),
+        ("B站知识区", ["深度科普纪录片", "医学动画制作"]),
+        ("微信视频号", ["医生科普直播运营", "企业微信科普推送"]),
+    ],
+    "学会·无界": [
+        ("中华医学会", ["学术年会数字化平台", "继续教育学分系统", "基层医生培训"]),
+        ("中国医师协会", ["医师定考管理系统", "专科医师培训平台"]),
+        ("中国抗癌协会", ["肿瘤科普万里行", "CACA指南推广"]),
+        ("中国药学会", ["合理用药科普平台", "药师继续教育"]),
+        ("中华护理学会", ["护理科研能力提升", "专科护士培训系统"]),
+    ],
+}
+
+# 签约金额模板：每个工作台的千万/百万/十万/万级别项目的签约金额
+def generate_sign_amounts():
+    amounts = []
+    # 千万级：2个（4000-7000万）
+    amounts.append(random.randint(4500, 7000) * 10000)
+    amounts.append(random.randint(4000, 6500) * 10000)
+    # 百万级：4个（400-980万）
+    for _ in range(4):
+        amounts.append(random.randint(400, 980) * 10000)
+    # 十万级：4个（30-98万）
+    for _ in range(4):
+        amounts.append(random.randint(30, 98) * 10000)
+    # 万级：3个（3-10万）
+    for _ in range(3):
+        amounts.append(random.randint(3, 10) * 10000)
+    return sorted(amounts, reverse=True)
+
+
+# 生成 budget_data JSON（每月确收/毛利/回款）
+def make_budget_data(sign_amount, signed_month, status):
+    """生成12个月的预算数据"""
+    months = []
+    start_m = int(signed_month.split("-")[1]) if signed_month else 1
+    rev_total = sign_amount
+    gross_rate = random.uniform(0.25, 0.55)
+    payment_rate = random.uniform(0.7, 0.95)
+
+    for i in range(12):
+        m = (start_m + i - 1) % 12 + 1
+        yr = 2026 + (start_m + i - 1) // 12
+        month_key = f"{yr}-{m:02d}"
+
+        # 越往后确收越多
+        progress = min(1.0, (i + 1) / max(1, random.randint(3, 8)))
+        rev = round(rev_total * progress * random.uniform(0.85, 1.15))
+        gross = round(rev * gross_rate * random.uniform(0.9, 1.1))
+        payment = round(rev * payment_rate * random.uniform(0.85, 1.15))
+        cost = round(rev * random.uniform(0.3, 0.5))
+        paid = round(cost * random.uniform(0.8, 1.0))
+
+        months.append({
+            "month": month_key,
+            "rev": rev,
+            "gross": gross,
+            "payment": payment,
+            "cost": cost,
+            "paid": paid,
+        })
+    return json.dumps(months)
+
+
+# 生成 expense_data（平台费用）
+def make_expense_data():
+    """生成若干条费用记录"""
+    items = []
+    expense_types = ["平台采购", "人力成本", "研发费用", "通用费用", "奖金"]
+    for q in range(1, 7):
+        for et in random.sample(expense_types, random.randint(2, 4)):
+            month_str = f"2026-{q:02d}"
+            amount = random.randint(5000, 150000)
+            incurred = int(amount * random.uniform(0.6, 1.0))
+            items.append({"month": month_str, "expense_type": et, "amount": amount, "incurred": incurred})
+    return json.dumps(items)
+
+
+def seed_db():
+    """填充丰富示例数据"""
+    conn = db()
+    try:
+        if one(conn, "SELECT id FROM sales_leads LIMIT 1"):
+            return
+
+        today = date.today().isoformat()
+        pf_ids = {}  # tenant -> [project_finance_ids]
+
+        for tenant in TENANTS:
+            customers = TENANT_CUSTOMERS[tenant]
+            amounts = generate_sign_amounts()
+            cust_idx = 0
+
+            for i, sign_amount in enumerate(amounts):
+                cust_name, projects = customers[cust_idx % len(customers)]
+                proj_name = projects[i % len(projects)] if i < len(projects) else f"{cust_name} 项目{i+1}"
+                cust_idx += i % 3
+
+                # 70% 已签约, 30% 待签约
+                status = "已签约"
+                sign_month = f"2026-{random.randint(1, 6):02d}"
+                project_code = f"{tenant[:2]}-2026-{i+1:03d}"
+                business_type = random.choice(["学术推广", "医生教育", "患者管理", "科研合作", "科普内容"])
+
+                # 如果签约，总额 = 签约额；否则为0
+                total_rev = int(sign_amount * random.uniform(0.8, 1.0))
+                total_gross = int(total_rev * random.uniform(0.25, 0.5))
+                total_payment = int(total_rev * random.uniform(0.7, 0.9))
+                total_cost = int(total_rev * random.uniform(0.3, 0.5))
+                total_paid = int(total_cost * random.uniform(0.7, 0.95))
+
+                budget_data = make_budget_data(sign_amount, sign_month, status)
+                expense_data = make_expense_data() if status == "已签约" else "[]"
+                task_data = json.dumps([
+                    {"task": f"{proj_name} 项目启动", "due": f"2026-{min(12, 1+i//2):02d}-01", "status": "已完成" if i < 8 else "进行中"},
+                    {"task": f"方案评审与确认", "due": f"2026-{min(12, 2+i//2):02d}-15", "status": "已完成" if i < 6 else "进行中"},
+                    {"task": f"内容生产阶段", "due": f"2026-{min(12, 3+i//2):02d}-30", "status": "进行中"},
+                ])
+
+                cur = _exec(conn, """
+                    INSERT INTO project_finances
+                    (tenant, project_id, business_type, customer_name, sign_amount, sign_month,
+                     sales_person, total_rev, total_gross, total_payment, total_cost, total_paid,
+                     budget_data, expense_data, task_data,
+                     project_code, start_date, end_date, task_type, task_count,
+                     service_fee_standard, project_manager, contact_name, contact_phone, other_info,
+                     created_at, updated_at)
+                    VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)
+                """, (
+                    tenant, f"PF-{tenant[:2]}-{i+1:04d}", business_type, cust_name,
+                    sign_amount, sign_month,
+                    f"销售{random.choice(['A','B','C','D'])}", total_rev, total_gross,
+                    total_payment, total_cost, total_paid,
+                    budget_data, expense_data, task_data,
+                    project_code, f"2026-{random.randint(1,3):02d}-01", f"2026-{random.randint(9,12):02d}-30",
+                    random.choice(["内容生产", "视频制作", "专家访谈", "学术会议", "患者教育"]),
+                    random.randint(10, 100), random.choice([800, 1000, 1200, 1500, 2000]),
+                    f"经理{random.choice(['A','B','C'])}", f"联系人{random.randint(1,20)}",
+                    f"1380000{random.randint(1000,9999)}", f"备注信息 {i+1}",
+                    today, today,
+                ))
+                # Store for later use
+                pf_ids.setdefault(tenant, []).append((cur.lastrowid, proj_name, cust_name))
+
+            # operation_projects: 每个工作台 3-5 个
+            op_count = random.randint(3, 5)
+            for j in range(op_count):
+                pf_row = random.choice(pf_ids[tenant])
+                cur2 = _exec(conn, """
+                    INSERT INTO operation_projects
+                    (tenant, project_name, project_version, project_type, project_status,
+                     current_stage, owner, start_date, end_date, target_customer, customer_need,
+                     expected_contract_amount, expected_sign_date, sign_probability, next_action,
+                     sop_stage, execution_progress, current_deliverable, notes)
+                    VALUES (?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)
+                """, (
+                    tenant, f"{pf_row[1]} 运营方案", "v1.0",
+                    "execution" if random.random() < 0.6 else "opportunity",
+                    "SOP 执行中" if random.random() < 0.6 else "方案已提交",
+                    random.choice(["商务推进", "内容生产", "渠道分发"]),
+                    f"OPC{random.randint(1,5)}", "2026-06-01", "2026-12-31",
+                    pf_row[2], "科普内容项目执行与管理",
+                    pf_row[0] if pf_row[3] == "已签约" else random.randint(50, 300) * 10000,
+                    "2026-06", 70 + random.randint(0, 30),
+                    "补齐版本要求文件并更新下一节点",
+                    "SOP 执行", random.randint(30, 80), "当前交付物 v1.0",
+                    "运营备注",
+                ))
+                _exec(conn, """
+                    INSERT INTO follow_up_records
+                    (target_type, target_id, followed_at, content, next_action, follower)
+                    VALUES (?,?,?,?,?,?)
+                """, (
+                    "operation", cur2.lastrowid, today,
+                    f"运营项目跟进：{pf_row[1]}，当前进度正常", "继续推进下一里程碑",
+                    f"销售{random.choice(['A','B'])}",
+                ))
+
+            # expense_records: 每个工作台 15-20 条
+            expense_count = random.randint(15, 20)
+            expense_types = ["通用费用", "平台采购", "人力成本", "研发费用", "奖金", "其他"]
+            for j in range(expense_count):
+                et = random.choice(expense_types)
+                month_str = f"2026-{random.randint(1, 6):02d}"
+                amount = random.randint(5000, 500000)
+                incurred = int(amount * random.uniform(0.5, 1.0))
+                _exec(conn, """
+                    INSERT INTO expense_records
+                    (tenant, expense_type, expense_month, amount, incurred_amount, notes, status)
+                    VALUES (?,?,?,?,?,?,?)
+                """, (
+                    tenant, et, month_str, amount, incurred,
+                    f"{et} - {random.choice(['季度预算', '紧急支出', '常规费用', '项目费用'])}",
+                    "计入费用",
+                ))
+
+            print(f"[seed] {tenant}: {len(amounts)} 项目, {op_count} 运营项目, {expense_count} 费用记录")
+
+        conn.commit()  # 提交所有工作台的核心数据
+
+        # 全域数据：sales_leads 对所有 tenant 可见
+        global_sales = [
+            ("齐鲁制药", "P0", "跟进中", "多产品线科普年度框架"),
+            ("百利天恒", "P0", "方案中", "BL-B01D1 上市前医生教育"),
+            ("信达生物", "P0", "已签约", "现有科普项目升级/续约"),
+            ("三生制药", "P1", "待跟进", "多科室医生教育+患者科普"),
+            ("天广实生物", "P1", "待跟进", "血液肿瘤医生教育机会"),
+        ]
+        for customer, priority, status, note in global_sales:
+            cur = _exec(conn,
+                "INSERT INTO sales_leads (target_customer, priority, status, created_at) VALUES (?,?,?,?)",
+                (customer, priority, status, today),
+            )
+            _exec(conn,
+                "INSERT INTO follow_up_records (target_type,target_id,followed_at,content,next_action,follower) VALUES (?,?,?,?,?,?)",
+                ("sales", cur.lastrowid, today, note, "明确下一次沟通", "销售A"),
+            )
+
+        # 全域 business_proposals
+        cur = _exec(conn,
+            "INSERT INTO business_proposals (customer_or_project_name,version,description,status,created_date, tenant) VALUES (?,?,?,?,?,?)",
+            ("信达生物", "v1.5", "信达科普项目续约与报价方案", "已提交客户", "2026-05-28", "科普·无界"),
+        )
+        proposal_id = cur.lastrowid
+
+        # 全域 product_versions
+        products = [
+            ("妙手医生服务小程序", "v1.1", "视频任务增强 + 积分商城", "2026-Q3", "规划中", "P1"),
+            ("数字化营销后台管理系统", "v1.2", "运营数据看板 + 智能审核", "2026-Q3", "设计中", "P0"),
+            ("妙手患者服务", "v0.5", "科普浏览 + 医生主页 MVP", "2026-Q3", "规划中", "P2"),
+            ("数字人内容平台", "v0.1", "基础数字人视频生成 MVP", "2026-Q3", "规划中", "P2"),
+            ("渠道分发引擎", "v1.0", "六渠道统一分发", "2027-Q1", "规划中", "P1"),
+        ]
+        for p in products:
+            cur = _exec(conn,
+                "INSERT INTO product_versions (product_name,version,version_goal,launch_date,status,priority,tenant) VALUES (?,?,?,?,?,?,?)",
+                (*p, "科普·无界"),
+            )
+            _exec(conn,
+                "INSERT INTO follow_up_records (target_type,target_id,followed_at,content,next_action,follower) VALUES (?,?,?,?,?,?)",
+                ("product", cur.lastrowid, today, f"{p[0]} {p[1]}：{p[2]}", "按路线图推进", "产品经理"),
+            )
+
+        conn.commit()
+        print("[seed] 丰富示例数据已填充")
+    finally:
+        conn.close()

backend/migrations/tables.py

@@ -0,0 +1,175 @@
+"""migrations/tables.py — 建表迁移（所有表的 CREATE TABLE IF NOT EXISTS）"""
+
+
+def migrate_create_tables():
+    """确保所有业务表存在（幂等）"""
+    from db import db, _exec, mysql, logger
+
+    conn = db()
+    try:
+        tables = [
+            """CREATE TABLE IF NOT EXISTS sales_leads (
+  id INT AUTO_INCREMENT PRIMARY KEY,
+  target_customer VARCHAR(1000) NOT NULL,
+  priority VARCHAR(1000) NOT NULL DEFAULT 'P1',
+  status VARCHAR(1000) NOT NULL DEFAULT '待跟进',
+  created_at VARCHAR(30) NOT NULL DEFAULT '',
+  updated_at VARCHAR(30) NOT NULL DEFAULT ''
+)""",
+            """CREATE TABLE IF NOT EXISTS follow_up_records (
+  id INT AUTO_INCREMENT PRIMARY KEY,
+  target_type VARCHAR(1000) NOT NULL,
+  target_id INT NOT NULL,
+  followed_at VARCHAR(1000) NOT NULL DEFAULT '',
+  follower VARCHAR(1000) NOT NULL DEFAULT '慰心',
+  follow_up_method VARCHAR(1000) NOT NULL DEFAULT '记录',
+  content VARCHAR(1000) NOT NULL DEFAULT '',
+  next_action VARCHAR(1000) NOT NULL DEFAULT '',
+  next_follow_up_at VARCHAR(1000) NOT NULL DEFAULT '',
+  created_at VARCHAR(30) NOT NULL DEFAULT '',
+  updated_at VARCHAR(30) NOT NULL DEFAULT ''
+)""",
+            """CREATE TABLE IF NOT EXISTS business_proposals (
+  id INT AUTO_INCREMENT PRIMARY KEY,
+  customer_or_project_name VARCHAR(1000) NOT NULL,
+  version VARCHAR(1000) NOT NULL,
+  description VARCHAR(1000) NOT NULL DEFAULT '',
+  status VARCHAR(1000) NOT NULL DEFAULT '草稿',
+  created_date VARCHAR(1000) NOT NULL DEFAULT '',
+  created_at VARCHAR(30) NOT NULL DEFAULT '',
+  updated_at VARCHAR(30) NOT NULL DEFAULT ''
+)""",
+            """CREATE TABLE IF NOT EXISTS operation_projects (
+  id INT AUTO_INCREMENT PRIMARY KEY,
+  project_name VARCHAR(1000) NOT NULL,
+  project_version VARCHAR(1000) NOT NULL DEFAULT 'v1.0',
+  project_type VARCHAR(1000) NOT NULL DEFAULT 'opportunity',
+  project_status VARCHAR(1000) NOT NULL DEFAULT '',
+  current_stage VARCHAR(1000) NOT NULL DEFAULT '',
+  owner VARCHAR(1000) NOT NULL DEFAULT '慰心',
+  start_date VARCHAR(1000) NOT NULL DEFAULT '',
+  end_date VARCHAR(1000) NOT NULL DEFAULT '',
+  target_customer VARCHAR(1000) NOT NULL DEFAULT '',
+  customer_need VARCHAR(1000) NOT NULL DEFAULT '',
+  expected_contract_amount DOUBLE NOT NULL DEFAULT 0,
+  expected_sign_date VARCHAR(1000) NOT NULL DEFAULT '',
+  sign_probability DOUBLE NOT NULL DEFAULT 0,
+  next_action VARCHAR(1000) NOT NULL DEFAULT '',
+  related_business_proposal_id INTEGER,
+  sop_file_id INTEGER,
+  sop_stage VARCHAR(1000) NOT NULL DEFAULT '',
+  execution_progress DOUBLE NOT NULL DEFAULT 0,
+  current_deliverable VARCHAR(1000) NOT NULL DEFAULT '',
+  risks VARCHAR(1000) NOT NULL DEFAULT '',
+  notes VARCHAR(1000) NOT NULL DEFAULT '',
+  created_at VARCHAR(30) NOT NULL DEFAULT '',
+  updated_at VARCHAR(30) NOT NULL DEFAULT ''
+)""",
+            """CREATE TABLE IF NOT EXISTS product_versions (
+  id INT AUTO_INCREMENT PRIMARY KEY,
+  product_name VARCHAR(1000) NOT NULL,
+  version VARCHAR(1000) NOT NULL,
+  version_goal VARCHAR(1000) NOT NULL DEFAULT '',
+  feature_list VARCHAR(1000) NOT NULL DEFAULT '',
+  launch_date VARCHAR(1000) NOT NULL DEFAULT '',
+  status VARCHAR(1000) NOT NULL DEFAULT '规划中',
+  notes VARCHAR(1000) NOT NULL DEFAULT '',
+  created_at VARCHAR(30) NOT NULL DEFAULT '',
+  updated_at VARCHAR(30) NOT NULL DEFAULT ''
+)""",
+            """CREATE TABLE IF NOT EXISTS finance_records (
+  id INT AUTO_INCREMENT PRIMARY KEY,
+  month VARCHAR(1000) NOT NULL,
+  project_name VARCHAR(1000) NOT NULL DEFAULT '科普（慰心斋）',
+  record_type VARCHAR(1000) NOT NULL,
+  category VARCHAR(1000) NOT NULL DEFAULT '',
+  amount DOUBLE NOT NULL DEFAULT 0,
+  occurred_date VARCHAR(1000) NOT NULL DEFAULT '',
+  notes VARCHAR(1000) NOT NULL DEFAULT '',
+  created_at VARCHAR(30) NOT NULL DEFAULT '',
+  updated_at VARCHAR(30) NOT NULL DEFAULT ''
+)""",
+            """CREATE TABLE IF NOT EXISTS file_assets (
+  id INT AUTO_INCREMENT PRIMARY KEY,
+  module VARCHAR(1000) NOT NULL,
+  owner_id INT NOT NULL,
+  owner_version VARCHAR(1000) NOT NULL DEFAULT '',
+  file_category VARCHAR(1000) NOT NULL DEFAULT '',
+  file_name VARCHAR(1000) NOT NULL,
+  file_type VARCHAR(1000) NOT NULL DEFAULT '',
+  file_size INTEGER NOT NULL DEFAULT 0,
+  file_path VARCHAR(1000) NOT NULL,
+  is_external INTEGER NOT NULL DEFAULT 0,
+  notes VARCHAR(1000) NOT NULL DEFAULT '',
+  created_at VARCHAR(30) NOT NULL DEFAULT '',
+  updated_at VARCHAR(30) NOT NULL DEFAULT ''
+)""",
+            """CREATE TABLE IF NOT EXISTS project_tasks (
+  id INT AUTO_INCREMENT PRIMARY KEY,
+  project_id INTEGER NOT NULL,
+  phase VARCHAR(1000) NOT NULL DEFAULT '',
+  milestone VARCHAR(1000) NOT NULL DEFAULT '',
+  task VARCHAR(1000) NOT NULL DEFAULT '',
+  owner VARCHAR(1000) NOT NULL DEFAULT '',
+  due_date VARCHAR(1000) NOT NULL DEFAULT '',
+  blockers VARCHAR(1000) NOT NULL DEFAULT '',
+  notes VARCHAR(1000) NOT NULL DEFAULT '',
+  created_at VARCHAR(30) NOT NULL DEFAULT '',
+  updated_at VARCHAR(30) NOT NULL DEFAULT ''
+)""",
+            """CREATE TABLE IF NOT EXISTS users (
+  id INT AUTO_INCREMENT PRIMARY KEY,
+  username VARCHAR(100) NOT NULL UNIQUE,
+  password_hash VARCHAR(255) NOT NULL,
+  display_name VARCHAR(100) NOT NULL,
+  role VARCHAR(50) NOT NULL DEFAULT 'opc_owner',
+  created_at VARCHAR(30) NOT NULL DEFAULT ''
+)""",
+            """CREATE TABLE IF NOT EXISTS user_tenants (
+  id INT AUTO_INCREMENT PRIMARY KEY,
+  user_id INT NOT NULL,
+  tenant VARCHAR(100) NOT NULL,
+  UNIQUE KEY (user_id, tenant)
+)""",
+            """CREATE TABLE IF NOT EXISTS project_finances (
+  id INT AUTO_INCREMENT PRIMARY KEY,
+  tenant VARCHAR(100) NOT NULL DEFAULT '科普·无界',
+  project_id VARCHAR(100) NOT NULL DEFAULT '',
+  business_type VARCHAR(100) NOT NULL DEFAULT '',
+  customer_name VARCHAR(200) NOT NULL DEFAULT '',
+  sign_amount DOUBLE NOT NULL DEFAULT 0,
+  sign_month VARCHAR(20) NOT NULL DEFAULT '',
+  status VARCHAR(50) NOT NULL DEFAULT '待签约',
+  sales_person VARCHAR(100) NOT NULL DEFAULT '',
+  total_rev DOUBLE NOT NULL DEFAULT 0,
+  total_gross DOUBLE NOT NULL DEFAULT 0,
+  budget_data TEXT,
+  created_at VARCHAR(30) NOT NULL DEFAULT '',
+  updated_at VARCHAR(30) NOT NULL DEFAULT ''
+)""",
+            """CREATE TABLE IF NOT EXISTS expense_records (
+  id INT AUTO_INCREMENT PRIMARY KEY,
+  tenant VARCHAR(100) NOT NULL DEFAULT '科普·无界',
+  expense_type VARCHAR(100) NOT NULL DEFAULT '',
+  expense_month VARCHAR(20) NOT NULL DEFAULT '',
+  amount DOUBLE NOT NULL DEFAULT 0,
+  incurred_amount DOUBLE NOT NULL DEFAULT 0,
+  notes VARCHAR(1000) NOT NULL DEFAULT '',
+  created_at VARCHAR(30) NOT NULL DEFAULT '',
+  updated_at VARCHAR(30) NOT NULL DEFAULT ''
+)""",
+            """CREATE TABLE IF NOT EXISTS plan_finances LIKE project_finances""",
+            """CREATE TABLE IF NOT EXISTS plan_expense_records LIKE expense_records""",
+        ]
+
+        for ddl in tables:
+            try:
+                _exec(conn, ddl)
+                conn.commit()
+            except mysql.connector.Error as e:
+                logger.debug(f"create table skipped: {e}")
+                conn.commit()
+
+        print("[migrate] 所有业务表已就绪")
+    finally:
+        conn.close()

backend/routes.py

@@ -0,0 +1,879 @@
+# routes.py — 全部 HTTP 路由（Blueprint）
+# 依赖：flask, db.py, helpers.py, werkzeug
+
+import os
+import json
+from datetime import date
+from pathlib import Path
+
+from flask import Blueprint, jsonify, render_template, request, send_file, session, redirect
+from werkzeug.security import generate_password_hash, check_password_hash
+
+from db import db, now, _exec, rows, one, UPLOAD_DIR
+from helpers import add_file_index, attach_common, monthly_finance
+
+bp = Blueprint("api", __name__)
+
+ALL_TENANTS = ["总工作台", "科普·无界", "科研·无界", "医患·无界", "MCN·无界", "学会·无界"]
+
+TABLES = {
+    "sales": ("sales_leads", ["target_customer", "priority", "status", "tenant"]),
+    "proposals": ("business_proposals", ["customer_or_project_name", "version", "description", "status", "created_date", "proposal_type", "notes", "tenant"]),
+    "operations": ("operation_projects", ["project_name", "project_version", "project_type", "project_status", "current_stage", "owner", "target_customer", "customer_need", "expected_contract_amount", "expected_sign_date", "sign_probability", "next_action", "sop_stage", "execution_progress", "current_deliverable", "risks", "notes", "tenant"]),
+    "products": ("product_versions", ["product_name", "version", "version_goal", "priority", "start_date", "plan_date", "dev_done_date", "test_date", "launch_date", "status", "notes", "tenant"]),
+    "finance": ("finance_records", ["month", "project_name", "record_type", "category", "amount", "occurred_date", "notes", "tenant"]),
+    "tasks": ("project_tasks", ["project_id", "phase", "milestone", "task", "owner", "due_date", "blockers", "notes", "status", "sort_order", "priority", "tenant"]),
+    "projectFinances": ("project_finances", ["project_id", "tenant", "business_type", "customer_name", "client_name", "sign_amount", "sign_month", "sales_person", "owner", "total_rev", "total_gross", "total_payment", "total_cost", "total_paid", "budget_data", "expense_data", "start_date", "end_date", "task_type", "task_count", "service_fee_standard", "project_manager", "task_data", "project_code", "contact_name", "contact_phone", "other_info"]),
+    "expense": ("expense_records", ["expense_type", "expense_month", "amount", "incurred_amount", "notes", "status", "tenant"]),
+    "planFinances": ("plan_finances", ["project_id", "tenant", "business_type", "customer_name", "client_name", "sign_amount", "sign_month", "sales_person", "owner", "total_rev", "total_gross", "total_payment", "total_cost", "total_paid", "budget_data", "expense_data", "start_date", "end_date", "task_type", "task_count", "service_fee_standard", "project_manager", "task_data", "project_code", "contact_name", "contact_phone", "other_info", "client_name", "project_type", "weight"]),
+    "planExpense": ("plan_expense_records", ["expense_type", "expense_month", "amount", "incurred_amount", "notes", "status", "tenant"]),
+}
+
+# ---------- 鉴权装饰器 ----------
+
+def login_required(f):
+    from functools import wraps
+    @wraps(f)
+    def decorated(*args, **kwargs):
+        if "user_id" not in session:
+            return jsonify({"error": "未登录"}), 401
+        return f(*args, **kwargs)
+    return decorated
+
+
+def admin_required(f):
+    from functools import wraps
+    @wraps(f)
+    def decorated(*args, **kwargs):
+        if "user_id" not in session:
+            return jsonify({"error": "未登录"}), 401
+        if session.get("role") != "admin":
+            return jsonify({"error": "无权限"}), 403
+        return f(*args, **kwargs)
+    return decorated
+
+
+# ---------- 认证路由 ----------
+
+@bp.route("/login")
+def login_page():
+    return render_template("login.html")
+
+
+@bp.route("/api/auth/login", methods=["POST"])
+def auth_login():
+    data = request.get_json(force=True) or {}
+    username = data.get("username", "").strip()
+    password = data.get("password", "")
+    conn = db()
+    try:
+        user = one(conn, "SELECT * FROM users WHERE username=?", (username,))
+        if not user or not check_password_hash(user["password_hash"], password):
+            return jsonify({"error": "用户名或密码错误"}), 401
+        session["user_id"] = user["id"]
+        session["username"] = user["username"]
+        session["display_name"] = user["display_name"]
+        session["role"] = user["role"]
+        if user["role"] == "admin":
+            session["tenants"] = ["总工作台", "科普·无界", "科研·无界", "医患·无界", "MCN·无界", "学会·无界"]
+        else:
+            ut = rows(conn, "SELECT tenant FROM user_tenants WHERE user_id=?", (user["id"],))
+            session["tenants"] = [x["tenant"] for x in ut]
+        return jsonify({
+            "ok": True,
+            "user": {"id": user["id"], "username": user["username"], "display_name": user["display_name"], "role": user["role"]},
+            "tenants": session["tenants"],
+        })
+    finally:
+        conn.close()
+
+
+@bp.route("/api/auth/logout", methods=["POST"])
+def auth_logout():
+    session.clear()
+    return jsonify({"ok": True})
+
+
+@bp.route("/api/auth/change-password", methods=["POST"])
+@login_required
+def auth_change_password():
+    data = request.get_json(force=True) or {}
+    old_password = data.get("old_password", "")
+    new_password = data.get("new_password", "")
+    if not old_password or not new_password:
+        return jsonify({"error": "旧密码和新密码不能为空"}), 400
+    if len(new_password) < 6:
+        return jsonify({"error": "新密码至少需要6位"}), 400
+    user_id = session.get("user_id")
+    conn = db()
+    try:
+        user = one(conn, "SELECT * FROM users WHERE id=?", (user_id,))
+        if not user or not check_password_hash(user["password_hash"], old_password):
+            return jsonify({"error": "旧密码错误"}), 401
+        new_hash = generate_password_hash(new_password)
+        _exec(conn, "UPDATE users SET password_hash=? WHERE id=?", (new_hash, user_id))
+        conn.commit()
+        return jsonify({"ok": True})
+    finally:
+        conn.close()
+
+
+@bp.route("/api/auth/me")
+def auth_me():
+    if "user_id" not in session:
+        return jsonify({"logged_in": False})
+    tenants = session.get("tenants", [])
+    if "总工作台" not in tenants:
+        tenants = ["总工作台"] + tenants
+    return jsonify({
+        "logged_in": True,
+        "user": {"id": session["user_id"], "username": session["username"], "display_name": session["display_name"], "role": session["role"]},
+        "tenants": tenants,
+    })
+
+
+# ---------- 账号管理 ----------
+
+@bp.route("/api/users")
+@admin_required
+def list_users():
+    conn = db()
+    try:
+        users = rows(conn, "SELECT id, username, display_name, role, created_at FROM users ORDER BY id")
+        ut_rows = rows(conn, "SELECT user_id, tenant FROM user_tenants")
+        tenant_map = {}
+        for r in ut_rows:
+            tenant_map.setdefault(r["user_id"], []).append(r["tenant"])
+        for u in users:
+            u["tenants"] = tenant_map.get(u["id"], [])
+        return jsonify(users)
+    finally:
+        conn.close()
+
+
+@bp.route("/api/users", methods=["POST"])
+@admin_required
+def create_user():
+    data = request.get_json(force=True)
+    username = (data.get("username") or "").strip()
+    display_name = (data.get("display_name") or "").strip()
+    password = data.get("password") or ""
+    role = data.get("role") or "opc_owner"
+    tenants = data.get("tenants") or []
+    if not username or not password or not display_name:
+        return jsonify({"error": "用户名/密码/显示名不能为空"}), 400
+    if role not in ("admin", "opc_owner"):
+        return jsonify({"error": "角色非法"}), 400
+    conn = db()
+    try:
+        if one(conn, "SELECT id FROM users WHERE username=?", (username,)):
+            return jsonify({"error": "用户名已存在"}), 400
+        _exec(conn, "INSERT INTO users (username, password_hash, display_name, role, created_at) VALUES (?,?,?,?,?)",
+              (username, generate_password_hash(password, "pbkdf2:sha256"), display_name, role, date.today().isoformat()))
+        u = one(conn, "SELECT id FROM users WHERE username=?", (username,))
+        for t in tenants:
+            if t in ALL_TENANTS:
+                _exec(conn, "INSERT IGNORE INTO user_tenants (user_id, tenant) VALUES (?,?)", (u["id"], t))
+        conn.commit()
+        return jsonify({"ok": True, "id": u["id"]})
+    finally:
+        conn.close()
+
+
+@bp.route("/api/users/<int:uid>", methods=["PUT"])
+@admin_required
+def update_user(uid):
+    data = request.get_json(force=True)
+    conn = db()
+    try:
+        u = one(conn, "SELECT * FROM users WHERE id=?", (uid,))
+        if not u:
+            return jsonify({"error": "用户不存在"}), 404
+        display_name = (data.get("display_name") or "").strip() or u["display_name"]
+        role = data.get("role") or u["role"]
+        if role not in ("admin", "opc_owner"):
+            return jsonify({"error": "角色非法"}), 400
+        password = data.get("password") or ""
+        if password:
+            _exec(conn, "UPDATE users SET display_name=?, role=?, password_hash=? WHERE id=?",
+                  (display_name, role, generate_password_hash(password, "pbkdf2:sha256"), uid))
+        else:
+            _exec(conn, "UPDATE users SET display_name=?, role=? WHERE id=?", (display_name, role, uid))
+        if "tenants" in data:
+            _exec(conn, "DELETE FROM user_tenants WHERE user_id=?", (uid,))
+            for t in data["tenants"]:
+                if t in ALL_TENANTS:
+                    _exec(conn, "INSERT IGNORE INTO user_tenants (user_id, tenant) VALUES (?,?)", (uid, t))
+        if role != "admin":
+            admin_count = one(conn, "SELECT COUNT(*) AS c FROM users WHERE role='admin'")["c"]
+            if admin_count == 0:
+                return jsonify({"error": "至少保留一个管理员"}), 400
+        conn.commit()
+        return jsonify({"ok": True})
+    finally:
+        conn.close()
+
+
+@bp.route("/api/users/<int:uid>", methods=["DELETE"])
+@admin_required
+def delete_user(uid):
+    if uid == session.get("user_id"):
+        return jsonify({"error": "不能删除当前登录账号"}), 400
+    conn = db()
+    try:
+        u = one(conn, "SELECT * FROM users WHERE id=?", (uid,))
+        if not u:
+            return jsonify({"error": "用户不存在"}), 404
+        if u["role"] == "admin":
+            admin_count = one(conn, "SELECT COUNT(*) AS c FROM users WHERE role='admin'")["c"]
+            if admin_count <= 1:
+                return jsonify({"error": "至少保留一个管理员"}), 400
+        _exec(conn, "DELETE FROM user_tenants WHERE user_id=?", (uid,))
+        _exec(conn, "DELETE FROM users WHERE id=?", (uid,))
+        conn.commit()
+        return jsonify({"ok": True})
+    finally:
+        conn.close()
+
+
+@bp.route("/api/tenants")
+def list_tenants():
+    return jsonify(ALL_TENANTS)
+
+
+# ---------- 首页 + bootstrap ----------
+
+@bp.route("/")
+def index():
+    if "user_id" not in session:
+        return redirect("/login")
+    return render_template("index.html")
+
+
+@bp.route("/api/bootstrap")
+def bootstrap():
+    if "user_id" not in session:
+        return jsonify({"error": "未登录"}), 401
+    _year = date.today().year
+    tenant = request.args.get("tenant", session.get("tenants", ["科普·无界"])[0])
+    allowed = session.get("tenants", [])
+    if "总工作台" not in allowed:
+        allowed = ["总工作台"] + allowed
+    if tenant not in allowed:
+        tenant = allowed[0]
+    conn = db()
+    try:
+        # 总工作台：聚合所有工作台的首页数据
+        if tenant == "总工作台":
+            real_tenants = [t for t in allowed if t != "总工作台"]
+            all_metrics = []
+            all_monthly = []
+            all_recent = []
+            for t in real_tenants:
+                t_pfs = rows(conn, "SELECT * FROM project_finances WHERE tenant=? ORDER BY id DESC", [t])
+                t_ops = attach_common(conn, "operations", rows(conn, "SELECT * FROM operation_projects WHERE tenant=? ORDER BY id ASC", [t]))
+                t_sales = attach_common(conn, "sales", rows(conn, "SELECT * FROM sales_leads WHERE tenant=? ORDER BY id DESC", [t]))
+                t_products = attach_common(conn, "products", rows(conn, "SELECT * FROM product_versions WHERE tenant=? ORDER BY id DESC", [t]))
+                t_expense = rows(conn, "SELECT * FROM expense_records WHERE tenant=?", [t])
+                t_proposals = attach_common(conn, "proposals", rows(conn, "SELECT * FROM business_proposals WHERE tenant=? ORDER BY id DESC", [t]))
+                t_signed_pfs = t_pfs
+                def t_parse_budget(pf):
+                    try:
+                        budget = json.loads(pf.get("budget_data") or "[]")
+                    except (json.JSONDecodeError, TypeError):
+                        budget = []
+                    return {(b.get("month") or "").replace("-", "_"): b for b in budget}
+                t_bm = {pf["id"]: t_parse_budget(pf) for pf in t_pfs}
+                def t_sum_budget(field, months_range):
+                    total = 0
+                    for pf in t_pfs:
+                        bm = t_bm.get(pf["id"], {})
+                        for m in months_range:
+                            b = bm.get(f"{_year}_{m:02d}")
+                            if b:
+                                total += float(b.get(field) or 0)
+                    return total
+
+                def t_parse_expense(pf):
+                    try:
+                        ed = json.loads(pf.get("expense_data") or "[]")
+                    except (json.JSONDecodeError, TypeError):
+                        ed = []
+                    return {(e.get("month") or "").replace("-", "_"): e for e in ed}
+
+                t_em = {pf["id"]: t_parse_expense(pf) for pf in t_pfs}
+
+                def t_sum_expense(field, months_range):
+                    total = 0
+                    for pf in t_pfs:
+                        em = t_em.get(pf["id"], {})
+                        for m in months_range:
+                            e = em.get(f"{_year}_{m:02d}")
+                            if e:
+                                total += float(e.get(field) or 0)
+                    return total
+
+                _now_month = date.today().month
+                _q_start = ((_now_month - 1) // 3) * 3 + 1
+                _q_range = range(_q_start, _q_start + 3)
+                _q_months = [f"{_year}-{m:02d}" for m in _q_range]
+                _prev_q_start = ((_now_month - 4) // 3) * 3 + 1
+                _prev_q_range = range(max(_prev_q_start, 1), _prev_q_start + 3)
+                _prev_q_months = [f"{_year}-{m:02d}" for m in _prev_q_range]
+                _prev_month = _now_month - 1 if _now_month > 1 else None
+                all_metrics.append({
+                    "total_projects": len(t_signed_pfs),
+                    "total_proposals": len(t_ops),
+                    "total_products": len(t_proposals),
+                    "upcoming_products": len(t_products),
+                    "signed_amount": sum(x["sign_amount"] or 0 for x in t_pfs),
+                    "signed_annual": sum(x["sign_amount"] or 0 for x in t_pfs),
+                    "signed_q2": sum(x["sign_amount"] or 0 for x in t_pfs if (x.get("sign_month") or "")[:7] in _q_months),
+                    "signed_month": sum(x["sign_amount"] or 0 for x in t_pfs if (x.get("sign_month") or "")[:7] == f"{_year}-{_now_month:02d}"),
+                    "signed_prev_q": sum(x["sign_amount"] or 0 for x in t_pfs if (x.get("sign_month") or "")[:7] in _prev_q_months),
+                    "signed_prev_month": sum(x["sign_amount"] or 0 for x in t_pfs if (x.get("sign_month") or "")[:7] == f"{_year}-{_prev_month:02d}") if _prev_month else 0,
+                    "revenue_annual": t_sum_budget("rev", range(1, 13)),
+                    "revenue_q2": t_sum_budget("rev", _q_range),
+                    "monthly_revenue": t_sum_budget("rev", [_now_month]),
+                    "revenue_prev_q": t_sum_budget("rev", _prev_q_range),
+                    "revenue_prev_month": t_sum_budget("rev", [_prev_month]) if _prev_month else 0,
+                    "gross_annual": t_sum_budget("gross", range(1, 13)),
+                    "gross_q2": t_sum_budget("gross", _q_range),
+                    "monthly_net_profit": t_sum_budget("gross", [_now_month]),
+                    "gross_prev_q": t_sum_budget("gross", _prev_q_range),
+                    "gross_prev_month": t_sum_budget("gross", [_prev_month]) if _prev_month else 0,
+                    "payment_annual": t_sum_budget("payment", range(1, 13)),
+                    "payment_q2": t_sum_budget("payment", _q_range),
+                    "payment_month": t_sum_budget("payment", [_now_month]),
+                    "payment_prev_q": t_sum_budget("payment", _prev_q_range),
+                    "payment_prev_month": t_sum_budget("payment", [_prev_month]) if _prev_month else 0,
+                    "cost_annual": t_sum_expense("cost", range(1, 13)),
+                    "cost_q2": t_sum_expense("cost", _q_range),
+                    "cost_month": t_sum_expense("cost", [_now_month]),
+                    "cost_prev_q": t_sum_expense("cost", _prev_q_range),
+                    "cost_prev_month": t_sum_expense("cost", [_prev_month]) if _prev_month else 0,
+                })
+                # 费用汇总（从 expense_records 表计算）
+                def t_expense_sum(m_range):
+                    total = 0
+                    for r in t_expense:
+                        if (r.get("status") or "") == "暂不计入": continue
+                        m = (r.get("expense_month") or "").strip()
+                        if not m or "-" not in m: continue
+                        try:
+                            if int(m.split("-")[1]) in m_range:
+                                total += float(r.get("amount") or 0)
+                        except: pass
+                    return total
+                all_metrics[-1]["expense_annual"] = t_expense_sum(range(1, 13))
+                all_metrics[-1]["expense_q2"] = t_expense_sum(_q_range)
+                all_metrics[-1]["expense_month"] = t_expense_sum([_now_month])
+                all_metrics[-1]["expense_prev_q"] = t_expense_sum(_prev_q_range)
+                all_metrics[-1]["expense_prev_month"] = t_expense_sum([_prev_month]) if _prev_month else 0
+                all_metrics[-1]["paid_annual"] = t_sum_expense("paid", range(1, 13))
+                all_metrics[-1]["paid_q2"] = t_sum_expense("paid", _q_range)
+                all_metrics[-1]["paid_month"] = t_sum_expense("paid", [_now_month])
+                all_metrics[-1]["paid_prev_q"] = t_sum_expense("paid", _prev_q_range)
+                all_metrics[-1]["paid_prev_month"] = t_sum_expense("paid", [_prev_month]) if _prev_month else 0
+                all_metrics[-1]["proj_expense_annual"] = t_sum_budget("expense", range(1, 13))
+                all_metrics[-1]["proj_expense_q2"] = t_sum_budget("expense", _q_range)
+                all_metrics[-1]["proj_expense_month"] = t_sum_budget("expense", [_now_month])
+                all_metrics[-1]["proj_expense_prev_q"] = t_sum_budget("expense", _prev_q_range)
+                all_metrics[-1]["proj_expense_prev_month"] = t_sum_budget("expense", [_prev_month]) if _prev_month else 0
+                all_metrics[-1]["cashflow_annual"] = all_metrics[-1]["payment_annual"] - all_metrics[-1]["paid_annual"]
+                all_metrics[-1]["cashflow_q2"] = all_metrics[-1]["payment_q2"] - all_metrics[-1]["paid_q2"]
+                all_metrics[-1]["cashflow_month"] = all_metrics[-1]["payment_month"] - all_metrics[-1]["paid_month"]
+                all_metrics[-1]["cashflow_prev_q"] = all_metrics[-1]["payment_prev_q"] - all_metrics[-1]["paid_prev_q"]
+                all_metrics[-1]["cashflow_prev_month"] = all_metrics[-1]["payment_prev_month"] - all_metrics[-1]["paid_prev_month"]
+                def t_expense_paid_sum(m_range):
+                    total = 0
+                    for r in t_expense:
+                        if (r.get("status") or "") == "暂不计入": continue
+                        m = (r.get("expense_month") or "").strip()
+                        if not m or "-" not in m: continue
+                        try:
+                            if int(m.split("-")[1]) in m_range:
+                                total += float(r.get("incurred_amount") or 0)
+                        except: pass
+                    return total
+                all_metrics[-1]["expense_paid_annual"] = t_expense_paid_sum(range(1, 13))
+                all_metrics[-1]["expense_paid_q2"] = t_expense_paid_sum(_q_range)
+                all_metrics[-1]["expense_paid_month"] = t_expense_paid_sum([_now_month])
+                all_metrics[-1]["expense_paid_prev_q"] = t_expense_paid_sum(_prev_q_range)
+                all_metrics[-1]["expense_paid_prev_month"] = t_expense_paid_sum([_prev_month]) if _prev_month else 0
+                all_metrics[-1]["dept_cf_annual"] = all_metrics[-1]["cashflow_annual"] - all_metrics[-1]["expense_paid_annual"]
+                all_metrics[-1]["dept_cf_q2"] = all_metrics[-1]["cashflow_q2"] - all_metrics[-1]["expense_paid_q2"]
+                all_metrics[-1]["dept_cf_month"] = all_metrics[-1]["cashflow_month"] - all_metrics[-1]["expense_paid_month"]
+                all_metrics[-1]["dept_cf_prev_q"] = all_metrics[-1]["cashflow_prev_q"] - all_metrics[-1]["expense_paid_prev_q"]
+                all_metrics[-1]["dept_cf_prev_month"] = all_metrics[-1]["cashflow_prev_month"] - all_metrics[-1]["expense_paid_prev_month"]
+                all_metrics[-1]["profit_annual"] = all_metrics[-1]["gross_annual"] - all_metrics[-1]["proj_expense_annual"]
+                all_metrics[-1]["profit_q2"] = all_metrics[-1]["gross_q2"] - all_metrics[-1]["proj_expense_q2"]
+                all_metrics[-1]["profit_month"] = all_metrics[-1]["monthly_net_profit"] - all_metrics[-1]["proj_expense_month"]
+                all_metrics[-1]["profit_prev_q"] = all_metrics[-1]["gross_prev_q"] - all_metrics[-1]["proj_expense_prev_q"]
+                all_metrics[-1]["profit_prev_month"] = all_metrics[-1]["gross_prev_month"] - all_metrics[-1]["proj_expense_prev_month"]
+                all_monthly.append(monthly_finance(conn, t))
+                all_recent.extend(rows(conn, "SELECT * FROM follow_up_records WHERE tenant=? ORDER BY id DESC LIMIT 4", [t]))
+            agg = {}
+            for key in ["total_projects","total_proposals","total_products","upcoming_products","signed_amount","signed_annual","signed_q2","signed_month","signed_prev_q","signed_prev_month","revenue_annual","revenue_q2","monthly_revenue","revenue_prev_q","revenue_prev_month","gross_annual","gross_q2","monthly_net_profit","gross_prev_q","gross_prev_month","payment_annual","payment_q2","payment_month","payment_prev_q","payment_prev_month","cost_annual","cost_q2","cost_month","cost_prev_q","cost_prev_month","expense_annual","expense_q2","expense_month","expense_prev_q","expense_prev_month","paid_annual","paid_q2","paid_month","paid_prev_q","paid_prev_month","cashflow_annual","cashflow_q2","cashflow_month","cashflow_prev_q","cashflow_prev_month","expense_paid_annual","expense_paid_q2","expense_paid_month","expense_paid_prev_q","expense_paid_prev_month","dept_cf_annual","dept_cf_q2","dept_cf_month","dept_cf_prev_q","dept_cf_prev_month","profit_annual","profit_q2","profit_month","profit_prev_q","profit_prev_month","proj_expense_annual","proj_expense_q2","proj_expense_month","proj_expense_prev_q","proj_expense_prev_month"]:
+                agg[key] = sum(m.get(key, 0) for m in all_metrics)
+            merged_monthly = []
+            for i in range(12):
+                m = {"month": all_monthly[0][i]["month"] if all_monthly and len(all_monthly[0]) > i else f"{_year}-{i+1:02d}"}
+                for field in ["revenue","gross","payment","cost","paid","sign"]:
+                    m[field] = sum(tl[i][field] if i < len(tl) else 0 for tl in all_monthly)
+                merged_monthly.append(m)
+            summary = {
+                "project_name": "总工作台",
+                "metrics": agg,
+                "recent": sorted(all_recent, key=lambda x: x.get("id", 0), reverse=True)[:8],
+                "risks": [],
+            }
+            return jsonify({"summary": summary, "sales": [], "proposals": [], "operations": [], "products": [], "finance": [], "projectFinances": [], "financeMonthly": merged_monthly, "tasks": [], "expense": [], "planFinances": [], "planExpense": [], "tenant": tenant, "tenants": allowed})
+
+        def q(sql, *args):
+            return rows(conn, sql, args)
+        sales = attach_common(conn, "sales", q("SELECT * FROM sales_leads WHERE tenant=? ORDER BY id DESC", tenant))
+        proposals = attach_common(conn, "proposals", q("SELECT * FROM business_proposals WHERE tenant=? ORDER BY id DESC", tenant))
+        operations = attach_common(conn, "operations", q("SELECT * FROM operation_projects WHERE tenant=? ORDER BY id ASC", tenant))
+        products = attach_common(conn, "products", q("SELECT * FROM product_versions WHERE tenant=? ORDER BY id DESC", tenant))
+        finance = q("SELECT * FROM finance_records WHERE tenant=? ORDER BY month DESC, id DESC", tenant)
+        tasks = q("SELECT * FROM project_tasks WHERE tenant=? ORDER BY phase, sort_order, id", tenant)
+        pfs = q("SELECT * FROM project_finances WHERE tenant=? ORDER BY id DESC", tenant)
+        expense = q("SELECT * FROM expense_records WHERE tenant=? ORDER BY id DESC", tenant)
+        planPfs = q("SELECT * FROM plan_finances WHERE tenant=? ORDER BY id DESC", tenant)
+        planExpense = q("SELECT * FROM plan_expense_records WHERE tenant=? ORDER BY id DESC", tenant)
+        signed_pfs = pfs
+
+        def parse_budget(pf):
+            try:
+                budget = json.loads(pf.get("budget_data") or "[]")
+            except (json.JSONDecodeError, TypeError):
+                budget = []
+            return {(b.get("month") or "").replace("-", "_"): b for b in budget}
+
+        budget_maps = [(pf, parse_budget(pf)) for pf in signed_pfs]
+
+        def parse_expense(pf):
+            try:
+                ed = json.loads(pf.get("expense_data") or "[]")
+            except (json.JSONDecodeError, TypeError):
+                ed = []
+            return {(e.get("month") or "").replace("-", "_"): e for e in ed}
+
+        expense_maps = [(pf, parse_expense(pf)) for pf in signed_pfs]
+
+        def sum_budget(field, months_range):
+            total = 0
+            for pf, bm in budget_maps:
+                for m in months_range:
+                    b = bm.get(f"{_year}_{m:02d}")
+                    if b:
+                        total += float(b.get(field) or 0)
+            return total
+
+        def sum_expense(field, months_range):
+            total = 0
+            for pf, em in expense_maps:
+                for m in months_range:
+                    e = em.get(f"{_year}_{m:02d}")
+                    if e:
+                        total += float(e.get(field) or 0)
+            return total
+
+        _now_month = date.today().month
+        _q_start = ((_now_month - 1) // 3) * 3 + 1
+        _q_range = range(_q_start, _q_start + 3)
+        _prev_q_start = ((_now_month - 4) // 3) * 3 + 1
+        _prev_q_range = range(max(_prev_q_start, 1), _prev_q_start + 3)
+        _prev_month = _now_month - 1 if _now_month > 1 else None
+        rev_annual = sum_budget("rev", range(1, 13))
+        gross_annual = sum_budget("gross", range(1, 13))
+        rev_q2 = sum_budget("rev", _q_range)
+        gross_q2 = sum_budget("gross", _q_range)
+        rev_month = sum_budget("rev", [_now_month])
+        gross_month = sum_budget("gross", [_now_month])
+        rev_prev_q = sum_budget("rev", _prev_q_range)
+        gross_prev_q = sum_budget("gross", _prev_q_range)
+        rev_prev_month = sum_budget("rev", [_prev_month]) if _prev_month else 0
+        gross_prev_month = sum_budget("gross", [_prev_month]) if _prev_month else 0
+        payment_annual = sum_budget("payment", range(1, 13))
+        cost_annual = sum_expense("cost", range(1, 13))
+        payment_q2 = sum_budget("payment", _q_range)
+        cost_q2 = sum_expense("cost", _q_range)
+        payment_month = sum_budget("payment", [_now_month])
+        cost_month = sum_expense("cost", [_now_month])
+        payment_prev_q = sum_budget("payment", _prev_q_range)
+        cost_prev_q = sum_expense("cost", _prev_q_range)
+        payment_prev_month = sum_budget("payment", [_prev_month]) if _prev_month else 0
+        cost_prev_month = sum_expense("cost", [_prev_month]) if _prev_month else 0
+        def expense_sum(month_range):
+            total = 0
+            for r in expense:
+                if (r.get("status") or "") == "暂不计入": continue
+                m = (r.get("expense_month") or "").strip()
+                if not m or "-" not in m: continue
+                try:
+                    if int(m.split("-")[1]) in month_range:
+                        total += float(r.get("amount") or 0)
+                except: pass
+            return total
+        expense_annual = expense_sum(range(1, 13))
+        expense_q2 = expense_sum(_q_range)
+        expense_month_val = expense_sum([_now_month])
+        expense_prev_q = expense_sum(_prev_q_range)
+        expense_prev_month = expense_sum([_prev_month]) if _prev_month else 0
+        def expense_paid_sum(month_range):
+            total = 0
+            for r in expense:
+                if (r.get("status") or "") == "暂不计入": continue
+                m = (r.get("expense_month") or "").strip()
+                if not m or "-" not in m: continue
+                try:
+                    if int(m.split("-")[1]) in month_range:
+                        total += float(r.get("incurred_amount") or 0)
+                except: pass
+            return total
+        expense_paid_annual = expense_paid_sum(range(1, 13))
+        expense_paid_q2 = expense_paid_sum(_q_range)
+        expense_paid_month = expense_paid_sum([_now_month])
+        expense_paid_prev_q = expense_paid_sum(_prev_q_range)
+        expense_paid_prev_month = expense_paid_sum([_prev_month]) if _prev_month else 0
+        paid_annual = sum_expense("paid", range(1, 13))
+        paid_q2 = sum_expense("paid", _q_range)
+        paid_month = sum_expense("paid", [_now_month])
+        paid_prev_q = sum_expense("paid", _prev_q_range)
+        paid_prev_month = sum_expense("paid", [_prev_month]) if _prev_month else 0
+        proj_expense_annual = sum_budget("expense", range(1, 13))
+        proj_expense_q2 = sum_budget("expense", _q_range)
+        proj_expense_month = sum_budget("expense", [_now_month])
+        proj_expense_prev_q = sum_budget("expense", _prev_q_range)
+        proj_expense_prev_month = sum_budget("expense", [_prev_month]) if _prev_month else 0
+        cashflow_annual = payment_annual - paid_annual
+        cashflow_q2 = payment_q2 - paid_q2
+        cashflow_month = payment_month - paid_month
+        cashflow_prev_q = payment_prev_q - paid_prev_q
+        cashflow_prev_month = payment_prev_month - paid_prev_month
+        dept_cf_annual = cashflow_annual - expense_paid_annual
+        dept_cf_q2 = cashflow_q2 - expense_paid_q2
+        dept_cf_month = cashflow_month - expense_paid_month
+        dept_cf_prev_q = cashflow_prev_q - expense_paid_prev_q
+        dept_cf_prev_month = cashflow_prev_month - expense_paid_prev_month
+        profit_annual = gross_annual - proj_expense_annual
+        profit_q2 = gross_q2 - proj_expense_q2
+        profit_month = gross_month - proj_expense_month
+        profit_prev_q = gross_prev_q - proj_expense_prev_q
+        profit_prev_month = gross_prev_month - proj_expense_prev_month
+        signed_amount = sum(x["sign_amount"] or 0 for x in pfs)
+        signed_annual = sum(x["sign_amount"] or 0 for x in pfs)
+        _q_months = [f"{_year}-{m:02d}" for m in _q_range]
+        signed_q2 = sum(x["sign_amount"] or 0 for x in pfs if (x.get("sign_month") or "")[:7] in _q_months)
+        signed_month = sum(x["sign_amount"] or 0 for x in pfs if (x.get("sign_month") or "")[:7] == f"{_year}-{_now_month:02d}")
+        _prev_q_months = [f"{_year}-{m:02d}" for m in _prev_q_range]
+        signed_prev_q = sum(x["sign_amount"] or 0 for x in pfs if (x.get("sign_month") or "")[:7] in _prev_q_months)
+        signed_prev_month = sum(x["sign_amount"] or 0 for x in pfs if (x.get("sign_month") or "")[:7] == f"{_year}-{_prev_month:02d}") if _prev_month else 0
+        pipeline_amount = sum(x["expected_contract_amount"] or 0 for x in operations if x["project_status"] not in ["已签约","已丢单","已归档","已完成"])
+        signed_not_executed = sum(x["expected_contract_amount"] or 0 for x in operations if x["project_type"] == "execution" and x["execution_progress"] < 100)
+        summary = {
+            "project_name": "科普（慰心斋）",
+            "metrics": {
+                "p0_customers": len([x for x in sales if x["priority"] == "P0"]),
+                "active_sales": len([x for x in sales if x["status"] in ["待跟进", "跟进中", "方案中", "商务谈判"]]),
+                "execution_projects": len([x for x in operations if x["project_type"] == "execution"]),
+                "risk_projects": len([x for x in operations if x["project_status"] == "有风险" or x["risks"]]),
+                "monthly_revenue": rev_month,
+                "monthly_net_profit": gross_month,
+                "monthly_gross": gross_month,
+                "upcoming_products": len(products),
+                "total_projects": len(signed_pfs),
+                "total_proposals": len(operations),
+                "total_products": len(proposals),
+                "signed_amount": signed_amount,
+                "signed_annual": signed_annual,
+                "signed_q2": signed_q2,
+                "signed_month": signed_month,
+                "signed_prev_q": signed_prev_q,
+                "signed_prev_month": signed_prev_month,
+                "pipeline_amount": pipeline_amount,
+                "revenue_annual": rev_annual,
+                "revenue_q2": rev_q2,
+                "revenue_prev_q": rev_prev_q,
+                "revenue_prev_month": rev_prev_month,
+                "gross_annual": gross_annual,
+                "gross_q2": gross_q2,
+                "gross_prev_q": gross_prev_q,
+                "gross_prev_month": gross_prev_month,
+                "payment_annual": payment_annual,
+                "payment_q2": payment_q2,
+                "payment_month": payment_month,
+                "payment_prev_q": payment_prev_q,
+                "payment_prev_month": payment_prev_month,
+                "cost_annual": cost_annual,
+                "cost_q2": cost_q2,
+                "cost_month": cost_month,
+                "cost_prev_q": cost_prev_q,
+                "cost_prev_month": cost_prev_month,
+                "expense_annual": expense_annual,
+                "expense_q2": expense_q2,
+                "expense_month": expense_month_val,
+                "expense_prev_q": expense_prev_q,
+                "expense_prev_month": expense_prev_month,
+                "paid_annual": paid_annual,
+                "paid_q2": paid_q2,
+                "paid_month": paid_month,
+                "paid_prev_q": paid_prev_q,
+                "paid_prev_month": paid_prev_month,
+                "cashflow_annual": cashflow_annual,
+                "cashflow_q2": cashflow_q2,
+                "cashflow_month": cashflow_month,
+                "cashflow_prev_q": cashflow_prev_q,
+                "cashflow_prev_month": cashflow_prev_month,
+                "expense_paid_annual": expense_paid_annual,
+                "expense_paid_q2": expense_paid_q2,
+                "expense_paid_month": expense_paid_month,
+                "expense_paid_prev_q": expense_paid_prev_q,
+                "expense_paid_prev_month": expense_paid_prev_month,
+                "dept_cf_annual": dept_cf_annual,
+                "dept_cf_q2": dept_cf_q2,
+                "dept_cf_month": dept_cf_month,
+                "dept_cf_prev_q": dept_cf_prev_q,
+                "dept_cf_prev_month": dept_cf_prev_month,
+                "profit_annual": profit_annual,
+                "profit_q2": profit_q2,
+                "profit_month": profit_month,
+                "profit_prev_q": profit_prev_q,
+                "profit_prev_month": profit_prev_month,
+                "proj_expense_annual": proj_expense_annual,
+                "proj_expense_q2": proj_expense_q2,
+                "proj_expense_month": proj_expense_month,
+                "proj_expense_prev_q": proj_expense_prev_q,
+                "proj_expense_prev_month": proj_expense_prev_month,
+                "signed_not_executed": signed_not_executed,
+            },
+            "recent": q("SELECT * FROM follow_up_records WHERE tenant=? ORDER BY id DESC LIMIT 8", tenant),
+            "risks": [{"title": "执行提醒", "content": x["next_action"]} for x in operations if x["next_action"]][:5],
+        }
+        return jsonify({"summary": summary, "sales": sales, "proposals": proposals, "operations": operations, "products": products, "finance": finance, "projectFinances": pfs, "financeMonthly": monthly_finance(conn, tenant), "tasks": tasks, "expense": expense, "planFinances": planPfs, "planExpense": planExpense, "tenant": tenant, "tenants": allowed})
+    finally:
+        conn.close()
+
+
+# ---------- 通用 CRUD ----------
+
+@bp.route("/api/<resource>", methods=["POST"])
+@login_required
+def create_resource(resource):
+    if resource not in TABLES:
+        return jsonify({"error": "unknown resource"}), 404
+    table, cols = TABLES[resource]
+    payload = request.get_json(force=True).get("data", {})
+    if resource == "tasks":
+        valid_statuses = ["未开始", "进行中", "已结束"]
+        if not payload.get("status") or payload["status"] not in valid_statuses:
+            payload["status"] = "未开始"
+    conn = db()
+    try:
+        type_cur = conn.cursor()
+        type_cur.execute(f"DESCRIBE {table}")
+        col_types = {r[0]: r[1].upper() for r in type_cur.fetchall()}
+        type_cur.close()
+        values = []
+        for col in cols:
+            val = payload.get(col, "")
+            if val == "" and ("DOUBLE" in col_types.get(col, "") or "INT" in col_types.get(col, "")):
+                val = 0
+            values.append(val)
+        cur = _exec(conn, f"INSERT INTO {table} ({','.join(cols)}) VALUES ({','.join(['?'] * len(cols))})", values)
+        conn.commit()
+        return jsonify({"id": cur.lastrowid})
+    finally:
+        conn.close()
+
+
+@bp.route("/api/<resource>/<int:item_id>", methods=["PUT", "DELETE"])
+@login_required
+def update_resource(resource, item_id):
+    if resource not in TABLES:
+        return jsonify({"error": "unknown resource"}), 404
+    table, cols = TABLES[resource]
+    conn = db()
+    try:
+        if request.method == "DELETE":
+            _exec(conn, f"DELETE FROM {table} WHERE id=?", (item_id,))
+            conn.commit()
+            return jsonify({"ok": True})
+        payload = request.get_json(force=True).get("data", {})
+        if resource == "tasks" and "status" in payload:
+            valid_statuses = ["未开始", "进行中", "已结束"]
+            if not payload["status"] or payload["status"] not in valid_statuses:
+                payload["status"] = "未开始"
+        if resource == "products":
+            cur = _exec(conn, f"SELECT start_date FROM {table} WHERE id=?", (item_id,))
+            row = cur.fetchone()
+            cur.close()
+            current_start = (row or {}).get("start_date", "") or ""
+            new_start = payload.get("start_date", current_start)
+            if "start_date" in payload and not new_start:
+                return jsonify({"error": "启动时间为必填项"}), 400
+            date_fields = ["plan_date", "dev_done_date", "test_date", "launch_date"]
+            for f in date_fields:
+                if f in payload and payload[f] and new_start and payload[f] < new_start:
+                    labels = {"plan_date": "产品方案", "dev_done_date": "研发完成", "test_date": "测试完成", "launch_date": "上线时间"}
+                    return jsonify({"error": f"{labels[f]}不能早于启动时间（{new_start}）"}), 400
+        update_cols = [col for col in cols if col in payload]
+        if update_cols:
+            _exec(conn,
+                f"UPDATE {table} SET {','.join([col + '=?' for col in update_cols])}, updated_at=? WHERE id=?",
+                [payload[col] for col in update_cols] + [now(), item_id],
+            )
+            conn.commit()
+        return jsonify({"ok": True})
+    finally:
+        conn.close()
+
+
+# ---------- followups ----------
+
+@bp.route("/api/followups/<target_type>/<int:target_id>")
+def list_followups(target_type, target_id):
+    conn = db()
+    try:
+        fups = rows(conn,
+            "SELECT * FROM follow_up_records WHERE target_type=? AND target_id=? ORDER BY followed_at DESC, id DESC",
+            (target_type, target_id))
+        return jsonify(fups)
+    finally:
+        conn.close()
+
+@bp.route("/api/followups/<target_type>/<int:target_id>", methods=["POST"])
+@login_required
+def add_followup(target_type, target_id):
+    payload = request.get_json(force=True).get("data", {})
+    conn = db()
+    try:
+        _exec(conn,
+            """INSERT INTO follow_up_records
+            (target_type,target_id,followed_at,follower,follow_up_method,content,next_action,next_follow_up_at,tenant)
+            VALUES (?,?,?,?,?,?,?,?,?)""",
+            (
+                target_type,
+                target_id,
+                payload.get("followed_at") or date.today().isoformat(),
+                payload.get("follower") or "慰心",
+                payload.get("follow_up_method") or "记录",
+                payload.get("content") or "",
+                payload.get("next_action") or "",
+                payload.get("next_follow_up_at") or "",
+                payload.get("tenant") or "科普·无界",
+            ),
+        )
+        conn.commit()
+        return jsonify({"ok": True})
+    finally:
+        conn.close()
+
+
+@bp.route("/api/followups/<int:followup_id>", methods=["DELETE"])
+@login_required
+def delete_followup(followup_id):
+    conn = db()
+    try:
+        cur = _exec(conn, "DELETE FROM follow_up_records WHERE id=?", (followup_id,))
+        conn.commit()
+        if cur.rowcount == 0:
+            return jsonify({"error": "not found"}), 404
+        return jsonify({"ok": True})
+    finally:
+        conn.close()
+
+
+# ---------- batch sort ----------
+
+@bp.route("/api/tasks/batch-sort", methods=["POST"])
+@login_required
+def batch_sort_tasks():
+    conn = db()
+    try:
+        items = request.get_json(force=True).get("items", [])
+        for item in items:
+            _exec(conn, "UPDATE project_tasks SET sort_order=? WHERE id=?", (item["sort_order"], item["id"]))
+        conn.commit()
+        return jsonify({"ok": True})
+    finally:
+        conn.close()
+
+
+@bp.route("/api/operations/batch-sort", methods=["POST"])
+@login_required
+def batch_sort_operations():
+    conn = db()
+    try:
+        items = request.get_json(force=True).get("items", [])
+        for item in items:
+            _exec(conn, "UPDATE operation_projects SET sort_order=? WHERE id=?", (item["sort_order"], item["id"]))
+        conn.commit()
+        return jsonify({"ok": True})
+    finally:
+        conn.close()
+
+
+# ---------- files ----------
+
+@bp.route("/api/files/upload", methods=["POST"])
+@login_required
+def upload_file():
+    file = request.files["file"]
+    module = request.form["module"]
+    owner_id = int(request.form["owner_id"])
+    owner_version = request.form.get("owner_version", "")
+    category = request.form.get("file_category", "")
+    folder = UPLOAD_DIR / module / str(owner_id)
+    folder.mkdir(parents=True, exist_ok=True)
+    target = folder / file.filename
+    file.save(target)
+    conn = db()
+    try:
+        add_file_index(conn, module, owner_id, owner_version, category, target, external=False)
+        conn.commit()
+        return jsonify({"ok": True})
+    finally:
+        conn.close()
+
+
+@bp.route("/api/files/<int:file_id>/content")
+def file_content(file_id):
+    conn = db()
+    try:
+        asset = one(conn, "SELECT * FROM file_assets WHERE id=?", (file_id,))
+        if not asset:
+            return jsonify({"error": "not found"}), 404
+        path = Path(asset["file_path"])
+        if not path.exists():
+            return jsonify({"error": "missing"}), 404
+        return send_file(path, as_attachment=request.args.get("inline") == "false", download_name=asset["file_name"])
+    finally:
+        conn.close()
+
+
+@bp.route("/api/files/<int:file_id>", methods=["DELETE"])
+@login_required
+def delete_file(file_id):
+    conn = db()
+    try:
+        asset = one(conn, "SELECT * FROM file_assets WHERE id=?", (file_id,))
+        if not asset:
+            return jsonify({"error": "not found"}), 404
+        path = Path(asset["file_path"])
+        if path.exists() and str(UPLOAD_DIR) in str(path.resolve()):
+            path.unlink(missing_ok=True)
+        _exec(conn, "DELETE FROM file_assets WHERE id=?", (file_id,))
+        conn.commit()
+        return jsonify({"ok": True})
+    finally:
+        conn.close()
+
+
+# ---------- health ----------
+
+@bp.route("/api/health")
+def health():
+    return jsonify({"ok": True, "service": "opc-manager"})

deploy/README.md

@@ -0,0 +1,193 @@
+# OPC-Manager 自动化部署指南
+
+## 架构
+
+```
+开发者 push main → Gitea 仓库 (git.qiukai.me)
+                        ↓
+                  Gitea Actions 触发
+                        ↓
+            Runner（跑在业务服务器 82.157.208.197 上）
+                        ↓
+            git clone → rsync 到 release 目录
+                        ↓
+            创建 venv → pip install → systemctl restart
+                        ↓
+            健康检查 → 切换 current 软链 → 清理旧版本
+```
+
+## 服务器目录结构
+
+```
+/opt/opc-manager/
+├── releases/
+│   ├── abc1234/     ← 本次发布（commit sha）
+│   ├── def5678/     ← 上次发布
+│   └── ...          ← 保留最近 5 个
+├── shared/
+│   ├── .env         ← 环境变量（不进 git，持久化）
+│   └── uploads/     ← 上传的文件（持久化，跨版本共享）
+└── current → releases/abc1234  ← 软链，指向当前生效版本
+```
+
+## 一次性准备（在业务服务器上执行）
+
+### 1. 安装 Gitea Actions Runner
+
+```bash
+# 下载 act_runner
+cd /opt
+wget https://gitea.com/gitea/act_runner/releases/download/v0.2.11/act_runner-0.2.11-linux-amd64 -O act_runner
+chmod +x act_runner
+mv act_runner /usr/local/bin/
+
+# 注册 runner（到 git.qiukai.me）
+# 先在 Gitea 网页：仓库设置 → Actions → Runners → New runner，获取 token
+act_runner register \
+  --instance https://git.qiukai.me \
+  --token <YOUR_RUNNER_TOKEN> \
+  --name prod-deploy \
+  --labels prod-deploy \
+  --no-interactive
+
+# 安装为系统服务
+act_runner daemon --config /etc/act_runner/config.yaml &
+# 或用 systemd：
+cat > /etc/systemd/system/act-runner.service <<'EOF'
+[Unit]
+Description=Gitea Actions Runner
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=/usr/local/bin/act_runner daemon
+Restart=on-failure
+Environment=HOME=/root
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+systemctl daemon-reload
+systemctl enable --now act-runner
+```
+
+### 2. 创建部署目录结构
+
+```bash
+mkdir -p /opt/opc-manager/{releases,shared/uploads}
+```
+
+### 3. 创建 .env 文件
+
+```bash
+cat > /opt/opc-manager/shared/.env <<'EOF'
+SECRET_KEY=改成一串随机字符串_至少32位
+DB_HOST=127.0.0.1
+DB_PORT=3306
+DB_USER=opc
+DB_PASSWORD=opc123456
+DB_NAME=opc
+FLASK_DEBUG=false
+EOF
+
+chmod 600 /opt/opc-manager/shared/.env
+```
+
+### 4. 安装 systemd service
+
+```bash
+# 从仓库的 deploy/opc-manager.service 复制
+cat > /etc/systemd/system/opc-manager.service <<'EOF'
+[Unit]
+Description=OPC Manager (Flask)
+After=network.target mysql.service
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/opc-manager/current
+ExecStart=/opt/opc-manager/current/.venv/bin/gunicorn --preload -w 4 -b 0.0.0.0:5177 backend.flask_app:app
+Restart=on-failure
+RestartSec=5
+EnvironmentFile=/opt/opc-manager/current/.env
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+systemctl daemon-reload
+systemctl enable opc-manager
+```
+
+### 5. 配置 Gitea Secret
+
+在 Gitea 网页操作：
+1. 进入仓库 `qiukai/opc-manager`
+2. 设置 → Actions → Secrets → New Secret
+3. Name: `DEPLOY_TOKEN`
+4. Value: 你的 Gitea Personal Access Token（需要有 repo 读权限）
+   - 生成路径：头像 → 设置 → 应用 → 生成令牌
+
+### 6. 首次手动部署
+
+push 代码前，先手动跑一次确保目录结构正确：
+
+```bash
+cd /opt/opc-manager
+git clone --depth 1 --branch main https://git.qiukai.me/qiukai/opc-manager.git /tmp/opc-init
+RELEASE_DIR=/opt/opc-manager/releases/initial
+mkdir -p "${RELEASE_DIR}"
+rsync -a --exclude='.git' --exclude='.env' --exclude='.venv' /tmp/opc-init/ "${RELEASE_DIR}/"
+ln -sfn /opt/opc-manager/shared/.env "${RELEASE_DIR}/.env"
+ln -sfn /opt/opc-manager/shared/uploads "${RELEASE_DIR}/data/uploads"
+cd "${RELEASE_DIR}"
+python3 -m venv .venv
+. .venv/bin/activate
+pip install -r requirements.txt
+ln -sfn "${RELEASE_DIR}" /opt/opc-manager/current
+systemctl start opc-manager
+curl http://127.0.0.1:5177/api/health
+rm -rf /tmp/opc-init
+```
+
+## 日常使用
+
+### 发布新版本
+```bash
+# 本地
+git push origin main
+# 自动触发 Gitea Actions → 服务器自动部署
+```
+
+### 查看部署状态
+```bash
+# 在 Gitea 网页：仓库 → Actions 查看部署日志
+# 或在服务器：
+systemctl status opc-manager
+ls -la /opt/opc-manager/current
+```
+
+### 回滚
+```bash
+# 列出历史版本
+ls -t /opt/opc-manager/releases
+# 切换到上一个版本
+PREV=$(ls -t /opt/opc-manager/releases | sed -n '2p')
+ln -sfn "/opt/opc-manager/releases/${PREV}" /opt/opc-manager/current
+systemctl restart opc-manager
+```
+
+## Nginx 反代（可选）
+
+```nginx
+server {
+    listen 80;
+    server_name opc.yxcowork.vip;
+    location / {
+        proxy_pass http://127.0.0.1:5177;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    }
+}
+```

deploy/opc-manager.service

@@ -0,0 +1,14 @@
+[Unit]
+Description=OPC Manager (Flask)
+After=network.target mysql.service
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/opc-manager/current
+ExecStart=/opt/opc-manager/current/.venv/bin/gunicorn --preload -w 4 -b 0.0.0.0:5177 backend.flask_app:app
+Restart=on-failure
+RestartSec=5
+EnvironmentFile=/opt/opc-manager/current/.env
+
+[Install]
+WantedBy=multi-user.target

deploy/服务器配置任务提示词.md

@@ -0,0 +1,82 @@
+# OPC-Manager 自动化部署配置任务
+
+## 背景
+OPC-Manager 项目（Flask + MySQL，端口 5177）需要配置 Gitea Actions 自动化部署。参考 SalesManager 的模式：push 到 main 分支后自动部署到业务服务器。部署工作流文件已写好（`.gitea/workflows/deploy.yml`），需要在服务器上完成一次性准备。
+
+## 服务器信息
+- 业务服务器：82.157.208.197（SSH 别名 `ssh business`）
+- Gitea 地址：https://git.qiukai.me
+- 仓库：qiukai/opc-manager
+- 服务端口：5177
+- MySQL：已安装（8.0.45，系统服务），数据库 `opc`，用户 `opc/opc123456`
+
+## 需要完成的 5 个步骤
+
+### 1. 安装 Gitea Actions Runner
+在业务服务器上安装 `act_runner` 并注册到 Gitea：
+- 下载地址：https://gitea.com/gitea/act_runner/releases/download/v0.2.11/act_runner-0.2.11-linux-amd64
+- 放到 `/usr/local/bin/act_runner`
+- 注册时 name=`prod-deploy`，labels=`prod-deploy`
+- 注册 token 需要到 Gitea 网页获取：仓库 qiukai/opc-manager → 设置 → Actions → Runners → New runner
+- 安装为 systemd 服务（`/etc/systemd/system/act-runner.service`），开机自启
+
+### 2. 创建部署目录结构
+```bash
+mkdir -p /opt/opc-manager/{releases,shared/uploads}
+```
+
+### 3. 创建 .env 文件
+在 `/opt/opc-manager/shared/.env` 创建环境变量文件：
+```
+SECRET_KEY=随机生成32位以上字符串
+DB_HOST=127.0.0.1
+DB_PORT=3306
+DB_USER=opc
+DB_PASSWORD=opc123456
+DB_NAME=opc
+FLASK_DEBUG=false
+```
+权限设为 600。
+
+### 4. 安装 systemd service
+创建 `/etc/systemd/system/opc-manager.service`：
+```ini
+[Unit]
+Description=OPC Manager (Flask)
+After=network.target mysql.service
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/opc-manager/current
+ExecStart=/opt/opc-manager/current/.venv/bin/gunicorn --preload -w 4 -b 0.0.0.0:5177 backend.flask_app:app
+Restart=on-failure
+RestartSec=5
+EnvironmentFile=/opt/opc-manager/current/.env
+
+[Install]
+WantedBy=multi-user.target
+```
+执行 `systemctl daemon-reload && systemctl enable opc-manager`（先不 start，等首次部署后自动启动）。
+
+### 5. 配置 Gitea Secret
+在 Gitea 网页操作（需要用户在浏览器完成）：
+- 进入仓库 qiukai/opc-manager → 设置 → Actions → Secrets → New Secret
+- Name: `DEPLOY_TOKEN`
+- Value: 用户的 Gitea Personal Access Token（需 repo 读权限）
+  - 生成路径：头像 → 设置 → 应用 → 生成令牌
+
+## 首次部署验证
+准备完成后，在本地执行一次 `git push origin main`，观察：
+1. Gitea 网页 Actions 页面是否有部署任务在运行
+2. 部署日志是否正常
+3. 部署完成后 `curl http://127.0.0.1:5177/api/health` 是否返回 `{"ok":true,"service":"opc-manager"}`
+4. `systemctl status opc-manager` 是否 active
+
+## 参考文件
+项目的部署工作流在仓库的 `.gitea/workflows/deploy.yml`，systemd 模板在 `deploy/opc-manager.service`，完整说明在 `deploy/README.md`。
+
+## 注意事项
+- Gitea Runner 的 token 需要用户在浏览器获取后告诉你，你无法自动获取
+- Gitea Secret (DEPLOY_TOKEN) 也需要用户在浏览器配置
+- 如果服务器没有 python3.11+，需要先安装（OPC-Manager 要求 Python 3.9+）
+- 确保服务器已安装 git、rsync、curl（一般都有）

requirements.txt

@@ -0,0 +1,5 @@
+flask==3.1.3
+mysql-connector-python==9.4.0
+python-dotenv==1.2.1
+werkzeug==3.1.8
+gunicorn==23.0.0

static/modules/admin.js

@@ -0,0 +1,254 @@
+// admin.js — 账号管理（仅 admin 可见）
+
+window.openAdminUsers = async () => {
+  const overlay = document.createElement("div");
+  overlay.id = "adminOverlay";
+  overlay.className = "fixed inset-0 bg-black/40 z-[9998] flex items-center justify-center p-4";
+  overlay.innerHTML = `
+    <div class="bg-white rounded-xl shadow-2xl w-full max-w-3xl max-h-[85vh] flex flex-col">
+      <div class="flex items-center justify-between px-6 py-4 border-b border-slate-200">
+        <h2 class="text-lg font-semibold text-slate-800">账号管理</h2>
+        <div class="flex items-center gap-2">
+          <button class="btn btn-primary btn-sm" onclick="openUserForm()"><i data-lucide="plus" style="width:14px;height:14px"></i>新增账号</button>
+          <button class="text-slate-400 hover:text-slate-700" onclick="closeAdminUsers()"><i data-lucide="x"></i></button>
+        </div>
+      </div>
+      <div class="overflow-y-auto p-6" id="adminUserList"></div>
+    </div>`;
+  overlay.addEventListener("click", (e) => { if (e.target === overlay) closeAdminUsers(); });
+  document.body.appendChild(overlay);
+  if (window.lucide) lucide.createIcons();
+  await loadUserList();
+};
+
+window.closeAdminUsers = () => {
+  const el = document.getElementById("adminOverlay");
+  if (el) el.remove();
+};
+
+async function loadUserList() {
+  const list = document.getElementById("adminUserList");
+  if (!list) return;
+  list.innerHTML = `<div class="text-center text-slate-400 py-8">加载中...</div>`;
+  try {
+    const users = await api("/api/users");
+    const tenants = await api("/api/tenants");
+    list.innerHTML = `
+      <table class="w-full text-sm">
+        <thead>
+          <tr class="border-b border-slate-200 text-slate-500 text-xs">
+            <th class="text-left py-2 px-2">用户名</th>
+            <th class="text-left py-2 px-2">显示名</th>
+            <th class="text-left py-2 px-2">角色</th>
+            <th class="text-left py-2 px-2">工作台</th>
+            <th class="text-right py-2 px-2">操作</th>
+          </tr>
+        </thead>
+        <tbody>
+          ${users.map(u => `
+            <tr class="border-b border-slate-100 hover:bg-slate-50">
+              <td class="py-3 px-2 font-medium text-slate-800">${esc(u.username)}</td>
+              <td class="py-3 px-2 text-slate-700">${esc(u.display_name)}</td>
+              <td class="py-3 px-2">
+                <span class="inline-flex items-center px-2 py-0.5 rounded text-xs font-medium ${u.role === 'admin' ? 'bg-blue-100 text-blue-700' : 'bg-slate-100 text-slate-600'}">${u.role === 'admin' ? '管理员' : 'OPC负责人'}</span>
+              </td>
+              <td class="py-3 px-2 text-slate-600 text-xs">${(u.tenants || []).map(t => `<span class="inline-block bg-slate-100 rounded px-1.5 py-0.5 mr-1 mb-1">${esc(t)}</span>`).join('') || '<span class="text-slate-400">—</span>'}</td>
+              <td class="py-3 px-2 text-right">
+                <button class="btn btn-ghost btn-sm" onclick="openUserForm(${u.id})"><i data-lucide="edit-2" style="width:14px;height:14px"></i>编辑</button>
+                <button class="btn btn-ghost btn-sm text-red-600 hover:bg-red-50" onclick="deleteUser(${u.id}, '${esc(u.username)}')"><i data-lucide="trash-2" style="width:14px;height:14px"></i>删除</button>
+              </td>
+            </tr>
+          `).join('')}
+        </tbody>
+      </table>`;
+    if (window.lucide) lucide.createIcons();
+  } catch (e) {
+    list.innerHTML = `<div class="text-center text-red-600 py-8">加载失败：${esc(e.message)}</div>`;
+  }
+}
+
+window.openUserForm = async (uid) => {
+  let user = null;
+  let userTenants = [];
+  if (uid) {
+    try {
+      const users = await api("/api/users");
+      user = users.find(u => u.id === uid);
+      userTenants = user?.tenants || [];
+    } catch (e) { toast("加载用户失败", "error"); return; }
+  }
+  const tenants = await api("/api/tenants");
+
+  const modal = document.createElement("div");
+  modal.id = "userFormModal";
+  modal.className = "fixed inset-0 bg-black/40 z-[9999] flex items-center justify-center p-4";
+  modal.innerHTML = `
+    <div class="bg-white rounded-xl shadow-2xl w-full max-w-md">
+      <div class="flex items-center justify-between px-6 py-4 border-b border-slate-200">
+        <h3 class="text-base font-semibold text-slate-800">${user ? '编辑账号' : '新增账号'}</h3>
+        <button class="text-slate-400 hover:text-slate-700" onclick="document.getElementById('userFormModal').remove()"><i data-lucide="x"></i></button>
+      </div>
+      <form class="p-6 space-y-4" onsubmit="submitUserForm(event, ${uid || 0})">
+        <div>
+          <label class="block text-xs font-medium text-slate-600 mb-1">用户名 ${user ? '<span class="text-slate-400">(不可修改)</span>' : '<span class="text-red-500">*</span>'}</label>
+          <input name="username" class="form-ctrl w-full" value="${user ? esc(user.username) : ''}" ${user ? 'disabled' : 'required'} placeholder="登录用户名">
+        </div>
+        <div>
+          <label class="block text-xs font-medium text-slate-600 mb-1">显示名 <span class="text-red-500">*</span></label>
+          <input name="display_name" class="form-ctrl w-full" value="${user ? esc(user.display_name) : ''}" required placeholder="如：科普负责人">
+        </div>
+        <div>
+          <label class="block text-xs font-medium text-slate-600 mb-1">密码 ${user ? '<span class="text-slate-400">(留空不修改)</span>' : '<span class="text-red-500">*</span>'}</label>
+          <input name="password" type="password" class="form-ctrl w-full" ${user ? '' : 'required'} placeholder="${user ? '留空保持原密码' : '登录密码'}">
+        </div>
+        <div>
+          <label class="block text-xs font-medium text-slate-600 mb-1">角色</label>
+          <select name="role" class="form-ctrl w-full">
+            <option value="opc_owner" ${user?.role === 'opc_owner' ? 'selected' : ''}>OPC负责人（仅看分配工作台）</option>
+            <option value="admin" ${user?.role === 'admin' ? 'selected' : ''}>管理员（看所有工作台）</option>
+          </select>
+        </div>
+        <div>
+          <label class="block text-xs font-medium text-slate-600 mb-1">工作台权限 <span class="text-slate-400">(OPC负责人生效)</span></label>
+          <div class="space-y-1.5">
+            ${tenants.map(t => `
+              <label class="flex items-center gap-2 cursor-pointer">
+                <input type="checkbox" name="tenants" value="${esc(t)}" ${userTenants.includes(t) ? 'checked' : ''} class="rounded">
+                <span class="text-sm text-slate-700">${esc(t)}</span>
+              </label>
+            `).join('')}
+          </div>
+        </div>
+        <div class="flex justify-end gap-2 pt-2">
+          <button type="button" class="btn btn-ghost btn-sm" onclick="document.getElementById('userFormModal').remove()">取消</button>
+          <button type="submit" class="btn btn-primary btn-sm">保存</button>
+        </div>
+      </form>
+    </div>`;
+  modal.addEventListener("click", (e) => { if (e.target === modal) modal.remove(); });
+  document.body.appendChild(modal);
+  if (window.lucide) lucide.createIcons();
+};
+
+window.submitUserForm = async (event, uid) => {
+  event.preventDefault();
+  const form = event.target;
+  const fd = new FormData(form);
+  const payload = {
+    username: fd.get("username"),
+    display_name: fd.get("display_name"),
+    password: fd.get("password"),
+    role: fd.get("role"),
+    tenants: fd.getAll("tenants"),
+  };
+  try {
+    if (uid) {
+      await api(`/api/users/${uid}`, { method: "PUT", body: JSON.stringify(payload) });
+      toast("已更新", "success");
+    } else {
+      await api("/api/users", { method: "POST", body: JSON.stringify(payload) });
+      toast("已新增", "success");
+    }
+    document.getElementById("userFormModal").remove();
+    await loadUserList();
+  } catch (e) {
+    toast("保存失败：" + e.message, "error");
+  }
+};
+
+window.deleteUser = async (uid, username) => {
+  if (!confirm(`确认删除账号「${username}」？此操作不可撤销。`)) return;
+  try {
+    await api(`/api/users/${uid}`, { method: "DELETE" });
+    toast("已删除", "success");
+    await loadUserList();
+  } catch (e) {
+    toast("删除失败：" + e.message, "error");
+  }
+};
+
+// 修改密码弹窗
+window.openChangePwdModal = () => {
+  const overlay = document.createElement("div");
+  overlay.id = "changePwdOverlay";
+  overlay.className = "fixed inset-0 bg-black/40 z-[9999] flex items-center justify-center p-4";
+  overlay.innerHTML = `
+    <div class="bg-white rounded-xl shadow-2xl w-full max-w-sm">
+      <div class="flex items-center justify-between px-6 py-4 border-b border-slate-200">
+        <h2 class="text-lg font-semibold text-slate-800">修改密码</h2>
+        <button class="text-slate-400 hover:text-slate-700" onclick="closeChangePwdModal()"><i data-lucide="x"></i></button>
+      </div>
+      <form class="p-6 grid gap-4" onsubmit="doChangePwd(event)" novalidate>
+        <label class="block">
+          <span class="text-sm text-slate-500 mb-1 block">旧密码</span>
+          <div class="relative">
+            <input type="password" name="old_password" required class="form-ctrl pr-10" placeholder="输入旧密码">
+            <button type="button" class="absolute right-2 top-1/2 -translate-y-1/2 text-slate-400 hover:text-slate-600 p-1" onclick="togglePwdEye(this)"><i data-lucide="eye-off" style="width:16px;height:16px"></i></button>
+          </div>
+        </label>
+        <label class="block">
+          <span class="text-sm text-slate-500 mb-1 block">新密码</span>
+          <div class="relative">
+            <input type="password" name="new_password" required minlength="6" class="form-ctrl pr-10" placeholder="至少6位">
+            <button type="button" class="absolute right-2 top-1/2 -translate-y-1/2 text-slate-400 hover:text-slate-600 p-1" onclick="togglePwdEye(this)"><i data-lucide="eye-off" style="width:16px;height:16px"></i></button>
+          </div>
+        </label>
+        <label class="block">
+          <span class="text-sm text-slate-500 mb-1 block">确认新密码</span>
+          <div class="relative">
+            <input type="password" name="confirm_password" required minlength="6" class="form-ctrl pr-10" placeholder="再次输入新密码">
+            <button type="button" class="absolute right-2 top-1/2 -translate-y-1/2 text-slate-400 hover:text-slate-600 p-1" onclick="togglePwdEye(this)"><i data-lucide="eye-off" style="width:16px;height:16px"></i></button>
+          </div>
+        </label>
+        <div class="flex justify-end gap-3 pt-2">
+          <button type="button" class="btn btn-ghost btn-sm px-6" onclick="closeChangePwdModal()">取消</button>
+          <button type="submit" class="btn btn-primary btn-sm px-8">确认修改</button>
+        </div>
+      </form>
+    </div>`;
+  overlay.addEventListener("click", (e) => { if (e.target === overlay) closeChangePwdModal(); });
+  document.body.appendChild(overlay);
+  if (window.lucide) lucide.createIcons();
+};
+
+window.togglePwdEye = (btn) => {
+  const input = btn.parentElement.querySelector("input");
+  const icon = btn.querySelector("i");
+  if (input.type === "password") {
+    input.type = "text";
+    icon.setAttribute("data-lucide", "eye");
+  } else {
+    input.type = "password";
+    icon.setAttribute("data-lucide", "eye-off");
+  }
+  if (window.lucide) lucide.createIcons({ elements: [icon] });
+};
+
+window.closeChangePwdModal = () => {
+  const el = document.getElementById("changePwdOverlay");
+  if (el) el.remove();
+};
+
+window.doChangePwd = async (e) => {
+  e.preventDefault();
+  const form = e.target;
+  const fd = new FormData(form);
+  const oldPwd = fd.get("old_password");
+  const newPwd = fd.get("new_password");
+  const confirmPwd = fd.get("confirm_password");
+  if (newPwd !== confirmPwd) { toast("两次输入的新密码不一致", "error"); return; }
+  if (newPwd.length < 6) { toast("新密码至少需要6位", "error"); return; }
+  try {
+    const resp = await fetch("/api/auth/change-password", {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ old_password: oldPwd, new_password: newPwd }),
+    });
+    const data = await resp.json();
+    if (!resp.ok) { toast(data.error || "修改失败", "error"); return; }
+    closeChangePwdModal();
+    toast("密码修改成功", "success");
+  } catch (err) {
+    toast("请求失败：" + err.message, "error");
+  }
+};

static/modules/drawer.js

@@ -0,0 +1,271 @@
+// drawer.js — 详情抽屉 + 评论 + 删除
+
+function drawerField(icon, label, name, value, multiline = false, customControl = null) {
+  const safeValue = esc(value || "");
+  const control = customControl
+    ? customControl
+    : multiline
+      ? `<textarea name="${name}" rows="2" class="form-ctrl" data-original="${safeValue}">${safeValue}</textarea>`
+      : `<input name="${name}" value="${safeValue}" class="form-ctrl" data-original="${safeValue}">`;
+  return `<div class="drawer-field">
+    <div class="drawer-field-label"><i data-lucide="${icon}"></i><span>${label}</span></div>
+    <div class="drawer-field-control">${control}</div>
+  </div>`;
+}
+
+function openDrawer(resource, id) {
+  const list = resource === "sales" ? state.data.sales : resource === "operations" ? state.data.operations : resource === "proposals" ? state.data.proposals : state.data.products;
+  const item = list.find((x) => x.id === id);
+  const drawer = document.querySelector("#drawer");
+  const fields = resource === "sales"
+    ? [["target_customer","业务机会"],["priority","优先级"],["status","状态"]]
+    : resource === "operations"
+      ? [["project_name","项目名称"],["owner","负责人"],["expected_sign_date","截止时间"],["expected_contract_amount","金额"],["notes","项目说明"]]
+      : resource === "proposals"
+        ? [["customer_or_project_name","客户/项目"],["proposal_type","方案类型"],["notes","备注"]]
+        : [["product_name","版本名称"],["version","版本号"],["priority","优先级"],["version_goal","版本目标"],["start_date","启动时间"],["plan_date","产品方案"],["dev_done_date","研发完成"],["test_date","测试完成"],["launch_date","上线时间"],["notes","进展备注"]];
+  const fieldIcons = {
+    target_customer: "user", priority: "flag", status: "circle-dot",
+    project_name: "briefcase-business", project_version: "git-branch", project_status: "circle-dot", current_stage: "map-pin",
+    owner: "user", customer_need: "file-text", expected_contract_amount: "banknote", expected_sign_date: "calendar",
+    sign_probability: "percent", sop_stage: "list-checks", execution_progress: "activity",
+    current_deliverable: "package", risks: "alert-triangle", next_action: "arrow-right",
+    product_name: "box", version: "tag", version_goal: "target", feature_list: "list", platform: "layers",
+    launch_date: "calendar", notes: "sticky-note", proposal_type: "tag", customer_or_project_name: "building",
+    priority: "flag", owner: "user", start_date: "play", plan_date: "file-text", dev_done_date: "check-square",
+    test_date: "bug", devs: "users", testers: "shield-check"
+  };
+  const multilineFields = ["customer_need", "current_deliverable", "risks", "next_action", "version_goal", "feature_list", "notes"];
+  const followupTarget = resource === "sales" ? "sales" : resource === "proposals" ? "proposal" : resource === "operations" ? "operation" : resource === "products" ? "product" : "";
+  const title = esc(item.target_customer || item.project_name || (item.customer_or_project_name ? `${item.customer_or_project_name} · ${item.proposal_type || ''}` : "") || item.product_name);
+  const titleForAttr = esc(item.target_customer || item.project_name || (item.customer_or_project_name ? `${item.customer_or_project_name} · ${item.proposal_type || ''}` : "") || item.product_name);
+  drawer.innerHTML = `<div class="drawer-panel"><div class="sticky top-0 z-10 flex items-center justify-between border-b border-slate-200 bg-white/95 px-5 py-3 backdrop-blur"><div><p class="text-[10px] font-semibold uppercase tracking-[0.18em] text-slate-400">Detail Drawer</p><div class="flex items-center gap-2"><h2 class="drawer-title text-[17px] font-semibold leading-6 text-slate-900">${title}</h2><span id="drawerSaveStatus" class="save-status"></span></div></div><div class="flex items-center gap-2"><button class="btn btn-ghost btn-sm text-red-600 hover:bg-red-50" onclick="deleteDrawerItem('${resource}', ${id})"><i data-lucide="trash-2"></i>删除</button><button class="btn btn-ghost btn-sm" onclick="closeDrawer()">关闭</button></div></div><div class="grid gap-5 p-5">
+    ${resource === "products" ? (() => {
+      const dDays = (s, e) => { if (!s || !e) return '-'; const d = Math.round((new Date(e) - new Date(s)) / 86400000); return d >= 0 ? d + ' 天' : '-'; };
+      return `<section>
+        <h3 class="drawer-section-title">耗时统计</h3>
+        <div class="grid grid-cols-2 gap-3">
+          <div class="bg-slate-50 rounded-lg p-3"><p class="text-xs text-slate-500">总耗时（上线−启动）</p><p class="text-lg font-semibold text-slate-800 mt-1">${dDays(item.start_date, item.launch_date)}</p></div>
+          <div class="bg-slate-50 rounded-lg p-3"><p class="text-xs text-slate-500">产品耗时（方案−启动）</p><p class="text-lg font-semibold text-slate-800 mt-1">${dDays(item.start_date, item.plan_date)}</p></div>
+          <div class="bg-slate-50 rounded-lg p-3"><p class="text-xs text-slate-500">研发耗时（研发完成−方案）</p><p class="text-lg font-semibold text-slate-800 mt-1">${dDays(item.plan_date, item.dev_done_date)}</p></div>
+          <div class="bg-slate-50 rounded-lg p-3"><p class="text-xs text-slate-500">测试耗时（测试完成−研发完成）</p><p class="text-lg font-semibold text-slate-800 mt-1">${dDays(item.dev_done_date, item.test_date)}</p></div>
+        </div>
+      </section>`;
+    })() : ""}
+    <section>
+      <h3 class="drawer-section-title">属性</h3>
+      <form id="drawerForm" class="drawer-fields">
+        ${resource === "operations" ? drawerField("map-pin", "当前阶段", "current_stage", "", false, `<select name="current_stage" class="form-ctrl" onchange="saveDrawerField(this,'${resource}',${id})">${["商务洽谈","系统上线","团队分工","项目交付","上线推广","结项验收"].map((s) => `<option ${s === item.current_stage ? "selected" : ""}>${s}</option>`).join("")}</select>`) : ""}
+        ${fields.map(([key,label]) => {
+          if (resource === "products" && key === "priority") {
+            return `<div class="drawer-field"><div class="drawer-field-label"><i data-lucide="flag"></i><span>优先级 / 状态</span></div><div class="drawer-field-control grid grid-cols-2 gap-3"><select name="priority" class="form-ctrl" onchange="saveDrawerField(this,'${resource}',${id})">${["P0","P1","P2","P3"].map((s) => `<option ${s === (item.priority||'P2') ? "selected" : ""}>${s}</option>`).join("")}</select><select name="status" class="form-ctrl" onchange="saveDrawerField(this,'${resource}',${id})">${["未开始","规划中","开发中","测试中","已上线","已取消"].map((s) => `<option ${s === (item.status||'规划中') ? "selected" : ""}>${s}</option>`).join("")}</select></div></div>`;
+          }
+          if (resource === "products" && (key === "start_date" || key === "plan_date" || key === "dev_done_date" || key === "test_date" || key === "launch_date")) {
+            return drawerField("calendar", label, key, item[key], false, `<input type="date" name="${key}" value="${item[key]||''}" class="form-ctrl" data-original="${item[key]||''}" onchange="saveDrawerField(this,'${resource}',${id})">`);
+          }
+          return drawerField(fieldIcons[key] || "circle", label, key, item[key], multilineFields.includes(key));
+        }).join("")}
+      </form>
+    </section>
+    ${resource === "proposals" ? `<section><h3 class="drawer-section-title">附件</h3>${fileGroup("proposal", item.id, "", "附件", item.files || [])}</section>` : ""}
+    ${followupTarget ? `<section>
+      <h3 class="drawer-section-title">活动 / 跟进</h3>
+      <div class="grid gap-2">${(item.followups || []).map((f) => `<div class="activity-item"><div class="activity-icon"><i data-lucide="message-square"></i></div><div class="min-w-0 flex-1"><div class="flex justify-between gap-3 text-[12px] text-slate-500"><span>${esc(f.follower)} · ${esc(f.follow_up_method)}</span><span>${esc(f.followed_at)}</span></div><div class="mt-1 leading-5 text-slate-800 rich-content" data-html="${encodeURIComponent(f.content || '')}"></div>${f.next_action ? `<p class="mt-1 leading-5 text-blue-700">下一步：${text(f.next_action)}</p>` : ""}</div><button class="activity-delete" onclick="deleteFollowup(event, ${f.id}, '${resource}', ${item.id})" title="删除评论"><i data-lucide="trash-2"></i></button></div>`).join("")}</div>
+      <form class="comment-box mt-3" onsubmit="submitComment(event,'${followupTarget}',${item.id},'${resource}')">
+        <div class="squire-toolbar">
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('bold')" title="加粗"><i data-lucide="bold"></i></button>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('italic')" title="斜体"><i data-lucide="italic"></i></button>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('underline')" title="下划线"><i data-lucide="underline"></i></button>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('strikethrough')" title="删除线"><i data-lucide="strikethrough"></i></button>
+          <span class="squire-sep"></span>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('makeUnorderedList')" title="无序列表"><i data-lucide="list"></i></button>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('makeOrderedList')" title="有序列表"><i data-lucide="list-ordered"></i></button>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('blockquote')" title="引用"><i data-lucide="quote"></i></button>
+          <span class="squire-sep"></span>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('undo')" title="撤销"><i data-lucide="undo"></i></button>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('redo')" title="重做"><i data-lucide="redo"></i></button>
+        </div>
+        <div class="squire-editor" id="squire_${resource}_${item.id}" placeholder="添加评论"></div>
+        <div class="comment-toolbar">
+          <span class="comment-hint">支持富文本编辑</span>
+          <button class="btn btn-primary btn-sm comment-submit" type="submit">评论</button>
+        </div>
+      </form>
+    </section>` : ""}
+    <div id="uploadTaskList"></div>
+  </div></div>`;
+  drawer.classList.add("open");
+  bindDrawerAutosave(resource, item.id, item);
+  if (window.lucide) window.lucide.createIcons();
+  renderUploadTasks();
+  drawer.querySelectorAll(".rich-content").forEach((el) => {
+    const html = el.dataset.html;
+    if (html) el.innerHTML = decodeURIComponent(html);
+  });
+  const squireDiv = drawer.querySelector(".squire-editor");
+  if (squireDiv && window.Squire) {
+    const id = squireDiv.id;
+    if (window.squireInstances[id]) window.squireInstances[id].destroy();
+    const sq = new Squire(squireDiv, { blockTag: "P" });
+    sq.addEventListener("input", () => {
+      const form = squireDiv.closest("form");
+      const btn = form.querySelector(".comment-submit");
+    });
+    window.squireInstances[id] = sq;
+    squireDiv.addEventListener("focus", () => squireDiv.classList.add("focused"));
+    squireDiv.addEventListener("blur", () => {
+      if (!squireDiv.textContent.trim()) squireDiv.classList.remove("focused");
+    });
+  }
+}
+
+function setDrawerSaveStatus(message, tone = "muted") {
+  const el = document.querySelector("#drawerSaveStatus");
+  if (!el) return;
+  el.textContent = message;
+  el.dataset.tone = tone;
+}
+
+function bindDrawerAutosave(resource, id, item) {
+  document.querySelectorAll("#drawerForm .form-ctrl").forEach((field) => {
+    field.addEventListener("keydown", (event) => {
+      if (event.key === "Enter" && field.tagName !== "TEXTAREA") field.blur();
+    });
+    const doSave = async () => {
+      const value = field.value;
+      if (value === field.dataset.original) return;
+      const previous = field.dataset.original;
+      field.dataset.original = value;
+      setDrawerSaveStatus("保存中…");
+      try {
+        await api(`/api/${resource}/${id}`, { method: "PUT", body: JSON.stringify({ data: { [field.name]: value } }) });
+        item[field.name] = value;
+        const titleValue = item.target_customer || item.project_name || item.customer_or_project_name || item.product_name;
+        const titleEl = document.querySelector(".drawer-title");
+        if (titleEl) titleEl.textContent = titleValue;
+        renderActive();
+        setDrawerSaveStatus("已保存", "success");
+        setTimeout(() => setDrawerSaveStatus(""), 1200);
+      } catch (error) {
+        field.dataset.original = previous;
+        setDrawerSaveStatus("保存失败", "danger");
+        toast(`自动保存失败：${error.message}`, "error");
+      }
+    };
+    field.addEventListener("blur", doSave);
+    if (field.tagName === "SELECT") field.addEventListener("change", doSave);
+  });
+}
+
+window.openDrawer = openDrawer;
+window.closeDrawer = () => document.querySelector("#drawer").classList.remove("open");
+
+window.deleteDrawerItem = async (resource, id) => {
+  if (!confirm("确认删除？此操作不可撤销。")) return;
+  try {
+    const listKey = { sales: "sales", proposals: "proposals", operations: "operations", products: "products" }[resource];
+    let name = "";
+    if (listKey && state.data[listKey]) {
+      const item = state.data[listKey].find(x => x.id === id);
+      name = item ? (item.target_customer || item.project_name || item.customer_or_project_name || item.product_name || "") : "";
+    }
+    await api(`/api/${resource}/${id}`, { method: "DELETE" });
+    if (name) {
+      const resType = { sales: "sales", proposals: "proposal", operations: "operation", products: "product" }[resource] || resource;
+      logActivity(resType, id, "删除了「" + name + "」");
+    }
+    closeDrawer();
+    await load();
+  } catch (error) {
+    toast("删除失败：" + error.message, "error");
+  }
+};
+
+// Squire 富文本编辑器
+window.squireInstances = {};
+window.squireCmd = (cmd) => {
+  const currentEditor = document.querySelector(".squire-editor");
+  if (!currentEditor) return;
+  const id = currentEditor.id;
+  const sq = window.squireInstances[id];
+  if (!sq) return;
+  sq.focus();
+  setTimeout(() => {
+    if (cmd === "bold") {
+      sq.hasFormat("b") || sq.hasFormat("strong") ? sq.removeBold() : sq.bold();
+    } else if (cmd === "italic") {
+      sq.hasFormat("i") || sq.hasFormat("em") ? sq.removeItalic() : sq.italic();
+    } else if (cmd === "underline") {
+      sq.hasFormat("u") ? sq.changeFormat(null, { tag: "u" }, null) : sq.changeFormat({ tag: "u" }, null, null);
+    } else if (cmd === "strikethrough") {
+      sq.hasFormat("s") || sq.hasFormat("del") || sq.hasFormat("strike") ? sq.changeFormat(null, { tag: "s" }, null) : sq.changeFormat({ tag: "s" }, null, null);
+    } else {
+      sq[cmd]();
+    }
+  }, 10);
+};
+
+window.submitComment = async (event, targetType, targetId, resource) => {
+  event.preventDefault();
+  const form = event.currentTarget;
+  const editorDiv = form.querySelector(".squire-editor");
+  const sq = window.squireInstances[editorDiv.id];
+  const content = sq ? sq.getHTML().trim() : "";
+  if (!content || content === "<div><br></div>" || content === "<p><br></p>") return;
+  const button = form.querySelector(".comment-submit");
+  button.disabled = true;
+  button.textContent = "发送中…";
+  await api(`/api/followups/${targetType}/${targetId}`, { method: "POST", body: JSON.stringify({ data: { content } }) });
+  await load();
+  openDrawer(resource, targetId);
+};
+
+window.deleteActivity = async (id) => {
+  if (!confirm("确认删除这条动态？")) return;
+  await api(`/api/followups/${id}`, { method: "DELETE" });
+  await load();
+};
+
+window.deleteFollowup = async (event, followupId, resource, targetId) => {
+  event.stopPropagation();
+  if (!confirm("确认删除这条评论？")) return;
+  await api(`/api/followups/${followupId}`, { method: "DELETE" });
+  await load();
+  openDrawer(resource, targetId);
+};
+
+window.saveDrawerField = async (el, resource, id) => {
+  const name = el.name;
+  const value = el.value;
+  // 产品日期约束
+  if (resource === "products") {
+    const listKey = "products";
+    const product = (state.data[listKey] || []).find(x => x.id === id);
+    if (product) {
+      // 启动时间必填
+      if (name === "start_date" && !value) {
+        toast("启动时间为必填项", "error");
+        el.value = product.start_date || '';
+        el.focus();
+        return;
+      }
+      // 其他 4 个时间不能早于启动时间
+      if (["plan_date","dev_done_date","test_date","launch_date"].includes(name) && value && product.start_date && value < product.start_date) {
+        toast("该时间不能早于启动时间（" + product.start_date + "）", "error");
+        el.value = product[name] || '';
+        el.focus();
+        return;
+      }
+    }
+  }
+  try {
+    await api(`/api/${resource}/${id}`, { method: "PUT", body: JSON.stringify({ data: { [name]: value } }) });
+    const listKey = { sales: "sales", proposals: "proposals", operations: "operations", products: "products" }[resource];
+    if (listKey && state.data[listKey]) {
+      const item = state.data[listKey].find(x => x.id === id);
+      if (item) item[name] = value;
+    }
+  } catch (error) {
+    toast("保存失败：" + error.message, "error");
+  }
+};

static/modules/expense.js

@@ -0,0 +1,219 @@
+// expense.js — 费用管理模块
+
+function renderExpense() {
+  var records = state.data.expense || [];
+  var money = function(v) { return '¥ ' + (Number(v || 0)).toLocaleString('zh-CN', { minimumFractionDigits: 0, maximumFractionDigits: 2 }); };
+  var esc = function(s) { return (s || '').replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;'); };
+  var EXPENSE_TYPES = ['通用费用','平台采购','人力成本','研发费用','奖金','其他'];
+  var STATUS_OPTIONS = ['计入费用','暂不计入'];
+
+  // 排序状态
+  if (!state.expenseSort) state.expenseSort = { key: 'expense_month', asc: true };
+  var sortKey = state.expenseSort.key;
+  var sortAsc = state.expenseSort.asc ? 1 : -1;
+
+  // 筛选状态
+  var view = state.expenseView || 'total';
+  var typeFilter = state.expenseFilter || '全部';
+  var filtered = typeFilter === '全部' ? records : records.filter(function(r) { return r.expense_type === typeFilter; });
+
+  // 视图数据预处理
+  var now = new Date();
+  var thisYear = now.getFullYear();
+  var defaultMonth = thisYear + '-' + String(now.getMonth() + 1).padStart(2, '0');
+
+  if (!state.expenseMonth) state.expenseMonth = defaultMonth;
+  if (state.expenseQuarter === '') state.expenseQuarter = String(Math.floor(now.getMonth() / 3));
+
+  // 月度筛选
+  if (view === 'monthly') {
+    filtered = filtered.filter(function(r) { return r.expense_month === state.expenseMonth; });
+  }
+
+  // 季度筛选
+  if (view === 'quarterly') {
+    var q = parseInt(state.expenseQuarter) || 0;
+    var qRanges = [[1,2,3],[4,5,6],[7,8,9],[10,11,12]];
+    var qRange = qRanges[q];
+    filtered = filtered.filter(function(r) {
+      var m = parseInt((r.expense_month || '0').substring(5)) || 0;
+      return qRange.indexOf(m) >= 0;
+    });
+  }
+
+  // 排序
+  filtered.sort(function(a, b) {
+    var va = a[sortKey] || '', vb = b[sortKey] || '';
+    if (sortKey === 'amount' || sortKey === 'incurred_amount') {
+      va = parseFloat(va) || 0; vb = parseFloat(vb) || 0;
+    }
+    if (va < vb) return -1 * sortAsc;
+    if (va > vb) return 1 * sortAsc;
+    return 0;
+  });
+
+  var totalAmount = filtered.reduce(function(s, r) { return s + (r.amount || 0); }, 0);
+  var totalIncurred = filtered.reduce(function(s, r) { return s + (r.incurred_amount || 0); }, 0);
+
+  // 月份下拉选项（去年/今年/明年）
+  var monthOpts = '';
+  for (var yr = thisYear - 1; yr <= thisYear + 1; yr++)
+    for (var m = 1; m <= 12; m++) {
+      var mv = yr + '-' + String(m).padStart(2, '0');
+      monthOpts += '<option value="' + mv + '">' + mv + '</option>';
+    }
+
+  // 季度下拉
+  var qLabels = ['Q1 (1-3月)','Q2 (4-6月)','Q3 (7-9月)','Q4 (10-12月)'];
+  var quarterOpts = '';
+  for (var qi = 0; qi < 4; qi++) {
+    quarterOpts += '<option value="' + qi + '">' + qLabels[qi] + '</option>';
+  }
+
+  // 月份/季度日期选择器
+  var dateSelect = '';
+  if (view === 'monthly') {
+    dateSelect = '<span class="text-sm text-slate-500 ml-2">月份：</span><select onchange="setExpenseMonth(this.value)" class="text-sm font-medium py-1 px-2.5 cursor-pointer" style="appearance:none;-webkit-appearance:none;background-color:transparent;border:0;outline:none;background:url(&apos;data:image/svg+xml,%3Csvg xmlns=%22http://www.w3.org/2000/svg%22 width=%2212%22 height=%2212%22 viewBox=%220 0 24 24%22 fill=%22none%22 stroke=%22%236b7280%22 stroke-width=%222%22 stroke-linecap=%22round%22 stroke-linejoin=%22round%22%3E%3Cpolyline points=%226 9 12 15 18 9%22%3E%3C/polyline%3E%3C/svg%3E&apos;) no-repeat right 4px center;padding-right:22px;min-height:30px"><option value=""' + (!state.expenseMonth?' selected':'') + '>请选择</option>' + monthOpts.replace('value="' + state.expenseMonth + '"', 'value="' + state.expenseMonth + '" selected') + '</select>';
+  } else if (view === 'quarterly') {
+    dateSelect = '<span class="text-sm text-slate-500 ml-2">季度：</span><select onchange="setExpenseQuarter(this.value)" class="text-sm font-medium py-1 px-2.5 cursor-pointer" style="appearance:none;-webkit-appearance:none;background-color:transparent;border:0;outline:none;background:url(&apos;data:image/svg+xml,%3Csvg xmlns=%22http://www.w3.org/2000/svg%22 width=%2212%22 height=%2212%22 viewBox=%220 0 24 24%22 fill=%22none%22 stroke=%22%236b7280%22 stroke-width=%222%22 stroke-linecap=%22round%22 stroke-linejoin=%22round%22%3E%3Cpolyline points=%226 9 12 15 18 9%22%3E%3C/polyline%3E%3C/svg%3E&apos;) no-repeat right 4px center;padding-right:22px;min-height:30px">' + quarterOpts.replace('value="' + state.expenseQuarter + '"', 'value="' + state.expenseQuarter + '" selected') + '</select>';
+  }
+
+  // Toolbar
+  var toolbar = '<span class="text-sm text-slate-500">视图：</span><select onchange="setExpenseView(this.value)" class="text-sm font-medium py-1 px-2.5 cursor-pointer" style="appearance:none;-webkit-appearance:none;background-color:transparent;border:0;outline:none;background:url(&apos;data:image/svg+xml,%3Csvg xmlns=%22http://www.w3.org/2000/svg%22 width=%2212%22 height=%2212%22 viewBox=%220 0 24 24%22 fill=%22none%22 stroke=%22%236b7280%22 stroke-width=%222%22 stroke-linecap=%22round%22 stroke-linejoin=%22round%22%3E%3Cpolyline points=%226 9 12 15 18 9%22%3E%3C/polyline%3E%3C/svg%3E&apos;) no-repeat right 4px center;padding-right:22px;min-height:30px"><option value="total"' + (view==='total'?' selected':'') + '>总视图</option><option value="quarterly"' + (view==='quarterly'?' selected':'') + '>季度视图</option><option value="monthly"' + (view==='monthly'?' selected':'') + '>月度视图</option></select><span class="text-sm text-slate-500 ml-3">类型：</span><select onchange="setExpenseFilter(this.value)" class="text-sm font-medium py-1 px-2.5 cursor-pointer" style="appearance:none;-webkit-appearance:none;background-color:transparent;border:0;outline:none;background:url(&apos;data:image/svg+xml,%3Csvg xmlns=%22http://www.w3.org/2000/svg%22 width=%2212%22 height=%2212%22 viewBox=%220 0 24 24%22 fill=%22none%22 stroke=%22%236b7280%22 stroke-width=%222%22 stroke-linecap=%22round%22 stroke-linejoin=%22round%22%3E%3Cpolyline points=%226 9 12 15 18 9%22%3E%3C/polyline%3E%3C/svg%3E&apos;) no-repeat right 4px center;padding-right:22px;min-height:30px"><option value="全部"' + (typeFilter==='全部'?' selected':'') + '>全部 (' + records.length + ')</option>';
+  EXPENSE_TYPES.forEach(function(t) {
+    toolbar += '<option value="' + t + '"' + (typeFilter===t?' selected':'') + '>' + t + ' (' + records.filter(function(r){return r.expense_type===t}).length + ')</option>';
+  });
+  toolbar += '</select>' + dateSelect;
+
+  // 排序箭头
+  var sortArrow = function(key) {
+    var arrow = key === sortKey ? (sortAsc === 1 ? ' ↑' : ' ↓') : '';
+    return '<span class="text-slate-400 text-xs cursor-pointer" onclick="toggleExpenseSort(\'' + key + '\')">' + arrow + '</span>';
+  };
+
+  // 表格行
+  var tableRows = '';
+  if (filtered.length) {
+    filtered.forEach(function(r) {
+      var statusCls = r.status === '暂不计入' ? 'text-amber-600' : 'text-green-600';
+      tableRows += '<tr class="border-b border-slate-100 hover:bg-slate-50 cursor-pointer" onclick="openExpenseEdit(' + r.id + ')"><td class="p-2 text-center align-middle font-medium">' + (r.expense_month || '—') + '</td><td class="p-2 font-medium text-center align-middle">' + esc(r.expense_type) + '</td><td class="p-2 text-center align-middle font-semibold ' + statusCls + '">' + esc(r.status || '计入费用') + '</td><td class="p-2 text-center align-middle font-medium">' + money(r.amount) + '</td><td class="p-2 text-center align-middle font-medium">' + money(r.incurred_amount) + '</td><td class="p-2 text-center align-middle text-slate-500">' + (esc(r.notes) || '—') + '</td></tr>';
+    });
+  } else {
+    var emptyMsg = view === 'monthly' ? '该月份暂无费用记录' : view === 'quarterly' ? '该季度暂无费用记录' : '暂无费用记录';
+    tableRows = '<tr><td colspan="6" class="p-6 text-center text-slate-400">' + emptyMsg + '</td></tr>';
+  }
+
+  // 模态框 monthOpts for form (with current value preselected)
+  var modalMonthOpts = '<option value="">请选择</option>';
+  for (var yr2 = thisYear - 1; yr2 <= thisYear + 1; yr2++)
+    for (var m2 = 1; m2 <= 12; m2++) {
+      var mv2 = yr2 + '-' + String(m2).padStart(2, '0');
+      modalMonthOpts += '<option value="' + mv2 + '">' + mv2 + '</option>';
+    }
+  var statusOpts = STATUS_OPTIONS.map(function(s) { return '<option value="' + s + '">' + s + '</option>'; }).join('');
+
+  var modal = '<div id="expenseModal" class="hidden fixed inset-0 z-50 flex items-center justify-center bg-black/40" onclick="closeExpenseModal()"><div class="bg-white rounded-2xl shadow-2xl w-full max-w-lg mx-4" onclick="event.stopPropagation()"><div class="sticky top-0 z-10 bg-white/95 backdrop-blur border-b border-slate-100 px-6 py-4 flex items-center justify-between"><h3 class="text-lg font-bold text-slate-800" id="expenseModalTitle">新增费用</h3><div class="flex items-center gap-2"><button class="btn btn-ghost btn-sm text-red-600 hidden" id="expenseDeleteBtn" onclick="deleteExpenseItem()">删除</button><button class="btn btn-ghost btn-sm rounded-full w-8 h-8 p-0" onclick="closeExpenseModal()"><i data-lucide="x"></i></button></div></div><form onsubmit="saveExpense(event)" class="p-6 grid gap-4" novalidate><input type="hidden" name="expense_id" value=""><div class="grid grid-cols-2 gap-3"><label class="block"><span class="text-sm text-slate-500 mb-1 block">费用类型 <span class="text-red-500">*</span></span><select name="expense_type" required class="form-ctrl bg-white"><option value="">请选择</option>';
+  EXPENSE_TYPES.forEach(function(t) { modal += '<option>' + t + '</option>'; });
+  modal += '</select></label><label class="block"><span class="text-sm text-slate-500 mb-1 block">月份 <span class="text-red-500">*</span></span><select name="expense_month" required class="form-ctrl bg-white">' + modalMonthOpts + '</select></label></div><div class="grid grid-cols-2 gap-3"><label class="block"><span class="text-sm text-slate-500 mb-1 block">金额（元）</span><input name="amount" type="number" step="0.01" class="form-ctrl" placeholder="0.00"></label><label class="block"><span class="text-sm text-slate-500 mb-1 block">已发生金额（元）</span><input name="incurred_amount" type="number" step="0.01" class="form-ctrl" placeholder="0.00"></label></div><label class="block"><span class="text-sm text-slate-500 mb-1 block">状态</span><select name="status" class="form-ctrl bg-white">' + statusOpts + '</select></label><label class="block"><span class="text-sm text-slate-500 mb-1 block">费用说明</span><textarea name="notes" class="form-ctrl" rows="3" placeholder="备注信息"></textarea></label><div class="flex justify-end gap-3 pt-2"><button type="button" class="btn btn-ghost btn-sm px-6" onclick="closeExpenseModal()">取消</button><button type="submit" class="btn btn-primary btn-sm px-8">保存</button></div></form></div></div>';
+
+  var target = document.querySelector("#financeExpense") || document.querySelector("#financeTabExpense") || document.querySelector("#expense");
+  if (!target) return;
+  target.innerHTML = '<div class="grid gap-4">' +
+    '<div class="card p-3"><div class="flex justify-between items-center"><div class="flex items-center gap-2">' + toolbar + '</div><button class="btn btn-primary btn-sm" onclick="openExpenseModal()">新增费用</button></div></div>' +
+    '<div class="grid grid-cols-3 gap-3">' +
+      '<div class="metric-card p-3"><span class="flex items-center gap-2 text-sm text-slate-500">费用记录</span><strong class="mt-2 block text-xl">' + filtered.length + '</strong></div>' +
+      '<div class="metric-card p-3"><span class="flex items-center gap-2 text-sm text-slate-500">总费用</span><strong class="mt-2 block text-xl">' + money(totalAmount) + '</strong></div>' +
+      '<div class="metric-card p-3"><span class="flex items-center gap-2 text-sm text-slate-500">已发生金额</span><strong class="mt-2 block text-xl">' + money(totalIncurred) + '</strong></div>' +
+    '</div>' +
+    modal +
+    '<div class="card p-4"><div class="overflow-x-auto"><table class="w-full text-sm"><thead><tr class="bg-slate-50 border-b border-slate-200"><th class="p-2 text-center font-semibold cursor-pointer select-none" onclick="toggleExpenseSort(\'expense_month\')">月份' + sortArrow('expense_month') + '</th><th class="p-2 text-center font-semibold cursor-pointer select-none" onclick="toggleExpenseSort(\'expense_type\')">费用类型' + sortArrow('expense_type') + '</th><th class="p-2 text-center font-semibold cursor-pointer select-none" onclick="toggleExpenseSort(\'status\')">状态' + sortArrow('status') + '</th><th class="p-2 text-center font-semibold cursor-pointer select-none" onclick="toggleExpenseSort(\'amount\')">金额' + sortArrow('amount') + '</th><th class="p-2 text-center font-semibold cursor-pointer select-none" onclick="toggleExpenseSort(\'incurred_amount\')">已发生金额' + sortArrow('incurred_amount') + '</th><th class="p-2 text-center font-semibold">费用说明</th></tr></thead><tbody>' + tableRows + '</tbody></table></div></div>' +
+  '</div>';
+
+  if (window.lucide) window.lucide.createIcons();
+}
+
+window.toggleExpenseSort = function(key) {
+  var cur = state.expenseSort || {};
+  if (cur.key === key) { cur.asc = !cur.asc; }
+  else { cur.key = key; cur.asc = true; }
+  state.expenseSort = cur;
+  renderExpense();
+};
+
+window.setExpenseView = function(v) { state.expenseView = v; renderExpense(); };
+window.setExpenseFilter = function(v) { state.expenseFilter = v; renderExpense(); };
+window.setExpenseMonth = function(v) { state.expenseMonth = v; renderExpense(); };
+window.setExpenseQuarter = function(v) { state.expenseQuarter = v; renderExpense(); };
+
+window.openExpenseModal = function() {
+  var form = document.querySelector("#expenseModal form");
+  form.reset();
+  form.querySelector('[name="expense_id"]').value = "";
+  form.querySelector('[name="status"]').value = "计入费用";
+  document.querySelector("#expenseModalTitle").textContent = "新增费用";
+  document.querySelector("#expenseDeleteBtn").classList.add("hidden");
+  document.querySelector("#expenseModal").classList.remove("hidden");
+};
+
+window.closeExpenseModal = function() {
+  document.querySelector("#expenseModal").classList.add("hidden");
+};
+
+window.openExpenseEdit = function(id) {
+  var r = (state.data.expense || []).find(function(x) { return x.id === id; });
+  if (!r) return;
+  var form = document.querySelector("#expenseModal form");
+  form.reset();
+  var setVal = function(name, val) { var el = form.querySelector('[name="' + name + '"]'); if (el) el.value = val || ""; };
+  setVal("expense_id", r.id);
+  setVal("expense_type", r.expense_type);
+  setVal("expense_month", r.expense_month);
+  setVal("amount", r.amount);
+  setVal("incurred_amount", r.incurred_amount);
+  setVal("notes", r.notes);
+  setVal("status", r.status || "计入费用");
+  document.querySelector("#expenseModalTitle").textContent = "编辑费用";
+  document.querySelector("#expenseDeleteBtn").classList.remove("hidden");
+  document.querySelector("#expenseModal").classList.remove("hidden");
+};
+
+window.saveExpense = async function(event) {
+  event.preventDefault();
+  var form = event.target;
+  var data = Object.fromEntries(new FormData(form).entries());
+  if (data.amount === '' || data.amount === undefined) data.amount = 0;
+  if (data.incurred_amount === '' || data.incurred_amount === undefined) data.incurred_amount = 0;
+  if (!data.status) data.status = '计入费用';
+  var isEdit = !!data.expense_id;
+  delete data.expense_id;
+
+  var id = form.querySelector('[name="expense_id"]').value;
+  var url = isEdit ? "/api/expense/" + id : "/api/expense";
+  var method = isEdit ? "PUT" : "POST";
+
+  var resp = await fetch(url, { method: method, headers: { "Content-Type": "application/json" }, body: JSON.stringify({ data: Object.assign({}, data, { tenant: state.tenant }) }) });
+  if (!resp.ok) { var err = await resp.text(); alert("保存失败：" + err); return; }
+
+  var bResp = await fetch("/api/bootstrap?tenant=" + encodeURIComponent(state.tenant));
+  if (bResp.ok) {
+    var bd = await bResp.json();
+    state.data = bd;
+    applyUserTenants();
+    renderExpense();
+  }
+  closeExpenseModal();
+};
+
+window.deleteExpenseItem = async function() {
+  var id = document.querySelector("#expenseModal form [name='expense_id']").value;
+  if (!id || !confirm("确定删除？")) return;
+  var resp = await fetch("/api/expense/" + id, { method: "DELETE" });
+  if (!resp.ok) { alert("删除失败"); return; }
+  var bResp = await fetch("/api/bootstrap?tenant=" + encodeURIComponent(state.tenant));
+  if (bResp.ok) {
+    var bd = await bResp.json();
+    state.data = bd;
+    applyUserTenants();
+    renderExpense();
+  }
+};

static/modules/home.js

@@ -0,0 +1,248 @@
+// home.js — 首页渲染 + 财务趋势图
+
+function renderHome() {
+  const { summary, financeMonthly } = state.data;
+  const m = summary.metrics;
+  const moneyInt = (v) => `${Math.round(Number(v || 0)).toLocaleString("zh-CN")} 元`;
+  // 回款提醒
+  const yrRev = m.revenue_annual || 0, yrPay = m.payment_annual || 0, yrUnpaid = yrRev - yrPay;
+  const yrPayRate = yrRev > 0 ? Math.round(yrPay / yrRev * 100) : 0;
+  const yrUnpaidWan = Math.round(Math.abs(yrUnpaid) / 10000);
+  const payRateCls = yrPayRate < 30 ? 'text-red-600' : yrPayRate < 80 ? 'text-amber-600' : 'text-green-600';
+  const unpaidLabel = yrUnpaid >= 0
+    ? '你还有 <strong class=\"text-red-600\">' + yrUnpaidWan + '万</strong> 未回款'
+    : '超额回款 <strong class=\"text-green-600\">' + yrUnpaidWan + '万</strong>';
+  const payReminder = yrRev > 0 ? '<div class=\"flex items-center gap-3 px-4 py-3 rounded-lg border\" style=\"background:linear-gradient(135deg,#fef3c7,#fde68a);border-color:#f59e0b\">' +
+    '<i data-lucide=\"bell-ring\" class=\"text-amber-600 flex-shrink-0\" style=\"width:18px;height:18px\"></i>' +
+    '<span class=\"text-sm text-amber-900\"><strong>回款提醒：</strong>本年度确收 <strong>' + moneyInt(yrRev) + '</strong>，回款 <strong>' + moneyInt(yrPay) + '</strong>，' + unpaidLabel + '，当前回款率：<strong class=\"' + payRateCls + '\">' + yrPayRate + '%</strong></span>' +
+    '</div>' : '';
+  const rows1 = [
+    ["年度累计", moneyInt(m.signed_annual || m.signed_amount)],
+    ["本季度累计", moneyInt(m.signed_q2 || 0)],
+    ["本月累计", moneyInt(m.signed_month || 0)],
+    ["上本季度累计", moneyInt(m.signed_prev_q || 0)],
+    ["上月累计", moneyInt(m.signed_prev_month || 0)],
+  ];
+  const rows2 = [
+    ["年度累计", moneyInt(m.revenue_annual)],
+    ["本季度累计", moneyInt(m.revenue_q2)],
+    ["本月累计", moneyInt(m.monthly_revenue)],
+    ["上本季度累计", moneyInt(m.revenue_prev_q || 0)],
+    ["上月累计", moneyInt(m.revenue_prev_month || 0)],
+  ];
+  const rows3 = [
+    ["年度累计", moneyInt(m.gross_annual)],
+    ["本季度累计", moneyInt(m.gross_q2)],
+    ["本月累计", moneyInt(m.monthly_net_profit)],
+    ["上本季度累计", moneyInt(m.gross_prev_q || 0)],
+    ["上月累计", moneyInt(m.gross_prev_month || 0)],
+  ];
+  const rows4 = [
+    ["年度累计", moneyInt(m.payment_annual || 0)],
+    ["本季度累计", moneyInt(m.payment_q2 || 0)],
+    ["本月累计", moneyInt(m.payment_month || 0)],
+    ["上本季度累计", moneyInt(m.payment_prev_q || 0)],
+    ["上月累计", moneyInt(m.payment_prev_month || 0)],
+  ];
+  const rows5 = [
+    ["年度累计", moneyInt(m.cost_annual || 0)],
+    ["本季度累计", moneyInt(m.cost_q2 || 0)],
+    ["本月累计", moneyInt(m.cost_month || 0)],
+    ["上本季度累计", moneyInt(m.cost_prev_q || 0)],
+    ["上月累计", moneyInt(m.cost_prev_month || 0)],
+  ];
+  const rows7 = [
+    ["年度累计", moneyInt(m.paid_annual || 0)],
+    ["本季度累计", moneyInt(m.paid_q2 || 0)],
+    ["本月累计", moneyInt(m.paid_month || 0)],
+    ["上本季度累计", moneyInt(m.paid_prev_q || 0)],
+    ["上月累计", moneyInt(m.paid_prev_month || 0)],
+  ];
+  const rowsProjExpense = [
+    ["年度累计", moneyInt(m.proj_expense_annual || 0)],
+    ["本季度累计", moneyInt(m.proj_expense_q2 || 0)],
+    ["本月累计", moneyInt(m.proj_expense_month || 0)],
+    ["上本季度累计", moneyInt(m.proj_expense_prev_q || 0)],
+    ["上月累计", moneyInt(m.proj_expense_prev_month || 0)],
+  ];
+  const rows8 = [
+    ["年度累计", moneyInt(m.cashflow_annual || 0)],
+    ["本季度累计", moneyInt(m.cashflow_q2 || 0)],
+    ["本月累计", moneyInt(m.cashflow_month || 0)],
+    ["上本季度累计", moneyInt(m.cashflow_prev_q || 0)],
+    ["上月累计", moneyInt(m.cashflow_prev_month || 0)],
+  ];
+  const rows9 = [
+    ["年度累计", moneyInt(m.profit_annual || 0)],
+    ["本季度累计", moneyInt(m.profit_q2 || 0)],
+    ["本月累计", moneyInt(m.profit_month || 0)],
+    ["上本季度累计", moneyInt(m.profit_prev_q || 0)],
+    ["上月累计", moneyInt(m.profit_prev_month || 0)],
+  ];
+  const qoq = (cur, prev) => {
+    if (!prev) return '<span class="text-slate-300">—</span>';
+    const pct = Math.round((cur - prev) / prev * 100);
+    const cls = pct >= 0 ? 'text-green-600' : 'text-red-600';
+    const sign = pct >= 0 ? '+' : '';
+    return '<span class="' + cls + '">' + sign + pct + '%</span>';
+  };
+  const COLORS = ['text-slate-700','text-blue-600','text-green-600','text-rose-600','text-indigo-600','text-amber-600','text-purple-600','text-cyan-600'];
+  const LABELS = ['合同金额','确收金额','确收毛利','成本','项目利润','回款金额','已付','现金流'];
+  const Q_FIELDS = [m.signed_q2||0, m.revenue_q2, m.gross_q2, m.cost_q2||0, m.profit_q2||0, m.payment_q2||0, m.paid_q2||0, m.cashflow_q2||0];
+  const Q_PREV = [m.signed_prev_q||0, m.revenue_prev_q||0, m.gross_prev_q||0, m.cost_prev_q||0, m.profit_prev_q||0, m.payment_prev_q||0, m.paid_prev_q||0, m.cashflow_prev_q||0];
+  const M_FIELDS = [m.signed_month||0, m.monthly_revenue, m.monthly_net_profit, m.cost_month||0, m.profit_month||0, m.payment_month||0, m.paid_month||0, m.cashflow_month||0];
+  const M_PREV = [m.signed_prev_month||0, m.revenue_prev_month||0, m.gross_prev_month||0, m.cost_prev_month||0, m.profit_prev_month||0, m.payment_prev_month||0, m.paid_prev_month||0, m.cashflow_prev_month||0];
+  const ROWS = [rows1, rows2, rows3, rows5, rows9, rows4, rows7, rows8];
+  // 现金流和项目利润的原始值数组，用于正负着色
+  const CF_RAW = [m.cashflow_annual||0, m.cashflow_q2||0, m.cashflow_month||0, m.cashflow_prev_q||0, m.cashflow_prev_month||0];
+  const PF_RAW = [m.profit_annual||0, m.profit_q2||0, m.profit_month||0, m.profit_prev_q||0, m.profit_prev_month||0];
+  var valCls = function(ri) { return (ri === 4 || ri === 7) ? '' : 'text-slate-800'; };
+  var tdVal = function(ri, col, val) {
+    if (ri === 4) return '<td class="py-2 text-right font-semibold ' + (PF_RAW[col] >= 0 ? 'text-green-600' : 'text-red-600') + '">' + val + '</td>';
+    if (ri === 7) return '<td class="py-2 text-right font-semibold ' + (CF_RAW[col] >= 0 ? 'text-green-600' : 'text-red-600') + '">' + val + '</td>';
+    return '<td class="py-2 text-right font-semibold text-slate-800">' + val + '</td>';
+  };
+  var thead = '<tr class="border-b border-slate-200"><th class="py-2 text-left text-slate-500">指标</th><th class="py-2 text-right font-semibold text-slate-700">年度累计</th><th class="py-2 text-right font-semibold text-slate-700">上季度累计</th><th class="py-2 text-right font-semibold text-slate-700">上月累计</th><th class="py-2 text-right font-semibold text-slate-700">本季度累计</th><th class="py-2 text-right font-semibold text-slate-400">季环比</th><th class="py-2 text-right font-semibold text-slate-700">本月累计</th><th class="py-2 text-right font-semibold text-slate-400">月环比</th></tr>';
+  var tbody = '';
+  for (var ri = 0; ri < 8; ri++) {
+    var vals = ROWS[ri];
+    tbody += '<tr class="border-b border-slate-100 last:border-0"><td class="py-2 text-left font-semibold text-slate-700">' + LABELS[ri] + '</td>' +
+      tdVal(ri, 0, vals[0][1]) +
+      tdVal(ri, 3, vals[3][1]) +
+      tdVal(ri, 4, vals[4][1]) +
+      tdVal(ri, 1, vals[1][1]) +
+      '<td class="py-2 text-right">' + qoq(Q_FIELDS[ri], Q_PREV[ri]) + '</td>' +
+      tdVal(ri, 2, vals[2][1]) +
+      '<td class="py-2 text-right">' + qoq(M_FIELDS[ri], M_PREV[ri]) + '</td></tr>';
+  }
+  document.querySelector("#home").innerHTML = `
+    <div class="grid gap-5">
+      ${state.tenant === "总工作台" ? "" : `<div class="grid grid-cols-4 gap-3">
+        ${[
+          ["项目管理", m.total_projects, "finance"],
+          ["重点工作与台账", m.total_proposals, "projects"],
+          ["业务方案", m.total_products, "proposals"],
+          ["产品迭代", m.upcoming_products, "products"],
+        ].map(([label, value, tab]) => `<button class="metric-card" onclick="switchTab('${tab}')"><span class="flex items-center gap-2 text-xs text-slate-500"><i data-lucide="gauge"></i>${label}</span><strong class="mt-2 block text-2xl">${value}</strong></button>`).join("")}
+      </div>`}
+      ${payReminder}
+      ${(() => {
+          var d = [
+            ['项目毛利', [m.profit_annual||0, m.profit_q2||0, m.profit_month||0, m.profit_prev_q||0, m.profit_prev_month||0],
+              [m.profit_q2||0,m.profit_prev_q||0], [m.profit_month||0,m.profit_prev_month||0]],
+            ['部门费用', [m.expense_annual||0, m.expense_q2||0, (m.expense_month||0), m.expense_prev_q||0, m.expense_prev_month||0],
+              [m.expense_q2||0,m.expense_prev_q||0], [(m.expense_month||0),m.expense_prev_month||0]],
+            ['部门净利', [
+              (m.profit_annual||0)-(m.expense_annual||0), (m.profit_q2||0)-(m.expense_q2||0), (m.profit_month||0)-(m.expense_month||0),
+              (m.profit_prev_q||0)-(m.expense_prev_q||0), (m.profit_prev_month||0)-(m.expense_prev_month||0)
+            ], [
+              (m.profit_q2||0)-(m.expense_q2||0), (m.profit_prev_q||0)-(m.expense_prev_q||0)
+            ], [
+              (m.profit_month||0)-(m.expense_month||0), (m.profit_prev_month||0)-(m.expense_prev_month||0)
+            ]],
+            ['项目现金流', [m.cashflow_annual||0, m.cashflow_q2||0, m.cashflow_month||0, m.cashflow_prev_q||0, m.cashflow_prev_month||0],
+              [m.cashflow_q2||0,m.cashflow_prev_q||0], [m.cashflow_month||0,m.cashflow_prev_month||0]],
+            ['部门费用流出', [m.expense_paid_annual||0, m.expense_paid_q2||0, m.expense_paid_month||0, m.expense_paid_prev_q||0, m.expense_paid_prev_month||0],
+              [m.expense_paid_q2||0,m.expense_paid_prev_q||0], [m.expense_paid_month||0,m.expense_paid_prev_month||0]],
+            ['部门现金流', [m.dept_cf_annual||0, m.dept_cf_q2||0, m.dept_cf_month||0, m.dept_cf_prev_q||0, m.dept_cf_prev_month||0],
+              [m.dept_cf_q2||0,m.dept_cf_prev_q||0], [m.dept_cf_month||0,m.dept_cf_prev_month||0]]
+          ];
+          var buildDeptTable = function(title, dataRows) {
+            var h = '';
+            for (var di = 0; di < dataRows.length; di++) {
+              var r = dataRows[di];
+              var rawNet = r[1][0];
+              var isNet = r[0] === '部门净利' || r[0] === '部门现金流';
+              var isCF = r[0] === '项目现金流';
+              var cls = isNet ? (rawNet >= 0 ? 'text-green-600' : 'text-red-600') : isCF ? (rawNet >= 0 ? 'text-green-600' : 'text-red-600') : 'text-slate-800';
+              h += '<tr class="border-b border-slate-100 last:border-0"><td class="py-2 text-left font-semibold text-slate-700">' + r[0] + '</td>' +
+                '<td class="py-2 text-right font-semibold ' + cls + '">' + moneyInt(r[1][0]) + '</td>' +
+                '<td class="py-2 text-right font-semibold ' + cls + '">' + moneyInt(r[1][3]) + '</td>' +
+                '<td class="py-2 text-right font-semibold ' + cls + '">' + moneyInt(r[1][4]) + '</td>' +
+                '<td class="py-2 text-right font-semibold ' + cls + '">' + moneyInt(r[1][1]) + '</td>' +
+                '<td class="py-2 text-right">' + qoq(r[2][0], r[2][1]) + '</td>' +
+                '<td class="py-2 text-right font-semibold ' + cls + '">' + moneyInt(r[1][2]) + '</td>' +
+                '<td class="py-2 text-right">' + qoq(r[3][0], r[3][1]) + '</td></tr>';
+            }
+            return card('<h3 class="text-sm font-bold text-slate-700 mb-3">' + title + '</h3><div class="overflow-x-auto"><table class="w-full text-sm"><thead><tr class="border-b border-slate-200"><th class="py-2 text-left text-slate-500">指标</th><th class="py-2 text-right font-semibold text-slate-700">年度累计</th><th class="py-2 text-right font-semibold text-slate-700">上季度累计</th><th class="py-2 text-right font-semibold text-slate-700">上月累计</th><th class="py-2 text-right font-semibold text-slate-700">本季度累计</th><th class="py-2 text-right font-semibold text-slate-400">季环比</th><th class="py-2 text-right font-semibold text-slate-700">本月累计</th><th class="py-2 text-right font-semibold text-slate-400">月环比</th></tr></thead><tbody>' + h + '</tbody></table></div>', 'p-4');
+          };
+          return buildDeptTable('部门经营情况', d.slice(0, 3)) + buildDeptTable('部门现金流', d.slice(3, 6));
+        })()}
+      ${card(`<h2 class="text-lg font-bold">近期动态</h2><div class="mt-4 grid gap-2">${summary.recent.map((r) => `<div class="flex items-start justify-between rounded-md bg-slate-50 px-3 py-2 text-sm group"><span class="break-words">${r.content}</span><div class="flex items-center gap-2 flex-shrink-0 ml-2"><span class="text-xs text-slate-400">${r.followed_at}</span><button class="btn btn-ghost btn-sm text-red-400 opacity-0 group-hover:opacity-100 p-0 w-5 h-5" onclick="event.preventDefault();deleteActivity(${r.id})" title="删除动态"><i data-lucide="trash-2" style="width:14px;height:14px"></i></button></div></div>`).join("")}</div>`, "p-5")}
+    </div>
+  `;
+}
+
+function chartOptions(yCallback) {
+  return {
+    responsive: true,
+    maintainAspectRatio: false,
+    plugins: { legend: { position: "bottom", labels: { boxWidth: 12, font: { size: 11 } } } },
+    scales: {
+      x: { ticks: { font: { size: 10 } }, grid: { display: false } },
+      y: { ticks: { font: { size: 11 }, callback: yCallback } },
+    },
+  };
+}
+
+const moneyTick = (v) => v >= 10000 ? (v / 10000).toFixed(0) + "万" : v;
+const monthLabels = (data) => data.map((x) => parseInt(x.month.split("-")[1]) + "月");
+
+function renderCharts(data) {
+  const labels = monthLabels(data);
+  const baseOpts = chartOptions(moneyTick);
+
+  // 图1：月度签约
+  const c1 = document.querySelector("#chartSign");
+  if (c1 && window.Chart) {
+    if (state.chart) state.chart.destroy();
+    state.chart = new Chart(c1, {
+      type: "line",
+      data: { labels, datasets: [
+        { label: "签约金额", data: data.map((x) => x.sign || 0), borderColor: "#6366f1", backgroundColor: "rgba(99,102,241,0.06)", fill: true, tension: 0.3 },
+      ]},
+      options: baseOpts,
+    });
+  }
+
+  // 图2：月度确收与毛利
+  const c2 = document.querySelector("#chartRev");
+  if (c2 && window.Chart) {
+    if (state.chart2) state.chart2.destroy();
+    state.chart2 = new Chart(c2, {
+      type: "line",
+      data: { labels, datasets: [
+        { label: "确收", data: data.map((x) => x.revenue || 0), borderColor: "#2563eb", backgroundColor: "rgba(37,99,235,0.06)", fill: true, tension: 0.3 },
+        { label: "毛利", data: data.map((x) => x.gross || 0), borderColor: "#059669", backgroundColor: "rgba(5,150,105,0.06)", fill: true, tension: 0.3 },
+      ]},
+      options: baseOpts,
+    });
+  }
+
+  // 图3：月度回款与已付
+  const c3 = document.querySelector("#chartCash");
+  if (c3 && window.Chart) {
+    if (state.chart3) state.chart3.destroy();
+    state.chart3 = new Chart(c3, {
+      type: "line",
+      data: { labels, datasets: [
+        { label: "回款", data: data.map((x) => x.payment || 0), borderColor: "#d97706", backgroundColor: "rgba(217,119,6,0.06)", fill: true, tension: 0.3 },
+        { label: "已付", data: data.map((x) => x.cost || 0), borderColor: "#7c3aed", backgroundColor: "rgba(124,58,237,0.06)", fill: true, tension: 0.3 },
+      ]},
+      options: baseOpts,
+    });
+  }
+
+  // 图4：月度项目利润
+  const c4 = document.querySelector("#chartProfit");
+  if (c4 && window.Chart) {
+    if (state.chart4) state.chart4.destroy();
+    state.chart4 = new Chart(c4, {
+      type: "line",
+      data: { labels, datasets: [
+        { label: "利润", data: data.map((x) => (x.gross || 0)), borderColor: "#6366f1", backgroundColor: "rgba(99,102,241,0.06)", fill: true, tension: 0.3 },
+      ]},
+      options: baseOpts,
+    });
+  }
+}

static/modules/operations.js

@@ -0,0 +1,20 @@
+// operations.js — 运营模块
+window.renderOperations = () => {
+  document.querySelector("#operations").innerHTML = `<div class="grid gap-4">
+    <section class="card p-6 max-w-4xl">
+      <h2 class="text-lg font-bold text-slate-800 mb-4">运营思考</h2>
+      <p class="text-slate-700 leading-relaxed mb-4"><strong>和内部联动，真正快速做实交付很重要</strong></p>
+      <ol class="list-decimal list-inside space-y-3 text-slate-600 leading-relaxed">
+        <li>门店的大屏幕，要上，一个视频拍摄出来，然后在几百家门店同步轮巡播放，还是很震撼的</li>
+        <li>拍摄的内容，按病种整理成不同的专区，然后以 H5 或者小程序的形式，在门店科普教育，患者群，企业微信推送下去</li>
+        <li>同理，在保险的理赔环节，报案环节推送下去，而不是只是挂一个 H5 的专区</li>
+        <li>和门店、医生联动，把患者群都建立起来，把群的数量建起来</li>
+        <li>用源泉把患者的档案都建立起来，真正的有档案沉淀，AI 推送沉淀</li>
+        <li>用 AI + 人工，把随访量也都弄起来</li>
+        <li>对应的运营活动，还有排行版，在有一定量以后，要逐步的做起来，包括科普的排行版，科普的明星医生等等</li>
+      </ol>
+      <hr class="my-6 border-slate-200">
+      <p class="text-slate-700 font-semibold leading-relaxed">要形成一份专门的报告，真正的证明我们科普和患者管理的价值</p>
+    </section>
+  </div>`;
+};

static/modules/performance.js

@@ -0,0 +1,124 @@
+// performance.js — 绩效模块
+window.renderPerformance = () => {
+  const data = state.data;
+  if (!data) return;
+
+  if (state.perfQuarter === undefined) state.perfQuarter = Math.floor(new Date().getMonth() / 3);
+  const q = state.perfQuarter;
+  const qLabel = ['Q1 (1-3月)', 'Q2 (4-6月)', 'Q3 (7-9月)', 'Q4 (10-12月)'];
+  const qRanges = [[1,2,3],[4,5,6],[7,8,9],[10,11,12]];
+  const qRange = qRanges[q];
+  const storageKey = 'opc-performance-Q' + (q + 1);
+
+  const pfs = (data.projectFinances || []);
+
+  const sumQ = (field) => {
+    let total = 0;
+    pfs.forEach(p => {
+      try { JSON.parse(p.budget_data || '[]').forEach(b => { const m = parseInt((b.month || '').substring(5)) || 0; if (qRange.includes(m)) total += parseFloat(b[field] || 0); }); } catch (e) {}
+    });
+    return Math.round(total);
+  };
+
+  const signTotal = Math.round(pfs.filter(x => { const m = parseInt((x.sign_month || '0').substring(5)) || 0; return qRange.includes(m); }).reduce((a, p) => a + (p.sign_amount || 0), 0));
+  const revTotal = sumQ('rev');
+  const grossTotal = sumQ('gross');
+  const paymentTotal = sumQ('payment');
+
+  const rows = [
+    { key: 'sign', label: '签约', complete: signTotal, icon: 'file-text', defWeight: 10 },
+    { key: 'rev', label: '收入', complete: revTotal, icon: 'dollar-sign', defWeight: 20 },
+    { key: 'gross', label: '毛利', complete: grossTotal, icon: 'trending-up', defWeight: 50 },
+    { key: 'payment', label: '回款', complete: paymentTotal, icon: 'coins', defWeight: 20 },
+  ];
+
+  const saved = JSON.parse(localStorage.getItem(storageKey) || '{}');
+
+  function val(key, field, def) {
+    const r = saved[key] || {};
+    return r[field] !== undefined && r[field] !== '' ? Number(r[field]) : def;
+  }
+
+  function moneyWan(v) {
+    if (v >= 10000) return (v / 10000).toFixed(1) + '万';
+    return v.toLocaleString();
+  }
+
+  let totalScore = 0;
+  const tableRows = rows.map(r => {
+    const targetWan = val(r.key, 'targetWan', 0);
+    const target = Math.round(targetWan * 10000);
+    const weight = val(r.key, 'weight', r.defWeight);
+    const score = target > 0 ? Math.round((r.complete / target) * weight * 10) / 10 : 0;
+    totalScore += score;
+
+    return `<tr class="border-b border-slate-100">
+      <td class="p-3 align-middle text-left font-medium text-slate-700"><i data-lucide="${r.icon}" style="width:16px;height:16px;display:inline-block;vertical-align:-3px;margin-right:6px" class="text-blue-500"></i>${r.label}</td>
+      <td class="p-3 align-middle text-center">
+        <div class="inline-flex items-center gap-1">
+          <input type="number" step="0.1" min="0" value="${targetWan.toFixed(1)}" class="perf-target form-ctrl form-ctrl-sm w-20 text-center" style="appearance:none;-webkit-appearance:none" data-key="${r.key}" onchange="updatePerfScore('${r.key}','targetWan',this.value)">
+          <span class="text-xs text-slate-400">万</span>
+        </div>
+      </td>
+      <td class="p-3 align-middle text-center text-slate-700 font-mono text-sm">${moneyWan(r.complete)}</td>
+      <td class="p-3 align-middle text-center">
+        <div class="inline-flex justify-center">
+          <input type="number" step="0.1" min="0" max="100" value="${weight}" class="perf-weight form-ctrl form-ctrl-sm w-16 text-center" style="appearance:none;-webkit-appearance:none" data-key="${r.key}" onchange="updatePerfScore('${r.key}','weight',this.value)">
+        </div>
+      </td>
+      <td class="p-3 align-middle text-center font-semibold text-blue-700 text-sm">${score.toFixed(1)}</td>
+    </tr>`;
+  }).join('');
+
+  const quarterTabs = `<div class="finance-tabs" style="padding:0;border-bottom:1px solid #e2e8f0;margin-bottom:0">` + qLabel.map((l, i) => {
+    return `<button onclick="switchPerfQuarter(${i})" class="finance-tab${i === q ? ' active' : ''}" style="font-size:14px;font-weight:600">${l}</button>`;
+  }).join('') + `</div>`;
+
+  document.querySelector("#performance").innerHTML = `
+    <style>
+      .perf-target::-webkit-outer-spin-button,
+      .perf-target::-webkit-inner-spin-button,
+      .perf-weight::-webkit-outer-spin-button,
+      .perf-weight::-webkit-inner-spin-button { -webkit-appearance: none; margin: 0; }
+      .perf-target, .perf-weight { -moz-appearance: textfield; }
+    </style>
+    <div class="grid gap-4">
+      ${quarterTabs}
+      <section class="card p-4">
+        <table class="w-full text-sm">
+          <thead><tr class="bg-slate-50 border-b border-slate-200">
+            <th class="p-3 text-left font-semibold text-slate-500">指标</th>
+            <th class="p-3 text-center font-semibold text-slate-500">目标（万）</th>
+            <th class="p-3 text-center font-semibold text-slate-500">完成情况</th>
+            <th class="p-3 text-center font-semibold text-slate-500">权重</th>
+            <th class="p-3 text-center font-semibold text-slate-500">评分</th>
+          </tr></thead>
+          <tbody>${tableRows}</tbody>
+          <tfoot><tr class="border-t-2 border-slate-200 bg-slate-50 font-semibold">
+            <td class="p-3 text-left text-slate-700">合计</td>
+            <td class="p-3 text-center text-slate-500">—</td>
+            <td class="p-3 text-center text-slate-500">—</td>
+            <td class="p-3 text-center text-slate-700">100</td>
+            <td class="p-3 text-center text-blue-700 text-base">${totalScore.toFixed(1)}</td>
+          </tr></tfoot>
+        </table>
+      </section>
+    </div>`;
+
+  if (window.lucide) window.lucide.createIcons();
+};
+
+window.switchPerfQuarter = (q) => {
+  state.perfQuarter = q;
+  renderPerformance();
+};
+
+window.updatePerfScore = (key, field, value) => {
+  const q = state.perfQuarter || 0;
+  const storageKey = 'opc-performance-Q' + (q + 1);
+  const saved = JSON.parse(localStorage.getItem(storageKey) || '{}');
+  saved[key] = saved[key] || {};
+  saved[key][field] = value;
+  localStorage.setItem(storageKey, JSON.stringify(saved));
+  renderPerformance();
+};

static/modules/plan_expense.js

@@ -0,0 +1,219 @@
+// expense.js — 费用管理模块
+
+function renderPlanExpense() {
+  var records = state.data.planExpense || [];
+  var money = function(v) { return '¥ ' + (Number(v || 0)).toLocaleString('zh-CN', { minimumFractionDigits: 0, maximumFractionDigits: 2 }); };
+  var esc = function(s) { return (s || '').replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;'); };
+  var EXPENSE_TYPES = ['通用费用','平台采购','人力成本','研发费用','奖金','其他'];
+  var STATUS_OPTIONS = ['计入费用','暂不计入'];
+
+  // 排序状态
+  if (!state.planExpSort) state.planExpSort = { key: 'expense_month', asc: true };
+  var sortKey = state.planExpSort.key;
+  var sortAsc = state.planExpSort.asc ? 1 : -1;
+
+  // 筛选状态
+  var view = state.planExpView || 'total';
+  var typeFilter = state.planExpFilter || '全部';
+  var filtered = typeFilter === '全部' ? records : records.filter(function(r) { return r.expense_type === typeFilter; });
+
+  // 视图数据预处理
+  var now = new Date();
+  var thisYear = now.getFullYear();
+  var defaultMonth = thisYear + '-' + String(now.getMonth() + 1).padStart(2, '0');
+
+  if (!state.planExpMonth) state.planExpMonth = defaultMonth;
+  if (state.planExpQuarter === '') state.planExpQuarter = String(Math.floor(now.getMonth() / 3));
+
+  // 月度筛选
+  if (view === 'monthly') {
+    filtered = filtered.filter(function(r) { return r.expense_month === state.planExpMonth; });
+  }
+
+  // 季度筛选
+  if (view === 'quarterly') {
+    var q = parseInt(state.planExpQuarter) || 0;
+    var qRanges = [[1,2,3],[4,5,6],[7,8,9],[10,11,12]];
+    var qRange = qRanges[q];
+    filtered = filtered.filter(function(r) {
+      var m = parseInt((r.expense_month || '0').substring(5)) || 0;
+      return qRange.indexOf(m) >= 0;
+    });
+  }
+
+  // 排序
+  filtered.sort(function(a, b) {
+    var va = a[sortKey] || '', vb = b[sortKey] || '';
+    if (sortKey === 'amount' || sortKey === 'incurred_amount') {
+      va = parseFloat(va) || 0; vb = parseFloat(vb) || 0;
+    }
+    if (va < vb) return -1 * sortAsc;
+    if (va > vb) return 1 * sortAsc;
+    return 0;
+  });
+
+  var totalAmount = filtered.reduce(function(s, r) { return s + (r.amount || 0); }, 0);
+  var totalIncurred = filtered.reduce(function(s, r) { return s + (r.incurred_amount || 0); }, 0);
+
+  // 月份下拉选项（去年/今年/明年）
+  var monthOpts = '';
+  for (var yr = thisYear - 1; yr <= thisYear + 1; yr++)
+    for (var m = 1; m <= 12; m++) {
+      var mv = yr + '-' + String(m).padStart(2, '0');
+      monthOpts += '<option value="' + mv + '">' + mv + '</option>';
+    }
+
+  // 季度下拉
+  var qLabels = ['Q1 (1-3月)','Q2 (4-6月)','Q3 (7-9月)','Q4 (10-12月)'];
+  var quarterOpts = '';
+  for (var qi = 0; qi < 4; qi++) {
+    quarterOpts += '<option value="' + qi + '">' + qLabels[qi] + '</option>';
+  }
+
+  // 月份/季度日期选择器
+  var dateSelect = '';
+  if (view === 'monthly') {
+    dateSelect = '<span class="text-sm text-slate-500 ml-2">月份：</span><select onchange="setPlanExpMonth(this.value)" class="text-sm font-medium py-1 px-2.5 cursor-pointer" style="appearance:none;-webkit-appearance:none;background-color:transparent;border:0;outline:none;background:url(&apos;data:image/svg+xml,%3Csvg xmlns=%22http://www.w3.org/2000/svg%22 width=%2212%22 height=%2212%22 viewBox=%220 0 24 24%22 fill=%22none%22 stroke=%22%236b7280%22 stroke-width=%222%22 stroke-linecap=%22round%22 stroke-linejoin=%22round%22%3E%3Cpolyline points=%226 9 12 15 18 9%22%3E%3C/polyline%3E%3C/svg%3E&apos;) no-repeat right 4px center;padding-right:22px;min-height:30px"><option value=""' + (!state.planExpMonth?' selected':'') + '>请选择</option>' + monthOpts.replace('value="' + state.planExpMonth + '"', 'value="' + state.planExpMonth + '" selected') + '</select>';
+  } else if (view === 'quarterly') {
+    dateSelect = '<span class="text-sm text-slate-500 ml-2">季度：</span><select onchange="setPlanExpQuarter(this.value)" class="text-sm font-medium py-1 px-2.5 cursor-pointer" style="appearance:none;-webkit-appearance:none;background-color:transparent;border:0;outline:none;background:url(&apos;data:image/svg+xml,%3Csvg xmlns=%22http://www.w3.org/2000/svg%22 width=%2212%22 height=%2212%22 viewBox=%220 0 24 24%22 fill=%22none%22 stroke=%22%236b7280%22 stroke-width=%222%22 stroke-linecap=%22round%22 stroke-linejoin=%22round%22%3E%3Cpolyline points=%226 9 12 15 18 9%22%3E%3C/polyline%3E%3C/svg%3E&apos;) no-repeat right 4px center;padding-right:22px;min-height:30px">' + quarterOpts.replace('value="' + state.planExpQuarter + '"', 'value="' + state.planExpQuarter + '" selected') + '</select>';
+  }
+
+  // Toolbar
+  var toolbar = '<span class="text-sm text-slate-500">视图：</span><select onchange="setPlanExpView(this.value)" class="text-sm font-medium py-1 px-2.5 cursor-pointer" style="appearance:none;-webkit-appearance:none;background-color:transparent;border:0;outline:none;background:url(&apos;data:image/svg+xml,%3Csvg xmlns=%22http://www.w3.org/2000/svg%22 width=%2212%22 height=%2212%22 viewBox=%220 0 24 24%22 fill=%22none%22 stroke=%22%236b7280%22 stroke-width=%222%22 stroke-linecap=%22round%22 stroke-linejoin=%22round%22%3E%3Cpolyline points=%226 9 12 15 18 9%22%3E%3C/polyline%3E%3C/svg%3E&apos;) no-repeat right 4px center;padding-right:22px;min-height:30px"><option value="total"' + (view==='total'?' selected':'') + '>总视图</option><option value="quarterly"' + (view==='quarterly'?' selected':'') + '>季度视图</option><option value="monthly"' + (view==='monthly'?' selected':'') + '>月度视图</option></select><span class="text-sm text-slate-500 ml-3">类型：</span><select onchange="setPlanExpFilter(this.value)" class="text-sm font-medium py-1 px-2.5 cursor-pointer" style="appearance:none;-webkit-appearance:none;background-color:transparent;border:0;outline:none;background:url(&apos;data:image/svg+xml,%3Csvg xmlns=%22http://www.w3.org/2000/svg%22 width=%2212%22 height=%2212%22 viewBox=%220 0 24 24%22 fill=%22none%22 stroke=%22%236b7280%22 stroke-width=%222%22 stroke-linecap=%22round%22 stroke-linejoin=%22round%22%3E%3Cpolyline points=%226 9 12 15 18 9%22%3E%3C/polyline%3E%3C/svg%3E&apos;) no-repeat right 4px center;padding-right:22px;min-height:30px"><option value="全部"' + (typeFilter==='全部'?' selected':'') + '>全部 (' + records.length + ')</option>';
+  EXPENSE_TYPES.forEach(function(t) {
+    toolbar += '<option value="' + t + '"' + (typeFilter===t?' selected':'') + '>' + t + ' (' + records.filter(function(r){return r.expense_type===t}).length + ')</option>';
+  });
+  toolbar += '</select>' + dateSelect;
+
+  // 排序箭头
+  var sortArrow = function(key) {
+    var arrow = key === sortKey ? (sortAsc === 1 ? ' ↑' : ' ↓') : '';
+    return '<span class="text-slate-400 text-xs cursor-pointer" onclick="togglePlanExpSort(\'' + key + '\')">' + arrow + '</span>';
+  };
+
+  // 表格行
+  var tableRows = '';
+  if (filtered.length) {
+    filtered.forEach(function(r) {
+      var statusCls = r.status === '暂不计入' ? 'text-amber-600' : 'text-green-600';
+      tableRows += '<tr class="border-b border-slate-100 hover:bg-slate-50 cursor-pointer" onclick="openPlanExpEdit(' + r.id + ')"><td class="p-2 text-center align-middle font-medium">' + (r.expense_month || '—') + '</td><td class="p-2 font-medium text-center align-middle">' + esc(r.expense_type) + '</td><td class="p-2 text-center align-middle font-semibold ' + statusCls + '">' + esc(r.status || '计入费用') + '</td><td class="p-2 text-center align-middle font-medium">' + money(r.amount) + '</td><td class="p-2 text-center align-middle font-medium">' + money(r.incurred_amount) + '</td><td class="p-2 text-center align-middle text-slate-500">' + (esc(r.notes) || '—') + '</td></tr>';
+    });
+  } else {
+    var emptyMsg = view === 'monthly' ? '该月份暂无费用记录' : view === 'quarterly' ? '该季度暂无费用记录' : '暂无费用记录';
+    tableRows = '<tr><td colspan="6" class="p-6 text-center text-slate-400">' + emptyMsg + '</td></tr>';
+  }
+
+  // 模态框 monthOpts for form (with current value preselected)
+  var modalMonthOpts = '<option value="">请选择</option>';
+  for (var yr2 = thisYear - 1; yr2 <= thisYear + 1; yr2++)
+    for (var m2 = 1; m2 <= 12; m2++) {
+      var mv2 = yr2 + '-' + String(m2).padStart(2, '0');
+      modalMonthOpts += '<option value="' + mv2 + '">' + mv2 + '</option>';
+    }
+  var statusOpts = STATUS_OPTIONS.map(function(s) { return '<option value="' + s + '">' + s + '</option>'; }).join('');
+
+  var modal = '<div id="planExpenseModal" class="hidden fixed inset-0 z-50 flex items-center justify-center bg-black/40" onclick="closePlanExpModal()"><div class="bg-white rounded-2xl shadow-2xl w-full max-w-lg mx-4" onclick="event.stopPropagation()"><div class="sticky top-0 z-10 bg-white/95 backdrop-blur border-b border-slate-100 px-6 py-4 flex items-center justify-between"><h3 class="text-lg font-bold text-slate-800" id="planExpenseModalTitle">新增费用</h3><div class="flex items-center gap-2"><button class="btn btn-ghost btn-sm text-red-600 hidden" id="planExpDeleteBtn" onclick="deletePlanExpItem()">删除</button><button class="btn btn-ghost btn-sm rounded-full w-8 h-8 p-0" onclick="closePlanExpModal()"><i data-lucide="x"></i></button></div></div><form onsubmit="savePlanExpense(event)" class="p-6 grid gap-4" novalidate><input type="hidden" name="expense_id" value=""><div class="grid grid-cols-2 gap-3"><label class="block"><span class="text-sm text-slate-500 mb-1 block">费用类型 <span class="text-red-500">*</span></span><select name="expense_type" required class="form-ctrl bg-white"><option value="">请选择</option>';
+  EXPENSE_TYPES.forEach(function(t) { modal += '<option>' + t + '</option>'; });
+  modal += '</select></label><label class="block"><span class="text-sm text-slate-500 mb-1 block">月份 <span class="text-red-500">*</span></span><select name="expense_month" required class="form-ctrl bg-white">' + modalMonthOpts + '</select></label></div><div class="grid grid-cols-2 gap-3"><label class="block"><span class="text-sm text-slate-500 mb-1 block">金额（元）</span><input name="amount" type="number" step="0.01" class="form-ctrl" placeholder="0.00"></label><label class="block"><span class="text-sm text-slate-500 mb-1 block">已发生金额（元）</span><input name="incurred_amount" type="number" step="0.01" class="form-ctrl" placeholder="0.00"></label></div><label class="block"><span class="text-sm text-slate-500 mb-1 block">状态</span><select name="status" class="form-ctrl bg-white">' + statusOpts + '</select></label><label class="block"><span class="text-sm text-slate-500 mb-1 block">费用说明</span><textarea name="notes" class="form-ctrl" rows="3" placeholder="备注信息"></textarea></label><div class="flex justify-end gap-3 pt-2"><button type="button" class="btn btn-ghost btn-sm px-6" onclick="closePlanExpModal()">取消</button><button type="submit" class="btn btn-primary btn-sm px-8">保存</button></div></form></div></div>';
+
+  var target = document.querySelector("#planExpenseModule") || document.querySelector("#planExpenseModule") || document.querySelector("#planExpenseContent");
+  if (!target) return;
+  target.innerHTML = '<div class="grid gap-4">' +
+    '<div class="card p-3"><div class="flex justify-between items-center"><div class="flex items-center gap-2">' + toolbar + '</div><button class="btn btn-primary btn-sm" onclick="openPlanExpModal()">新增费用</button></div></div>' +
+    '<div class="grid grid-cols-3 gap-3">' +
+      '<div class="metric-card p-3"><span class="flex items-center gap-2 text-sm text-slate-500">费用记录</span><strong class="mt-2 block text-xl">' + filtered.length + '</strong></div>' +
+      '<div class="metric-card p-3"><span class="flex items-center gap-2 text-sm text-slate-500">总费用</span><strong class="mt-2 block text-xl">' + money(totalAmount) + '</strong></div>' +
+      '<div class="metric-card p-3"><span class="flex items-center gap-2 text-sm text-slate-500">已发生金额</span><strong class="mt-2 block text-xl">' + money(totalIncurred) + '</strong></div>' +
+    '</div>' +
+    modal +
+    '<div class="card p-4"><div class="overflow-x-auto"><table class="w-full text-sm"><thead><tr class="bg-slate-50 border-b border-slate-200"><th class="p-2 text-center font-semibold cursor-pointer select-none" onclick="togglePlanExpSort(\'expense_month\')">月份' + sortArrow('expense_month') + '</th><th class="p-2 text-center font-semibold cursor-pointer select-none" onclick="togglePlanExpSort(\'expense_type\')">费用类型' + sortArrow('expense_type') + '</th><th class="p-2 text-center font-semibold cursor-pointer select-none" onclick="togglePlanExpSort(\'status\')">状态' + sortArrow('status') + '</th><th class="p-2 text-center font-semibold cursor-pointer select-none" onclick="togglePlanExpSort(\'amount\')">金额' + sortArrow('amount') + '</th><th class="p-2 text-center font-semibold cursor-pointer select-none" onclick="togglePlanExpSort(\'incurred_amount\')">已发生金额' + sortArrow('incurred_amount') + '</th><th class="p-2 text-center font-semibold">费用说明</th></tr></thead><tbody>' + tableRows + '</tbody></table></div></div>' +
+  '</div>';
+
+  if (window.lucide) window.lucide.createIcons();
+}
+
+window.togglePlanExpSort = function(key) {
+  var cur = state.planExpSort || {};
+  if (cur.key === key) { cur.asc = !cur.asc; }
+  else { cur.key = key; cur.asc = true; }
+  state.planExpSort = cur;
+  renderPlanExpense();
+};
+
+window.setPlanExpView = function(v) { state.planExpView = v; renderPlanExpense(); };
+window.setPlanExpFilter = function(v) { state.planExpFilter = v; renderPlanExpense(); };
+window.setPlanExpMonth = function(v) { state.planExpMonth = v; renderPlanExpense(); };
+window.setPlanExpQuarter = function(v) { state.planExpQuarter = v; renderPlanExpense(); };
+
+window.openPlanExpModal = function() {
+  var form = document.querySelector("#planExpenseModal form");
+  form.reset();
+  form.querySelector('[name="expense_id"]').value = "";
+  form.querySelector('[name="status"]').value = "计入费用";
+  document.querySelector("#planExpenseModalTitle").textContent = "新增费用";
+  document.querySelector("#planExpDeleteBtn").classList.add("hidden");
+  document.querySelector("#planExpenseModal").classList.remove("hidden");
+};
+
+window.closePlanExpModal = function() {
+  document.querySelector("#planExpenseModal").classList.add("hidden");
+};
+
+window.openPlanExpEdit = function(id) {
+  var r = (state.data.planExpense || []).find(function(x) { return x.id === id; });
+  if (!r) return;
+  var form = document.querySelector("#planExpenseModal form");
+  form.reset();
+  var setVal = function(name, val) { var el = form.querySelector('[name="' + name + '"]'); if (el) el.value = val || ""; };
+  setVal("expense_id", r.id);
+  setVal("expense_type", r.expense_type);
+  setVal("expense_month", r.expense_month);
+  setVal("amount", r.amount);
+  setVal("incurred_amount", r.incurred_amount);
+  setVal("notes", r.notes);
+  setVal("status", r.status || "计入费用");
+  document.querySelector("#planExpenseModalTitle").textContent = "编辑费用";
+  document.querySelector("#planExpDeleteBtn").classList.remove("hidden");
+  document.querySelector("#planExpenseModal").classList.remove("hidden");
+};
+
+window.savePlanExpense = async function(event) {
+  event.preventDefault();
+  var form = event.target;
+  var data = Object.fromEntries(new FormData(form).entries());
+  if (data.amount === '' || data.amount === undefined) data.amount = 0;
+  if (data.incurred_amount === '' || data.incurred_amount === undefined) data.incurred_amount = 0;
+  if (!data.status) data.status = '计入费用';
+  var isEdit = !!data.expense_id;
+  delete data.expense_id;
+
+  var id = form.querySelector('[name="expense_id"]').value;
+  var url = isEdit ? "/api/planExpense/" + id : "/api/planExpense";
+  var method = isEdit ? "PUT" : "POST";
+
+  var resp = await fetch(url, { method: method, headers: { "Content-Type": "application/json" }, body: JSON.stringify({ data: Object.assign({}, data, { tenant: state.tenant }) }) });
+  if (!resp.ok) { var err = await resp.text(); alert("保存失败：" + err); return; }
+
+  var bResp = await fetch("/api/bootstrap?tenant=" + encodeURIComponent(state.tenant));
+  if (bResp.ok) {
+    var bd = await bResp.json();
+    state.data = bd;
+    applyUserTenants();
+    renderPlanExpense();
+  }
+  closePlanExpModal();
+};
+
+window.deletePlanExpItem = async function() {
+  var id = document.querySelector("#planExpenseModal form [name='expense_id']").value;
+  if (!id || !confirm("确定删除？")) return;
+  var resp = await fetch("/api/planExpense/" + id, { method: "DELETE" });
+  if (!resp.ok) { alert("删除失败"); return; }
+  var bResp = await fetch("/api/bootstrap?tenant=" + encodeURIComponent(state.tenant));
+  if (bResp.ok) {
+    var bd = await bResp.json();
+    state.data = bd;
+    applyUserTenants();
+    renderPlanExpense();
+  }
+};

static/modules/products.js

@@ -0,0 +1,355 @@
+// products.js — 产品迭代模块
+
+function formHtml(fields, button) {
+  return `<form class="inline-form flex flex-wrap items-end gap-3" onsubmit="${button.handler}(event)">
+    ${fields.map((f) => `<label class="grid gap-1 text-sm"><span class="font-bold text-slate-600">${f.label}</span>${f.input}</label>`).join("")}
+    <button class="btn btn-primary" type="submit">${button.text}</button>
+  </form>`;
+}
+
+async function createResource(event, resource) {
+  event.preventDefault();
+  const form = event.currentTarget;
+  const data = Object.fromEntries(new FormData(form).entries());
+  data.tenant = state.tenant;
+  try {
+    const result = await api(`/api/${resource}`, { method: "POST", body: JSON.stringify({ data }) });
+    const targetMap = { sales: "sales", proposals: "proposal", operations: "operation", products: "product" };
+    const resType = targetMap[resource] || resource;
+    const name = data.project_name || data.target_customer || data.customer_or_project_name || data.product_name || "";
+    if (result.id && name) logActivity(resType, result.id, "创建了" + name);
+    form.reset();
+    await load();
+  } catch (error) {
+    toast("创建失败：" + error.message, "error");
+  }
+}
+
+window.createSales = (event) => createResource(event, "sales");
+window.createProposal = (event) => createResource(event, "proposals");
+window.createOperation = async (event) => {
+  await createResource(event, "operations");
+  if (typeof closeNewProjectModal === "function") closeNewProjectModal();
+};
+
+window.openProductDrawer = () => {
+  const drawer = document.querySelector("#productDrawer");
+  drawer.innerHTML = `<div class="task-drawer-hd">
+    <span class="task-drawer-title">新增产品版本</span>
+    <button class="task-close" onclick="closeProductDrawer()"><i data-lucide="x"></i></button>
+  </div>
+  <form class="task-drawer-form" onsubmit="submitProductDrawer(event)">
+    <label class="task-field"><span>版本名称</span><input name="product_name" required class="form-ctrl"></label>
+    <div class="grid grid-cols-2 gap-3">
+      <label class="task-field"><span>版本号</span><input name="version" required class="form-ctrl"></label>
+      <label class="task-field"><span>优先级</span><select name="priority" class="form-ctrl"><option>P0</option><option selected>P1</option><option>P2</option><option>P3</option></select></label>
+    </div>
+    <label class="task-field"><span>版本目标</span><textarea name="version_goal" rows="3" class="form-ctrl"></textarea></label>
+    <div class="grid grid-cols-2 gap-3">
+      <label class="task-field"><span>启动时间 <span class="text-red-500">*</span></span><input name="start_date" type="date" required class="form-ctrl"></label>
+      <label class="task-field"><span>产品方案</span><input name="plan_date" type="date" class="form-ctrl"></label>
+    </div>
+    <div class="grid grid-cols-2 gap-3">
+      <label class="task-field"><span>研发完成</span><input name="dev_done_date" type="date" class="form-ctrl"></label>
+      <label class="task-field"><span>测试</span><input name="test_date" type="date" class="form-ctrl"></label>
+    </div>
+    <div class="grid grid-cols-2 gap-3">
+      <label class="task-field"><span>上线时间</span><input name="launch_date" type="date" class="form-ctrl"></label>
+      <label class="task-field"><span>状态</span><select name="status" class="form-ctrl"><option>未开始</option><option>规划中</option><option>开发中</option><option>测试中</option><option>已上线</option><option>已取消</option></select></label>
+    </div>
+    <label class="task-field"><span>进展备注</span><textarea name="notes" rows="3" class="form-ctrl"></textarea></label>
+    <div class="flex justify-end gap-2 mt-4 pt-3 border-t border-slate-100">
+      <button type="button" class="btn btn-ghost btn-sm" onclick="closeProductDrawer()">取消</button>
+      <button type="submit" class="btn btn-primary btn-sm">确认新增</button>
+    </div>
+  </form>`;
+  drawer.classList.add("open");
+  if (window.lucide) window.lucide.createIcons();
+};
+
+window.closeProductDrawer = () => {
+  document.querySelector("#productDrawer").classList.remove("open");
+};
+
+window.cycleProductStatus = async (id) => {
+  const products = state.data.products || [];
+  const product = products.find(x => x.id === id);
+  if (!product) return;
+  const statuses = ["未开始", "规划中", "开发中", "测试中", "已上线", "已取消"];
+  const current = statuses.indexOf(product.status) >= 0 ? product.status : "规划中";
+  const newStatus = statuses[(statuses.indexOf(current) + 1) % statuses.length];
+  try {
+    await api(`/api/products/${id}`, { method: "PUT", body: JSON.stringify({ data: { status: newStatus } }) });
+    product.status = newStatus;
+    renderProducts();
+  } catch (error) {
+    toast("更新失败：" + error.message, "error");
+  }
+};
+
+window.editProductDate = (event, id) => {
+  event.stopPropagation();
+  const products = state.data.products || [];
+  const product = products.find(x => x.id === id);
+  if (!product) return;
+  const span = event.currentTarget;
+  const td = span.parentElement;
+  const currentValue = product.launch_date || "";
+  const input = document.createElement("input");
+  input.type = "date";
+  input.className = "form-ctrl form-ctrl-sm w-full";
+  input.value = currentValue;
+  input.addEventListener("change", async () => {
+    const newValue = input.value;
+    try {
+      await api(`/api/products/${id}`, { method: "PUT", body: JSON.stringify({ data: { launch_date: newValue } }) });
+      product.launch_date = newValue;
+      td.innerHTML = `<span class="cursor-pointer hover:text-blue-600" onclick="editProductDate(event, ${id})">${newValue || '—'}</span>`;
+    } catch (e) { toast("修改失败：" + e.message, "error"); }
+  });
+  input.addEventListener("blur", () => {
+    td.innerHTML = `<span class="cursor-pointer hover:text-blue-600" onclick="editProductDate(event, ${id})">${currentValue || '—'}</span>`;
+  });
+  td.innerHTML = "";
+  td.appendChild(input);
+  input.focus();
+};
+
+window.addNewFeature = () => {};
+window.removeNewFeature = () => {};
+window.addFeature = () => {};
+window.removeFeature = () => {};
+window.saveFeatureList = () => {};
+
+window.submitProductDrawer = async (event) => {
+  event.preventDefault();
+  const form = event.currentTarget;
+  const data = Object.fromEntries(new FormData(form).entries());
+  // 约束：4 个时间不能早于启动时间
+  const startDate = data.start_date;
+  if (startDate) {
+    for (const f of ['plan_date', 'dev_done_date', 'test_date', 'launch_date']) {
+      if (data[f] && data[f] < startDate) {
+        toast("「" + ({plan_date:'产品方案',dev_done_date:'研发完成',test_date:'测试完成',launch_date:'上线时间'}[f]) + "」不能早于启动时间", "error");
+        return;
+      }
+    }
+  }
+  data.tenant = state.tenant;
+  try {
+    const result = await api("/api/products", { method: "POST", body: JSON.stringify({ data }) });
+    form.reset();
+    closeProductDrawer();
+    if (result.id) logActivity("product", result.id, "创建了产品版本「" + data.product_name + " " + data.version + "」");
+    await load();
+  } catch (error) {
+    toast("创建失败：" + error.message, "error");
+  }
+};
+
+window.addFeature = () => {};
+window.removeFeature = () => {};
+window.saveFeatureList = () => {};
+
+// 排序状态
+let productSort = { field: null, dir: 1 };
+
+window.sortProducts = (field) => {
+  if (productSort.field === field) {
+    productSort.dir = -productSort.dir;
+  } else {
+    productSort.field = field;
+    productSort.dir = 1;
+  }
+  renderProducts();
+};
+
+function sortItems(items) {
+  if (!productSort.field) return items;
+  const f = productSort.field;
+  const d = productSort.dir;
+  const priorityOrder = { P0: 0, P1: 1, P2: 2, P3: 3 };
+  return [...items].sort((a, b) => {
+    let va = a[f] || '', vb = b[f] || '';
+    if (f === 'priority') { va = priorityOrder[va] ?? 9; vb = priorityOrder[vb] ?? 9; }
+    if (va < vb) return -1 * d;
+    if (va > vb) return 1 * d;
+    return 0;
+  });
+}
+
+function renderProducts() {
+  const rawItems = state.data.products || [];
+  const items = sortItems(rawItems);
+  const priorityColor = { P0: "bg-red-100 text-red-700", P1: "bg-orange-100 text-orange-700", P2: "bg-blue-100 text-blue-700", P3: "bg-slate-100 text-slate-600" };
+  const sortIcon = (f) => {
+    if (productSort.field !== f) return '<i data-lucide="chevrons-up-down" style="width:12px;height:12px;opacity:0.3"></i>';
+    return productSort.dir > 0 ? '<i data-lucide="chevron-up" style="width:12px;height:12px"></i>' : '<i data-lucide="chevron-down" style="width:12px;height:12px"></i>';
+  };
+  const sortTh = (f, label, extra='') => `<th class="px-3 py-2.5 font-semibold align-middle whitespace-nowrap cursor-pointer hover:text-blue-600 select-none" onclick="sortProducts('${f}')"><span class="inline-flex items-center gap-1">${label}${sortIcon(f)}</span>${extra}</th>`;
+  const tab = state.productTab || 'version';
+  const tabs = `<div class="finance-tabs" style="padding:0;border-bottom:1px solid #e2e8f0"><button onclick="switchProductTab('version')" class="finance-tab${tab==='version'?' active':''}" style="font-size:14px;font-weight:600">版本迭代</button><button onclick="switchProductTab('ops')" class="finance-tab${tab==='ops'?' active':''}" style="font-size:14px;font-weight:600">产品运营</button></div>`;
+
+  document.querySelector("#products").innerHTML = `
+    <div class="grid gap-4">
+      ${tabs}
+      ${tab === 'version' ? `
+      <div class="flex justify-end">
+        <button class="btn btn-primary btn-sm" onclick="openProductDrawer()"><i data-lucide="plus"></i>新增产品版本</button>
+      </div>
+      <div class="card overflow-x-auto">
+        <table class="w-full text-sm">
+          <thead class="bg-slate-50 border-b border-slate-200">
+            <tr class="text-left text-xs text-slate-500 uppercase tracking-wider">
+              ${sortTh('version','版本号')}
+              ${sortTh('priority','优先级')}
+              ${sortTh('product_name','版本名称')}
+              ${sortTh('status','状态')}
+              ${sortTh('start_date','启动时间')}
+              ${sortTh('plan_date','产品方案')}
+              ${sortTh('dev_done_date','研发完成')}
+              ${sortTh('test_date','测试完成')}
+              ${sortTh('launch_date','上线时间')}
+              <th class="px-3 py-2.5 font-semibold align-middle whitespace-nowrap">总耗时</th>
+            </tr>
+          </thead>
+          <tbody class="divide-y divide-slate-100">
+            ${items.length === 0 ? `<tr><td colspan="10" class="px-3 py-8 text-center text-slate-400">暂无产品版本，点击右上角新增</td></tr>` : items.map((p) => {
+              const days = (s, e) => { if (!s || !e) return '-'; const d = Math.round((new Date(e) - new Date(s)) / 86400000); return d >= 0 ? d + '天' : '-'; };
+              return `
+              <tr class="hover:bg-slate-50 cursor-pointer transition-colors" onclick="openDrawer('products', ${p.id})">
+                <td class="px-3 py-2.5 whitespace-nowrap text-slate-600 align-middle">${esc(p.version) || '—'}</td>
+                <td class="px-3 py-2.5 whitespace-nowrap align-middle"><span class="inline-block px-2 py-0.5 rounded text-xs font-medium ${priorityColor[p.priority] || priorityColor.P2}" onclick="event.stopPropagation();cyclePriority(${p.id})">${esc(p.priority) || 'P2'}</span></td>
+                <td class="px-3 py-2.5 font-medium text-slate-800 max-w-[180px] truncate align-middle" title="${esc(p.product_name)}">${esc(p.product_name) || '—'}</td>
+                <td class="px-3 py-2.5 whitespace-nowrap align-middle"><span class="status-badge status-${esc(p.status)}" onclick="event.stopPropagation();cycleProductStatus(${p.id})">${esc(p.status) || '规划中'}</span></td>
+                <td class="px-3 py-2.5 whitespace-nowrap text-slate-500 text-xs align-middle" onclick="event.stopPropagation()"><input type="date" value="${esc(p.start_date) || ''}" data-id="${p.id}" data-field="start_date" class="prod-date-input" onchange="saveProductDate(this)"></td>
+                <td class="px-3 py-2.5 whitespace-nowrap text-slate-500 text-xs align-middle" onclick="event.stopPropagation()"><input type="date" value="${esc(p.plan_date) || ''}" data-id="${p.id}" data-field="plan_date" class="prod-date-input" onchange="saveProductDate(this)"></td>
+                <td class="px-3 py-2.5 whitespace-nowrap text-slate-500 text-xs align-middle" onclick="event.stopPropagation()"><input type="date" value="${esc(p.dev_done_date) || ''}" data-id="${p.id}" data-field="dev_done_date" class="prod-date-input" onchange="saveProductDate(this)"></td>
+                <td class="px-3 py-2.5 whitespace-nowrap text-slate-500 text-xs align-middle" onclick="event.stopPropagation()"><input type="date" value="${esc(p.test_date) || ''}" data-id="${p.id}" data-field="test_date" class="prod-date-input" onchange="saveProductDate(this)"></td>
+                <td class="px-3 py-2.5 whitespace-nowrap text-slate-600 text-xs align-middle" onclick="event.stopPropagation()"><input type="date" value="${esc(p.launch_date) || ''}" data-id="${p.id}" data-field="launch_date" class="prod-date-input" onchange="saveProductDate(this)"></td>
+                <td class="px-3 py-2.5 whitespace-nowrap text-slate-500 text-xs align-middle">${days(p.start_date, p.launch_date)}</td>
+              </tr>`;
+            }).join("")}
+          </tbody>
+        </table>
+      </div>
+    </div>
+    <aside id="productDrawer" class="task-drawer"></aside>
+      ` : `<section class="card p-6 max-w-4xl"><p class="text-slate-700 leading-relaxed mb-4"><strong>和内部联动，真正快速做实交付很重要</strong></p><ol class="list-decimal list-inside space-y-3 text-slate-600 leading-relaxed"><li>门店的大屏幕，要上，一个视频拍摄出来，然后在几百家门店同步轮巡播放，还是很震撼的</li><li>拍摄的内容，按病种整理成不同的专区，然后以 H5 或者小程序的形式，在门店科普教育，患者群，企业微信推送下去</li><li>同理，在保险的理赔环节，报案环节推送下去，而不是只是挂一个 H5 的专区</li><li>和门店、医生联动，把患者群都建立起来，把群的数量建起来</li><li>用源泉把患者的档案都建立起来，真正的有档案沉淀，AI 推送沉淀</li><li>用 AI + 人工，把随访量也都弄起来</li><li>对应的运营活动，还有排行版，在有一定量以后，要逐步的做起来，包括科普的排行版，科普的明星医生等等</li></ol><hr class="my-6 border-slate-200"><p class="text-slate-700 font-semibold leading-relaxed">要形成一份专门的报告，真正的证明我们科普和患者管理的价值</p></section>`}
+  `;
+  if (window.lucide) window.lucide.createIcons();
+}
+
+window.saveProductDate = async (input) => {
+  const id = Number(input.dataset.id);
+  const field = input.dataset.field;
+  const value = input.value;
+  // 直接从同一行 DOM 读取启动时间（不依赖 state 缓存）
+  const row = input.closest('tr');
+  const startDateInput = row && row.querySelector('[data-field="start_date"]');
+  const startDate = startDateInput ? startDateInput.value : '';
+  const product = (state.data.products || []).find(x => x.id === id);
+  if (!product) return;
+
+  // 启动时间必填
+  if (field === 'start_date' && !value) {
+    toast("启动时间为必填项", "error");
+    input.value = product.start_date || '';
+    input.focus();
+    return;
+  }
+  // 约束：除启动时间外的 4 个时间不能早于启动时间
+  if (field !== 'start_date' && value && startDate && value < startDate) {
+    toast("该时间不能早于启动时间（" + startDate + "）", "error");
+    input.value = product[field] || '';
+    input.focus();
+    return;
+  }
+  // 启动时间变更后，如果其他时间早于新启动时间，清空
+  if (field === 'start_date' && value) {
+    const fields = ['plan_date', 'dev_done_date', 'test_date', 'launch_date'];
+    const toClear = {};
+    for (const f of fields) {
+      if (product[f] && product[f] < value) {
+        toClear[f] = '';
+      }
+    }
+    if (Object.keys(toClear).length > 0) {
+      try {
+        await api(`/api/products/${id}`, { method: "PUT", body: JSON.stringify({ data: { ...toClear, start_date: value } }) });
+        Object.assign(product, toClear, { start_date: value });
+        toast("启动时间已更新，" + Object.keys(toClear).length + " 个早于启动时间的日期已清空", "info");
+        renderProducts();
+        return;
+      } catch (e) {
+        toast("修改失败：" + e.message, "error");
+        return;
+      }
+    }
+  }
+  try {
+    await api(`/api/products/${id}`, { method: "PUT", body: JSON.stringify({ data: { [field]: value } }) });
+    product[field] = value;
+    if (field === 'start_date' || field === 'launch_date') {
+      renderProducts();
+    }
+  } catch (e) {
+    toast("修改失败：" + e.message, "error");
+  }
+};
+
+window.editProductDateInline = (event, id, field) => {
+  event.stopPropagation();
+  const products = state.data.products || [];
+  const product = products.find(x => x.id === id);
+  if (!product) return;
+  const td = event.currentTarget;
+  const currentValue = product[field] || "";
+  const input = document.createElement("input");
+  input.type = "date";
+  input.className = "form-ctrl form-ctrl-sm w-full text-xs";
+  input.value = currentValue;
+  let saved = false;
+  const save = async () => {
+    if (saved) return;
+    saved = true;
+    const newValue = input.value;
+    try {
+      await api(`/api/products/${id}`, { method: "PUT", body: JSON.stringify({ data: { [field]: newValue } }) });
+      product[field] = newValue;
+      td.innerHTML = newValue || '—';
+    } catch (e) {
+      toast("修改失败：" + e.message, "error");
+      td.innerHTML = currentValue || '—';
+    }
+  };
+  input.addEventListener("change", save);
+  input.addEventListener("blur", () => {
+    if (!saved) td.innerHTML = currentValue || '—';
+  });
+  td.innerHTML = "";
+  td.appendChild(input);
+  input.focus();
+  if (input.showPicker) {
+    try { input.showPicker(); } catch (e) {}
+  }
+};
+
+window.cyclePriority = async (id) => {
+  const products = state.data.products || [];
+  const product = products.find(x => x.id === id);
+  if (!product) return;
+  const levels = ["P0", "P1", "P2", "P3"];
+  const cur = levels.indexOf(product.priority) >= 0 ? product.priority : "P2";
+  const next = levels[(levels.indexOf(cur) + 1) % levels.length];
+  try {
+    await api(`/api/products/${id}`, { method: "PUT", body: JSON.stringify({ data: { priority: next } }) });
+    product.priority = next;
+    renderProducts();
+  } catch (e) { toast("更新失败：" + e.message, "error"); }
+};
+
+window.switchProductTab = (v) => {
+  state.productTab = v;
+  renderProducts();
+};

static/modules/projects.js

@@ -0,0 +1,566 @@
+// projects.js — 重点工作与台账（项目管理 + 任务管理）
+
+function applyUserTenants() {
+  fetch("/api/auth/me").then(r => r.json()).then(data => {
+    if (!data.logged_in) { window.location.href = "/login"; return; }
+    const user = data.user;
+    const avatar = document.querySelector("#userAvatar");
+    avatar.textContent = user.display_name.charAt(0);
+    avatar.title = user.display_name;
+    const nameEl = document.querySelector("#userDisplayName");
+    if (nameEl) { nameEl.textContent = user.display_name; nameEl.title = user.display_name; }
+    avatar.addEventListener("click", (e) => {
+      e.stopPropagation();
+      toggleUserMenu(user);
+    });
+    // 缓存可用工作台列表，供下拉菜单使用
+    state.allowedTenants = data.tenants || [];
+    updateTenantLabel();
+  });
+}
+
+window.toggleTenantMenu = (event) => {
+  event.stopPropagation();
+  let menu = document.getElementById("tenantMenu");
+  if (menu) { menu.remove(); return; }
+  const btn = event.currentTarget;
+  const rect = btn.getBoundingClientRect();
+  const tenants = state.allowedTenants || [];
+  menu = document.createElement("div");
+  menu.id = "tenantMenu";
+  menu.className = "fixed bg-white rounded-lg shadow-xl border border-slate-200 py-1 min-w-[160px] z-[9999]";
+  menu.style.left = Math.min(rect.left - 8, window.innerWidth - 180) + "px";
+  menu.style.top = rect.bottom + 6 + "px";
+  menu.innerHTML = `
+    <div class="px-4 py-2 border-b border-slate-100">
+      <p class="text-xs font-semibold text-slate-500 uppercase tracking-wider">切换工作台</p>
+    </div>
+    ${tenants.map(t => `
+      <button class="w-full text-left px-4 py-2 text-sm hover:bg-slate-50 transition-colors flex items-center justify-between gap-2 ${t === state.tenant ? 'text-blue-600 font-medium' : 'text-slate-700'}" onclick="switchTenantFromMenu('${t.replace(/'/g, "\\'")}')">
+        <span>${esc(t)}</span>
+        ${t === state.tenant ? '<i data-lucide="check" style="width:14px;height:14px"></i>' : ''}
+      </button>
+    `).join('')}`;
+  document.body.appendChild(menu);
+  if (window.lucide) lucide.createIcons();
+  setTimeout(() => {
+    document.addEventListener("click", function closeMenu() {
+      menu.remove();
+      document.removeEventListener("click", closeMenu);
+    }, { once: true });
+  }, 10);
+};
+
+window.switchTenantFromMenu = (tenant) => {
+  document.getElementById("tenantMenu")?.remove();
+  switchTenant(tenant);
+};
+
+function updateTenantLabel() {
+  const label = document.querySelector("#currentTenantLabel");
+  if (label) {
+    label.textContent = state.tenant.replace("·无界", "") || "工作台";
+    label.title = state.tenant;
+  }
+}
+
+window.toggleUserMenu = (user) => {
+  let menu = document.getElementById("userMenu");
+  if (menu) { menu.remove(); return; }
+  const avatar = document.querySelector("#userAvatar");
+  const rect = avatar.getBoundingClientRect();
+  menu = document.createElement("div");
+  menu.id = "userMenu";
+  menu.className = "fixed bg-white rounded-lg shadow-xl border border-slate-200 py-1 min-w-[160px] z-[9999]";
+  menu.style.left = Math.min(rect.left - 8, window.innerWidth - 180) + "px";
+  menu.style.top = rect.bottom + 6 + "px";
+  menu.innerHTML = `
+    <div class="px-4 py-3 border-b border-slate-100">
+      <p class="text-sm font-semibold text-slate-800">${esc(user.display_name)}</p>
+      <p class="text-xs text-slate-500 mt-0.5">${esc(user.username || "")}</p>
+    </div>
+    ${user.role === 'admin' ? `<button class="w-full text-left px-4 py-2 text-sm text-slate-700 hover:bg-slate-50 transition-colors flex items-center gap-2" onclick="closeUserMenu();openAdminUsers()">
+      <i data-lucide="users" style="width:14px;height:14px"></i>账号管理
+    </button>` : ''}
+    <button class="w-full text-left px-4 py-2 text-sm text-slate-700 hover:bg-slate-50 transition-colors flex items-center gap-2" onclick="closeUserMenu();openChangePwdModal()">
+      <i data-lucide="lock" style="width:14px;height:14px"></i>修改密码
+    </button>
+    <button class="w-full text-left px-4 py-2 text-sm text-red-600 hover:bg-red-50 transition-colors flex items-center gap-2" onclick="doLogout()">
+      <i data-lucide="log-out" style="width:14px;height:14px"></i>退出登录
+    </button>`;
+  document.body.appendChild(menu);
+  if (window.lucide) lucide.createIcons();
+  setTimeout(() => {
+    document.addEventListener("click", function closeMenu() {
+      menu.remove();
+      document.removeEventListener("click", closeMenu);
+    }, { once: true });
+  }, 10);
+};
+
+window.closeUserMenu = () => {
+  const m = document.getElementById("userMenu");
+  if (m) m.remove();
+};
+
+window.selectProject = (id) => {
+  state.selectedProject = id;
+  document.querySelectorAll(".project-tree-node").forEach((el) => el.classList.toggle("active", parseInt(el.dataset.id) === id));
+  renderProjectTasks(id);
+};
+
+window.togglePhase = (phaseId) => {
+  const wrap = document.querySelector(`#${phaseId}`);
+  if (!wrap) return;
+  wrap.classList.toggle("collapsed");
+  const toggle = document.querySelector(`#${phaseId}-toggle`);
+  if (toggle) toggle.style.transform = wrap.classList.contains("collapsed") ? "rotate(-90deg)" : "";
+};
+
+window.showProjectContext = (event, id) => {
+  event.preventDefault();
+  event.stopPropagation();
+  const menu = document.querySelector("#projectContextMenu");
+  if (!menu) return;
+  menu.dataset.projectId = id;
+  menu.style.left = event.clientX + "px";
+  menu.style.top = event.clientY + "px";
+  menu.classList.remove("hidden");
+};
+
+window.openProjectDrawer = () => {
+  const menu = document.querySelector("#projectContextMenu");
+  if (menu) {
+    const id = parseInt(menu.dataset.projectId);
+    if (id) openDrawer("operations", id);
+  }
+};
+
+window.renameProject = async () => {
+  const menu = document.querySelector("#projectContextMenu");
+  if (!menu) return;
+  const id = parseInt(menu.dataset.projectId);
+  if (!id) return;
+  const project = (state.data.operations || []).find(x => x.id === id);
+  if (!project) return;
+  const newName = prompt("请输入新的项目名称：", project.project_name);
+  if (!newName || newName.trim() === project.project_name) return;
+  try {
+    await api(`/api/operations/${id}`, { method: "PUT", body: JSON.stringify({ data: { project_name: newName.trim() } }) });
+    project.project_name = newName.trim();
+    renderProjects();
+    toast("已重命名", "success");
+  } catch (error) {
+    toast("重命名失败：" + error.message, "error");
+  }
+};
+
+window.duplicateProject = async () => {
+  const menu = document.querySelector("#projectContextMenu");
+  if (!menu) return;
+  const id = parseInt(menu.dataset.projectId);
+  if (!id) return;
+  const project = (state.data.operations || []).find(x => x.id === id);
+  if (!project) return;
+  const newName = prompt("请输入副本项目名称：", project.project_name + " - 副本");
+  if (!newName) return;
+  try {
+    const result = await api("/api/operations", {
+      method: "POST",
+      body: JSON.stringify({ data: {
+        project_name: newName.trim(),
+        project_version: project.project_version || "v1.0",
+        project_type: project.project_type || "opportunity",
+        project_status: project.project_status || "",
+        current_stage: project.current_stage || "",
+        owner: project.owner || "慰心",
+        target_customer: project.target_customer || "",
+        customer_need: project.customer_need || "",
+        expected_contract_amount: project.expected_contract_amount || 0,
+        expected_sign_date: project.expected_sign_date || "",
+        sign_probability: project.sign_probability || 0,
+        next_action: project.next_action || "",
+        sop_stage: project.sop_stage || "",
+        execution_progress: project.execution_progress || 0,
+        current_deliverable: project.current_deliverable || "",
+        risks: project.risks || "",
+        notes: project.notes || "",
+        tenant: state.tenant,
+      }}),
+    });
+    // 复制任务
+    const tasks = (state.data.tasks || []).filter(t => t.project_id === id);
+    for (const t of tasks) {
+      await api("/api/tasks", {
+        method: "POST",
+        body: JSON.stringify({ data: {
+          project_id: result.id,
+          phase: t.phase || "",
+          milestone: t.milestone || "",
+          task: t.task || "",
+          owner: t.owner || "",
+          due_date: t.due_date || "",
+          blockers: t.blockers || "",
+          notes: t.notes || "",
+          status: "未开始",
+          priority: t.priority || "P2",
+          sort_order: t.sort_order || 0,
+          tenant: state.tenant,
+        }}),
+      });
+    }
+    toast("已创建副本", "success");
+    await load();
+  } catch (error) {
+    toast("创建副本失败：" + error.message, "error");
+  }
+};
+
+window.hideProjectContext = () => {
+  const menu = document.querySelector("#projectContextMenu");
+  if (menu) menu.classList.add("hidden");
+};
+
+window.openNewProjectModal = () => {
+  document.querySelector("#newProjectModal").classList.remove("hidden");
+};
+
+window.closeNewProjectModal = () => {
+  document.querySelector("#newProjectModal").classList.add("hidden");
+};
+
+function renderProjects() {
+  const items = state.data.operations;
+  if (!state.selectedProject && items.length > 0) {
+    state.selectedProject = items[0].id;
+  }
+  const tasks = state.data.tasks || [];
+  const taskStats = {
+    total: tasks.length,
+    ongoing: tasks.filter(t => t.status === '进行中').length,
+    done: tasks.filter(t => t.status === '已结束').length,
+    pending: tasks.filter(t => t.status === '未开始').length,
+  };
+  document.querySelector("#projects").innerHTML = /*html*/`
+    <div class="grid grid-cols-5 gap-3 mb-4">
+      ${[
+        ["项目总数", items.length, "folder"],
+        ["任务总数", taskStats.total, "list-checks"],
+        ["进行中", taskStats.ongoing, "play-circle"],
+        ["已结束", taskStats.done, "check-circle"],
+        ["未开始", taskStats.pending, "circle"],
+      ].map(([label, value, icon]) => `
+        <div class="metric-card"><span class="flex items-center gap-2 text-xs text-slate-500"><i data-lucide="${icon}" style="width:14px;height:14px"></i>${label}</span><strong class="mt-2 block text-2xl">${value}</strong></div>
+      `).join("")}
+    </div>
+    <div class="flex justify-between items-center mb-3">
+      <div class="flex items-center gap-1" id="taskViewToggle">
+        <button class="btn btn-sm ${state.taskView === 'compact' ? 'btn-primary' : 'btn-ghost'} p-1.5" onclick="setTaskView('compact')" title="标题视图"><i data-lucide="list" style="width:16px;height:16px"></i></button>
+        <button class="btn btn-sm ${state.taskView !== 'compact' ? 'btn-primary' : 'btn-ghost'} p-1.5" onclick="setTaskView('detail')" title="详细视图"><i data-lucide="align-left" style="width:16px;height:16px"></i></button>
+      </div>
+      <button class="btn btn-primary btn-sm" onclick="openTaskFormForSelected()">
+        <i data-lucide="plus"></i>新增任务
+      </button>
+    </div>
+    <div class="project-board">
+      <div class="project-board-body">
+        <div class="project-tree">
+          <div class="project-tree-hd">
+            <span>项目</span>
+            <button class="btn btn-ghost btn-sm rounded-full w-7 h-7 p-0" onclick="openNewProjectModal()" title="新增项目">
+              <i data-lucide="plus" style="width:16px;height:16px"></i>
+            </button>
+          </div>
+          <div class="project-tree-list" id="projectTreeList">
+            ${items.map((x) => `
+              <div class="project-tree-node ${state.selectedProject === x.id ? 'active' : ''}"
+                   data-id="${x.id}"
+                   onclick="selectProject(${x.id})"
+                   oncontextmenu="showProjectContext(event, ${x.id})">
+                <span class="project-tree-icon"><i data-lucide="folder"></i></span>
+                <span class="project-tree-name">${esc(x.project_name)}</span>
+              </div>
+            `).join("")}
+            ${items.length === 0 ? '<div class="project-tree-empty">暂无项目</div>' : ''}
+          </div>
+        </div>
+        <div class="task-feed">
+          ${state.selectedProject ? '<div class="task-feed-body">' + renderTaskListHTML(state.selectedProject) + '</div>' : `
+            <div class="project-empty">
+              <div class="text-center">
+                <i data-lucide="arrow-left" style="width:32px;height:32px;margin:0 auto 12px;color:#cbd5e1"></i>
+                <p>请从左侧选择项目查看台账</p>
+              </div>
+            </div>`}
+        </div>
+      </div>
+    </div>`;
+
+  document.querySelector("#projectContextMenu")?.remove();
+  const menu = document.createElement("div");
+  menu.id = "projectContextMenu";
+  menu.className = "project-context-menu hidden";
+  menu.innerHTML = `<div class="project-context-item" onclick="openProjectDrawer()"><i data-lucide="info"></i>查看项目详情</div><div class="project-context-item" onclick="renameProject()"><i data-lucide="edit-3"></i>重命名项目</div><div class="project-context-item" onclick="duplicateProject()"><i data-lucide="copy"></i>创建副本</div>`;
+  document.body.appendChild(menu);
+  document.removeEventListener("click", hideProjectContext);
+  document.addEventListener("click", hideProjectContext);
+
+  if (state.selectedProject) renderProjectTasks(state.selectedProject);
+  if (window.lucide) window.lucide.createIcons();
+}
+
+function filterPhaseTasks(tasks, phase) {
+  return tasks.filter((t) => t.phase === phase);
+}
+
+function renderTaskListHTML(projectId) {
+  const project = state.data.operations.find((x) => x.id === projectId);
+  if (!project) return "";
+  const tasks = (state.data.tasks || []).filter((t) => t.project_id === projectId);
+  const filtered = tasks;
+  const defaultPhases = ["商务洽谈", "系统上线", "团队分工", "项目交付", "上线推广", "结项验收"];
+  const customPhases = [...new Set(filtered.map(t => t.phase).filter(Boolean))];
+  const phaseOrder = [...defaultPhases];
+  customPhases.forEach(p => { if (!phaseOrder.includes(p)) phaseOrder.push(p); });
+  const phases = phaseOrder.filter(p => filterPhaseTasks(filtered, p).length > 0);
+  const phaseTasks = phases.map(p => ({ phase: p, tasks: filterPhaseTasks(filtered, p) }));
+
+  return `
+    ${phaseTasks.map(({ phase, tasks: pt }) => {
+      if (!pt.length) return "";
+      const phaseId = "phase-" + projectId + "-" + phase.replace(/\s/g, "");
+      return `<div class="task-section">
+        <div class="task-section-hd" onclick="togglePhase('${phaseId}')">
+          <span class="task-section-toggle" id="${phaseId}-toggle"><i data-lucide="chevron-down"></i></span>
+          <span class="task-section-icon"><i data-lucide="layers"></i></span>
+          <span class="task-section-label">${phase}</span>
+          <span class="task-section-n">${pt.length}</span>
+        </div>
+        <div class="task-section-list-wrap" id="${phaseId}">
+          <div class="task-section-list" data-phase="${phase}" ondrop="handleTaskDrop(event, ${projectId}, '${phase}')" ondragover="event.preventDefault(); event.currentTarget.classList.add('drag-over')" ondragleave="event.currentTarget.classList.remove('drag-over')">
+          ${pt.map((t) => `<div class="task-item ${t.status === '已结束' ? 'task-done' : ''} ${t.priority === 'P0' ? 'task-p0' : t.priority === 'P1' ? 'task-p1' : ''} ${state.taskView === 'detail' ? 'task-detail' : ''}" data-id="${t.id}" draggable="true" ondragstart="handleTaskDragStart(event, ${t.id})" ondragend="event.currentTarget.classList.remove('dragging')">
+            <span class="task-grip"><i data-lucide="grip-vertical"></i></span>
+            <span class="task-status-badge status-${esc(t.status) || '未开始'}" onclick="event.stopPropagation(); cycleTaskStatus(${t.id}, ${projectId})" title="点击切换状态">${esc(t.status) || '未开始'}</span>
+            <span class="task-priority-badge priority-${(t.priority || 'P2').toLowerCase()}" onclick="event.stopPropagation(); cycleTaskPriority(${t.id}, ${projectId})" title="点击切换优先级">${esc(t.priority) || 'P2'}</span>
+            <div class="task-content" onclick="openTaskForm(${projectId}, ${t.id})">
+              <span class="task-title">${esc(t.task)}</span>
+              ${state.taskView === 'detail' && t.notes ? '<span class="task-desc">' + esc(t.notes) + '</span>' : ""}
+              ${state.taskView === 'detail' && t.blockers ? '<span class="task-blocker">\u26a0 ' + esc(t.blockers) + '</span>' : ""}
+            </div>
+            <span class="task-meta">${esc(t.owner) || ''}</span>
+            <span class="task-meta text-slate-400">${esc(t.due_date) || ''}</span>
+          </div>`).join("")}
+          </div>
+        </div>
+      </div>`;
+    }).join("")}
+    ${filtered.length === 0 ? '<div class="task-empty">暂无任务，点击上方按钮创建</div>' : ''}
+  `;
+}
+
+function renderProjectTasks(projectId) {
+  const project = state.data.operations.find((x) => x.id === projectId);
+  if (!project) { state.selectedProject = null; renderProjects(); return; }
+  const tasks = (state.data.tasks || []).filter((t) => t.project_id === projectId);
+  const defaultPhases = ["商务洽谈", "系统上线", "团队分工", "项目交付", "上线推广", "结项验收"];
+  const customPhases = [...new Set(tasks.map(t => t.phase).filter(Boolean))];
+  const phases = [...new Set([...defaultPhases, ...customPhases])];
+
+  const body = document.querySelector(".task-feed-body");
+  if (body) body.innerHTML = renderTaskListHTML(projectId);
+  if (window.lucide) window.lucide.createIcons();
+}
+window.openTaskFormForSelected = () => {
+  openTaskForm(state.selectedProject, null);
+};
+
+window.openTaskForm = (projectId, taskId) => {
+  if (!projectId) return;
+  // 确保 drawer 存在
+  let drawer = document.querySelector(`#task-drawer-${projectId}`);
+  if (!drawer) {
+    drawer = document.createElement("div");
+    drawer.id = `task-drawer-${projectId}`;
+    drawer.className = "task-drawer";
+    document.body.appendChild(drawer);
+  }
+  const tasks = (state.data.tasks || []).filter((t) => t.project_id === projectId);
+  const defaultPhases = ["商务洽谈", "系统上线", "团队分工", "项目交付", "上线推广", "结项验收"];
+  const customPhases = [...new Set(tasks.map(t => t.phase).filter(Boolean))];
+  const phases = [...new Set([...defaultPhases, ...customPhases])];
+  const task = taskId ? (state.data.tasks || []).find((t) => t.id === taskId) : null;
+  drawer.innerHTML = `<div class="task-drawer-hd"><span class="task-drawer-title">${task ? "编辑任务" : "新增任务"}</span><div class="flex items-center gap-2">${task ? `<button type="button" class="btn btn-ghost btn-sm text-red-600 hover:bg-red-50" onclick="deleteTask(${projectId})"><i data-lucide="trash-2"></i>删除</button>` : ""}<button class="task-close" onclick="closeTaskDrawer(${projectId})"><i data-lucide="x"></i></button></div></div>
+    <form class="task-drawer-form" onsubmit="submitTaskForm(event, ${projectId})">
+      <input type="hidden" name="task_id" id="task-id-${projectId}" value="${task ? task.id : ''}">
+      <div class="task-field-row">
+        <label class="task-field"><span>任务名称</span><input name="task" required id="task-name-${projectId}" class="form-ctrl" value="${task ? esc(task.task) : ''}"></label>
+        <label class="task-field"><span>任务分组</span><select name="phase" id="task-phase-${projectId}" class="form-ctrl">${phases.map((p) => `<option ${task && task.phase === p ? "selected" : ""}>${p}</option>`).join("")}</select></label>
+      </div>
+      <div class="task-field-row">
+        <label class="task-field"><span>优先级</span><select name="priority" id="task-priority-${projectId}" class="form-ctrl"><option ${task && task.priority === 'P0' ? 'selected' : ''}>P0</option><option ${task && task.priority === 'P1' ? 'selected' : ''}>P1</option><option ${(!task || task.priority === 'P2') ? 'selected' : ''}>P2</option><option ${task && task.priority === 'P3' ? 'selected' : ''}>P3</option></select></label>
+        <label class="task-field"><span>状态</span><select name="status" id="task-status-${projectId}" class="form-ctrl"><option ${(!task || task.status === '未开始') ? 'selected' : ''}>未开始</option><option ${task && task.status === '进行中' ? 'selected' : ''}>进行中</option><option ${task && task.status === '已结束' ? 'selected' : ''}>已结束</option></select></label>
+      </div>
+      <div class="task-field-row">
+        <label class="task-field"><span>负责人</span><input name="owner" id="task-owner-${projectId}" class="form-ctrl" value="${task ? esc(task.owner) : ''}"></label>
+        <label class="task-field"><span>截止时间</span><input name="due_date" type="date" id="task-due-${projectId}" class="form-ctrl" value="${task ? esc(task.due_date) : ''}"></label>
+      </div>
+      <label class="task-field"><span>任务说明</span><textarea name="notes" rows="3" id="task-notes-${projectId}" class="form-ctrl">${task ? esc(task.notes) : ''}</textarea></label>
+      <label class="task-field"><span>卡点&备注</span><textarea name="blockers" rows="2" id="task-blockers-${projectId}" class="form-ctrl" placeholder="风险卡点、依赖项等">${task ? esc(task.blockers) : ''}</textarea></label>
+      <div class="flex justify-end gap-2 mt-4 pt-3 border-t border-slate-100">
+        <button type="button" class="btn btn-ghost btn-sm" onclick="closeTaskDrawer(${projectId})">取消</button>
+        <button type="submit" class="btn btn-primary btn-sm" id="task-submit-btn-${projectId}">${task ? "保存" : "确认新增"}</button>
+      </div>
+    </form>`;
+  drawer.classList.add("open");
+  if (window.lucide) window.lucide.createIcons();
+};
+
+window.closeTaskDrawer = (projectId) => {
+  const drawer = document.querySelector(`#task-drawer-${projectId}`);
+  if (drawer) drawer.classList.remove("open");
+  refreshTaskList(projectId);
+};
+
+window.refreshTaskList = (projectId) => {
+  const body = document.querySelector(".task-feed-body");
+  if (body && state.selectedProject === projectId) {
+    body.innerHTML = renderTaskListHTML(projectId);
+    if (window.lucide) window.lucide.createIcons();
+  }
+};
+
+window.submitTaskForm = async (event, projectId) => {
+  event.preventDefault();
+  const data = Object.fromEntries(new FormData(event.currentTarget).entries());
+  data.project_id = Number(projectId);
+  data.tenant = state.tenant;
+  const taskId = data.task_id;
+  delete data.task_id;
+  try {
+    if (taskId) {
+      await api(`/api/tasks/${taskId}`, { method: "PUT", body: JSON.stringify({ data }) });
+      const task = (state.data.tasks || []).find(t => t.id === parseInt(taskId));
+      if (task) Object.assign(task, data);
+      if (data.task) logActivity("task", taskId, "更新了任务「" + data.task + "」");
+      closeTaskDrawer(projectId);
+    } else {
+      const result = await api("/api/tasks", { method: "POST", body: JSON.stringify({ data }) });
+      if (result.id && data.task) logActivity("task", result.id, "创建了任务「" + data.task + "」");
+      closeTaskDrawer(projectId);
+      await load();
+    }
+  } catch (error) {
+    toast("保存失败：" + error.message, "error");
+  }
+};
+
+window.cycleTaskStatus = async (taskId, projectId) => {
+  const tasks = state.data.tasks || [];
+  const task = tasks.find((t) => t.id === taskId);
+  if (!task) return;
+  const statuses = ["未开始", "进行中", "已结束"];
+  const current = statuses.indexOf(task.status) >= 0 ? task.status : "未开始";
+  const newStatus = statuses[(statuses.indexOf(current) + 1) % statuses.length];
+  try {
+    await api(`/api/tasks/${taskId}`, { method: "PUT", body: JSON.stringify({ data: { status: newStatus } }) });
+    task.status = newStatus;
+    const row = document.querySelector(`.task-item[data-id="${taskId}"]`);
+    if (row) {
+      row.classList.toggle("task-done", newStatus === "已结束");
+      const badge = row.querySelector(".task-status-badge");
+      if (badge) {
+        badge.textContent = newStatus;
+        badge.className = "task-status-badge status-" + newStatus;
+      }
+    }
+  } catch (error) {
+    toast("更新失败：" + error.message, "error");
+  }
+};
+
+window.cycleTaskPriority = async (taskId, projectId) => {
+  const tasks = state.data.tasks || [];
+  const task = tasks.find((t) => t.id === taskId);
+  if (!task) return;
+  const priorities = ["P0", "P1", "P2", "P3"];
+  const current = priorities.indexOf(task.priority) >= 0 ? task.priority : "P2";
+  const newPriority = priorities[(priorities.indexOf(current) + 1) % priorities.length];
+  try {
+    await api(`/api/tasks/${taskId}`, { method: "PUT", body: JSON.stringify({ data: { priority: newPriority } }) });
+    task.priority = newPriority;
+    const row = document.querySelector(`.task-item[data-id="${taskId}"]`);
+    if (row) {
+      row.classList.remove("task-p0", "task-p1");
+      if (newPriority === "P0") row.classList.add("task-p0");
+      else if (newPriority === "P1") row.classList.add("task-p1");
+      const badge = row.querySelector(".task-priority-badge");
+      if (badge) {
+        badge.textContent = newPriority;
+        badge.className = "task-priority-badge priority-" + newPriority.toLowerCase();
+      }
+    }
+  } catch (error) {
+    toast("更新失败：" + error.message, "error");
+  }
+};
+
+window.deleteTask = async (projectId) => {
+  const taskId = document.querySelector(`#task-id-${projectId}`).value;
+  if (!taskId) return;
+  if (!confirm("确认删除该任务？此操作不可撤销。")) return;
+  try {
+    const task = (state.data.tasks || []).find(t => t.id === parseInt(taskId));
+    const taskName = task ? task.task : "";
+    await api(`/api/tasks/${taskId}`, { method: "DELETE" });
+    if (taskName) logActivity("task", taskId, "删除了任务「" + taskName + "」");
+    closeTaskDrawer(projectId);
+    state.data.tasks = (state.data.tasks || []).filter(t => t.id !== parseInt(taskId));
+    const row = document.querySelector(`.task-item[data-id="${taskId}"]`);
+    if (row) row.remove();
+  } catch (error) {
+    toast("删除失败：" + error.message, "error");
+  }
+};
+
+// 拖拽排序
+let dragTaskId = null;
+window.handleTaskDragStart = (event, taskId) => {
+  dragTaskId = taskId;
+  event.currentTarget.classList.add("dragging");
+  event.dataTransfer.effectAllowed = "move";
+};
+
+window.handleTaskDrop = async (event, projectId, phase) => {
+  event.preventDefault();
+  event.currentTarget.classList.remove("drag-over");
+  const target = event.currentTarget;
+  if (!dragTaskId) return;
+  const dragged = document.querySelector(`.task-item[data-id="${dragTaskId}"]`);
+  if (!dragged) return;
+  const afterElement = getDragAfterElement(target, event.clientY);
+  if (afterElement) {
+    target.insertBefore(dragged, afterElement);
+  } else {
+    target.appendChild(dragged);
+  }
+  dragged.classList.remove("dragging");
+  const rows = [...target.querySelectorAll(".task-item")];
+  const updates = rows.map((row, i) => ({ id: parseInt(row.dataset.id), sort_order: i }));
+  try {
+    await api(`/api/tasks/batch-sort`, { method: "POST", body: JSON.stringify({ items: updates }) });
+  } catch (e) { /* non-critical */ }
+  dragTaskId = null;
+};
+
+function getDragAfterElement(container, y) {
+  const elements = [...container.querySelectorAll(".task-item:not(.dragging)")];
+  return elements.reduce((closest, child) => {
+    const box = child.getBoundingClientRect();
+    const offset = y - box.top - box.height / 2;
+    if (offset < 0 && offset > closest.offset) {
+      return { offset: offset, element: child };
+    } else {
+      return closest;
+    }
+  }, { offset: Number.NEGATIVE_INFINITY }).element;
+}

static/modules/proposals.js

@@ -0,0 +1,333 @@
+// proposals.js — 业务方案 + 文件管理
+
+// 标准资料库固定 7 项
+const STANDARD_PROPOSALS = [
+  "业务方案-医生版",
+  "业务方案-药企版",
+  "服务清单与报价单",
+  "患者服务清单",
+  "医生项目清单与劳务报价",
+  "项目执行 SOP",
+  "财务结算流程",
+];
+
+// 确保标准资料库已初始化（首次进入时创建）
+async function ensureStandardProposals() {
+  const existing = (state.data.proposals || []).filter(p => p.proposal_type === "标准资料");
+  const missing = STANDARD_PROPOSALS.filter(name => !existing.find(p => p.customer_or_project_name === name));
+  if (missing.length === 0) return;
+  for (const name of missing) {
+    try {
+      await api("/api/proposals", {
+        method: "POST",
+        body: JSON.stringify({ data: {
+          customer_or_project_name: name,
+          proposal_type: "标准资料",
+          notes: "",
+          version: "v1.0",
+          status: "已归档",
+          created_date: new Date().toISOString().slice(0, 10),
+          tenant: state.tenant,
+        }}),
+      });
+    } catch (e) { /* ignore */ }
+  }
+  await load();
+}
+
+window.switchProposalTab = (tab) => {
+  state.proposalTab = tab;
+  renderProposals();
+};
+
+function renderProposals() {
+  const items = state.data.proposals || [];
+  const standardItems = items.filter(p => p.proposal_type === "标准资料");
+  const otherItems = items.filter(p => p.proposal_type !== "标准资料");
+  const isStandard = state.proposalTab === "standard";
+
+  document.querySelector("#proposals").innerHTML = `<div class="grid gap-4">
+    <div class="finance-tabs" style="padding:0;border-bottom:1px solid #e2e8f0">
+      <button class="finance-tab${isStandard ? ' active' : ''}" style="font-size:14px;font-weight:600" onclick="switchProposalTab('standard')">标准资料库</button>
+      <button class="finance-tab${!isStandard ? ' active' : ''}" style="font-size:14px;font-weight:600" onclick="switchProposalTab('other')">其他资料</button>
+    </div>
+    <div class="flex justify-end">${!isStandard ? `<button class="btn btn-primary btn-sm" onclick="openProposalModal()"><i data-lucide="plus"></i>新增方案</button>` : ''}</div>
+    ${isStandard ? `<div class="flex items-start gap-2 rounded-lg bg-blue-50 border border-blue-100 px-4 py-3 text-sm text-blue-700"><i data-lucide="info" style="width:16px;height:16px;flex-shrink:0;margin-top:1px"></i><span>这是每一条 OPC 线，必须要梳理清楚的 7 份资料，项目不可以删除，只可以更新附件，请大家将最新的材料上传</span></div>` : `<div class="flex items-start gap-2 rounded-lg bg-emerald-50 border border-emerald-100 px-4 py-3 text-sm text-emerald-700"><i data-lucide="lightbulb" style="width:16px;height:16px;flex-shrink:0;margin-top:1px"></i><span>在这里新建，并且上传您希望与团队其他成员共享的资料</span></div>`}
+    ${isStandard ? renderStandardTable(standardItems) : renderOtherTable(otherItems)}
+  </div>
+  <div id="proposalModal" class="hidden fixed inset-0 z-50 flex items-center justify-center bg-black/40" onclick="closeProposalModal()">
+    <div class="bg-white rounded-2xl shadow-2xl w-full max-w-md mx-4" onclick="event.stopPropagation()">
+      <div class="flex items-center justify-between px-6 py-4 border-b border-slate-100">
+        <h3 class="text-lg font-semibold text-slate-800">新增方案</h3>
+        <button class="btn btn-ghost btn-sm rounded-full w-8 h-8 p-0" onclick="closeProposalModal()"><i data-lucide="x"></i></button>
+      </div>
+      <form onsubmit="submitProposal(event)" class="p-6 grid gap-4">
+        <label class="block"><span class="text-xs font-medium text-slate-500">方案名称</span><input name="customer_or_project_name" required class="form-ctrl mt-1"></label>
+        <label class="block"><span class="text-xs font-medium text-slate-500">方案类型</span><select name="proposal_type" class="form-ctrl mt-1">${["业务方案","报价与成本","SOP","PRD","设计稿","财务流程","其他"].map(t => `<option>${t}</option>`).join("")}</select></label>
+        <label class="block"><span class="text-xs font-medium text-slate-500">方案说明</span><textarea name="notes" rows="3" class="form-ctrl mt-1"></textarea></label>
+        <div class="flex justify-end gap-3 pt-3 border-t border-slate-100">
+          <button type="button" class="btn btn-ghost btn-sm" onclick="closeProposalModal()">取消</button>
+          <button type="submit" class="btn btn-primary btn-sm">创建</button>
+        </div>
+      </form>
+    </div>
+  </div>`;
+  if (window.lucide) window.lucide.createIcons();
+}
+
+// 标准资料库：按固定顺序排序，点击行打开附件抽屉（不含删除按钮）
+function renderStandardTable(items) {
+  const sorted = STANDARD_PROPOSALS.map(name => items.find(p => p.customer_or_project_name === name)).filter(Boolean);
+  const rows = sorted.map((p) => {
+    const fileCount = (p.files || []).length;
+    return `<tr class="border-b border-slate-100 hover:bg-slate-50 cursor-pointer" onclick="openStandardProposalDrawer(${p.id})">
+      <td class="p-3 text-sm font-medium text-slate-800">${esc(p.customer_or_project_name)}</td>
+      <td class="p-3 text-sm text-slate-500 text-center">${fileCount} 个文件</td>
+      <td class="p-3 text-sm text-slate-500 text-center">${(p.created_at || "").slice(0,10) || "—"}</td>
+    </tr>`;
+  }).join("");
+  return `<div class="bg-white rounded-lg border border-slate-200 overflow-hidden">
+    <div class="overflow-x-auto">
+      <table class="w-full text-sm">
+        <thead><tr class="bg-slate-50 border-b border-slate-200">
+          <th class="p-3 text-left font-semibold text-slate-600">资料名称</th>
+          <th class="p-3 text-center font-semibold text-slate-600">附件</th>
+          <th class="p-3 text-center font-semibold text-slate-600">创建日期</th>
+        </tr></thead>
+        <tbody>${rows}</tbody>
+      </table>
+    </div>
+  </div>`;
+}
+
+// 其他资料：原有表格 + 行点击打开抽屉
+function renderOtherTable(items) {
+  const rows = items.map((p) => [
+    `<strong>${esc(p.customer_or_project_name)}</strong>`,
+    p.proposal_type || "业务方案",
+    text(p.notes || ""),
+    (p.created_at || "").slice(0, 10) || "\u2014",
+  ]);
+  return renderTable(["方案名称", "方案类型", "方案说明", "日期"], rows, items.map((p) => ({ resource: "proposals", id: p.id })));
+}
+
+// 标准资料专用抽屉（附件管理 + 评论，不能编辑字段、不能删除项目）
+window.openStandardProposalDrawer = (id) => {
+  const item = (state.data.proposals || []).find(p => p.id === id);
+  if (!item) return;
+  const drawer = document.querySelector("#drawer");
+  const title = esc(item.customer_or_project_name);
+  const followupTarget = "proposal";
+  drawer.innerHTML = `<div class="drawer-panel"><div class="sticky top-0 z-10 flex items-center justify-between border-b border-slate-200 bg-white/95 px-5 py-3 backdrop-blur"><div><p class="text-[10px] font-semibold uppercase tracking-[0.18em] text-slate-400">标准资料</p><div class="flex items-center gap-2"><h2 class="drawer-title text-[17px] font-semibold leading-6 text-slate-900">${title}</h2><span id="drawerSaveStatus" class="save-status"></span></div></div><button class="btn btn-ghost btn-sm" onclick="closeDrawer()">关闭</button></div><div class="grid gap-5 p-5">
+    <section>
+      <h3 class="drawer-section-title">附件管理</h3>
+      ${fileGroup("proposal", item.id, "", "附件", item.files || [])}
+    </section>
+    ${followupTarget ? `<section>
+      <h3 class="drawer-section-title">活动 / 跟进</h3>
+      <div class="grid gap-2">${(item.followups || []).map((f) => `<div class="activity-item"><div class="activity-icon"><i data-lucide="message-square"></i></div><div class="min-w-0 flex-1"><div class="flex justify-between gap-3 text-[12px] text-slate-500"><span>${esc(f.follower)} · ${esc(f.follow_up_method)}</span><span>${esc(f.followed_at)}</span></div><div class="mt-1 leading-5 text-slate-800 rich-content" data-html="${encodeURIComponent(f.content || '')}"></div>${f.next_action ? `<p class="mt-1 leading-5 text-blue-700">下一步：${text(f.next_action)}</p>` : ""}</div><button class="activity-delete" onclick="deleteFollowup(event, ${f.id}, 'proposals', ${item.id})" title="删除评论"><i data-lucide="trash-2"></i></button></div>`).join("")}</div>
+      <form class="comment-box mt-3" onsubmit="submitStandardComment(event, ${item.id})">
+        <div class="squire-toolbar">
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('bold')" title="加粗"><i data-lucide="bold"></i></button>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('italic')" title="斜体"><i data-lucide="italic"></i></button>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('underline')" title="下划线"><i data-lucide="underline"></i></button>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('strikethrough')" title="删除线"><i data-lucide="strikethrough"></i></button>
+          <span class="squire-sep"></span>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('makeUnorderedList')" title="无序列表"><i data-lucide="list"></i></button>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('makeOrderedList')" title="有序列表"><i data-lucide="list-ordered"></i></button>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('blockquote')" title="引用"><i data-lucide="quote"></i></button>
+          <span class="squire-sep"></span>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('undo')" title="撤销"><i data-lucide="undo"></i></button>
+          <button type="button" class="squire-btn" onmousedown="event.preventDefault();squireCmd('redo')" title="重做"><i data-lucide="redo"></i></button>
+        </div>
+        <div class="squire-editor" id="squire_standard_${item.id}" placeholder="添加评论"></div>
+        <div class="comment-toolbar">
+          <span class="comment-hint">支持富文本编辑</span>
+          <button class="btn btn-primary btn-sm comment-submit" type="submit">评论</button>
+        </div>
+      </form>
+    </section>` : ""}
+    <div id="uploadTaskList"></div>
+  </div></div>`;
+  drawer.classList.add("open");
+  if (window.lucide) window.lucide.createIcons();
+  renderUploadTasks();
+  // 渲染富文本评论内容
+  drawer.querySelectorAll(".rich-content").forEach((el) => {
+    const html = el.dataset.html;
+    if (html) el.innerHTML = decodeURIComponent(html);
+  });
+  // 初始化 Squire 编辑器
+  const squireDiv = drawer.querySelector(".squire-editor");
+  if (squireDiv && window.Squire) {
+    const sid = squireDiv.id;
+    if (window.squireInstances[sid]) window.squireInstances[sid].destroy();
+    const sq = new Squire(squireDiv, { blockTag: "P" });
+    window.squireInstances[sid] = sq;
+    squireDiv.addEventListener("focus", () => squireDiv.classList.add("focused"));
+    squireDiv.addEventListener("blur", () => {
+      if (!squireDiv.textContent.trim()) squireDiv.classList.remove("focused");
+    });
+  }
+};
+
+// 标准资料评论提交（提交后重新打开标准资料抽屉）
+window.submitStandardComment = async (event, targetId) => {
+  event.preventDefault();
+  const form = event.currentTarget;
+  const editorDiv = form.querySelector(".squire-editor");
+  const sq = window.squireInstances[editorDiv.id];
+  const content = sq ? sq.getHTML().trim() : "";
+  if (!content || content === "<div><br></div>" || content === "<p><br></p>") return;
+  const button = form.querySelector(".comment-submit");
+  button.disabled = true;
+  button.textContent = "发送中…";
+  await api(`/api/followups/proposal/${targetId}`, { method: "POST", body: JSON.stringify({ data: { content } }) });
+  await load();
+  openStandardProposalDrawer(targetId);
+};
+
+window.openProposalModal = () => {
+  document.querySelector("#proposalModal").classList.remove("hidden");
+};
+window.closeProposalModal = () => {
+  document.querySelector("#proposalModal").classList.add("hidden");
+};
+window.submitProposal = async (event) => {
+  event.preventDefault();
+  const form = event.currentTarget;
+  const data = Object.fromEntries(new FormData(form).entries());
+  data.tenant = state.tenant;
+  if (!data.version) data.version = "v1.0";
+  if (!data.description) data.description = "";
+  if (!data.status) data.status = "草稿";
+  if (!data.created_date) data.created_date = new Date().toISOString().slice(0, 10);
+  try {
+    const result = await api("/api/proposals", { method: "POST", body: JSON.stringify({ data }) });
+    if (result.id && data.customer_or_project_name) logActivity("proposal", result.id, "创建了方案「" + data.customer_or_project_name + "」");
+    form.reset();
+    closeProposalModal();
+    await load();
+  } catch (error) {
+    toast("保存失败：" + error.message, "error");
+  }
+};
+
+// 文件管理
+function fileGroup(module, ownerId, version, category, files) {
+  return `<div class="rounded-md border border-slate-200 px-3 py-2">
+    <div class="flex items-center justify-between gap-3"><p class="text-[13px] font-semibold text-slate-800">${category}</p><label class="inline-flex cursor-pointer items-center gap-1 rounded-md border border-slate-200 px-2 py-1 text-[12px] font-medium text-slate-600 hover:bg-slate-50"><i data-lucide="upload"></i>上传<input class="hidden" type="file" onchange="uploadFile(event,'${module}',${ownerId},'${version}','${category}')"></label></div>
+    <div class="mt-2 grid gap-1.5">${files.length ? files.map(fileItem).join("") : `<p class="text-[12px] text-slate-400">暂无文件</p>`}</div>
+  </div>`;
+}
+
+function fileItem(file) {
+  return `<div class="flex items-center justify-between gap-2 rounded-md bg-slate-50 px-2 py-1.5 text-[13px]"><div class="min-w-0 flex-1"><p class="truncate font-medium text-slate-800">${esc(file.file_name)}</p><div class="mt-0.5 flex gap-3"><a class="file-link inline-flex items-center gap-1 text-slate-600" href="/api/files/${file.id}/content?inline=false"><i data-lucide="download"></i>下载</a></div></div><button class="btn btn-ghost btn-sm text-red-600" onclick="deleteFile(${file.id})" title="删除"><i data-lucide="trash-2"></i></button></div>`;
+}
+
+window.deleteFile = async (fileId) => {
+  if (!confirm("确认删除此文件？")) return;
+  await api(`/api/files/${fileId}`, { method: "DELETE" });
+  // 优先在当前打开的抽屉中查找并刷新
+  const drawer = document.querySelector("#drawer.open");
+  if (drawer) {
+    const uploadList = drawer.querySelector("#uploadTaskList");
+    // 通过 file.id 反查所属 item
+    for (const listKey of ["proposals", "operations", "sales", "products"]) {
+      if (!state.data[listKey]) continue;
+      for (const item of state.data[listKey]) {
+        if (!item.files) continue;
+        const idx = item.files.findIndex(f => f.id === fileId);
+        if (idx !== -1) {
+          item.files.splice(idx, 1);
+          // 判断是标准资料还是普通抽屉
+          if (item.proposal_type === "标准资料") {
+            openStandardProposalDrawer(item.id);
+          } else {
+            openDrawer(listKey, item.id);
+          }
+          return;
+        }
+      }
+    }
+  }
+};
+
+window.uploadFile = (event, module, ownerId, version, category) => {
+  const file = event.target.files[0];
+  if (!file) return;
+  const taskId = Date.now();
+  const task = { id: taskId, name: file.name, progress: 0, xhr: null };
+  state.uploadTasks.push(task);
+  renderUploadTasks();
+
+  const form = new FormData();
+  form.append("module", module);
+  form.append("owner_id", ownerId);
+  form.append("owner_version", version);
+  form.append("file_category", category);
+  form.append("file", file);
+
+  const xhr = new XMLHttpRequest();
+  task.xhr = xhr;
+  xhr.upload.addEventListener("progress", (e) => {
+    if (e.lengthComputable) {
+      task.progress = Math.round((e.loaded / e.total) * 100);
+      renderUploadTasks();
+    }
+  });
+  xhr.addEventListener("load", () => {
+    if (xhr.status === 200) {
+      task.progress = 100;
+      renderUploadTasks();
+      const result = JSON.parse(xhr.responseText);
+      const resourceMap = { proposal: "proposals", operation: "operations", sales: "sales", product: "products" };
+      const listKey = resourceMap[module];
+      if (listKey && state.data[listKey]) {
+        const item = state.data[listKey].find(x => x.id === ownerId);
+        if (item) {
+          if (!item.files) item.files = [];
+          item.files.push({ id: result.id, file_name: file.name, file_category: category });
+          // 刷新当前抽屉
+          if (item.proposal_type === "标准资料") {
+            openStandardProposalDrawer(item.id);
+          } else if (document.querySelector("#drawer.open")) {
+            openDrawer(listKey, item.id);
+          }
+        }
+      }
+      setTimeout(() => {
+        state.uploadTasks = state.uploadTasks.filter(t => t.id !== taskId);
+        renderUploadTasks();
+      }, 1500);
+    }
+  });
+  xhr.addEventListener("error", () => {
+    toast("上传失败：" + file.name, "error");
+    state.uploadTasks = state.uploadTasks.filter(t => t.id !== taskId);
+    renderUploadTasks();
+  });
+  xhr.open("POST", "/api/files/upload");
+  xhr.send(form);
+};
+
+window.cancelUpload = (taskId) => {
+  const task = state.uploadTasks.find(t => t.id === taskId);
+  if (task && task.xhr) task.xhr.abort();
+  state.uploadTasks = state.uploadTasks.filter(t => t.id !== taskId);
+  renderUploadTasks();
+};
+
+window.renderUploadTasks = () => {
+  const el = document.querySelector("#uploadTaskList");
+  if (!el) return;
+  el.innerHTML = state.uploadTasks.map(t => `
+    <div class="upload-task">
+      <span class="upload-task-name">${esc(t.name)}</span>
+      <div class="upload-task-bar"><div class="upload-task-fill" style="width:${t.progress}%"></div></div>
+      <span class="upload-task-pct">${t.progress}%</span>
+      <button class="upload-task-cancel" onclick="cancelUpload(${t.id})"><i data-lucide="x"></i></button>
+    </div>
+  `).join("");
+  if (window.lucide) window.lucide.createIcons();
+};

static/modules/utils.js

@@ -0,0 +1,252 @@
+// utils.js — 全局工具函数与共享状态
+
+const state = {
+  active: "home",
+  data: null,
+  tenant: "科普·无界",
+  opFilter: "all",
+  finFilter: "projects",
+  selectedProject: null,
+  taskQuery: "",
+  taskView: localStorage.getItem("opc-task-view") || "detail",
+  finView: "overview",
+  finSort: null, // { key: 'col', asc: true }
+  planFilter: "projects",
+  planView: "overview",
+  planSort: null,
+  proposalTab: "standard",
+  chart: null,
+  chart2: null,
+  chart3: null,
+  chart4: null,
+  productPlatform: "all",
+  uploadTasks: [],
+  expenseFilter: "全部",
+  expenseView: "total",
+  expenseMonth: "",
+  expenseQuarter: "",
+};
+
+const money = (value) => `${Number(value || 0).toLocaleString("zh-CN")} 元`;
+const text = (value) => value === undefined || value === null || value === "" ? "—" : esc(value);
+
+function escapeHtml(str) { return String(str || "").replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;"); }
+const html = escapeHtml;
+const esc = escapeHtml;
+
+// Toast 通知
+function toast(message, type = "info", duration = 3000) {
+  let container = document.querySelector(".toast-container");
+  if (!container) {
+    container = document.createElement("div");
+    container.className = "toast-container";
+    document.body.appendChild(container);
+  }
+  const el = document.createElement("div");
+  el.className = `toast toast-${type}`;
+  const icon = type === "success" ? "check-circle" : type === "error" ? "alert-circle" : "info";
+  el.innerHTML = `<i data-lucide="${icon}" style="width:16px;height:16px;flex-shrink:0"></i><span>${esc(message)}</span>`;
+  container.appendChild(el);
+  if (window.lucide) window.lucide.createIcons();
+  setTimeout(() => {
+    el.classList.add("fade-out");
+    setTimeout(() => el.remove(), 250);
+  }, duration);
+}
+window.toast = toast;
+
+function monthOptions(selected = '') {
+  const now = new Date();
+  const startYear = now.getFullYear() - 1;
+  const endYear = now.getFullYear() + 1;
+  let options = selected ? '' : '<option value="">选择月份</option>';
+  for (let y = startYear; y <= endYear; y++) {
+    for (const m of ["01","02","03","04","05","06","07","08","09","10","11","12"]) {
+      const val = y + "-" + m;
+      const sel = val === selected ? " selected" : "";
+      options += `<option value="${val}"${sel}>${val}</option>`;
+    }
+  }
+  return options;
+}
+
+async function api(path, options = {}) {
+  const response = await fetch(path, {
+    headers: options.body instanceof FormData ? undefined : { "Content-Type": "application/json" },
+    ...options,
+  });
+  const data = await response.json();
+  if (!response.ok) throw new Error(data.error || "请求失败");
+  return data;
+}
+
+async function logActivity(targetType, targetId, content) {
+  try {
+    await api(`/api/followups/${targetType}/${targetId}`, {
+      method: "POST",
+      body: JSON.stringify({ data: { content, tenant: state.tenant } }),
+    });
+  } catch (e) { /* non-critical */ }
+}
+
+function badge(value) {
+  const val = String(value || "—");
+  let cls = "badge-slate";
+  if (["P0", "有风险", "已丢单", "已延期"].includes(val)) cls = "badge-red";
+  if (["P1", "方案中", "方案已提交", "商务谈判", "待客户确认"].includes(val)) cls = "badge-amber";
+  if (["已签约", "已上线", "已完成", "已归档"].includes(val)) cls = "badge-green";
+  if (["execution", "已签约执行项目"].includes(val)) cls = "badge-blue";
+  return `<span class="badge ${cls}">${val === "execution" ? "已签约执行项目" : val === "opportunity" ? "业务机会项目" : val}</span>`;
+}
+
+function card(content, cls = "") {
+  return `<section class="card ${cls}">${content}</section>`;
+}
+
+function renderTable(headers, rows, rowClicks) {
+  const trAttrs = (rowClicks || []).map((rc) => rc ? `onclick="openDrawer('${rc.resource}', ${rc.id})" class="clickable-row"` : "");
+  return card(`
+    <div class="overflow-x-auto">
+      <table>
+        <thead><tr>${headers.map((h) => `<th>${h}</th>`).join("")}</tr></thead>
+        <tbody>${rows.map((row, i) => `<tr ${trAttrs[i] || ""}>${row.map((c) => `<td>${c}</td>`).join("")}</tr>`).join("")}</tbody>
+      </table>
+    </div>
+  `);
+}
+
+async function load() {
+  state.data = await api(`/api/bootstrap?tenant=${encodeURIComponent(state.tenant)}`);
+  // 首次加载时确保标准资料库 7 项已初始化
+  if (typeof ensureStandardProposals === "function") {
+    const existing = (state.data.proposals || []).filter(p => p.proposal_type === "标准资料");
+    const missingCount = 7 - existing.length;
+    if (missingCount > 0) {
+      await ensureStandardProposals();
+      return;  // ensureStandardProposals 内部会再次 render
+    }
+  }
+  render();
+}
+
+function switchTab(tab) {
+  state.active = tab;
+  localStorage.setItem("opc-active-tab", tab);
+  document.querySelectorAll(".sidebar-tab").forEach((btn) => btn.classList.toggle("active", btn.dataset.tab === tab));
+  document.querySelectorAll(".panel").forEach((panel) => panel.classList.toggle("active", panel.id === tab));
+
+  // 更新顶部标题
+  const titles = { home: 'OPC 工作台', finance: '实际管理', plan: '计划管理', projects: '重点工作台账', proposals: '业务方案', products: '版本与运营', performance: '季度绩效考核' };
+  const titleEl = document.querySelector('#workspaceTitle');
+  if (titleEl) titleEl.textContent = titles[tab] || state.tenant + ' OPC 工作台';
+
+  render();
+}
+
+function updateSidebarTabs() {
+  const isOverview = state.tenant === "总工作台";
+  document.querySelectorAll(".sidebar-tab").forEach((btn) => {
+    const tab = btn.dataset.tab;
+    if (isOverview && tab !== "home") {
+      btn.style.display = "none";
+    } else {
+      btn.style.display = "";
+    }
+  });
+}
+
+function render() {
+  if (!state.data) return;
+  renderHome();
+  renderProjects();
+  renderProposals();
+  renderProducts();
+  renderPerformance();
+  renderFinance();
+  renderPlan();
+  if (window.lucide) window.lucide.createIcons();
+}
+
+function renderActive() {
+  if (!state.data) return;
+  const tab = state.active;
+  if (tab === "home") renderHome();
+  else if (tab === "projects") renderProjects();
+  else if (tab === "proposals") renderProposals();
+  else if (tab === "products") renderProducts();
+  else if (tab === "performance") renderPerformance();
+  else if (tab === "finance") renderFinance();
+  else if (tab === "plan") renderPlan();
+  if (window.lucide) window.lucide.createIcons();
+}
+
+window.setTaskView = (view) => {
+  state.taskView = view;
+  localStorage.setItem("opc-task-view", view);
+  // 更新按钮选中状态
+  const toggle = document.querySelector("#taskViewToggle");
+  if (toggle) {
+    toggle.querySelectorAll("button").forEach((btn, i) => {
+      const isCompact = i === 0;
+      btn.className = `btn btn-sm ${(isCompact ? view === 'compact' : view !== 'compact') ? 'btn-primary' : 'btn-ghost'} p-1.5`;
+    });
+  }
+  if (state.selectedProject) {
+    const body = document.querySelector(".task-feed-body");
+    if (body) body.innerHTML = renderTaskListHTML(state.selectedProject);
+    if (window.lucide) window.lucide.createIcons();
+  }
+};
+
+window.switchTab = switchTab;
+
+window.setFinView = (view) => {
+  state.finView = view;
+  renderFinance();
+};
+window.setFinQuarter = (q) => { state.finQuarter = q; state.finView = 'quarterly'; renderFinance(); };
+window.setFinMonth = (month) => { state.finMonth = month; state.finView = 'monthly'; renderFinance(); };
+window.switchFinFilter = (filter) => {
+  state.finFilter = filter;
+  state.finSort = null;
+  renderFinance();
+};
+
+window.setFinSort = (key) => {
+  if (!state.finSort) state.finSort = { key: null, asc: true };
+  if (state.finSort.key === key) { state.finSort.asc = !state.finSort.asc; }
+  else { state.finSort.key = key; state.finSort.asc = true; }
+  renderFinance();
+};
+window.setPlanView = (view) => {
+  state.planView = view;
+  renderPlan();
+};
+window.setPlanQuarter = (q) => { state.planQuarter = q; state.planView = 'quarterly'; renderPlan(); };
+window.setPlanMonth = (month) => { state.planMonth = month; state.planView = 'monthly'; renderPlan(); };
+window.switchPlanFilter = (filter) => {
+  state.planFilter = filter;
+  state.planSort = null;
+  renderPlan();
+};
+window.setPlanSort = (key) => {
+  if (!state.planSort) state.planSort = { key: null, asc: true };
+  if (state.planSort.key === key) { state.planSort.asc = !state.planSort.asc; }
+  else { state.planSort.key = key; state.planSort.asc = true; }
+  renderPlan();
+};
+window.switchTenant = (tenant) => {
+  state.tenant = tenant;
+  state.selectedProject = null;
+  localStorage.setItem("opc-active-tenant", tenant);
+  document.querySelector("#workspaceTitle").textContent = tenant.replace("·无界", "") + " OPC 工作台";
+  const label = document.querySelector("#currentTenantLabel");
+  if (label) { label.textContent = tenant.replace("·无界", "") || "工作台"; label.title = tenant; }
+  updateSidebarTabs();
+  if (tenant === "总工作台") switchTab("home");
+  load();
+};
+window.doLogout = async () => {
+  await api("/api/auth/logout", { method: "POST" });
+  location.href = "/login";
+};

static/styles.css

@@ -1,5 +1,6 @@
 body {
-  min-width: 1180px;
+  min-width: 1400px;
+  overflow-x: auto;
   font-family: Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "PingFang SC", "Microsoft YaHei", sans-serif;
 }
 
@@ -32,25 +33,30 @@ body {
   background: rgba(96,165,250,0.15);
 }
 
-.tabs {
+.sidebar-tab {
   display: flex;
-  gap: 4px;
-}
-
-.tabs button {
+  flex-direction: column;
   align-items: center;
-  border-bottom: 2px solid transparent;
-  color: #64748b;
-  display: inline-flex;
-  font-size: 14px;
-  font-weight: 600;
-  gap: 8px;
-  padding: 14px 16px;
+  padding: 8px 4px;
+  border-radius: 8px;
+  cursor: pointer;
+  color: #94a3b8;
+  transition: all 0.15s ease;
+  width: 100%;
 }
 
-.tabs button.active {
-  border-bottom-color: #1d4ed8;
-  color: #1d4ed8;
+.sidebar-tab:hover {
+  background: #1e293b;
+  color: #cbd5e1;
+}
+
+.sidebar-tab.active {
+  background: #1e293b;
+  color: #60a5fa;
+}
+
+.sidebar-tab.active i {
+  color: #60a5fa;
 }
 
 .panel {
@@ -89,6 +95,33 @@ body {
   border-bottom-color: #1d4ed8;
 }
 
+/* 详情弹窗固定高度，tab 切换不抖动 */
+#financeModal > div, #planModal > div {
+  height: 650px;
+  display: flex;
+  flex-direction: column;
+}
+#financeModal .finance-tabs, #planModal .finance-tabs { flex-shrink: 0; }
+#financeModal form, #planModal form {
+  flex: 1;
+  min-height: 0;
+  display: flex;
+  flex-direction: column;
+  overflow: hidden;
+}
+#financeModal .finance-tab-body, #planModal .finance-tab-body {
+  flex: 1;
+  min-height: 0;
+  overflow-y: auto;
+  padding: 32px;
+}
+#financeModal .finance-form-actions, #planModal .finance-form-actions {
+  flex-shrink: 0;
+  background: #fff;
+  padding: 12px 32px 8px;
+  border-top: 1px solid #f1f5f9;
+}
+
 /* 项目统一卡片布局 */
 .project-board {
   background: #fff;
@@ -246,6 +279,7 @@ body {
   flex-direction: column;
   overflow-y: auto;
   min-width: 0;
+  border-left: 1px solid #edf2f7;
 }
 
 .task-feed-hd {
@@ -264,7 +298,9 @@ body {
 
 .task-section {
   border-bottom: 1px solid #edf2f7;
+  border-top: 1px solid #edf2f7;
 }
+.task-section:first-child { border-top: none; }
 
 .task-section-hd {
   display: flex;
@@ -318,10 +354,13 @@ body {
   display: flex;
   align-items: center;
   gap: 10px;
+  height: 60px;
   padding: 9px 20px;
   cursor: pointer;
   transition: background 0.1s;
+  border-bottom: 1px solid #f1f5f9;
 }
+.task-item:last-child { border-bottom: none; }
 
 .task-item:hover {
   background: #f9fafb;
@@ -349,12 +388,16 @@ body {
 .status-已结束 { background: #dcfce7; color: #166534; }
 /* 产品版本状态 */
 .status-规划中 { background: #f1f5f9; color: #64748b; }
-.status-设计中 { background: #ede9fe; color: #7c3aed; }
 .status-开发中 { background: #dbeafe; color: #1d4ed8; }
 .status-测试中 { background: #fef3c7; color: #92400e; }
 .status-已上线 { background: #dcfce7; color: #166534; }
-.status-已延期 { background: #fee2e2; color: #991b1b; }
 .status-已取消 { background: #f1f5f9; color: #94a3b8; }
+.status-badge {
+  flex-shrink: 0; display: inline-flex; align-items: center;
+  font-size: 12px; font-weight: 500; padding: 2px 10px;
+  border-radius: 10px; cursor: pointer; white-space: nowrap;
+  transition: background 0.15s;
+}
 
 /* 优先级底色 */
 .task-p0 { background: #fef2f2; }
@@ -401,12 +444,14 @@ body {
   flex-direction: column;
   gap: 1px;
 }
+.task-item.task-detail .task-content { flex-direction: row; align-items: center; gap: 8px; }
 
 .task-feed .task-title {
   font-weight: 400;
   color: #1f2937;
   font-size: 12px;
 }
+.task-item.task-detail .task-title { font-weight: 500; white-space: nowrap; flex-shrink: 0; }
 
 .task-desc {
   font-size: 12px;
@@ -431,6 +476,16 @@ body {
   color: #ef4444;
   margin-top: 2px;
 }
+.task-item.task-detail .task-blocker {
+  display: inline;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  max-width: 240px;
+  margin-top: 0;
+  flex-shrink: 1;
+  min-width: 0;
+}
 
 .task-empty {
   display: flex;
@@ -590,17 +645,90 @@ body {
 .btn-ghost { background: white; border: 1px solid #e2e8f0; color: #334155; }
 .btn-ghost:hover { background: #f8fafc; }
 
+/* ===== 表单控件统一标准 ===== */
 input,
 select,
 textarea {
-  border: 1px solid #cbd5e1;
+  border: 1px solid #e2e8f0;
   border-radius: 6px;
-  min-height: 38px;
-  padding: 8px 10px;
+  padding: 8px 12px;
+  font-size: 13px;
+  color: #1e293b;
+  background: #fff;
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s;
+  height: 38px;
+  box-sizing: border-box;
+}
+select {
+  appearance: none;
+  -webkit-appearance: none;
+  background-image: url("data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='0 0 24 24' fill='none' stroke='%2364748b' stroke-width='2' stroke-linecap='round' stroke-linejoin='round'%3E%3Cpolyline points='6 9 12 15 18 9'%3E%3C/polyline%3E%3C/svg%3E");
+  background-repeat: no-repeat;
+  background-position: right 10px center;
+  padding-right: 32px;
+}
+input:focus,
+select:focus,
+textarea:focus {
+  border-color: #2563eb;
+  box-shadow: 0 0 0 3px rgba(37, 99, 235, 0.08);
+}
+input::placeholder,
+textarea::placeholder { color: #cbd5e1; }
+input:disabled,
+select:disabled,
+textarea:disabled { background: #f8fafc; cursor: not-allowed; }
+
+textarea { min-height: 80px; height: auto; resize: vertical; }
+
+/* 标准控件类 */
+.form-ctrl {
+  display: block;
+  height: 38px;
+  width: 100%;
+  border: 1px solid #e2e8f0;
+  border-radius: 6px;
+  padding: 8px 12px;
+  font-size: 13px;
+  color: #1e293b;
+  background: #fff;
+  outline: none;
+  transition: border-color 0.15s, box-shadow 0.15s;
+}
+.form-ctrl:focus {
+  border-color: #2563eb;
+  box-shadow: 0 0 0 3px rgba(37, 99, 235, 0.08);
+}
+.form-ctrl::placeholder { color: #cbd5e1; }
+.form-ctrl:disabled { background: #f8fafc; cursor: not-allowed; }
+
+/* 紧凑变体 */
+.form-ctrl-sm {
+  padding: 5px 10px;
+  font-size: 12px;
+  height: 32px;
 }
 
-textarea {
-  min-height: 96px;
+/* 产品表格内联日期选择器 */
+.prod-date-input {
+  border: 1px solid transparent;
+  background: transparent;
+  font-size: 12px;
+  padding: 2px 4px;
+  border-radius: 4px;
+  width: 110px;
+  cursor: pointer;
+  color: #64748b;
+}
+.prod-date-input:hover {
+  border-color: #cbd5e1;
+  background: #f8fafc;
+}
+.prod-date-input:focus {
+  border-color: #3b82f6;
+  background: white;
+  outline: none;
 }
 
 table {
@@ -702,35 +830,6 @@ td {
   min-width: 0;
 }
 
-.drawer-value {
-  background: transparent;
-  border: 1px solid transparent;
-  border-radius: 5px;
-  color: #0f172a;
-  font-size: 13px;
-  font-weight: 500;
-  min-height: 30px;
-  padding: 4px 8px;
-  width: 100%;
-}
-
-.drawer-value:hover {
-  background: #f8fafc;
-  border-color: #e2e8f0;
-}
-
-.drawer-value:focus {
-  background: white;
-  border-color: #60a5fa;
-  outline: none;
-}
-
-.drawer-textarea {
-  line-height: 1.45;
-  min-height: 54px;
-  resize: vertical;
-}
-
 .activity-item {
   background: #f8fafc;
   border: 1px solid #e2e8f0;
@@ -758,23 +857,6 @@ td {
   width: 13px;
 }
 
-.inline-form input,
-.inline-form select {
-  height: 40px;
-  border: 1px solid #cbd5e1;
-  border-radius: 6px;
-  padding: 8px 10px;
-  font-size: 14px;
-  background: white;
-  min-width: 120px;
-}
-
-.inline-form input:focus,
-.inline-form select:focus {
-  border-color: #3b82f6;
-  outline: none;
-}
-
 .clickable-row {
   cursor: pointer;
   transition: background 0.15s;
@@ -1063,13 +1145,9 @@ td {
   background: #f8fafc; border: 1px solid #e2e8f0; border-radius: 8px;
   padding: 14px; margin-bottom: 16px;
 }
+.task-field-row { display: grid; grid-template-columns: 1fr 1fr; gap: 12px; margin-bottom: 4px; }
 .task-field { display: flex; flex-direction: column; gap: 4px; }
-.task-field span { color: #64748b; font-size: 12px; }
-.task-field input, .task-field select, .task-field textarea {
-  background: #fff; border: 1px solid #e2e8f0; border-radius: 6px;
-  color: #1e293b; font-size: 13px; padding: 6px 10px; outline: none;
-}
-.task-field input:focus, .task-field select:focus, .task-field textarea:focus { border-color: #2563eb; }
+.task-field span { color: #64748b; font-size: 12px; font-weight: 500; }
 .col-span-2 { grid-column: span 2; }
 .task-group-add {
   display: block; width: 100%; padding: 10px; text-align: center;
@@ -1077,3 +1155,65 @@ td {
   border-top: 1px solid #24272d; cursor: pointer;
 }
 .task-group-add:hover { color: #e4e5e7; background: #24272d; }
+
+/* Feature list（产品版本核心功能编号列表） */
+.feature-item {
+  display: flex; align-items: center; gap: 8px; margin-bottom: 6px;
+}
+.feature-num {
+  color: #94a3b8; font-size: 13px; font-weight: 500; min-width: 22px; flex-shrink: 0;
+}
+.feature-item .form-ctrl { flex: 1; padding: 5px 10px; }
+.feature-del {
+  flex-shrink: 0; display: flex; align-items: center; justify-content: center;
+  width: 22px; height: 22px; border-radius: 4px; border: none; background: none;
+  color: #94a3b8; cursor: pointer; transition: color 0.15s;
+}
+.feature-del:hover { color: #ef4444; background: #fef2f2; }
+
+/* Toast 通知 */
+.toast-container {
+  position: fixed; top: 16px; right: 16px; z-index: 9999;
+  display: flex; flex-direction: column; gap: 8px; pointer-events: none;
+}
+.toast {
+  pointer-events: auto;
+  display: flex; align-items: center; gap: 10px;
+  padding: 10px 16px; border-radius: 8px;
+  font-size: 13px; font-weight: 500;
+  box-shadow: 0 4px 12px rgba(0,0,0,0.12);
+  animation: toastIn 0.2s ease-out; max-width: 380px;
+}
+.toast.toast-success { background: #f0fdf4; color: #166534; border: 1px solid #bbf7d0; }
+.toast.toast-error { background: #fef2f2; color: #991b1b; border: 1px solid #fecaca; }
+.toast.toast-info { background: #eff6ff; color: #1e40af; border: 1px solid #bfdbfe; }
+.toast.fade-out { animation: toastOut 0.25s ease-in forwards; }
+@keyframes toastIn { from { opacity: 0; transform: translateX(20px); } to { opacity: 1; transform: translateX(0); } }
+@keyframes toastOut { to { opacity: 0; transform: translateX(20px); } }
+
+/* 财务弹窗优化 */
+.fin-field-group {
+  background: #f8fafc;
+  border: 1px solid #e2e8f0;
+  border-radius: 10px;
+  padding: 18px;
+}
+.fin-section-label {
+  font-size: 13px;
+  font-weight: 600;
+  color: #334155;
+  margin-bottom: 14px;
+  padding-bottom: 8px;
+  border-bottom: 1px solid #e2e8f0;
+}
+.fin-label {
+  display: block;
+  font-size: 12px;
+  font-weight: 500;
+  color: #64748b;
+  margin-bottom: 4px;
+}
+
+/* 项目树拖拽 */
+.project-tree-node.dragging { opacity: 0.4; }
+.project-tree-node.drag-over { border-top: 2px solid #2563eb; }

templates/index.html

@@ -28,82 +28,87 @@
   <body class="min-h-screen bg-slate-50 text-slate-950">
     <div class="flex min-h-screen">
       <!-- 左侧工作台切换栏 -->
-      <aside class="w-[72px] bg-slate-900 flex flex-col items-center py-6 gap-1 shrink-0" id="workspaceSidebar">
-        <div class="w-10 h-10 rounded-xl bg-blue-600 flex items-center justify-center mb-6 text-white font-bold text-sm">OPC</div>
-        <div class="workspace-nav-item active" data-tenant="科普·无界" onclick="switchTenant('科普·无界')" title="科普·无界">
-          <svg class="w-6 h-6" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><circle cx="12" cy="12" r="10"/><path d="M8 12h8"/><path d="M12 8v8"/></svg>
-          <span class="text-[10px] mt-1">科普</span>
+      <aside class="w-[72px] bg-slate-900 flex flex-col items-center py-6 gap-1 shrink-0 sticky top-0 h-screen overflow-y-auto" id="workspaceSidebar">
+        <div class="flex flex-col items-center mb-2 cursor-pointer" onclick="document.getElementById('userAvatar').click()">
+          <div class="w-10 h-10 rounded-full bg-slate-700 flex items-center justify-center text-white font-bold text-sm hover:ring-2 hover:ring-blue-400 transition-all" id="userAvatar" title=""></div>
+          <span class="text-[10px] text-slate-400 mt-1.5 max-w-[64px] truncate text-center" id="userDisplayName" title=""></span>
         </div>
-        <div class="workspace-nav-item" data-tenant="科研·无界" onclick="switchTenant('科研·无界')" title="科研·无界">
-          <svg class="w-6 h-6" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M14.7 6.3a1 1 0 0 0 0 1.4l1.6 1.6a1 1 0 0 0 1.4 0l3.77-3.77a6 6 0 0 1-7.94 7.94l-6.91 6.91a2.12 2.12 0 0 1-3-3l6.91-6.91a6 6 0 0 1 7.94-7.94l-3.76 3.76z"/></svg>
-          <span class="text-[10px] mt-1">科研</span>
+        <!-- 分隔线 -->
+        <div class="w-8 h-px bg-slate-700 my-2"></div>
+        <!-- 工作台切换按钮 -->
+        <div class="flex flex-col items-center cursor-pointer hover:bg-slate-800 rounded-lg py-2 px-1 w-14 transition-colors" onclick="toggleTenantMenu(event)">
+          <i data-lucide="layout-grid" style="width:18px;height:18px;color:#94a3b8"></i>
+          <span class="text-[10px] text-slate-400 mt-1 max-w-[56px] truncate text-center" id="currentTenantLabel">工作台</span>
+          <i data-lucide="chevron-down" style="width:12px;height:12px;color:#64748b;margin-top:2px"></i>
         </div>
-        <div class="workspace-nav-item" data-tenant="医患·无界" onclick="switchTenant('医患·无界')" title="医患·无界">
-          <svg class="w-6 h-6" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M22 12h-4l-3 9L9 3l-3 9H2"/></svg>
-          <span class="text-[10px] mt-1">医患</span>
-        </div>
-        <!-- 用户区 -->
-        <div class="mt-auto flex flex-col items-center gap-2 pt-4">
-          <div class="w-8 h-8 rounded-full bg-slate-700 flex items-center justify-center text-white text-[11px] font-medium" id="userAvatar" title=""></div>
-          <button class="text-[10px] text-slate-500 hover:text-red-400 transition-colors" onclick="doLogout()" title="退出登录">退出</button>
+        <!-- 分隔线 -->
+        <div class="w-8 h-px bg-slate-700 my-2"></div>
+        <!-- 导航 Tab 图标 -->
+        <div class="flex flex-col items-center gap-1 w-14" id="sidebarTabs">
+          <div class="sidebar-tab active" data-tab="home" onclick="switchTab('home')" title="部门">
+            <i data-lucide="trending-up" style="width:20px;height:20px"></i>
+            <span class="text-[10px] mt-1">部门</span>
+          </div>
+          <div class="sidebar-tab" data-tab="plan" onclick="switchTab('plan')" title="计划">
+            <i data-lucide="calendar-range" style="width:20px;height:20px"></i>
+            <span class="text-[10px] mt-1">计划</span>
+          </div>
+          <div class="sidebar-tab" data-tab="finance" onclick="switchTab('finance')" title="实际">
+            <i data-lucide="folder-open-dot" style="width:20px;height:20px"></i>
+            <span class="text-[10px] mt-1">实际</span>
+          </div>
+          <div class="sidebar-tab" data-tab="projects" onclick="switchTab('projects')" title="Focus">
+            <i data-lucide="file-text" style="width:20px;height:20px"></i>
+            <span class="text-[10px] mt-1">Focus</span>
+          </div>
+          <div class="sidebar-tab" data-tab="proposals" onclick="switchTab('proposals')" title="业务方案">
+            <i data-lucide="package" style="width:20px;height:20px"></i>
+            <span class="text-[10px] mt-1">方案</span>
+          </div>
+          <div class="sidebar-tab" data-tab="products" onclick="switchTab('products')" title="产品迭代">
+            <i data-lucide="wallet-cards" style="width:20px;height:20px"></i>
+            <span class="text-[10px] mt-1">产品</span>
+          </div>
+          <div class="sidebar-tab" data-tab="performance" onclick="switchTab('performance')" title="绩效">
+            <i data-lucide="target" style="width:20px;height:20px"></i>
+            <span class="text-[10px] mt-1">绩效</span>
+          </div>
         </div>
       </aside>
       <!-- 主内容区 -->
       <div class="flex-1 min-w-0">
     <header class="topbar border-b border-slate-200 bg-white px-8 py-5">
-      <div class="flex items-center gap-3">
-        <div>
-          <p class="eyebrow text-xs font-semibold uppercase tracking-[0.18em] text-blue-700">OPC Manager</p>
-          <div class="flex items-center gap-3 mt-1">
+      <div class="flex items-center gap-3 w-full">
+        <div class="flex-1">
+          <p class="eyebrow text-xs font-semibold uppercase tracking-[0.18em] text-blue-700">OPC Manager <span class="ml-2 text-xs font-normal text-slate-400 tracking-normal">v1.0.0.28</span></p>
+          <div class="flex items-center gap-4 mt-1">
             <h1 class="text-2xl font-semibold" id="workspaceTitle">科普 OPC 工作台</h1>
+            <div class="hidden sm:flex items-center gap-1.5 bg-gradient-to-r from-blue-50 to-indigo-50 border border-blue-100 rounded-full px-4 py-1.5">
+              <i data-lucide="sparkles" class="text-blue-500" style="width:14px;height:14px"></i>
+              <span class="text-xs text-blue-700 font-medium tracking-wide">真看病，看真病，用学术会议，科普，科研，患者管理，帮助医生与患者提升临床治疗</span>
+            </div>
           </div>
         </div>
+        <button onclick="document.getElementById('opcLetterModal').classList.remove('hidden')" class="ml-auto flex-shrink-0 flex items-center justify-center w-10 h-10 rounded-full bg-blue-50 border border-blue-200 hover:bg-blue-100 transition-colors" title="OPC 来信">
+          <i data-lucide="mail" class="text-blue-500" style="width:18px;height:18px"></i>
+        </button>
       </div>
     </header>
 
-    <nav class="tabs border-b border-slate-200 bg-white px-8" id="tabs">
-      <button class="active" data-tab="home"><i data-lucide="home"></i>首页</button>
-      <button data-tab="finance"><i data-lucide="briefcase-business"></i>经营管理</button>
-      <button data-tab="projects"><i data-lucide="file-text"></i>重点工作与台账</button>
-      <button data-tab="proposals"><i data-lucide="package"></i>业务方案</button>
-      <button data-tab="products"><i data-lucide="wallet-cards"></i>产品迭代</button>
-    </nav>
-
     <main class="px-8 py-6">
       <section id="home" class="panel active"></section>
       <section id="projects" class="panel"></section>
       <section id="proposals" class="panel"></section>
       <section id="products" class="panel"></section>
+      <section id="performance" class="panel"></section>
+      <section id="performance" class="panel"></section>
       <section id="finance" class="panel"></section>
+      <section id="plan" class="panel"></section>
     </main>
       </div><!-- 关闭主内容区 -->
     </div><!-- 关闭 flex 容器 -->
     <aside id="drawer" class="drawer" aria-hidden="true"></aside>
     <div id="taskModal" class="task-modal"></div>
-    <div id="transferModal" class="hidden fixed inset-0 z-50 flex items-center justify-center bg-black/40" onclick="closeTransferModal()">
-      <div class="bg-white rounded-2xl shadow-2xl w-full max-w-sm mx-4" onclick="event.stopPropagation()">
-        <div class="flex items-center justify-between px-6 py-4 border-b border-slate-100">
-          <h3 class="text-lg font-semibold text-slate-800">跨工作台转移</h3>
-          <button class="btn btn-ghost btn-sm rounded-full w-8 h-8 p-0" onclick="closeTransferModal()"><i data-lucide="x"></i></button>
-        </div>
-        <form onsubmit="submitTransfer(event)" class="p-6 grid gap-4">
-          <input type="hidden" name="transfer_resource" id="transfer-resource" value="">
-          <input type="hidden" name="transfer_id" id="transfer-id" value="">
-          <p id="transfer-title-text" class="text-sm text-slate-600"></p>
-          <label class="block"><span class="text-xs font-medium text-slate-500">目标工作台</span>
-            <select name="transfer_tenant" class="mt-1 block w-full rounded-lg border border-slate-200 px-3 py-2.5 text-sm">
-              <option value="科普·无界">科普·无界</option>
-              <option value="科研·无界">科研·无界</option>
-              <option value="医患·无界">医患·无界</option>
-            </select>
-          </label>
-          <div class="flex justify-end gap-3 pt-3">
-            <button type="button" class="btn btn-ghost btn-sm" onclick="closeTransferModal()">取消</button>
-            <button type="submit" class="btn btn-primary btn-sm">确认转移</button>
-          </div>
-        </form>
-      </div>
-    </div>
     <!-- 新增项目模态框 -->
     <div id="newProjectModal" class="hidden fixed inset-0 z-50 flex items-center justify-center bg-black/40" onclick="closeNewProjectModal()">
       <div class="bg-white rounded-2xl shadow-2xl w-full max-w-md mx-4" onclick="event.stopPropagation()">
@@ -112,8 +117,8 @@
           <button class="btn btn-ghost btn-sm rounded-full w-8 h-8 p-0" onclick="closeNewProjectModal()"><i data-lucide="x"></i></button>
         </div>
         <form onsubmit="createOperation(event)" class="p-6 grid gap-4">
-          <label class="block"><span class="text-xs font-medium text-slate-500">项目名称</span><input name="project_name" required class="mt-1 block w-full rounded-lg border border-slate-200 px-3 py-2.5 text-sm"></label>
-          <label class="block"><span class="text-xs font-medium text-slate-500">项目备注</span><textarea name="notes" rows="3" class="mt-1 block w-full rounded-lg border border-slate-200 px-3 py-2.5 text-sm" placeholder="可选"></textarea></label>
+          <label class="block"><span class="text-xs font-medium text-slate-500">项目名称</span><input name="project_name" required class="form-ctrl mt-1"></label>
+          <label class="block"><span class="text-xs font-medium text-slate-500">项目备注</span><textarea name="notes" rows="3" class="form-ctrl mt-1" placeholder="可选"></textarea></label>
           <div class="flex justify-end gap-3 pt-3 border-t border-slate-100">
             <button type="button" class="btn btn-ghost btn-sm" onclick="closeNewProjectModal()">取消</button>
             <button type="submit" class="btn btn-primary btn-sm">创建</button>
@@ -121,6 +126,54 @@
         </form>
       </div>
     </div>
+    <script src="{{ url_for('static', filename='modules/utils.js') }}"></script>
+    <script src="{{ url_for('static', filename='modules/home.js') }}"></script>
+    <script src="{{ url_for('static', filename='modules/projects.js') }}"></script>
+    <script src="{{ url_for('static', filename='modules/proposals.js') }}"></script>
+    <script src="{{ url_for('static', filename='modules/products.js') }}"></script>
+    <script src="{{ url_for('static', filename='modules/performance.js') }}"></script>
+    <script src="{{ url_for('static', filename='modules/finance.js') }}"></script>
+    <script src="{{ url_for('static', filename='modules/expense.js') }}"></script>
+    <script src="{{ url_for('static', filename='modules/plan.js') }}"></script>
+    <script src="{{ url_for('static', filename='modules/plan_expense.js') }}"></script>
+    <script src="{{ url_for('static', filename='modules/drawer.js') }}"></script>
+    <script src="{{ url_for('static', filename='modules/admin.js') }}"></script>
     <script src="{{ url_for('static', filename='app.js') }}"></script>
+
+    <!-- OPC 来信弹窗 -->
+    <div id="opcLetterModal" class="hidden fixed inset-0 z-50 flex items-center justify-center bg-black/40" onclick="this.classList.add('hidden')">
+      <div class="bg-white rounded-2xl shadow-2xl w-full max-w-2xl mx-4 max-h-[85vh] overflow-y-auto" onclick="event.stopPropagation()">
+        <div class="sticky top-0 bg-white/95 backdrop-blur border-b border-slate-100 px-8 py-5 flex items-center justify-between">
+          <h2 class="text-xl font-bold text-slate-800">致所有 OPC 的一封信</h2>
+          <button class="btn btn-ghost btn-sm rounded-full w-8 h-8 p-0" onclick="document.getElementById('opcLetterModal').classList.add('hidden')"><i data-lucide="x"></i></button>
+        </div>
+        <div class="p-8 text-slate-700 leading-relaxed" style="background:#fdfcf8;font-family:Georgia,'Times New Roman',serif">
+          <p class="text-slate-500 text-sm mb-6">亲爱的 OPC：</p>
+          <p class="mb-6">对于每一位业务 Owner（OPC），公司和我个人都发自内心地充满了期待：</p>
+          <ul class="list-disc list-inside mb-6 space-y-1.5 text-slate-600">
+            <li>期待每一个人的业务都能够突破</li>
+            <li>期待每一个人都成为自己赛道最璀璨的明星</li>
+            <li>期待每一个人都实现事业上的成功与财务上的自由</li>
+          </ul>
+          <p class="mb-8">所以竭尽所能，把自己对业务管理的每一份理解，都融入这个系统，希望能够助力每一位 OPC 都快速地成长。</p>
+          <hr class="my-6 border-slate-200">
+          <ol class="list-decimal list-inside space-y-4 mb-6 text-sm" style="padding-left:0">
+            <li><strong>财务：</strong>以终为始，用清晰的财务指标，让每个人都清晰地知道自己当下的成绩</li>
+            <li><strong>业务：</strong>将目标转换成不同的项目，每一个项目就是一场战役</li>
+            <li><strong>Focus：</strong>理清工作重点，并把每个重点工作的落地转换成工作清单</li>
+            <li><strong>方案：</strong>如何清晰地和客户描述清楚我们的价值、产品、运营与报价</li>
+            <li><strong>产品：</strong>
+              <ul class="list-disc list-inside ml-4 mt-1 space-y-1 text-slate-500">
+                <li>版本迭代：构建一个数字系统，对业务加杠杆，让业务变得有规模、有流程、有壁垒</li>
+                <li>产品运营：产品在真实场景是否真实地落地，真正地成为可以交付的价值</li>
+              </ul>
+            </li>
+            <li><strong>绩效：</strong>实时评分，了解当前阶段，我们和目标还有什么差距</li>
+          </ol>
+          <hr class="my-6 border-slate-200">
+          <p class="text-right text-sm text-slate-500">—— 与你同行的团队</p>
+        </div>
+      </div>
+    </div>
   </body>
 </html>

templates/login.html

@@ -4,42 +4,99 @@
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>OPC 工作台 · 登录</title>
-  <script src="https://cdn.tailwindcss.com"></script>
+  <link rel="stylesheet" href="{{ url_for('static', filename='vendor/lucide.js') }}" onerror="this.remove()">
+  <script src="{{ url_for('static', filename='vendor/lucide.js') }}"></script>
+  <style>
+    *{box-sizing:border-box;margin:0;padding:0}
+    body{font-family:PingFang SC,Microsoft YaHei,-apple-system,sans-serif;background:#f8fafc;min-height:100vh;display:flex;align-items:center;justify-content:center}
+    .card{background:#fff;border-radius:16px;padding:40px 44px;width:400px;max-width:94vw;box-shadow:0 16px 48px rgba(15,23,42,.12)}
+    .logo{text-align:center;margin-bottom:32px}
+    .logo .icon{width:56px;height:56px;margin:0 auto 10px;display:flex;align-items:center;justify-content:center;background:linear-gradient(135deg,#1e293b,#0f172a);border-radius:14px;color:#fff}
+    .logo h1{font-size:20px;font-weight:700;color:#1e293b}
+    .logo p{font-size:13px;color:#94a3b8;margin-top:4px}
+    .form-group{margin-bottom:18px}
+    label{display:block;font-size:13px;font-weight:500;color:#475569;margin-bottom:6px}
+    .input-wrap{position:relative}
+    input[type=text],input[type=password]{width:100%;height:42px;padding:0 14px;border:1px solid #cbd5e1;border-radius:8px;font-size:14px;outline:none;transition:.2s;font-family:inherit;color:#1e293b;background:#fff}
+    .input-wrap input{padding:0 40px 0 14px}
+    input[type=text]:focus,input[type=password]:focus,.input-wrap input:focus{border-color:#334155;box-shadow:0 0 0 3px rgba(51,65,85,.12)}
+    input::placeholder{color:#94a3b8}
+    .toggle-pwd{position:absolute;right:10px;top:50%;transform:translateY(-50%);background:none;border:none;cursor:pointer;color:#94a3b8;padding:4px;display:flex;align-items:center;justify-content:center;transition:.2s}
+    .toggle-pwd:hover{color:#334155}
+    .btn{width:100%;height:44px;background:#1e293b;color:#fff;border:none;border-radius:8px;font-size:15px;font-weight:600;cursor:pointer;transition:.2s;margin-top:8px}
+    .btn:hover{background:#0f172a}
+    .btn:active{transform:scale(.98)}
+    .err{background:#fef2f2;border:1px solid #fecaca;color:#dc2626;border-radius:8px;padding:10px 14px;font-size:13px;margin-bottom:16px;display:none}
+    .err.show{display:block}
+    .footer{text-align:center;margin-top:24px;font-size:11px;color:#94a3b8}
+    .footer strong{color:#334155}
+  </style>
 </head>
-<body class="min-h-screen bg-slate-50 flex items-center justify-center">
-  <div class="bg-white rounded-2xl shadow-lg p-8 w-full max-w-sm mx-4">
-    <div class="text-center mb-6">
-      <h1 class="text-2xl font-bold text-slate-800">OPC 工作台</h1>
-      <p class="text-sm text-slate-400 mt-1">请输入账号密码登录</p>
-    </div>
-    <form id="loginForm" onsubmit="doLogin(event)" class="grid gap-4">
-      <label class="block">
-        <span class="text-xs font-medium text-slate-500">账号</span>
-        <input name="username" required class="mt-1 block w-full rounded-lg border border-slate-200 px-3 py-2.5 text-sm" placeholder="admin / kepu / keyan / yihuan" autofocus>
-      </label>
-      <label class="block">
-        <span class="text-xs font-medium text-slate-500">密码</span>
-        <input name="password" type="password" required class="mt-1 block w-full rounded-lg border border-slate-200 px-3 py-2.5 text-sm">
-      </label>
-      <p id="loginError" class="text-red-500 text-xs hidden"></p>
-      <button type="submit" class="btn w-full bg-slate-800 text-white rounded-lg py-2.5 text-sm font-medium hover:bg-slate-700">登 录</button>
-    </form>
-    <p class="text-xs text-slate-400 text-center mt-6">默认管理员：qiukai / yxcowork2026</p>
+<body>
+<div class="card">
+  <div class="logo">
+    <div class="icon"><i data-lucide="layout-dashboard" style="width:28px;height:28px;stroke-width:2"></i></div>
+    <h1>OPC 工作台</h1>
+    <p>请登录后继续</p>
   </div>
-  <script>
-    async function doLogin(e) {
-      e.preventDefault();
-      const form = e.currentTarget;
-      const data = Object.fromEntries(new FormData(form).entries());
-      try {
-        const res = await (await fetch("/api/auth/login", { method: "POST", headers: {"Content-Type":"application/json"}, body: JSON.stringify(data) })).json();
-        if (res.error) { document.querySelector("#loginError").textContent = res.error; document.querySelector("#loginError").classList.remove("hidden"); return; }
-        window.location.href = "/";
-      } catch (err) {
-        document.querySelector("#loginError").textContent = "网络错误，请重试";
-        document.querySelector("#loginError").classList.remove("hidden");
-      }
+  <div class="err" id="errMsg"></div>
+  <div class="form-group">
+    <label>用户名</label>
+    <input type="text" id="username" placeholder="请输入用户名" autocomplete="username" autofocus>
+  </div>
+  <div class="form-group">
+    <label>密码</label>
+    <div class="input-wrap">
+      <input type="password" id="password" placeholder="请输入密码" autocomplete="current-password">
+      <button type="button" class="toggle-pwd" onclick="togglePwd('password', this)" title="显示/隐藏密码"><i data-lucide="eye" style="width:18px;height:18px"></i></button>
+    </div>
+  </div>
+  <button class="btn" id="loginBtn" onclick="doLogin()">登 录</button>
+  <div class="footer">Powered by <strong>yxcowork.vip</strong></div>
+</div>
+<script>
+  if (window.lucide) lucide.createIcons();
+
+  function togglePwd(id, btn) {
+    const input = document.getElementById(id);
+    const isPwd = input.type === 'password';
+    input.type = isPwd ? 'text' : 'password';
+    btn.innerHTML = isPwd
+      ? '<i data-lucide="eye-off" style="width:18px;height:18px"></i>'
+      : '<i data-lucide="eye" style="width:18px;height:18px"></i>';
+    if (window.lucide) lucide.createIcons();
+  }
+
+  const errEl = document.getElementById('errMsg');
+  function showErr(msg) { errEl.textContent = msg; errEl.classList.add('show'); }
+  function clearErr() { errEl.classList.remove('show'); }
+
+  document.getElementById('username').addEventListener('input', clearErr);
+  document.getElementById('password').addEventListener('input', clearErr);
+
+  // 回车提交
+  document.getElementById('password').addEventListener('keydown', (e) => { if (e.key === 'Enter') doLogin(); });
+  document.getElementById('username').addEventListener('keydown', (e) => { if (e.key === 'Enter') document.getElementById('password').focus(); });
+
+  async function doLogin() {
+    clearErr();
+    const username = document.getElementById('username').value.trim();
+    const password = document.getElementById('password').value;
+    if (!username || !password) { showErr('请输入用户名和密码'); return; }
+    const btn = document.getElementById('loginBtn');
+    btn.disabled = true; btn.style.opacity = .7; btn.textContent = '登录中...';
+    try {
+      const res = await (await fetch('/api/auth/login', {
+        method: 'POST', headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ username, password })
+      })).json();
+      if (res.error) { showErr(res.error); btn.disabled = false; btn.style.opacity = 1; btn.textContent = '登 录'; return; }
+      window.location.href = '/';
+    } catch (err) {
+      showErr('网络错误，请重试');
+      btn.disabled = false; btn.style.opacity = 1; btn.textContent = '登 录';
     }
-  </script>
+  }
+</script>
 </body>
 </html>