Upload 53 files

README.md

@@ -1,10 +1,117 @@
----
-title: Cam
-emoji: 👀
-colorFrom: purple
-colorTo: pink
+---
+title: Spring Check-In Activity Manager
+emoji: 🌿
+colorFrom: green
+colorTo: yellow
 sdk: docker
-pinned: false
+app_port: 7860
+fullWidth: true
+header: default
+short_description: 春日打卡行动管理系统，支持用户与多管理员后台、活动任务、线索发布与图片审核。
 ---
 
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference
+# Spring Check-In Activity Manager
+
+这是一个可直接部署到 Hugging Face Docker Space 的春日打卡行动系统，包含：
+
+- 用户端 `/login`：学号 + 密码登录
+- 管理员端 `/admin`：多管理员后台，支持超级管理员
+- 用户管理：手动录入用户，按小组分配成员
+- 小组管理：卡片式展示每个小组与人数上限
+- 活动发布：一个活动包含多个打卡任务，可配置开始/截止时间
+- 图片上传：用户提交图片会自动压缩到 2MB 以下并暂存到本地
+- 图片审核：管理员统一审核通过/驳回，并支持勾选批量下载
+- 线索发布：管理员为任务上传线索图，按固定时间间隔自动发布
+- 排行榜：按完成打卡点数量优先、总耗时次优进行小组排序，可控制是否对用户可见
+
+## 目录结构
+
+```text
+app/
+  main.py
+  config.py
+  database.py
+  models.py
+  routes/
+  services/
+  static/
+  templates/
+ca.pem
+Dockerfile
+requirements.txt
+README.md
+```
+
+## 必填 Hugging Face Secrets
+
+在 Hugging Face Space 的 `Settings -> Variables and secrets` 中至少配置以下运行时 Secrets：
+
+- `ADMIN`：超级管理员账号
+- `PASSWORD`：超级管理员密码
+- `SQL_PASSWORD`：Aiven MySQL 的密码
+- `SESSION_SECRET`：用于 Session 签名的随机长字符串
+
+## 可选 Variables
+
+如果你想覆盖默认连接配置，可以额外设置这些 Variables：
+
+- `SQL_USER`，默认 `avnadmin`
+- `SQL_HOST`，默认 `mysql-2bace9cd-cacode.i.aivencloud.com`
+- `SQL_PORT`，默认 `21260`
+- `SQL_DATABASE`，默认 `CAM`
+- `MYSQL_CA_FILE`，默认 `ca.pem`
+- `APP_TIMEZONE`，默认 `Asia/Shanghai`
+- `UPLOAD_ROOT`，默认 `data/submissions`
+- `DATABASE_URL`，如设置则优先使用完整数据库连接串
+
+## 数据存储说明
+
+- 任务主图和线索图存入 MySQL，并在入库前自动压缩到 200KB 以下。
+- 用户打卡图不会写入 MySQL，而是保存在应用本地临时目录中，默认是 `data/submissions/`。
+- 本地文件用于管理员审核、预览和批量下载。
+- Docker Space 容器重启后，本地临时文件可能丢失，因此本项目按“临时文件”设计；若后续需要长期保存，可以再接入对象存储。
+
+## 本地运行
+
+先准备环境变量：
+
+```bash
+cp .env.example .env
+```
+
+Windows PowerShell 示例：
+
+```powershell
+$env:ADMIN="superadmin"
+$env:PASSWORD="change-me-now"
+$env:SQL_PASSWORD="your_mysql_password"
+$env:SESSION_SECRET="replace-with-a-long-random-secret"
+python -m venv .venv
+.\.venv\Scripts\Activate.ps1
+pip install -r requirements.txt
+uvicorn app.main:app --host 0.0.0.0 --port 7860 --reload
+```
+
+## 部署到 Hugging Face Space
+
+1. 在 Hugging Face 上创建一个新的 Space，并选择 `Docker` 作为 SDK。
+2. 将当前仓库文件上传到 Space 仓库根目录。
+3. 确认 `README.md` 顶部保留了 `sdk: docker` 和 `app_port: 7860` 的 YAML 元数据。
+4. 在 Space 设置中填入 `ADMIN`、`PASSWORD`、`SQL_PASSWORD`、`SESSION_SECRET`。
+5. 确保 `ca.pem` 一并上传到仓库根目录。
+6. 等待 Space 自动构建完成。
+
+## 关键行为说明
+
+- 超级管理员账号由环境变量 `ADMIN` / `PASSWORD` 初始化，并在启动时自动同步到数据库。
+- 任务线索图如果存在，会根据 `线索发布时间间隔` 和任务顺序计算发布时间；用户端会轮询并在移动端触发震动提醒。
+- 排行榜按小组聚合，排序规则是：
+  1. 已审核通过的打卡点数量降序
+  2. 总耗时升序
+
+## 后续可选增强
+
+- 给管理员增加活动编辑与任务删除功能
+- 给用户增加二次提交历史记录
+- 增加导出 Excel 报表
+- 接入对象存储以保存用户原图或长期归档文件

app/routes/admin.py

@@ -56,6 +56,126 @@ def ensure_group_capacity(group: Group | None, current_user: User | None = None)
         raise ValueError(f"{group.name} 已满员，请调整人数上限或选择其他小组。")
 
 
+def parse_activity_fields(form) -> dict:
+    title = str(form.get("title", "")).strip()
+    description = str(form.get("description", "")).strip()
+    start_raw = str(form.get("start_at", "")).strip()
+    deadline_raw = str(form.get("deadline_at", "")).strip()
+    clue_interval_raw = str(form.get("clue_interval_minutes", "")).strip()
+    leaderboard_visible = form.get("leaderboard_visible") == "on"
+
+    if not title or not start_raw or not deadline_raw:
+        raise ValueError("请完整填写活动标题、开始时间和截止时间。")
+
+    try:
+        start_at = datetime.fromisoformat(start_raw)
+        deadline_at = datetime.fromisoformat(deadline_raw)
+    except ValueError as exc:
+        raise ValueError("时间格式不正确。") from exc
+
+    if deadline_at <= start_at:
+        raise ValueError("截止时间必须晚于开始时间。")
+
+    try:
+        clue_interval_minutes = int(clue_interval_raw) if clue_interval_raw else None
+    except ValueError as exc:
+        raise ValueError("线索发布时间间隔必须是数字。") from exc
+
+    return {
+        "title": title,
+        "description": description,
+        "start_at": start_at,
+        "deadline_at": deadline_at,
+        "clue_interval_minutes": clue_interval_minutes,
+        "leaderboard_visible": leaderboard_visible,
+    }
+
+
+def compute_clue_release_at(
+    start_at: datetime,
+    clue_interval_minutes: int | None,
+    display_order: int,
+    has_clue_image: bool,
+) -> datetime | None:
+    if not has_clue_image:
+        return None
+    if clue_interval_minutes and clue_interval_minutes > 0:
+        return start_at + timedelta(minutes=clue_interval_minutes * display_order)
+    return start_at
+
+
+def apply_task_schedule(activity: Activity, tasks: list[Task]) -> None:
+    for index, task in enumerate(tasks, start=1):
+        task.display_order = index
+        task.clue_release_at = compute_clue_release_at(
+            activity.start_at,
+            activity.clue_interval_minutes,
+            index,
+            bool(task.clue_image_filename),
+        )
+
+
+def cleanup_submission_files(submissions: list[Submission]) -> None:
+    for submission in submissions:
+        if not submission.file_path:
+            continue
+        file_path = Path(submission.file_path)
+        if file_path.exists():
+            file_path.unlink(missing_ok=True)
+
+
+async def collect_task_payloads(
+    form,
+    title_key: str,
+    description_key: str,
+    image_key: str,
+    clue_key: str,
+) -> list[dict]:
+    task_titles = form.getlist(title_key)
+    task_descriptions = form.getlist(description_key)
+    task_images = form.getlist(image_key)
+    task_clue_images = form.getlist(clue_key)
+
+    tasks_payload = []
+    for index, raw_title in enumerate(task_titles):
+        task_title = str(raw_title).strip()
+        task_description = (
+            str(task_descriptions[index]).strip() if index < len(task_descriptions) else ""
+        )
+        primary_upload = task_images[index] if index < len(task_images) else None
+        clue_upload = task_clue_images[index] if index < len(task_clue_images) else None
+
+        if not task_title and (not primary_upload or not getattr(primary_upload, "filename", "")):
+            continue
+        if not task_title or not primary_upload or not getattr(primary_upload, "filename", ""):
+            raise ValueError(f"第 {index + 1} 个新增任务需要完整填写标题并上传主图。")
+
+        primary_raw = await read_and_validate_upload(primary_upload)
+        primary_bytes, primary_mime = compress_to_limit(primary_raw, 200 * 1024)
+
+        clue_bytes = None
+        clue_mime = None
+        clue_name = None
+        if clue_upload and getattr(clue_upload, "filename", ""):
+            clue_raw = await read_and_validate_upload(clue_upload)
+            clue_bytes, clue_mime = compress_to_limit(clue_raw, 200 * 1024)
+            clue_name = clue_upload.filename
+
+        tasks_payload.append(
+            {
+                "title": task_title,
+                "description": task_description,
+                "image_data": primary_bytes,
+                "image_mime": primary_mime,
+                "image_filename": primary_upload.filename,
+                "clue_image_data": clue_bytes,
+                "clue_image_mime": clue_mime,
+                "clue_image_filename": clue_name,
+            }
+        )
+    return tasks_payload
+
+
 @router.get("/admin/dashboard")
 def admin_dashboard(request: Request, db: Session = Depends(get_db)):
     admin = require_admin(request, db)
@@ -312,6 +432,31 @@ def admin_activities(request: Request, db: Session = Depends(get_db)):
     )
 
 
+@router.get("/admin/activities/{activity_id}/edit")
+def edit_activity_page(activity_id: int, request: Request, db: Session = Depends(get_db)):
+    admin = require_admin(request, db)
+    if not admin:
+        return redirect("/admin")
+
+    activity = (
+        db.query(Activity)
+        .options(
+            joinedload(Activity.created_by),
+            joinedload(Activity.tasks).joinedload(Task.submissions),
+        )
+        .filter(Activity.id == activity_id)
+        .first()
+    )
+    if not activity:
+        raise HTTPException(status_code=404, detail="活动不存在")
+
+    return render(
+        request,
+        "admin_activity_edit.html",
+        {"page_title": f"编辑活动 · {activity.title}", "admin": admin, "activity": activity},
+    )
+
+
 @router.post("/admin/activities")
 async def create_activity(request: Request, db: Session = Depends(get_db)):
     admin = require_admin(request, db)
@@ -319,122 +464,209 @@ async def create_activity(request: Request, db: Session = Depends(get_db)):
         return redirect("/admin")
 
     form = await request.form()
-    title = str(form.get("title", "")).strip()
-    description = str(form.get("description", "")).strip()
-    start_raw = str(form.get("start_at", "")).strip()
-    deadline_raw = str(form.get("deadline_at", "")).strip()
-    clue_interval_raw = str(form.get("clue_interval_minutes", "")).strip()
-    leaderboard_visible = form.get("leaderboard_visible") == "on"
+    try:
+        activity_fields = parse_activity_fields(form)
+        tasks_payload = await collect_task_payloads(
+            form,
+            "task_title",
+            "task_description",
+            "task_image",
+            "task_clue_image",
+        )
+    except ValueError as exc:
+        add_flash(request, "error", str(exc))
+        return redirect("/admin/activities")
 
-    if not title or not start_raw or not deadline_raw:
-        add_flash(request, "error", "请完整填写活动标题、开始时间和截止时间。")
+    if not tasks_payload:
+        add_flash(request, "error", "至少需要添加一个任务卡片。")
         return redirect("/admin/activities")
 
+    activity = Activity(created_by_id=admin.id, **activity_fields)
+    db.add(activity)
+
+    tasks = []
+    for payload in tasks_payload:
+        task = Task(activity=activity, **payload)
+        tasks.append(task)
+        db.add(task)
+
+    apply_task_schedule(activity, tasks)
+    db.commit()
+    add_flash(request, "success", f"活动 {activity.title} 已发布。")
+    return redirect("/admin/activities")
+
+
+@router.post("/admin/activities/{activity_id}/edit")
+async def update_activity(activity_id: int, request: Request, db: Session = Depends(get_db)):
+    admin = require_admin(request, db)
+    if not admin:
+        return redirect("/admin")
+
+    activity = (
+        db.query(Activity)
+        .options(joinedload(Activity.tasks))
+        .filter(Activity.id == activity_id)
+        .first()
+    )
+    if not activity:
+        raise HTTPException(status_code=404, detail="活动不存在")
+
+    form = await request.form()
     try:
-        start_at = datetime.fromisoformat(start_raw)
-        deadline_at = datetime.fromisoformat(deadline_raw)
-    except ValueError:
-        add_flash(request, "error", "时间格式不正确。")
-        return redirect("/admin/activities")
+        activity_fields = parse_activity_fields(form)
+    except ValueError as exc:
+        add_flash(request, "error", str(exc))
+        return redirect(f"/admin/activities/{activity_id}/edit")
+
+    existing_task_ids = form.getlist("existing_task_id")
+    existing_task_titles = form.getlist("existing_task_title")
+    existing_task_descriptions = form.getlist("existing_task_description")
+    existing_task_images = form.getlist("existing_task_image")
+    existing_task_clue_images = form.getlist("existing_task_clue_image")
+    remove_clue_ids = {
+        int(value)
+        for value in form.getlist("existing_task_remove_clue")
+        if str(value).isdigit()
+    }
 
-    if deadline_at <= start_at:
-        add_flash(request, "error", "截止时间必须晚于开始时间。")
-        return redirect("/admin/activities")
+    tasks_by_id = {task.id: task for task in activity.tasks}
+    ordered_tasks: list[Task] = []
+    seen_task_ids: set[int] = set()
 
     try:
-        clue_interval_minutes = int(clue_interval_raw) if clue_interval_raw else None
-    except ValueError:
-        add_flash(request, "error", "线索发布时间间隔必须是数字。")
-        return redirect("/admin/activities")
+        for index, raw_task_id in enumerate(existing_task_ids):
+            if not str(raw_task_id).isdigit():
+                raise ValueError("任务数据无效，请刷新页面后重试。")
+            task_id = int(raw_task_id)
+            task = tasks_by_id.get(task_id)
+            if not task or task_id in seen_task_ids:
+                raise ValueError("任务数据无效，请刷新页面后重试。")
+            seen_task_ids.add(task_id)
+
+            title = (
+                str(existing_task_titles[index]).strip()
+                if index < len(existing_task_titles)
+                else ""
+            )
+            description = (
+                str(existing_task_descriptions[index]).strip()
+                if index < len(existing_task_descriptions)
+                else ""
+            )
+            if not title:
+                raise ValueError(f"第 {index + 1} 个已有任务标题不能为空。")
 
-    task_titles = form.getlist("task_title")
-    task_descriptions = form.getlist("task_description")
-    task_images = form.getlist("task_image")
-    task_clue_images = form.getlist("task_clue_image")
+            task.title = title
+            task.description = description
 
-    tasks_payload = []
-    for index, raw_title in enumerate(task_titles):
-        task_title = str(raw_title).strip()
-        task_description = str(task_descriptions[index]).strip() if index < len(task_descriptions) else ""
-        primary_upload = task_images[index] if index < len(task_images) else None
-        clue_upload = task_clue_images[index] if index < len(task_clue_images) else None
+            primary_upload = (
+                existing_task_images[index] if index < len(existing_task_images) else None
+            )
+            clue_upload = (
+                existing_task_clue_images[index]
+                if index < len(existing_task_clue_images)
+                else None
+            )
+
+            if primary_upload and getattr(primary_upload, "filename", ""):
+                primary_raw = await read_and_validate_upload(primary_upload)
+                primary_bytes, primary_mime = compress_to_limit(primary_raw, 200 * 1024)
+                task.image_data = primary_bytes
+                task.image_mime = primary_mime
+                task.image_filename = primary_upload.filename
 
-        if not task_title and (not primary_upload or not getattr(primary_upload, "filename", "")):
-            continue
-        if not task_title or not primary_upload or not getattr(primary_upload, "filename", ""):
-            add_flash(request, "error", f"第 {index + 1} 个任务需要完整填写标题并上传主图。")
-            return redirect("/admin/activities")
-
-        try:
-            primary_raw = await read_and_validate_upload(primary_upload)
-            primary_bytes, primary_mime = compress_to_limit(primary_raw, 200 * 1024)
-            clue_bytes = None
-            clue_mime = None
-            clue_name = None
             if clue_upload and getattr(clue_upload, "filename", ""):
                 clue_raw = await read_and_validate_upload(clue_upload)
                 clue_bytes, clue_mime = compress_to_limit(clue_raw, 200 * 1024)
-                clue_name = clue_upload.filename
-        except ValueError as exc:
-            add_flash(request, "error", str(exc))
-            return redirect("/admin/activities")
-
-        tasks_payload.append(
-            {
-                "title": task_title,
-                "description": task_description,
-                "image_data": primary_bytes,
-                "image_mime": primary_mime,
-                "image_filename": primary_upload.filename,
-                "clue_image_data": clue_bytes,
-                "clue_image_mime": clue_mime,
-                "clue_image_filename": clue_name,
-            }
+                task.clue_image_data = clue_bytes
+                task.clue_image_mime = clue_mime
+                task.clue_image_filename = clue_upload.filename
+            elif task_id in remove_clue_ids:
+                task.clue_image_data = None
+                task.clue_image_mime = None
+                task.clue_image_filename = None
+
+            ordered_tasks.append(task)
+
+        new_tasks_payload = await collect_task_payloads(
+            form,
+            "new_task_title",
+            "new_task_description",
+            "new_task_image",
+            "new_task_clue_image",
         )
+    except ValueError as exc:
+        add_flash(request, "error", str(exc))
+        return redirect(f"/admin/activities/{activity_id}/edit")
 
-    if not tasks_payload:
-        add_flash(request, "error", "至少需要添加一个任务卡片。")
-        return redirect("/admin/activities")
+    if len(seen_task_ids) != len(tasks_by_id):
+        add_flash(request, "error", "任务列表不完整，请刷新页面后重试。")
+        return redirect(f"/admin/activities/{activity_id}/edit")
 
-    activity = Activity(
-        title=title,
-        description=description,
-        start_at=start_at,
-        deadline_at=deadline_at,
-        leaderboard_visible=leaderboard_visible,
-        clue_interval_minutes=clue_interval_minutes,
-        created_by_id=admin.id,
-    )
+    for field_name, field_value in activity_fields.items():
+        setattr(activity, field_name, field_value)
+
+    all_tasks = list(ordered_tasks)
+    for payload in new_tasks_payload:
+        task = Task(activity=activity, **payload)
+        db.add(task)
+        all_tasks.append(task)
+
+    if not all_tasks:
+        add_flash(request, "error", "活动至少需要保留一个任务。")
+        return redirect(f"/admin/activities/{activity_id}/edit")
+
+    apply_task_schedule(activity, all_tasks)
     db.add(activity)
-    db.flush()
+    db.commit()
+    add_flash(request, "success", f"活动 {activity.title} 已更新。")
+    return redirect(f"/admin/activities/{activity_id}/edit")
 
-    for index, payload in enumerate(tasks_payload, start=1):
-        release_at = None
-        if payload["clue_image_data"]:
-            if clue_interval_minutes and clue_interval_minutes > 0:
-                release_at = start_at + timedelta(minutes=clue_interval_minutes * index)
-            else:
-                release_at = start_at
-
-        db.add(
-            Task(
-                activity_id=activity.id,
-                title=payload["title"],
-                description=payload["description"],
-                display_order=index,
-                image_data=payload["image_data"],
-                image_mime=payload["image_mime"],
-                image_filename=payload["image_filename"],
-                clue_image_data=payload["clue_image_data"],
-                clue_image_mime=payload["clue_image_mime"],
-                clue_image_filename=payload["clue_image_filename"],
-                clue_release_at=release_at,
-            )
-        )
 
+@router.post("/admin/tasks/{task_id}/delete")
+async def delete_task(task_id: int, request: Request, db: Session = Depends(get_db)):
+    admin = require_admin(request, db)
+    if not admin:
+        return redirect("/admin")
+
+    task = (
+        db.query(Task)
+        .options(joinedload(Task.submissions))
+        .filter(Task.id == task_id)
+        .first()
+    )
+    if not task:
+        raise HTTPException(status_code=404, detail="任务不存在")
+
+    activity = (
+        db.query(Activity)
+        .options(joinedload(Activity.tasks))
+        .filter(Activity.id == task.activity_id)
+        .first()
+    )
+    if not activity:
+        raise HTTPException(status_code=404, detail="活动不存在")
+    if len(activity.tasks) <= 1:
+        add_flash(request, "error", "活动至少需要保留一个任务，不能删除最后一个任务。")
+        return redirect(f"/admin/activities/{activity.id}/edit")
+
+    cleanup_submission_files(task.submissions)
+    activity_id = activity.id
+
+    db.delete(task)
+    db.flush()
+
+    remaining_tasks = (
+        db.query(Task)
+        .filter(Task.activity_id == activity_id)
+        .order_by(Task.display_order.asc(), Task.id.asc())
+        .all()
+    )
+    apply_task_schedule(activity, remaining_tasks)
     db.commit()
-    add_flash(request, "success", f"活动 {title} 已发布。")
-    return redirect("/admin/activities")
+
+    add_flash(request, "success", "任务已删除，剩余任务顺序和线索发布时间已自动更新。")
+    return redirect(f"/admin/activities/{activity_id}/edit")
 
 
 @router.post("/admin/activities/{activity_id}/visibility")

app/static/style.css

@@ -850,3 +850,45 @@ textarea {
     width: 100%;
   }
 }
+
+.activity-actions,
+.task-editor-list {
+  display: grid;
+  gap: 14px;
+}
+
+.task-editor-card {
+  gap: 16px;
+}
+
+.editor-preview-grid {
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 16px;
+}
+
+.editor-thumb,
+.empty-thumb {
+  width: 100%;
+  aspect-ratio: 4 / 3;
+  object-fit: cover;
+  border-radius: 20px;
+  border: 1px solid rgba(78, 148, 97, 0.16);
+  background: rgba(255, 255, 255, 0.6);
+}
+
+.empty-thumb {
+  display: grid;
+  place-items: center;
+  color: var(--muted);
+}
+
+.align-end-checkbox {
+  align-self: end;
+}
+
+@media (max-width: 720px) {
+  .editor-preview-grid {
+    grid-template-columns: 1fr;
+  }
+}

app/templates/admin_activities.html

@@ -89,14 +89,18 @@
               <strong>{{ activity.title }}</strong>
               <p class="muted">{{ activity.start_at|datetime_local }} 至 {{ activity.deadline_at|datetime_local }}</p>
               <p class="muted">{{ activity.tasks|length }} 个任务 · 创建人 {{ activity.created_by.display_name }}</p>
+              <p class="muted">线索间隔：{{ activity.clue_interval_minutes if activity.clue_interval_minutes is not none else '与活动开始同步' }}</p>
+            </div>
+            <div class="activity-actions">
+              <a class="btn btn-primary small-btn" href="/admin/activities/{{ activity.id }}/edit">编辑活动</a>
+              <form method="post" action="/admin/activities/{{ activity.id }}/visibility" class="inline-form visibility-form">
+                <label class="checkbox-row compact-checkbox">
+                  <input type="checkbox" name="leaderboard_visible" {% if activity.leaderboard_visible %}checked{% endif %} />
+                  <span>用户可见排行榜</span>
+                </label>
+                <button class="btn btn-secondary small-btn" type="submit">保存</button>
+              </form>
             </div>
-            <form method="post" action="/admin/activities/{{ activity.id }}/visibility" class="inline-form visibility-form">
-              <label class="checkbox-row compact-checkbox">
-                <input type="checkbox" name="leaderboard_visible" {% if activity.leaderboard_visible %}checked{% endif %} />
-                <span>用户可见排行榜</span>
-              </label>
-              <button class="btn btn-secondary small-btn" type="submit">保存</button>
-            </form>
           </article>
         {% else %}
           <p class="muted">还没有活动，先发布一个吧。</p>
@@ -134,11 +138,7 @@
         const template = builder.querySelector('[data-task-template]');
         const clone = template.cloneNode(true);
         clone.querySelectorAll('input, textarea').forEach((field) => {
-          if (field.type === 'file' || field.type === 'text' || field.type === 'number' || field.type === 'datetime-local') {
-            field.value = '';
-          } else {
-            field.value = '';
-          }
+          field.value = '';
         });
         attachRemove(clone);
         builder.appendChild(clone);

app/templates/admin_activity_edit.html

@@ -0,0 +1,213 @@
+{% extends 'base.html' %}
+
+{% block content %}
+  <section class="hero-card admin-hero">
+    <div>
+      <a class="ghost-link" href="/admin/activities">返回活动管理</a>
+      <p class="eyebrow">Edit Activity</p>
+      <h2>{{ activity.title }}</h2>
+      <p class="lead">在这里可以修改活动时间、排行榜可见性、任务内容、任务图片，并删除不再需要的任务。</p>
+    </div>
+    <div class="hero-badges">
+      <span class="pill">创建人 {{ activity.created_by.display_name }}</span>
+      <span class="pill">{{ activity.tasks|length }} 个任务</span>
+      <span class="pill">开始 {{ activity.start_at|datetime_local }}</span>
+    </div>
+  </section>
+
+  <form method="post" action="/admin/activities/{{ activity.id }}/edit" enctype="multipart/form-data" class="form-stack">
+    <section class="glass-card form-panel wide-panel">
+      <div class="section-head">
+        <div>
+          <p class="eyebrow">Activity Settings</p>
+          <h3>活动信息</h3>
+        </div>
+      </div>
+      <div class="form-grid cols-2">
+        <label>
+          <span>活动标题</span>
+          <input type="text" name="title" value="{{ activity.title }}" required />
+        </label>
+        <label>
+          <span>线索发布时间间隔（分钟）</span>
+          <input type="number" name="clue_interval_minutes" min="0" value="{{ activity.clue_interval_minutes if activity.clue_interval_minutes is not none else '' }}" placeholder="留空表示与活动开始同步" />
+        </label>
+        <label>
+          <span>开始时间</span>
+          <input type="datetime-local" name="start_at" value="{{ activity.start_at.strftime('%Y-%m-%dT%H:%M') }}" required />
+        </label>
+        <label>
+          <span>截止时间</span>
+          <input type="datetime-local" name="deadline_at" value="{{ activity.deadline_at.strftime('%Y-%m-%dT%H:%M') }}" required />
+        </label>
+      </div>
+      <label>
+        <span>活动说明</span>
+        <textarea name="description" rows="3">{{ activity.description or '' }}</textarea>
+      </label>
+      <label class="checkbox-row">
+        <input type="checkbox" name="leaderboard_visible" {% if activity.leaderboard_visible %}checked{% endif %} />
+        <span>允许用户查看实时排行榜</span>
+      </label>
+    </section>
+
+    <section class="glass-card form-panel wide-panel">
+      <div class="section-head">
+        <div>
+          <p class="eyebrow">Existing Tasks</p>
+          <h3>已有任务</h3>
+        </div>
+      </div>
+      <div class="task-editor-list">
+        {% for task in activity.tasks %}
+          <article class="task-builder-card task-editor-card">
+            <div class="builder-title-row">
+              <strong>任务 {{ loop.index }}</strong>
+              <button
+                class="btn btn-danger small-btn"
+                type="submit"
+                form="delete-task-{{ task.id }}"
+                onclick="return confirm('确定删除这个任务吗？相关提交记录也会一并删除。');"
+              >删除任务</button>
+            </div>
+
+            <input type="hidden" name="existing_task_id" value="{{ task.id }}" />
+
+            <div class="form-grid cols-2">
+              <label>
+                <span>任务标题</span>
+                <input type="text" name="existing_task_title" value="{{ task.title }}" required />
+              </label>
+              <label>
+                <span>替换主图</span>
+                <input type="file" name="existing_task_image" accept="image/*" />
+              </label>
+              <label class="full-span">
+                <span>任务描述</span>
+                <textarea name="existing_task_description" rows="2">{{ task.description or '' }}</textarea>
+              </label>
+              <label>
+                <span>替换线索图</span>
+                <input type="file" name="existing_task_clue_image" accept="image/*" />
+              </label>
+              <label class="checkbox-row align-end-checkbox">
+                <input type="checkbox" name="existing_task_remove_clue" value="{{ task.id }}" />
+                <span>移除当前线索图</span>
+              </label>
+            </div>
+
+            <div class="editor-preview-grid">
+              <div>
+                <span class="mini-note">当前主图</span>
+                <img class="editor-thumb" src="/media/tasks/{{ task.id }}/image" alt="{{ task.title }} 主图" />
+              </div>
+              <div>
+                <span class="mini-note">当前线索图</span>
+                {% if task.clue_image_filename %}
+                  <img class="editor-thumb" src="/media/tasks/{{ task.id }}/clue" alt="{{ task.title }} 线索图" />
+                {% else %}
+                  <div class="empty-thumb">未设置线索图</div>
+                {% endif %}
+              </div>
+            </div>
+
+            <div class="chip-row">
+              <span class="chip">提交记录 {{ task.submissions|length }} 条</span>
+              <span class="chip">当前顺序 {{ task.display_order }}</span>
+              <span class="chip">线索发布时间 {{ task.clue_release_at|datetime_local if task.clue_release_at else '未发布' }}</span>
+            </div>
+          </article>
+        {% endfor %}
+      </div>
+    </section>
+
+    <section class="glass-card form-panel wide-panel">
+      <div class="section-head tight-head">
+        <div>
+          <p class="eyebrow">New Tasks</p>
+          <h3>新增任务</h3>
+        </div>
+        <button class="btn btn-secondary" type="button" id="add-new-task-btn">新增任务卡片</button>
+      </div>
+
+      <div class="task-builder" id="new-task-builder">
+        <article class="task-builder-card" data-new-task-template>
+          <div class="builder-title-row">
+            <strong>新增任务 1</strong>
+            <button type="button" class="btn btn-ghost small-btn" data-remove-new-task>删除</button>
+          </div>
+          <div class="form-grid cols-2">
+            <label>
+              <span>任务标题</span>
+              <input type="text" name="new_task_title" />
+            </label>
+            <label>
+              <span>主图</span>
+              <input type="file" name="new_task_image" accept="image/*" />
+            </label>
+            <label class="full-span">
+              <span>任务描述</span>
+              <textarea name="new_task_description" rows="2"></textarea>
+            </label>
+            <label class="full-span">
+              <span>线索图</span>
+              <input type="file" name="new_task_clue_image" accept="image/*" />
+            </label>
+          </div>
+        </article>
+      </div>
+
+      <div class="card-footer">
+        <span class="mini-note">保存后会自动重排任务顺序，并按新的顺序刷新线索发布时间。</span>
+        <button class="btn btn-primary" type="submit">保存活动修改</button>
+      </div>
+    </section>
+  </form>
+
+  {% for task in activity.tasks %}
+    <form id="delete-task-{{ task.id }}" method="post" action="/admin/tasks/{{ task.id }}/delete"></form>
+  {% endfor %}
+
+  <script>
+    (() => {
+      const builder = document.getElementById('new-task-builder');
+      const addBtn = document.getElementById('add-new-task-btn');
+      if (!builder || !addBtn) return;
+
+      const renumber = () => {
+        builder.querySelectorAll('[data-new-task-template]').forEach((card, index) => {
+          const title = card.querySelector('.builder-title-row strong');
+          if (title) title.textContent = `新增任务 ${index + 1}`;
+        });
+      };
+
+      const attachRemove = (card) => {
+        const removeBtn = card.querySelector('[data-remove-new-task]');
+        if (!removeBtn) return;
+        removeBtn.addEventListener('click', () => {
+          if (builder.querySelectorAll('[data-new-task-template]').length === 1) {
+            card.querySelectorAll('input, textarea').forEach((field) => {
+              field.value = '';
+            });
+            return;
+          }
+          card.remove();
+          renumber();
+        });
+      };
+
+      builder.querySelectorAll('[data-new-task-template]').forEach(attachRemove);
+
+      addBtn.addEventListener('click', () => {
+        const template = builder.querySelector('[data-new-task-template]');
+        const clone = template.cloneNode(true);
+        clone.querySelectorAll('input, textarea').forEach((field) => {
+          field.value = '';
+        });
+        attachRemove(clone);
+        builder.appendChild(clone);
+        renumber();
+      });
+    })();
+  </script>
+{% endblock %}

requirements.txt

@@ -6,4 +6,5 @@ jinja2==3.1.6
 python-multipart==0.0.20
 passlib[bcrypt]==1.7.4
 bcrypt==4.1.3
-pillow==11.1.0
+pillow==11.1.0
+itsdangerous==2.2.0