style: collapse subscription risk settings

src/actions/admin/settings.ts

@@ -87,9 +87,16 @@ async function assertSmtpTestRateLimit(userId: string) {
   }
 }
 
+function optionalBoolean(value: string | undefined, fallback: boolean) {
+  return value == null ? fallback : value === "true";
+}
+
 function buildSettingsUpdate(parsed: z.infer<typeof settingsSchema>, current: Awaited<ReturnType<typeof getAppConfig>>) {
-  const smtpEnabled = parsed.smtpEnabled === "true";
+  const smtpEnabled = optionalBoolean(parsed.smtpEnabled, current.smtpEnabled);
-  const emailVerificationRequired = parsed.emailVerificationRequired === "true";
+  const emailVerificationRequired = optionalBoolean(
+    parsed.emailVerificationRequired,
+    current.emailVerificationRequired,
+  );
   const smtpPassword = parsed.smtpPassword?.trim()
     ? encrypt(parsed.smtpPassword.trim())
     : current.smtpPassword;
@@ -102,17 +109,26 @@ function buildSettingsUpdate(parsed: z.infer<typeof settingsSchema>, current: Aw
     supportOpenTicketLimit: parsed.supportOpenTicketLimit ?? current.supportOpenTicketLimit,
     maintenanceNotice: parsed.maintenanceNotice || null,
     siteNotice: parsed.siteNotice || null,
-    allowRegistration: parsed.allowRegistration === "true",
+    allowRegistration: optionalBoolean(parsed.allowRegistration, current.allowRegistration),
     emailVerificationRequired,
-    requireInviteCode: parsed.requireInviteCode === "true",
+    requireInviteCode: optionalBoolean(parsed.requireInviteCode, current.requireInviteCode),
-    autoReminderDispatchEnabled: parsed.autoReminderDispatchEnabled === "true",
+    autoReminderDispatchEnabled: optionalBoolean(
+      parsed.autoReminderDispatchEnabled,
+      current.autoReminderDispatchEnabled,
+    ),
     reminderDispatchIntervalMinutes:
       parsed.reminderDispatchIntervalMinutes ?? current.reminderDispatchIntervalMinutes,
-    trafficSyncEnabled: parsed.trafficSyncEnabled === "true",
+    trafficSyncEnabled: optionalBoolean(parsed.trafficSyncEnabled, current.trafficSyncEnabled),
     trafficSyncIntervalSeconds:
       parsed.trafficSyncIntervalSeconds ?? current.trafficSyncIntervalSeconds,
-    subscriptionRiskEnabled: parsed.subscriptionRiskEnabled === "true",
+    subscriptionRiskEnabled: optionalBoolean(
-    subscriptionRiskAutoSuspend: parsed.subscriptionRiskAutoSuspend === "true",
+      parsed.subscriptionRiskEnabled,
+      current.subscriptionRiskEnabled,
+    ),
+    subscriptionRiskAutoSuspend: optionalBoolean(
+      parsed.subscriptionRiskAutoSuspend,
+      current.subscriptionRiskAutoSuspend,
+    ),
     subscriptionRiskWindowHours:
       parsed.subscriptionRiskWindowHours ?? current.subscriptionRiskWindowHours,
     subscriptionRiskCityWarning:
@@ -131,7 +147,7 @@ function buildSettingsUpdate(parsed: z.infer<typeof settingsSchema>, current: Aw
       parsed.subscriptionRiskIpLimitPerHour ?? current.subscriptionRiskIpLimitPerHour,
     subscriptionRiskTokenLimitPerHour:
       parsed.subscriptionRiskTokenLimitPerHour ?? current.subscriptionRiskTokenLimitPerHour,
-    inviteRewardEnabled: parsed.inviteRewardEnabled === "true",
+    inviteRewardEnabled: optionalBoolean(parsed.inviteRewardEnabled, current.inviteRewardEnabled),
     inviteRewardRate: parsed.inviteRewardRate ?? Number(current.inviteRewardRate),
     inviteRewardCouponId: parsed.inviteRewardCouponId || null,
     turnstileSiteKey: parsed.turnstileSiteKey || null,
@@ -139,7 +155,7 @@ function buildSettingsUpdate(parsed: z.infer<typeof settingsSchema>, current: Aw
     smtpEnabled,
     smtpHost: parsed.smtpHost || null,
     smtpPort: parsed.smtpPort ?? current.smtpPort,
-    smtpSecure: parsed.smtpSecure === "true",
+    smtpSecure: optionalBoolean(parsed.smtpSecure, current.smtpSecure),
     smtpUser: parsed.smtpUser || null,
     smtpPassword,
     smtpFromName: parsed.smtpFromName || null,

src/app/(admin)/admin/settings/settings-form.tsx

@@ -2,7 +2,7 @@
 
 import { useState, type FormEvent } from "react";
 import { useRouter } from "next/navigation";
-import { Bell, Clock3, Gift, LifeBuoy, Mail, Send, Settings2, ShieldAlert, ShieldCheck } from "lucide-react";
+import { Bell, ChevronDown, Clock3, Gift, LifeBuoy, Mail, Send, Settings2, ShieldAlert, ShieldCheck } from "lucide-react";
 import { Button, buttonVariants } from "@/components/ui/button";
 import { Input } from "@/components/ui/input";
 import { Label } from "@/components/ui/label";
@@ -63,6 +63,7 @@ export function SettingsForm({ config, coupons }: { config: AppConfig; coupons:
   const router = useRouter();
   const [saving, setSaving] = useState(false);
   const [testingEmail, setTestingEmail] = useState(false);
+  const [riskSettingsOpen, setRiskSettingsOpen] = useState(false);
 
   async function handleSubmit(event: FormEvent<HTMLFormElement>) {
     event.preventDefault();
@@ -235,12 +236,30 @@ export function SettingsForm({ config, coupons }: { config: AppConfig; coupons:
       </section>
 
       <section className="space-y-4 rounded-lg border border-border bg-muted/25 p-3">
-        <div className="flex items-center gap-2 text-sm font-semibold">
+        <button
-          <ShieldAlert className="size-4 text-primary" /> 订阅访问风控
+          type="button"
-        </div>
+          aria-expanded={riskSettingsOpen}
-        <p className="text-xs leading-5 text-muted-foreground">
+          aria-controls="subscription-risk-settings"
-          控制订阅接口限流、跨地区访问告警和自动暂停。关闭总控后仍会保留访问日志，但不会限流、告警或自动暂停。
+          onClick={() => setRiskSettingsOpen((open) => !open)}
-        </p>
+          className="flex w-full items-center justify-between gap-4 rounded-md text-left outline-none transition-colors hover:text-primary focus-visible:ring-[3px] focus-visible:ring-ring/15"
+        >
+          <span className="flex min-w-0 items-start gap-2">
+            <ShieldAlert className="mt-0.5 size-4 shrink-0 text-primary" />
+            <span className="min-w-0">
+              <span className="block text-sm font-semibold">订阅访问风控</span>
+              <span className="mt-1 block text-xs leading-5 text-muted-foreground">
+                控制订阅接口限流、跨地区访问告警和自动暂停，当前{config.subscriptionRiskEnabled ? "已开启" : "已关闭"}。
+              </span>
+            </span>
+          </span>
+          <span className="flex shrink-0 items-center gap-2 text-xs font-medium text-muted-foreground">
+            {riskSettingsOpen ? "收起" : "展开"}
+            <ChevronDown className={`size-4 transition-transform ${riskSettingsOpen ? "rotate-180" : ""}`} />
+          </span>
+        </button>
+
+        {riskSettingsOpen && (
+          <div id="subscription-risk-settings" className="space-y-4">
             <div className="grid gap-5 md:grid-cols-3">
               <div className="space-y-2">
                 <Label htmlFor="subscriptionRiskEnabled">风控总控</Label>
@@ -369,6 +388,8 @@ export function SettingsForm({ config, coupons }: { config: AppConfig; coupons:
             <p className="text-xs leading-5 text-muted-foreground">
               默认值对应原规则：24 小时内 4 城市警告、5 城市暂停；2 省/地区警告、3 省/地区暂停；2 国家警告、3 国家暂停；IP 180 次/小时，订阅 60 次/小时。
             </p>
+          </div>
+        )}
       </section>
 
       <section className="space-y-4 rounded-lg border border-border bg-muted/25 p-3">