功能：新增统一限制白名单管理页面

新增全局限制分组管理、多限制项临时不限白名单、设备搜索选择和风控记录快捷加入入口，并同步引导视频配置展示。

src/app/(main)/config/GuideVideoConfig.tsx

@@ -1,7 +1,18 @@
 'use client';
 
 import { useEffect, useState } from 'react';
-import { Button, Card, InputNumber, Space, Spin, Switch, Tag, Typography, Upload, message } from 'antd';
+import {
+  Button,
+  Card,
+  InputNumber,
+  Space,
+  Spin,
+  Switch,
+  Tag,
+  Typography,
+  Upload,
+  message,
+} from 'antd';
 import { DeleteOutlined, UploadOutlined } from '@ant-design/icons';
 import { api, errMsg } from '@/lib/api';
 import { canDo } from '@/lib/auth';
@@ -38,7 +49,9 @@ function SceneConfig({ scene }: { scene: Scene }) {
   const load = async () => {
     setLoading(true);
     try {
-      const { data } = await api.get<GuideCfg>('/admin/api/guide-video', { params: { scene } });
+      const { data } = await api.get<GuideCfg>('/admin/api/guide-video', {
+        params: { scene },
+      });
       sync(data);
     } catch (e) {
       message.error(errMsg(e));
@@ -56,7 +69,11 @@ function SceneConfig({ scene }: { scene: Scene }) {
     try {
       const { data } = await api.patch<GuideCfg>(
         '/admin/api/guide-video',
-        { enabled, max_plays: maxPlays, reward_coin: rewardCoin },
+        {
+          enabled,
+          reward_coin: rewardCoin,
+          ...(scene === 'comparison' ? { max_plays: maxPlays } : {}),
+        },
         { params: { scene } },
       );
       sync(data);
@@ -121,11 +138,20 @@ function SceneConfig({ scene }: { scene: Scene }) {
       size="small"
       title={meta.title}
       style={{ marginBottom: 16 }}
-      extra={cfg?.updated_at ? <Text type="secondary">更新于 {new Date(cfg.updated_at).toLocaleString('zh-CN')}</Text> : null}
+      extra={
+        cfg?.updated_at ? (
+          <Text type="secondary">
+            更新于 {new Date(cfg.updated_at).toLocaleString('zh-CN')}
+          </Text>
+        ) : null
+      }
     >
       <p style={{ color: '#777', marginTop: 0 }}>
-        Android 用户点击「{meta.action}」后，前若干次在等候浮层广告位播放本视频并奖励金币。
-        次数按账号、按功能分别计算；开播即计次，播完或中途关闭均发放当次配置的金币。
+        Android 用户点击「{meta.action}」后，前 {cfg?.max_plays ?? 3}{' '}
+        次在等候浮层广告位播放本视频并奖励金币。次数按账号、按功能分别计算；
+        开播即计次，播完或中途关闭均发放当次配置的金币。
+        {scene === 'coupon' &&
+          '领券引导视频的播放次数上限请在「监控审计 → 白名单」中调整。'}
       </p>
       {loading || !cfg ? (
         <Spin style={{ display: 'block', margin: '24px 0' }} />
@@ -137,10 +163,24 @@ function SceneConfig({ scene }: { scene: Scene }) {
               <video
                 src={mediaUrl(cfg.video_url)}
                 controls
-                style={{ width: 240, maxHeight: 420, borderRadius: 12, background: '#000' }}
+                style={{
+                  width: 240,
+                  maxHeight: 420,
+                  borderRadius: 12,
+                  background: '#000',
+                }}
               />
             ) : (
-              <div style={{ height: 280, border: '1px dashed #d9d9d9', borderRadius: 12, display: 'grid', placeItems: 'center', color: '#aaa' }}>
+              <div
+                style={{
+                  height: 280,
+                  border: '1px dashed #d9d9d9',
+                  borderRadius: 12,
+                  display: 'grid',
+                  placeItems: 'center',
+                  color: '#aaa',
+                }}
+              >
                 未上传视频
               </div>
             )}
@@ -148,22 +188,51 @@ function SceneConfig({ scene }: { scene: Scene }) {
           <Space direction="vertical" size="middle" style={{ minWidth: 390 }}>
             <Space>
               <span>启用：</span>
-              <Switch checked={enabled} disabled={!canEdit} onChange={setEnabled} />
+              <Switch
+                checked={enabled}
+                disabled={!canEdit}
+                onChange={setEnabled}
+              />
               {!enabled && <Tag color="orange">已关闭</Tag>}
             </Space>
-            <Space>
-              <span>播放次数：</span>
-              <InputNumber min={0} max={50} precision={0} value={maxPlays} disabled={!canEdit} onChange={(v) => setMaxPlays(v ?? 0)} />
-              <Text type="secondary">每个账号前 N 次（默认 3）</Text>
-            </Space>
+            {scene === 'comparison' && (
+              <Space>
+                <span>播放次数：</span>
+                <InputNumber
+                  min={0}
+                  max={50}
+                  precision={0}
+                  value={maxPlays}
+                  disabled={!canEdit}
+                  onChange={(value) => setMaxPlays(value ?? 0)}
+                />
+                <Text type="secondary">每个账号前 N 次（默认 3）</Text>
+              </Space>
+            )}
             <Space>
               <span>每次金币：</span>
-              <InputNumber min={0} max={10000} precision={0} value={rewardCoin} disabled={!canEdit} onChange={(v) => setRewardCoin(v ?? 0)} />
+              <InputNumber
+                min={0}
+                max={10000}
+                precision={0}
+                value={rewardCoin}
+                disabled={!canEdit}
+                onChange={(value) => setRewardCoin(value ?? 0)}
+              />
               <Text type="secondary">默认 100</Text>
             </Space>
             <Space wrap>
-              <Upload accept="video/mp4,.mp4" showUploadList={false} beforeUpload={beforeUpload} disabled={!canEdit}>
-                <Button icon={<UploadOutlined />} loading={uploading} disabled={!canEdit}>
+              <Upload
+                accept="video/mp4,.mp4"
+                showUploadList={false}
+                beforeUpload={beforeUpload}
+                disabled={!canEdit}
+              >
+                <Button
+                  icon={<UploadOutlined />}
+                  loading={uploading}
+                  disabled={!canEdit}
+                >
                   {cfg.video_url ? '更换视频' : '上传视频'}
                 </Button>
               </Upload>
@@ -174,8 +243,17 @@ function SceneConfig({ scene }: { scene: Scene }) {
               )}
               <Text type="secondary">MP4（H.264），≤100MB</Text>
             </Space>
-            <Button type="primary" loading={saving} disabled={!canEdit} onClick={save}>保存配置</Button>
-            <Text type="secondary">累计播放 {cfg.total_plays} 次，已发币 {cfg.granted_plays} 次</Text>
+            <Button
+              type="primary"
+              loading={saving}
+              disabled={!canEdit}
+              onClick={save}
+            >
+              保存配置
+            </Button>
+            <Text type="secondary">
+              累计播放 {cfg.total_plays} 次，已发币 {cfg.granted_plays} 次
+            </Text>
           </Space>
         </Space>
       )}

src/app/(main)/layout.tsx

@@ -18,6 +18,7 @@ import {
   ProfileOutlined,
   SafetyCertificateOutlined,
   SecurityScanOutlined,
+  StopOutlined,
   SettingOutlined,
   ShareAltOutlined,
   TeamOutlined,
@@ -105,6 +106,7 @@ const NAV_GROUPS: NavGroup[] = [
       { key: '/analytics-health', icon: <LineChartOutlined />, label: '埋点成功率' },
       { key: '/event-logs', icon: <DatabaseOutlined />, label: '埋点日志' },
       { key: '/audit-logs', icon: <FileSearchOutlined />, label: '审计日志' },
+      { key: '/limit-whitelist', icon: <StopOutlined />, label: '白名单' },
     ],
   },
 ];

src/app/(main)/risk-monitor/page.tsx

@@ -19,6 +19,7 @@ import {
   CopyOutlined,
   DownOutlined,
   EditOutlined,
+  PlusCircleOutlined,
   ReloadOutlined,
   RightOutlined,
 } from '@ant-design/icons';
@@ -69,8 +70,8 @@ type IncidentStatus = 'open' | 'blocked';
 const RULE_LIMITS: Record<RiskKind, { min: number; max: number; help: string }> = {
   sms: {
     min: 1,
-    max: 5,
-    help: '统计成功下发；最高5次，与现有每设备每小时发送上限一致。',
+    max: 100000,
+    help: '统计成功下发；告警阈值与短信硬限制分别配置。',
   },
   oneclick: {
     min: 1,
@@ -79,8 +80,8 @@ const RULE_LIMITS: Record<RiskKind, { min: number; max: number; help: string }>
   },
   compare: {
     min: 1,
-    max: 100,
-    help: '同一账户按北京时间自然日累计；最高100次，与比价每日上限一致。',
+    max: 100000,
+    help: '同一账户按北京时间自然日累计；告警阈值与比价硬限制分别配置。',
   },
 };
 const utcTime = (value: string | null, withDate = true) =>
@@ -597,6 +598,40 @@ export default function RiskMonitorPage() {
     [lists, loadAll, message, modal],
   );
 
+  const addToWhitelist = useCallback(
+    (row: RiskIncidentItem) => {
+      const isCompare = row.kind === 'compare';
+      const subjectValue = isCompare ? row.phone : row.subject_id;
+      if (!isCompare && subjectValue?.startsWith('legacy-ip:')) {
+        void message.error(
+          '旧客户端未上报真实设备 ID，无法加入设备白名单，请升级客户端后重试',
+        );
+        return;
+      }
+      if (!subjectValue) {
+        void message.error(
+          isCompare
+            ? '该风险记录没有关联手机号，暂时无法加入白名单'
+            : '该风险记录没有设备 ID，暂时无法加入白名单',
+        );
+        return;
+      }
+      const ruleCode: Record<RiskKind, string> = {
+        sms: 'risk.sms.hourly',
+        oneclick: 'risk.oneclick.daily',
+        compare: 'risk.compare.daily',
+      };
+      const params = new URLSearchParams({
+        create: '1',
+        subject_type: isCompare ? 'phone' : 'device',
+        subject_value: subjectValue,
+        rule_code: ruleCode[row.kind],
+      });
+      window.location.assign(`/limit-whitelist?${params.toString()}`);
+    },
+    [message],
+  );
+
   const columns = useCallback(
     (kind: RiskKind): ColumnsType<RiskIncidentItem> => {
       const actionColumn = {
@@ -604,9 +639,12 @@ export default function RiskMonitorPage() {
         key: 'actions',
         align: 'right' as const,
         fixed: 'right' as const,
-        width: 180,
+        width: 280,
         render: (_: unknown, row: RiskIncidentItem) => {
           const open = expanded.has(row.incident_id);
+          const canAddToWhitelist =
+            row.kind === 'compare' ||
+            !row.subject_id.startsWith('legacy-ip:');
           return (
             <span className={styles.actionGroup}>
               <Button
@@ -618,6 +656,24 @@ export default function RiskMonitorPage() {
               >
                 {open ? '收起' : '展开'}
               </Button>
+              <Tooltip
+                title={
+                  canAddToWhitelist
+                    ? undefined
+                    : '旧客户端未上报真实设备 ID，无法加入设备白名单'
+                }
+              >
+                <span>
+                  <Button
+                    size="small"
+                    icon={<PlusCircleOutlined />}
+                    disabled={!canAddToWhitelist}
+                    onClick={() => addToWhitelist(row)}
+                  >
+                    加入白名单
+                  </Button>
+                </span>
+              </Tooltip>
               {row.status === 'open' && (
                 <>
                   <Button
@@ -700,7 +756,16 @@ export default function RiskMonitorPage() {
         actionColumn,
       ];
     },
-    [acting, copy, detailLoading, expanded, revokeRestriction, runAction, toggle],
+    [
+      acting,
+      addToWhitelist,
+      copy,
+      detailLoading,
+      expanded,
+      revokeRestriction,
+      runAction,
+      toggle,
+    ],
   );
 
   const cards = useMemo(() => {

src/lib/types.ts

@@ -414,14 +414,14 @@ export interface FeedbackQrConfig {
   updated_at: string | null;
 }
 
-/** 领券等候浮层的「新手引导视频」配置(前 3 次用它替代广告,每次固定 120 金币)。
+/** 领券等候浮层的「新手引导视频」配置(前 3 次用它替代广告,默认每次固定 100 金币)。
  *  后台只开放 enabled + 换片;下面几个字段接口仍返回,但页面不展示、也不回传。 */
 export interface GuideVideoConfig {
   scene: 'coupon' | 'comparison';
   enabled: boolean;
   video_url: string | null; // /media/guide_video/xxx.mp4;null = 未配片(浮层照旧只放广告)
   max_plays: number; // 每个账号前 N 次浮层放引导视频(服务端默认 3,后台不开放调整)
-  reward_coin: number; // 每次固定金币(服务端默认 120,播完 / 中途关闭都发)
+  reward_coin: number; // 每次固定金币(服务端默认 100,播完 / 中途关闭都发)
   updated_at: string | null;
   total_plays: number; // 只读统计:全站已播次数(后台不再展示)
   granted_plays: number; // 只读统计:其中已发币次数(后台不再展示)
@@ -895,3 +895,65 @@ export interface HealthTrendPoint extends HealthMetrics {
 export interface HealthBreakdownRow extends HealthMetrics {
   key: string; // 维度值(event 名 / app_ver / oem);缺失为 "(unknown)"
 }
+
+// ===== 统一限制策略 / 白名单 =====
+export type LimitSubjectType = 'phone' | 'device';
+export type LimitPolicyMode =
+  | 'inherit'
+  | 'override'
+  | 'unlimited'
+  | 'suppress_alert';
+
+export interface LimitRule {
+  code: string;
+  label: string;
+  group: string;
+  global_limit: number;
+  default_limit: number;
+  window_label: string;
+  subject_types: LimitSubjectType[];
+  allowed_modes: LimitPolicyMode[];
+  min_value: number;
+  max_value: number;
+  supports_reset: boolean;
+  alert_only: boolean;
+}
+
+export interface LimitDeviceCandidate {
+  device_id: string;
+  source: string;
+  source_label: string;
+  user_id: number | null;
+  username: string | null;
+  phone: string | null;
+  nickname: string | null;
+  device_model: string | null;
+  last_active_at: string;
+}
+
+export interface LimitOverride {
+  id: number;
+  subject_type: LimitSubjectType;
+  subject_value: string;
+  rule_code: string;
+  rule_label: string;
+  rule_group: string;
+  mode: LimitPolicyMode;
+  limit_value: number | null;
+  global_limit: number;
+  effective_limit: number | null;
+  enabled: boolean;
+  starts_at: string | null;
+  expires_at: string | null;
+  reset_at: string | null;
+  reason: string | null;
+  status: 'active' | 'scheduled' | 'expired' | 'disabled';
+  created_by_admin_id: number | null;
+  created_at: string;
+  updated_at: string;
+}
+
+export interface LimitOverrideList {
+  items: LimitOverride[];
+  total: number;
+}