feat(auth): 邮箱验证码登录通道（正式兜底，替代不可用的短信）——/auth/email/code + /auth/email/login，SmtpEmailSender（stdlib smtplib，无新依赖）+ FakeEmailSender（仅本地）；频控对齐短信口径（60s 冷却/邮箱 1h≤5·24h≤10/IP≤20/设备≤10）；新增 EMAIL_*/SMTP_* 配置与 40112/40113/42912/42913/61001 错误码

packages/shared/errors.py

@@ -34,6 +34,8 @@ class ErrorCode(IntEnum):
     SESSION_REVOKED = 40105
     SMS_CODE_INVALID = 40110
     SMS_CODE_EXPIRED = 40111
+    EMAIL_CODE_INVALID = 40112
+    EMAIL_CODE_EXPIRED = 40113
     FORBIDDEN = 40300
     QUOTA_EXHAUSTED = 40301
     CONSENT_REQUIRED = 40302
@@ -46,10 +48,12 @@ class ErrorCode(IntEnum):
     REPORT_EXPORT_NOT_READY = 40421
     STATE_CONFLICT = 40900
     TASK_BONUS_ALREADY_CLAIMED = 40910
-    REPORT_ALREADY_EXISTS = 40920
+    REPORT_ALREADY_EXISTS = 40920  # 已下线，仅历史兼容：重复生成改由 report_basic 配额兜底
     RATE_LIMITED = 42900
     SMS_SEND_TOO_FREQUENT = 42910
     SMS_DAILY_LIMIT = 42911
+    EMAIL_SEND_TOO_FREQUENT = 42912
+    EMAIL_DAILY_LIMIT = 42913
 
     # --- 5xxxx server -----------------------------------------------------
     INTERNAL_ERROR = 50000
@@ -67,6 +71,7 @@ class ErrorCode(IntEnum):
     MODERATION_UNAVAILABLE = 60005
     LLM_SCENE_DEGRADED = 60006
     SMS_PROVIDER_FAILED = 61000
+    EMAIL_PROVIDER_FAILED = 61001
 
 
 @dataclass(frozen=True, slots=True)
@@ -95,6 +100,8 @@ ERROR_META: dict[ErrorCode, ErrorMeta] = {
     ErrorCode.SESSION_REVOKED: ErrorMeta(401, "该会话已登出", "请重新登录"),
     ErrorCode.SMS_CODE_INVALID: ErrorMeta(401, "验证码错误", "请检查后重试"),
     ErrorCode.SMS_CODE_EXPIRED: ErrorMeta(401, "验证码已过期", "请重新获取"),
+    ErrorCode.EMAIL_CODE_INVALID: ErrorMeta(401, "验证码错误", "请检查后重试"),
+    ErrorCode.EMAIL_CODE_EXPIRED: ErrorMeta(401, "验证码已过期", "请重新获取"),
     ErrorCode.FORBIDDEN: ErrorMeta(403, "没有访问权限"),
     ErrorCode.QUOTA_EXHAUSTED: ErrorMeta(403, "今日额度已用完", "明天恢复，或完成任务多换几次"),
     ErrorCode.CONSENT_REQUIRED: ErrorMeta(403, "需要先完成授权", "请阅读并同意后继续"),
@@ -111,10 +118,13 @@ ERROR_META: dict[ErrorCode, ErrorMeta] = {
     ErrorCode.TASK_BONUS_ALREADY_CLAIMED: ErrorMeta(
         409, "这个周期的任务奖励已领取", "下个周期再来"
     ),
+    # 40920 已无任何 raise 方（service 终身资格硬校验已删），保留仅为兼容旧端缓存的错误文案。
     ErrorCode.REPORT_ALREADY_EXISTS: ErrorMeta(409, "本期报告已生成过", "每 30 天可重新生成一次"),
     ErrorCode.RATE_LIMITED: ErrorMeta(429, "操作太频繁了", "请稍后再试"),
     ErrorCode.SMS_SEND_TOO_FREQUENT: ErrorMeta(429, "发送太频繁了", "请稍后再试"),
     ErrorCode.SMS_DAILY_LIMIT: ErrorMeta(429, "今日发送次数已达上限", "明天再试"),
+    ErrorCode.EMAIL_SEND_TOO_FREQUENT: ErrorMeta(429, "发送太频繁了", "请稍后再试"),
+    ErrorCode.EMAIL_DAILY_LIMIT: ErrorMeta(429, "今日发送次数已达上限", "明天再试"),
     ErrorCode.INTERNAL_ERROR: ErrorMeta(500, "服务开小差了", "请稍后重试"),
     ErrorCode.DB_ERROR: ErrorMeta(500, "服务开小差了", "请稍后重试"),
     ErrorCode.TASK_STATE_INVALID: ErrorMeta(500, "任务状态异常", "请稍后在首页「报告」中查看"),
@@ -138,6 +148,7 @@ ERROR_META: dict[ErrorCode, ErrorMeta] = {
         503, "该功能今日暂时关闭", "AI 服务今日已达服务上限，明天恢复"
     ),
     ErrorCode.SMS_PROVIDER_FAILED: ErrorMeta(502, "短信服务暂时不可用", "请稍后重试"),
+    ErrorCode.EMAIL_PROVIDER_FAILED: ErrorMeta(502, "邮件服务暂时不可用", "请稍后重试"),
 }