feat: v2.0.0 邮件接收架构改造 —— 移除 Node,Email Worker 直连 Console(docs/11)

- 两阶段接收:POST /internal/email/authorize(accept/reject/temporary_error)+ POST /internal/email/ingest(raw MIME 直传)
- Worker-Console 协议:Authorization: WmailHub-Worker + timestamp/nonce/body-hash/HMAC,nonce 防重放,凭据撤销即时生效
- 数据模型:nodes/node_credentials -> cloudflare_accounts/worker_credentials(迁移 0003),emails/domains 归属 account_id
- 接入流程 Connect Cloudflare Account:OAuth 自动同步域名 + 部署账号级 Email Worker + 签发 Worker 凭据;rotate 自动重部署
- 动态邮箱:创建/删除/禁用下一封邮件立即生效;拒绝码 DOMAIN_*/MAILBOX_*;超时/5xx 不伪装成邮箱不存在
- 删除 node/ 目录、旧 /api/internal/nodes 协议、ingress/enrollment 概念;dev.ts 简化为 console + email worker 双进程
- 前端:账号页 Email Worker/凭据管理,设置窗口移除默认 Ingress,仪表盘/文案同步;版本 2.0.0
- 测试 62 项全过(新增 authorize 决策矩阵 + Worker 两阶段临时错误语义);本机虚拟 E2E 12 场景全通
- docs 00-10 同步改写;README 更新

console/src/routes/settings.ts

@@ -1,7 +1,7 @@
 /**
- * 设置路由(v1.1.0):
- *   GET /api/settings           读取:全局 Webhook / 默认 Node Ingress 地址 / 当前用户
- *   PUT /api/settings           保存:全局 Webhook + 默认 Node Ingress 地址
+ * 设置路由(v2.0.0):
+ *   GET /api/settings           读取:全局 Webhook / 当前用户
+ *   PUT /api/settings           保存:全局 Webhook
  *   PUT /api/settings/password  修改登录密码
  * API/MCP Key 管理沿用 /api/keys(前端设置模态窗口内调用)。
  */
@@ -10,7 +10,7 @@ import { Hono } from "hono";
 import type { Env, AppVars } from "../env.ts";
 import { requireSession } from "../middleware.ts";
 import { checkWebhookUrl, hashPassword, verifyPassword } from "../../../shared/src/index.ts";
-import { getSetting, setSetting } from "../db.ts";
+import { getSetting } from "../db.ts";
 import {
   getGlobalWebhookKey,
   normalizeWebhookHeaders,
@@ -49,32 +49,16 @@ export function settingsRoutes(): App {
     }
     return c.json({
       username: user?.username ?? "",
-      default_ingress_url: (await getSetting(c.env, "default_ingress_url")) ?? "",
       webhook,
     });
   });
 
-  /** 保存设置:全局 Webhook + 默认 Node Ingress 地址 */
+  /** 保存设置:全局 Webhook */
   app.put("/", async (c) => {
     const body = await readJson<{
-      default_ingress_url?: string;
       webhook?: { url?: string; headers?: unknown; key?: string };
     }>(c.req.raw);
 
-    if (body.default_ingress_url !== undefined) {
-      const ingressUrl = body.default_ingress_url.trim();
-      if (ingressUrl) {
-        try {
-          new URL(ingressUrl);
-        } catch {
-          return c.json({ error: "invalid default_ingress_url" }, 400);
-        }
-        await setSetting(c.env, "default_ingress_url", ingressUrl);
-      } else {
-        await c.env.DB.prepare("DELETE FROM settings WHERE key = 'default_ingress_url'").run();
-      }
-    }
-
     if (body.webhook) {
       const url = (body.webhook.url ?? "").trim();
       let headers: Record<string, string>;