feat: 模块化命令框架 + runbook 严格断言与查询结果回传

- core/module: 命令模板、门控（feature flag/confirm/dry-run）、ecode 错误标签、ResultFormatter
- runbook executor: http.get/http.post/assert.json(expect_success 严格断言)、目标主机管理、任务落库、最终 stdout 直接回传
- cf 模块: /cf dns list 支持域名自动解析 zone_id；dns list/zones/workers list 格式化回传；API success:false 判真失败
- 全部 CF/CPA runbook 接入严格断言，杜绝假阳性 success
- 新增 cpa/cfdav/mail/sub 模块与 runbooks；QQ 订阅到期提醒调度
- Web 后台: 模块设置(CF/CPA/cfdav/AI)、OPS 任务、渠道管理、审计页

internal/module/cpa/commands.go

@@ -0,0 +1,62 @@
+package cpa
+
+import (
+	"fmt"
+	"strings"
+
+	coremodule "ops-assistant/internal/core/module"
+	"ops-assistant/internal/core/runbook"
+)
+
+func commandSpecs() []coremodule.CommandSpec {
+	return []coremodule.CommandSpec{
+		{
+			Prefixes: []string{"/cpa status"},
+			Template: coremodule.CommandTemplate{
+				RunbookName: "cpa_status",
+				Gate:        coremodule.Gate{AllowDryRun: true},
+				DryRunMsg:   "🧪 dry-run: 将执行 /cpa status（未实际执行）",
+				SuccessMsg:  func(jobID uint) string { return fmt.Sprintf("✅ /cpa status 已执行，job=%d", jobID) },
+			},
+			ErrPrefix: "/cpa status 执行失败: ",
+		},
+		{
+			Prefixes: []string{"/cpa usage backup"},
+			Template: coremodule.CommandTemplate{
+				RunbookName: "cpa_usage_backup",
+				Gate:        coremodule.Gate{AllowDryRun: true},
+				DryRunMsg:   "🧪 dry-run: 将执行 /cpa usage backup（未实际执行）",
+				SuccessMsg:  func(jobID uint) string { return fmt.Sprintf("✅ /cpa usage backup 已执行，job=%d", jobID) },
+			},
+			ErrPrefix: "/cpa usage backup 执行失败: ",
+		},
+		{
+			Prefixes: []string{"/cpa usage restore "},
+			ErrHint:  "--confirm YES_RESTORE",
+			Template: coremodule.CommandTemplate{
+				RunbookName: "cpa_usage_restore",
+				Gate:        coremodule.Gate{NeedFlag: "allow_ops_restore", RequireConfirm: true, ExpectedToken: "YES_RESTORE", AllowDryRun: true},
+				InputsFn: func(_ string, parts []string) (map[string]string, error) {
+					if len(parts) < 4 {
+						return nil, fmt.Errorf("❌ 用法：/cpa usage restore <backup_id>")
+					}
+					backupID := strings.TrimSpace(parts[3])
+					if backupID == "" {
+						return nil, fmt.Errorf("❌ backup_id 不能为空")
+					}
+					return map[string]string{"backup_id": backupID}, nil
+				},
+				MetaFn: func(userID int64, confirmToken string, inputs map[string]string) runbook.RunMeta {
+					meta := runbook.NewMeta()
+					meta.Target = "hwsg"
+					meta.RiskLevel = "high"
+					meta.ConfirmHash = hashConfirmToken(confirmToken)
+					return meta
+				},
+				DryRunMsg:  "🧪 dry-run: 将执行 restore（未实际执行）",
+				SuccessMsg: func(jobID uint) string { return fmt.Sprintf("✅ /cpa usage restore 已执行，job=%d", jobID) },
+			},
+			ErrPrefix: "/cpa usage restore 执行失败: ",
+		},
+	}
+}

internal/module/cpa/crypto.go

@@ -0,0 +1,16 @@
+package cpa
+
+import (
+	"crypto/sha256"
+	"encoding/hex"
+	"strings"
+)
+
+func hashConfirmToken(token string) string {
+	t := strings.TrimSpace(token)
+	if t == "" {
+		return ""
+	}
+	sum := sha256.Sum256([]byte(t))
+	return hex.EncodeToString(sum[:])
+}

internal/module/cpa/guards.go

@@ -0,0 +1,13 @@
+package cpa
+
+import (
+	"ops-assistant/internal/core/ecode"
+)
+
+func formatErr(code, msg string) string {
+	return ecode.Tag(code, msg)
+}
+
+func formatOK(msg string) string {
+	return ecode.Tag("OK", msg)
+}

internal/module/cpa/module.go

@@ -0,0 +1,40 @@
+package cpa
+
+import (
+	"strings"
+
+	"ops-assistant/internal/core/command"
+	"ops-assistant/internal/core/ecode"
+	coremodule "ops-assistant/internal/core/module"
+	"ops-assistant/internal/core/runbook"
+	"gorm.io/gorm"
+)
+
+type Module struct {
+	db     *gorm.DB
+	exec   *runbook.Executor
+	runner *coremodule.Runner
+}
+
+func New(db *gorm.DB, exec *runbook.Executor) *Module {
+	return &Module{db: db, exec: exec, runner: coremodule.NewRunner(db, exec)}
+}
+
+func (m *Module) Handle(userID int64, cmd *command.ParsedCommand) (string, error) {
+	text := strings.TrimSpace(cmd.Raw)
+	if text == "/cpa" || strings.HasPrefix(text, "/cpa help") {
+		return "CPA 模块\n- /cpa status\n- /cpa usage backup\n- /cpa usage restore <backup_id> [--confirm YES_RESTORE] [--dry-run]", nil
+	}
+	specs := commandSpecs()
+	if sp, ok := coremodule.MatchCommand(text, specs); ok {
+		jobID, out, err := coremodule.ExecTemplate(m.runner, userID, cmd.Raw, sp.Template)
+		if err != nil {
+			return formatErr(ecode.ErrStepFailed, coremodule.FormatExecError(sp, err)), nil
+		}
+		if out == "dry-run" {
+			return formatOK(coremodule.FormatDryRunMessage(sp.Template)), nil
+		}
+		return formatOK(coremodule.FormatSuccessMessage(sp.Template, jobID)), nil
+	}
+	return "❓ 暂不支持该 CPA 命令。当前支持：/cpa status, /cpa usage backup, /cpa usage restore <backup_id>", nil
+}