feat: 唤醒式架构批次——capacity/L4/会话编排/管理面板写CRUD/前端集成（77-81）

【capacity 唤醒式核心(77)】internal/runtime/capacity：(Decider L1启发式+L2上下文+人格覆盖→三态静息/唤醒/全能→允许工具集+capacity_awaken事件)。loop 外围允许集过滤(不硬阻断=能力≠边界红线)。config 加 Capacity(Enabled/MinConfidence/ToolSets)。wire buildCapacity 接入 loop。

【L4 记忆驱动意图(80)】recall.go：从记忆召回用户习惯(搞一下xx=办事)→唤醒L1/L2漏掉/升置信；群聊陌生人不读owner习惯(隔离红线)；RecordIntent闭环(判定写回记忆越用越准)；默认保守静息。

【会话消息编排(78)】gateway/session_orchestrator.go：每会话(模式/pending有界5/tail上下文尾巴20)；Submit非阻塞(idle立即/busy入队ack/满拒绝)；完成回调按序续接(tail+新消息合并增量注入非全量重放)；Interrupt中断；REST 202/409+WS session_busy/pending_ack事件；不重造任务引擎复用loop。

【前端集成(79)】ws.ts 加 capacity_awaken/session_busy/pending_ack 解析；store 加 awakenState/sessionBusy；TopBar/ChatShell 加唤醒态徽标+忙态提示(不阻塞输入框)；状态组件 status.tsx；Miuix风格。

【管理面板写CRUD(81)】20个写端点(POST/PUT/DELETE /admin/*，owner+审计落库)：personas(真持久化YAML)/users apikey(签发掩码+撤销)/iot控制(真下发)/automations(建/触发/删)/llm(test真调用+临时)/channels(connect/close/身份测试actor白名单)/plugins(卸载)/memories(search真检索)/sessions(export)。无存储如实501不伪造。拆4文件满足≤500红线。前端9模块接真写。

【wire收口】buildCapacity接入loop+OnCapacity事件；server.go newOrchestrator接hub。

实机验证：iot ac.living control 200 真实改变 on:true；observability/metrics 200、health ok；全仓 build/vet/test 47包绿+前端tsc/vite。

cmd/cyrene/wire.go

@@ -3,6 +3,7 @@ package main
 import (
 	"context"
 	"database/sql"
+	"encoding/json"
 	"fmt"
 	"log/slog"
 	"os"
@@ -23,6 +24,7 @@ import (
 	personareg "git.yeij.top/AskaEth/Cyrene_v2/internal/persona/registry"
 	"git.yeij.top/AskaEth/Cyrene_v2/internal/platform"
 	"git.yeij.top/AskaEth/Cyrene_v2/internal/runtime/agent"
+	"git.yeij.top/AskaEth/Cyrene_v2/internal/runtime/capacity"
 	"git.yeij.top/AskaEth/Cyrene_v2/internal/runtime/embedding"
 	"git.yeij.top/AskaEth/Cyrene_v2/internal/runtime/exec"
 	"git.yeij.top/AskaEth/Cyrene_v2/internal/runtime/guardrail"
@@ -314,9 +316,13 @@ func (a *app) wireRuntime() error {
 		a.dispatcher.Invoke,
 	)
 
+	capDecider := a.buildCapacity()
+
 	a.loop = loop.New(loop.Options{
 		Agent:         ag,
 		Tools:         a.dispatcher,
+		Capacity:      capDecider,
+		OnCapacity:    a.onCapacity,
 		Memory:        store,
 		Retriever:     a.retriever,
 		Extractor:     memory.NewManualExtractor(personaID, "owner"),
@@ -344,6 +350,53 @@ func (a *app) wireRuntime() error {
 	return nil
 }
 
+// buildCapacity constructs the awakened-capacity decider when enabled, or nil
+// (which keeps the loop's default all-tools behavior). It is opt-in via
+// CAPACITY_ENABLED; the allowed-set mapping comes from CAPACITY_TOOL_SETS and
+// falls back to built-in defaults on a parse error.
+func (a *app) buildCapacity() *capacity.Decider {
+	if !a.cfg.Capacity.Enabled {
+		return nil
+	}
+	sets, err := parseCapacityToolSets(a.cfg.Capacity.ToolSetsJSON)
+	if err != nil {
+		a.log.Warn("capacity tool sets parse failed, using built-in defaults", "error", err)
+		sets = nil
+	}
+	return capacity.New(capacity.Config{
+		Enabled:       true,
+		MinConfidence: a.cfg.Capacity.MinConfidence,
+		ToolSets:      sets,
+	}, capacity.WithLogger(a.log))
+}
+
+// onCapacity is the loop's OnCapacity sink: it observes a capacity_awaken
+// transition for observability. A future frontend wire (design/14 §5) will render
+// the "能力点亮" progression from these events.
+func (a *app) onCapacity(ev capacity.Event) {
+	a.log.Debug("capacity event",
+		"type", ev.Type, "from", ev.FromState, "to", ev.ToState,
+		"tool", ev.Tool, "at", ev.At)
+}
+
+// parseCapacityToolSets decodes the CAPACITY_TOOL_SETS JSON map of
+// state→allowed tool name list. A blank string yields nil (built-in defaults); a
+// null value for a state means unrestricted (all tools).
+func parseCapacityToolSets(raw string) (map[capacity.State][]string, error) {
+	if strings.TrimSpace(raw) == "" {
+		return nil, nil
+	}
+	var m map[string][]string
+	if err := json.Unmarshal([]byte(raw), &m); err != nil {
+		return nil, fmt.Errorf("capacity tool sets: %w", err)
+	}
+	out := make(map[capacity.State][]string, len(m))
+	for k, v := range m {
+		out[capacity.State(k)] = v
+	}
+	return out, nil
+}
+
 // wireAuxiliary builds the execution provider, task manager, IoT manager,
 // channel session manager, automations and background thinking services.
 func (a *app) wireAuxiliary() error {