feat: 唤醒式架构批次——capacity/L4/会话编排/管理面板写CRUD/前端集成（77-81）

【capacity 唤醒式核心(77)】internal/runtime/capacity：(Decider L1启发式+L2上下文+人格覆盖→三态静息/唤醒/全能→允许工具集+capacity_awaken事件)。loop 外围允许集过滤(不硬阻断=能力≠边界红线)。config 加 Capacity(Enabled/MinConfidence/ToolSets)。wire buildCapacity 接入 loop。

【L4 记忆驱动意图(80)】recall.go：从记忆召回用户习惯(搞一下xx=办事)→唤醒L1/L2漏掉/升置信；群聊陌生人不读owner习惯(隔离红线)；RecordIntent闭环(判定写回记忆越用越准)；默认保守静息。

【会话消息编排(78)】gateway/session_orchestrator.go：每会话(模式/pending有界5/tail上下文尾巴20)；Submit非阻塞(idle立即/busy入队ack/满拒绝)；完成回调按序续接(tail+新消息合并增量注入非全量重放)；Interrupt中断；REST 202/409+WS session_busy/pending_ack事件；不重造任务引擎复用loop。

【前端集成(79)】ws.ts 加 capacity_awaken/session_busy/pending_ack 解析；store 加 awakenState/sessionBusy；TopBar/ChatShell 加唤醒态徽标+忙态提示(不阻塞输入框)；状态组件 status.tsx；Miuix风格。

【管理面板写CRUD(81)】20个写端点(POST/PUT/DELETE /admin/*，owner+审计落库)：personas(真持久化YAML)/users apikey(签发掩码+撤销)/iot控制(真下发)/automations(建/触发/删)/llm(test真调用+临时)/channels(connect/close/身份测试actor白名单)/plugins(卸载)/memories(search真检索)/sessions(export)。无存储如实501不伪造。拆4文件满足≤500红线。前端9模块接真写。

【wire收口】buildCapacity接入loop+OnCapacity事件；server.go newOrchestrator接hub。

实机验证：iot ac.living control 200 真实改变 on:true；observability/metrics 200、health ok；全仓 build/vet/test 47包绿+前端tsc/vite。

internal/config/config.go

@@ -32,6 +32,7 @@ type Config struct {
 	WSHub       WSHubConfig
 	ExecSandbox ExecSandbox
 	MCP         MCPConfig
+	Capacity    CapacityConfig
 }
 
 // ServerConfig holds the single gateway listener settings.
@@ -123,6 +124,26 @@ type MCPConfig struct {
 	ServersJSON string `env:"MCP_SERVERS_JSON"`
 }
 
+// CapacityConfig configures the awakened-capacity decision layer
+// (DevDocs/design/14-唤醒式能力渐进.md §4). It is opt-in: the loop exposes every
+// tool until Enabled is true.
+type CapacityConfig struct {
+	// Enabled turns on the capacity decider. When false the loop advertises every
+	// registered tool (pre-existing behavior). Note: it is wired at the loop
+	// periphery, not back-end (Invoke stays unblocked).
+	Enabled bool `env:"CAPACITY_ENABLED" default:"false"`
+	// MinConfidence is the wake threshold below which the state is forced toward
+	// the persona default (设计 §2.3 默认保守). Zero selects the code default 0.6.
+	MinConfidence float64 `env:"CAPACITY_MIN_CONFIDENCE" default:"0.6"`
+	// ToolSetsJSON, when non-empty, is a JSON map of state→[]tool name, e.g.
+	// {"quiet":["terminal","file"],"awake":["terminal","file","web-search"],
+	// "full":null}. A missing state selects the built-in default set; null ("full")
+	// means unrestricted. Parsed by the capacity wiring at startup (the
+	// reflection-based loader only supports scalars and []string), matching the
+	// MCP config pattern.
+	ToolSetsJSON string `env:"CAPACITY_TOOL_SETS"`
+}
+
 // MCPServer describes a single MCP server: a stdio subprocess (Command/Args) or
 // an SSE endpoint (URL). Enabled gates activation at startup.
 type MCPServer struct {

internal/config/config_test.go

@@ -130,6 +130,38 @@ func TestLoad_MissingDotEnvIsTolerated(t *testing.T) {
 	}
 }
 
+func TestLoad_CapacityDefaults(t *testing.T) {
+	t.Setenv("JWT_SECRET", strings.Repeat("s", 40))
+
+	cfg, err := Load("")
+	if err != nil {
+		t.Fatalf("Load() error: %v", err)
+	}
+	if cfg.Capacity.Enabled {
+		t.Errorf("Capacity.Enabled = true, want false (default, opt-in)")
+	}
+	if cfg.Capacity.MinConfidence != 0.6 {
+		t.Errorf("Capacity.MinConfidence = %v, want 0.6", cfg.Capacity.MinConfidence)
+	}
+}
+
+func TestLoad_CapacityEnvOverrides(t *testing.T) {
+	t.Setenv("JWT_SECRET", strings.Repeat("s", 40))
+	t.Setenv("CAPACITY_ENABLED", "true")
+	t.Setenv("CAPACITY_MIN_CONFIDENCE", "0.75")
+
+	cfg, err := Load("")
+	if err != nil {
+		t.Fatalf("Load() error: %v", err)
+	}
+	if !cfg.Capacity.Enabled {
+		t.Errorf("Capacity.Enabled = false, want true")
+	}
+	if cfg.Capacity.MinConfidence != 0.75 {
+		t.Errorf("Capacity.MinConfidence = %v, want 0.75", cfg.Capacity.MinConfidence)
+	}
+}
+
 func TestParseDotEnv_QuotedAndExport(t *testing.T) {
 	path := writeEnvFile(t, `export FOO=bar
 BAZ='quoted value'

internal/config/decode.go

@@ -74,6 +74,8 @@ func setField(fv reflect.Value, raw string) error {
 		return setBool(fv, raw)
 	case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64:
 		return setInt(fv, raw)
+	case reflect.Float32, reflect.Float64:
+		return setFloat(fv, raw)
 	case reflect.Slice:
 		return setStringSlice(fv, raw)
 	default:
@@ -107,6 +109,19 @@ func setInt(fv reflect.Value, raw string) error {
 	return nil
 }
 
+func setFloat(fv reflect.Value, raw string) error {
+	if raw == "" {
+		fv.SetFloat(0)
+		return nil
+	}
+	n, err := strconv.ParseFloat(raw, 64)
+	if err != nil {
+		return fmt.Errorf("invalid float %q", raw)
+	}
+	fv.SetFloat(n)
+	return nil
+}
+
 func setStringSlice(fv reflect.Value, raw string) error {
 	if fv.Type().Elem().Kind() != reflect.String {
 		return fmt.Errorf("unsupported slice element kind %s", fv.Type().Elem().Kind())