feat: 唤醒式架构批次——capacity/L4/会话编排/管理面板写CRUD/前端集成（77-81）

【capacity 唤醒式核心(77)】internal/runtime/capacity：(Decider L1启发式+L2上下文+人格覆盖→三态静息/唤醒/全能→允许工具集+capacity_awaken事件)。loop 外围允许集过滤(不硬阻断=能力≠边界红线)。config 加 Capacity(Enabled/MinConfidence/ToolSets)。wire buildCapacity 接入 loop。

【L4 记忆驱动意图(80)】recall.go：从记忆召回用户习惯(搞一下xx=办事)→唤醒L1/L2漏掉/升置信；群聊陌生人不读owner习惯(隔离红线)；RecordIntent闭环(判定写回记忆越用越准)；默认保守静息。

【会话消息编排(78)】gateway/session_orchestrator.go：每会话(模式/pending有界5/tail上下文尾巴20)；Submit非阻塞(idle立即/busy入队ack/满拒绝)；完成回调按序续接(tail+新消息合并增量注入非全量重放)；Interrupt中断；REST 202/409+WS session_busy/pending_ack事件；不重造任务引擎复用loop。

【前端集成(79)】ws.ts 加 capacity_awaken/session_busy/pending_ack 解析；store 加 awakenState/sessionBusy；TopBar/ChatShell 加唤醒态徽标+忙态提示(不阻塞输入框)；状态组件 status.tsx；Miuix风格。

【管理面板写CRUD(81)】20个写端点(POST/PUT/DELETE /admin/*，owner+审计落库)：personas(真持久化YAML)/users apikey(签发掩码+撤销)/iot控制(真下发)/automations(建/触发/删)/llm(test真调用+临时)/channels(connect/close/身份测试actor白名单)/plugins(卸载)/memories(search真检索)/sessions(export)。无存储如实501不伪造。拆4文件满足≤500红线。前端9模块接真写。

【wire收口】buildCapacity接入loop+OnCapacity事件；server.go newOrchestrator接hub。

实机验证：iot ac.living control 200 真实改变 on:true；observability/metrics 200、health ok；全仓 build/vet/test 47包绿+前端tsc/vite。

internal/persona/registry/registry.go

@@ -89,6 +89,68 @@ func (r *Registry) Persona(id string) (*loader.Persona, bool) {
 	return p, ok
 }
 
+// UpdatePersona replaces the persona registered under p.ID with p, rebuilding
+// its emotion machine and affection tracker. It fails when p is nil, has no id,
+// or is not currently registered. In-flight loops bound to the previous
+// *loader.Persona keep their pointer; only future lookups observe the new value.
+func (r *Registry) UpdatePersona(p *loader.Persona) error {
+	if p == nil {
+		return fmt.Errorf("registry: nil persona")
+	}
+	if p.ID == "" {
+		return fmt.Errorf("registry: persona id required")
+	}
+	machine, err := p.NewMachine()
+	if err != nil {
+		return fmt.Errorf("registry: persona %q machine: %w", p.ID, err)
+	}
+	affection, err := p.NewAffection()
+	if err != nil {
+		return fmt.Errorf("registry: persona %q affection: %w", p.ID, err)
+	}
+
+	r.mu.Lock()
+	if _, ok := r.personas[p.ID]; !ok {
+		r.mu.Unlock()
+		return fmt.Errorf("registry: persona %q not registered", p.ID)
+	}
+	r.personas[p.ID] = p
+	r.mu.Unlock()
+
+	r.emotions.Set(p.ID, machine, affection)
+	return nil
+}
+
+// UpdateCharacter replaces the fields of the character registered under c.ID,
+// leaving its Default flag intact unless c re-declares it. It fails when c is
+// nil, has no id, is not registered, or its persona does not exist.
+func (r *Registry) UpdateCharacter(c *Character) error {
+	if c == nil {
+		return fmt.Errorf("registry: nil character")
+	}
+	if c.ID == "" {
+		return fmt.Errorf("registry: character id required")
+	}
+
+	r.mu.Lock()
+	defer r.mu.Unlock()
+	existing, ok := r.characters[c.ID]
+	if !ok {
+		return fmt.Errorf("registry: character %q not registered", c.ID)
+	}
+	if _, ok := r.personas[c.PersonaID]; !ok {
+		return fmt.Errorf("registry: character %q references unknown persona %q", c.ID, c.PersonaID)
+	}
+	existing.Name = c.Name
+	existing.PersonaID = c.PersonaID
+	existing.Modes = append(existing.Modes[:0], c.Modes...)
+	if c.Default {
+		existing.Default = true
+		r.defaultID = c.ID
+	}
+	return nil
+}
+
 // RegisterCharacter registers c. It requires c's persona to exist, so persona
 // registration must happen first. A character marked Default becomes the
 // library's default role.