feat: 唤醒式架构批次——capacity/L4/会话编排/管理面板写CRUD/前端集成（77-81）

【capacity 唤醒式核心(77)】internal/runtime/capacity：(Decider L1启发式+L2上下文+人格覆盖→三态静息/唤醒/全能→允许工具集+capacity_awaken事件)。loop 外围允许集过滤(不硬阻断=能力≠边界红线)。config 加 Capacity(Enabled/MinConfidence/ToolSets)。wire buildCapacity 接入 loop。

【L4 记忆驱动意图(80)】recall.go：从记忆召回用户习惯(搞一下xx=办事)→唤醒L1/L2漏掉/升置信；群聊陌生人不读owner习惯(隔离红线)；RecordIntent闭环(判定写回记忆越用越准)；默认保守静息。

【会话消息编排(78)】gateway/session_orchestrator.go：每会话(模式/pending有界5/tail上下文尾巴20)；Submit非阻塞(idle立即/busy入队ack/满拒绝)；完成回调按序续接(tail+新消息合并增量注入非全量重放)；Interrupt中断；REST 202/409+WS session_busy/pending_ack事件；不重造任务引擎复用loop。

【前端集成(79)】ws.ts 加 capacity_awaken/session_busy/pending_ack 解析；store 加 awakenState/sessionBusy；TopBar/ChatShell 加唤醒态徽标+忙态提示(不阻塞输入框)；状态组件 status.tsx；Miuix风格。

【管理面板写CRUD(81)】20个写端点(POST/PUT/DELETE /admin/*，owner+审计落库)：personas(真持久化YAML)/users apikey(签发掩码+撤销)/iot控制(真下发)/automations(建/触发/删)/llm(test真调用+临时)/channels(connect/close/身份测试actor白名单)/plugins(卸载)/memories(search真检索)/sessions(export)。无存储如实501不伪造。拆4文件满足≤500红线。前端9模块接真写。

【wire收口】buildCapacity接入loop+OnCapacity事件；server.go newOrchestrator接hub。

实机验证：iot ac.living control 200 真实改变 on:true；observability/metrics 200、health ok；全仓 build/vet/test 47包绿+前端tsc/vite。

internal/services/automations/service.go

@@ -6,6 +6,7 @@ import (
 	"fmt"
 	"log/slog"
 	"sync"
+	"time"
 )
 
 // Service composes the Scheduler (cron), the Engine (event rules) and the
@@ -170,6 +171,59 @@ func (s *Service) CancelReminder(ctx context.Context, id string) error {
 	return s.remind.Cancel(ctx, id)
 }
 
+// AddRuleByName registers a named cron/event automation whose action records its
+// fire on the service logger (a real, observable side effect) and returns the
+// generated rule id. kind must be "cron" or "event"; expression is a cron spec
+// for cron rules or a bus subject pattern for event rules. A malformed rule or
+// expression returns an error wrapping ErrInvalidRule / ErrInvalidCron so the
+// admin handler can answer honestly instead of fabricating a success.
+func (s *Service) AddRuleByName(ctx context.Context, name, kind, expression string) (string, error) {
+	act, err := NewFuncAction(name, func(_ context.Context, payload any) (any, error) {
+		s.log.Info("admin automation fired", "name", name, "payload", payload)
+		return map[string]any{"fired": name, "payload": payload}, nil
+	})
+	if err != nil {
+		return "", err
+	}
+	rule := Rule{
+		ID:         fmt.Sprintf("auto-%d", time.Now().UnixNano()),
+		Name:       name,
+		Trigger:    TriggerKind(kind),
+		Expression: expression,
+		Action:     act,
+	}
+	if err := s.AddRule(ctx, rule); err != nil {
+		return "", err
+	}
+	return rule.ID, nil
+}
+
+// RunRule executes one registered rule's action once and returns its output. It
+// is the manual "run now" path for the admin panel. It returns an error wrapping
+// ErrNotFound when no rule or reminder carries id.
+func (s *Service) RunRule(ctx context.Context, id string) (any, error) {
+	if id == "" {
+		return nil, fmt.Errorf("automations: run rule: %w", ErrInvalidRule)
+	}
+	for _, r := range s.engine.Rules() {
+		if r.ID == id {
+			return r.Action.Execute(ctx, nil)
+		}
+	}
+	s.mu.RLock()
+	r, ok := s.cronMeta[id]
+	s.mu.RUnlock()
+	if ok {
+		return r.Action.Execute(ctx, nil)
+	}
+	for _, rem := range s.remind.List() {
+		if rem.ID == id {
+			return map[string]any{"reminder": rem.ID, "message": rem.Message, "at": rem.At}, nil
+		}
+	}
+	return nil, fmt.Errorf("automations: run rule %q: %w", id, ErrNotFound)
+}
+
 // Start starts the scheduler, the event engine and the reminder loop.
 func (s *Service) Start(ctx context.Context) error {
 	if err := s.sched.Start(ctx); err != nil {