RegisterStage: add scope parameter, remove RegisterStageOwnTools

- SDK: RegisterStage(stage, handler, scope...) with StageScopeGlobal/StageScopeOwnTools
- Delete RegisterStageOwnTools, migrate cmd and qq plugins
- Internal SDK: add StageScope alias
- Docs: update all zh/en docs for C ABI buildmode and stage scope
- C ABI: fix nil errorOut in Handle.Start/Handle.Stop (SIGSEGV fix)
- C ABI header: add dispatch IDs 26-45 for Settings/Doc/Knowledge/LLM/Social/TextMemory

docs/en/ARCHITECTURE.md

@@ -239,7 +239,7 @@ VM built-ins: `json.encode` / `json.decode` / `log` / `http_get` / `http_post`.
 | Method | Registration Mechanism | Compilation | Usage |
 |--------|----------------------|-------------|-------|
 | Built-in | `init()` → `RegisterFactory` | `internal/plugins/` compiled into kernel | webui/cli/timer/mcp etc. |
-| External `.so`/`.dll` | `plugin.Open` dynamic loading | `-buildmode=plugin` | qq/files/web/memo etc. |
+| External `.so` | C ABI dynamic loading | `-buildmode=c-shared` + bridge | qq/files/web/memo etc. |
 | Lua script plugin | Parse `main.lua` to register tools | No compilation, hot-reload | luaplugintest/testlua etc. |
 | SKILL plugin | Parse `SKILL.md` | Markdown definition | OpenClaw compatible |
 
@@ -253,7 +253,7 @@ Lua script plugin loading: `internal/lua/` → parse `main.lua` via Lua VM, call
 Plugin ──→ Kernel
 
 RegisterTool(name, fn)   ──→  buildToolDefs() / executeToolCall()
-RegisterStage(stage, fn)  ──→  runStage() called at corresponding phase
+RegisterStage(stage, fn, scope...)  ──→  runStage() called at corresponding phase (scope: global / own-tools-only)
 Subscribe(event, fn)      ──→  Publish() notify all subscribers
 RegisterOutputChannel(name, caps, desc, handler) ──→ output_send__{name} tool generation
 ```
@@ -262,7 +262,7 @@ RegisterOutputChannel(name, caps, desc, handler) ──→ output_send__{name} t
 
 ```go
 sdk.RegisterTool(name, def, handler)
-sdk.RegisterStage(stage, handler)
+sdk.RegisterStage(stage, handler, scope...)
 sdk.Publish(event)
 sdk.InjectInput(source, channel, payload)
 sdk.InjectInterrupt(source, channel, payload)

docs/en/OVERVIEW.md

@@ -49,7 +49,7 @@ Code is in the project root, implemented in Go.
 
 **Plugin System** (`internal/plugin/`):
 - Built-in plugins: Go `init()` self-registration, compiled into kernel
-- External plugins: Go `-buildmode=plugin` compiled to `.so`/`.dll`, dynamically loaded via `plugin.Open`; also supports Lua script plugins
+- External plugins: Go `-buildmode=c-shared` compiled to `.so`, dynamically loaded via C ABI bridge; also supports Lua script plugins
 - PluginSDK (`internal/sdk/`) defines four channels: RegisterTool / RegisterStage / Subscribe / RegisterOutputChannel
 - 7 stage hooks: on_input → pre_action → post_action → before_toolcall → after_toolcall → before_output → after_output
 

docs/en/PLUGIN_DEV.md

@@ -105,7 +105,7 @@ plugindev build
 
 Execution process:
 1. Reads `plg.json` to determine target platform
-2. **Go plugin**: Runs `go build -buildmode=plugin` (Linux) or `-buildmode=c-shared` (Windows)
+2. **Go plugin**: Runs `go build -buildmode=c-shared` (produces `.so` + C ABI header)
 3. **Lua plugin**: Packages source code directly, no compilation needed
 4. Generates `plugin.json` manifest file
 5. Packages as `.hmap` distribution (zip format, containing `plugin.json` + `plugin.so`/`plugin.dll`/`main.lua`)
@@ -181,7 +181,7 @@ func NewPlugin(name string, config map[string]interface{}) (sdk.Plugin, error) {
 }
 ```
 
-For Windows `-buildmode=c-shared`, `plugindev build` auto-generates C ABI bridge code, no manual handling needed.
+For `-buildmode=c-shared`, `plugindev build` auto-generates C ABI bridge code (`z_bridge_gen.go` + `z_entry.c`), no manual handling needed.
 
 ### PluginSDK Core API
 
@@ -222,19 +222,23 @@ s.RegisterTool("weather_query", sdk.ToolDef{
 | `post_action` | LLM returned results | Modify output/tool list |
 | `before_toolcall` | Before tool execution | Audit, reject, modify params |
 | `after_toolcall` | After tool execution | Desensitize, rewrite results |
-| `before_output` | Before output | Format adaptation |
+| `before_output` | Before output | Format adaptation, leak cleanup |
 | `after_output` | After output | Statistics/logging |
 
 ```go
+// Global: receive all stage events
 s.RegisterStage(sdk.StagePreAction, func(ctx *sdk.StageContext) error {
-    ctx.Lock()
-    ctx.ContextMsgs = append(ctx.ContextMsgs, map[string]interface{}{
-        "role":    "system",
-        "content": "Injected context content",
-    })
-    ctx.Unlock()
-    return nil
+	ctx.Lock()
+	ctx.ContextMsgs = append(ctx.ContextMsgs, map[string]interface{}{
+		"role":    "system",
+		"content": "Injected context content",
+	})
+	ctx.Unlock()
+	return nil
 })
+
+// Own tools only: only before_toolcall/after_toolcall for this plugin's tools
+s.RegisterStage(sdk.StageBeforeToolcall, myHandler, sdk.StageScopeOwnTools)
 ```
 
 #### Configuration Management