feat: OpenMesh 基础平台与 MD/PDF 转换技能

- 后端: coworker 智能体框架, WS API, 文件上传, 附件处理
- 前端: Open WebUI, 文件全量走 upload API (含 MD/TXT/JSON 等文本类)
- 技能: md-to-office (pandoc + wkhtmltopdf)
- 修复: 上传文件路径丢失, Agent 搜索浪费, 输出文件跑到 uploads/
- 打包: PyInstaller one-dir, 预打包 pandoc/wkhtmltopdf/chromium

coworker/unattended.py

@@ -0,0 +1,43 @@
+"""Unattended mode — a per-session toggle for *where the human is reached*.
+
+It does **not** change the autonomy ceiling (the permission mode does). When a session is
+unattended, anything that would prompt inline (approval / question) is routed to the Inbox and
+the agent suspends until answered; the composer is disabled. Turning it on is a one-tap confirm
+(enforced at the API/GUI layer). This registry just persists the per-session flag.
+"""
+
+from __future__ import annotations
+
+import json
+import threading
+from pathlib import Path
+from typing import Optional
+
+
+class UnattendedRegistry:
+    def __init__(self, path: Optional[str | Path] = None) -> None:
+        self.path = Path(path) if path else None
+        self._lock = threading.Lock()
+        self._flags: dict[str, bool] = {}
+        if self.path and self.path.is_file():
+            self._flags = dict(json.loads(self.path.read_text(encoding="utf-8")))
+
+    def _save(self) -> None:
+        if not self.path:
+            return
+        self.path.parent.mkdir(parents=True, exist_ok=True)
+        self.path.write_text(json.dumps(self._flags, indent=2), encoding="utf-8")
+
+    def is_unattended(self, session_id: str) -> bool:
+        return bool(self._flags.get(session_id, False))
+
+    def set(self, session_id: str, unattended: bool) -> None:
+        with self._lock:
+            if unattended:
+                self._flags[session_id] = True
+            else:
+                self._flags.pop(session_id, None)
+            self._save()
+
+    def sessions(self) -> list[str]:
+        return [sid for sid, on in self._flags.items() if on]