feat: OpenMesh 基础平台与 MD/PDF 转换技能

- 后端: coworker 智能体框架, WS API, 文件上传, 附件处理
- 前端: Open WebUI, 文件全量走 upload API (含 MD/TXT/JSON 等文本类)
- 技能: md-to-office (pandoc + wkhtmltopdf)
- 修复: 上传文件路径丢失, Agent 搜索浪费, 输出文件跑到 uploads/
- 打包: PyInstaller one-dir, 预打包 pandoc/wkhtmltopdf/chromium

coworker/workspace_trust.py

@@ -0,0 +1,62 @@
+"""User-owned trust decisions for repository-provided command allowances.
+
+A repository may declare command prefixes in `.coworker/config.toml`, but those grants
+take effect only after the user trusts that exact canonical workspace root. Trust follows
+the path rather than a snapshot of the config: future changes at a trusted path are
+accepted until the user revokes trust.
+"""
+
+from __future__ import annotations
+
+import json
+import os
+from pathlib import Path
+from typing import Optional
+
+from .secrets import state_dir
+
+
+class WorkspaceTrustStore:
+    def __init__(self, path: Optional[str | Path] = None) -> None:
+        self.path = (
+            Path(path) if path is not None else state_dir() / "workspace_trust.json"
+        )
+
+    @staticmethod
+    def canonical(path: str | Path) -> str:
+        return str(Path(path).expanduser().resolve())
+
+    def _load(self) -> set[str]:
+        try:
+            data = json.loads(self.path.read_text(encoding="utf-8"))
+        except (OSError, json.JSONDecodeError):
+            return set()
+        if not isinstance(data, dict):
+            return set()
+        values = data.get("trusted_workspaces", [])
+        if not isinstance(values, list):
+            return set()
+        return {str(v) for v in values if isinstance(v, str) and v}
+
+    def is_trusted(self, workspace: str | Path) -> bool:
+        return self.canonical(workspace) in self._load()
+
+    def list(self) -> list[str]:
+        return sorted(self._load())
+
+    def set_trusted(self, workspace: str | Path, trusted: bool) -> str:
+        canonical = self.canonical(workspace)
+        values = self._load()
+        if trusted:
+            values.add(canonical)
+        else:
+            values.discard(canonical)
+        self.path.parent.mkdir(parents=True, exist_ok=True)
+        tmp = self.path.with_name(f".{self.path.name}.{os.getpid()}.tmp")
+        tmp.write_text(
+            json.dumps({"trusted_workspaces": sorted(values)}, indent=2) + "\n",
+            encoding="utf-8",
+        )
+        os.chmod(tmp, 0o600)
+        tmp.replace(self.path)
+        return canonical