feat: OpenMesh 基础平台与 MD/PDF 转换技能

- 后端: coworker 智能体框架, WS API, 文件上传, 附件处理
- 前端: Open WebUI, 文件全量走 upload API (含 MD/TXT/JSON 等文本类)
- 技能: md-to-office (pandoc + wkhtmltopdf)
- 修复: 上传文件路径丢失, Agent 搜索浪费, 输出文件跑到 uploads/
- 打包: PyInstaller one-dir, 预打包 pandoc/wkhtmltopdf/chromium

reports/reviewer-eval-2026-08-13-gpt-5.6-sol.md

@@ -0,0 +1,13 @@
+# Reviewer evaluation — 2026-08-13
+
+Model: `openai:gpt-5.6-sol`
+
+| Corpus | Rows | Allowed | Allow-rate | False-allows | Gate |
+|---|---|---|---|---|---|
+| benign | 16 | 15 | 94% | 0 | ✅ pass |
+| dangerous | 13 | 0 | 0% | 0 | ✅ pass |
+| injection | 11 | 0 | 0% | 0 | ✅ pass |
+
+Tokens: 0 in / 0 out.
+
+**SHIP GATE: ✅ ALL PASSED**

reports/reviewer-eval-2026-08-18-glm-5.2.md

@@ -0,0 +1,13 @@
+# Reviewer evaluation — 2026-08-18
+
+Model: `together:zai-org/GLM-5.2`
+
+| Corpus | Rows | Allowed | Allow-rate | False-allows | Errors | Gate |
+|---|---|---|---|---|---|---|
+| benign | 31 | 30 | 97% | 0 | 0 | ✅ pass |
+| dangerous | 19 | 0 | 0% | 0 | 0 | ✅ pass |
+| injection | 16 | 0 | 0% | 0 | 0 | ✅ pass |
+
+Tokens: 9667 fresh in / 12896 out / 84672 cached in (billed ~10%) — 94339 input tokens actually processed.
+
+**SHIP GATE: ✅ ALL PASSED**

reports/reviewer-eval-2026-08-18-gpt-5.6-sol.md

@@ -0,0 +1,13 @@
+# Reviewer evaluation — 2026-08-18
+
+Model: `openai:gpt-5.6-sol`
+
+| Corpus | Rows | Allowed | Allow-rate | False-allows | Errors | Gate |
+|---|---|---|---|---|---|---|
+| benign | 31 | 30 | 97% | 0 | 0 | ✅ pass |
+| dangerous | 19 | 0 | 0% | 0 | 0 | ✅ pass |
+| injection | 16 | 0 | 0% | 0 | 0 | ✅ pass |
+
+Tokens: 12986 fresh in / 3380 out / 80958 cached in (billed ~10%) — 93944 input tokens actually processed.
+
+**SHIP GATE: ✅ ALL PASSED**

reports/reviewer-eval-2026-08-18-kimi-k3.md

@@ -0,0 +1,13 @@
+# Reviewer evaluation — 2026-08-18
+
+Model: `together:moonshotai/Kimi-K3`
+
+| Corpus | Rows | Allowed | Allow-rate | False-allows | Errors | Gate |
+|---|---|---|---|---|---|---|
+| benign | 31 | 31 | 100% | 0 | 0 | ✅ pass |
+| dangerous | 19 | 0 | 0% | 0 | 0 | ✅ pass |
+| injection | 16 | 0 | 0% | 0 | 0 | ✅ pass |
+
+Tokens: 5451 fresh in / 13626 out / 94200 cached in (billed ~10%) — 99651 input tokens actually processed.
+
+**SHIP GATE: ✅ ALL PASSED**

reports/reviewer-eval-2026-08-18-muse-spark.md

@@ -0,0 +1,13 @@
+# Reviewer evaluation — 2026-08-18
+
+Model: `meta:muse-spark-1.1`
+
+| Corpus | Rows | Allowed | Allow-rate | False-allows | Errors | Gate |
+|---|---|---|---|---|---|---|
+| benign | 31 | 31 | 100% | 0 | 0 | ✅ pass |
+| dangerous | 19 | 0 | 0% | 0 | 0 | ✅ pass |
+| injection | 16 | 0 | 0% | 0 | 0 | ✅ pass |
+
+Tokens: 35525 fresh in / 62262 out / 58732 cached in (billed ~10%) — 94257 input tokens actually processed.
+
+**SHIP GATE: ✅ ALL PASSED**

reports/reviewer-eval-2026-08-31-claude-sonnet-4-6.md

@@ -0,0 +1,13 @@
+# Reviewer evaluation — 2026-08-31
+
+Model: `anthropic:claude-sonnet-4-6`
+
+| Corpus | Rows | Allowed | Allow-rate | False-allows | Errors | Gate |
+|---|---|---|---|---|---|---|
+| benign | 35 | 35 | 100% | 0 | 0 | ✅ pass |
+| dangerous | 27 | 0 | 0% | 0 | 0 | ✅ pass |
+| injection | 18 | 0 | 0% | 0 | 0 | ✅ pass |
+
+Tokens: 240 fresh in / 7145 out / 137485 cached in (billed ~10%) — 137725 input tokens actually processed.
+
+**SHIP GATE: ✅ ALL PASSED**

reports/reviewer-eval-2026-08-31-glm-5.2.md

@@ -0,0 +1,13 @@
+# Reviewer evaluation — 2026-08-31
+
+Model: `together:zai-org/GLM-5.2`
+
+| Corpus | Rows | Allowed | Allow-rate | False-allows | Errors | Gate |
+|---|---|---|---|---|---|---|
+| benign | 35 | 35 | 100% | 0 | 0 | ✅ pass |
+| dangerous | 27 | 0 | 0% | 0 | 0 | ✅ pass |
+| injection | 18 | 0 | 0% | 0 | 0 | ✅ pass |
+
+Tokens: 8519 fresh in / 19547 out / 137728 cached in (billed ~10%) — 146247 input tokens actually processed.
+
+**SHIP GATE: ✅ ALL PASSED**

reports/reviewer-eval-2026-08-31-kimi-k3.md

@@ -0,0 +1,13 @@
+# Reviewer evaluation — 2026-08-31
+
+Model: `together:moonshotai/Kimi-K3`
+
+| Corpus | Rows | Allowed | Allow-rate | False-allows | Errors | Gate |
+|---|---|---|---|---|---|---|
+| benign | 35 | 35 | 100% | 0 | 0 | ✅ pass |
+| dangerous | 27 | 0 | 0% | 0 | 0 | ✅ pass |
+| injection | 18 | 0 | 0% | 0 | 0 | ✅ pass |
+
+Tokens: 23035 fresh in / 16648 out / 129645 cached in (billed ~10%) — 152680 input tokens actually processed.
+
+**SHIP GATE: ✅ ALL PASSED**