feat: OpenMesh 基础平台与 MD/PDF 转换技能

- 后端: coworker 智能体框架, WS API, 文件上传, 附件处理
- 前端: Open WebUI, 文件全量走 upload API (含 MD/TXT/JSON 等文本类)
- 技能: md-to-office (pandoc + wkhtmltopdf)
- 修复: 上传文件路径丢失, Agent 搜索浪费, 输出文件跑到 uploads/
- 打包: PyInstaller one-dir, 预打包 pandoc/wkhtmltopdf/chromium

surfaces/gui/e2e/mcp-connectors.spec.ts

@@ -0,0 +1,71 @@
+// MCP-backed connectors (UX-DECISIONS §42): monday/asana/jira connect through the
+// vendor's hosted MCP server via a fully LOCAL OAuth flow — one-click without any
+// cloud sign-in — and agents get only the PINNED tool subset, surfaced on the
+// connector detail page like any other curated tool set.
+import { expect } from "@playwright/test";
+import { test } from "./fixtures";
+
+async function openConnectors(page) {
+  await page.goto("/");
+  await page.getByTestId("account-row").click();
+  await page.getByRole("button", { name: "Connectors", exact: true }).click();
+}
+
+test("monday: one-click MCP connect without cloud sign-in; card flips connected", async ({
+  page,
+}) => {
+  await openConnectors(page);
+
+  // Signed OUT (fixtures default) — the MCP one-click needs no OpenWorker account.
+  await page
+    .getByTestId("connector-monday")
+    .getByRole("button", { name: "Connect" })
+    .click();
+  const modal = page.getByTestId("add-connection-modal");
+  await expect(modal).toBeVisible();
+  // Single-mode: no One click | Manual pills, no cloud sign-in gate — just the button.
+  await expect(modal.getByTestId("modal-pane-manual")).toHaveCount(0);
+  await expect(modal.getByTestId("inline-cloud-sign-in")).toHaveCount(0);
+  await expect(modal.getByText("sign-in runs entirely on this computer")).toBeVisible();
+
+  await modal.getByTestId("modal-mcp-one-click").click();
+  await expect(modal.getByText("Check your browser…")).toBeVisible();
+  // The mock flow completes instantly; the modal's poll closes it and the card flips.
+  await expect(page.getByTestId("add-connection-modal")).toHaveCount(0, {
+    timeout: 10_000,
+  });
+  await expect(page.getByTestId("connector-monday")).toContainText("Connected");
+});
+
+test("jira: two modes — MCP one-click pane plus the manual token form", async ({
+  page,
+}) => {
+  await openConnectors(page);
+  // jira sits past the available-list fold.
+  await page.getByRole("button", { name: "show all" }).click();
+  await page
+    .getByTestId("connector-jira")
+    .getByRole("button", { name: "Connect" })
+    .click();
+  const modal = page.getByTestId("add-connection-modal");
+
+  // One click pane is the MCP flow (no cloud sign-in gate).
+  await expect(modal.getByTestId("modal-pane-one")).toBeVisible();
+  await expect(modal.getByTestId("modal-mcp-one-click")).toBeVisible();
+
+  // Manual keeps the existing Atlassian token fields.
+  await modal.getByTestId("modal-pane-manual").click();
+  await expect(modal.getByText("Atlassian site URL")).toBeVisible();
+  await expect(modal.getByText("API token")).toBeVisible();
+});
+
+test("monday detail page shows the pinned tool subset with approval badges", async ({
+  page,
+}) => {
+  await openConnectors(page);
+  await page.getByTestId("connector-monday").click();
+  await expect(page.getByText("2 tools this connector adds")).toBeVisible();
+  await page.getByText("View", { exact: true }).click();
+  await expect(page.getByText("Read board", { exact: true })).toBeVisible();
+  await expect(page.getByText("Create item", { exact: true })).toBeVisible();
+});