feat: OpenMesh 基础平台与 MD/PDF 转换技能

- 后端: coworker 智能体框架, WS API, 文件上传, 附件处理
- 前端: Open WebUI, 文件全量走 upload API (含 MD/TXT/JSON 等文本类)
- 技能: md-to-office (pandoc + wkhtmltopdf)
- 修复: 上传文件路径丢失, Agent 搜索浪费, 输出文件跑到 uploads/
- 打包: PyInstaller one-dir, 预打包 pandoc/wkhtmltopdf/chromium

surfaces/gui/e2e/sidebar-sessions.spec.ts

@@ -0,0 +1,104 @@
+import { test, expect } from "./fixtures";
+
+// Sidebar session lifecycle (owner testing pass, 2026-07-03): the peek cap (sessions_peek=5 →
+// "Show more (2)" with 7 sessions), reversible archive with the Archived disclosure, and the
+// two-step delete (Delete arms → "Delete?" confirms). All row actions sit behind the per-row
+// ⋮ kebab (FB-011), so each flow goes hover → kebab → menu item.
+
+test("session list caps at the peek count with Show more", async ({ page }) => {
+  await page.goto("/");
+  // Boot resumes a cowork session, so the Coworker accordion body is expanded. The body holds
+  // 9 sessions (7 weekly plans + the Slack-origin one §31 rev + the live-turn one) against
+  // sessions_peek=5.
+  await expect(page.getByTitle("Weekly plan 1")).toBeVisible();
+  await expect(page.getByTitle("Weekly plan 5")).toBeVisible();
+  await expect(page.getByTitle("Weekly plan 6")).toHaveCount(0);
+
+  await page.getByRole("button", { name: "Show more (4)" }).click();
+  await expect(page.getByTitle("Weekly plan 6")).toBeVisible();
+  await expect(page.getByTitle("Weekly plan 7")).toBeVisible();
+});
+
+test("archive via the row menu is reversible via the Archived disclosure", async ({ page }) => {
+  await page.goto("/");
+  const row = page.getByTitle("Weekly plan 2");
+  await expect(row).toBeVisible();
+
+  await row.hover();
+  await row.getByTestId("row-menu").click();
+  await row.getByTestId("row-menu-archive").click();
+
+  // Gone from the main list; parked under the Archived disclosure.
+  await expect(page.getByTitle("Weekly plan 2")).toHaveCount(0);
+  await page.getByRole("button", { name: /Archived \(1\)/ }).click();
+  const archivedRow = page.getByTitle("Weekly plan 2");
+  await expect(archivedRow).toBeVisible();
+
+  // Unarchive (same menu slot on an archived row) brings it straight back; the disclosure
+  // disappears with its last item.
+  await archivedRow.hover();
+  await archivedRow.getByTestId("row-menu").click();
+  await expect(archivedRow.getByTestId("row-menu-archive")).toHaveText("Unarchive");
+  await archivedRow.getByTestId("row-menu-archive").click();
+  await expect(page.getByRole("button", { name: /Archived/ })).toHaveCount(0);
+  await expect(page.getByTitle("Weekly plan 2")).toBeVisible();
+});
+
+test("mention-spawned sessions list in Recent with the platform icon — no From Slack band (§31 rev)", async ({
+  page,
+}) => {
+  // Flat chronological layout — the launch default (personas off).
+  await page.route("**/v1/settings", (r) => r.fulfill({ json: { nav_layout: "flat" } }));
+  await page.goto("/");
+  await expect(page.getByTitle("Weekly plan 1")).toBeVisible();
+
+  // No collapsed band; the session sits directly in Recent, exactly once (its fixture
+  // timestamp sorts it past the peek cap, so expand first)…
+  await expect(page.getByTestId("from-slack-toggle")).toHaveCount(0);
+  await page.getByText(/Show \d+ more/).click();
+  const row = page.getByTitle("#general — check the deploy?");
+  await expect(row).toBeVisible();
+  await expect(page.getByTitle("#general — check the deploy?")).toHaveCount(1);
+  // …wearing the Slack logo (hover-hidden cluster, so assert attachment not visibility).
+  await expect(row.locator('[data-logo="slack"]')).toHaveCount(1);
+});
+
+test("pin via the row menu moves the session to the Pinned band and back", async ({ page }) => {
+  await page.goto("/");
+  const row = page.getByTitle("Weekly plan 4");
+  await expect(row).toBeVisible();
+
+  await row.hover();
+  await row.getByTestId("row-menu").click();
+  await expect(row.getByTestId("row-menu-pin")).toHaveText("Pin");
+  await row.getByTestId("row-menu-pin").click();
+
+  // Pinned rows live ONLY in the cross-persona Pinned band — no duplicate in the body.
+  const pinnedBand = page.getByText("Pinned", { exact: true }).locator("..");
+  await expect(pinnedBand.getByTitle("Weekly plan 4")).toBeVisible();
+  await expect(page.getByTitle("Weekly plan 4")).toHaveCount(1);
+
+  const pinnedRow = pinnedBand.getByTitle("Weekly plan 4");
+  await pinnedRow.hover();
+  await pinnedRow.getByTestId("row-menu").click();
+  await expect(pinnedRow.getByTestId("row-menu-pin")).toHaveText("Unpin");
+  await pinnedRow.getByTestId("row-menu-pin").click();
+  await expect(pinnedBand.getByTitle("Weekly plan 4")).toHaveCount(0);
+  await expect(page.getByTitle("Weekly plan 4")).toHaveCount(1);
+});
+
+test("delete is two-step: the menu's Delete arms, Delete? confirms", async ({ page }) => {
+  await page.goto("/");
+  const row = page.getByTitle("Weekly plan 3");
+  await expect(row).toBeVisible();
+
+  await row.hover();
+  await row.getByTestId("row-menu").click();
+  await row.getByTestId("row-menu-delete").click();
+  // First click only ARMS — the menu stays open showing the confirm affordance, the row remains.
+  await expect(row.getByTestId("row-menu-delete")).toHaveText("Delete?");
+  await expect(page.getByTitle("Weekly plan 3")).toHaveCount(1);
+
+  await row.getByTestId("row-menu-delete").click();
+  await expect(page.getByTitle("Weekly plan 3")).toHaveCount(0);
+});