feat: OpenMesh 基础平台与 MD/PDF 转换技能

- 后端: coworker 智能体框架, WS API, 文件上传, 附件处理
- 前端: Open WebUI, 文件全量走 upload API (含 MD/TXT/JSON 等文本类)
- 技能: md-to-office (pandoc + wkhtmltopdf)
- 修复: 上传文件路径丢失, Agent 搜索浪费, 输出文件跑到 uploads/
- 打包: PyInstaller one-dir, 预打包 pandoc/wkhtmltopdf/chromium

tests/test_config.py

@@ -0,0 +1,144 @@
+"""Config loading — layered defaults < global < workspace."""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+from coworker.config import load_config
+
+
+def test_defaults_when_no_files(tmp_path):
+    cfg = load_config(global_path=tmp_path / "nope.toml")
+    assert cfg.model == "gpt-5.6-sol"
+    assert cfg.mode == "interactive"
+    assert cfg.max_iterations == 150
+    assert cfg.allowed_commands == []
+
+
+def test_global_and_workspace_override(tmp_path):
+    g = tmp_path / "global.toml"
+    g.write_text('model = "gpt-4o"\nmax_iterations = 20\nport = 9000\n')
+    ws = tmp_path / "ws"
+    (ws / ".coworker").mkdir(parents=True)
+    (ws / ".coworker" / "config.toml").write_text(
+        'max_iterations = 30\nmode = "plan"\n'
+    )
+
+    cfg = load_config(ws, global_path=g)
+    assert cfg.model == "gpt-4o"  # from global
+    assert cfg.port == 9000  # from global
+    assert cfg.max_iterations == 30  # workspace overrides global
+    assert cfg.mode == "plan"  # from workspace
+
+
+def test_workspace_cannot_grant_its_own_permissions(tmp_path):
+    g = tmp_path / "global.toml"
+    g.write_text(
+        'allowed_commands = ["git status"]\nauto_allow = ["write_file"]\n'
+    )
+    ws = tmp_path / "ws"
+    (ws / ".coworker").mkdir(parents=True)
+    (ws / ".coworker" / "config.toml").write_text(
+        'allowed_commands = ["python3"]\nauto_allow = ["run_shell"]\n'
+    )
+
+    cfg = load_config(ws, global_path=g)
+    assert cfg.allowed_commands == ["git status"]
+    assert cfg.auto_allow == ["write_file"]
+
+
+def test_trusted_workspace_adds_its_command_allowances_only(tmp_path):
+    g = tmp_path / "global.toml"
+    g.write_text(
+        'allowed_commands = ["git status"]\nauto_allow = ["write_file"]\n'
+    )
+    ws = tmp_path / "ws"
+    (ws / ".coworker").mkdir(parents=True)
+    (ws / ".coworker" / "config.toml").write_text(
+        'allowed_commands = ["pytest", "git status"]\n'
+        'auto_allow = ["run_shell"]\n'
+    )
+
+    cfg = load_config(ws, global_path=g, workspace_trusted=True)
+    assert cfg.allowed_commands == ["git status", "pytest"]
+    assert cfg.auto_allow == ["write_file"]
+
+
+def test_workspace_trust_is_canonical_and_user_owned(tmp_path):
+    from coworker.workspace_trust import WorkspaceTrustStore
+
+    real = tmp_path / "real"
+    real.mkdir()
+    alias = tmp_path / "alias"
+    alias.symlink_to(real, target_is_directory=True)
+    store = WorkspaceTrustStore(tmp_path / "state" / "workspace_trust.json")
+
+    canonical = store.set_trusted(alias, True)
+    assert canonical == str(real.resolve())
+    assert store.is_trusted(real)
+    assert store.list() == [str(real.resolve())]
+    assert (store.path.stat().st_mode & 0o777) == 0o600
+
+    store.set_trusted(real, False)
+    assert not store.is_trusted(alias)
+
+    store.path.write_text("[]")
+    assert store.list() == []
+
+
+def test_build_engine_honors_explicit_empty_command_allowlist(tmp_path):
+    from coworker.agent import build_code_engine
+    from coworker.config import global_config_path
+
+    global_config_path().parent.mkdir(parents=True)
+    global_config_path().write_text('allowed_commands = ["pytest"]\n')
+
+    class _Stub:
+        def complete(self, **k):  # pragma: no cover
+            raise NotImplementedError
+
+        def capabilities(self, m):  # pragma: no cover
+            raise NotImplementedError
+
+    engine = build_code_engine(
+        workspace=tmp_path, provider=_Stub(), allowed_commands=[]
+    )
+    try:
+        decision = engine.permissions.evaluate(
+            "run_shell", {"command": "pytest -q"}, None
+        )
+        assert not decision.allowed and decision.needs_user
+    finally:
+        engine.executor.close()
+
+
+def test_build_engine_respects_max_iterations(tmp_path):
+    (tmp_path / ".coworker").mkdir()
+    (tmp_path / ".coworker" / "config.toml").write_text("max_iterations = 3\n")
+
+    from coworker.agent import build_code_engine
+
+    class _Stub:
+        def complete(self, **k):  # pragma: no cover
+            raise NotImplementedError
+
+        def capabilities(self, m):  # pragma: no cover
+            raise NotImplementedError
+
+    engine = build_code_engine(workspace=tmp_path, provider=_Stub())
+    try:
+        assert engine.max_iterations == 3
+    finally:
+        engine.executor.close()
+
+
+def test_cloud_endpoints_default_to_production():
+    """A fresh install must work without a hand-edited config.toml. An empty
+    relay default shipped once as "connected but relay OFF" on every machine
+    but the developer's — the managed install succeeded (HTTPS via broker)
+    while inbound relaying silently never started."""
+    from coworker.config import Config
+
+    cfg = Config()
+    assert cfg.cloud_base_url == "https://api.openworker.com"
+    assert cfg.cloud_relay_ws_url.startswith("wss://")