feat: OpenMesh 基础平台与 MD/PDF 转换技能

- 后端: coworker 智能体框架, WS API, 文件上传, 附件处理
- 前端: Open WebUI, 文件全量走 upload API (含 MD/TXT/JSON 等文本类)
- 技能: md-to-office (pandoc + wkhtmltopdf)
- 修复: 上传文件路径丢失, Agent 搜索浪费, 输出文件跑到 uploads/
- 打包: PyInstaller one-dir, 预打包 pandoc/wkhtmltopdf/chromium

tests/test_devops_team.py

@@ -0,0 +1,75 @@
+"""The DevOps team bundle (nineteenth pass) — a standing lead with an on-demand roster.
+
+Shape under test: the lead is a watchman, not a coordinator-of-standing-staff — it
+carries a shell for observation (the read-only observer credential is the physics
+layer), staffs at most a bounded incident team, and never mutates production. Workers
+are diagnosis lanes (symptom / platform / change), staffable-only, and never speak to
+the end user.
+"""
+
+from __future__ import annotations
+
+from coworker.personas.registry import PersonaRegistry
+
+ROSTER = ("logs-worker", "infra-worker", "change-worker")
+
+
+def _reg(tmp_path) -> PersonaRegistry:
+    return PersonaRegistry(state_path=tmp_path / "personas.json")
+
+
+def test_bundle_registers_with_team_traits(tmp_path):
+    reg = _reg(tmp_path)
+    assert reg.get("devops-lead").manifest.team == "lead"
+    for pid in ROSTER:
+        assert reg.get(pid).manifest.team == "worker"
+
+
+def test_lead_surfaces_workers_do_not(tmp_path, monkeypatch):
+    monkeypatch.setenv("OPENWORKER_UNSHIPPED", "1")  # teams are ships:false — internal builds
+    reg = _reg(tmp_path)
+    ids = [e["name"] for e in reg.sidebar()]
+    assert "devops-lead" in ids
+    assert not any(pid in ids for pid in ROSTER)
+
+
+def test_lead_observes_but_cannot_deploy(tmp_path):
+    # Unlike coordination-only leads, the watchman carries shell — observation IS its
+    # standing work. The prompt must pin the credential story and the no-mutation line.
+    lead = _reg(tmp_path).get("devops-lead")
+    assert "shell" in lead.tools
+    prompt = lead.manifest.system_prompt
+    assert "observer" in prompt.lower()
+    assert "read-only" in prompt.lower()
+    assert "a human executes" in prompt.lower()
+
+
+def test_standing_watch_contract_lines(tmp_path):
+    prompt = _reg(tmp_path).get("devops-lead").manifest.system_prompt
+    # Case-ledger dedup: sweeps update cases, only new judgment files items.
+    assert "never re-file" in prompt
+    # Deploy correlation is the product.
+    assert "what shipped" in prompt.lower()
+    # Interim caps (budgets deferred): bounded cadence, bounded staffing.
+    assert "Never tighter than 10" in prompt
+    assert "THREE workers" in prompt
+    # Ops notes are the deployment seam; without them the lead must not guess.
+    assert "OPSWATCH" in prompt
+    # The one-time board chip (seventeenth pass).
+    assert "(board:)" in prompt
+
+
+def test_workers_carry_the_load_bearing_rules(tmp_path):
+    reg = _reg(tmp_path)
+    for pid in ROSTER:
+        prompt = reg.get(pid).manifest.system_prompt
+        flat = " ".join(prompt.split())  # prompts hard-wrap; match across newlines
+        assert "ask_user" in flat  # the "never use" line
+        assert "UNTRUSTED INPUT" in flat
+        assert "never the value" in flat  # secrets stay radioactive
+    # Lane separation is written down, not vibes.
+    assert "SYMPTOM side" in reg.get("logs-worker").manifest.system_prompt
+    assert "PLATFORM side" in reg.get("infra-worker").manifest.system_prompt
+    assert "CHANGE side" in reg.get("change-worker").manifest.system_prompt
+    # The infra worker never applies.
+    assert "terraform apply" in reg.get("infra-worker").manifest.system_prompt