feat: OpenMesh 基础平台与 MD/PDF 转换技能

- 后端: coworker 智能体框架, WS API, 文件上传, 附件处理
- 前端: Open WebUI, 文件全量走 upload API (含 MD/TXT/JSON 等文本类)
- 技能: md-to-office (pandoc + wkhtmltopdf)
- 修复: 上传文件路径丢失, Agent 搜索浪费, 输出文件跑到 uploads/
- 打包: PyInstaller one-dir, 预打包 pandoc/wkhtmltopdf/chromium

tests/test_devsecops_team.py

@@ -0,0 +1,80 @@
+"""The DevSecOps team bundle (eighteenth pass) — lead + three worker variants.
+
+The team is worker-VARIANT manifests over the solo security personas' bundles:
+prompts talk to a lead, tool bundles and skills carry over. Doctrine locks under
+test: the capability firebreak (the lead carries no shell/git), workers never
+surface in the picker, skills ship inside each bundle (OPE-58 shape), and the
+secrets-are-radioactive rule appears in every prompt that can meet a secret.
+"""
+
+from __future__ import annotations
+
+from pathlib import Path
+
+from coworker.personas.registry import PersonaRegistry
+
+ROSTER = ("appsec-worker", "secrets-worker", "posture-worker")
+
+
+def _reg(tmp_path) -> PersonaRegistry:
+    return PersonaRegistry(state_path=tmp_path / "personas.json")
+
+
+def test_bundle_registers_with_team_traits(tmp_path):
+    reg = _reg(tmp_path)
+    lead = reg.get("devsecops-lead")
+    assert lead.manifest.team == "lead"
+    for pid in ROSTER:
+        assert reg.get(pid).manifest.team == "worker"
+
+
+def test_lead_carries_no_execution_tools(tmp_path):
+    # The capability firebreak: leads coordinate; scanning/fixing needs shell+git,
+    # which only the workers carry.
+    reg = _reg(tmp_path)
+    assert "shell" not in reg.get("devsecops-lead").tools
+    assert "git" not in reg.get("devsecops-lead").tools
+    for pid in ROSTER:
+        assert {"shell", "git"} <= set(reg.get(pid).tools)
+
+
+def test_workers_never_surface_lead_does(tmp_path, monkeypatch):
+    monkeypatch.setenv("OPENWORKER_UNSHIPPED", "1")  # teams are ships:false — internal builds
+    reg = _reg(tmp_path)
+    ids = [e["name"] for e in reg.sidebar()]
+    assert "devsecops-lead" in ids
+    assert not any(pid in ids for pid in ROSTER)
+
+
+def test_worker_bundles_ship_their_skills(tmp_path):
+    # OPE-58 bundle shape: the manifest's skills: list names folders that live in a
+    # sibling skills/ dir — self-contained, no reach into the solo personas.
+    reg = _reg(tmp_path)
+    for pid in ROSTER:
+        m = reg.get(pid).manifest
+        assert m.skills, pid
+        skills_dir = Path(m.source).parent / "skills"
+        for skill in m.skills:
+            assert (skills_dir / skill / "SKILL.md").is_file(), f"{pid}: {skill}"
+
+
+def test_prompts_carry_the_load_bearing_rules(tmp_path):
+    reg = _reg(tmp_path)
+    lead_prompt = reg.get("devsecops-lead").manifest.system_prompt
+    # Falsifiable-claims criteria convention + evidence-based review + the one-time
+    # board chip are the lead-contract deltas of the sixteenth/seventeenth passes.
+    assert "FALSIFIABLE" in lead_prompt
+    assert "(board:)" in lead_prompt
+    assert "evidence" in lead_prompt.lower()
+    for pid in ("appsec-worker", "secrets-worker"):
+        prompt = reg.get(pid).manifest.system_prompt
+        assert "never print a discovered secret's value" in prompt.lower()
+    # Workers talk to the lead, never the end user.
+    for pid in ROSTER:
+        assert "ask_user" in reg.get(pid).manifest.system_prompt  # the "never use" line
+
+
+def test_posture_worker_is_read_only_on_cloud(tmp_path):
+    prompt = _reg(tmp_path).get("posture-worker").manifest.system_prompt
+    assert "read-only" in prompt
+    assert "terraform apply" in prompt  # the never-apply rule is written down