feat: OpenMesh 基础平台与 MD/PDF 转换技能

- 后端: coworker 智能体框架, WS API, 文件上传, 附件处理
- 前端: Open WebUI, 文件全量走 upload API (含 MD/TXT/JSON 等文本类)
- 技能: md-to-office (pandoc + wkhtmltopdf)
- 修复: 上传文件路径丢失, Agent 搜索浪费, 输出文件跑到 uploads/
- 打包: PyInstaller one-dir, 预打包 pandoc/wkhtmltopdf/chromium

tests/test_gateway_inbox_reply.py

@@ -0,0 +1,66 @@
+"""Phase 3 wiring — inbound Slack/Telegram replies correlate to Inbox items via the gateway.
+
+An inbound message carrying an `[ocw:<id>]` token is consumed as an Inbox reply (resolving the
+item + releasing any suspended agent), not routed to the super-agent as a new turn. A normal
+message still goes to the handler."""
+
+from __future__ import annotations
+
+from coworker.connectors import ConnectorSettings, FakeAdapter, Gateway, MessageEvent
+from coworker.inbox import InboxStore
+from coworker.inbox_routing import resolve_from_reply
+
+
+async def test_inbound_reply_resolves_item_and_is_not_routed(tmp_path):
+    inbox = InboxStore(tmp_path / "inbox.json")
+    item = inbox.add_approval("s1", "Restart service?", inbox="ops")
+
+    routed: list[MessageEvent] = []
+
+    async def handler(ev: MessageEvent) -> None:
+        routed.append(ev)
+
+    def reply_resolver(ev: MessageEvent) -> bool:
+        return resolve_from_reply(ev.text, inbox.resolve) is not None
+
+    settings = {"fake": ConnectorSettings("fake", enabled=True, allowed_users={"u1"})}
+    gw = Gateway(settings=settings, handler=handler, reply_resolver=reply_resolver)
+    fake = FakeAdapter()
+    gw.register(fake)
+    await gw.start()
+
+    # An inbound approval reply: resolves the item, NOT routed to the handler.
+    await fake.inject(f"approve [ocw:{item.id}]", user_id="u1")
+    assert inbox.get(item.id).resolution == "allow"
+    assert routed == []
+
+    # A normal message (no token) still goes to the handler.
+    await fake.inject("hey, what's up?", user_id="u1")
+    assert len(routed) == 1 and routed[0].text == "hey, what's up?"
+
+    await gw.stop()
+
+
+async def test_freetext_answer_to_question_is_consumed(tmp_path):
+    inbox = InboxStore(tmp_path / "inbox.json")
+    q = inbox.add_question("s1", "Which region?", inbox="ops")
+    routed: list = []
+
+    async def handler(ev):
+        routed.append(ev)
+
+    settings = {"fake": ConnectorSettings("fake", enabled=True, allow_all=True)}
+    gw = Gateway(
+        settings=settings,
+        handler=handler,
+        reply_resolver=lambda ev: resolve_from_reply(ev.text, inbox.resolve)
+        is not None,
+    )
+    fake = FakeAdapter()
+    gw.register(fake)
+    await gw.start()
+
+    await fake.inject(f"us-west-2 [ocw:{q.id}]", user_id="anyone")
+    assert inbox.get(q.id).resolution == "us-west-2"
+    assert routed == []
+    await gw.stop()