Improve WeChat MP replies and ship MindSpace/H5 production updates.

Add WeChat service account routing with sync acks, connectivity tests, and context isolation; document deploy runbooks; and bundle related MindSpace, voice, Plaza, and server gateway changes for production rollout.

Co-authored-by: Cursor <cursoragent@cursor.com>

mindspace-asset-preview.test.mjs

@@ -3,7 +3,7 @@ import fs from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 import test from 'node:test';
-import { canPreviewAsset, renderAssetPreviewHtml } from './mindspace-asset-preview.mjs';
+import { canPreviewAsset, renderAssetPreviewHtml, renderImageAssetViewerHtml, wantsInlineImageViewer } from './mindspace-asset-preview.mjs';
 
 test('canPreviewAsset covers common workspace file types', () => {
   assert.equal(canPreviewAsset('text/html'), true);
@@ -30,6 +30,50 @@ test('renderAssetPreviewHtml renders csv as table', () => {
   assert.match(html, /下载原文件/);
 });
 
+test('renderAssetPreviewHtml renders image lightbox controls', () => {
+  const html = renderAssetPreviewHtml({
+    asset: {
+      displayName: '封面',
+      filename: 'cover.jpg',
+      mimeType: 'image/jpeg',
+    },
+    buffer: Buffer.from('fake'),
+    downloadUrl: '/api/mindspace/v1/assets/a/download?inline=1',
+  });
+  assert.match(html, /data-image-lightbox-trigger/);
+  assert.match(html, /image-lightbox-close/);
+  assert.match(html, /event\.key === 'Escape'/);
+  assert.match(html, /script-src 'unsafe-inline'/);
+});
+
+test('renderImageAssetViewerHtml uses minimal image viewer shell', () => {
+  const html = renderImageAssetViewerHtml({
+    asset: {
+      displayName: '封面',
+      filename: 'cover.jpg',
+      mimeType: 'image/jpeg',
+    },
+    downloadUrl: '/api/mindspace/v1/assets/a/download?inline=1',
+  });
+  assert.match(html, /class="image-viewer"/);
+  assert.match(html, /aria-label="关闭"/);
+});
+
+test('wantsInlineImageViewer distinguishes embed vs page navigation', () => {
+  assert.equal(
+    wantsInlineImageViewer({ get: (name) => (name === 'sec-fetch-dest' ? 'image' : ''), query: {} }),
+    false,
+  );
+  assert.equal(
+    wantsInlineImageViewer({ get: (name) => (name === 'sec-fetch-dest' ? 'document' : ''), query: {} }),
+    true,
+  );
+  assert.equal(
+    wantsInlineImageViewer({ get: () => '', query: { viewer: '1' } }),
+    true,
+  );
+});
+
 test('renderAssetPreviewHtml extracts docx text', async () => {
   const docPath = path.join(
     process.cwd(),