fix(auth): harden WeChat login and explicit identity switching

graphify-out/GRAPH_REPORT.md

@@ -1,16 +1,16 @@
 # Graph Report - juzi  (2026-10-12)
 
 ## Corpus Check
-- 66 files · ~4,184,136 words
+- 68 files · ~4,185,405 words
 - Verdict: corpus is large enough that graph structure adds value.
 
 ## Summary
-- 1188 nodes · 2566 edges · 83 communities (66 shown, 17 thin omitted)
+- 1204 nodes · 2589 edges · 89 communities (72 shown, 17 thin omitted)
 - Extraction: 93% EXTRACTED · 7% INFERRED · 0% AMBIGUOUS · INFERRED: 179 edges (avg confidence: 0.53)
 - Token cost: 0 input · 0 output
 
 ## Graph Freshness
-- Built from commit: `7518dc23`
+- Built from commit: `0ec5e5dc`
 - Run `git rev-parse HEAD` and compare to check if the graph is stale.
 - Run `graphify update .` after code changes (no API cost).
 
@@ -20,24 +20,24 @@
 - app.js
 - skin-score.js
 - i
-- n
+- r
 - .runAndExtendWithFaceDetections
 - Box
 - admin.js
 - __awaiter
-- AgeGenderNet
+- TinyYolov2Base
 - lib/accounts.js
 - server.js
 - files
-- FaceLandmarks68
+- FaceLandmarks
 - .runAndExtendWithFaceDetection
 - 巨子测肤 · 1'me 在线肌肤测试 — UI 设计规范
 - extractFaces
 - 1'me 在线肌肤测试 H5
 - head-pose.js
 - build_fixtures.py
-- disposeUnusedWeightTensors
-- ComputeAllFaceDescriptorsTask
+- AgeGenderNet
+- .loadFromDisk
 - facepp-skinanalyze（旷视皮肤分析专业版调用技能）
 - 巨子测肤 · 1'me 语音播报内容设计文档 V1.0
 - mobile-select.iife.min.js
@@ -57,7 +57,7 @@
 - .predictAgeAndGender
 - test/accounts.js
 - export_psd_assets.py
-- .loadFromDisk
+- .toString
 - start-local.sh
 - PredictAllAgeAndGenderWithFaceAlignmentTask
 - PredictAllFaceExpressionsWithFaceAlignmentTask
@@ -67,7 +67,7 @@
 - call_skinanalyze_3view.sh
 - 护理建议（全量文本，按需求摘抄）
 - UI 对齐 10.09 设计稿：调研与实施计划
-- extractFaceTensors
+- pn
 - report-ui.js
 - regression.js
 - .dispose
@@ -76,7 +76,7 @@
 - 提交前 Review（2026-10-11）
 - e2e-browser.mjs
 - account-client.js
-- k
+- 微信登录接入与公网部署说明
 - wechat-browser.mjs
 - ui-20261009.mjs
 - analyze-timeout.js
@@ -86,11 +86,17 @@
 - build_report_copy.py
 - TinyYolov2
 - drawFaceExpressions
-- .toString
+- n
 - isValidNumber
 - 线上微信登录部署记录
-- ComputeSingleFaceDescriptorTask
-- PredictAllFaceExpressionsTask
+- wechat-production.mjs
+- ComputeAllFaceDescriptorsTask
+- 10.09 新版 H5 实施与验收
+- 微信登录联调：2026-10-12
+- 产品推荐规则：肤龄基准与边界调整
+- 部署
+- PredictSingleAgeAndGenderWithFaceAlignmentTask
+- PredictSingleFaceExpressionsWithFaceAlignmentTask
 
 ## God Nodes (most connected - your core abstractions)
 1. `__awaiter()` - 59 edges
@@ -119,11 +125,11 @@
 ## Import Cycles
 - None detected.
 
-## Communities (83 total, 17 thin omitted)
+## Communities (89 total, 17 thin omitted)
 
 ### Community 0 - "face-api.js"
 Cohesion: 0.02
-Nodes (35): cn(), computeReshapedDimensions(), createBrowserEnv(), createFileSystem(), createNodejsEnv(), dr(), en(), FaceDetection() (+27 more)
+Nodes (32): cn(), computeReshapedDimensions(), createBrowserEnv(), createFileSystem(), createNodejsEnv(), dr(), en(), extractBoundingBoxes() (+24 more)
 
 ### Community 1 - "线上闭环测试（不含真实微信授权）"
 Cohesion: 0.25
@@ -139,31 +145,35 @@ Nodes (45): acneGrade(), buildViewModel(), calcAcne(), calcContour(), calcSens()
 
 ### Community 4 - "i"
 Cohesion: 0.09
-Nodes (42): a(), bf(), cf(), d(), da(), dn(), DrawBox(), drawContour() (+34 more)
+Nodes (27): b(), ba(), ca(), da(), dn(), ee(), et(), fa() (+19 more)
 
-### Community 5 - "n"
-Cohesion: 0.11
-Nodes (37): ae(), b(), be(), bi(), ce(), de(), e(), Ef() (+29 more)
+### Community 5 - "r"
+Cohesion: 0.15
+Nodes (34): a(), bf(), cf(), d(), drawContour(), dt(), e(), ea() (+26 more)
+
+### Community 6 - ".runAndExtendWithFaceDetections"
+Cohesion: 0.33
+Nodes (5): DetectAllFacesTask(), extendWithFaceDetection(), isWithFaceDetection(), isWithFaceLandmarks(), resizeResults()
 
 ### Community 7 - "Box"
-Cohesion: 0.10
-Nodes (11): Box(), extendWithFaceDescriptor(), extendWithFaceDetection(), extendWithFaceLandmarks(), FaceLandmarks(), FaceRecognitionNet(), isWithFaceDetection(), isWithFaceLandmarks() (+3 more)
+Cohesion: 0.16
+Nodes (3): Box(), ComputeSingleFaceDescriptorTask(), extendWithFaceDescriptor()
 
 ### Community 8 - "admin.js"
 Cohesion: 0.21
 Nodes (28): ageText(), api(), bind(), closeDetail(), collectFilters(), dimsHtml(), doRetry(), dSec() (+20 more)
 
 ### Community 9 - "__awaiter"
-Cohesion: 0.14
-Nodes (13): __awaiter(), extendWithFaceExpressions(), extractAllFacesAndComputeResults(), extractSingleFaceAndComputeResult(), fetchImage(), fetchJson(), fetchNetWeights(), fetchOrThrow() (+5 more)
+Cohesion: 0.11
+Nodes (15): __awaiter(), bufferToImage(), ComposableTask(), extendWithFaceExpressions(), extractAllFacesAndComputeResults(), extractSingleFaceAndComputeResult(), FaceRecognitionNet(), fetchImage() (+7 more)
 
-### Community 10 - "AgeGenderNet"
-Cohesion: 0.05
-Nodes (31): AgeGenderNet(), conv(), conv$1(), convDown(), convLayer(), convLayer$1(), convNoRelu(), convWithBatchNorm() (+23 more)
+### Community 10 - "TinyYolov2Base"
+Cohesion: 0.10
+Nodes (22): boxPredictionLayer(), convLayer(), convWithBatchNorm(), decodeBoxesLayer(), depthwiseConvLayer(), depthwiseSeparableConv$1(), fullyConnectedLayer(), getCenterCoordinatesAndSizesLayer() (+14 more)
 
 ### Community 11 - "lib/accounts.js"
 Cohesion: 0.17
-Nodes (19): atomic(), body(), cookie(), cookies(), crypto, fs, json(), login() (+11 more)
+Nodes (20): atomic(), body(), cookie(), cookies(), crypto, fs, json(), login() (+12 more)
 
 ### Community 12 - "server.js"
 Cohesion: 0.08
@@ -173,25 +183,25 @@ Nodes (49): accounts, appendRecord(), callFacepp(), CRED, csvCell(), DATA_DIR, d
 Cohesion: 0.12
 Nodes (15): files, analyze-fail, analyzing, countdown-321, hint-far, hint-front, hint-hold, hint-near (+7 more)
 
-### Community 14 - "FaceLandmarks68"
-Cohesion: 0.19
-Nodes (3): FaceLandmarks5(), FaceLandmarks68(), getCenterPoint()
+### Community 14 - "FaceLandmarks"
+Cohesion: 0.05
+Nodes (25): conv(), conv$1(), convDown(), convLayer$1(), convNoRelu(), denseBlock3(), denseBlock4(), depthwiseSeparableConv() (+17 more)
 
 ### Community 15 - ".runAndExtendWithFaceDetection"
-Cohesion: 0.33
-Nodes (5): allFacesMtcnn(), allFacesSsdMobilenetv1(), allFacesTinyYolov2(), detectAllFaces(), DetectSingleFaceTask()
+Cohesion: 0.23
+Nodes (6): allFacesMtcnn(), allFacesSsdMobilenetv1(), allFacesTinyYolov2(), DetectAllFaceLandmarksTask(), detectAllFaces(), DetectSingleFaceTask()
 
 ### Community 16 - "巨子测肤 · 1'me 在线肌肤测试 — UI 设计规范"
 Cohesion: 0.15
 Nodes (12): 1. 基准与尺寸换算, 2. 色彩规范, 3. 字体规范, 4. 组件切图(assets/svg/), 5. 图片素材(assets/images/,共 15 张), 6. 页面清单(design/ 下有整屏 PNG 预览), 7. 目录结构, 8. 还原建议 (+4 more)
 
 ### Community 17 - "extractFaces"
-Cohesion: 0.19
-Nodes (19): awaitMediaLoaded(), bufferToImage(), createCanvas(), createCanvasFromMedia(), extractFaces(), extractImagePatches(), getContext2dOrThrow(), getEnv() (+11 more)
+Cohesion: 0.17
+Nodes (20): awaitMediaLoaded(), createCanvas(), createCanvasFromMedia(), extractFaces(), extractFaceTensors(), extractImagePatches(), getContext2dOrThrow(), getEnv() (+12 more)
 
 ### Community 18 - "1'me 在线肌肤测试 H5"
-Cohesion: 0.05
-Nodes (33): 10.09 新版 H5 实施与验收, 按确认项实现, 文档未定义部分的实施口径, 素材再生成, 验证命令, 产品推荐规则：肤龄基准与边界调整, 决策顺序, 后台与前端一致性 (+25 more)
+Cohesion: 0.17
+Nodes (12): 10.09 更新, 1'me 在线肌肤测试 H5, Admin API(统一返回 `{ok:false,message}` 错误), 后台查看(admin.html), 密钥配置, 已知占位清单, 技术说明, 拍照交互(动态捕捉自动三连拍) (+4 more)
 
 ### Community 19 - "head-pose.js"
 Cohesion: 0.33
@@ -201,9 +211,13 @@ Nodes (8): assertPoints(), check(), clamp(), dist(), estimate(), makeFrontal(),
 Cohesion: 0.40
 Nodes (9): build_case1(), build_case2(), build_truth(), col(), dump(), main(), parse_value(), set_path() (+1 more)
 
-### Community 21 - "disposeUnusedWeightTensors"
-Cohesion: 0.06
-Nodes (33): boxPredictionLayer(), decodeBoxesLayer(), depthwiseConvLayer(), disposeUnusedWeightTensors(), extractorsFactory$3(), extractorsFactory$5(), extractorsFactory$7(), extractorsFactory$9() (+25 more)
+### Community 21 - "AgeGenderNet"
+Cohesion: 0.05
+Nodes (28): AgeGenderNet(), disposeUnusedWeightTensors(), extractorsFactory$3(), extractorsFactory$5(), extractorsFactory$7(), extractorsFactory$9(), extractParamsFromWeigthMap(), extractParamsFromWeigthMap$1() (+20 more)
+
+### Community 22 - ".loadFromDisk"
+Cohesion: 0.24
+Nodes (4): fetchJson(), getModelUris(), loadWeightMap(), TinyFaceDetector()
 
 ### Community 23 - "facepp-skinanalyze（旷视皮肤分析专业版调用技能）"
 Cohesion: 0.20
@@ -218,16 +232,16 @@ Cohesion: 0.20
 Nodes (16): _arrayLikeToArray(), _arrayWithHoles(), _arrayWithoutHoles(), _classCallCheck(), _createClass(), _defineProperties(), h(), _iterableToArray() (+8 more)
 
 ### Community 26 - "wi"
-Cohesion: 0.20
-Nodes (12): Ci(), Ei(), Fi(), Ii(), ki(), pe(), Qt(), ri() (+4 more)
+Cohesion: 0.28
+Nodes (9): Ci(), Ei(), Fi(), Ii(), ki(), pe(), ri(), wi() (+1 more)
 
 ### Community 27 - "gen_voice.py"
 Cohesion: 0.30
 Nodes (11): ndarray, Path, gen_countdown(), main(), normalize_clip(), 倒计时单独按字生成再拼接，避免「三、二、一」整句被读成播报腔、与提示音气质漂移。 与提示音共用同一 speaker + instruct；句间留约…, 裁掉过长首尾静音，保留 ≤150ms 边沿，避免提示显迟钝。, 响度归一 −16 LUFS + 转 MP3 48k CBR mono 22050Hz。 (+3 more)
 
 ### Community 28 - "C"
-Cohesion: 0.08
-Nodes (33): bn(), Bo(), C(), cd(), cl(), co(), eo(), fn() (+25 more)
+Cohesion: 0.10
+Nodes (30): Bo(), C(), cd(), cl(), co(), eo(), fo(), Ft() (+22 more)
 
 ### Community 29 - "face-api.js 本地化依赖（h5/vendor/faceapi/）"
 Cohesion: 0.29
@@ -242,17 +256,13 @@ Cohesion: 0.60
 Nodes (4): main(), 递归缩放 result 内全部坐标:{left,top,width,height} 矩形与 {x,y} 点,与原数据同为整数。, scale_coords(), to_data_url()
 
 ### Community 36 - "ao"
-Cohesion: 0.33
-Nodes (6): ao(), Do(), io(), oo(), so(), To()
+Cohesion: 0.40
+Nodes (5): ao(), Do(), io(), so(), To()
 
 ### Community 37 - "UI 外发版 10.09 图片资源"
 Cohesion: 0.40
 Nodes (4): UI 外发版 10.09 图片资源, 前端素材对应, 文件位置, 重新导出
 
-### Community 38 - "FaceLandmark68Net"
-Cohesion: 0.17
-Nodes (3): FaceLandmark68Net(), PredictSingleAgeAndGenderWithFaceAlignmentTask(), PredictSingleFaceExpressionsWithFaceAlignmentTask()
-
 ### Community 39 - "UI交互界面调整"
 Cohesion: 0.40
 Nodes (4): 1meAI测肤旷视UI问题反馈, UI交互界面调整, 交互, **设计**
@@ -269,9 +279,9 @@ Nodes (9): assert, create, fs, http, os, path, ReportUI, SkinScore (+1 more)
 Cohesion: 0.70
 Nodes (4): bounds(), layer_at(), main(), save_image()
 
-### Community 43 - ".loadFromDisk"
+### Community 43 - ".toString"
 Cohesion: 0.29
-Nodes (3): ComposableTask(), getModelUris(), TinyFaceDetector()
+Nodes (6): ae(), FaceMatch(), la(), pr(), pt(), vt()
 
 ### Community 44 - "start-local.sh"
 Cohesion: 0.50
@@ -293,9 +303,9 @@ Nodes (19): 5\.1 轮廓（紧塑力）, 5\.2 皱纹（紧塑力）, 5\.3 肤色
 Cohesion: 0.11
 Nodes (17): 1. 结论和依据, 2. 统一比较口径, 3. 逐页差异和调整内容, 4. 报告数据如何接到新 UI, 5. 登录与“我的报告”的真实能力缺口, 6. 原稿中需要整理的内容, 7. 实施顺序与交付物, 8. 验收定义 (+9 more)
 
-### Community 55 - "extractFaceTensors"
+### Community 55 - "pn"
 Cohesion: 0.29
-Nodes (3): DetectAllFaceLandmarksTask(), extractFaceTensors(), isTensor3D()
+Nodes (7): bn(), fn(), ln(), pn(), un(), wn(), xn()
 
 ### Community 56 - "report-ui.js"
 Cohesion: 0.90
@@ -306,12 +316,12 @@ Cohesion: 0.60
 Nodes (5): diffCtx(), loadJSON(), main(), okNum(), okStr()
 
 ### Community 58 - ".dispose"
-Cohesion: 0.16
-Nodes (12): extractBoundingBoxes(), getSizesForScale(), iou(), nonMaxSuppression(), nonMaxSuppression$1(), normalize$1(), rescaleAndNormalize(), scale() (+4 more)
+Cohesion: 0.17
+Nodes (12): extendWithFaceLandmarks(), getSizesForScale(), iou(), nonMaxSuppression(), nonMaxSuppression$1(), normalize$1(), ObjectDetection(), rescaleAndNormalize() (+4 more)
 
 ### Community 61 - "NeuralNetwork"
-Cohesion: 0.06
-Nodes (28): createFaceDetectionNet(), createFaceRecognitionNet(), createMtcnn(), createSsdMobilenetv1(), createTinyFaceDetector(), createTinyYolov2(), extractConvParamsFactory(), extractFCParamsFactory() (+20 more)
+Cohesion: 0.07
+Nodes (26): createFaceDetectionNet(), createFaceRecognitionNet(), createMtcnn(), createSsdMobilenetv1(), createTinyFaceDetector(), createTinyYolov2(), extractConvParamsFactory(), extractFCParamsFactory() (+18 more)
 
 ### Community 62 - "提交前 Review（2026-10-11）"
 Cohesion: 0.40
@@ -322,16 +332,16 @@ Cohesion: 0.29
 Nodes (4): EXPECTED, fails, pageErrors, pwRoot
 
 ### Community 64 - "account-client.js"
-Cohesion: 0.90
-Nodes (4): browser(), init(), read(), request()
+Cohesion: 0.80
+Nodes (5): browser(), init(), read(), rememberKind(), request()
 
-### Community 65 - "k"
-Cohesion: 0.13
-Nodes (16): ba(), ca(), fa(), gn(), k(), kn(), pa(), tt() (+8 more)
+### Community 65 - "微信登录接入与公网部署说明"
+Cohesion: 0.22
+Nodes (7): 公网服务器配置, 公网真机验收清单, 反向代理与后台保护, 已完成的链路, 微信登录接入与公网部署说明, 数据、迁移与备份, 结论与当前阻碍
 
 ### Community 66 - "wechat-browser.mjs"
-Cohesion: 0.40
-Nodes (4): createAccounts, h5, require, root
+Cohesion: 0.25
+Nodes (6): createAccounts, h5, ReportUI, require, root, SkinScore
 
 ### Community 68 - "analyze-timeout.js"
 Cohesion: 0.20
@@ -342,35 +352,55 @@ Cohesion: 0.50
 Nodes (3): artifacts, errors, samples
 
 ### Community 77 - "drawFaceExpressions"
-Cohesion: 0.50
-Nodes (3): drawFaceExpressions(), FaceExpressions(), isWithFaceExpressions()
+Cohesion: 0.22
+Nodes (6): DrawBox(), drawDetections(), drawFaceExpressions(), DrawFaceLandmarks(), FaceExpressions(), isWithFaceExpressions()
 
-### Community 78 - ".toString"
-Cohesion: 0.50
-Nodes (3): FaceMatch(), la(), pr()
+### Community 78 - "n"
+Cohesion: 0.11
+Nodes (29): be(), bi(), ce(), de(), Ef(), er(), fe(), Ie() (+21 more)
 
 ### Community 79 - "isValidNumber"
 Cohesion: 0.33
 Nodes (5): bgrToRgbTensor(), Dimensions(), isValidNumber(), isValidProbablitiy(), isWithGender()
 
 ### Community 80 - "线上微信登录部署记录"
-Cohesion: 0.29
+Cohesion: 0.33
 Nodes (6): 初次部署时的凭据查找记录（现已由用户提供）, 初次部署的线上检查（历史结果）, 后续更新：已配置真实凭据, 已执行, 用户确认加入白名单后的复测, 线上微信登录部署记录
 
+### Community 81 - "wechat-production.mjs"
+Cohesion: 0.60
+Nodes (4): api(), base, callback(), start()
+
+### Community 83 - "10.09 新版 H5 实施与验收"
+Cohesion: 0.29
+Nodes (5): 10.09 新版 H5 实施与验收, 按确认项实现, 文档未定义部分的实施口径, 素材再生成, 验证命令
+
+### Community 84 - "微信登录联调：2026-10-12"
+Cohesion: 0.29
+Nodes (5): 微信登录联调：2026-10-12, 本轮修正, 白名单与凭据, 真实微信验收与排查, 自动验证
+
+### Community 87 - "产品推荐规则：肤龄基准与边界调整"
+Cohesion: 0.33
+Nodes (6): 产品推荐规则：肤龄基准与边界调整, 决策顺序, 后台与前端一致性, 实施与验证范围, 已明确的要求, 已确认的三个条件
+
+### Community 92 - "部署"
+Cohesion: 0.67
+Nodes (3): Windows 本机部署(提测用), 线上部署(juzi.xiangsilian.com), 部署
+
 ## Knowledge Gaps
-- **183 isolated node(s):** `source`, `document_size`, `pages`, `assets`, `layers` (+178 more)
+- **190 isolated node(s):** `source`, `document_size`, `pages`, `assets`, `layers` (+185 more)
   These have ≤1 connection - possible missing edges or undocumented components.
 - **17 thin communities (<3 nodes) omitted from report** — run `graphify query` to explore isolated nodes.
 
 ## Suggested Questions
 _Questions this graph is uniquely positioned to answer:_
 
-- **Why does `k()` connect `k` to `face-api.js`, `app.js`, `i`, `n`, `lib/accounts.js`?**
-  _High betweenness centrality (0.061) - this node is a cross-community bridge._
-- **Why does `r()` connect `n` to `face-api.js`, `i`, `AgeGenderNet`, `server.js`, `.toString`, `wi`, `C`?**
-  _High betweenness centrality (0.050) - this node is a cross-community bridge._
-- **Why does `renderReport()` connect `app.js` to `k`, `n`?**
-  _High betweenness centrality (0.047) - this node is a cross-community bridge._
+- **Why does `k()` connect `i` to `face-api.js`, `app.js`, `r`, `.toString`, `lib/accounts.js`, `n`, `C`?**
+  _High betweenness centrality (0.063) - this node is a cross-community bridge._
+- **Why does `r()` connect `r` to `face-api.js`, `i`, `.toString`, `server.js`, `n`, `FaceLandmarks`, `C`?**
+  _High betweenness centrality (0.055) - this node is a cross-community bridge._
+- **Why does `renderReport()` connect `app.js` to `i`, `n`?**
+  _High betweenness centrality (0.048) - this node is a cross-community bridge._
 - **Are the 24 inferred relationships involving `n()` (e.g. with `newRecordId()` and `ae()`) actually correct?**
   _`n()` has 24 INFERRED edges - model-reasoned connections that need verification._
 - **Are the 27 inferred relationships involving `r()` (e.g. with `handleExport()` and `handleRecordsQuery()`) actually correct?**
@@ -378,4 +408,4 @@ _Questions this graph is uniquely positioned to answer:_
 - **Are the 7 inferred relationships involving `t()` (e.g. with `renderReport()` and `e()`) actually correct?**
   _`t()` has 7 INFERRED edges - model-reasoned connections that need verification._
 - **What connects `source`, `document_size`, `pages` to the rest of the system?**
-  _183 weakly-connected nodes found - possible documentation gaps or missing edges._
+  _190 weakly-connected nodes found - possible documentation gaps or missing edges._