{
  "task": "MP-LIST-REFRESH-01",
  "case": "MPQA-REAL-SESSION-SWITCH",
  "status": "Blocked",
  "checkedPaths": {
    "src/auth/auth.controller.ts": "20-36 public login awaits exchangeCode then users.login then JWT sign; 39-43 logout only",
    "src/auth/wechat.service.ts": "15-19 external api.weixin.qq.com fetch; 51-57 jscode2session required",
    "test/http.spec.ts": "213-228 test helper directly creates user/binding and signs JwtService token under test app; not an ordinary local public login route",
    "src/auth/auth.guard.ts": "normal JWT validation/session_version retained"
  },
  "sourceHashes": {
    "src/auth/auth.controller.ts": "52e45dd9de5ae90bd484176d23d2f58abd6199f926a2639ca25794729d95096a",
    "src/auth/wechat.service.ts": "7bb48fbc4413490b548342d0d20685722b450a89a0999f63176e454ceeb3820b",
    "src/auth/auth.guard.ts": "43e06d02318bced2c72556f3030bc0db8540962df8f0265967374436e3b8bfca",
    "test/http.spec.ts": "5ef8e404e2740ee6527474fd735af18bf50f7d1763aa2b55fa66959c64a01413"
  },
  "ordinaryLocalSessionEndpointFound": false,
  "minimumPrerequisite": "two distinct approved nonproduction WeChat identity code exchanges through normal login, or previously application-authenticated local A/B sessions with verified limited fixture ownership; no supplier call authorized in this package",
  "stoppedPerCurrentInstruction": true,
  "supplierCalls": 0,
  "BWAccess": 0,
  "JWTSecretReads": 0,
  "JWTsGenerated": 0,
  "usersBindingsSessionsCreated": 0,
  "authBypassOrConfigChanges": false,
  "existingControlledPromiseEvidenceOnly": "journal361 developer session watch/generation tests; not promoted"
}