commit21

scripts/mfa-management-http.mjs

@@ -0,0 +1,24 @@
+import fs from 'node:fs/promises';
+import assert from 'node:assert/strict';
+const source = await fs.readFile('scripts/supplier-evaluation-check.mjs', 'utf8');
+const common = source.slice(source.indexOf('const base ='), source.indexOf('const author ='));
+await new Function('fs','assert','return (async()=>{'+common+`
+    const records=[];
+    for(const role of ['admin','warehouse']) {
+        const viewer=client(); await viewer.enter(role);
+        const result=await viewer.request('/settings/security');
+        assert.equal(result.status,200);
+        assert.equal(result.page.component,'settings/security');
+        assert.equal(result.page.encryptHistory,true);
+        assert.equal(result.page.props.canManageTwoFactor,undefined);
+        assert.equal(result.page.props.secretKey,undefined);
+        assert.equal(result.page.props.recoveryCodes,undefined);
+        assert.equal((await viewer.request('/user/two-factor-secret-key')).status,404);
+        assert.equal((await viewer.request('/user/two-factor-recovery-codes')).status,404);
+        records.push({role,status:result.status,mfaDisabled:true});
+    }
+    await fs.writeFile('docs/proofs/mfa-management-http.json',JSON.stringify({checked_at:new Date().toISOString(),environment:base,result:'passed',records,
+        enrollment_commands:false,password_changes:false,accounts_or_grants_changed:false,pilot_migration_applied:false,sgf_changed:false,visual_review:false,
+        coverage:'Pilot remains disabled; enabled native management flows tested in disposable databases.'},null,2));
+    console.log('Interface de segurança conferida; adesão MFA do piloto permanece desactivada.');
+`+'})()')(fs,assert);