ပရောဂျက်: Passkey နှင့် Recovery ပြင်ဆင်မှု အစီအစဉ်

function buildMigrationPlan(accounts) {
  function scoreAccount(acc) {
    let score = 0;
    const plan = [];

    if (!acc.passkeyEnabled) {
      plan.push(
        acc.hasStrongUniquePassword
          ? "Enable a passkey where supported (current password is already strong and unique)"
          : "Enable a passkey, or set a unique strong password if passkeys are not supported yet"
      );
      score += acc.hasStrongUniquePassword ? 2 : 4;
    }
    if (!acc.twoFAEnabled) {
      plan.push("Enable 2FA (prefer an authenticator app or hardware key over SMS)");
      score += 4;
    }
    if (!acc.recoveryCodesSecured) {
      plan.push("Generate fresh recovery codes and store them offline, access-controlled");
      score += 3;
    }
    if (!acc.recoveryContactVerified) {
      plan.push("Verify the recovery email/phone is current and itself well-secured");
      score += 3;
    }
    if (!acc.trustedDevicesReviewed) {
      plan.push("Review trusted devices / active sessions and remove unrecognized ones");
      score += 2;
    }

    return {
      account: acc.name,
      importance: acc.importance,
      riskScore: score * acc.importance,
      actionsNeeded: plan.length,
      plan,
    };
  }

  return accounts
    .map(scoreAccount)
    .sort((a, b) => b.riskScore - a.riskScore)
    .map((acc, i) => ({ priority: i + 1, ...acc }));
}

// Describe accounts by their CURRENT setup -- never real credentials, just booleans.
const accounts = [
  {
    name: "Primary Email",
    importance: 3,
    passkeyEnabled: false,
    hasStrongUniquePassword: true,
    twoFAEnabled: true,
    recoveryCodesSecured: false,
    recoveryContactVerified: false,
    trustedDevicesReviewed: false,
  },
  {
    name: "Banking",
    importance: 3,
    passkeyEnabled: false,
    hasStrongUniquePassword: true,
    twoFAEnabled: true,
    recoveryCodesSecured: true,
    recoveryContactVerified: true,
    trustedDevicesReviewed: true,
  },
  {
    name: "Work / Primary Social",
    importance: 2,
    passkeyEnabled: false,
    hasStrongUniquePassword: false,
    twoFAEnabled: false,
    recoveryCodesSecured: false,
    recoveryContactVerified: false,
    trustedDevicesReviewed: false,
  },
];

const plan = buildMigrationPlan(accounts);
for (const item of plan) {
  console.log(`#${item.priority} ${item.account} (risk score ${item.riskScore}, ${item.actionsNeeded} actions)`);
  for (const step of item.plan) console.log(`  - ${step}`);
}