完成40%

tests/auth-tac-integration-contract.ps1

@@ -88,7 +88,12 @@ foreach ($page in @($a01, $a04, $a05)) {
   }
   Require-Text -Content $page -Text 'const requestedPhone = phone.value' -Label '认证手机号请求快照'
   Require-Text -Content $page -Text 'subject: requestedPhone' -Label '认证手机号请求快照'
-  Require-Text -Content $page -Text ':disabled="sendingCode || cooldownSeconds > 0 || submitting"' -Label '短信流程手机号锁定'
+  $phoneLock = if ($page -eq $a01) {
+    ':disabled="sendingCode || cooldownSeconds > 0 || submitting || tacVisible"'
+  } else {
+    ':disabled="sendingCode || cooldownSeconds > 0 || submitting"'
+  }
+  Require-Text -Content $page -Text $phoneLock -Label '短信流程手机号锁定'
   if ([regex]::Matches($page, [regex]::Escape('if (!pageActive) return;')).Count -lt 3) {
     throw '认证页面必须在策略、短信与最终提交的异步回流前拒绝卸载后的旧结果'
   }
@@ -105,9 +110,10 @@ foreach ($token in @('const blockBusyAction = () =>', 'if (blockBusyAction()) re
   Require-Text -Content $a01 -Text $token -Label 'A01 忙碌动作门禁'
 }
 
-foreach ($token in @('AUTH_TAC_SCENE.SMS_LOGIN', 'appApi.loginWithSms', '/^\d{4}$/', 'PASSWORD_TAC_BLOCKED_MESSAGE')) {
+foreach ($token in @('AUTH_TAC_SCENE.SMS_LOGIN', 'appApi.loginWithPassword', 'appApi.loginWithSms', 'calcMD5(password.value)', 'const preparePasswordLogin = async () =>', '/^\d{4}$/')) {
   Require-Text -Content $a01 -Text $token -Label 'A01'
 }
+Reject-Text -Content $a01 -Text 'PASSWORD_TAC_BLOCKED_MESSAGE' -Label 'A01 旧密码登录硬关闭'
 Reject-Text -Content $a01 -Text '/^\d{6}$/' -Label 'A01 六位短信码'
 
 foreach ($token in @('AUTH_TAC_SCENE.REGISTER', 'v-model.trim="verificationCode"', 'appApi.registerWithPassword', 'calcMD5(password.value)', '/^\d{4}$/', 'goRoot("G01")')) {