iobroker.eos-admin 7.10.0 → 7.10.2

package/tools/nexowatt-validate-package.cjs

@@ -11,6 +11,8 @@ const fail = msg => {
 const read = file => fs.readFileSync(path.join(root, file), 'utf8');
 const readJson = file => JSON.parse(read(file));
 const exists = file => fs.existsSync(path.join(root, file));
+const canonicalPrepublishOnly = 'npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run clean:eos-runtime && npm run check:eos-publish-channel && npm run check:eos-package && npm run check:eos-stability';
+const canonicalPrepack = 'node tools/nexowatt-sync-release-version.cjs --quiet && node tools/nexowatt-ensure-release-defaults.cjs && node tools/nexowatt-clean-legacy-runtime.cjs --quiet && node tools/nexowatt-prebuilt-release-selftest.cjs';
 
 const pkg = readJson('package.json');
 const pkgLock = readJson('package-lock.json');
@@ -41,20 +43,34 @@ if (pkg.scripts['test:eos-version-sync'] !== 'node tools/nexowatt-version-sync-s
 if (pkg.scripts['verify:eos-merge'] !== 'node tools/nexowatt-merge-update-selftest.cjs') fail('merge update selftest script is missing or incorrect');
 if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-version-sync-selftest.cjs')) fail('version sync selftest is not part of check:eos-stability');
 if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-merge-update-selftest.cjs')) fail('merge update selftest is not part of check:eos-stability');
-if (pkg.scripts['check:eos-stable-v7100'] !== 'node tools/nexowatt-stable-v7100-selftest.cjs') fail('stable v7100 selftest script is missing or incorrect');
-if (pkg.scripts['test:eos-password-write'] !== 'node tools/nexowatt-password-write-selftest.cjs') fail('password write selftest script is missing');
-if (pkg.scripts['test:eos-request-security'] !== 'node tools/nexowatt-request-security-selftest.cjs') fail('request security selftest script is missing');
-if (pkg.scripts['test:eos-cache-update'] !== 'node tools/nexowatt-cache-update-selftest.cjs') fail('cache update selftest script is missing');
-for (const marker of ['nexowatt-password-write-selftest.cjs','nexowatt-request-security-selftest.cjs','nexowatt-cache-update-selftest.cjs']) if (!pkg.scripts['check:eos-stability']?.includes(marker)) fail(`stability check must execute ${marker}`);
-if (!pkg.scripts.prepublishOnly?.startsWith('npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run check:eos-publish-channel')) fail('prepublishOnly must synchronize versions and normalize release defaults before the publish channel guard');
+if (pkg.scripts['check:eos-stable-v7102'] !== 'node tools/nexowatt-stable-v7102-selftest.cjs') fail('stable v7102 selftest script is missing or incorrect');
+if (pkg.scripts.prepublishOnly !== canonicalPrepublishOnly) fail('prepublishOnly must use the dependency-free direct-publish workflow');
+if (/\b(?:tsc|tsx)\b|build:(?:backend|frontend)|\bnpx\b|npm\s+(?:i|install|ci)\b/i.test(pkg.scripts.prepublishOnly || '')) fail('prepublishOnly must not require local development dependencies');
+if (pkg.scripts['check:eos-prebuilt-release'] !== 'node tools/nexowatt-prebuilt-release-selftest.cjs') fail('prebuilt release selftest script is missing or incorrect');
+if (pkg.scripts['seal:eos-prebuilt-release'] !== 'node tools/nexowatt-prebuilt-release-selftest.cjs --write') fail('prebuilt release sealing script is missing or incorrect');
+const backendRuntimeSelftest = read('tools/nexowatt-backend-runtime-selftest.cjs');
+if (!backendRuntimeSelftest.includes('dependency-free on Windows')) fail('backend runtime selftest is missing the cross-platform publish marker');
+if (/const\s+npm\s*=\s*process\.platform|spawnSync\(\s*npm\s*,|['"]npm\.cmd['"]/.test(backendRuntimeSelftest)) fail('backend runtime selftest must not spawn a nested npm process');
+if (!(pkg.files || []).some(value => String(value).replace(/\\/g, '/').replace(/\/+$/, '') === 'build')) fail('package.json files must include the complete build directory');
+if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-prebuilt-release-selftest.cjs')) fail('prebuilt release selftest is not part of check:eos-stability');
 if (pkg.scripts['precheck:eos-package'] !== 'npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run clean:eos-runtime') fail('precheck:eos-package must synchronize versions, normalize release defaults and clean stale runtime files');
 if (pkg.scripts['precheck:eos-stability'] !== 'npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run clean:eos-runtime') fail('precheck:eos-stability must synchronize versions, normalize release defaults and clean stale runtime files');
 if (pkg.scripts['test:eos-publish-channel'] !== 'node tools/nexowatt-publish-channel-selftest.cjs') fail('publish channel selftest script is missing');
 if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-publish-channel-selftest.cjs')) fail('stability check must execute the publish channel selftest');
 if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-release-defaults-selftest.cjs')) fail('stability check must execute the release-default selftest');
+if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-password-write-selftest.cjs')) fail('password-write selftest is not part of check:eos-stability');
+if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-account-password-flow-selftest.cjs')) fail('account-password flow selftest is not part of check:eos-stability');
 if (io.native?.auth !== true) fail('fresh sales installations must default to authenticated access');
 if (io.native?.eosHideLegacyBackupFromNonAdmins !== true) fail('internal BackItUp reserve must default to Admin/Service visibility');
 if (io.native?.nexowattHideLegacyBackupFromNonAdmins !== true) fail('NexoWatt backup visibility compatibility flag must default to true');
+const instanceObjectIds = new Set((io.instanceObjects || []).map(object => object?._id));
+if (!instanceObjectIds.has('info.nexowattStableUpdatesEnabled')) fail('restart-safe auto-update enabled state is missing');
+if (!instanceObjectIds.has('info.nexowattStableUpdatesState')) fail('restart-safe auto-update runtime state is missing');
+for (const key of ['description', 'files', 'scripts', 'nexowattReleasePolicy']) {
+  if (JSON.stringify(pkgLock.packages?.['']?.[key]) !== JSON.stringify(pkg[key])) {
+    fail(`package-lock root ${key} must match package.json`);
+  }
+}
 for (const [label, value] of [
   ['io-package common.version', io.common?.version],
   ['io-package top-level version', io.version],
@@ -104,7 +120,6 @@ for (const file of [
   'adminWww/js/eos-basic-settings.js',
   'adminWww/js/eos-role-ui.js',
   'adminWww/js/eos-account-management.js',
-  'adminWww/js/eos-release-watch.js',
   'adminWww/js/eos-assistant.js',
   'adminWww/css/nexowatt-native-shell.css',
   'adminWww/img/eos/nexowatt-192.png',
@@ -112,30 +127,31 @@ for (const file of [
   'src-admin/src/components/Drawer.tsx',
   'src-admin/src/components/DrawerItem.tsx',
   'admin/admin.svg',
+  'build/lib/eosRequestSecurity.js',
   'LICENSE',
   'NEXOWATT_PROPRIETARY_LICENSE.md',
   'THIRD_PARTY_NOTICES.md',
-  'README_STABILITY_V7.10.0.md',
-  'RELEASE_NOTES_V7.10.0.md',
-  'PUBLISH_STABLE_V7.10.0.md',
-  'INSTALL_TEST_V7.10.0.md',
-  'RELEASE_ACCEPTANCE_V7.10.0.md',
+  'README_STABILITY_V7.10.2.md',
+  'RELEASE_NOTES_V7.10.2.md',
+  'PUBLISH_STABLE_V7.10.2.md',
+  'INSTALL_TEST_V7.10.2.md',
+  'RELEASE_ACCEPTANCE_V7.10.2.md',
   'MERGE_UPDATE.ps1',
   'MERGE_UPDATE.cmd',
-  'MERGE_UPDATE_README_V7.10.0.md',
+  'MERGE_UPDATE_README_V7.10.2.md',
   'tools/nexowatt-patch-built-frontend.cjs',
   'tools/nexowatt-native-shell-selftest.cjs',
   'tools/nexowatt-clean-legacy-runtime.cjs',
   'tools/nexowatt-runtime-cleanup-selftest.cjs',
   'tools/nexowatt-esm-syntax-selftest.cjs',
   'tools/nexowatt-import-integrity-selftest.cjs',
+  'tools/nexowatt-backend-runtime-selftest.cjs',
+  'tools/nexowatt-prebuilt-release-selftest.cjs',
+  'NEXOWATT_EOS_PREBUILT_MANIFEST.json',
   'tools/nexowatt-entrypoint-smoke-selftest.cjs',
   'tools/nexowatt-role-access-selftest.cjs',
   'tools/nexowatt-first-login-selftest.cjs',
   'tools/nexowatt-account-management-selftest.cjs',
-  'tools/nexowatt-password-write-selftest.cjs',
-  'tools/nexowatt-request-security-selftest.cjs',
-  'tools/nexowatt-cache-update-selftest.cjs',
   'tools/nexowatt-modern-ui-selftest.cjs',
   'tools/nexowatt-login-layout-selftest.cjs',
   'tools/nexowatt-internal-reserve-selftest.cjs',
@@ -143,12 +159,14 @@ for (const file of [
   'tools/nexowatt-sync-release-version.cjs',
   'tools/nexowatt-version-sync-selftest.cjs',
   'tools/nexowatt-merge-update-selftest.cjs',
-  'tools/nexowatt-stable-v7100-selftest.cjs',
+  'tools/nexowatt-stable-v7102-selftest.cjs',
+  'tools/nexowatt-password-write-selftest.cjs',
+  'tools/nexowatt-account-password-flow-selftest.cjs',
   'tools/nexowatt-ems-overview-selftest.cjs',
   'tools/nexowatt-ui-overview-runtime-selftest.cjs',
   'adminWww/js/eos-ems-overview.js',
   'adminWww/css/eos-ems-overview.css',
-  'adminWww/static/js/nexowatt-stable-v7100.js',
+  'adminWww/static/js/nexowatt-stable-v7101.js',
   'src-admin/src/components/Intro/NexoWattEmsOverview.tsx',
   'tools/nexowatt-publish-channel-guard.cjs',
   'tools/nexowatt-publish-channel-selftest.cjs',
@@ -176,8 +194,8 @@ const shellTag = String(buildInfo.shellCacheTag || shellCache);
 if (!runtime || !Number.isFinite(runtimeNumber)) fail(`invalid runtimeEntry ${runtime}`);
 if (!Number.isFinite(shellCache)) fail(`invalid shellCacheVersion ${buildInfo.shellCacheVersion}`);
 for (const marker of [
-  `hostInit-${runtime}.js?v=${shellTag}`,
-  `index-CQZugZ1z-${runtime}.js?v=${shellTag}`,
+  `hostInit-${runtime}.js?v=${runtimeNumber}`,
+  `index-CQZugZ1z-${runtime}.js?v=${runtimeNumber}`,
   `eos-manual-write-policy.js?v=${shellTag}`,
   `nexowatt-native-shell.css?v=${shellTag}`,
   `nexowatt-native-shell.js?v=${shellTag}`,
@@ -187,13 +205,13 @@ for (const marker of [
 if (!index.includes(`eos-role-bootstrap.js?v=${shellTag}`)) fail('role bootstrap cache key mismatch');
 if (!index.includes(`eos-branding-sanitizer.js?v=${shellTag}`)) fail('branding sanitizer cache key mismatch');
 if (!index.includes(`eos-role-ui.js?v=${shellTag}`)) fail('role UI cache key mismatch');
-if (!index.includes(`eos-account-management.js?v=${shellTag}`)) fail('account management cache key mismatch');
+if (index.includes('eos-account-management.js')) fail('custom account-management runtime must not be loaded in standard password mode');
+if (!index.includes(`eos-auto-update.js?v=${shellTag}`)) fail('auto-update cache key mismatch');
 if (!index.includes(`eos-assistant.js?v=${shellTag}`)) fail('EOS Assist cache key mismatch');
 if (!index.includes(`eos-ems-overview.js?v=${shellTag}`)) fail('EMS overview cache key mismatch');
 if (!index.includes(`eos-ems-overview.css?v=${shellTag}`)) fail('EMS overview CSS cache key mismatch');
-if (!index.includes(`nexowatt-stable-v7100.js?v=${shellTag}`)) fail('stable v7100 cache key mismatch');
-if (!index.includes(`eos-release-watch.js?v=${shellTag}`)) fail('release watcher cache key mismatch');
-if (index.indexOf(`eos-manual-write-policy.js?v=${shellTag}`) > index.indexOf(`hostInit-${runtime}.js?v=${shellTag}`)) fail('manual-write policy must load before the React runtime');
+if (!index.includes(`nexowatt-stable-v7101.js?v=${shellTag}`)) fail('stable v98 cache key mismatch');
+if (index.indexOf(`eos-manual-write-policy.js?v=${shellTag}`) > index.indexOf(`hostInit-${runtime}.js?v=${runtimeNumber}`)) fail('manual-write policy must load before the React runtime');
 if (!index.includes('class="eos-native-shell"')) fail('native NexoWatt shell class missing');
 for (const legacy of ['eos-branding.js', 'eos-security-ui.js', 'eos-console-quiet.js', 'eos-objects-state-tools.js']) {
   if (index.includes(legacy)) fail(`legacy browser overlay still loaded: ${legacy}`);
@@ -241,7 +259,7 @@ if (accountManagement.includes("launcher.className = 'eos-account-management-lau
 if (accountManagement.includes('new MutationObserver')) fail('account-management runtime adds a second broad DOM observer');
 if (read('src-admin/public/js/eos-account-management.js') !== accountManagement) fail('account-management source/build drift');
 const roleBootstrap = read('adminWww/js/eos-role-bootstrap.js');
-if (!roleBootstrap.includes('installIntegratedFirstLogin') || !roleBootstrap.includes('v7100 normal-login first activation')) fail('compact integrated first-login is incomplete');
+if (roleBootstrap.includes('installIntegratedFirstLogin(base);') || roleBootstrap.includes('showFirstLoginPassword(resolved, base);')) fail('forced first-login UI must be disabled');
 if (/data-eos-account=|selector\.innerHTML/.test(roleBootstrap)) fail('login role buttons must not enlarge the normal login card');
 if (!roleBootstrap.includes('nexowatt/account/passwordless-status') || !roleBootstrap.includes('eligibility.allowed')) fail('server-checked first-login eligibility is incomplete');
 if (roleBootstrap.includes('installPasswordlessFirstLoginLauncher')) fail('old first-login launcher remains active');
@@ -254,22 +272,29 @@ if (!mf.includes(`remoteEntry-${runtime}.js`) || !mf.includes(`index-D2ymscJA-${
 const webBuild = read('build/lib/web.js');
 if (!webBuild.includes('refreshLifetime: 60 * 60 * 24 * 7')) fail('build/lib/web.js must keep upstream-compatible refresh lifetime');
 if (!webBuild.includes('Follow upstream admin semantics again')) fail('build/lib/web.js lacks session compatibility fix');
+if (!exists('build/lib/eosRequestSecurity.js')) fail('build/lib/eosRequestSecurity.js is missing');
+const autoUpdateSource = read('src/lib/eosAutoUpdate.ts');
+if (autoUpdateSource.includes('extendForeignObjectAsync(this.instanceId')) fail('auto-update runtime must not write the running instance native configuration');
+if (!autoUpdateSource.includes("const ENABLED_STATE_ID = 'info.nexowattStableUpdatesEnabled'")) fail('restart-safe auto-update state storage is missing');
 const mainBuild = read('build/main.js');
 if (!mainBuild.includes('v37 BackItUp/runtime-adapter compatibility')) fail('build/main.js lacks BackItUp compatibility guard');
 
 if (!pkg.scripts['nexowatt:patch-built-frontend']) fail('missing nexowatt:patch-built-frontend script');
 if (pkg.scripts['check:eos-esm'] !== 'node tools/nexowatt-esm-syntax-selftest.cjs') fail('check:eos-esm script is missing or incorrect');
 if (pkg.scripts['check:eos-imports'] !== 'node tools/nexowatt-import-integrity-selftest.cjs') fail('check:eos-imports script is missing or incorrect');
+if (pkg.scripts['check:eos-backend-runtime'] !== 'node tools/nexowatt-backend-runtime-selftest.cjs') fail('check:eos-backend-runtime script is missing or incorrect');
 if (pkg.scripts['check:eos-entry'] !== 'node tools/nexowatt-entrypoint-smoke-selftest.cjs') fail('check:eos-entry script is missing or incorrect');
 if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-esm-syntax-selftest.cjs')) fail('ESM syntax selftest is not part of check:eos-stability');
 if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-import-integrity-selftest.cjs')) fail('import integrity selftest is not part of check:eos-stability');
+if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-backend-runtime-selftest.cjs')) fail('backend runtime selftest is not part of check:eos-stability');
 if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-entrypoint-smoke-selftest.cjs')) fail('entrypoint smoke selftest is not part of check:eos-stability');
 if (pkg.scripts['clean:eos-runtime'] !== 'node tools/nexowatt-clean-legacy-runtime.cjs') fail('clean:eos-runtime script is missing or incorrect');
-if (pkg.scripts.prepack !== 'node tools/nexowatt-sync-release-version.cjs --quiet && node tools/nexowatt-clean-legacy-runtime.cjs --quiet') fail('prepack must silently synchronize versions and clean stale runtime files');
-if (!pkg.scripts.build?.includes('npm run clean:eos-runtime')) fail('build must finish with runtime cleanup');
+if (pkg.scripts.prepack !== canonicalPrepack) fail('prepack must verify the sealed prebuilt artifact without tsc/tsx');
+if (/\b(?:tsc|tsx)\b|build:(?:backend|frontend)|\bnpx\b|npm\s+(?:i|install|ci)\b/i.test(pkg.scripts.prepack || '')) fail('prepack must not require local development dependencies');
+if (pkg.scripts.build !== 'npm run build:frontend && npm run build:backend && npm run clean:eos-runtime && npm run seal:eos-prebuilt-release') fail('build must clean and seal the prebuilt release after compilation');
 if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-role-access-selftest.cjs')) fail('role access selftest is not part of check:eos-stability');
-if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-first-login-selftest.cjs')) fail('first-login selftest is not part of check:eos-stability');
-if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-account-management-selftest.cjs')) fail('account-management selftest is not part of check:eos-stability');
+if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-account-password-flow-selftest.cjs')) fail('standard account-password flow selftest is not part of check:eos-stability');
+if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-account-password-flow-selftest.cjs')) fail('standard account-password management selftest is not part of check:eos-stability');
 if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-modern-ui-selftest.cjs')) fail('modern-UI selftest is not part of check:eos-stability');
 if (pkg.scripts['test:eos-login-layout'] !== 'node tools/nexowatt-login-layout-selftest.cjs') fail('login-layout selftest script is missing or incorrect');
 if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-login-layout-selftest.cjs')) fail('login-layout selftest is not part of check:eos-stability');

package/tools/nexowatt-version-sync-selftest.cjs

@@ -24,7 +24,19 @@ try {
     const currentPkg = JSON.parse(fs.readFileSync(path.join(root, 'package.json'), 'utf8'));
     const version = currentPkg.version;
     writeJson('package.json', currentPkg);
-    writeJson('package-lock.json', { name: currentPkg.name, version: '7.9.92', packages: { '': { version: '7.9.92' } } });
+    writeJson('package-lock.json', {
+        name: currentPkg.name,
+        version: '7.9.92',
+        packages: {
+            '': {
+                version: '7.9.92',
+                description: 'stale description',
+                files: ['README_STABILITY_V7.9.92.md'],
+                scripts: { 'check:eos-stable-v92': 'node stale.js' },
+                nexowattReleasePolicy: { distTag: 'latest', purpose: 'stale 7.9.92 policy' },
+            },
+        },
+    });
     writeJson('io-package.json', {
         version: '7.9.92',
         common: {
@@ -75,6 +87,11 @@ try {
     ]) {
         if (actual !== version) fail(`${label} was not synchronized: ${actual}`);
     }
+    for (const key of ['description', 'files', 'scripts', 'nexowattReleasePolicy']) {
+        if (JSON.stringify(lock.packages[''][key]) !== JSON.stringify(currentPkg[key])) {
+            fail(`package-lock root ${key} was not synchronized`);
+        }
+    }
     if (io.common.meta !== `${expectedBase}/io-package.json`) fail('io-package URL was not synchronized');
     if (entry.meta !== `${expectedBase}/io-package.json`) fail('repository entry URL was not synchronized');
     if (!fs.existsSync(path.join(temp, build.repositoryEntry))) fail('current repository entry was not created');

package/INSTALL_TEST_V7.10.0.md

@@ -1,11 +0,0 @@
-# Installationstest 7.10.0
-
-```bash
-cd /opt/iobroker
-iobroker stop eos-admin.0
-npm install --no-save --omit=dev iobroker.eos-admin@7.10.0
-iobroker upload eos-admin
-iobroker restart eos-admin.0
-```
-
-Danach Browser mit `Strg + F5` vollständig neu laden. Für EMS-Livedaten muss `iobroker.nexowatt-ui` mindestens `0.8.198` installiert und gestartet sein.

package/MERGE_UPDATE_README_V7.10.0.md

@@ -1,5 +0,0 @@
-# NexoWatt EOS Admin 7.10.0 – Merge-Update
-
-Die flache Merge-ZIP direkt in den vorhandenen Repository-Ordner entpacken und anschließend `MERGE_UPDATE.cmd` ausführen.
-
-Enthalten sind alle Änderungen aus 7.9.96 einschließlich nativer Rollenübersicht, persönlicher Erstkennwortvergabe und EMS-Diagnose sowie die Korrekturen für Login-Geometrie und produktive AdminConnection.

package/PUBLISH_STABLE_V7.10.0.md

@@ -1,15 +0,0 @@
-# Stable-Veröffentlichung 7.10.0
-
-```powershell
-npm login
-npm whoami
-npm run check:eos-release
-npm publish --dry-run --tag latest
-npm publish --tag latest
-```
-
-Das geprüfte Tarball kann alternativ direkt veröffentlicht werden:
-
-```powershell
-npm publish .\iobroker.eos-admin-7.10.0.tgz --tag latest
-```

package/README_STABILITY_V7.10.0.md

@@ -1,3 +0,0 @@
-# NexoWatt EOS Admin 7.10.0 – Stabilität
-
-Die native NexoWatt-Autoaktualisierung ist standardmäßig aktiv und kann im Admin-Cockpit deaktiviert werden. Sie setzt ausschließlich für installierte NexoWatt-Adapter aus dem erkannten Stable-Repository die ioBroker-Richtlinie `major`. Fremdadapter bleiben unverändert. Beim Abschalten werden vorherige Richtlinien wiederhergestellt.

package/RELEASE_ACCEPTANCE_V7.10.0.md

@@ -1,11 +0,0 @@
-# Release-Abnahme 7.10.0
-
-- [ ] Login-Karte ist ordentlich proportioniert und nur moderat größer als vor 7.9.96.
-- [ ] Normale Anmeldung, falsches Passwort und persönliche Erstkennwortvergabe erzeugen keine innere Scrollleiste.
-- [ ] Erstkennwort `nexowatt` führt zur verpflichtenden persönlichen Kennwortvergabe.
-- [ ] Native Adapterkarten sind bei Admin, Installateur und Endkunde sichtbar, soweit die Rolle sie freigibt.
-- [ ] NexoWatt-UI-Karte ist in der Übersicht vorhanden.
-- [ ] EMS-Kachel zeigt nach Verbindungsaufbau Livewerte aus `nexowatt-ui.*.info.adminOverview.*`.
-- [ ] UI-Version unter `0.8.198` wird verständlich gemeldet.
-- [ ] Die EMS-Kachel enthält keinen Schreibpfad.
-- [ ] `npm run check:eos-release` und `npm publish --dry-run --tag latest` sind vollständig grün.

package/RELEASE_NOTES_V7.10.0.md

@@ -1,17 +0,0 @@
-# NexoWatt EOS Admin 7.10.0
-
-## Korrekturen
-
-- Dauerhafter vertikaler Scrollbalken in der Cockpit-/Übersichtsfläche.
-- Login wieder kompakt und sauber ausgerichtet; keine überlappenden Feldbeschriftungen.
-- Erstpasswort und Passwort-Reset verwenden die native ioBroker-Passwortverwaltung mit kanonischer Benutzer-ID und Kompatibilitäts-Fallback.
-- Passwort-Metadaten werden erst nach Hash- und Credential-Prüfung freigegeben.
-- Präzise Fehlermeldungen für nicht gespeicherte oder nicht verifizierte Passwörter.
-- Cache-Tag 7100 und automatische Release-Überwachung gegen gemischte Browserstände.
-- Automatische Stable-Updates für installierte NexoWatt-Adapter bleiben standardmäßig aktiv und abschaltbar.
-
-## Unverändert
-
-- EMS-Diagnose bleibt rein lesend.
-- Der nicht vorhandene Link zur vollständigen EMS-Diagnose bleibt entfernt.
-- Der Bearbeitungsstift bleibt im unteren Kartenbereich.

package/adminWww/js/eos-release-watch.js

@@ -1,77 +0,0 @@
-(() => {
-    'use strict';
-    const RELEASE = '7.10.0';
-    const RELEASE_KEY = 'nexowatt.eos.loadedRelease';
-    const RELOAD_KEY = 'nexowatt.eos.reloadTarget';
-    const CHECK_MS = 15000;
-    let refreshing = false;
-
-    const normalize = value => String(value || '').trim().replace(/^v/i, '');
-    const validRelease = value => /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(normalize(value));
-    const reloadUrl = version => {
-        const url = new URL(window.location.href);
-        url.searchParams.set('_eosRelease', normalize(version) || RELEASE);
-        url.searchParams.set('_eosReload', String(Date.now()));
-        return url.toString();
-    };
-    const purgeBrowserCaches = async () => {
-        const jobs = [];
-        try {
-            if ('caches' in window) {
-                jobs.push(caches.keys().then(keys => Promise.all(keys.map(key => caches.delete(key)))));
-            }
-        } catch (_) { /* Cache API is optional */ }
-        try {
-            if (navigator.serviceWorker?.getRegistrations) {
-                jobs.push(navigator.serviceWorker.getRegistrations().then(rows => Promise.all(rows.map(row => row.unregister()))));
-            }
-        } catch (_) { /* service workers may be unavailable */ }
-        await Promise.allSettled(jobs);
-    };
-    const reloadFor = async version => {
-        const target = normalize(version) || RELEASE;
-        if (refreshing || sessionStorage.getItem(RELOAD_KEY) === target) return;
-        refreshing = true;
-        sessionStorage.setItem(RELOAD_KEY, target);
-        document.documentElement.classList.add('eos-release-refreshing');
-        await purgeBrowserCaches();
-        window.location.replace(reloadUrl(target));
-    };
-    const checkServerVersion = async () => {
-        try {
-            const endpoint = new URL('./version', window.location.href);
-            endpoint.searchParams.set('_eosTs', String(Date.now()));
-            const response = await fetch(endpoint, {
-                cache: 'no-store',
-                credentials: 'same-origin',
-                headers: { 'Cache-Control': 'no-cache' },
-            });
-            if (!response.ok) return;
-            const serverVersion = normalize(await response.text());
-            if (validRelease(serverVersion) && serverVersion !== RELEASE) {
-                await reloadFor(serverVersion);
-            }
-        } catch (_) { /* adapter restart or temporary network interruption */ }
-    };
-
-    window.NEXOWATT_EOS_RELEASE = RELEASE;
-    const previous = normalize(localStorage.getItem(RELEASE_KEY));
-    localStorage.setItem(RELEASE_KEY, RELEASE);
-    const loadedFor = normalize(new URL(window.location.href).searchParams.get('_eosRelease'));
-    if (previous && previous !== RELEASE && loadedFor !== RELEASE) {
-        void reloadFor(RELEASE);
-    } else {
-        sessionStorage.removeItem(RELOAD_KEY);
-    }
-
-    window.addEventListener('focus', () => void checkServerVersion());
-    document.addEventListener('visibilitychange', () => {
-        if (document.visibilityState === 'visible') void checkServerVersion();
-    });
-    window.setInterval(() => void checkServerVersion(), CHECK_MS);
-    window.NEXOWATT_EOS_RELEASE_WATCH = Object.freeze({
-        release: RELEASE,
-        check: checkServerVersion,
-        purge: purgeBrowserCaches,
-    });
-})();

package/adminWww/static/js/nexowatt-stable-v7100.js

@@ -1,111 +0,0 @@
-(() => {
-    'use strict';
-    const VERSION = 'v7100-scroll-login-auto-update';
-    const MANAGED_USERS = new Set(['installer', 'guest', 'user']);
-    const normalizeUser = value => String(value || '').trim().toLowerCase().replace(/^system\.user\./, '');
-    const INTRO_STYLE_PROPERTIES = [
-        'position', 'top', 'right', 'bottom', 'left', 'width', 'height', 'min-height', 'max-height',
-        'margin', 'overflow-x', 'overflow-y', 'overscroll-behavior', 'scrollbar-gutter',
-    ];
-    const isIntroRoute = () => {
-        const hash = decodeURIComponent(window.location.hash || '').toLowerCase();
-        const explicitTab = hash.match(/(?:^|[#/])(tab-[a-z0-9_-]+)(?:[/?&]|$)/)?.[1] || '';
-        if (explicitTab) return explicitTab === 'tab-intro';
-        return document.documentElement.classList.contains('eos-route-intro')
-            || !hash
-            || hash === '#'
-            || hash === '#/';
-    };
-    const bindScrollInput = paper => {
-        if (paper.dataset.nexowattScrollBound === 'true') return;
-        paper.dataset.nexowattScrollBound = 'true';
-        paper.addEventListener('wheel', event => {
-            if (!event.deltaY || paper.scrollHeight <= paper.clientHeight + 1) return;
-            const before = paper.scrollTop;
-            paper.scrollTop += event.deltaY;
-            if (paper.scrollTop !== before) event.preventDefault();
-        }, { passive: false });
-        paper.addEventListener('keydown', event => {
-            if (paper.scrollHeight <= paper.clientHeight + 1) return;
-            const step = Math.max(120, Math.round(paper.clientHeight * .78));
-            if (event.key === 'PageDown') paper.scrollTop += step;
-            else if (event.key === 'PageUp') paper.scrollTop -= step;
-            else if (event.key === 'Home' && event.ctrlKey) paper.scrollTop = 0;
-            else if (event.key === 'End' && event.ctrlKey) paper.scrollTop = paper.scrollHeight;
-            else return;
-            event.preventDefault();
-        });
-    };
-    const disableCockpitScroll = () => {
-        const root = document.documentElement;
-        root.classList.remove('eos-intro-scroll-enabled');
-        const paper = document.getElementById('app-paper');
-        if (!paper || paper.dataset.nexowattScrollable !== 'true') return;
-        delete paper.dataset.nexowattScrollable;
-        for (const property of INTRO_STYLE_PROPERTIES) paper.style.removeProperty(property);
-    };
-    const ensureCockpitScroll = () => {
-        const root = document.documentElement;
-        const paper = document.getElementById('app-paper');
-        if (!paper || !root.classList.contains('eos-app')) return;
-        if (!isIntroRoute()) {
-            disableCockpitScroll();
-            return;
-        }
-        // eos-route-* is owned by the native shell; only add our dedicated scroll flag.
-        root.classList.add('eos-intro-scroll-enabled');
-        paper.dataset.nexowattScrollable = 'true';
-        if (paper.tabIndex < 0) paper.tabIndex = 0;
-        const styles = {
-            position: 'fixed',
-            top: 'var(--nx-content-top, 154px)',
-            right: 'var(--nx-page-x, 12px)',
-            bottom: '8px',
-            left: 'var(--nx-page-x, 12px)',
-            width: 'auto',
-            height: 'auto',
-            minHeight: '0',
-            maxHeight: 'none',
-            margin: '0',
-            overflowX: 'hidden',
-            overflowY: 'scroll',
-            overscrollBehavior: 'contain',
-            scrollbarGutter: 'stable',
-        };
-        for (const [name, value] of Object.entries(styles)) {
-            paper.style.setProperty(name.replace(/[A-Z]/g, char => `-${char.toLowerCase()}`), value, 'important');
-        }
-        bindScrollInput(paper);
-    };
-    const apply = () => {
-        document.documentElement.classList.add('eos-assist-disabled');
-        document.querySelectorAll('.eos-assist-root,.eos-assist-header-root,[data-eos-assist-root],.eos-passwordless-launcher')
-            .forEach(element => element.remove());
-        const username = document.querySelector('input#username,input[name="username"]');
-        const password = document.querySelector('input#password,input[name="password"]');
-        const submit = document.querySelector('button[type="submit"],input[type="submit"]');
-        if (submit && MANAGED_USERS.has(normalizeUser(username?.value)) && !String(password?.value || '')) {
-            submit.disabled = true;
-            submit.classList.add('Mui-disabled');
-            submit.setAttribute('aria-disabled', 'true');
-        }
-        ensureCockpitScroll();
-    };
-    let scheduled = false;
-    const schedule = () => {
-        if (scheduled) return;
-        scheduled = true;
-        requestAnimationFrame(() => { scheduled = false; apply(); });
-    };
-    const start = () => {
-        apply();
-        new MutationObserver(schedule).observe(document.documentElement, { subtree: true, childList: true });
-        document.addEventListener('input', schedule, true);
-        document.addEventListener('change', schedule, true);
-        window.addEventListener('hashchange', schedule);
-        window.addEventListener('resize', schedule, { passive: true });
-        window.setInterval(ensureCockpitScroll, 750);
-    };
-    document.readyState === 'loading' ? document.addEventListener('DOMContentLoaded', start, { once: true }) : start();
-    window.NEXOWATT_EOS_STABLE_V7100 = Object.freeze({ version: VERSION, refresh: apply, ensureCockpitScroll, disableCockpitScroll });
-})();

package/build/lib/eosPassword.js

@@ -1,72 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.normalizeEosPasswordTarget = normalizeEosPasswordTarget;
-exports.setEosUserPasswordWithVerification = setEosUserPasswordWithVerification;
-exports.verifyEosUserPasswordCredential = verifyEosUserPasswordCredential;
-function normalizeEosPasswordTarget(value) {
-    const raw = String(value || '').trim();
-    const userId = raw.startsWith('system.user.') ? raw : `system.user.${raw}`;
-    const userName = userId.replace(/^system\.user\./, '').trim();
-    if (!userName || userName.includes('.') || !/^system\.user\.[^.]+$/.test(userId)) throw new Error('invalidPasswordTarget');
-    return { userId, userName };
-}
-const delay = ms => new Promise(resolve => setTimeout(resolve, ms));
-const accepted = result => result === true || (Array.isArray(result) && result[0] === true);
-async function readPasswordHash(adapter, userId) {
-    if (typeof adapter.getForeignObjectAsync !== 'function') return '';
-    try {
-        const object = await adapter.getForeignObjectAsync(userId);
-        return typeof object?.common?.password === 'string' ? object.common.password : '';
-    }
-    catch { return ''; }
-}
-async function callPasswordApi(adapter, target, password, serviceUser, withOptions) {
-    const options = withOptions ? { user: serviceUser } : null;
-    if (typeof adapter.setPasswordAsync === 'function') { await adapter.setPasswordAsync(target, password, options); return; }
-    if (typeof adapter.setPassword === 'function') {
-        await new Promise((resolve, reject) => adapter.setPassword?.(target, password, options, error => error ? reject(error) : resolve()));
-        return;
-    }
-    throw new Error('passwordApiUnavailable');
-}
-async function verifyAfterWrite(adapter, normalized, password, serviceUser) {
-    const hasCredentialCheck = typeof adapter.checkPasswordAsync === 'function';
-    for (let attempt = 0; attempt < 12; attempt++) {
-        if (hasCredentialCheck) {
-            for (const candidate of [normalized.userId, normalized.userName]) {
-                try {
-                    if (accepted(await adapter.checkPasswordAsync?.(candidate, password, { user: serviceUser }))) return;
-                }
-                catch { }
-            }
-        }
-        else if (await readPasswordHash(adapter, normalized.userId)) return;
-        if (attempt < 11) await delay(55 + attempt * 35);
-    }
-    throw new Error(hasCredentialCheck ? 'passwordVerificationFailed' : 'passwordNotPersisted');
-}
-async function verifyEosUserPasswordCredential(adapter, target, password, serviceUser = 'system.user.admin') {
-    const normalized = normalizeEosPasswordTarget(target);
-    await verifyAfterWrite(adapter, normalized, password, serviceUser);
-    return normalized;
-}
-async function setEosUserPasswordWithVerification(adapter, target, password, serviceUser = 'system.user.admin') {
-    const normalized = normalizeEosPasswordTarget(target);
-    const attempts = [
-        { apiTarget: normalized.userId, withOptions: true },
-        { apiTarget: normalized.userName, withOptions: true },
-        { apiTarget: normalized.userId, withOptions: false },
-        { apiTarget: normalized.userName, withOptions: false },
-    ];
-    let lastError = null;
-    for (const attempt of attempts) {
-        try {
-            await callPasswordApi(adapter, attempt.apiTarget, password, serviceUser, attempt.withOptions);
-            await verifyAfterWrite(adapter, normalized, password, serviceUser);
-            return { ...normalized, apiTarget: attempt.apiTarget };
-        }
-        catch (error) { lastError = error; }
-    }
-    if (lastError instanceof Error) throw lastError;
-    throw new Error('passwordNotPersisted');
-}