iobroker.eos-admin 7.10.2 → 7.10.4

package/INSTALL_TEST_V7.10.4.md

@@ -0,0 +1,9 @@
+# Installationstest 7.10.4
+
+1. Version 7.10.4 in einem neuen Arbeitsordner veröffentlichen bzw. installieren.
+2. EOS Admin mindestens 60 Sekunden ohne Start-/Stop-Schleife beobachten.
+3. Als Administrator App-Center, Lizenz, Simulation, Benutzer/Rechte, Expertenmodus, ioBroker Admin und XTerm prüfen.
+4. Als Installateur müssen diese Bereiche vollständig fehlen bzw. bei direktem Aufruf gesperrt sein.
+5. Als Endkunde müssen Datenpunkte sichtbar, aber nicht beschreibbar sein; Benutzer/Rechte und Passwortverwaltung dürfen nicht erreichbar sein.
+6. Backup-Instanz deaktivieren: der Navigationspunkt Sicherung muss verschwinden. Backup-Instanz aktivieren: der Punkt muss wieder erscheinen.
+7. Systemeinstellungen öffnen: die Karte Automatische Adapter-Updates darf nur dort sichtbar sein.

package/MERGE_UPDATE_README_V7.10.4.md

@@ -0,0 +1,3 @@
+# Merge-/Update-Hinweis 7.10.4
+
+Den bisherigen Arbeitsordner vollständig ersetzen oder die Repository-ZIP in einen leeren Ordner entpacken. Nicht über eine ältere Version kopieren, weil veraltete Browser-Bundles, Rollen-Skripte oder Paket-Lifecycle-Einträge sonst bestehen bleiben können. Danach zuerst `npm publish --dry-run` ausführen.

package/NEXOWATT_EOS_BUILD_INFO.json

@@ -1,27 +1,28 @@
 {
-  "version": "7.10.2",
+  "version": "7.10.4",
   "channel": "stable-latest",
-  "baseFrontend": "validated 7.10.1 UI baseline with restart-safe backend auto-update management and complete npm runtime packaging",
+  "baseFrontend": "validated 7.10.2 stable runtime with automatic adapter updates relocated into System Settings",
   "runtimeEntry": "v84",
-  "releaseType": "stable-restart-loop-package-hotfix",
-  "release": "stable-restart-loop-package-hotfix",
-  "label": "v7-10-2",
+  "releaseType": "stable-system-settings-auto-update-placement",
+  "release": "stable-system-settings-auto-update-placement",
+  "label": "v7-10-4",
   "notes": [
-    "Built from the 7.10.1 stable candidate without changing the validated frontend baseline.",
-    "Auto-update runtime state is stored in acknowledged adapter states and never in the running instance native configuration.",
-    "Startup reconciliation is delayed so the web server can finish serving the initial browser assets.",
-    "Backend compilation is mandatory before pack/publish and packaged local runtime imports are verified."
+    "Retains the validated 7.10.2 restart-loop and package-completeness fixes.",
+    "The automatic NexoWatt adapter update card is no longer mounted in the normal overview or module pages.",
+    "The update control is mounted only inside the administrator System Settings dialog opened with the wrench button.",
+    "A dedicated placement selftest prevents the card from returning to global page content."
   ],
   "changes": [
-    "Removed the self-triggered eos-admin restart loop caused by writing eosNexoWattAutoUpdateState to system.adapter.eos-admin.0.native.",
-    "Added restart-safe info.nexowattStableUpdatesEnabled and info.nexowattStableUpdatesState objects.",
-    "Stopped auto-update timers during web server shutdown and avoided unchanged adapter/system configuration writes.",
-    "Added backend dependency closure, syntax and npm artifact completeness tests.",
-    "Guaranteed build/lib/eosRequestSecurity.js is compiled and packaged before release."
+    "Moved Automatic Adapter Updates from the normal page content into System Settings.",
+    "Added a dedicated auto-update cache key so browsers cannot keep the old global placement script.",
+    "Kept backend update policy, state storage and delayed startup reconciliation unchanged.",
+    "Added source/build drift and placement guards for the auto-update UI."
   ],
   "brandingCacheVersion": 7101,
   "shellCacheVersion": 7101,
   "nativeShellVersion": 7101,
   "shellCacheTag": "7101",
-  "repositoryEntry": "nexowatt-eos-admin-repository-entry-v7-10-2.json"
+  "repositoryEntry": "nexowatt-eos-admin-repository-entry-v7-10-4.json",
+  "autoUpdateCacheVersion": 7103,
+  "autoUpdateCacheTag": "7103"
 }

package/NEXOWATT_EOS_PREBUILT_MANIFEST.json

@@ -1,9 +1,9 @@
 {
   "format": 1,
   "package": "iobroker.eos-admin",
-  "version": "7.10.2",
+  "version": "7.10.4",
   "algorithm": "sha256",
-  "fileCount": 1386,
+  "fileCount": 1391,
   "trackedRoots": [
     "src",
     "build",
@@ -519,7 +519,7 @@
     "adminWww/css/admin.css.map": "63cffcac00f528b795caf1374125620f465316273524aa7ed339d2ae1c00e840",
     "adminWww/css/app.css": "a127b375efd87a6de99722b03b5532e1877578ba66295e1989c055a64497c668",
     "adminWww/css/app.css.map": "5dc84ea65945c673c3d75d2ccbd258221eb09c79f61fff7b1326b7c37aea90c4",
-    "adminWww/css/eos-auto-update.css": "8f136fddb8886e17192975ca5d471e66d57266495e31b39369de4dbb5c8aadc8",
+    "adminWww/css/eos-auto-update.css": "05c4602b50e45f4c181b2868cc1977f8538d5879a6b0b02c0410491cc2c9cbcd",
     "adminWww/css/eos-ems-overview.css": "fe9278e76035b6b2b5cdde93668a0a720ca1276bd7ab54a077c8af6d0eede255",
     "adminWww/css/images/layers-2x.png": "066daca850d8ffbef007af00b06eac0015728dee279c51f3cb6c716df7c42edf",
     "adminWww/css/images/layers.png": "1dbbe9d028e292f36fcba8f8b3a28d5e8932754fc2215b9ac69e4cdecf5107c6",
@@ -552,11 +552,11 @@
     "adminWww/img/le.png": "ef5ebb7112926f646e781a326b639f56888fafe0891b9b000178091b4f8ed9dd",
     "adminWww/img/logo.svg": "1167118074ff84d8cef82ad80c38609719dacfde9417126e46966c1ec986534b",
     "adminWww/img/no-image.svg": "25fc382f4ad3a36f8a637cd966b9107368e1f11906d706102ad5f37db6f57f34",
-    "adminWww/index.html": "244f673b96f3bf31f68bf4190172a2a2da903128dea0882900d6c3dc6c0a9766",
+    "adminWww/index.html": "9dcbe4023a66ececd427066d57811c8610d2eb95e4d0a64aab4800a832563f7e",
     "adminWww/js/adapter-settings.js": "fb2e538a3385899f7fd47275ec588051c735d8f778a44b89f40f5eb820a31dbc",
     "adminWww/js/eos-account-management.js": "dbba398605b2391ac1a7ec97cf7eb84da7f929ea16bfb6761750cd700a687fbe",
     "adminWww/js/eos-assistant.js": "be43f49fd5310d2962365035556c37109d4868856e874e1f964c4b2f05bb6beb",
-    "adminWww/js/eos-auto-update.js": "32f22c42bddbede85c0db0a3153a777ee09fea58c727478b0948ee8433c5634a",
+    "adminWww/js/eos-auto-update.js": "60b5d0bfd6600546868b815a3af35bcc9ce8853ce40b519cb6cbc53e07788021",
     "adminWww/js/eos-basic-settings.js": "deb942d2a0d7385743b27ed1562ce19fead693582e9baa2c9eaccaa3aa401728",
     "adminWww/js/eos-branding-sanitizer.js": "de6f30e7758d552f52a0c84f02861e24f290ef872957f7b58d80f873d66c934c",
     "adminWww/js/eos-ems-overview.js": "ed5d81492b757628ddb2a5d4be4e3e7e7665c3a3a943f5ce15358140cd18630a",
@@ -740,6 +740,7 @@
     "adminWww/logo512.png": "a7e6375e6f4e1f5e09f167af81eca69626e4baf4762a07e41b838bc4786f0519",
     "adminWww/manifest.json": "bfa868e65ffed57405e0091cdb3250a6b9265ba3b0831ca3f14e77acb9f255d7",
     "adminWww/mf-manifest.json": "737e829bad795bdc781cd820ea513d3e09345e23762e4054e1ece0c003160d3c",
+    "adminWww/nexowatt-role-security.js": "920868a8dd283b485f90c0946a4ded9cb9fbd1a4f95c5429fea9b1436feb74e1",
     "adminWww/remoteEntry-v84.js": "3836e43036d446c7c549ca1e5b1211a452b50a2206bc197746840cc95e71f95d",
     "adminWww/remoteEntry.js": "9e3c715c9adb33c77f0eeefbd80510f97ebe1b18d8f11d43a2332ce89cd35e20",
     "adminWww/robots.txt": "90d24bc3bf698ac1e173739502298ccca72adf1f564fab05f484b8c48d1cadd2",
@@ -785,6 +786,7 @@
     "build/lib/eosAutoUpdate.js.map": "d5ad4227eb6433921938c97b64ca781cde4c42a77682c1046dea9fda4d77b266",
     "build/lib/eosRequestSecurity.js": "c9193759d0ca2f5221d31688b4ab3b0ec21aa2f4862443c0171e608adb9858a0",
     "build/lib/eosRequestSecurity.js.map": "3e6512682f0d7a1169fcab9d3d167f95e02e38774f7e47688ce0320e1509c4d5",
+    "build/lib/eosRoleSecurity.js": "6e5e223c40b43d3eee003f4ab150099babd04f01b9629ccdf9d4d121a7e4f4f7",
     "build/lib/objectFixes.js": "ce095d293991b45bd4bfdb4a256e33a2ba74556868f07040e04b666b0757016d",
     "build/lib/objectFixes.js.map": "27f9d305b48ebc92e3ccd1b7a944bccec366a7a38c63e003bf164f03fe898790",
     "build/lib/testPassword.js": "9d2d4fcbd892db0864fb09db2c2142e3743908d70c53fc644826f4a8f492cd93",
@@ -795,7 +797,7 @@
     "build/lib/utils.js.map": "74238d0d82cc28d41c4f627b73793f6cda26b338ef1bd97916b6417783949e29",
     "build/lib/web.js": "8de94dffdd7c70be6b537c111691c831116338b311f7569739de57f9a32e071f",
     "build/lib/web.js.map": "5fb9f337f3a27c04bb4303cb61ffa5f0da857299a7d2890609eb5f55f24f1789",
-    "build/main.js": "f69b219dbafda80fe73ecb8638eed68f01e3e6f15bd0791b2278779ab9902156",
+    "build/main.js": "ed9f996f6240d2663a2b641e8965d42aeab75403efe2c2b0a772885f28b6c0b5",
     "build/main.js.map": "1cd3887da9b3d4061c59b6ad497c536c6c9a79938b10bbddf7128a1e7930dfbd",
     "public/404.html": "6c6458ba2bc49b0c27973293e461262bf697607a8e71ab716227553f6d7005eb",
     "public/logTemplate.html": "fc371fc8e4d7ef57c0ca76a405508eced038523464ff65b6cae04dae6144fd54",
@@ -809,7 +811,7 @@
     "src-admin/public/css/admin.css.map": "63cffcac00f528b795caf1374125620f465316273524aa7ed339d2ae1c00e840",
     "src-admin/public/css/app.css": "a127b375efd87a6de99722b03b5532e1877578ba66295e1989c055a64497c668",
     "src-admin/public/css/app.css.map": "5dc84ea65945c673c3d75d2ccbd258221eb09c79f61fff7b1326b7c37aea90c4",
-    "src-admin/public/css/eos-auto-update.css": "8f136fddb8886e17192975ca5d471e66d57266495e31b39369de4dbb5c8aadc8",
+    "src-admin/public/css/eos-auto-update.css": "05c4602b50e45f4c181b2868cc1977f8538d5879a6b0b02c0410491cc2c9cbcd",
     "src-admin/public/css/eos-ems-overview.css": "fe9278e76035b6b2b5cdde93668a0a720ca1276bd7ab54a077c8af6d0eede255",
     "src-admin/public/css/images/layers-2x.png": "066daca850d8ffbef007af00b06eac0015728dee279c51f3cb6c716df7c42edf",
     "src-admin/public/css/images/layers.png": "1dbbe9d028e292f36fcba8f8b3a28d5e8932754fc2215b9ac69e4cdecf5107c6",
@@ -843,7 +845,7 @@
     "src-admin/public/js/adapter-settings.js": "fb2e538a3385899f7fd47275ec588051c735d8f778a44b89f40f5eb820a31dbc",
     "src-admin/public/js/eos-account-management.js": "dbba398605b2391ac1a7ec97cf7eb84da7f929ea16bfb6761750cd700a687fbe",
     "src-admin/public/js/eos-assistant.js": "be43f49fd5310d2962365035556c37109d4868856e874e1f964c4b2f05bb6beb",
-    "src-admin/public/js/eos-auto-update.js": "32f22c42bddbede85c0db0a3153a777ee09fea58c727478b0948ee8433c5634a",
+    "src-admin/public/js/eos-auto-update.js": "60b5d0bfd6600546868b815a3af35bcc9ce8853ce40b519cb6cbc53e07788021",
     "src-admin/public/js/eos-basic-settings.js": "deb942d2a0d7385743b27ed1562ce19fead693582e9baa2c9eaccaa3aa401728",
     "src-admin/public/js/eos-branding-sanitizer.js": "de6f30e7758d552f52a0c84f02861e24f290ef872957f7b58d80f873d66c934c",
     "src-admin/public/js/eos-ems-overview.js": "ed5d81492b757628ddb2a5d4be4e3e7e7665c3a3a943f5ce15358140cd18630a",
@@ -1323,7 +1325,7 @@
     "src-admin/src/tabs/Objects.tsx": "834773b07b613b96f58d053496ed1de0e0b8cbf987a3b33314c85e8495a836f6",
     "src-admin/src/tabs/Users.tsx": "45ed37e57b66f7e23eb465aef9ad9db55613b40bf44530ab81d6206806de102d",
     "src-admin/src/types.d.ts": "3cfac48af5f8416b55b89c0daca78499dbbd402c0b44cc661112b76953ba3344",
-    "src-admin/src/version.json": "6f7614980e3a42be97cf6cfcfd8fa9d38542894954a6996db0021518d4ea3bd3",
+    "src-admin/src/version.json": "47f62d99d6da117043311a6484e38f40fbfb096eb192478c618c0a3035df8cde",
     "src/i18n/de.json": "85d4ecfedf15d78984922b05377063b808ae8c5a75944af323e72a2c3a483d50",
     "src/i18n/en.json": "6a0156a1b026903821d395ef2ceef845e90531f323a218f97f5abefaabb46a23",
     "src/i18n/es.json": "54369f8044dfa222779849d2f158eb100188a43816d6c42a64575122cb528a30",
@@ -1358,6 +1360,7 @@
     "tools/nexowatt-account-password-flow-selftest.cjs": "8794de7a6743f83e9fbf22c71c3c0434211b4a6944068c6ecd57a6f119bedc4a",
     "tools/nexowatt-apply-ems-overview.cjs": "520d84ce95b3e99f1f559728799f1d412d84e30c441283aa42fd188b17fd242e",
     "tools/nexowatt-assistant-separation-selftest.cjs": "f7cd60b831e6e19f6c2381ac0996807001dcc3247dbe7dcc30d010498b5e82c3",
+    "tools/nexowatt-auto-update-placement-selftest.cjs": "f9fb5e1b2065a70660bffdc62829210a2388259e4c0f32c77acf7ecfa1606110",
     "tools/nexowatt-auto-update-selftest.cjs": "1c7500ca3f0264658aa778758dc14d10353dc3857ef7c9803591654cba9b13d5",
     "tools/nexowatt-backend-runtime-selftest.cjs": "22eaeef2fe80c71af7e86db66e049612faf6285b47c69d9d446e2d1231d2c21f",
     "tools/nexowatt-branding-selftest.cjs": "3aa00be3716fb5349c45ef761ddab639c51381a265ec086ddda45ecee89d39d5",
@@ -1377,7 +1380,7 @@
     "tools/nexowatt-internal-reserve-selftest.cjs": "5d90e42b2f1d4aac1039fce14bf18a952e9c5665203e8caae112737c5dcd265e",
     "tools/nexowatt-login-layout-selftest.cjs": "4d1aa1f58a8f117ab7485d883c75603df277043b838dcaa0de3143acb6d885ab",
     "tools/nexowatt-manual-write-policy-selftest.cjs": "a41057610972d681120bf35e0321029facc08b098c79da9b131980f80bd3fdce",
-    "tools/nexowatt-merge-update-selftest.cjs": "0467ffb5674d84b27ba446636e11c6b949108f4f55bcff20b6f7b62bb7d338f9",
+    "tools/nexowatt-merge-update-selftest.cjs": "46d269abc9cfc64299823088824bde1739829d05aa2fdd21cd1528e499bb2381",
     "tools/nexowatt-modern-ui-selftest.cjs": "e0caf8244ff5e3431052f9cb5e2b59a64a50c92ca37ec51e286200e1ed37edc0",
     "tools/nexowatt-module-popup-selftest.cjs": "31f02e8cf0bfd61d7769e1095c93887a34cfbbd76a9805ef4931cea6dff53ddf",
     "tools/nexowatt-native-shell-selftest.cjs": "13aabd3a19f0c0422bbc1c676718685b77c88a526167a7b511fa6c9ab2ac860c",
@@ -1391,17 +1394,19 @@
     "tools/nexowatt-release-defaults-selftest.cjs": "3e3c96ca774200461978c546d1a937cbae18d7f11497ed84dda639c2358f6e16",
     "tools/nexowatt-repair-eos-admin-update.cjs": "f28c1999b0f75139e582770ad649d17d11f9e909ac49d13c31be5fa5b36253e3",
     "tools/nexowatt-role-access-selftest.cjs": "5d88eaeac77ff1460f28caca68a197b4cd820fbc3cf5194ff3bff036d4b20814",
+    "tools/nexowatt-role-security-selftest.cjs": "d98b1eef1bbe7259a9015bcc7bca1b296a1fe4bb8df1a930e2e3f71c2665ddff",
     "tools/nexowatt-runtime-cleanup-selftest.cjs": "8c5a5aaf51290436ceef40f7c5a28e602a428558582ee54bb94d57ed70cc3662",
-    "tools/nexowatt-stability-check.cjs": "a9d964fd7433dd116f22249e166883516d7faeabb2d5361a09396264977376cf",
+    "tools/nexowatt-stability-check.cjs": "fb968bcaf388cbf2b8a61b7b4cf7b251970e97f914db6f2c90a74d73aa7ce18b",
     "tools/nexowatt-stable-v7101-selftest.cjs": "817d09861ef29c52a67f64ec5b8f4ad4654ce7e6486eded786bb16f3c773eaf8",
     "tools/nexowatt-stable-v7102-selftest.cjs": "75baab5f8069569ad4896e5018f3c5ccbbda2c2297aca5c5146bce94f9cf795d",
+    "tools/nexowatt-stable-v7103-selftest.cjs": "db438580a443547ff7ceba821df940e59ba1e10105248653414a94a81fe3642e",
     "tools/nexowatt-stable-v94-selftest.cjs": "5226881b3ad8918c67921ffb37716490f053ec88e7c0f24827a5eda7c75d4019",
     "tools/nexowatt-stable-v95-selftest.cjs": "0b15fcd329eb2994e64c407ab04eaafab7c38c4688136c197bf9601e1c35ee07",
     "tools/nexowatt-stable-v97-selftest.cjs": "4f50ad6e53b8de7eb045d56657cccd846883eacd8a877d51240d78153ba53d80",
     "tools/nexowatt-sync-release-version.cjs": "2478d714533ece21a275071ef6e5467f73c2fa33d0a63d76f408dc048a86c6f6",
     "tools/nexowatt-ui-overview-runtime-selftest.cjs": "838a8f44f4ba322424e35ebbb01e4a55bb9cc90b8625033086969114744386b4",
     "tools/nexowatt-update-selftest.cjs": "c38c454135f98de683de8fa15fc4b9032063823f0f55fcfc8b675f551fd342f5",
-    "tools/nexowatt-validate-package.cjs": "f2a7f70ba5a468eccc62eb0a52aed7ea0ac1afe83128b986987890bf76568cdf",
+    "tools/nexowatt-validate-package.cjs": "f918335d1add07777ee8998a66f207df7c30479aceec6c401ec10a72a59a98fe",
     "tools/nexowatt-value-column-selftest.cjs": "29d0a9bbea05a87dcf8ee09c86cc81acb6c59e1e34801890768f5e342083871a",
     "tools/nexowatt-version-sync-selftest.cjs": "65d7c8634b6d5581f337365e13a1a9432c7d47dbf5aebc237886730c32ba5e94",
     "tsconfig.build.json": "d3a31263975a13de77b97af9ff246d89931f3abb594047be2739cf11378b97f5",

package/PUBLISH_STABLE_V7.10.4.md

@@ -0,0 +1,10 @@
+# NPM-Veröffentlichung 7.10.4
+
+Aus einer frisch entpackten Repository-ZIP ausführen:
+
+```powershell
+npm publish --dry-run
+npm publish
+```
+
+Der Publish-Workflow ist dependency-frei und darf weder `tsc`, `tsx`, `npm install` noch einen verschachtelten `npm pack`-Prozess verlangen.

package/README.md

@@ -13,9 +13,9 @@ Standard-Port:          8081
 
 Damit überschreibt der Adapter den offiziellen `admin`-Adapter nicht mehr. Die alte ioBroker-Admin-Oberfläche kann parallel vorhanden bleiben, während NexoWatt-Systeme über `eos-admin.0` die EOS-Oberfläche nutzen.
 
-## Aktueller Stable-Verkaufskandidat 7.10.2
+## Aktueller Stable-Verkaufskandidat 7.10.4
 
-Version 7.10.2 übernimmt die validierte 7.10.1-Oberfläche und repariert den kritischen Start-/Stop-Loop des Stable-Update-Managers. Laufzeitstatus wird ausschließlich in Adapter-States gespeichert, der erste Repository-Abgleich startet verzögert und jedes Release-Paket wird auf eine vollständige Backend-Modulkette geprüft. Die native **Übersicht** bleibt die Startseite; der Inhaltsbereich ist vertikal scrollbar, während Header und Hauptnavigation stehen bleiben.
+Version 7.10.4 übernimmt den validierten und absturzfreien Stand 7.10.2. Die Einstellung **Automatische Adapter-Updates** liegt jetzt ausschließlich in den **Systemeinstellungen** hinter dem Schraubenschlüssel. Auf Übersicht, Module und allen anderen Hauptseiten wird die Karte nicht mehr angezeigt. Die restart-sichere Updateverwaltung, der verzögerte Repository-Abgleich und die vollständige Backend-Paketprüfung bleiben unverändert.
 
 Verwaltete Installateur- und Endkundenkonten verwenden das Startpasswort `nexowatt`. Nach der ersten Anmeldung beziehungsweise nach einem Reset muss unmittelbar ein persönliches Passwort vergeben werden. Der Reset und die persönliche Passwortvergabe schreiben das reale ioBroker-Benutzerkennwort; EOS-Metadaten werden davon getrennt aktualisiert.
 
@@ -33,7 +33,7 @@ Minimaler Repository-Eintrag:
 {
   "eos-admin": {
     "name": "eos-admin",
-    "version": "7.10.2",
+    "version": "7.10.4",
     "title": "NexoWatt EOS Admin",
     "desc": {
       "de": "NexoWatt EOS Administrationsoberfläche als eigenständiger Adapter.",
@@ -141,7 +141,7 @@ npm publish --dry-run --tag latest
 npm publish --tag latest
 ```
 
-Die Version muss vor jedem erneuten Publish erhöht werden. Für 7.10.2 ist die Veröffentlichung des separat geprüften `iobroker.eos-admin-7.10.2.tgz` der sicherste Weg.
+Die Version muss vor jedem erneuten Publish erhöht werden. Für 7.10.4 wird direkt aus der vollständig geprüften Repository-ZIP veröffentlicht; `npm publish` benötigt dabei weiterhin weder `tsc` noch `tsx`.
 
 ## Lizenz
 

package/README_STABILITY_V7.10.4.md

@@ -0,0 +1,12 @@
+# NexoWatt EOS Admin 7.10.4 – Stabilitäts- und Sicherheitsstand
+
+Version 7.10.4 baut auf dem absturz- und publish-sicheren Stand 7.10.3 auf. Die automatische Update-Karte bleibt ausschließlich in den Systemeinstellungen hinter dem Schraubenschlüssel.
+
+Zusätzlich gilt eine rollenbasierte Sicherheitsgrenze:
+
+- Administrator: vollständiger Zugriff einschließlich App-Center, Lizenz, Simulation, Expertenmodus, Benutzer/Rechte, ioBroker Admin und XTerm.
+- Installateur: technische Bedienoberfläche ohne App-Center, Lizenz, Simulation, Expertenmodus, Benutzer/Rechte, ioBroker Admin und XTerm.
+- Endkunde: Cockpit, Smart Home und Datenpunkte mit Nur-Lesezugriff; keine Schreib-, Rechte-, Passwort- oder Expertenfunktionen.
+- Sicherung: Navigation nur bei installierter und aktivierter Backup-Instanz.
+
+Die Sperren werden nicht nur optisch, sondern zusätzlich im EOS-HTTP-Guard und über die Endkunden-ACLs durchgesetzt.

package/RELEASE_ACCEPTANCE_V7.10.4.md

@@ -0,0 +1,3 @@
+# Release Acceptance 7.10.4
+
+Akzeptiert, wenn Paketvalidierung, Stabilitätstests, Prebuilt-Manifest, Backend-Runtime, Rollen-Selbsttest und `npm publish --dry-run` erfolgreich sind. Zusätzlich müssen Administrator-, Installateur- und Endkundenrechte im Feldtest der dokumentierten Rollenmatrix entsprechen.

package/RELEASE_NOTES_V7.10.4.md

@@ -0,0 +1,11 @@
+# Release Notes 7.10.4
+
+- App-Center, Lizenzverwaltung und Simulation auf Administratoren begrenzt.
+- Expertenmodus und Expertenkopf für Installateur und Endkunde entfernt.
+- Benutzer-, Gruppen-, Rechte- und Passwortverwaltung für Nicht-Administratoren gesperrt.
+- ioBroker Admin und XTerm für Installateur und Endkunde ausgeblendet und serverseitig abgefangen.
+- Endkunden-Datenpunkte sichtbar, aber nur lesbar; Schreibaufrufe werden blockiert.
+- Sicherungsnavigation nur bei aktiver Backup-Instanz.
+- Bereits bestehende privilegierte UI-Sitzungen werden bei Nicht-Administratoren nicht weiterverwendet.
+- Update-Karte weiterhin ausschließlich unter Systemeinstellungen.
+- Absturz-, Runtime- und dependency-freier NPM-Publish-Schutz aus 7.10.2/7.10.3 beibehalten.

package/adminWww/css/eos-auto-update.css

@@ -1,4 +1,5 @@
-/* NexoWatt EOS native stable auto-update card */
-.eos-nexowatt-auto-update{box-sizing:border-box;display:flex;align-items:center;justify-content:space-between;gap:28px;width:calc(100% - 32px);margin:0 16px 14px;padding:22px 24px;border:1px solid rgba(0,229,138,.28);border-radius:20px;background:linear-gradient(120deg,rgba(0,71,66,.62),rgba(4,25,39,.96) 52%,rgba(4,21,34,.98));color:#effbff;box-shadow:0 16px 36px rgba(0,0,0,.18)}
+/* NexoWatt EOS stable auto-update settings card: visible only inside the System Settings dialog. */
+.eos-nexowatt-auto-update{box-sizing:border-box;display:flex;align-items:center;justify-content:space-between;gap:28px;flex:none;width:calc(100% - 32px);margin:16px;padding:20px 24px;border:1px solid rgba(0,229,138,.28);border-radius:20px;background:linear-gradient(120deg,rgba(0,71,66,.62),rgba(4,25,39,.96) 52%,rgba(4,21,34,.98));color:#effbff;box-shadow:0 16px 36px rgba(0,0,0,.18)}
+.eos-nexowatt-auto-update[data-context="system-settings"]{position:relative;z-index:1}
 .eos-nexowatt-auto-update[data-enabled="false"]{border-color:rgba(117,145,160,.34);background:linear-gradient(120deg,rgba(31,54,65,.72),rgba(4,21,34,.98))}
-.eos-nau-copy{min-width:0;flex:1}.eos-nau-eyebrow{display:block;margin-bottom:5px;color:#00e58a;font-size:.72rem;font-weight:900;letter-spacing:.13em;text-transform:uppercase}.eos-nau-copy h2{margin:0 0 6px;font-size:1.35rem;line-height:1.2}.eos-nau-copy p{max-width:960px;margin:0;color:#a9c2d0;font-size:.82rem;line-height:1.55}.eos-nau-meta{display:flex;flex-wrap:wrap;gap:8px 18px;margin-top:13px;color:#84a8ba;font-size:.72rem}.eos-nau-meta strong{color:#d9f6ee}.eos-nau-adapters{display:flex;flex-wrap:wrap;gap:6px;margin-top:12px}.eos-nau-adapters span{padding:5px 9px;border:1px solid rgba(0,229,138,.24);border-radius:999px;background:rgba(0,229,138,.08);color:#b9f6db;font-size:.7rem;font-weight:800}.eos-nau-error{margin-top:10px;padding:8px 10px;border:1px solid rgba(255,183,77,.38);border-radius:9px;background:rgba(255,152,0,.09);color:#ffd18d;font-size:.72rem}.eos-nau-switch{display:grid;grid-template-columns:50px auto;grid-template-rows:auto auto;align-items:center;column-gap:10px;min-width:160px;cursor:pointer}.eos-nau-switch input{position:absolute;opacity:0;pointer-events:none}.eos-nau-track{grid-row:1/3;position:relative;width:50px;height:28px;border:1px solid rgba(130,161,176,.55);border-radius:999px;background:#273e4c;transition:.2s}.eos-nau-thumb{position:absolute;top:3px;left:3px;width:20px;height:20px;border-radius:50%;background:#b6c8d1;box-shadow:0 3px 8px rgba(0,0,0,.28);transition:.2s}.eos-nau-switch input:checked+.eos-nau-track{border-color:#00e58a;background:rgba(0,229,138,.26)}.eos-nau-switch input:checked+.eos-nau-track .eos-nau-thumb{left:25px;background:#00e58a}.eos-nau-switch strong{align-self:end;font-size:.82rem}.eos-nau-switch small{align-self:start;color:#83a2b2;font-size:.67rem}.eos-nau-switch input:focus-visible+.eos-nau-track{outline:2px solid #4bdcff;outline-offset:3px}@media(max-width:760px){.eos-nexowatt-auto-update{align-items:flex-start;flex-direction:column}.eos-nau-switch{align-self:flex-end}}
+.eos-nau-copy{min-width:0;flex:1}.eos-nau-eyebrow{display:block;margin-bottom:5px;color:#00e58a;font-size:.72rem;font-weight:900;letter-spacing:.13em;text-transform:uppercase}.eos-nau-copy h2{margin:0 0 6px;font-size:1.25rem;line-height:1.2}.eos-nau-copy p{max-width:960px;margin:0;color:#a9c2d0;font-size:.82rem;line-height:1.55}.eos-nau-meta{display:flex;flex-wrap:wrap;gap:8px 18px;margin-top:13px;color:#84a8ba;font-size:.72rem}.eos-nau-meta strong{color:#d9f6ee}.eos-nau-adapters{display:flex;flex-wrap:wrap;gap:6px;margin-top:12px}.eos-nau-adapters span{padding:5px 9px;border:1px solid rgba(0,229,138,.24);border-radius:999px;background:rgba(0,229,138,.08);color:#b9f6db;font-size:.7rem;font-weight:800}.eos-nau-error{margin-top:10px;padding:8px 10px;border:1px solid rgba(255,183,77,.38);border-radius:9px;background:rgba(255,152,0,.09);color:#ffd18d;font-size:.72rem}.eos-nau-switch{display:grid;grid-template-columns:50px auto;grid-template-rows:auto auto;align-items:center;column-gap:10px;min-width:160px;cursor:pointer}.eos-nau-switch input{position:absolute;opacity:0;pointer-events:none}.eos-nau-track{grid-row:1/3;position:relative;width:50px;height:28px;border:1px solid rgba(130,161,176,.55);border-radius:999px;background:#273e4c;transition:.2s}.eos-nau-thumb{position:absolute;top:3px;left:3px;width:20px;height:20px;border-radius:50%;background:#b6c8d1;box-shadow:0 3px 8px rgba(0,0,0,.28);transition:.2s}.eos-nau-switch input:checked+.eos-nau-track{border-color:#00e58a;background:rgba(0,229,138,.26)}.eos-nau-switch input:checked+.eos-nau-track .eos-nau-thumb{left:25px;background:#00e58a}.eos-nau-switch strong{align-self:end;font-size:.82rem}.eos-nau-switch small{align-self:start;color:#83a2b2;font-size:.67rem}.eos-nau-switch input:focus-visible+.eos-nau-track{outline:2px solid #4bdcff;outline-offset:3px}@media(max-width:760px){.eos-nexowatt-auto-update{align-items:flex-start;flex-direction:column}.eos-nau-switch{align-self:flex-end}}

package/adminWww/index.html

@@ -38,7 +38,7 @@
         />
         <link rel="stylesheet" href="./css/nexowatt-native-shell.css?v=7101" />
         <link rel="stylesheet" href="./css/eos-ems-overview.css?v=7101" />
-        <link rel="stylesheet" href="./css/eos-auto-update.css?v=7101" />
+        <link rel="stylesheet" href="./css/eos-auto-update.css?v=7103" />
         <link
             rel="manifest"
             href="manifest.json"
@@ -169,7 +169,7 @@
             <script defer src="./js/eos-role-ui.js?v=7101"></script>
             <script defer src="./js/eos-ems-overview.js?v=7101"></script>
             
-            <script defer src="./js/eos-auto-update.js?v=7101"></script>
+            <script defer src="./js/eos-auto-update.js?v=7103"></script>
             <script defer src="./js/eos-assistant.js?v=7101"></script>
     </head>
     <body>
@@ -177,5 +177,6 @@
         <div id="root"></div>
 <script defer src="static/js/nexowatt-stable-login.js?v=7101"></script>
 <script defer src="static/js/nexowatt-stable-v7101.js?v=7101"></script>
+<script defer src="./nexowatt-role-security.js?v=7104"></script>
 </body>
 </html>

package/adminWww/js/eos-auto-update.js

@@ -1,78 +1,172 @@
 (() => {
     'use strict';
-    const VERSION = 'v7100-nexowatt-stable-auto-update';
+
+    const VERSION = 'v7103-system-settings-only';
     const ROOT_ID = 'eos-nexowatt-auto-update';
+    const SYSTEM_DIALOG_SELECTOR = '[role="dialog"][aria-labelledby="system-settings-dialog-title"]';
     const script = document.currentScript;
     const API = new URL('../nexowatt/updates/', script?.src || document.baseURI).href;
+
     let busy = false;
     let lastLoad = 0;
+    let latestStatus = null;
     let pollTimer = 0;
 
     const role = () => String(window.NEXOWATT_EOS_ACCESS_ROLE || 'admin').toLowerCase();
-    const introActive = () => String(location.hash || '').replace(/^#\/?/, '').split(/[/?&]/)[0] === 'tab-intro';
-    const esc = value => String(value ?? '').replace(/[&<>'"]/g, char => ({'&':'&amp;','<':'&lt;','>':'&gt;',"'":'&#39;','"':'&quot;'}[char]));
-    const formatTime = value => value ? new Intl.DateTimeFormat(undefined, { dateStyle: 'short', timeStyle: 'medium' }).format(new Date(value)) : '–';
+    const esc = value =>
+        String(value ?? '').replace(/[&<>'"]/g, char =>
+            ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', "'": '&#39;', '"': '&quot;' })[char],
+        );
+    const formatTime = value =>
+        value
+            ? new Intl.DateTimeFormat(undefined, { dateStyle: 'short', timeStyle: 'medium' }).format(new Date(value))
+            : '–';
+
+    const getSystemSettingsMount = () => {
+        const dialog = document.querySelector(SYSTEM_DIALOG_SELECTOR);
+        if (!dialog) return null;
+
+        const content = dialog.querySelector('.MuiDialogContent-root');
+        if (!content) return null;
+
+        const appBar = Array.from(content.children).find(element => element.classList?.contains('MuiAppBar-root')) ||
+            content.querySelector('.MuiAppBar-root');
+
+        return { dialog, content, appBar };
+    };
+
+    const systemSettingsActive = () => Boolean(getSystemSettingsMount());
 
     const ensureRoot = () => {
-        if (role() !== 'admin' || !introActive()) { document.getElementById(ROOT_ID)?.remove(); return null; }
-        let root = document.getElementById(ROOT_ID);
-        if (root) return root;
-        root = document.createElement('section');
+        const existing = document.getElementById(ROOT_ID);
+        if (role() !== 'admin') {
+            existing?.remove();
+            return null;
+        }
+
+        const mount = getSystemSettingsMount();
+        if (!mount) {
+            existing?.remove();
+            return null;
+        }
+
+        if (existing && mount.content.contains(existing)) return existing;
+        existing?.remove();
+
+        const root = document.createElement('section');
         root.id = ROOT_ID;
         root.className = 'eos-nexowatt-auto-update';
-        const hero = document.getElementById('eos-native-overview-hero');
-        const ems = document.getElementById('eos-ems-overview-runtime');
-        const parent = ems?.parentElement || hero?.parentElement || document.getElementById('app-paper');
-        if (!parent) return null;
-        if (ems) parent.insertBefore(root, ems); else if (hero?.nextSibling) parent.insertBefore(root, hero.nextSibling); else parent.append(root);
+        root.dataset.context = 'system-settings';
+        root.setAttribute('data-eos-system-settings-only', 'true');
+        root.setAttribute('aria-label', 'NexoWatt Stable-Update-Einstellungen');
+
+        if (mount.appBar?.parentElement === mount.content) {
+            mount.content.insertBefore(root, mount.appBar.nextSibling);
+        } else {
+            mount.content.prepend(root);
+        }
         return root;
     };
 
     const render = status => {
-        const root = ensureRoot(); if (!root) return;
-        const enabled = status?.enabled !== false;
-        const managed = Array.isArray(status?.managedAdapters) ? status.managedAdapters : [];
-        const error = String(status?.error || '');
+        latestStatus = { ...(latestStatus || {}), ...(status || {}) };
+        const root = ensureRoot();
+        if (!root) return;
+
+        const enabled = latestStatus?.enabled !== false;
+        const managed = Array.isArray(latestStatus?.managedAdapters) ? latestStatus.managedAdapters : [];
+        const error = String(latestStatus?.error || '');
+
         root.dataset.enabled = String(enabled);
-        root.innerHTML = `<div class="eos-nau-copy"><span class="eos-nau-eyebrow">NexoWatt Stable</span><h2>Automatische Adapter-Updates</h2><p>${enabled ? 'Installierte NexoWatt-Adapter werden automatisch aktualisiert, sobald im erkannten Stable-Repository eine neuere stabile Version verfügbar ist.' : 'Automatische NexoWatt-Updates sind deaktiviert. Vorherige ioBroker-Update-Richtlinien wurden wiederhergestellt.'}</p><div class="eos-nau-meta"><span>Repository: <strong>${esc(status?.repository || 'wird erkannt')}</strong></span><span>Letzter Abgleich: <strong>${esc(formatTime(status?.lastSync))}</strong></span><span>Richtlinie: <strong>alle neueren Stable-Versionen</strong></span></div>${managed.length ? `<div class="eos-nau-adapters">${managed.map(name => `<span>${esc(name)}</span>`).join('')}</div>` : ''}${error ? `<div class="eos-nau-error">${esc(error)}</div>` : ''}</div><label class="eos-nau-switch"><input type="checkbox" ${enabled ? 'checked' : ''} ${busy ? 'disabled' : ''}><span class="eos-nau-track"><span class="eos-nau-thumb"></span></span><strong>${enabled ? 'Aktiv' : 'Deaktiviert'}</strong><small>jederzeit änderbar</small></label>`;
+        root.innerHTML = `<div class="eos-nau-copy"><span class="eos-nau-eyebrow">NexoWatt Stable</span><h2>Automatische Adapter-Updates</h2><p>${enabled ? 'Installierte NexoWatt-Adapter werden automatisch aktualisiert, sobald im erkannten Stable-Repository eine neuere stabile Version verfügbar ist.' : 'Automatische NexoWatt-Updates sind deaktiviert. Vorherige ioBroker-Update-Richtlinien wurden wiederhergestellt.'}</p><div class="eos-nau-meta"><span>Repository: <strong>${esc(latestStatus?.repository || 'wird erkannt')}</strong></span><span>Letzter Abgleich: <strong>${esc(formatTime(latestStatus?.lastSync))}</strong></span><span>Richtlinie: <strong>alle neueren Stable-Versionen</strong></span></div>${managed.length ? `<div class="eos-nau-adapters">${managed.map(name => `<span>${esc(name)}</span>`).join('')}</div>` : ''}${error ? `<div class="eos-nau-error">${esc(error)}</div>` : ''}</div><label class="eos-nau-switch"><input type="checkbox" ${enabled ? 'checked' : ''} ${busy ? 'disabled' : ''}><span class="eos-nau-track"><span class="eos-nau-thumb"></span></span><strong>${enabled ? 'Aktiv' : 'Deaktiviert'}</strong><small>jederzeit änderbar</small></label>`;
         root.querySelector('input')?.addEventListener('change', event => void save(Boolean(event.currentTarget.checked)));
     };
 
     const request = async (path, options = {}) => {
-        const response = await fetch(new URL(path, API), { cache: 'no-store', credentials: 'same-origin', ...options });
+        const response = await fetch(new URL(path, API), {
+            cache: 'no-store',
+            credentials: 'same-origin',
+            ...options,
+        });
         const data = await response.json().catch(() => ({}));
         if (!response.ok) throw new Error(data.error || `HTTP ${response.status}`);
         return data;
     };
+
     const load = async (force = false) => {
-        if (role() !== 'admin' || !introActive()) return;
+        if (role() !== 'admin' || !systemSettingsActive()) {
+            ensureRoot();
+            return;
+        }
         if (!force && Date.now() - lastLoad < 5000) return;
+
         lastLoad = Date.now();
-        try { render(await request('status')); }
-        catch (error) { render({ enabled: true, error: error?.message || error }); }
+        try {
+            render(await request('status'));
+        } catch (error) {
+            render({ enabled: latestStatus?.enabled !== false, error: error?.message || error });
+        }
     };
+
     const save = async enabled => {
         if (busy) return;
         busy = true;
+        render({ enabled, error: '' });
+
         try {
-            render({ enabled });
-            const status = await request('settings', { method: 'POST', headers: { 'Content-Type': 'application/json', 'X-NexoWatt-EOS-Auto-Update': '1' }, body: JSON.stringify({ enabled }) });
-            render(status);
+            latestStatus = await request('settings', {
+                method: 'POST',
+                headers: {
+                    'Content-Type': 'application/json',
+                    'X-NexoWatt-EOS-Auto-Update': '1',
+                },
+                body: JSON.stringify({ enabled }),
+            });
         } catch (error) {
-            render({ enabled: !enabled, error: error?.message || error });
-        } finally { busy = false; }
+            latestStatus = { ...(latestStatus || {}), enabled: !enabled, error: error?.message || error };
+        } finally {
+            busy = false;
+            render(latestStatus || { enabled });
+        }
     };
 
     let scheduled = false;
-    const schedule = () => { if (scheduled) return; scheduled = true; requestAnimationFrame(() => { scheduled = false; void load(); }); };
+    const schedule = () => {
+        if (scheduled) return;
+        scheduled = true;
+        requestAnimationFrame(() => {
+            scheduled = false;
+            void load();
+        });
+    };
+
     const start = () => {
         void load();
-        window.addEventListener('hashchange', () => { lastLoad = 0; schedule(); });
+        window.addEventListener('hashchange', () => {
+            lastLoad = 0;
+            schedule();
+        });
         window.addEventListener('nexowatt-eos-admin-socket-ready', schedule);
-        document.addEventListener('visibilitychange', () => { if (document.visibilityState === 'visible') schedule(); });
-        new MutationObserver(() => { if (!document.getElementById(ROOT_ID) && introActive()) schedule(); }).observe(document.documentElement, { childList: true, subtree: true });
+        document.addEventListener('visibilitychange', () => {
+            if (document.visibilityState === 'visible') schedule();
+        });
+
+        new MutationObserver(() => {
+            const root = document.getElementById(ROOT_ID);
+            const settingsOpen = systemSettingsActive();
+            if ((settingsOpen && !root) || (!settingsOpen && root)) schedule();
+        }).observe(document.documentElement, { childList: true, subtree: true });
+
         pollTimer = window.setInterval(() => void load(true), 30000);
     };
-    document.readyState === 'loading' ? document.addEventListener('DOMContentLoaded', start, { once: true }) : start();
-    window.NEXOWATT_EOS_AUTO_UPDATE_UI = Object.freeze({ version: VERSION, refresh: load });
+
+    document.readyState === 'loading'
+        ? document.addEventListener('DOMContentLoaded', start, { once: true })
+        : start();
+
+    window.NEXOWATT_EOS_AUTO_UPDATE_UI = Object.freeze({
+        version: VERSION,
+        refresh: load,
+        location: 'system-settings',
+    });
 })();