iobroker.eos-admin 7.10.3 → 7.10.5

package/INSTALL_TEST_V7.10.5.md

@@ -0,0 +1,8 @@
+# Installation test 7.10.5
+
+- Install/update EOS Admin 7.10.5 and verify port 8081 remains reachable.
+- Sign in as Admin: datapoints are writable; expert mode can be enabled and disabled; Admin and XTerm overview cards are visible.
+- Sign in as Installer: no expert head, ioBroker Admin, XTerm, App Center, License, Simulation or Users/Rights page.
+- Sign in as End User: Datapoints tab is visible but every write/edit/delete action is disabled; restricted tools are absent.
+- Toggle a navigation item with the pencil: EOS Admin must not restart and `system.config` must remain untouched.
+- Disable the backup adapter: its navigation item disappears; re-enable it and the item returns.

package/MERGE_UPDATE_README_V7.10.5.md

@@ -0,0 +1,7 @@
+# Merge/update note 7.10.5
+
+Always replace the previous repository with the complete 7.10.5 repository. Do not merge old `adminWww` bundles or deleted role-security files back into this release. In particular, `nexowatt-role-security.js` and `build/lib/eosRoleSecurity.js` are obsolete and must stay absent.
+
+After a merge, run the package, stability, role-security and publish dry-run checks before publishing.
+
+The 7.10.5 publish workflow now removes all three obsolete 7.10.4 role-security files automatically before sealing and packaging, including when the ZIP was extracted over an existing working directory.

package/NEXOWATT_EOS_BUILD_INFO.json

@@ -1,28 +1,32 @@
 {
-  "version": "7.10.3",
+  "version": "7.10.5",
   "channel": "stable-latest",
-  "baseFrontend": "validated 7.10.2 stable runtime with automatic adapter updates relocated into System Settings",
+  "baseFrontend": "validated v84 runtime with authoritative RBAC, restored administrator rights and restart-safe navigation layout",
   "runtimeEntry": "v84",
-  "releaseType": "stable-system-settings-auto-update-placement",
-  "release": "stable-system-settings-auto-update-placement",
-  "label": "v7-10-3",
+  "releaseType": "stable-admin-rights-rbac-navigation",
+  "release": "stable-admin-rights-rbac-navigation",
+  "label": "v7-10-5",
   "notes": [
-    "Retains the validated 7.10.2 restart-loop and package-completeness fixes.",
-    "The automatic NexoWatt adapter update card is no longer mounted in the normal overview or module pages.",
-    "The update control is mounted only inside the administrator System Settings dialog opened with the wrench button.",
-    "A dedicated placement selftest prevents the card from returning to global page content."
+    "Administrator authority is derived only from the authenticated backend security context; DOM text is never used to classify a role.",
+    "Admin keeps full datapoint write access, all overview cards and reversible expert mode.",
+    "Installer and End User do not see ioBroker Admin, XTerm, App Center, License, Simulation or account administration.",
+    "End User can open Datapoints in read-only mode; backend socket writes are denied independently of the browser.",
+    "Navigation visibility/order is stored in eos-admin.0.info.uiTabsVisible and no longer modifies system.config or restarts the adapter.",
+    "Backup navigation is shown only while a supported backup instance is enabled."
   ],
   "changes": [
-    "Moved Automatic Adapter Updates from the normal page content into System Settings.",
-    "Added a dedicated auto-update cache key so browsers cannot keep the old global placement script.",
-    "Kept backend update policy, state storage and delayed startup reconciliation unchanged.",
-    "Added source/build drift and placement guards for the auto-update UI."
+    "Removed the legacy DOM-text role heuristic that could downgrade system.user.admin to End User.",
+    "Added explicit Admin bypass regression guards in source, backend runtime and frontend bundles.",
+    "Added End User-only ObjectBrowser read-only wiring while retaining Admin/Installer native write controls.",
+    "Moved menu layout persistence away from system.config into a dedicated adapter state.",
+    "Hid Admin/XTerm cards only for restricted roles and forced them visible for Admin.",
+    "Protected App Center, License and Simulation in the authenticated role layer and cleared inherited UI-admin sessions for non-admin roles."
   ],
-  "brandingCacheVersion": 7101,
-  "shellCacheVersion": 7101,
-  "nativeShellVersion": 7101,
-  "shellCacheTag": "7101",
-  "repositoryEntry": "nexowatt-eos-admin-repository-entry-v7-10-3.json",
+  "brandingCacheVersion": 7105,
+  "shellCacheVersion": 7105,
+  "nativeShellVersion": 7105,
+  "shellCacheTag": "7105",
+  "repositoryEntry": "nexowatt-eos-admin-repository-entry-v7-10-5.json",
   "autoUpdateCacheVersion": 7103,
   "autoUpdateCacheTag": "7103"
 }

package/NEXOWATT_EOS_PREBUILT_MANIFEST.json

@@ -1,9 +1,9 @@
 {
   "format": 1,
   "package": "iobroker.eos-admin",
-  "version": "7.10.3",
+  "version": "7.10.5",
   "algorithm": "sha256",
-  "fileCount": 1388,
+  "fileCount": 1389,
   "trackedRoots": [
     "src",
     "build",
@@ -309,7 +309,7 @@
     "adminWww/assets/Humidity-Ck1f_Evq.svg": "c5a88ade9eafa8e5fd714838acff869fa561d33a5f230019f5baa289243539d9",
     "adminWww/assets/Instances-YdaGnS5a-v84.js": "de9672fd123e971461d5ced6cc6172d5df262e3d59419e309c2a780d9a5aa5e6",
     "adminWww/assets/Instances-YdaGnS5a.js": "fb6664cc29046169ce0a152c74017d4f9b57099f12cf0b96a3653afd03fed888",
-    "adminWww/assets/Intro-DkwRiz1n-v84.js": "fbe23c0c8d28be7b8f1ef1db6a1a97ad237858213dbd4011bce0a9ca4327d99f",
+    "adminWww/assets/Intro-DkwRiz1n-v84.js": "b35253da6aad0428f8f8aebaba7803e82665f955fcbfe3d0a7a649af24a53cbe",
     "adminWww/assets/Intro-DkwRiz1n.js": "b1d3030eef7bc26940993111f6491b64899bd5b795c5172e2d1555f7c414c1e8",
     "adminWww/assets/Iron-BmVcdQDM.js": "3f1e4786741e2458b55419b510dac343b9ea3d5f7c1c257e7ab52d3e7bf04cff",
     "adminWww/assets/Irrigation-BhJPKg6k.js": "a05cf0b525776278d45f92f3dc0717284eeaf0b0b18fbc0ac8afad77e11a1e0c",
@@ -334,7 +334,7 @@
     "adminWww/assets/Music-GTFyD3_A.js": "e0d865d23f9d2154ea63cee857891ffc025a1d0ca40ab6d0378241a7f6186012",
     "adminWww/assets/Nursery-Cxrv-xmv.js": "67b5c31a1dabc2a5a6373324536cf4e08aca0438e90cc58ed356d4472ad51c0e",
     "adminWww/assets/Objects-BwKcXIZw.css": "ad89e8d571596f24906a0bf5effbce3b727c3e6fc7ee667f0f0eab3bc3dc04a4",
-    "adminWww/assets/Objects-DPan0bzw-v84.js": "eec8436fad385413b7a6922551625c1435fba8e0b2722a55b5bc04ffb2d0f433",
+    "adminWww/assets/Objects-DPan0bzw-v84.js": "46afe78c843ffa1849f15fd4c92c89ca7bd349c1a6927906a5f38e2178d07ee4",
     "adminWww/assets/Objects-DPan0bzw.js": "7609b95949b9937d447f1e051b208d2421d1cd3e56c7349e92b9d29118e68c81",
     "adminWww/assets/Office-CIXVNXkh.js": "41cde64ea9cad1025ee6aeccf3da952c8f64581fb0197e2a613548371ff8a9ba",
     "adminWww/assets/Outdoor Blinds-CXkkQc7j.js": "30b7682eefc3a48a62fe889258fc9814353ac8b4c6ff0c7bb49220a150567174",
@@ -404,7 +404,7 @@
     "adminWww/assets/amber-D7aVlNg3.js": "2687f459888dec42499d3e0330166b9c99add16240e35961b6123edf91c085b2",
     "adminWww/assets/assertThisInitialized-B0aQ9eG_.js": "c7e3cc4cebe056e53eb01bc7ccb6974268d61c020fa837b64c800f907f8ac2f8",
     "adminWww/assets/blue-CagzI6CQ.js": "fce7875a21a574fd80daa5d1bab96f545ff2d65cb1a29f7e02c7541332a25616",
-    "adminWww/assets/bootstrap-COulQZax-v84.js": "14e8d7bbe05e150313cfef7a7c473481e02dc2e02c94f3731509de60a8255627",
+    "adminWww/assets/bootstrap-COulQZax-v84.js": "74e59fbdc557f5cab2b43a3d400cb121f685f8fc673be9449c45961d9be7ebc0",
     "adminWww/assets/bootstrap-COulQZax.js": "120310000083365306f6ebbd7a46f8937aa7d83639504214c5dabc252fa180b3",
     "adminWww/assets/bootstrap-D57bMhRi.css": "7e2acc4fbe77d10ef06c155f74a0b5c37790b29c104eb23c5e7bd84bff3ed049",
     "adminWww/assets/createSvgIcon-CfRgdNUH.js": "1a911b7e4ae00c2b99cadc89b2b32a4ad69e6e5ac7b3e0ec6e07f87f6e46956e",
@@ -527,7 +527,7 @@
     "adminWww/css/images/marker-icon.png": "574c3a5cca85f4114085b6841596d62f00d7c892c7b03f28cbfa301deb1dc437",
     "adminWww/css/images/marker-shadow.png": "264f5c640339f042dd729062cfc04c17f8ea0f29882b538e3848ed8f10edb4da",
     "adminWww/css/leaflet.css": "7a30116fa3852c0ff7e556bb2e80b0dc89c5bca8e725bbe3948af1746ca55103",
-    "adminWww/css/nexowatt-native-shell.css": "101acbbe594b1f40cced188fc6208cd0ce2a503ce3592c6ff034ca0605ecf84c",
+    "adminWww/css/nexowatt-native-shell.css": "cd55f82f7e1de5041058213dda973226c8ea188de554511b9c9fffaf1ed12d0c",
     "adminWww/favicon.ico": "3a357e949ab04b9f7bb1539764419ade50d1b4fc7caa51b8f33202a3f57a1f74",
     "adminWww/img/admin.png": "7f93d65d9e1d795bf127e1af31d88d7468ccb70b026f98351d0abbc3f3bd4df6",
     "adminWww/img/admin.svg": "1167118074ff84d8cef82ad80c38609719dacfde9417126e46966c1ec986534b",
@@ -552,7 +552,7 @@
     "adminWww/img/le.png": "ef5ebb7112926f646e781a326b639f56888fafe0891b9b000178091b4f8ed9dd",
     "adminWww/img/logo.svg": "1167118074ff84d8cef82ad80c38609719dacfde9417126e46966c1ec986534b",
     "adminWww/img/no-image.svg": "25fc382f4ad3a36f8a637cd966b9107368e1f11906d706102ad5f37db6f57f34",
-    "adminWww/index.html": "4cf338768e78f3050282508bd60fb964ca2ce7bd6153951ef6a87ece4af108b2",
+    "adminWww/index.html": "9358ac35e93087ed79e3c00ec54899fde92938c438eb86231328d5f08d3ea965",
     "adminWww/js/adapter-settings.js": "fb2e538a3385899f7fd47275ec588051c735d8f778a44b89f40f5eb820a31dbc",
     "adminWww/js/eos-account-management.js": "dbba398605b2391ac1a7ec97cf7eb84da7f929ea16bfb6761750cd700a687fbe",
     "adminWww/js/eos-assistant.js": "be43f49fd5310d2962365035556c37109d4868856e874e1f964c4b2f05bb6beb",
@@ -563,11 +563,11 @@
     "adminWww/js/eos-manual-write-policy.js": "3c93487146b4fd5f681aa45a6bb137d9a91c3fa145ebfa94ec5ccb6b15498e8b",
     "adminWww/js/eos-native-security.js": "33098b98164623fc133314658bca2f622d19971795dd8bd3c90aca68598aab90",
     "adminWww/js/eos-policy-client.js": "5ffd32270307137fbec69a9b9bea57ca1d2e27ede987ce1eb37ff1df6677d8d2",
-    "adminWww/js/eos-role-bootstrap.js": "62058487c81c807083cf1a9d43f34ee7a70bb3eb67cb6bed816ab8cfb10d4a46",
-    "adminWww/js/eos-role-ui.js": "322405543ae423febfa4d1e23b390c287f9959f305d07d396a306db1c88dc9e6",
+    "adminWww/js/eos-role-bootstrap.js": "f7f6f4c816cbf694f8e24d812a2aa8e7c84a42af6ad2274f44bf24debcfec63f",
+    "adminWww/js/eos-role-ui.js": "93424c5959159dd44421365a277b26c2c941f7d418eac4eae36547364cc10afb",
     "adminWww/js/license.js": "13798e577c82d7a5549b07a244b8b8453ef43e53fc7789f565c35b56e6654007",
     "adminWww/js/listHeader.js": "ed336a68a64e16a062d1af2269428fd20a08a4b695f17635f55a18bc1ef693a4",
-    "adminWww/js/nexowatt-native-shell.js": "c5a8ae55675aa4af92d1fdcdaae8554eff3cb16eb8d64873f1402e3869907f1d",
+    "adminWww/js/nexowatt-native-shell.js": "c0d327669ba12ba3b8e6fc4d1a17eb7092e59a0b23a2852161714c2b214dde15",
     "adminWww/js/tableEditor.js": "5508044619fec70071895d0ae3ab6ff75dd03bd936e7b133f98d098d4245ec20",
     "adminWww/js/translate.js": "264442c0f42a10148057125532bf55b7672c4cc051c28e7cbb922984a558f8d3",
     "adminWww/js/treeTable.js": "8abde0b7880a89f6f927a87bb041945dea1502f51bc9870d8ba0be9d3dd9eed8",
@@ -747,7 +747,7 @@
     "adminWww/static/js/html.js": "159b7192459d73d92761dab8c4d48e138e94e4d8e7bf99004bac257e403a0c3b",
     "adminWww/static/js/javascript.js": "6287a6b820c8707a0cd7b9e4545bcb023a8b9228569cfd21be6635d1409aabf4",
     "adminWww/static/js/nexowatt-stable-login.js": "ff0c6d4dc2086f3ab4be8ef455e5891a2ccb5f534bddfacbef2f5cd6ce65489e",
-    "adminWww/static/js/nexowatt-stable-v7101.js": "ac3f3cbac8075b78807be9207a5bae295fa5a03da2df116e753be06232eff1b0",
+    "adminWww/static/js/nexowatt-stable-v7105.js": "35d329e37a698a71d2825fe1bcbcee4e1073249a59aa56a3c645cf9623461600",
     "adminWww/static/js/worker-css.js": "83c767cacd6b190e2f083b139cb3f124d1b560afbd7a6dbb74bf5539aa4cadee",
     "adminWww/static/js/worker-html.js": "661d2448443c0089fba31d2829d77761a5fc042035c38433eff0e20707f17457",
     "adminWww/static/js/worker-javascript.js": "73fcf007e2d19eacba8f365719ee92d14345505b03f9cf66e6338aef02fccd21",
@@ -795,7 +795,7 @@
     "build/lib/utils.js.map": "74238d0d82cc28d41c4f627b73793f6cda26b338ef1bd97916b6417783949e29",
     "build/lib/web.js": "8de94dffdd7c70be6b537c111691c831116338b311f7569739de57f9a32e071f",
     "build/lib/web.js.map": "5fb9f337f3a27c04bb4303cb61ffa5f0da857299a7d2890609eb5f55f24f1789",
-    "build/main.js": "f69b219dbafda80fe73ecb8638eed68f01e3e6f15bd0791b2278779ab9902156",
+    "build/main.js": "7578ee14ea840950ad5164b0063c091c983528ebc32689dec5dc499062fbc92e",
     "build/main.js.map": "1cd3887da9b3d4061c59b6ad497c536c6c9a79938b10bbddf7128a1e7930dfbd",
     "public/404.html": "6c6458ba2bc49b0c27973293e461262bf697607a8e71ab716227553f6d7005eb",
     "public/logTemplate.html": "fc371fc8e4d7ef57c0ca76a405508eced038523464ff65b6cae04dae6144fd54",
@@ -817,7 +817,7 @@
     "src-admin/public/css/images/marker-icon.png": "574c3a5cca85f4114085b6841596d62f00d7c892c7b03f28cbfa301deb1dc437",
     "src-admin/public/css/images/marker-shadow.png": "264f5c640339f042dd729062cfc04c17f8ea0f29882b538e3848ed8f10edb4da",
     "src-admin/public/css/leaflet.css": "7a30116fa3852c0ff7e556bb2e80b0dc89c5bca8e725bbe3948af1746ca55103",
-    "src-admin/public/css/nexowatt-native-shell.css": "101acbbe594b1f40cced188fc6208cd0ce2a503ce3592c6ff034ca0605ecf84c",
+    "src-admin/public/css/nexowatt-native-shell.css": "cd55f82f7e1de5041058213dda973226c8ea188de554511b9c9fffaf1ed12d0c",
     "src-admin/public/favicon.ico": "3a357e949ab04b9f7bb1539764419ade50d1b4fc7caa51b8f33202a3f57a1f74",
     "src-admin/public/img/admin.png": "f4c004482fa2623bea6f7e83df40fdda2e07334f61d5ae27eb0aba186c10ca97",
     "src-admin/public/img/admin.svg": "1167118074ff84d8cef82ad80c38609719dacfde9417126e46966c1ec986534b",
@@ -850,11 +850,11 @@
     "src-admin/public/js/eos-manual-write-policy.js": "3c93487146b4fd5f681aa45a6bb137d9a91c3fa145ebfa94ec5ccb6b15498e8b",
     "src-admin/public/js/eos-native-security.js": "33098b98164623fc133314658bca2f622d19971795dd8bd3c90aca68598aab90",
     "src-admin/public/js/eos-policy-client.js": "5ffd32270307137fbec69a9b9bea57ca1d2e27ede987ce1eb37ff1df6677d8d2",
-    "src-admin/public/js/eos-role-bootstrap.js": "62058487c81c807083cf1a9d43f34ee7a70bb3eb67cb6bed816ab8cfb10d4a46",
-    "src-admin/public/js/eos-role-ui.js": "322405543ae423febfa4d1e23b390c287f9959f305d07d396a306db1c88dc9e6",
+    "src-admin/public/js/eos-role-bootstrap.js": "f7f6f4c816cbf694f8e24d812a2aa8e7c84a42af6ad2274f44bf24debcfec63f",
+    "src-admin/public/js/eos-role-ui.js": "93424c5959159dd44421365a277b26c2c941f7d418eac4eae36547364cc10afb",
     "src-admin/public/js/license.js": "13798e577c82d7a5549b07a244b8b8453ef43e53fc7789f565c35b56e6654007",
     "src-admin/public/js/listHeader.js": "ed336a68a64e16a062d1af2269428fd20a08a4b695f17635f55a18bc1ef693a4",
-    "src-admin/public/js/nexowatt-native-shell.js": "c5a8ae55675aa4af92d1fdcdaae8554eff3cb16eb8d64873f1402e3869907f1d",
+    "src-admin/public/js/nexowatt-native-shell.js": "c0d327669ba12ba3b8e6fc4d1a17eb7092e59a0b23a2852161714c2b214dde15",
     "src-admin/public/js/tableEditor.js": "5508044619fec70071895d0ae3ab6ff75dd03bd936e7b133f98d098d4245ec20",
     "src-admin/public/js/translate.js": "264442c0f42a10148057125532bf55b7672c4cc051c28e7cbb922984a558f8d3",
     "src-admin/public/js/treeTable.js": "8abde0b7880a89f6f927a87bb041945dea1502f51bc9870d8ba0be9d3dd9eed8",
@@ -975,8 +975,8 @@
     "src-admin/public/manifest.json": "15244d5d50f08420fc5d4793e5699e99c7b900b6908cfbc00a7182f4d4db55bd",
     "src-admin/public/robots.txt": "90d24bc3bf698ac1e173739502298ccca72adf1f564fab05f484b8c48d1cadd2",
     "src-admin/public/static/js/nexowatt-stable-login.js": "ff0c6d4dc2086f3ab4be8ef455e5891a2ccb5f534bddfacbef2f5cd6ce65489e",
-    "src-admin/public/static/js/nexowatt-stable-v7101.js": "ac3f3cbac8075b78807be9207a5bae295fa5a03da2df116e753be06232eff1b0",
-    "src-admin/src/App.tsx": "b3fe82b78352c745a31bb283f92fe80b015a4e6d558c3b7f1737e1b0e1377f1a",
+    "src-admin/public/static/js/nexowatt-stable-v7105.js": "35d329e37a698a71d2825fe1bcbcee4e1073249a59aa56a3c645cf9623461600",
+    "src-admin/src/App.tsx": "8ab367389c604d5face72cc71da49b08021ffa2e566db4d32df9ad98f9fe762a",
     "src-admin/src/Workers/AdaptersWorker.tsx": "3a2cdeb8010598c901df0e3cffcdae913e62e7ac7c84fcadf15cb7f961dc6ed9",
     "src-admin/src/Workers/GenericWorker.tsx": "3b3c6e7856602477c54d1dc085aa23b5cfcac7784cc73710b00622ac04ed5a97",
     "src-admin/src/Workers/HostAdapterWorker.tsx": "e0b87c063fd0fca9ea9afc26a0a82f807a3f650e7459e78add197de4edaa9ff5",
@@ -1191,7 +1191,7 @@
     "src-admin/src/components/CustomPopper.tsx": "07f924ece634d54f1bc5c3d41ffb2702ea89d289c28d98221a5617eaba7cae3d",
     "src-admin/src/components/CustomSelectButton.tsx": "1547393f97fba81b13331a3df4457509f239735bad9d17713eeecd48acd420db",
     "src-admin/src/components/DragWrapper.tsx": "c417b1cc7786398c1d467d98db10d49e5b81d28ba9a6b0a55f6d9f5b6ad9a035",
-    "src-admin/src/components/Drawer.tsx": "0e6987ccdfe3f2c1c1368ea5543034e3713ed68162b0f36e69e44bbb2f6d7002",
+    "src-admin/src/components/Drawer.tsx": "1c8969bb2f97d8ab66bf8be4d2989bc598d0b7397d5a99ff846aa42ceeb7618f",
     "src-admin/src/components/DrawerItem.tsx": "41a011ccfb84258b7e113d0ff2c8f3f12f12cc555eb34e5decd474c71f70453a",
     "src-admin/src/components/EasyModeCard.tsx": "403e8f47532cf469f42f91a7c40c8f9d9c09f66cc4486177ac49fc5aa230b80c",
     "src-admin/src/components/Editor.tsx": "47bc1dd26ab86317d7f65560b10e9611b138be8b0f13c90d78166debcd2ed4ee",
@@ -1318,12 +1318,12 @@
     "src-admin/src/tabs/Files.tsx": "996e7a56d34af41c495bca7c271060b88b0ddd0008d7e52fe099baf64894236c",
     "src-admin/src/tabs/Hosts.tsx": "c4ed6a1a03db8f02492730e6c336a8834b4f85f8054975f9601c74fb59a50973",
     "src-admin/src/tabs/Instances.tsx": "439ad5955bf9122e5827828d45514e0579080b30c5f1af636d997d15758c52fb",
-    "src-admin/src/tabs/Intro.tsx": "be90c125311fb6d10945ef0e1df28311756628fa44c7a044df9970b15300d0ac",
+    "src-admin/src/tabs/Intro.tsx": "7bc7c1ab3df651959046ac1ad23f09fa9d2c1567a0225236eada2c0da5c55d9a",
     "src-admin/src/tabs/Logs.tsx": "51d24880c8a702629e49f3d92edfc23d94778c7d9fa79f5aca1233977166105d",
-    "src-admin/src/tabs/Objects.tsx": "834773b07b613b96f58d053496ed1de0e0b8cbf987a3b33314c85e8495a836f6",
+    "src-admin/src/tabs/Objects.tsx": "2b87a8a7e771e10e1cce49019c4be62578f10096eee5abd17d2685f5f41cc67c",
     "src-admin/src/tabs/Users.tsx": "45ed37e57b66f7e23eb465aef9ad9db55613b40bf44530ab81d6206806de102d",
     "src-admin/src/types.d.ts": "3cfac48af5f8416b55b89c0daca78499dbbd402c0b44cc661112b76953ba3344",
-    "src-admin/src/version.json": "7513428c66d4dc8f6c1910d07e4dd4f35ea2d0707816bb774a15f9137cd736b5",
+    "src-admin/src/version.json": "13b5e66c3cd1fe6ee1f5f2cf0c4f921660dea2013644d05822ded200018dd14a",
     "src/i18n/de.json": "85d4ecfedf15d78984922b05377063b808ae8c5a75944af323e72a2c3a483d50",
     "src/i18n/en.json": "6a0156a1b026903821d395ef2ceef845e90531f323a218f97f5abefaabb46a23",
     "src/i18n/es.json": "54369f8044dfa222779849d2f158eb100188a43816d6c42a64575122cb528a30",
@@ -1351,18 +1351,18 @@
     "src/lib/translations.ts": "8fdb51d81c3f98e17e0231f6773381886eb1c68068a3f53dd5e32bf6b58f9d16",
     "src/lib/utils.ts": "5398da6c6a660c4300e2679aa5e001e05297d684cc39bdfab091375768169f30",
     "src/lib/web.ts": "8eae6cc8dc6eb42bc7be5498f91e4064f35564355d7538cfa4d791e7b323ca5e",
-    "src/main.ts": "202cb15def5968cc96a7aabec7cc273c2c0eb9d9fcfc294bb6517dee5ffc9546",
+    "src/main.ts": "e9eb8013a229d9616be923850075e8cb5475bde32c882008721225ed37a85a8c",
     "src/types.d.ts": "12117a644a45cb0b551555184126563e80bf909726aa378c7d72327a30c61054",
     "tasks.mts": "84a396f8581e7e3ca499a1c4ce01d22ea29f81700520f804b48a95fb54d72408",
     "tools/nexowatt-account-management-selftest.cjs": "fb3f2f132407707a0f3b960c74b4b1f3861db499783508b2d7d42b31a2729d94",
-    "tools/nexowatt-account-password-flow-selftest.cjs": "8794de7a6743f83e9fbf22c71c3c0434211b4a6944068c6ecd57a6f119bedc4a",
+    "tools/nexowatt-account-password-flow-selftest.cjs": "4ee01c749391cc562223abd134191464d80077d795e54378b893c6d351fcd981",
     "tools/nexowatt-apply-ems-overview.cjs": "520d84ce95b3e99f1f559728799f1d412d84e30c441283aa42fd188b17fd242e",
     "tools/nexowatt-assistant-separation-selftest.cjs": "f7cd60b831e6e19f6c2381ac0996807001dcc3247dbe7dcc30d010498b5e82c3",
     "tools/nexowatt-auto-update-placement-selftest.cjs": "f9fb5e1b2065a70660bffdc62829210a2388259e4c0f32c77acf7ecfa1606110",
     "tools/nexowatt-auto-update-selftest.cjs": "1c7500ca3f0264658aa778758dc14d10353dc3857ef7c9803591654cba9b13d5",
     "tools/nexowatt-backend-runtime-selftest.cjs": "22eaeef2fe80c71af7e86db66e049612faf6285b47c69d9d446e2d1231d2c21f",
     "tools/nexowatt-branding-selftest.cjs": "3aa00be3716fb5349c45ef761ddab639c51381a265ec086ddda45ecee89d39d5",
-    "tools/nexowatt-clean-legacy-runtime.cjs": "ae9727e772dd7edc7d1979636cc7ba0beea43f9306b35b7dcbca816df8eb869e",
+    "tools/nexowatt-clean-legacy-runtime.cjs": "a413e9b72c5d1aefc626950dfed68254789b3ea807eeea75cd06c304c9a557ab",
     "tools/nexowatt-datapoint-interaction-selftest.cjs": "3931d59d8a116c791096a5d1f5b36ab4c343b7ba8587f59ac4d46fadb24efa1c",
     "tools/nexowatt-datapoint-selftest.cjs": "357db8a875fb24fd0050c9bd9dbba17d3f330b67a1b50ba72f8d9fc5fe7fb0c5",
     "tools/nexowatt-default-port-selftest.cjs": "0e555a1e6cd8e05c7df7fcc482964310f86feb6ad4aa88e98a2e487975688411",
@@ -1375,15 +1375,15 @@
     "tools/nexowatt-generate-eos-admin-repo-entry.cjs": "a8b55d6001b0ed6d97221448b194748945f2e8382cdaf0b11ea91c63fb517139",
     "tools/nexowatt-generate-repo-entry.cjs": "4e98acc7db74546bd942cfa36d57015673c6f1514758494753e7339068f7eb68",
     "tools/nexowatt-import-integrity-selftest.cjs": "f46951126a237a6010c3c0949c25e2415ebe9af568d29411d10691951cb3ed87",
-    "tools/nexowatt-internal-reserve-selftest.cjs": "5d90e42b2f1d4aac1039fce14bf18a952e9c5665203e8caae112737c5dcd265e",
-    "tools/nexowatt-login-layout-selftest.cjs": "4d1aa1f58a8f117ab7485d883c75603df277043b838dcaa0de3143acb6d885ab",
+    "tools/nexowatt-internal-reserve-selftest.cjs": "f027a2272a4277d65167d68d4ca4428cd0c28a6c6c2b610eda575abd3f2bc90a",
+    "tools/nexowatt-login-layout-selftest.cjs": "7d4baae82f1d53fc14446b8ef80aaffa39b0b3529821599f4a6e2c27fbc7a7f2",
     "tools/nexowatt-manual-write-policy-selftest.cjs": "a41057610972d681120bf35e0321029facc08b098c79da9b131980f80bd3fdce",
-    "tools/nexowatt-merge-update-selftest.cjs": "26ae0f257c375598441bba70ca59aef93d522140df9f04c879c757b9446b5f1f",
-    "tools/nexowatt-modern-ui-selftest.cjs": "e0caf8244ff5e3431052f9cb5e2b59a64a50c92ca37ec51e286200e1ed37edc0",
+    "tools/nexowatt-merge-update-selftest.cjs": "66d250def2c372cceb0fda42b0dc756557d8cdcf268f73a2ff7c68de4522e36a",
+    "tools/nexowatt-modern-ui-selftest.cjs": "0145adc4b7d84e996f227dee02c09f767ab9a29bb2151041a50b88bb27a5b93a",
     "tools/nexowatt-module-popup-selftest.cjs": "31f02e8cf0bfd61d7769e1095c93887a34cfbbd76a9805ef4931cea6dff53ddf",
     "tools/nexowatt-native-shell-selftest.cjs": "13aabd3a19f0c0422bbc1c676718685b77c88a526167a7b511fa6c9ab2ac860c",
     "tools/nexowatt-password-write-selftest.cjs": "0f5cb8e7bd0d7b67f1d533f6a722429572199f05eda964634d2f0be367f46902",
-    "tools/nexowatt-patch-built-frontend.cjs": "fda302f382ae0d8ad021595b16438d861f2897e38f23ba548f16bf242a0aa636",
+    "tools/nexowatt-patch-built-frontend.cjs": "6d66dafa002c005ab441552d0703ce619629582bbf3cd4fa56bdaa10fe1c9beb",
     "tools/nexowatt-patch-repo.cjs": "14cd12c23cd85bc8eeca738d459b9ba8bab3fc5fb3eadc3c6ce4a636cd36e7a1",
     "tools/nexowatt-policy-selftest.cjs": "a7daeca13ea7f05a5b09ee1f52ab35db7d21c8395bcaf93e537a85fe87580146",
     "tools/nexowatt-prebuilt-release-selftest.cjs": "ed7d10788bcfee32d9fb9a93a5ade7b1a107a24026d7e6c4cb19cf99761f5401",
@@ -1391,19 +1391,20 @@
     "tools/nexowatt-publish-channel-selftest.cjs": "c4efd1104ebe471ce1dc63195f322cffe760af295bf60f13b9766491acd0280e",
     "tools/nexowatt-release-defaults-selftest.cjs": "3e3c96ca774200461978c546d1a937cbae18d7f11497ed84dda639c2358f6e16",
     "tools/nexowatt-repair-eos-admin-update.cjs": "f28c1999b0f75139e582770ad649d17d11f9e909ac49d13c31be5fa5b36253e3",
-    "tools/nexowatt-role-access-selftest.cjs": "5d88eaeac77ff1460f28caca68a197b4cd820fbc3cf5194ff3bff036d4b20814",
-    "tools/nexowatt-runtime-cleanup-selftest.cjs": "8c5a5aaf51290436ceef40f7c5a28e602a428558582ee54bb94d57ed70cc3662",
-    "tools/nexowatt-stability-check.cjs": "d9366597a16be83f41925f20983b8826663b6c9b925bca18ffa2dc24b0414c89",
+    "tools/nexowatt-role-access-selftest.cjs": "b855b69cb74a5124c9a5a22b811a5209f70f32979a776401897f7fe910f794e9",
+    "tools/nexowatt-role-security-selftest.cjs": "b5b21f3c80f69b03f9c95fb26e11b2706aac86534048ac7251a5275dfcbde6e2",
+    "tools/nexowatt-runtime-cleanup-selftest.cjs": "f317b09aa0c51ffe7e1b5eaf10c52c886804ec6e8084967cd88e4ebece6ecfb5",
+    "tools/nexowatt-stability-check.cjs": "087c74c3f050ebfe3b092cc74a4b99b6e66813d57b0d2065f92fbddcb9e2ed9e",
     "tools/nexowatt-stable-v7101-selftest.cjs": "817d09861ef29c52a67f64ec5b8f4ad4654ce7e6486eded786bb16f3c773eaf8",
     "tools/nexowatt-stable-v7102-selftest.cjs": "75baab5f8069569ad4896e5018f3c5ccbbda2c2297aca5c5146bce94f9cf795d",
-    "tools/nexowatt-stable-v7103-selftest.cjs": "166d4bfc8c1e9ecad5e04dbcf8174cad4bd6d22eebe373376d7d888a77b31662",
+    "tools/nexowatt-stable-v7103-selftest.cjs": "80491789e636375c21e22335de08c8b4892c056e3fb703f1d5368e81105074b0",
     "tools/nexowatt-stable-v94-selftest.cjs": "5226881b3ad8918c67921ffb37716490f053ec88e7c0f24827a5eda7c75d4019",
     "tools/nexowatt-stable-v95-selftest.cjs": "0b15fcd329eb2994e64c407ab04eaafab7c38c4688136c197bf9601e1c35ee07",
     "tools/nexowatt-stable-v97-selftest.cjs": "4f50ad6e53b8de7eb045d56657cccd846883eacd8a877d51240d78153ba53d80",
     "tools/nexowatt-sync-release-version.cjs": "2478d714533ece21a275071ef6e5467f73c2fa33d0a63d76f408dc048a86c6f6",
-    "tools/nexowatt-ui-overview-runtime-selftest.cjs": "838a8f44f4ba322424e35ebbb01e4a55bb9cc90b8625033086969114744386b4",
+    "tools/nexowatt-ui-overview-runtime-selftest.cjs": "83255e5d3c9a548013f6e9a74706644d15d98450d0bfa2eb3da83c740d8618ea",
     "tools/nexowatt-update-selftest.cjs": "c38c454135f98de683de8fa15fc4b9032063823f0f55fcfc8b675f551fd342f5",
-    "tools/nexowatt-validate-package.cjs": "da7388459745d6eedebee5ed9c4821e89c75ea8850f59eeb0fb744621fc202e3",
+    "tools/nexowatt-validate-package.cjs": "4995d6db92d59ba4cdb1ed6481304deae348f644064e86fbf81384405e36b851",
     "tools/nexowatt-value-column-selftest.cjs": "29d0a9bbea05a87dcf8ee09c86cc81acb6c59e1e34801890768f5e342083871a",
     "tools/nexowatt-version-sync-selftest.cjs": "65d7c8634b6d5581f337365e13a1a9432c7d47dbf5aebc237886730c32ba5e94",
     "tsconfig.build.json": "d3a31263975a13de77b97af9ff246d89931f3abb594047be2739cf11378b97f5",

package/PUBLISH_STABLE_V7.10.5.md

@@ -0,0 +1,8 @@
+# NPM publication 7.10.5
+
+1. Use a freshly extracted repository ZIP.
+2. Run `npm publish --dry-run`.
+3. Confirm version `7.10.5`, complete `build/` runtime and all active `adminWww/assets/*-v84.js` files.
+4. Publish with `npm publish` only after the dry run succeeds.
+
+No `npm install`, `npm ci`, `tsc` or `tsx` is required for the sealed prebuilt release.

package/README.md

@@ -13,9 +13,9 @@ Standard-Port:          8081
 
 Damit überschreibt der Adapter den offiziellen `admin`-Adapter nicht mehr. Die alte ioBroker-Admin-Oberfläche kann parallel vorhanden bleiben, während NexoWatt-Systeme über `eos-admin.0` die EOS-Oberfläche nutzen.
 
-## Aktueller Stable-Verkaufskandidat 7.10.3
+## Aktueller Stable-Verkaufskandidat 7.10.4
 
-Version 7.10.3 übernimmt den validierten und absturzfreien Stand 7.10.2. Die Einstellung **Automatische Adapter-Updates** liegt jetzt ausschließlich in den **Systemeinstellungen** hinter dem Schraubenschlüssel. Auf Übersicht, Module und allen anderen Hauptseiten wird die Karte nicht mehr angezeigt. Die restart-sichere Updateverwaltung, der verzögerte Repository-Abgleich und die vollständige Backend-Paketprüfung bleiben unverändert.
+Version 7.10.4 übernimmt den validierten und absturzfreien Stand 7.10.2. Die Einstellung **Automatische Adapter-Updates** liegt jetzt ausschließlich in den **Systemeinstellungen** hinter dem Schraubenschlüssel. Auf Übersicht, Module und allen anderen Hauptseiten wird die Karte nicht mehr angezeigt. Die restart-sichere Updateverwaltung, der verzögerte Repository-Abgleich und die vollständige Backend-Paketprüfung bleiben unverändert.
 
 Verwaltete Installateur- und Endkundenkonten verwenden das Startpasswort `nexowatt`. Nach der ersten Anmeldung beziehungsweise nach einem Reset muss unmittelbar ein persönliches Passwort vergeben werden. Der Reset und die persönliche Passwortvergabe schreiben das reale ioBroker-Benutzerkennwort; EOS-Metadaten werden davon getrennt aktualisiert.
 
@@ -33,7 +33,7 @@ Minimaler Repository-Eintrag:
 {
   "eos-admin": {
     "name": "eos-admin",
-    "version": "7.10.3",
+    "version": "7.10.4",
     "title": "NexoWatt EOS Admin",
     "desc": {
       "de": "NexoWatt EOS Administrationsoberfläche als eigenständiger Adapter.",
@@ -141,7 +141,7 @@ npm publish --dry-run --tag latest
 npm publish --tag latest
 ```
 
-Die Version muss vor jedem erneuten Publish erhöht werden. Für 7.10.3 wird direkt aus der vollständig geprüften Repository-ZIP veröffentlicht; `npm publish` benötigt dabei weiterhin weder `tsc` noch `tsx`.
+Die Version muss vor jedem erneuten Publish erhöht werden. Für 7.10.4 wird direkt aus der vollständig geprüften Repository-ZIP veröffentlicht; `npm publish` benötigt dabei weiterhin weder `tsc` noch `tsx`.
 
 ## Lizenz
 

package/README_STABILITY_V7.10.5.md

@@ -0,0 +1,5 @@
+# NexoWatt EOS Admin 7.10.5 – stability and RBAC baseline
+
+This release retains the validated 7.10.2–7.10.4 crash, package and update-placement fixes. Role decisions now come exclusively from the authenticated `/nexowatt/security/context` response. The removed heuristic must never be restored.
+
+Administrator is an unconditional full-rights path. End User datapoints are read-only in both frontend and backend. Menu edits are persisted in an adapter state and must never write `system.config`.

package/RELEASE_ACCEPTANCE_V7.10.5.md

@@ -0,0 +1,11 @@
+# Release Acceptance 7.10.5
+
+- [ ] Admin can write every normally writable datapoint.
+- [ ] Admin can enable and disable expert mode repeatedly.
+- [ ] Admin sees ioBroker Admin and XTerm overview cards.
+- [ ] Installer and End User never see expert mode, ioBroker Admin or XTerm.
+- [ ] App Center, License, Simulation and account administration are unavailable to Installer/End User.
+- [ ] End User sees Datapoints but cannot write, edit, create or delete.
+- [ ] Pencil navigation edits do not restart EOS Admin.
+- [ ] Backup navigation follows the enabled state of the backup instance.
+- [ ] `npm publish --dry-run` succeeds from a fresh extraction.

package/RELEASE_NOTES_V7.10.5.md

@@ -0,0 +1,11 @@
+# Release Notes 7.10.5
+
+Version 7.10.5 is the administrator-rights and RBAC correction for NexoWatt EOS Admin.
+
+- Restores unrestricted administrator datapoint writes and reversible expert mode.
+- Removes the legacy DOM-text role classifier that could misclassify `system.user.admin`.
+- Keeps ioBroker Admin and XTerm visible for administrators only.
+- Exposes Datapoints to End Users as read-only and denies End User state writes in the backend.
+- Blocks App Center, License, Simulation and normal account administration for Installer/End User.
+- Stores navigation visibility/order in `eos-admin.0.info.uiTabsVisible` instead of `system.config`, avoiding adapter restarts.
+- Shows backup navigation only for enabled backup instances.

package/SECURITY_ROLE_MATRIX_V7.10.5.md

@@ -0,0 +1,12 @@
+# NexoWatt EOS role matrix 7.10.5
+
+| Capability | Admin | Installer | End User |
+|---|---:|---:|---:|
+| Datapoints read | Yes | Yes | Yes |
+| Datapoints write/edit | Yes | Yes | No |
+| Expert mode | Yes | No | No |
+| ioBroker Admin / XTerm | Yes | No | No |
+| App Center / License / Simulation | Yes | No | No |
+| Users, groups, passwords | Yes | No | No |
+| Smart Home structure | Yes | Yes | Yes |
+| Navigation layout editing | Yes | No | No |