npm - iobroker.eos-admin - Versions diffs - 7.10.6 → 7.10.8 - Mend

iobroker.eos-admin 7.10.6 → 7.10.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (31) hide show

package/INSTALL_TEST_V7.10.7.md +9 -0
package/MERGE_UPDATE_README_V7.10.7.md +7 -0
package/NEXOWATT_EOS_BUILD_INFO.json +19 -19
package/NEXOWATT_EOS_PREBUILT_MANIFEST.json +26 -24
package/PUBLISH_STABLE_V7.10.7.md +9 -0
package/README_STABILITY_V7.10.7.md +7 -0
package/RELEASE_ACCEPTANCE_V7.10.7.md +12 -0
package/RELEASE_NOTES_V7.10.7.md +19 -0
package/{SECURITY_ROLE_MATRIX_V7.10.6.md → SECURITY_ROLE_MATRIX_V7.10.7.md} +4 -2
package/adminWww/css/nexowatt-native-shell.css +332 -0
package/adminWww/index.html +14 -14
package/adminWww/js/eos-role-bootstrap.js +4 -3
package/adminWww/js/eos-role-ui.js +34 -18
package/adminWww/js/nexowatt-native-shell.js +104 -2
package/adminWww/static/js/{nexowatt-stable-v7106.js → nexowatt-stable-v7108.js} +2 -2
package/build/lib/web.js +3 -0
package/io-package.json +10 -5
package/package.json +16 -12
package/tools/nexowatt-installer-ems-selftest.cjs +44 -0
package/tools/nexowatt-merge-update-selftest.cjs +1 -1
package/tools/nexowatt-role-security-selftest.cjs +19 -6
package/tools/nexowatt-stable-v7103-selftest.cjs +2 -2
package/tools/nexowatt-user-area-selftest.cjs +1 -1
package/tools/nexowatt-v7108-ui-foundation-selftest.cjs +64 -0
package/tools/nexowatt-validate-package.cjs +9 -7
package/INSTALL_TEST_V7.10.6.md +0 -8
package/MERGE_UPDATE_README_V7.10.6.md +0 -7
package/PUBLISH_STABLE_V7.10.6.md +0 -8
package/README_STABILITY_V7.10.6.md +0 -5
package/RELEASE_ACCEPTANCE_V7.10.6.md +0 -11
package/RELEASE_NOTES_V7.10.6.md +0 -14

package/adminWww/index.html CHANGED Viewed

@@ -8,7 +8,7 @@
         <meta http-equiv="Cache-Control" content="no-store, no-cache, must-revalidate" />
         <meta http-equiv="Pragma" content="no-cache" />
         <meta http-equiv="Expires" content="0" />
-          <script src="./js/eos-manual-write-policy.js?v=7106"></script>
+          <script src="./js/eos-manual-write-policy.js?v=7108"></script>
           <script type="module" src="./assets/hostInit-v84.js?v=84"></script>
         <meta charset="utf-8" />
@@ -36,8 +36,8 @@
             rel="stylesheet"
             href="css/leaflet.css"
         />
-        <link rel="stylesheet" href="./css/nexowatt-native-shell.css?v=7106" />
-        <link rel="stylesheet" href="./css/eos-ems-overview.css?v=7106" />
+        <link rel="stylesheet" href="./css/nexowatt-native-shell.css?v=7108" />
+        <link rel="stylesheet" href="./css/eos-ems-overview.css?v=7108" />
         <link rel="stylesheet" href="./css/eos-auto-update.css?v=7103" />
         <link
             rel="manifest"
@@ -160,22 +160,22 @@
         </script>
       <link rel="modulepreload" crossorigin href="./assets/preload-helper-BDBacUwf.js">
       <link rel="modulepreload" crossorigin href="./assets/iobroker_admin__mf_v__runtimeInit__mf_v__-g2X2zhAf.js">
-            <script defer src="./js/eos-role-bootstrap.js?v=7106" data-eos-entry="./assets/index-CQZugZ1z-v84.js?v=84"></script>
-            <script defer src="./js/eos-policy-client.js?v=7106"></script>
-            <script defer src="./js/eos-branding-sanitizer.js?v=7106"></script>
-            <script defer src="./js/nexowatt-native-shell.js?v=7106"></script>
-            <script defer src="./js/eos-native-security.js?v=7106"></script>
-            <script defer src="./js/eos-basic-settings.js?v=7106"></script>
-            <script defer src="./js/eos-role-ui.js?v=7106"></script>
-            <script defer src="./js/eos-ems-overview.js?v=7106"></script>
+            <script defer src="./js/eos-role-bootstrap.js?v=7108" data-eos-entry="./assets/index-CQZugZ1z-v84.js?v=84"></script>
+            <script defer src="./js/eos-policy-client.js?v=7108"></script>
+            <script defer src="./js/eos-branding-sanitizer.js?v=7108"></script>
+            <script defer src="./js/nexowatt-native-shell.js?v=7108"></script>
+            <script defer src="./js/eos-native-security.js?v=7108"></script>
+            <script defer src="./js/eos-basic-settings.js?v=7108"></script>
+            <script defer src="./js/eos-role-ui.js?v=7108"></script>
+            <script defer src="./js/eos-ems-overview.js?v=7108"></script>
             <script defer src="./js/eos-auto-update.js?v=7103"></script>
-            <script defer src="./js/eos-assistant.js?v=7106"></script>
+            <script defer src="./js/eos-assistant.js?v=7108"></script>
     </head>
     <body>
         <noscript>Für NexoWatt EOS muss JavaScript aktiviert sein.</noscript>
         <div id="root"></div>
-<script defer src="static/js/nexowatt-stable-login.js?v=7106"></script>
-<script defer src="static/js/nexowatt-stable-v7106.js?v=7106"></script>
+<script defer src="static/js/nexowatt-stable-login.js?v=7108"></script>
+<script defer src="static/js/nexowatt-stable-v7108.js?v=7108"></script>
 </body>
 </html>

package/adminWww/js/eos-role-bootstrap.js CHANGED Viewed

@@ -1,7 +1,7 @@
 (() => {
     'use strict';
-    const VERSION = 'v7106-admin-authoritative-rbac';
+    const VERSION = 'v7108-modern-core-surfaces-rbac';
     const script = document.currentScript || document.querySelector('script[src*="eos-role-bootstrap.js"]');
     const entry = script?.dataset?.eosEntry || '';
     let launched = false;
@@ -25,11 +25,12 @@
     const isCustomerBackupTab = tab => /^(?:tab-)?(?:nexowatt-backup|eos-backup|nexowatt-sicherung)(?:-|$)/.test(normalize(tab));
     const isReleasedEndUserTab = tab => /^(?:tab-)?(?:nexowatt-ui|nexowatt-cockpit|eos-cockpit|eos-dashboard|kunden-cockpit|endkunden-cockpit|lovelace|jarvis|vis|iqontrol|material)(?:-|$)/.test(normalize(tab));
     const isOfficialReserveTab = tab => /^(?:tab-)?(?:admin|backitup)(?:-\d+)?$/.test(normalize(tab));
+    const isGloballyHiddenTab = tab => normalize(tab) === 'tab-enums';
     const isInstallerDenied = tab => /(?:tab-users|tab-hosts|tab-files|tab-xterm|tab-xtrem|tab-system|users|hosts|files|console|terminal|security)/.test(normalize(tab)) || isOfficialReserveTab(tab);
-    const isAllowed = (role, route) => route !== 'easy' && (role === 'admin'
+    const isAllowed = (role, route) => route !== 'easy' && !isGloballyHiddenTab(route) && (role === 'admin'
         || (role === 'installer'
             ? route === 'tab-intro' || isCustomerBackupTab(route) || !isInstallerDenied(route)
-            : route === 'tab-intro' || route === 'tab-enums' || route === 'tab-objects' || isCustomerBackupTab(route) || isReleasedEndUserTab(route)));
+            : route === 'tab-intro' || route === 'tab-objects' || isCustomerBackupTab(route) || isReleasedEndUserTab(route)));
     const defaultTab = () => 'tab-intro';
     const currentRoute = () => {
         const hash = decodeURIComponent(window.location.hash || '').toLowerCase();

package/adminWww/js/eos-role-ui.js CHANGED Viewed

@@ -1,7 +1,7 @@
 (() => {
     'use strict';
-    const VERSION = 'v7106-admin-authoritative-rbac';
+    const VERSION = 'v7108-modern-core-surfaces-rbac';
     window.NEXOWATT_EOS_ROLE_UI_VERSION = VERSION;
     const state = {
@@ -45,6 +45,7 @@
         if (policy?.isInstaller || /installateur|installer|installation|inbetriebnahme|techniker|technician|integrator|partner/.test(raw)) return 'installer';
         return 'enduser';
     };
+    const isGloballyHiddenTab = tab => normalize(tab) === 'tab-enums';
     const isOfficialAdminTab = tab => /^tab-admin(?:-\d+)?$/.test(normalize(tab));
     const isOfficialBackupTab = tab => /^tab-backitup(?:-\d+)?$/.test(normalize(tab));
     const isOfficialReserveTab = tab => isOfficialAdminTab(tab) || isOfficialBackupTab(tab);
@@ -53,7 +54,7 @@
     const endUserDeniedByText = value => /(module|dienste|systemlogs|logs|zugange|rechte|benutzer|users|gruppen|groups|system hosts|system-hosts|hosts|dateien|files|konsole|console|terminal|xterm|adapter|instances?|instanzen|geraetesuche|discovery|systemschutz|security)/.test(normalize(value));
     const isEndUserTab = (tab, label = '') => {
         const clean = normalize(tab); const text = `${clean} ${normalize(label)}`;
-        if (clean === 'tab-intro' || clean === 'tab-enums' || clean === 'tab-objects' || isCustomerBackupTab(clean)) return true;
+        if (clean === 'tab-intro' || clean === 'tab-objects' || isCustomerBackupTab(clean)) return true;
         if (/^tab-(nexowatt-ui|nexowatt-cockpit|eos-cockpit|eos-dashboard|kunden-cockpit|endkunden-cockpit|lovelace|jarvis|vis|iqontrol|material)(?:-|$)/.test(clean)) return true;
         return !!clean && !endUserDeniedByText(text) && endUserAllowedByText(text);
     };
@@ -64,7 +65,7 @@
         return /(?:tab-users|tab-hosts|tab-files|tab-xterm|tab-xtrem|tab-system|users|benutzer|gruppen|groups|system-hosts|system hosts|hosts|dateien|files|konsole|console|terminal|xterm|systemschutz|security)/.test(text);
     };
     const isRouteAllowed = (role, route, label = '') => {
-        if (route === 'easy') return false;
+        if (route === 'easy' || isGloballyHiddenTab(route)) return false;
         if (role === 'admin') return true;
         if (isOfficialReserveTab(route)) return false;
         if (role === 'installer') return route === 'tab-intro' || (route !== 'tab-users' && !isInstallerDenied(route, label));
@@ -136,6 +137,8 @@
         return normalize(`${button?.getAttribute?.('aria-label') || ''} ${button?.getAttribute?.('title') || ''} ${testIds}`);
     };
     const isSystemSettingsButton = button => /buildicon|system settings|systemeinstellungen|systeeminstellingen/.test(toolbarButtonSignature(button));
+    const isHeaderSystemSettingsButton = button => button?.dataset?.eosSystemSettingsControl === '1'
+        && !!button.closest?.('.eos-top-toolbar,.MuiAppBar-root .MuiToolbar-root');
     const isExpertModeButton = button => button?.dataset?.eosExpertControl === '1' || /expert|experten/.test(toolbarButtonSignature(button));
     const markAdminOnlyToolbarControls = () => safe(() => {
         const toolbar = document.querySelector('.eos-top-toolbar,.MuiAppBar-root .MuiToolbar-root');
@@ -227,7 +230,6 @@
                 ['Dienste', 'Instanzen starten, stoppen und diagnostizieren', 'tab-instances', 'services'],
                 ['Module', 'Module installieren, aktualisieren und konfigurieren', 'tab-adapters', 'modules'],
                 ['Datenpunkte', 'Messwerte prüfen und freigegebene Werte schreiben', 'tab-objects', 'datapoints'],
-                ['Struktur', 'Räume und Funktionen für Smart Home zuordnen', 'tab-enums', 'structure'],
                 ['Geräte', 'Geräteintegration und Inbetriebnahme öffnen', 'tab-devicemanager', 'devices'],
                 ['Basis-Einstellungen', 'Standort, Sprache und Anlagenparameter', 'basic-settings', 'settings'],
                 ...(backupTab ? [['NexoWatt Sicherung', 'Sicherung und Wiederherstellung des EOS-Systems', backupTab, 'backup']] : []),
@@ -237,7 +239,6 @@
         return [
             ['EOS Cockpit', 'Energie, Laden und Gebäude bedienen', uiTab, 'eos'],
             ['Datenpunkte', 'Messwerte und Zustände ausschließlich lesen', 'tab-objects', 'datapoints'],
-            ['Smart Home', 'Räume, Funktionen und freigegebene Geräte zuordnen', 'tab-enums', 'structure'],
             ...(backupTab ? [['NexoWatt Sicherung', 'Eigene Sicherungen ausführen und wiederherstellen', backupTab, 'backup']] : []),
         ];
     };
@@ -483,12 +484,26 @@
     const privilegedFrameObservers = new WeakMap();
-    const privilegedActionPattern = /^(?:ems apps?(?: offnen| öffnen)?|app center|app-center|appcenter|simulation|simulator|lizenz|license)$/;
-    const isPrivilegedAction = element => {
+    const privilegedActionKind = element => {
         const signature = normalize(textOf(element));
         const href = normalize(element?.getAttribute?.('href') || element?.href || element?.getAttribute?.('data-href') || '');
-        return privilegedActionPattern.test(signature)
-            || /(?:^|[\/#?&_.-])(?:appcenter|app-center|simulation|simulator|license|lizenz)(?:$|[\/#?&=_.-])/.test(href);
+        if (/^(?:ems apps?(?: offnen| öffnen)?|app center|app-center|appcenter)$/.test(signature)
+            || /(?:^|[\/#?&_.-])(?:appcenter|app-center)(?:$|[\/#?&=_.-])/.test(href)) return 'ems';
+        if (/^(?:simulation|simulator)$/.test(signature)
+            || /(?:^|[\/#?&_.-])(?:simulation|simulator)(?:$|[\/#?&=_.-])/.test(href)) return 'simulation';
+        if (/^(?:lizenz|license)$/.test(signature)
+            || /(?:^|[\/#?&_.-])(?:license|lizenz)(?:$|[\/#?&=_.-])/.test(href)) return 'license';
+        return '';
+    };
+    const isPrivilegedAction = element => !!privilegedActionKind(element);
+    const canUsePrivilegedAction = element => {
+        const action = privilegedActionKind(element);
+        if (!action) return true;
+        if (action === 'ems') {
+            return state.role === 'admin'
+                || (state.role === 'installer' && state.policy?.capabilities?.emsAppCenter !== false);
+        }
+        return state.role === 'admin';
     };
     const setPrivilegedActionHidden = (element, hidden) => {
         if (!element) return;
@@ -507,19 +522,18 @@
     };
     const applyPrivilegedActionsInDocument = doc => safe(() => {
         if (!doc?.documentElement) return;
-        const admin = state.role === 'admin';
         doc.querySelectorAll('[data-eos-privileged-action-hidden="1"]').forEach(element => {
-            if (admin || !isPrivilegedAction(element)) setPrivilegedActionHidden(element, false);
+            if (!isPrivilegedAction(element) || canUsePrivilegedAction(element)) setPrivilegedActionHidden(element, false);
         });
         for (const element of doc.querySelectorAll('a,button,[role="button"],[role="tab"],.MuiButtonBase-root')) {
-            if (isPrivilegedAction(element)) setPrivilegedActionHidden(element, !admin);
+            if (isPrivilegedAction(element)) setPrivilegedActionHidden(element, !canUsePrivilegedAction(element));
         }
         if (!doc.documentElement.dataset.eosPrivilegedClickGuard) {
             doc.documentElement.dataset.eosPrivilegedClickGuard = '1';
             doc.addEventListener('click', event => {
-                if (state.role === 'admin' || state.role === 'unknown') return;
+                if (state.role === 'unknown') return;
                 const target = event.target?.closest?.('a,button,[role="button"],[role="tab"],.MuiButtonBase-root');
-                if (!target || !isPrivilegedAction(target)) return;
+                if (!target || !isPrivilegedAction(target) || canUsePrivilegedAction(target)) return;
                 event.preventDefault();
                 event.stopImmediatePropagation();
             }, true);
@@ -544,9 +558,9 @@
         });
     });
     const scrubInheritedUiAdminSession = () => safe(() => {
-        if (state.role === 'admin' || state.role === 'unknown') return;
+        if (state.role !== 'enduser') return;
         const user = String(state.policy?.user || state.policy?.userId || '').replace(/^system\.user\./, '') || state.role;
-        const key = `eosUiAdminSessionScrubbed:v7106:${user}:${state.role}`;
+        const key = `eosUiAdminSessionScrubbed:v7108:${user}:${state.role}`;
         if (sessionStorage.getItem(key) === '1') return;
         sessionStorage.setItem(key, '1');
         const frame = document.createElement('iframe');
@@ -676,7 +690,7 @@
         if (clickedButton && isExpertModeButton(clickedButton)) {
             event.preventDefault(); event.stopImmediatePropagation(); lockExpertMode(); return;
         }
-        if (clickedButton && isSystemSettingsButton(clickedButton)) {
+        if (clickedButton && isHeaderSystemSettingsButton(clickedButton)) {
             event.preventDefault(); event.stopImmediatePropagation();
             if (state.role === 'installer') window.NEXOWATT_EOS_BASIC_SETTINGS?.open?.();
             return;
@@ -688,7 +702,7 @@
         const target = event.target?.closest?.('[data-eos-admin-only-control="1"],[data-eos-system-settings-control="1"],[data-eos-role-tab],a[href*="#tab-"],a[href*="#/tab-"]');
         if (!target) return;
         if (target.matches('[data-eos-admin-only-control="1"]')) { event.preventDefault(); event.stopImmediatePropagation(); return; }
-        if (target.matches('[data-eos-system-settings-control="1"]') && state.role === 'installer') {
+        if (isHeaderSystemSettingsButton(target) && state.role === 'installer') {
             event.preventDefault(); event.stopImmediatePropagation(); window.NEXOWATT_EOS_BASIC_SETTINGS?.open?.(); return;
         }
         const roleTab = target.getAttribute('data-eos-role-tab');
@@ -709,6 +723,8 @@
         getRole: () => state.role,
         getPolicy: () => state.policy,
         isRouteAllowed,
+        isGloballyHiddenTab,
+        isHeaderSystemSettingsButton,
         defaultTab,
         isOfficialReserveTab,
         isCustomerBackupTab,

package/adminWww/js/nexowatt-native-shell.js CHANGED Viewed

@@ -1,7 +1,7 @@
 (() => {
     'use strict';
-    const VERSION = 'v7106-nexowatt-native-shell-native-overview';
+    const VERSION = 'v7108-nexowatt-native-shell-modern-core-surfaces';
     const previous = window.NEXOWATT_NATIVE_SHELL;
     if (previous?.version === VERSION) return;
     previous?.destroy?.();
@@ -25,7 +25,27 @@
     const safe = fn => {
         try { return fn(); } catch (_) { return undefined; }
     };
+    const escapeHtml = value => String(value ?? '').replace(/[&<>"']/g, match => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[match] || match));
+    const TECHNICAL_SURFACES = Object.freeze({
+        instances: {
+            eyebrow: 'EOS SYSTEMDIENSTE',
+            title: 'Dienste & Instanzen',
+            text: 'Laufzeit, Status, Ressourcen und Konfiguration aller aktiven EOS-Dienste auf einen Blick.',
+            icon: '<svg viewBox="0 0 24 24" aria-hidden="true"><rect x="4" y="4" width="16" height="6" rx="2"/><rect x="4" y="14" width="16" height="6" rx="2"/><path d="M8 7h.01M8 17h.01M12 7h5M12 17h5"/></svg>',
+        },
+        objects: {
+            eyebrow: 'EOS DATENEBENE',
+            title: 'Datenpunkte & Zustände',
+            text: 'Messwerte, Status und freigegebene Steuerwerte in einer klaren technischen Ansicht.',
+            icon: '<svg viewBox="0 0 24 24" aria-hidden="true"><circle cx="6" cy="12" r="2.5"/><circle cx="18" cy="6" r="2.5"/><circle cx="18" cy="18" r="2.5"/><path d="M8.3 10.9 15.7 7M8.3 13.1l7.4 3.9"/></svg>',
+        },
+        logs: {
+            eyebrow: 'EOS DIAGNOSE',
+            title: 'Systemlogs',
+            text: 'Live-Protokoll für Adapter, Dienste und Systemereignisse mit klarer Priorisierung.',
+            icon: '<svg viewBox="0 0 24 24" aria-hidden="true"><path d="M5 5h14M5 10h14M5 15h9M5 20h6"/><circle cx="18" cy="17" r="3"/><path d="m20.2 19.2 1.8 1.8"/></svg>',
+        },
+    });
     // Navigation labels and icons are rendered natively by Drawer.tsx.
     // This runtime only positions the shell and never rewrites React content.
@@ -177,6 +197,85 @@
             <div class="eos-overview-role" data-nexowatt-overview-role="${role}"><span class="eos-overview-status-dot"></span>${config.label}</div>`;
     };
+    const roleLabel = () => {
+        const role = String(window.NEXOWATT_EOS_ACCESS_ROLE || 'unknown').toLowerCase();
+        if (role === 'admin') return 'Admin / Service';
+        if (role === 'installer' || role === 'installateur') return 'Installateur';
+        return 'Endkunde';
+    };
+    const classifyTechnicalRows = (paper, surface) => {
+        if (!paper || !surface) return;
+        if (surface === 'instances') {
+            paper.querySelectorAll('.MuiAccordion-root,tbody tr,.MuiTableRow-root,[role="row"]').forEach(row => {
+                if (row.closest?.('.eos-technical-surface-header') || row.classList.contains('MuiTableHead-root')) return;
+                row.classList.add('eos-service-row');
+                const expanded = row.classList.contains('Mui-expanded') || !!row.querySelector?.('[aria-expanded="true"]');
+                row.classList.toggle('eos-service-row-expanded', expanded);
+            });
+            return;
+        }
+        if (surface === 'objects') {
+            paper.querySelectorAll('[role="row"],.MuiTableRow-root,.MuiDataGrid-row').forEach(row => {
+                if (row.closest?.('.eos-technical-surface-header')) return;
+                row.classList.add('eos-datapoint-row');
+            });
+            return;
+        }
+        if (surface === 'logs') {
+            paper.querySelectorAll('tbody tr,.MuiTableRow-root,[role="row"]').forEach(row => {
+                if (row.closest?.('.eos-technical-surface-header')) return;
+                const text = String(row.textContent || '').toLowerCase();
+                let level = 'info';
+                if (/\b(error|fatal|fehler|kritisch|critical)\b/.test(text)) level = 'error';
+                else if (/\b(warn|warning|warnung)\b/.test(text)) level = 'warn';
+                else if (/\b(debug|trace)\b/.test(text)) level = 'debug';
+                row.classList.remove('eos-log-row-error','eos-log-row-warn','eos-log-row-info','eos-log-row-debug');
+                row.classList.add('eos-log-row', `eos-log-row-${level}`);
+                row.dataset.eosLogLevel = level;
+            });
+        }
+    };
+    const ensureTechnicalSurface = () => {
+        const paper = document.getElementById('app-paper');
+        if (!paper || isLogin()) return;
+        const surface = routeKey(currentTab());
+        const config = TECHNICAL_SURFACES[surface];
+        const existing = document.getElementById('eos-technical-surface-header');
+        if (!config) {
+            existing?.remove();
+            paper.removeAttribute('data-eos-technical-surface');
+            return;
+        }
+        paper.setAttribute('data-eos-technical-surface', surface);
+        let header = existing;
+        if (!header) {
+            header = document.createElement('section');
+            header.id = 'eos-technical-surface-header';
+            header.className = 'eos-technical-surface-header';
+            header.setAttribute('aria-live', 'polite');
+            paper.insertBefore(header, paper.firstChild || null);
+        }
+        if (header.dataset.eosSurface !== surface || header.dataset.eosRole !== roleLabel()) {
+            header.dataset.eosSurface = surface;
+            header.dataset.eosRole = roleLabel();
+            header.innerHTML = `
+                <div class="eos-technical-surface-icon">${config.icon}</div>
+                <div class="eos-technical-surface-copy">
+                    <span>${escapeHtml(config.eyebrow)}</span>
+                    <h1>${escapeHtml(config.title)}</h1>
+                    <p>${escapeHtml(config.text)}</p>
+                </div>
+                <div class="eos-technical-surface-meta">
+                    <i aria-hidden="true"></i>
+                    <strong>${escapeHtml(roleLabel())}</strong>
+                    <small>${surface === 'logs' ? 'Live-Diagnose' : surface === 'instances' ? 'Betriebsbereit' : 'Zentrale Datenansicht'}</small>
+                </div>`;
+        }
+        classifyTechnicalRows(paper, surface);
+    };
     const apply = () => {
         if (destroyed) return;
         setShellClasses();
@@ -184,8 +283,10 @@
             ensureBrand();
             ensureNavigationContainer();
             ensureModernOverview();
+            ensureTechnicalSurface();
         } else {
             document.getElementById('eos-native-overview-hero')?.remove();
+            document.getElementById('eos-technical-surface-header')?.remove();
         }
     };
@@ -231,6 +332,7 @@
             unsubscribeDom = null;
             if (retryTimer) clearTimeout(retryTimer);
             retryTimer = 0;
+            document.getElementById('eos-technical-surface-header')?.remove();
         },
     };
 })();

package/adminWww/static/js/{nexowatt-stable-v7106.js → nexowatt-stable-v7108.js} RENAMED Viewed

@@ -1,6 +1,6 @@
 (() => {
     'use strict';
-    const VERSION = 'v7106-scroll-standard-password';
+    const VERSION = 'v7108-scroll-standard-password';
     const ensureScroll = () => {
         const root = document.documentElement;
         const paper = document.getElementById('app-paper');
@@ -23,5 +23,5 @@
     const schedule=()=>{if(scheduled)return;scheduled=true;requestAnimationFrame(()=>{scheduled=false;apply();});};
     const start=()=>{apply();new MutationObserver(schedule).observe(document.documentElement,{subtree:true,childList:true});window.addEventListener('hashchange',schedule);window.addEventListener('resize',schedule,{passive:true});};
     document.readyState==='loading'?document.addEventListener('DOMContentLoaded',start,{once:true}):start();
-    window.NEXOWATT_EOS_STABLE_V7101=Object.freeze({version:VERSION,refresh:apply,ensureScroll});
+    window.NEXOWATT_EOS_STABLE_V7108=Object.freeze({version:VERSION,refresh:apply,ensureScroll});
 })();

package/build/lib/web.js CHANGED Viewed

@@ -650,6 +650,9 @@ class Web {
             objectDiagnostics: technical,
             logDiagnostics: technical,
             basicSystemSettings: technical,
+            emsAppCenter: technical,
+            simulation: role === 'admin',
+            licenseAdministration: role === 'admin',
             fullSystemSettings: role === 'admin',
             expertMode: role === 'admin',
             userManagement: role === 'admin',

package/io-package.json CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "common": {
     "name": "eos-admin",
-    "version": "7.10.6",
+    "version": "7.10.8",
     "titleLang": {
       "en": "NexoWatt EOS Admin",
       "de": "NexoWatt EOS Admin",
@@ -18,6 +18,11 @@
     "connectionType": "local",
     "dataSource": "push",
     "news": {
+      "7.10.7": {
+        "de": "Stable 7.10.7 gibt dem Installateur den Zugriff auf „EMS Apps öffnen“ und das EMS App-Center frei. Simulation und Lizenzverwaltung bleiben ausschließlich dem Administrator vorbehalten. Endkundenbereich, Nur-Lese-Datenpunkte und Adminrechte bleiben unverändert.",
+        "en": "Stable 7.10.7 grants the Installer access to “Open EMS Apps” and the EMS App-Center. Simulation and license administration remain Administrator-only. End User read-only datapoints and all Administrator rights remain unchanged.",
+        "nl": "Stable 7.10.7 geeft de installateur toegang tot “EMS Apps openen” en het EMS App-Center. Simulatie en licentiebeheer blijven uitsluitend voor beheerders. Alleen-lezen datapunten voor eindgebruikers en alle beheerdersrechten blijven ongewijzigd."
+      },
       "7.10.6": {
         "de": "Stable 7.10.6 bereinigt ausschließlich den Endkundenbereich: Datenpunkte bleiben sichtbar und nur lesbar, Bearbeiten-/Löschen-/Einstellungsaktionen werden ausgeblendet, und die Systeminfokarte erhält Plattform, RAM, Node.js und NPM über einen authentifizierten Nur-Lese-Endpunkt. Die Administratoroberfläche und sämtliche Adminrechte bleiben unverändert.",
         "en": "Stable 7.10.6 cleans up the End User area only: datapoints stay visible and read-only, edit/delete/settings actions are hidden, and the system information card receives platform, RAM, Node.js and NPM through an authenticated read-only endpoint. The administrator UI and all Admin rights remain unchanged.",
@@ -359,7 +364,7 @@
     "icon": "admin.svg",
     "messagebox": true,
     "enabled": true,
-    "extIcon": "https://unpkg.com/iobroker.eos-admin@7.10.6/admin/admin.svg",
+    "extIcon": "https://unpkg.com/iobroker.eos-admin@7.10.8/admin/admin.svg",
     "keywords": [
       "NexoWatt",
       "EOS",
@@ -370,7 +375,7 @@
       "licensed"
     ],
     "compact": true,
-    "readme": "https://unpkg.com/iobroker.eos-admin@7.10.6/README.md",
+    "readme": "https://unpkg.com/iobroker.eos-admin@7.10.8/README.md",
     "authors": [
       "NexoWatt"
     ],
@@ -438,7 +443,7 @@
     "nondeletable": false,
     "allowAdapterUpdate": true,
     "allowAdapterDelete": false,
-    "meta": "https://unpkg.com/iobroker.eos-admin@7.10.6/io-package.json",
+    "meta": "https://unpkg.com/iobroker.eos-admin@7.10.8/io-package.json",
     "npmPackage": "iobroker.eos-admin",
     "packetName": "iobroker.eos-admin",
     "publisher": "NexoWatt"
@@ -1215,5 +1220,5 @@
       }
     }
   },
-  "version": "7.10.6"
+  "version": "7.10.8"
 }

package/package.json CHANGED Viewed

@@ -1,7 +1,7 @@
 {
   "name": "iobroker.eos-admin",
   "description": "NexoWatt EOS Admin – repaired stable baseline with restart-safe automatic updates, native account passwords and persistent cockpit scrolling.",
-  "version": "7.10.6",
+  "version": "7.10.8",
   "contributors": [
     "bluefox <dogafox@gmail.com>",
     "apollon77",
@@ -133,16 +133,18 @@
     "NEXOWATT_EOS_PREBUILT_MANIFEST.json",
     "tools/nexowatt-prebuilt-release-selftest.cjs",
     "tools/nexowatt-stable-v7103-selftest.cjs",
-    "README_STABILITY_V7.10.6.md",
-    "RELEASE_NOTES_V7.10.6.md",
-    "PUBLISH_STABLE_V7.10.6.md",
-    "INSTALL_TEST_V7.10.6.md",
-    "RELEASE_ACCEPTANCE_V7.10.6.md",
-    "MERGE_UPDATE_README_V7.10.6.md",
+    "README_STABILITY_V7.10.7.md",
+    "RELEASE_NOTES_V7.10.7.md",
+    "PUBLISH_STABLE_V7.10.7.md",
+    "INSTALL_TEST_V7.10.7.md",
+    "RELEASE_ACCEPTANCE_V7.10.7.md",
+    "MERGE_UPDATE_README_V7.10.7.md",
     "tools/nexowatt-auto-update-placement-selftest.cjs",
     "tools/nexowatt-role-security-selftest.cjs",
-    "SECURITY_ROLE_MATRIX_V7.10.6.md",
-    "tools/nexowatt-user-area-selftest.cjs"
+    "SECURITY_ROLE_MATRIX_V7.10.7.md",
+    "tools/nexowatt-user-area-selftest.cjs",
+    "tools/nexowatt-installer-ems-selftest.cjs",
+    "tools/nexowatt-v7108-ui-foundation-selftest.cjs"
   ],
   "scripts": {
     "npm": "npm i -f && cd src-admin && npm i -f",
@@ -177,7 +179,7 @@
     "nexowatt:repo-entry": "node tools/nexowatt-generate-repo-entry.cjs",
     "nexowatt:patch-repo": "node tools/nexowatt-patch-repo.cjs",
     "nexowatt:repair-update": "node tools/nexowatt-repair-eos-admin-update.cjs",
-    "check:eos-stability": "node tools/nexowatt-stability-check.cjs && node tools/nexowatt-esm-syntax-selftest.cjs && node tools/nexowatt-backend-runtime-selftest.cjs && node tools/nexowatt-prebuilt-release-selftest.cjs && node tools/nexowatt-import-integrity-selftest.cjs && node tools/nexowatt-entrypoint-smoke-selftest.cjs && node tools/nexowatt-frontend-graph-check.cjs && node tools/nexowatt-policy-selftest.cjs && node tools/nexowatt-publish-channel-selftest.cjs && node tools/nexowatt-release-defaults-selftest.cjs && node tools/nexowatt-role-access-selftest.cjs && node tools/nexowatt-internal-reserve-selftest.cjs && node tools/nexowatt-modern-ui-selftest.cjs && node tools/nexowatt-login-layout-selftest.cjs && node tools/nexowatt-branding-selftest.cjs && node tools/nexowatt-default-port-selftest.cjs && node tools/nexowatt-module-popup-selftest.cjs && node tools/nexowatt-datapoint-selftest.cjs && node tools/nexowatt-update-selftest.cjs && node tools/nexowatt-datapoint-interaction-selftest.cjs && node tools/nexowatt-manual-write-policy-selftest.cjs && node tools/nexowatt-value-column-selftest.cjs && node tools/nexowatt-native-shell-selftest.cjs && node tools/nexowatt-assistant-separation-selftest.cjs && node tools/nexowatt-runtime-cleanup-selftest.cjs && node tools/nexowatt-version-sync-selftest.cjs && node tools/nexowatt-merge-update-selftest.cjs && node tools/nexowatt-password-write-selftest.cjs && node tools/nexowatt-account-password-flow-selftest.cjs && npm run check:eos-stable-v7103 && node tools/nexowatt-ems-overview-selftest.cjs && node tools/nexowatt-ui-overview-runtime-selftest.cjs && node tools/nexowatt-auto-update-selftest.cjs && node tools/nexowatt-auto-update-placement-selftest.cjs && node tools/nexowatt-role-security-selftest.cjs && node tools/nexowatt-user-area-selftest.cjs",
+    "check:eos-stability": "node tools/nexowatt-stability-check.cjs && node tools/nexowatt-esm-syntax-selftest.cjs && node tools/nexowatt-backend-runtime-selftest.cjs && node tools/nexowatt-prebuilt-release-selftest.cjs && node tools/nexowatt-import-integrity-selftest.cjs && node tools/nexowatt-entrypoint-smoke-selftest.cjs && node tools/nexowatt-frontend-graph-check.cjs && node tools/nexowatt-policy-selftest.cjs && node tools/nexowatt-publish-channel-selftest.cjs && node tools/nexowatt-release-defaults-selftest.cjs && node tools/nexowatt-role-access-selftest.cjs && node tools/nexowatt-internal-reserve-selftest.cjs && node tools/nexowatt-modern-ui-selftest.cjs && node tools/nexowatt-login-layout-selftest.cjs && node tools/nexowatt-branding-selftest.cjs && node tools/nexowatt-default-port-selftest.cjs && node tools/nexowatt-module-popup-selftest.cjs && node tools/nexowatt-datapoint-selftest.cjs && node tools/nexowatt-update-selftest.cjs && node tools/nexowatt-datapoint-interaction-selftest.cjs && node tools/nexowatt-manual-write-policy-selftest.cjs && node tools/nexowatt-value-column-selftest.cjs && node tools/nexowatt-native-shell-selftest.cjs && node tools/nexowatt-assistant-separation-selftest.cjs && node tools/nexowatt-runtime-cleanup-selftest.cjs && node tools/nexowatt-version-sync-selftest.cjs && node tools/nexowatt-merge-update-selftest.cjs && node tools/nexowatt-password-write-selftest.cjs && node tools/nexowatt-account-password-flow-selftest.cjs && npm run check:eos-stable-v7103 && node tools/nexowatt-ems-overview-selftest.cjs && node tools/nexowatt-ui-overview-runtime-selftest.cjs && node tools/nexowatt-auto-update-selftest.cjs && node tools/nexowatt-auto-update-placement-selftest.cjs && node tools/nexowatt-role-security-selftest.cjs && node tools/nexowatt-user-area-selftest.cjs && node tools/nexowatt-installer-ems-selftest.cjs && node tools/nexowatt-v7108-ui-foundation-selftest.cjs",
     "nexowatt:patch-built-frontend": "node tools/nexowatt-patch-built-frontend.cjs",
     "clean:eos-runtime": "node tools/nexowatt-clean-legacy-runtime.cjs",
     "precheck:eos-package": "npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run clean:eos-runtime",
@@ -206,7 +208,9 @@
     "seal:eos-prebuilt-release": "node tools/nexowatt-prebuilt-release-selftest.cjs --write",
     "check:eos-stable-v7103": "node tools/nexowatt-stable-v7103-selftest.cjs",
     "test:eos-auto-update-placement": "node tools/nexowatt-auto-update-placement-selftest.cjs",
-    "check:eos-role-security": "node tools/nexowatt-role-security-selftest.cjs"
+    "check:eos-role-security": "node tools/nexowatt-role-security-selftest.cjs",
+    "test:eos-installer-ems": "node tools/nexowatt-installer-ems-selftest.cjs",
+    "check:eos-v7108-ui": "node tools/nexowatt-v7108-ui-foundation-selftest.cjs"
   },
   "author": "NexoWatt",
   "private": false,
@@ -217,7 +221,7 @@
   },
   "nexowattReleasePolicy": {
     "distTag": "latest",
-    "purpose": "accepted stable NexoWatt EOS End User read-only UI and system information correction 7.10.6"
+    "purpose": "stable NexoWatt EOS Admin 7.10.8 modern core surfaces and installer service controls"
   },
   "publisher": "NexoWatt"
 }

package/tools/nexowatt-installer-ems-selftest.cjs ADDED Viewed

@@ -0,0 +1,44 @@
+#!/usr/bin/env node
+'use strict';
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const root = path.resolve(__dirname, '..');
+const read = file => fs.readFileSync(path.join(root, file), 'utf8');
+const json = file => JSON.parse(read(file));
+const pkg = json('package.json');
+const sourceRole = read('src-admin/public/js/eos-role-ui.js');
+const runtimeRole = read('adminWww/js/eos-role-ui.js');
+const sourceWeb = read('src/lib/web.ts');
+const runtimeWeb = read('build/lib/web.js');
+assert.equal(pkg.version, '7.10.8', 'Installer EMS release must use npm version 7.10.8');
+assert.equal(runtimeRole, sourceRole, 'built and source role runtimes must be identical');
+for (const code of [sourceRole, runtimeRole]) {
+    assert.match(code, /const privilegedActionKind = element =>/, 'privileged action classifier missing');
+    assert.match(code, /return 'ems';/, 'EMS action classification missing');
+    assert.match(code, /return 'simulation';/, 'Simulation action classification missing');
+    assert.match(code, /return 'license';/, 'License action classification missing');
+    assert.match(code, /action === 'ems'/, 'EMS-specific access branch missing');
+    assert.match(
+        code,
+        /state\.role === 'installer' && state\.policy\?\.capabilities\?\.emsAppCenter !== false/,
+        'Installer is not allowed to open EMS App-Center',
+    );
+    assert.match(code, /return state\.role === 'admin';/, 'Simulation and License must remain Admin-only');
+    assert.match(code, /!canUsePrivilegedAction\(element\)/, 'UI visibility does not use the role-aware action permission');
+    assert.match(code, /\|\| canUsePrivilegedAction\(target\)\) return;/, 'click guard does not use the role-aware action permission');
+    assert.match(code, /if \(state\.role !== 'enduser'\) return;/, 'port 8188 session scrubbing must apply only to End User');
+}
+for (const code of [sourceWeb, runtimeWeb]) {
+    assert.match(code, /emsAppCenter: technical/, 'backend capability must grant EMS App-Center to Admin and Installer');
+    assert.match(code, /simulation: role === 'admin'/, 'Simulation capability must remain Admin-only');
+    assert.match(code, /licenseAdministration: role === 'admin'/, 'License capability must remain Admin-only');
+}
+console.log('[NexoWatt EOS installer EMS] OK (Installer may use EMS App-Center; Simulation/License remain Admin-only; End User remains blocked)');

package/tools/nexowatt-merge-update-selftest.cjs CHANGED Viewed

@@ -16,7 +16,7 @@ for (const file of [
     'MERGE_UPDATE.ps1',
     'MERGE_UPDATE.cmd',
     'MERGE_UPDATE.sh',
-    'MERGE_UPDATE_README_V7.10.6.md',
+    'MERGE_UPDATE_README_V7.10.7.md',
     'tools/nexowatt-apply-ems-overview.cjs',
     'tools/nexowatt-sync-release-version.cjs',
     'tools/nexowatt-version-sync-selftest.cjs',