npm - iobroker.eos-admin - Versions diffs - 7.9.23 → 7.9.25 - Mend

iobroker.eos-admin 7.9.23 → 7.9.25

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (18) hide show

package/README.md +20 -1
package/admin/jsonConfig.json5 +143 -0
package/adminWww/assets/Adapters-B5_jQ7DE.js +1 -1
package/adminWww/assets/Instances-YdaGnS5a.js +1 -1
package/adminWww/css/eos-branding.css +81 -0
package/adminWww/index.html +3 -2
package/adminWww/js/eos-branding.js +221 -1
package/adminWww/js/eos-security-ui.js +212 -0
package/build/lib/testPassword.js.map +1 -1
package/build/lib/web.js +196 -18
package/build/lib/web.js.map +1 -1
package/build/main.js +332 -1
package/build/main.js.map +1 -1
package/io-package.json +46 -10
package/package.json +1 -1
package/tools/nexowatt-generate-eos-admin-repo-entry.cjs +1 -1
package/tools/nexowatt-generate-repo-entry.cjs +12 -23
package/tools/nexowatt-patch-repo.cjs +14 -22

package/adminWww/css/eos-branding.css CHANGED Viewed

@@ -2203,3 +2203,84 @@ html.eos-app .eos-hidden-logout * {
 .eos-hidden-nexowatt-repo-warning {
     display: none !important;
 }
+/* NexoWatt EOS security visibility */
+.eos-hidden-legacy-admin {
+    display: none !important;
+}
+.eos-hide-legacy-admin-active [data-id="admin"],
+.eos-hide-legacy-admin-active [data-id="admin.0"],
+.eos-hide-legacy-admin-active [data-name="admin"] {
+    display: none !important;
+}
+/* v25: role-aware EOS security UI guard */
+html.eos-security-nonadmin .eos-hidden-legacy-admin {
+    display: none !important;
+}
+html.eos-security-nonadmin .eos-protected-adapter-row .eos-protected-delete-control,
+html.eos-security-nonadmin .eos-protected-delete-control {
+    opacity: 0.28 !important;
+    pointer-events: none !important;
+    filter: grayscale(1) !important;
+}
+html.eos-security-nonadmin .eos-protected-delete-dialog .eos-protected-delete-control {
+    display: none !important;
+}
+html.eos-security-nonadmin .eos-security-admin-only-field {
+    display: none !important;
+}
+.eos-security-restricted-note {
+    margin: 10px 0 18px !important;
+    padding: 14px 16px !important;
+    border-radius: 16px !important;
+    border: 1px solid rgba(45, 255, 182, 0.26) !important;
+    background: rgba(4, 18, 28, 0.78) !important;
+    color: rgba(232, 255, 248, 0.95) !important;
+    box-shadow: 0 0 22px rgba(0, 229, 168, 0.13) !important;
+    display: flex !important;
+    flex-direction: column !important;
+    gap: 4px !important;
+}
+.eos-security-restricted-note strong {
+    color: #53ffd0 !important;
+    font-weight: 800 !important;
+}
+.eos-security-restricted-note span {
+    color: rgba(219, 246, 240, 0.78) !important;
+    font-size: 0.9rem !important;
+}
+/* NexoWatt EOS v25 security visibility guard */
+.eos-security-hidden,
+.eos-security-hidden-delete {
+    display: none !important;
+}
+.eos-security-protected-adapter {
+    position: relative;
+}
+.eos-security-protected-adapter::after {
+    content: 'EOS geschützt';
+    position: absolute;
+    right: 10px;
+    top: 10px;
+    z-index: 2;
+    font-size: 10px;
+    letter-spacing: .06em;
+    text-transform: uppercase;
+    padding: 3px 8px;
+    border-radius: 999px;
+    color: rgba(225, 255, 246, .88);
+    background: rgba(5, 22, 28, .72);
+    border: 1px solid rgba(55, 230, 180, .22);
+    pointer-events: none;
+}

package/adminWww/index.html CHANGED Viewed

@@ -31,7 +31,7 @@
             rel="stylesheet"
             href="css/leaflet.css"
         />
-        <link rel="stylesheet" href="./css/eos-branding.css?v=23" />
+        <link rel="stylesheet" href="./css/eos-branding.css?v=25" />
         <link
             rel="manifest"
             href="manifest.json"
@@ -154,7 +154,8 @@
       <script type="module" crossorigin src="./assets/index-CQZugZ1z.js"></script>
       <link rel="modulepreload" crossorigin href="./assets/preload-helper-BDBacUwf.js">
       <link rel="modulepreload" crossorigin href="./assets/iobroker_admin__mf_v__runtimeInit__mf_v__-g2X2zhAf.js">
-            <script defer src="./js/eos-branding.js?v=23"></script>
+            <script defer src="./js/eos-branding.js?v=25"></script>
+            <script defer src="./js/eos-security-ui.js?v=25"></script>
     </head>
     <body>
         <noscript>You need to enable JavaScript to run this app.</noscript>

package/adminWww/js/eos-branding.js CHANGED Viewed

@@ -1,7 +1,7 @@
 (() => {
     'use strict';
-    window.NEXOWATT_EOS_UI_VERSION = 'v23-official-nexowatt-repo-warning-fix';
+    window.NEXOWATT_EOS_UI_VERSION = 'v25-admin-visibility-acl-guard';
     const BRAND = 'NexoWatt EOS';
     const EOS_MEANING = 'Energy Operation System';
@@ -64,6 +64,14 @@
         scopePatchScheduled: false,
         pendingScopes: new Set(),
         lastFullPatch: 0,
+        securityPolicy: {
+            loaded: false,
+            isAdmin: false,
+            hideLegacyAdminForNonAdmins: true,
+            restrictProtectedAdapterControls: true,
+            protectedAdapters: ['eos-admin', 'backitup'],
+        },
+        securityFetchStarted: false,
     };
     const safe = fn => {
@@ -163,6 +171,214 @@
         };
     };
+    const normalizeIdentifier = value => String(value || '')
+        .toLowerCase()
+        .normalize('NFD')
+        .replace(/[\u0300-\u036f]/g, '')
+        .replace(/^iobroker\./, '')
+        .replace(/^system\.adapter\./, '')
+        .replace(/\.\d+$/, '')
+        .replace(/[^a-z0-9_.-]+/g, ' ')
+        .trim();
+    const adapterPattern = adapter => {
+        const escaped = String(adapter || '').replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+        return new RegExp(`(?:^|[^a-z0-9_-])${escaped}(?:$|[^a-z0-9_-])`, 'i');
+    };
+    const textOfElement = el => {
+        if (!el) return '';
+        const attrs = ['data-adapter-name', 'data-adapter', 'data-id', 'id', 'title', 'aria-label', 'alt', 'href', 'src'];
+        const values = [el.textContent || ''];
+        attrs.forEach(attr => {
+            if (el.getAttribute && el.hasAttribute(attr)) values.push(el.getAttribute(attr) || '');
+        });
+        return values.join(' ');
+    };
+    const securityEndpointUrls = () => [
+        new URL('nexowatt/security/context', ASSET_BASE).href,
+        new URL('nexowatt/security/session', ASSET_BASE).href,
+        new URL('eos/security/status', ASSET_BASE).href,
+    ];
+    const normalizeSecurityPolicy = policy => {
+        const protectedAdapters = new Set(['eos-admin', 'backitup']);
+        (Array.isArray(policy?.protectedAdapters) ? policy.protectedAdapters : []).forEach(item => {
+            const adapter = typeof item === 'string' ? normalizeIdentifier(item) : normalizeIdentifier(item?.adapter || item?.name);
+            if (adapter) protectedAdapters.add(adapter);
+        });
+        const isAdmin = !!(policy?.isAdmin || policy?.isAdminGroup || policy?.isEosAdminGroup || policy?.isAdministrator);
+        return {
+            loaded: true,
+            user: policy?.user || null,
+            groups: Array.isArray(policy?.groups) ? policy.groups : [],
+            isAdmin,
+            hideLegacyAdminForNonAdmins: policy?.hideLegacyAdminForNonAdmins !== false && policy?.hideLegacyAdminFromNonAdmins !== false,
+            restrictProtectedAdapterControls: policy?.restrictProtectedAdapterControls !== false,
+            protectedAdapters: [...protectedAdapters].sort(),
+        };
+    };
+    const applySecurityClasses = () => {
+        const policy = state.securityPolicy;
+        document.documentElement.classList.toggle('eos-security-loaded', !!policy.loaded);
+        document.documentElement.classList.toggle('eos-security-admin', !!policy.isAdmin);
+        document.documentElement.classList.toggle('eos-security-nonadmin', policy.loaded && !policy.isAdmin);
+    };
+    const fetchSecurityPolicy = async () => {
+        if (state.securityFetchStarted) return;
+        state.securityFetchStarted = true;
+        for (const url of securityEndpointUrls()) {
+            try {
+                const response = await fetch(url, { credentials: 'same-origin', cache: 'no-store' });
+                if (!response.ok) continue;
+                const json = await response.json();
+                if (!json || json.error) continue;
+                state.securityPolicy = normalizeSecurityPolicy(json);
+                applySecurityClasses();
+                scheduleFullPatch(0);
+                return;
+            } catch (e) {
+                // Security endpoint may be unavailable during login or old cache. Fallback below.
+            }
+        }
+        state.securityPolicy = normalizeSecurityPolicy({ isAdmin: false, protectedAdapters: ['eos-admin', 'backitup'] });
+        applySecurityClasses();
+        scheduleFullPatch(0);
+    };
+    const isAdminUser = () => !!state.securityPolicy?.isAdmin;
+    const isLegacyAdminContainer = el => {
+        const text = textOfElement(el);
+        if (/\badmin\.0\b/i.test(text) || /\bsystem\.adapter\.admin\.0\b/i.test(text)) return true;
+        const candidates = Array.from(el.querySelectorAll ? el.querySelectorAll('*') : []);
+        candidates.push(el);
+        return candidates.some(node => {
+            const value = textOfElement(node).trim();
+            return /^admin$/i.test(value) || /^iobroker\.admin$/i.test(value) || /^system\.adapter\.admin$/i.test(value);
+        });
+    };
+    const containerMentionsAdapter = (container, adapter) => {
+        if (!container || !adapter) return false;
+        const normalized = normalizeIdentifier(adapter);
+        if (!normalized) return false;
+        if (normalized === 'admin') return isLegacyAdminContainer(container);
+        const pattern = adapterPattern(normalized);
+        if (pattern.test(textOfElement(container))) return true;
+        return Array.from(container.querySelectorAll ? container.querySelectorAll('[title],[aria-label],[data-adapter-name],[data-adapter],[data-id]') : [])
+            .some(el => pattern.test(textOfElement(el)));
+    };
+    const getSecurityContainers = () => Array.from(document.querySelectorAll([
+        '#app-paper .MuiCard-root',
+        '#app-paper tr.MuiTableRow-root',
+        '#app-paper tr',
+        '#app-paper .MuiAccordion-root',
+        '#app-paper [role="row"]',
+        '#app-paper [role="treeitem"]',
+        '#app-paper .MuiDataGrid-row',
+        '#app-paper .MuiTreeItem-root',
+        '#app-paper .MuiFormControlLabel-root',
+        '#app-paper .MuiListItem-root',
+        '#app-paper .MuiListItemButton-root',
+    ].join(','))).filter(el => !el.closest('.MuiDialog-paper'));
+    const isDeleteControl = el => {
+        const text = normalize(el.textContent || el.getAttribute?.('title') || el.getAttribute?.('aria-label') || '');
+        const title = normalize(el.getAttribute?.('title') || el.closest?.('[title]')?.getAttribute('title') || '');
+        const svg = el.querySelector?.('svg[data-testid*="Delete"], svg[data-testid*="Remove"], svg[data-testid*="Clear"]');
+        return !!svg || /\b(delete|remove|uninstall|del|loschen|entfernen|deinstallieren)\b/.test(`${text} ${title}`);
+    };
+    const lockDeleteControls = container => {
+        Array.from(container.querySelectorAll('button, [role="button"], a')).forEach(control => {
+            if (!isDeleteControl(control)) return;
+            control.classList.add('eos-protected-delete-control');
+            control.setAttribute('aria-disabled', 'true');
+            control.setAttribute('title', 'Nur Administratoren dürfen geschützte EOS-Systemmodule löschen');
+            if ('disabled' in control) control.disabled = true;
+            control.addEventListener('click', event => {
+                event.preventDefault();
+                event.stopImmediatePropagation();
+            }, true);
+        });
+    };
+    const protectDeleteDialogs = () => {
+        if (isAdminUser() || state.securityPolicy.restrictProtectedAdapterControls === false) return;
+        const protectedAdapters = state.securityPolicy.protectedAdapters || [];
+        Array.from(document.querySelectorAll('.MuiDialog-paper, [role="dialog"]')).forEach(dialog => {
+            const text = textOfElement(dialog);
+            if (!/(delete|remove|loschen|entfernen|deinstallieren|del\s+)/i.test(text)) return;
+            const protectedHit = protectedAdapters.some(adapter => containerMentionsAdapter(dialog, adapter));
+            if (!protectedHit) return;
+            dialog.classList.add('eos-protected-delete-dialog');
+            Array.from(dialog.querySelectorAll('button')).forEach(button => {
+                const label = normalize(button.textContent || button.getAttribute('aria-label') || '');
+                if (/^(ok|ja|yes|delete|remove|loschen|entfernen|deinstallieren)$/.test(label)) {
+                    button.disabled = true;
+                    button.classList.add('eos-protected-delete-control');
+                }
+            });
+        });
+    };
+    const hideSecuritySettingsForNonAdmin = () => {
+        if (isAdminUser()) return;
+        Array.from(document.querySelectorAll('.MuiDialog-paper, [role="dialog"]')).forEach(dialog => {
+            const dialogText = textOfElement(dialog);
+            if (!/(eos security|nexowatt security|legacy admin|alter admin|protected adapters|geschutzte adapter|eos admin groups)/i.test(dialogText)) return;
+            dialog.classList.add('eos-security-settings-restricted');
+            const needles = /(eos security|nexowatt security|legacy admin|alter admin|protected adapters|geschutzte adapter|eos admin groups|lock legacy admin|hide legacy admin|restrict protected adapter)/i;
+            Array.from(dialog.querySelectorAll('label, legend, h2, h3, h4, .MuiTypography-root, .MuiFormLabel-root')).forEach(label => {
+                if (!needles.test(label.textContent || '')) return;
+                const row = label.closest('.MuiGrid2-root, .MuiGrid-root, .MuiFormControl-root, .MuiBox-root, .MuiPaper-root') || label.parentElement;
+                if (row && row !== dialog) row.classList.add('eos-security-admin-only-field');
+            });
+            if (!dialog.querySelector('.eos-security-restricted-note')) {
+                const note = document.createElement('div');
+                note.className = 'eos-security-restricted-note';
+                note.innerHTML = '<strong>EOS Systemschutz aktiv</strong><span>Diese Sicherheitseinstellungen sind nur für Administratoren sichtbar und änderbar.</span>';
+                const content = dialog.querySelector('.MuiDialogContent-root') || dialog;
+                content.insertBefore(note, content.firstElementChild || null);
+            }
+        });
+    };
+    const applySecurityUiGuard = () => safe(() => {
+        const policy = state.securityPolicy;
+        applySecurityClasses();
+        if (!policy.loaded) return;
+        if (isAdminUser()) {
+            document.querySelectorAll('.eos-hidden-legacy-admin, .eos-protected-adapter-row').forEach(el => {
+                el.classList.remove('eos-hidden-legacy-admin', 'eos-protected-adapter-row');
+                el.removeAttribute('aria-hidden');
+            });
+            return;
+        }
+        const containers = getSecurityContainers();
+        containers.forEach(container => {
+            if (policy.hideLegacyAdminForNonAdmins !== false && isLegacyAdminContainer(container)) {
+                container.classList.add('eos-hidden-legacy-admin');
+                container.setAttribute('aria-hidden', 'true');
+                return;
+            }
+            if (policy.restrictProtectedAdapterControls !== false) {
+                const protectedHit = (policy.protectedAdapters || []).some(adapter => adapter !== 'admin' && containerMentionsAdapter(container, adapter));
+                if (protectedHit) {
+                    container.classList.add('eos-protected-adapter-row');
+                    lockDeleteControls(container);
+                }
+            }
+        });
+        protectDeleteDialogs();
+        hideSecuritySettingsForNonAdmin();
+    });
     const isLoginView = () => safe(() => {
         const hasApp = !!document.getElementById('app-paper');
@@ -534,6 +750,7 @@
         ensureSettingsDialogClasses();
         hideNativeLogoutNav();
         hideOfficialNexoWattRepoWarning();
+        applySecurityUiGuard();
         patchTextNodes(document.body || document.documentElement);
         patchAttributes(document.body || document.documentElement);
     };
@@ -550,6 +767,7 @@
         ensureSettingsDialogClasses();
         hideNativeLogoutNav();
         hideOfficialNexoWattRepoWarning();
+        applySecurityUiGuard();
         for (const scope of scopes.slice(0, 80)) {
             if (!scope || !scope.isConnected) continue;
             patchTextNodes(scope);
@@ -605,11 +823,13 @@
     if (document.readyState === 'loading') {
         document.addEventListener('DOMContentLoaded', () => {
             fullPatch();
+            fetchSecurityPolicy();
             installObserver();
             [250, 1000, 2500, 5000].forEach(scheduleFullPatch);
         }, { once: true });
     } else {
         fullPatch();
+        fetchSecurityPolicy();
         installObserver();
         [250, 1000, 2500, 5000].forEach(scheduleFullPatch);
     }

package/adminWww/js/eos-security-ui.js ADDED Viewed

@@ -0,0 +1,212 @@
+(() => {
+    'use strict';
+    const VERSION = 'v25-security-visibility-guard';
+    const LEGACY_ADMIN = 'admin';
+    const LEGACY_ADMIN_INSTANCE = 'admin.0';
+    const SECURITY_URL = '/nexowatt/security/session';
+    const state = {
+        loaded: false,
+        policy: {
+            isAdmin: false,
+            isEosAdminGroup: false,
+            isAdministrator: false,
+            hideLegacyAdminFromNonAdmins: true,
+            restrictProtectedAdapterControls: true,
+            protectedAdapters: ['eos-admin'],
+        },
+        scheduled: false,
+        observer: null,
+    };
+    const normalize = value => String(value || '').replace(/\s+/g, ' ').trim();
+    const normalizeAdapter = value => {
+        let adapter = String(value || '').trim().toLowerCase();
+        adapter = adapter.replace(/^system\.adapter\./, '').replace(/^iobroker\./, '').replace(/^@nexowatt\/iobroker\./, '').replace(/^@nexowatt\//, '');
+        adapter = adapter.replace(/\.\d+$/, '');
+        return /^[a-z0-9_-]+$/.test(adapter) ? adapter : '';
+    };
+    const isAdminUser = () => !!(state.policy?.isAdmin || state.policy?.isEosAdminGroup || state.policy?.isAdministrator);
+    const protectedAdapters = () => new Set((state.policy?.protectedAdapters || []).map(normalizeAdapter).filter(Boolean));
+    const isLegacyAdminId = value => {
+        const text = String(value || '').toLowerCase();
+        return text === LEGACY_ADMIN || text === LEGACY_ADMIN_INSTANCE || text === 'system.adapter.admin' || text === 'system.adapter.admin.0';
+    };
+    const isProtectedAdapter = value => {
+        const adapter = normalizeAdapter(value);
+        return !!adapter && protectedAdapters().has(adapter);
+    };
+    window.NEXOWATT_EOS_SECURITY = {
+        version: VERSION,
+        getPolicy: () => state.policy,
+        isAdminUser,
+        isProtectedAdapter,
+        shouldBlockAdapterDelete(adapterName) {
+            if (isAdminUser()) return false;
+            const adapter = normalizeAdapter(adapterName);
+            return adapter === LEGACY_ADMIN || isProtectedAdapter(adapter);
+        },
+        shouldBlockInstanceDelete(instanceIdOrAdapter) {
+            if (isAdminUser()) return false;
+            const raw = String(instanceIdOrAdapter || '').replace(/^system\.adapter\./, '');
+            const adapter = normalizeAdapter(raw);
+            return adapter === LEGACY_ADMIN || isProtectedAdapter(adapter);
+        },
+    };
+    const closestPanel = el => {
+        if (!el || !el.closest) return null;
+        return el.closest('.MuiCard-root, .MuiPaper-root, [role="row"], tr, .MuiListItem-root, .MuiBox-root');
+    };
+    const markHidden = el => {
+        if (!el || el.classList?.contains('eos-security-keep-visible')) return;
+        el.classList.add('eos-security-hidden');
+        el.setAttribute('aria-hidden', 'true');
+        el.style.display = 'none';
+    };
+    const elementHasLegacyAdminIcon = el => {
+        if (!el?.querySelectorAll) return false;
+        return Array.from(el.querySelectorAll('img,[src]')).some(img => {
+            const src = String(img.getAttribute('src') || '').toLowerCase();
+            return /(?:^|\/)adapter\/admin\//.test(src) || /(?:^|\/)admin\/(?:admin\.(?:png|svg)|admin\.svg)/.test(src);
+        });
+    };
+    const elementTextMatchesLegacyAdmin = el => {
+        const text = normalize(el?.textContent || '').toLowerCase();
+        if (!text) return false;
+        if (text.includes('eos-admin') || text.includes('eos admin')) return false;
+        return /\badmin\.0\b/.test(text) || /system\.adapter\.admin(?:\.0)?\b/.test(text) || /\biobroker\.admin\b/.test(text);
+    };
+    const hideLegacyAdminPanels = () => {
+        if (!state.policy?.hideLegacyAdminFromNonAdmins || isAdminUser()) return;
+        const candidates = new Set();
+        document.querySelectorAll('img,[src]').forEach(img => {
+            if (elementHasLegacyAdminIcon(img.parentElement || img)) candidates.add(closestPanel(img) || img);
+        });
+        document.querySelectorAll('.MuiCard-root, .MuiPaper-root, [role="row"], tr, .MuiListItem-root').forEach(el => {
+            if (elementHasLegacyAdminIcon(el) || elementTextMatchesLegacyAdmin(el)) candidates.add(el);
+        });
+        candidates.forEach(el => {
+            const text = normalize(el.textContent || '').toLowerCase();
+            if (text.includes('eos-admin') || text.includes('eos admin')) return;
+            markHidden(el);
+        });
+    };
+    const hideProtectedDeleteControls = () => {
+        if (!state.policy?.restrictProtectedAdapterControls || isAdminUser()) return;
+        const protectedSet = protectedAdapters();
+        if (!protectedSet.size) return;
+        document.querySelectorAll('.MuiCard-root, .MuiPaper-root, [role="row"], tr, .MuiListItem-root').forEach(panel => {
+            let adapter = '';
+            const icon = panel.querySelector('img[src*="/adapter/"], img[src*="adapter/"]');
+            const src = icon ? String(icon.getAttribute('src') || '') : '';
+            const match = src.match(/adapter\/([^\/]+)\//i);
+            if (match) adapter = normalizeAdapter(match[1]);
+            const text = normalize(panel.textContent || '').toLowerCase();
+            if (!adapter) {
+                for (const protectedName of protectedSet) {
+                    if (new RegExp(`\\b${protectedName.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}(?:\\.\\d+)?\\b`, 'i').test(text)) {
+                        adapter = protectedName;
+                        break;
+                    }
+                }
+            }
+            if (!adapter || !protectedSet.has(adapter)) return;
+            panel.classList.add('eos-security-protected-adapter');
+            panel.querySelectorAll('button,[role="button"],a').forEach(button => {
+                const label = normalize(`${button.textContent || ''} ${button.getAttribute('title') || ''} ${button.getAttribute('aria-label') || ''}`).toLowerCase();
+                if (/löschen|delete|remove|deinstall|uninstall/.test(label)) {
+                    button.classList.add('eos-security-hidden-delete');
+                    button.setAttribute('disabled', 'disabled');
+                    button.setAttribute('aria-disabled', 'true');
+                    button.style.display = 'none';
+                }
+            });
+        });
+        document.querySelectorAll('[role="menuitem"], .MuiMenuItem-root').forEach(item => {
+            const text = normalize(item.textContent || '').toLowerCase();
+            if (/löschen|delete|remove|deinstall|uninstall/.test(text)) {
+                // Context menus cannot always be mapped back to the originating card. For protected NexoWatt systems,
+                // deletion through pop-up menus is blocked by the command guard and visually hidden for non-admin users.
+                item.classList.add('eos-security-hidden-delete');
+                item.style.display = 'none';
+            }
+        });
+    };
+    const applyPolicyToDom = () => {
+        document.documentElement.classList.toggle('eos-security-admin-user', isAdminUser());
+        document.documentElement.classList.toggle('eos-security-non-admin-user', !isAdminUser());
+        hideLegacyAdminPanels();
+        hideProtectedDeleteControls();
+    };
+    const scheduleApply = () => {
+        if (state.scheduled) return;
+        state.scheduled = true;
+        const run = () => {
+            state.scheduled = false;
+            applyPolicyToDom();
+        };
+        if ('requestIdleCallback' in window) window.requestIdleCallback(run, { timeout: 600 });
+        else window.requestAnimationFrame(run);
+    };
+    const loadPolicy = async () => {
+        try {
+            const response = await fetch(SECURITY_URL, { credentials: 'same-origin', cache: 'no-store' });
+            const policy = await response.json();
+            state.policy = { ...state.policy, ...policy };
+            state.loaded = true;
+        } catch (e) {
+            state.loaded = false;
+            state.policy = { ...state.policy, isAdmin: false, isEosAdminGroup: false, isAdministrator: false };
+            console.warn('[NexoWatt EOS] Cannot read security policy, using safe non-admin UI mode:', e);
+        }
+        scheduleApply();
+    };
+    const installObserver = () => {
+        if (state.observer) return;
+        state.observer = new MutationObserver(() => scheduleApply());
+        state.observer.observe(document.documentElement, { childList: true, subtree: true });
+    };
+    document.addEventListener('click', event => {
+        const target = event.target?.closest?.('button,[role="button"],a,[role="menuitem"],.MuiMenuItem-root');
+        if (!target || isAdminUser()) return;
+        const label = normalize(`${target.textContent || ''} ${target.getAttribute?.('title') || ''} ${target.getAttribute?.('aria-label') || ''}`).toLowerCase();
+        if (/löschen|delete|remove|deinstall|uninstall/.test(label)) {
+            target.classList.add('eos-security-hidden-delete');
+            target.style.display = 'none';
+        }
+    }, true);
+    if (document.readyState === 'loading') {
+        document.addEventListener('DOMContentLoaded', () => {
+            loadPolicy();
+            installObserver();
+            [300, 1000, 2500, 5000].forEach(ms => window.setTimeout(scheduleApply, ms));
+        }, { once: true });
+    } else {
+        loadPolicy();
+        installObserver();
+        [300, 1000, 2500, 5000].forEach(ms => window.setTimeout(scheduleApply, ms));
+    }
+    window.addEventListener('hashchange', () => {
+        loadPolicy();
+        scheduleApply();
+    });
+})();

package/build/lib/testPassword.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"testPassword.js","sourceRoot":"./src/","sources":["lib/testPassword.ts"],"names":[],"mappings":";;AAAA,iDAAgD;AAChD,qDAA6E;AAC7E,6CAAuC;AAEvC,IAAI,UAAU,GAAG,KAAK,CAAC;AACvB,kDAAkD;AAClD,~~wEAAwE~~;~~AACxE~~,MAAM,aAAa,GAAG,IAAI,sBAAQ,CAAC;IAC/B,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;QACnC,IAAI,UAAU,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC5C,CAAC;QACD,QAAQ,EAAE,CAAC;IACf,CAAC;CACJ,CAAC,CAAC;AAEH,mEAAmE;AACnE,IAAA,wCAAuB,GAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;IACnC,IAAI,KAAK,EAAE,CAAC;QACR,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnE,qBAAqB;QACrB,MAAM,EAAE,GAAG,IAAA,+BAAe,EAAC;YACvB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,EAAE,CAAC,QAAQ,CAAC,2BAA2B,KAAK,CAAC,KAAK,kBAAkB,EAAE,CAAC,QAAgB,EAAE,EAAE;YACvF,UAAU,GAAG,KAAK,CAAC;YACnB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;YACD,EAAE,CAAC,QAAQ,CAAC,4BAA4B,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,cAAsB,EAAE,EAAE;gBAChF,UAAU,GAAG,KAAK,CAAC;gBACnB,cAAc,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACtE,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;oBACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACpB,CAAC;gBACD,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,IAAA,iCAAgB,EAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;oBACvE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACrD,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YACH,UAAU,GAAG,IAAI,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,UAAU,GAAG,IAAI,CAAC;IACtB,CAAC;SAAM,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACL,CAAC,CAAC,CAAC"}
1	+ {"version":3,"file":"testPassword.js","sourceRoot":"./src/","sources":["lib/testPassword.ts"],"names":[],"mappings":";;AAAA,iDAAgD;AAChD,qDAA6E;AAC7E,6CAAuC;AAEvC,IAAI,UAAU,GAAG,KAAK,CAAC;AACvB,kDAAkD;AAClD,4EAA4E;AAC5E,MAAM,aAAa,GAAG,IAAI,sBAAQ,CAAC;IAC/B,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;QACnC,IAAI,UAAU,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC5C,CAAC;QACD,QAAQ,EAAE,CAAC;IACf,CAAC;CACJ,CAAC,CAAC;AAEH,mEAAmE;AACnE,IAAA,wCAAuB,GAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;IACnC,IAAI,KAAK,EAAE,CAAC;QACR,OAAO,CAAC,GAAG,CAAC,8BAA8B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnE,qBAAqB;QACrB,MAAM,EAAE,GAAG,IAAA,+BAAe,EAAC;YACvB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,aAAa;YACrB,QAAQ,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,EAAE,CAAC,QAAQ,CAAC,2BAA2B,KAAK,CAAC,KAAK,kBAAkB,EAAE,CAAC,QAAgB,EAAE,EAAE;YACvF,UAAU,GAAG,KAAK,CAAC;YACnB,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,CAAC;YACD,EAAE,CAAC,QAAQ,CAAC,4BAA4B,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,cAAsB,EAAE,EAAE;gBAChF,UAAU,GAAG,KAAK,CAAC;gBACnB,cAAc,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBACtE,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;oBAC9B,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;oBACzC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACpB,CAAC;gBACD,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,KAAK,IAAA,iCAAgB,EAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;oBACvE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACrD,CAAC,CAAC,CAAC;YACP,CAAC,CAAC,CAAC;YACH,UAAU,GAAG,IAAI,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,UAAU,GAAG,IAAI,CAAC;IACtB,CAAC;SAAM,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACL,CAAC,CAAC,CAAC"}