iobroker.eos-admin 7.9.68 → 7.9.70

package/adminWww/remoteEntry-v70.js

@@ -0,0 +1,2 @@
+const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["./assets/emotion-react.browser.esm-DrKG52pD.js","./assets/iobroker_admin__loadShare__react__loadShare__-LM7uyL45.js","./assets/_commonjsHelpers-CE1G-McA.js","./assets/iobroker_admin__mf_v__runtimeInit__mf_v__-g2X2zhAf.js","./assets/emotion-cache.browser.esm-BgJfNZJN.js","./assets/extends-CF3RwP-h.js","./assets/emotion-use-insertion-effect-with-fallbacks.browser.esm-D9zECpgL.js","./assets/emotion-serialize.esm-Q4o_CgeF.js","./assets/emotion-styled.browser.esm-DOdpWCne.js","./assets/iobroker_admin__loadShare___mf_0_emotion_mf_1_react__loadShare__-BywLg1Xe.js","./assets/index-D2ymscJA-v70.js","./assets/createTheme-DFX8CY6F.js","./assets/blue-CagzI6CQ.js","./assets/sdk-C-e-e2gd.js","./assets/iobroker_admin__loadShare___mf_0_mui_mf_1_icons_mf_2_material__loadShare__-CJO5yP3h.js","./assets/Google-Cq8JZDSn.js","./assets/index-DcK0RDrH.js","./assets/pl-Dib-_u5L.js","./assets/iobroker_admin__loadShare__react_mf_2_dropzone__loadShare__-CwjnV48g.js","./assets/useTheme-CUNq4tF-.js","./assets/defaultTheme-Cx_JJUAa.js","./assets/useTheme-Bl-M1DYp.js","./assets/index-bCuipom1.js","./assets/iobroker_admin__loadShare___mf_0_iobroker_mf_1_adapter_mf_2_react_mf_2_v5__loadShare__-LFZoiUTt.js","./assets/iobroker_admin__loadShare___mf_0_iobroker_mf_1_json_mf_2_config__loadShare__-CpA7pnS5.js","./assets/index-mSK_krgD.js","./assets/index-8HslT92O.js","./assets/_commonjs-dynamic-modules-TDtrdbi3.js","./assets/___vite-browser-external_commonjs-proxy-DMh1aSo_.js","./assets/iobroker_admin__loadShare__react_mf_2_dom__loadShare__-CVeAXnkk.js","./assets/ext-language_tools-ylAoucDh.js","./assets/preload-helper-BDBacUwf.js","./assets/index-jy_3EbfW.js","./assets/DefaultPropsProvider-BiXBMQYQ.js","./assets/createSvgIcon-CfRgdNUH.js","./assets/index-8JYjTPhv.js","./assets/amber-D7aVlNg3.js","./assets/TextField-CqVU6uzA.js","./assets/assertThisInitialized-B0aQ9eG_.js","./assets/ThemeProvider-BOFFjWAF.js","./assets/index-uASdmaE6.js","./assets/index-Cqq5gIUF.js","./assets/setYear-3ufv5yRD.js","./assets/en-US-DBFJNIH6.js","./assets/isSameWeek-DzRXk46v.js","./assets/locale-CLe3aX4T.js","./assets/leaflet-src-B651YTWC.js","./assets/geosearch.module-BA4ww39P.js","./assets/iobroker_admin__loadShare__leaflet__loadShare__-CNUAG3AH.js","./assets/index-4wMOc304.js","./assets/index-C_anklzA.js","./assets/ace-DEUjyTIn.js","./assets/index-D2Em8S_O.js","./assets/index-CXZCHHB6.js","./assets/index-CkI9667U.js"])))=>i.map(i=>d[i]);
+import{i as m,a as p}from"./assets/iobroker_admin__mf_v__runtimeInit__mf_v__-g2X2zhAf.js";import s from"./assets/virtualExposes-BIHI7g3E.js";import{_ as a}from"./assets/preload-helper-BDBacUwf.js";const n={"@emotion/react":async()=>await a(()=>import("./assets/emotion-react.browser.esm-DrKG52pD.js"),__vite__mapDeps([0,1,2,3,4,5,6,7]),import.meta.url),"@emotion/styled":async()=>await a(()=>import("./assets/emotion-styled.browser.esm-DOdpWCne.js"),__vite__mapDeps([8,5,9,3,7,6,1,2]),import.meta.url),"@iobroker/adapter-react-v5":async()=>await a(()=>import("./assets/index-D2ymscJA-v70.js"),__vite__mapDeps([10,11,12,1,2,3,13,14,15,16,17,18,19,20,21,9]),import.meta.url),"@iobroker/dm-gui-components":async()=>await a(()=>import("./assets/index-bCuipom1.js"),__vite__mapDeps([22,1,2,3,14,23,24]),import.meta.url),"@iobroker/json-config":async()=>await a(()=>import("./assets/index-mSK_krgD.js"),__vite__mapDeps([25,1,2,3,26,27,28,14,23,29,12,15,16,30,18,31]),import.meta.url),"@mui/icons-material":async()=>await a(()=>import("./assets/index-jy_3EbfW.js"),__vite__mapDeps([32,33,2,3,7,9,1,34,11,12,20]),import.meta.url),"@mui/material":async()=>await a(()=>import("./assets/index-8JYjTPhv.js"),__vite__mapDeps([35,11,12,1,2,3,36,34,33,7,9,20,37,21,38,19,5,29,16,39,4]),import.meta.url),"@mui/x-date-pickers":async()=>await a(()=>import("./assets/index-uASdmaE6.js"),__vite__mapDeps([40,1,2,3,33,7,9,34,11,12,20,5,37,21,38,19,29,16]),import.meta.url),"date-fns":async()=>await a(()=>import("./assets/index-Cqq5gIUF.js"),__vite__mapDeps([41,42,43,44]),import.meta.url),"date-fns/locale":async()=>await a(()=>import("./assets/locale-CLe3aX4T.js"),__vite__mapDeps([45,43,44]),import.meta.url),leaflet:async()=>await a(()=>import("./assets/leaflet-src-B651YTWC.js").then(t=>t.l),__vite__mapDeps([46,2]),import.meta.url),"leaflet-geosearch":async()=>await a(()=>import("./assets/geosearch.module-BA4ww39P.js"),__vite__mapDeps([47,48,3]),import.meta.url),react:async()=>await a(()=>import("./assets/index-4wMOc304.js").then(t=>t.i),__vite__mapDeps([49,2]),import.meta.url),"react-ace":async()=>await a(()=>import("./assets/index-C_anklzA.js").then(t=>t.i),__vite__mapDeps([50,51,16,2,1,3]),import.meta.url),"react-dom":async()=>await a(()=>import("./assets/index-D2Em8S_O.js").then(t=>t.i),__vite__mapDeps([52,2,1,3]),import.meta.url),"react-dropzone":async()=>await a(()=>import("./assets/index-CXZCHHB6.js"),__vite__mapDeps([53,1,2,3,16]),import.meta.url),semver:async()=>await a(()=>import("./assets/index-CkI9667U.js").then(t=>t.i),__vite__mapDeps([54,2]),import.meta.url)},o={"@emotion/react":{name:"@emotion/react",version:"11.14.0",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o["@emotion/react"].loaded=!0;const{"@emotion/react":e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},"@emotion/styled":{name:"@emotion/styled",version:"11.14.1",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o["@emotion/styled"].loaded=!0;const{"@emotion/styled":e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},"@iobroker/adapter-react-v5":{name:"@iobroker/adapter-react-v5",version:"8.2.9",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o["@iobroker/adapter-react-v5"].loaded=!0;const{"@iobroker/adapter-react-v5":e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},"@iobroker/dm-gui-components":{name:"@iobroker/dm-gui-components",version:"9.1.0",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o["@iobroker/dm-gui-components"].loaded=!0;const{"@iobroker/dm-gui-components":e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},"@iobroker/json-config":{name:"@iobroker/json-config",version:"8.4.7",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o["@iobroker/json-config"].loaded=!0;const{"@iobroker/json-config":e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},"@mui/icons-material":{name:"@mui/icons-material",version:"6.5.0",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o["@mui/icons-material"].loaded=!0;const{"@mui/icons-material":e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},"@mui/material":{name:"@mui/material",version:"6.5.0",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o["@mui/material"].loaded=!0;const{"@mui/material":e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},"@mui/x-date-pickers":{name:"@mui/x-date-pickers",version:"7.29.4",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o["@mui/x-date-pickers"].loaded=!0;const{"@mui/x-date-pickers":e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},"date-fns":{name:"date-fns",version:"4.1.0",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o["date-fns"].loaded=!0;const{"date-fns":e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},"date-fns/locale":{name:"date-fns/locale",version:"4.1.0",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o["date-fns/locale"].loaded=!0;const{"date-fns/locale":e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},leaflet:{name:"leaflet",version:"1.9.4",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o.leaflet.loaded=!0;const{leaflet:e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},"leaflet-geosearch":{name:"leaflet-geosearch",version:"4.2.2",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o["leaflet-geosearch"].loaded=!0;const{"leaflet-geosearch":e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},react:{name:"react",version:"18.3.1",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o.react.loaded=!0;const{react:e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},"react-ace":{name:"react-ace",version:"13.0.0",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o["react-ace"].loaded=!0;const{"react-ace":e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},"react-dom":{name:"react-dom",version:"18.3.1",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o["react-dom"].loaded=!0;const{"react-dom":e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},"react-dropzone":{name:"react-dropzone",version:"15.0.0",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o["react-dropzone"].loaded=!0;const{"react-dropzone":e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}},semver:{name:"semver",version:"7.7.4",scope:["default"],loaded:!1,from:"iobroker_admin",async get(){o.semver.loaded=!0;const{semver:e}=n,r={...await e()};return Object.defineProperty(r,"__esModule",{value:!0,enumerable:!1}),function(){return r}},shareConfig:{singleton:!0,requiredVersion:"*"}}},f=[],u={},l="default",d="iobroker_admin";async function y(e={},t=[]){const r=m({name:d,remotes:f,shared:o,plugins:[],shareStrategy:"version-first"});var i=u[l];if(i||(i=u[l]={from:d}),!(t.indexOf(i)>=0)){t.push(i),r.initShareScopeMap("default",e);try{await Promise.all(await r.initializeSharing("default",{strategy:"version-first",from:"build",initScope:t}))}catch(c){console.error(c)}return p.initResolve(r),r}}function b(e){if(!(e in s))throw new Error(`Module ${e} does not exist in container.`);return s[e]().then(t=>()=>t)}export{b as get,y as init};

package/adminWww/remoteEntry.js

@@ -1 +1 @@
-export { get, init } from "./remoteEntry-v60.js";
+export * from "./remoteEntry-v70.js";

package/build/lib/web.js

@@ -895,23 +895,10 @@ class Web {
             const sendSecuritySession = (req, res) => {
                 void this.sendEosSecuritySession(req, res).catch(e => {
                     this.adapter.log.warn(`Cannot read EOS security session: ${e instanceof Error ? e.message : e}`);
-                    res.status(200).json({
-                        user: null,
-                        groups: [],
-                        groupNames: [],
-                        adminGroups: ['system.group.administrator'],
-                        installerGroups: this.getEosInstallerGroups(),
-                        endUserGroups: this.getEosEndUserGroups(),
-                        role: 'enduser',
-                        isAdministrator: false,
-                        isEosAdminGroup: false,
-                        isInstaller: false,
-                        isEndUser: true,
-                        isAdmin: false,
-                        hideLegacyAdminForNonAdmins: true,
-                        hideLegacyAdminFromNonAdmins: true,
-                        restrictProtectedAdapterControls: true,
-                        protectedAdapters: this.getEosProtectedAdapterNames(),
+                    res.status(503).json({
+                        error: 'EOS security context temporarily unavailable',
+                        transient: true,
+                        role: 'unknown',
                     });
                 });
             };
@@ -1141,6 +1128,21 @@ class Web {
                 this.server.app.get('/empty.html', (_req, res) => {
                     res.status(200).send('');
                 });
+                // Stability release: entrypoints and module-federation manifests must always
+                // revalidate. Hashed leaf assets remain cacheable through express.static.
+                this.server.app.use((req, res, next) => {
+                    const pathName = req.path || req.url.split('?')[0];
+                    if (pathName === '/'
+                        || pathName === '/index.html'
+                        || pathName === '/mf-manifest.json'
+                        || /^\/remoteEntry(?:-v\d+)?\.js$/.test(pathName)
+                        || /^\/assets\/(?:hostInit|index-CQZugZ1z)-[^/]+\.js$/.test(pathName)) {
+                        res.setHeader('Cache-Control', 'no-store, no-cache, must-revalidate, proxy-revalidate');
+                        res.setHeader('Pragma', 'no-cache');
+                        res.setHeader('Expires', '0');
+                    }
+                    next();
+                });
                 this.server.app.get('/index.html', async (_req, res) => {
                     this.indexHTML ||= await this.prepareIndex('/index.html');
                     res.header('Content-Type', 'text/html');

package/build/main.js

@@ -216,8 +216,11 @@ class Admin extends adapter_core_1.Adapter {
                 delete objects[id];
             }
         }
-        if (id === LEGACY_ADMIN_INSTANCE_ID || id === 'system.adapter.admin' || id.match(/^system\.adapter\./)) {
-            this.scheduleEosSecurityGuard(`object change: ${id}`);
+        if (id.startsWith('system.adapter.')) {
+            const { adapter } = this.parseAdapterObjectId(id);
+            if (this.getProtectedAdapterNames().includes(adapter)) {
+                this.scheduleEosSecurityGuard(`protected object change: ${id}`);
+            }
         }
         // TODO Build in some threshold of messages
         socket?.objectChange(id, obj);
@@ -769,9 +772,15 @@ class Admin extends adapter_core_1.Adapter {
         if (!obj) {
             return false;
         }
+        const native = (obj.native ||= {});
+        let changed = false;
+        if (native._nexowattEosAclManaged !== true) {
+            native._nexowattEosAclManaged = true;
+            native._nexowattEosAclPrevious = obj.acl ? JSON.stringify(obj.acl) : null;
+            changed = true;
+        }
         const targetAcl = this.getAdminOnlyAcl();
         const acl = (obj.acl ||= {});
-        let changed = false;
         if (acl.owner !== targetAcl.owner) {
             acl.owner = targetAcl.owner;
             changed = true;
@@ -789,14 +798,51 @@ class Admin extends adapter_core_1.Adapter {
         }
         return changed;
     }
+    async restoreObjectAclManagedByEos(id) {
+        const obj = await this.getForeignObjectAsync(id);
+        const native = obj?.native;
+        if (!obj || !native || native._nexowattEosAclManaged !== true) {
+            return false;
+        }
+        const targetAcl = this.getAdminOnlyAcl();
+        const currentAcl = obj.acl;
+        const stillManaged = !!currentAcl
+            && currentAcl.owner === targetAcl.owner
+            && currentAcl.ownerGroup === targetAcl.ownerGroup
+            && currentAcl.object === targetAcl.object;
+        const previous = native._nexowattEosAclPrevious;
+        if (stillManaged) {
+            if (typeof previous === 'string' && previous) {
+                try {
+                    obj.acl = JSON.parse(previous);
+                }
+                catch {
+                    delete obj.acl;
+                }
+            }
+            else {
+                delete obj.acl;
+            }
+        }
+        delete native._nexowattEosAclManaged;
+        delete native._nexowattEosAclPrevious;
+        await this.setForeignObjectAsync(id, obj);
+        return true;
+    }
     getLegacyAdminAclObjectIds() {
         return ['system.adapter.admin', LEGACY_ADMIN_INSTANCE_ID];
     }
     async ensureLegacyAdminVisibleOnlyToAdmins() {
+        let changed = false;
         if (!this.shouldHideLegacyAdminFromNonAdmins()) {
+            for (const id of this.getLegacyAdminAclObjectIds()) {
+                changed = (await this.restoreObjectAclManagedByEos(id)) || changed;
+            }
+            if (changed) {
+                this.log.info('EOS ACL guard restored legacy admin visibility because the restriction is disabled');
+            }
             return;
         }
-        let changed = false;
         for (const id of this.getLegacyAdminAclObjectIds()) {
             changed = (await this.ensureObjectAdminOnlyAcl(id)) || changed;
         }
@@ -1047,8 +1093,8 @@ class Admin extends adapter_core_1.Adapter {
             await this.ensureLegacyAdminLocked();
             await this.ensureLegacyAdminVisibleOnlyToAdmins();
             if (!this.eosDeleteLockRepairFinished) {
-                this.eosDeleteLockRepairFinished = true;
                 await this.repairStaleAdapterDeleteLocks();
+                this.eosDeleteLockRepairFinished = true;
             }
             if (this.config.eosProtectAdapterDeletion !== false) {
                 for (const adapter of this.getProtectedAdapterNames()) {
@@ -1064,12 +1110,15 @@ class Admin extends adapter_core_1.Adapter {
         }
     }
     startEosSecurityGuard() {
-        this.subscribeForeignObjects('system.adapter.*');
+        for (const adapter of this.getProtectedAdapterNames()) {
+            this.subscribeForeignObjects(`system.adapter.${adapter}`);
+            this.subscribeForeignObjects(`system.adapter.${adapter}.*`);
+        }
         void this.enforceEosSecurity('startup');
         if (!this.eosSecurityTimer) {
             this.eosSecurityTimer = setInterval(() => {
                 void this.enforceEosSecurity('periodic');
-            }, 30000);
+            }, 300000);
         }
     }
     async createUpdateInfo() {

package/io-package.json

@@ -1,7 +1,7 @@
 {
   "common": {
     "name": "eos-admin",
-    "version": "7.9.68",
+    "version": "7.9.70",
     "titleLang": {
       "en": "NexoWatt EOS Admin",
       "de": "NexoWatt EOS Admin",
@@ -222,6 +222,11 @@
         "pl": "Poprawka usuwania usług/modułów: skrypty DOM security nie przechwytują kliknięć kosza, stare blokady są naprawiane i chronione pozostają tylko adaptery rdzeniowe EOS.",
         "uk": "Виправлення видалення служб/модулів: DOM security більше не перехоплює кліки кошика, старі блокування виправляються, захищені лише основні адаптери EOS.",
         "zh-cn": "服务/模块删除硬修复：DOM security 脚本不再拦截垃圾桶点击，会修复旧删除锁，仅 EOS 核心适配器受保护。"
+      },
+      "7.9.70": {
+        "en": "Stability consolidation: one coherent frontend runtime, resilient role policy loading, reversible EOS ACL handling, native datapoint semantics and hardened update caching.",
+        "de": "Stabilitätskonsolidierung: eine einheitliche Frontend-Laufzeit, robuste Rollenabfrage, reversible EOS-ACLs, native Datenpunktlogik und abgesicherter Update-Cache.",
+        "nl": "Stabiliteitsconsolidatie: één consistente frontend-runtime, robuuste rolcontrole, herstelbare EOS-ACLs, native datapuntlogica en veiligere updatecache."
       }
     },
     "desc": {
@@ -259,7 +264,7 @@
     "icon": "admin.svg",
     "messagebox": true,
     "enabled": true,
-    "extIcon": "https://unpkg.com/iobroker.eos-admin@7.9.68/admin/admin.svg",
+    "extIcon": "https://unpkg.com/iobroker.eos-admin@7.9.70/admin/admin.svg",
     "keywords": [
       "NexoWatt",
       "EOS",
@@ -270,7 +275,7 @@
       "licensed"
     ],
     "compact": true,
-    "readme": "https://unpkg.com/iobroker.eos-admin@7.9.68/README.md",
+    "readme": "https://unpkg.com/iobroker.eos-admin@7.9.70/README.md",
     "authors": [
       "bluefox <bluefox@ccu.io>",
       "hobbyquaker <hq@ccu.io>"
@@ -339,7 +344,7 @@
     "nondeletable": false,
     "allowAdapterUpdate": true,
     "allowAdapterDelete": false,
-    "meta": "https://unpkg.com/iobroker.eos-admin@7.9.68/io-package.json",
+    "meta": "https://unpkg.com/iobroker.eos-admin@7.9.70/io-package.json",
     "npmPackage": "iobroker.eos-admin",
     "packetName": "iobroker.eos-admin"
   },
@@ -1018,5 +1023,5 @@
       }
     }
   },
-  "version": "7.9.68"
+  "version": "7.9.58"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "iobroker.eos-admin",
-  "description": "NexoWatt EOS Admin interface with reliable repository update mapping and technical log preservation.",
-  "version": "7.9.68",
+  "description": "NexoWatt EOS Admin consolidated stability release with a single coherent frontend runtime",
+  "version": "7.9.70",
   "contributors": [
     "bluefox <dogafox@gmail.com>",
     "apollon77",
@@ -34,7 +34,7 @@
     "@iobroker/ws-server": "^4.4.1",
     "ajv": "^8.20.0",
     "archiver": "^7.0.1",
-    "axios": "^1.18.0",
+    "axios": "^1.17.0",
     "body-parser": "^2.2.2",
     "compression": "^1.8.1",
     "cookie-parser": "^1.4.7",
@@ -114,7 +114,7 @@
     "test:integration": "mocha test/integration --exit && npm run test:gui && npm run test:rule && npm run test:unit",
     "test:rule": "mocha test/rule --exit",
     "test:gui": "mocha test/*.gui.js --exit",
-    "prepublishOnly": "npm run check:eos-package",
+    "prepublishOnly": "npm run check:eos-package && npm run check:eos-stability",
     "build": "npm run build:frontend && npm run build:backend",
     "build:backend": "tsc -p tsconfig.build.json && tsx tasks.mts --backend-i18n",
     "build:frontend": "tsx tasks.mts",
@@ -137,7 +137,8 @@
     "check:eos-package": "node tools/nexowatt-validate-package.cjs",
     "nexowatt:repo-entry": "node tools/nexowatt-generate-repo-entry.cjs",
     "nexowatt:patch-repo": "node tools/nexowatt-patch-repo.cjs",
-    "nexowatt:repair-update": "node tools/nexowatt-repair-eos-admin-update.cjs"
+    "nexowatt:repair-update": "node tools/nexowatt-repair-eos-admin-update.cjs",
+    "check:eos-stability": "node tools/nexowatt-stability-check.cjs && node tools/nexowatt-frontend-graph-check.cjs && node tools/nexowatt-policy-selftest.cjs"
   },
   "author": "NexoWatt",
   "private": false,

package/tools/nexowatt-validate-package.cjs

@@ -13,23 +13,11 @@ const exists = file => fs.existsSync(path.join(root, file));
 const pkg = readJson('package.json');
 const io = readJson('io-package.json');
 
-const srcPkg = readJson('src-admin/package.json');
-const srcLock = readJson('src-admin/package-lock.json');
-const srcVersion = readJson('src-admin/src/version.json');
-const buildInfo = readJson('NEXOWATT_EOS_BUILD_INFO.json');
-const cacheTag = String(pkg.version).split('.').pop();
-
 if (pkg.name !== 'iobroker.eos-admin') fail(`package.json name must be iobroker.eos-admin, got ${pkg.name}`);
 if (pkg.private !== false) fail('package.json private must be false for npm publishing');
 if (pkg.version !== io.common.version) fail(`package.json and io-package.json versions differ: ${pkg.version} vs ${io.common.version}`);
 if (io.common.name !== 'eos-admin') fail(`io-package common.name must be eos-admin, got ${io.common.name}`);
 
-if (srcPkg.version !== pkg.version) fail(`src-admin/package.json version differs: ${srcPkg.version} vs ${pkg.version}`);
-if (srcLock.version !== pkg.version || srcLock.packages?.['']?.version !== pkg.version) fail('src-admin/package-lock.json top-level version is stale');
-if (srcVersion.version !== pkg.version) fail(`src-admin/src/version.json version differs: ${srcVersion.version} vs ${pkg.version}`);
-if (buildInfo.version !== pkg.version) fail(`NEXOWATT_EOS_BUILD_INFO.json version differs: ${buildInfo.version} vs ${pkg.version}`);
-if (!String(buildInfo.uiVersion || '').startsWith(`v${cacheTag}-`)) fail(`build info uiVersion must start with v${cacheTag}-, got ${buildInfo.uiVersion}`);
-
 if (io.common.packetName !== 'iobroker.eos-admin') fail(`io-package common.packetName must be iobroker.eos-admin, got ${io.common.packetName}`);
 if (io.common.npmPackage !== 'iobroker.eos-admin') fail(`io-package common.npmPackage must be iobroker.eos-admin, got ${io.common.npmPackage}`);
 if (io.native.port !== 8091 && io.native.port !== 8081) fail(`unexpected default port ${io.native.port}`);
@@ -49,11 +37,7 @@ for (const [field, expected] of Object.entries({
 for (const file of [
   'adminWww/index.html',
   'adminWww/js/eos-branding.js',
-  'adminWww/js/eos-adapter-surface-cleanup.js',
   'adminWww/css/eos-branding.css',
-  'src-admin/public/js/eos-branding.js',
-  'src-admin/public/js/eos-adapter-surface-cleanup.js',
-  'src-admin/public/css/eos-branding.css',
   'adminWww/img/eos/nexowatt-192.png',
   'admin/admin.svg',
   'LICENSE',
@@ -68,40 +52,6 @@ const refs = [...index.matchAll(/(?:src|href)="\.\/([^"?#]+)(?:\?[^"#]*)?"/g)].m
 const missing = refs.filter(ref => !exists(path.join('adminWww', ref)));
 if (missing.length) fail(`adminWww/index.html references missing files:\n${missing.join('\n')}`);
 
-
-const adminIndex = fs.readFileSync(path.join(root, 'adminWww/index.html'), 'utf8');
-const sourceIndex = fs.readFileSync(path.join(root, 'src-admin/index.html'), 'utf8');
-if (!adminIndex.includes('no-cache, no-store, must-revalidate') || !sourceIndex.includes('no-cache, no-store, must-revalidate')) fail('index files must disable stale HTML caching');
-for (const asset of [
-  'eos-console-quiet.js', 'eos-branding.css', 'eos-branding.js',
-  'eos-adapter-surface-cleanup.js', 'eos-security-ui.js', 'eos-role-ui.js',
-  'eos-assistant.js', 'eos-objects-state-tools.js'
-]) {
-  const escaped = asset.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-  if (!new RegExp(`${escaped}\\?v=${cacheTag}(?:["'])`).test(adminIndex)) fail(`adminWww/index.html cache tag is stale for ${asset}`);
-  if (!new RegExp(`${escaped}\\?v=${cacheTag}(?:["'])`).test(sourceIndex)) fail(`src-admin/index.html cache tag is stale for ${asset}`);
-}
-for (const entry of ['hostInit-v61.js', 'index-CQZugZ1z-v68.js']) {
-  const escaped = entry.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-  if (!new RegExp(`${escaped}\\?v=${cacheTag}(?:["'])`).test(adminIndex)) fail(`adminWww/index.html entry cache tag is stale for ${entry}`);
-}
-
-for (const file of ['eos-branding.js', 'eos-adapter-surface-cleanup.js', 'eos-console-quiet.js', 'eos-security-ui.js', 'eos-role-ui.js', 'eos-assistant.js', 'eos-objects-state-tools.js']) {
-  const deployed = fs.readFileSync(path.join(root, 'adminWww/js', file));
-  const source = fs.readFileSync(path.join(root, 'src-admin/public/js', file));
-  if (!deployed.equals(source)) fail(`source/deployed script drift: ${file}`);
-}
-if (!fs.readFileSync(path.join(root, 'adminWww/css/eos-branding.css')).equals(fs.readFileSync(path.join(root, 'src-admin/public/css/eos-branding.css')))) {
-  fail('source/deployed eos-branding.css drift');
-}
-
-for (let version = 54; version <= 60; version += 1) {
-  for (const file of [`Objects-DPan0bzw-v${version}.js`, `index-D2ymscJA-v${version}.js`]) {
-    const stat = fs.statSync(path.join(root, 'adminWww/assets', file));
-    if (stat.size > 256) fail(`${file} must be a compatibility shim, got ${stat.size} bytes`);
-  }
-}
-
 const bootstrapFiles = fs.readdirSync(path.join(root, 'adminWww/assets')).filter(f => /^bootstrap-.*\.js$/.test(f));
 if (!bootstrapFiles.length) fail('missing bootstrap bundle');
 const bootstrap = bootstrapFiles.map(f => fs.readFileSync(path.join(root, 'adminWww/assets', f), 'utf8')).join('\n');
@@ -116,57 +66,13 @@ if (index.includes('eos-hard-logout.js')) fail('adminWww/index.html must not loa
 if (!branding.includes('isAdapterConfigSurface')) fail('eos-branding.js lacks native adapter config safe-mode detection');
 if (!branding.includes('Adapter UIs must remain 100% functional')) fail('eos-branding.js lacks native adapter config interaction guard');
 if (!branding.includes('v38: All native Admin dialogs') || !branding.includes('ensurePopupCompatibility')) fail('eos-branding.js lacks v38 popup compatibility guard');
-
-if (!branding.includes('eos-native-drawer-header-hidden') || !branding.includes("header.setAttribute('inert', '')")) fail('eos-branding.js lacks the native drawer-header guard');
-if (!branding.includes('removeStrayNativeDrawerHeaders') || !branding.includes('a[href=\"/#easy\"]')) fail('eos-branding.js lacks structural native drawer-header cleanup');
-if (!branding.includes('ensureStandaloneNavToggle')) fail('eos-branding.js lacks the independent EOS navigation toggle');
-const activeGraph = [
-  fs.readFileSync(path.join(root, 'adminWww/assets/index-CQZugZ1z-v68.js'), 'utf8'),
-  fs.readFileSync(path.join(root, 'adminWww/assets/bootstrap-COulQZax-v68.js'), 'utf8'),
-  fs.readFileSync(path.join(root, 'adminWww/remoteEntry-v61.js'), 'utf8'),
-].join('\n');
-if (/bootstrap-COulQZax-v61\.js|(?:AdapterUpdateDialog|Adapters|Config|CustomTab|DeviceManager|EasyMode|Enums|Fields|Files|Hosts|Instances|Intro|Logs|Objects|Users)-[^\"']+-v61\.js/.test(activeGraph)) fail('active v67 frontend graph still imports a v61 application runtime/route chunk');
-
-const drawerSource = fs.readFileSync(path.join(root, 'src-admin/src/components/Drawer.tsx'), 'utf8');
-const activeBootstrap = fs.readFileSync(path.join(root, 'adminWww/assets/bootstrap-COulQZax-v68.js'), 'utf8');
-const brandingCss = fs.readFileSync(path.join(root, 'adminWww/css/eos-branding.css'), 'utf8');
-if (!drawerSource.includes('if (!this.isSwipeable())') || !drawerSource.includes('return null;')) fail('Drawer.tsx still renders the native desktop drawer header');
-if (!activeBootstrap.includes('getHeader(){if(!this.isSwipeable())return null;')) fail('active bootstrap still renders the native desktop drawer header');
-if (!brandingCss.includes('a[href=\"/#easy\"]') || !brandingCss.includes('data-eos-native-drawer-header-hidden')) fail('branding CSS lacks structural native drawer-header fallback');
-
-const appSource = fs.readFileSync(path.join(root, 'src-admin/src/App.tsx'), 'utf8');
-if (!branding.includes('eos-primary-brand') || !branding.includes('toolbar.firstElementChild')) fail('branding lacks robust primary EOS brand insertion');
-if (!branding.includes('removeNativeTopLeftGhost') || !branding.includes('a[href=\"/#easy\"]')) fail('branding lacks exact native toolbar ghost removal');
-if (!brandingCss.includes('data-eos-primary-brand') || !brandingCss.includes('v7.9.68: exact native desktop toolbar ghost removal')) fail('branding CSS lacks primary-brand/exact-toolbar safeguards');
-if (!activeBootstrap.includes('getHeader(){if(!this.isSwipeable())return null;')) fail('fresh v68 bootstrap still renders desktop Drawer.getHeader()');
-if (!appSource.includes('{small && (') || !appSource.includes('{small &&\n                    this.state.drawerState')) fail('App.tsx still renders native desktop toolbar identity controls');
-if (!activeBootstrap.includes('children:[e&&jsxRuntimeExports.jsx(')) fail('v68 bootstrap still renders native desktop MenuIcon');
-if (!activeBootstrap.includes('this.renderLoggedUser(),e&&this.state.drawerState')) fail('v68 bootstrap still renders the native desktop compact identity block');
-if (!activeBootstrap.includes('const version$b=\"7.9.68\"')) fail('v68 bootstrap frontend version marker is stale');
-
-for (const file of [
-  'AdapterUpdateDialog-BMg84Hpf-v67.js', 'Adapters-B5_jQ7DE-v67.js', 'Config-hHK2UzGP-v67.js',
-  'CustomTab-B0wqoazH-v67.js', 'DeviceManager-BFmQeYQ1-v67.js', 'EasyMode-B1d9Vdc4-v67.js',
-  'Enums-DbWYxKOo-v67.js', 'Fields-CX3rKuWb-v67.js', 'Files-Cd2HOzIE-v67.js',
-  'Hosts-Bg8QzW5i-v67.js', 'Instances-YdaGnS5a-v67.js', 'Intro-DkwRiz1n-v67.js',
-  'Logs-CsVPSLJH-v67.js', 'Objects-DPan0bzw-v67.js', 'Users-BgnBRgwU-v67.js',
-]) {
-  if (!exists(path.join('adminWww/assets', file))) fail(`missing compatible route chunk: ${file}`);
-  const chunk = fs.readFileSync(path.join(root, 'adminWww/assets', file), 'utf8');
-  if (chunk.includes('bootstrap-COulQZax-v61.js')) fail(`${file} still imports bootstrap-v61`);
-}
-
-const activeAdapterReact = fs.readFileSync(path.join(root, 'adminWww/assets/index-D2ymscJA-v61.js'), 'utf8');
-const activeObjects = fs.readFileSync(path.join(root, 'adminWww/assets/Objects-DPan0bzw-v67.js'), 'utf8');
-const activeAdapters = fs.readFileSync(path.join(root, 'adminWww/assets/Adapters-B5_jQ7DE-v67.js'), 'utf8');
-for (const marker of ['eos-object-value-cell', 'data-eos-object-writable']) {
-  if (!activeAdapterReact.includes(marker)) fail(`active ObjectBrowser bundle lacks required marker: ${marker}`);
-}
-for (const marker of ['Cannot write state', 'common.write=false', 'enableStateValueEdit']) {
-  if (!activeObjects.includes(marker)) fail(`active Objects bundle lacks native write-semantics marker: ${marker}`);
-}
-if (!activeAdapters.includes('install-specific-version')) fail('active Adapters bundle lacks the expert specific-version action');
 const mainBuild = fs.readFileSync(path.join(root, 'build/main.js'), 'utf8');
 if (!mainBuild.includes('v37 BackItUp/runtime-adapter compatibility')) fail('build/main.js lacks v37 BackItUp compatibility guard');
 
+
+const srcPkg = readJson('src-admin/package.json');
+const srcVersion = readJson('src-admin/src/version.json');
+if (srcPkg.version !== pkg.version || srcVersion.version !== pkg.version) fail('src-admin versions must match package.json');
+if (!index.includes('hostInit-v70.js?v=70') || !index.includes('index-CQZugZ1z-v70.js?v=70')) fail('adminWww/index.html must load the v70 runtime');
+
 console.log('[NexoWatt EOS package validation] OK');