iobroker.eos-admin 7.9.92 → 7.9.93

package/adminWww/js/eos-role-bootstrap.js

@@ -1,7 +1,7 @@
 (() => {
     'use strict';
 
-    const VERSION = 'v91-final-first-login-submit-guard';
+    const VERSION = 'v93-final-first-login-submit-guard';
     const script = document.currentScript || document.querySelector('script[src*="eos-role-bootstrap.js"]');
     const entry = script?.dataset?.eosEntry || '';
     let launched = false;
@@ -500,7 +500,7 @@
             const { username, password, card, submit } = loginElements();
             if (!username || !password || !card) return;
             card.classList.add('eos-login-card-modern');
-            // v91 compact normal-login first activation: do not add role buttons or a second panel.
+            // v93 compact normal-login first activation: do not add role buttons or a second panel.
             // The account is entered in the existing Loginname field; a blank password is accepted only
             // after the backend confirms that this exact managed account is eligible.
             card.querySelectorAll('.eos-login-role-selector').forEach(element => element.remove());

package/adminWww/js/eos-role-ui.js

@@ -1,7 +1,7 @@
 (() => {
     'use strict';
 
-    const VERSION = 'v91-final-clickable-overview-live-reserve-filter';
+    const VERSION = 'v93-final-clickable-overview-live-reserve-filter';
     window.NEXOWATT_EOS_ROLE_UI_VERSION = VERSION;
 
     const state = {

package/adminWww/js/nexowatt-native-shell.js

@@ -1,7 +1,7 @@
 (() => {
     'use strict';
 
-    const VERSION = 'v91-nexowatt-native-shell-modern-overview';
+    const VERSION = 'v93-nexowatt-native-shell-modern-overview';
     const previous = window.NEXOWATT_NATIVE_SHELL;
     if (previous?.version === VERSION) return;
     previous?.destroy?.();

package/build/lib/chat/assistantKnowledge.js

@@ -1,6 +1,6 @@
 "use strict";
 /**
- * Curated "wiki" of ioBroker how-to knowledge that is injected into the assistant's system prompt.
+ * Curated "wiki" of NexoWatt EOS knowledge that is injected into the assistant's system prompt.
  *
  * This is meant to grow over time: add a new {@link KnowledgeSection} to {@link KNOWLEDGE_SECTIONS}
  * for each task the assistant should know how to guide the user through. Keep entries short and
@@ -10,6 +10,21 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.KNOWLEDGE_SECTIONS = void 0;
 exports.renderAssistantKnowledge = renderAssistantKnowledge;
 exports.KNOWLEDGE_SECTIONS = [
+    {
+        title: 'NexoWatt EOS product areas and role-aware support',
+        body: [
+            'EOS Assist can answer questions about the live NexoWatt EOS system: Overview/Cockpit, Modules,',
+            'Services, Datapoints, Structure (rooms/functions), System logs, Access & Rights, NexoWatt EOS',
+            'applications, System hosts, Files and NexoWatt Backup. It can also inspect installed modules,',
+            'running services, object/state metadata, current values, device assignments, logs and history',
+            'through the available read tools. Always query real system data before making a system-specific claim.',
+            'Respect the authenticated role: Admin/Service may receive full system and service detail;',
+            'Installers may receive commissioning and troubleshooting detail available to their account;',
+            'End users receive only their permitted Smart Home, display and operating information.',
+            'Internal package names and compatibility identifiers are technical details; use NexoWatt EOS product',
+            'terminology in normal answers and show technical IDs only when they are required for a precise action.',
+        ].join(' '),
+    },
     {
         title: 'Open an adapter instance configuration',
         body: [
@@ -197,7 +212,7 @@ exports.KNOWLEDGE_SECTIONS = [
     {
         title: 'Run a script in the javascript adapter (run_javascript)',
         body: [
-            'To run logic WITH the full ioBroker scripting API, use run_javascript (act mode). It sends the',
+            'To run logic WITH the full NexoWatt EOS scripting API, use run_javascript (act mode). It sends the',
             'code to the `javascript` adapter and runs it ONCE (not saved), returning { ok, error, output,',
             'logs }. Choose `language` "js" (default) or "ts". Inside the script the usual API is available:',
             '`getState("id").val`, `setState("id", value)`, `on({id, change:"ne"}, …)`, `schedule(...)`,',
@@ -210,10 +225,10 @@ exports.KNOWLEDGE_SECTIONS = [
         ].join('\n'),
     },
     {
-        title: 'Automation options in ioBroker — pick the right tool',
+        title: 'Automation options in NexoWatt EOS — pick the right tool',
         body: [
-            'ioBroker can automate from simple to fully programmable. IMPORTANT: every option below needs a',
-            'SEPARATE adapter that is NOT part of a default ioBroker installation — `scenes`, `scheduler`,',
+            'NexoWatt EOS can automate from simple to fully programmable. IMPORTANT: every option below needs a',
+            'SEPARATE adapter that is NOT part of a default NexoWatt EOS installation — `scenes`, `scheduler`,',
             '`fullcalendar` and `javascript` (which provides Blockly, JavaScript and TypeScript). Before you',
             'recommend or use one, CHECK whether it is installed (list_adapters, and list_instances for a',
             'running instance). If it is missing, tell the user it must be installed first and offer',
@@ -271,7 +286,7 @@ exports.KNOWLEDGE_SECTIONS = [
         ].join('\n'),
     },
     {
-        title: 'ioBroker JavaScript adapter API (cheat-sheet for scripts and run_javascript)',
+        title: 'NexoWatt EOS JavaScript API (cheat-sheet for scripts and run_javascript)',
         body: [
             'When you WRITE a script (for the Scripts tab or for run_javascript), use the ioBroker javascript',
             'API — it is NOT plain Node.js. Key functions:',

package/build/lib/chat/chatOrchestrator.js

@@ -76,53 +76,48 @@ class ChatOrchestrator {
         this.mcp = mcp;
         this.adapter = adapter;
     }
-    /** System prompt describing the assistant's role, tool usage and the current permission mode. */
-    buildSystemPrompt(language, mode, uiContext) {
+    /** System prompt describing EOS Assist, tool usage and the authenticated role. */
+    buildSystemPrompt(language, mode, uiContext, accessRole = 'enduser') {
+        const roleText = accessRole === 'admin'
+            ? 'Admin / NexoWatt Service with full service visibility'
+            : accessRole === 'installer'
+                ? 'Installer with commissioning and troubleshooting visibility'
+                : 'End user with only explicitly permitted Smart Home and operating visibility';
         const lines = [
-            'You are the ioBroker Admin Assistant, an in-app helper inside the ioBroker admin web UI.',
-            'You help the user operate their ioBroker installation: explain how to do things in the UI,',
-            'recommend which adapter to use for a device or service, and answer questions about the',
-            "user's actual system (their states, objects, devices grouped by room/function, installed",
-            'adapters, running instances, logs and historical values).',
+            'You are EOS Assist inside NexoWatt EOS.',
+            'Your job is to answer questions about the user\'s ACTUAL EOS system and guide them through the',
+            'NexoWatt EOS interface. You cover all settings and product areas: Cockpit/Overview, Modules,',
+            'Services, Datapoints, Structure (rooms/functions), System logs, Access & Rights, EOS applications,',
+            'System hosts, Files, NexoWatt Backup, licenses, devices, communication protocols and diagnostics.',
             '',
-            'KEY CAPABILITY: you can navigate the admin UI yourself. When the user asks you to OPEN or GO to',
-            'something, call the navigate_admin_ui tool with the hash route — it opens the tab OR the specific',
-            'dialog immediately (no confirmation, it only changes the view), e.g.',
-            '{"hash":"#tab-hosts/base-settings/system.host.MSI"}. Otherwise (just pointing the user somewhere)',
-            'offer a clickable Markdown hash link, e.g. [Base settings of MSI](#tab-hosts/base-settings/system.host.MSI).',
-            'NEVER say a dialog can only be opened manually or that deep-linking a dialog is not possible.',
+            `Authenticated role: ${roleText}.`,
+            'Never reveal data or instructions outside that role. The tool layer enforces ACLs; if data is not',
+            'available, state that it is not available to the current account instead of guessing.',
             '',
-            'Guidelines:',
-            '- Use the available tools to look up real data from THIS ioBroker system instead of guessing.',
-            '  E.g. to list devices in a room call list_devices with the room name; to read a value call',
-            '  get_states; to find objects call search_objects.',
-            '- Base your answer on the tool results. If a tool returns an error or nothing, say so briefly',
-            '  and suggest what the user could check.',
-            '- Be concise and practical. Use short lists or tables when listing devices or states.',
-            '- Object IDs are case-sensitive (e.g. "hue.0.lights.1.on"); show them in `monospace`.',
-            '- IMPORTANT — this admin version SUPPORTS deep links that open specific DIALOGS directly,',
-            '  not just tabs. It is FALSE to say a dialog "can only be opened with the gear/cog icon" or',
-            '  that deep-linking a dialog is "technically not possible" — never say that. Instead always',
-            '  offer a clickable Markdown hash link and let the USER click it; do NOT claim you opened or',
-            '  navigated anywhere yourself. Examples: [Instances](#tab-instances), [Objects](#tab-objects),',
-            '  [hue.0 config](#tab-instances/config/hue.0), [edit this object](#tab-objects/edit/<id>),',
-            "  and a host's base-settings dialog, e.g. MSI:",
-            '  [Base settings of MSI](#tab-hosts/base-settings/system.host.MSI). The exact dialog routes are',
-            '  listed in the knowledge below. Prefer these links over the navigate_admin_ui tool.',
-            `- Answer in the user's language. The admin UI language is currently "${language}".`,
+            'Rules:',
+            '- For every system-specific question, use the available read tools and base the answer on their results.',
+            '- Never invent installed modules, running services, settings, datapoint values, devices or errors.',
+            '- Use NexoWatt EOS product terminology in normal answers. Do not present the underlying platform name',
+            '  as the product. Technical package IDs or command names may appear only in `code` when strictly needed.',
+            '- Explain results clearly and practically. Use short lists or tables for multiple devices or values.',
+            '- Object and state IDs are case-sensitive; show necessary IDs in `monospace`.',
+            '- You may navigate the EOS interface with navigate_admin_ui when the user explicitly asks to open a',
+            '  page. Use these EOS routes: Cockpit `#tab-intro`, Modules `#tab-adapters`, Services `#tab-instances`,',
+            '  Datapoints `#tab-objects`, Structure `#tab-enums`, System logs `#tab-logs`, Access & Rights',
+            '  `#tab-users`, and instance configuration `#tab-instances/config/<module>.<instance>`.',
+            '- Do not claim an action was completed unless a tool result confirms it.',
+            `- Answer in the user\'s language. The current EOS language is "${language}".`,
         ];
         if (mode === 'act') {
-            lines.push('- You may change things using the write/action tools (set_state, create_user_state,', '  extend_object, assign_to_enums, install_adapter, run_command, run_node_script). Every such', '  call is shown to the user for explicit confirmation before it runs, so propose the smallest', '  sensible action.', '- create_user_state only works in "0_userdata.0." or "javascript.<n>." — never elsewhere.', '- extend_object merges common/native into an existing object — use it to start/stop an', '  instance (common.enabled), change instance settings (native) or set enum members.', '- assign_to_enums adds objects to room/function enums (add-only) — use it to sort devices.', '- run_command runs an ioBroker CLI command and streams its output to the user; use it for', '  maintenance actions (restart, upload, fix, ...), not to fetch data.', '- run_node_script executes a short Node.js script on the host to CHECK things (network, files,', '  environment). Prefer read-only checks, keep it short, and put results in console.log. Never', '  use it for destructive operations.', '- run_javascript runs a one-off JS/TS script INSIDE the javascript adapter (full ioBroker API:', '  on/getState/setState/schedule/sendTo). Use it to test automation logic or do an API-based', '  check/action; it is not saved. Use run_node_script instead for plain OS checks (no ioBroker API).');
+            lines.push('- Changes are possible only through explicit write/action tools and confirmation. Propose the', '  smallest safe action and respect all EOS safety and role restrictions.');
         }
         else {
-            lines.push('- You currently have READ-ONLY access: you cannot change states, create objects or install', '  adapters. When a change is needed, explain the exact steps the user should take in the UI.');
+            lines.push('- This header assistant is READ-ONLY. It may inspect and explain the system, but it must not', '  change states, objects, settings, services, modules, passwords or backups.');
         }
         if (uiContext?.hash) {
-            lines.push('', `The user is currently in the admin UI at the route \`${uiContext.hash}\`. Take this into ` +
-                "account — don't tell them to open a tab/page they are already on, and refer to where " +
-                'they are when helpful.');
+            lines.push('', `The user is currently on EOS route \`${uiContext.hash}\`. Consider this context.`);
         }
-        lines.push('', 'ioBroker how-to knowledge (use this to guide the user precisely):', (0, assistantKnowledge_1.renderAssistantKnowledge)());
+        lines.push('', 'NexoWatt EOS knowledge:', (0, assistantKnowledge_1.renderAssistantKnowledge)());
         return { role: 'system', content: lines.join('\n') };
     }
     /** Assemble the tool list offered to the model for the given mode. */
@@ -154,7 +149,7 @@ class ChatOrchestrator {
             ? { ...message, content: parseTextToolCalls(message.content).content }
             : message);
         if (!messages.some(message => message.role === 'system')) {
-            messages.unshift(this.buildSystemPrompt(language, mode, params.uiContext));
+            messages.unshift(this.buildSystemPrompt(language, mode, params.uiContext, params.accessRole));
         }
         const newMessages = [];
         const steps = [];

package/build/lib/chat/mcpClientManager.js

@@ -44,7 +44,7 @@ class McpClientManager {
                 language: this.options.language,
                 allowSetState: this.options.allowSetState ?? false,
                 allowObjectChange: this.options.allowObjectChange ?? false,
-                clientName: 'ioBroker.admin chat helper',
+                clientName: 'NexoWatt EOS Assist',
                 clientVersion: '1.0.0',
             })
                 .then(mcp => {

package/build/main.js

@@ -174,8 +174,13 @@ class Admin extends adapter_core_1.Adapter {
     timerNews;
     _tasks;
     changedPasswords = [];
-    /** In-process ioBroker.mcp connection backing the chat helper. Created on first chat message. */
+    /** Legacy in-process chat connection kept for compatibility with existing admin messages. */
     mcpChat = null;
+    /** Role-scoped, read-only MCP connections used by the header EOS Assist. */
+    eosAssistMcpChats = new Map();
+    /** Per-user throttling and concurrency guard for provider calls. */
+    eosAssistLastRequestAt = new Map();
+    eosAssistInFlight = new Set();
     /** Periodic guard that keeps EOS safety policy applied even if object events are missed. */
     eosSecurityTimer = null;
     /** Debounce timer for object-change triggered safety checks. */
@@ -316,6 +321,300 @@ class Admin extends adapter_core_1.Adapter {
         });
         return this.mcpChat;
     }
+    /** Return a read-only MCP connection whose tool calls run under the authenticated user's ACL. */
+    getEosAssistMcp(userId) {
+        const key = `${userId}:${systemLanguage}`;
+        let manager = this.eosAssistMcpChats.get(key);
+        if (!manager) {
+            manager = new mcpClientManager_1.McpClientManager(this, {
+                defaultUser: userId,
+                language: systemLanguage,
+                allowSetState: false,
+                allowObjectChange: false,
+            });
+            this.eosAssistMcpChats.set(key, manager);
+        }
+        return manager;
+    }
+    normalizeEosAssistSettings(value) {
+        const native = value && typeof value === 'object' && !Array.isArray(value)
+            ? value
+            : {};
+        const allowed = ['openai', 'anthropic', 'gemini', 'deepseek', 'custom'];
+        const rawProvider = typeof native.provider === 'string' ? native.provider : 'anthropic';
+        const provider = allowed.includes(rawProvider) ? rawProvider : 'anthropic';
+        return {
+            provider,
+            model: typeof native.model === 'string' ? native.model.trim().substring(0, 200) : '',
+            credentialId: typeof native.credentialId === 'string' ? native.credentialId.trim().substring(0, 300) : '',
+            baseUrl: typeof native.baseUrl === 'string' ? native.baseUrl.trim().replace(/\/+$/, '').substring(0, 500) : '',
+            allowSelfSignedCerts: native.allowSelfSignedCerts === true,
+        };
+    }
+    isEosAssistConfigured(settings) {
+        if (!settings.model) {
+            return false;
+        }
+        return settings.provider === 'custom'
+            ? !!(settings.baseUrl || settings.credentialId)
+            : !!settings.credentialId;
+    }
+    async readEosAssistSettings() {
+        const object = await this.getForeignObjectAsync('system.ai');
+        return this.normalizeEosAssistSettings(object?.native);
+    }
+    sanitizeEosAssistVisibleText(value) {
+        const text = String(value || '');
+        // Preserve technical IDs and commands inside code spans while keeping product prose NexoWatt-only.
+        return text
+            .split(/(```[\s\S]*?```|`[^`\n]*`)/g)
+            .map((part, index) => (index % 2 ? part : part.replace(/\bioBroker\b/gi, 'NexoWatt EOS')))
+            .join('');
+    }
+    normalizeEosAssistMessages(value) {
+        if (!Array.isArray(value)) {
+            return [];
+        }
+        const messages = [];
+        let total = 0;
+        for (const entry of value.slice(-24)) {
+            if (!entry || typeof entry !== 'object' || Array.isArray(entry)) {
+                continue;
+            }
+            const record = entry;
+            const role = record.role === 'assistant' ? 'assistant' : record.role === 'user' ? 'user' : null;
+            if (!role || typeof record.content !== 'string') {
+                continue;
+            }
+            const content = record.content.trim().substring(0, 6_000);
+            if (!content) {
+                continue;
+            }
+            total += content.length;
+            if (total > 30_000) {
+                break;
+            }
+            messages.push({ role, content });
+        }
+        return messages;
+    }
+    async getEosAssistStatus(socketClient, callback) {
+        const userId = socketClient?._acl?.user;
+        if (!userId) {
+            callback?.({ error: 'Nicht angemeldet.', code: 'notAuthenticated' });
+            return;
+        }
+        const role = this.getEosCachedRole(userId);
+        if (this.eosPasswordSetupRequired.has(userId)) {
+            callback?.({ error: 'Die persönliche Passwortvergabe muss zuerst abgeschlossen werden.', code: 'passwordSetupRequired' });
+            return;
+        }
+        try {
+            const settings = await this.readEosAssistSettings();
+            const credentials = role === 'admin' ? await (0, credentials_1.listAiCredentials)(this) : [];
+            callback?.({
+                success: true,
+                user: userId.replace(/^system\.user\./, ''),
+                role,
+                configured: this.isEosAssistConfigured(settings),
+                canConfigure: role === 'admin',
+                settings: role === 'admin' ? settings : undefined,
+                credentials,
+            });
+        }
+        catch (error) {
+            callback?.({ error: error instanceof Error ? error.message : String(error), code: 'statusFailed' });
+        }
+    }
+    async saveEosAssistSettings(socketClient, payload, callback) {
+        const userId = socketClient?._acl?.user;
+        if (!userId || this.getEosCachedRole(userId) !== 'admin') {
+            callback?.({ error: 'Diese Einstellung ist nur für Admin / NexoWatt Service verfügbar.', code: 'permissionDenied' });
+            return;
+        }
+        const settings = this.normalizeEosAssistSettings(payload);
+        if (!settings.model) {
+            callback?.({ error: 'Bitte ein Modell eintragen.', code: 'invalidSettings' });
+            return;
+        }
+        if (settings.provider === 'custom') {
+            if (!settings.baseUrl && !settings.credentialId) {
+                callback?.({ error: 'Für einen lokalen/individuellen Anbieter wird eine Basis-URL oder ein Zugang benötigt.', code: 'invalidSettings' });
+                return;
+            }
+            if (settings.baseUrl && !/^https?:\/\//i.test(settings.baseUrl)) {
+                callback?.({ error: 'Die Basis-URL muss mit http:// oder https:// beginnen.', code: 'invalidSettings' });
+                return;
+            }
+        }
+        else if (!settings.credentialId) {
+            callback?.({ error: 'Bitte einen gespeicherten KI-Zugang auswählen.', code: 'invalidSettings' });
+            return;
+        }
+        try {
+            const current = await this.getForeignObjectAsync('system.ai');
+            const next = {
+                ...(current || {}),
+                _id: 'system.ai',
+                type: 'config',
+                common: {
+                    ...(current?.common || {}),
+                    name: 'EOS Assist Einstellungen',
+                    expert: true,
+                },
+                native: {
+                    ...(current?.native || {}),
+                    ...settings,
+                },
+            };
+            await this.setForeignObjectAsync('system.ai', next);
+            callback?.({ success: true, configured: true, settings });
+        }
+        catch (error) {
+            callback?.({ error: error instanceof Error ? error.message : String(error), code: 'saveFailed' });
+        }
+    }
+    async testEosAssistSettings(socketClient, payload, callback) {
+        const userId = socketClient?._acl?.user;
+        if (!userId || this.getEosCachedRole(userId) !== 'admin') {
+            callback?.({ error: 'Der Verbindungstest ist nur für Admin / NexoWatt Service verfügbar.', code: 'permissionDenied' });
+            return;
+        }
+        const settings = this.normalizeEosAssistSettings(payload);
+        if (settings.provider === 'custom' && settings.baseUrl && !/^https?:\/\//i.test(settings.baseUrl)) {
+            callback?.({ error: 'Die Basis-URL muss mit http:// oder https:// beginnen.', code: 'invalidSettings' });
+            return;
+        }
+        try {
+            const apiKey = settings.credentialId ? await (0, credentials_1.resolveAiKey)(this, settings.credentialId) : '';
+            if (settings.provider !== 'custom' && !apiKey) {
+                callback?.({ error: 'Der ausgewählte Zugang enthält keinen verwendbaren API-Schlüssel.', code: 'credentialMissing' });
+                return;
+            }
+            const models = await (0, llmProvider_1.listModels)({
+                provider: settings.provider,
+                apiKey,
+                baseUrl: settings.baseUrl || undefined,
+                allowSelfSignedCerts: settings.allowSelfSignedCerts,
+            });
+            callback?.({ success: true, models, count: models.length });
+        }
+        catch (error) {
+            callback?.({ error: error instanceof Error ? error.message : String(error), code: 'connectionFailed' });
+        }
+    }
+    async processEosAssistSocketRequest(socketClient, payload, callback) {
+        const userId = socketClient?._acl?.user;
+        if (!userId) {
+            callback?.({ error: 'Nicht angemeldet.', code: 'notAuthenticated' });
+            return;
+        }
+        const role = this.getEosCachedRole(userId);
+        if (this.eosPasswordSetupRequired.has(userId)) {
+            callback?.({ error: 'Die persönliche Passwortvergabe muss zuerst abgeschlossen werden.', code: 'passwordSetupRequired' });
+            return;
+        }
+        const now = Date.now();
+        const previous = this.eosAssistLastRequestAt.get(userId) || 0;
+        if (now - previous < 1_500) {
+            callback?.({ error: 'Bitte einen Moment warten, bevor die nächste Frage gesendet wird.', code: 'rateLimited' });
+            return;
+        }
+        if (this.eosAssistInFlight.has(userId)) {
+            callback?.({ error: 'EOS Assist bearbeitet bereits eine Frage.', code: 'busy' });
+            return;
+        }
+        const record = payload && typeof payload === 'object' && !Array.isArray(payload)
+            ? payload
+            : {};
+        const messages = this.normalizeEosAssistMessages(record.messages);
+        if (!messages.some(message => message.role === 'user')) {
+            callback?.({ error: 'Bitte eine Frage eingeben.', code: 'emptyQuestion' });
+            return;
+        }
+        this.eosAssistLastRequestAt.set(userId, now);
+        this.eosAssistInFlight.add(userId);
+        try {
+            const settings = await this.readEosAssistSettings();
+            if (!this.isEosAssistConfigured(settings)) {
+                callback?.({
+                    error: 'EOS Assist ist noch nicht durch Admin / NexoWatt Service konfiguriert.',
+                    code: 'notConfigured',
+                    canConfigure: role === 'admin',
+                    role,
+                });
+                return;
+            }
+            const apiKey = settings.credentialId ? await (0, credentials_1.resolveAiKey)(this, settings.credentialId) : '';
+            if (settings.provider !== 'custom' && !apiKey) {
+                callback?.({
+                    error: 'Der konfigurierte KI-Zugang enthält keinen verwendbaren API-Schlüssel.',
+                    code: 'credentialMissing',
+                    canConfigure: role === 'admin',
+                });
+                return;
+            }
+            const orchestrator = new chatOrchestrator_1.ChatOrchestrator(this.getEosAssistMcp(userId), this);
+            const uiContextRecord = record.uiContext && typeof record.uiContext === 'object' && !Array.isArray(record.uiContext)
+                ? record.uiContext
+                : {};
+            const result = await orchestrator.run({
+                provider: settings.provider,
+                model: settings.model,
+                apiKey,
+                baseUrl: settings.baseUrl || undefined,
+                messages,
+                language: systemLanguage,
+                allowSelfSignedCerts: settings.allowSelfSignedCerts,
+                maxToolRounds: 10,
+                mode: 'read',
+                uiContext: {
+                    hash: typeof uiContextRecord.hash === 'string' ? uiContextRecord.hash.substring(0, 500) : '',
+                },
+                accessRole: role,
+            });
+            const content = this.sanitizeEosAssistVisibleText(result.content);
+            const newMessages = result.newMessages
+                .filter(message => message.role === 'assistant' && typeof message.content === 'string')
+                .map(message => ({ ...message, content: this.sanitizeEosAssistVisibleText(message.content) }));
+            callback?.({
+                success: true,
+                status: 'done',
+                content,
+                newMessages,
+                steps: result.steps.map(step => ({
+                    ...step,
+                    result: this.sanitizeEosAssistVisibleText(step.result),
+                })),
+                clientActions: result.clientActions || [],
+                role,
+            });
+        }
+        catch (error) {
+            callback?.({
+                error: error instanceof Error ? error.message : String(error),
+                code: 'assistFailed',
+                canConfigure: role === 'admin',
+            });
+        }
+        finally {
+            this.eosAssistInFlight.delete(userId);
+        }
+    }
+    installEosAssistSocketCommands(socketAdmin) {
+        socketAdmin.addCommandHandler('eosAssistStatus', (socketClient, _payload, callback) => {
+            void this.getEosAssistStatus(socketClient, callback);
+        });
+        socketAdmin.addCommandHandler('eosAssistSaveSettings', (socketClient, payload, callback) => {
+            void this.saveEosAssistSettings(socketClient, payload, callback);
+        });
+        socketAdmin.addCommandHandler('eosAssistTestSettings', (socketClient, payload, callback) => {
+            void this.testEosAssistSettings(socketClient, payload, callback);
+        });
+        socketAdmin.addCommandHandler('eosAssist', (socketClient, payload, callback) => {
+            void this.processEosAssistSocketRequest(socketClient, payload, callback);
+        });
+    }
     /**
      * Some message was sent to this instance over the message box. Used by email, pushover, text2speech, ...
      * Using this method requires the "common.messagebox" property to be set to true in io-package.json
@@ -760,6 +1059,12 @@ class Admin extends adapter_core_1.Adapter {
             void this.mcpChat.close();
             this.mcpChat = null;
         }
+        for (const manager of this.eosAssistMcpChats.values()) {
+            void manager.close();
+        }
+        this.eosAssistMcpChats.clear();
+        this.eosAssistLastRequestAt.clear();
+        this.eosAssistInFlight.clear();
         try {
             this.log.info(`terminating http${this.config.secure ? 's' : ''} server on port ${this.config.port}`);
             socket?.close();
@@ -2052,6 +2357,7 @@ class Admin extends adapter_core_1.Adapter {
         }
         socket = new socket_classes_1.SocketAdmin(settings, this, objects);
         this.installEosSocketCommandGuard(socket);
+        this.installEosAssistSocketCommands(socket);
         socket.start(server, ws_server_1.SocketIO, { store, oauth2Only: true, noBasicAuth: this.config.noBasicAuth });
         // subscribe to all object changes
         socket.subscribe('objectChange', '*');

package/io-package.json

@@ -1,7 +1,7 @@
 {
   "common": {
     "name": "eos-admin",
-    "version": "7.9.92",
+    "version": "7.9.93",
     "titleLang": {
       "en": "NexoWatt EOS Admin",
       "de": "NexoWatt EOS Admin",
@@ -18,6 +18,11 @@
     "connectionType": "local",
     "dataSource": "push",
     "news": {
+      "7.9.93": {
+        "de": "Testkandidat 7.9.93 entfernt den unnötigen Scrollbalken aus der kompakten Anmeldung, zeigt in der Modulinstallation NexoWatt als sichtbaren Herausgeber und ersetzt die statischen EOS-Assist-Texte durch einen authentifizierten, rollenabhängigen und schreibgeschützten Systemassistenten. EOS Assist kann – nach einmaliger Konfiguration durch Admin/Service – reale Module, Dienste, Einstellungen, Geräte, Datenpunkte, Struktur, Logs, Historie und Sicherungsstatus über die freigegebenen Systemwerkzeuge prüfen. Technische Paketkennungen bleiben intern kompatibel.",
+        "en": "Test candidate 7.9.93 removes the unnecessary scrollbar from the compact login, shows NexoWatt as the visible publisher in module installation, and replaces static EOS Assist texts with an authenticated, role-aware, read-only system assistant. Once configured by Admin/Service, EOS Assist can inspect real modules, services, settings, devices, datapoints, structure, logs, history and backup status through the permitted system tools. Technical package identifiers remain internally compatible.",
+        "nl": "Testkandidaat 7.9.93 verwijdert de overbodige schuifbalk uit de compacte aanmelding, toont NexoWatt als zichtbare uitgever bij module-installatie en vervangt statische EOS Assist-teksten door een geauthenticeerde, rolafhankelijke en alleen-lezen systeemassistent. Na eenmalige configuratie door Admin/Service kan EOS Assist echte modules, diensten, instellingen, apparaten, datapunten, structuur, logs, historie en back-upstatus controleren via de toegestane systeemtools. Technische pakket-ID’s blijven intern compatibel."
+      },
       "7.9.92": {
         "de": "Stable 7.9.92 korrigiert die Release-Vorbereitung: Vor Paketprüfung und npm-Veröffentlichung werden die verbindlichen Verkaufsstandardwerte für Authentifizierung, Port 8081 sowie die ausschließlich für Admin/Service sichtbaren internen Admin- und BackItUp-Notfallreserven automatisch normalisiert. Dadurch kann ein gemischter lokaler Arbeitsordner die Sicherheitsprüfung nicht mehr durch einen fehlenden Standardwert abbrechen. Rollen-, Login-, Übersichts- und Dienstefilter aus 7.9.91 bleiben unverändert.",
         "en": "Stable 7.9.92 hardens release preparation: before package validation and npm publishing, the mandatory sales defaults for authentication, port 8081 and the Admin/Service-only internal admin and BackItUp emergency reserves are normalized automatically. A mixed local working tree can therefore no longer abort the security check merely because a required default value is missing. Role, login, overview and service filtering from 7.9.91 remain unchanged.",
@@ -314,7 +319,7 @@
     "icon": "admin.svg",
     "messagebox": true,
     "enabled": true,
-    "extIcon": "https://unpkg.com/iobroker.eos-admin@7.9.92/admin/admin.svg",
+    "extIcon": "https://unpkg.com/iobroker.eos-admin@7.9.93/admin/admin.svg",
     "keywords": [
       "NexoWatt",
       "EOS",
@@ -325,10 +330,9 @@
       "licensed"
     ],
     "compact": true,
-    "readme": "https://unpkg.com/iobroker.eos-admin@7.9.92/README.md",
+    "readme": "https://unpkg.com/iobroker.eos-admin@7.9.93/README.md",
     "authors": [
-      "bluefox <bluefox@ccu.io>",
-      "hobbyquaker <hq@ccu.io>"
+      "NexoWatt"
     ],
     "dependencies": [
       {
@@ -394,9 +398,10 @@
     "nondeletable": false,
     "allowAdapterUpdate": true,
     "allowAdapterDelete": false,
-    "meta": "https://unpkg.com/iobroker.eos-admin@7.9.92/io-package.json",
+    "meta": "https://unpkg.com/iobroker.eos-admin@7.9.93/io-package.json",
     "npmPackage": "iobroker.eos-admin",
-    "packetName": "iobroker.eos-admin"
+    "packetName": "iobroker.eos-admin",
+    "publisher": "NexoWatt"
   },
   "native": {
     "autoUpdate": 24,
@@ -1098,5 +1103,5 @@
       }
     }
   },
-  "version": "7.9.92"
+  "version": "7.9.93"
 }