iobroker.eos-admin 7.9.92 → 7.9.95

package/build/main.js

@@ -164,6 +164,79 @@ let lastRepoUpdate;
 let objects = {};
 const secret = 'Zgfr56gFe87jJOM'; // Will be generated by first start
 let systemLanguage = 'en';
+
+const EOS_STABLE_INITIAL_PASSWORD = 'nexowatt';
+const EOS_STABLE_ACCOUNTS = [
+    { user: 'installer', role: 'installer' },
+    { user: 'guest', role: 'customer' },
+    { user: 'user', role: 'customer' },
+];
+
+async function ensureEosStableGroupMembership(adapter, user, role) {
+    const candidateGroups = role === 'installer'
+        ? ['system.group.installer', 'system.group.installateur', 'system.group.installers']
+        : ['system.group.endkunde', 'system.group.endkunden'];
+    const userId = `system.user.${user}`;
+    for (const groupId of candidateGroups) {
+        const group = await adapter.getForeignObjectAsync(groupId);
+        if (!group) {
+            continue;
+        }
+        const members = Array.isArray(group.common?.members) ? [...group.common.members] : [];
+        if (!members.includes(userId)) {
+            members.push(userId);
+            await adapter.extendForeignObjectAsync(groupId, { common: { members } }, { user: 'system.user.admin' });
+        }
+    }
+}
+
+async function ensureEosStableInitialAccounts(adapter) {
+    for (const account of EOS_STABLE_ACCOUNTS) {
+        const id = `system.user.${account.user}`;
+        let object = await adapter.getForeignObjectAsync(id);
+        let created = false;
+        if (!object) {
+            await adapter.setForeignObjectAsync(id, {
+                type: 'user',
+                common: { name: account.user, enabled: true, password: '' },
+                native: {},
+            }, { user: 'system.user.admin' });
+            object = await adapter.getForeignObjectAsync(id);
+            created = true;
+        }
+        if (!object) {
+            adapter.log.error(`Cannot prepare EOS account ${account.user}`);
+            continue;
+        }
+        const eosNative = object.native || {};
+        const resetRequested = eosNative.nexowattResetRequested === true || eosNative.eosResetRequested === true;
+        const passwordMissing = !object.common?.password;
+        const pendingFirstLogin = eosNative.nexowattPasswordChangeRequired === true || eosNative.eosPasswordChangeRequired === true || eosNative.nexowattFirstLoginPending === true || eosNative.eosFirstLoginRequired === true;
+        const stableCredentialMissing = eosNative.nexowattStableInitialCredentialVersion !== 1;
+        if (created || passwordMissing || resetRequested || (pendingFirstLogin && stableCredentialMissing)) {
+            await adapter.setPasswordAsync(account.user, EOS_STABLE_INITIAL_PASSWORD, { user: 'system.user.admin' });
+            await adapter.extendForeignObjectAsync(id, {
+                native: {
+                    ...eosNative,
+                    nexowattManaged: true,
+                    nexowattRole: account.role,
+                    nexowattPasswordChangeRequired: true,
+                    eosPasswordChangeRequired: true,
+                    nexowattFirstLoginPending: true,
+                    eosFirstLoginRequired: true,
+                    nexowattInitialPasswordApplied: true,
+                    nexowattInitialPasswordVersion: 1,
+                        nexowattStableInitialCredentialVersion: 1,
+                    nexowattResetRequested: false,
+                    eosResetRequested: false,
+                },
+            }, { user: 'system.user.admin' });
+            adapter.log.info(`Prepared EOS ${account.role} account ${account.user} for mandatory first password change`);
+        }
+        await ensureEosStableGroupMembership(adapter, account.user, account.role);
+    }
+}
+
 class Admin extends adapter_core_1.Adapter {
     /** secret used for the socket connection */
     secret;
@@ -282,6 +355,7 @@ class Admin extends adapter_core_1.Adapter {
                 systemLanguage = systemConfig.common.language;
             }
             adapter_core_1.I18n.init(__dirname, systemLanguage).catch(e => this.log.error(`Cannot init i18n: ${e}`));
+            await ensureEosStableInitialAccounts(this);
             if (!systemConfig.native.secret) {
                 (0, node_crypto_1.randomBytes)(24, (_ex, buf) => {
                     this.secret = buf.toString('hex');
@@ -409,8 +483,55 @@ class Admin extends adapter_core_1.Adapter {
             });
             return;
         }
+
+        else if (obj.command === 'eos:completeFirstLogin') {
+            const message = obj.message || {};
+            const user = String(message.user || '').replace(/^system\\.user\\./, '').trim().toLowerCase();
+            const password = String(message.password || '');
+            if (!['installer', 'guest', 'user'].includes(user) || !password) {
+                if (obj.callback) {
+                    this.sendTo(obj.from, obj.command, { error: 'Ungültige Anfrage' }, obj.callback);
+                }
+                return;
+            }
+            void this.checkPasswordAsync(user, password)
+                .then(async (result) => {
+                const valid = Array.isArray(result) ? result[0] === true : !!result;
+                if (!valid) {
+                    throw new Error('Das neue Passwort konnte nicht bestätigt werden');
+                }
+                const id = `system.user.${user}`;
+                const account = await this.getForeignObjectAsync(id);
+                if (!account) {
+                    throw new Error('Benutzerkonto nicht gefunden');
+                }
+                const eosNative = account.native || {};
+                await this.extendForeignObjectAsync(id, {
+                    native: {
+                        ...eosNative,
+                        nexowattPasswordChangeRequired: false,
+                        eosPasswordChangeRequired: false,
+                        nexowattFirstLoginPending: false,
+                        eosFirstLoginRequired: false,
+                        nexowattPasswordChangedAt: new Date().toISOString(),
+                    },
+                }, { user: 'system.user.admin' });
+                if (obj.callback) {
+                    this.sendTo(obj.from, obj.command, { success: true }, obj.callback);
+                }
+            })
+                .catch((error) => {
+                if (obj.callback) {
+                    this.sendTo(obj.from, obj.command, { error: error.message }, obj.callback);
+                }
+            });
+            return;
+        }
+
         else if (obj.command.startsWith('chat:')) {
-            this.processChatMessage(obj).catch(error => this.log.error(`Error by chat processing: ${error}`));
+            if (obj.callback) {
+                this.sendTo(obj.from, obj.command, { error: 'EOS Assist ist in dieser Stable-Version vorübergehend deaktiviert.' }, obj.callback);
+            }
             return;
         }
         else if (webServer?.processMessage(obj)) {

package/io-package.json

@@ -1,7 +1,7 @@
 {
   "common": {
     "name": "eos-admin",
-    "version": "7.9.92",
+    "version": "7.9.95",
     "titleLang": {
       "en": "NexoWatt EOS Admin",
       "de": "NexoWatt EOS Admin",
@@ -18,10 +18,15 @@
     "connectionType": "local",
     "dataSource": "push",
     "news": {
-      "7.9.92": {
-        "de": "Stable 7.9.92 korrigiert die Release-Vorbereitung: Vor Paketprüfung und npm-Veröffentlichung werden die verbindlichen Verkaufsstandardwerte für Authentifizierung, Port 8081 sowie die ausschließlich für Admin/Service sichtbaren internen Admin- und BackItUp-Notfallreserven automatisch normalisiert. Dadurch kann ein gemischter lokaler Arbeitsordner die Sicherheitsprüfung nicht mehr durch einen fehlenden Standardwert abbrechen. Rollen-, Login-, Übersichts- und Dienstefilter aus 7.9.91 bleiben unverändert.",
-        "en": "Stable 7.9.92 hardens release preparation: before package validation and npm publishing, the mandatory sales defaults for authentication, port 8081 and the Admin/Service-only internal admin and BackItUp emergency reserves are normalized automatically. A mixed local working tree can therefore no longer abort the security check merely because a required default value is missing. Role, login, overview and service filtering from 7.9.91 remain unchanged.",
-        "nl": "Stable 7.9.92 verhardt de releasevoorbereiding: vóór pakketcontrole en npm-publicatie worden de verplichte verkoopstandaarden voor authenticatie, poort 8081 en de uitsluitend voor Admin/Service zichtbare interne admin- en BackItUp-noodreserve automatisch genormaliseerd. Een gemengde lokale werkmap kan de veiligheidscontrole daardoor niet meer laten stoppen door een ontbrekende standaardwaarde. Rollen-, login-, overzichts- en dienstenfilters uit 7.9.91 blijven ongewijzigd."
+      "7.9.95": {
+        "de": "Stable 7.9.95 macht den Release-Ordner mergesicher: Die flache Update-ZIP kann direkt über einen bestehenden Arbeitsordner entpackt werden. Vor Paketprüfung und npm-Veröffentlichung werden package.json, io-package.json, beide Lockdateien, die Frontend-Version, Build-Informationen und der aktuelle Repository-Eintrag automatisch auf dieselbe Version gebracht. Dadurch wird insbesondere ein stehen gebliebenes io-package.json aus 7.9.92/7.9.94 automatisch repariert. Die Funktionen aus 7.9.94 bleiben unverändert.",
+        "en": "Stable 7.9.95 makes the release folder merge-safe: the flat update ZIP can be extracted directly over an existing working directory. Before package validation and npm publishing, package.json, io-package.json, both lockfiles, the frontend version, build information and the current repository entry are synchronized automatically. In particular, a stale io-package.json from 7.9.92/7.9.94 is repaired automatically. Functional behavior from 7.9.94 remains unchanged.",
+        "nl": "Stable 7.9.95 maakt de releasemap merge-veilig: de vlakke update-ZIP kan direct over een bestaande werkmap worden uitgepakt. Vóór pakketcontrole en npm-publicatie worden package.json, io-package.json, beide lockbestanden, de frontendversie, buildinformatie en de actuele repositoryvermelding automatisch op dezelfde versie gezet. Een achtergebleven io-package.json uit 7.9.92/7.9.94 wordt daardoor automatisch hersteld. De functies uit 7.9.94 blijven ongewijzigd."
+      },
+      "7.9.94": {
+        "de": "Stable-Kandidat 7.9.94: Standardkonten installer, guest und user verwenden bei der Ersteinrichtung das Startpasswort nexowatt und müssen nach der ersten erfolgreichen Anmeldung sofort ein persönliches Passwort vergeben. Die passwortlose Aktivierung ist deaktiviert. Die Login-Karte bleibt auch bei Fehlermeldungen vollständig bedienbar. EOS Assist ist für diese Stable-Version vollständig deaktiviert, bis die neue lesende Systemassistenz separat freigegeben ist. Deutsche Sicherheitstexte und sichtbare Herstellerangaben wurden bereinigt.",
+        "en": "Stable candidate 7.9.94: the standard installer, guest and user accounts use the initial password nexowatt during commissioning and must set a personal password immediately after the first successful sign-in. Passwordless activation is disabled. The login card remains fully usable when an error is shown. EOS Assist is completely disabled in this stable version until the redesigned read-only system assistant is released separately. German security texts and visible publisher information were cleaned up.",
+        "nl": "Stable-kandidaat 7.9.94: de standaardaccounts installer, guest en user gebruiken bij de eerste ingebruikname het startwachtwoord nexowatt en moeten na de eerste succesvolle aanmelding direct een persoonlijk wachtwoord instellen. Activering zonder wachtwoord is uitgeschakeld. De aanmeldkaart blijft ook bij foutmeldingen volledig bedienbaar. EOS Assist is in deze stable-versie volledig uitgeschakeld totdat de vernieuwde alleen-lezen systeemassistent apart is vrijgegeven."
       },
       "7.9.90": {
         "de": "Stable 7.9.90 korrigiert die produktive Rollenoberfläche: Die Übersichtskacheln sind für Installateur und Gast/Endkunde zuverlässig bedienbar. Interner Admin und interne BackItUp-Notfallreserve werden in Dienste auch bei verzögert gerenderten Tabellen ausschließlich für Admin/Service angezeigt. Die Erstanmeldung prüft serverseitig, ob Installer, Guest oder User noch keinen persönlichen Zugang besitzen: Nur dann wird die normale Anmeldeschaltfläche bei leerem Passwort aktiv und öffnet die verpflichtende Passwortvergabe; nach abgeschlossener Aktivierung bleibt sie ohne Passwort gesperrt. NexoWatt Sicherung bleibt für freigegebene Rollen erreichbar, EOS Assist im Header und Standardport 8081 bleiben unverändert.",
@@ -314,7 +319,7 @@
     "icon": "admin.svg",
     "messagebox": true,
     "enabled": true,
-    "extIcon": "https://unpkg.com/iobroker.eos-admin@7.9.92/admin/admin.svg",
+    "extIcon": "https://unpkg.com/iobroker.eos-admin@7.9.95/admin/admin.svg",
     "keywords": [
       "NexoWatt",
       "EOS",
@@ -325,10 +330,9 @@
       "licensed"
     ],
     "compact": true,
-    "readme": "https://unpkg.com/iobroker.eos-admin@7.9.92/README.md",
+    "readme": "https://unpkg.com/iobroker.eos-admin@7.9.95/README.md",
     "authors": [
-      "bluefox <bluefox@ccu.io>",
-      "hobbyquaker <hq@ccu.io>"
+      "NexoWatt"
     ],
     "dependencies": [
       {
@@ -394,9 +398,10 @@
     "nondeletable": false,
     "allowAdapterUpdate": true,
     "allowAdapterDelete": false,
-    "meta": "https://unpkg.com/iobroker.eos-admin@7.9.92/io-package.json",
+    "meta": "https://unpkg.com/iobroker.eos-admin@7.9.95/io-package.json",
     "npmPackage": "iobroker.eos-admin",
-    "packetName": "iobroker.eos-admin"
+    "packetName": "iobroker.eos-admin",
+    "publisher": "NexoWatt"
   },
   "native": {
     "autoUpdate": 24,
@@ -501,7 +506,7 @@
     ],
     "eosAdminOnlyGroup": "system.group.administrator",
     "eosApplyAdminOnlyAclToProtectedAdapters": false,
-    "eosAssistantEnabled": true,
+    "eosAssistantEnabled": false,
     "eosAssistantAdminOnly": false,
     "eosStrictProtectedAdapterAcl": false,
     "eosInstallerGroups": [
@@ -526,11 +531,15 @@
     "eosRequireFirstLoginPassword": true,
     "eosFirstLoginPasswordMinLength": 10,
     "eosAutoAssignDefaultRoleUsers": true,
-    "eosPasswordlessFirstLogin": true,
+    "eosPasswordlessFirstLogin": false,
     "eosPasswordlessFirstLoginPrivateNetworkOnly": true,
     "eosPasswordClaimTtlMinutes": 10,
     "eosHideLegacyBackupFromNonAdmins": true,
-    "nexowattHideLegacyBackupFromNonAdmins": true
+    "nexowattHideLegacyBackupFromNonAdmins": true,
+    "eosAllowPasswordlessFirstLogin": false,
+    "eosRequireFirstLoginPasswordChange": true,
+    "eosAutoAssignStandardAccounts": true,
+    "eosAssistEnabled": false
   },
   "notifications": [
     {
@@ -1098,5 +1107,5 @@
       }
     }
   },
-  "version": "7.9.92"
+  "version": "7.9.95"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "iobroker.eos-admin",
   "description": "NexoWatt EOS Admin stable product release with compact login, role-safe services and self-healing sales defaults",
-  "version": "7.9.92",
+  "version": "7.9.95",
   "contributors": [
     "bluefox <dogafox@gmail.com>",
     "apollon77",
@@ -86,7 +86,7 @@
   "main": "build/main.js",
   "files": [
     "admin/",
-    "build",
+    "build/",
     "docs/",
     "adminWww/",
     "public/",
@@ -94,31 +94,17 @@
     "LICENSE",
     "THIRD_PARTY_NOTICES.md",
     "NEXOWATT_PROPRIETARY_LICENSE.md",
-    "admin/LICENSE-NEXOWATT.md",
-    "adminWww/LICENSE-NEXOWATT.md",
     "NEXOWATT_PUBLIC_NPM_DISTRIBUTION.md",
-    "tools/nexowatt-publish-channel-guard.cjs",
-    "tools/nexowatt-validate-package.cjs",
     "README.md",
-    "tools/nexowatt-generate-repo-entry.cjs",
-    "tools/nexowatt-patch-repo.cjs",
     "NEXOWATT_EOS_BUILD_INFO.json",
     "NEXOWATT_EOS_STANDALONE.md",
-    "tools/nexowatt-generate-eos-admin-repo-entry.cjs",
-    "tools/nexowatt-repair-eos-admin-update.cjs",
-    "tools/nexowatt-clean-legacy-runtime.cjs",
-    "tools/nexowatt-runtime-cleanup-selftest.cjs",
-    "tools/nexowatt-account-management-selftest.cjs",
-    "tools/nexowatt-modern-ui-selftest.cjs",
-    "tools/nexowatt-login-layout-selftest.cjs",
-    "README_STABILITY_V7.9.92.md",
-    "RELEASE_NOTES_V7.9.92.md",
-    "PUBLISH_STABLE_V7.9.92.md",
-    "INSTALL_TEST_V7.9.92.md",
-    "RELEASE_ACCEPTANCE_V7.9.92.md",
-    "tools/nexowatt-internal-reserve-selftest.cjs",
-    "tools/nexowatt-ensure-release-defaults.cjs",
-    "tools/nexowatt-release-defaults-selftest.cjs"
+    "NEXOWATT_EOS_STABLE_7.9.94.md",
+    "README_STABILITY_V7.9.95.md",
+    "RELEASE_NOTES_V7.9.95.md",
+    "PUBLISH_STABLE_V7.9.95.md",
+    "INSTALL_TEST_V7.9.95.md",
+    "RELEASE_ACCEPTANCE_V7.9.95.md",
+    "tools/nexowatt-repair-eos-admin-update.cjs"
   ],
   "scripts": {
     "npm": "npm i -f && cd src-admin && npm i -f",
@@ -129,7 +115,7 @@
     "test:integration": "mocha test/integration --exit && npm run test:gui && npm run test:rule && npm run test:unit",
     "test:rule": "mocha test/rule --exit",
     "test:gui": "mocha test/*.gui.js --exit",
-    "prepublishOnly": "npm run prepare:eos-release-defaults && npm run check:eos-publish-channel && npm run check:eos-package && npm run check:eos-stability",
+    "prepublishOnly": "npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run check:eos-publish-channel && npm run check:eos-package && npm run check:eos-stability",
     "build": "npm run build:frontend && npm run build:backend && npm run clean:eos-runtime",
     "build:backend": "tsc -p tsconfig.build.json && tsx tasks.mts --backend-i18n",
     "build:frontend": "tsx tasks.mts",
@@ -153,12 +139,12 @@
     "nexowatt:repo-entry": "node tools/nexowatt-generate-repo-entry.cjs",
     "nexowatt:patch-repo": "node tools/nexowatt-patch-repo.cjs",
     "nexowatt:repair-update": "node tools/nexowatt-repair-eos-admin-update.cjs",
-    "check:eos-stability": "node tools/nexowatt-stability-check.cjs && node tools/nexowatt-esm-syntax-selftest.cjs && node tools/nexowatt-import-integrity-selftest.cjs && node tools/nexowatt-entrypoint-smoke-selftest.cjs && node tools/nexowatt-frontend-graph-check.cjs && node tools/nexowatt-policy-selftest.cjs && node tools/nexowatt-publish-channel-selftest.cjs && node tools/nexowatt-release-defaults-selftest.cjs && node tools/nexowatt-role-access-selftest.cjs && node tools/nexowatt-internal-reserve-selftest.cjs && node tools/nexowatt-first-login-selftest.cjs && node tools/nexowatt-account-management-selftest.cjs && node tools/nexowatt-modern-ui-selftest.cjs && node tools/nexowatt-login-layout-selftest.cjs && node tools/nexowatt-branding-selftest.cjs && node tools/nexowatt-default-port-selftest.cjs && node tools/nexowatt-module-popup-selftest.cjs && node tools/nexowatt-datapoint-selftest.cjs && node tools/nexowatt-update-selftest.cjs && node tools/nexowatt-datapoint-interaction-selftest.cjs && node tools/nexowatt-manual-write-policy-selftest.cjs && node tools/nexowatt-value-column-selftest.cjs && node tools/nexowatt-native-shell-selftest.cjs && node tools/nexowatt-assistant-separation-selftest.cjs && node tools/nexowatt-runtime-cleanup-selftest.cjs",
+    "check:eos-stability": "node tools/nexowatt-stability-check.cjs && node tools/nexowatt-esm-syntax-selftest.cjs && node tools/nexowatt-import-integrity-selftest.cjs && node tools/nexowatt-entrypoint-smoke-selftest.cjs && node tools/nexowatt-frontend-graph-check.cjs && node tools/nexowatt-policy-selftest.cjs && node tools/nexowatt-publish-channel-selftest.cjs && node tools/nexowatt-release-defaults-selftest.cjs && node tools/nexowatt-role-access-selftest.cjs && node tools/nexowatt-internal-reserve-selftest.cjs && node tools/nexowatt-first-login-selftest.cjs && node tools/nexowatt-account-management-selftest.cjs && node tools/nexowatt-modern-ui-selftest.cjs && node tools/nexowatt-login-layout-selftest.cjs && node tools/nexowatt-branding-selftest.cjs && node tools/nexowatt-default-port-selftest.cjs && node tools/nexowatt-module-popup-selftest.cjs && node tools/nexowatt-datapoint-selftest.cjs && node tools/nexowatt-update-selftest.cjs && node tools/nexowatt-datapoint-interaction-selftest.cjs && node tools/nexowatt-manual-write-policy-selftest.cjs && node tools/nexowatt-value-column-selftest.cjs && node tools/nexowatt-native-shell-selftest.cjs && node tools/nexowatt-assistant-separation-selftest.cjs && node tools/nexowatt-runtime-cleanup-selftest.cjs && node tools/nexowatt-version-sync-selftest.cjs && node tools/nexowatt-merge-update-selftest.cjs && npm run check:eos-stable-v95",
     "nexowatt:patch-built-frontend": "node tools/nexowatt-patch-built-frontend.cjs",
     "clean:eos-runtime": "node tools/nexowatt-clean-legacy-runtime.cjs",
-    "precheck:eos-package": "npm run prepare:eos-release-defaults && npm run clean:eos-runtime",
-    "precheck:eos-stability": "npm run prepare:eos-release-defaults && npm run clean:eos-runtime",
-    "prepack": "node tools/nexowatt-clean-legacy-runtime.cjs --quiet",
+    "precheck:eos-package": "npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run clean:eos-runtime",
+    "precheck:eos-stability": "npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run clean:eos-runtime",
+    "prepack": "node tools/nexowatt-sync-release-version.cjs --quiet && node tools/nexowatt-clean-legacy-runtime.cjs --quiet",
     "check:eos-esm": "node tools/nexowatt-esm-syntax-selftest.cjs",
     "check:eos-imports": "node tools/nexowatt-import-integrity-selftest.cjs",
     "check:eos-release": "npm run check:eos-package && npm run check:eos-stability && npm pack --dry-run",
@@ -173,7 +159,11 @@
     "test:eos-login-layout": "node tools/nexowatt-login-layout-selftest.cjs",
     "test:eos-release-defaults": "node tools/nexowatt-release-defaults-selftest.cjs",
     "prepare:eos-release-defaults": "node tools/nexowatt-ensure-release-defaults.cjs",
-    "normalize:eos-release": "npm run prepare:eos-release-defaults"
+    "normalize:eos-release": "npm run prepare:eos-release-defaults",
+    "sync:eos-version": "node tools/nexowatt-sync-release-version.cjs",
+    "test:eos-version-sync": "node tools/nexowatt-version-sync-selftest.cjs",
+    "verify:eos-merge": "node tools/nexowatt-merge-update-selftest.cjs",
+    "check:eos-stable-v95": "node tools/nexowatt-stable-v95-selftest.cjs"
   },
   "author": "NexoWatt",
   "private": false,
@@ -184,6 +174,7 @@
   },
   "nexowattReleasePolicy": {
     "distTag": "latest",
-    "purpose": "accepted stable NexoWatt EOS sales-product release 7.9.92"
-  }
+    "purpose": "accepted stable NexoWatt EOS sales-product release 7.9.95"
+  },
+  "publisher": "NexoWatt"
 }

package/PUBLISH_STABLE_V7.9.92.md

@@ -1,19 +0,0 @@
-# Veröffentlichung 7.9.92
-
-```powershell
-npm login
-npm whoami
-npm run normalize:eos-release
-npm run check:eos-publish-channel
-npm run check:eos-package
-npm run check:eos-stability
-npm publish --dry-run --tag latest
-npm publish --tag latest
-```
-
-Danach prüfen:
-
-```powershell
-npm view iobroker.eos-admin@latest version
-npm dist-tag ls iobroker.eos-admin
-```

package/README_STABILITY_V7.9.92.md

@@ -1,14 +0,0 @@
-# NexoWatt EOS Admin 7.9.92
-
-Stable Verkaufsprodukt-Version. Diese Version übernimmt die Bedien-, Rollen- und Login-Korrekturen aus 7.9.91 und härtet die Release-Vorbereitung.
-
-Vor Paketprüfung und Veröffentlichung werden folgende verbindliche Standardwerte automatisch gesetzt:
-
-- Authentifizierung aktiv
-- EOS Admin Standardport 8081
-- interner Admin nur für Admin/Service
-- interne BackItUp-Notfallreserve nur für Admin/Service
-- NexoWatt-Backup-Sichtbarkeitskompatibilität aktiv
-- Erstpasswort-Pflicht aktiv
-
-Die Normalisierung verändert keine bestehenden Kundendaten auf einem installierten System; sie betrifft die Paketmetadaten des zu veröffentlichenden Adapters.

package/RELEASE_ACCEPTANCE_V7.9.92.md

@@ -1,12 +0,0 @@
-# Release-Abnahme 7.9.92
-
-- [ ] `npm run check:eos-publish-channel` erfolgreich
-- [ ] `npm run check:eos-package` erfolgreich
-- [ ] `npm run check:eos-stability` erfolgreich
-- [ ] `npm publish --dry-run --tag latest` erfolgreich
-- [ ] Admin/Service sieht `admin.0` und `backitup.0`
-- [ ] Installateur und Endkunde sehen `admin.0` und `backitup.0` nicht
-- [ ] NexoWatt Backup bleibt rollenabhängig erreichbar
-- [ ] Login und Erstanmeldung funktionieren
-- [ ] Standardport 8081
-- [ ] Reboot- und Rollbacktest erfolgreich

package/RELEASE_NOTES_V7.9.92.md

@@ -1,17 +0,0 @@
-# Release Notes – NexoWatt EOS Admin 7.9.92
-
-## Behoben
-
-- Der npm-Publish konnte in einem älteren oder unvollständig aktualisierten Arbeitsordner mit `internal backup reserve must default to Admin/Service visibility` abbrechen.
-- Ein neuer Release-Default-Schritt stellt die beiden Backup-Reserve-Flags vor allen relevanten Prüfungen automatisch auf den verbindlichen sicheren Wert `true`.
-- Eine eigene Regression prüft fehlende, falsche und bereits korrekte Werte.
-
-## Unverändert
-
-- Standardport 8081
-- npm-Dist-Tag `latest`
-- Admin-/BackItUp-Notfallreserve nur für Admin/Service
-- NexoWatt Sicherung entsprechend Rollenfreigabe
-- kompakte Anmeldung und Erstaktivierung
-- klickbare Installer-/Endkundenübersicht
-- EOS Assist im Header

package/tools/nexowatt-account-management-selftest.cjs

@@ -1,61 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-const fs = require('fs');
-const path = require('path');
-const root = path.resolve(__dirname, '..');
-const read = rel => fs.readFileSync(path.join(root, rel), 'utf8');
-const json = rel => JSON.parse(read(rel));
-let bad = false;
-const fail = msg => { console.error(`[NexoWatt EOS account management] ${msg}`); bad = true; };
-
-const mainSource = read('src/main.ts');
-const mainBuilt = read('build/main.js');
-const webSource = read('src/lib/web.ts');
-const webBuilt = read('build/lib/web.js');
-const sourceUi = read('src-admin/public/js/eos-account-management.js');
-const builtUi = read('adminWww/js/eos-account-management.js');
-const roleUi = read('adminWww/js/eos-role-ui.js');
-const css = read('adminWww/css/nexowatt-native-shell.css');
-const index = read('adminWww/index.html');
-const info = json('NEXOWATT_EOS_BUILD_INFO.json');
-const shellTag = String(info.shellCacheTag || info.shellCacheVersion);
-
-for (const code of [mainSource, mainBuilt]) {
-  for (const marker of [
-    'system.user.installer', 'system.user.guest', 'ensureEosDefaultRoleUsers', 'unknown random bootstrap secret',
-    'eosPasswordSetupRequired', 'personal password setup is required',
-  ]) if (!code.includes(marker)) fail(`main account marker missing: ${marker}`);
-}
-for (const code of [webSource, webBuilt]) {
-  for (const marker of [
-    'getEosManagedAccounts', 'sendEosAccountManagement', 'resetEosAccountPassword',
-    '/nexowatt/account/manage', '/nexowatt/account/reset', 'x-nexowatt-eos-account-reset',
-    'canResetInstaller', 'canResetEndUser', "targetUserId === 'system.user.admin'", 'targetUserId === access.userId',
-    "access.role === 'installer' && explicitlyManagedRole !== 'enduser'",
-    'explicit member of a managed EOS installer/end-user group', 'passwordResetAt', 'passwordResetBy',
-    "passwordResetMode = 'passwordless-first-activation'", 'accountDisabled',
-  ]) if (!code.includes(marker)) fail(`web account marker missing: ${marker}`);
-  if (!/randomBytes[^\n]{0,40}48/.test(code)) fail('reset does not generate an unknown random bootstrap secret');
-  if (!code.includes('const explicitInstaller = targetAccess.groups.some')) fail('reset target is not restricted to explicit installer membership');
-  if (!code.includes('const explicitEndUser = targetAccess.groups.some')) fail('reset target is not restricted to explicit end-user membership');
-}
-
-for (const marker of [
-  'v91-account-management-under-access-rights', "['admin', 'installer']", 'nexowatt/account/manage',
-  'nexowatt/account/reset', 'X-NexoWatt-EOS-Account-Reset', 'data.canResetInstaller === true',
-  "account.role === 'enduser'", 'Admin/Service', 'Installateure', 'NEXOWATT_EOS_ACCOUNT_MANAGEMENT',
-  'ensureEntrySurface', "currentRoute() !== 'tab-users'", 'eos-account-management-entry',
-]) if (!sourceUi.includes(marker)) fail(`account UI marker missing: ${marker}`);
-if (sourceUi.includes("launcher.className = 'eos-account-management-launcher'")) fail('standalone account launcher is still created');
-if (sourceUi.includes('new MutationObserver')) fail('account management adds a second broad MutationObserver');
-if (sourceUi !== builtUi) fail('account management source/build drift');
-if (!roleUi.includes("route === 'tab-users'")) fail('installer cannot reach Zugänge & Rechte');
-if (roleUi.includes('NEXOWATT_EOS_ACCOUNT_MANAGEMENT.open')) fail('role overview opens account management outside Zugänge & Rechte');
-if (!index.includes(`eos-account-management.js?v=${shellTag}`)) fail('account management asset is not active with the current cache tag');
-for (const marker of [
-  '.eos-account-management-entry', '.eos-account-management-overlay', '.eos-account-management-dialog',
-  '.eos-account-row', '.eos-account-reset', 'html.eos-account-page-installer',
-]) if (!css.includes(marker)) fail(`account management CSS marker missing: ${marker}`);
-
-if (bad) process.exit(1);
-console.log('[NexoWatt EOS account management] OK');

package/tools/nexowatt-clean-legacy-runtime.cjs

@@ -1,147 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-
-const DEFAULT_ROOT = path.resolve(__dirname, '..');
-const LEGACY_OVERLAYS = [
-  'adminWww/js/eos-branding.js',
-  'adminWww/js/eos-security-ui.js',
-  'adminWww/js/eos-console-quiet.js',
-  'adminWww/js/eos-objects-state-tools.js',
-  'adminWww/js/eos-performance-guard.js',
-  'adminWww/js/eos-runtime-fixes.js',
-  'adminWww/js/eos-hard-logout.js',
-  'adminWww/css/eos-branding.css',
-  'src-admin/public/js/eos-branding.js',
-  'src-admin/public/js/eos-security-ui.js',
-  'src-admin/public/js/eos-console-quiet.js',
-  'src-admin/public/js/eos-objects-state-tools.js',
-  'src-admin/public/js/eos-performance-guard.js',
-  'src-admin/public/js/eos-runtime-fixes.js',
-  'src-admin/public/js/eos-hard-logout.js',
-  'src-admin/public/css/eos-branding.css',
-];
-
-const readJson = file => JSON.parse(fs.readFileSync(file, 'utf8'));
-
-function runtimeNumber(root) {
-  const info = readJson(path.join(root, 'NEXOWATT_EOS_BUILD_INFO.json'));
-  const value = Number(String(info.runtimeEntry || '').replace(/^v/, ''));
-  if (!Number.isFinite(value)) {
-    throw new Error(`Invalid runtimeEntry in NEXOWATT_EOS_BUILD_INFO.json: ${info.runtimeEntry}`);
-  }
-  return value;
-}
-
-function walkFiles(dir) {
-  if (!fs.existsSync(dir)) return [];
-  const result = [];
-  const stack = [dir];
-  while (stack.length) {
-    const current = stack.pop();
-    for (const entry of fs.readdirSync(current, { withFileTypes: true })) {
-      const absolute = path.join(current, entry.name);
-      if (entry.isDirectory()) stack.push(absolute);
-      else if (entry.isFile()) result.push(absolute);
-    }
-  }
-  return result;
-}
-
-function isLegacyVersionedRuntime(file, activeRuntime) {
-  const name = path.basename(file);
-  const versionMatch = name.match(/-v(\d+)\.(?:js|js\.map|css|css\.map)$/i);
-  if (versionMatch) return Number(versionMatch[1]) !== activeRuntime;
-  const remoteMatch = name.match(/^remoteEntry-v(\d+)\.(?:js|js\.map)$/i);
-  if (remoteMatch) return Number(remoteMatch[1]) !== activeRuntime;
-
-  // Remove historical emergency bundles which predate the consolidated runtime
-  // naming and must never survive in a current EOS Admin source tree.
-  return /(?:DPWrite|DPAdapter|DPw\d+|NoLock|Unrestricted|force-version|delete-services-hardfix)/i.test(name) && /\.(?:js|js\.map)$/i.test(name);
-}
-
-function collectLegacyRuntimeFiles(root = DEFAULT_ROOT) {
-  const activeRuntime = runtimeNumber(root);
-  const scanRoots = [
-    path.join(root, 'adminWww', 'assets'),
-    path.join(root, 'adminWww'),
-    path.join(root, 'src-admin', 'build', 'assets'),
-    path.join(root, 'src-admin', 'build'),
-  ];
-  const files = new Set();
-  for (const scanRoot of scanRoots) {
-    for (const file of walkFiles(scanRoot)) {
-      if (isLegacyVersionedRuntime(file, activeRuntime)) files.add(file);
-    }
-  }
-  for (const rel of LEGACY_OVERLAYS) {
-    const file = path.join(root, rel);
-    if (fs.existsSync(file)) files.add(file);
-  }
-  return { activeRuntime, files: [...files].sort() };
-}
-
-function cleanLegacyRuntime(options = {}) {
-  const root = path.resolve(options.root || DEFAULT_ROOT);
-  const dryRun = options.dryRun === true;
-  const quiet = options.quiet === true;
-  const silent = options.silent === true;
-  const { activeRuntime, files } = collectLegacyRuntimeFiles(root);
-  const removed = [];
-  const failed = [];
-
-  for (const file of files) {
-    if (dryRun) {
-      removed.push(file);
-      continue;
-    }
-    try {
-      try {
-        fs.rmSync(file, { force: true });
-      } catch (firstError) {
-        // ZIP extraction tools on Windows may preserve a read-only bit. Make a
-        // single controlled retry before reporting a real cleanup failure.
-        try { fs.chmodSync(file, 0o666); } catch (_) { /* best effort */ }
-        fs.rmSync(file, { force: true });
-      }
-      if (!fs.existsSync(file)) removed.push(file);
-      else failed.push({ file, error: 'file still exists after removal' });
-    } catch (error) {
-      failed.push({ file, error: error?.message || String(error) });
-    }
-  }
-
-  if (failed.length) {
-    const details = failed.map(item => `${path.relative(root, item.file)}: ${item.error}`).join(os.EOL);
-    throw new Error(`Could not remove ${failed.length} legacy runtime file(s):${os.EOL}${details}`);
-  }
-
-  if (!silent) {
-    if (!quiet) {
-      console.log(`[NexoWatt EOS runtime cleanup] OK (runtime v${activeRuntime}, removed ${removed.length} legacy file${removed.length === 1 ? '' : 's'})`);
-    } else if (removed.length) {
-      console.log(`[NexoWatt EOS runtime cleanup] removed ${removed.length} legacy runtime files before validation`);
-    }
-  }
-
-  return { activeRuntime, removed };
-}
-
-if (require.main === module) {
-  try {
-    cleanLegacyRuntime({ dryRun: process.argv.includes('--dry-run'), quiet: process.argv.includes('--quiet') });
-  } catch (error) {
-    console.error(`[NexoWatt EOS runtime cleanup] ERROR: ${error?.stack || error}`);
-    process.exit(1);
-  }
-}
-
-module.exports = {
-  LEGACY_OVERLAYS,
-  collectLegacyRuntimeFiles,
-  cleanLegacyRuntime,
-  isLegacyVersionedRuntime,
-};