iobroker.eos-admin 7.9.93 → 7.9.95

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "iobroker.eos-admin",
-  "description": "NexoWatt EOS Admin test candidate with compact login, visible NexoWatt publisher and live role-aware EOS Assist",
-  "version": "7.9.93",
+  "description": "NexoWatt EOS Admin stable product release with compact login, role-safe services and self-healing sales defaults",
+  "version": "7.9.95",
   "contributors": [
     "bluefox <dogafox@gmail.com>",
     "apollon77",
@@ -86,7 +86,7 @@
   "main": "build/main.js",
   "files": [
     "admin/",
-    "build",
+    "build/",
     "docs/",
     "adminWww/",
     "public/",
@@ -94,31 +94,17 @@
     "LICENSE",
     "THIRD_PARTY_NOTICES.md",
     "NEXOWATT_PROPRIETARY_LICENSE.md",
-    "admin/LICENSE-NEXOWATT.md",
-    "adminWww/LICENSE-NEXOWATT.md",
     "NEXOWATT_PUBLIC_NPM_DISTRIBUTION.md",
-    "tools/nexowatt-publish-channel-guard.cjs",
-    "tools/nexowatt-validate-package.cjs",
     "README.md",
-    "tools/nexowatt-generate-repo-entry.cjs",
-    "tools/nexowatt-patch-repo.cjs",
     "NEXOWATT_EOS_BUILD_INFO.json",
     "NEXOWATT_EOS_STANDALONE.md",
-    "tools/nexowatt-generate-eos-admin-repo-entry.cjs",
-    "tools/nexowatt-repair-eos-admin-update.cjs",
-    "tools/nexowatt-clean-legacy-runtime.cjs",
-    "tools/nexowatt-runtime-cleanup-selftest.cjs",
-    "tools/nexowatt-account-management-selftest.cjs",
-    "tools/nexowatt-modern-ui-selftest.cjs",
-    "tools/nexowatt-login-layout-selftest.cjs",
-    "tools/nexowatt-internal-reserve-selftest.cjs",
-    "tools/nexowatt-ensure-release-defaults.cjs",
-    "tools/nexowatt-release-defaults-selftest.cjs",
-    "README_STABILITY_V7.9.93.md",
-    "RELEASE_NOTES_V7.9.93.md",
-    "PUBLISH_STABLE_V7.9.93.md",
-    "INSTALL_TEST_V7.9.93.md",
-    "RELEASE_ACCEPTANCE_V7.9.93.md"
+    "NEXOWATT_EOS_STABLE_7.9.94.md",
+    "README_STABILITY_V7.9.95.md",
+    "RELEASE_NOTES_V7.9.95.md",
+    "PUBLISH_STABLE_V7.9.95.md",
+    "INSTALL_TEST_V7.9.95.md",
+    "RELEASE_ACCEPTANCE_V7.9.95.md",
+    "tools/nexowatt-repair-eos-admin-update.cjs"
   ],
   "scripts": {
     "npm": "npm i -f && cd src-admin && npm i -f",
@@ -129,7 +115,7 @@
     "test:integration": "mocha test/integration --exit && npm run test:gui && npm run test:rule && npm run test:unit",
     "test:rule": "mocha test/rule --exit",
     "test:gui": "mocha test/*.gui.js --exit",
-    "prepublishOnly": "npm run prepare:eos-release-defaults && npm run check:eos-publish-channel && npm run check:eos-package && npm run check:eos-stability",
+    "prepublishOnly": "npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run check:eos-publish-channel && npm run check:eos-package && npm run check:eos-stability",
     "build": "npm run build:frontend && npm run build:backend && npm run clean:eos-runtime",
     "build:backend": "tsc -p tsconfig.build.json && tsx tasks.mts --backend-i18n",
     "build:frontend": "tsx tasks.mts",
@@ -153,12 +139,12 @@
     "nexowatt:repo-entry": "node tools/nexowatt-generate-repo-entry.cjs",
     "nexowatt:patch-repo": "node tools/nexowatt-patch-repo.cjs",
     "nexowatt:repair-update": "node tools/nexowatt-repair-eos-admin-update.cjs",
-    "check:eos-stability": "node tools/nexowatt-stability-check.cjs && node tools/nexowatt-esm-syntax-selftest.cjs && node tools/nexowatt-import-integrity-selftest.cjs && node tools/nexowatt-entrypoint-smoke-selftest.cjs && node tools/nexowatt-frontend-graph-check.cjs && node tools/nexowatt-policy-selftest.cjs && node tools/nexowatt-publish-channel-selftest.cjs && node tools/nexowatt-release-defaults-selftest.cjs && node tools/nexowatt-role-access-selftest.cjs && node tools/nexowatt-internal-reserve-selftest.cjs && node tools/nexowatt-first-login-selftest.cjs && node tools/nexowatt-account-management-selftest.cjs && node tools/nexowatt-modern-ui-selftest.cjs && node tools/nexowatt-login-layout-selftest.cjs && node tools/nexowatt-branding-selftest.cjs && node tools/nexowatt-default-port-selftest.cjs && node tools/nexowatt-module-popup-selftest.cjs && node tools/nexowatt-datapoint-selftest.cjs && node tools/nexowatt-update-selftest.cjs && node tools/nexowatt-datapoint-interaction-selftest.cjs && node tools/nexowatt-manual-write-policy-selftest.cjs && node tools/nexowatt-value-column-selftest.cjs && node tools/nexowatt-native-shell-selftest.cjs && node tools/nexowatt-assistant-separation-selftest.cjs && node tools/nexowatt-runtime-cleanup-selftest.cjs",
+    "check:eos-stability": "node tools/nexowatt-stability-check.cjs && node tools/nexowatt-esm-syntax-selftest.cjs && node tools/nexowatt-import-integrity-selftest.cjs && node tools/nexowatt-entrypoint-smoke-selftest.cjs && node tools/nexowatt-frontend-graph-check.cjs && node tools/nexowatt-policy-selftest.cjs && node tools/nexowatt-publish-channel-selftest.cjs && node tools/nexowatt-release-defaults-selftest.cjs && node tools/nexowatt-role-access-selftest.cjs && node tools/nexowatt-internal-reserve-selftest.cjs && node tools/nexowatt-first-login-selftest.cjs && node tools/nexowatt-account-management-selftest.cjs && node tools/nexowatt-modern-ui-selftest.cjs && node tools/nexowatt-login-layout-selftest.cjs && node tools/nexowatt-branding-selftest.cjs && node tools/nexowatt-default-port-selftest.cjs && node tools/nexowatt-module-popup-selftest.cjs && node tools/nexowatt-datapoint-selftest.cjs && node tools/nexowatt-update-selftest.cjs && node tools/nexowatt-datapoint-interaction-selftest.cjs && node tools/nexowatt-manual-write-policy-selftest.cjs && node tools/nexowatt-value-column-selftest.cjs && node tools/nexowatt-native-shell-selftest.cjs && node tools/nexowatt-assistant-separation-selftest.cjs && node tools/nexowatt-runtime-cleanup-selftest.cjs && node tools/nexowatt-version-sync-selftest.cjs && node tools/nexowatt-merge-update-selftest.cjs && npm run check:eos-stable-v95",
     "nexowatt:patch-built-frontend": "node tools/nexowatt-patch-built-frontend.cjs",
     "clean:eos-runtime": "node tools/nexowatt-clean-legacy-runtime.cjs",
-    "precheck:eos-package": "npm run prepare:eos-release-defaults && npm run clean:eos-runtime",
-    "precheck:eos-stability": "npm run prepare:eos-release-defaults && npm run clean:eos-runtime",
-    "prepack": "node tools/nexowatt-clean-legacy-runtime.cjs --quiet",
+    "precheck:eos-package": "npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run clean:eos-runtime",
+    "precheck:eos-stability": "npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run clean:eos-runtime",
+    "prepack": "node tools/nexowatt-sync-release-version.cjs --quiet && node tools/nexowatt-clean-legacy-runtime.cjs --quiet",
     "check:eos-esm": "node tools/nexowatt-esm-syntax-selftest.cjs",
     "check:eos-imports": "node tools/nexowatt-import-integrity-selftest.cjs",
     "check:eos-release": "npm run check:eos-package && npm run check:eos-stability && npm pack --dry-run",
@@ -173,7 +159,11 @@
     "test:eos-login-layout": "node tools/nexowatt-login-layout-selftest.cjs",
     "test:eos-release-defaults": "node tools/nexowatt-release-defaults-selftest.cjs",
     "prepare:eos-release-defaults": "node tools/nexowatt-ensure-release-defaults.cjs",
-    "normalize:eos-release": "npm run prepare:eos-release-defaults"
+    "normalize:eos-release": "npm run prepare:eos-release-defaults",
+    "sync:eos-version": "node tools/nexowatt-sync-release-version.cjs",
+    "test:eos-version-sync": "node tools/nexowatt-version-sync-selftest.cjs",
+    "verify:eos-merge": "node tools/nexowatt-merge-update-selftest.cjs",
+    "check:eos-stable-v95": "node tools/nexowatt-stable-v95-selftest.cjs"
   },
   "author": "NexoWatt",
   "private": false,
@@ -184,6 +174,7 @@
   },
   "nexowattReleasePolicy": {
     "distTag": "latest",
-    "purpose": "test candidate for accepted stable NexoWatt EOS sales-product release 7.9.93"
-  }
+    "purpose": "accepted stable NexoWatt EOS sales-product release 7.9.95"
+  },
+  "publisher": "NexoWatt"
 }

package/INSTALL_TEST_V7.9.93.md

@@ -1,12 +0,0 @@
-# Installationstest 7.9.93
-
-```bash
-cd /opt/iobroker
-iobroker backup
-iobroker stop eos-admin.0
-npm install --no-save --omit=dev /PFAD/iobroker.eos-admin-7.9.93.tgz
-iobroker upload eos-admin
-iobroker restart eos-admin.0
-```
-
-Prüfen: Login ohne Scrollbalken, Modul-Suche `[NexoWatt]`, EOS-Assist-Konfiguration als Admin, Live-Fragen mit allen drei Rollen, Dienste-/Reservefilter, Neustart und Backup-Rücklesetest.

package/README_STABILITY_V7.9.93.md

@@ -1,15 +0,0 @@
-# NexoWatt EOS Admin 7.9.93 – Testkandidat
-
-Dieser Stand basiert auf der freigegebenen Admin-7-Linie und ist für den abschließenden Realtest vorgesehen.
-
-## Änderungen
-
-- kompakte Anmeldung ohne internen Scrollbalken
-- sichtbarer Herausgeber „NexoWatt“ in der Modulinstallation
-- EOS Assist mit authentifizierter, rollenabhängiger Live-Systemabfrage
-- EOS Assist bleibt schreibgeschützt und respektiert die Rechte von Admin, Installateur und Endkunde
-- technischer Paketname `iobroker.eos-admin` bleibt für Installation und Kompatibilität unverändert
-
-## Freigabe
-
-Erst nach bestandenem Anlagen-, Rollen-, Reboot- und Backup-Test darf 7.9.93 auf npm `latest` gesetzt werden.

package/RELEASE_ACCEPTANCE_V7.9.93.md

@@ -1,15 +0,0 @@
-# Release-Abnahme 7.9.93
-
-- [ ] Login-Karte ohne inneren Scrollbalken
-- [ ] sichtbare Modulbezeichnung `eos-admin [NexoWatt]`
-- [ ] technischer Paketname bleibt installierbar
-- [ ] EOS Assist durch Admin/Service konfigurierbar
-- [ ] EOS Assist liest reale Systemdaten statt statischer Texte
-- [ ] Admin erhält vollständige lesende Systemauskunft
-- [ ] Installateur erhält nur freigegebene Inbetriebnahme-/Diagnosedaten
-- [ ] Endkunde erhält nur freigegebene Smart-Home-/Betriebsdaten
-- [ ] EOS Assist kann keine Zustände oder Einstellungen schreiben
-- [ ] `admin.0` und `backitup.0` bleiben für Nicht-Admins verborgen
-- [ ] NexoWatt Backup funktioniert
-- [ ] Controller-Neustart bestanden
-- [ ] Rollback auf 7.9.86 bestanden

package/RELEASE_NOTES_V7.9.93.md

@@ -1,10 +0,0 @@
-# Release Notes – NexoWatt EOS Admin 7.9.93
-
-## Anmeldung
-Der unnötige vertikale Scrollbalken in der kompakten Login-Karte wurde entfernt.
-
-## Sichtbarer Herausgeber
-In der Modulinstallation erscheint bei `eos-admin` sichtbar nur noch `[NexoWatt]`. Die technische npm-Kennung bleibt intern unverändert.
-
-## EOS Assist
-EOS Assist verwendet jetzt den angemeldeten Benutzer, dessen EOS-Rolle und die freigegebenen Lesewerkzeuge. Nach Konfiguration von Anbieter, Zugang und Modell durch Admin/Service kann der Assistent Fragen zu realen Modulen, Diensten, Einstellungen, Geräten, Datenpunkten, Räumen/Funktionen, Logs, Historie und Sicherungen beantworten. Schreibzugriffe sind in diesem Stand nicht zulässig.

package/tools/nexowatt-account-management-selftest.cjs

@@ -1,61 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-const fs = require('fs');
-const path = require('path');
-const root = path.resolve(__dirname, '..');
-const read = rel => fs.readFileSync(path.join(root, rel), 'utf8');
-const json = rel => JSON.parse(read(rel));
-let bad = false;
-const fail = msg => { console.error(`[NexoWatt EOS account management] ${msg}`); bad = true; };
-
-const mainSource = read('src/main.ts');
-const mainBuilt = read('build/main.js');
-const webSource = read('src/lib/web.ts');
-const webBuilt = read('build/lib/web.js');
-const sourceUi = read('src-admin/public/js/eos-account-management.js');
-const builtUi = read('adminWww/js/eos-account-management.js');
-const roleUi = read('adminWww/js/eos-role-ui.js');
-const css = read('adminWww/css/nexowatt-native-shell.css');
-const index = read('adminWww/index.html');
-const info = json('NEXOWATT_EOS_BUILD_INFO.json');
-const shellTag = String(info.shellCacheTag || info.shellCacheVersion);
-
-for (const code of [mainSource, mainBuilt]) {
-  for (const marker of [
-    'system.user.installer', 'system.user.guest', 'ensureEosDefaultRoleUsers', 'unknown random bootstrap secret',
-    'eosPasswordSetupRequired', 'personal password setup is required',
-  ]) if (!code.includes(marker)) fail(`main account marker missing: ${marker}`);
-}
-for (const code of [webSource, webBuilt]) {
-  for (const marker of [
-    'getEosManagedAccounts', 'sendEosAccountManagement', 'resetEosAccountPassword',
-    '/nexowatt/account/manage', '/nexowatt/account/reset', 'x-nexowatt-eos-account-reset',
-    'canResetInstaller', 'canResetEndUser', "targetUserId === 'system.user.admin'", 'targetUserId === access.userId',
-    "access.role === 'installer' && explicitlyManagedRole !== 'enduser'",
-    'explicit member of a managed EOS installer/end-user group', 'passwordResetAt', 'passwordResetBy',
-    "passwordResetMode = 'passwordless-first-activation'", 'accountDisabled',
-  ]) if (!code.includes(marker)) fail(`web account marker missing: ${marker}`);
-  if (!/randomBytes[^\n]{0,40}48/.test(code)) fail('reset does not generate an unknown random bootstrap secret');
-  if (!code.includes('const explicitInstaller = targetAccess.groups.some')) fail('reset target is not restricted to explicit installer membership');
-  if (!code.includes('const explicitEndUser = targetAccess.groups.some')) fail('reset target is not restricted to explicit end-user membership');
-}
-
-for (const marker of [
-  'v93-account-management-under-access-rights', "['admin', 'installer']", 'nexowatt/account/manage',
-  'nexowatt/account/reset', 'X-NexoWatt-EOS-Account-Reset', 'data.canResetInstaller === true',
-  "account.role === 'enduser'", 'Admin/Service', 'Installateure', 'NEXOWATT_EOS_ACCOUNT_MANAGEMENT',
-  'ensureEntrySurface', "currentRoute() !== 'tab-users'", 'eos-account-management-entry',
-]) if (!sourceUi.includes(marker)) fail(`account UI marker missing: ${marker}`);
-if (sourceUi.includes("launcher.className = 'eos-account-management-launcher'")) fail('standalone account launcher is still created');
-if (sourceUi.includes('new MutationObserver')) fail('account management adds a second broad MutationObserver');
-if (sourceUi !== builtUi) fail('account management source/build drift');
-if (!roleUi.includes("route === 'tab-users'")) fail('installer cannot reach Zugänge & Rechte');
-if (roleUi.includes('NEXOWATT_EOS_ACCOUNT_MANAGEMENT.open')) fail('role overview opens account management outside Zugänge & Rechte');
-if (!index.includes(`eos-account-management.js?v=${shellTag}`)) fail('account management asset is not active with the current cache tag');
-for (const marker of [
-  '.eos-account-management-entry', '.eos-account-management-overlay', '.eos-account-management-dialog',
-  '.eos-account-row', '.eos-account-reset', 'html.eos-account-page-installer',
-]) if (!css.includes(marker)) fail(`account management CSS marker missing: ${marker}`);
-
-if (bad) process.exit(1);
-console.log('[NexoWatt EOS account management] OK');

package/tools/nexowatt-clean-legacy-runtime.cjs

@@ -1,147 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-
-const DEFAULT_ROOT = path.resolve(__dirname, '..');
-const LEGACY_OVERLAYS = [
-  'adminWww/js/eos-branding.js',
-  'adminWww/js/eos-security-ui.js',
-  'adminWww/js/eos-console-quiet.js',
-  'adminWww/js/eos-objects-state-tools.js',
-  'adminWww/js/eos-performance-guard.js',
-  'adminWww/js/eos-runtime-fixes.js',
-  'adminWww/js/eos-hard-logout.js',
-  'adminWww/css/eos-branding.css',
-  'src-admin/public/js/eos-branding.js',
-  'src-admin/public/js/eos-security-ui.js',
-  'src-admin/public/js/eos-console-quiet.js',
-  'src-admin/public/js/eos-objects-state-tools.js',
-  'src-admin/public/js/eos-performance-guard.js',
-  'src-admin/public/js/eos-runtime-fixes.js',
-  'src-admin/public/js/eos-hard-logout.js',
-  'src-admin/public/css/eos-branding.css',
-];
-
-const readJson = file => JSON.parse(fs.readFileSync(file, 'utf8'));
-
-function runtimeNumber(root) {
-  const info = readJson(path.join(root, 'NEXOWATT_EOS_BUILD_INFO.json'));
-  const value = Number(String(info.runtimeEntry || '').replace(/^v/, ''));
-  if (!Number.isFinite(value)) {
-    throw new Error(`Invalid runtimeEntry in NEXOWATT_EOS_BUILD_INFO.json: ${info.runtimeEntry}`);
-  }
-  return value;
-}
-
-function walkFiles(dir) {
-  if (!fs.existsSync(dir)) return [];
-  const result = [];
-  const stack = [dir];
-  while (stack.length) {
-    const current = stack.pop();
-    for (const entry of fs.readdirSync(current, { withFileTypes: true })) {
-      const absolute = path.join(current, entry.name);
-      if (entry.isDirectory()) stack.push(absolute);
-      else if (entry.isFile()) result.push(absolute);
-    }
-  }
-  return result;
-}
-
-function isLegacyVersionedRuntime(file, activeRuntime) {
-  const name = path.basename(file);
-  const versionMatch = name.match(/-v(\d+)\.(?:js|js\.map|css|css\.map)$/i);
-  if (versionMatch) return Number(versionMatch[1]) !== activeRuntime;
-  const remoteMatch = name.match(/^remoteEntry-v(\d+)\.(?:js|js\.map)$/i);
-  if (remoteMatch) return Number(remoteMatch[1]) !== activeRuntime;
-
-  // Remove historical emergency bundles which predate the consolidated runtime
-  // naming and must never survive in a current EOS Admin source tree.
-  return /(?:DPWrite|DPAdapter|DPw\d+|NoLock|Unrestricted|force-version|delete-services-hardfix)/i.test(name) && /\.(?:js|js\.map)$/i.test(name);
-}
-
-function collectLegacyRuntimeFiles(root = DEFAULT_ROOT) {
-  const activeRuntime = runtimeNumber(root);
-  const scanRoots = [
-    path.join(root, 'adminWww', 'assets'),
-    path.join(root, 'adminWww'),
-    path.join(root, 'src-admin', 'build', 'assets'),
-    path.join(root, 'src-admin', 'build'),
-  ];
-  const files = new Set();
-  for (const scanRoot of scanRoots) {
-    for (const file of walkFiles(scanRoot)) {
-      if (isLegacyVersionedRuntime(file, activeRuntime)) files.add(file);
-    }
-  }
-  for (const rel of LEGACY_OVERLAYS) {
-    const file = path.join(root, rel);
-    if (fs.existsSync(file)) files.add(file);
-  }
-  return { activeRuntime, files: [...files].sort() };
-}
-
-function cleanLegacyRuntime(options = {}) {
-  const root = path.resolve(options.root || DEFAULT_ROOT);
-  const dryRun = options.dryRun === true;
-  const quiet = options.quiet === true;
-  const silent = options.silent === true;
-  const { activeRuntime, files } = collectLegacyRuntimeFiles(root);
-  const removed = [];
-  const failed = [];
-
-  for (const file of files) {
-    if (dryRun) {
-      removed.push(file);
-      continue;
-    }
-    try {
-      try {
-        fs.rmSync(file, { force: true });
-      } catch (firstError) {
-        // ZIP extraction tools on Windows may preserve a read-only bit. Make a
-        // single controlled retry before reporting a real cleanup failure.
-        try { fs.chmodSync(file, 0o666); } catch (_) { /* best effort */ }
-        fs.rmSync(file, { force: true });
-      }
-      if (!fs.existsSync(file)) removed.push(file);
-      else failed.push({ file, error: 'file still exists after removal' });
-    } catch (error) {
-      failed.push({ file, error: error?.message || String(error) });
-    }
-  }
-
-  if (failed.length) {
-    const details = failed.map(item => `${path.relative(root, item.file)}: ${item.error}`).join(os.EOL);
-    throw new Error(`Could not remove ${failed.length} legacy runtime file(s):${os.EOL}${details}`);
-  }
-
-  if (!silent) {
-    if (!quiet) {
-      console.log(`[NexoWatt EOS runtime cleanup] OK (runtime v${activeRuntime}, removed ${removed.length} legacy file${removed.length === 1 ? '' : 's'})`);
-    } else if (removed.length) {
-      console.log(`[NexoWatt EOS runtime cleanup] removed ${removed.length} legacy runtime files before validation`);
-    }
-  }
-
-  return { activeRuntime, removed };
-}
-
-if (require.main === module) {
-  try {
-    cleanLegacyRuntime({ dryRun: process.argv.includes('--dry-run'), quiet: process.argv.includes('--quiet') });
-  } catch (error) {
-    console.error(`[NexoWatt EOS runtime cleanup] ERROR: ${error?.stack || error}`);
-    process.exit(1);
-  }
-}
-
-module.exports = {
-  LEGACY_OVERLAYS,
-  collectLegacyRuntimeFiles,
-  cleanLegacyRuntime,
-  isLegacyVersionedRuntime,
-};

package/tools/nexowatt-ensure-release-defaults.cjs

@@ -1,72 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const fs = require('node:fs');
-const path = require('node:path');
-
-const CANONICAL_NATIVE_DEFAULTS = Object.freeze({
-    auth: true,
-    port: 8081,
-    eosLockLegacyAdmin: true,
-    eosHideLegacyAdminFromNonAdmins: true,
-    eosHideLegacyBackupFromNonAdmins: true,
-    nexowattHideLegacyBackupFromNonAdmins: true,
-    eosRequireFirstLoginPassword: true,
-});
-
-/**
- * Enforce mandatory source defaults for every NexoWatt EOS sales release.
- * This normalizes the repository io-package.json only. Existing installed
- * instance configuration is not overwritten during adapter startup.
- */
-function ensureReleaseDefaults(ioPackage) {
-    if (!ioPackage || typeof ioPackage !== 'object' || Array.isArray(ioPackage)) {
-        throw new TypeError('io-package.json must contain a JSON object');
-    }
-    const native = ioPackage.native && typeof ioPackage.native === 'object' && !Array.isArray(ioPackage.native)
-        ? ioPackage.native
-        : (ioPackage.native = {});
-    const changes = [];
-    for (const [key, value] of Object.entries(CANONICAL_NATIVE_DEFAULTS)) {
-        if (native[key] !== value) {
-            changes.push({ key, previous: native[key], value });
-            native[key] = value;
-        }
-    }
-    return {
-        ioPackage,
-        changed: changes.length > 0,
-        fields: changes.map(change => `native.${change.key}`),
-        changes,
-    };
-}
-
-function ensureFile(filePath) {
-    const absolute = path.resolve(filePath);
-    const parsed = JSON.parse(fs.readFileSync(absolute, 'utf8'));
-    const result = ensureReleaseDefaults(parsed);
-    if (result.changed) {
-        fs.writeFileSync(absolute, `${JSON.stringify(result.ioPackage, null, 2)}\n`, 'utf8');
-    }
-    return { file: absolute, ...result };
-}
-
-if (require.main === module) {
-    const root = path.resolve(__dirname, '..');
-    const target = process.argv[2] || path.join(root, 'io-package.json');
-    try {
-        const result = ensureFile(target);
-        if (result.changed) {
-            console.log(
-                `[NexoWatt EOS release defaults] repaired ${result.changes.length} canonical value(s): ${result.changes.map(change => change.key).join(', ')}`,
-            );
-        } else {
-            console.log('[NexoWatt EOS release defaults] OK (canonical sales defaults already present)');
-        }
-    } catch (error) {
-        console.error(`[NexoWatt EOS release defaults] ${error instanceof Error ? error.message : String(error)}`);
-        process.exit(1);
-    }
-}
-
-module.exports = { CANONICAL_NATIVE_DEFAULTS, ensureReleaseDefaults, ensureFile };

package/tools/nexowatt-generate-eos-admin-repo-entry.cjs

@@ -1,37 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-const pkg = require('../package.json');
-const io = require('../io-package.json');
-const version = io.common.version || pkg.version;
-const base = (process.argv[2] || `https://unpkg.com/iobroker.eos-admin@${version}`).replace(/\/$/, '');
-const entry = {
-  'eos-admin': {
-    name: 'eos-admin',
-    version,
-    title: 'NexoWatt EOS Admin',
-    titleLang: io.common.titleLang,
-    desc: io.common.desc,
-    news: io.common.news,
-    meta: `${base}/io-package.json`,
-    icon: `${base}/admin/admin.png`,
-    extIcon: `${base}/admin/admin.svg`,
-    type: io.common.type || 'general',
-    mode: io.common.mode || 'daemon',
-    platform: io.common.platform || 'Javascript/Node.js',
-    connectionType: io.common.connectionType || 'local',
-    dataSource: io.common.dataSource || 'push',
-    adminUI: io.common.adminUI || { config: 'json' },
-    license: io.common.license || 'NexoWatt Proprietary',
-    licenseInformation: io.common.licenseInformation,
-    dependencies: io.common.dependencies || [{ 'js-controller': '>=6.0.11' }],
-    stopBeforeUpdate: false,
-    dontDelete: false,
-    nondeletable: false,
-    readme: `${base}/README.md`,
-    packetName: 'iobroker.eos-admin',
-    npmPackage: 'iobroker.eos-admin',
-    allowAdapterUpdate: true,
-    allowAdapterDelete: false,
-  }
-};
-console.log(JSON.stringify(entry, null, 2));

package/tools/nexowatt-generate-repo-entry.cjs

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-require('./nexowatt-generate-eos-admin-repo-entry.cjs');

package/tools/nexowatt-internal-reserve-selftest.cjs

@@ -1,57 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-const fs = require('fs');
-const path = require('path');
-const root = path.resolve(__dirname, '..');
-const read = rel => fs.readFileSync(path.join(root, rel), 'utf8');
-const json = rel => JSON.parse(read(rel));
-let bad = false;
-const fail = msg => { console.error(`[NexoWatt EOS internal reserve] ${msg}`); bad = true; };
-
-const mainSource = read('src/main.ts');
-const mainBuilt = read('build/main.js');
-const webSource = read('src/lib/web.ts');
-const webBuilt = read('build/lib/web.js');
-const role = read('adminWww/js/eos-role-ui.js');
-const boot = read('adminWww/js/eos-role-bootstrap.js');
-const drawer = read('src-admin/src/components/Drawer.tsx');
-const assist = read('adminWww/js/eos-assistant.js');
-const knowledge = read('src/lib/chat/assistantKnowledge.ts');
-const io = json('io-package.json');
-
-for (const code of [mainSource, mainBuilt]) {
-  for (const marker of [
-    "LEGACY_BACKUP_ADAPTER_NAME = 'backitup'", 'shouldHideLegacyBackupFromNonAdmins',
-    'getLegacyBackupAclObjectIds', 'ensureLegacyBackupVisibleOnlyToAdmins',
-    'EOS ACL guard restricted internal', '/^system\\.adapter\\.(?:admin|backitup)(?:\\.|$)/',
-    '/^(?:admin|backitup)\\.\\d+(?:\\.|$)/', 'internal Service reserve is Admin/Service-only',
-  ]) if (!code.includes(marker)) fail(`backend reserve marker missing: ${marker}`);
-}
-for (const code of [webSource, webBuilt]) {
-  for (const marker of [
-    "LEGACY_BACKUP_ADAPTER_NAME = 'backitup'", "CUSTOMER_BACKUP_ADAPTER_NAMES = ['nexowatt-backup', 'eos-backup']",
-    'nexowattBackup: true', "internalBackupReserve: role === 'admin'", 'hideLegacyBackupFromNonAdmins',
-    'legacyBackupAdapter', 'customerBackupAdapters',
-  ]) if (!code.includes(marker)) fail(`web reserve marker missing: ${marker}`);
-}
-for (const marker of [
-  'isOfficialAdminTab', 'isOfficialBackupTab', 'isOfficialReserveTab', 'isCustomerBackupTab',
-  'system.adapter.backitup', 'tab-backitup', 'nexowatt-backup', 'eos-backup',
-  'exact visible instance ID', 'data-eos-official-reserve-hidden', 'Reused virtual rows must be unhidden',
-]) if (!role.includes(marker)) fail(`role UI reserve marker missing: ${marker}`);
-for (const marker of ['isOfficialReserveTab', 'isCustomerBackupTab', 'backitup', 'nexowatt-backup']) {
-  if (!boot.includes(marker)) fail(`bootstrap reserve marker missing: ${marker}`);
-}
-for (const marker of ['System-Notfallsicherung', 'NexoWatt Sicherung', '^tab-backitup', 'nexowatt-backup|eos-backup']) {
-  if (!drawer.includes(marker)) fail(`Drawer reserve marker missing: ${marker}`);
-}
-if (!assist.includes('NexoWatt Backup') && !assist.includes('Sicherungsstatus')) fail('EOS Assist runtime lacks backup-system context');
-if (!knowledge.includes('NexoWatt Backup') || !knowledge.includes('Admin/Service')) fail('EOS Assist knowledge lacks role-aware backup context');
-if (io.native?.eosHideLegacyBackupFromNonAdmins !== true) fail('eosHideLegacyBackupFromNonAdmins must default to true');
-if (io.native?.nexowattHideLegacyBackupFromNonAdmins !== true) fail('nexowattHideLegacyBackupFromNonAdmins must default to true');
-const reserve = (io.native?.eosProtectedAdapters || []).find(entry => entry.adapter === 'backitup');
-if (!reserve?.enabled || !/Notfallreserve/i.test(String(reserve.note))) fail('backitup reserve is not clearly marked in the protected adapter defaults');
-if (role.includes("/^tab-(?:admin|backitup|nexowatt-backup)/")) fail('customer backup must not be grouped with internal reserves');
-
-if (bad) process.exit(1);
-console.log('[NexoWatt EOS internal reserve] OK');

package/tools/nexowatt-login-layout-selftest.cjs

@@ -1,62 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-
-const fs = require('fs');
-const path = require('path');
-
-const root = path.resolve(__dirname, '..');
-const read = rel => fs.readFileSync(path.join(root, rel), 'utf8');
-let bad = false;
-const fail = message => {
-    console.error(`[NexoWatt EOS login layout] ${message}`);
-    bad = true;
-};
-
-const css = read('adminWww/css/nexowatt-native-shell.css');
-const sourceCss = read('src-admin/public/css/nexowatt-native-shell.css');
-const login = read('src-admin/src/login/Login.tsx');
-const bootstrap = read('adminWww/js/eos-role-bootstrap.js');
-const index = read('adminWww/index.html');
-const buildInfo = JSON.parse(read('NEXOWATT_EOS_BUILD_INFO.json'));
-const shellTag = String(buildInfo.shellCacheTag || buildInfo.shellCacheVersion || '');
-
-if (css !== sourceCss) fail('login CSS source/build drift');
-if (!css.includes('outer frame is decorative only')) fail('decorative compact-frame contract is missing');
-if (css.includes('html.eos-login .MuiPaper-root:has(#username)')) fail('broad :has selector still styles the outer login Paper');
-
-const outer = css.match(/html\.eos-login main\.MuiPaper-root\s*\{([\s\S]*?)\n\}/)?.[1] || '';
-for (const marker of ['position: relative', 'width: 100%', 'min-height: 100vh', 'place-items: center', 'background: transparent !important', 'box-shadow: none !important']) {
-    if (!outer.includes(marker)) fail(`transparent viewport host rule missing: ${marker}`);
-}
-const decorative = css.match(/html\.eos-login main\.MuiPaper-root::before\s*\{([\s\S]*?)\n\}/)?.[1] || '';
-for (const marker of ["content: ''", 'width: min(390px, calc(100vw - 24px))', 'height: min(480px, calc(100vh - 24px))', 'transform: translate(-50%, -50%)', 'pointer-events: none']) {
-    if (!decorative.includes(marker)) fail(`decorative rear frame rule missing: ${marker}`);
-}
-const compactBlocks = [...css.matchAll(/html\.eos-login[^\{]*eos-login-card-modern[^\{]*\{([\s\S]*?)\n\}/g)].map(match => match[1]);
-if (!compactBlocks.length) fail('compact login card CSS block missing');
-for (const block of compactBlocks) {
-    if (/overflow\s*:\s*auto\s*!important/.test(block) || /overflow-y\s*:\s*(?:auto|scroll)/.test(block)) {
-        fail('compact login card still creates an internal scrollbar');
-    }
-}
-for (const marker of [
-    'html.eos-login main.MuiPaper-root > .eos-login-card-modern',
-    'html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#username)',
-    'html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#password)',
-    'width: min(334px, calc(100vw - 56px)) !important',
-    'height: min(424px, calc(100vh - 56px)) !important',
-    'max-height: none !important',
-    'overflow: hidden !important',
-    'scrollbar-width: none !important',
-    '::-webkit-scrollbar',
-]) if (!css.includes(marker)) fail(`inner compact card rule missing: ${marker}`);
-if (!css.includes('.eos-login-first-status:empty { display: none; min-height: 0; margin: 0; }')) fail('empty first-login status still reserves vertical space');
-if (!login.includes('Keep the familiar compact login page')) fail('native Login source lacks compact-page contract');
-if (!login.includes("overflowY: 'hidden'")) fail('native Login paper still enables vertical scrolling');
-if (login.includes('eos-login-role-selector-native') || login.includes('data-eos-account=')) fail('native Login source still renders role-selector buttons');
-if (!bootstrap.includes('compact normal-login first activation')) fail('runtime compact first-login contract missing');
-if (!bootstrap.includes("card.querySelectorAll('.eos-login-role-selector').forEach(element => element.remove())")) fail('runtime does not remove stale role-selector surfaces');
-if (/data-eos-account=|selector\.innerHTML/.test(bootstrap)) fail('runtime still injects a second role-selector panel');
-if (!shellTag || !index.includes(`nexowatt-native-shell.css?v=${shellTag}`)) fail('login CSS cache key is not aligned with build information');
-if (bad) process.exit(1);
-console.log('[NexoWatt EOS login layout] OK');