iobroker.eos-admin 7.9.95 → 7.9.96

package/adminWww/static/js/nexowatt-stable-login.js

@@ -1,4 +1,4 @@
-/* NexoWatt EOS stable runtime v94 */
+/* NexoWatt EOS stable runtime v96 */
 (() => {
   'use strict';
   const MANAGED_USERS = new Set(['installer', 'guest', 'user']);
@@ -21,8 +21,8 @@
   };
   const markLogin = () => {
     if (!isLogin()) return;
-    document.documentElement.classList.add('nw-eos-login-v94');
-    document.body?.classList.add('nw-eos-login-v94');
+    document.documentElement.classList.add('nw-eos-login-v96');
+    document.body?.classList.add('nw-eos-login-v96');
     const u=findInput('user'), p=findInput('password'), submit=findSubmit();
     if (u && p) {
       let card=commonAncestor(u,p);
@@ -44,7 +44,7 @@
           submit.setAttribute('aria-disabled','true');
         }
       };
-      if(!u.dataset.nwV94){u.dataset.nwV94='1';u.addEventListener('input',sync);p.addEventListener('input',sync);sync();}
+      if(!u.dataset.nwV96){u.dataset.nwV96='1';u.addEventListener('input',sync);p.addEventListener('input',sync);sync();}
     }
   };
   const hideLegacyUi = () => {
@@ -60,16 +60,16 @@
   };
   const apply=()=>{markLogin();hideLegacyUi();};
   const style=document.createElement('style');
-  style.id='nw-eos-stable-v94-css';
+  style.id='nw-eos-stable-v96-css';
   style.textContent=`
-    html.nw-eos-login-v94,body.nw-eos-login-v94{min-height:100%;overflow-x:hidden!important;overflow-y:auto!important}
-    .nw-eos-login-v94 [data-nw-login-shell="true"]{width:min(410px,calc(100vw - 28px))!important;min-height:540px!important;height:auto!important;max-height:none!important;overflow:visible!important;box-sizing:border-box!important;padding:22px!important}
-    .nw-eos-login-v94 [data-nw-login-card="true"]{width:min(354px,calc(100vw - 56px))!important;min-height:474px!important;height:auto!important;max-height:none!important;overflow:visible!important;box-sizing:border-box!important;padding-bottom:26px!important}
-    .nw-eos-login-v94 [data-nw-login-card="true"] *{scrollbar-width:none}
-    .nw-eos-login-v94 [data-nw-login-card="true"] *::-webkit-scrollbar{display:none!important;width:0!important;height:0!important}
-    .nw-eos-login-v94 [data-nw-login-card="true"] [role="alert"]{position:static!important;max-height:none!important;overflow:visible!important;white-space:normal!important}
+    html.nw-eos-login-v96,body.nw-eos-login-v96{min-height:100%;margin:0!important;overflow-x:hidden!important;overflow-y:auto!important}
+    .nw-eos-login-v96 [data-nw-login-shell="true"]{width:min(520px,calc(100vw - 28px))!important;min-height:590px!important;height:auto!important;max-height:none!important;overflow:visible!important;box-sizing:border-box!important;padding:22px!important}
+    .nw-eos-login-v96 [data-nw-login-card="true"]{width:min(460px,calc(100vw - 56px))!important;min-height:540px!important;height:auto!important;max-height:none!important;overflow:visible!important;box-sizing:border-box!important;padding-bottom:26px!important}
+    .nw-eos-login-v96 [data-nw-login-card="true"] *{scrollbar-width:none}
+    .nw-eos-login-v96 [data-nw-login-card="true"] *::-webkit-scrollbar{display:none!important;width:0!important;height:0!important}
+    .nw-eos-login-v96 [data-nw-login-card="true"] [role="alert"]{position:static!important;max-height:none!important;overflow:visible!important;white-space:normal!important}
     [data-eos-assist],.eos-assist,.nexowatt-eos-assist{display:none!important}
-    @media(max-height:620px){.nw-eos-login-v94 [data-nw-login-shell="true"]{min-height:0!important;margin:16px auto!important}.nw-eos-login-v94 [data-nw-login-card="true"]{min-height:0!important}}
+    @media(max-height:620px){.nw-eos-login-v96 [data-nw-login-shell="true"]{min-height:0!important;margin:16px auto!important}.nw-eos-login-v96 [data-nw-login-card="true"]{min-height:0!important}}
   `;
   (document.head||document.documentElement).appendChild(style);
   const observer=new MutationObserver(()=>requestAnimationFrame(apply));

package/adminWww/static/js/nexowatt-stable-v96.js

@@ -0,0 +1,82 @@
+(() => {
+    'use strict';
+    const VERSION = 'v96-spacious-login-first-password-fix';
+    const MANAGED_USERS = new Set(['installer', 'guest', 'user']);
+    const ASSIST_TEXT = /EOS\s*Assist/i;
+    const normalizeUser = value => String(value || '').trim().toLowerCase().replace(/^system\.user\./, '');
+    const styleId = 'nexowatt-stable-v96-style';
+
+    const ensureStyle = () => {
+        if (document.getElementById(styleId)) return;
+        const style = document.createElement('style');
+        style.id = styleId;
+        style.textContent = `
+            html.eos-login,html.eos-login body{margin:0!important;overflow-x:hidden!important;overflow-y:auto!important}
+            html.eos-login main.MuiPaper-root{box-sizing:border-box!important}
+            html.eos-login main.MuiPaper-root::before{width:min(520px,calc(100vw - 24px))!important;min-height:590px!important;height:min(640px,calc(100dvh - 24px))!important}
+            html.eos-login .eos-login-card-modern,
+            html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#username),
+            html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#password),
+            html.eos-login [data-nw-login-card="true"]{
+                width:min(460px,calc(100vw - 56px))!important;
+                min-height:540px!important;
+                height:auto!important;
+                max-width:460px!important;
+                max-height:none!important;
+                padding:34px 36px 32px!important;
+                overflow:visible!important;
+                box-sizing:border-box!important
+            }
+            html.eos-login .MuiAlert-root,html.eos-login [role="alert"]{position:static!important;width:100%!important;max-width:100%!important;max-height:none!important;overflow:visible!important;white-space:normal!important;overflow-wrap:anywhere!important;flex-shrink:0!important}
+            html.eos-login .eos-login-card-modern *,html.eos-login [data-nw-login-card="true"] *{box-sizing:border-box;max-width:100%}
+            html.eos-assist-disabled .eos-assist-root,html.eos-assist-disabled .eos-assist-header-root,[data-eos-assist-root]{display:none!important}
+            @media(max-width:560px){html.eos-login .eos-login-card-modern,html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#username),html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#password),html.eos-login [data-nw-login-card="true"]{width:calc(100vw - 38px)!important;max-width:none!important;min-height:0!important;padding:26px 22px!important}}
+            @media(max-height:690px){html.eos-login .eos-login-card-modern,html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#username),html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#password),html.eos-login [data-nw-login-card="true"]{min-height:0!important}}
+        `;
+        document.head.appendChild(style);
+    };
+
+    const findCard = (username, password) => username?.closest?.('.MuiPaper-root,form,main,section')
+        || password?.closest?.('.MuiPaper-root,form,main,section');
+    const findSubmit = card => card?.querySelector?.('button[type="submit"]')
+        || Array.from(card?.querySelectorAll?.('button') || []).find(button => /anmelden|login|sign in|aanmelden/i.test(button.textContent || ''));
+
+    const apply = () => {
+        ensureStyle();
+        document.documentElement.classList.add('eos-assist-disabled');
+        document.querySelectorAll('.eos-assist-root,.eos-assist-header-root,[data-eos-assist-root],.eos-passwordless-launcher')
+            .forEach(element => element.remove());
+        const username = document.querySelector('input#username,input[name="username"]');
+        const password = document.querySelector('input#password,input[name="password"]');
+        const name = normalizeUser(username?.value);
+        const pass = String(password?.value || '');
+        const card = findCard(username, password);
+        const submit = findSubmit(card);
+        if (submit && MANAGED_USERS.has(name) && !pass) {
+            submit.disabled = true;
+            submit.classList.add('Mui-disabled');
+            submit.setAttribute('aria-disabled', 'true');
+        }
+        document.querySelectorAll('body *').forEach(element => {
+            if (element.children.length) return;
+            const value = element.textContent || '';
+            if (/\[iobroker\.eos-admin@[^\]]+\]/i.test(value)) element.textContent = value.replace(/\[iobroker\.eos-admin@[^\]]+\]/ig, '[NexoWatt]');
+            if (ASSIST_TEXT.test(value) && element.closest?.('.eos-assist-root,.eos-assist-header-root')) element.closest('.eos-assist-root,.eos-assist-header-root')?.remove();
+        });
+    };
+
+    let scheduled = false;
+    const schedule = () => {
+        if (scheduled) return;
+        scheduled = true;
+        queueMicrotask(() => { scheduled = false; apply(); });
+    };
+    const start = () => {
+        apply();
+        new MutationObserver(schedule).observe(document.documentElement, { subtree: true, childList: true, characterData: true });
+        document.addEventListener('input', schedule, true);
+        document.addEventListener('change', schedule, true);
+    };
+    document.readyState === 'loading' ? document.addEventListener('DOMContentLoaded', start, { once: true }) : start();
+    window.NEXOWATT_EOS_STABLE_V96 = { version: VERSION, refresh: apply };
+})();

package/io-package.json

@@ -1,7 +1,7 @@
 {
   "common": {
     "name": "eos-admin",
-    "version": "7.9.95",
+    "version": "7.9.96",
     "titleLang": {
       "en": "NexoWatt EOS Admin",
       "de": "NexoWatt EOS Admin",
@@ -282,6 +282,11 @@
         "en": "Fixes release validation for the modern EOS navigation icon update: package, lockfile and src-admin versions are synchronized, branding cache versioning is separated from the stable v79 React runtime, and future package checks verify both values explicitly.",
         "de": "Korrigiert die Release-Validierung des modernen EOS-Navigations-Icon-Updates: Paket-, Lockfile- und src-admin-Versionen sind synchron, die Branding-Cache-Version ist sauber von der stabilen v79-React-Runtime getrennt und zukünftige Paketprüfungen kontrollieren beide Werte ausdrücklich.",
         "nl": "Herstelt de releasevalidatie van de moderne EOS-navigatie-iconen: pakket-, lockfile- en src-admin-versies zijn gesynchroniseerd, de branding-cacheversie is gescheiden van de stabiele v79 React-runtime en toekomstige pakketcontroles valideren beide waarden expliciet."
+      },
+      "7.9.96": {
+        "de": "Native Übersicht für Admin, Installateur und Endkunde, read-only EMS-Live-Diagnose aus dem NexoWatt UI Adapter, größere scrollfreie Anmeldung sowie reparierte verpflichtende persönliche Kennwortvergabe nach der ersten Anmeldung mit nexowatt.",
+        "en": "Native overview for Admin, Installer and End User, read-only EMS live diagnosis from the NexoWatt UI adapter, a larger scroll-free login card, and repaired mandatory personal password setup after first sign-in with nexowatt.",
+        "nl": "Native overzicht voor Admin, Installateur en Eindgebruiker, read-only EMS-live diagnose uit de NexoWatt UI-adapter, een groter aanmeldvenster zonder interne schuifbalken en herstelde verplichte persoonlijke wachtwoordinstelling na de eerste aanmelding met nexowatt."
       }
     },
     "desc": {
@@ -319,7 +324,7 @@
     "icon": "admin.svg",
     "messagebox": true,
     "enabled": true,
-    "extIcon": "https://unpkg.com/iobroker.eos-admin@7.9.95/admin/admin.svg",
+    "extIcon": "https://unpkg.com/iobroker.eos-admin@7.9.96/admin/admin.svg",
     "keywords": [
       "NexoWatt",
       "EOS",
@@ -330,7 +335,7 @@
       "licensed"
     ],
     "compact": true,
-    "readme": "https://unpkg.com/iobroker.eos-admin@7.9.95/README.md",
+    "readme": "https://unpkg.com/iobroker.eos-admin@7.9.96/README.md",
     "authors": [
       "NexoWatt"
     ],
@@ -398,7 +403,7 @@
     "nondeletable": false,
     "allowAdapterUpdate": true,
     "allowAdapterDelete": false,
-    "meta": "https://unpkg.com/iobroker.eos-admin@7.9.95/io-package.json",
+    "meta": "https://unpkg.com/iobroker.eos-admin@7.9.96/io-package.json",
     "npmPackage": "iobroker.eos-admin",
     "packetName": "iobroker.eos-admin",
     "publisher": "NexoWatt"
@@ -1107,5 +1112,5 @@
       }
     }
   },
-  "version": "7.9.95"
+  "version": "7.9.96"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "iobroker.eos-admin",
   "description": "NexoWatt EOS Admin stable product release with compact login, role-safe services and self-healing sales defaults",
-  "version": "7.9.95",
+  "version": "7.9.96",
   "contributors": [
     "bluefox <dogafox@gmail.com>",
     "apollon77",
@@ -86,7 +86,7 @@
   "main": "build/main.js",
   "files": [
     "admin/",
-    "build/",
+    "build",
     "docs/",
     "adminWww/",
     "public/",
@@ -94,17 +94,43 @@
     "LICENSE",
     "THIRD_PARTY_NOTICES.md",
     "NEXOWATT_PROPRIETARY_LICENSE.md",
+    "admin/LICENSE-NEXOWATT.md",
+    "adminWww/LICENSE-NEXOWATT.md",
     "NEXOWATT_PUBLIC_NPM_DISTRIBUTION.md",
+    "tools/nexowatt-publish-channel-guard.cjs",
+    "tools/nexowatt-validate-package.cjs",
     "README.md",
+    "tools/nexowatt-generate-repo-entry.cjs",
+    "tools/nexowatt-patch-repo.cjs",
     "NEXOWATT_EOS_BUILD_INFO.json",
     "NEXOWATT_EOS_STANDALONE.md",
-    "NEXOWATT_EOS_STABLE_7.9.94.md",
-    "README_STABILITY_V7.9.95.md",
-    "RELEASE_NOTES_V7.9.95.md",
-    "PUBLISH_STABLE_V7.9.95.md",
-    "INSTALL_TEST_V7.9.95.md",
-    "RELEASE_ACCEPTANCE_V7.9.95.md",
-    "tools/nexowatt-repair-eos-admin-update.cjs"
+    "tools/nexowatt-generate-eos-admin-repo-entry.cjs",
+    "tools/nexowatt-repair-eos-admin-update.cjs",
+    "tools/nexowatt-clean-legacy-runtime.cjs",
+    "tools/nexowatt-runtime-cleanup-selftest.cjs",
+    "tools/nexowatt-account-management-selftest.cjs",
+    "tools/nexowatt-modern-ui-selftest.cjs",
+    "tools/nexowatt-login-layout-selftest.cjs",
+    "tools/nexowatt-internal-reserve-selftest.cjs",
+    "tools/nexowatt-ensure-release-defaults.cjs",
+    "tools/nexowatt-release-defaults-selftest.cjs",
+    "tools/nexowatt-sync-release-version.cjs",
+    "tools/nexowatt-version-sync-selftest.cjs",
+    "tools/nexowatt-merge-update-selftest.cjs",
+    "tools/nexowatt-ems-overview-selftest.cjs",
+    "README_STABILITY_V7.9.96.md",
+    "RELEASE_NOTES_V7.9.96.md",
+    "PUBLISH_STABLE_V7.9.96.md",
+    "INSTALL_TEST_V7.9.96.md",
+    "RELEASE_ACCEPTANCE_V7.9.96.md",
+    "MERGE_UPDATE_README_V7.9.96.md",
+    "README_EMS_OVERVIEW_MERGE.md",
+    "RC73_EOS_ADMIN_MERGE_VALIDATION.md",
+    "VALIDATION_EMS_OVERVIEW_MERGE.md",
+    "NexoWatt_EOS_Admin_EMS_OVERVIEW_MERGE_VALIDATION.md",
+    "tools/nexowatt-apply-ems-overview.cjs",
+    "tools/nexowatt-ui-overview-runtime-selftest.cjs",
+    "tools/nexowatt-stable-v96-selftest.cjs"
   ],
   "scripts": {
     "npm": "npm i -f && cd src-admin && npm i -f",
@@ -139,7 +165,7 @@
     "nexowatt:repo-entry": "node tools/nexowatt-generate-repo-entry.cjs",
     "nexowatt:patch-repo": "node tools/nexowatt-patch-repo.cjs",
     "nexowatt:repair-update": "node tools/nexowatt-repair-eos-admin-update.cjs",
-    "check:eos-stability": "node tools/nexowatt-stability-check.cjs && node tools/nexowatt-esm-syntax-selftest.cjs && node tools/nexowatt-import-integrity-selftest.cjs && node tools/nexowatt-entrypoint-smoke-selftest.cjs && node tools/nexowatt-frontend-graph-check.cjs && node tools/nexowatt-policy-selftest.cjs && node tools/nexowatt-publish-channel-selftest.cjs && node tools/nexowatt-release-defaults-selftest.cjs && node tools/nexowatt-role-access-selftest.cjs && node tools/nexowatt-internal-reserve-selftest.cjs && node tools/nexowatt-first-login-selftest.cjs && node tools/nexowatt-account-management-selftest.cjs && node tools/nexowatt-modern-ui-selftest.cjs && node tools/nexowatt-login-layout-selftest.cjs && node tools/nexowatt-branding-selftest.cjs && node tools/nexowatt-default-port-selftest.cjs && node tools/nexowatt-module-popup-selftest.cjs && node tools/nexowatt-datapoint-selftest.cjs && node tools/nexowatt-update-selftest.cjs && node tools/nexowatt-datapoint-interaction-selftest.cjs && node tools/nexowatt-manual-write-policy-selftest.cjs && node tools/nexowatt-value-column-selftest.cjs && node tools/nexowatt-native-shell-selftest.cjs && node tools/nexowatt-assistant-separation-selftest.cjs && node tools/nexowatt-runtime-cleanup-selftest.cjs && node tools/nexowatt-version-sync-selftest.cjs && node tools/nexowatt-merge-update-selftest.cjs && npm run check:eos-stable-v95",
+    "check:eos-stability": "node tools/nexowatt-stability-check.cjs && node tools/nexowatt-esm-syntax-selftest.cjs && node tools/nexowatt-import-integrity-selftest.cjs && node tools/nexowatt-entrypoint-smoke-selftest.cjs && node tools/nexowatt-frontend-graph-check.cjs && node tools/nexowatt-policy-selftest.cjs && node tools/nexowatt-publish-channel-selftest.cjs && node tools/nexowatt-release-defaults-selftest.cjs && node tools/nexowatt-role-access-selftest.cjs && node tools/nexowatt-internal-reserve-selftest.cjs && node tools/nexowatt-first-login-selftest.cjs && node tools/nexowatt-account-management-selftest.cjs && node tools/nexowatt-modern-ui-selftest.cjs && node tools/nexowatt-login-layout-selftest.cjs && node tools/nexowatt-branding-selftest.cjs && node tools/nexowatt-default-port-selftest.cjs && node tools/nexowatt-module-popup-selftest.cjs && node tools/nexowatt-datapoint-selftest.cjs && node tools/nexowatt-update-selftest.cjs && node tools/nexowatt-datapoint-interaction-selftest.cjs && node tools/nexowatt-manual-write-policy-selftest.cjs && node tools/nexowatt-value-column-selftest.cjs && node tools/nexowatt-native-shell-selftest.cjs && node tools/nexowatt-assistant-separation-selftest.cjs && node tools/nexowatt-runtime-cleanup-selftest.cjs && node tools/nexowatt-version-sync-selftest.cjs && node tools/nexowatt-merge-update-selftest.cjs && npm run check:eos-stable-v96 && node tools/nexowatt-ems-overview-selftest.cjs && node tools/nexowatt-ui-overview-runtime-selftest.cjs",
     "nexowatt:patch-built-frontend": "node tools/nexowatt-patch-built-frontend.cjs",
     "clean:eos-runtime": "node tools/nexowatt-clean-legacy-runtime.cjs",
     "precheck:eos-package": "npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run clean:eos-runtime",
@@ -163,7 +189,7 @@
     "sync:eos-version": "node tools/nexowatt-sync-release-version.cjs",
     "test:eos-version-sync": "node tools/nexowatt-version-sync-selftest.cjs",
     "verify:eos-merge": "node tools/nexowatt-merge-update-selftest.cjs",
-    "check:eos-stable-v95": "node tools/nexowatt-stable-v95-selftest.cjs"
+    "check:eos-stable-v96": "node tools/nexowatt-stable-v96-selftest.cjs"
   },
   "author": "NexoWatt",
   "private": false,
@@ -174,7 +200,7 @@
   },
   "nexowattReleasePolicy": {
     "distTag": "latest",
-    "purpose": "accepted stable NexoWatt EOS sales-product release 7.9.95"
+    "purpose": "accepted stable NexoWatt EOS sales-product release 7.9.96"
   },
   "publisher": "NexoWatt"
 }

package/tools/nexowatt-account-management-selftest.cjs

@@ -0,0 +1,60 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('fs');
+const path = require('path');
+const root = path.resolve(__dirname, '..');
+const read = rel => fs.readFileSync(path.join(root, rel), 'utf8');
+const json = rel => JSON.parse(read(rel));
+let bad = false;
+const fail = msg => { console.error(`[NexoWatt EOS account management] ${msg}`); bad = true; };
+
+const mainSource = read('src/main.ts');
+const mainBuilt = read('build/main.js');
+const webSource = read('src/lib/web.ts');
+const webBuilt = read('build/lib/web.js');
+const sourceUi = read('src-admin/public/js/eos-account-management.js');
+const builtUi = read('adminWww/js/eos-account-management.js');
+const roleUi = read('adminWww/js/eos-role-ui.js');
+const css = read('adminWww/css/nexowatt-native-shell.css');
+const index = read('adminWww/index.html');
+const info = json('NEXOWATT_EOS_BUILD_INFO.json');
+const shellTag = String(info.shellCacheTag || info.shellCacheVersion);
+
+for (const code of [mainSource, mainBuilt]) {
+  for (const marker of [
+    'system.user.installer', 'system.user.guest', 'ensureEosDefaultRoleUsers', 'unknown random bootstrap secret',
+    'eosPasswordSetupRequired', 'personal password setup is required',
+  ]) if (!code.includes(marker)) fail(`main account marker missing: ${marker}`);
+}
+for (const code of [webSource, webBuilt]) {
+  for (const marker of [
+    'getEosManagedAccounts', 'sendEosAccountManagement', 'resetEosAccountPassword',
+    '/nexowatt/account/manage', '/nexowatt/account/reset', 'x-nexowatt-eos-account-reset',
+    'canResetInstaller', 'canResetEndUser', "targetUserId === 'system.user.admin'", 'targetUserId === access.userId',
+    "access.role === 'installer' && explicitlyManagedRole !== 'enduser'",
+    'explicit member of a managed EOS installer/end-user group', 'passwordResetAt', 'passwordResetBy',
+    "passwordResetMode = 'initial-password'", "setEosUserPassword(targetUserId, 'nexowatt')", 'passwordlessFirstLoginAllowed = false', 'initialPasswordRequired: true', 'accountDisabled',
+  ]) if (!code.includes(marker)) fail(`web account marker missing: ${marker}`);
+  if (!code.includes('const explicitInstaller = targetAccess.groups.some')) fail('reset target is not restricted to explicit installer membership');
+  if (!code.includes('const explicitEndUser = targetAccess.groups.some')) fail('reset target is not restricted to explicit end-user membership');
+}
+
+for (const marker of [
+  'v91-account-management-under-access-rights', "['admin', 'installer']", 'nexowatt/account/manage',
+  'nexowatt/account/reset', 'X-NexoWatt-EOS-Account-Reset', 'data.canResetInstaller === true',
+  "account.role === 'enduser'", 'Admin/Service', 'Installateure', 'NEXOWATT_EOS_ACCOUNT_MANAGEMENT',
+  'ensureEntrySurface', "currentRoute() !== 'tab-users'", 'eos-account-management-entry',
+]) if (!sourceUi.includes(marker)) fail(`account UI marker missing: ${marker}`);
+if (sourceUi.includes("launcher.className = 'eos-account-management-launcher'")) fail('standalone account launcher is still created');
+if (sourceUi.includes('new MutationObserver')) fail('account management adds a second broad MutationObserver');
+if (sourceUi !== builtUi) fail('account management source/build drift');
+if (!roleUi.includes("route === 'tab-users'")) fail('installer cannot reach Zugänge & Rechte');
+if (roleUi.includes('NEXOWATT_EOS_ACCOUNT_MANAGEMENT.open')) fail('role overview opens account management outside Zugänge & Rechte');
+if (!index.includes(`eos-account-management.js?v=${shellTag}`)) fail('account management asset is not active with the current cache tag');
+for (const marker of [
+  '.eos-account-management-entry', '.eos-account-management-overlay', '.eos-account-management-dialog',
+  '.eos-account-row', '.eos-account-reset', 'html.eos-account-page-installer',
+]) if (!css.includes(marker)) fail(`account management CSS marker missing: ${marker}`);
+
+if (bad) process.exit(1);
+console.log('[NexoWatt EOS account management] OK');

package/tools/nexowatt-apply-ems-overview.cjs

@@ -0,0 +1,115 @@
+#!/usr/bin/env node
+'use strict';
+const fs = require('node:fs');
+const path = require('node:path');
+
+const root = path.resolve(__dirname, '..');
+const introPath = path.join(root, 'src-admin', 'src', 'tabs', 'Intro.tsx');
+const componentPath = path.join(root, 'src-admin', 'src', 'components', 'Intro', 'NexoWattEmsOverview.tsx');
+const cssPath = path.join(root, 'src-admin', 'src', 'index.css');
+const packagePath = path.join(root, 'package.json');
+
+function fail(message) {
+    console.error(`[NexoWatt EMS Overview Merge] ERROR: ${message}`);
+    process.exit(1);
+}
+function read(file) {
+    try { return fs.readFileSync(file, 'utf8'); } catch (error) { fail(`${file} nicht lesbar: ${error.message}`); }
+}
+function write(file, content) { fs.writeFileSync(file, content, 'utf8'); }
+
+if (!fs.existsSync(componentPath)) fail('NexoWattEmsOverview.tsx fehlt im Merge-Paket.');
+let intro = read(introPath);
+if (!intro.includes("import NexoWattEmsOverview from '@/components/Intro/NexoWattEmsOverview';")) {
+    const importAnchor = "import IntroCardCamera from '@/components/Intro/IntroCardCamera';\n";
+    if (!intro.includes(importAnchor)) fail('Intro.tsx Importanker nicht gefunden. Der Admin-Quellstand ist nicht kompatibel.');
+    intro = intro.replace(importAnchor, `${importAnchor}import NexoWattEmsOverview from '@/components/Intro/NexoWattEmsOverview';\n`);
+}
+if (!intro.includes('<NexoWattEmsOverview')) {
+    const renderAnchor = `                    {this.getInstancesCards()}\n                    {this.getLinkCards()}\n`;
+    if (!intro.includes(renderAnchor)) fail('Intro.tsx Kartenanker nicht gefunden. Der Admin-Quellstand ist nicht kompatibel.');
+    intro = intro.replace(renderAnchor, `${renderAnchor}                    <NexoWattEmsOverview\n                        socket={this.props.socket}\n                        t={this.props.t}\n                        lang={this.props.lang}\n                        theme={this.props.theme}\n                    />\n`);
+}
+write(introPath, intro);
+
+const cssMarker = '/* nexowatt-ems-overview-v1 */';
+let css = read(cssPath);
+if (!css.includes(cssMarker)) {
+    css += `\n\n${cssMarker}\n` + String.raw`
+.eos-ems-overview-card {
+    --eos-ems-status-color: #48b9ff;
+    flex: 1 1 720px;
+    min-width: min(100%, 420px);
+    max-width: 1180px;
+    min-height: 390px;
+    margin: 10px;
+    padding: 22px;
+    border: 1px solid color-mix(in srgb, var(--eos-ems-status-color) 38%, rgba(255,255,255,.08));
+    border-radius: 20px;
+    background: linear-gradient(145deg, rgba(4,24,35,.97), rgba(3,16,29,.98));
+    color: #ecf8ff;
+    box-shadow: 0 18px 55px rgba(0,0,0,.26), inset 0 0 0 1px rgba(255,255,255,.025);
+    overflow: hidden;
+}
+.eos-ems-overview-card * { box-sizing: border-box; }
+.eos-ems-overview-header { display:flex; align-items:flex-start; justify-content:space-between; gap:20px; }
+.eos-ems-overview-header h2 { margin:5px 0 6px; font-size:clamp(1.2rem,2vw,1.65rem); color:#f5fbff; }
+.eos-ems-overview-header p { margin:0; max-width:760px; color:#9eb2c2; line-height:1.45; }
+.eos-ems-overview-eyebrow { color:#49e39e; font-size:.72rem; font-weight:900; letter-spacing:.13em; text-transform:uppercase; }
+.eos-ems-overview-state { min-width:126px; display:grid; grid-template-columns:auto 1fr; align-items:center; gap:3px 8px; padding:9px 12px; border:1px solid rgba(255,255,255,.09); border-radius:999px; background:rgba(255,255,255,.035); }
+.eos-ems-overview-state-dot { width:9px; height:9px; border-radius:50%; background:var(--eos-ems-status-color); box-shadow:0 0 15px var(--eos-ems-status-color); }
+.eos-ems-overview-state strong { color:var(--eos-ems-status-color); }
+.eos-ems-overview-state small { grid-column:2; color:#8095a6; }
+.eos-ems-overview-metrics { display:grid; grid-template-columns:repeat(4,minmax(130px,1fr)); gap:10px; margin-top:19px; }
+.eos-ems-overview-metric { min-width:0; padding:12px; border:1px solid rgba(255,255,255,.075); border-radius:14px; background:rgba(255,255,255,.025); }
+.eos-ems-overview-metric span,.eos-ems-overview-metric small { display:block; color:#879cad; font-size:.72rem; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+.eos-ems-overview-metric strong { display:block; margin:4px 0 2px; color:#f4fbff; font-size:1rem; overflow:hidden; text-overflow:ellipsis; white-space:nowrap; }
+.eos-ems-overview-budget { height:7px; margin:12px 0 10px; border-radius:999px; background:rgba(255,255,255,.06); overflow:hidden; }
+.eos-ems-overview-budget span { display:block; height:100%; border-radius:inherit; background:linear-gradient(90deg,#01bc69,var(--eos-ems-status-color)); box-shadow:0 0 15px color-mix(in srgb,var(--eos-ems-status-color) 50%,transparent); transition:width .25s ease; }
+.eos-ems-overview-tags { display:flex; flex-wrap:wrap; gap:7px; margin-bottom:14px; }
+.eos-ems-overview-tags span { padding:5px 9px; border:1px solid rgba(72,185,255,.18); border-radius:999px; background:rgba(72,185,255,.07); color:#b9deef; font-size:.72rem; font-weight:750; }
+.eos-ems-overview-tags span.is-warning { border-color:rgba(255,189,89,.3); background:rgba(255,189,89,.09); color:#ffd484; }
+.eos-ems-overview-columns { display:grid; grid-template-columns:1fr 1fr; gap:12px; }
+.eos-ems-overview-panel { min-width:0; padding:14px; border:1px solid rgba(255,255,255,.065); border-radius:16px; background:rgba(0,0,0,.12); }
+.eos-ems-overview-panel h3 { margin:0 0 10px; color:#dfeef6; font-size:.9rem; }
+.eos-ems-overview-decision,.eos-ems-overview-event { position:relative; display:grid; gap:2px; margin-top:7px; padding:8px 9px 8px 12px; border-radius:10px; background:rgba(255,255,255,.025); overflow:hidden; }
+.eos-ems-overview-decision::before,.eos-ems-overview-event::before { content:''; position:absolute; inset:0 auto 0 0; width:3px; background:#48b9ff; }
+.eos-ems-overview-decision--warning::before,.eos-ems-overview-event--warning::before,.eos-ems-overview-event--warn::before { background:#ffbd59; }
+.eos-ems-overview-decision--error::before,.eos-ems-overview-event--error::before { background:#ff5f72; }
+.eos-ems-overview-decision strong,.eos-ems-overview-event strong { color:#e7f4fa; font-size:.78rem; }
+.eos-ems-overview-decision span,.eos-ems-overview-event span { color:#91a5b5; font-size:.72rem; line-height:1.35; }
+.eos-ems-overview-decision small { color:#6fcba1; font-size:.68rem; }
+.eos-ems-overview-event { grid-template-columns:64px 1fr; align-items:start; }
+.eos-ems-overview-event time { color:#6f8799; font-size:.68rem; font-variant-numeric:tabular-nums; }
+.eos-ems-overview-event div { display:grid; gap:2px; min-width:0; }
+.eos-ems-overview-empty { color:#718797; font-size:.76rem; }
+.eos-ems-overview-footer { display:flex; justify-content:space-between; gap:12px; margin-top:12px; color:#60798a; font-size:.67rem; }
+.eos-ems-overview-footer a { color:#5ee0c2; font-weight:800; text-decoration:none; }
+.eos-ems-overview-footer a:hover,.eos-ems-overview-footer a:focus-visible { color:#9af2dd; text-decoration:underline; }
+@media (max-width: 1100px) {
+    .eos-ems-overview-card { flex-basis:100%; max-width:none; }
+}
+@media (max-width: 760px) {
+    .eos-ems-overview-card { min-width:100%; margin:8px 0; padding:16px; }
+    .eos-ems-overview-header { display:grid; }
+    .eos-ems-overview-state { width:max-content; }
+    .eos-ems-overview-metrics { grid-template-columns:1fr 1fr; }
+    .eos-ems-overview-columns { grid-template-columns:1fr; }
+    .eos-ems-overview-footer { display:grid; }
+}
+`;
+    write(cssPath, css);
+}
+
+const packageJson = JSON.parse(read(packagePath));
+packageJson.files = Array.isArray(packageJson.files) ? packageJson.files : [];
+const toolFile = 'tools/nexowatt-ems-overview-selftest.cjs';
+if (!packageJson.files.includes(toolFile)) packageJson.files.push(toolFile);
+packageJson.scripts = packageJson.scripts || {};
+const stability = String(packageJson.scripts['check:eos-stability'] || '');
+if (stability && !stability.includes('nexowatt-ems-overview-selftest.cjs')) {
+    packageJson.scripts['check:eos-stability'] = `${stability} && node tools/nexowatt-ems-overview-selftest.cjs`;
+}
+write(packagePath, `${JSON.stringify(packageJson, null, 2)}\n`);
+
+console.log('[NexoWatt EMS Overview Merge] OK: Intro-Komponente, responsive Live-Diagnose und Selftest eingebunden.');

package/tools/nexowatt-clean-legacy-runtime.cjs

@@ -0,0 +1,151 @@
+#!/usr/bin/env node
+'use strict';
+
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+
+const DEFAULT_ROOT = path.resolve(__dirname, '..');
+const LEGACY_OVERLAYS = [
+  'adminWww/js/eos-branding.js',
+  'adminWww/js/eos-security-ui.js',
+  'adminWww/js/eos-console-quiet.js',
+  'adminWww/js/eos-objects-state-tools.js',
+  'adminWww/js/eos-performance-guard.js',
+  'adminWww/js/eos-runtime-fixes.js',
+  'adminWww/js/eos-hard-logout.js',
+  'adminWww/css/eos-branding.css',
+  'src-admin/public/js/eos-branding.js',
+  'src-admin/public/js/eos-security-ui.js',
+  'src-admin/public/js/eos-console-quiet.js',
+  'src-admin/public/js/eos-objects-state-tools.js',
+  'src-admin/public/js/eos-performance-guard.js',
+  'src-admin/public/js/eos-runtime-fixes.js',
+  'src-admin/public/js/eos-hard-logout.js',
+  'src-admin/public/css/eos-branding.css',
+];
+
+const readJson = file => JSON.parse(fs.readFileSync(file, 'utf8'));
+
+function runtimeNumber(root) {
+  const info = readJson(path.join(root, 'NEXOWATT_EOS_BUILD_INFO.json'));
+  const value = Number(String(info.runtimeEntry || '').replace(/^v/, ''));
+  if (!Number.isFinite(value)) {
+    throw new Error(`Invalid runtimeEntry in NEXOWATT_EOS_BUILD_INFO.json: ${info.runtimeEntry}`);
+  }
+  return value;
+}
+
+function walkFiles(dir) {
+  if (!fs.existsSync(dir)) return [];
+  const result = [];
+  const stack = [dir];
+  while (stack.length) {
+    const current = stack.pop();
+    for (const entry of fs.readdirSync(current, { withFileTypes: true })) {
+      const absolute = path.join(current, entry.name);
+      if (entry.isDirectory()) stack.push(absolute);
+      else if (entry.isFile()) result.push(absolute);
+    }
+  }
+  return result;
+}
+
+function isLegacyVersionedRuntime(file, activeRuntime) {
+  const name = path.basename(file);
+  // Stable product overlays use the release number in their filename, not the
+  // compiled React runtime number. They are release assets and must not be
+  // deleted merely because runtimeEntry remains on the validated v84 bundle.
+  if (/^nexowatt-stable-v\d+\.js$/i.test(name)) return false;
+  const versionMatch = name.match(/-v(\d+)\.(?:js|js\.map|css|css\.map)$/i);
+  if (versionMatch) return Number(versionMatch[1]) !== activeRuntime;
+  const remoteMatch = name.match(/^remoteEntry-v(\d+)\.(?:js|js\.map)$/i);
+  if (remoteMatch) return Number(remoteMatch[1]) !== activeRuntime;
+
+  // Remove historical emergency bundles which predate the consolidated runtime
+  // naming and must never survive in a current EOS Admin source tree.
+  return /(?:DPWrite|DPAdapter|DPw\d+|NoLock|Unrestricted|force-version|delete-services-hardfix)/i.test(name) && /\.(?:js|js\.map)$/i.test(name);
+}
+
+function collectLegacyRuntimeFiles(root = DEFAULT_ROOT) {
+  const activeRuntime = runtimeNumber(root);
+  const scanRoots = [
+    path.join(root, 'adminWww', 'assets'),
+    path.join(root, 'adminWww'),
+    path.join(root, 'src-admin', 'build', 'assets'),
+    path.join(root, 'src-admin', 'build'),
+  ];
+  const files = new Set();
+  for (const scanRoot of scanRoots) {
+    for (const file of walkFiles(scanRoot)) {
+      if (isLegacyVersionedRuntime(file, activeRuntime)) files.add(file);
+    }
+  }
+  for (const rel of LEGACY_OVERLAYS) {
+    const file = path.join(root, rel);
+    if (fs.existsSync(file)) files.add(file);
+  }
+  return { activeRuntime, files: [...files].sort() };
+}
+
+function cleanLegacyRuntime(options = {}) {
+  const root = path.resolve(options.root || DEFAULT_ROOT);
+  const dryRun = options.dryRun === true;
+  const quiet = options.quiet === true;
+  const silent = options.silent === true;
+  const { activeRuntime, files } = collectLegacyRuntimeFiles(root);
+  const removed = [];
+  const failed = [];
+
+  for (const file of files) {
+    if (dryRun) {
+      removed.push(file);
+      continue;
+    }
+    try {
+      try {
+        fs.rmSync(file, { force: true });
+      } catch (firstError) {
+        // ZIP extraction tools on Windows may preserve a read-only bit. Make a
+        // single controlled retry before reporting a real cleanup failure.
+        try { fs.chmodSync(file, 0o666); } catch (_) { /* best effort */ }
+        fs.rmSync(file, { force: true });
+      }
+      if (!fs.existsSync(file)) removed.push(file);
+      else failed.push({ file, error: 'file still exists after removal' });
+    } catch (error) {
+      failed.push({ file, error: error?.message || String(error) });
+    }
+  }
+
+  if (failed.length) {
+    const details = failed.map(item => `${path.relative(root, item.file)}: ${item.error}`).join(os.EOL);
+    throw new Error(`Could not remove ${failed.length} legacy runtime file(s):${os.EOL}${details}`);
+  }
+
+  if (!silent) {
+    if (!quiet) {
+      console.log(`[NexoWatt EOS runtime cleanup] OK (runtime v${activeRuntime}, removed ${removed.length} legacy file${removed.length === 1 ? '' : 's'})`);
+    } else if (removed.length) {
+      console.log(`[NexoWatt EOS runtime cleanup] removed ${removed.length} legacy runtime files before validation`);
+    }
+  }
+
+  return { activeRuntime, removed };
+}
+
+if (require.main === module) {
+  try {
+    cleanLegacyRuntime({ dryRun: process.argv.includes('--dry-run'), quiet: process.argv.includes('--quiet') });
+  } catch (error) {
+    console.error(`[NexoWatt EOS runtime cleanup] ERROR: ${error?.stack || error}`);
+    process.exit(1);
+  }
+}
+
+module.exports = {
+  LEGACY_OVERLAYS,
+  collectLegacyRuntimeFiles,
+  cleanLegacyRuntime,
+  isLegacyVersionedRuntime,
+};