iobroker.eos-admin 7.9.97 → 7.9.99

package/tools/nexowatt-login-layout-selftest.cjs

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 'use strict';
 const fs=require('node:fs');const path=require('node:path');const root=path.resolve(__dirname,'..');
-const read=rel=>fs.readFileSync(path.join(root,rel),'utf8');let bad=false;const fail=msg=>{console.error(`[NexoWatt EOS login layout] ${msg}`);bad=true;};
-const css=read('adminWww/css/nexowatt-native-shell.css');const sourceCss=read('src-admin/public/css/nexowatt-native-shell.css');const login=read('src-admin/src/login/Login.tsx');const stableLogin=read('adminWww/static/js/nexowatt-stable-login.js');const stable=read('adminWww/static/js/nexowatt-stable-v97.js');const index=read('adminWww/index.html');const info=JSON.parse(read('NEXOWATT_EOS_BUILD_INFO.json'));
-if(css!==sourceCss)fail('login CSS source/build drift');
-for(const marker of ['outer frame is decorative only','orderly login, moderately enlarged','width: min(440px, calc(100vw - 20px)) !important','height: min(580px, calc(100dvh - 20px)) !important','width: min(380px, calc(100vw - 52px)) !important','min-height: 510px !important','height: auto !important','overflow: visible !important'])if(!css.includes(marker))fail(`login marker missing: ${marker}`);
-if(css.includes('width: min(520px, calc(100vw - 24px))')||css.includes('width: min(460px, calc(100vw - 56px))')||css.includes('min-height: 540px !important'))fail('oversized v96 login geometry remains');
-if(!css.includes('[data-nw-login-card="true"]:not(.MuiPaper-root)')||!css.includes('padding: 0 !important'))fail('stale nested-card neutralization missing');
-if(/data-nw-login-card|data-nw-login-shell|min-height:590px|width:min\(460px|createElement\(['"]style/.test(stableLogin))fail('stable-login runtime still mutates geometry');
-if(/width:min\(460px|min-height:540px|createElement\(['"]style/.test(stable))fail('stable v97 runtime injects geometry');
-if(!login.includes("minHeight: 510")||!login.includes("overflowY: 'visible'")||!login.includes("maxHeight: 'none'"))fail('native Login source does not match v97 contract');
-if(!index.includes(`nexowatt-native-shell.css?v=${info.shellCacheTag}`)||!index.includes('nexowatt-stable-v97.js?v=97'))fail('v97 login assets not active');
-if(bad)process.exit(1);console.log('[NexoWatt EOS login layout] OK');
+const read=rel=>fs.readFileSync(path.join(root,rel),'utf8');const fail=m=>{console.error(`[NexoWatt EOS login layout] ${m}`);process.exit(1)};const must=(c,m)=>{if(!c)fail(m)};
+const css=read('adminWww/css/nexowatt-native-shell.css'),sourceCss=read('src-admin/public/css/nexowatt-native-shell.css');
+const login=read('src-admin/src/login/Login.tsx'),stableLogin=read('adminWww/static/js/nexowatt-stable-login.js'),stable=read('adminWww/static/js/nexowatt-stable-v99.js'),index=read('adminWww/index.html'),info=JSON.parse(read('NEXOWATT_EOS_BUILD_INFO.json'));
+must(css===sourceCss,'login CSS source/build drift');
+for(const marker of ['outer frame is decorative only','orderly login, moderately enlarged','width: min(440px, calc(100vw - 20px)) !important','height: min(580px, calc(100dvh - 20px)) !important','width: min(380px, calc(100vw - 52px)) !important','min-height: 510px !important','height: auto !important','overflow: visible !important'])must(css.includes(marker),`login marker missing: ${marker}`);
+must(!css.includes('width: min(520px, calc(100vw - 24px))')&&!css.includes('width: min(460px, calc(100vw - 56px))'),'oversized v96 geometry remains');
+must(!/data-nw-login-card|data-nw-login-shell|min-height:590px|width:min\(460px|createElement\(['"]style/.test(stableLogin),'stable-login runtime mutates geometry');
+must(!/width:min\(460px|min-height:540px|createElement\(['"]style/.test(stable),'stable v99 runtime injects login geometry');
+must(login.includes('minHeight: 510')&&login.includes("overflowY: 'visible'")&&login.includes("maxHeight: 'none'"),'native Login source does not match product contract');
+must(index.includes(`nexowatt-native-shell.css?v=${info.shellCacheTag}`)&&index.includes('nexowatt-stable-v99.js?v=99'),'v99 login assets not active');
+console.log('[NexoWatt EOS login layout] OK');

package/tools/nexowatt-merge-update-selftest.cjs

@@ -16,7 +16,7 @@ for (const file of [
     'MERGE_UPDATE.ps1',
     'MERGE_UPDATE.cmd',
     'MERGE_UPDATE.sh',
-    'MERGE_UPDATE_README_V7.9.97.md',
+    'MERGE_UPDATE_README_V7.9.99.md',
     'tools/nexowatt-apply-ems-overview.cjs',
     'tools/nexowatt-sync-release-version.cjs',
     'tools/nexowatt-version-sync-selftest.cjs',

package/tools/nexowatt-modern-ui-selftest.cjs

@@ -29,7 +29,7 @@ for (const marker of ['eos-account-management.js','nexowatt-native-shell.css','e
 for (const marker of ['NexoWatt EOS', 'Zugänge & Rollen', 'Endkunden-Zugänge', 'ensureEntrySurface']) {
   if (!accountUi.includes(marker)) fail(`modern account surface missing label: ${marker}`);
 }
-for (const marker of ['installIntegratedFirstLogin','v97 compact normal-login first activation','eos-passwordless-card','Idempotent writes are essential here']) {
+for (const marker of ['installIntegratedFirstLogin','v99 normal-login first activation','eos-passwordless-card','Idempotent writes are essential here']) {
   if (!bootstrap.includes(marker)) fail(`integrated first-activation surface missing: ${marker}`);
 }
 if (/data-eos-account=|selector\.innerHTML/.test(bootstrap)) fail('compact login still injects role buttons or a second panel');

package/tools/nexowatt-password-write-selftest.cjs

@@ -0,0 +1,46 @@
+#!/usr/bin/env node
+'use strict';
+const assert=require('node:assert/strict');
+const fs=require('node:fs');
+const path=require('node:path');
+const {normalizeEosPasswordTarget,setEosUserPasswordWithVerification}=require('../build/lib/eosPassword.js');
+const root=path.resolve(__dirname,'..');
+const source=fs.readFileSync(path.join(root,'src/lib/eosPassword.ts'),'utf8');
+const web=fs.readFileSync(path.join(root,'src/lib/web.ts'),'utf8');
+
+function adapterFixture({verify=true,persist=true,callback=false}={}){
+  let password='old';
+  let hash=persist?'$old':'';
+  const calls=[];
+  const adapter={
+    calls,
+    getForeignObjectAsync:async id=>id==='system.user.user'?{_id:id,common:{password:hash},native:{}}:null,
+    checkPasswordAsync:async (user,value,options)=>{calls.push({kind:'check',user,value,options});return [verify&&user==='user'&&value===password,'system.user.user'];},
+  };
+  const set=async(user,value,options)=>{calls.push({kind:'set',user,value,options});if(user!=='user')throw new Error('shortUserNameRequired');if(persist){password=value;hash=`$hash:${value}`;}};
+  if(callback) adapter.setPassword=(user,value,options,cb)=>set(user,value,options).then(()=>cb(),cb);
+  else adapter.setPasswordAsync=set;
+  return adapter;
+}
+
+(async()=>{
+  assert.deepEqual(normalizeEosPasswordTarget('user'),{userId:'system.user.user',userName:'user'});
+  assert.deepEqual(normalizeEosPasswordTarget('system.user.user'),{userId:'system.user.user',userName:'user'});
+  assert.throws(()=>normalizeEosPasswordTarget('system.user.bad.name'),/invalidPasswordTarget/);
+  for(const fixture of [adapterFixture(),adapterFixture({callback:true})]){
+    const result=await setEosUserPasswordWithVerification(fixture,'system.user.user','Strong!2026');
+    assert.equal(result.userName,'user');
+    assert.equal(fixture.calls.find(c=>c.kind==='set').user,'user','password API must receive short user name');
+    assert.deepEqual(fixture.calls.find(c=>c.kind==='set').options,{user:'system.user.admin'});
+    assert.equal(fixture.calls.find(c=>c.kind==='check').user,'user','password check must receive short user name');
+  }
+  const noCheck=adapterFixture();delete noCheck.checkPasswordAsync;
+  await setEosUserPasswordWithVerification(noCheck,'user','NoCheck!2026');
+  await assert.rejects(()=>setEosUserPasswordWithVerification(adapterFixture({persist:false}),'user','Missing!2026'),/passwordNotPersisted/);
+  await assert.rejects(()=>setEosUserPasswordWithVerification(adapterFixture({verify:false}),'user','Verify!2026'),/passwordVerificationFailed/);
+  for(const marker of ['setPasswordAsync(userName','checkPasswordAsync(userName','common?.password','userId.replace(/^system\\.user\\./']) assert(source.includes(marker),`source marker missing: ${marker}`);
+  assert(!/setForeignObject|common\.password\s*=/.test(source),'helper must never hash/write common.password itself');
+  assert(web.includes('extendForeignObjectAsync')&&web.includes('passwordMetadataNotPersisted'),'first-login metadata persistence guard missing');
+  assert(!web.includes('setForeignObjectAsync(access.userId, userObject)'),'stale full-user first-login write remains');
+  console.log('[NexoWatt EOS password write] OK (short name, persistence, credential and native-only metadata)');
+})().catch(error=>{console.error(error?.stack||error);process.exit(1);});

package/tools/nexowatt-request-security-selftest.cjs

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+'use strict';
+const assert=require('node:assert/strict');
+const {isEosSameOriginRequest}=require('../build/lib/eosRequestSecurity.js');
+assert.equal(isEosSameOriginRequest({host:'192.168.10.124:8081'}),true);
+assert.equal(isEosSameOriginRequest({origin:'http://192.168.10.124:8081',host:'192.168.10.124:8081','sec-fetch-site':'same-origin'}),true);
+assert.equal(isEosSameOriginRequest({origin:'https://eos.example.test',host:'proxy:443','x-forwarded-host':'eos.example.test','sec-fetch-site':'same-site'}),true);
+assert.equal(isEosSameOriginRequest({origin:'http://192.168.10.125:8081',host:'192.168.10.124:8081','sec-fetch-site':'same-origin'}),false);
+assert.equal(isEosSameOriginRequest({origin:'http://192.168.10.124:8081',host:'192.168.10.124:8081','sec-fetch-site':'cross-site'}),false);
+assert.equal(isEosSameOriginRequest({origin:'file:///tmp/eos',host:'192.168.10.124:8081'}),false);
+console.log('[NexoWatt EOS request security] OK (LAN, proxy and cross-site guard)');

package/tools/nexowatt-runtime-cleanup-selftest.cjs

@@ -15,15 +15,15 @@ try {
   fs.mkdirSync(path.join(temp, 'src-admin', 'public', 'js'), { recursive: true });
   fs.mkdirSync(path.join(temp, 'src-admin', 'public', 'static', 'js'), { recursive: true });
   fs.mkdirSync(path.join(temp, 'adminWww', 'static', 'js'), { recursive: true });
-  fs.writeFileSync(path.join(temp, 'NEXOWATT_EOS_BUILD_INFO.json'), JSON.stringify({ runtimeEntry: 'v82', shellCacheVersion: 97 }));
+  fs.writeFileSync(path.join(temp, 'NEXOWATT_EOS_BUILD_INFO.json'), JSON.stringify({ runtimeEntry: 'v82', shellCacheVersion: 99 }));
 
   const keep = [
     'adminWww/assets/bootstrap-current-v82.js',
     'adminWww/assets/Objects-current-v82.js',
     'adminWww/remoteEntry-v82.js',
     'adminWww/remoteEntry.js',
-    'adminWww/static/js/nexowatt-stable-v97.js',
-    'src-admin/public/static/js/nexowatt-stable-v97.js',
+    'adminWww/static/js/nexowatt-stable-v99.js',
+    'src-admin/public/static/js/nexowatt-stable-v99.js',
     'adminWww/static/js/nexowatt-stable-login.js',
   ];
   const remove = [
@@ -34,8 +34,8 @@ try {
     'adminWww/js/eos-branding.js',
     'adminWww/css/eos-branding.css',
     'src-admin/public/js/eos-security-ui.js',
-    'adminWww/static/js/nexowatt-stable-v96.js',
-    'src-admin/public/static/js/nexowatt-stable-v95.js',
+    'adminWww/static/js/nexowatt-stable-v98.js',
+    'src-admin/public/static/js/nexowatt-stable-v97.js',
   ];
   for (const rel of [...keep, ...remove]) {
     const file = path.join(temp, rel);
@@ -45,7 +45,7 @@ try {
 
   const result = cleanLegacyRuntime({ root: temp, quiet: true, silent: true });
   assert.strictEqual(result.activeRuntime, 82);
-  assert.strictEqual(result.activeShell, 97);
+  assert.strictEqual(result.activeShell, 99);
   assert.strictEqual(result.removed.length, remove.length);
   for (const rel of keep) assert.ok(fs.existsSync(path.join(temp, rel)), `current runtime removed: ${rel}`);
   for (const rel of remove) assert.ok(!fs.existsSync(path.join(temp, rel)), `legacy file remained: ${rel}`);

package/tools/nexowatt-stable-v99-selftest.cjs

@@ -0,0 +1,25 @@
+#!/usr/bin/env node
+'use strict';
+const fs=require('node:fs');const path=require('node:path');const root=path.resolve(__dirname,'..');
+const read=rel=>fs.readFileSync(path.join(root,rel),'utf8');const exists=rel=>fs.existsSync(path.join(root,rel));
+const fail=m=>{console.error(`[NexoWatt EOS stable v99] ${m}`);process.exit(1)};const must=(c,m)=>{if(!c)fail(m)};
+const pkg=JSON.parse(read('package.json')),io=JSON.parse(read('io-package.json')),info=JSON.parse(read('NEXOWATT_EOS_BUILD_INFO.json'));
+const index=read('adminWww/index.html'),css=read('adminWww/css/nexowatt-native-shell.css'),stable=read('adminWww/static/js/nexowatt-stable-v99.js');
+const ems=read('adminWww/js/eos-ems-overview.js'),emsSource=read('src-admin/src/components/Intro/NexoWattEmsOverview.tsx');
+const intro=read('src-admin/src/tabs/Intro.tsx'),bundle=read('adminWww/assets/Intro-DkwRiz1n-v84.js');
+const web=read('src/lib/web.ts'),built=read('build/lib/web.js'),password=read('src/lib/eosPassword.ts'),bootstrap=read('adminWww/js/eos-role-bootstrap.js');
+must(pkg.version==='7.9.99'&&io.version==='7.9.99'&&io.common.version==='7.9.99'&&info.version==='7.9.99','version drift');
+must(info.shellCacheVersion===99&&info.nativeShellVersion===99&&String(info.shellCacheTag)==='99','shell cache is not v99');
+must(index.includes('nexowatt-stable-v99.js?v=99')&&index.includes('eos-release-watch.js?v=99'),'v99 runtime/watcher not loaded');
+must(!exists('adminWww/static/js/nexowatt-stable-v97.js')&&!exists('src-admin/public/static/js/nexowatt-stable-v97.js'),'legacy v97 runtime remains');
+must(!ems.includes('Vollständige EMS-Diagnose öffnen')&&!emsSource.includes('Vollständige EMS-Diagnose öffnen'),'unsupported EMS link remains');
+must(intro.includes('className="eos-overview-edit-controls"')&&intro.includes('eos-native-intro-grid'),'source pencil is not in the card grid');
+must(bundle.includes('className:"eos-overview-edit-controls"')&&bundle.includes('className:"eos-native-intro-grid"'),'productive pencil is not in the card grid');
+must(css.includes('edit controls belong to the lowest Intro card grid')&&css.includes('.eos-overview-edit-controls .MuiFab-root'),'pencil placement CSS missing');
+must(password.includes('setPasswordAsync(userName')&&password.includes('checkPasswordAsync(userName'),'password API does not use short name');
+must(web.includes('passwordMetadataNotPersisted')&&built.includes('passwordMetadataNotPersisted'),'password metadata verification missing');
+must(!web.includes('setForeignObjectAsync(access.userId, userObject)')&&!built.includes('setForeignObjectAsync(access.userId, userObject)'),'stale full-user password write remains');
+must(bootstrap.includes("VERSION = 'v99-first-login-password-persisted'")&&bootstrap.includes('passwordVerificationFailed'),'v99 first-login UI missing');
+must(stable.includes('NEXOWATT_EOS_STABLE_V99'),'stable v99 global marker missing');
+for(const rel of ['tools/nexowatt-password-write-selftest.cjs','tools/nexowatt-request-security-selftest.cjs','tools/nexowatt-cache-update-selftest.cjs'])must(exists(rel),`${rel} missing`);
+console.log('[NexoWatt EOS stable v99] OK');

package/tools/nexowatt-ui-overview-runtime-selftest.cjs

@@ -5,7 +5,9 @@ const runtime=read('adminWww/js/eos-ems-overview.js');const source=read('src-adm
 if(runtime!==source)fail('runtime source/build drift');
 for(const marker of ['nexowatt-ems-overview-v1','nexowatt-ui.*.info.adminOverview.*','system.adapter.nexowatt-ui.*.alive','POLL_MS = 5000','STALE_MS = 20000',"REQUIRED_UI_VERSION = '0.8.198'",'getForeignStates','Keine Kachel besitzt Schreibhoheit','currentDecisions','§14a-Fallback','nexowatt-eos-admin-socket-ready','readUiAdapterInfo','socketFromReact'])if(!runtime.includes(marker))fail(`runtime marker missing: ${marker}`);
 for(const forbidden of ['setForeignState','setState(','sendToHost','writeFile','extendObject'])if(runtime.includes(forbidden))fail(`read-only runtime contains ${forbidden}`);
-for(const marker of ['eos-ems-overview.css?v=97','eos-ems-overview.js?v=97','nexowatt-stable-v97.js?v=97'])if(!index.includes(marker))fail(`index marker missing: ${marker}`);
+for(const marker of ['eos-ems-overview.css?v=99','eos-ems-overview.js?v=99','nexowatt-stable-v99.js?v=99','eos-release-watch.js?v=99'])if(!index.includes(marker))fail(`index marker missing: ${marker}`);
+if(runtime.includes('Vollständige EMS-Diagnose öffnen'))fail('unsupported EMS destination remains visible');
+if(!intro.includes('eos-overview-edit-controls')||!introBundle.includes('eos-overview-edit-controls'))fail('edit control is not inside bottom card grid');
 if(!css.includes('#eos-ems-overview-runtime')||!css.includes('.eos-ems-overview-metrics')||!css.includes('startup and compatibility messages stay compact'))fail('EMS card CSS incomplete');
 if(role.includes('overview.innerHTML = `')||!role.includes('never cover the real Admin Intro'))fail('obsolete role overview still active');
 if(!shell.includes("label: 'Installateur'")||!shell.includes("label: 'Endkunde'")||!shell.includes('eosNativeReactOverview'))fail('native overview role bridge incomplete');

package/tools/nexowatt-validate-package.cjs

@@ -41,7 +41,11 @@ if (pkg.scripts['test:eos-version-sync'] !== 'node tools/nexowatt-version-sync-s
 if (pkg.scripts['verify:eos-merge'] !== 'node tools/nexowatt-merge-update-selftest.cjs') fail('merge update selftest script is missing or incorrect');
 if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-version-sync-selftest.cjs')) fail('version sync selftest is not part of check:eos-stability');
 if (!pkg.scripts['check:eos-stability']?.includes('nexowatt-merge-update-selftest.cjs')) fail('merge update selftest is not part of check:eos-stability');
-if (pkg.scripts['check:eos-stable-v97'] !== 'node tools/nexowatt-stable-v97-selftest.cjs') fail('stable v97 selftest script is missing or incorrect');
+if (pkg.scripts['check:eos-stable-v99'] !== 'node tools/nexowatt-stable-v99-selftest.cjs') fail('stable v99 selftest script is missing or incorrect');
+if (pkg.scripts['test:eos-password-write'] !== 'node tools/nexowatt-password-write-selftest.cjs') fail('password write selftest script is missing');
+if (pkg.scripts['test:eos-request-security'] !== 'node tools/nexowatt-request-security-selftest.cjs') fail('request security selftest script is missing');
+if (pkg.scripts['test:eos-cache-update'] !== 'node tools/nexowatt-cache-update-selftest.cjs') fail('cache update selftest script is missing');
+for (const marker of ['nexowatt-password-write-selftest.cjs','nexowatt-request-security-selftest.cjs','nexowatt-cache-update-selftest.cjs']) if (!pkg.scripts['check:eos-stability']?.includes(marker)) fail(`stability check must execute ${marker}`);
 if (!pkg.scripts.prepublishOnly?.startsWith('npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run check:eos-publish-channel')) fail('prepublishOnly must synchronize versions and normalize release defaults before the publish channel guard');
 if (pkg.scripts['precheck:eos-package'] !== 'npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run clean:eos-runtime') fail('precheck:eos-package must synchronize versions, normalize release defaults and clean stale runtime files');
 if (pkg.scripts['precheck:eos-stability'] !== 'npm run sync:eos-version && npm run prepare:eos-release-defaults && npm run clean:eos-runtime') fail('precheck:eos-stability must synchronize versions, normalize release defaults and clean stale runtime files');
@@ -100,6 +104,7 @@ for (const file of [
   'adminWww/js/eos-basic-settings.js',
   'adminWww/js/eos-role-ui.js',
   'adminWww/js/eos-account-management.js',
+  'adminWww/js/eos-release-watch.js',
   'adminWww/js/eos-assistant.js',
   'adminWww/css/nexowatt-native-shell.css',
   'adminWww/img/eos/nexowatt-192.png',
@@ -110,14 +115,14 @@ for (const file of [
   'LICENSE',
   'NEXOWATT_PROPRIETARY_LICENSE.md',
   'THIRD_PARTY_NOTICES.md',
-  'README_STABILITY_V7.9.97.md',
-  'RELEASE_NOTES_V7.9.97.md',
-  'PUBLISH_STABLE_V7.9.97.md',
-  'INSTALL_TEST_V7.9.97.md',
-  'RELEASE_ACCEPTANCE_V7.9.97.md',
+  'README_STABILITY_V7.9.99.md',
+  'RELEASE_NOTES_V7.9.99.md',
+  'PUBLISH_STABLE_V7.9.99.md',
+  'INSTALL_TEST_V7.9.99.md',
+  'RELEASE_ACCEPTANCE_V7.9.99.md',
   'MERGE_UPDATE.ps1',
   'MERGE_UPDATE.cmd',
-  'MERGE_UPDATE_README_V7.9.97.md',
+  'MERGE_UPDATE_README_V7.9.99.md',
   'tools/nexowatt-patch-built-frontend.cjs',
   'tools/nexowatt-native-shell-selftest.cjs',
   'tools/nexowatt-clean-legacy-runtime.cjs',
@@ -128,6 +133,9 @@ for (const file of [
   'tools/nexowatt-role-access-selftest.cjs',
   'tools/nexowatt-first-login-selftest.cjs',
   'tools/nexowatt-account-management-selftest.cjs',
+  'tools/nexowatt-password-write-selftest.cjs',
+  'tools/nexowatt-request-security-selftest.cjs',
+  'tools/nexowatt-cache-update-selftest.cjs',
   'tools/nexowatt-modern-ui-selftest.cjs',
   'tools/nexowatt-login-layout-selftest.cjs',
   'tools/nexowatt-internal-reserve-selftest.cjs',
@@ -135,12 +143,12 @@ for (const file of [
   'tools/nexowatt-sync-release-version.cjs',
   'tools/nexowatt-version-sync-selftest.cjs',
   'tools/nexowatt-merge-update-selftest.cjs',
-  'tools/nexowatt-stable-v97-selftest.cjs',
+  'tools/nexowatt-stable-v99-selftest.cjs',
   'tools/nexowatt-ems-overview-selftest.cjs',
   'tools/nexowatt-ui-overview-runtime-selftest.cjs',
   'adminWww/js/eos-ems-overview.js',
   'adminWww/css/eos-ems-overview.css',
-  'adminWww/static/js/nexowatt-stable-v97.js',
+  'adminWww/static/js/nexowatt-stable-v99.js',
   'src-admin/src/components/Intro/NexoWattEmsOverview.tsx',
   'tools/nexowatt-publish-channel-guard.cjs',
   'tools/nexowatt-publish-channel-selftest.cjs',
@@ -168,8 +176,8 @@ const shellTag = String(buildInfo.shellCacheTag || shellCache);
 if (!runtime || !Number.isFinite(runtimeNumber)) fail(`invalid runtimeEntry ${runtime}`);
 if (!Number.isFinite(shellCache)) fail(`invalid shellCacheVersion ${buildInfo.shellCacheVersion}`);
 for (const marker of [
-  `hostInit-${runtime}.js?v=${runtimeNumber}`,
-  `index-CQZugZ1z-${runtime}.js?v=${runtimeNumber}`,
+  `hostInit-${runtime}.js?v=${shellTag}`,
+  `index-CQZugZ1z-${runtime}.js?v=${shellTag}`,
   `eos-manual-write-policy.js?v=${shellTag}`,
   `nexowatt-native-shell.css?v=${shellTag}`,
   `nexowatt-native-shell.js?v=${shellTag}`,
@@ -183,8 +191,9 @@ if (!index.includes(`eos-account-management.js?v=${shellTag}`)) fail('account ma
 if (!index.includes(`eos-assistant.js?v=${shellTag}`)) fail('EOS Assist cache key mismatch');
 if (!index.includes(`eos-ems-overview.js?v=${shellTag}`)) fail('EMS overview cache key mismatch');
 if (!index.includes(`eos-ems-overview.css?v=${shellTag}`)) fail('EMS overview CSS cache key mismatch');
-if (!index.includes(`nexowatt-stable-v97.js?v=${shellTag}`)) fail('stable v97 cache key mismatch');
-if (index.indexOf(`eos-manual-write-policy.js?v=${shellTag}`) > index.indexOf(`hostInit-${runtime}.js?v=${runtimeNumber}`)) fail('manual-write policy must load before the React runtime');
+if (!index.includes(`nexowatt-stable-v99.js?v=${shellTag}`)) fail('stable v99 cache key mismatch');
+if (!index.includes(`eos-release-watch.js?v=${shellTag}`)) fail('release watcher cache key mismatch');
+if (index.indexOf(`eos-manual-write-policy.js?v=${shellTag}`) > index.indexOf(`hostInit-${runtime}.js?v=${shellTag}`)) fail('manual-write policy must load before the React runtime');
 if (!index.includes('class="eos-native-shell"')) fail('native NexoWatt shell class missing');
 for (const legacy of ['eos-branding.js', 'eos-security-ui.js', 'eos-console-quiet.js', 'eos-objects-state-tools.js']) {
   if (index.includes(legacy)) fail(`legacy browser overlay still loaded: ${legacy}`);
@@ -232,7 +241,7 @@ if (accountManagement.includes("launcher.className = 'eos-account-management-lau
 if (accountManagement.includes('new MutationObserver')) fail('account-management runtime adds a second broad DOM observer');
 if (read('src-admin/public/js/eos-account-management.js') !== accountManagement) fail('account-management source/build drift');
 const roleBootstrap = read('adminWww/js/eos-role-bootstrap.js');
-if (!roleBootstrap.includes('installIntegratedFirstLogin') || !roleBootstrap.includes('v97 compact normal-login first activation')) fail('compact integrated first-login is incomplete');
+if (!roleBootstrap.includes('installIntegratedFirstLogin') || !roleBootstrap.includes('v99 normal-login first activation')) fail('compact integrated first-login is incomplete');
 if (/data-eos-account=|selector\.innerHTML/.test(roleBootstrap)) fail('login role buttons must not enlarge the normal login card');
 if (!roleBootstrap.includes('nexowatt/account/passwordless-status') || !roleBootstrap.includes('eligibility.allowed')) fail('server-checked first-login eligibility is incomplete');
 if (roleBootstrap.includes('installPasswordlessFirstLoginLauncher')) fail('old first-login launcher remains active');

package/RELEASE_NOTES_V7.9.97.md

@@ -1,19 +0,0 @@
-# Release Notes 7.9.97
-
-## Anmeldung
-
-- Rückkehr zur bewährten kompakten Kartenstruktur.
-- Außenrahmen und Formular sind nur ungefähr sieben Prozent größer als der frühere stabile Stand.
-- Meldungen wachsen innerhalb der Karte, ohne Scrollleisten oder überlange Eingabefelder.
-- Laufzeitskripte verändern keine Breite, Höhe oder Padding der Karte mehr.
-
-## Übersicht und EMS
-
-- Admin, Installateur und Endkunde nutzen dieselbe native Intro-Kartenkomponente.
-- Die NexoWatt-UI-Karte bleibt für freigegebene Rollen sichtbar.
-- Die EMS-Live-Diagnose übernimmt die produktive EOS-Admin-Verbindung und liest ausschließlich `info.adminOverview.*`.
-- Mindestversion für den vollständigen Publisher: NexoWatt UI `0.8.198`.
-
-## Sicherheit
-
-Keine Änderung an Geräte-/Setpoint-Schreibwegen. Die Diagnose bleibt vollständig read-only.

package/tools/nexowatt-stable-v97-selftest.cjs

@@ -1,16 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-const fs=require('node:fs');const path=require('node:path');const root=path.resolve(__dirname,'..');const read=rel=>fs.readFileSync(path.join(root,rel),'utf8');const must=(ok,msg)=>{if(!ok){console.error(`[NexoWatt EOS stable v97] ${msg}`);process.exit(1)}};
-const pkg=JSON.parse(read('package.json'));const cleanup=read('tools/nexowatt-clean-legacy-runtime.cjs');const io=JSON.parse(read('io-package.json'));const info=JSON.parse(read('NEXOWATT_EOS_BUILD_INFO.json'));const css=read('adminWww/css/nexowatt-native-shell.css');const stable=read('adminWww/static/js/nexowatt-stable-v97.js');const login=read('adminWww/static/js/nexowatt-stable-login.js');const index=read('adminWww/index.html');const intro=read('src-admin/src/tabs/Intro.tsx');const introBundle=read('adminWww/assets/Intro-DkwRiz1n-v84.js');const bootstrap=read('adminWww/assets/bootstrap-COulQZax-v84.js');const generic=read('adminWww/assets/index-D2ymscJA-v84.js');const runtime=read('adminWww/js/eos-ems-overview.js');
-must(pkg.version==='7.9.97'&&io.version==='7.9.97'&&io.common.version==='7.9.97'&&info.version==='7.9.97','version drift');
-must(info.shellCacheVersion===97&&info.shellCacheTag==='97','shell cache is not v97');
-must(css.includes('width: min(380px')&&css.includes('min-height: 510px')&&!css.includes('width: min(460px'),'compact login contract missing');
-must(!login.includes('data-nw-login-card')&&!login.includes('min-height:590px')&&!stable.includes('width:min(460px'),'runtime still mutates login geometry');
-must(stable.includes("VERSION = 'v97-compact-login-ems-connection'"),'stable v97 runtime incomplete');
-must(index.includes('nexowatt-stable-v97.js?v=97')&&index.includes('nexowatt-native-shell.css?v=97'),'v97 assets not loaded');
-must(intro.includes('NEXOWATT_EOS_ADMIN_SOCKET')&&introBundle.includes('nexowatt-eos-admin-socket-ready'),'Intro socket bridge missing');
-must(bootstrap.includes('window.NEXOWATT_EOS_ADMIN_SOCKET=window.NEXOWATT_EOS_SOCKET=new AdminConnection'),'productive main socket exposure missing');
-must(!generic.includes('this.socket=window.NEXOWATT_EOS_ADMIN_SOCKET=new M({'),'generic socket overwrite remains');
-must(cleanup.includes('activeShell')&&cleanup.includes('nexowatt-stable-v')&&cleanup.includes("path.join(root, 'src-admin', 'public')"),'stale stable overlay cleanup missing');
-must(runtime.includes('readUiAdapterInfo')&&runtime.includes('socketFromReact')&&runtime.includes("REQUIRED_UI_VERSION = '0.8.198'"),'EMS connection recovery missing');
-console.log('[NexoWatt EOS stable v97] OK');