iobroker.eos-admin 7.9.98 → 7.9.99

package/adminWww/css/eos-ems-overview.css

@@ -17,7 +17,7 @@
 }
 #eos-ems-overview-runtime { width: calc(100% - 32px); max-width: none; margin: 0 16px 20px; }
 .eos-ems-overview-card * { box-sizing: border-box; }
-.eos-ems-overview-header { display:flex; align-items:flex-start; justify-content:space-between; gap:20px; }
+.eos-ems-overview-header { display:flex; align-items:flex-start; justify-content:flex-start; gap:20px; }
 .eos-ems-overview-header h2 { margin:5px 0 6px; font-size:clamp(1.2rem,2vw,1.65rem); color:#f5fbff; }
 .eos-ems-overview-header p { margin:0; max-width:760px; color:#9eb2c2; line-height:1.45; }
 .eos-ems-overview-eyebrow { color:#49e39e; font-size:.72rem; font-weight:900; letter-spacing:.13em; text-transform:uppercase; }
@@ -48,9 +48,7 @@
 .eos-ems-overview-event time { color:#6f8799; font-size:.68rem; font-variant-numeric:tabular-nums; }
 .eos-ems-overview-event div { display:grid; gap:2px; min-width:0; }
 .eos-ems-overview-empty { color:#718797; font-size:.76rem; }
-.eos-ems-overview-footer { display:flex; justify-content:space-between; gap:12px; margin-top:12px; color:#60798a; font-size:.67rem; }
-.eos-ems-overview-footer a { color:#5ee0c2; font-weight:800; text-decoration:none; }
-.eos-ems-overview-footer a:hover,.eos-ems-overview-footer a:focus-visible { color:#9af2dd; text-decoration:underline; }
+.eos-ems-overview-footer { display:flex; justify-content:flex-start; gap:12px; margin-top:12px; color:#60798a; font-size:.67rem; }
 @media (max-width: 1100px) { .eos-ems-overview-card { flex-basis:100%; max-width:none; } }
 @media (max-width: 760px) {
     #eos-ems-overview-runtime,.eos-ems-overview-card { min-width:0; width:calc(100% - 16px); margin:8px; padding:16px; }
@@ -61,7 +59,7 @@
     .eos-ems-overview-footer { display:grid; }
 }
 
-/* v98: startup and compatibility messages stay compact. */
+/* v99: startup and compatibility messages stay compact. */
 .eos-ems-overview-card.is-loading,
 .eos-ems-overview-card.is-unavailable {
     min-height: 0;

package/adminWww/css/nexowatt-native-shell.css

@@ -1292,7 +1292,7 @@ html.eos-route-intro #app-paper [class*="card"] {
     .eos-assist-header-root .eos-assist-panel { right: 8px !important; width: calc(100vw - 16px); }
 }
 
-/* NexoWatt EOS 7.9.97 – orderly login, moderately enlarged. */
+/* NexoWatt EOS 7.9.99 – orderly login, moderately enlarged. */
 html.eos-login,
 html.eos-login body {
     min-height: 100%;
@@ -1407,119 +1407,33 @@ html.eos-login form { max-width: 100% !important; }
 html.eos-safe-overview-active #app-paper > :not(.MuiSnackbar-root):not([role="presentation"]) { pointer-events: auto !important; }
 .eos-intro-admin-edit-hidden { display: none !important; }
 
-/* NexoWatt EOS 7.9.98 – stable scrolling, clean login fields and expandable errors. */
-html.eos-app,
-html.eos-app body,
-html.eos-app #root {
-    height: 100% !important;
-    max-height: 100% !important;
-    overflow: hidden !important;
-}
-html.eos-app #app-paper {
-    height: calc(100vh - var(--nx-content-top) - 12px) !important;
-    height: calc(100dvh - var(--nx-content-top) - 12px) !important;
-    min-height: 0 !important;
-    max-height: calc(100vh - var(--nx-content-top) - 12px) !important;
-    max-height: calc(100dvh - var(--nx-content-top) - 12px) !important;
-    overflow-x: hidden !important;
-    overflow-y: auto !important;
-    overscroll-behavior: contain;
-    scrollbar-gutter: stable;
-    scrollbar-width: thin;
-    scrollbar-color: rgba(0, 229, 138, .88) rgba(3, 18, 29, .72);
-}
-html.eos-app #app-paper::-webkit-scrollbar { width: 11px; }
-html.eos-app #app-paper::-webkit-scrollbar-track {
-    border-radius: 12px;
-    background: rgba(3, 18, 29, .72);
-}
-html.eos-app #app-paper::-webkit-scrollbar-thumb {
-    min-height: 46px;
-    border: 2px solid rgba(3, 18, 29, .72);
-    border-radius: 12px;
-    background: linear-gradient(180deg, #00e58a, #39c9ef);
-}
-html.eos-app #app-paper::-webkit-scrollbar-thumb:hover {
-    background: linear-gradient(180deg, #21f2a1, #60dcff);
-}
 
-html.eos-login main.MuiPaper-root::before {
-    width: min(456px, calc(100vw - 20px)) !important;
-    height: min(536px, calc(100dvh - 20px)) !important;
-    border-radius: 24px !important;
-}
-html.eos-login main.MuiPaper-root > .eos-login-card-modern,
-html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#username),
-html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#password) {
-    width: min(400px, calc(100vw - 48px)) !important;
-    max-width: 400px !important;
-    min-height: 0 !important;
-    height: auto !important;
-    padding: 30px 32px 28px !important;
-    gap: 0 !important;
-    overflow: visible !important;
-    border-radius: 22px !important;
-}
-html.eos-login .eos-login-card-modern > .MuiGrid2-root,
-html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#username) > .MuiGrid2-root,
-html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#password) > .MuiGrid2-root {
-    width: 100% !important;
-    min-width: 0 !important;
-}
-html.eos-login .MuiFormControl-root {
+/* NexoWatt EOS 7.9.99 – edit controls belong to the lowest Intro card grid. */
+html.eos-route-intro .eos-native-intro-grid {
+    position: relative !important;
     width: 100% !important;
-    margin: 13px 0 3px !important;
-}
-html.eos-login .MuiInputLabel-root { display: none !important; }
-html.eos-login .MuiOutlinedInput-root {
-    min-height: 46px !important;
-    border-radius: 6px !important;
-    background: rgba(4, 19, 31, .76) !important;
-}
-html.eos-login .MuiOutlinedInput-input {
-    min-height: 0 !important;
-    padding: 11px 14px !important;
-    line-height: 22px !important;
-}
-html.eos-login .MuiOutlinedInput-input::placeholder {
-    color: rgba(245, 251, 255, .92) !important;
-    opacity: 1 !important;
-}
-html.eos-login .MuiOutlinedInput-notchedOutline legend {
-    width: 0 !important;
-    max-width: 0 !important;
-    padding: 0 !important;
-}
-html.eos-login .MuiFormControlLabel-root {
-    margin: 7px 0 5px !important;
-}
-html.eos-login .MuiButton-root[type="submit"] {
-    min-height: 44px !important;
-    margin: 8px 0 0 !important;
-}
-html.eos-login .eos-login-card-modern > .MuiBox-root:last-child,
-html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#username) > .MuiBox-root:last-child,
-html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#password) > .MuiBox-root:last-child {
-    margin-top: 28px !important;
+    min-height: 80px !important;
+    padding-bottom: 80px !important;
+    overflow: visible !important;
 }
-html.eos-login .MuiAlert-root,
-html.eos-login [role="alert"] {
-    margin: 14px 0 1px !important;
-    padding: 9px 11px !important;
-    line-height: 1.35 !important;
+html.eos-route-intro .eos-overview-edit-controls {
+    position: absolute !important;
+    right: 16px !important;
+    bottom: 16px !important;
+    z-index: 3 !important;
+    display: flex !important;
+    align-items: center !important;
+    gap: 8px !important;
+    min-width: 52px !important;
+    min-height: 52px !important;
+    padding: 6px !important;
+    border: 1px solid rgba(0, 229, 138, .24) !important;
+    border-radius: 16px !important;
+    background: rgba(3, 23, 34, .94) !important;
+    box-shadow: 0 12px 30px rgba(0, 0, 0, .26) !important;
 }
-@media (max-width: 500px) {
-    html.eos-login main.MuiPaper-root::before {
-        width: calc(100vw - 12px) !important;
-        height: auto !important;
-        min-height: min(520px, calc(100dvh - 12px)) !important;
-    }
-    html.eos-login main.MuiPaper-root > .eos-login-card-modern,
-    html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#username),
-    html.eos-login main.MuiPaper-root > .MuiPaper-root:has(#password) {
-        width: calc(100vw - 38px) !important;
-        max-width: none !important;
-        padding: 25px 22px 23px !important;
-    }
+html.eos-route-intro .eos-overview-edit-controls .MuiFab-root {
+    position: static !important;
+    inset: auto !important;
+    margin: 0 !important;
 }
-

package/adminWww/index.html

@@ -8,8 +8,9 @@
         <meta http-equiv="Cache-Control" content="no-store, no-cache, must-revalidate" />
         <meta http-equiv="Pragma" content="no-cache" />
         <meta http-equiv="Expires" content="0" />
-          <script src="./js/eos-manual-write-policy.js?v=98"></script>
-          <script type="module" src="./assets/hostInit-v84.js?v=84"></script>
+          <script src="./js/eos-release-watch.js?v=99"></script>
+          <script src="./js/eos-manual-write-policy.js?v=99"></script>
+          <script type="module" src="./assets/hostInit-v84.js?v=99"></script>
         
         <meta charset="utf-8" />
         <link
@@ -36,8 +37,8 @@
             rel="stylesheet"
             href="css/leaflet.css"
         />
-        <link rel="stylesheet" href="./css/nexowatt-native-shell.css?v=98" />
-        <link rel="stylesheet" href="./css/eos-ems-overview.css?v=98" />
+        <link rel="stylesheet" href="./css/nexowatt-native-shell.css?v=99" />
+        <link rel="stylesheet" href="./css/eos-ems-overview.css?v=99" />
         <link
             rel="manifest"
             href="manifest.json"
@@ -157,23 +158,23 @@
                 false,
             );
         </script>
-      <link rel="modulepreload" crossorigin href="./assets/preload-helper-BDBacUwf.js">
-      <link rel="modulepreload" crossorigin href="./assets/iobroker_admin__mf_v__runtimeInit__mf_v__-g2X2zhAf.js">
-            <script defer src="./js/eos-role-bootstrap.js?v=98" data-eos-entry="./assets/index-CQZugZ1z-v84.js?v=84"></script>
-            <script defer src="./js/eos-policy-client.js?v=98"></script>
-            <script defer src="./js/eos-branding-sanitizer.js?v=98"></script>
-            <script defer src="./js/nexowatt-native-shell.js?v=98"></script>
-            <script defer src="./js/eos-native-security.js?v=98"></script>
-            <script defer src="./js/eos-basic-settings.js?v=98"></script>
-            <script defer src="./js/eos-role-ui.js?v=98"></script>
-            <script defer src="./js/eos-ems-overview.js?v=98"></script>
-            <script defer src="./js/eos-account-management.js?v=98"></script>
-            <script defer src="./js/eos-assistant.js?v=98"></script>
+      <link rel="modulepreload" crossorigin href="./assets/preload-helper-BDBacUwf.js?v=99">
+      <link rel="modulepreload" crossorigin href="./assets/iobroker_admin__mf_v__runtimeInit__mf_v__-g2X2zhAf.js?v=99">
+            <script defer src="./js/eos-role-bootstrap.js?v=99" data-eos-entry="./assets/index-CQZugZ1z-v84.js?v=99"></script>
+            <script defer src="./js/eos-policy-client.js?v=99"></script>
+            <script defer src="./js/eos-branding-sanitizer.js?v=99"></script>
+            <script defer src="./js/nexowatt-native-shell.js?v=99"></script>
+            <script defer src="./js/eos-native-security.js?v=99"></script>
+            <script defer src="./js/eos-basic-settings.js?v=99"></script>
+            <script defer src="./js/eos-role-ui.js?v=99"></script>
+            <script defer src="./js/eos-ems-overview.js?v=99"></script>
+            <script defer src="./js/eos-account-management.js?v=99"></script>
+            <script defer src="./js/eos-assistant.js?v=99"></script>
     </head>
     <body>
         <noscript>Für NexoWatt EOS muss JavaScript aktiviert sein.</noscript>
         <div id="root"></div>
-<script defer src="static/js/nexowatt-stable-login.js?v=98"></script>
-<script defer src="static/js/nexowatt-stable-v98.js?v=98"></script>
+<script defer src="static/js/nexowatt-stable-login.js?v=99"></script>
+<script defer src="static/js/nexowatt-stable-v99.js?v=99"></script>
 </body>
 </html>

package/adminWww/js/eos-account-management.js

@@ -1,7 +1,7 @@
 (() => {
     'use strict';
 
-    const VERSION = 'v98-account-management-real-password-write';
+    const VERSION = 'v99-account-management-password-write';
     const script = document.currentScript || document.querySelector('script[src*="eos-account-management.js"]');
     const base = new URL('../', script?.src || window.location.href);
     const abort = new AbortController();
@@ -19,10 +19,11 @@
             introInstaller: 'Du kannst Endkundenzugänge zurücksetzen. Admin- und Installateurzugänge bleiben NexoWatt Service vorbehalten.',
             loading: 'Zugänge werden geladen …', empty: 'Keine passenden Konten gefunden.', close: 'Schließen', refresh: 'Aktualisieren',
             installer: 'Installateur', enduser: 'Endkunde / Gast', active: 'Passwort aktiv', first: 'Erstanmeldung offen', disabled: 'Deaktiviert',
-            reset: 'Passwort zurücksetzen', resetting: 'Wird zurückgesetzt …', resetConfirm: name => `Soll der Zugang „${name}“ wirklich zurückgesetzt werden? Das bisherige Passwort wird ungültig. Danach gilt einmalig das Startpasswort „nexowatt“ und beim nächsten Login muss sofort ein persönliches Passwort vergeben werden.`,
-            resetDone: name => `Der Zugang „${name}“ ist zurückgesetzt. Einmalig mit dem Startpasswort „nexowatt“ anmelden und anschließend direkt ein persönliches Passwort festlegen.`,
-            resetFailed: 'Der Zugang konnte nicht zurückgesetzt werden.', permissionError: 'Für dieses Konto ist das Zurücksetzen nicht erlaubt.', originError: 'Die Sicherheitsprüfung der Anfrage ist fehlgeschlagen. Seite mit Strg+F5 neu laden.', disabledError: 'Das Konto ist deaktiviert und kann nicht zurückgesetzt werden.', notFoundError: 'Das Konto wurde nicht gefunden.', writeError: 'Das neue Startpasswort konnte nicht in das Benutzerkonto geschrieben werden.', lastSet: 'Letzte Passwortvergabe', lastReset: 'Letzter Reset', by: 'durch',
+            reset: 'Passwort zurücksetzen', resetting: 'Wird zurückgesetzt …', resetConfirm: name => `Soll der Zugang „${name}“ wirklich zurückgesetzt werden? Danach gilt einmalig das Startpasswort „nexowatt“ und anschließend muss ein persönliches Passwort vergeben werden.`,
+            resetDone: name => `Der Zugang „${name}“ wurde im EOS-Benutzerkonto auf „nexowatt“ zurückgesetzt. Nach der nächsten Anmeldung muss sofort ein persönliches Passwort vergeben werden.`,
+            resetFailed: 'Der Zugang konnte nicht zurückgesetzt werden.', lastSet: 'Letzte Passwortvergabe', lastReset: 'Letzter Reset', by: 'durch',
             security: 'Admin/Service darf Installateur und Endkunde zurücksetzen. Installateure dürfen ausschließlich Endkunden zurücksetzen.',
+            errors: { permissionError: 'Die Admin-/Installateurberechtigung konnte nicht bestätigt werden. Bitte neu anmelden.', invalidRequest: 'Die Sicherheitsbestätigung fehlt. Bitte die Seite neu laden.', invalidRequestOrigin: 'Die Sitzung oder Adresse hat sich geändert. Bitte die Seite neu laden.', invalidTarget: 'Dieses Konto darf nicht über EOS zurückgesetzt werden.', accountDisabled: 'Das Konto ist deaktiviert.', accountNotFound: 'Das Benutzerkonto wurde nicht gefunden.', passwordApiUnavailable: 'Die EOS-Passwortverwaltung ist nicht verfügbar.', passwordNotPersisted: 'Das Startpasswort wurde nicht gespeichert.', passwordVerificationFailed: 'Das Startpasswort wurde geschrieben, aber nicht als gültige Anmeldung bestätigt.', passwordMetadataNotPersisted: 'Der Erstanmeldungsstatus wurde nicht gespeichert.', accountResetFailed: 'Das Konto konnte serverseitig nicht zurückgesetzt werden.' },
         },
         en: {
             launcher: 'Accounts', titleAdmin: 'Accounts & roles', titleInstaller: 'End-user accounts',
@@ -30,10 +31,11 @@
             introInstaller: 'You may reset end-user accounts. Admin and installer accounts remain reserved for NexoWatt Service.',
             loading: 'Loading accounts …', empty: 'No matching accounts found.', close: 'Close', refresh: 'Refresh',
             installer: 'Installer', enduser: 'End user / Guest', active: 'Password active', first: 'First activation open', disabled: 'Disabled',
-            reset: 'Reset password', resetting: 'Resetting …', resetConfirm: name => `Reset account “${name}”? The current password becomes invalid. Sign in once with the initial password “nexowatt”, then create a personal password immediately.`,
-            resetDone: name => `Account “${name}” was reset. Sign in once with “nexowatt” and then create a personal password.`,
-            resetFailed: 'The account could not be reset.', permissionError: 'Reset is not permitted for this account.', originError: 'The request security check failed. Reload the page with Ctrl+F5.', disabledError: 'The account is disabled and cannot be reset.', notFoundError: 'The account was not found.', writeError: 'The initial password could not be written to the user account.', lastSet: 'Last password setup', lastReset: 'Last reset', by: 'by',
+            reset: 'Reset password', resetting: 'Resetting …', resetConfirm: name => `Reset account “${name}”? The one-time initial password will be “nexowatt”; a personal password must then be created immediately.`,
+            resetDone: name => `Account “${name}” was reset in the EOS user account to “nexowatt”. The next sign-in requires an immediate personal password change.`,
+            resetFailed: 'The account could not be reset.', lastSet: 'Last password setup', lastReset: 'Last reset', by: 'by',
             security: 'Admin/Service may reset installer and end-user accounts. Installers may reset end-user accounts only.',
+            errors: { permissionError: 'Admin/Installer permission could not be confirmed. Sign in again.', invalidRequest: 'The security confirmation is missing. Reload the page.', invalidRequestOrigin: 'The session or address changed. Reload the page.', invalidTarget: 'This account cannot be reset through EOS.', accountDisabled: 'The account is disabled.', accountNotFound: 'The user account was not found.', passwordApiUnavailable: 'The EOS password service is unavailable.', passwordNotPersisted: 'The initial password was not saved.', passwordVerificationFailed: 'The initial password was written but could not be verified.', passwordMetadataNotPersisted: 'The first-login status was not saved.', accountResetFailed: 'The account could not be reset on the server.' },
         },
         nl: {
             launcher: 'Toegangen', titleAdmin: 'Toegangen & rollen', titleInstaller: 'Eindgebruikerstoegangen',
@@ -41,26 +43,15 @@
             introInstaller: 'Je kunt eindgebruikersaccounts resetten. Admin- en installateurstoegang blijft voor NexoWatt Service.',
             loading: 'Toegangen worden geladen …', empty: 'Geen passende accounts gevonden.', close: 'Sluiten', refresh: 'Vernieuwen',
             installer: 'Installateur', enduser: 'Eindgebruiker / Guest', active: 'Wachtwoord actief', first: 'Eerste activering open', disabled: 'Uitgeschakeld',
-            reset: 'Wachtwoord resetten', resetting: 'Wordt gereset …', resetConfirm: name => `Account „${name}“ resetten? Het huidige wachtwoord wordt ongeldig. Meld één keer aan met het startwachtwoord „nexowatt“ en stel daarna direct een persoonlijk wachtwoord in.`,
-            resetDone: name => `Account „${name}“ is gereset. Meld één keer aan met „nexowatt“ en stel daarna een persoonlijk wachtwoord in.`,
-            resetFailed: 'Het account kon niet worden gereset.', permissionError: 'Resetten is voor dit account niet toegestaan.', originError: 'De veiligheidscontrole van het verzoek is mislukt. Herlaad de pagina met Ctrl+F5.', disabledError: 'Het account is uitgeschakeld en kan niet worden gereset.', notFoundError: 'Het account werd niet gevonden.', writeError: 'Het startwachtwoord kon niet naar het gebruikersaccount worden geschreven.', lastSet: 'Laatste wachtwoordinstelling', lastReset: 'Laatste reset', by: 'door',
+            reset: 'Wachtwoord resetten', resetting: 'Wordt gereset …', resetConfirm: name => `Account „${name}“ resetten? Eenmalig geldt het startwachtwoord „nexowatt“, waarna direct een persoonlijk wachtwoord moet worden ingesteld.`,
+            resetDone: name => `Account „${name}“ is in het EOS-gebruikersaccount teruggezet op „nexowatt“. Bij de volgende aanmelding moet direct een persoonlijk wachtwoord worden ingesteld.`,
+            resetFailed: 'Het account kon niet worden gereset.', lastSet: 'Laatste wachtwoordinstelling', lastReset: 'Laatste reset', by: 'door',
             security: 'Admin/service mag installateur- en eindgebruikersaccounts resetten. Installateurs alleen eindgebruikers.',
+            errors: { permissionError: 'De Admin-/Installateurrechten konden niet worden bevestigd. Meld opnieuw aan.', invalidRequest: 'De beveiligingsbevestiging ontbreekt. Herlaad de pagina.', invalidRequestOrigin: 'De sessie of het adres is gewijzigd. Herlaad de pagina.', invalidTarget: 'Dit account kan niet via EOS worden gereset.', accountDisabled: 'Het account is uitgeschakeld.', accountNotFound: 'Het gebruikersaccount is niet gevonden.', passwordApiUnavailable: 'De EOS-wachtwoordservice is niet beschikbaar.', passwordNotPersisted: 'Het startwachtwoord is niet opgeslagen.', passwordVerificationFailed: 'Het startwachtwoord is geschreven maar kon niet worden geverifieerd.', passwordMetadataNotPersisted: 'De eerste-aanmeldstatus is niet opgeslagen.', accountResetFailed: 'Het account kon server-side niet worden gereset.' },
         },
     };
     const t = () => i18n[language()];
-    const accountErrorText = code => {
-        const text = t();
-        return ({
-            permissionError: text.permissionError,
-            invalidRequestOrigin: text.originError,
-            accountDisabled: text.disabledError,
-            accountNotFound: text.notFoundError,
-            passwordApiUnavailable: text.writeError,
-            passwordWriteFailed: text.writeError,
-            passwordVerificationFailed: text.writeError,
-            userObjectUnavailableAfterPasswordChange: text.writeError,
-        })[String(code || '')] || text.resetFailed;
-    };
+    const errorText = code => t().errors?.[String(code || '')] || String(code || t().resetFailed);
     const roleFromPolicy = policy => {
         const raw = normalize(policy?.role || '');
         if (policy?.isAdmin || policy?.isEosAdminGroup || /admin|service/.test(raw)) return 'admin';
@@ -157,17 +148,17 @@
             reset.disabled = true; reset.textContent = t().resetting; setStatus('', '');
             try {
                 const response = await fetch(new URL('nexowatt/account/reset', base).href, {
-                    method: 'POST', credentials: 'include', cache: 'no-store',
+                    method: 'POST', credentials: 'same-origin', cache: 'no-store',
                     headers: { 'Content-Type': 'application/json', Accept: 'application/json', 'X-NexoWatt-EOS-Account-Reset': '1' },
                     body: JSON.stringify({ user: account.id }),
                 });
                 const payload = await response.json().catch(() => ({}));
-                if (!response.ok || payload.error) throw new Error(accountErrorText(payload.error));
+                if (!response.ok || payload.error) throw new Error(payload.error || t().resetFailed);
                 setStatus(t().resetDone(label), 'success');
                 await loadAccounts();
             } catch (error) {
                 reset.disabled = false; reset.textContent = t().reset;
-                setStatus(error?.message || t().resetFailed, 'error');
+                setStatus(errorText(error?.message), 'error');
             }
         });
         actions.appendChild(reset);
@@ -189,12 +180,12 @@
         if (!state.overlay) return;
         setStatus(t().loading, '');
         try {
-            const response = await fetch(new URL('nexowatt/account/manage', base).href, { credentials: 'include', cache: 'no-store', headers: { Accept: 'application/json' } });
+            const response = await fetch(new URL('nexowatt/account/manage', base).href, { credentials: 'same-origin', cache: 'no-store', headers: { Accept: 'application/json' } });
             const data = await response.json().catch(() => ({}));
             if (!response.ok || data.error) throw new Error(data.error || t().resetFailed);
             renderAccounts(data); setStatus('', '');
         } catch (error) {
-            setStatus(error?.message || t().resetFailed, 'error');
+            setStatus(errorText(error?.message), 'error');
         }
     };
 

package/adminWww/js/eos-assistant.js

@@ -1,6 +1,6 @@
 (() => {
     'use strict';
-    // NexoWatt EOS stable 7.9.97: EOS Assist remains disabled until the
+    // NexoWatt EOS stable 7.9.99: EOS Assist remains disabled until the
     // read-only system assistant is rebuilt and accepted separately.
     window.NEXOWATT_EOS_ASSIST_DISABLED = true;
     document.documentElement.classList.add('eos-assist-disabled');

package/adminWww/js/eos-ems-overview.js

@@ -1,6 +1,6 @@
 (() => {
     'use strict';
-    const VERSION = 'v98-nexowatt-ems-overview-runtime';
+    const VERSION = 'v99-nexowatt-ems-overview-runtime';
     const CONTRACT = 'nexowatt-ems-overview-v1';
     const ROOT_ID = 'eos-ems-overview-runtime';
     const POLL_MS = 5000;
@@ -161,11 +161,10 @@
         if (tariff.available) tags.push({ label: `Tarif: ${text(tariff.state, 'aktiv')}${tariff.priceEurPerKwh != null ? ` · ${num(tariff.priceEurPerKwh).toFixed(3)} €/kWh` : ''}` });
         if (forecast.available) tags.push({ label: `Prognose: ${text(forecast.source, 'aktiv')}${forecast.fresh === false ? ' · veraltet' : ''}`, warning: forecast.fresh === false });
         if (ems.safetyActive || ems.safetyEmergencyStop || ems.safetyValid === false) tags.push({ label: 'EOS Safety aktiv', warning: true });
-        const detailsPort = Math.max(1, num(summary.details?.port, 8188)); const detailsPath = text(summary.details?.path, '/ems-apps.html?tab=status'); const detailsUrl = `${location.protocol}//${location.hostname}:${detailsPort}${detailsPath.startsWith('/') ? detailsPath : `/${detailsPath}`}`;
         const metrics = `<div class="eos-ems-overview-metric"><span>EMS-Budget</span><strong>${totalBudget > 0 ? esc(formatPower(totalBudget)) : 'nicht begrenzt'}</strong><small>Rest ${esc(formatPower(remaining))}</small></div><div class="eos-ems-overview-metric"><span>Lademanagement</span><strong>${esc(formatPower(charging.actualW))} / ${esc(formatPower(charging.targetW))}</strong><small>${num(charging.activeCount)} lädt · ${num(charging.waitingCount)} wartet</small></div>${storage.available ? `<div class="eos-ems-overview-metric"><span>Speicher ${esc(text(storage.topology))}</span><strong>${esc(formatPower(storage.actualW))} / ${esc(formatPower(storage.targetW))}</strong><small>${storage.socPct != null ? `SoC ${Math.round(num(storage.socPct))} %` : esc(text(storage.reason, 'aktiv'))}</small></div>` : `<div class="eos-ems-overview-metric"><span>PV-Budget</span><strong>${esc(formatPower(budget.pvBudgetW))}</strong><small>PV-Rest ${esc(formatPower(budget.remainingPvW))}</small></div>`}<div class="eos-ems-overview-metric"><span>Letzter Regeltick</span><strong>${esc(formatAge(ems.lastTickTs || data.updatedAt))}</strong><small>${isTechnical ? `Zyklus ${num(ems.cycleMs)} ms` : esc(text(ems.decision, 'EMS aktiv'))}</small></div>`;
         const decisionsHtml = decisions.length ? decisions.map(item => `<div class="eos-ems-overview-decision eos-ems-overview-decision--${severity(item.severity)}"><strong>${esc(text(item.title, 'EMS-Entscheidung'))}</strong><span>${esc(text(item.reason, 'Keine zusätzliche Begrenzung'))}</span>${isTechnical && item.details ? `<small>${esc(item.details)}</small>` : ''}</div>`).join('') : '<div class="eos-ems-overview-empty">Keine aktiven Regelentscheidungen. EOS arbeitet mit den aktuellen Messwerten.</div>';
         const eventsHtml = isTechnical ? (events.length ? events.map(item => `<div class="eos-ems-overview-event eos-ems-overview-event--${severity(item.severity)}"><time>${esc(formatClock(item.ts))}</time><div><strong>${esc(text(item.title, 'EMS'))}</strong><span>${esc(text(item.message || item.reason, 'Zustand aktualisiert'))}</span></div></div>`).join('') : '<div class="eos-ems-overview-empty">Noch keine Zustandsänderung im begrenzten Ereignispuffer.</div>') : `<div class="eos-ems-overview-decision eos-ems-overview-decision--info"><strong>${esc(text(summary.headline, 'EMS aktiv'))}</strong><span>${esc(text(summary.reason, 'EOS optimiert die Anlage innerhalb aller Sicherheitsgrenzen.'))}</span></div>`;
-        root.innerHTML = `<header class="eos-ems-overview-header"><div><span class="eos-ems-overview-eyebrow">NexoWatt EMS · Live-Diagnose</span><h2>${esc(stale ? 'EMS-Diagnose ist nicht aktuell' : text(summary.headline, 'EMS arbeitet normal'))}</h2><p>${esc(stale ? 'Adapter oder Diagnosewerte sind älter als 20 Sekunden. Die Werte werden als veraltet markiert.' : text(summary.reason, 'EMS arbeitet innerhalb aller aktiven Grenzen.'))}</p></div><div class="eos-ems-overview-state"><span class="eos-ems-overview-state-dot"></span><strong>${stale ? 'Offline / veraltet' : ({ok:'Normal',info:'Information',warning:'Begrenzt',error:'Störung'}[status])}</strong><small>${esc(data.instance)} · ${esc(formatAge(data.updatedAt))}</small></div></header><div class="eos-ems-overview-metrics">${metrics}</div>${totalBudget > 0 ? `<div class="eos-ems-overview-budget" title="${percent.toFixed(1)} % Restbudget"><span style="width:${percent}%"></span></div>` : ''}${tags.length ? `<div class="eos-ems-overview-tags">${tags.map(tag => `<span class="${tag.warning ? 'is-warning' : ''}">${esc(tag.label)}</span>`).join('')}</div>` : ''}<div class="eos-ems-overview-columns"><div class="eos-ems-overview-panel"><h3>Aktuelle Regelentscheidungen</h3>${decisionsHtml}</div><div class="eos-ems-overview-panel"><h3>${isTechnical ? 'Letzte EMS-Ereignisse' : 'Systemerklärung'}</h3>${eventsHtml}</div></div><footer class="eos-ems-overview-footer"><span>Diagnose ist rein lesend. Keine Kachel besitzt Schreibhoheit.</span><a href="${esc(detailsUrl)}" target="_blank" rel="noreferrer">Vollständige EMS-Diagnose öffnen ↗</a></footer>`;
+        root.innerHTML = `<header class="eos-ems-overview-header"><div><span class="eos-ems-overview-eyebrow">NexoWatt EMS · Live-Diagnose</span><h2>${esc(stale ? 'EMS-Diagnose ist nicht aktuell' : text(summary.headline, 'EMS arbeitet normal'))}</h2><p>${esc(stale ? 'Adapter oder Diagnosewerte sind älter als 20 Sekunden. Die Werte werden als veraltet markiert.' : text(summary.reason, 'EMS arbeitet innerhalb aller aktiven Grenzen.'))}</p></div><div class="eos-ems-overview-state"><span class="eos-ems-overview-state-dot"></span><strong>${stale ? 'Offline / veraltet' : ({ok:'Normal',info:'Information',warning:'Begrenzt',error:'Störung'}[status])}</strong><small>${esc(data.instance)} · ${esc(formatAge(data.updatedAt))}</small></div></header><div class="eos-ems-overview-metrics">${metrics}</div>${totalBudget > 0 ? `<div class="eos-ems-overview-budget" title="${percent.toFixed(1)} % Restbudget"><span style="width:${percent}%"></span></div>` : ''}${tags.length ? `<div class="eos-ems-overview-tags">${tags.map(tag => `<span class="${tag.warning ? 'is-warning' : ''}">${esc(tag.label)}</span>`).join('')}</div>` : ''}<div class="eos-ems-overview-columns"><div class="eos-ems-overview-panel"><h3>Aktuelle Regelentscheidungen</h3>${decisionsHtml}</div><div class="eos-ems-overview-panel"><h3>${isTechnical ? 'Letzte EMS-Ereignisse' : 'Systemerklärung'}</h3>${eventsHtml}</div></div><footer class="eos-ems-overview-footer"><span>Diagnose ist rein lesend. Keine Kachel besitzt Schreibhoheit.</span></footer>`;
     };
 
     const scheduleFastRetry = () => {

package/adminWww/js/eos-release-watch.js

@@ -0,0 +1,77 @@
+(() => {
+    'use strict';
+    const RELEASE = '7.9.99';
+    const RELEASE_KEY = 'nexowatt.eos.loadedRelease';
+    const RELOAD_KEY = 'nexowatt.eos.reloadTarget';
+    const CHECK_MS = 15000;
+    let refreshing = false;
+
+    const normalize = value => String(value || '').trim().replace(/^v/i, '');
+    const validRelease = value => /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(normalize(value));
+    const reloadUrl = version => {
+        const url = new URL(window.location.href);
+        url.searchParams.set('_eosRelease', normalize(version) || RELEASE);
+        url.searchParams.set('_eosReload', String(Date.now()));
+        return url.toString();
+    };
+    const purgeBrowserCaches = async () => {
+        const jobs = [];
+        try {
+            if ('caches' in window) {
+                jobs.push(caches.keys().then(keys => Promise.all(keys.map(key => caches.delete(key)))));
+            }
+        } catch (_) { /* Cache API is optional */ }
+        try {
+            if (navigator.serviceWorker?.getRegistrations) {
+                jobs.push(navigator.serviceWorker.getRegistrations().then(rows => Promise.all(rows.map(row => row.unregister()))));
+            }
+        } catch (_) { /* service workers may be unavailable */ }
+        await Promise.allSettled(jobs);
+    };
+    const reloadFor = async version => {
+        const target = normalize(version) || RELEASE;
+        if (refreshing || sessionStorage.getItem(RELOAD_KEY) === target) return;
+        refreshing = true;
+        sessionStorage.setItem(RELOAD_KEY, target);
+        document.documentElement.classList.add('eos-release-refreshing');
+        await purgeBrowserCaches();
+        window.location.replace(reloadUrl(target));
+    };
+    const checkServerVersion = async () => {
+        try {
+            const endpoint = new URL('./version', window.location.href);
+            endpoint.searchParams.set('_eosTs', String(Date.now()));
+            const response = await fetch(endpoint, {
+                cache: 'no-store',
+                credentials: 'same-origin',
+                headers: { 'Cache-Control': 'no-cache' },
+            });
+            if (!response.ok) return;
+            const serverVersion = normalize(await response.text());
+            if (validRelease(serverVersion) && serverVersion !== RELEASE) {
+                await reloadFor(serverVersion);
+            }
+        } catch (_) { /* adapter restart or temporary network interruption */ }
+    };
+
+    window.NEXOWATT_EOS_RELEASE = RELEASE;
+    const previous = normalize(localStorage.getItem(RELEASE_KEY));
+    localStorage.setItem(RELEASE_KEY, RELEASE);
+    const loadedFor = normalize(new URL(window.location.href).searchParams.get('_eosRelease'));
+    if (previous && previous !== RELEASE && loadedFor !== RELEASE) {
+        void reloadFor(RELEASE);
+    } else {
+        sessionStorage.removeItem(RELOAD_KEY);
+    }
+
+    window.addEventListener('focus', () => void checkServerVersion());
+    document.addEventListener('visibilitychange', () => {
+        if (document.visibilityState === 'visible') void checkServerVersion();
+    });
+    window.setInterval(() => void checkServerVersion(), CHECK_MS);
+    window.NEXOWATT_EOS_RELEASE_WATCH = Object.freeze({
+        release: RELEASE,
+        check: checkServerVersion,
+        purge: purgeBrowserCaches,
+    });
+})();

package/adminWww/js/eos-role-bootstrap.js

@@ -1,7 +1,7 @@
 (() => {
     'use strict';
 
-    const VERSION = 'v98-first-login-password-native-overview';
+    const VERSION = 'v99-first-login-password-persisted';
     const script = document.currentScript || document.querySelector('script[src*="eos-role-bootstrap.js"]');
     const entry = script?.dataset?.eosEntry || '';
     let launched = false;
@@ -80,6 +80,7 @@
             required: 'Bitte beide Passwortfelder ausfüllen.', mismatch: 'Die Passwörter stimmen nicht überein.',
             length: min => `Das Passwort muss mindestens ${min} Zeichen lang sein.`, complexity: 'Groß-/Kleinbuchstabe, Zahl und Sonderzeichen sind erforderlich.',
             easy: 'Das Passwort ist zu leicht oder enthält den Kontonamen.', generic: 'Das Passwort konnte nicht gespeichert werden.', success: 'Passwort gespeichert. Die Anmeldung wird neu gestartet …',
+            backendErrors: { invalidRequest: 'Die Sicherheitsbestätigung fehlt. Bitte erneut anmelden.', invalidRequestOrigin: 'Die Sitzung oder aufgerufene Adresse hat sich geändert. Bitte erneut anmelden.', passwordApiUnavailable: 'Die ioBroker-Passwortverwaltung ist nicht verfügbar.', passwordNotPersisted: 'Das Passwort wurde nicht im ioBroker-Benutzerkonto gespeichert.', passwordVerificationFailed: 'Das neue Passwort wurde geschrieben, aber nicht als gültige Anmeldung bestätigt.', passwordMetadataNotPersisted: 'Das Passwort wurde gespeichert, aber der Erstanmeldungsstatus konnte nicht abgeschlossen werden.', passwordSetupFailed: 'Das Passwort konnte serverseitig nicht gespeichert werden. Bitte das EOS-Systemlog prüfen.' },
             securityTitle: 'Zugriff wird geprüft', securityIntro: 'Die sichere Anmeldung wird gerade geprüft. Die Oberfläche bleibt gesperrt, bis die Berechtigungen eindeutig geladen wurden.',
             securityRetry: 'Jetzt erneut prüfen', securityLogout: 'Zur Anmeldung', securityAuto: seconds => `Automatischer neuer Versuch in ${seconds} Sekunden …`,
             claimLauncher: 'Erstanmeldung', claimTitle: 'Konto erstmals aktivieren',
@@ -99,6 +100,7 @@
             required: 'Please complete both password fields.', mismatch: 'The passwords do not match.',
             length: min => `The password must contain at least ${min} characters.`, complexity: 'Upper/lower case, a number and a special character are required.',
             easy: 'The password is too easy or contains the account name.', generic: 'The password could not be saved.', success: 'Password saved. Restarting sign-in …',
+            backendErrors: { invalidRequest: 'The security confirmation is missing. Sign in again.', invalidRequestOrigin: 'The session or address changed. Sign in again.', passwordApiUnavailable: 'The ioBroker password service is unavailable.', passwordNotPersisted: 'The password was not persisted in the ioBroker user account.', passwordVerificationFailed: 'The new password was written but could not be verified as a valid login.', passwordMetadataNotPersisted: 'The password was saved, but the first-login status could not be completed.', passwordSetupFailed: 'The password could not be saved on the server. Check the EOS system log.' },
             securityTitle: 'Checking access', securityIntro: 'The secure sign-in is being verified. The interface stays locked until the permissions are loaded unambiguously.',
             securityRetry: 'Check again now', securityLogout: 'Return to sign-in', securityAuto: seconds => `Retrying automatically in ${seconds} seconds …`,
             claimLauncher: 'First sign-in', claimTitle: 'Activate account for the first time',
@@ -118,6 +120,7 @@
             required: 'Vul beide wachtwoordvelden in.', mismatch: 'De wachtwoorden zijn niet gelijk.',
             length: min => `Het wachtwoord moet minimaal ${min} tekens bevatten.`, complexity: 'Hoofdletter, kleine letter, cijfer en speciaal teken zijn verplicht.',
             easy: 'Het wachtwoord is te eenvoudig of bevat de accountnaam.', generic: 'Het wachtwoord kon niet worden opgeslagen.', success: 'Wachtwoord opgeslagen. De aanmelding wordt opnieuw gestart …',
+            backendErrors: { invalidRequest: 'De beveiligingsbevestiging ontbreekt. Meld opnieuw aan.', invalidRequestOrigin: 'De sessie of het adres is gewijzigd. Meld opnieuw aan.', passwordApiUnavailable: 'De ioBroker-wachtwoordservice is niet beschikbaar.', passwordNotPersisted: 'Het wachtwoord is niet in het ioBroker-gebruikersaccount opgeslagen.', passwordVerificationFailed: 'Het nieuwe wachtwoord is geschreven maar kon niet als geldige aanmelding worden bevestigd.', passwordMetadataNotPersisted: 'Het wachtwoord is opgeslagen, maar de eerste-aanmeldstatus kon niet worden afgerond.', passwordSetupFailed: 'Het wachtwoord kon server-side niet worden opgeslagen. Controleer het EOS-systeemlogboek.' },
             securityTitle: 'Toegang wordt gecontroleerd', securityIntro: 'De veilige aanmelding wordt gecontroleerd. De interface blijft vergrendeld totdat de rechten eenduidig zijn geladen.',
             securityRetry: 'Nu opnieuw controleren', securityLogout: 'Terug naar aanmelden', securityAuto: seconds => `Automatisch opnieuw proberen over ${seconds} seconden …`,
             claimLauncher: 'Eerste aanmelding', claimTitle: 'Account voor het eerst activeren',
@@ -192,13 +195,13 @@
             submit.disabled = true; submit.textContent = t.saving; setStatus('', '');
             try {
                 const response = await fetch(endpoint, {
-                    method: 'POST', credentials: 'include', cache: 'no-store',
+                    method: 'POST', credentials: 'same-origin', cache: 'no-store',
                     headers: { 'Content-Type': 'application/json', Accept: 'application/json', 'X-NexoWatt-EOS-First-Login': '1' },
                     body: JSON.stringify({ password: password.value, passwordRepeat: repeat.value }),
                 });
                 const data = await response.json().catch(() => ({}));
                 if (!response.ok || data.error) {
-                    const messages = { passwordRequired: t.required, passwordMismatch: t.mismatch, passwordLength: t.length(minLength), passwordComplexity: t.complexity, passwordTooEasy: t.easy, passwordSetupNotAllowed: t.generic, invalidRequestOrigin: t.generic, passwordApiUnavailable: t.generic, passwordWriteFailed: t.generic, passwordVerificationFailed: t.generic, userObjectUnavailableAfterPasswordChange: t.generic };
+                    const messages = { passwordRequired: t.required, passwordMismatch: t.mismatch, passwordLength: t.length(minLength), passwordComplexity: t.complexity, passwordTooEasy: t.easy, ...(t.backendErrors || {}) };
                     throw new Error(messages[data.error] || t.generic);
                 }
                 setStatus(t.success, 'success');
@@ -265,13 +268,13 @@
             submit.disabled = true; submit.textContent = t.saving; setStatus('', '');
             try {
                 const response = await fetch(endpoint, {
-                    method: 'POST', credentials: 'include', cache: 'no-store',
+                    method: 'POST', credentials: 'same-origin', cache: 'no-store',
                     headers: { 'Content-Type': 'application/json', Accept: 'application/json', 'X-NexoWatt-EOS-Passwordless-Password': '1' },
                     body: JSON.stringify({ password: password.value, passwordRepeat: repeat.value }),
                 });
                 const data = await response.json().catch(() => ({}));
                 if (!response.ok || data.error) {
-                    const messages = { passwordRequired: t.required, passwordMismatch: t.mismatch, passwordLength: t.length(minLength), passwordComplexity: t.complexity, passwordTooEasy: t.easy, claimExpired: t.claimExpired };
+                    const messages = { passwordRequired: t.required, passwordMismatch: t.mismatch, passwordLength: t.length(minLength), passwordComplexity: t.complexity, passwordTooEasy: t.easy, claimExpired: t.claimExpired, ...(t.backendErrors || {}) };
                     throw new Error(messages[data.error] || t.generic);
                 }
                 overlay.querySelector('.eos-activation-steps span:nth-of-type(2)')?.classList.add('done');
@@ -473,7 +476,7 @@
             setStatus(card, t.claimChecking, '');
             try {
                 const response = await fetch(new URL('nexowatt/account/passwordless-claim', base).href, {
-                    method: 'POST', credentials: 'include', cache: 'no-store',
+                    method: 'POST', credentials: 'same-origin', cache: 'no-store',
                     headers: { 'Content-Type': 'application/json', Accept: 'application/json', 'X-NexoWatt-EOS-Passwordless-Claim': '1' },
                     body: JSON.stringify({ user: account }),
                 });
@@ -500,7 +503,7 @@
             const { username, password, card, submit } = loginElements();
             if (!username || !password || !card) return;
             card.classList.add('eos-login-card-modern');
-            // v98 compact normal-login first activation: do not add role buttons or a second panel.
+            // v99 normal-login first activation: do not add role buttons or a second panel.
             // The account is entered in the existing Loginname field; a blank password is accepted only
             // after the backend confirms that this exact managed account is eligible.
             card.querySelectorAll('.eos-login-role-selector').forEach(element => element.remove());
@@ -634,7 +637,7 @@
     const timeout = window.setTimeout(() => controller.abort(), 8000);
 
     window.NEXOWATT_EOS_BOOTSTRAP_READY = fetch(contextUrl, {
-        credentials: 'include', cache: 'no-store', headers: { Accept: 'application/json' }, signal: controller.signal,
+        credentials: 'same-origin', cache: 'no-store', headers: { Accept: 'application/json' }, signal: controller.signal,
     })
         .then(response => { if (!response.ok) throw new Error(`HTTP ${response.status}`); return response.json(); })
         .then(policy => {

package/adminWww/js/eos-role-ui.js

@@ -1,7 +1,7 @@
 (() => {
     'use strict';
 
-    const VERSION = 'v98-native-overview-ems-live-reserve-filter';
+    const VERSION = 'v99-native-overview-ems-live-reserve-filter';
     window.NEXOWATT_EOS_ROLE_UI_VERSION = VERSION;
 
     const state = {
@@ -278,7 +278,7 @@
         });
     };
     const ensureSafeOverview = () => safe(() => {
-        // 7.9.97: never cover the real Admin Intro with a second tile surface.
+        // 7.9.99: never cover the real Admin Intro with a second tile surface.
         // Installer and end-user use the native card component; security remains
         // enforced by route/instance filters and backend permissions.
         removeSafeOverview();

package/adminWww/js/nexowatt-native-shell.js

@@ -1,7 +1,7 @@
 (() => {
     'use strict';
 
-    const VERSION = 'v98-nexowatt-native-shell-native-overview';
+    const VERSION = 'v99-nexowatt-native-shell-native-overview';
     const previous = window.NEXOWATT_NATIVE_SHELL;
     if (previous?.version === VERSION) return;
     previous?.destroy?.();

package/adminWww/static/js/nexowatt-stable-login.js

@@ -1,4 +1,4 @@
-/* NexoWatt EOS stable runtime v98 */
+/* NexoWatt EOS stable runtime v99 */
 (() => {
   'use strict';
   const MANAGED_USERS = new Set(['installer', 'guest', 'user']);
@@ -14,8 +14,8 @@
   const findSubmit = () => [...document.querySelectorAll('button,input[type="submit"]')].find(element => visible(element) && (/anmelden|login|sign in/i.test((element.textContent || element.value || '').trim()) || element.type === 'submit'));
   const sync = () => {
     if (!isLogin()) return;
-    document.documentElement.classList.add('nw-eos-login-v98');
-    document.body?.classList.add('nw-eos-login-v98');
+    document.documentElement.classList.add('nw-eos-login-v99');
+    document.body?.classList.add('nw-eos-login-v99');
     const username = findInput('user');
     const password = findInput('password');
     const submit = findSubmit();