iobroker.eos-admin 7.9.99 → 7.10.0

package/adminWww/js/eos-role-bootstrap.js

@@ -1,7 +1,7 @@
 (() => {
     'use strict';
 
-    const VERSION = 'v99-first-login-password-persisted';
+    const VERSION = 'v7100-first-login-password-persisted';
     const script = document.currentScript || document.querySelector('script[src*="eos-role-bootstrap.js"]');
     const entry = script?.dataset?.eosEntry || '';
     let launched = false;
@@ -80,7 +80,7 @@
             required: 'Bitte beide Passwortfelder ausfüllen.', mismatch: 'Die Passwörter stimmen nicht überein.',
             length: min => `Das Passwort muss mindestens ${min} Zeichen lang sein.`, complexity: 'Groß-/Kleinbuchstabe, Zahl und Sonderzeichen sind erforderlich.',
             easy: 'Das Passwort ist zu leicht oder enthält den Kontonamen.', generic: 'Das Passwort konnte nicht gespeichert werden.', success: 'Passwort gespeichert. Die Anmeldung wird neu gestartet …',
-            backendErrors: { invalidRequest: 'Die Sicherheitsbestätigung fehlt. Bitte erneut anmelden.', invalidRequestOrigin: 'Die Sitzung oder aufgerufene Adresse hat sich geändert. Bitte erneut anmelden.', passwordApiUnavailable: 'Die ioBroker-Passwortverwaltung ist nicht verfügbar.', passwordNotPersisted: 'Das Passwort wurde nicht im ioBroker-Benutzerkonto gespeichert.', passwordVerificationFailed: 'Das neue Passwort wurde geschrieben, aber nicht als gültige Anmeldung bestätigt.', passwordMetadataNotPersisted: 'Das Passwort wurde gespeichert, aber der Erstanmeldungsstatus konnte nicht abgeschlossen werden.', passwordSetupFailed: 'Das Passwort konnte serverseitig nicht gespeichert werden. Bitte das EOS-Systemlog prüfen.' },
+            backendErrors: { invalidRequest: 'Die Sicherheitsbestätigung fehlt. Bitte erneut anmelden.', invalidRequestOrigin: 'Die Sitzung oder aufgerufene Adresse hat sich geändert. Bitte erneut anmelden.', passwordApiUnavailable: 'Die ioBroker-Passwortverwaltung ist nicht verfügbar.', passwordNotPersisted: 'Das Passwort wurde vom ioBroker-Controller nicht gespeichert. Bitte Systemlog prüfen.', passwordVerificationFailed: 'Das neue Passwort wurde geschrieben, aber nicht als gültige Anmeldung bestätigt.', passwordMetadataNotPersisted: 'Das Passwort wurde gespeichert, aber der Erstanmeldungsstatus konnte nicht abgeschlossen werden.', passwordSetupFailed: 'Das Passwort konnte serverseitig nicht gespeichert werden. Bitte das EOS-Systemlog prüfen.', passwordSetupTokenExpired: 'Die sichere Passwortfreigabe ist abgelaufen. Bitte erneut anmelden.', passwordSetupTokenMismatch: 'Die Passwortfreigabe gehört nicht zu dieser Sitzung. Bitte erneut anmelden.' },
             securityTitle: 'Zugriff wird geprüft', securityIntro: 'Die sichere Anmeldung wird gerade geprüft. Die Oberfläche bleibt gesperrt, bis die Berechtigungen eindeutig geladen wurden.',
             securityRetry: 'Jetzt erneut prüfen', securityLogout: 'Zur Anmeldung', securityAuto: seconds => `Automatischer neuer Versuch in ${seconds} Sekunden …`,
             claimLauncher: 'Erstanmeldung', claimTitle: 'Konto erstmals aktivieren',
@@ -100,7 +100,7 @@
             required: 'Please complete both password fields.', mismatch: 'The passwords do not match.',
             length: min => `The password must contain at least ${min} characters.`, complexity: 'Upper/lower case, a number and a special character are required.',
             easy: 'The password is too easy or contains the account name.', generic: 'The password could not be saved.', success: 'Password saved. Restarting sign-in …',
-            backendErrors: { invalidRequest: 'The security confirmation is missing. Sign in again.', invalidRequestOrigin: 'The session or address changed. Sign in again.', passwordApiUnavailable: 'The ioBroker password service is unavailable.', passwordNotPersisted: 'The password was not persisted in the ioBroker user account.', passwordVerificationFailed: 'The new password was written but could not be verified as a valid login.', passwordMetadataNotPersisted: 'The password was saved, but the first-login status could not be completed.', passwordSetupFailed: 'The password could not be saved on the server. Check the EOS system log.' },
+            backendErrors: { invalidRequest: 'The security confirmation is missing. Sign in again.', invalidRequestOrigin: 'The session or address changed. Sign in again.', passwordApiUnavailable: 'The ioBroker password service is unavailable.', passwordNotPersisted: 'The ioBroker controller did not persist the password. Check the system log.', passwordVerificationFailed: 'The new password was written but could not be verified as a valid login.', passwordMetadataNotPersisted: 'The password was saved, but the first-login status could not be completed.', passwordSetupFailed: 'The password could not be saved on the server. Check the EOS system log.', passwordSetupTokenExpired: 'The secure password setup ticket expired. Sign in again.', passwordSetupTokenMismatch: 'The password setup ticket does not belong to this session. Sign in again.' },
             securityTitle: 'Checking access', securityIntro: 'The secure sign-in is being verified. The interface stays locked until the permissions are loaded unambiguously.',
             securityRetry: 'Check again now', securityLogout: 'Return to sign-in', securityAuto: seconds => `Retrying automatically in ${seconds} seconds …`,
             claimLauncher: 'First sign-in', claimTitle: 'Activate account for the first time',
@@ -120,7 +120,7 @@
             required: 'Vul beide wachtwoordvelden in.', mismatch: 'De wachtwoorden zijn niet gelijk.',
             length: min => `Het wachtwoord moet minimaal ${min} tekens bevatten.`, complexity: 'Hoofdletter, kleine letter, cijfer en speciaal teken zijn verplicht.',
             easy: 'Het wachtwoord is te eenvoudig of bevat de accountnaam.', generic: 'Het wachtwoord kon niet worden opgeslagen.', success: 'Wachtwoord opgeslagen. De aanmelding wordt opnieuw gestart …',
-            backendErrors: { invalidRequest: 'De beveiligingsbevestiging ontbreekt. Meld opnieuw aan.', invalidRequestOrigin: 'De sessie of het adres is gewijzigd. Meld opnieuw aan.', passwordApiUnavailable: 'De ioBroker-wachtwoordservice is niet beschikbaar.', passwordNotPersisted: 'Het wachtwoord is niet in het ioBroker-gebruikersaccount opgeslagen.', passwordVerificationFailed: 'Het nieuwe wachtwoord is geschreven maar kon niet als geldige aanmelding worden bevestigd.', passwordMetadataNotPersisted: 'Het wachtwoord is opgeslagen, maar de eerste-aanmeldstatus kon niet worden afgerond.', passwordSetupFailed: 'Het wachtwoord kon server-side niet worden opgeslagen. Controleer het EOS-systeemlogboek.' },
+            backendErrors: { invalidRequest: 'De beveiligingsbevestiging ontbreekt. Meld opnieuw aan.', invalidRequestOrigin: 'De sessie of het adres is gewijzigd. Meld opnieuw aan.', passwordApiUnavailable: 'De ioBroker-wachtwoordservice is niet beschikbaar.', passwordNotPersisted: 'De ioBroker-controller heeft het wachtwoord niet opgeslagen. Controleer het systeemlogboek.', passwordVerificationFailed: 'Het nieuwe wachtwoord is geschreven maar kon niet als geldige aanmelding worden bevestigd.', passwordMetadataNotPersisted: 'Het wachtwoord is opgeslagen, maar de eerste-aanmeldstatus kon niet worden afgerond.', passwordSetupFailed: 'Het wachtwoord kon server-side niet worden opgeslagen. Controleer het EOS-systeemlogboek.', passwordSetupTokenExpired: 'De beveiligde wachtwoordtoestemming is verlopen. Meld opnieuw aan.', passwordSetupTokenMismatch: 'De wachtwoordtoestemming hoort niet bij deze sessie. Meld opnieuw aan.' },
             securityTitle: 'Toegang wordt gecontroleerd', securityIntro: 'De veilige aanmelding wordt gecontroleerd. De interface blijft vergrendeld totdat de rechten eenduidig zijn geladen.',
             securityRetry: 'Nu opnieuw controleren', securityLogout: 'Terug naar aanmelden', securityAuto: seconds => `Automatisch opnieuw proberen over ${seconds} seconden …`,
             claimLauncher: 'Eerste aanmelding', claimTitle: 'Account voor het eerst activeren',
@@ -133,11 +133,32 @@
         },
     };
 
+    const waitForPasswordSocket = async (timeoutMs = 10000) => {
+        const started = Date.now();
+        while (Date.now() - started < timeoutMs) {
+            const socket = window.NEXOWATT_EOS_ADMIN_SOCKET || window.NEXOWATT_EOS_SOCKET;
+            if (socket && typeof socket.changePassword === 'function') return socket;
+            await new Promise(resolve => window.setTimeout(resolve, 120));
+        }
+        return null;
+    };
+
+    const postWithTimeout = async (url, options, timeoutMs = 25000) => {
+        const controller = new AbortController();
+        const timer = window.setTimeout(() => controller.abort(), timeoutMs);
+        try {
+            return await fetch(url, { ...options, signal: controller.signal });
+        } finally {
+            window.clearTimeout(timer);
+        }
+    };
+
     const showFirstLoginPassword = (policy, base) => {
         const t = translations[language()];
         const passwordSetup = policy?.passwordSetup || {};
         const minLength = Number(passwordSetup.minLength || 10);
         const userName = String(passwordSetup.userName || policy?.user || '').replace(/^system\.user\./, '') || 'user';
+        const setupToken = String(passwordSetup.setupToken || '');
         const endpoint = new URL('nexowatt/account/first-password', base).href;
         const logoutUrl = new URL('logout', base).href;
         window.NEXOWATT_EOS_PASSWORD_SETUP_ACTIVE = true;
@@ -194,10 +215,31 @@
             if (!/[a-z]/.test(password.value) || !/[A-Z]/.test(password.value) || !/\d/.test(password.value) || !/[^A-Za-z0-9]/.test(password.value)) return setStatus(t.complexity, 'error');
             submit.disabled = true; submit.textContent = t.saving; setStatus('', '');
             try {
-                const response = await fetch(endpoint, {
+                const socket = await waitForPasswordSocket();
+                let passwordAlreadyWritten = false;
+                if (socket) {
+                    try {
+                        // Use the same native path as the working ioBroker user editor.
+                        await socket.changePassword(`system.user.${userName}`, password.value);
+                        passwordAlreadyWritten = true;
+                    } catch (socketError) {
+                        console.warn('[NexoWatt EOS] Native password write failed; using server fallback:', socketError);
+                    }
+                }
+                const response = await postWithTimeout(endpoint, {
                     method: 'POST', credentials: 'same-origin', cache: 'no-store',
-                    headers: { 'Content-Type': 'application/json', Accept: 'application/json', 'X-NexoWatt-EOS-First-Login': '1' },
-                    body: JSON.stringify({ password: password.value, passwordRepeat: repeat.value }),
+                    headers: {
+                        'Content-Type': 'application/json',
+                        Accept: 'application/json',
+                        'X-NexoWatt-EOS-First-Login': '1',
+                        ...(setupToken ? { 'X-NexoWatt-EOS-Password-Setup-Token': setupToken } : {}),
+                    },
+                    body: JSON.stringify({
+                        password: password.value,
+                        passwordRepeat: repeat.value,
+                        setupToken,
+                        passwordAlreadyWritten,
+                    }),
                 });
                 const data = await response.json().catch(() => ({}));
                 if (!response.ok || data.error) {
@@ -208,7 +250,14 @@
                 window.setTimeout(() => window.location.replace(logoutUrl), 650);
             } catch (error) {
                 submit.disabled = false; submit.textContent = t.submit;
-                setStatus(error?.message || t.generic, 'error');
+                const message = error?.name === 'AbortError'
+                    ? (language() === 'de'
+                        ? 'Das Speichern hat zu lange gedauert. Bitte erneut versuchen.'
+                        : language() === 'nl'
+                          ? 'Opslaan duurde te lang. Probeer opnieuw.'
+                          : 'Saving timed out. Please try again.')
+                    : error?.message || t.generic;
+                setStatus(message, 'error');
             }
         });
         window.setTimeout(() => password.focus(), 0);
@@ -318,9 +367,17 @@
         const loginElements = () => {
             const username = document.querySelector('input#username,input[name="username"]');
             const password = document.querySelector('input#password,input[name="password"]');
-            const card = username?.closest?.('.MuiPaper-root,form,main,section') || password?.closest?.('.MuiPaper-root,form,main,section');
-            const submit = card?.querySelector?.('button[type="submit"]') || Array.from(card?.querySelectorAll?.('button') || []).find(button => /anmelden|login|sign in|aanmelden/.test(normalize(button.textContent || '')));
-            return { username, password, card, submit };
+            const form = username?.closest?.('form') || password?.closest?.('form');
+            const card = form?.closest?.('.MuiPaper-root')
+                || username?.closest?.('.MuiPaper-root')
+                || password?.closest?.('.MuiPaper-root')
+                || form
+                || username?.closest?.('main,section')
+                || password?.closest?.('main,section');
+            const submit = form?.querySelector?.('button[type="submit"]')
+                || card?.querySelector?.('button[type="submit"]')
+                || Array.from(card?.querySelectorAll?.('button') || []).find(button => /anmelden|login|sign in|aanmelden/.test(normalize(button.textContent || '')));
+            return { username, password, form, card, submit };
         };
         const statusNode = card => card?.querySelector?.('.eos-login-first-status');
         const directChildWithin = (ancestor, node) => {
@@ -503,7 +560,7 @@
             const { username, password, card, submit } = loginElements();
             if (!username || !password || !card) return;
             card.classList.add('eos-login-card-modern');
-            // v99 normal-login first activation: do not add role buttons or a second panel.
+            // v7100 normal-login first activation: do not add role buttons or a second panel.
             // The account is entered in the existing Loginname field; a blank password is accepted only
             // after the backend confirms that this exact managed account is eligible.
             card.querySelectorAll('.eos-login-role-selector').forEach(element => element.remove());

package/adminWww/js/eos-role-ui.js

@@ -1,7 +1,7 @@
 (() => {
     'use strict';
 
-    const VERSION = 'v99-native-overview-ems-live-reserve-filter';
+    const VERSION = 'v7100-native-overview-ems-live-reserve-filter';
     window.NEXOWATT_EOS_ROLE_UI_VERSION = VERSION;
 
     const state = {
@@ -278,7 +278,7 @@
         });
     };
     const ensureSafeOverview = () => safe(() => {
-        // 7.9.99: never cover the real Admin Intro with a second tile surface.
+        // 7.10.0: never cover the real Admin Intro with a second tile surface.
         // Installer and end-user use the native card component; security remains
         // enforced by route/instance filters and backend permissions.
         removeSafeOverview();

package/adminWww/js/nexowatt-native-shell.js

@@ -1,7 +1,7 @@
 (() => {
     'use strict';
 
-    const VERSION = 'v99-nexowatt-native-shell-native-overview';
+    const VERSION = 'v7100-nexowatt-native-shell-native-overview';
     const previous = window.NEXOWATT_NATIVE_SHELL;
     if (previous?.version === VERSION) return;
     previous?.destroy?.();

package/adminWww/static/js/nexowatt-stable-login.js

@@ -1,45 +1,72 @@
-/* NexoWatt EOS stable runtime v99 */
+/* NexoWatt EOS stable login runtime 7.10.0 */
 (() => {
-  'use strict';
-  const MANAGED_USERS = new Set(['installer', 'guest', 'user']);
-  const ASSIST_TEXT = /EOS\s*Assist/i;
-  const PASSWORDLESS_TEXT = /Erstanmeldung\s+ohne\s+Passwort|first\s+sign-?in\s+without\s+password/i;
-  const isLogin = () => /(?:\?|&)login(?:[=&]|$)/i.test(location.search) || /\/login(?:[/?#]|$)/i.test(location.pathname + location.hash);
-  const visible = element => !!element && element.getClientRects().length > 0;
-  const findInput = kind => {
-    const inputs = [...document.querySelectorAll('input')].filter(visible);
-    if (kind === 'password') return inputs.find(input => input.type === 'password');
-    return inputs.find(input => input.type !== 'password' && /user|login|name/i.test(`${input.name} ${input.id} ${input.autocomplete} ${input.getAttribute('aria-label') || ''}`)) || inputs.find(input => input.type !== 'password');
-  };
-  const findSubmit = () => [...document.querySelectorAll('button,input[type="submit"]')].find(element => visible(element) && (/anmelden|login|sign in/i.test((element.textContent || element.value || '').trim()) || element.type === 'submit'));
-  const sync = () => {
-    if (!isLogin()) return;
-    document.documentElement.classList.add('nw-eos-login-v99');
-    document.body?.classList.add('nw-eos-login-v99');
-    const username = findInput('user');
-    const password = findInput('password');
-    const submit = findSubmit();
-    const account = String(username?.value || '').trim().toLowerCase().replace(/^system\.user\./, '');
-    if (submit && MANAGED_USERS.has(account) && !String(password?.value || '')) {
-      submit.disabled = true;
-      submit.setAttribute('aria-disabled', 'true');
-    }
-  };
-  const hideLegacyUi = () => {
-    for (const element of document.querySelectorAll('button,a,[role="button"],div,span')) {
-      const value = (element.textContent || '').trim();
-      if (!value || value.length > 100) continue;
-      if (ASSIST_TEXT.test(value) || PASSWORDLESS_TEXT.test(value)) {
-        const target = element.closest('button,a,[role="button"],[data-eos-assist],.eos-assist') || element;
-        target.style.setProperty('display', 'none', 'important');
-        target.setAttribute('aria-hidden', 'true');
-      }
-    }
-  };
-  const apply = () => { sync(); hideLegacyUi(); };
-  const observer = new MutationObserver(() => requestAnimationFrame(apply));
-  observer.observe(document.documentElement, { subtree: true, childList: true });
-  document.addEventListener('input', apply, true);
-  document.addEventListener('change', apply, true);
-  if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', apply, { once: true }); else apply();
+    'use strict';
+    const VERSION = 'v7100-clean-login';
+    const MANAGED_USERS = new Set(['installer', 'guest', 'user']);
+    const ASSIST_TEXT = /EOS\s*Assist/i;
+    const PASSWORDLESS_TEXT = /Erstanmeldung\s+ohne\s+Passwort|first\s+sign-?in\s+without\s+password/i;
+    const isLogin = () => /(?:\?|&)login(?:[=&]|$)/i.test(location.search) || /\/login(?:[/?#]|$)/i.test(location.pathname + location.hash);
+    const visible = element => !!element && element.getClientRects().length > 0;
+    const findInput = kind => {
+        const inputs = [...document.querySelectorAll('input')].filter(visible);
+        if (kind === 'password') return inputs.find(input => input.type === 'password');
+        return inputs.find(input => input.type !== 'password' && /user|login|name/i.test(`${input.name} ${input.id} ${input.autocomplete} ${input.getAttribute('aria-label') || ''}`)) || inputs.find(input => input.type !== 'password');
+    };
+    const findSubmit = () => [...document.querySelectorAll('button,input[type="submit"]')].find(element => visible(element) && (/anmelden|login|sign in/i.test((element.textContent || element.value || '').trim()) || element.type === 'submit'));
+    const normalizeUser = value => String(value || '').trim().toLowerCase().replace(/^system\.user\./, '');
+    const normalizeGeometry = () => {
+        document.querySelectorAll('[data-nw-login-card],[data-nw-login-shell]').forEach(element => {
+            if (!element.classList.contains('MuiPaper-root') && !element.classList.contains('eos-login-card-modern')) {
+                element.removeAttribute('data-nw-login-card');
+                element.removeAttribute('data-nw-login-shell');
+            }
+        });
+        for (const input of [findInput('user'), findInput('password')].filter(Boolean)) {
+            const control = input.closest('.MuiFormControl-root');
+            const label = control?.querySelector('.MuiInputLabel-root');
+            if (control && label) {
+                const localized = String(label.textContent || input.getAttribute('aria-label') || '').trim();
+                if (localized) control.dataset.eosLoginLabel = localized;
+                label.classList.add('MuiInputLabel-shrink');
+                label.dataset.shrink = 'true';
+                label.removeAttribute('aria-hidden');
+            }
+        }
+    };
+    const sync = () => {
+        if (!isLogin() && !document.querySelector('input#username,input[name="username"]')) return;
+        document.documentElement.classList.add('nw-eos-login-v7100');
+        document.body?.classList.add('nw-eos-login-v7100');
+        normalizeGeometry();
+        const username = findInput('user');
+        const password = findInput('password');
+        const submit = findSubmit();
+        if (submit && MANAGED_USERS.has(normalizeUser(username?.value)) && !String(password?.value || '')) {
+            submit.disabled = true;
+            submit.setAttribute('aria-disabled', 'true');
+        }
+    };
+    const hideLegacyUi = () => {
+        for (const element of document.querySelectorAll('button,a,[role="button"],div,span')) {
+            const value = (element.textContent || '').trim();
+            if (!value || value.length > 100) continue;
+            if (ASSIST_TEXT.test(value) || PASSWORDLESS_TEXT.test(value)) {
+                const target = element.closest('button,a,[role="button"],[data-eos-assist],.eos-assist') || element;
+                target.style.setProperty('display', 'none', 'important');
+                target.setAttribute('aria-hidden', 'true');
+            }
+        }
+    };
+    const apply = () => { sync(); hideLegacyUi(); };
+    let scheduled = false;
+    const schedule = () => {
+        if (scheduled) return;
+        scheduled = true;
+        requestAnimationFrame(() => { scheduled = false; apply(); });
+    };
+    new MutationObserver(schedule).observe(document.documentElement, { subtree: true, childList: true });
+    document.addEventListener('input', schedule, true);
+    document.addEventListener('change', schedule, true);
+    if (document.readyState === 'loading') document.addEventListener('DOMContentLoaded', apply, { once: true }); else apply();
+    window.NEXOWATT_EOS_STABLE_LOGIN = Object.freeze({ version: VERSION, refresh: apply });
 })();

package/adminWww/static/js/nexowatt-stable-v7100.js

@@ -0,0 +1,111 @@
+(() => {
+    'use strict';
+    const VERSION = 'v7100-scroll-login-auto-update';
+    const MANAGED_USERS = new Set(['installer', 'guest', 'user']);
+    const normalizeUser = value => String(value || '').trim().toLowerCase().replace(/^system\.user\./, '');
+    const INTRO_STYLE_PROPERTIES = [
+        'position', 'top', 'right', 'bottom', 'left', 'width', 'height', 'min-height', 'max-height',
+        'margin', 'overflow-x', 'overflow-y', 'overscroll-behavior', 'scrollbar-gutter',
+    ];
+    const isIntroRoute = () => {
+        const hash = decodeURIComponent(window.location.hash || '').toLowerCase();
+        const explicitTab = hash.match(/(?:^|[#/])(tab-[a-z0-9_-]+)(?:[/?&]|$)/)?.[1] || '';
+        if (explicitTab) return explicitTab === 'tab-intro';
+        return document.documentElement.classList.contains('eos-route-intro')
+            || !hash
+            || hash === '#'
+            || hash === '#/';
+    };
+    const bindScrollInput = paper => {
+        if (paper.dataset.nexowattScrollBound === 'true') return;
+        paper.dataset.nexowattScrollBound = 'true';
+        paper.addEventListener('wheel', event => {
+            if (!event.deltaY || paper.scrollHeight <= paper.clientHeight + 1) return;
+            const before = paper.scrollTop;
+            paper.scrollTop += event.deltaY;
+            if (paper.scrollTop !== before) event.preventDefault();
+        }, { passive: false });
+        paper.addEventListener('keydown', event => {
+            if (paper.scrollHeight <= paper.clientHeight + 1) return;
+            const step = Math.max(120, Math.round(paper.clientHeight * .78));
+            if (event.key === 'PageDown') paper.scrollTop += step;
+            else if (event.key === 'PageUp') paper.scrollTop -= step;
+            else if (event.key === 'Home' && event.ctrlKey) paper.scrollTop = 0;
+            else if (event.key === 'End' && event.ctrlKey) paper.scrollTop = paper.scrollHeight;
+            else return;
+            event.preventDefault();
+        });
+    };
+    const disableCockpitScroll = () => {
+        const root = document.documentElement;
+        root.classList.remove('eos-intro-scroll-enabled');
+        const paper = document.getElementById('app-paper');
+        if (!paper || paper.dataset.nexowattScrollable !== 'true') return;
+        delete paper.dataset.nexowattScrollable;
+        for (const property of INTRO_STYLE_PROPERTIES) paper.style.removeProperty(property);
+    };
+    const ensureCockpitScroll = () => {
+        const root = document.documentElement;
+        const paper = document.getElementById('app-paper');
+        if (!paper || !root.classList.contains('eos-app')) return;
+        if (!isIntroRoute()) {
+            disableCockpitScroll();
+            return;
+        }
+        // eos-route-* is owned by the native shell; only add our dedicated scroll flag.
+        root.classList.add('eos-intro-scroll-enabled');
+        paper.dataset.nexowattScrollable = 'true';
+        if (paper.tabIndex < 0) paper.tabIndex = 0;
+        const styles = {
+            position: 'fixed',
+            top: 'var(--nx-content-top, 154px)',
+            right: 'var(--nx-page-x, 12px)',
+            bottom: '8px',
+            left: 'var(--nx-page-x, 12px)',
+            width: 'auto',
+            height: 'auto',
+            minHeight: '0',
+            maxHeight: 'none',
+            margin: '0',
+            overflowX: 'hidden',
+            overflowY: 'scroll',
+            overscrollBehavior: 'contain',
+            scrollbarGutter: 'stable',
+        };
+        for (const [name, value] of Object.entries(styles)) {
+            paper.style.setProperty(name.replace(/[A-Z]/g, char => `-${char.toLowerCase()}`), value, 'important');
+        }
+        bindScrollInput(paper);
+    };
+    const apply = () => {
+        document.documentElement.classList.add('eos-assist-disabled');
+        document.querySelectorAll('.eos-assist-root,.eos-assist-header-root,[data-eos-assist-root],.eos-passwordless-launcher')
+            .forEach(element => element.remove());
+        const username = document.querySelector('input#username,input[name="username"]');
+        const password = document.querySelector('input#password,input[name="password"]');
+        const submit = document.querySelector('button[type="submit"],input[type="submit"]');
+        if (submit && MANAGED_USERS.has(normalizeUser(username?.value)) && !String(password?.value || '')) {
+            submit.disabled = true;
+            submit.classList.add('Mui-disabled');
+            submit.setAttribute('aria-disabled', 'true');
+        }
+        ensureCockpitScroll();
+    };
+    let scheduled = false;
+    const schedule = () => {
+        if (scheduled) return;
+        scheduled = true;
+        requestAnimationFrame(() => { scheduled = false; apply(); });
+    };
+    const start = () => {
+        apply();
+        new MutationObserver(schedule).observe(document.documentElement, { subtree: true, childList: true });
+        document.addEventListener('input', schedule, true);
+        document.addEventListener('change', schedule, true);
+        window.addEventListener('hashchange', schedule);
+        window.addEventListener('resize', schedule, { passive: true });
+        window.setInterval(ensureCockpitScroll, 750);
+    };
+    document.readyState === 'loading' ? document.addEventListener('DOMContentLoaded', start, { once: true }) : start();
+    window.NEXOWATT_EOS_STABLE_V7100 = Object.freeze({ version: VERSION, refresh: apply, ensureCockpitScroll, disableCockpitScroll });
+})();

package/build/lib/eosAutoUpdate.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NexoWattStableUpdateManager = void 0;
+exports.isNexoWattRepositoryEntry = isNexoWattRepositoryEntry;
+const ADMIN_USER = 'system.user.admin';
+const POLICY = 'major';
+const RECONCILE_INTERVAL_MS = 6 * 60 * 60 * 1000;
+const REPOSITORY_REFRESH_DELAY_MS = 2500;
+const clone = value => JSON.parse(JSON.stringify(value));
+const normalizedName = value => String(value || '').trim().replace(/^system\.adapter\./, '').replace(/\.\d+$/, '');
+const stableVersion = value => /^\d+\.\d+\.\d+$/.test(String(value || '').trim());
+function isNexoWattRepositoryEntry(name, entry) {
+    const adapterName = normalizedName(entry?.name || name).toLowerCase();
+    if (adapterName === 'eos-admin' || adapterName.startsWith('nexowatt-') || adapterName.startsWith('eos-'))
+        return true;
+    const evidence = JSON.stringify({ name, adapterName, title: entry?.title, desc: entry?.desc, author: entry?.author, authors: entry?.authors, publisher: entry?.publisher, url: entry?.url, meta: entry?.meta, readme: entry?.readme, extIcon: entry?.extIcon, licenseInformation: entry?.licenseInformation }).toLowerCase();
+    return evidence.includes('nexowatt') || evidence.includes('github.com/nexowatt/');
+}
+class NexoWattStableUpdateManager {
+    adapter;
+    timer;
+    reconcilePromise;
+    refreshTimer;
+    retryTimer;
+    constructor(adapter) { this.adapter = adapter; }
+    get instanceId() { return `system.adapter.${this.adapter.namespace}`; }
+    async start() { const status = await this.reconcile('startup'); if (!this.timer) { this.timer = setInterval(() => void this.reconcile('interval'), RECONCILE_INTERVAL_MS); this.timer.unref?.(); } return status; }
+    stop() { if (this.timer) clearInterval(this.timer); if (this.refreshTimer) clearTimeout(this.refreshTimer); if (this.retryTimer) clearTimeout(this.retryTimer); this.timer = undefined; this.refreshTimer = undefined; this.retryTimer = undefined; }
+    async getStatus(refresh = false) { if (refresh) return this.reconcile('status'); const instance = await this.adapter.getForeignObjectAsync(this.instanceId); return this.statusFromNative(instance?.native || {}); }
+    async setEnabled(enabled) { await this.adapter.extendForeignObjectAsync(this.instanceId, { native: { eosNexoWattAutoUpdate: enabled } }, { user: ADMIN_USER }); return this.reconcile(enabled ? 'enabled' : 'disabled'); }
+    async reconcile(reason = 'manual') { if (this.reconcilePromise) return this.reconcilePromise; this.reconcilePromise = this.reconcileInternal(reason).finally(() => { this.reconcilePromise = undefined; }); return this.reconcilePromise; }
+    statusFromNative(native) { const state = native.eosNexoWattAutoUpdateState || {}; return { enabled: native.eosNexoWattAutoUpdate !== false, repository: String(state.selectedRepository || ''), managedAdapters: Array.isArray(state.managedAdapters) ? state.managedAdapters.map(String).sort() : [], availableStableAdapters: Array.isArray(state.availableStableAdapters) ? state.availableStableAdapters.map(String).sort() : [], lastSync: Number(state.lastSync || 0), lastRepositoryRefresh: Number(state.lastRepositoryRefresh || 0), error: String(state.error || ''), policy: POLICY, source: 'ioBroker-native-auto-upgrade' }; }
+    async reconcileInternal(reason) { const instance = await this.adapter.getForeignObjectAsync(this.instanceId); const native = instance?.native || {}; const enabled = native.eosNexoWattAutoUpdate !== false; const state = clone(native.eosNexoWattAutoUpdateState || {}); try { if (!enabled) return await this.disable(state, reason); return await this.enable(state, reason); } catch (error) { const message = error instanceof Error ? error.message : String(error || 'unknownError'); state.error = message; state.lastSync = Date.now(); await this.persist(false, state); this.adapter.log.warn(`[NexoWatt stable updates] ${message}`); return this.statusFromNative({ eosNexoWattAutoUpdate: enabled, eosNexoWattAutoUpdateState: state }); } }
+    async readInstalledAdapters() { const view = await this.adapter.getObjectViewAsync('system', 'adapter', { startkey: 'system.adapter.', endkey: 'system.adapter.\u9999' }, { user: ADMIN_USER }); const result = new Map(); for (const row of view?.rows || []) { const object = row?.value || row?.doc; const name = normalizedName(object?.common?.name || row?.id || object?._id); if (name && object?.common?.version) result.set(name, object); } return result; }
+    async readRepositorySelection(systemConfig) { const repositories = await this.adapter.getForeignObjectAsync('system.repositories'); const rows = repositories?.native?.repositories || {}; const active = Array.isArray(systemConfig?.common?.activeRepo) ? systemConfig.common.activeRepo.map(String) : []; const candidates = Object.entries(rows).map(([name, repo]) => { const entries = repo?.json && typeof repo.json === 'object' ? repo.json : {}; const stableNames = Object.entries(entries).filter(([entryName, entry]) => stableVersion(entry?.version) && isNexoWattRepositoryEntry(entryName, entry)).map(([entryName, entry]) => normalizedName(entry?.name || entryName)).filter(Boolean); return { name, entries, stableNames: [...new Set(stableNames)].sort(), activeIndex: active.indexOf(name) }; }).filter(row => row.stableNames.length > 0); if (!candidates.length) throw new Error('nexowattStableRepositoryNotFound'); candidates.sort((a, b) => { const aa = a.activeIndex < 0 ? Number.MAX_SAFE_INTEGER : a.activeIndex; const bb = b.activeIndex < 0 ? Number.MAX_SAFE_INTEGER : b.activeIndex; return aa - bb || b.stableNames.length - a.stableNames.length || a.name.localeCompare(b.name); }); return candidates[0]; }
+    async enable(state, reason) { const systemConfig = await this.adapter.getForeignObjectAsync('system.config'); if (!systemConfig?.common) throw new Error('systemConfigUnavailable'); const selected = await this.readRepositorySelection(systemConfig); const installed = await this.readInstalledAdapters(); const managedNames = selected.stableNames.filter(name => installed.has(name)).sort(); if (!managedNames.length) throw new Error('noInstalledNexoWattStableAdapters'); state.previousPolicies ||= {}; for (const name of managedNames) { if (!(name in state.previousPolicies)) { const current = installed.get(name)?.common?.automaticUpgrade; state.previousPolicies[name] = current == null ? null : current; } await this.writeAdapterPolicy(name, POLICY); } const common = systemConfig.common; const activeRepo = Array.isArray(common.activeRepo) ? [...common.activeRepo] : []; const auto = common.adapterAutoUpgrade && typeof common.adapterAutoUpgrade === 'object' ? clone(common.adapterAutoUpgrade) : { repositories: {}, defaultPolicy: 'none' }; auto.repositories = auto.repositories && typeof auto.repositories === 'object' ? { ...auto.repositories } : {}; if (state.previousRepositoryEnabled === undefined) state.previousRepositoryEnabled = Object.prototype.hasOwnProperty.call(auto.repositories, selected.name) ? Boolean(auto.repositories[selected.name]) : null; auto.repositories[selected.name] = true; if (!auto.defaultPolicy) auto.defaultPolicy = 'none'; common.adapterAutoUpgrade = auto; if (activeRepo[0] !== selected.name) { if (!state.previousActiveRepo) state.previousActiveRepo = [...activeRepo]; state.ownsActiveRepoOrder = true; common.activeRepo = [selected.name, ...activeRepo.filter(name => name !== selected.name)]; } await this.adapter.setForeignObjectAsync('system.config', systemConfig, { user: ADMIN_USER }); state.selectedRepository = selected.name; state.availableStableAdapters = selected.stableNames; state.managedAdapters = managedNames; state.lastSync = Date.now(); state.error = ''; await this.persist(true, state); this.scheduleRepositoryRefresh(selected.name, state); this.adapter.log.info(`[NexoWatt stable updates] Enabled for ${managedNames.join(', ')} from repository "${selected.name}" (${reason})`); return this.statusFromNative({ eosNexoWattAutoUpdate: true, eosNexoWattAutoUpdateState: state }); }
+    async disable(state, reason) { for (const [name, previous] of Object.entries(state.previousPolicies || {})) { const current = await this.adapter.getForeignObjectAsync(`system.adapter.${normalizedName(name)}`); if (current?.common?.automaticUpgrade === POLICY) await this.writeAdapterPolicy(name, previous); } const systemConfig = await this.adapter.getForeignObjectAsync('system.config'); if (systemConfig?.common) { const auto = systemConfig.common.adapterAutoUpgrade && typeof systemConfig.common.adapterAutoUpgrade === 'object' ? clone(systemConfig.common.adapterAutoUpgrade) : null; if (auto && state.selectedRepository) { auto.repositories = auto.repositories && typeof auto.repositories === 'object' ? { ...auto.repositories } : {}; if (auto.repositories[state.selectedRepository] === true) { if (state.previousRepositoryEnabled === null || state.previousRepositoryEnabled === undefined) delete auto.repositories[state.selectedRepository]; else auto.repositories[state.selectedRepository] = state.previousRepositoryEnabled; } systemConfig.common.adapterAutoUpgrade = auto; } if (state.ownsActiveRepoOrder && Array.isArray(state.previousActiveRepo) && Array.isArray(systemConfig.common.activeRepo) && systemConfig.common.activeRepo[0] === state.selectedRepository) systemConfig.common.activeRepo = [...state.previousActiveRepo]; await this.adapter.setForeignObjectAsync('system.config', systemConfig, { user: ADMIN_USER }); } state.previousPolicies = {}; state.previousRepositoryEnabled = undefined; state.previousActiveRepo = undefined; state.ownsActiveRepoOrder = false; state.managedAdapters = []; state.lastSync = Date.now(); state.error = ''; await this.persist(false, state); this.adapter.log.info(`[NexoWatt stable updates] Disabled and previous policies restored (${reason})`); return this.statusFromNative({ eosNexoWattAutoUpdate: false, eosNexoWattAutoUpdateState: state }); }
+    async writeAdapterPolicy(name, policy) { const id = `system.adapter.${normalizedName(name)}`; const object = await this.adapter.getForeignObjectAsync(id); if (!object?.common) return; if (policy === null) delete object.common.automaticUpgrade; else object.common.automaticUpgrade = policy; await this.adapter.setForeignObjectAsync(id, object, { user: ADMIN_USER }); }
+    async persist(enabled, state) { await this.adapter.extendForeignObjectAsync(this.instanceId, { native: { eosNexoWattAutoUpdate: enabled, eosNexoWattAutoUpdateState: state } }, { user: ADMIN_USER }); }
+    scheduleRetry() { if (this.retryTimer) clearTimeout(this.retryTimer); this.retryTimer = setTimeout(() => void this.reconcile('retry'), 60000); this.retryTimer.unref?.(); }
+    scheduleRepositoryRefresh(repository, state) { if (!this.adapter.sendToHostAsync || !this.adapter.host) return; if (this.refreshTimer) clearTimeout(this.refreshTimer); this.refreshTimer = setTimeout(() => { void this.adapter.sendToHostAsync?.(this.adapter.host, 'getRepository', { repo: repository, update: true }).then(async () => { const current = await this.adapter.getForeignObjectAsync(this.instanceId); if (current?.native?.eosNexoWattAutoUpdate === false) return; state.lastRepositoryRefresh = Date.now(); await this.persist(true, state); }).catch(error => this.adapter.log.warn(`[NexoWatt stable updates] Repository refresh failed: ${error instanceof Error ? error.message : error}`)); }, REPOSITORY_REFRESH_DELAY_MS); this.refreshTimer.unref?.(); }
+}
+exports.NexoWattStableUpdateManager = NexoWattStableUpdateManager;

package/build/lib/eosPassword.js

@@ -2,61 +2,71 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.normalizeEosPasswordTarget = normalizeEosPasswordTarget;
 exports.setEosUserPasswordWithVerification = setEosUserPasswordWithVerification;
+exports.verifyEosUserPasswordCredential = verifyEosUserPasswordCredential;
 function normalizeEosPasswordTarget(value) {
     const raw = String(value || '').trim();
     const userId = raw.startsWith('system.user.') ? raw : `system.user.${raw}`;
     const userName = userId.replace(/^system\.user\./, '').trim();
-    if (!userName || userName.includes('.') || !/^system\.user\.[^.]+$/.test(userId)) {
-        throw new Error('invalidPasswordTarget');
-    }
+    if (!userName || userName.includes('.') || !/^system\.user\.[^.]+$/.test(userId)) throw new Error('invalidPasswordTarget');
     return { userId, userName };
 }
-async function callPasswordApi(adapter, userName, password, serviceUser) {
-    const options = { user: serviceUser };
-    if (typeof adapter.setPasswordAsync === 'function') {
-        await adapter.setPasswordAsync(userName, password, options);
-        return;
+const delay = ms => new Promise(resolve => setTimeout(resolve, ms));
+const accepted = result => result === true || (Array.isArray(result) && result[0] === true);
+async function readPasswordHash(adapter, userId) {
+    if (typeof adapter.getForeignObjectAsync !== 'function') return '';
+    try {
+        const object = await adapter.getForeignObjectAsync(userId);
+        return typeof object?.common?.password === 'string' ? object.common.password : '';
     }
+    catch { return ''; }
+}
+async function callPasswordApi(adapter, target, password, serviceUser, withOptions) {
+    const options = withOptions ? { user: serviceUser } : null;
+    if (typeof adapter.setPasswordAsync === 'function') { await adapter.setPasswordAsync(target, password, options); return; }
     if (typeof adapter.setPassword === 'function') {
-        await new Promise((resolve, reject) => {
-            adapter.setPassword?.(userName, password, options, error => (error ? reject(error) : resolve()));
-        });
+        await new Promise((resolve, reject) => adapter.setPassword?.(target, password, options, error => error ? reject(error) : resolve()));
         return;
     }
     throw new Error('passwordApiUnavailable');
 }
-async function waitForPasswordHash(adapter, userId) {
-    for (let attempt = 0; attempt < 6; attempt++) {
-        const user = await adapter.getForeignObjectAsync(userId);
-        if (typeof user?.common?.password === 'string' && user.common.password.length > 0) {
-            return;
-        }
-        if (attempt < 5) {
-            await new Promise(resolve => setTimeout(resolve, 40 * (attempt + 1)));
+async function verifyAfterWrite(adapter, normalized, password, serviceUser) {
+    const hasCredentialCheck = typeof adapter.checkPasswordAsync === 'function';
+    for (let attempt = 0; attempt < 12; attempt++) {
+        if (hasCredentialCheck) {
+            for (const candidate of [normalized.userId, normalized.userName]) {
+                try {
+                    if (accepted(await adapter.checkPasswordAsync?.(candidate, password, { user: serviceUser }))) return;
+                }
+                catch { }
+            }
         }
+        else if (await readPasswordHash(adapter, normalized.userId)) return;
+        if (attempt < 11) await delay(55 + attempt * 35);
     }
-    throw new Error('passwordNotPersisted');
+    throw new Error(hasCredentialCheck ? 'passwordVerificationFailed' : 'passwordNotPersisted');
 }
-async function verifyCredential(adapter, userName, password, serviceUser) {
-    if (typeof adapter.checkPasswordAsync !== 'function') {
-        return;
-    }
-    for (let attempt = 0; attempt < 5; attempt++) {
-        const result = await adapter.checkPasswordAsync(userName, password, { user: serviceUser });
-        const accepted = result === true || (Array.isArray(result) && result[0] === true);
-        if (accepted) {
-            return;
-        }
-        if (attempt < 4) {
-            await new Promise(resolve => setTimeout(resolve, 50 * (attempt + 1)));
-        }
-    }
-    throw new Error('passwordVerificationFailed');
+async function verifyEosUserPasswordCredential(adapter, target, password, serviceUser = 'system.user.admin') {
+    const normalized = normalizeEosPasswordTarget(target);
+    await verifyAfterWrite(adapter, normalized, password, serviceUser);
+    return normalized;
 }
 async function setEosUserPasswordWithVerification(adapter, target, password, serviceUser = 'system.user.admin') {
     const normalized = normalizeEosPasswordTarget(target);
-    await callPasswordApi(adapter, normalized.userName, password, serviceUser);
-    await waitForPasswordHash(adapter, normalized.userId);
-    await verifyCredential(adapter, normalized.userName, password, serviceUser);
-    return normalized;
+    const attempts = [
+        { apiTarget: normalized.userId, withOptions: true },
+        { apiTarget: normalized.userName, withOptions: true },
+        { apiTarget: normalized.userId, withOptions: false },
+        { apiTarget: normalized.userName, withOptions: false },
+    ];
+    let lastError = null;
+    for (const attempt of attempts) {
+        try {
+            await callPasswordApi(adapter, attempt.apiTarget, password, serviceUser, attempt.withOptions);
+            await verifyAfterWrite(adapter, normalized, password, serviceUser);
+            return { ...normalized, apiTarget: attempt.apiTarget };
+        }
+        catch (error) { lastError = error; }
+    }
+    if (lastError instanceof Error) throw lastError;
+    throw new Error('passwordNotPersisted');
 }