iobroker.time-tracker 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Alex <sadam6752@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,386 @@
+![Logo](admin/time-tracker.png)
+
+# ioBroker.time-tracker
+
+[![NPM version](https://img.shields.io/npm/v/iobroker.time-tracker.svg)](https://www.npmjs.com/package/iobroker.time-tracker)
+[![Downloads](https://img.shields.io/npm/dm/iobroker.time-tracker.svg)](https://www.npmjs.com/package/iobroker.time-tracker)
+![Number of Installations](https://iobroker.live/badges/time-tracker-installed.svg)
+![Current version in stable repository](https://iobroker.live/badges/time-tracker-stable.svg)
+
+[![NPM](https://nodei.co/npm/iobroker.time-tracker.png?downloads=true)](https://nodei.co/npm/iobroker.time-tracker/)
+
+**Tests:** ![Test and Release](https://github.com/sadam6752-tech/ioBroker.time-tracker/workflows/Test%20and%20Release/badge.svg)
+
+A punch clock for ioBroker. Employees clock in and out, the adapter calculates target time and balance, absences and
+vacation are managed, and the monthly statement is downloaded as PDF or Excel. Everything runs in the browser —
+installable as an app on a phone — and a shared tablet in the workshop or at the entrance punches with a badge or a
+PIN. All data stays on your own ioBroker host: no cloud, no subscription.
+
+## Features
+
+- **Clock in and out** in the web app (phone, tablet, PC); installable as an app (PWA) and it keeps punches while offline
+- **Terminal for everybody**: badge (RFID/NFC) or PIN on a shared tablet, plus a board that shows who is at work
+- **Working time**: target time from weekly hours, employment level and working days; breaks (punched or by graduated rules), overtime models, carryover, vacation and public holidays
+- **Absences and vacation**: requests and approvals, half days, and a preview of the days already planned
+- **Corrections** by the administration (change, delete, add a punch or a whole day) — every change carries a reason and the history of a punch stays readable
+- **Monthly statements** as PDF and Excel, for the own account and — with the right — for every employee; statistics and payouts included
+- **Roles**: administrator, manager, employee; every decision is checked on the server
+- **Automations**: aggregates, live events and commands as ioBroker states
+- **Backups**: create, download, upload, restore on the next start, delete — with a retention window
+- **11 languages**; every employee picks their own
+
+## Requirements
+
+- ioBroker with js-controller >= 6.0.11 and **Node.js >= 22** (required by the bundled SQLite driver)
+- HTTPS for the app on a phone (the service worker needs it) — a reverse proxy with Let's Encrypt is recommended
+
+## Installation
+
+1. In the ioBroker admin: **Adapters → time-tracker → Install** (or `iobroker install iobroker.time-tracker`).
+   An installation from Git does not work on its own: the web app in `www/` is built, so it is not part of the
+   repository — either install the npm package or build it once in the adapter directory
+   (`npm ci && npm run install:pwa && npm run build:pwa && npm run build`).
+2. Start the instance and open the web app on the port of the instance settings (default **8092**):
+   `http://<ioBroker host>:8092/`
+3. Log in with the start password (see [First start](#first-start)) and create your employees.
+
+## First start
+
+The first start creates the database, the roles and the settings — and **one administrator account**, because
+otherwise nobody could log in:
+
+| Instance setting                          | Meaning                                                                                |
+| ----------------------------------------- | -------------------------------------------------------------------------------------- |
+| Login of the first administrator          | login of that account, default `admin`                                                 |
+| Start password of the first administrator | password of that account; empty = a random password is written to the adapter log once |
+
+The account starts with “change the password”, so the start password opens the door exactly once and the app asks
+for a new one right away. Accounts created later in the administration start the same way.
+
+The start password appears **once in the ioBroker log**: open `Logs` in the admin and look for the line
+`administrator "admin" created with the start password "…" - change it at the first login`. The instance settings
+show the same hint — enter your own password there and nothing has to be searched.
+
+After that the usual order is: create employees (**Administration → Employees**), set their working time
+(**Arbeitsprofil** button of the row: employment level, weekly hours, working days, overtime model, vacation,
+carryover, paid break minutes, own break rules), and — if a tablet is used — create a terminal and switch the kiosk on
+(see [Terminal](#terminal-kiosk)).
+
+## Configuration
+
+The adapter is configured in the **instance settings** of the ioBroker admin:
+
+| Setting                             | Meaning                                                                                                                     |
+| ----------------------------------- | --------------------------------------------------------------------------------------------------------------------------- |
+| Port                                | port of the HTTP server (web app, API, terminal)                                                                            |
+| Bind address                        | interface to listen on, picked from the local addresses (`0.0.0.0` = all)                                                   |
+| Instance time zone                  | fallback time zone (IANA name), e.g. `Europe/Berlin`                                                                        |
+| Default language for new users      | one of the 11 supported languages                                                                                           |
+| Holiday country                     | country used to generate the public holidays (default `DE`)                                                                 |
+| Database file                       | optional path; empty = adapter data directory                                                                               |
+| Enable kiosk terminal               | switches the shared badge/PIN terminal on                                                                                   |
+| Trust the reverse proxy             | use `X-Forwarded-*` of a proxy (client address, HTTPS)                                                                      |
+| Session secret                      | secret for CSRF tokens (encrypted at rest; empty = generated once)                                                          |
+| Badge link secret (HMAC)            | secret for signed badge/NFC links (encrypted at rest); empty = generated on the first start and stored next to the database |
+| Session lifetime in minutes         | how long a login lasts                                                                                                      |
+| Days users may edit on their own    | how far back an employee may correct own punches                                                                            |
+| Round quick punches to minutes      | rounding of the quick punch (0 = off)                                                                                       |
+| Calculate absences only until today | future absences do not reduce the target time                                                                               |
+| Subtract working time from absences | lets vacation turn into overtime                                                                                            |
+| Keep database backups for days      | retention of the backups                                                                                                    |
+
+These settings win over the values stored in the database and are applied on every start.
+
+### Settings inside the app
+
+Further settings are edited in the web app (**Administration → Settings**, right `settings.edit`):
+
+| Setting                                     | Meaning                                                                                                                                                                                                                                                    |
+| ------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| Pause rule (`auto` / `punched` / `staffel`) | how the pause of a day is determined: the punched break (`auto`, default) or only the graduated rules                                                                                                                                                      |
+| Graduated break rules (Pausenstaffel)       | “from … to … minutes block length → so many minutes deducted”; the pause of a day **without** a punched break. The work profile of an employee can carry **own rules**: a rule with the same “from minutes” replaces the company rule for that person only |
+| Paid break minutes (per employee)           | how much of a break is paid: `0` = not paid, `15` = a quarter of an hour, `1440` = any length (work profile)                                                                                                                                               |
+| Company branding                            | logo, background picture and background colour for the login screen, the header and the kiosk screens — the colour also tints the picture                                                                                                                  |
+| Unicode font for PDF statements             | `report_font_path`: needed for `ru`, `uk`, `zh-cn` and Polish, otherwise the export refuses with a clear message                                                                                                                                           |
+
+The pause of a day appears in the month view of the app and in the monthly statement — with the paid part next to it.
+
+## Roles
+
+| Role       | May                                                                                          |
+| ---------- | -------------------------------------------------------------------------------------------- |
+| `employee` | punch, see the own month and year, request absences, edit own punches inside the edit window |
+| `manager`  | everything an employee may, plus statements and corrections for other employees              |
+| `admin`    | everything: employees, roles, terminals, settings, backups                                   |
+
+The **edit window** (`edit_window_days`, default 7 days) is what an `employee` is bound by: an older punch is
+rejected with `edit_window_closed` and stays with the administration. Managers and admins are not bound by it.
+Employees correct their own day right in the month view — the pencil beside a day opens its punches.
+
+## Web app, terminal and API
+
+Everything is served on the port of the instance settings:
+
+| Path                      | Content                                                                       |
+| ------------------------- | ----------------------------------------------------------------------------- |
+| `/` (and all other paths) | the web app from `www/` — punch screen, month, year report, absences, profile |
+| `/api/...`                | the REST API (JSON; errors as `application/problem+json`)                     |
+| `/api/stream`             | live events, so the app updates itself without a reload                       |
+| `/terminal?token=…`       | the kiosk screen (badge and PIN)                                              |
+| `/presence?token=…`       | the board “who is at work right now”                                          |
+
+### Terminal (kiosk)
+
+Switch **Enable kiosk terminal** on, then create the device in **Administration → Terminals** and copy the device
+token — it is shown **exactly once**, because only its hash is stored. The ready-made address for the tablet stands
+next to it:
+
+```
+http://<ioBroker host>:<port>/terminal?token=<device token>
+```
+
+The screen offers the badge field (scan or type, Enter punches), the employee list for the name plus PIN punch, the
+clock and — after every punch — name, direction and the figures of that day for a few seconds. A device can be
+limited to the employees that work there; without an assignment it shows everybody. **Employees need their PIN**
+switches between “badge and PIN” and “badge only”. The token stays in the browser of the tablet, so the URL is only
+needed for the first start.
+
+## States
+
+Punches stay in the database; the adapter publishes aggregates and controls:
+
+| State                                                                                          | Type    | Purpose                                    |
+| ---------------------------------------------------------------------------------------------- | ------- | ------------------------------------------ |
+| `time-tracker.0.info.connection`                                                              | boolean | adapter/service ready                      |
+| `time-tracker.0.info.lastBackup`                                                              | number  | instant of the newest database backup      |
+| `time-tracker.0.info.version` / `info.schemaVersion` / `info.dbSizeBytes` / `info.lastError`  | —       | instance information                       |
+| `time-tracker.0.users.<id>.displayName`                                                       | string  | name of the employee                       |
+| `time-tracker.0.users.<id>.hasOpenEntry`                                                      | boolean | employee is clocked in                     |
+| `time-tracker.0.users.<id>.lastPunch`                                                         | number  | instant of the last punch of today         |
+| `time-tracker.0.users.<id>.todayWorkedMinutes`                                                | number  | minutes worked today                       |
+| `time-tracker.0.users.<id>.todayBalanceMinutes`                                               | number  | balance of today in minutes                |
+| `time-tracker.0.users.<id>.openConflicts`                                                     | number  | punches waiting for a decision             |
+| `time-tracker.0.commands.punchUserId`                                                         | number  | employee the punch commands apply to       |
+| `time-tracker.0.commands.punch`                                                               | boolean | punch in or out (button)                   |
+| `time-tracker.0.commands.quickPunch`                                                          | boolean | punch with the configured quick rounding   |
+| `time-tracker.0.commands.closeMonth`                                                          | string  | close a month, value `YYYY-MM`             |
+| `time-tracker.0.commands.recalc`                                                              | string  | recalculate a period, `YYYY-MM` or `YYYY`  |
+| `time-tracker.0.commands.backup`                                                              | boolean | write a database backup (button)           |
+| `time-tracker.0.users.<id>.monthWorkedMinutes` / `monthBalanceMinutes` / `yearBalanceMinutes` | number  | month and year figures                     |
+| `time-tracker.0.company.presentCount`                                                         | number  | employees clocked in right now             |
+| `time-tracker.0.company.present`                                                              | string  | their names, separated by a comma          |
+| `time-tracker.0.company.openConflicts` / `company.lastPunch`                                  | number  | punches waiting for a decision, last punch |
+| `time-tracker.0.events.lastAt` / `lastType` / `lastUser` / `lastDirection` / `lastSource`     | —       | newest event of the instance               |
+
+### Actions (trigger rules)
+
+The ioBroker way of connecting hardware is a state: a fingerprint reader, a button, a door contact or a dashboard
+writes it and the adapter does the rest. A rule is maintained in **Administration → Actions**:
+
+| Field    | Meaning                                                                                                                                                         |
+| -------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| State    | the state of the other adapter, e.g. `fingerprint.0.lastMatch`                                                                                                  |
+| Trigger  | _State carries the value_: the value has to equal _Value_ — or _Value is the employee_, where the value names the employee (id, login or shown name)            |
+| Value    | the value that fires the rule (mode _State carries the value_) — `toggle` (or `*`) fires for **every** change, so a switch that goes on and off again works too |
+| Employee | who is punched (mode _State carries the value_)                                                                                                                 |
+| Action   | punch in or out, punch with the quick rounding, set to present, set to absent                                                                                   |
+| Cooldown | seconds that have to pass before the rule may fire again                                                                                                        |
+
+A rule fires only when the **value changes**, so a reader that repeats itself is harmless, and the cooldown keeps a
+rapidly blinking state in check. Every punch appears in the audit trail with the note `trigger.<id>`, so its origin
+stays traceable.
+
+### Rules (automatic)
+
+The adapter can act on its own as well — that table lives in **Administration → Settings**:
+
+| Kind                    | What it does                                                                                            |
+| ----------------------- | ------------------------------------------------------------------------------------------------------- |
+| Clock out automatically | At the configured local time of the employee the open day is closed with a punch (note `auto.clockOut`) |
+| Report a missing punch  | The same moment, but nothing is written — the instance only reports it                                  |
+| Break reminder          | Reminds an employee whose running work block reached the configured length                              |
+
+Every rule runs **at most once per employee and local date**; `automation_runs` holds that decision and doubles as
+the log shown below the table. The events `automation.clockOut`, `automation.missingPunch` and
+`automation.breakReminder` appear in `events.*` too, so a notification adapter can pick them up.
+
+### Messages (`sendTo`)
+
+A script, a Blockly block or another adapter drives the instance without HTTP:
+
+```js
+sendTo("time-tracker.0", "punch", { user: "anna", quick: true }, answer => log(answer.message));
+sendTo("time-tracker.0", "present", { user: 2, present: false });
+sendTo("time-tracker.0", "status", { user: "anna" }, answer => log(JSON.stringify(answer.data)));
+sendTo("time-tracker.0", "report", { user: "anna", period: "2026-09", format: "pdf" }, answer =>
+	writeFile("statement.pdf", Buffer.from(answer.data.base64, "base64")),
+);
+sendTo("time-tracker.0", "backup");
+```
+
+`user` is a user id, a login or the shown name. `report` answers with the file name, the MIME type and the file
+itself as base64 (PDF or Excel), so it can be mailed or sent with a messenger adapter.
+
+## Reports
+
+The month view and the year report of the app offer the statement of the shown period as **PDF** and **Excel**
+(`.xlsx`) — with the day table, the numbers of the month, the absences and two signature lines in the PDF. The file
+is generated in the language and the time zone of the employee; the administration can pick another employee and
+download the same statement for them.
+
+Next to the two buttons sits a third one: the **raw data as CSV**. It carries one row per punch (`date`, `time`,
+`direction`, `source`, `note`), semicolon separated and UTF-8 with a byte order mark — so a spreadsheet opens it
+directly and a payroll tool can read it without asking. The header is English on purpose, because the file is meant
+for a machine.
+
+For `ru`, `uk`, `zh-cn` and Polish the PDF needs a Unicode font: set `report_font_path` in the app settings to a
+`.ttf`/`.otf` file that covers the script. Without it the export stops with a clear message
+(`report_font_missing`) instead of drawing empty boxes.
+
+## Backups
+
+**Administration → Backups** creates a copy of the database with one click and lists what exists:
+
+| Action     | What happens                                                             |
+| ---------- | ------------------------------------------------------------------------ |
+| Create now | writes a copy (`VACUUM INTO`) into the backup folder                     |
+| Download   | hands the file to the browser                                            |
+| Upload     | takes a downloaded file back, checks it and queues it for the next start |
+| Restore    | queues one of the listed files for the next start (with a reason)        |
+| Delete     | removes a single file after a confirmation                               |
+
+A restore needs a closed database, so it is applied **while the adapter starts** — the app says so, and the previous
+database is kept next to it as `<database>.before-restore-<time>`. Backups older than the retention of the instance
+settings are removed automatically; the newest one always stays.
+
+## HTTPS and reverse proxy
+
+The app on a phone needs **HTTPS** — a service worker only runs on a secure origin. Put nginx or caddy in front of
+the adapter and switch **Trust the reverse proxy** on: the adapter then takes the client address from
+`x-forwarded-for` for the rate limits and the audit trail, and `x-forwarded-proto: https` makes the session cookie
+`Secure`. Without that switch both headers are ignored, because any client could send them.
+
+## Troubleshooting
+
+| Problem                                | Cause and fix                                                                                            |
+| -------------------------------------- | -------------------------------------------------------------------------------------------------------- |
+| `/` answers `404 not_found`            | the web app is missing: install the npm package or build it (`npm run install:pwa && npm run build:pwa`) |
+| Not installable as an app on the phone | the page is not reachable over HTTPS — see above                                                         |
+| The PDF refuses or shows empty boxes   | `report_font_path` is missing — see [Reports](#reports)                                                  |
+| A restore seems to do nothing          | it is applied on the next start: restart the instance                                                    |
+| An employee cannot log in              | the start password has to be changed on first use; the administration can set a new one                  |
+| A punch is missing                     | it may wait in the offline queue or be marked as a conflict (see _Synchronisation_ in the app)           |
+
+## Languages
+
+The admin UI, the app and the reports ship in **11 languages** — `en` (base and fallback), `de`, `ru`, `pt`, `nl`,
+`fr`, `it`, `es`, `pl`, `uk`, `zh-cn` — and every employee picks their own. Dates, numbers and units are formatted
+with `Intl`. Further translations are welcome: [`docs/i18n.md`](docs/i18n.md).
+
+## Privacy
+
+Everything runs on your own ioBroker host: no cloud service, no telemetry. Punches and personal data stay in the
+local SQLite file, access is role-based, and every correction is written to an audit trail.
+
+## Documentation
+
+| Document                                           | Content                                                  |
+| -------------------------------------------------- | -------------------------------------------------------- |
+| [`docs/erste-schritte.md`](docs/erste-schritte.md) | a walk through the first setup (German)                  |
+| [`docs/kurzfassung-de.md`](docs/kurzfassung-de.md) | the German summary of this README                        |
+| [`docs/testplan.md`](docs/testplan.md)             | acceptance tests and what is still open                  |
+| [`docs/entscheidungen.md`](docs/entscheidungen.md) | the decisions behind the design (German)                 |
+| [`docs/technik.md`](docs/technik.md)               | internals: HTTP surface, sessions, live events, database |
+| [`docs/entwicklung.md`](docs/entwicklung.md)       | build, tests, release                                    |
+| [`docs/i18n.md`](docs/i18n.md)                     | how the 11 languages are kept complete                   |
+| [`docs/adapter-check.md`](docs/adapter-check.md)   | the local pre-check of the ioBroker adapter rules        |
+
+## Links
+
+- Repository: https://github.com/sadam6752-tech/ioBroker.time-tracker
+- Issues: https://github.com/sadam6752-tech/ioBroker.time-tracker/issues
+- ioBroker forum: https://forum.iobroker.net/
+
+## Changelog
+
+### **WORK IN PROGRESS**
+
+### 0.2.0 (2026-09-20)
+
+- (Alex) **renamed to `ioBroker.time-tracker`**: ioBroker requires English adapter names, so the adapter, its npm
+  package and the GitHub repository are called `time-tracker` from now on. The instance id becomes `time-tracker.0`
+  and the database is created as `time-tracker.sqlite` — existing installations keep their data by pointing
+  “Database file” at the old file or by renaming it (before 0.2.0 it was `zeiterfassung.sqlite`). German UI texts
+  stay German; `common.titleLang` keeps all 11 languages
+
+### 0.1.9 (2026-09-19)
+
+- (Alex) ioBroker repository: two findings of the repository checker are fixed — `common.title` is removed (it is
+  deprecated, `common.titleLang` replaced it, E1084) and the `common.news` entry of 0.1.7 is gone, because that version
+  never reached npm (E2004, its pipeline was red). `npm run version:check` watches both rules from now on: it refuses
+  `common.title` and every version in the news list has to exist on npm
+
+### 0.1.8 (2026-09-19)
+
+- (Alex) fix: the pipeline of 0.1.7 failed in the ioBroker package test — `common.license` was added next to the
+  existing `common.licenseInformation`, and the test refuses both together (“common.license should not exist together
+  with common.licenseInformation”). The field is removed again, `npm run test:package` is part of the release checklist
+  from now on, and `docs/entwicklung.md` records the rule
+
+### 0.1.6 (2026-09-19)
+
+- (Alex) admin: the raw instance settings show a readable label now — in the language of the display — with the
+  technical name in the small line below it, which is what the block promises. The labels are kept short enough that
+  the fields do not cut them off
+- (Alex) admin: the block “All instance settings” is much shorter — three fields per line on a wide screen (two on a
+  tablet, one on a phone) and the time zone on a line of its own, because its value is the longest
+- (Alex) **rules (automatic)**: the kind **“Clock in automatically”** joins them — an employee who is still missing at
+  the configured time gets a punch in (the rule keeps quiet when somebody is clocked in already). Migration 18 rebuilds
+  the rule table for the new kind and copies the run log first, because dropping the parent would take it with it
+- (Alex) **holidays**: the seeded days are shown in the language of the display — each one carries a stable key
+  (`newYear`, `goodFriday`, …) and the app translates it; a day somebody added by hand keeps its own name
+- (Alex) admin: the two “first start” hints are easier to read — they are rendered as HTML with a larger font
+
+### 0.1.5 (2026-09-19)
+
+- (Alex) **rules (automatic)**: a rule can be limited to **weekdays** (Monday to Friday for a company rule, the
+  weekend for another) and it can be set to act **once a week** instead of once a day — the guard counts the ISO week
+  then, so a reminder that fires every Monday still fires next Monday. The days come from `Intl`, so their names are
+  spelled in the language of the display
+- (Alex) **badges (RFID/NFC)**: the link of a fresh badge is shown as a **QR code** next to the link itself, so it can
+  be scanned or copied onto a tag with a writer app. The code is drawn in the browser (the `qrcode` package is bundled
+  with the web app), so it works offline and no service ever sees the link
+- (Alex) docs: `docs/i18n.md` now records who settles the translations — German and Russian are kept by the owner, for
+  the other nine languages no native speaker is available, so they stay machine translation with the technical pass
+
+Older entries are kept in [`CHANGELOG_OLD.md`](CHANGELOG_OLD.md).
+
+## Provenance
+
+This project is an independent implementation of the time tracking described in the internal specification.
+Behaviour, calculation rules and data formats follow that specification; **no source code** was taken from any
+other project. The verification record is kept outside this repository.
+
+## License
+
+MIT License
+
+Copyright (c) 2026 Alex <sadam6752@gmail.com>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/admin/i18n/de.json

@@ -0,0 +1,34 @@
+{
+	"⚠️ First start: the first administrator is created when the instance starts for the first time. If the password field stays empty, the generated password is written ONCE into the ioBroker log (open “Logs” on the left, look for the yellow line with “created with the start password”) — both fields are in the tab “Migration and backup”. The app asks for a new password at the first login.": "<div style=\"font-size: 1.15rem; line-height: 1.6\">⚠️ Erster Start: der erste Administrator entsteht beim ersten Start der Instanz. Bleibt das Passwortfeld leer, wird das erzeugte Passwort EINMALIG ins ioBroker-Log geschrieben (links „Logs“ öffnen und die gelbe Zeile mit „created with the start password“ suchen) — beide Felder stehen im Tab „Migration und Backup“. Die App verlangt bei der ersten Anmeldung ein neues Passwort.</div>",
+	"⚠️ The account of the first administrator is created at the very first start. If the password field below stays empty, the adapter generates a random password and writes it ONCE into the ioBroker log: open “Logs” in the ioBroker admin on the left and look for the yellow line with “created with the start password” — that is the password for the first login. The app then asks for a new password right away. Enter your own password below instead if you want to skip that.": "<div style=\"font-size: 1.15rem; line-height: 1.6\">⚠️ Das Konto des ersten Administrators entsteht beim allerersten Start. Bleibt das Passwortfeld unten leer, erzeugt der Adapter ein Zufallspasswort und schreibt es EINMALIG ins ioBroker-Log: links im ioBroker-Admin „Logs“ öffnen und die gelbe Zeile mit „created with the start password“ suchen — das ist das Passwort für die erste Anmeldung. Die App verlangt danach sofort ein neues Passwort. Wer das überspringen will, trägt unten gleich ein eigenes Passwort ein.</div>",
+	"127.0.0.1 = only this machine": "127.0.0.1 = nur dieser Rechner",
+	"Badge link secret (HMAC)": "Geheimnis für Badge-Links (HMAC)",
+	"Bind address": "Bind-Adresse",
+	"Calculate absences only until today": "Abwesenheiten nur bis heute berechnen",
+	"Database file (empty = adapter data directory)": "Datenbankdatei (leer = Datenverzeichnis des Adapters)",
+	"Days users may edit on their own": "Tage, die Benutzer selbst bearbeiten dürfen",
+	"Default language for new users": "Standardsprache für neue Benutzer",
+	"empty = a random password is written to the adapter log once; it has to be changed at the first login": "leer = ein Zufallspasswort wird einmalig ins Adapter-Log geschrieben; es muss bei der ersten Anmeldung geändert werden",
+	"empty = the adapter generates one once and stores it next to the database, so sessions survive restarts": "leer = der Adapter erzeugt einmalig eines und legt es neben der Datenbank ab, damit Sitzungen Neustarts überleben",
+	"Enable kiosk terminal": "Kiosk-Terminal aktivieren",
+	"First start: the start password is in the ioBroker log": "Erster Start: das Startpasswort steht im ioBroker-Log",
+	"General": "Allgemein",
+	"Holiday country": "Land für Feiertage",
+	"Instance time zone": "Zeitzone der Instanz",
+	"Keep database backups for days": "Datenbank-Backups aufbewahren für Tage",
+	"Login of the first administrator": "Login des ersten Administrators",
+	"Migration and backup": "Migration und Backup",
+	"only switch this on when a reverse proxy is in front of the adapter": "nur einschalten, wenn ein Reverse-Proxy vor dem Adapter steht",
+	"Port": "Port",
+	"Round quick punches to minutes (0 = off)": "Schnellstempel auf Minuten runden (0 = aus)",
+	"Security": "Sicherheit",
+	"Session lifetime in minutes": "Sitzungsdauer in Minuten",
+	"Session secret": "Sitzungsgeheimnis",
+	"Start password of the first administrator": "Startpasswort des ersten Administrators",
+	"Subtract working time from absences": "Arbeitszeit von Abwesenheiten abziehen",
+	"the port of the web app, the API and the terminal; 8082 stays free for vis and web": "der Port der Web-App, der API und des Terminals; 8082 bleibt für vis und web frei",
+	"Time rules": "Zeitregeln",
+	"Trust the reverse proxy (X-Forwarded-*)": "Reverse-Proxy vertrauen (X-Forwarded-*)",
+	"used once: the account is created when the instance has no administrator yet": "wird einmalig genutzt: das Konto entsteht, wenn die Instanz noch keinen Administrator hat",
+	"time-tracker adapter settings": "Adaptereinstellungen für Zeiterfassung"
+}

package/admin/i18n/en.json

@@ -0,0 +1 @@
+{"⚠️ First start: the first administrator is created when the instance starts for the first time. If the password field stays empty, the generated password is written ONCE into the ioBroker log (open “Logs” on the left, look for the yellow line with “created with the start password”) — both fields are in the tab “Migration and backup”. The app asks for a new password at the first login.":"⚠️ First start: the first administrator is created when the instance starts for the first time. If the password field stays empty, the generated password is written ONCE into the ioBroker log (open “Logs” on the left, look for the yellow line with “created with the start password”) — both fields are in the tab “Migration and backup”. The app asks for a new password at the first login.","⚠️ The account of the first administrator is created at the very first start. If the password field below stays empty, the adapter generates a random password and writes it ONCE into the ioBroker log: open “Logs” in the ioBroker admin on the left and look for the yellow line with “created with the start password” — that is the password for the first login. The app then asks for a new password right away. Enter your own password below instead if you want to skip that.":"⚠️ The account of the first administrator is created at the very first start. If the password field below stays empty, the adapter generates a random password and writes it ONCE into the ioBroker log: open “Logs” in the ioBroker admin on the left and look for the yellow line with “created with the start password” — that is the password for the first login. The app then asks for a new password right away. Enter your own password below instead if you want to skip that.","127.0.0.1 = only this machine":"127.0.0.1 = only this machine","Badge link secret (HMAC)":"Badge link secret (HMAC)","Bind address":"Bind address","Calculate absences only until today":"Calculate absences only until today","Database file (empty = adapter data directory)":"Database file (empty = adapter data directory)","Days users may edit on their own":"Days users may edit on their own","Default language for new users":"Default language for new users","empty = a random password is written to the adapter log once; it has to be changed at the first login":"empty = a random password is written to the adapter log once; it has to be changed at the first login","empty = the adapter generates one once and stores it next to the database, so sessions survive restarts":"empty = the adapter generates one once and stores it next to the database, so sessions survive restarts","Enable kiosk terminal":"Enable kiosk terminal","First start: the start password is in the ioBroker log":"First start: the start password is in the ioBroker log","General":"General","Holiday country":"Holiday country","Instance time zone":"Instance time zone","Keep database backups for days":"Keep database backups for days","Login of the first administrator":"Login of the first administrator","Migration and backup":"Migration and backup","only switch this on when a reverse proxy is in front of the adapter":"only switch this on when a reverse proxy is in front of the adapter","Port":"Port","Round quick punches to minutes (0 = off)":"Round quick punches to minutes (0 = off)","Security":"Security","Session lifetime in minutes":"Session lifetime in minutes","Session secret":"Session secret","Start password of the first administrator":"Start password of the first administrator","Subtract working time from absences":"Subtract working time from absences","the port of the web app, the API and the terminal; 8082 stays free for vis and web":"the port of the web app, the API and the terminal; 8082 stays free for vis and web","Time rules":"Time rules","Trust the reverse proxy (X-Forwarded-*)":"Trust the reverse proxy (X-Forwarded-*)","used once: the account is created when the instance has no administrator yet":"used once: the account is created when the instance has no administrator yet","time-tracker adapter settings":"Adapter settings for time-tracker"}

package/admin/i18n/es.json

@@ -0,0 +1,34 @@
+{
+	"⚠️ First start: the first administrator is created when the instance starts for the first time. If the password field stays empty, the generated password is written ONCE into the ioBroker log (open “Logs” on the left, look for the yellow line with “created with the start password”) — both fields are in the tab “Migration and backup”. The app asks for a new password at the first login.": "<div style=\"font-size: 1.15rem; line-height: 1.6\">⚠️ Primer inicio: el primer administrador se crea en el primer inicio de la instancia. Si el campo de la contraseña queda vacío, la contraseña generada se escribe UNA vez en el registro de ioBroker (abre «Logs» a la izquierda y busca la línea amarilla con «created with the start password») — ambos campos están en la pestaña «Migración y copia de seguridad». La aplicación pide una contraseña nueva en el primer inicio de sesión.</div>",
+	"⚠️ The account of the first administrator is created at the very first start. If the password field below stays empty, the adapter generates a random password and writes it ONCE into the ioBroker log: open “Logs” in the ioBroker admin on the left and look for the yellow line with “created with the start password” — that is the password for the first login. The app then asks for a new password right away. Enter your own password below instead if you want to skip that.": "<div style=\"font-size: 1.15rem; line-height: 1.6\">⚠️ La cuenta del primer administrador se crea en el primer inicio. Si el campo de la contraseña de abajo queda vacío, el adaptador genera una contraseña aleatoria y la escribe UNA vez en el registro de ioBroker: abre «Logs» a la izquierda en el admin de ioBroker y busca la línea amarilla con «created with the start password» — esa es la contraseña del primer inicio de sesión. La aplicación pide enseguida una contraseña nueva. Si lo prefieres, introduce tu propia contraseña abajo.</div>",
+	"127.0.0.1 = only this machine": "127.0.0.1 = solo este equipo",
+	"Badge link secret (HMAC)": "Secreto de enlace de insignia (HMAC)",
+	"Bind address": "Dirección de escucha",
+	"Calculate absences only until today": "Calcular ausencias solo hasta hoy",
+	"Database file (empty = adapter data directory)": "Archivo de base de datos (vacío = directorio de datos del adaptador)",
+	"Days users may edit on their own": "Días que los usuarios pueden editar por su cuenta",
+	"Default language for new users": "Idioma predeterminado para nuevos usuarios",
+	"empty = a random password is written to the adapter log once; it has to be changed at the first login": "vacío = se escribe una contraseña aleatoria una vez en el registro del adaptador; debe cambiarse en el primer inicio de sesión",
+	"empty = the adapter generates one once and stores it next to the database, so sessions survive restarts": "vacío = el adaptador genera uno una vez y lo guarda junto a la base de datos, para que las sesiones sobrevivan a los reinicios",
+	"Enable kiosk terminal": "Habilitar terminal de quiosco",
+	"First start: the start password is in the ioBroker log": "Primer inicio: la contraseña inicial está en el registro de ioBroker",
+	"General": "General",
+	"Holiday country": "País para los días festivos",
+	"Instance time zone": "Zona horaria de la instancia",
+	"Keep database backups for days": "Conservar las copias de seguridad de la base de datos durante días",
+	"Login of the first administrator": "Usuario del primer administrador",
+	"Migration and backup": "Migración y copia de seguridad",
+	"only switch this on when a reverse proxy is in front of the adapter": "activar solo si hay un proxy inverso delante del adaptador",
+	"Port": "Puerto",
+	"Round quick punches to minutes (0 = off)": "Redondear los fichajes rápidos a minutos (0 = desactivado)",
+	"Security": "Seguridad",
+	"Session lifetime in minutes": "Duración de la sesión en minutos",
+	"Session secret": "Secreto de sesión",
+	"Start password of the first administrator": "Contraseña inicial del primer administrador",
+	"Subtract working time from absences": "Restar el tiempo de trabajo de las ausencias",
+	"the port of the web app, the API and the terminal; 8082 stays free for vis and web": "el puerto de la aplicación web, la API y el terminal; 8082 queda libre para vis y web",
+	"Time rules": "Reglas de horario",
+	"Trust the reverse proxy (X-Forwarded-*)": "Confiar en el proxy inverso (X-Forwarded-*)",
+	"used once: the account is created when the instance has no administrator yet": "se usa una sola vez: la cuenta se crea cuando la instancia aún no tiene administrador",
+	"time-tracker adapter settings": "Configuración del adaptador para time-tracker"
+}

package/admin/i18n/fr.json

@@ -0,0 +1,34 @@
+{
+	"⚠️ First start: the first administrator is created when the instance starts for the first time. If the password field stays empty, the generated password is written ONCE into the ioBroker log (open “Logs” on the left, look for the yellow line with “created with the start password”) — both fields are in the tab “Migration and backup”. The app asks for a new password at the first login.": "<div style=\"font-size: 1.15rem; line-height: 1.6\">⚠️ Premier démarrage : le premier administrateur est créé au premier démarrage de l'instance. Si le champ du mot de passe reste vide, le mot de passe généré est écrit UNE fois dans le journal d'ioBroker (ouvrez « Logs » à gauche et cherchez la ligne jaune « created with the start password ») — les deux champs se trouvent dans l'onglet « Migration et sauvegarde ». L'application demande un nouveau mot de passe à la première connexion.</div>",
+	"⚠️ The account of the first administrator is created at the very first start. If the password field below stays empty, the adapter generates a random password and writes it ONCE into the ioBroker log: open “Logs” in the ioBroker admin on the left and look for the yellow line with “created with the start password” — that is the password for the first login. The app then asks for a new password right away. Enter your own password below instead if you want to skip that.": "<div style=\"font-size: 1.15rem; line-height: 1.6\">⚠️ Le compte du premier administrateur est créé au tout premier démarrage. Si le champ du mot de passe ci-dessous reste vide, l'adaptateur génère un mot de passe aléatoire et l'écrit UNE fois dans le journal d'ioBroker : ouvrez « Logs » à gauche dans l'admin ioBroker et cherchez la ligne jaune « created with the start password » — c'est le mot de passe de la première connexion. L'application demande ensuite immédiatement un nouveau mot de passe. Saisissez plutôt votre propre mot de passe ci-dessous pour éviter cela.</div>",
+	"127.0.0.1 = only this machine": "127.0.0.1 = uniquement cette machine",
+	"Badge link secret (HMAC)": "Secret du lien du badge (HMAC)",
+	"Bind address": "Adresse d'écoute",
+	"Calculate absences only until today": "Calculer les absences uniquement jusqu'à aujourd'hui",
+	"Database file (empty = adapter data directory)": "Fichier de base de données (vide = répertoire de données de l'adaptateur)",
+	"Days users may edit on their own": "Jours pendant lesquels les utilisateurs peuvent modifier eux-mêmes",
+	"Default language for new users": "Langue par défaut pour les nouveaux utilisateurs",
+	"empty = a random password is written to the adapter log once; it has to be changed at the first login": "vide = un mot de passe aléatoire est écrit une fois dans le journal de l'adaptateur ; il doit être changé lors de la première connexion",
+	"empty = the adapter generates one once and stores it next to the database, so sessions survive restarts": "vide = l'adaptateur en génère un une fois et le stocke à côté de la base de données, pour que les sessions survivent aux redémarrages",
+	"Enable kiosk terminal": "Activer le terminal kiosque",
+	"First start: the start password is in the ioBroker log": "Premier démarrage : le mot de passe initial est dans le journal d'ioBroker",
+	"General": "Général",
+	"Holiday country": "Pays pour les jours fériés",
+	"Instance time zone": "Fuseau horaire de l'instance",
+	"Keep database backups for days": "Durée de conservation des sauvegardes (jours)",
+	"Login of the first administrator": "Identifiant du premier administrateur",
+	"Migration and backup": "Migration et sauvegarde",
+	"only switch this on when a reverse proxy is in front of the adapter": "à activer uniquement si un proxy inverse se trouve devant l'adaptateur",
+	"Port": "Port",
+	"Round quick punches to minutes (0 = off)": "Arrondir les pointages rapides en minutes (0 = désactivé)",
+	"Security": "Sécurité",
+	"Session lifetime in minutes": "Durée de vie de la session en minutes",
+	"Session secret": "Secret de session",
+	"Start password of the first administrator": "Mot de passe initial du premier administrateur",
+	"Subtract working time from absences": "Soustraire le temps de travail des absences",
+	"the port of the web app, the API and the terminal; 8082 stays free for vis and web": "le port de l'application web, de l'API et du terminal ; 8082 reste libre pour vis et web",
+	"Time rules": "Règles de temps de travail",
+	"Trust the reverse proxy (X-Forwarded-*)": "Faire confiance au proxy inverse (X-Forwarded-*)",
+	"used once: the account is created when the instance has no administrator yet": "utilisé une seule fois : le compte est créé lorsque l'instance n'a pas encore d'administrateur",
+	"time-tracker adapter settings": "Paramètres de l'adaptateur pour time-tracker"
+}

package/admin/i18n/it.json

@@ -0,0 +1,34 @@
+{
+	"⚠️ First start: the first administrator is created when the instance starts for the first time. If the password field stays empty, the generated password is written ONCE into the ioBroker log (open “Logs” on the left, look for the yellow line with “created with the start password”) — both fields are in the tab “Migration and backup”. The app asks for a new password at the first login.": "<div style=\"font-size: 1.15rem; line-height: 1.6\">⚠️ Primo avvio: il primo amministratore viene creato al primo avvio dell'istanza. Se il campo della password resta vuoto, la password generata viene scritta UNA volta nel log di ioBroker (apri «Logs» a sinistra e cerca la riga gialla con «created with the start password») — entrambi i campi sono nella scheda «Migrazione e backup». L'app chiede una nuova password al primo accesso.</div>",
+	"⚠️ The account of the first administrator is created at the very first start. If the password field below stays empty, the adapter generates a random password and writes it ONCE into the ioBroker log: open “Logs” in the ioBroker admin on the left and look for the yellow line with “created with the start password” — that is the password for the first login. The app then asks for a new password right away. Enter your own password below instead if you want to skip that.": "<div style=\"font-size: 1.15rem; line-height: 1.6\">⚠️ L'account del primo amministratore viene creato al primissimo avvio. Se il campo della password qui sotto resta vuoto, l'adattatore genera una password casuale e la scrive UNA volta nel log di ioBroker: apri «Logs» a sinistra nell'admin di ioBroker e cerca la riga gialla con «created with the start password» — è quella la password per il primo accesso. L'app chiede subito una nuova password. Se preferisci, inserisci qui sotto la tua password.</div>",
+	"127.0.0.1 = only this machine": "127.0.0.1 = solo questa macchina",
+	"Badge link secret (HMAC)": "Segreto collegamento badge (HMAC)",
+	"Bind address": "Indirizzo di ascolto",
+	"Calculate absences only until today": "Calcola le assenze solo fino ad oggi",
+	"Database file (empty = adapter data directory)": "File di database (vuoto = directory dei dati dell'adattatore)",
+	"Days users may edit on their own": "Giorni in cui gli utenti possono modificare autonomamente",
+	"Default language for new users": "Lingua predefinita per i nuovi utenti",
+	"empty = a random password is written to the adapter log once; it has to be changed at the first login": "vuoto = una password casuale viene scritta una volta nel log dell'adattatore; va cambiata al primo accesso",
+	"empty = the adapter generates one once and stores it next to the database, so sessions survive restarts": "vuoto = l'adattatore ne genera uno una volta e lo salva accanto al database, così le sessioni sopravvivono ai riavvii",
+	"Enable kiosk terminal": "Abilita il terminale kiosk",
+	"First start: the start password is in the ioBroker log": "Primo avvio: la password iniziale è nel log di ioBroker",
+	"General": "Generale",
+	"Holiday country": "Paese per i giorni festivi",
+	"Instance time zone": "Fuso orario dell'istanza",
+	"Keep database backups for days": "Conservazione dei backup del database (giorni)",
+	"Login of the first administrator": "Login del primo amministratore",
+	"Migration and backup": "Migrazione e backup",
+	"only switch this on when a reverse proxy is in front of the adapter": "attivare solo se davanti all'adattatore c'è un proxy inverso",
+	"Port": "Porta",
+	"Round quick punches to minutes (0 = off)": "Arrotonda le timbrature rapide ai minuti (0 = disattivato)",
+	"Security": "Sicurezza",
+	"Session lifetime in minutes": "Durata della sessione in minuti",
+	"Session secret": "Segreto della sessione",
+	"Start password of the first administrator": "Password iniziale del primo amministratore",
+	"Subtract working time from absences": "Sottrarre l'orario di lavoro dalle assenze",
+	"the port of the web app, the API and the terminal; 8082 stays free for vis and web": "la porta dell'app web, dell'API e del terminale; 8082 resta libera per vis e web",
+	"Time rules": "Regole dell'orario di lavoro",
+	"Trust the reverse proxy (X-Forwarded-*)": "Fidati del proxy inverso (X-Forwarded-*)",
+	"used once: the account is created when the instance has no administrator yet": "usato una sola volta: l'account viene creato quando l'istanza non ha ancora un amministratore",
+	"time-tracker adapter settings": "Impostazioni dell'adattatore per time-tracker"
+}