tapesmith 0.4.0__tar.gz

tapesmith-0.4.0/.gitignore

@@ -0,0 +1,11 @@
+__pycache__/
+*.pyc
+.venv/
+build/
+dist/
+*.egg-info/
+.env
+*.log
+.pytest_cache/
+.superpowers/
+web/node_modules/

tapesmith-0.4.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Tapesmith contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

tapesmith-0.4.0/PKG-INFO

@@ -0,0 +1,246 @@
+Metadata-Version: 2.5
+Name: tapesmith
+Version: 0.4.0
+Summary: Label studio for the Phomemo P12 label printer: templates, QR codes, homelab labels, web UI, print service and automation for Windows
+Project-URL: Homepage, https://github.com/essendyx/tapesmith
+Project-URL: Documentation, https://github.com/essendyx/tapesmith/blob/main/docs/manual.md
+Project-URL: Handbuch, https://github.com/essendyx/tapesmith/blob/main/docs/handbuch.md
+Project-URL: Source, https://github.com/essendyx/tapesmith
+Project-URL: Issues, https://github.com/essendyx/tapesmith/issues
+Project-URL: Changelog, https://github.com/essendyx/tapesmith/releases
+Author: Tapesmith contributors
+License-Expression: MIT
+License-File: LICENSE
+License-File: THIRD_PARTY_NOTICES.md
+Keywords: homelab,label printer,labels,p12,phomemo,qr code,windows
+Classifier: Development Status :: 4 - Beta
+Classifier: Environment :: Web Environment
+Classifier: Environment :: Win32 (MS Windows)
+Classifier: Intended Audience :: End Users/Desktop
+Classifier: Intended Audience :: System Administrators
+Classifier: Natural Language :: English
+Classifier: Natural Language :: German
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: Microsoft :: Windows :: Windows 10
+Classifier: Operating System :: Microsoft :: Windows :: Windows 11
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Topic :: Printing
+Classifier: Topic :: Utilities
+Requires-Python: >=3.11
+Requires-Dist: bleak>=0.22
+Requires-Dist: cryptography>=42
+Requires-Dist: fastapi>=0.115
+Requires-Dist: httpx>=0.27
+Requires-Dist: keyring>=25
+Requires-Dist: mcp<3,>=2.2
+Requires-Dist: openpyxl>=3.1
+Requires-Dist: paho-mqtt>=2.0
+Requires-Dist: pillow>=10.1
+Requires-Dist: ppf-datamatrix>=0.2
+Requires-Dist: pyserial>=3.5
+Requires-Dist: pyside6>=6.6
+Requires-Dist: segno>=1.6
+Requires-Dist: uvicorn>=0.30
+Requires-Dist: zxing-cpp>=3.0
+Provides-Extra: dev
+Requires-Dist: build>=1.2; extra == 'dev'
+Requires-Dist: httpx>=0.27; extra == 'dev'
+Requires-Dist: pytest-qt>=4.4; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Provides-Extra: golden
+Requires-Dist: phomemo-p12-tools==0.0.5; extra == 'golden'
+Provides-Extra: screenshots
+Requires-Dist: playwright>=1.47; extra == 'screenshots'
+Description-Content-Type: text/markdown
+
+# Tapesmith
+
+**Label studio for the Phomemo P12.**
+
+Tapesmith is a Windows application for the Phomemo P12 Bluetooth label printer (12 mm tape). It
+replaces the phone app with a fast local print service, a browser based editor, a template gallery,
+a command line and optional integrations for home labs and home automation. Everything runs on your
+own PC; nothing is sent to a cloud service.
+
+![Quick print (light)](https://github.com/essendyx/tapesmith/raw/main/docs/screenshots/schnelldruck-hell-desktop-en.png)
+
+## Screenshots
+
+| Editor | Template gallery |
+|---|---|
+| ![Editor](https://github.com/essendyx/tapesmith/raw/main/docs/screenshots/editor-hell-desktop-en.png) | ![Gallery](https://github.com/essendyx/tapesmith/raw/main/docs/screenshots/galerie-hell-desktop-en.png) |
+| **Print history** | **Settings (dark)** |
+| ![History](https://github.com/essendyx/tapesmith/raw/main/docs/screenshots/verlauf-hell-desktop-en.png) | ![Settings](https://github.com/essendyx/tapesmith/raw/main/docs/screenshots/einstellungen-dunkel-desktop-en.png) |
+
+More screenshots (German and English, light and dark, desktop and phone):
+[docs/screenshots](https://github.com/essendyx/tapesmith/blob/main/docs/screenshots/index.md). All screenshots are taken from neutral demo data.
+
+## Features
+
+- **Quick print** from the browser, the tray icon or a global hotkey (Ctrl+Alt+L), with automatic
+  text fitting and a live preview at real size.
+- **Editor** with text, QR codes, Code128, DataMatrix, icons, shapes and images, multiple tabs,
+  undo, autosave and crash recovery.
+- **Template gallery** with more than 30 built in templates (storage, kitchen, office, network
+  and power labels, cable flags, grid strips for patch panels and fuse boxes) and your own
+  templates as JSON files.
+- **Series printing** from CSV, Excel or the clipboard, numbering ranges and counters.
+- **Print service** that owns the printer connection: queue with automatic retry, print history,
+  statistics, tape roll tracking and misprint protection.
+- **Command line** (`tapesmith`, short alias `p12`) for scripts, plus a PowerShell module.
+- **Accessibility and languages:** keyboard operation, screen reader labels, high contrast, dark
+  mode. English and German throughout: web interface, tray, print service messages, built in
+  templates and command line follow the Windows display language (any language other than German
+  gives English), or the setting `app.language`; `TAPESMITH_LANG=en` forces a language for the CLI.
+- **Installation through Python without admin rights** and signed automatic updates with
+  hash pinned packages and rollback.
+
+### Optional modules
+
+Everything beyond the core app is a built in module that is off until you turn it on under
+Settings > Modules (or `tapesmith module enable <id>`). Modules that are off appear nowhere in the
+interface. Available: Inventory (boxes, contents, lending), Drives (drives of this PC, SSH disk scanner
+and ZFS disk replacement assistant), Proxmox VE (VM and container labels), Paperless-ngx (ASN and
+warranty labels), Home Assistant (battery and maintenance labels), Obsidian vault via MCP, Assets with
+short links (`deploy/shortlink`), NetBox cable import, classifieds and a serial number scan from a
+photo. Tapesmith ships without any preset addresses or tokens. Also part of the core app: MQTT discovery
+for Home Assistant, Telegram notifications, a hot folder and an MCP server for AI assistants.
+Setup notes: [docs/manual.md](https://github.com/essendyx/tapesmith/blob/main/docs/manual.md) (English), [docs/handbuch.md](https://github.com/essendyx/tapesmith/blob/main/docs/handbuch.md) (German)
+and [deploy/](https://github.com/essendyx/tapesmith/tree/main/deploy/).
+
+## Installation
+
+Tapesmith is distributed as a Python package on [PyPI](https://pypi.org/project/tapesmith/) and runs
+with the signed Python from python.org. It has no executable of its own, so Windows Smart App Control
+does not block it, although Tapesmith itself carries no code signing certificate.
+
+1. Install Python 3.12 (3.11 works too), for example with winget in a normal terminal (no admin
+   rights needed):
+
+   ```
+   winget install Python.Python.3.12
+   ```
+
+2. Install Tapesmith for the current user and set it up:
+
+   ```
+   py -m pip install --user tapesmith
+   py -m tapesmith install
+   ```
+
+   `tapesmith install` creates `%LOCALAPPDATA%\Programs\Tapesmith` with one Python environment per
+   version (`versions\<version>`, the junction `current` points to the active one), a start menu entry
+   "Tapesmith", an entry under Installed apps (with uninstall), the `tapesmith://` and `p12label://`
+   links, the Explorer context menu and the autostart of the tray icon. Everything starts as
+   `pythonw.exe -m tapesmith...` from the active environment. No admin rights are needed. Useful
+   options: `--no-autostart`, `--no-start`, `--status` (show the state, change nothing).
+3. Pair the printer in Windows Bluetooth settings, then pick it in the web interface under Settings
+   (or run `py -m tapesmith setup`).
+
+Your settings and history live in `%APPDATA%\Tapesmith`. Installing, updating and uninstalling never
+touch them.
+
+**Updates:** after you agree (the web interface asks once), Tapesmith checks the GitHub releases of
+this project. A new version is installed into a new environment next to the running one: the signed
+release manifest lists every package with its SHA-256, pip installs only wheels with a matching
+checksum (`pip install --require-hashes --only-binary=:all:`), the self test of the new version must
+pass, and Tapesmith switches over while idle, with automatic rollback if the new version does not
+start. Manually: Settings > Updates, or `py -m tapesmith update check` and `py -m tapesmith update install`.
+
+**Uninstall:** Settings > Apps > Installed apps > Tapesmith, the start menu entry "Tapesmith
+deinstallieren", or `py -m tapesmith uninstall`. This removes the program folder, start menu entries,
+autostart, links and the entry under Installed apps; your data in `%APPDATA%\Tapesmith` stays. To also
+remove the package that was used for the setup: `py -m pip uninstall tapesmith`.
+
+**Smart App Control:** Windows 11 may block programs without a code signature. Tapesmith therefore
+never ships an executable: `python.exe` and `pythonw.exe` from python.org are signed, and all native
+parts come as unmodified wheels of their upstream projects from PyPI. The small `.exe` launchers
+that pip creates for command line entry points are not used by the installed app; if Smart App
+Control blocks them, use `py -m tapesmith ...` instead of `tapesmith ...`.
+
+**Upgrading from the portable build (0.3 and older) or a source checkout:** run the two commands of
+step 2. `tapesmith install` stops the old Tapesmith, takes over the installation folder, replaces
+autostart, start menu entry and uninstall entry, and removes the old `Tapesmith.exe`. An autostart
+that points to a Python environment of a source checkout is replaced as well. Your data stays as it
+is.
+
+**Upgrading from "P12 Label" (0.2.x):** on first start Tapesmith copies `%APPDATA%\P12Label` to
+`%APPDATA%\Tapesmith` once (the old folder stays as a backup), and the installer removes the program
+files, start menu entry, autostart and uninstall entry of the old installation. Links using
+`p12label://` keep working as an alias of `tapesmith://`; old `P12LABEL_*` environment variables
+still work as a fallback for `TAPESMITH_*`.
+
+## Security
+
+- The print service listens on `127.0.0.1` only. Access from your LAN is opt in (`lan.enabled`),
+  limited to configured private networks and always requires an API token (roles: admin, print,
+  family). Tokens are stored as SHA-256 hashes only.
+- Host and Origin headers are checked (DNS rebinding protection), failed logins are rate limited.
+- Secrets never go into configuration files: settings hold references such as
+  `keyring:tapesmith/mqtt` (Windows Credential Manager), `file:<path>` or `env:<NAME>`.
+- Updates are only installed if the manifest carries a valid Ed25519 signature from a key listed
+  in `src/tapesmith/update/trusted_keys.json`, and pip installs only wheels whose SHA-256 is listed
+  in that manifest.
+- The automatic update check is off until you agree: the web interface asks once on the first start
+  of the installed app (Settings > Updates changes it later).
+
+Please report vulnerabilities as described in [SECURITY.md](https://github.com/essendyx/tapesmith/blob/main/SECURITY.md).
+
+## Release signing and privacy
+
+Tapesmith has no code signing certificate and ships no executable of its own (see
+[Installation](#installation)). Releases are built by GitHub Actions from this repository, published
+to PyPI with Trusted Publishing, and every update manifest is signed with an Ed25519 key; the app
+installs only packages whose SHA-256 is listed in a correctly signed manifest.
+
+- Committers and reviewers: the project maintainer (owner of
+  [github.com/essendyx/tapesmith](https://github.com/essendyx/tapesmith))
+- Approvers: the project maintainer (owner of
+  [github.com/essendyx/tapesmith](https://github.com/essendyx/tapesmith))
+
+Privacy: This program will not transfer any information to other networked systems unless
+specifically requested by the user or the person installing or operating it. Which connections
+Tapesmith makes and how releases are built and signed: [CODE_SIGNING_POLICY.md](https://github.com/essendyx/tapesmith/blob/main/CODE_SIGNING_POLICY.md).
+
+## Development
+
+Requirements: Windows 10 or 11, Python 3.11 or newer, Node.js 20 or newer (only to build the web UI).
+
+```
+python -m venv .venv
+.venv\Scripts\pip install -e .[dev]
+.venv\Scripts\python -m pytest -q
+cd web && npm ci && npm run check
+python tools\build_web.py          # builds the web UI into src/tapesmith/webui/static
+python -m build                     # wheel and sdist in dist/
+```
+
+Tests never print, never open real COM ports, Bluetooth or network services and never touch your
+real data folder (they run with `TAPESMITH_HOME` set to a temporary folder). Hardware tests are
+marked `@pytest.mark.hardware` and only run with `--hardware`. See [CONTRIBUTING.md](https://github.com/essendyx/tapesmith/blob/main/CONTRIBUTING.md).
+
+Documentation: user manual in English [docs/manual.md](https://github.com/essendyx/tapesmith/blob/main/docs/manual.md) and German
+[docs/handbuch.md](https://github.com/essendyx/tapesmith/blob/main/docs/handbuch.md), hardware and protocol findings
+[docs/hardware/README.md](https://github.com/essendyx/tapesmith/blob/main/docs/hardware/README.md), operations notes
+[deploy/infra/README.md](https://github.com/essendyx/tapesmith/blob/main/deploy/infra/README.md). Translations: `web/src/locales/`,
+`src/tapesmith/locales/` and the message catalog `src/tapesmith/locales/messages/en.json`
+(maintained with `python tools/i18n_messages.py`).
+
+## License
+
+Tapesmith is released under the [MIT License](https://github.com/essendyx/tapesmith/blob/main/LICENSE). Third party components and their licenses
+are listed in [THIRD_PARTY_NOTICES.md](https://github.com/essendyx/tapesmith/blob/main/THIRD_PARTY_NOTICES.md).
+
+## Acknowledgements
+
+The P12 print protocol was first documented by the
+[phomemo-p12-tools](https://github.com/soburi/phomemo-p12) project (MIT License, Copyright (c) 2022
+Timo "polskafan" Dobbrick, packaged by TOKITA Hiroshi). Tapesmith keeps a byte compatible reference
+stream in its tests and offers the old `phomemo_render_label` and `phomemo_print_p12` commands for
+compatibility. Icons come from [Tabler Icons](https://tabler.io/icons) (MIT) and
+[Simple Icons](https://simpleicons.org/) (CC0); label fonts are DejaVu.
+
+Tapesmith is an independent project and not affiliated with Phomemo.

tapesmith-0.4.0/README.md

@@ -0,0 +1,188 @@
+# Tapesmith
+
+**Label studio for the Phomemo P12.**
+
+Tapesmith is a Windows application for the Phomemo P12 Bluetooth label printer (12 mm tape). It
+replaces the phone app with a fast local print service, a browser based editor, a template gallery,
+a command line and optional integrations for home labs and home automation. Everything runs on your
+own PC; nothing is sent to a cloud service.
+
+![Quick print (light)](https://github.com/essendyx/tapesmith/raw/main/docs/screenshots/schnelldruck-hell-desktop-en.png)
+
+## Screenshots
+
+| Editor | Template gallery |
+|---|---|
+| ![Editor](https://github.com/essendyx/tapesmith/raw/main/docs/screenshots/editor-hell-desktop-en.png) | ![Gallery](https://github.com/essendyx/tapesmith/raw/main/docs/screenshots/galerie-hell-desktop-en.png) |
+| **Print history** | **Settings (dark)** |
+| ![History](https://github.com/essendyx/tapesmith/raw/main/docs/screenshots/verlauf-hell-desktop-en.png) | ![Settings](https://github.com/essendyx/tapesmith/raw/main/docs/screenshots/einstellungen-dunkel-desktop-en.png) |
+
+More screenshots (German and English, light and dark, desktop and phone):
+[docs/screenshots](https://github.com/essendyx/tapesmith/blob/main/docs/screenshots/index.md). All screenshots are taken from neutral demo data.
+
+## Features
+
+- **Quick print** from the browser, the tray icon or a global hotkey (Ctrl+Alt+L), with automatic
+  text fitting and a live preview at real size.
+- **Editor** with text, QR codes, Code128, DataMatrix, icons, shapes and images, multiple tabs,
+  undo, autosave and crash recovery.
+- **Template gallery** with more than 30 built in templates (storage, kitchen, office, network
+  and power labels, cable flags, grid strips for patch panels and fuse boxes) and your own
+  templates as JSON files.
+- **Series printing** from CSV, Excel or the clipboard, numbering ranges and counters.
+- **Print service** that owns the printer connection: queue with automatic retry, print history,
+  statistics, tape roll tracking and misprint protection.
+- **Command line** (`tapesmith`, short alias `p12`) for scripts, plus a PowerShell module.
+- **Accessibility and languages:** keyboard operation, screen reader labels, high contrast, dark
+  mode. English and German throughout: web interface, tray, print service messages, built in
+  templates and command line follow the Windows display language (any language other than German
+  gives English), or the setting `app.language`; `TAPESMITH_LANG=en` forces a language for the CLI.
+- **Installation through Python without admin rights** and signed automatic updates with
+  hash pinned packages and rollback.
+
+### Optional modules
+
+Everything beyond the core app is a built in module that is off until you turn it on under
+Settings > Modules (or `tapesmith module enable <id>`). Modules that are off appear nowhere in the
+interface. Available: Inventory (boxes, contents, lending), Drives (drives of this PC, SSH disk scanner
+and ZFS disk replacement assistant), Proxmox VE (VM and container labels), Paperless-ngx (ASN and
+warranty labels), Home Assistant (battery and maintenance labels), Obsidian vault via MCP, Assets with
+short links (`deploy/shortlink`), NetBox cable import, classifieds and a serial number scan from a
+photo. Tapesmith ships without any preset addresses or tokens. Also part of the core app: MQTT discovery
+for Home Assistant, Telegram notifications, a hot folder and an MCP server for AI assistants.
+Setup notes: [docs/manual.md](https://github.com/essendyx/tapesmith/blob/main/docs/manual.md) (English), [docs/handbuch.md](https://github.com/essendyx/tapesmith/blob/main/docs/handbuch.md) (German)
+and [deploy/](https://github.com/essendyx/tapesmith/tree/main/deploy/).
+
+## Installation
+
+Tapesmith is distributed as a Python package on [PyPI](https://pypi.org/project/tapesmith/) and runs
+with the signed Python from python.org. It has no executable of its own, so Windows Smart App Control
+does not block it, although Tapesmith itself carries no code signing certificate.
+
+1. Install Python 3.12 (3.11 works too), for example with winget in a normal terminal (no admin
+   rights needed):
+
+   ```
+   winget install Python.Python.3.12
+   ```
+
+2. Install Tapesmith for the current user and set it up:
+
+   ```
+   py -m pip install --user tapesmith
+   py -m tapesmith install
+   ```
+
+   `tapesmith install` creates `%LOCALAPPDATA%\Programs\Tapesmith` with one Python environment per
+   version (`versions\<version>`, the junction `current` points to the active one), a start menu entry
+   "Tapesmith", an entry under Installed apps (with uninstall), the `tapesmith://` and `p12label://`
+   links, the Explorer context menu and the autostart of the tray icon. Everything starts as
+   `pythonw.exe -m tapesmith...` from the active environment. No admin rights are needed. Useful
+   options: `--no-autostart`, `--no-start`, `--status` (show the state, change nothing).
+3. Pair the printer in Windows Bluetooth settings, then pick it in the web interface under Settings
+   (or run `py -m tapesmith setup`).
+
+Your settings and history live in `%APPDATA%\Tapesmith`. Installing, updating and uninstalling never
+touch them.
+
+**Updates:** after you agree (the web interface asks once), Tapesmith checks the GitHub releases of
+this project. A new version is installed into a new environment next to the running one: the signed
+release manifest lists every package with its SHA-256, pip installs only wheels with a matching
+checksum (`pip install --require-hashes --only-binary=:all:`), the self test of the new version must
+pass, and Tapesmith switches over while idle, with automatic rollback if the new version does not
+start. Manually: Settings > Updates, or `py -m tapesmith update check` and `py -m tapesmith update install`.
+
+**Uninstall:** Settings > Apps > Installed apps > Tapesmith, the start menu entry "Tapesmith
+deinstallieren", or `py -m tapesmith uninstall`. This removes the program folder, start menu entries,
+autostart, links and the entry under Installed apps; your data in `%APPDATA%\Tapesmith` stays. To also
+remove the package that was used for the setup: `py -m pip uninstall tapesmith`.
+
+**Smart App Control:** Windows 11 may block programs without a code signature. Tapesmith therefore
+never ships an executable: `python.exe` and `pythonw.exe` from python.org are signed, and all native
+parts come as unmodified wheels of their upstream projects from PyPI. The small `.exe` launchers
+that pip creates for command line entry points are not used by the installed app; if Smart App
+Control blocks them, use `py -m tapesmith ...` instead of `tapesmith ...`.
+
+**Upgrading from the portable build (0.3 and older) or a source checkout:** run the two commands of
+step 2. `tapesmith install` stops the old Tapesmith, takes over the installation folder, replaces
+autostart, start menu entry and uninstall entry, and removes the old `Tapesmith.exe`. An autostart
+that points to a Python environment of a source checkout is replaced as well. Your data stays as it
+is.
+
+**Upgrading from "P12 Label" (0.2.x):** on first start Tapesmith copies `%APPDATA%\P12Label` to
+`%APPDATA%\Tapesmith` once (the old folder stays as a backup), and the installer removes the program
+files, start menu entry, autostart and uninstall entry of the old installation. Links using
+`p12label://` keep working as an alias of `tapesmith://`; old `P12LABEL_*` environment variables
+still work as a fallback for `TAPESMITH_*`.
+
+## Security
+
+- The print service listens on `127.0.0.1` only. Access from your LAN is opt in (`lan.enabled`),
+  limited to configured private networks and always requires an API token (roles: admin, print,
+  family). Tokens are stored as SHA-256 hashes only.
+- Host and Origin headers are checked (DNS rebinding protection), failed logins are rate limited.
+- Secrets never go into configuration files: settings hold references such as
+  `keyring:tapesmith/mqtt` (Windows Credential Manager), `file:<path>` or `env:<NAME>`.
+- Updates are only installed if the manifest carries a valid Ed25519 signature from a key listed
+  in `src/tapesmith/update/trusted_keys.json`, and pip installs only wheels whose SHA-256 is listed
+  in that manifest.
+- The automatic update check is off until you agree: the web interface asks once on the first start
+  of the installed app (Settings > Updates changes it later).
+
+Please report vulnerabilities as described in [SECURITY.md](https://github.com/essendyx/tapesmith/blob/main/SECURITY.md).
+
+## Release signing and privacy
+
+Tapesmith has no code signing certificate and ships no executable of its own (see
+[Installation](#installation)). Releases are built by GitHub Actions from this repository, published
+to PyPI with Trusted Publishing, and every update manifest is signed with an Ed25519 key; the app
+installs only packages whose SHA-256 is listed in a correctly signed manifest.
+
+- Committers and reviewers: the project maintainer (owner of
+  [github.com/essendyx/tapesmith](https://github.com/essendyx/tapesmith))
+- Approvers: the project maintainer (owner of
+  [github.com/essendyx/tapesmith](https://github.com/essendyx/tapesmith))
+
+Privacy: This program will not transfer any information to other networked systems unless
+specifically requested by the user or the person installing or operating it. Which connections
+Tapesmith makes and how releases are built and signed: [CODE_SIGNING_POLICY.md](https://github.com/essendyx/tapesmith/blob/main/CODE_SIGNING_POLICY.md).
+
+## Development
+
+Requirements: Windows 10 or 11, Python 3.11 or newer, Node.js 20 or newer (only to build the web UI).
+
+```
+python -m venv .venv
+.venv\Scripts\pip install -e .[dev]
+.venv\Scripts\python -m pytest -q
+cd web && npm ci && npm run check
+python tools\build_web.py          # builds the web UI into src/tapesmith/webui/static
+python -m build                     # wheel and sdist in dist/
+```
+
+Tests never print, never open real COM ports, Bluetooth or network services and never touch your
+real data folder (they run with `TAPESMITH_HOME` set to a temporary folder). Hardware tests are
+marked `@pytest.mark.hardware` and only run with `--hardware`. See [CONTRIBUTING.md](https://github.com/essendyx/tapesmith/blob/main/CONTRIBUTING.md).
+
+Documentation: user manual in English [docs/manual.md](https://github.com/essendyx/tapesmith/blob/main/docs/manual.md) and German
+[docs/handbuch.md](https://github.com/essendyx/tapesmith/blob/main/docs/handbuch.md), hardware and protocol findings
+[docs/hardware/README.md](https://github.com/essendyx/tapesmith/blob/main/docs/hardware/README.md), operations notes
+[deploy/infra/README.md](https://github.com/essendyx/tapesmith/blob/main/deploy/infra/README.md). Translations: `web/src/locales/`,
+`src/tapesmith/locales/` and the message catalog `src/tapesmith/locales/messages/en.json`
+(maintained with `python tools/i18n_messages.py`).
+
+## License
+
+Tapesmith is released under the [MIT License](https://github.com/essendyx/tapesmith/blob/main/LICENSE). Third party components and their licenses
+are listed in [THIRD_PARTY_NOTICES.md](https://github.com/essendyx/tapesmith/blob/main/THIRD_PARTY_NOTICES.md).
+
+## Acknowledgements
+
+The P12 print protocol was first documented by the
+[phomemo-p12-tools](https://github.com/soburi/phomemo-p12) project (MIT License, Copyright (c) 2022
+Timo "polskafan" Dobbrick, packaged by TOKITA Hiroshi). Tapesmith keeps a byte compatible reference
+stream in its tests and offers the old `phomemo_render_label` and `phomemo_print_p12` commands for
+compatibility. Icons come from [Tabler Icons](https://tabler.io/icons) (MIT) and
+[Simple Icons](https://simpleicons.org/) (CC0); label fonts are DejaVu.
+
+Tapesmith is an independent project and not affiliated with Phomemo.

tapesmith-0.4.0/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,86 @@
+# Third party notices
+
+Tapesmith itself is licensed under the MIT License (see `LICENSE`). It bundles or builds on the
+following third party works. Full license texts of bundled assets are included next to the assets.
+
+## Bundled assets
+
+| Component | Where | License |
+|---|---|---|
+| Tabler Icons, Copyright (c) 2020-2025 Paweł Kuna | `src/tapesmith/icons/tabler-icons.ttf`, `tabler-index.json` | MIT, see `src/tapesmith/icons/LICENSE-tabler.txt` |
+| Simple Icons | `src/tapesmith/icons/simple/*.png` | CC0 1.0, see `src/tapesmith/icons/simple/LICENSE-simple-icons.txt`. The logos remain trademarks of their owners and are only used to label your own devices and services, see `MARKEN.txt`. |
+| DejaVu fonts (DejaVu Sans, DejaVu Sans Bold, DejaVu Sans Mono), Bitstream Vera Copyright (c) 2003 Bitstream, Inc., Arev glyphs Copyright (c) 2006 Tavmjong Bah, DejaVu changes in the public domain | `src/tapesmith/fonts/*.ttf` | Bitstream Vera / Arev font license, see `src/tapesmith/fonts/LICENSE` |
+
+## Protocol reference
+
+| Component | Use | License |
+|---|---|---|
+| [phomemo-p12-tools](https://github.com/soburi/phomemo-p12) 0.0.5, Copyright (c) 2022 Timo "polskafan" Dobbrick | Documentation of the P12 print protocol; optional test dependency (`golden` extra) that produces the reference byte stream in `tests/golden/`. The command names `phomemo_render_label` and `phomemo_print_p12` are kept for compatibility. | MIT |
+
+MIT License text for phomemo-p12-tools:
+
+```
+Copyright (c) 2022 Timo 'polskafan' Dobbrick
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+```
+
+## Python dependencies (from `pyproject.toml`)
+
+Installed separately by pip from PyPI (not vendored). The installed app uses one Python environment per
+version, pinned by the signed lock list of each release.
+
+| Package | License |
+|---|---|
+| Pillow | MIT-CMU (HPND) |
+| pyserial | BSD-3-Clause |
+| segno | BSD-3-Clause |
+| zxing-cpp | Apache-2.0 |
+| PySide6 (Qt for Python) | LGPL-3.0 (or GPL-2.0/GPL-3.0) |
+| ppf-datamatrix | MIT |
+| openpyxl | MIT |
+| bleak | MIT |
+| fastapi | MIT |
+| uvicorn | BSD-3-Clause |
+| mcp (Model Context Protocol SDK) | MIT |
+| paho-mqtt | EPL-2.0 or EDL-1.0 (BSD-3-Clause) |
+| keyring | MIT |
+| httpx | BSD-3-Clause |
+| cryptography | Apache-2.0 or BSD-3-Clause |
+| pytest, pytest-qt (development) | MIT |
+| Playwright (screenshots only) | Apache-2.0 |
+
+PySide6 is used under the LGPL: pip installs the unmodified Qt libraries from PyPI as separate
+files, which can be replaced by the user.
+
+## Web UI dependencies (from `web/package.json`)
+
+Bundled into `src/tapesmith/webui/static`:
+
+| Package | License |
+|---|---|
+| @fluentui/react-components, @fluentui/react-icons | MIT |
+| @tanstack/react-query | MIT |
+| i18next, react-i18next | MIT |
+| konva, react-konva | MIT |
+| react, react-dom | MIT |
+| react-router-dom | MIT |
+
+Development and build tools (not bundled): TypeScript (Apache-2.0), Vite, Vitest, ESLint,
+typescript-eslint, Testing Library, jsdom, globals (MIT), axe-core (MPL-2.0).

tapesmith-0.4.0/deploy/homeassistant/README.md

@@ -0,0 +1,107 @@
+# Home Assistant Anbindung (MQTT Discovery)
+
+Der Druckdienst `p12d` meldet sich per MQTT Discovery als Gerät „Labeldrucker P12" bei Home
+Assistant an, solange `mqtt.enabled` in `config.json` an ist. Entitäten, Topics und Grenzen
+beschreibt diese Datei.
+
+## Voraussetzungen
+
+* Ein MQTT-Broker (z. B. Mosquitto), in Tapesmith eingetragen über `mqtt.host` und `mqtt.port` (Standard-Port 1883).
+* Ein Mosquitto Benutzer `tapesmith` mit ACL: lesen und schreiben auf `tapesmith/#`, schreiben auf
+  `homeassistant/#`. Diesen Benutzer legt der Administrator des Brokers an, die App tut das nicht.
+* Home Assistant mit aktivierter MQTT Integration, Discovery Präfix `homeassistant` (Standard).
+
+## Einrichtung
+
+1. Passwort des Mosquitto Benutzers `tapesmith` in den Windows Anmeldeinformationen hinterlegen:
+
+   ```
+   p12 secret set mqtt
+   ```
+
+   (fragt das Passwort interaktiv ab; alternativ `p12 secret set mqtt --stdin` mit dem Passwort
+   auf der Standardeingabe, z. B. aus einem Passwortmanager, nie als Kommandozeilenargument).
+
+2. MQTT einschalten:
+
+   ```
+   p12 config set mqtt.enabled true
+   ```
+
+   Die Anbindung wirkt ohne Dienst-Neustart (Addon-Prüfung alle 5 Sekunden).
+
+3. Zur Kontrolle, ohne Verbindungsaufbau:
+
+   ```
+   p12 mqtt discovery   # zeigt die Discovery-Nachrichten als JSON
+   p12 mqtt status      # zeigt an/aus, Broker, Benutzer, Passwort-Referenz
+   ```
+
+## Entitäten
+
+| Entität | Komponente | Bedingung |
+|---|---|---|
+| Verbindung | `binary_sensor` (`device_class: connectivity`) | immer |
+| Akku | `sensor` (`device_class: battery`, `%`) | nur wenn `battery` im Geräteprofil verifiziert ist |
+| Deckel | `binary_sensor` (`device_class: opening`) | nur wenn `lid` im Geräteprofil verifiziert ist |
+| Warteschlange | `sensor` (Einheit „Aufträge") | immer |
+| Testlabel | `button` | immer |
+
+Der P12 verifiziert Akku und Deckel serienmäßig (siehe `device/profiles/p12.json`); der
+Deckelcode ist beim P12 invertiert, das steckt bereits im Geräteprofil, hier zählt nur der
+dekodierte Wert (`offen`/`zu`). Ein Sensor für „Band leer" fehlt bewusst: dieser Wert ist beim
+P12 nicht verifiziert.
+
+Ist der Deckelzustand (noch) nicht bekannt (`lid_open: null` im Zustandstopic, z. B. direkt nach
+dem Start), zeigt der Deckelsensor in Home Assistant „unbekannt" statt fälschlich „zu": die
+Discovery-Vorlage prüft `lid_open is none` und liefert dann die Jinja-Sentinel `none`.
+
+## Topics
+
+Alle Topics beginnen mit `mqtt.base_topic` (Standard `tapesmith`):
+
+| Topic | Richtung | Inhalt |
+|---|---|---|
+| `<base>/availability` | Dienst → HA | `online`/`offline` (retain, Last Will) |
+| `<base>/state` | Dienst → HA | `{"connected", "battery", "lid_open", "queue"}` (retain, JSON) |
+| `<base>/print/set` | HA → Dienst | `{"template", "values"?, "copies"?}` (JSON) |
+| `<base>/print/result` | Dienst → HA | `{"status", "title", "message"}` (JSON, nicht retain) |
+| `<base>/test/press` | HA → Dienst | beliebiger Inhalt, druckt ein Testlabel |
+
+Beispiel: eine Vorlage mit Werten über `mqtt.publish` drucken.
+
+```yaml
+service: mqtt.publish
+data:
+  topic: tapesmith/print/set
+  payload: >-
+    {"template": "gefriergut", "values": {"inhalt": "Suppe"}, "copies": 2}
+```
+
+## Kontingent
+
+MQTT ist eine nicht-interaktive Quelle. Kopien sind höchstens
+`guard.confirm_copies` (Standard 5) je Auftrag; mehr wird abgelehnt, die Meldung steht im
+Ergebnis auf `<base>/print/result`. Eine Rückfrage wegen zu langem Label oder zu vielen Kopien
+lässt sich über MQTT nicht bestätigen (`confirmed` sendet MQTT nie); nur die Rückfrage wegen
+eines nicht passenden Bandes wird von der Pipeline unabhängig von der Quelle als
+`bestätigung_nötig` gemeldet, MQTT druckt dann trotzdem nicht (kein zweiter Versuch), sondern
+meldet die Gründe.
+
+## Beispiele in diesem Ordner
+
+* `tapesmith-skript.yaml`: Home Assistant Skript `tapesmith_drucken` mit Feldern für Vorlage,
+  Werte und Kopien. Der Nummern-Selektor für Kopien liefert im Template eine Gleitkommazahl
+  (`1.0`), das Template wandelt sie mit dem Filter `| int` in eine ganze Zahl um; der Druckdienst
+  nimmt eine ganzzahlige Gleitkommazahl ohnehin an (`1.0` wie `1`), lehnt aber echte
+  Nachkommastellen (`1.5`) ab.
+* `tapesmith-automation-nfc.yaml`: Beispiel Automation, die beim Scannen eines NFC Tags das
+  Skript mit einer Vorlage aufruft.
+* `tapesmith-rest-command.yaml`: Alternative zu MQTT, `rest_command` ruft die Kurzendpunkte
+  (`POST /api/v1/print`) direkt per REST auf, mit dem Token aus `secrets.yaml`
+  (`X-P12-Token: !secret p12_token`). Braucht `lan.enabled = true` und ein API-Token mit Rolle
+  `drucken` oder `admin`.
+
+Beide Dateien lassen sich über die Home Assistant Oberfläche (Einstellungen, Automatisierungen
+und Skripte, YAML bearbeiten) oder als Datei unter `config/scripts.yaml` bzw.
+`config/automations.yaml` einfügen.