feat: bundle tkinter into Windows portable build

Download _tkinter.pyd, tkinter package, and Tcl/Tk DLLs from the
official Python nuget package and copy them into the embedded Python
directory. This enables the screen overlay visualization during
calibration in the portable build.

.gitea/workflows/release.yml

@@ -160,16 +160,6 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
-      - name: Login to Gitea Container Registry
-        uses: docker/login-action@v3
-        with:
-          registry: ${{ gitea.server_url }}
-          username: ${{ gitea.actor }}
-          password: ${{ secrets.GITEA_TOKEN }}
-
       - name: Extract version metadata
         id: meta
         run: |
@@ -182,21 +172,37 @@ jobs:
           echo "version=$VERSION" >> "$GITHUB_OUTPUT"
           echo "registry=$REGISTRY" >> "$GITHUB_OUTPUT"
 
-          # Build tag list: version + latest (only for stable releases)
+      - name: Login to Gitea Container Registry
-          TAGS="$REGISTRY:$TAG,$REGISTRY:$VERSION"
+        run: |
-          if ! echo "$TAG" | grep -qE '(alpha|beta|rc)'; then
+          echo "${{ secrets.GITEA_TOKEN }}" | docker login \
-            TAGS="$TAGS,$REGISTRY:latest"
+            "$(echo '${{ gitea.server_url }}' | sed 's|https\?://||')" \
-          fi
+            -u "${{ gitea.actor }}" --password-stdin
-          echo "tags=$TAGS" >> "$GITHUB_OUTPUT"
 
-      - name: Build and push Docker image
+      - name: Build Docker image
-        uses: docker/build-push-action@v5
+        run: |
-        with:
+          TAG="${{ gitea.ref_name }}"
-          context: ./server
+          REGISTRY="${{ steps.meta.outputs.registry }}"
-          push: true
+
-          tags: ${{ steps.meta.outputs.tags }}
+          docker build \
-          labels: |
+            --label "org.opencontainers.image.version=${{ steps.meta.outputs.version }}" \
-            org.opencontainers.image.version=${{ steps.meta.outputs.version }}
+            --label "org.opencontainers.image.revision=${{ gitea.sha }}" \
-            org.opencontainers.image.revision=${{ gitea.sha }}
+            -t "$REGISTRY:$TAG" \
-          cache-from: type=gha
+            -t "$REGISTRY:${{ steps.meta.outputs.version }}" \
-          cache-to: type=gha,mode=max
+            ./server
+
+          # Tag as latest only for stable releases
+          if ! echo "$TAG" | grep -qE '(alpha|beta|rc)'; then
+            docker tag "$REGISTRY:$TAG" "$REGISTRY:latest"
+          fi
+
+      - name: Push Docker image
+        run: |
+          TAG="${{ gitea.ref_name }}"
+          REGISTRY="${{ steps.meta.outputs.registry }}"
+
+          docker push "$REGISTRY:$TAG"
+          docker push "$REGISTRY:${{ steps.meta.outputs.version }}"
+
+          if ! echo "$TAG" | grep -qE '(alpha|beta|rc)'; then
+            docker push "$REGISTRY:latest"
+          fi

build-dist-windows.sh

@@ -85,6 +85,74 @@ if ! grep -q '\.\./app/src' "$PTH_FILE"; then
 fi
 echo "  Patched $(basename "$PTH_FILE")"
 
+# ── Bundle tkinter into embedded Python ───────────────────────
+# Embedded Python doesn't include tkinter. We download it from the
+# official Windows Python nuget package (same version) which contains
+# the _tkinter.pyd, tkinter/ package, and Tcl/Tk DLLs.
+
+echo "[3b/8] Bundling tkinter for screen overlay support..."
+
+# Python minor version for nuget package (e.g., 3.11.9 -> 3.11)
+PYTHON_MINOR="${PYTHON_VERSION%.*}"
+
+# Download the full Python nuget package (contains all stdlib + DLLs)
+NUGET_URL="https://www.nuget.org/api/v2/package/python/${PYTHON_VERSION}"
+NUGET_PKG="$BUILD_DIR/python-nuget.zip"
+if [ ! -f "$NUGET_PKG" ]; then
+    curl -sL "$NUGET_URL" -o "$NUGET_PKG"
+fi
+
+NUGET_DIR="$BUILD_DIR/python-nuget"
+rm -rf "$NUGET_DIR"
+mkdir -p "$NUGET_DIR"
+unzip -qo "$NUGET_PKG" -d "$NUGET_DIR"
+
+# Copy _tkinter.pyd (the C extension)
+TKINTER_PYD=$(find "$NUGET_DIR" -name "_tkinter.pyd" | head -1)
+if [ -n "$TKINTER_PYD" ]; then
+    cp "$TKINTER_PYD" "$PYTHON_DIR/"
+    echo "  Copied _tkinter.pyd"
+else
+    echo "  WARNING: _tkinter.pyd not found in nuget package"
+fi
+
+# Copy tkinter Python package from the stdlib zip or Lib/
+# The nuget package has Lib/tkinter/
+TKINTER_PKG=$(find "$NUGET_DIR" -type d -name "tkinter" | head -1)
+if [ -n "$TKINTER_PKG" ]; then
+    mkdir -p "$PYTHON_DIR/Lib"
+    cp -r "$TKINTER_PKG" "$PYTHON_DIR/Lib/tkinter"
+    echo "  Copied tkinter/ package"
+else
+    echo "  WARNING: tkinter package not found in nuget package"
+fi
+
+# Copy Tcl/Tk DLLs (tcl86t.dll, tk86t.dll, etc.)
+for dll in tcl86t.dll tk86t.dll; do
+    DLL_PATH=$(find "$NUGET_DIR" -name "$dll" | head -1)
+    if [ -n "$DLL_PATH" ]; then
+        cp "$DLL_PATH" "$PYTHON_DIR/"
+        echo "  Copied $dll"
+    fi
+done
+
+# Copy Tcl/Tk data directories (tcl8.6, tk8.6)
+for tcldir in tcl8.6 tk8.6; do
+    TCL_PATH=$(find "$NUGET_DIR" -type d -name "$tcldir" | head -1)
+    if [ -n "$TCL_PATH" ]; then
+        cp -r "$TCL_PATH" "$PYTHON_DIR/$tcldir"
+        echo "  Copied $tcldir/"
+    fi
+done
+
+# Add Lib to ._pth so tkinter package is importable
+if ! grep -q '^Lib$' "$PTH_FILE"; then
+    echo 'Lib' >> "$PTH_FILE"
+fi
+
+rm -rf "$NUGET_DIR"
+echo "  tkinter bundled successfully"
+
 # ── Download pip and install into embedded Python ────────────
 
 echo "[4/8] Installing pip into embedded Python..."
@@ -247,16 +315,8 @@ set WLED_CONFIG_PATH=%~dp0app\config\default_config.yaml
 if not exist "%~dp0data" mkdir "%~dp0data"
 if not exist "%~dp0logs" mkdir "%~dp0logs"
 
-echo.
+:: Start the server — reads port from config, prints its own banner
-echo  =============================================
+"%~dp0python\python.exe" -m wled_controller.main
-echo   LedGrab v${VERSION_CLEAN}
-echo   Open http://localhost:8080 in your browser
-echo  =============================================
-echo.
-
-:: Start the server (open browser after short delay)
-start "" /b cmd /c "timeout /t 2 /nobreak >nul && start http://localhost:8080"
-"%~dp0python\python.exe" -m uvicorn wled_controller.main:app --host 0.0.0.0 --port 8080
 
 pause
 LAUNCHER
@@ -264,6 +324,64 @@ LAUNCHER
 # Convert launcher to Windows line endings
 sed -i 's/$/\r/' "$DIST_DIR/LedGrab.bat"
 
+# ── Create autostart scripts ─────────────────────────────────
+
+cat > "$DIST_DIR/install-autostart.bat" << 'AUTOSTART'
+@echo off
+:: Install LedGrab to start automatically on Windows login
+:: Creates a shortcut in the Startup folder
+
+set SHORTCUT_NAME=LedGrab
+set STARTUP_DIR=%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup
+set TARGET=%~dp0LedGrab.bat
+set SHORTCUT=%STARTUP_DIR%\%SHORTCUT_NAME%.lnk
+
+echo Installing LedGrab autostart...
+
+:: Use PowerShell to create a proper shortcut
+powershell -NoProfile -Command ^
+  "$ws = New-Object -ComObject WScript.Shell; ^
+   $sc = $ws.CreateShortcut('%SHORTCUT%'); ^
+   $sc.TargetPath = '%TARGET%'; ^
+   $sc.WorkingDirectory = '%~dp0'; ^
+   $sc.WindowStyle = 7; ^
+   $sc.Description = 'LedGrab ambient lighting server'; ^
+   $sc.Save()"
+
+if exist "%SHORTCUT%" (
+    echo.
+    echo  [OK] LedGrab will start automatically on login.
+    echo  Shortcut: %SHORTCUT%
+    echo.
+    echo  To remove: run uninstall-autostart.bat
+) else (
+    echo.
+    echo  [ERROR] Failed to create shortcut.
+)
+
+pause
+AUTOSTART
+sed -i 's/$/\r/' "$DIST_DIR/install-autostart.bat"
+
+cat > "$DIST_DIR/uninstall-autostart.bat" << 'UNAUTOSTART'
+@echo off
+:: Remove LedGrab from Windows startup
+
+set SHORTCUT=%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\LedGrab.lnk
+
+if exist "%SHORTCUT%" (
+    del "%SHORTCUT%"
+    echo.
+    echo  [OK] LedGrab autostart removed.
+) else (
+    echo.
+    echo  LedGrab autostart was not installed.
+)
+
+pause
+UNAUTOSTART
+sed -i 's/$/\r/' "$DIST_DIR/uninstall-autostart.bat"
+
 # ── Create ZIP ───────────────────────────────────────────────
 
 ZIP_PATH="$BUILD_DIR/$ZIP_NAME"

build-dist.sh

@@ -103,20 +103,100 @@ export WLED_CONFIG_PATH="$SCRIPT_DIR/app/config/default_config.yaml"
 
 mkdir -p "$SCRIPT_DIR/data" "$SCRIPT_DIR/logs"
 
-echo ""
-echo "  ============================================="
-echo "   LedGrab vVERSION_PLACEHOLDER"
-echo "   Open http://localhost:8080 in your browser"
-echo "  ============================================="
-echo ""
-
 source "$SCRIPT_DIR/venv/bin/activate"
-exec python -m uvicorn wled_controller.main:app --host 0.0.0.0 --port 8080
+exec python -m wled_controller.main
 LAUNCHER
 
 sed -i "s/VERSION_PLACEHOLDER/${VERSION_CLEAN}/" "$DIST_DIR/run.sh"
 chmod +x "$DIST_DIR/run.sh"
 
+# ── Create autostart scripts ─────────────────────────────────
+
+cat > "$DIST_DIR/install-service.sh" << 'SERVICE_INSTALL'
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
+SERVICE_NAME="ledgrab"
+SERVICE_FILE="/etc/systemd/system/${SERVICE_NAME}.service"
+RUN_SCRIPT="$SCRIPT_DIR/run.sh"
+CURRENT_USER="$(whoami)"
+
+if [ "$EUID" -ne 0 ] && [ "$CURRENT_USER" != "root" ]; then
+    echo "This script requires root privileges. Re-running with sudo..."
+    exec sudo "$0" "$@"
+fi
+
+# Resolve the actual user (not root) when run via sudo
+ACTUAL_USER="${SUDO_USER:-$CURRENT_USER}"
+ACTUAL_HOME=$(eval echo "~$ACTUAL_USER")
+
+echo "Installing LedGrab systemd service..."
+
+cat > "$SERVICE_FILE" << EOF
+[Unit]
+Description=LedGrab ambient lighting server
+After=network.target
+
+[Service]
+Type=simple
+User=$ACTUAL_USER
+WorkingDirectory=$SCRIPT_DIR
+ExecStart=$RUN_SCRIPT
+Restart=on-failure
+RestartSec=5
+Environment=HOME=$ACTUAL_HOME
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+systemctl daemon-reload
+systemctl enable "$SERVICE_NAME"
+systemctl start "$SERVICE_NAME"
+
+echo ""
+echo "  [OK] LedGrab service installed and started."
+echo ""
+echo "  Commands:"
+echo "    sudo systemctl status $SERVICE_NAME    # Check status"
+echo "    sudo systemctl stop $SERVICE_NAME      # Stop"
+echo "    sudo systemctl restart $SERVICE_NAME   # Restart"
+echo "    sudo journalctl -u $SERVICE_NAME -f    # View logs"
+echo ""
+echo "  To remove: run ./uninstall-service.sh"
+SERVICE_INSTALL
+chmod +x "$DIST_DIR/install-service.sh"
+
+cat > "$DIST_DIR/uninstall-service.sh" << 'SERVICE_UNINSTALL'
+#!/usr/bin/env bash
+set -euo pipefail
+
+SERVICE_NAME="ledgrab"
+SERVICE_FILE="/etc/systemd/system/${SERVICE_NAME}.service"
+
+if [ "$EUID" -ne 0 ] && [ "$(whoami)" != "root" ]; then
+    echo "This script requires root privileges. Re-running with sudo..."
+    exec sudo "$0" "$@"
+fi
+
+if [ ! -f "$SERVICE_FILE" ]; then
+    echo "LedGrab service is not installed."
+    exit 0
+fi
+
+echo "Removing LedGrab systemd service..."
+
+systemctl stop "$SERVICE_NAME" 2>/dev/null || true
+systemctl disable "$SERVICE_NAME" 2>/dev/null || true
+rm -f "$SERVICE_FILE"
+systemctl daemon-reload
+
+echo ""
+echo "  [OK] LedGrab service removed."
+SERVICE_UNINSTALL
+chmod +x "$DIST_DIR/uninstall-service.sh"
+
 # ── Create tarball ───────────────────────────────────────────
 
 echo "[7/7] Creating $TAR_NAME..."

server/src/wled_controller/core/capture/screen_overlay.py

@@ -278,7 +278,12 @@ class OverlayManager:
 
     def _start_tk_thread(self) -> None:
         def _run():
-            import tkinter as tk  # lazy import — tkinter unavailable in headless CI
+            try:
+                import tkinter as tk  # lazy import — tkinter unavailable in embedded Python / headless CI
+            except ImportError:
+                logger.warning("tkinter not available — screen overlay disabled")
+                self._tk_ready.set()
+                return
 
             try:
                 self._tk_root = tk.Tk()

server/src/wled_controller/main.py

@@ -98,6 +98,10 @@ async def lifespan(app: FastAPI):
     logger.info(f"Starting LED Grab v{__version__}")
     logger.info(f"Python version: {sys.version}")
     logger.info(f"Server listening on {config.server.host}:{config.server.port}")
+    print(f"\n  =============================================")
+    print(f"   LED Grab v{__version__}")
+    print(f"   Open http://localhost:{config.server.port} in your browser")
+    print(f"  =============================================\n")
 
     # Validate authentication configuration
     if not config.auth.api_keys: