Adding the new rewrite

app/templates/setup.html

@@ -0,0 +1,62 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>Setup — UPS Dashboard</title>
+  <link rel="stylesheet" href="/static/css/base.css" />
+  <link rel="stylesheet" href="/static/css/login.css" />
+</head>
+<body class="auth-body">
+  <div class="auth-card wide">
+    <h1>First-run Setup</h1>
+    <p class="muted">Create the admin account. Passwords must be at least 8 characters.</p>
+    <form id="setup-form">
+      <div class="form-field">
+        <label for="username">Admin username</label>
+        <input type="text" id="username" name="username" required minlength="3" autocomplete="username" />
+      </div>
+      <div class="form-field">
+        <label for="password">Password</label>
+        <input type="password" id="password" name="password" required minlength="8" autocomplete="new-password" />
+      </div>
+      <div class="form-field">
+        <label for="password2">Confirm password</label>
+        <input type="password" id="password2" name="password2" required minlength="8" />
+      </div>
+      <button type="submit" class="btn-primary btn-block">Create admin account</button>
+      <div id="setup-error" class="login-error" hidden></div>
+    </form>
+    <p class="muted" style="margin-top:16px;">After setup you'll be redirected to the dashboard. Configure UPS devices and SMTP from the nav.</p>
+  </div>
+  <script>
+    document.getElementById('setup-form').addEventListener('submit', async (e) => {
+      e.preventDefault();
+      const errBox = document.getElementById('setup-error');
+      errBox.hidden = true;
+      const pw = document.getElementById('password').value;
+      const pw2 = document.getElementById('password2').value;
+      if (pw !== pw2) {
+        errBox.textContent = 'Passwords do not match';
+        errBox.hidden = false;
+        return;
+      }
+      const resp = await fetch('/api/setup', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({
+          username: document.getElementById('username').value,
+          password: pw,
+        }),
+      });
+      if (resp.ok) {
+        window.location.href = '/';
+      } else {
+        const err = await resp.json().catch(() => ({}));
+        errBox.textContent = err.detail || 'Setup failed';
+        errBox.hidden = false;
+      }
+    });
+  </script>
+</body>
+</html>