v0.280.0: the setup gate (decision 46); R-710 'I changed it' + absent-record window; R-709 password fields off the page; password:N:special generator

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

controller/internal/web/templates/app_info.html

@@ -85,6 +85,20 @@
          onerror="this.style.display='none'">
 </div>
 
+{{- if .SetupGateClosed}}
+<div class="app-info-card" style="margin-top:1rem" id="setup-gate-card">
+    <h3>{{T "app_info.setup_gate_title"}}</h3>
+    <p>{{T "app_info.setup_gate_closed"}}</p>
+    {{- if .SetupGateHasProbe}}
+    <p class="form-hint">{{T "app_info.setup_gate_probe"}}</p>
+    {{- else}}
+    <p class="form-hint">{{T "app_info.setup_gate_button_hint"}}</p>
+    <button type="button" class="btn btn-sm btn-primary" onclick="appPress(this, '/apps/{{.Meta.Slug}}/setup-gate/open')">{{T "app_info.setup_gate_done_btn"}}</button>
+    <span class="form-hint app-press-err" style="display:none;color:var(--red)"></span>
+    {{- end}}
+</div>
+{{- end}}
+
 {{if .DataPathCards}}
 <div class="app-info-card" style="margin-top:1rem">
     <h3>{{T "app_info.hova_tegyem_a_fajlokat"}}</h3>
@@ -222,6 +236,10 @@ function appMigrate(btn,app,label){
         <h3>{{T "app_info.alapertelmezett_belepes"}}</h3>
         <p class="app-info-creds">{{.AppInfo.DefaultCreds}}</p>
         {{if .KnownLoginLine}}<p class="app-info-creds-warn" id="known-login-line">{{.KnownLoginLine}}</p>{{else}}<p class="app-info-creds-warn">{{T "app_info.az_elso_bejelentkezes_utan_azonnal_2"}}</p>{{end}}
+        {{- if and .Stack.Deployed .KnownLoginLine}}
+        <button type="button" class="btn btn-sm btn-outline" onclick="appPress(this, '/apps/{{.Meta.Slug}}/default-login/changed')">{{T "app_info.default_login_changed_btn"}}</button>
+        <span class="form-hint app-press-err" style="display:none;color:var(--red)"></span>
+        {{- end}}
     </div>
     {{end}}
 
@@ -288,4 +306,21 @@ function icCopyPw(btn) {
 {{end}}
 
 {{template "layout_end" .}}
+{{- if or .SetupGateClosed (and .Stack.Deployed .KnownLoginLine)}}
+<script>
+// v0.280.0: the household's presses on this page — "Done, I set it up" (decision 46), "I changed it" (R-710).
+function appPress(btn, url) {
+    var err = btn.parentNode.querySelector('.app-press-err');
+    if (err) { err.style.display = 'none'; }
+    btn.disabled = true;
+    fetch(url, {method: 'POST', headers: csrfHeaders(), credentials: 'same-origin'})
+        .then(function (r) { return r.json(); })
+        .then(function (j) {
+            if (!j.ok) { throw new Error(j.error || ''); }
+            window.location.reload();
+        })
+        .catch(function (e) { btn.disabled = false; if (err) { err.textContent = e.message; err.style.display = 'inline'; } });
+}
+</script>
+{{- end}}
 {{end}}