feat(csms): add setup routes and pages for initial user creation

apps/web/app/dashboard/users/page.tsx

@@ -138,9 +138,9 @@ export default function UsersPage() {
                 </Modal.Header>
                 <Modal.Body className="space-y-3">
                   <TextField fullWidth>
-                    <Label className="text-sm font-medium">姓名</Label>
+                    <Label className="text-sm font-medium">显示名称</Label>
                     <Input
-                      placeholder="用户姓名"
+                      placeholder="对外显示的名称"
                       value={createForm.name}
                       onChange={(e) => setCreateForm({ ...createForm, name: e.target.value })}
                     />
@@ -155,10 +155,9 @@ export default function UsersPage() {
                     />
                   </TextField>
                   <TextField fullWidth>
-                    <Label className="text-sm font-medium">用户名（可选）</Label>
+                    <Label className="text-sm font-medium">登录名</Label>
                     <Input
-                      className="font-mono"
-                      placeholder="username"
+                      placeholder="创建账号的登录名"
                       value={createForm.username}
                       onChange={(e) => setCreateForm({ ...createForm, username: e.target.value })}
                     />
@@ -166,8 +165,9 @@ export default function UsersPage() {
                   <TextField fullWidth>
                     <Label className="text-sm font-medium">密码</Label>
                     <Input
+                      autoComplete="new-password"
                       type="password"
-                      placeholder="••••••••"
+                      placeholder="创建账号的密码"
                       value={createForm.password}
                       onChange={(e) => setCreateForm({ ...createForm, password: e.target.value })}
                     />
@@ -223,7 +223,7 @@ export default function UsersPage() {
             <Table.Header>
               <Table.Column isRowHeader>用户</Table.Column>
               <Table.Column>邮箱</Table.Column>
-              <Table.Column>用户名</Table.Column>
+              <Table.Column>登录名</Table.Column>
               <Table.Column>角色</Table.Column>
               <Table.Column>状态</Table.Column>
               <Table.Column>注册时间</Table.Column>
@@ -245,7 +245,7 @@ export default function UsersPage() {
                   <Table.Cell className="font-mono text-sm">{u.username ?? "—"}</Table.Cell>
                   <Table.Cell>
                     <Chip
-                      color={u.role === "admin" ? "success" : "warning"}
+                      color={u.role === "admin" ? "warning" : "success"}
                       size="sm"
                       variant="soft"
                     >
@@ -292,10 +292,9 @@ export default function UsersPage() {
                                   />
                                 </TextField>
                                 <TextField fullWidth>
-                                  <Label className="text-sm font-medium">用户名</Label>
+                                  <Label className="text-sm font-medium">登录名</Label>
                                   <Input
-                                    className="font-mono"
-                                    placeholder="username"
+                                    placeholder="用户登录名"
                                     value={editForm.username}
                                     onChange={(e) =>
                                       setEditForm({ ...editForm, username: e.target.value })

apps/web/app/login/page.tsx

@@ -1,13 +1,15 @@
 "use client";
 
 import { useState } from "react";
-import { useRouter } from "next/navigation";
+import { useRouter, useSearchParams } from "next/navigation";
 import { Alert, Button, Card, CloseButton, Input, Label, TextField } from "@heroui/react";
 import { Thunderbolt } from "@gravity-ui/icons";
 import { authClient } from "@/lib/auth-client";
 
 export default function LoginPage() {
   const router = useRouter();
+  const searchParams = useSearchParams();
+  const justSetup = searchParams.get("setup") === "1";
   const [username, setUsername] = useState("");
   const [password, setPassword] = useState("");
   const [error, setError] = useState("");
@@ -52,6 +54,15 @@ export default function LoginPage() {
       <Card className="w-full max-w-sm">
         <Card.Content>
           <form onSubmit={handleSubmit} className="space-y-4">
+            {justSetup && (
+              <Alert status="success">
+                <Alert.Indicator />
+                <Alert.Content>
+                  <Alert.Title>初始化完成</Alert.Title>
+                  <Alert.Description>根管理员账号已创建，请登录。</Alert.Description>
+                </Alert.Content>
+              </Alert>
+            )}
             <TextField fullWidth>
               <Label className="text-sm font-medium">用户名</Label>
               <Input

apps/web/app/setup/page.tsx

@@ -0,0 +1,157 @@
+"use client";
+
+import { useState } from "react";
+import { useRouter } from "next/navigation";
+import { Alert, Button, Card, CloseButton, Input, Label, TextField } from "@heroui/react";
+import { Thunderbolt } from "@gravity-ui/icons";
+
+const CSMS_URL = process.env.NEXT_PUBLIC_CSMS_URL ?? "http://localhost:3001";
+
+export default function SetupPage() {
+  const router = useRouter();
+  const [form, setForm] = useState({
+    name: "",
+    email: "",
+    username: "",
+    password: "",
+    confirmPassword: "",
+  });
+  const [error, setError] = useState("");
+  const [loading, setLoading] = useState(false);
+
+  const handleChange = (field: keyof typeof form) => (e: React.ChangeEvent<HTMLInputElement>) => {
+    setForm((prev) => ({ ...prev, [field]: e.target.value }));
+  };
+
+  const handleSubmit = async (e: React.FormEvent) => {
+    e.preventDefault();
+    setError("");
+
+    if (form.password !== form.confirmPassword) {
+      setError("两次输入的密码不一致");
+      return;
+    }
+    if (form.password.length < 8) {
+      setError("密码长度至少 8 位");
+      return;
+    }
+
+    setLoading(true);
+    try {
+      const res = await fetch(`${CSMS_URL}/api/setup`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        credentials: "include",
+        body: JSON.stringify({
+          name: form.name,
+          email: form.email,
+          username: form.username,
+          password: form.password,
+        }),
+      });
+
+      if (!res.ok) {
+        const data = await res.json().catch(() => ({}));
+        setError((data as { error?: string }).error ?? "初始化失败，请重试");
+        return;
+      }
+
+      // 初始化成功，跳转登录页
+      router.push("/login?setup=1");
+    } catch {
+      setError("网络错误，请稍后重试");
+    } finally {
+      setLoading(false);
+    }
+  };
+
+  return (
+    <div className="flex min-h-dvh flex-col items-center justify-center bg-background px-4">
+      {/* Brand */}
+      <div className="mb-8 flex flex-col items-center gap-3">
+        <div className="flex size-14 items-center justify-center rounded-2xl bg-accent shadow-lg">
+          <Thunderbolt className="size-7 text-accent-foreground" />
+        </div>
+        <div className="text-center">
+          <h1 className="text-2xl font-bold tracking-tight text-foreground">Helios EVCS</h1>
+          <p className="mt-1 text-sm text-muted">首次启动 · 创建根管理员账号</p>
+        </div>
+      </div>
+
+      <Card className="w-full max-w-sm">
+        <Card.Content>
+          <form onSubmit={handleSubmit} className="space-y-4">
+            <TextField fullWidth>
+              <Label className="text-sm font-medium">显示名称</Label>
+              <Input
+                required
+                autoComplete="name"
+                placeholder="管理员"
+                value={form.name}
+                onChange={handleChange("name")}
+              />
+            </TextField>
+            <TextField fullWidth>
+              <Label className="text-sm font-medium">邮箱</Label>
+              <Input
+                required
+                type="email"
+                autoComplete="email"
+                placeholder="admin@example.com"
+                value={form.email}
+                onChange={handleChange("email")}
+              />
+            </TextField>
+            <TextField fullWidth>
+              <Label className="text-sm font-medium">用户名</Label>
+              <Input
+                required
+                autoComplete="username"
+                placeholder="admin"
+                value={form.username}
+                onChange={handleChange("username")}
+              />
+            </TextField>
+            <TextField fullWidth>
+              <Label className="text-sm font-medium">密码</Label>
+              <Input
+                required
+                type="password"
+                autoComplete="new-password"
+                placeholder="至少 8 位"
+                value={form.password}
+                onChange={handleChange("password")}
+              />
+            </TextField>
+            <TextField fullWidth>
+              <Label className="text-sm font-medium">确认密码</Label>
+              <Input
+                required
+                type="password"
+                autoComplete="new-password"
+                placeholder="再次输入密码"
+                value={form.confirmPassword}
+                onChange={handleChange("confirmPassword")}
+              />
+            </TextField>
+            {error && (
+              <Alert status="danger">
+                <Alert.Indicator />
+                <Alert.Content>
+                  <Alert.Title>初始化失败</Alert.Title>
+                  <Alert.Description>{error}</Alert.Description>
+                </Alert.Content>
+                <CloseButton onPress={() => setError("")} />
+              </Alert>
+            )}
+            <Button className="mt-2 w-full" isDisabled={loading} type="submit">
+              {loading ? "创建中…" : "创建根管理员账号"}
+            </Button>
+          </form>
+        </Card.Content>
+      </Card>
+
+      <p className="mt-6 text-xs text-muted/60">此页面仅在首次启动时可访问</p>
+    </div>
+  );
+}