Backend:
- GET /api/setup/status — public, returns { needsSetup: boolean }
- POST /api/setup — authenticated, marks staff as super user and
sets business name in a transaction; returns 409 if super user exists
- Setup router registered before auth middleware (GET public, POST protected)
Frontend:
- SetupWizard multi-step page (welcome, business name, super user info,
second admin info, done)
- needsSetup check after auth: authenticated user with no super user
redirects to /setup
- BrandingContext refresh after completing wizard
Co-Authored-By: Paperclip <noreply@paperclip.ing>
groombook-ci[bot]
a547931f9b