fix: poll checkSetup every 4s independently of QR render

public/app.js

@@ -252,7 +252,6 @@ async function fetchAndRenderQR() {
         correctLevel: QRCode.CorrectLevel.M,
       });
       qrRendered = true;
-      checkSetup(); // show one-time setup panel if secrets not yet saved
       return;
     } catch (err) {
       console.warn('fetchAndRenderQR attempt', i, err);
@@ -301,28 +300,36 @@ async function authFetch(url, method = 'GET') {
 }
 
 /* ── First-time setup panel ──────────────────────────────────────────────── */
-const setupCard = $('setup-card');
+const setupCard  = $('setup-card');
+let setupDone    = false;  // true once panel is shown OR secrets are already seeded
 
 async function checkSetup() {
+  if (setupDone || !token) return;
   try {
     const r1 = await authFetch('/api/setup-status');
     if (!r1 || !r1.ok) return;
     const { seeded } = await r1.json();
-    if (seeded) return; // secrets already saved — nothing to show
+    if (seeded) { setupDone = true; return; } // secrets already saved
 
-    // Secrets not yet saved — fetch credentials and show the panel
+    // Try to read credentials (shellular must have registered first)
     const r2 = await authFetch('/api/shellular/credentials');
-    if (!r2 || !r2.ok) return;
-    const { hostId, machineId, keyB64 } = await r2.json();
-    if (!hostId) return;
-
-    $('val-host-id').textContent   = hostId;
-    $('val-machine-id').textContent = machineId;
-    $('val-key').textContent       = keyB64;
+    if (!r2 || !r2.ok) return; // not ready yet — poll will retry
+    const data = await r2.json();
+    if (!data.hostId) return;
+
+    // Populate and show the panel
+    $('val-host-id').textContent    = data.hostId;
+    $('val-machine-id').textContent = data.machineId;
+    $('val-key').textContent        = data.keyB64;
     setupCard.classList.remove('hidden');
-  } catch { /* silent */ }
+    setupDone = true;
+  } catch { /* retry on next poll */ }
 }
 
+// Poll every 4 s so the panel appears as soon as credentials are available,
+// regardless of whether the QR has rendered yet.
+setInterval(checkSetup, 4000);
+
 // Copy-to-clipboard buttons
 document.addEventListener('click', (e) => {
   const btn = e.target.closest('.btn-copy');