fix: harden identity, live access, drafts and setup (review only)

Source-reviewed hardening changes and regression tests. UNBUILT / UNTESTED: not a deployable release. Go formatting, compilation, automated regression tests, full frontend validation and staging acceptance remain required. See docs/hardening/VALIDATION.md. Main remains the original clean snapshot; no upstream Git history imported.

internal/pkg/dto/response/setup_readiness_resp.go

@@ -1,3 +1,4 @@
+// Modified in AgentDeskFixes: safe, reviewed setup repairs and honest routing diagnostics.
 package response
 
 type SetupIssueItem struct {
@@ -92,7 +93,20 @@ type SetupSimulateRouteResponse struct {
 	CandidateOperators []SimulatedOperatorCandidate `json:"candidate_operators"`
 }
 
-type SetupQuickFixResponse struct {
-	AppliedActions []string               `json:"applied_actions"`
-	Readiness      SetupReadinessResponse `json:"readiness"`
+type SetupQuickFixChange struct {
+ EntityType string `json:"entity_type"`
+ EntityID int64 `json:"entity_id"`
+ EntityName string `json:"entity_name"`
+ Operation string `json:"operation"`
+ Before map[string]any `json:"before"`
+ After map[string]any `json:"after"`
+}
+
+type SetupQuickFixResponse struct {
+ Applied bool `json:"applied"`
+ PreviewToken string `json:"preview_token"`
+ Changes []SetupQuickFixChange `json:"changes"`
+ WarningCodes []string `json:"warning_codes"`
+ AppliedActions []string `json:"applied_actions"`
+ Readiness *SetupReadinessResponse `json:"readiness,omitempty"`
 }