fix: harden identity, live access, drafts and setup (review only)

Source-reviewed hardening changes and regression tests. UNBUILT / UNTESTED: not a deployable release. Go formatting, compilation, automated regression tests, full frontend validation and staging acceptance remain required. See docs/hardening/VALIDATION.md. Main remains the original clean snapshot; no upstream Git history imported.

web/messages/en-US.json

@@ -583,7 +583,12 @@
     "startFirstRequest": "Start your first request",
     "openRequestCount": "{open} open of {total}",
     "loadConversationsFailed": "Could not load your requests",
-    "createConversationFailed": "Could not create the request"
+    "createConversationFailed": "Could not create the request",
+    "dismissedTitle": "Chat window closed",
+    "dismissedDescription": "Your support request has not been ended. You can return to continue the conversation.",
+    "returnToChat": "Return to chat",
+    "sendUnavailable": "This conversation is unavailable. Return to it or retry before sending.",
+    "sendInProgress": "A message is already being sent."
   },
   "dashboardHome": {
     "rangeToday": "Today",
@@ -3370,8 +3375,8 @@
     "statusReady": "Ready to Receive Requests",
     "statusNeedsSetup": "Setup Incomplete ({ready}/{total} steps ready)",
     "stepsProgress": "{ready} of {total} steps ready",
-    "quickSetupAll": "Configure Everything in 1 Click",
-    "quickSetupRunning": "Applying setup...",
+    "quickSetupAll": "Review missing defaults",
+    "quickSetupRunning": "Preparing preview...",
     "quickFixSuccess": "Configuration updated and routing re-checked",
     "refresh": "Re-check Readiness",
     "openSettings": "Open Settings",
@@ -3433,7 +3438,9 @@
       "channel_no_agent": "Channel is not connected to an AI agent.",
       "channel_agent_disabled": "Channel points to a disabled or missing AI agent.",
       "channel_zero_rollout": "Channel has a 0% AI agent rollout rate.",
-      "no_end_to_end_path": "No channel can successfully route to an available human operator right now."
+      "no_end_to_end_path": "No channel can successfully route to an available human operator right now.",
+      "agent_unpublished": "The agent has no published revision. Publish it in agent settings before using it for a channel.",
+      "channel_agent_unpublished": "The channel points to an unpublished agent. Publish the agent or deliberately choose a published one."
     },
     "operatorBlockers": {
       "not_authenticated": "You are not signed in.",
@@ -3446,22 +3453,22 @@
       "at_capacity": "You have reached your maximum active conversation limit."
     },
     "quickFixLabels": {
-      "quick_setup_all": "Configure Everything in 1 Click",
-      "ensure_team_and_schedule": "Create/Enable Team & 24/7 Schedule",
+      "quick_setup_all": "Review missing defaults",
+      "ensure_team_and_schedule": "Review team setup",
       "enable_my_operator_profile": "Enable My Reception & Set Idle",
       "fix_ai_agent_handoff": "Fix AI Agent Handoff & Bind Teams",
       "ensure_default_channel": "Create/Fix Default Web Channel"
     },
     "simulator": {
       "title": "Operator Route Simulator",
-      "description": "Simulate what happens when a customer sends a message on a channel and see every decision hop in real time.",
+      "description": "Read-only check of current human-only routing eligibility. AI behavior and partial rollout are not simulated, and no message is sent.",
       "selectChannelPlaceholder": "Select a channel to simulate...",
       "runSimulation": "Simulate Dispatch",
       "running": "Simulating...",
-      "outcomeSuccess": "Request WILL reach operator: {operator}",
-      "outcomeBlocked": "Request WILL NOT reach an operator",
+      "outcomeSuccess": "Eligible operator now: {operator}",
+      "outcomeBlocked": "Operator delivery not confirmed",
       "outcomes": {
-        "assigned_to_operator": "Success: The conversation is assigned to an idle operator.",
+        "assigned_to_operator": "Human-only routing currently has an eligible operator. This is a read-only check, not a delivery guarantee.",
         "blocked_no_channel": "Blocked: No channels exist or the requested channel was not found.",
         "blocked_channel_disabled": "Blocked: This channel is disabled.",
         "blocked_zero_rollout": "Blocked: Channel AI agent rollout rate is set to 0%.",
@@ -3469,7 +3476,10 @@
         "blocked_ai_only_mode": "Blocked: AI agent is set to AI-Only mode and never hands off to human operators.",
         "blocked_agent_no_teams": "Blocked: AI agent has no valid operator teams assigned for handoff.",
         "queued_off_hours_no_schedule": "Queued: Target teams have no active shift schedule right now (Off-Hours).",
-        "queued_no_eligible_operator": "Queued: Shift is active, but no idle operators with available capacity are online."
+        "queued_no_eligible_operator": "Queued: Shift is active, but no idle operators with available capacity are online.",
+        "ai_execution_not_simulated": "AI behavior is not simulated; operator delivery is unverified.",
+        "partial_rollout_not_simulated": "Partial rollout is not simulated; operator delivery is unverified.",
+        "blocked_agent_unpublished": "Operator routing is not verified for an unpublished agent. Publish the agent first."
       },
       "hops": {
         "channel": "Channel",
@@ -3491,7 +3501,10 @@
         "blocked_agent_no_teams": "No active teams assigned to this agent",
         "queued_off_hours_no_schedule": "No active shift schedule covers the current time (Off-Hours)",
         "queued_no_eligible_operator": "No idle operators with available capacity in active teams",
-        "assigned_to_operator": "Assigned to eligible operator"
+        "assigned_to_operator": "Assigned to eligible operator",
+        "ai_execution_not_simulated": "AI behavior is not simulated; operator delivery is unverified.",
+        "partial_rollout_not_simulated": "Partial rollout is not simulated; operator delivery is unverified.",
+        "blocked_agent_unpublished": "Operator routing is not verified for an unpublished agent. Publish the agent first."
       },
       "candidateTableTitle": "Evaluated Operator Candidates",
       "colOperator": "Operator",
@@ -3520,6 +3533,53 @@
     "headerIndicator": {
       "readyLabel": "Ready for Chats",
       "blockedLabel": "Routing Blocked ({count})"
+    },
+    "preview": {
+      "review": "Review setup changes",
+      "title": "Review exact changes before applying",
+      "description": "Only the named records and fields below will change. No shifts are added. Unlisted configurations and rollout percentages remain unchanged. Applying may dispatch pending conversations after the changes commit.",
+      "noChanges": "No safe automatic changes are available. Use the relevant settings to choose a team, route or working hours.",
+      "apply": "Apply reviewed changes",
+      "create": "Create",
+      "update": "Update",
+      "notApplied": "The reviewed changes were not applied.",
+      "manageSchedules": "Manage explicit working hours"
+    },
+    "repairFields": {
+      "name": "Name",
+      "leader_user_id": "Team leader ID",
+      "status": "Enabled status (0 enabled, 1 disabled)",
+      "user_id": "User ID",
+      "team_id": "Team ID / new team name",
+      "team_ids": "Routing teams",
+      "service_status": "Availability (0 idle, 1 busy)",
+      "auto_assign_enabled": "Automatic assignment",
+      "max_concurrent_count": "Concurrent conversation limit",
+      "priority_level": "Assignment priority",
+      "receive_offline_message": "Receive offline messages",
+      "service_mode": "Service mode (1 AI only, 2 human only, 3 AI first)",
+      "rollout_percent": "Agent rollout (%)",
+      "handoff_mode": "Handoff mode (2 team queue)",
+      "fallback_mode": "Fallback mode",
+      "auto_handoff_on_failure": "Automatic handoff on failure",
+      "reply_timeout_seconds": "Reply timeout (seconds)",
+      "max_steps": "Maximum AI steps",
+      "channel_id": "Channel identifier",
+      "channel_type": "Channel type",
+      "ai_agent_id": "Agent ID / new agent name",
+      "ai_agent_rollout_percent": "Channel rollout (%)",
+      "config_json": "Channel configuration"
+    },
+    "repairWarnings": {
+      "schedules_unchanged": "Working hours were not changed. Configure shifts explicitly; being off duty is not a setup error.",
+      "active_team_required": "Select or enable a team in team settings before linking new records.",
+      "disabled_configuration_preserved": "The selected configuration is disabled or has zero rollout and was left unchanged.",
+      "agent_team_selection_required": "Choose the agent’s intended teams in agent settings; no teams were added automatically.",
+      "channel_selection_required": "Choose the intended agent and rollout in channel settings. Existing channel routing was preserved.",
+      "existing_configuration_preserved": "Existing configuration was preserved. Review any remaining readiness issues in the relevant settings.",
+      "dispatch_failed": "Changes were saved, but pending conversation dispatch failed. Review the queue; do not reapply the repair.",
+      "readiness_refresh_failed": "The readiness refresh failed. Reload diagnostics to see the current state; committed changes are not rolled back.",
+      "agent_publication_required": "Publish the intended agent in agent settings before creating a channel. Setup does not publish agents or bypass the publication requirement."
     }
   }
 }