Export Telegram message diagnostics

[hypotyposis]

Summary

• add daemon RPC telegram_diagnostics_export / task_telegram_diagnostics_export
• join Telegram subscriber message-diagnostics.ndjson rows with workflow_history monitor runs by dedup_key
• write a Downloads JSON report with message/receive time, subscriber receipt/filter status, and Trust AI/triage outcome

Verification

• cargo test -p puffer-cli telegram_diagnostics_export_writes_downloadable_message_observability_report -- --nocapture
• rustfmt --edition 2021 --check crates/puffer-cli/src/daemon_workflows/telegram_diagnostics.rs
• rustfmt --edition 2021 --config skip_children=true --check crates/puffer-cli/src/daemon_workflows.rs
• rustfmt --edition 2021 --check crates/puffer-cli/src/daemon.rs
• git diff --check

Note: cargo fmt --package puffer-cli -- --check still reports pre-existing formatting drift in unrelated puffer files such as daemon_browser/wechat modules; the touched files above are rustfmt-clean.

[vercel]

@zooey-sys is attempting to deploy a commit to the fuzzland Team on Vercel.

A member of the Team first needs to authorize it.

[zooey-sys]

LGTM. Verified the diagnostics export against the requested observability:

• Join: subscriber message-diagnostics.ndjson (and rotated .1) joined with workflow_history.json by chat_id:message_id; scalar_to_string normalizes number/string keys so the two sources correlate.
• Coverage: report exposes subscriber (received/stage/times), filter (filtered + stage + summary), and trust_ai (entered + result + usage), plus message/received timestamps — matching the requested observation points (subscriber received? filtered? entered Trust AI + result).
• Robustness: missing workflow_history.json resolves to empty default (history.rs), so the key "no task created / no triage" case still exports; multi-account traversal; limit clamp [1, 2000]; unique_report_path avoids same-ms overwrites.
• Privacy: sanitize_message_record recursively redacts any nested text key (-> text_redacted) in embedded trigger_info; the top-level text_prefix fallback is snippet-capped via message_snippet; a privacy_note is included. Full message text is not exported; short snippets remain only to correlate which message a row describes. The unit test covers .1 rotation and asserts the full private trigger text is absent from the export.