ci: verify Telegram successor from preserved reviewed source

Author: twoimo

.github/workflows/repair-telegram-successor.yml

@@ -12,31 +12,44 @@ jobs:
   repair:
     if: github.event.pull_request.head.repo.full_name == github.repository && github.event.pull_request.head.ref == 'successor/telegram-tool-activity-clean'
     runs-on: ubuntu-22.04
-    timeout-minutes: 60
+    timeout-minutes: 90
     steps:
       - uses: actions/checkout@v4
         with:
           ref: successor/telegram-tool-activity-clean
           fetch-depth: 0
           token: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Check one-shot trigger
+        id: gate
+        shell: bash
+        run: |
+          if [[ -f .github/trigger/verify-telegram-successor ]]; then
+            echo "run=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "run=false" >> "$GITHUB_OUTPUT"
+          fi
+
       - name: Rebuild reviewed net diff on current upstream dev
         id: apply
+        if: steps.gate.outputs.run == 'true'
         continue-on-error: true
         shell: bash
         run: |
           git config user.name 'twoimo'
           git config user.email '32544727+twoimo@users.noreply.github.com'
           git remote add upstream https://github.com/Yeachan-Heo/gajae-code.git || true
           git fetch --no-tags upstream dev
-          git fetch --no-tags origin successor/telegram-tool-activity-clean
-          SOURCE=origin/successor/telegram-tool-activity-clean
+          git fetch --no-tags origin backup/telegram-successor-76e205bc
+          SOURCE=origin/backup/telegram-successor-76e205bc
           BASE=10a32cfdbe971799581533a0e583fdf77e4c7d2c
-          git diff --binary "$BASE".."$SOURCE" -- . ':(exclude).github/workflows/telegram-successor-sync.yml' > /tmp/telegram-successor.patch
+          git diff --binary "$BASE".."$SOURCE" -- . \
+            ':(exclude).github/workflows/telegram-successor-sync.yml' \
+            > /tmp/telegram-successor.patch
           git reset --hard upstream/dev
           if ! git apply --3way --index /tmp/telegram-successor.patch; then
             git diff --name-only --diff-filter=U | sort > /tmp/telegram-conflicts.txt
-            if [ "$(cat /tmp/telegram-conflicts.txt)" = "packages/coding-agent/src/sdk/bus/index.ts" ]; then
+            if [[ "$(cat /tmp/telegram-conflicts.txt)" == "packages/coding-agent/src/sdk/bus/index.ts" ]]; then
               python3 - <<'PY'
           from pathlib import Path
           path = Path('packages/coding-agent/src/sdk/bus/index.ts')
@@ -71,7 +84,7 @@ jobs:
           fi
 
       - name: Report application conflicts
-        if: steps.apply.outcome == 'failure'
+        if: steps.gate.outputs.run == 'true' && steps.apply.outcome == 'failure'
         uses: actions/github-script@v7
         with:
           script: |
@@ -90,16 +103,19 @@ jobs:
             });
 
       - name: Stop after conflict report
-        if: steps.apply.outcome == 'failure'
+        if: steps.gate.outputs.run == 'true' && steps.apply.outcome == 'failure'
         run: exit 1
 
       - uses: oven-sh/setup-bun@v2
+        if: steps.gate.outputs.run == 'true'
         with:
           bun-version: '1.3.14'
 
-      - name: Install and format
+      - name: Install, build native addon, and format
+        if: steps.gate.outputs.run == 'true'
         run: |
           bun install --frozen-lockfile
+          bun --cwd=packages/natives run build
           bunx biome check --write \
             packages/coding-agent/src/sdk/bus/telegram-daemon.ts \
             packages/coding-agent/src/sdk/bus/index.ts \
@@ -108,9 +124,11 @@ jobs:
           git add -A
 
       - name: Run rejected-terminal regression
+        if: steps.gate.outputs.run == 'true'
         run: bun test --timeout 30000 packages/coding-agent/test/notifications-telegram-daemon.test.ts --test-name-pattern 'terminal submission rejection'
 
       - name: Run Telegram lifecycle boundary
+        if: steps.gate.outputs.run == 'true'
         run: |
           bun test --timeout 30000 \
             packages/coding-agent/test/notifications-telegram-daemon.test.ts \
@@ -122,15 +140,17 @@ jobs:
           bun --cwd=packages/coding-agent run check
 
       - name: Publish verified current-dev successor
+        if: steps.gate.outputs.run == 'true'
         shell: bash
         run: |
-          rm -f .github/workflows/telegram-successor-sync.yml
+          rm -f packages/natives/native/*.node
           git add -A
           git commit -m 'fix(notifications): make Telegram tool activity opt-in'
           git push --force origin HEAD:successor/telegram-tool-activity-clean
           git push --force origin HEAD:verified/telegram-tool-activity-terminal-rejection
 
       - name: Report success
+        if: steps.gate.outputs.run == 'true'
         uses: actions/github-script@v7
         with:
           script: |