feat: add shell-native message routing

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a03397-4d51-7fd1-8ff2-946eb22ea2bc

SCOPE.md

@@ -16,7 +16,9 @@ tamq does not choose or infer them.
 - Local SQLite message history, leases, endpoint registrations, delivery state,
   acknowledgements, replay, export, and bounded purging.
 - Managed neutral-shell tmux lifecycle and explicit initial commands.
-- Durable manual send/inbox/acknowledgement with per-window repository identity.
+- Durable manual send/inbox/acknowledgement with per-window repository identity,
+  shell-native address commands, comment-safe display, and explicit pull-time
+  filters.
 - Explicit opt-in control-mode pane delivery and the full-duplex `tamq tap` PTY
   broker for integration experiments.
 - Exact `gita` repository validation and direct `@repo: message` routing.
@@ -44,11 +46,11 @@ transport.
 
 | Intent capability | State | Evidence and remaining gap |
 | --- | --- | --- |
-| Direct repository addressing | Implemented | Exact `gita` validation and `@repo:` parsing are covered by tests. |
+| Direct repository addressing | Implemented for local alpha | Exact `gita` validation, per-session `@repo`/`@repo:` executable commands, and long-form parsing are covered without modifying shell configuration. |
 | Durable, inspectable local queue | Implemented | SQLite history, manual inbox, leases, endpoint records, inspect/history, JSONL export/replay, acknowledgement, and purge are present. |
 | Local socket service | Implemented | Peer-credential checks and structured ping/register/send/history/ack/endpoints/disconnect operations are tested. |
 | Neutral tmux session lifecycle | Implemented for local alpha | Repository-first startup opens untouched shells at exact gita paths, exports per-window identity, and runs no initial command unless `--command` is explicit. Stable reuse, service restart, and cleanup are covered by the installed-package test. |
-| Safe manual messaging | Implemented for local alpha | Manual endpoints never inject pending messages into panes. Installed testing proves send/inbox/ack exchange while the target pane remains unchanged; legacy rows migrate to manual mode. |
+| Safe manual messaging | Implemented for local alpha | Manual endpoints never inject pending messages into panes. Installed testing proves shell-native send, comment-safe inbox, explicit filter/ack exchange, and an unchanged target pane; legacy rows migrate to manual mode. |
 | Full-duplex input observation | Explicit opt-in | `--tap --command ...` enables the PTY integration path. It is absent from neutral startup and remains covered for geometry, resize, raw mouse input, and lifecycle behavior. |
 | Bounded retry behavior | Not enforced | Failed injection remains pending and becomes claimable after lease expiry, but no attempt counter or terminal failure state applies the configured cap. |
 | Acknowledgement policy | Partially implemented | Explicit acknowledgement and the configuration field exist; delivery always marks a successful tmux injection as `injected`, irrespective of `delivery_ack_mode`. |
@@ -59,16 +61,17 @@ transport.
 The terminal-neutral alpha path was exercised successfully on 2026-08-24 with
 an isolated installed tool. Repository-first startup created two ordinary
 shells at exact gita paths without sending initial keystrokes. The test proved
-per-window repository identity, stable reuse, manual send/inbox/ack exchange,
-zero target-pane mutation, service restart, endpoint disappearance, explicit
-initial-command startup, and cleanup.
+per-window repository identity, stable reuse, shell-native addressing,
+comment-safe inbox/filter/ack exchange, zero target-pane mutation, service
+restart, endpoint disappearance, explicit initial-command startup, and cleanup.
 
 Suitable today:
 
 - Local queue, history, export/replay, and diagnostic use.
 - Interactive local shell or explicitly commanded sessions over one or more
   gita-registered repositories.
-- Durable manual message exchange between managed repository windows.
+- Durable manual message exchange between managed repository windows, including
+  explicit pull-time loggers and filters.
 - Developing and testing the future coordination-engine adapter against the
   local socket boundary.
 
@@ -80,7 +83,7 @@ Not yet suitable:
   and stronger process-supervision evidence.
 - Cross-host messaging or use as a general-purpose broker.
 
-The suite currently has 77 passing tests and 74% statement coverage. Coverage
+The suite currently has 85 passing tests and 75% statement coverage. Coverage
 is strongest in durable storage and registry handling, and weakest in the PTY
 tap and CLI orchestration; PTY statement coverage increased from 23% to 33%,
 while subprocess behavior is primarily proven by the real-tmux test. The