feat: add shell-native message routing

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a03397-4d51-7fd1-8ff2-946eb22ea2bc

tests/test_manual_messaging.py

@@ -1,6 +1,8 @@
 import json
+import shlex
 
 from tamq.cli import main
+from tamq.store import Store
 
 
 async def service_is_down():
@@ -35,3 +37,64 @@ def test_inbox_requires_repository_outside_managed_window(tmp_path, monkeypatch,
     monkeypatch.delenv("TAMQ_REPO", raising=False)
     assert main(["inbox"]) == 2
     assert "requires --repo" in capsys.readouterr().err
+
+
+def test_human_inbox_is_comment_safe_on_every_line(tmp_path, monkeypatch, capsys):
+    monkeypatch.setenv("TAMQ_STATE_DIR", str(tmp_path / "state"))
+    monkeypatch.setattr("tamq.cli.validate_targets", lambda repos: None)
+    store = Store(tmp_path / "state" / "tamq.sqlite3")
+    message_id = store.add("flex-auth", "audit-core", "first\nsecond\x1b[31m")
+    store.close()
+
+    assert main(["inbox", "--repo", "audit-core"]) == 0
+    assert capsys.readouterr().out == (
+        f"#flex-auth: first\n# second\\x1b[31m [{message_id}]\n"
+    )
+
+
+def test_inbox_filter_logs_and_acknowledges_successful_messages(tmp_path, monkeypatch, capsys):
+    monkeypatch.setenv("TAMQ_STATE_DIR", str(tmp_path / "state"))
+    monkeypatch.setattr("tamq.cli.validate_targets", lambda repos: None)
+    store = Store(tmp_path / "state" / "tamq.sqlite3")
+    first_id = store.add("flex-auth", "audit-core", "review 'quoted' $value")
+    second_id = store.add("railiance-platform", "audit-core", "second")
+    store.close()
+    log = tmp_path / "messages.log"
+
+    assert main([
+        "inbox", "--repo", "audit-core", "--filter",
+        f"cat >> {shlex.quote(str(log))}",
+    ]) == 0
+    assert log.read_text(encoding="utf-8") == (
+        f"#flex-auth: review 'quoted' $value [{first_id}]\n"
+        f"#railiance-platform: second [{second_id}]\n"
+    )
+    assert main(["inbox", "--repo", "audit-core"]) == 0
+    assert capsys.readouterr().out == ""
+
+
+def test_failed_inbox_filter_leaves_current_and_later_messages_pending(tmp_path, monkeypatch, capsys):
+    monkeypatch.setenv("TAMQ_STATE_DIR", str(tmp_path / "state"))
+    monkeypatch.setattr("tamq.cli.validate_targets", lambda repos: None)
+    store = Store(tmp_path / "state" / "tamq.sqlite3")
+    first_id = store.add("a", "audit-core", "first")
+    second_id = store.add("b", "audit-core", "second")
+    store.close()
+
+    assert main(["inbox", "--repo", "audit-core", "--filter", "false"]) == 1
+    assert first_id in capsys.readouterr().err
+    assert main(["inbox", "--repo", "audit-core", "--json"]) == 0
+    rows = [json.loads(line) for line in capsys.readouterr().out.splitlines()]
+    assert [row["message_id"] for row in rows] == [first_id, second_id]
+    assert all(row["state"] == "pending" for row in rows)
+
+
+def test_inbox_filter_rejects_non_pending_and_json_modes(tmp_path, monkeypatch, capsys):
+    monkeypatch.setenv("TAMQ_STATE_DIR", str(tmp_path / "state"))
+    monkeypatch.setattr("tamq.cli.validate_targets", lambda repos: None)
+    assert main(["inbox", "--repo", "audit-core", "--all", "--filter", "cat"]) == 2
+    assert "cannot be combined" in capsys.readouterr().err
+    assert main(["inbox", "--repo", "audit-core", "--json", "--filter", "cat"]) == 2
+    assert "cannot be combined" in capsys.readouterr().err
+    assert main(["inbox", "--repo", "audit-core", "--filter", "  "]) == 2
+    assert "must not be empty" in capsys.readouterr().err