feat: add shell-native message routing

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a03397-4d51-7fd1-8ff2-946eb22ea2bc

tests/test_tmux_manager.py

@@ -1,10 +1,13 @@
+import os
+import subprocess
+
 from tamq import tmux
 import pytest
 
 
 def test_tmux_manager_builds_tap_windows(tmp_path, monkeypatch):
     calls = []
-    manager = tmux.TmuxManager("tamq-test")
+    manager = tmux.TmuxManager("tamq-test", command_dir=tmp_path / "commands")
     repo_a = tmp_path / "a"
     repo_b = tmp_path / "b"
     repo_a.mkdir()
@@ -42,7 +45,7 @@ def test_tmux_manager_builds_tap_windows(tmp_path, monkeypatch):
 def test_tmux_manager_reuses_session_instance_id(tmp_path, monkeypatch):
     repo = tmp_path / "a"
     repo.mkdir()
-    manager = tmux.TmuxManager("tamq-test")
+    manager = tmux.TmuxManager("tamq-test", command_dir=tmp_path / "commands")
     options = {"@tamq_managed": "1"}
     monkeypatch.setattr(tmux, "validate_targets", lambda repos: None)
     monkeypatch.setattr(tmux, "repository_paths", lambda: {"a": str(repo)})
@@ -74,7 +77,7 @@ def test_tmux_manager_reuses_session_instance_id(tmp_path, monkeypatch):
 def test_preflight_rejects_foreign_session(tmp_path, monkeypatch):
     repo = tmp_path / "a"
     repo.mkdir()
-    manager = tmux.TmuxManager("tamq-test")
+    manager = tmux.TmuxManager("tamq-test", command_dir=tmp_path / "commands")
     monkeypatch.setattr(tmux, "validate_targets", lambda repos: None)
     monkeypatch.setattr(tmux, "repository_paths", lambda: {"a": str(repo)})
     monkeypatch.setattr(tmux.shutil, "which", lambda command: f"/bin/{command}")
@@ -95,7 +98,7 @@ def test_preflight_rejects_foreign_session(tmp_path, monkeypatch):
 
 
 def test_tmux_only_plan_starts_agent_without_tap(tmp_path, monkeypatch):
-    manager = tmux.TmuxManager("tamq-test")
+    manager = tmux.TmuxManager("tamq-test", command_dir=tmp_path / "commands")
     calls = []
     plan = tmux.LaunchPlan(("a",), {"a": str(tmp_path)}, ("codex", "--quiet"))
 
@@ -120,7 +123,8 @@ def test_tmux_only_plan_starts_agent_without_tap(tmp_path, monkeypatch):
 
 
 def test_neutral_plan_starts_shell_without_sending_keystrokes(tmp_path, monkeypatch):
-    manager = tmux.TmuxManager("tamq-test")
+    command_dir = tmp_path / "commands"
+    manager = tmux.TmuxManager("tamq-test", command_dir=command_dir)
     calls = []
     plan = tmux.LaunchPlan(("a", "b"), {"a": str(tmp_path), "b": str(tmp_path)}, ())
 
@@ -145,12 +149,53 @@ def test_neutral_plan_starts_shell_without_sending_keystrokes(tmp_path, monkeypa
     new_window = next(call for call in calls if call and call[0] == "new-window")
     assert "TAMQ_REPO=a" in new_session
     assert "TAMQ_REPO=b" in new_window
+    assert f"PATH={command_dir}{os.pathsep}" in " ".join(new_session)
+    assert f"PATH={command_dir}{os.pathsep}" in " ".join(new_window)
+    assert (command_dir / "@a").is_file()
+    assert (command_dir / "@a:").is_file()
+    assert (command_dir / "@b").is_file()
+    assert (command_dir / "@b:").is_file()
+
+
+def test_address_commands_preserve_message_arguments(tmp_path):
+    command_dir = tmp_path / "commands"
+    manager = tmux.TmuxManager(
+        "tamq-test", tamq_command=("echo",), command_dir=command_dir,
+    )
+    manager._install_address_commands(["audit-core"])
+
+    for name in ("@audit-core", "@audit-core:"):
+        result = subprocess.run(
+            [str(command_dir / name), "Some message!", "$value", "; literal", "--from"],
+            text=True,
+            capture_output=True,
+            check=True,
+        )
+        assert result.stdout == "send -- @audit-core: Some message! $value ; literal --from\n"
+
+
+def test_address_commands_reject_unsafe_repository_names(tmp_path):
+    manager = tmux.TmuxManager("tamq-test", command_dir=tmp_path / "commands")
+    with pytest.raises(tmux.TmuxError, match="cannot be exposed"):
+        manager._install_address_commands(["../outside"])
+
+
+def test_address_commands_do_not_replace_unowned_commands(tmp_path):
+    command_dir = tmp_path / "commands"
+    command_dir.mkdir()
+    existing = command_dir / "@audit-core"
+    existing.write_text("#!/bin/sh\necho mine\n", encoding="utf-8")
+    manager = tmux.TmuxManager("tamq-test", command_dir=command_dir)
+
+    with pytest.raises(tmux.TmuxError, match="refusing to replace"):
+        manager._install_address_commands(["audit-core"])
+    assert existing.read_text(encoding="utf-8") == "#!/bin/sh\necho mine\n"
 
 
 def test_preflight_rejects_missing_agent(tmp_path, monkeypatch):
     repo = tmp_path / "a"
     repo.mkdir()
-    manager = tmux.TmuxManager("tamq-test")
+    manager = tmux.TmuxManager("tamq-test", command_dir=tmp_path / "commands")
     monkeypatch.setattr(tmux, "validate_targets", lambda repos: None)
     monkeypatch.setattr(tmux, "repository_paths", lambda: {"a": str(repo)})
     monkeypatch.setattr(tmux.shutil, "which", lambda command: None if command == "missing-agent" else f"/bin/{command}")
@@ -161,7 +206,7 @@ def test_preflight_rejects_missing_agent(tmp_path, monkeypatch):
 def test_preflight_deduplicates_repositories(tmp_path, monkeypatch):
     repo = tmp_path / "a"
     repo.mkdir()
-    manager = tmux.TmuxManager("tamq-test")
+    manager = tmux.TmuxManager("tamq-test", command_dir=tmp_path / "commands")
     monkeypatch.setattr(tmux, "validate_targets", lambda repos: None)
     monkeypatch.setattr(tmux, "repository_paths", lambda: {"a": str(repo)})
     monkeypatch.setattr(tmux.shutil, "which", lambda command: f"/bin/{command}")