fix(safety): parseAxmeGate strips trailing quote/punct from pr/repo (B-008)

[George-iam]

Summary

Fixes B-008: when the agent placed #!axme pr=N repo=OWNER/REPO inside a git commit -m "..." quoted string, the safety hook fail-closed on every retry with Cannot verify PR #N status (gh CLI error). The greedy \S+ regex captured the closing " as part of the repo name, then gh pr view rejected the malformed value and the hook treated it as a network error.

Discovered live during axme-blog PR #6 work — the agent (me) burned ~6 retry cycles before realising the regex, not the network, was eating the call.

Root cause

src/storage/safety.ts:341-344 — \S+ matched anything non-whitespace including ", ', `. So:

git commit -m "fix #!axme pr=6 repo=AxmeAI/axme-blog"

→ repo = "AxmeAI/axme-blog\"" (quote glued on) → gh pr view 6 --repo "AxmeAI/axme-blog\"" ... → gh rejects → execSync throws → checkAxmeGate returns fail-closed verdict (correct safety behavior, wrong root cause).

Fix

src/storage/safety.ts:

• Tighten value capture from \S+ to [^\s"']+for bothpr=andrepo=` so quote/backtick characters never end up inside the captured value.
• Defensively strip trailing ), ], ,, ;, . after capture (covers $(...) expansions, comment lists, other shell punctuation).
• Reject parses where stripping leaves an empty value (returns null instead of building a bad lookup).
• AXME_GATE_INSTRUCTION now reminds the agent to put the marker AFTER the closing " of -m "...", not inside it.

test/axme-gate.test.ts:

• B-008 reproducer: marker placed inside -m "..." parses cleanly.
• Same for '...' and `...`.
• Trailing ) and , from $(...) / comment list also stripped.
• pr=" alone (nothing left after strip) returns null instead of constructing a bad gate.

Verification

• npm test — 489/489 pass (5 new cases; previous baseline 484)
• npx tsc --noEmit — clean
• npm run build — clean

Test plan

• Existing gate tests still pass (no regression on the LAST-marker-wins, HEREDOC, or live gh checks)
• Manual: in a follow-up agent session, place #!axme inside -m "..." and confirm hook no longer blocks (slated for v0.5.0 release smoke test)

Fixes B-008.

🤖 Generated with Claude Code