fix(cli): Keep regex values intact after a closing paren or quote

Upstream allows a filter to follow ) or a quote with no space, so the
preserved-segment check now accepts those too.

Refs LOGS-1031
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: JoshuaKGoldberg

packages/cli/src/lib/search-query.ts

@@ -503,7 +503,7 @@ export const SEARCH_SYNTAX_REFERENCE = {
     wildcard: "* in values (e.g., message:*timeout*)",
     inList: "key:[val1,val2] — matches any value in the list",
     regex:
-      "key://pattern// (logs only, string attributes) — RE2, unanchored, case-sensitive ((?i) to ignore case), max 64 chars, never quoted; ends at the first // followed by whitespace, ) or end of query; negate with !key://pattern//",
+      "key://pattern// (logs only, string and array attributes) — RE2, unanchored, case-sensitive ((?i) to ignore case), max 64 chars, never quoted; ends at the first // followed by whitespace, ) or end of query; negate with !key://pattern//",
   },
   filterTypes: [
     "text (key:value)",
@@ -572,7 +572,7 @@ const PROJECT_NUMERIC_LIST_RE = /(^|\s)(!?)project:\[(\d+(?:\s*,\s*\d+)*)\]/gi;
  */
 const REGEX_FILTER_KEY_SOURCE = String.raw`(?:(?:tags|flags)\[[\w.:-]+(?: *, *(?:string|number|boolean|array))?\]|"[\w.:-]+"|[\w.[\]-]+)(?:\[\*\])?`;
 const PRESERVED_SEGMENT_RE = new RegExp(
-  String.raw`"(?:[^"\\]|\\.)*"|(?<=(?:^|[\s(])!?${REGEX_FILTER_KEY_SOURCE}:)\/\/(?:(?!\/\/(?:[\t\n )]|$))[^\n])+\/\/(?=[\t\n )]|$)`,
+  String.raw`"(?:[^"\\]|\\.)*"|(?<=(?:^|[\s()"])!?${REGEX_FILTER_KEY_SOURCE}:)\/\/(?:(?!\/\/(?:[\t\n )]|$))[^\n])+\/\/(?=[\t\n )]|$)`,
   "g"
 );
 

packages/cli/test/lib/search-query.test.ts

@@ -506,6 +506,12 @@ describe("sanitizeQuery: regex filters", () => {
     ).toBe("arr[*]://a OR [b,]// tags[k,array][*]://a OR b//");
   });
 
+  test("passes through a regex right after a closing paren or quote", () => {
+    expect(
+      sanitizeQuery('(level:x)message://[a,]// "foo"message://[b,]//')
+    ).toBe('(level:x)message://[a,]// "foo"message://[b,]//');
+  });
+
   test("throws for OR between regex filters", () => {
     expect(() => sanitizeQuery("message://a// OR message://b//")).toThrow(
       ValidationError