PR #24698 real dev verification, 2026-10-28, Linux Boat VM
Baseline github/main: 0c80751701
Final head: 0dc37295bea482c11d8642137e127db0e9ec2b87
Client: repo Playwright 1.60.0 -> /usr/bin/google-chrome, real dev web app.
Only synthetic credential strings were used. No git/provider mocks.

$ git worktree add ../main github/main
$ timeout 600 vp i
$ setsid nohup vp run dev > /tmp/main-dev.log 2>&1 &
[dev-runner] serverPort=16733 webPort=8693
Web: Add project -> Git URL -> clone -> failed-clone details.
URL: https://git.example.invalid/octocat/credential-check.git?access_token=demo-token-24698
Main displayed access_token=demo-token-24698 in the error (before.png).
Stopped captured main process group before starting PR server.

Original PR head 6e9c8a6025c32854dc017f20c9063fc93f89f91f:
Plain query token was redacted, but pathless query abc@secret became:
fatal: unable to access 'https://secret/': Could not resolve host: git.example.invalid
Fixed by inserting / before a pathless URL query before invoking git.

Real GitHub redirect with query access_token=s3'cret, before second fix:
warning: redirecting to https://github.com/octocat/Hello-World'cret/ fatal: https://github.com/octocat/Hello-World'cret/info/refs not valid: is this a git repository?
After consuming quotes within unquoted queries:
warning: redirecting to https://github.com/octocat/Hello-World fatal: https://github.com/octocat/Hello-World not valid: is this a git repository?

Before final fix, real GitHub + web client:
fatal: https://github.com/octocat/Hello-World/commits/master/repo's.git?access_token=s3cret/info/refs not valid: is this a git repository?
Existing regression table on Blacksmith: 1 failed, 24 passed (25).
After allowing apostrophes in the unquoted URL path, clone AND Retry:
fatal: https://github.com/octocat/Hello-World/commits/master/repo's.git not valid: is this a git repository?

Final runtime setup:
$ timeout 600 vp i
$ T3CODE_HOME=/home/user/t3code/.t3 T3CODE_DEV_SEED=0 setsid nohup timeout 5000 vp run dev > /tmp/dev.log 2>&1 &
[dev-runner] serverPort=13773 webPort=5733
$ timeout 90 node /tmp/path-after.mjs
Clone and Retry both preserved the path and git error reason, with no query/token.
$ timeout 90 node /tmp/final-neighbors.mjs
credential-check: fatal: unable to access 'https://git.example.invalid/octocat/credential-check.git': Could not resolve host: git.example.invalid
apostrophe query token: fatal: unable to access 'https://git.example.invalid/octocat/apostrophe.git': Could not resolve host: git.example.invalid
double-quote query token: fatal: unable to access 'https://git.example.invalid/octocat/double-quote.git': Could not resolve host: git.example.invalid
userinfo + query: fatal: unable to access 'https://git.example.invalid/octocat/userinfo.git': Could not resolve host: git.example.invalid
Public clone https://github.com/octocat/Hello-World.git opened hello-world with Current checkout.
$ timeout 30 node /tmp/final-provider.mjs
Real Codex gpt-6.1-sol turn through web composer: read README; git status --short; no modifications.
Completed after 9.5s: README = Hello World!; working tree is clean; git status --short returned no output.
$ timeout 90 node /tmp/record-flow.mjs
Recorded Git URL entry -> destination -> real clone failure -> details -> Retry -> details.
Both errors: fatal: unable to access 'https://git.example.invalid/': Could not resolve host: git.example.invalid

$ timeout 600 blacksmith-check run --id <task-owned-worker> "... vp run check:changed d71e4a79db518b3cadf7affce08d966c0d987630"
check:changed: 2 files since d71e4a79db51
pass format, lint, knip (2), GraphQL generation, typecheck (2 packages), test (1 file)
25 tests passed (25).
Two independent read-only reviewers approved exact final SHA.

Not exercised: native desktop/iOS/Android; macOS/Windows; relay/tunnel; real SSH-to-HTTPS fallback (existing focused tests passed).
Accepted documented limitation: quoted diagnostics may conservatively lose a suffix containing another matching quote. URL fragments are unchanged.