PR 32788: real SSH pairing verification
main: cec8d73a1f0fd3bd9a48df88640436e73a04afa3
PR:   37f45973cec5eb288bfa6b9837e3890554592a25

Real loopback sshd, isolated Linux mount namespace with /bin/sh=bash.
No fake runtime or credential output. Pairing A downloads real 0.1.8;
its curl child is paused with SIGSTOP. Pairing B uses the real source CLI.
After B returns, A is resumed with SIGCONT.
main: starting real 0.1.8 archive pairing over loopback SSH; /bin/sh=bash
paused owned download pid=47986; pairing B uses real source CLI
B exit=0 pairing succeeded; real credential returned=true

A exit=1 [08:19:34.924] WARN (#14): ssh.command.failed {
  alias: 't3-pair-verify',
  hostname: '127.0.0.1',
  username: 't3pairverify',
  port: 22282,
  command: [
    'ssh',
    '-o',
    'BatchMode=yes',
    '-o',
    'ConnectTimeout=10',
    '-p',
    '22282',
    '-o',
    'ServerAliveInterval=15',
    '-o',
    'ServerAliveCountMax=3',
    '--',
    't3pairverify@t3-pair-verify',
    'sh',
    '-s'
  ],
  exitCode: 2,
  stdout: '',
  stderr: '/home/t3pairverify/.t3/ssh-launch/5f5969b38ce127c9/run-t3.sh: line 293: unexpected EOF while looking for matching `"\'\n'
}
{
  _tag: 'SshCommandError',
  message: '/home/t3pairverify/.t3/ssh-launch/5f5969b38ce127c9/run-t3.sh: line 293: unexpected EOF while looking for matching `"\'',
  command: [
    'ssh',
    '-o',
    'BatchMode=yes',
    '-o',
    'ConnectTimeout=10',
    '-p',
    '22282',
    '-o',
    'ServerAliveInterval=15',
    '-o',
    'ServerAliveCountMax=3',
    '--',
    't3pairverify@t3-pair-verify',
    'sh',
    '-s'
  ],
  exitCode: 2,
  stderr: '/home/t3pairverify/.t3/ssh-launch/5f5969b38ce127c9/run-t3.sh: line 293: unexpected EOF while looking for matching `"\'\n',
  stdout: ''
}

pr: starting real 0.1.8 archive pairing over loopback SSH; /bin/sh=bash
paused owned download pid=49938; pairing B uses real source CLI
B exit=0 pairing succeeded; real credential returned=true

A exit=0 pairing succeeded; real credential returned=true

Nearby behavior:
ordinary source pairing succeeded; real credential returned=true
runner mode=700; remaining staging files=0
real SSH environment manager launched 0.1.8 and paired successfully
reused same tunnel; issuePairingToken=false returned no extra credential

Real Codex gpt-6.1-sol turn through PR dev server:
{"threadId":"mcp:5dd6036d-86f1-4f49-acbb-4c6e89af8d5e","runId":"run:thread:mcp%3A5dd6036d-86f1-4f49-acbb-4c6e89af8d5e:ordinal:1","status":"completed","reply":"the package name is `@t3tools/ssh`.","error":null}

Real remote Codex gpt-6.1-sol turn in SSH workspace:
{"threadId":"mcp:10588ab7-12ab-4c70-98ba-a3bd8af2fd77","runId":"run:thread:mcp%3A10588ab7-12ab-4c70-98ba-a3bd8af2fd77:ordinal:1","status":"completed","reply":"- `pwd`: `/home/t3pairverify/workspace`\n- `git rev-parse HEAD`: `37f45973cec5eb288bfa6b9837e3890554592a25`\n\nNo files changed.","error":null}

Focused check: blacksmith-check run ... vp test run packages/ssh/src/tunnel.test.ts
11 tests passed.