Land validated connection and recovery foundation (#200-#209) [skip ci]

[shyamsridhar123]

Authorized foundation landing batch

This ordinary PR lands exactly the already-validated source from #200 -> #201 -> #202 -> #207 -> #208 -> #209 in one update to main. The owner explicitly authorized this one-time owner/admin batch merge in the current Codex conversation. No change to branch rules or bypass actors, no auto-merge, no branch deletion, and no deployment is requested.

GitHub's native stack merger cannot use the repository's configured owner bypass. Native stack #203 remains intact; this ordinary batch PR avoids exposing intermediate lower tips without the review fixes that live in the last layer. No stack dissolution, rebase or force-push is involved.

Exact source

• Current base: 971445e1cbf9388c51803e2adf28b11bd98b1ffa
• Validated head: 578002a4c91c9e63b169af1ec4d58aacc018def8
• Validated and predicted merge tree: 94bab7f19e3047f989408c4f4e9cec584aacb1dd
• All six original PR heads are ancestors of this exact head. No new product code was added for this batch.

Included changes

• feat(connections): persist native repository and coding-agent connections #200: persistent native repository/coding-agent connections.
• feat(web): connect native agents and deliver verified applications #201: connection and verified-delivery UI.
• feat(workspace): show authoritative mission and Factory context #202: authoritative mission/Factory context.
• fix(factory): reuse saved native project connections across intake #207: saved connection reuse across Factory intake.
• fix(web): show the controller for the selected Factory work item #208: controls for the selected Factory item.
• fix(factory): recover checkpoints and clear foundation blockers [skip ci] #209: native checkpoint cancellation recovery and all six foundation review corrections.

Source-bound local validation

The existing immutable validation receipts were hash-verified again before creating this PR; the long suite was not unnecessarily rerun and hosted Actions is not the acceptance dependency.

• 452 Rust tests passed, 200 explicitly ignored.
• 177 frontend tests passed; web build and lint passed.
• 40 immutable migrations, formatting and workspace/all-target Clippy passed.
• Six native executable builds passed.
• Actual browser/server/runner save/hold, process restart, dispatch, accepted completion and replay passed with one run/attempt; 390px reflow passed.
• Native Codex protocol fixture passed in the recorded bounded repeat. The first run's pre-existing steering deadlock remains retained and tracked by Prevent steering-message and run-status agent/run lock inversion #223; the repeat is not a fix or a global deadlock-freedom claim.

Evidence: foundation landing report at the exact source.

Explicit exclusions

#179, #212, #214, #215, #217, #218, #226 and #227 are not included. Uncommitted #219 work is untouched. Broader outcome acceptance on #198/#204/#206 is not declared complete by this foundation merge; no source issue is closed by this description. No real-provider persistence, full enterprise readiness, or deployment is claimed.

After merging, verify the actual remote main tree and each original PR's merged/open/superseded status rather than assuming stack bookkeeping. Preserve the existing branches and later stack.

[shyamsridhar123]

Landed and independently verified — September 10, 2026

This PR merged at 19:42:34 UTC / 14:42:34 CDT, using the owner's explicitly authorized one-time admin merge. Remote main is b28fd4d26309794f38c0455bbf42d22aedf7cfd1. Its tree is exactly the validated 94bab7f19e3047f989408c4f4e9cec584aacb1dd; all six original PR heads are ancestors.

Actual queue bookkeeping:

• feat(connections): persist native repository and coding-agent connections #200: GitHub marked MERGED indirectly.
• feat(web): connect native agents and deliver verified applications #201, feat(workspace): show authoritative mission and Factory context #202, fix(factory): reuse saved native project connections across intake #207, fix(web): show the controller for the selected Factory work item #208, fix(factory): recover checkpoints and clear foundation blockers [skip ci] #209: CLOSED as superseded by this merged batch, not separately merged. Each has a source-bound explanation.

All six original branches remain at their unchanged heads. Native stack #203 retains its identity and 12 entries. The eight unfinished/independent PRs retain their original heads, open/draft states and bases. Source issues #198/#204/#206 remain open for broader acceptance. There were no matching PR records to change in the live Project #3 lookup.

The branch rules and bypass actors remain unchanged; repository auto-merge and automatic branch deletion remain disabled. No deployment, new runtime/test run, container change, or unrelated worktree edit was performed. The prior validation receipts were hash-verified against the unchanged release source; no hosted Actions success is claimed.

The prior merge-authorization hold is resolved for this batch. This is a landed foundation milestone, not completion of the wider darkfactory objective.