diff --git a/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.css b/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.css
index 156014f5e9..d31b945654 100644
--- a/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.css
+++ b/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.css
@@ -11,6 +11,9 @@
 .attached-conversation-content button {font: inherit; padding: 8px 12px; border: 1px solid var(--pw-line); border-radius: 6px; background: var(--pw-card); color: var(--pw-text); cursor: pointer;}
 .attached-conversation-content button:disabled, .attached-conversation-content button[aria-disabled="true"] {opacity: .5; cursor: default;}
 .attached-conversation-content .attached-conversation-open {border: 0; padding: 0; border-radius: 0; background: transparent; text-decoration: underline; text-underline-offset: 3px;}
+.attached-session-selection {display: flex; align-items: center; gap: 12px; margin-block: 12px 4px; min-width: 0;}
+.attached-session-selection > span {flex-shrink: 0;}
+.attached-session-selection select {min-width: 0; max-width: 100%; min-height: 44px; font: inherit; padding: 8px; border: 1px solid var(--pw-line); border-radius: 6px; background: var(--pw-card); color: var(--pw-text);}
 .attached-conversation-messages {max-height: min(40vh, 360px); overflow: auto; overflow-anchor: none; overscroll-behavior: contain; margin-block: 16px; min-width: 0; scrollbar-gutter: stable;}
 .attached-conversation-messages article {padding-block: 16px; border-top: 1px solid var(--pw-line); overflow-wrap: anywhere;}
 .attached-conversation-messages header {display: flex; flex-wrap: wrap; gap: 8px; align-items: baseline;}
diff --git a/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.tsx b/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.tsx
index a59a1e44b6..9ec869dc41 100644
--- a/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.tsx
+++ b/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.tsx
@@ -79,13 +79,70 @@ async function readVisiblePage(params: URLSearchParams, current: () => boolean):
   return forward ? page : {...page, after: newestBoundary, has_more: newerAvailable};
 }
 
-/** Owner-only original conversation. It never changes the selected executor. */
+/** Select an exact original Session within the registered Agent, never an executor. */
 export function AttachedAgentConversations({goalId, zh, targetAgentId}: {
   goalId: string; zh: boolean; targetAgentId: string;
 }) {
+  const selectionKey = `loopx-attached-selection:${goalId}:${targetAgentId}`;
+  const [selected, setSelected] = useState(() => {
+    try {return sessionStorage.getItem(selectionKey) ?? "";} catch {return "";}
+  });
+  const [bindings, setBindings] = useState<Binding[]>([]);
   const [discovering, setDiscovering] = useState(true);
-  const [agents, setAgents] = useState<Binding[]>([]);
-  const [selected, setSelected] = useState("");
+  const [error, setError] = useState("");
+  const [refresh, setRefresh] = useState(0);
+  const locale = useRef(zh);
+  useEffect(() => {locale.current = zh;}, [zh]);
+  useEffect(() => {
+    let active = true;
+    let timer: ReturnType<typeof setTimeout>;
+    setBindings([]); setDiscovering(true); setError("");
+    async function discover() {
+      try {
+        const value = await request<{agents: Binding[]}>(`/api/chat/codex-attached?${new URLSearchParams({goal_id: goalId})}`);
+        if (!Array.isArray(value.agents)) throw new Error("Conversation directory unavailable");
+        const choices = value.agents.filter(row => row.agent_id === targetAgentId);
+        if (active) {
+          setBindings(choices); setError("");
+          // A saved choice that was revoked stays unavailable. Never substitute
+          // another Session or carry its draft into a different conversation.
+          setSelected(previous => previous || (choices.length === 1 ? choices[0].binding_ref : ""));
+        }
+      } catch (failure) {
+        if (active) {
+          setError(readFailureMessage(failure, locale.current));
+          if (retryableRead(failure)) timer = setTimeout(discover, 1000);
+        }
+      } finally {if (active) setDiscovering(false);}
+    }
+    void discover();
+    return () => {active = false; clearTimeout(timer);};
+  }, [goalId, targetAgentId, refresh]);
+  const binding = bindings.find(row => row.binding_ref === selected);
+  const reconnect = () => setRefresh(value => value + 1);
+  return <>
+    {!discovering && bindings.length > 0 && (bindings.length > 1 || selected && !binding) ? <label className="attached-session-selection">
+      <span>{zh ? "工作会话" : "Conversation"}</span>
+      <select aria-label={zh ? "工作会话" : "Conversation"} value={binding ? selected : ""} onChange={event => {
+        const next = event.target.value;
+        setSelected(next);
+        try {sessionStorage.setItem(selectionKey, next);} catch {/* Reading needs no browser storage grant. */}
+      }}>
+        <option value="" disabled>{selected ? (zh ? "原会话绑定已变更" : "Original conversation binding changed") : (zh ? "选择工作会话" : "Choose a conversation")}</option>
+        {bindings.map(row => <option key={row.binding_ref} value={row.binding_ref}>Codex App · {row.thread_id}</option>)}
+      </select>
+    </label> : null}
+    {discovering ? <p role="status">{zh ? "正在连接原会话…" : "Connecting to the original conversation…"}</p>
+      : error ? <p role="alert">{error} <button type="button" onClick={reconnect}>{zh ? "重新连接" : "Reconnect"}</button></p>
+      : !bindings.length ? <p role="status">{zh ? "此 Agent 暂无已绑定的本机 Codex App 原会话。" : "This Agent has no bound local Codex App conversation."}</p> : null}
+    {binding ? <AttachedConversation key={binding.binding_ref} goalId={goalId} binding={binding} zh={zh} reconnect={reconnect}/> : null}
+  </>;
+}
+
+/** Remount on binding changes so history, live readers and pending input cannot cross Sessions. */
+function AttachedConversation({goalId, binding, zh, reconnect}: {
+  goalId: string; binding: Binding; zh: boolean; reconnect: () => void;
+}) {
   const [messages, setMessages] = useState<Message[]>([]);
   const [snapshot, setSnapshot] = useState<Snapshot | null>(null);
   const [before, setBefore] = useState<number | null>(null);
@@ -99,7 +156,6 @@ export function AttachedAgentConversations({goalId, zh, targetAgentId}: {
   const [opening, setOpening] = useState(false);
   const [openRequested, setOpenRequested] = useState(false);
   const [openError, setOpenError] = useState("");
-  const [refresh, setRefresh] = useState(0);
   const [readingHistory, setReadingHistory] = useState(false);
   const [unread, setUnread] = useState(false);
   const [liveView, setLiveView] = useState<LiveRecords>({identity: "", records: []});
@@ -124,16 +180,15 @@ export function AttachedAgentConversations({goalId, zh, targetAgentId}: {
   const position = useRef<{ids: string[]; group: boolean; offset: number; top: number} | null>(null);
   const readLocale = useRef(zh);
   useEffect(() => {readLocale.current = zh;}, [zh]);
-  const binding = agents.find(agent => agent.agent_id === selected);
   const awaitingReceipt = Boolean(submission?.status && submission.status !== "delivered");
-  const cacheKey = binding ? `loopx-attached-input:${goalId}:${binding.binding_ref}` : "";
+  const cacheKey = `loopx-attached-input:${goalId}:${binding.binding_ref}`;
   const liveEnabled = Boolean(snapshot?.connected && snapshot.activity.state !== "idle");
-  const liveIdentity = `${goalId}:${targetAgentId ?? ""}:${binding?.agent_id ?? ""}:${binding?.binding_ref ?? ""}`;
+  const liveIdentity = `${goalId}:${binding.agent_id}:${binding.binding_ref}`;
   const liveRecords = liveView.identity === liveIdentity ? liveView.records : [];
   // Frozen history is still readable, but must not look like current work.
   // Connection/registration alone is never an activity observation.
   const liveActive = liveEnabled && !liveUnavailable && !readingHistory;
-  const query = binding ? new URLSearchParams({goal_id: goalId, agent_id: binding.agent_id, binding_ref: binding.binding_ref}) : null;
+  const query = new URLSearchParams({goal_id: goalId, agent_id: binding.agent_id, binding_ref: binding.binding_ref});
 
   useLayoutEffect(() => {
     const element = transcript.current;
@@ -164,7 +219,7 @@ export function AttachedAgentConversations({goalId, zh, targetAgentId}: {
   useEffect(() => {
     let active = true;
     latestLive.current = {identity: "", records: []}; setLiveView(latestLive.current); setLiveUnavailable(false);
-    if (!binding || !liveEnabled) return;
+    if (!liveEnabled) return;
     const source = new EventSource(`/api/chat/codex-attached/live?${query}`);
     const unavailable = () => {latestLive.current = {identity: "", records: []}; setLiveView(latestLive.current); setLiveUnavailable(true);};
     source.addEventListener("observation", event => {
@@ -188,26 +243,6 @@ export function AttachedAgentConversations({goalId, zh, targetAgentId}: {
     return () => {active = false; source.close();};
   }, [liveIdentity, liveEnabled]);
 
-  useEffect(() => {
-    let active = true;
-    let timer: ReturnType<typeof setTimeout>;
-    setAgents([]); setSelected(""); setMessages([]); setSnapshot(null); setError("");
-    setDiscovering(true);
-    async function discover() {
-      try {
-        const value = await request<{agents: Binding[]}>(`/api/chat/codex-attached?${new URLSearchParams({goal_id: goalId})}`);
-        if (active) {setAgents(value.agents); setSelected(targetAgentId); setError("");}
-      } catch (failure) {
-        if (active) {
-          setError(readFailureMessage(failure, readLocale.current));
-          if (retryableRead(failure)) timer = setTimeout(discover, 1000);
-        }
-      } finally {if (active) setDiscovering(false);}
-    }
-    void discover();
-    return () => {active = false; clearTimeout(timer);};
-  }, [goalId, refresh, targetAgentId]);
-
   useEffect(() => {
     const current = ++generation.current;
     revision.current = "";
@@ -218,7 +253,6 @@ export function AttachedAgentConversations({goalId, zh, targetAgentId}: {
     setOpening(false); setOpenRequested(false); setOpenError("");
     setSendNotice("");
     setMessages([]); setSnapshot(null); setBefore(null); setDraft(""); setSubmission(null); setSending(false); setLoadingOlder(false); setError(""); setRecoveryError("");
-    if (!binding) return;
     try {
       setDraft(sessionStorage.getItem(`${cacheKey}:draft`) ?? "");
       const stored = sessionStorage.getItem(cacheKey);
@@ -234,7 +268,7 @@ export function AttachedAgentConversations({goalId, zh, targetAgentId}: {
     async function read() {
       if (paging.current !== null) {timer = setTimeout(read, 1000); return;}
       const epoch = historyEpoch.current;
-      const params = new URLSearchParams(query!);
+      const params = new URLSearchParams(query);
       if (following.current && after.current !== null) params.set("after", String(after.current));
       if (history.current) params.set("source_ref", history.current.source);
       if (revision.current) params.set("revision", revision.current);
@@ -272,7 +306,7 @@ export function AttachedAgentConversations({goalId, zh, targetAgentId}: {
   }, [goalId, binding?.binding_ref]);
 
   async function openOriginal() {
-    if (!binding || opening) return;
+    if (opening) return;
     const current = generation.current;
     setOpening(true); setOpenRequested(false); setOpenError("");
     try {
@@ -360,14 +394,14 @@ export function AttachedAgentConversations({goalId, zh, targetAgentId}: {
     else if (scrollDirection.current) pageAtEdge(scrollDirection.current);
   }
   async function loadContent(record: Message, offset: number): Promise<ContentPage> {
-    const params = new URLSearchParams(query!);
+    const params = new URLSearchParams(query);
     params.set("entry_id", record.id); params.set("content_offset", String(offset));
     params.set("source_ref", history.current?.source ?? ""); params.set("content_ref", record.content_ref ?? "");
     return request<ContentPage>(`/api/chat/codex-attached?${params}`);
   }
 
   async function send() {
-    if (!binding || sending || error || recoveryError || !snapshot?.can_reply || !draft.trim() || awaitingReceipt) return;
+    if (sending || error || recoveryError || !snapshot?.can_reply || !draft.trim() || awaitingReceipt) return;
     const current = generation.current;
     const pending = {operation_id: crypto.randomUUID(), text: draft, status: "pending"};
     try {sessionStorage.setItem(cacheKey, JSON.stringify(pending));}
@@ -402,7 +436,7 @@ export function AttachedAgentConversations({goalId, zh, targetAgentId}: {
   }
   async function readReceipt(pending = submission, current = generation.current) {
     // Recover from existing evidence only. Never retry the native effect.
-    if (!query || !pending || current !== generation.current) return;
+    if (!pending || current !== generation.current) return;
     const receiptVersion = receiptGeneration.current;
     const params = new URLSearchParams(query); params.set("operation_id", pending.operation_id);
     try {
@@ -424,14 +458,11 @@ export function AttachedAgentConversations({goalId, zh, targetAgentId}: {
     try {sessionStorage.removeItem(cacheKey); sessionStorage.removeItem(`${cacheKey}:draft`); receiptGeneration.current++; setSubmission(null); setDraft(""); setError(""); setRecoveryError("");}
     catch {setError(zh ? "无法清理回复回执。" : "Reply recovery could not be cleared.");}
   }
-  const connectionError = error ? <p role="alert">{error} <button type="button" onClick={() => setRefresh(value => value + 1)}>{zh ? "重新连接" : "Reconnect"}</button></p> : null;
+  const connectionError = error ? <p role="alert">{error} <button type="button" onClick={reconnect}>{zh ? "重新连接" : "Reconnect"}</button></p> : null;
   return <div className="attached-conversation-content">
 
-      {discovering ? <p role="status">{zh ? "正在连接原会话…" : "Connecting to the original conversation…"}</p> : !binding && !error ? <p role="status">{zh ? "此 Agent 暂无已绑定的本机 Codex App 原会话。" : "This Agent has no bound local Codex App conversation."}</p> : null}
       {recoveryError ? <p role="alert">{recoveryError} <button type="button" disabled={sending} onClick={nextReply}>{zh ? "已在原 App 核对，清理本页回执" : "Checked in original App; clear this receipt"}</button></p> : null}
-      {!binding ? connectionError : null}
       {sendNotice ? <p role="status">{sendNotice}</p> : null}
-      {binding ? <>
         <div className="attached-connection-status"><div><p className="attached-conversation-source" title={zh ? "已保存消息与工具记录自动更新；实时内容来自原宿主。" : "Saved messages and tools update automatically; live content comes from the original host."}>Codex App</p><p role="status">{!snapshot ? (zh ? "正在连接或连接不可用" : "Connecting or unavailable") : snapshot.can_reply ? (zh ? "原会话可回复" : "Original conversation accepts replies") : snapshot.activity.state === "turn_open" ? (zh ? "原会话有未结束执行；可在原 App 中追加输入" : "The original conversation has an unfinished turn; add input in the original App") : (zh ? "历史可读；回复连接或执行状态尚未确认" : "History available; reply connection or execution state unconfirmed")}</p></div>
         <button type="button" className="attached-conversation-open" aria-disabled={opening} aria-busy={opening} onClick={() => void openOriginal()}>{zh ? "在 Codex App 中打开" : "Open in Codex App"}</button></div>
         {openRequested ? <p role="status">{zh ? "已请求打开原会话，请在 Codex App 中查看。" : "Requested opening the original conversation; check Codex App."}</p> : null}
@@ -453,7 +484,6 @@ export function AttachedAgentConversations({goalId, zh, targetAgentId}: {
         {liveUnavailable ? <p role="status">{zh ? "实时观察暂不可用，已保存的消息与工具记录仍会自动更新。" : "Live observation is unavailable; saved messages and tools still update automatically."}</p> : null}
         {submission?.status ? <p role="status">{submission.status === "delivered" ? (zh ? "已由原 App 接纳；等待 Agent 结果。" : "Accepted by the original App; awaiting the Agent result.") : (zh ? "投递尚未确认，请先在原 App 核对，不会自动重发。" : "Delivery unconfirmed; check the original App. No automatic resend.")} {submission.status === "pending" ? <button type="button" disabled={sending} onClick={() => void readReceipt()}>{zh ? "重读投递回执" : "Recheck delivery receipt"}</button> : null}{awaitingReceipt ? <button type="button" disabled={sending} onClick={nextReply}>{zh ? "已核对，写下一条" : "Checked; write another"}</button> : null}</p> : null}
         {!awaitingReceipt ? <form onSubmit={event => {event.preventDefault(); void send();}}><label>{zh ? `回复 ${binding.agent_id}` : `Reply to ${binding.agent_id}`}<textarea value={draft} maxLength={24000} disabled={sending} onChange={event => editDraft(event.target.value)}/></label><button type="submit" disabled={sending || Boolean(error || recoveryError) || !snapshot?.can_reply || !draft.trim()}>{sending ? (zh ? "正在交给原 App…" : "Sending to original App…") : (zh ? "发送到原会话" : "Send to original conversation")}</button></form> : null}
-      </> : null}
     </div>
   ;
 }
diff --git a/examples/personal-workspace-browser/codex-attached.mjs b/examples/personal-workspace-browser/codex-attached.mjs
index 829b96b728..3ede908aff 100644
--- a/examples/personal-workspace-browser/codex-attached.mjs
+++ b/examples/personal-workspace-browser/codex-attached.mjs
@@ -68,6 +68,7 @@ async function runConversation(browser, uncertain) {
       const other = page.getByRole('button',{name:'与 other-worker 对话',exact:true});
       await other.click();
       const unavailable = page.getByRole('region',{name:'Agent 工作会话',exact:true});
+      await unavailable.getByRole('button',{name:'会话来源未接入',exact:true}).click();
       await unavailable.getByText('此 Agent 尚无已绑定的会话来源。',{exact:true}).waitFor();
       assert.equal(await unavailable.getByText('Original result',{exact:true}).count(),0);
       assert.equal(await unavailable.getByRole('textbox').count(),0);
@@ -177,12 +178,14 @@ async function runConversation(browser, uncertain) {
       assert.equal(await owner.getByRole('textbox',{name:'回复 worker',exact:true}).inputValue(),'保留在 worker 的草稿');
       await owner.getByRole('textbox',{name:'回复 worker',exact:true}).fill('');
       await owner.getByRole('combobox',{name:'查看 Agent'}).selectOption('remote-worker');
+      await owner.getByRole('button',{name:'会话来源未接入',exact:true}).click();
       await owner.getByText('来源：cursor。此宿主的工作记录与回复尚未接入。',{exact:true}).waitFor();
       assert.equal(await owner.getByRole('textbox').count(),0);
       await page.screenshot({path:resolve(outputDir,'attached-agent-unsupported.png'),animations:'disabled'});
       await page.goBack();
       await owner.getByText('Original result',{exact:true}).waitFor();
       await page.goForward();
+      await owner.getByRole('button',{name:'会话来源未接入',exact:true}).click();
       await owner.getByText('来源：cursor。此宿主的工作记录与回复尚未接入。',{exact:true}).waitFor();
       await owner.getByRole('button',{name:'返回概览',exact:true}).click();
       await entry.waitFor();
@@ -204,6 +207,72 @@ async function runConversation(browser, uncertain) {
     const composer = panel.getByRole('textbox', {name:'回复 worker',exact:true});
     const send = panel.getByRole('button', {name:'发送到原会话',exact:true});
     if (!uncertain) {
+      // One Agent may own several independent host conversations. Selection,
+      // drafts, delayed reads and refresh must keep their exact original scope.
+      await page.screenshot({path:resolve(outputDir,'agent-sessions-before-desktop.png'),animations:'disabled'});
+      await page.request.post(new URL('/fixture/second-conversation',url).href);
+      await page.reload();
+      const sessions = panel.getByRole('combobox',{name:'工作会话',exact:true});
+      await sessions.waitFor();
+      assert.equal(await sessions.inputValue(),'','Multiple Sessions require an exact choice');
+      assert.equal(await composer.count(),0,'No first-row fallback opens the wrong history');
+      const choices = await sessions.locator('option').evaluateAll(options => options.map(option => option.value).filter(Boolean));
+      assert.equal(choices.length,2);
+      await sessions.selectOption(choices[0]);
+      await panel.getByText('Original result',{exact:true}).waitFor();
+      await composer.fill('第一条会话草稿');
+      await sessions.selectOption(choices[1]);
+      await panel.getByText('Result: Separate investigation',{exact:true}).waitFor();
+      assert.equal(await panel.getByText('Original result',{exact:true}).count(),0);
+      assert.equal(await composer.inputValue(),'');
+      await composer.fill('第二条会话草稿');
+      await page.reload();
+      await panel.getByText('Result: Separate investigation',{exact:true}).waitFor();
+      assert.equal(await sessions.inputValue(),choices[1]);
+      assert.equal(await composer.inputValue(),'第二条会话草稿');
+      await page.screenshot({path:resolve(outputDir,'agent-sessions-after-desktop.png'),animations:'disabled'});
+      await page.setViewportSize({width:390,height:844});
+      assert.equal(await page.evaluate(() => document.documentElement.scrollWidth > innerWidth + 1),false);
+      await page.screenshot({path:resolve(outputDir,'agent-sessions-after-narrow.png'),animations:'disabled'});
+      await page.setViewportSize({width:1440,height:900});
+      let releaseRead, startedRead;
+      const heldRead = new Promise(resolve => {releaseRead = resolve;});
+      const readStarted = new Promise(resolve => {startedRead = resolve;});
+      let held = false;
+      const delayedSession = async route => {
+        if (held || new URL(route.request().url()).searchParams.get('binding_ref') !== choices[0]) return route.continue();
+        held = true;
+        const response = await route.fetch(); startedRead(); await heldRead; await route.fulfill({response});
+      };
+      await page.route('**/api/chat/codex-attached?*',delayedSession);
+      await sessions.selectOption(choices[0]);
+      await readStarted;
+      await sessions.selectOption(choices[1]);
+      await panel.getByText('Result: Separate investigation',{exact:true}).waitFor();
+      releaseRead();
+      await page.unroute('**/api/chat/codex-attached?*',delayedSession);
+      assert.equal(await panel.getByText('Original result',{exact:true}).count(),0);
+      assert.equal(await composer.inputValue(),'第二条会话草稿');
+      const missingSelection = async route => {
+        if (new URL(route.request().url()).searchParams.has('agent_id')) return route.continue();
+        const response = await route.fetch(), value = await response.json();
+        await route.fulfill({response,json:{...value,agents:value.agents.filter(row => row.binding_ref !== choices[1])}});
+      };
+      await page.route('**/api/chat/codex-attached?*',missingSelection);
+      await page.reload();
+      await sessions.waitFor();
+      assert.equal(await sessions.inputValue(),'');
+      assert.match(await sessions.locator('option:checked').innerText(),/原会话绑定已变更/);
+      assert.equal(await composer.count(),0,'A stale saved choice never falls back to the sole other Session');
+      await page.unroute('**/api/chat/codex-attached?*',missingSelection);
+      await page.reload();
+      await panel.getByText('Result: Separate investigation',{exact:true}).waitFor();
+      assert.equal(await composer.inputValue(),'第二条会话草稿');
+      await sessions.selectOption(choices[0]);
+      await panel.getByText('Original result',{exact:true}).waitFor();
+      assert.equal(await composer.inputValue(),'第一条会话草稿');
+      await composer.fill('');
+      assert.equal(await inputCount(),0,'Reading and switching never start or replay host work');
       const live = panel.getByLabel('原宿主实时记录',{exact:true});
       await page.request.post(new URL('/fixture/live-start',url).href);
       await live.getByText('原宿主实时草稿',{exact:true}).waitFor();
@@ -227,6 +296,7 @@ async function runConversation(browser, uncertain) {
       assert.equal(await activeMarks.count(),2,'Returning to the tail restores the current observation');
       assert.equal(await inputCount(),0,'Observation never submits native input');
       await panel.getByRole('combobox',{name:'查看 Agent'}).selectOption('remote-worker');
+      await panel.getByRole('button',{name:'会话来源未接入',exact:true}).click();
       await panel.getByText('来源：cursor。此宿主的工作记录与回复尚未接入。',{exact:true}).waitFor();
       assert.equal(await live.count(),0,'Changing the Agent removes the old live records');
       await page.waitForFunction(async () => (await (await fetch('/fixture/following')).json()).events.at(-1) === false);
@@ -491,6 +561,7 @@ async function runConversation(browser, uncertain) {
     await page.reload();
     await windowRead;
     await panel.getByRole('combobox',{name:'查看 Agent'}).selectOption('other-worker');
+    await panel.getByRole('button',{name:'会话来源未接入',exact:true}).click();
     await panel.getByText('此 Agent 尚无已绑定的会话来源。',{exact:true}).waitFor();
     const lateWindow = page.waitForResponse(response => new URL(response.url()).searchParams.get('agent_id') === 'worker');
     releaseWindow(); await lateWindow;
diff --git a/examples/personal-workspace-browser/codex_attached_fixture.py b/examples/personal-workspace-browser/codex_attached_fixture.py
index 2fa3d339dd..07d782ab99 100644
--- a/examples/personal-workspace-browser/codex_attached_fixture.py
+++ b/examples/personal-workspace-browser/codex_attached_fixture.py
@@ -16,7 +16,7 @@
 from loopx.chat_server import ChatRequestHandler, default_chat_assets_dir
 
 sys.path.insert(0, str(Path(__file__).resolve().parent))
-from codex_attached_peer import append_message, fixture, provider
+from codex_attached_peer import add_conversation, append_message, fixture, provider
 
 stop = threading.Event()
 signal.signal(signal.SIGTERM, lambda *_: stop.set())
@@ -105,6 +105,11 @@ def do_GET(self):
 
             def do_POST(self):
                 global fail_next_open, live_revision, live_updates, body_fault
+                if self.path == "/fixture/second-conversation":
+                    add_conversation(registry, _home, agent_id="worker",
+                        thread_id="22222222-2222-4222-8222-222222222222", text="Separate investigation")
+                    self._send_json({"ok": True})
+                    return
                 if self.path in {
                     "/fixture/discovery-body-timeout",
                     "/fixture/discovery-body-drop",
diff --git a/examples/personal-workspace-browser/codex_attached_peer.py b/examples/personal-workspace-browser/codex_attached_peer.py
index a8aef25b3e..524ab707ae 100644
--- a/examples/personal-workspace-browser/codex_attached_peer.py
+++ b/examples/personal-workspace-browser/codex_attached_peer.py
@@ -66,6 +66,24 @@ def append_message(path, role, text):
         )
 
 
+def add_conversation(registry, home, *, agent_id, thread_id, text):
+    """Add a separate saved host Session, without starting any executor."""
+    path = home / "sessions" / f"{thread_id}.jsonl"
+    path.write_text(json.dumps({"type": "session_meta", "payload": {"id": thread_id}}) + "\n")
+    append_message(path, "user", text)
+    append_message(path, "assistant", f"Result: {text}")
+    with path.open("a") as stream:
+        stream.write(json.dumps({"type": "event_msg", "timestamp": "2026-01-01T00:00:01Z", "payload": {"type": "task_complete"}}) + "\n")
+    with sqlite3.connect(home / "state_5.sqlite") as db:
+        db.execute("INSERT INTO threads VALUES(?,?,0)", (thread_id, str(path)))
+    value = json.loads(registry.read_text())
+    value["goals"][0]["coordination"]["thread_agent_bindings"].append(
+        {"agent_id": agent_id, "host_surface": "codex-app", "thread_id": thread_id}
+    )
+    registry.write_text(json.dumps(value))
+    return path
+
+
 @contextmanager
 def fixture(tmp_path, *, uncertain=False, goal_id="sample-goal"):
     if os.name != "posix":
@@ -211,10 +229,15 @@ def serve_peer(client):
                             elif message["method"] == "thread-follower-start-turn":
                                 inputs.append(message["params"])
                                 assert message["targetClientId"] == "original-owner"
+                                thread = message["params"]["turnStart"]["request"]["threadId"]
+                                assert message["params"]["conversationId"] == thread
+                                with sqlite3.connect(home / "state_5.sqlite") as db:
+                                    selected = db.execute("SELECT rollout_path FROM threads WHERE id=?", (thread,)).fetchone()
+                                assert selected is not None
                                 if uncertain:
                                     break
                                 append_message(
-                                    rollout,
+                                    Path(selected[0]),
                                     "user",
                                     message["params"]["turnStart"]["request"]["input"][
                                         0
diff --git a/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-after-desktop.png b/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-after-desktop.png
new file mode 100644
index 0000000000..b8236f71f2
Binary files /dev/null and b/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-after-desktop.png differ
diff --git a/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-after-narrow.png b/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-after-narrow.png
new file mode 100644
index 0000000000..266f9ce6b3
Binary files /dev/null and b/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-after-narrow.png differ
diff --git a/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-before-desktop.png b/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-before-desktop.png
new file mode 100644
index 0000000000..bda9592b6a
Binary files /dev/null and b/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-before-desktop.png differ
diff --git a/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-before-narrow.png b/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-before-narrow.png
new file mode 100644
index 0000000000..c410d68979
Binary files /dev/null and b/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-before-narrow.png differ
diff --git a/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-populated-desktop.png b/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-populated-desktop.png
new file mode 100644
index 0000000000..d6faea8d40
Binary files /dev/null and b/examples/personal-workspace-browser/screenshots/codex-attached/agent-sessions-populated-desktop.png differ
diff --git a/loopx/presentation/codex_attached_api.py b/loopx/presentation/codex_attached_api.py
index 922916f21e..fcb3758162 100644
--- a/loopx/presentation/codex_attached_api.py
+++ b/loopx/presentation/codex_attached_api.py
@@ -69,8 +69,12 @@ def bound_conversations(goal: dict[str, Any]) -> list[dict[str, str]]:
 
 
 def current_binding(goal: dict[str, Any], agent: str, expected: str) -> dict[str, str]:
-    rows = [row for row in bound_conversations(goal) if row["agent_id"] == agent]
-    if len(rows) != 1 or rows[0]["binding_ref"] != expected:
+    bindings = bound_conversations(goal)
+    rows = [row for row in bindings if row["agent_id"] == agent and row["binding_ref"] == expected]
+    if len(rows) != 1 or any(
+        row["thread_id"] == rows[0]["thread_id"] and row["agent_id"] != agent
+        for row in bindings
+    ):
         raise ValueError(
             "The Agent conversation binding changed or is ambiguous. Choose it again."
         )
diff --git a/tests/presentation/test_codex_attached_conversation.py b/tests/presentation/test_codex_attached_conversation.py
index 65d6438426..01668fa2d4 100644
--- a/tests/presentation/test_codex_attached_conversation.py
+++ b/tests/presentation/test_codex_attached_conversation.py
@@ -69,6 +69,51 @@ def open_body(binding):
     return {key: binding[key] for key in ("goal_id", "agent_id", "binding_ref")}
 
 
+def test_multiple_original_sessions_keep_exact_history_input_and_receipts(tmp_path, monkeypatch):
+    calls = opener_spy(monkeypatch)
+    with fixture(tmp_path) as (request, original, _, inputs, registry, home):
+        first, first_query = target(request)
+        second_id = "22222222-2222-4222-8222-222222222222"
+        second = _peer.add_conversation(registry, home, agent_id="worker", thread_id=second_id, text="Separate investigation")
+        status, directory = request()
+        assert status == 200 and len(directory["agents"]) == 2
+        binding = {**directory["agents"][1], "goal_id": "sample-goal"}
+        query = f"?goal_id=sample-goal&agent_id=worker&binding_ref={binding['binding_ref']}"
+        assert request(query=first_query)[1]["messages"][1]["text"] == "Original result"
+        assert request(query=query)[1]["messages"][1]["text"] == "Result: Separate investigation"
+        # A second binding does not invalidate the original, nor can omission
+        # select one by registry order. Each operation retains its exact target.
+        assert request(query="?goal_id=sample-goal&agent_id=worker")[0] == 409
+        assert request("POST", body(binding, "Only second Session"), query="")[0] == 200
+        assert inputs[0]["conversationId"] == second_id
+        assert "Only second Session" in second.read_text()
+        assert "Only second Session" not in original.read_text()
+        assert request("POST", body(binding, "Only second Session"), query="")[0] == 200
+        assert len(inputs) == 1
+        assert request(query=first_query + "&operation_id=same-operation")[0] == 409
+        assert request("POST", open_body(binding), query="", path="/api/chat/codex-attached/open")[0] == 200
+        assert calls[0][0][-1] == f"codex://threads/{second_id}"
+        value = json.loads(registry.read_text())
+        value["goals"][0]["goal_instance_id"] = "replacement-lifetime"
+        registry.write_text(json.dumps(value))
+        assert request(query=query)[0] == 409
+        assert request(query=first_query)[0] == 409
+        assert len(inputs) == 1
+
+
+def test_conflicting_thread_owner_cannot_read_or_reply(tmp_path):
+    with fixture(tmp_path) as (request, _, _, inputs, registry, _):
+        first, query = target(request)
+        value = json.loads(registry.read_text())
+        coordination = value["goals"][0]["coordination"]
+        coordination["registered_agents"].append("other")
+        coordination["thread_agent_bindings"].append({"agent_id": "other", "host_surface": "codex-app", "thread_id": THREAD})
+        registry.write_text(json.dumps(value))
+        assert request(query=query)[0] == 409
+        assert request("POST", body(first), query="")[0] == 409
+        assert inputs == []
+
+
 def test_explicit_open_uses_bound_local_thread_without_executing(tmp_path, monkeypatch):
     calls = opener_spy(monkeypatch)
     with fixture(tmp_path) as (request, _, methods, inputs, _, _):