diff --git a/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.css b/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.css
index 4a64b1ab5c..c41ae101b3 100644
--- a/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.css
+++ b/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.css
@@ -1,8 +1,5 @@
 .attached-agent-conversations {margin: 12px 24px;}
 .attached-conversation-entry {font: inherit; padding: 8px 12px; border: 1px solid var(--pw-line); border-radius: 6px; background: var(--pw-card); color: var(--pw-text); cursor: pointer;}
-.attached-conversation-dialog {position: fixed; inset: 0; margin: auto; width: min(960px, calc(100vw - 24px)); max-height: calc(100dvh - 48px); padding: 0; border: 1px solid var(--pw-line); border-radius: 12px; background: var(--pw-card); color: var(--pw-text); font: inherit;}
-.attached-conversation-dialog[open] {display: flex; flex-direction: column;}
-.attached-conversation-dialog::backdrop {background: rgb(0 0 0 / 32%);}
 .attached-conversation-heading {display: flex; align-items: center; justify-content: space-between; padding: 16px; gap: 16px; border-bottom: 1px solid var(--pw-line);}
 .attached-conversation-heading h2 {margin: 0; font-size: var(--text-heading);}
 .attached-conversation-heading button {font: inherit; padding: 8px 12px; color: inherit; background: var(--pw-card); border: 1px solid var(--pw-line); border-radius: 6px;}
@@ -20,3 +17,45 @@
 .attached-conversation-messages time {font-size: var(--text-caption); color: var(--pw-muted);}
 .attached-conversation-messages [data-role="user"] {padding-inline: 12px; background: var(--pw-hover); border-radius: 6px;}
 @media (max-width: 640px) {.attached-agent-conversations {margin: 12px;} .attached-conversation-messages {max-height: 48vh;}}
+
+.attached-conversation-messages [data-role="tool"], .attached-conversation-messages [data-role="activity"] {padding-block: 0; color: var(--pw-muted);}
+.attached-conversation-messages details {margin-block: 0;}
+.attached-conversation-messages summary {cursor: pointer; min-height: 44px; align-content: center; color: var(--pw-text);}
+.attached-conversation-messages pre {font: var(--text-body) / var(--leading-prose) var(--font-mono); color: var(--pw-text); white-space: pre-wrap; overflow-wrap: anywhere; max-height: 24rem; overflow: auto;}
+.attached-history-navigation {display: flex; flex-wrap: wrap; align-items: center; gap: 8px; font-size: var(--text-caption);}
+.personal-composer-wrap[hidden] {display: none;}
+.personal-channel-scroll[data-agent-work="true"] {padding-block: 0; overflow: hidden;}
+.personal-channel-scroll[data-agent-work="true"] > .personal-goal-view-panel:not([hidden]) {height: 100%;}
+.goal-agent-work-page {height: 100%; display: flex; flex-direction: column; min-width: 0;}
+.goal-agent-work-page .attached-conversation-heading {padding: 16px 0; flex-wrap: wrap; gap: 12px;}
+.goal-agent-work-page .attached-conversation-heading h2 {overflow-wrap: anywhere;}
+.agent-work-navigation {display: flex; flex-wrap: wrap; align-items: center; gap: 8px; min-width: 0;}
+.agent-work-navigation select, .agent-work-directory button {font: inherit; border: 1px solid var(--pw-line); background: var(--pw-card); color: var(--pw-text); border-radius: 6px; padding: 8px 12px; min-height: 44px; max-width: 100%;}
+.agent-work-directory {display: grid; gap: 12px; padding-block: 24px;}
+.agent-work-directory button {text-align: left; cursor: pointer;}
+.agent-work-unavailable {padding-block: 24px; color: var(--pw-muted); line-height: var(--leading-prose);}
+.goal-agent-work-page .attached-conversation-content {flex: 1; display: flex; flex-direction: column; padding: 0 0 16px; overflow: auto;}
+.goal-agent-work-page .attached-conversation-content > p {margin-block: 8px;}
+.goal-agent-work-page .attached-conversation-source {font-size: var(--text-caption); color: var(--pw-muted);}
+.goal-agent-work-page .attached-conversation-messages {flex: 1; min-height: 160px; max-height: none; margin-block: 12px;}
+.goal-agent-work-page .attached-conversation-content > button {align-self: flex-start; min-height: 44px;}
+.goal-agent-work-page form {flex-shrink: 0; display: flex; gap: 12px; align-items: flex-end; border-top: 1px solid var(--pw-line); padding-top: 8px;}
+.goal-agent-work-page form label {margin: 0; flex: 1; min-width: 0;}
+.goal-agent-work-page form textarea {min-height: 64px; max-height: 160px;}
+.goal-agent-work-page form button[type="submit"] {background: var(--pw-text); color: var(--pw-card); min-height: 44px;}
+@media (max-width: 640px) {.agent-work-navigation {width: 100%;} .agent-work-navigation select {flex: 1; min-width: 0;} .goal-agent-work-page .attached-conversation-messages {min-height: 120px;}}
+
+.attached-connection-status {display: flex; flex-wrap: wrap; align-items: baseline; justify-content: space-between; gap: 8px 16px; padding-block: 8px;}
+.attached-connection-status p {margin: 0;}
+.attached-connection-status .attached-conversation-open {min-height: 44px; flex-shrink: 0;}
+@media (max-width: 640px) {.goal-agent-work-page .attached-conversation-heading h2 {font-size: var(--text-lead);} .agent-work-navigation {width: auto; flex: 1;} .agent-work-navigation select {max-width: 140px;} .attached-conversation-heading button {padding-inline: 8px;}}
+
+.attached-conversation-messages summary > strong {font-weight: 500;}
+.attached-conversation-messages summary > time {margin-left: 8px;}
+.attached-tool-metadata {font-size: var(--text-caption); margin-top: 8px;}
+.attached-conversation-messages .attached-tool-source {font-size: var(--text-caption);}
+@media (max-width: 640px) {
+  .goal-agent-work-page form {flex-wrap: wrap;}
+  .goal-agent-work-page form label {flex-basis: 100%;}
+  .goal-agent-work-page form button[type="submit"] {margin-left: auto;}
+}
diff --git a/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.tsx b/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.tsx
index 035239bdcb..8df54a9f03 100644
--- a/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.tsx
+++ b/apps/presentation/dashboard/src/features/personal-workspace/attached-agent-conversations.tsx
@@ -1,22 +1,57 @@
 import {useEffect, useRef, useState} from "react";
-import {MarkdownText} from "./markdown";
+import {AttachedConversationRecord, type ConversationRecord, type ContentPage} from "./attached-conversation-record";
 import "./attached-agent-conversations.css";
 
 type Binding = {agent_id: string; thread_id: string; binding_ref: string};
-type Message = {id: string; role: "user" | "assistant"; text: string; truncated: boolean; timestamp: string | null};
-type Snapshot = {messages?: Message[]; before?: number | null; source_ref?: string; history_size?: number; revision: string; unchanged?: boolean; connected?: boolean; can_reply?: boolean; activity: {state: string}};
+type Message = ConversationRecord;
+type Snapshot = {messages?: Message[]; before?: number | null; after?: number; has_more?: boolean; reset?: boolean; source_ref?: string; history_size?: number; revision: string; unchanged?: boolean; connected?: boolean; can_reply?: boolean; activity: {state: string}};
 type Submission = {operation_id: string; text: string; status?: string};
 
+class ConversationRequestError extends Error {
+  constructor(message: string, readonly unsubmittedOperation?: string) {super(message);}
+}
+
 async function request<T>(url: string, options?: RequestInit): Promise<T> {
   const response = await fetch(url, {...options, signal: AbortSignal.timeout(6_000)});
   const value = await response.json();
-  if (!response.ok || value.ok !== true) throw new Error(value.error || "Conversation unavailable");
+  if (!response.ok || value.ok !== true) throw new ConversationRequestError(
+    value.error || "Conversation unavailable",
+    response.status === 409 && value.input_not_submitted === true && typeof value.operation_id === "string" ? value.operation_id : undefined,
+  );
   return value as T;
 }
 
+// A bounded file window may contain only metadata. Advance without making the
+// reader click through empty pages; keep each request and the whole burst bounded.
+async function readVisiblePage(params: URLSearchParams, current: () => boolean): Promise<Snapshot> {
+  const forward = params.has("after");
+  let page = await request<Snapshot>(`/api/chat/codex-attached?${params}`);
+  const newestBoundary = page.after;
+  const newerAvailable = page.has_more;
+  for (let windows = 1; windows < 8 && current() && !page.unchanged && !page.reset && !page.messages?.length; windows++) {
+    const cursor = forward ? (page.has_more ? page.after : null) : page.before;
+    const previous = params.get(forward ? "after" : "before");
+    if (cursor == null) break;
+    if (previous !== null && (forward ? cursor <= Number(previous) : cursor >= Number(previous))) {
+      throw new Error("History position did not advance; reconnect to read it.");
+    }
+    params.set(forward ? "after" : "before", String(cursor));
+    params.set("source_ref", page.source_ref ?? "");
+    params.delete("revision");
+    const next = await request<Snapshot>(`/api/chat/codex-attached?${params}`);
+    if (next.reset || next.source_ref !== page.source_ref) return next;
+    page = next;
+  }
+  // Backward skipping must not move the tail cursor backwards: those bytes
+  // contained no visible records, and polling should resume at the original tail.
+  return forward ? page : {...page, after: newestBoundary, has_more: newerAvailable};
+}
+
 /** Owner-only original conversation. It never changes the selected executor. */
-export function AttachedAgentConversations({goalId, zh}: {goalId: string; zh: boolean}) {
-  const [open, setOpen] = useState(false);
+export function AttachedAgentConversations({goalId, zh, targetAgentId}: {
+  goalId: string; zh: boolean; targetAgentId: string;
+}) {
+  const [discovering, setDiscovering] = useState(true);
   const [agents, setAgents] = useState<Binding[]>([]);
   const [selected, setSelected] = useState("");
   const [messages, setMessages] = useState<Message[]>([]);
@@ -24,6 +59,7 @@ export function AttachedAgentConversations({goalId, zh}: {goalId: string; zh: bo
   const [before, setBefore] = useState<number | null>(null);
   const [error, setError] = useState("");
   const [recoveryError, setRecoveryError] = useState("");
+  const [sendNotice, setSendNotice] = useState("");
   const [draft, setDraft] = useState("");
   const [submission, setSubmission] = useState<Submission | null>(null);
   const [sending, setSending] = useState(false);
@@ -32,16 +68,16 @@ export function AttachedAgentConversations({goalId, zh}: {goalId: string; zh: bo
   const [openRequested, setOpenRequested] = useState(false);
   const [openError, setOpenError] = useState("");
   const [refresh, setRefresh] = useState(0);
+  const [readingHistory, setReadingHistory] = useState(false);
+  const [unread, setUnread] = useState(false);
+  const following = useRef(true);
+  const after = useRef<number | null>(null);
+  const historyEpoch = useRef(0);
   const generation = useRef(0);
   const receiptGeneration = useRef(0);
   const revision = useRef("");
   const history = useRef<{source: string; size: number} | null>(null);
   const transcript = useRef<HTMLDivElement>(null);
-  const dialog = useRef<HTMLDialogElement>(null);
-  useEffect(() => {
-    if (open && !dialog.current?.open) dialog.current?.showModal();
-    else if (!open && dialog.current?.open) dialog.current.close();
-  }, [open]);
   const binding = agents.find(agent => agent.agent_id === selected);
   const awaitingReceipt = Boolean(submission?.status && submission.status !== "delivered");
   const cacheKey = binding ? `loopx-attached-input:${goalId}:${binding.binding_ref}` : "";
@@ -50,51 +86,68 @@ export function AttachedAgentConversations({goalId, zh}: {goalId: string; zh: bo
   useEffect(() => {
     let active = true;
     setAgents([]); setSelected(""); setMessages([]); setSnapshot(null); setError("");
-    if (open) void request<{agents: Binding[]}>(`/api/chat/codex-attached?${new URLSearchParams({goal_id: goalId})}`)
-      .then(value => {if (active) {setAgents(value.agents); setSelected(value.agents[0]?.agent_id ?? "");}})
-      .catch(failure => {if (active) setError(String(failure));});
+    setDiscovering(true);
+    void request<{agents: Binding[]}>(`/api/chat/codex-attached?${new URLSearchParams({goal_id: goalId})}`)
+      .then(value => {if (active) {setAgents(value.agents); setSelected(targetAgentId);}})
+      .catch(failure => {if (active) setError(String(failure));})
+      .finally(() => {if (active) setDiscovering(false);});
     return () => {active = false;};
-  }, [goalId, open, refresh]);
+  }, [goalId, refresh, targetAgentId]);
 
   useEffect(() => {
     const current = ++generation.current;
     revision.current = "";
     history.current = null;
+    after.current = null; following.current = true; historyEpoch.current++;
+    setReadingHistory(false); setUnread(false);
     setOpening(false); setOpenRequested(false); setOpenError("");
+    setSendNotice("");
     setMessages([]); setSnapshot(null); setBefore(null); setDraft(""); setSubmission(null); setSending(false); setLoadingOlder(false); setError(""); setRecoveryError("");
-    if (!binding || !open) return;
+    if (!binding) return;
     try {
+      setDraft(sessionStorage.getItem(`${cacheKey}:draft`) ?? "");
       const stored = sessionStorage.getItem(cacheKey);
       if (stored) {
         const pending = JSON.parse(stored) as Submission;
         if (!pending || typeof pending.operation_id !== "string" || typeof pending.text !== "string" || !["pending", "delivered"].includes(pending.status ?? "")) throw new Error("Invalid recovery record");
-        setDraft(pending.status === "delivered" ? "" : pending.text); setSubmission(pending);
+        if (pending.status === "pending") setDraft(pending.text);
+        setSubmission(pending);
         if (pending.status === "pending") void readReceipt(pending, current);
       }
     } catch {setRecoveryError(zh ? "浏览器回复恢复记录不可读，暂不能安全发送。请先在原 App 核对。" : "Reply recovery is unreadable; check the original App before clearing it.");}
     let timer: ReturnType<typeof setTimeout>;
     async function read() {
+      const epoch = historyEpoch.current;
       const params = new URLSearchParams(query!);
+      if (following.current && after.current !== null) params.set("after", String(after.current));
+      if (history.current) params.set("source_ref", history.current.source);
       if (revision.current) params.set("revision", revision.current);
       try {
-        const next = await request<Snapshot>(`/api/chat/codex-attached?${params}`);
-        if (current !== generation.current) return;
+        const next = await readVisiblePage(params, () => current === generation.current && epoch === historyEpoch.current);
+        if (current !== generation.current || epoch !== historyEpoch.current) return;
         const follow = !transcript.current || transcript.current.scrollHeight - transcript.current.scrollTop - transcript.current.clientHeight < 64;
         revision.current = next.revision;
         if (!next.unchanged) {
-          const reset = !history.current || history.current.source !== next.source_ref || (next.history_size ?? 0) < history.current.size;
+          const reset = next.reset || !history.current || history.current.source !== next.source_ref || (next.history_size ?? 0) < history.current.size;
           history.current = {source: next.source_ref ?? "", size: next.history_size ?? 0};
-          setMessages(previous => [...new Map([...(reset ? [] : previous), ...next.messages ?? []].map(message => [message.id, message])).values()].sort((a,b) => Number(a.id) - Number(b.id)).slice(-1000));
-          if (reset) setBefore(next.before ?? null);
+          if (following.current || reset) {
+            after.current = next.after ?? null;
+            setMessages(previous => {
+              const combined = [...new Map([...(reset ? [] : previous), ...next.messages ?? []].map(message => [message.id, message])).values()].sort((a,b) => Number(a.id) - Number(b.id));
+              if (combined.length > 300) setBefore(Number(combined[combined.length - 300].id));
+              return combined.slice(-300);
+            });
+            if (reset) {setBefore(next.before ?? null); following.current = true; setReadingHistory(false); setUnread(false);}
+          } else setUnread(true);
         }
         setSnapshot(previous => ({...previous, ...next})); setError("");
-        if (follow) requestAnimationFrame(() => transcript.current?.scrollTo({top: transcript.current.scrollHeight}));
+        if (follow && following.current) requestAnimationFrame(() => transcript.current?.scrollTo({top: transcript.current.scrollHeight}));
       } catch (failure) {if (current === generation.current) {setError(String(failure)); setSnapshot(null);}}
       finally {if (current === generation.current) timer = setTimeout(read, 1000);}
     }
     void read();
     return () => {generation.current++; clearTimeout(timer);};
-  }, [goalId, binding?.binding_ref, open]);
+  }, [goalId, binding?.binding_ref]);
 
   async function openOriginal() {
     if (!binding || opening) return;
@@ -107,22 +160,47 @@ export function AttachedAgentConversations({goalId, zh}: {goalId: string; zh: bo
     finally {if (current === generation.current) setOpening(false);}
   }
 
-  async function older() {
-    if (before === null || !query || loadingOlder) return;
+  async function older(newer = false) {
+    if ((!newer && before === null) || !query || loadingOlder) return;
     const current = generation.current;
+    const epoch = ++historyEpoch.current;
+    following.current = false; setReadingHistory(true);
     setLoadingOlder(true);
-    const params = new URLSearchParams(query); params.set("before", String(before));
+    const params = new URLSearchParams(query);
+    params.set(newer ? "after" : "before", String(newer ? after.current ?? 0 : before));
+    if (history.current) params.set("source_ref", history.current.source);
     try {
-      const next = await request<Snapshot>(`/api/chat/codex-attached?${params}`);
-      if (current === generation.current) {
-        if (!history.current || history.current.source !== next.source_ref || (next.history_size ?? 0) < history.current.size) throw new Error(zh ? "原会话历史已更新，请重新连接。" : "Original history changed; reconnect to read it.");
-        setMessages(previous => [...new Map([...(next.messages ?? []), ...previous].map(row => [row.id, row])).values()].sort((a,b) => Number(a.id) - Number(b.id)).slice(0,1000));
-        setBefore(next.before ?? null);
+      const next = await readVisiblePage(params, () => current === generation.current && epoch === historyEpoch.current);
+      if (current === generation.current && epoch === historyEpoch.current) {
+        if (next.reset || !history.current || history.current.source !== next.source_ref || (next.history_size ?? 0) < history.current.size) throw new Error(zh ? "原会话历史已更新，请重新连接。" : "Original history changed; reconnect to read it.");
+        const previousHeight = transcript.current?.scrollHeight ?? 0;
+        setMessages(previous => {
+          const combined = [...new Map([...(next.messages ?? []), ...previous].map(row => [row.id, row])).values()].sort((a,b) => Number(a.id) - Number(b.id));
+          const retained = newer ? combined.slice(-300) : combined.slice(0,300);
+          after.current = newer ? next.after ?? after.current : retained.at(-1)?.end ?? next.after ?? null;
+          setBefore(newer ? Number(retained[0]?.id) || null : next.before ?? null);
+          return retained;
+        });
+        if (!newer) requestAnimationFrame(() => {if (transcript.current) transcript.current.scrollTop += transcript.current.scrollHeight - previousHeight;});
+        if (newer && !next.has_more) {following.current = true; setReadingHistory(false); setUnread(false);}
+        setError("");
       }
     } catch (failure) {if (current === generation.current) setError(String(failure));}
     finally {if (current === generation.current) setLoadingOlder(false);}
   }
 
+  function pauseHistory() {following.current = false; setReadingHistory(true);}
+  function latest() {
+    historyEpoch.current++; after.current = null; history.current = null; revision.current = "";
+    following.current = true; setReadingHistory(false); setUnread(false); setMessages([]); setBefore(null);
+  }
+  async function loadContent(record: Message, offset: number): Promise<ContentPage> {
+    const params = new URLSearchParams(query!);
+    params.set("entry_id", record.id); params.set("content_offset", String(offset));
+    params.set("source_ref", history.current?.source ?? ""); params.set("content_ref", record.content_ref ?? "");
+    return request<ContentPage>(`/api/chat/codex-attached?${params}`);
+  }
+
   async function send() {
     if (!binding || sending || error || recoveryError || !snapshot?.can_reply || !draft.trim() || awaitingReceipt) return;
     const current = generation.current;
@@ -130,17 +208,31 @@ export function AttachedAgentConversations({goalId, zh}: {goalId: string; zh: bo
     try {sessionStorage.setItem(cacheKey, JSON.stringify(pending));}
     catch {setError(zh ? "无法保存回复回执，未发送。" : "Cannot save reply recovery; nothing was sent."); return;}
     receiptGeneration.current++;
-    setSubmission(pending); setSending(true);
+    setSubmission(pending); setSending(true); setSendNotice("");
     try {
       const result = await request<{status: string}>("/api/chat/codex-attached", {method: "POST", headers: {"Content-Type":"application/json"}, body: JSON.stringify({operation_id: pending.operation_id, text: pending.text, goal_id: goalId, agent_id: binding.agent_id, binding_ref: binding.binding_ref})});
       if (current === generation.current) {
         const delivered = {...pending, status: result.status};
         sessionStorage.setItem(cacheKey, JSON.stringify(delivered)); setSubmission(delivered);
-        if (result.status === "delivered") setDraft("");
+        if (result.status === "delivered") {sessionStorage.removeItem(`${cacheKey}:draft`); setDraft("");}
         else void readReceipt(pending, current);
         revision.current = "";
       }
-    } catch (failure) {if (current === generation.current) {setError(String(failure)); void readReceipt(pending, current);}}
+    } catch (failure) {
+      if (current === generation.current) {
+        if (failure instanceof ConversationRequestError && failure.unsubmittedOperation === pending.operation_id) {
+          // Only the owning server can prove no native effect. Keep the draft,
+          // discard this attempt, and require a fresh explicit send when idle.
+          try {
+            sessionStorage.removeItem(cacheKey);
+            receiptGeneration.current++;
+            setSubmission(null); setRecoveryError("");
+            setSnapshot(previous => previous ? {...previous, can_reply: false} : null);
+            setSendNotice(zh ? "Agent 正在忙碌或状态尚未确认；消息未发送，草稿已保留。" : "The Agent is busy or its state is unconfirmed; nothing was sent. Your draft is retained.");
+          } catch {setRecoveryError(zh ? "消息未发送，但浏览器回复恢复记录无法清理。" : "Nothing was sent, but the browser recovery record could not be cleared.");}
+        } else {setError(String(failure)); void readReceipt(pending, current);}
+      }
+    }
     finally {if (current === generation.current) setSending(false);}
   }
   async function readReceipt(pending = submission, current = generation.current) {
@@ -154,37 +246,39 @@ export function AttachedAgentConversations({goalId, zh}: {goalId: string; zh: bo
         const next = {...pending, status: receipt.status};
         sessionStorage.setItem(cacheKey, JSON.stringify(next)); setSubmission(next);
         setRecoveryError("");
-        if (receipt.status === "delivered") {receiptGeneration.current++; setDraft("");}
+        if (receipt.status === "delivered") {sessionStorage.removeItem(`${cacheKey}:draft`); receiptGeneration.current++; setDraft("");}
       }
     } catch (failure) {if (current === generation.current && receiptVersion === receiptGeneration.current) setRecoveryError(String(failure));}
   }
+  function editDraft(text: string) {
+    setDraft(text); setSubmission(null); setSendNotice("");
+    try {sessionStorage.setItem(`${cacheKey}:draft`, text);}
+    catch {setRecoveryError(zh ? "草稿无法保存在此浏览器，请复制保留后重试。" : "This browser cannot retain the draft; copy it before retrying.");}
+  }
   function nextReply() {
-    try {sessionStorage.removeItem(cacheKey); receiptGeneration.current++; setSubmission(null); setDraft(""); setError(""); setRecoveryError("");}
+    try {sessionStorage.removeItem(cacheKey); sessionStorage.removeItem(`${cacheKey}:draft`); receiptGeneration.current++; setSubmission(null); setDraft(""); setError(""); setRecoveryError("");}
     catch {setError(zh ? "无法清理回复回执。" : "Reply recovery could not be cleared.");}
   }
-  return <section className="attached-agent-conversations">
-    <button type="button" className="attached-conversation-entry" onClick={() => setOpen(true)}>{zh ? "与 Codex App 原会话对话" : "Talk to original Codex App conversations"}</button>
-    <dialog ref={dialog} className="attached-conversation-dialog" aria-label={zh ? "Codex App 原会话" : "Original Codex App conversations"} onClose={() => setOpen(false)}>
-    <header className="attached-conversation-heading"><h2>{zh ? "Codex App 原会话" : "Original Codex App conversations"}</h2><button type="button" onClick={() => setOpen(false)}>{zh ? "返回工作台" : "Return to workspace"}</button></header>
-    <div className="attached-conversation-content">
-      <p>{zh ? "每秒同步原会话已保存的消息；逐字流和审批仍在 Codex App。" : "Saved messages sync every second; token streaming and approvals remain in Codex App."}</p>
-      {agents.length ? <label>{zh ? "Agent" : "Agent"}<select aria-label={zh ? "选择原会话 Agent" : "Original conversation Agent"} value={selected} disabled={sending} onChange={event => setSelected(event.target.value)}>{agents.map(agent => <option key={agent.binding_ref} value={agent.agent_id}>{agent.agent_id}</option>)}</select></label> : !error ? <p>{zh ? "此 Goal 暂无已绑定的本机 Codex App 会话。" : "This Goal has no bound local Codex App conversation."}</p> : null}
+  return <div className="attached-conversation-content">
+
+      {discovering ? <p role="status">{zh ? "正在连接原会话…" : "Connecting to the original conversation…"}</p> : !binding && !error ? <p role="status">{zh ? "此 Agent 暂无已绑定的本机 Codex App 原会话。" : "This Agent has no bound local Codex App conversation."}</p> : null}
       {recoveryError ? <p role="alert">{recoveryError} <button type="button" disabled={sending} onClick={nextReply}>{zh ? "已在原 App 核对，清理本页回执" : "Checked in original App; clear this receipt"}</button></p> : null}
       {error ? <p role="alert">{error} <button type="button" onClick={() => setRefresh(value => value + 1)}>{zh ? "重新连接" : "Reconnect"}</button></p> : null}
+      {sendNotice ? <p role="status">{sendNotice}</p> : null}
       {binding ? <>
-        <p role="status">{!snapshot ? (zh ? "正在连接或连接不可用" : "Connecting or unavailable") : snapshot.can_reply ? (zh ? "原会话可回复" : "Original conversation accepts replies") : snapshot.activity.state === "turn_open" ? (zh ? "原会话有未结束执行；可在原 App 中追加输入" : "The original conversation has an unfinished turn; add input in the original App") : (zh ? "历史可读；回复连接或执行状态尚未确认" : "History available; reply connection or execution state unconfirmed")}</p>
-        <button type="button" className="attached-conversation-open" aria-disabled={opening} aria-busy={opening} onClick={() => void openOriginal()}>{zh ? "在 Codex App 中打开" : "Open in Codex App"}</button>
+        <div className="attached-connection-status"><div><p className="attached-conversation-source">{zh ? "Codex App · 已保存消息与工具记录自动更新" : "Codex App · saved messages and tools update automatically"}</p><p role="status">{!snapshot ? (zh ? "正在连接或连接不可用" : "Connecting or unavailable") : snapshot.can_reply ? (zh ? "原会话可回复" : "Original conversation accepts replies") : snapshot.activity.state === "turn_open" ? (zh ? "原会话有未结束执行；可在原 App 中追加输入" : "The original conversation has an unfinished turn; add input in the original App") : (zh ? "历史可读；回复连接或执行状态尚未确认" : "History available; reply connection or execution state unconfirmed")}</p></div>
+        <button type="button" className="attached-conversation-open" aria-disabled={opening} aria-busy={opening} onClick={() => void openOriginal()}>{zh ? "在 Codex App 中打开" : "Open in Codex App"}</button></div>
         {openRequested ? <p role="status">{zh ? "已请求打开原会话，请在 Codex App 中查看。" : "Requested opening the original conversation; check Codex App."}</p> : null}
         {openError ? <p role="alert">{openError}</p> : null}
-        {before !== null ? <button type="button" disabled={loadingOlder || messages.length >= 1000} onClick={() => void older()}>{zh ? "读取更早的消息" : "Read earlier messages"}</button> : null}
-        <div className="attached-conversation-messages" ref={transcript} aria-label={zh ? "原会话消息" : "Original conversation messages"}>
-          {messages.map(message => <article key={message.id} data-role={message.role}><header><strong>{message.role === "user" ? (zh ? "你" : "You") : binding.agent_id}</strong> {message.timestamp ? <time>{new Date(message.timestamp).toLocaleString()}</time> : null}</header><MarkdownText text={message.text}/>{message.truncated ? <p>{zh ? "此消息已截短；完整内容见原 App。" : "Message shortened; open the original App for full content."}</p> : null}</article>)}
+        {before !== null ? <button type="button" disabled={loadingOlder} onClick={() => void older()}>{zh ? "读取更早的消息" : "Read earlier messages"}</button> : null}
+        {readingHistory ? <div className="attached-history-navigation"><span>{zh ? "正在回看历史" : "Reading history"}{unread ? (zh ? " · 有新活动" : " · new activity") : ""}</span><button type="button" disabled={loadingOlder} onClick={() => void older(true)}>{zh ? "较新记录" : "Newer records"}</button><button type="button" onClick={latest}>{zh ? "回到最新" : "Back to latest"}</button></div> : null}
+        <div className="attached-conversation-messages" ref={transcript} onWheel={event => {if (event.deltaY < 0) pauseHistory();}} onTouchMove={pauseHistory} onClick={pauseHistory} onKeyDown={event => {if (["ArrowUp", "PageUp", "Home"].includes(event.key)) pauseHistory();}} aria-label={zh ? "原会话消息" : "Original conversation messages"}>
+          {messages.map(message => <AttachedConversationRecord key={`${history.current?.source}:${message.id}:${message.content_ref ?? ""}`} record={message} agent={binding.agent_id} zh={zh} load={loadContent}/>)}
           {!messages.length && snapshot ? <p>{zh ? "当前有界历史窗口内没有可显示的消息，可读取更早记录。" : "No displayable messages in this bounded window; read earlier records."}</p> : null}
         </div>
         {submission?.status ? <p role="status">{submission.status === "delivered" ? (zh ? "已由原 App 接纳；等待 Agent 结果。" : "Accepted by the original App; awaiting the Agent result.") : (zh ? "投递尚未确认，请先在原 App 核对，不会自动重发。" : "Delivery unconfirmed; check the original App. No automatic resend.")} {submission.status === "pending" ? <button type="button" disabled={sending} onClick={() => void readReceipt()}>{zh ? "重读投递回执" : "Recheck delivery receipt"}</button> : null}{awaitingReceipt ? <button type="button" disabled={sending} onClick={nextReply}>{zh ? "已核对，写下一条" : "Checked; write another"}</button> : null}</p> : null}
-        {!awaitingReceipt ? <form onSubmit={event => {event.preventDefault(); void send();}}><label>{zh ? `回复 ${binding.agent_id}` : `Reply to ${binding.agent_id}`}<textarea value={draft} maxLength={24000} disabled={sending} onChange={event => {setDraft(event.target.value); setSubmission(null);}}/></label><button type="submit" disabled={sending || Boolean(error || recoveryError) || !snapshot?.can_reply || !draft.trim()}>{sending ? (zh ? "正在交给原 App…" : "Sending to original App…") : (zh ? "发送到原会话" : "Send to original conversation")}</button></form> : null}
+        {!awaitingReceipt ? <form onSubmit={event => {event.preventDefault(); void send();}}><label>{zh ? `回复 ${binding.agent_id}` : `Reply to ${binding.agent_id}`}<textarea value={draft} maxLength={24000} disabled={sending} onChange={event => editDraft(event.target.value)}/></label><button type="submit" disabled={sending || Boolean(error || recoveryError) || !snapshot?.can_reply || !draft.trim()}>{sending ? (zh ? "正在交给原 App…" : "Sending to original App…") : (zh ? "发送到原会话" : "Send to original conversation")}</button></form> : null}
       </> : null}
     </div>
-    </dialog>
-  </section>;
+  ;
 }
diff --git a/apps/presentation/dashboard/src/features/personal-workspace/attached-conversation-record.tsx b/apps/presentation/dashboard/src/features/personal-workspace/attached-conversation-record.tsx
new file mode 100644
index 0000000000..42f8179fb4
--- /dev/null
+++ b/apps/presentation/dashboard/src/features/personal-workspace/attached-conversation-record.tsx
@@ -0,0 +1,73 @@
+import {useState} from "react";
+import {MarkdownText} from "./markdown";
+
+/** Provider-local read model; these records grant no execution authority. */
+export type ConversationRecord = {
+  id: string; end: number; role: "user" | "assistant" | "tool" | "activity";
+  kind: string; label: string; text: string; truncated: boolean;
+  timestamp?: string | null; content_ref?: string; redacted?: boolean; unavailable?: string;
+};
+export type ContentPage = {text: string; next_offset: number; has_more: boolean};
+
+function ToolContent({text, complete, zh}: {text: string; complete: boolean; zh: boolean}) {
+  // Presentation only: render the saved shell envelope's output as readable text.
+  // Keep every source field accessible; an exit code is not task acceptance.
+  if (complete) {
+    try {
+      const value: unknown = JSON.parse(text);
+      if (value && typeof value === "object" && !Array.isArray(value) &&
+        "output" in value && typeof value.output === "string" &&
+        "wall_time_seconds" in value && typeof value.wall_time_seconds === "number" &&
+        "exit_code" in value && (value.exit_code === null || typeof value.exit_code === "number")) {
+        return <>
+          <div className="attached-tool-metadata">{value.exit_code === null ? (zh ? "尚无退出码" : "No exit code yet") : `${zh ? "退出码" : "Exit code"} ${value.exit_code}`} · {value.wall_time_seconds} s</div>
+          <pre>{value.output}</pre>
+          <details className="attached-tool-source"><summary>{zh ? "原始记录字段" : "Original record fields"}</summary><pre>{text}</pre></details>
+        </>;
+      }
+    } catch { /* Plain text and partial/unknown formats remain lossless. */ }
+  }
+  return <pre>{text}</pre>;
+}
+
+export function AttachedConversationRecord({record, agent, zh, load}: {
+  record: ConversationRecord; agent: string; zh: boolean;
+  load: (record: ConversationRecord, offset: number) => Promise<ContentPage>;
+}) {
+  const [text, setText] = useState(record.text);
+  const [more, setMore] = useState(record.truncated);
+  const [loading, setLoading] = useState(false);
+  const [error, setError] = useState("");
+  const [offset, setOffset] = useState(Array.from(record.text).length);
+  const labels: Record<string, string> = zh ? {
+    task_started: "开始执行", task_complete: "本轮结束", turn_aborted: "执行中断", error: "执行报错",
+    function_call: "工具调用", custom_tool_call: "工具调用",
+    function_call_output: "工具结果", custom_tool_call_output: "工具结果",
+  } : {
+    task_started: "Turn started", task_complete: "Turn ended", turn_aborted: "Turn interrupted", error: "Execution error",
+    function_call: "Tool call", custom_tool_call: "Tool call",
+    function_call_output: "Tool result", custom_tool_call_output: "Tool result",
+  };
+  const title = record.role === "user" ? (zh ? "你" : "You") : record.role === "assistant" ? agent :
+    `${labels[record.kind] ?? (zh ? "记录暂不可读" : "Record unavailable")}${record.label && record.label !== record.kind ? ` · ${record.label}` : ""}`;
+  async function continueReading() {
+    if (loading) return;
+    setLoading(true); setError("");
+    try {
+      const page = await load(record, offset);
+      setText(previous => previous + page.text); setOffset(page.next_offset); setMore(page.has_more);
+    } catch (failure) {setError(String(failure));}
+    finally {setLoading(false);}
+  }
+  const content = <>
+    {record.redacted ? <p>{zh ? "此段包含疑似凭据，内容已隐藏。" : "This content contains credential-shaped data and has been withheld."}</p> : record.role === "tool" ? <ToolContent text={text} complete={!more} zh={zh}/> : <MarkdownText text={text}/>}
+    {more ? <button type="button" disabled={loading} onClick={() => void continueReading()}>{loading ? (zh ? "正在读取…" : "Loading…") : (zh ? "继续读取完整内容" : "Read more of this record")}</button> : null}
+    {error ? <p role="alert">{error}</p> : null}
+  </>;
+  const heading = <><strong>{title}</strong>{record.timestamp ? <time>{new Date(record.timestamp).toLocaleString()}</time> : null}</>;
+  return <article data-role={record.role} data-record-id={record.id}>
+    {record.role !== "tool" ? <header>{heading}</header> : null}
+    {record.unavailable ? <p>{zh ? "源记录无法安全读取；此处保留缺口，未将其当作完成。" : "This source record could not be read safely. The gap is retained, not treated as completion."}</p> :
+      record.role === "tool" || text.length > 1800 ? <details><summary>{record.role === "tool" ? heading : (zh ? "查看内容" : "Show content")}{more ? <span>{zh ? " · 可继续加载" : " · more available"}</span> : null}</summary>{content}</details> : content}
+  </article>;
+}
diff --git a/apps/presentation/dashboard/src/features/personal-workspace/channel-header.tsx b/apps/presentation/dashboard/src/features/personal-workspace/channel-header.tsx
index b7e08c9800..7042a7764a 100644
--- a/apps/presentation/dashboard/src/features/personal-workspace/channel-header.tsx
+++ b/apps/presentation/dashboard/src/features/personal-workspace/channel-header.tsx
@@ -10,6 +10,7 @@ import { useEffect, useState } from "react";
 
 export function ChannelHeader({
   agents,
+  agentWorkActive = false,
   conversationScope,
   goalLifecycleBusy,
   managerChannelBinding,
@@ -40,6 +41,7 @@ export function ChannelHeader({
   workspaceGrantLabel,
 }: {
   agents: WorkspaceAgentOption[];
+  agentWorkActive?: boolean;
   /** Steward conversation scope; absent when the host grants no workspace. */
   conversationScope?: { options: { disabled?: boolean; label: string; value: string }[]; value: string; onChange: (value: string) => void } | null;
   goalLifecycleBusy?: boolean;
@@ -77,7 +79,7 @@ export function ChannelHeader({
   const [modelDiscovery, setModelDiscovery] = useState<AgentModelDiscovery | null>(null);
   const [modelDiscoveryState, setModelDiscoveryState] = useState<"idle" | "loading" | "error">("idle");
   useEffect(() => {
-    if (readOnlySourceLabel) return;
+    if (readOnlySourceLabel || agentWorkActive) return;
     const controller = new AbortController();
     setModelDiscovery(null);
     setModelDiscoveryState("loading");
@@ -85,7 +87,7 @@ export function ChannelHeader({
       .then((result) => { if (!controller.signal.aborted) { setModelDiscovery(result); setModelDiscoveryState("idle"); } })
       .catch(() => { if (!controller.signal.aborted) setModelDiscoveryState("error"); });
     return () => controller.abort();
-  }, [readOnlySourceLabel, selectedAgentId]);
+  }, [readOnlySourceLabel, selectedAgentId, agentWorkActive]);
   const model = modelDiscovery?.model;
   const selectedModel = selectedAgentModelId === undefined ? model?.selected || model?.options[0]?.value || "" : selectedAgentModelId;
   const modelControl = model && model.options.length ? (
@@ -174,7 +176,7 @@ export function ChannelHeader({
                   : "header.managerAllocationConfigured")
     : null;
 
-  const runtimeControl = readOnlySourceLabel ? (
+  const runtimeControl = agentWorkActive ? null : readOnlySourceLabel ? (
     <span className="personal-read-only-source" title={t("header.readOnlySourceDescription", { source: readOnlySourceLabel })}><Eye size={15} />{readOnlySourceLabel}<small>{t("common.readOnly")}</small></span>
   ) : <>
     <WorkspaceSelect
diff --git a/apps/presentation/dashboard/src/features/personal-workspace/goal-agent-work-page.tsx b/apps/presentation/dashboard/src/features/personal-workspace/goal-agent-work-page.tsx
new file mode 100644
index 0000000000..ee3a4ea6f4
--- /dev/null
+++ b/apps/presentation/dashboard/src/features/personal-workspace/goal-agent-work-page.tsx
@@ -0,0 +1,41 @@
+import {useEffect, useRef} from "react";
+import {AttachedAgentConversations} from "./attached-agent-conversations";
+import {useWorkspaceI18n} from "./i18n";
+import type {WorkspaceGoal} from "./personal-workspace-model";
+
+/** Navigation uses the Goal directory; only the native provider can authorize a conversation. */
+export function GoalAgentWorkPage({goal, agentId, readOnly, onSelect, onClose}: {
+  goal: WorkspaceGoal; agentId: string; readOnly: boolean;
+  onSelect: (agentId: string) => void; onClose: () => void;
+}) {
+  const zh = useWorkspaceI18n().locale === "zh-CN";
+  const heading = useRef<HTMLHeadingElement>(null);
+  useEffect(() => {heading.current?.focus({preventScroll: true});}, [agentId]);
+  const ids = [...new Set(goal.registeredAgentIds ?? [])];
+  const lane = goal.agentLanes?.find(item => item.agentId === agentId);
+  const registered = ids.includes(agentId);
+  const hosts = lane?.hostSurfaces ?? [];
+  const supported = hosts.includes("codex-app");
+  const title = zh ? "工作记录" : "Work conversation";
+  return <section className="goal-agent-work-page" aria-label={zh ? "Agent 工作会话" : "Agent working conversation"}>
+    <header className="attached-conversation-heading">
+      <h2 ref={heading} tabIndex={-1}>{title}</h2>
+      <div className="agent-work-navigation">
+        {ids.length ? <select aria-label={zh ? "查看 Agent" : "View Agent"} value={registered ? agentId : ""} onChange={event => onSelect(event.target.value)}>
+          <option value="" disabled>{zh ? "选择 Agent" : "Choose Agent"}</option>
+          {ids.map(id => <option value={id} key={id}>{goal.agentLanes?.find(item => item.agentId === id)?.label ?? id}</option>)}
+        </select> : null}
+        <button type="button" onClick={onClose}>{zh ? "返回概览" : "Return to overview"}</button>
+      </div>
+    </header>
+    {!agentId ? <div className="agent-work-directory">
+      {ids.map(id => <button type="button" key={id} onClick={() => onSelect(id)}>{goal.agentLanes?.find(item => item.agentId === id)?.label ?? id}</button>)}
+      {!ids.length ? <p role="status">{zh ? "此 Goal 尚无已注册的 Agent。" : "This Goal has no registered Agents."}</p> : null}
+    </div> : readOnly ? <p className="agent-work-unavailable" role="status">{zh ? "此来源仅提供状态快照，无法在这里读取或回复原会话。" : "This source provides a status snapshot; original conversations cannot be read or replied to here."}</p>
+      : !registered ? <p className="agent-work-unavailable" role="status">{zh ? "此 Agent 不在当前 Goal 的已注册列表中，请选择列表中的 Agent。" : "This Agent is not registered in the current Goal. Choose an Agent from its directory."}</p>
+      : !supported ? <p className="agent-work-unavailable" role="status">{hosts.length
+        ? (zh ? `来源：${hosts.join("、")}。此宿主的工作记录与回复尚未接入。` : `Source: ${hosts.join(", ")}. Work records and replies from this host are not connected yet.`)
+        : (zh ? "此 Agent 尚无已绑定的会话来源。" : "This Agent has no bound conversation source yet.")}</p>
+      : <AttachedAgentConversations key={`${goal.goalId}:${agentId}`} goalId={goal.goalId} targetAgentId={agentId} zh={zh}/>}
+  </section>;
+}
diff --git a/apps/presentation/dashboard/src/features/personal-workspace/goal-overview.tsx b/apps/presentation/dashboard/src/features/personal-workspace/goal-overview.tsx
index 8f4724555c..7d98115abf 100644
--- a/apps/presentation/dashboard/src/features/personal-workspace/goal-overview.tsx
+++ b/apps/presentation/dashboard/src/features/personal-workspace/goal-overview.tsx
@@ -14,7 +14,8 @@ import "./goal-overview.css";
 
 export const goalOverviewAttentionId = "goal-overview-attention";
 
-export function GoalOverview({ active, goal, items, userTodos, readOnly, onOpenDetails, onSelect, onView, selectedTodoId, board, results, proposals, onPreview, historyRefreshRevision, review, digest, railOpen, onCloseRail }: {
+export function GoalOverview({ active, goal, items, userTodos, readOnly, onOpenDetails, onSelect, onView, selectedTodoId, board, results, proposals, onPreview, historyRefreshRevision, review, digest, railOpen, onCloseRail, onOpenAgentConversation }: {
+  onOpenAgentConversation?: (agentId: string) => void;
   railOpen: boolean; onCloseRail: () => void;
   review: DeliveryReviewRead; digest: GoalWorkspaceDigest;
   active: boolean; goal: WorkspaceGoal; items: WorkspaceTimelineItem[]; userTodos: WorkspaceModel["userTodos"];
@@ -106,7 +107,7 @@ export function GoalOverview({ active, goal, items, userTodos, readOnly, onOpenD
         {moreAttention ? <button className="goal-overview-more" type="button" onClick={() => onView("tasks")}>{copy.tasks}{totalAttention !== null ? ` (${totalAttention})` : ""}<ArrowRight aria-hidden size={14} /></button> : null}
       </section> : null}
     </div>
-    <GoalWorkspaceWork goal={goal} digest={digest} items={items} userTodos={userTodos} selectedTodoId={selectedTodoId} onSelect={onSelect}
+    <GoalWorkspaceWork onOpenAgentConversation={onOpenAgentConversation} goal={goal} digest={digest} items={items} userTodos={userTodos} selectedTodoId={selectedTodoId} onSelect={onSelect}
       readOnly={readOnly} active={active} railOpen={railOpen} onCloseRail={onCloseRail} historyRefreshRevision={historyRefreshRevision} proposals={proposals} onPreview={onPreview} board={board} results={results}
       map={readOnly ? <p className="goal-work-scope">{copy.remote}</p> : <DeliveryWorkMap goal={goal} userTodos={userTodos} review={review} onSelect={onSelect} selectedTodoId={selectedTodoId}/>}/>
     {readOnly ? <><p className="goal-overview-source-note">{copy.remote}</p><GoalAcceptanceObservationCard goal={goal} /></>
diff --git a/apps/presentation/dashboard/src/features/personal-workspace/goal-workspace-work.css b/apps/presentation/dashboard/src/features/personal-workspace/goal-workspace-work.css
index 2ec9d02d7f..34979a3cc6 100644
--- a/apps/presentation/dashboard/src/features/personal-workspace/goal-workspace-work.css
+++ b/apps/presentation/dashboard/src/features/personal-workspace/goal-workspace-work.css
@@ -8,7 +8,7 @@
 .goal-work-lenses button[aria-pressed="true"], .goal-work-filters button[aria-pressed="true"], .goal-all-work > [role="group"] button[aria-pressed="true"] { color: var(--pw-text); background: var(--pw-hover); border-color: var(--pw-line); }
 .goal-owner-group { margin-top: 20px; }
 .goal-owner-group:first-child { margin-top: 0; }
-.goal-owner-group > header { display: flex; gap: 12px; align-items: baseline; padding: 8px 0; border-bottom: 1px solid var(--pw-line-strong); }
+.goal-owner-group > header { display: flex; flex-wrap: wrap; gap: 12px; align-items: baseline; padding: 8px 0; border-bottom: 1px solid var(--pw-line-strong); }
 .goal-owner-group h3 { font-size: var(--text-body); line-height: var(--leading-body); font-weight: 600; }
 .goal-owner-group > header > span { color: var(--pw-muted); font-size: var(--text-caption); }
 .goal-overview .goal-work-row { width: 100%; display: grid; grid-template-columns: 16px minmax(0, 1fr) auto 36px; gap: 10px; border: 0; border-bottom: 1px solid var(--pw-line); border-radius: 0; background: transparent; padding: 12px 0; }
@@ -75,3 +75,5 @@
 @media (max-width: 640px) {
   .goal-overview .goal-direction-toggle { display: inline-flex; justify-self: start; min-height: 32px; border: 0; padding: 4px 0; background: transparent; color: var(--pw-muted); font-size: var(--text-caption); }
 }
+
+.goal-owner-group > header .goal-owner-conversation { margin-left: auto; padding: 6px 8px; min-height: 44px; border: 0; background: transparent; color: var(--pw-text); font: inherit; font-size: var(--text-caption); text-decoration: underline; text-underline-offset: 3px; cursor: pointer; }
diff --git a/apps/presentation/dashboard/src/features/personal-workspace/goal-workspace-work.tsx b/apps/presentation/dashboard/src/features/personal-workspace/goal-workspace-work.tsx
index 922f8626aa..190362192d 100644
--- a/apps/presentation/dashboard/src/features/personal-workspace/goal-workspace-work.tsx
+++ b/apps/presentation/dashboard/src/features/personal-workspace/goal-workspace-work.tsx
@@ -62,7 +62,8 @@ function AddTask({goal, proposals, onPreview, onSelect}: {
 }
 
 export function GoalWorkspaceWork({goal, digest, items, userTodos, selectedTodoId, onSelect, board, map, results,
-  readOnly, active, historyRefreshRevision, proposals, onPreview, railOpen, onCloseRail}: {
+  readOnly, active, historyRefreshRevision, proposals, onPreview, railOpen, onCloseRail, onOpenAgentConversation}: {
+  onOpenAgentConversation?: (agentId: string) => void;
   railOpen: boolean; onCloseRail: () => void;
   goal: WorkspaceGoal; digest: GoalWorkspaceDigest; items: WorkspaceTimelineItem[]; userTodos: WorkspaceModel["userTodos"];
   selectedTodoId: string | null; onSelect: (selection: WorkspaceDrawerSelection) => void;
@@ -143,7 +144,7 @@ export function GoalWorkspaceWork({goal, digest, items, userTodos, selectedTodoI
       </button>)}{!activity.length ? <p>{zh ? "当前时间线尚无已完成或返回的记录。" : "No completed work or returned results in this timeline."}</p> : null}</div>}
       <footer className="goal-work-scope">{zh ? "统计仅覆盖此 Goal；任务与历史可能分批载入。" : "Counts cover this Goal; tasks and history may be loaded in bounded pages."}<time dateTime={digest.observedAt}>{new Date(digest.observedAt).toLocaleTimeString(locale)}</time></footer>
     </aside>;
-  return <div className="goal-workspace-composition">
+  return <><div className="goal-workspace-composition">
     <div className="goal-workspace-document">
       <section className="goal-now" aria-label={zh ? "当前工作" : "Now"}>
         <header className="goal-now-header"><h2>{zh ? "当前工作" : "Now"}</h2>
@@ -156,7 +157,9 @@ export function GoalWorkspaceWork({goal, digest, items, userTodos, selectedTodoI
         </header>
         {digest.work.coverage !== "complete" ? <p className="goal-work-scope" role="status">{zh ? `当前列出 ${digest.work.listedOpen} 项；总数或覆盖范围不完整。` : `${digest.work.listedOpen} items listed; total or coverage is incomplete.`}</p> : null}
         <div className="goal-owner-groups" hidden={lens !== "owner"}>{digest.work.groups.map(group => <section className="goal-owner-group" key={group.ownerId ?? ""} data-owner-id={group.ownerId ?? ""}>
-          <header><h3>{ownerName(group.ownerId)}</h3><span>{group.todoIds.length} {zh ? "项任务" : "tasks"} · {group.todoIds.filter(id => rows.get(id)?.displayClass === group.displayClass).length} {goalWorkClassLabel(group.displayClass, zh)}</span></header>
+          <header><h3>{ownerName(group.ownerId)}</h3><span>{group.todoIds.length} {zh ? "项任务" : "tasks"} · {group.todoIds.filter(id => rows.get(id)?.displayClass === group.displayClass).length} {goalWorkClassLabel(group.displayClass, zh)}</span>
+            {!readOnly && group.ownerId && onOpenAgentConversation ? <button type="button" className="goal-owner-conversation" data-agent-id={group.ownerId} aria-label={zh ? `与 ${ownerName(group.ownerId)} 对话` : `Talk to ${ownerName(group.ownerId)}`} onClick={() => onOpenAgentConversation(group.ownerId!)}>{zh ? "工作记录" : "Work conversation"}</button> : null}
+          </header>
           {group.todoIds.map(id => task(id))}
         </section>)}
           {!digest.work.groups.length ? <p className="goal-work-scope">{digest.work.coverage === "complete" ? (zh ? "当前没有可列出的进行中任务。延后与完成记录在全部工作中。" : "No current work to list. Deferred and completed work remain in All work.") : (zh ? "当前快照没有可列出的任务。" : "No work is listed in this snapshot.")}</p> : null}
@@ -170,5 +173,6 @@ export function GoalWorkspaceWork({goal, digest, items, userTodos, selectedTodoI
       <button type="button" className="goal-work-rail-close" onClick={onCloseRail}>{zh ? "关闭全部工作" : "Close all work"}</button>
       {rail}
     </dialog> : rail}
-  </div>;
+  </div>
+  </>;
 }
diff --git a/apps/presentation/dashboard/src/features/personal-workspace/personal-workspace-model.ts b/apps/presentation/dashboard/src/features/personal-workspace/personal-workspace-model.ts
index 3611611929..ff6fec5b21 100644
--- a/apps/presentation/dashboard/src/features/personal-workspace/personal-workspace-model.ts
+++ b/apps/presentation/dashboard/src/features/personal-workspace/personal-workspace-model.ts
@@ -167,6 +167,7 @@ export type WorkspaceGoal = {
     label: string;
     lastActivityAt?: string | null;
     state?: string | null;
+    hostSurfaces?: string[];
   }>;
   /** Canonical registered identities; discovered task claimants do not grant binding authority. */
   registeredAgentIds?: string[];
@@ -568,6 +569,7 @@ export type PersonalWorkspaceCallbacks = {
   onSelectGoal?: (goalId: string | null, view: WorkspaceGoalTab) => void;
   onSelectTodo?: (todoId: string | null) => void;
   onSelectView?: (view: WorkspaceGoalTab) => void;
+  onSelectWorkAgent?: (agentId: string | null) => void;
   onOpenNotificationSettings?: (goalId?: string) => void;
   onFetchNotificationTargets?: () => Promise<Array<{ enabled: boolean; provider: string; target_name: string }>>;
   onSetupGoalChannel?: (options: { execute: boolean; goalId: string; target: string }) => Promise<{ ok: boolean; blocker?: string; public_summary?: string; status?: string }>;
diff --git a/apps/presentation/dashboard/src/features/personal-workspace/personal-workspace-page.tsx b/apps/presentation/dashboard/src/features/personal-workspace/personal-workspace-page.tsx
index 85df233936..e2ba4f1f07 100644
--- a/apps/presentation/dashboard/src/features/personal-workspace/personal-workspace-page.tsx
+++ b/apps/presentation/dashboard/src/features/personal-workspace/personal-workspace-page.tsx
@@ -51,7 +51,7 @@ import { MessageActivity } from "./message-activity";
 import { ChannelTimeline } from "./channel-timeline";
 import { ContextDrawer } from "./context-drawer";
 import { monitorScheduleReadback } from "./monitor-readback";
-import { AttachedAgentConversations } from "./attached-agent-conversations";
+import {GoalAgentWorkPage} from "./goal-agent-work-page";
 import { GoalSidebar } from "./goal-sidebar";
 import { GoalTasksView } from "./goal-tasks-view";
 import { GoalOverview, goalOverviewAttentionId } from "./goal-overview";
@@ -814,6 +814,7 @@ export function PersonalWorkspacePage({
   goalArchiveLoadState = { error: null, phase: "ready" },
   selectedView: controlledView,
   selectedTodoId: routedTodoId,
+  selectedWorkAgentId,
   managerChannelBinding,
   managerRuntime,
   model,
@@ -839,6 +840,7 @@ export function PersonalWorkspacePage({
   goalArchiveLoadState?: WorkspaceGoalArchiveLoadState;
   selectedView?: WorkspaceGoalTab;
   selectedTodoId?: string | null;
+  selectedWorkAgentId?: string | null;
   managerChannelBinding?: ManagerChannelBinding | null;
   managerRuntime?: ManagerRuntimeSessionReadback | null;
   model: WorkspaceModel;
@@ -878,6 +880,20 @@ export function PersonalWorkspacePage({
   const [proposals, setProposals] = useState<Record<string, WorkspaceActionPreview>>({});
   const [localView, setLocalView] = useState<WorkspaceGoalTab>(controlledGoalId ? "chat" : "overview");
   const selectedGoalTab = controlledView ?? localView;
+  const agentWorkActive = Boolean(controlledGoalId === undefined ? localGoalId : controlledGoalId) && selectedGoalTab === "chat" && selectedWorkAgentId != null;
+  const workReturn = useRef<{scope: string; agentId: string} | null>(null);
+  useEffect(() => {
+    if (agentWorkActive) {workReturn.current = {scope: selectionScope, agentId: selectedWorkAgentId!}; return;}
+    const previous = workReturn.current;
+    workReturn.current = null;
+    if (!previous || previous.scope !== selectionScope || selectedGoalTab !== "overview") return;
+    const frame = requestAnimationFrame(() => {
+      const entry = document.querySelector<HTMLButtonElement>(`.goal-owner-conversation[data-agent-id="${CSS.escape(previous.agentId)}"]`)
+        ?? document.querySelector<HTMLButtonElement>('.personal-goal-tabs button[aria-current="page"]');
+      entry?.focus({preventScroll: true});
+    });
+    return () => cancelAnimationFrame(frame);
+  }, [agentWorkActive, selectionScope, selectedWorkAgentId, selectedGoalTab]);
   const selectedWorkspaceRef = workspaceConversations?.selectedRef ?? null;
   const selectedWorkspaceProject = workspaceConversations?.projects?.find((project) => project.project_ref === selectedWorkspaceRef) ?? null;
   // A workspace scope exists only inside the steward conversation tab.
@@ -1139,7 +1155,7 @@ export function PersonalWorkspacePage({
         || managerChannelProposalIds.includes(item.proposal.previewId)))),
     [items, managerSessionProposalIds, managerChannelProposalIds],
   );
-  const conversationOpen = selectedGoal ? selectedGoalTab === "chat" : managerChatOpen;
+  const conversationOpen = !agentWorkActive && (selectedGoal ? selectedGoalTab === "chat" : managerChatOpen);
   const conversationMessages = selectedGoal ? goalMessages : managerMessages;
   const latestMessage = conversationMessages.at(-1);
   const latestMessageTextLength = latestMessage?.text.length ?? 0;
@@ -2121,6 +2137,7 @@ export function PersonalWorkspacePage({
           <div>
           <ChannelHeader
             agents={agents}
+            agentWorkActive={agentWorkActive}
             conversationScope={workspaceConversations && (workspaceConversations.projects?.length || workspaceConversations.readFailed || selectedWorkspaceRef) ? {
               onChange: (value) => {
                 setActiveSessionRun(null);
@@ -2175,16 +2192,16 @@ export function PersonalWorkspacePage({
               : undefined}
             resumeReviewed={!callbacks.onExecuteGoalLifecycle}
           />
-          {selectedGoal && !selectedGoal.loadState ? <GoalVitals digest={workspaceDigest} goal={selectedGoal} items={items} userTodos={model.userTodos} onFocusRegion={focusGoalRegion} />
+          {selectedGoal && !selectedGoal.loadState && !agentWorkActive ? <GoalVitals digest={workspaceDigest} goal={selectedGoal} items={items} userTodos={model.userTodos} onFocusRegion={focusGoalRegion} />
             : selectedGoal?.loadState === "loading" ? <GoalVitalsSkeleton /> : null}
           {!readOnly ? <UsageStatisticsNotice onDetails={() => openSettings({ kind: "settings", tab: "machine" })} /> : null}
           </div>
-            {selectedGoalId && selectedGoalTab === "chat" && !readOnly && selectedAgentId === "codex" && callbacks.onStartLoopX ? <GoalLoopXMode
+            {selectedGoalId && selectedGoalTab === "chat" && !agentWorkActive && !readOnly && selectedAgentId === "codex" && callbacks.onStartLoopX ? <GoalLoopXMode
               onPrepare={() => callbacks.onPrepareLoopX!(selectedAgentId, selectedGoalId)}
               key={`${selectedGoalId}:${selectedAgentId}`} sessionId={conversationSessionId} onChange={setLoopxMode}
               onExecute={(operation, settings) => callbacks.onStartLoopX?.(operation, selectedAgentId, selectedGoalId, settings)}
             /> : null}
-          <div className="personal-channel-scroll" data-active-goal-view={selectedGoal ? selectedGoalTab : undefined} ref={channelScrollRef}
+          <div className="personal-channel-scroll" data-agent-work={agentWorkActive || undefined} data-active-goal-view={selectedGoal ? selectedGoalTab : undefined} ref={channelScrollRef}
             onScroll={(event) => {
               if (!conversationOpen) return;
               const { scrollHeight, scrollTop, clientHeight } = event.currentTarget;
@@ -2192,8 +2209,8 @@ export function PersonalWorkspacePage({
               followConversationRef.current = nearBottom;
               setShowLatestMessage(!nearBottom);
             }}>
-            {selectedGoalId && selectedGoalTab === "chat" && !readOnly ? <AttachedAgentConversations key={selectedGoalId} goalId={selectedGoalId} zh={locale === "zh-CN"}/> : null}
-            {selectedGoalId && selectedGoalTab === "chat" && !readOnly && selectedAgentId === "codex" && conversationSessionId && loopxMode?.settings.execution_config && loopxMode.settings.agent_id ? <GoalTeamResults
+            {selectedGoalId && selectedGoalTab === "chat" && !agentWorkActive && callbacks.onSelectWorkAgent ? <section className="attached-agent-conversations"><button type="button" className="attached-conversation-entry" onClick={() => callbacks.onSelectWorkAgent?.("")}>{locale === "zh-CN" ? "Agent 工作记录" : "Agent work conversations"}</button></section> : null}
+            {selectedGoalId && selectedGoalTab === "chat" && !agentWorkActive && !readOnly && selectedAgentId === "codex" && conversationSessionId && loopxMode?.settings.execution_config && loopxMode.settings.agent_id ? <GoalTeamResults
               key={`${conversationSessionId}:${loopxMode.settings.agent_id}:${loopxMode.settings.execution_config}`}
               sessionId={conversationSessionId} zh={locale === "zh-CN"}
               refreshKey={JSON.stringify(loopxMode.deliveries)}/>
@@ -2226,14 +2243,15 @@ export function PersonalWorkspacePage({
             ) : selectedGoal ? (
               <GoalWorkspacePanels key={`${statusSourceControl?.activeSource.statusUrl ?? "/status.json"}:${selectedGoal.goalId}`}
                 activeTab={selectedGoalTab} scrollRef={channelScrollRef} panels={{
-                  overview: <GoalOverview railOpen={railScope === selectionScope} onCloseRail={() => setRailScope(null)} digest={workspaceDigest} review={workspaceReview} active={!settingsOpen && selectedGoalTab === "overview"} goal={selectedGoal} items={items} userTodos={model.userTodos} readOnly={readOnly}
+                  overview: <GoalOverview onOpenAgentConversation={callbacks.onSelectWorkAgent} railOpen={railScope === selectionScope} onCloseRail={() => setRailScope(null)} digest={workspaceDigest} review={workspaceReview} active={!settingsOpen && selectedGoalTab === "overview"} goal={selectedGoal} items={items} userTodos={model.userTodos} readOnly={readOnly}
                     onOpenDetails={() => setSelection({ kind: "goal", item: selectedGoal })} onSelect={setSelection} onView={setSelectedGoalTab}
                     selectedTodoId={drawerSelection?.kind === "todo" ? drawerSelection.item.todoId : null}
                     board={taskBoard(!settingsOpen && selectedGoalTab === "overview")} results={goalResults(!settingsOpen && selectedGoalTab === "overview")}
                     historyRefreshRevision={historyRefreshRevision} proposals={proposals} onPreview={createPreview} />,
                   tasks: taskBoard(!settingsOpen && selectedGoalTab === "tasks"),
                   files: goalResults(selectedGoalTab === "files" && !settingsOpen),
-                  chat: (<>
+                  chat: agentWorkActive ? <GoalAgentWorkPage key={`${selectionScope}:${selectedWorkAgentId}`} goal={selectedGoal} agentId={selectedWorkAgentId!} readOnly={readOnly}
+                    onSelect={id => callbacks.onSelectWorkAgent?.(id)} onClose={() => callbacks.onSelectWorkAgent?.(null)}/> : (<>
                     {selectedGoal && activeSessionRun?.goalId === selectedGoal.goalId ? (
                       <SessionRecordHeader
                         onClose={() => setActiveSessionRun(null)}
@@ -2271,7 +2289,7 @@ export function PersonalWorkspacePage({
                 onOpenGoalEvidence={(goalId) => { selectGoal(goalId, "chat"); }} />
             )}
           </div>
-          <div className="personal-composer-wrap">
+          <div className="personal-composer-wrap" hidden={agentWorkActive}>
             {!readOnly && actionReadback.isError ? <div className="personal-history-notice" role="status" data-testid="personal-action-readback-error">
               <span>{t("proposal.readbackUnavailable")}</span><button type="button" disabled={actionReadback.isFetching}
                 onClick={() => void actionReadback.refetch()}>{t("proposal.readbackRetry")}</button>
diff --git a/apps/presentation/dashboard/src/router.tsx b/apps/presentation/dashboard/src/router.tsx
index 8dd1d230a9..1b1cb9282c 100644
--- a/apps/presentation/dashboard/src/router.tsx
+++ b/apps/presentation/dashboard/src/router.tsx
@@ -16,6 +16,8 @@ import { AnswerReportPage } from "./features/personal-workspace/answer-report-pa
 
 const searchSchema = z.object({
   goalId: z.string().optional().default(""),
+  // Stable Goal/Agent working conversation; empty string opens the directory.
+  workAgent: z.string().regex(/^[A-Za-z0-9._:-]{0,200}$/).optional().catch(undefined),
   todo: z.string().regex(/^[A-Za-z0-9._:-]{1,200}$/).optional().catch(undefined),
   // Scopes the steward conversation to a host-granted workspace; selecting a Goal clears it.
   workspace: z.string().regex(/^[A-Za-z0-9]{1,80}$/).optional().catch(undefined),
diff --git a/apps/presentation/dashboard/src/views/dashboard-page.tsx b/apps/presentation/dashboard/src/views/dashboard-page.tsx
index 832b6a55a9..7ec3df4c4a 100644
--- a/apps/presentation/dashboard/src/views/dashboard-page.tsx
+++ b/apps/presentation/dashboard/src/views/dashboard-page.tsx
@@ -1013,16 +1013,19 @@ function buildPersonalHomeModel(
       (right.lastActivity ?? "").localeCompare(left.lastActivity ?? ""),
     );
     const knownAgentIds = new Set(sortedGoalAgentRows.map((agent) => agent.agentId));
+    const agentHostSurfaces = (id: string) => Array.from(new Set((goal.coordination?.thread_agent_bindings ?? [])
+      .flatMap(binding => binding.agent_id === id && binding.host_surface ? [binding.host_surface] : [])));
     const goalAgentLanes = [
       ...sortedGoalAgentRows.map((agent) => ({
         agentId: agent.agentId,
         label: agent.agentId,
         lastActivityAt: agent.lastActivity,
         state: agent.status.label,
+        hostSurfaces: agentHostSurfaces(agent.agentId),
       })),
       ...registeredAgentIds
         .filter((agentId) => !knownAgentIds.has(agentId))
-        .map((agentId) => ({ agentId, label: agentId, lastActivityAt: null, state: "registered" })),
+        .map((agentId) => ({ agentId, label: agentId, lastActivityAt: null, state: "registered", hostSurfaces: agentHostSurfaces(agentId) })),
     ];
     const agentRow = sortedGoalAgentRows[0];
     const goalAgentTodos = mergePersonalAgentTodos(personalAgentTodos(row), sortedGoalAgentRows, row);
@@ -1176,6 +1179,8 @@ function PersonalGoalHome({
   goalArchiveLoadState,
   selectedView,
   selectedTodoId,
+  selectedWorkAgentId,
+  onSelectWorkAgent,
   onSelectTodo,
   onSelectView,
   onGoalActivationStateChange,
@@ -1196,6 +1201,8 @@ function PersonalGoalHome({
   goalArchiveLoadState: WorkspaceGoalArchiveLoadState;
   selectedView?: WorkspaceGoalTab;
   selectedTodoId?: string | null;
+  selectedWorkAgentId?: string | null;
+  onSelectWorkAgent: (agentId: string | null) => void;
   onSelectTodo: (todoId: string | null) => void;
   onSelectView: (view: WorkspaceGoalTab) => void;
   onGoalActivationStateChange: (goalId: string, activationState: "active" | "stopped") => void;
@@ -2938,6 +2945,7 @@ function PersonalGoalHome({
           onSelectAgentModel: chooseAgentModel,
           onSelectGoal: (goalId, view) => onSelectGoal(goalId ?? "", view),
           onSelectView,
+          onSelectWorkAgent,
           onSelectTodo,
           onSendMessage: async (message, agentId, targetContextId, attachments) => sendManagerQuestion(message, { agentId, contextId: targetContextId, attachments }),
           onPrepareLoopX: (agentId, goalId) => prepareGoalConversation(goalId, agentId),
@@ -2947,6 +2955,7 @@ function PersonalGoalHome({
         goalArchiveLoadState={goalArchiveLoadState}
         selectedView={selectedView}
         selectedTodoId={selectedTodoId}
+        selectedWorkAgentId={selectedWorkAgentId}
         managerChannelBinding={managerChannelBinding}
         managerRuntime={managerRuntime}
         conversationSessionId={runtimeBindings[contextId]?.sessionId}
@@ -3169,6 +3178,7 @@ export function DashboardPage() {
         search: (current) => ({
           ...current,
           statusUrl: url,
+          workAgent: "statusUrl" in current && (!current.statusUrl || current.statusUrl === url) ? current.workAgent : undefined,
         }),
       });
     }
@@ -3422,6 +3432,7 @@ export function DashboardPage() {
         ...current,
         goalId,
         workspace: undefined,
+        workAgent: undefined,
         todo: undefined,
         view: view === "chat" ? "conversation" : view,
       }),
@@ -3429,7 +3440,7 @@ export function DashboardPage() {
   }
 
   function selectWorkspace(projectRef: string | null) {
-    void navigate({ search: (current) => ({ ...current, goalId: "", todo: undefined, workspace: projectRef ?? undefined, view: "conversation" }) });
+    void navigate({ search: (current) => ({ ...current, goalId: "", todo: undefined, workAgent: undefined, workspace: projectRef ?? undefined, view: "conversation" }) });
   }
 
   if (statusRequestActive) {
@@ -3449,6 +3460,12 @@ export function DashboardPage() {
     <PersonalGoalHome
       goalArchiveLoadState={goalArchiveLoadState}
       selectedTodoId={search.todo ?? null}
+      selectedWorkAgentId={search.workAgent ?? null}
+      onSelectWorkAgent={(agentId) => {
+        const goalId = search.goalId, statusUrl = search.statusUrl;
+        void navigate({search: current => "goalId" in current && current.goalId === goalId && current.statusUrl === statusUrl
+          ? {...current, todo: undefined, workAgent: agentId ?? undefined, view: agentId === null ? "overview" : "conversation"} : current});
+      }}
       onSelectTodo={(todoId) => {
         const goalId = search.goalId, statusUrl = search.statusUrl;
         void navigate({search: current => "goalId" in current && current.goalId === goalId && current.statusUrl === statusUrl
@@ -3456,7 +3473,7 @@ export function DashboardPage() {
       }}
       selectedView={search.view === "conversation" ? "chat" : search.goalId ? search.view ?? "chat" : "overview"}
       onSelectView={(view) => {
-        void navigate({ search: current => ({ ...current, view: view === "chat" ? "conversation" : view }) });
+        void navigate({ search: current => ({ ...current, workAgent: undefined, view: view === "chat" ? "conversation" : view }) });
       }}
       onGoalActivationStateChange={(goalId, activationState) => {
         statusRequestFenceRef.current.projectionRevision += 1;
diff --git a/docs/architecture/rfcs/desktop-execution-frontends-v0.md b/docs/architecture/rfcs/desktop-execution-frontends-v0.md
index ba557239cd..11bd960e17 100644
--- a/docs/architecture/rfcs/desktop-execution-frontends-v0.md
+++ b/docs/architecture/rfcs/desktop-execution-frontends-v0.md
@@ -1025,7 +1025,20 @@ running.
 Bounded provider checkpoint: the local Goal Chat can inspect a registered
 Codex App Agent's original saved conversation and offer an idle-only plain-text
 reply through the existing Desktop owner. It keeps bounded source windows and
-one-second saved-message observations instead of resuming another app-server.
+one-second saved-record observations instead of resuming another app-server.
+The provider view includes visible messages, function/custom-tool input and
+results, and explicit turn lifecycle records. Long text can be continued in
+place; backward/forward paging and append cursors preserve history across
+bursts. Bounded empty-window catch-up avoids repeated clicks through metadata;
+folded tool rows decode native text blocks and expose readable shell output while
+retaining source fields. Reading old records pauses insertion, with a path back to latest.
+Hidden reasoning/configuration are excluded and credential-shaped fields are
+withheld. Unsupported, malformed, non-text and over-limit source records remain
+visible coverage gaps. The target is a stable working conversation for every
+Goal/Agent. The Goal directory now opens a stable Agent route, preserving reload
+and Back/Forward and showing unbound or unsupported hosts explicitly. The
+ordinary Goal composer/executor is absent in this view. This first provider does
+not establish other-provider coverage or complete native activity/stream parity.
 See the [provider boundary and operation](../../integrations/session-runtime-control-plane-adapter.md#experimental-owner-local-codex-app-conversations).
 This is an experimental provider proposal, not full Slice B acceptance:
 token deltas, busy-turn steering/queueing, approval callbacks, native live-send
@@ -1034,7 +1047,10 @@ Its bounded user task is following up with a specific Agent while reviewing
 Goal work. Confirmed input leaves the composer ready without a redundant
 acknowledgement. Interrupted responses recover from existing receipts without
 resubmitting; genuinely uncertain input still requires recovery before another send.
-The separate conversation window remains an interim entry. Evaluate subsequent
+The overview's owner entry opens that exact Agent with one navigation action,
+without repeating Agent selection; an absent binding stays unavailable. The
+stable page reuses the existing native provider and authority. This reduces the
+local overview path; evaluate the remaining working-session acceptance
 integration against selecting the original conversation in Codex App, including
 target discovery, correction and result readback; transport success alone does
 not establish a shorter task path, independent acceptance or G1 completion.
diff --git a/docs/integrations/session-runtime-control-plane-adapter.md b/docs/integrations/session-runtime-control-plane-adapter.md
index 17c48f1a10..9cb7419d5a 100644
--- a/docs/integrations/session-runtime-control-plane-adapter.md
+++ b/docs/integrations/session-runtime-control-plane-adapter.md
@@ -107,9 +107,20 @@ chat window or successful transport alone does not establish a better experience
 than working in Codex App. Goal progress and acceptance still come from their
 existing owners, never from the transcript or an input acknowledgement.
 
-The Goal **Chat** view can open **Original Codex App conversations**, select a
-registered Agent, read its original saved messages and send a plain-text reply
-when that conversation is observed idle. Closing the dialog stops observation;
+In the Goal overview's **By owner** view, **Work conversation** opens that owner's
+stable working page directly. The owner is already selected; a
+missing binding is shown as unavailable and never selects another Agent instead.
+Read-only workspaces do not expose this control. The Goal **Chat** view also
+offers **Agent work conversations** with the complete registered Agent directory.
+The URL retains the selected Goal and `workAgent` across reload and browser
+Back/Forward. Goal or source changes clear the Agent route. Unbound and unsupported
+hosts remain visible with their specific limitation; discovery never silently
+substitutes a different Agent. The native provider still authorizes each read
+and reply independently. The page hides the ordinary Goal composer and executor
+selector so a reply has one explicit recipient.
+
+Supported entries read the original saved work records and send a plain-text reply
+when that conversation is observed idle. Leaving the Agent page stops observation;
 the original App keeps its executor, conversation, model and approval settings.
 There is no separate Agent process, automatic resume/fork or permission change.
 
@@ -117,11 +128,41 @@ This is an experimental Desktop provider within the existing native Chat
 boundary, not a second generic session authority. Binding selection reuses
 `thread_agent_binding`; activity reuses the existing Codex host observer. The
 provider reads the uniquely matching local Codex home and bounded read-only
-SQLite/JSONL windows. It returns user/assistant text to the local owner UI,
-excluding tool output and reasoning; it does not read authentication files.
-Original message text can contain private content and stays owner-local. Reading older windows
-is explicit. One-second observation of saved messages is **not token streaming**.
-Full history is not loaded into the App or copied into LoopX run history.
+SQLite/JSONL windows. The history view now includes user/assistant visible
+messages, function/custom-tool calls and results, and explicit turn start/end,
+interruption and error records. This intentionally extends the former text-only
+default. System/developer instructions, analysis/reasoning, token counters and
+duplicate message mirrors are excluded; authentication files are never read.
+The provider does not infer a successful task, a retry or current execution from
+a tool result or a recorded turn end. Current activity retains its own observer.
+
+Tool records use a single expandable row; long text continues in the same view
+with explicit content reads. Native text-only output blocks are decoded before
+pagination so Unicode offsets remain lossless. Structured shell output shows its
+output and recorded exit code, with every original field available in a disclosure;
+unknown formats remain verbatim. Neither a rendered exit code nor readable output
+establishes task acceptance. Native record positions order and deduplicate pages, including
+bursts larger than a page between observations and incomplete appends. Older and
+newer pages remain reachable when the visible window reaches 300 records.
+Looking back pauses automatic insertion; new activity is disclosed without
+moving the reader. Source and content fingerprints reject stale detail reads;
+history replacement resets the visible window instead of mixing conversations.
+Pages contain at most 100 records and scan approximately 2 MiB, allowing a whole
+larger record at a boundary. The reader skips up to eight metadata-only windows
+per read gesture or observation; it stops on visible work, the source boundary,
+a changed source or navigation away. Exhausting that bounded burst leaves the
+history controls available; it never scans the full rollout without a bound. Detail responses carry up to 24,000 characters.
+Records above the 8 MiB reader limit, malformed records and unsupported response
+types retain an explicit unavailable position. Non-text attachments are disclosed
+as unavailable. These limits remain coverage gaps, not a claim of complete native
+event parity. Credential-shaped content is withheld through the shared detector;
+that detector is not a guarantee of identifying every possible secret.
+
+Original content remains private to the local owner. One-second observation of
+saved records is **not token streaming**. History is neither copied into LoopX
+run history nor made available to a shared sink. Stable Agent routing is shared
+by the Goal directory; other providers and native approval/stream parity remain
+within the working-session acceptance. The Codex provider does not close those gaps.
 
 Reply uses Codex Desktop's version-sensitive follower IPC, requires its original
 owner to advertise support for external input, and retains the original thread
@@ -136,13 +177,19 @@ acknowledgement, without copying the message body. The same operation cannot be
 sent twice. A confirmed submission clears the draft and leaves the next reply
 composer available, including after reload; it does not require a second human
 acknowledgement. Sending again still requires an explicit new message and a fresh
-idle observation. After an interrupted response or reopening with a pending
+idle observation. If the Agent becomes busy before dispatch, the API returns
+`input_not_submitted: true` with the rejected operation id. The page retains the
+draft and restores the composer directly, including across reload, without an
+original-App check or automatic resend. This proof applies only before a receipt
+or native input exists; a generic conflict, missing receipt or transport failure
+does not establish it. After an interrupted response or reopening with a pending
 submission, the page automatically reads its existing receipt once. A recorded
 acknowledgement restores the composer without another user step; genuinely
 unconfirmed delivery remains pending and never silently retries a native effect.
 Check the original App before discarding an uncertain receipt. Late reads cannot
 restore a discarded operation over a new draft. The UI keeps only its reply recovery
-record in the current browser session. Replies are explicit local owner actions;
+record and unsent draft in the current browser session, scoped to the exact Goal
+and binding; switching Agents never carries text to another recipient. Replies are explicit local owner actions;
 a registered binding or observer does not authorize an Agent to message peers.
 
 The local presentation API is `/api/chat/codex-attached`: GET requires the
@@ -157,7 +204,7 @@ the fixed Codex bundle with that conversation's canonical UUID. It cannot launch
 arbitrary URLs or commands, submit input or bypass the desktop navigation fence.
 The UI reports OS dispatch, not proof that the App displayed the thread; errors
 are visible and retry requires another explicit click. Other hosts report this
-operation unavailable. Close the dialog to stop reads; rolling back the runtime
+operation unavailable. Leave the Agent page to stop reads; rolling back the runtime
 removes this UI/provider without editing native sessions, credentials or App
 startup configuration. Do not expose this owner-only API through a shared sink.
 
diff --git a/examples/personal-workspace-browser/agent-work-after-desktop.png b/examples/personal-workspace-browser/agent-work-after-desktop.png
new file mode 100644
index 0000000000..e38c38f8d7
Binary files /dev/null and b/examples/personal-workspace-browser/agent-work-after-desktop.png differ
diff --git a/examples/personal-workspace-browser/agent-work-after-phone.png b/examples/personal-workspace-browser/agent-work-after-phone.png
new file mode 100644
index 0000000000..75796fb395
Binary files /dev/null and b/examples/personal-workspace-browser/agent-work-after-phone.png differ
diff --git a/examples/personal-workspace-browser/agent-work-before-desktop.png b/examples/personal-workspace-browser/agent-work-before-desktop.png
new file mode 100644
index 0000000000..182fccf21b
Binary files /dev/null and b/examples/personal-workspace-browser/agent-work-before-desktop.png differ
diff --git a/examples/personal-workspace-browser/agent-work-overview-after.png b/examples/personal-workspace-browser/agent-work-overview-after.png
new file mode 100644
index 0000000000..2b2f53474f
Binary files /dev/null and b/examples/personal-workspace-browser/agent-work-overview-after.png differ
diff --git a/examples/personal-workspace-browser/agent-work-overview-before.png b/examples/personal-workspace-browser/agent-work-overview-before.png
new file mode 100644
index 0000000000..0ed44f48c2
Binary files /dev/null and b/examples/personal-workspace-browser/agent-work-overview-before.png differ
diff --git a/examples/personal-workspace-browser/agent-work-tool-result.png b/examples/personal-workspace-browser/agent-work-tool-result.png
new file mode 100644
index 0000000000..a2e56e9f0c
Binary files /dev/null and b/examples/personal-workspace-browser/agent-work-tool-result.png differ
diff --git a/examples/personal-workspace-browser/codex-attached.mjs b/examples/personal-workspace-browser/codex-attached.mjs
index 707b5bbaeb..cabe62c3a4 100644
--- a/examples/personal-workspace-browser/codex-attached.mjs
+++ b/examples/personal-workspace-browser/codex-attached.mjs
@@ -25,17 +25,85 @@ async function runConversation(browser, uncertain) {
     const [line] = await Promise.race([once(lines,'line'), once(child,'exit').then(() => {throw new Error(stderr);}), new Promise((_, reject) => {timer = setTimeout(() => reject(new Error('Native fixture did not start')), 30_000);})]);
     clearTimeout(timer);
     const {url} = JSON.parse(line);
-    context = await openWorkspacePage(browser, url, {gotoWaitUntil: 'domcontentloaded', apiOptions: {fixturePort: new URL(url).port}, beforeGoto: async (_api, page) => {
+    context = await openWorkspacePage(browser, url, {gotoWaitUntil: 'domcontentloaded', apiOptions: {fixturePort: new URL(url).port}, beforeGoto: async (api, page) => {
+      api.transformStatus = fixture => {
+        const directoryGoal = fixture.run_history.goals.find(goal => goal.id === 'product-release');
+        directoryGoal.coordination = {registered_agents:['worker','other-worker','remote-worker'], thread_agent_bindings:[
+          {agent_id:'worker',host_surface:'codex-app'}, {agent_id:'remote-worker',host_surface:'cursor'},
+        ]};
+        let goal = fixture.attention_queue.items.find(item => item.goal_id === 'product-release');
+        if (!goal) {
+          goal = {goal_id:'product-release',status:'active',waiting_on:'worker',severity:'info',recommended_action:'Review worker result',
+            project_asset:{owner:'worker',gate:'none',next_action:'Review worker result',stop_condition:'Results reviewed'}};
+          fixture.attention_queue.items.push(goal);
+        }
+        const todos = ['worker', 'other-worker'].map((owner, index) => ({index, done:false, status:'open', role:'agent', task_class:'advancement_task', todo_id:`owner-task-${index}`, text:`Review ${owner} result`, claimed_by:owner}));
+        goal.agent_todos = {items:todos, open_count:2, total_count:2, done_count:0};
+        goal.project_asset = {...goal.project_asset, agent_todos:{items:todos, open:2, done:0, total:2}};
+      };
       // Unrelated Goal/status APIs use the public synthetic workspace. The
       // original-conversation route always reaches the real production owner.
       await page.route('**/api/chat/codex-attached**', route => route.continue());
     }});
     const {page} = context;
     await page.locator('.personal-goal-link').filter({hasText:'Product Release'}).click();
+    if (!uncertain) {
+      await page.getByRole('navigation',{name:'Goal 视图'}).getByRole('button',{name:'概览',exact:true}).click();
+      // Start with the owner of the work in view. Never choose another bound
+      // Agent merely because the requested owner has no native conversation.
+      const other = page.getByRole('button',{name:'与 other-worker 对话',exact:true});
+      await other.click();
+      const unavailable = page.getByRole('region',{name:'Agent 工作会话',exact:true});
+      await unavailable.getByText('此 Agent 尚无已绑定的会话来源。',{exact:true}).waitFor();
+      assert.equal(await unavailable.getByText('Original result',{exact:true}).count(),0);
+      assert.equal(await unavailable.getByRole('textbox').count(),0);
+      await page.goBack();
+      await other.waitFor();
+      assert.ok(await other.evaluate(node => node === document.activeElement));
+      const entry = page.getByRole('button',{name:'与 worker 对话',exact:true});
+      await entry.click();
+      const owner = page.getByRole('region',{name:'Agent 工作会话',exact:true});
+      await owner.getByText('Original result',{exact:true}).waitFor();
+      assert.equal(await owner.getByRole('combobox',{name:'查看 Agent'}).inputValue(),'worker', 'The owner was already selected by the entry');
+      assert.equal(new URL(page.url()).searchParams.get('workAgent'),'worker');
+      await page.reload();
+      await owner.getByText('Original result',{exact:true}).waitFor();
+      assert.equal((await (await page.request.get(new URL('/fixture/inputs',url).href)).json()).count,0);
+      await owner.getByRole('textbox',{name:'回复 worker',exact:true}).fill('保留在 worker 的草稿');
+      await page.reload();
+      await owner.getByText('Original result',{exact:true}).waitFor();
+      assert.equal(await owner.getByRole('textbox',{name:'回复 worker',exact:true}).inputValue(),'保留在 worker 的草稿');
+      assert.equal(await page.getByRole('textbox',{name:'向 LoopX 发送消息',exact:true}).count(),0);
+      assert.equal(await page.getByRole('combobox',{name:'选择 Chat Runtime',exact:true}).count(),0);
+      await page.locator('.personal-goal-link').filter({hasText:'Research Monitor'}).click();
+      assert.equal(new URL(page.url()).searchParams.has('workAgent'),false);
+      assert.equal(await owner.count(),0);
+      await page.goBack();
+      await owner.getByText('Original result',{exact:true}).waitFor();
+      assert.equal(await owner.getByRole('textbox',{name:'回复 worker',exact:true}).inputValue(),'保留在 worker 的草稿');
+      await owner.getByRole('textbox',{name:'回复 worker',exact:true}).fill('');
+      await owner.getByRole('combobox',{name:'查看 Agent'}).selectOption('remote-worker');
+      await owner.getByText('来源：cursor。此宿主的工作记录与回复尚未接入。',{exact:true}).waitFor();
+      assert.equal(await owner.getByRole('textbox').count(),0);
+      await page.screenshot({path:resolve(outputDir,'attached-agent-unsupported.png'),animations:'disabled'});
+      await page.goBack();
+      await owner.getByText('Original result',{exact:true}).waitFor();
+      await page.goForward();
+      await owner.getByText('来源：cursor。此宿主的工作记录与回复尚未接入。',{exact:true}).waitFor();
+      await owner.getByRole('button',{name:'返回概览',exact:true}).click();
+      await entry.waitFor();
+      const unknown = new URL(page.url()); unknown.searchParams.set('view','conversation'); unknown.searchParams.set('workAgent','missing-agent');
+      await page.goto(unknown.href);
+      await owner.getByText('此 Agent 不在当前 Goal 的已注册列表中，请选择列表中的 Agent。',{exact:true}).waitFor();
+      assert.equal(await owner.getByRole('textbox').count(),0);
+      await owner.getByRole('button',{name:'返回概览',exact:true}).click();
+    }
     await page.getByRole('navigation',{name:'Goal 视图'}).getByRole('button',{name:'对话',exact:true}).click();
-    const panel = page.getByRole('dialog', {name:'Codex App 原会话',exact:true});
+    const panel = page.getByRole('region', {name:'Agent 工作会话',exact:true});
     await page.screenshot({path:resolve(outputDir,'attached-codex-entry-desktop.png'),animations:'disabled'});
-    await page.getByRole('button',{name:'与 Codex App 原会话对话',exact:true}).click();
+    await page.getByRole('button',{name:'Agent 工作记录',exact:true}).click();
+    assert.equal(await panel.locator('.agent-work-directory button').count(),3);
+    await panel.getByRole('button',{name:'worker',exact:true}).click();
     await panel.getByText('Original result',{exact:true}).waitFor();
     await panel.getByText('原会话可回复',{exact:true}).waitFor();
     const inputCount = async () => (await (await page.request.get(new URL('/fixture/inputs',url).href)).json()).count;
@@ -46,14 +114,21 @@ async function runConversation(browser, uncertain) {
       if (request.method() === 'POST' && new URL(request.url()).pathname === '/api/chat/codex-attached') sentOperations.push(request.postDataJSON().operation_id);
     });
     if (uncertain) {
+      const unrelatedRejection = async route => {
+        const response = await route.fetch();
+        assert.equal((await response.json()).status,'pending');
+        // Even an explicit non-submission proof cannot clear another operation.
+        await route.fulfill({status:409,contentType:'application/json',body:JSON.stringify({ok:false,error:'Unrelated operation rejected',input_not_submitted:true,operation_id:'different-operation'})});
+      };
+      await page.route('**/api/chat/codex-attached',unrelatedRejection);
       await composer.fill('核对一次投递，不要自动重发。');
       const submitted = page.waitForResponse(response => response.request().method() === 'POST' && new URL(response.url()).pathname === '/api/chat/codex-attached');
       await send.click();
       await submitted;
+      await page.unroute('**/api/chat/codex-attached',unrelatedRejection);
       await panel.getByText('投递尚未确认，请先在原 App 核对，不会自动重发。',{exact:false}).waitFor();
       assert.equal(await inputCount(),1);
       await page.reload();
-      await page.getByRole('button',{name:'与 Codex App 原会话对话',exact:true}).click();
       await panel.getByRole('button',{name:'重读投递回执',exact:true}).click();
       assert.equal(await composer.count(),0, 'Unconfirmed input must not expose another send');
       assert.equal(await inputCount(),1, 'Reload and receipt reads must not repeat the effect');
@@ -96,9 +171,9 @@ async function runConversation(browser, uncertain) {
     assert.equal(await panel.getByRole('alert').count(),0);
     assert.equal(await panel.locator('a[href^="codex:"]').count(),0);
     assert.equal(await panel.evaluate(node => node.contains(document.activeElement)), true);
-    await page.keyboard.press('Escape');
+    await panel.getByRole('button',{name:'返回概览',exact:true}).click();
     assert.equal(await panel.isVisible(), false);
-    await page.getByRole('button',{name:'与 Codex App 原会话对话',exact:true}).click();
+    await page.goBack();
     await panel.getByText('Original result',{exact:true}).waitFor();
     await page.request.post(new URL('/fixture/append',url).href);
     await panel.getByText('原 Agent 的新结果：已保留原会话。',{exact:true}).waitFor();
@@ -110,20 +185,40 @@ async function runConversation(browser, uncertain) {
     assert.equal(await composer.inputValue(),'');
     assert.equal(await panel.getByRole('button',{name:'已核对，写下一条',exact:true}).count(),0);
     await page.reload();
-    await page.getByRole('button',{name:'与 Codex App 原会话对话',exact:true}).click();
     await panel.getByText('已由原 App 接纳；等待 Agent 结果。',{exact:false}).waitFor();
     assert.equal(await composer.inputValue(),'', 'Reload must not turn a confirmed message back into a draft');
     assert.equal(await inputCount(),1, 'Reload must not submit anything');
     await page.screenshot({path:resolve(outputDir,'attached-codex-conversation-desktop.png'),animations:'disabled'});
     await page.setViewportSize({width:390,height:844});
     await page.emulateMedia({reducedMotion:'reduce'});
-    await panel.getByRole('heading',{name:'Codex App 原会话',exact:true}).scrollIntoViewIfNeeded();
+    await panel.getByRole('heading',{name:'工作记录',exact:true}).scrollIntoViewIfNeeded();
     assert.ok(await panel.boundingBox());
     assert.equal(await page.evaluate(() => document.documentElement.scrollWidth <= innerWidth),true);
     await page.screenshot({path:resolve(outputDir,'attached-codex-conversation-phone.png'),animations:'disabled'});
-    await page.request.post(new URL('/fixture/busy',url).href);
-    await panel.getByText('原会话有未结束执行；可在原 App 中追加输入',{exact:true}).waitFor();
+    // The host may become busy between the idle snapshot and the explicit send.
+    const busyRace = async route => {
+      await page.request.post(new URL('/fixture/busy',url).href);
+      const response = await route.fetch();
+      const rejected = await response.json();
+      assert.equal(response.status(),409);
+      assert.equal(rejected.input_not_submitted,true);
+      assert.equal(rejected.operation_id,route.request().postDataJSON().operation_id);
+      await route.fulfill({response});
+    };
+    await page.route('**/api/chat/codex-attached',busyRace);
     await composer.fill('继续检查这份结果。');
+    await send.click();
+    await panel.getByText('Agent 正在忙碌或状态尚未确认；消息未发送，草稿已保留。',{exact:true}).waitFor();
+    await page.unroute('**/api/chat/codex-attached',busyRace);
+    assert.equal(await inputCount(),1, 'A pre-dispatch rejection creates no native input');
+    assert.equal(await composer.inputValue(),'继续检查这份结果。');
+    assert.equal(await panel.getByRole('button',{name:'已核对，写下一条',exact:true}).count(),0);
+    assert.equal(await page.evaluate(() => Object.keys(sessionStorage).filter(key => key.startsWith('loopx-attached-input:') && !key.endsWith(':draft')).length),0);
+    await page.screenshot({path:resolve(outputDir,'attached-codex-busy-recovery-phone.png'),animations:'disabled'});
+    await page.reload();
+    await panel.getByText('原会话有未结束执行；可在原 App 中追加输入',{exact:true}).waitFor();
+    assert.equal(await composer.inputValue(),'继续检查这份结果。', 'Rejected input remains a draft across reload');
+    assert.equal(await inputCount(),1, 'Reload must not retry the rejected input');
     assert.equal(await send.isDisabled(),true, 'Keeping the composer must not bypass host activity');
     await page.request.post(new URL('/fixture/append',url).href);
     await panel.getByText('原会话可回复',{exact:true}).waitFor();
@@ -131,8 +226,8 @@ async function runConversation(browser, uncertain) {
     await page.keyboard.press('Enter');
     await panel.getByText('已由原 App 接纳；等待 Agent 结果。',{exact:false}).waitFor();
     assert.equal(await inputCount(),2);
-    assert.equal(sentOperations.length,2);
-    assert.equal(new Set(sentOperations).size,2, 'Each explicit new reply needs its own operation');
+    assert.equal(sentOperations.length,3);
+    assert.equal(new Set(sentOperations).size,3, 'Each explicit new reply needs its own operation');
     assert.equal(await composer.inputValue(),'');
     let receiptReadUnavailable = true;
     await page.route('**/api/chat/codex-attached**', async route => {
@@ -150,21 +245,108 @@ async function runConversation(browser, uncertain) {
     await send.click();
     await lostResponse;
     assert.equal(await inputCount(),3);
-    assert.equal(await page.evaluate(() => JSON.parse(Object.entries(sessionStorage).find(([key]) => key.startsWith('loopx-attached-input:'))[1]).status),'pending');
+    assert.equal(await page.evaluate(() => JSON.parse(Object.entries(sessionStorage).find(([key]) => key.startsWith('loopx-attached-input:') && !key.endsWith(':draft'))[1]).status),'pending');
     receiptReadUnavailable = false;
     await page.reload();
-    await page.getByRole('button',{name:'与 Codex App 原会话对话',exact:true}).click();
     await panel.getByText('已由原 App 接纳；等待 Agent 结果。',{exact:false}).waitFor({timeout:5000});
     assert.equal(await composer.inputValue(),'');
     assert.equal(await inputCount(),3, 'Automatic recovery must not submit another input');
-    assert.equal(sentOperations.length,3);
+    assert.equal(sentOperations.length,4);
     await composer.fill('本页也自动读取成功回执。');
     await send.click();
     await panel.getByText('已由原 App 接纳；等待 Agent 结果。',{exact:false}).waitFor();
     assert.equal(await composer.inputValue(),'');
     assert.equal(await inputCount(),4, 'In-page recovery must only read the receipt');
-    assert.equal(new Set(sentOperations).size,4);
+    assert.equal(new Set(sentOperations).size,5);
     await page.setViewportSize({width:1512,height:982});
+    await page.getByRole('navigation',{name:'Goal 视图'}).getByRole('button',{name:'概览',exact:true}).click();
+    await page.getByRole('button',{name:'与 worker 对话',exact:true}).click();
+    const direct = page.getByRole('region',{name:'Agent 工作会话',exact:true});
+    await direct.getByText('原会话可回复',{exact:true}).waitFor();
+    await direct.getByRole('textbox',{name:'回复 worker',exact:true}).fill('从负责人的工作直接追问。');
+    await direct.getByRole('button',{name:'发送到原会话',exact:true}).click();
+    await direct.locator('.attached-conversation-messages').getByText('从负责人的工作直接追问。',{exact:true}).waitFor();
+    assert.equal(await inputCount(),5);
+    assert.equal(new Set(sentOperations).size,6);
+    assert.equal(await direct.getByRole('textbox',{name:'回复 worker',exact:true}).inputValue(),'');
+    await page.screenshot({path:resolve(outputDir,'attached-codex-owner-conversation.png'),animations:'disabled'});
+    await page.request.post(new URL('/fixture/work-records',url).href);
+    await direct.getByText('工作结果已返回。',{exact:true}).waitFor();
+    const toolResult = direct.locator('article[data-role="tool"]').filter({hasText:'工具结果'});
+    await toolResult.locator('summary').click();
+    assert.equal(await toolResult.getByText('COMPLETE TOOL RESULT',{exact:false}).count(),0);
+    await toolResult.getByRole('button',{name:'继续读取完整内容',exact:true}).click();
+    await toolResult.getByText('COMPLETE TOOL RESULT',{exact:false}).waitFor();
+    assert.equal(await toolResult.getByRole('button',{name:'继续读取完整内容',exact:true}).count(),0);
+    // Unicode detail offsets must count source characters, not JS UTF-16 units.
+    assert.equal(await toolResult.locator('pre').textContent(),'Validation output\n' + '🧭验证结果\n'.repeat(6000) + 'COMPLETE TOOL RESULT');
+    await toolResult.locator('summary').click();
+    await page.screenshot({path:resolve(outputDir,'attached-codex-work-timeline.png'),animations:'disabled'});
+    if (await direct.getByRole('button',{name:'回到最新',exact:true}).count()) {
+      await direct.getByRole('button',{name:'回到最新',exact:true}).click();
+      await direct.getByText('工作结果已返回。',{exact:true}).waitFor();
+    }
+    await page.request.post(new URL('/fixture/burst',url).href);
+    await direct.getByText('Activity 329',{exact:true}).waitFor();
+    assert.ok(await direct.locator('article').count() <= 300, 'The visible history is bounded without making older records unreachable');
+    await direct.getByRole('button',{name:'读取更早的消息',exact:true}).click();
+    await direct.getByText('Original request',{exact:true}).waitFor();
+    assert.equal(await inputCount(),5, 'History and tool details never execute another input');
+    await page.request.post(new URL('/fixture/append',url).href);
+    await direct.getByText('正在回看历史 · 有新活动',{exact:true}).waitFor();
+    await direct.getByRole('button',{name:'较新记录',exact:true}).click();
+    await direct.getByText('Activity 329',{exact:true}).waitFor();
+    // Following history remains continuous across multi-megabyte invisible metadata.
+    await page.reload();
+    await direct.getByText('Activity 329',{exact:true}).waitFor();
+    await page.request.post(new URL('/fixture/metadata-gap',url).href);
+    await page.request.post(new URL('/fixture/tool-envelope',url).href);
+    const envelope = direct.locator('article[data-role="tool"]').filter({hasText:'退出码 1'});
+    await envelope.locator('summary').first().focus();
+    await page.keyboard.press('Enter');
+    await envelope.getByText('Readable shell result\nSecond line',{exact:true}).waitFor();
+    assert.equal(await envelope.locator('pre').first().textContent(),'Readable shell result\nSecond line');
+    await envelope.getByText('原始记录字段',{exact:true}).click();
+    assert.match(await envelope.locator('.attached-tool-source pre').textContent(), /synthetic/);
+    assert.equal(await inputCount(),5);
+    await page.screenshot({path:resolve(outputDir,'attached-codex-tool-readable.png'),animations:'disabled'});
+    // Reopening at an invisible tail finds prior visible work without an empty
+    // page/another click. Reading older crosses the same gap in one action.
+    await page.request.post(new URL('/fixture/metadata-gap',url).href);
+    await page.reload();
+    await panel.getByRole('textbox',{name:'回复 worker',exact:true}).waitFor();
+    await panel.locator('article[data-role="tool"] summary').first().waitFor();
+    await panel.getByRole('button',{name:'读取更早的消息',exact:true}).click();
+    await panel.getByText('Activity 329',{exact:true}).waitFor();
+    assert.equal(await send.isDisabled(),true, 'History readback must not infer idle from old events outside the observer window');
+    // A pending invisible window must not keep scanning or reinsert the old
+    // Agent's content after navigation away. Hold the real backend response.
+    let releaseWindow, windowStarted;
+    const heldWindow = new Promise(resolve => {releaseWindow = resolve;});
+    const windowRead = new Promise(resolve => {windowStarted = resolve;});
+    let historyReads = 0;
+    const delayedWindow = async route => {
+      const query = new URL(route.request().url()).searchParams;
+      if (query.get('agent_id') !== 'worker' || query.has('operation_id')) return route.continue();
+      historyReads++;
+      const response = await route.fetch();
+      const value = await response.json();
+      if (value.messages?.length === 0 && value.before) {windowStarted(); await heldWindow;}
+      await route.fulfill({response});
+    };
+    await page.route('**/api/chat/codex-attached?*',delayedWindow);
+    await page.reload();
+    await windowRead;
+    await panel.getByRole('combobox',{name:'查看 Agent'}).selectOption('other-worker');
+    await panel.getByText('此 Agent 尚无已绑定的会话来源。',{exact:true}).waitFor();
+    const lateWindow = page.waitForResponse(response => new URL(response.url()).searchParams.get('agent_id') === 'worker');
+    releaseWindow(); await lateWindow;
+    await page.evaluate(() => new Promise(resolve => requestAnimationFrame(() => requestAnimationFrame(resolve))));
+    assert.equal(historyReads,1, 'Switching Agent cancels the remaining empty-window chain');
+    assert.equal(await panel.locator('article').count(),0);
+    await page.unroute('**/api/chat/codex-attached?*',delayedWindow);
+    await panel.getByRole('combobox',{name:'查看 Agent'}).selectOption('worker');
+    await panel.locator('article[data-role="tool"] summary').first().waitFor();
     await page.request.post(new URL('/fixture/rebind',url).href);
     await panel.getByRole('alert').waitFor();
     await openOriginal.click();
diff --git a/examples/personal-workspace-browser/codex_attached_fixture.py b/examples/personal-workspace-browser/codex_attached_fixture.py
index b3c9ea4e47..cf874030b7 100644
--- a/examples/personal-workspace-browser/codex_attached_fixture.py
+++ b/examples/personal-workspace-browser/codex_attached_fixture.py
@@ -33,6 +33,18 @@
         registry,
         _home,
     ):
+        # The directory includes Agents without this provider or without a binding.
+        value = json.loads(registry.read_text())
+        coordination = value["goals"][0]["coordination"]
+        coordination["registered_agents"] += ["other-worker", "remote-worker"]
+        coordination["thread_agent_bindings"].append(
+            {
+                "agent_id": "remote-worker",
+                "host_surface": "cursor",
+                "thread_id": "synthetic-cursor-thread",
+            }
+        )
+        registry.write_text(json.dumps(value))
         launches = []
         patches.enter_context(
             patch.object(provider, "sys", SimpleNamespace(platform="darwin"))
@@ -67,7 +79,85 @@ def do_GET(self):
 
             def do_POST(self):
                 global fail_next_open
-                if self.path == "/fixture/append":
+                if self.path == "/fixture/work-records":
+                    records = [
+                        {
+                            "type": "function_call",
+                            "name": "validate",
+                            "call_id": "work-1",
+                            "arguments": "Check the release artifact",
+                        },
+                        {
+                            "type": "function_call_output",
+                            "call_id": "work-1",
+                            "output": [
+                                {
+                                    "type": "text",
+                                    "text": "Validation output\n"
+                                    + "🧭验证结果\n" * 6000
+                                    + "COMPLETE TOOL RESULT",
+                                }
+                            ],
+                        },
+                    ]
+                    with rollout.open("a") as stream:
+                        for item in records:
+                            stream.write(
+                                json.dumps({"type": "response_item", "payload": item})
+                                + "\n"
+                            )
+                    append_message(rollout, "assistant", "工作结果已返回。")
+                    self._send_json({"ok": True})
+                elif self.path == "/fixture/metadata-gap":
+                    # A real rollout page with no displayable rows, between two
+                    # visible records. Boundaries belong to the production reader.
+                    with rollout.open("a") as stream:
+                        for _ in range(5):
+                            stream.write(
+                                json.dumps(
+                                    {
+                                        "type": "response_item",
+                                        "payload": {
+                                            "type": "reasoning",
+                                            "encrypted_content": "x" * (1024 * 1024),
+                                        },
+                                    }
+                                )
+                                + "\n"
+                            )
+                    self._send_json({"ok": True})
+                elif self.path == "/fixture/tool-envelope":
+                    with rollout.open("a") as stream:
+                        stream.write(
+                            json.dumps(
+                                {
+                                    "type": "response_item",
+                                    "payload": {
+                                        "type": "custom_tool_call_output",
+                                        "output": [
+                                            {
+                                                "type": "text",
+                                                "text": json.dumps(
+                                                    {
+                                                        "output": "Readable shell result\nSecond line",
+                                                        "exit_code": 1,
+                                                        "wall_time_seconds": 0.25,
+                                                        "chunk_id": "synthetic",
+                                                    }
+                                                ),
+                                            }
+                                        ],
+                                    },
+                                }
+                            )
+                            + "\n"
+                        )
+                    self._send_json({"ok": True})
+                elif self.path == "/fixture/burst":
+                    for index in range(330):
+                        append_message(rollout, "assistant", f"Activity {index}")
+                    self._send_json({"ok": True})
+                elif self.path == "/fixture/append":
                     append_message(
                         rollout, "assistant", "原 Agent 的新结果：已保留原会话。"
                     )
diff --git a/examples/personal-workspace-browser/goal-workspace-m2.mjs b/examples/personal-workspace-browser/goal-workspace-m2.mjs
index 74098aaae6..0b1d426dd6 100644
--- a/examples/personal-workspace-browser/goal-workspace-m2.mjs
+++ b/examples/personal-workspace-browser/goal-workspace-m2.mjs
@@ -171,7 +171,7 @@ async function verifyRemoteSelection(browser, url) {
     await page.route("http://127.0.0.1:8978/status.json*", route => route.fulfill({json:snapshot}));
     page.on("request",request => {
       const parsed = new URL(request.url());
-      if (parsed.port === new URL(url).port && /\/api\/chat\/(todo\/detail|completed-todos|delivery-review|goal-results)/.test(parsed.pathname)) localOwnerReads.push(parsed.pathname);
+      if (parsed.port === new URL(url).port && /\/api\/chat\/(todo\/detail|completed-todos|delivery-review|goal-results|codex-attached)/.test(parsed.pathname)) localOwnerReads.push(parsed.pathname);
     });
   }});
   try {
@@ -180,8 +180,14 @@ async function verifyRemoteSelection(browser, url) {
     assert.equal(await page.locator(".personal-context-drawer").count(),0,"An unknown remote Todo must not acquire a local request reader");
     await page.getByRole("status").filter({hasText:"链接中的任务未出现在此来源的当前快照中"}).waitFor();
     assert.equal(await page.getByRole("button",{name:"添加任务",exact:true}).count(),0);
+    assert.equal(await page.locator('.goal-owner-conversation').count(),0,"A remote snapshot cannot open a local Agent conversation");
     await page.getByRole("region",{name:"当前工作",exact:true}).getByRole("button",{name:"关系图",exact:true}).click();
     assert.equal(await page.locator(".work-map").count(),0,"Remote selection cannot reuse a local map");
+    target.searchParams.set("view", "conversation");
+    target.searchParams.set("workAgent", "worker");
+    await page.goto(target.href);
+    await page.getByRole("status").filter({hasText:"此来源仅提供状态快照，无法在这里读取或回复原会话。"}).waitFor();
+    assert.equal(await page.getByRole("region", {name:"Agent 工作会话",exact:true}).getByRole("textbox").count(),0);
     assert.deepEqual(localOwnerReads,[],"Remote deep link caused local owner reads");
   } finally {await session.close();}
 }
diff --git a/loopx/capabilities/native_chat/codex_attached.py b/loopx/capabilities/native_chat/codex_attached.py
index bb9bdef327..e2f1e10d18 100644
--- a/loopx/capabilities/native_chat/codex_attached.py
+++ b/loopx/capabilities/native_chat/codex_attached.py
@@ -23,8 +23,11 @@
 from uuid import UUID, uuid4
 
 from ...codex_app_thread_activity import codex_homes, observe_codex_threads
+from .codex_history import (
+    history_revision as history_revision,
+    read_messages as read_messages,
+)
 
-WINDOW_BYTES = 2 * 1024 * 1024
 MAX_FRAME_BYTES = 8 * 1024 * 1024
 
 
@@ -256,73 +259,6 @@ def locate_thread(thread_id: str, homes: list[Path] | None = None) -> tuple[Path
     return matches[0]
 
 
-def history_revision(stamp: os.stat_result) -> str:
-    # Replacing a rollout must invalidate offset-based message identities.
-    return f"{stamp.st_dev}:{stamp.st_ino}:{stamp.st_size}:{stamp.st_mtime_ns}"
-
-
-def read_messages(path: Path, *, before: int | None = None) -> dict[str, Any]:
-    with path.open("rb") as stream:
-        stamp = os.fstat(stream.fileno())
-        size = stamp.st_size
-        end = min(size, before) if before is not None else size
-        if end < 0:
-            raise ValueError("History position must be nonnegative")
-        start = max(0, end - WINDOW_BYTES)
-        stream.seek(start)
-        if start:
-            stream.readline(WINDOW_BYTES)  # Never parse a partial first record.
-        older_cursor = min(stream.tell(), end) if start else 0
-        if older_cursor >= end and start:
-            older_cursor = start
-        messages = []
-        while stream.tell() < end:
-            offset = stream.tell()
-            raw = stream.readline(min(WINDOW_BYTES, end - offset))
-            if not raw.endswith(b"\n"):
-                continue  # A partial append is retried on the next observation.
-            try:
-                record = json.loads(raw)
-                item = record.get("payload", {})
-                if (
-                    record.get("type") != "response_item"
-                    or item.get("type") != "message"
-                    or item.get("role") not in ["user", "assistant"]
-                ):
-                    continue
-                text = "\n".join(
-                    part["text"]
-                    for part in item.get("content", [])
-                    if isinstance(part, dict)
-                    and part.get("type") in ["input_text", "output_text"]
-                    and isinstance(part.get("text"), str)
-                )
-                if text:
-                    messages.append(
-                        {
-                            "id": str(offset),
-                            "role": item["role"],
-                            "text": text[:24000],
-                            "truncated": len(text) > 24000,
-                            "timestamp": record.get("timestamp"),
-                        }
-                    )
-            except (ValueError, TypeError, AttributeError):
-                continue
-    if len(messages) > 100:
-        older_cursor = int(messages[-100]["id"])
-    return {
-        "messages": messages[-100:],
-        "before": older_cursor if older_cursor else None,
-        "revision": history_revision(stamp),
-        "source_ref": hashlib.sha256(
-            f"{stamp.st_dev}:{stamp.st_ino}".encode()
-        ).hexdigest(),
-        "history_size": size,
-        "bounded": bool(start) or len(messages) > 100,
-    }
-
-
 def activity(home: Path, thread_id: str) -> dict[str, Any]:
     return observe_codex_threads([thread_id], homes=[home])[thread_id].to_payload()
 
diff --git a/loopx/capabilities/native_chat/codex_history.py b/loopx/capabilities/native_chat/codex_history.py
new file mode 100644
index 0000000000..0734e1e1b6
--- /dev/null
+++ b/loopx/capabilities/native_chat/codex_history.py
@@ -0,0 +1,279 @@
+"""Bounded, owner-local views of the Codex rollout, never an execution source.
+
+Native record names stay provider-local. Only visible conversation channels,
+tool input/output and explicit lifecycle events are projected; internal model
+reasoning and configuration are not conversation content.
+"""
+
+from __future__ import annotations
+
+import hashlib
+import json
+import mmap
+import os
+from pathlib import Path
+from typing import Any
+
+from ...public_safe_text import CATEGORY_CREDENTIAL, classify_private_text
+
+WINDOW_BYTES = 2 * 1024 * 1024
+RECORD_BYTES = 8 * 1024 * 1024
+CONTENT_CHARS = 24000
+PAGE_ROWS = 100
+
+
+def history_revision(stamp: os.stat_result) -> str:
+    return f"{stamp.st_dev}:{stamp.st_ino}:{stamp.st_size}:{stamp.st_mtime_ns}"
+
+
+def source_ref(stamp: os.stat_result) -> str:
+    return hashlib.sha256(f"{stamp.st_dev}:{stamp.st_ino}".encode()).hexdigest()
+
+
+def _display_record(raw: bytes) -> dict[str, Any] | None:
+    record = json.loads(raw)
+    item = record.get("payload", {})
+    if not isinstance(item, dict):
+        return None
+    kind = item.get("type")
+    text = ""
+    role = "activity"
+    label = kind
+    if record.get("type") == "response_item":
+        if kind == "message":
+            message_role = item.get("role")
+            if message_role not in {"user", "assistant"} or item.get("channel") not in {
+                None,
+                "commentary",
+                "final",
+            }:
+                return None
+            role = str(message_role)
+            text = "\n".join(
+                part["text"]
+                for part in item.get("content", [])
+                if isinstance(part, dict)
+                and part.get("type") in {"input_text", "output_text"}
+                and isinstance(part.get("text"), str)
+            )
+            # Attachments are not silently represented as a complete text message.
+            if any(
+                isinstance(part, dict)
+                and part.get("type")
+                not in {
+                    "input_text",
+                    "output_text",
+                }
+                for part in item.get("content", [])
+            ):
+                text += "\n[Non-text content is not available in this view.]"
+        elif kind in {"function_call", "custom_tool_call"}:
+            role = "tool"
+            label = item.get("name", kind)
+            text = item.get("arguments" if kind == "function_call" else "input", "")
+        elif kind in {"function_call_output", "custom_tool_call_output"}:
+            role = "tool"
+            text = item.get("output", "")
+            # Codex custom tools can persist a list of text blocks. Decode only
+            # that exact shape before pagination so Unicode offsets remain stable.
+            # Preserve unfamiliar blocks/metadata as JSON rather than drop facts.
+            if (
+                isinstance(text, list)
+                and text
+                and all(
+                    isinstance(part, dict)
+                    and set(part) == {"type", "text"}
+                    and part["type"] == "text"
+                    and isinstance(part["text"], str)
+                    for part in text
+                )
+            ):
+                text = "\n".join(part["text"] for part in text)
+        elif kind == "reasoning":
+            return None  # Never expose reasoning/encrypted_content.
+        else:
+            return {
+                "role": "activity",
+                "kind": "unavailable",
+                "label": "unavailable",
+                "text": "",
+                "unavailable": "unsupported_record_type",
+            }
+    elif record.get("type") == "event_msg":
+        if kind not in {"task_started", "task_complete", "turn_aborted", "error"}:
+            return None  # Message mirrors and token counters are not new activity.
+        text = item.get("message", "") if kind == "error" else ""
+    else:
+        return None
+    if not isinstance(text, str):
+        text = json.dumps(text, ensure_ascii=False, indent=2)
+    call_id = str(item.get("call_id", ""))[:160]
+    redacted = (
+        classify_private_text(
+            text + "\n" + str(label) + "\n" + call_id,
+            categories=frozenset({CATEGORY_CREDENTIAL}),
+            include_compound_field_assignment=True,
+        )
+        is not None
+    )
+    # The detector identifies shapes, not byte-complete values. Withhold the
+    # whole field instead of accidentally leaking a suffix through partial masking.
+    if redacted:
+        text = "[Content withheld because it contains credential-shaped data.]"
+        label = kind
+        call_id = ""
+    return {
+        "role": role,
+        "kind": kind,
+        "label": str(label)[:160],
+        "text": text,
+        "redacted": redacted,
+        "timestamp": record.get("timestamp"),
+        "call_id": call_id,
+    }
+
+
+def _entry(data: mmap.mmap, start: int, end: int) -> dict[str, Any] | None:
+    if end - start > RECORD_BYTES:
+        # Preserve the position and disclosure, rather than silently dropping a
+        # record that exceeds the host frame bound. No raw bytes leave this path.
+        return {
+            "id": str(start),
+            "end": end,
+            "role": "activity",
+            "kind": "unavailable",
+            "label": "unavailable",
+            "text": "",
+            "unavailable": "record_exceeds_read_limit",
+            "truncated": False,
+        }
+    raw = data[start:end]
+    try:
+        value = _display_record(raw)
+    except (ValueError, TypeError, AttributeError):
+        return {
+            "id": str(start),
+            "end": end,
+            "role": "activity",
+            "kind": "unavailable",
+            "label": "unavailable",
+            "text": "",
+            "unavailable": "record_unreadable",
+            "truncated": False,
+        }
+    if value is None:
+        return None
+    return {
+        **value,
+        "id": str(start),
+        "end": end,
+        "content_ref": hashlib.sha256(raw).hexdigest(),
+        "text": value["text"][:CONTENT_CHARS],
+        "truncated": len(value["text"]) > CONTENT_CHARS,
+    }
+
+
+def read_messages(
+    path: Path,
+    *,
+    before: int | None = None,
+    after: int | None = None,
+    expected_source: str | None = None,
+) -> dict[str, Any]:
+    if before is not None and after is not None:
+        raise ValueError("Choose one history direction")
+    if any(position is not None and position < 0 for position in (before, after)):
+        raise ValueError("History position must be nonnegative")
+    with path.open("rb") as stream:
+        stamp = os.fstat(stream.fileno())
+        size = stamp.st_size
+        source = source_ref(stamp)
+        reset = expected_source is not None and expected_source != source
+        reset = reset or (after is not None and after > size)
+        if reset:
+            before = after = None
+        rows: list[dict[str, Any]] = []
+        lower = upper = 0
+        more = False
+        if size:
+            with mmap.mmap(stream.fileno(), size, access=mmap.ACCESS_READ) as data:
+                # An incomplete append is retried, including a record longer than
+                # the normal page window. Cursors only point to complete lines.
+                complete = data.rfind(b"\n") + 1
+                if after is not None:
+                    if after > complete or (after and data[after - 1 : after] != b"\n"):
+                        raise ValueError("History cursor is not a record boundary")
+                    lower = upper = after
+                    while upper < complete and len(rows) < PAGE_ROWS:
+                        end = data.find(b"\n", upper, complete) + 1
+                        row = _entry(data, upper, end)
+                        upper = end
+                        if row is not None:
+                            rows.append(row)
+                        if upper - lower >= WINDOW_BYTES:
+                            break
+                    more = upper < complete
+                else:
+                    upper = min(before, complete) if before is not None else complete
+                    if upper and data[upper - 1 : upper] != b"\n":
+                        raise ValueError("History cursor is not a record boundary")
+                    lower = upper
+                    while lower > 0 and len(rows) < PAGE_ROWS:
+                        start = data.rfind(b"\n", 0, lower - 1) + 1
+                        row = _entry(data, start, lower)
+                        lower = start
+                        if row is not None:
+                            rows.append(row)
+                        if upper - lower >= WINDOW_BYTES:
+                            break
+                    rows.reverse()
+                    more = upper < complete
+    return {
+        "messages": rows,
+        "before": lower or None,
+        "after": upper,
+        "has_more": more,
+        "reset": reset,
+        "revision": history_revision(stamp),
+        "source_ref": source,
+        "history_size": size,
+        "bounded": bool(lower or more),
+    }
+
+
+def read_content(
+    path: Path,
+    *,
+    entry_id: int,
+    offset: int,
+    expected_source: str,
+    content_ref: str,
+) -> dict[str, Any]:
+    if entry_id < 0 or offset < 0:
+        raise ValueError("Content position must be nonnegative")
+    with path.open("rb") as stream:
+        stamp = os.fstat(stream.fileno())
+        if source_ref(stamp) != expected_source or entry_id >= stamp.st_size:
+            raise ValueError("History source changed")
+        if entry_id:
+            stream.seek(entry_id - 1)
+            if stream.read(1) != b"\n":
+                raise ValueError("Content cursor is not a record boundary")
+        stream.seek(entry_id)
+        raw = stream.readline(RECORD_BYTES + 1)
+        if (
+            len(raw) > RECORD_BYTES
+            or not raw.endswith(b"\n")
+            or hashlib.sha256(raw).hexdigest() != content_ref
+        ):
+            raise ValueError("Content changed or is unavailable")
+        value = _display_record(raw)
+        if value is None or value.get("unavailable") or offset > len(value["text"]):
+            raise ValueError("Content is unavailable")
+        end = min(offset + CONTENT_CHARS, len(value["text"]))
+        return {
+            "text": value["text"][offset:end],
+            "next_offset": end,
+            "has_more": end < len(value["text"]),
+            "redacted": value["redacted"],
+        }
diff --git a/loopx/presentation/codex_attached_api.py b/loopx/presentation/codex_attached_api.py
index c823a65825..0fffbf536c 100644
--- a/loopx/presentation/codex_attached_api.py
+++ b/loopx/presentation/codex_attached_api.py
@@ -22,6 +22,7 @@
     open_conversation,
     read_messages,
 )
+from ..capabilities.native_chat.codex_history import read_content
 from ..file_lock import exclusive_file_lock
 from ..registry import atomic_write_json, find_registry_goal
 from ..thread_agent_binding import collect_accepted_bindings
@@ -129,6 +130,11 @@ def _codex_attached_read(self) -> None:
                 "before",
                 "revision",
                 "operation_id",
+                "after",
+                "source_ref",
+                "entry_id",
+                "content_offset",
+                "content_ref",
             } or any(len(v) != 1 for v in query.values()):
                 raise ValueError("Conversation query is invalid")
             goal = self._codex_goal(query.get("goal_id", [""])[0])
@@ -153,7 +159,23 @@ def _codex_attached_read(self) -> None:
                 http._send_json(receipt_readback(receipt))
                 return
             home, path = locate_thread(binding["thread_id"])
+            if "entry_id" in query:
+                content = read_content(
+                    path,
+                    entry_id=int(query["entry_id"][0]),
+                    offset=int(query.get("content_offset", ["0"])[0]),
+                    expected_source=query.get("source_ref", [""])[0],
+                    content_ref=query.get("content_ref", [""])[0],
+                )
+                current_binding(
+                    self._codex_goal(query["goal_id"][0]),
+                    query["agent_id"][0],
+                    binding["binding_ref"],
+                )
+                http._send_json({"ok": True, **content})
+                return
             before = int(query["before"][0]) if "before" in query else None
+            after = int(query["after"][0]) if "after" in query else None
             stamp = path.stat()
             revision = history_revision(stamp)
             state = activity(home, binding["thread_id"])
@@ -165,7 +187,16 @@ def _codex_attached_read(self) -> None:
                 pass  # Persisted history remains readable when Desktop closes.
             can_reply = connected and state["state"] == "idle"
             # Do not repeatedly reparse megabytes when no host append changed.
-            if before is None and query.get("revision", [""])[0] == revision:
+            if (
+                before is None
+                and query.get("revision", [""])[0] == revision
+                and (after is None or after >= stamp.st_size)
+            ):
+                current_binding(
+                    self._codex_goal(query["goal_id"][0]),
+                    query["agent_id"][0],
+                    binding["binding_ref"],
+                )
                 http._send_json(
                     {
                         "ok": True,
@@ -177,7 +208,17 @@ def _codex_attached_read(self) -> None:
                     }
                 )
                 return
-            view = read_messages(path, before=before)
+            view = read_messages(
+                path,
+                before=before,
+                after=after,
+                expected_source=query.get("source_ref", [None])[0],
+            )
+            current_binding(
+                self._codex_goal(query["goal_id"][0]),
+                query["agent_id"][0],
+                binding["binding_ref"],
+            )
             http._send_json(
                 {
                     "ok": True,
@@ -265,8 +306,15 @@ def _codex_attached_send(self) -> None:
                     http._send_json(receipt_readback(receipt))
                     return
                 if activity(home, binding["thread_id"])["state"] != "idle":
-                    http._send_error(
-                        "The Agent is busy or its state is unknown. Continue in the original App; this surface does not interrupt it.",
+                    # No receipt or native input exists for this operation. Do not
+                    # extend this proof to generic conflicts or transport errors.
+                    http._send_json(
+                        {
+                            "ok": False,
+                            "error": "The Agent is busy or its state is unknown. Nothing was sent; your draft is retained.",
+                            "input_not_submitted": True,
+                            "operation_id": body["operation_id"],
+                        },
                         status=409,
                     )
                     return
diff --git a/tests/presentation/test_codex_attached_conversation.py b/tests/presentation/test_codex_attached_conversation.py
index ac01dea546..b37a248204 100644
--- a/tests/presentation/test_codex_attached_conversation.py
+++ b/tests/presentation/test_codex_attached_conversation.py
@@ -10,6 +10,7 @@
 import pytest
 
 from loopx.capabilities.native_chat import codex_attached as provider
+from loopx.capabilities.native_chat import codex_history as history
 
 _spec = importlib.util.spec_from_file_location(
     "codex_attached_peer",
@@ -230,7 +231,11 @@ def test_original_history_incremental_append_and_idempotent_owner_input(
         binding, query = target(request)
         status, initial = request(query=query)
         assert status == 200 and initial["can_reply"]
-        assert [message["text"] for message in initial["messages"]] == [
+        assert [
+            message["text"]
+            for message in initial["messages"]
+            if message["role"] != "activity"
+        ] == [
             "Original request",
             "Original result",
         ]
@@ -260,7 +265,11 @@ def test_original_history_incremental_append_and_idempotent_owner_input(
             "thread-owner-discovery",
             "thread-follower-start-turn",
         }
-        assert request("POST", body(binding, "Changed content"))[0] == 409
+        status, rejected = request("POST", body(binding, "Changed content"))
+        assert status == 409
+        assert (
+            "input_not_submitted" not in rejected
+        )  # This id already caused an effect.
 
 
 def test_uncertain_delivery_never_replays_the_effect(tmp_path, monkeypatch):
@@ -282,6 +291,25 @@ def test_uncertain_delivery_never_replays_the_effect(tmp_path, monkeypatch):
         assert len(inputs) == 1
 
 
+@pytest.mark.parametrize("busy", [True, False], ids=["busy", "unknown"])
+def test_pre_dispatch_rejection_proves_no_input_and_creates_no_receipt(tmp_path, busy):
+    with fixture(tmp_path) as (request, rollout, methods, inputs, _, _):
+        binding, query = target(request)
+        rollout.write_text(
+            json.dumps({"type": "event_msg", "payload": {"type": "task_started"}})
+            + "\n"
+            if busy
+            else ""
+        )
+        status, rejected = request("POST", body(binding))
+        assert status == 409
+        assert rejected["ok"] is False
+        assert rejected["input_not_submitted"] is True
+        assert rejected["operation_id"] == "same-operation"
+        assert request(query=query + "&operation_id=same-operation")[0] == 404
+        assert inputs == [] and "thread-follower-start-turn" not in methods
+
+
 def test_busy_stale_binding_foreign_origin_and_unbound_agent_create_no_input(
     tmp_path, monkeypatch
 ):
@@ -321,7 +349,7 @@ def test_busy_stale_binding_foreign_origin_and_unbound_agent_create_no_input(
         assert not inputs
 
 
-def test_history_is_bounded_ignores_tools_and_private_paths_do_not_escape(
+def test_owner_history_includes_tools_with_bounded_pages_and_offline_reading(
     tmp_path, monkeypatch
 ):
     with fixture(tmp_path) as (request, rollout, _, _, _, home):
@@ -334,7 +362,7 @@ def test_history_is_bounded_ignores_tools_and_private_paths_do_not_escape(
                             "type": "response_item",
                             "payload": {
                                 "type": "function_call_output",
-                                "output": "private-tool-output" * 512,
+                                "output": "tool-result" * 512,
                             },
                         }
                     )
@@ -343,8 +371,9 @@ def test_history_is_bounded_ignores_tools_and_private_paths_do_not_escape(
         append_message(rollout, "assistant", "Visible recent result")
         status, result = request(query=query)
         assert status == 200 and result["bounded"] and result["before"] is not None
-        assert [row["text"] for row in result["messages"]] == ["Visible recent result"]
-        assert "private-tool-output" not in json.dumps(result)
+        assert result["messages"][-1]["text"] == "Visible recent result"
+        assert result["messages"][0]["role"] == "tool"
+        assert len(result["messages"]) == 100
         assert str(home) not in json.dumps(result)
         (home / "ipc" / "ipc.sock").chmod(0o666)
         status, readonly = request(query=query)
@@ -385,3 +414,256 @@ def test_unbound_goal_does_not_probe_native_conversations(tmp_path, monkeypatch)
         registry.write_text(json.dumps(saved))
         assert request()[1] == {"ok": True, "agents": []}
         assert not methods and not inputs
+
+
+def append_record(path, kind, payload):
+    with path.open("a") as stream:
+        stream.write(json.dumps({"type": kind, "payload": payload}) + "\n")
+
+
+def test_work_records_cover_tools_and_lifecycle_without_hidden_context(tmp_path):
+    path = tmp_path / "history.jsonl"
+    for role in ("system", "developer"):
+        append_message(path, role, "hidden instruction")
+    append_record(
+        path,
+        "response_item",
+        {
+            "type": "message",
+            "role": "assistant",
+            "channel": "analysis",
+            "content": [{"type": "output_text", "text": "hidden reasoning"}],
+        },
+    )
+    append_record(
+        path, "response_item", {"type": "reasoning", "summary": "hidden reasoning"}
+    )
+    append_record(path, "event_msg", {"type": "task_started"})
+    append_record(
+        path,
+        "response_item",
+        {
+            "type": "function_call",
+            "name": "exec",
+            "call_id": "call-1",
+            "arguments": "run validation",
+        },
+    )
+    append_record(
+        path,
+        "response_item",
+        {
+            "type": "function_call_output",
+            "call_id": "call-1",
+            "output": "exit 1: test failed",
+        },
+    )
+    append_record(
+        path,
+        "response_item",
+        {"type": "custom_tool_call", "name": "patch", "input": "repair input"},
+    )
+    append_record(
+        path,
+        "response_item",
+        {"type": "custom_tool_call_output", "output": "repair saved"},
+    )
+    append_record(path, "event_msg", {"type": "turn_aborted"})
+    rows = history.read_messages(path)["messages"]
+    assert [row["kind"] for row in rows] == [
+        "task_started",
+        "function_call",
+        "function_call_output",
+        "custom_tool_call",
+        "custom_tool_call_output",
+        "turn_aborted",
+    ]
+    assert rows[1]["call_id"] == rows[2]["call_id"] == "call-1"
+    assert rows[2]["text"] == "exit 1: test failed"
+    assert "hidden" not in json.dumps(rows)
+
+
+def test_full_unicode_content_is_available_in_bounded_http_pages(tmp_path):
+    with fixture(tmp_path) as (request, rollout, methods, inputs, _, _):
+        _, query = target(request)
+        # Larger than the history window, including astral Unicode characters.
+        text = "🧭验证\n" * 120000 + "END OF COMPLETE RESULT"
+        append_message(rollout, "assistant", text)
+        _, view = request(query=query)
+        row = view["messages"][-1]
+        assert row["truncated"] and len(row["text"]) == history.CONTENT_CHARS
+        offset, parts = len(row["text"]), [row["text"]]
+        detail = f"&entry_id={row['id']}&source_ref={view['source_ref']}&content_ref={row['content_ref']}"
+        while True:
+            status, page = request(query=query + detail + f"&content_offset={offset}")
+            assert status == 200
+            parts.append(page["text"])
+            offset = page["next_offset"]
+            if not page["has_more"]:
+                break
+        assert "".join(parts) == text
+        assert (
+            request(query=query + detail.replace(view["source_ref"], "stale"))[0] == 409
+        )
+        assert (
+            request(query=query + detail.replace(row["content_ref"], "stale"))[0] == 409
+        )
+        assert (
+            request(
+                query=query.replace("agent_id=worker", "agent_id=foreign") + detail
+            )[0]
+            == 409
+        )
+        assert not inputs and "thread-follower-start-turn" not in methods
+
+
+def test_forward_catchup_has_no_burst_gap_and_retries_partial_append(tmp_path):
+    path = tmp_path / "history.jsonl"
+    append_message(path, "assistant", "initial")
+    first = history.read_messages(path)
+    for index in range(235):
+        append_message(path, "assistant", f"new {index}")
+    raw = json.dumps(
+        {
+            "type": "response_item",
+            "payload": {
+                "type": "message",
+                "role": "assistant",
+                "content": [{"type": "output_text", "text": "partial complete"}],
+            },
+        }
+    ).encode()
+    with path.open("ab") as stream:
+        stream.write(raw[:40])
+    cursor, rows = first["after"], []
+    while True:
+        page = history.read_messages(
+            path, after=cursor, expected_source=first["source_ref"]
+        )
+        rows.extend(page["messages"])
+        cursor = page["after"]
+        if not page["has_more"]:
+            break
+    assert [row["text"] for row in rows] == [f"new {i}" for i in range(235)]
+    assert len({row["id"] for row in rows}) == 235
+    with path.open("ab") as stream:
+        stream.write(raw[40:] + b"\n")
+    assert [
+        row["text"] for row in history.read_messages(path, after=cursor)["messages"]
+    ] == ["partial complete"]
+    replacement = tmp_path / "new.jsonl"
+    append_message(replacement, "assistant", "replacement")
+    replacement.replace(path)
+    page = history.read_messages(
+        path, after=cursor, expected_source=first["source_ref"]
+    )
+    assert page["reset"] and [row["text"] for row in page["messages"]] == [
+        "replacement"
+    ]
+
+
+@pytest.mark.parametrize("read_mode", ["history", "content", "unchanged"])
+def test_reads_recheck_binding_after_native_lookup(tmp_path, monkeypatch, read_mode):
+    from loopx.presentation import codex_attached_api as api
+
+    with fixture(tmp_path) as (request, _, _, inputs, registry, _):
+        _, query = target(request)
+        _, view = request(query=query)
+        if read_mode == "content":
+            row = view["messages"][-1]
+            query += f"&entry_id={row['id']}&source_ref={view['source_ref']}&content_ref={row['content_ref']}"
+        elif read_mode == "unchanged":
+            query += "&revision=" + view["revision"]
+        locate = api.locate_thread
+
+        def changed_during_lookup(thread_id):
+            result = locate(thread_id)
+            saved = json.loads(registry.read_text())
+            saved["goals"][0]["coordination"]["thread_agent_bindings"] = []
+            registry.write_text(json.dumps(saved))
+            return result
+
+        monkeypatch.setattr(api, "locate_thread", changed_during_lookup)
+        status, result = request(query=query)
+        assert status == 409 and result["ok"] is False
+        assert "Original result" not in json.dumps(result)
+        assert not inputs
+
+
+def test_credential_fields_withheld_and_oversize_gap_is_not_silent(
+    tmp_path, monkeypatch
+):
+    path = tmp_path / "history.jsonl"
+    append_record(
+        path,
+        "response_item",
+        {"type": "function_call_output", "output": 'api_key="synthetic-value"'},
+    )
+    page = history.read_messages(path)
+    row = page["messages"][0]
+    assert row["redacted"] and "synthetic-value" not in json.dumps(row)
+    detail = history.read_content(
+        path,
+        entry_id=int(row["id"]),
+        offset=0,
+        expected_source=page["source_ref"],
+        content_ref=row["content_ref"],
+    )
+    assert detail["redacted"] and "synthetic-value" not in detail["text"]
+    monkeypatch.setattr(history, "RECORD_BYTES", 100)
+    page = history.read_messages(path)
+    assert page["messages"][0]["unavailable"] == "record_exceeds_read_limit"
+    assert page["after"] == path.stat().st_size
+    with pytest.raises(ValueError, match="unavailable"):
+        history.read_content(
+            path,
+            entry_id=int(row["id"]),
+            offset=0,
+            expected_source=page["source_ref"],
+            content_ref=row["content_ref"],
+        )
+
+
+def test_native_tool_text_blocks_are_readable_and_content_pages_are_lossless(tmp_path):
+    path = tmp_path / "history.jsonl"
+    text = "🧭验证\n" * 7000
+    append_record(
+        path,
+        "response_item",
+        {
+            "type": "custom_tool_call_output",
+            "output": [
+                {"type": "text", "text": text},
+                {"type": "text", "text": "Complete result"},
+            ],
+        },
+    )
+    page = history.read_messages(path)
+    row = page["messages"][0]
+    assert row["text"] == text[: history.CONTENT_CHARS]
+    remaining = history.read_content(
+        path,
+        entry_id=int(row["id"]),
+        offset=len(row["text"]),
+        expected_source=page["source_ref"],
+        content_ref=row["content_ref"],
+    )
+    assert row["text"] + remaining["text"] == text + "\nComplete result"
+    # Unknown blocks or extra metadata must not disappear in text normalization.
+    output = [
+        {"type": "text", "text": "visible", "annotations": ["source"]},
+        {"type": "image", "description": "unrendered"},
+    ]
+    append_record(
+        path, "response_item", {"type": "custom_tool_call_output", "output": output}
+    )
+    assert json.loads(history.read_messages(path)["messages"][-1]["text"]) == output
+    append_record(
+        path,
+        "response_item",
+        {
+            "type": "custom_tool_call_output",
+            "output": [{"type": "text", "text": "api_key=sk-" + "a" * 40}],
+        },
+    )
+    assert history.read_messages(path)["messages"][-1]["redacted"] is True