Codex mobile app lists unrelated workdir directories (Multica sessions) as Codex projects

Summary

The Codex mobile client (iOS) lists unrelated third-party working directories from the connected host as if they were Codex "projects". Specifically, ephemeral workdir directories created by another local coding agent (Multica) show up under the 项目 / Projects section of the Codex mobile app, and their first-message previews leak the other agent's system prompt.

This is confusing and noisy — those directories are not Codex sessions and the user never opened them in Codex.

Environment

• Codex mobile app on iOS (status bar visible in screenshot)
• Connected host: a macOS machine (Kahlils-MacBook-Pro.local) running Codex desktop / daemon
• Host also runs the Multica local agent runtime, which spawns short-lived workdir <hash> directories for each agent session

Steps to reproduce

1. On a Mac, install and run Codex desktop so the mobile app can connect to it.
2. On the same Mac, also run another local agent runtime that creates ephemeral working directories (e.g. Multica, which produces directories named like workdir/<short-hash> under its workspace root).
3. Trigger a few sessions in that other runtime so several workdir <hash> directories exist on disk.
4. Open the Codex mobile app and connect to the Mac host.
5. Open the 项目 / Projects list in the mobile app.

Observed behavior

The Projects list contains entries that do not belong to Codex:

• One legitimate sandbox entry, plus multiple workdir 5676e90e, workdir 95ccfb11, workdir 92f16ce8, workdir 8a7e00b2, workdir dd8ec8c0, workdir f927f6ef, workdir 96e96716 entries.
• The preview text under those entries shows the other agent's system prompt, e.g. You are running as a local coding agent for a Multica..., which is clearly content from a different product's session, not Codex chat history.

Screenshot attached.

Expected behavior

The Codex mobile 项目 / Projects list should only show directories/sessions that Codex itself opened or was explicitly pointed at. It should not:

• enumerate arbitrary subdirectories of the user's home / workspace root, and
• display first-message previews from sessions that were not created by Codex.

At a minimum, Codex should restrict the Projects list to directories that have a Codex session record (e.g. a Codex history file / project marker), and ignore directories whose first message is not part of a Codex transcript.

Notes

• The other runtime here is Multica, but the underlying issue is generic: any tool that drops workdir/<hash> style directories on the host will get scraped into Codex's project list.
• This also has a mild privacy implication, since the preview pane is rendering another agent's prompt text.