[macOS][SSH Remote] Duplicate host aliases make pinned/project chats disappear with no supported merge path

What version of the Codex App are you using (From “About Codex” dialog)?

26.908.40834

What subscription do you have?

ChatGPT Enterprise (Figma workspace)

What platform is your computer?

Codex Desktop on macOS/Apple Silicon, connected to a Linux Coder devcontainer over SSH.

What issue are you seeing?

One SSH/devcontainer endpoint can be registered under both a manual connection and an auto-discovered connection. The remote session store is shared, but pins and project/sidebar associations are keyed to the local host identity. Pinned remote chats repeatedly disappear after reconciliation even though direct reads through both host identities return identical task IDs, titles, updated timestamps, and latest turns, and the task inventory still says they are pinned. Re-pinning restores them only temporarily. A read-only audit verified 14 affected histories are intact and identical through both aliases.

What steps can reproduce the bug?

1. Add a manual SSH connection to a Coder devcontainer.
2. Let Codex auto-discover the same devcontainer SSH alias.
3. Save projects for the same remote paths under both host identities.
4. Create and pin long remote chats.
5. Restart/refresh or trigger connection/project reconciliation.
6. Observe duplicate project identities and missing pinned/project chats.
7. Directly read/resume the same task IDs through both host identities; histories remain intact.
8. Re-pin; visibility returns temporarily and later disappears.

Supported consolidation is blocked: cross-host handoff rejects non-Git projects, and a Git-backed long/paginated canary is also rejected. Both failures occur before mutation.

What is the expected behavior?

Connections resolving to the same SSH/devcontainer endpoint should deduplicate or share a stable canonical identity. Pins and explicit project assignments should survive alias reconciliation. Provide a supported merge-connections/project-reassociation repair path, or warn instead of presenting apparent data loss.

Additional information

This is project/sidebar identity drift, not transcript loss. Related: #28348, #30808, #33771, #44048. Host aliases, task IDs, titles, and business content are redacted; exact identifiers can be provided privately.

No files or tests are named. Start by tracing the remote session store, host-identity reconciliation, and the pin/project association paths, then inspect the cross-host handoff validation that rejects the reported cases. Done means duplicate SSH/devcontainer aliases have a stable canonical identity, pins and project assignments survive reconciliation, and a supported repair path or warning exists.