Changelog

2026-07-27

Self-owned tab overrides keep their session identity

The local CLI now forwards session identity for --tab only when the selected tab is locally self-owned and matches the caller's active session binding. This restores the isolated-window workflow without widening access: unowned tabs remain anonymous, and tabs owned by another agent remain rejected.