/cd points a conversation at a directory and /ws lists every workspace the host registry knows, each reachable by bare name — every (conversation × directory) pair owns a durable session, so returning to a directory resumes the context built there. /model use switches this conversation's route from the next message on, with the SAME session resuming context-intact; the catalog comes from the host llm registry. /status reports workspace, route, session, turn activity, pending approvals, and the running version — before a first message exists.
Both mappings persist through the host settings service. workspaceRoots can fence /cd; the filesystem root and home are never accepted.
Fixed: the packed tarball ships lib wholesale (a shared bundler chunk was missing from the enumerated files list and crash-looped installs); a packaging spec now packs the real tarball in pnpm test to keep that class impossible. Plus race hardening around switches (stale-binding self-heal, running-mark cleanup).