Address review: hide /end-session in non-freebuff, recover from model_locked

- Add end-session to FREEBUFF_ONLY_COMMANDS so non-freebuff users can't
  invoke it (would have shown a confusing "returning to waiting room"
  message with no underlying state to act on).
- When the waiting room receives model_locked from a switch attempt that
  raced with admission, silently revert the local model selection to the
  active session's model and re-tick. Previously polling halted and the
  screen had no render branch, leaving the UI blank.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: jahooma

cli/src/commands/command-registry.ts

@@ -179,6 +179,7 @@ const FREEBUFF_REMOVED_COMMANDS = new Set([
 const FREEBUFF_ONLY_COMMANDS = new Set([
   'connect',
   'plan',
+  'end-session',
 ])
 
 const ALL_COMMANDS: CommandDefinition[] = [

cli/src/hooks/use-freebuff-session.ts

@@ -317,6 +317,17 @@ export function useFreebuffSession(): UseFreebuffSessionResult {
         if (cancelled) return
         hasPosted = true
 
+        // Race recovery: user picked a different model in the waiting room at
+        // the exact moment the server admitted them with the original model.
+        // Silently revert the local selection and re-tick so the next call
+        // (a GET) lands the actual active session. Users who really want to
+        // switch can /end-session deliberately.
+        if (next.status === 'model_locked') {
+          useFreebuffModelStore.getState().setSelectedModel(next.currentModel)
+          schedule(0)
+          return
+        }
+
         if (previousStatus === 'queued' && next.status === 'active') {
           playAdmissionSound()
         }