Slash commands now accept model overrides for per-command routing without changing global settings; permission messages clarified to reduce tool confusion.