Move a session to another working directory

`POST /sessions/{id}/cwd`, behind a field in the session settings dialog. A
working directory is settled when the process is spawned -- the CLI is
launched with it as its cwd and there is no control request that changes one
-- so this records the new one and ends the process that is in the old one.
It does not start a replacement, and the field says so in a line beside it:
a session with no process starts on the next message or on Start, which is
this app's rule for that everywhere else, and "usually restarts" is a worse
control than "always stops".

The path is checked against the session's own machine and refused if it is
not there. The spawn path corrects instead of refusing, because it is
resuming a directory the *machine* recorded and that can be gone through
nobody's fault; a path somebody has just typed is different, and a mistyped
one accepted here would surface much later as a session that would not
start, with nothing pointing at the typo. The refusal names the machine and
the path, and is drawn under the field it is about.

Nothing of Claude Code's own is moved, and that is measured rather than
assumed: on CLI 2.1.237, `claude --resume <id>` finds a session from any
working directory -- an id that does not exist answers "No conversation
found with session ID", and a real one resumed from an unrelated directory
did not. So the conversation continues in the new place with nothing
relocated. Doing otherwise would mean reproducing a rule this app cannot
see the whole of; PLAN.md records what that rule is, for whoever tries.

Found while checking it: `SessionInfo.cwd` came from the snapshot a session
launched with, so a moved session went on reporting its *old* directory for
as long as its process lived -- a dialog showing a directory the next launch
would not use, with nothing saying so. It is read from the config where the
row is built now, the same way `setup_name` already was, and for the reason
already written above `setup_name`: only the manager holds the config, and
both of these change under a running session.

Checked end to end on the emulator against a session whose process really
does take a cwd: /proc said /tmp/cwd-a before and /tmp/cwd-b after, the
dialog showed the new path immediately rather than after a restart, and a
directory that is not there and a relative path were both refused with the
session left exactly as it was.

AGENTS.md

@@ -273,6 +273,14 @@ first if a remote spawn ever mangles an argument.
   reply into the tool output under it -- and a container per row leaves
   whatever was drawn without one silently unselectable, which nothing on
   screen reports. Rows keep their tap handlers; selection is a long press.
+- **A session can be moved to another directory** from the settings dialog
+  (`POST /sessions/{id}/cwd`). It stops the process, because a working
+  directory is settled at spawn; the next message starts it in the new one.
+  **`claude --resume <id>` finds a session from any directory** -- measured
+  on 2.1.237 -- so nothing of Claude Code's is relocated, and should you ever
+  be tempted, its project directory is the path with every non-alphanumeric
+  character replaced by `-`, cut at 200 characters with a hash appended, and
+  overridable besides.
 - **A message from another agent reaches a live session on the turn's
   `result`, not before.** Measured on CLI 2.1.237 by sending a real
   cross-session message to a real stream-json session: no `user` record, and