Bug bash 2026-09-19: 17 bugs fixed and verified (BUGS.md)

Widgets: a bad pattern no longer silences every widget; malformed layouts load.
Shell: lost session returns to login at once; tab titles; Escape closes menus and dialogs.
Files: names are one path segment; unsaved edits ask before page/machine/tab changes;
only folders that opened are remembered. Terminals: unique default names; 64-char names.
API: queries capped at 10 000 values; 32 streams per client, 512 in all; only
/embed/widget is frameable. ZFS sensors: one unprivileged zpool list, no sudo journal spam.
Phone: 36 px inputs; dataset rows as wide as their cells. Machines: valid name pattern.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

web/src/App.tsx

@@ -19,6 +19,12 @@ export default function App() {
   }, [])
 
   useEffect(() => { refresh() }, [refresh])
+  // Any page that gets a 401 from the hub sends us straight back to the login form.
+  useEffect(() => {
+    const h = () => setMe((m) => (m ? null : m))
+    window.addEventListener('hamlab:unauthenticated', h)
+    return () => window.removeEventListener('hamlab:unauthenticated', h)
+  }, [])
   useEffect(() => {
     if (!me) return
     const t = setInterval(refresh, 30000)