Broad bug hunt: auth flow, WS edge cases, and build hygiene.

Scope API auth to /api/v1, fix dashboard WebSocket 401s, session login in Calibrate, safe agent naming, reconnect races, and remove corrupt ollama/main.go.

server/web/src/pages/AgentsPage.tsx

@@ -27,12 +27,15 @@ export default function AgentsPage() {
   }, []);
 
   useEffect(() => {
-    if (isConnected) {
-      setAgents(liveAgents);
-      if (selectedAgent) {
-        const updated = liveAgents.find((a) => a.id === selectedAgent.id);
-        if (updated) setSelectedAgent(updated);
-      }
+    if (!isConnected) return;
+    setAgents(liveAgents);
+    if (!selectedAgent) return;
+    const updated = liveAgents.find((a) => a.id === selectedAgent.id);
+    if (updated) {
+      setSelectedAgent(updated);
+    } else {
+      setSelectedAgent(null);
+      setLogContent('');
     }
   }, [liveAgents, isConnected, selectedAgent?.id]);
 
@@ -237,6 +240,9 @@ export default function AgentsPage() {
           )}
         </div>
       )}
+      <footer style={{ marginTop: '3rem', paddingTop: '1rem', borderTop: '1px solid #333', textAlign: 'center', color: '#ff4444', fontSize: '0.85rem', fontFamily: 'monospace' }}>
+        ⚠️ DISCLAIMER: Use only on personal machines on your own network. Anything else is a crime.
+      </footer>
     </div>
   );
 }