The global mesh-detection poll (added for the device-detected modal) fired on the login page, 401'd, and the session-expired handler redirected to /login — reloading the page we were already on, forever. Background polls now run only when authenticated, and a 401 never redirects when the path is already /login. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>