The warning was purely a token-expiry countdown with no concept of
user activity, so it interrupted people who had been clicking through
questions the whole time. AuthState now tracks real input activity
globally and silently refreshes the session in the background when
the user has interacted recently, only surfacing the "Stay logged in?"
dialog for sessions that are genuinely idle. A failed background
refresh still surfaces the dialog rather than silently logging the
user out.
The panel's shared Brand.panel_box background is ~80% opaque, which
compounded with the dialog's own dim backdrop let the screen behind
show through and washed out the card against it. Force full opacity
on this dialog's panel specifically, since other panel_box overlays
still rely on the shared translucency.
hz