polls /api/session?since= every 10s while visible. grouped by group id. FLUSH wipes relay memory + 3-day mirror (needs password, asks twice).