- Shipped
- September 7, 2026 at 10:15 PM UTC
- Author
- Kamo
- Commit
- 48b3405
The measure is the age of the *** the member is holding, so the session had to start carrying the instant it was minted — nothing anywhere recorded it, because a session is a Redis record that leaves no row behind when it lapses. The stamp survives updateSession, so re-baking rights mid-session does not reset a member's clock. Two seams, the shape syncGrowthMissions established. The session-extend endpoint is the one that matters: it fires BECAUSE the member is still here, so the popup lands during the loitering instead of congratulating them tomorrow on a stretch that has already ended. /self and /self/pending cover the dropped extend and the member idling on one page. Under half an hour the sync returns on arithmetic alone and never reaches the database, which matters when the caller is the endpoint that keeps people signed in — and nothing it does can fail that endpoint, or a badge would be signing members out. An impersonated session earns nothing. Every other achievement records a deed, and a deed done while acting as somebody is still theirs; this one records only that a tab stayed open, and an admin who leaves one up overnight must not hand a member a level for a session they have never seen.