v11.10.1

fix(deps): bump @push.rocks/smartproxy to ^26.2.0
v11.10.0
2026-03-23 10:29:16 +00:00 · 2026-03-23 10:29:16 +00:00 · 2026-03-23 07:17:33 +00:00 · 2026-03-23 07:17:33 +00:00 · 2026-03-21 22:30:30 +00:00 · 2026-03-21 22:30:30 +00:00
17 changed files with 395 additions and 66 deletions
--- a/changelog.md
+++ b/changelog.md
@@ -1,5 +1,25 @@
 # Changelog

+## 2026-03-23 - 11.10.1 - fix(deps)
+bump @push.rocks/smartproxy to ^26.2.0
+
+- Updates the @push.rocks/smartproxy dependency from ^26.1.0 to ^26.2.0 in package.json.
+
+## 2026-03-23 - 11.10.0 - feat(monitoring)
+add backend protocol metrics to network stats and ops dashboard
+
+- Expose backend protocol, connection, error, and suppression metrics in stats responses.
+- Add typed backend info interfaces and app state support for backend metrics.
+- Render a new backend protocols table in the ops network view with detail modal and suppression badges.
+- Update smartproxy and lik dependencies to support backend protocol metrics collection.
+
+## 2026-03-21 - 11.9.1 - fix(lifecycle)
+clean up service subscriptions, proxy retries, and stale runtime state on shutdown
+
+- unsubscribe from ServiceManager event streams and use one-time signal handlers to avoid duplicate shutdown execution
+- reset existing SmartProxy instances before retry setup and prune expired certificate backoff cache entries
+- add periodic sweeping and shutdown cleanup for stale RADIUS accounting sessions
+
 ## 2026-03-20 - 11.9.0 - feat(dcrouter)
 add service manager lifecycle orchestration and health-based ops status reporting

--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
  "name": "@serve.zone/dcrouter",
  "private": false,
-  "version": "11.9.0",
+  "version": "11.10.1",
  "description": "A multifaceted routing service handling mail and SMS delivery functions.",
  "type": "module",
  "exports": {
@@ -37,7 +37,7 @@
    "@apiclient.xyz/cloudflare": "^7.1.0",
    "@design.estate/dees-catalog": "^3.48.5",
    "@design.estate/dees-element": "^2.2.3",
-    "@push.rocks/lik": "^6.3.1",
+    "@push.rocks/lik": "^6.4.0",
    "@push.rocks/projectinfo": "^5.0.2",
    "@push.rocks/qenv": "^6.1.3",
    "@push.rocks/smartacme": "^9.3.0",
@@ -53,16 +53,16 @@
    "@push.rocks/smartnetwork": "^4.4.0",
    "@push.rocks/smartpath": "^6.0.0",
    "@push.rocks/smartpromise": "^4.2.3",
-    "@push.rocks/smartproxy": "^25.17.10",
+    "@push.rocks/smartproxy": "^26.2.0",
    "@push.rocks/smartradius": "^1.1.1",
    "@push.rocks/smartrequest": "^5.0.1",
    "@push.rocks/smartrx": "^3.0.10",
    "@push.rocks/smartstate": "^2.2.0",
    "@push.rocks/smartunique": "^3.0.9",
-    "@push.rocks/taskbuffer": "7.0.0",
+    "@push.rocks/taskbuffer": "^8.0.0",
    "@serve.zone/catalog": "^2.9.0",
    "@serve.zone/interfaces": "^5.3.0",
-    "@serve.zone/remoteingress": "^4.14.0",
+    "@serve.zone/remoteingress": "^4.14.1",
    "@tsclass/tsclass": "^9.4.0",
    "lru-cache": "^11.2.7",
    "uuid": "^13.0.0"
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -30,8 +30,8 @@ importers:
        specifier: ^2.2.3
        version: 2.2.3
      '@push.rocks/lik':
-        specifier: ^6.3.1
-        version: 6.3.1
+        specifier: ^6.4.0
+        version: 6.4.0
      '@push.rocks/projectinfo':
        specifier: ^5.0.2
        version: 5.0.2
@@ -78,8 +78,8 @@ importers:
        specifier: ^4.2.3
        version: 4.2.3
      '@push.rocks/smartproxy':
-        specifier: ^25.17.10
-        version: 25.17.10
+        specifier: ^26.2.0
+        version: 26.2.0
      '@push.rocks/smartradius':
        specifier: ^1.1.1
        version: 1.1.1
@@ -96,8 +96,8 @@ importers:
        specifier: ^3.0.9
        version: 3.0.9
      '@push.rocks/taskbuffer':
-        specifier: 7.0.0
-        version: 7.0.0
+        specifier: ^8.0.0
+        version: 8.0.0
      '@serve.zone/catalog':
        specifier: ^2.9.0
        version: 2.9.0(@tiptap/pm@2.27.2)
@@ -105,8 +105,8 @@ importers:
        specifier: ^5.3.0
        version: 5.3.0
      '@serve.zone/remoteingress':
-        specifier: ^4.14.0
-        version: 4.14.0
+        specifier: ^4.14.1
+        version: 4.14.1
      '@tsclass/tsclass':
        specifier: ^9.4.0
        version: 9.5.0
@@ -1067,8 +1067,8 @@ packages:
  '@push.rocks/levelcache@3.2.0':
    resolution: {integrity: sha512-Ch0Oguta2I0SVi704kHghhBcgfyfS92ua1elRu9d8X1/9LMRYuqvvBAnyXyFxQzI3S8q8QC6EkRdd8CAAYSzRg==}

-  '@push.rocks/lik@6.3.1':
-    resolution: {integrity: sha512-UWDwGBaVx5yPtAFXqDDBtQZCzETUOA/7myQIXb+YBsuiIw4yQuhNZ23uY2ChQH2Zn6DLqdNSgQcYC0WywMZBNQ==}
+  '@push.rocks/lik@6.4.0':
+    resolution: {integrity: sha512-GCdXyF2a6NP+i0W6Mib1PjtA6JGrl6Ae17SbaQwqTscn4JHNta6xm9r+D8/b83XGZsoU903FlJZli3YqJCxT9Q==}

  '@push.rocks/mongodump@1.1.0':
    resolution: {integrity: sha512-kW0ZUGyf1e4nwloVwBQjNId+MzgTcNS834C+RxH21i1NqyOubbpWZtJtPP+K+s35nSJRyCTy3ICfBMdDBTAm2w==}
@@ -1259,8 +1259,8 @@ packages:
  '@push.rocks/smartpromise@4.2.3':
    resolution: {integrity: sha512-Ycg/TJR+tMt+S3wSFurOpEoW6nXv12QBtKXgBcjMZ4RsdO28geN46U09osPn9N9WuwQy1PkmTV5J/V4F9U8qEw==}

-  '@push.rocks/smartproxy@25.17.10':
-    resolution: {integrity: sha512-7tONZ77+Jlp4j2bGzp7ZpnS7nZC2Z8qbL23TYVQIR5KXt9GJuJV4w3CBsULtxL9PzmQajcY7jbmjFnjq2hcVqQ==}
+  '@push.rocks/smartproxy@26.2.0':
+    resolution: {integrity: sha512-HLTrBKViI6KnvY40+Mhi4I85kgZbP2MzjztHQqMq9xiGktvlrZl23r+fke6rEHxWb8znInYmdKRrS7dDzwsr0A==}

  '@push.rocks/smartpuppeteer@2.0.5':
    resolution: {integrity: sha512-yK/qSeWVHIGWRp3c8S5tfdGP6WCKllZC4DR8d8CQlEjszOSBmHtlTdyyqOMBZ/BA4kd+eU5f3A1r4K2tGYty1g==}
@@ -1344,8 +1344,8 @@ packages:
  '@push.rocks/taskbuffer@6.1.2':
    resolution: {integrity: sha512-sdqKd8N/GidztQ1k3r8A86rLvD8Afyir5FjYCNJXDD9837JLoqzHaOKGltUSBsCGh2gjsZn6GydsY6HhXQgvZQ==}

-  '@push.rocks/taskbuffer@7.0.0':
-    resolution: {integrity: sha512-cmjGwC/K7SzAcJrQChWSLTbIYl6YORbUkA/gyUTPVj/7Z7/BL7GzLyhYRk3ZHBS0AiCeTiP2WWNl+QJrf2WP9g==}
+  '@push.rocks/taskbuffer@8.0.0':
+    resolution: {integrity: sha512-ay4iXz0JmvsCQCmh5vvuu6KAl8FEZm5EpDXMQbeU+563d89xn+vMhh4+PtwxrVCogMEULWgGnavDYPTuzWtJOA==}

  '@push.rocks/webrequest@4.0.5':
    resolution: {integrity: sha512-wVSCaXqJ9Vh+rbwVz0wDl46dYz4rnwwSrm5vbVXKbuH6oKTPF0YRoujeJPqRltIn64RVGdLeY9/6ix+ZCrzhsg==}
@@ -1556,8 +1556,8 @@ packages:
  '@serve.zone/interfaces@5.3.0':
    resolution: {integrity: sha512-venO7wtDR9ixzD9NhdERBGjNKbFA5LL0yHw4eqGh0UpmvtXVc3SFG0uuHDilOKMZqZ8bttV88qVsFy1aSTJrtA==}

-  '@serve.zone/remoteingress@4.14.0':
-    resolution: {integrity: sha512-oDbKHhhvN2LxCcvmSgYhRLF+0FknEcPN+zg5kO4I0pfNpW/zgUYiaZns4TcYStZMS5/4i9j1uVR7QEO0a571/w==}
+  '@serve.zone/remoteingress@4.14.1':
+    resolution: {integrity: sha512-rYM4msFwo9SPxgNp/qXkJCQ8uXvQiMcH3cQEyciLKJ+7HwqKwQLCK4kbl45r/rzRAVOjyxXi0ae3hjgOBzTbyw==}

  '@sindresorhus/is@5.6.0':
    resolution: {integrity: sha512-TV7t8GKYaJWsn00tFDqBw8+Uqmr8A0fRU1tvTQhyZzGv0sJCGRQL3JGMI3ucuKo3XIZdUP+Lx7/gh2t3lewy7g==}
@@ -2047,9 +2047,6 @@ packages:
  '@types/semver@7.7.1':
    resolution: {integrity: sha512-FmgJfu+MOcQ370SD0ev7EI8TlCAfKYU+B4m5T3yXc1CiRN94g/SZPtsCkk506aUDtlMnFZvasDwHHUcZUEaYuA==}

-  '@types/symbol-tree@3.2.5':
-    resolution: {integrity: sha512-zXnnyENt1TYQcS21MkPaJCVjfcPq7p7yc5mo5JACuumXp6sly5jnlS0IokHd+xmmuCbx6V7JqkMBpswR+nZAcw==}
-
  '@types/tar-stream@3.1.4':
    resolution: {integrity: sha512-921gW0+g29mCJX0fRvqeHzBlE/XclDaAG0Ousy1LCghsOhvaKacDeRGEVzQP9IPfKn8Vysy7FEXAIxycpc/CMg==}

@@ -4324,7 +4321,7 @@ snapshots:
    dependencies:
      '@api.global/typedrequest-interfaces': 3.0.19
      '@push.rocks/isounique': 1.0.5
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartbuffer': 3.0.5
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartguard': 3.1.0
@@ -4340,7 +4337,7 @@ snapshots:
      '@cloudflare/workers-types': 4.20260317.1
      '@design.estate/dees-catalog': 3.49.0(@tiptap/pm@2.27.2)
      '@design.estate/dees-comms': 1.0.30
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartenv': 6.0.0
      '@push.rocks/smartfeed': 1.4.0
@@ -4913,7 +4910,7 @@ snapshots:
    dependencies:
      '@api.global/typedrequest': 3.3.0
      '@design.estate/dees-comms': 1.0.30
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartjson': 6.0.0
      '@push.rocks/smartmarkdown': 3.0.3
@@ -5203,7 +5200,7 @@ snapshots:
      '@git.zone/tsbundle': 2.9.1
      '@git.zone/tsrun': 2.0.1
      '@push.rocks/early': 4.0.4
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/npmextra': 5.3.3
      '@push.rocks/smartcli': 4.0.20
      '@push.rocks/smartdelay': 3.0.5
@@ -5867,7 +5864,7 @@ snapshots:

  '@push.rocks/levelcache@3.2.0':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartbucket': 3.3.10
      '@push.rocks/smartcache': 1.0.18
      '@push.rocks/smartenv': 5.0.13
@@ -5887,20 +5884,18 @@ snapshots:
      - supports-color
      - vue

-  '@push.rocks/lik@6.3.1':
+  '@push.rocks/lik@6.4.0':
    dependencies:
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartmatch': 2.0.0
      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrx': 3.0.10
      '@push.rocks/smarttime': 4.2.3
-      '@types/minimatch': 5.1.2
-      '@types/symbol-tree': 3.2.5
      symbol-tree: 3.2.4

  '@push.rocks/mongodump@1.1.0(socks@2.8.7)':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartfile': 11.2.7
      '@push.rocks/smartjson': 5.2.0
      '@push.rocks/smartpath': 6.0.0
@@ -5952,7 +5947,7 @@ snapshots:
    dependencies:
      '@apiclient.xyz/cloudflare': 7.1.0
      '@peculiar/x509': 1.14.3
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartdata': 7.1.0(socks@2.8.7)
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartdns': 7.9.0
@@ -6048,7 +6043,7 @@ snapshots:

  '@push.rocks/smartcli@4.0.20':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartlog': 3.2.1
      '@push.rocks/smartobject': 1.0.12
      '@push.rocks/smartpromise': 4.2.3
@@ -6072,7 +6067,7 @@ snapshots:

  '@push.rocks/smartdata@5.16.7(socks@2.8.7)':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartlog': 3.2.1
      '@push.rocks/smartmongo': 2.2.0(socks@2.8.7)
@@ -6102,7 +6097,7 @@ snapshots:

  '@push.rocks/smartdata@7.1.0(socks@2.8.7)':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartlog': 3.2.1
      '@push.rocks/smartmongo': 2.2.0(socks@2.8.7)
@@ -6161,14 +6156,14 @@ snapshots:

  '@push.rocks/smartexit@1.1.1':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartpromise': 4.2.3
      tree-kill: 1.2.2

  '@push.rocks/smartexit@2.0.3':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartpromise': 4.2.3

  '@push.rocks/smartexpect@2.5.0':
@@ -6186,7 +6181,7 @@ snapshots:

  '@push.rocks/smartfile@10.0.41':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartfile-interfaces': 1.0.7
      '@push.rocks/smarthash': 3.2.6
@@ -6205,7 +6200,7 @@ snapshots:

  '@push.rocks/smartfile@11.2.7':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartfile-interfaces': 1.0.7
      '@push.rocks/smarthash': 3.2.6
@@ -6223,7 +6218,7 @@ snapshots:

  '@push.rocks/smartfile@13.1.2':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartfile-interfaces': 1.0.7
      '@push.rocks/smartfs': 1.5.0
@@ -6260,7 +6255,7 @@ snapshots:

  '@push.rocks/smartinteract@2.0.16':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartobject': 1.0.12
      '@push.rocks/smartpromise': 4.2.3
      inquirer: 11.1.0
@@ -6545,7 +6540,7 @@ snapshots:

  '@push.rocks/smartpromise@4.2.3': {}

-  '@push.rocks/smartproxy@25.17.10':
+  '@push.rocks/smartproxy@26.2.0':
    dependencies:
      '@push.rocks/smartcrypto': 2.0.4
      '@push.rocks/smartlog': 3.2.1
@@ -6600,7 +6595,7 @@ snapshots:

  '@push.rocks/smartrouter@1.3.3':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartrx': 3.0.10
      path-to-regexp: 8.3.0

@@ -6617,7 +6612,7 @@ snapshots:
    dependencies:
      '@api.global/typedrequest': 3.3.0
      '@cfworker/json-schema': 4.1.1
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartenv': 6.0.0
      '@push.rocks/smartlog': 3.2.1
      '@push.rocks/smartpath': 6.0.0
@@ -6677,7 +6672,7 @@ snapshots:

  '@push.rocks/smartstream@3.4.0':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartenv': 6.0.0
      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrx': 3.0.10
@@ -6688,7 +6683,7 @@ snapshots:

  '@push.rocks/smarttime@4.2.3':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartpromise': 4.2.3
      croner: 10.0.1
@@ -6712,7 +6707,7 @@ snapshots:

  '@push.rocks/smartwatch@6.3.0':
    dependencies:
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartenv': 6.0.0
      '@push.rocks/smartpromise': 4.2.3
      '@push.rocks/smartrx': 3.0.10
@@ -6735,7 +6730,7 @@ snapshots:
  '@push.rocks/taskbuffer@3.5.0':
    dependencies:
      '@design.estate/dees-element': 2.2.3
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartlog': 3.2.1
      '@push.rocks/smartpromise': 4.2.3
@@ -6751,7 +6746,7 @@ snapshots:
  '@push.rocks/taskbuffer@6.1.2':
    dependencies:
      '@design.estate/dees-element': 2.2.3
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartlog': 3.2.1
      '@push.rocks/smartpromise': 4.2.3
@@ -6764,10 +6759,10 @@ snapshots:
      - supports-color
      - vue

-  '@push.rocks/taskbuffer@7.0.0':
+  '@push.rocks/taskbuffer@8.0.0':
    dependencies:
      '@design.estate/dees-element': 2.2.3
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartdelay': 3.0.5
      '@push.rocks/smartlog': 3.2.1
      '@push.rocks/smartpromise': 4.2.3
@@ -6797,7 +6792,7 @@ snapshots:
  '@push.rocks/webstore@2.0.20':
    dependencies:
      '@api.global/typedrequest-interfaces': 3.0.19
-      '@push.rocks/lik': 6.3.1
+      '@push.rocks/lik': 6.4.0
      '@push.rocks/smartenv': 5.0.13
      '@push.rocks/smartjson': 5.2.0
      '@push.rocks/smartpromise': 4.2.3
@@ -6978,7 +6973,7 @@ snapshots:
      '@push.rocks/smartlog-interfaces': 3.0.2
      '@tsclass/tsclass': 9.5.0

-  '@serve.zone/remoteingress@4.14.0':
+  '@serve.zone/remoteingress@4.14.1':
    dependencies:
      '@push.rocks/qenv': 6.1.3
      '@push.rocks/smartrust': 1.3.2
@@ -7610,8 +7605,6 @@ snapshots:

  '@types/semver@7.7.1': {}

-  '@types/symbol-tree@3.2.5': {}
-
  '@types/tar-stream@3.1.4':
    dependencies:
      '@types/node': 25.5.0
--- a/ts/00_commitinfo_data.ts
+++ b/ts/00_commitinfo_data.ts
@@ -3,6 +3,6 @@
 */
 export const commitinfo = {
  name: '@serve.zone/dcrouter',
-  version: '11.9.0',
+  version: '11.10.1',
  description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }
--- a/ts/classes.cert-provision-scheduler.ts
+++ b/ts/classes.cert-provision-scheduler.ts
@@ -61,14 +61,21 @@ export class CertProvisionScheduler {
  }

  /**
-   * Check if a domain is currently in backoff
+   * Check if a domain is currently in backoff.
+   * Expired entries are pruned from the cache to prevent unbounded growth.
   */
  async isInBackoff(domain: string): Promise<boolean> {
    const entry = await this.loadBackoff(domain);
    if (!entry) return false;

    const retryAfter = new Date(entry.retryAfter);
-    return retryAfter.getTime() > Date.now();
+    if (retryAfter.getTime() > Date.now()) {
+      return true;
+    }
+
+    // Backoff has expired — prune the stale entry
+    this.backoffCache.delete(domain);
+    return false;
  }

  /**
@@ -124,9 +131,12 @@ export class CertProvisionScheduler {
    const entry = await this.loadBackoff(domain);
    if (!entry) return null;

-    // Only return if still in backoff
+    // Only return if still in backoff — prune expired entries
    const retryAfter = new Date(entry.retryAfter);
-    if (retryAfter.getTime() <= Date.now()) return null;
+    if (retryAfter.getTime() <= Date.now()) {
+      this.backoffCache.delete(domain);
+      return null;
+    }

    return {
      failures: entry.failures,
--- a/ts/classes.dcrouter.ts
+++ b/ts/classes.dcrouter.ts
@@ -254,6 +254,7 @@ export class DcRouter {

  // Service lifecycle management
  public serviceManager: plugins.taskbuffer.ServiceManager;
+  private serviceSubjectSubscription?: plugins.smartrx.rxjs.Subscription;
  public smartAcmeReady = false;

  // TypedRouter for API endpoints
@@ -516,7 +517,7 @@ export class DcRouter {
    }

    // Wire up aggregated events for logging
-    this.serviceManager.serviceSubject.subscribe((event) => {
+    this.serviceSubjectSubscription = this.serviceManager.serviceSubject.subscribe((event) => {
      const level = event.type === 'failed' ? 'error' : event.type === 'retrying' ? 'warn' : 'info';
      logger.log(level as any, `Service '${event.serviceName}': ${event.type}`, {
        state: event.state,
@@ -639,6 +640,13 @@ export class DcRouter {
   */
  private async setupSmartProxy(): Promise<void> {
    logger.log('info', 'Setting up SmartProxy...');
+
+    // Clean up any existing SmartProxy instance (e.g. from a retry)
+    if (this.smartProxy) {
+      this.smartProxy.removeAllListeners();
+      this.smartProxy = undefined;
+    }
+
    let routes: plugins.smartproxy.IRouteConfig[] = [];
    let acmeConfig: plugins.smartproxy.IAcmeOptions | undefined;
    
@@ -1126,6 +1134,12 @@ export class DcRouter {
  public async stop() {
    logger.log('info', 'Stopping DcRouter services...');

+    // Unsubscribe from service events before stopping services
+    if (this.serviceSubjectSubscription) {
+      this.serviceSubjectSubscription.unsubscribe();
+      this.serviceSubjectSubscription = undefined;
+    }
+
    // ServiceManager handles reverse-dependency-ordered shutdown
    await this.serviceManager.stop();

--- a/ts/index.ts
+++ b/ts/index.ts
@@ -35,6 +35,6 @@ export const runCli = async () => {
    await dcRouter.stop();
    process.exit(0);
  };
-  process.on('SIGINT', shutdown);
-  process.on('SIGTERM', shutdown);
+  process.once('SIGINT', shutdown);
+  process.once('SIGTERM', shutdown);
 };
--- a/ts/monitoring/classes.metricsmanager.ts
+++ b/ts/monitoring/classes.metricsmanager.ts
@@ -558,6 +558,7 @@ export class MetricsManager {
          throughputByIP: new Map<string, { in: number; out: number }>(),
          requestsPerSecond: 0,
          requestsTotal: 0,
+          backends: [] as Array<any>,
        };
      }

@@ -590,6 +591,73 @@ export class MetricsManager {
      const requestsPerSecond = proxyMetrics.requests.perSecond();
      const requestsTotal = proxyMetrics.requests.total();

+      // Collect backend protocol data
+      const backendMetrics = proxyMetrics.backends.byBackend();
+      const protocolCache = proxyMetrics.backends.detectedProtocols();
+
+      // Index protocol cache by "host:port"
+      const cacheByKey = new Map<string, (typeof protocolCache)[number]>();
+      for (const entry of protocolCache) {
+        cacheByKey.set(`${entry.host}:${entry.port}`, entry);
+      }
+
+      const backends: Array<any> = [];
+      const seen = new Set<string>();
+
+      for (const [key, bm] of backendMetrics) {
+        seen.add(key);
+        const cache = cacheByKey.get(key);
+        backends.push({
+          backend: key,
+          domain: cache?.domain ?? null,
+          protocol: bm.protocol,
+          activeConnections: bm.activeConnections,
+          totalConnections: bm.totalConnections,
+          connectErrors: bm.connectErrors,
+          handshakeErrors: bm.handshakeErrors,
+          requestErrors: bm.requestErrors,
+          avgConnectTimeMs: Math.round(bm.avgConnectTimeMs * 10) / 10,
+          poolHitRate: Math.round(bm.poolHitRate * 1000) / 1000,
+          h2Failures: bm.h2Failures,
+          h2Suppressed: cache?.h2Suppressed ?? false,
+          h3Suppressed: cache?.h3Suppressed ?? false,
+          h2CooldownRemainingSecs: cache?.h2CooldownRemainingSecs ?? null,
+          h3CooldownRemainingSecs: cache?.h3CooldownRemainingSecs ?? null,
+          h2ConsecutiveFailures: cache?.h2ConsecutiveFailures ?? null,
+          h3ConsecutiveFailures: cache?.h3ConsecutiveFailures ?? null,
+          h3Port: cache?.h3Port ?? null,
+          cacheAgeSecs: cache?.ageSecs ?? null,
+        });
+      }
+
+      // Include protocol cache entries with no matching backend metric
+      for (const entry of protocolCache) {
+        const key = `${entry.host}:${entry.port}`;
+        if (!seen.has(key)) {
+          backends.push({
+            backend: key,
+            domain: entry.domain,
+            protocol: entry.protocol,
+            activeConnections: 0,
+            totalConnections: 0,
+            connectErrors: 0,
+            handshakeErrors: 0,
+            requestErrors: 0,
+            avgConnectTimeMs: 0,
+            poolHitRate: 0,
+            h2Failures: 0,
+            h2Suppressed: entry.h2Suppressed,
+            h3Suppressed: entry.h3Suppressed,
+            h2CooldownRemainingSecs: entry.h2CooldownRemainingSecs,
+            h3CooldownRemainingSecs: entry.h3CooldownRemainingSecs,
+            h2ConsecutiveFailures: entry.h2ConsecutiveFailures,
+            h3ConsecutiveFailures: entry.h3ConsecutiveFailures,
+            h3Port: entry.h3Port,
+            cacheAgeSecs: entry.ageSecs,
+          });
+        }
+      }
+
      return {
        connectionsByIP,
        throughputRate,
@@ -599,6 +667,7 @@ export class MetricsManager {
        throughputByIP,
        requestsPerSecond,
        requestsTotal,
+        backends,
      };
    }, 1000); // 1s cache — matches typical dashboard poll interval
  }
--- a/ts/opsserver/handlers/security.handler.ts
+++ b/ts/opsserver/handlers/security.handler.ts
@@ -101,6 +101,7 @@ export class SecurityHandler {
              throughputByIP,
              requestsPerSecond: networkStats.requestsPerSecond || 0,
              requestsTotal: networkStats.requestsTotal || 0,
+              backends: networkStats.backends || [],
            };
          }

@@ -114,6 +115,7 @@ export class SecurityHandler {
            throughputByIP: [],
            requestsPerSecond: 0,
            requestsTotal: 0,
+            backends: [],
          };
        }
      )
--- a/ts/opsserver/handlers/stats.handler.ts
+++ b/ts/opsserver/handlers/stats.handler.ts
@@ -309,6 +309,7 @@ export class StatsHandler {
                  throughputHistory: stats.throughputHistory || [],
                  requestsPerSecond: stats.requestsPerSecond || 0,
                  requestsTotal: stats.requestsTotal || 0,
+                  backends: stats.backends || [],
                };
              })()
            );
--- a/ts/radius/classes.accounting.manager.ts
+++ b/ts/radius/classes.accounting.manager.ts
@@ -92,6 +92,8 @@ export interface IAccountingManagerConfig {
  detailedLogging?: boolean;
  /** Maximum active sessions to track in memory */
  maxActiveSessions?: number;
+  /** Stale session timeout in hours — sessions with no update for this long are evicted (default: 24) */
+  staleSessionTimeoutHours?: number;
 }

 /**
@@ -105,6 +107,7 @@ export class AccountingManager {
  private activeSessions: Map<string, IAccountingSession> = new Map();
  private config: Required<IAccountingManagerConfig>;
  private storageManager?: StorageManager;
+  private staleSessionSweepTimer?: ReturnType<typeof setInterval>;

  // Counters for statistics
  private stats = {
@@ -121,6 +124,7 @@ export class AccountingManager {
      retentionDays: config?.retentionDays ?? 30,
      detailedLogging: config?.detailedLogging ?? false,
      maxActiveSessions: config?.maxActiveSessions ?? 10000,
+      staleSessionTimeoutHours: config?.staleSessionTimeoutHours ?? 24,
    };
    this.storageManager = storageManager;
  }
@@ -132,9 +136,60 @@ export class AccountingManager {
    if (this.storageManager) {
      await this.loadActiveSessions();
    }
+
+    // Start periodic sweep to evict stale sessions (every 15 minutes)
+    this.staleSessionSweepTimer = setInterval(() => {
+      this.sweepStaleSessions();
+    }, 15 * 60 * 1000);
+    // Allow the process to exit even if the timer is pending
+    if (this.staleSessionSweepTimer.unref) {
+      this.staleSessionSweepTimer.unref();
+    }
+
    logger.log('info', `AccountingManager initialized with ${this.activeSessions.size} active sessions`);
  }

+  /**
+   * Stop the accounting manager and clean up timers
+   */
+  stop(): void {
+    if (this.staleSessionSweepTimer) {
+      clearInterval(this.staleSessionSweepTimer);
+      this.staleSessionSweepTimer = undefined;
+    }
+  }
+
+  /**
+   * Sweep stale active sessions that have not received any update
+   * within the configured timeout. These are orphaned sessions where
+   * the Stop packet was never received.
+   */
+  private sweepStaleSessions(): void {
+    const timeoutMs = this.config.staleSessionTimeoutHours * 60 * 60 * 1000;
+    const cutoff = Date.now() - timeoutMs;
+    let swept = 0;
+
+    for (const [sessionId, session] of this.activeSessions) {
+      if (session.lastUpdateTime < cutoff) {
+        session.status = 'terminated';
+        session.terminateCause = 'StaleSessionTimeout';
+        session.endTime = Date.now();
+        session.sessionTime = Math.floor((session.endTime - session.startTime) / 1000);
+
+        if (this.storageManager) {
+          this.archiveSession(session).catch(() => {});
+        }
+
+        this.activeSessions.delete(sessionId);
+        swept++;
+      }
+    }
+
+    if (swept > 0) {
+      logger.log('info', `Swept ${swept} stale RADIUS sessions (no update for ${this.config.staleSessionTimeoutHours}h)`);
+    }
+  }
+
  /**
   * Handle accounting start request
   */
--- a/ts/radius/classes.radius.server.ts
+++ b/ts/radius/classes.radius.server.ts
@@ -183,6 +183,8 @@ export class RadiusServer {
      this.radiusServer = undefined;
    }

+    this.accountingManager.stop();
+
    this.running = false;
    logger.log('info', 'RADIUS server stopped');
  }
--- a/ts_interfaces/data/stats.ts
+++ b/ts_interfaces/data/stats.ts
@@ -165,6 +165,7 @@ export interface INetworkMetrics {
  throughputHistory?: Array<{ timestamp: number; in: number; out: number }>;
  requestsPerSecond?: number;
  requestsTotal?: number;
+  backends?: IBackendInfo[];
 }

 export interface IConnectionDetails {
@@ -174,4 +175,26 @@ export interface IConnectionDetails {
  startTime: number;
  bytesIn: number;
  bytesOut: number;
+}
+
+export interface IBackendInfo {
+  backend: string;
+  domain: string | null;
+  protocol: string;
+  activeConnections: number;
+  totalConnections: number;
+  connectErrors: number;
+  handshakeErrors: number;
+  requestErrors: number;
+  avgConnectTimeMs: number;
+  poolHitRate: number;
+  h2Failures: number;
+  h2Suppressed: boolean;
+  h3Suppressed: boolean;
+  h2CooldownRemainingSecs: number | null;
+  h3CooldownRemainingSecs: number | null;
+  h2ConsecutiveFailures: number | null;
+  h3ConsecutiveFailures: number | null;
+  h3Port: number | null;
+  cacheAgeSecs: number | null;
 }
--- a/ts_interfaces/requests/stats.ts
+++ b/ts_interfaces/requests/stats.ts
@@ -179,5 +179,6 @@ export interface IReq_GetNetworkStats extends plugins.typedrequestInterfaces.imp
    throughputByIP: Array<{ ip: string; in: number; out: number }>;
    requestsPerSecond: number;
    requestsTotal: number;
+    backends?: statsInterfaces.IBackendInfo[];
  };
 }
--- a/ts_web/00_commitinfo_data.ts
+++ b/ts_web/00_commitinfo_data.ts
@@ -3,6 +3,6 @@
 */
 export const commitinfo = {
  name: '@serve.zone/dcrouter',
-  version: '11.9.0',
+  version: '11.10.1',
  description: 'A multifaceted routing service handling mail and SMS delivery functions.'
 }
--- a/ts_web/appstate.ts
+++ b/ts_web/appstate.ts
@@ -53,6 +53,7 @@ export interface INetworkState {
  throughputHistory: Array<{ timestamp: number; in: number; out: number }>;
  requestsPerSecond: number;
  requestsTotal: number;
+  backends: interfaces.data.IBackendInfo[];
  lastUpdated: number;
  isLoading: boolean;
  error: string | null;
@@ -148,6 +149,7 @@ export const networkStatePart = await appState.getStatePart<INetworkState>(
    throughputHistory: [],
    requestsPerSecond: 0,
    requestsTotal: 0,
+    backends: [],
    lastUpdated: 0,
    isLoading: false,
    error: null,
@@ -503,6 +505,7 @@ export const fetchNetworkStatsAction = networkStatePart.createAction(async (stat
      throughputHistory: networkStatsResponse.throughputHistory || [],
      requestsPerSecond: networkStatsResponse.requestsPerSecond || 0,
      requestsTotal: networkStatsResponse.requestsTotal || 0,
+      backends: networkStatsResponse.backends || [],
      lastUpdated: Date.now(),
      isLoading: false,
      error: null,
--- a/ts_web/elements/ops-view-network.ts
+++ b/ts_web/elements/ops-view-network.ts
@@ -1,5 +1,6 @@
 import { DeesElement, property, html, customElement, type TemplateResult, css, state, cssManager } from '@design.estate/dees-element';
 import * as appstate from '../appstate.js';
+import * as interfaces from '../../dist_ts_interfaces/index.js';
 import { viewHostCss } from './shared/css.js';
 import { type IStatsTile } from '@design.estate/dees-catalog';

@@ -198,6 +199,38 @@ export class OpsViewNetwork extends DeesElement {
        color: ${cssManager.bdTheme('#00796b', '#4db6ac')};
      }

+      .protocolBadge.h1 {
+        background: ${cssManager.bdTheme('#e3f2fd', '#1a2c3a')};
+        color: ${cssManager.bdTheme('#1976d2', '#5a9fd4')};
+      }
+
+      .protocolBadge.h2 {
+        background: ${cssManager.bdTheme('#e8f5e9', '#1a3a1a')};
+        color: ${cssManager.bdTheme('#388e3c', '#66bb6a')};
+      }
+
+      .protocolBadge.h3 {
+        background: ${cssManager.bdTheme('#f3e5f5', '#2a1a3a')};
+        color: ${cssManager.bdTheme('#7b1fa2', '#ba68c8')};
+      }
+
+      .protocolBadge.unknown {
+        background: ${cssManager.bdTheme('#f5f5f5', '#2a2a2a')};
+        color: ${cssManager.bdTheme('#757575', '#999999')};
+      }
+
+      .suppressionBadge {
+        display: inline-flex;
+        align-items: center;
+        padding: 2px 6px;
+        border-radius: 3px;
+        font-size: 11px;
+        font-weight: 500;
+        background: ${cssManager.bdTheme('#fff3e0', '#3a2a1a')};
+        color: ${cssManager.bdTheme('#f57c00', '#ff9933')};
+        margin-left: 4px;
+      }
+
      .statusBadge {
        display: inline-flex;
        align-items: center;
@@ -265,6 +298,9 @@ export class OpsViewNetwork extends DeesElement {
        <!-- Top IPs Section -->
        ${this.renderTopIPs()}

+        <!-- Backend Protocols Section -->
+        ${this.renderBackendProtocols()}
+
        <!-- Requests Table -->
        <dees-table
          .data=${this.networkRequests}
@@ -519,6 +555,106 @@ export class OpsViewNetwork extends DeesElement {
    `;
  }

+  private renderBackendProtocols(): TemplateResult {
+    const backends = this.networkState.backends;
+    if (!backends || backends.length === 0) {
+      return html``;
+    }
+
+    return html`
+      <dees-table
+        .data=${backends}
+        .displayFunction=${(item: interfaces.data.IBackendInfo) => {
+          const totalErrors = item.connectErrors + item.handshakeErrors + item.requestErrors;
+          const protocolClass = item.protocol.toLowerCase().replace(/[^a-z0-9]/g, '');
+
+          return {
+            'Backend': item.backend,
+            'Domain': item.domain || '-',
+            'Protocol': html`
+              <span class="protocolBadge ${protocolClass}">${item.protocol.toUpperCase()}</span>
+              ${item.h2Suppressed ? html`<span class="suppressionBadge" title="H2 suppressed: ${item.h2ConsecutiveFailures ?? 0} failures, cooldown ${item.h2CooldownRemainingSecs ?? 0}s">H2 suppressed</span>` : ''}
+              ${item.h3Suppressed ? html`<span class="suppressionBadge" title="H3 suppressed: ${item.h3ConsecutiveFailures ?? 0} failures, cooldown ${item.h3CooldownRemainingSecs ?? 0}s">H3 suppressed</span>` : ''}
+            `,
+            'Active': item.activeConnections,
+            'Total': this.formatNumber(item.totalConnections),
+            'Avg Connect': item.avgConnectTimeMs > 0 ? `${item.avgConnectTimeMs.toFixed(1)}ms` : '-',
+            'Pool Hit Rate': item.poolHitRate > 0 ? `${(item.poolHitRate * 100).toFixed(1)}%` : '-',
+            'Errors': totalErrors > 0
+              ? html`<span class="statusBadge error">${totalErrors}</span>`
+              : html`<span class="statusBadge success">0</span>`,
+            'Cache Age': item.cacheAgeSecs != null ? `${Math.round(item.cacheAgeSecs)}s` : '-',
+          };
+        }}
+        .dataActions=${[
+          {
+            name: 'View Details',
+            iconName: 'lucide:info',
+            type: ['inRow', 'doubleClick', 'contextmenu'] as any,
+            actionFunc: async (actionData: any) => {
+              await this.showBackendDetails(actionData.item);
+            }
+          }
+        ]}
+        heading1="Backend Protocols"
+        heading2="Auto-detected backend protocols and connection pool health"
+        searchable
+        .pagination=${false}
+        dataName="backend"
+      ></dees-table>
+    `;
+  }
+
+  private async showBackendDetails(backend: interfaces.data.IBackendInfo) {
+    const { DeesModal } = await import('@design.estate/dees-catalog');
+
+    await DeesModal.createAndShow({
+      heading: `Backend: ${backend.backend}`,
+      content: html`
+        <div style="padding: 20px;">
+          <dees-dataview-codebox
+            .heading=${'Backend Details'}
+            progLang="json"
+            .codeToDisplay=${JSON.stringify({
+              backend: backend.backend,
+              domain: backend.domain,
+              protocol: backend.protocol,
+              activeConnections: backend.activeConnections,
+              totalConnections: backend.totalConnections,
+              avgConnectTimeMs: backend.avgConnectTimeMs,
+              poolHitRate: backend.poolHitRate,
+              errors: {
+                connect: backend.connectErrors,
+                handshake: backend.handshakeErrors,
+                request: backend.requestErrors,
+                h2Failures: backend.h2Failures,
+              },
+              suppression: {
+                h2Suppressed: backend.h2Suppressed,
+                h3Suppressed: backend.h3Suppressed,
+                h2CooldownRemainingSecs: backend.h2CooldownRemainingSecs,
+                h3CooldownRemainingSecs: backend.h3CooldownRemainingSecs,
+                h2ConsecutiveFailures: backend.h2ConsecutiveFailures,
+                h3ConsecutiveFailures: backend.h3ConsecutiveFailures,
+              },
+              h3Port: backend.h3Port,
+              cacheAgeSecs: backend.cacheAgeSecs,
+            }, null, 2)}
+          ></dees-dataview-codebox>
+        </div>
+      `,
+      menuOptions: [
+        {
+          name: 'Copy Backend Key',
+          iconName: 'lucide:Copy',
+          action: async () => {
+            await navigator.clipboard.writeText(backend.backend);
+          }
+        }
+      ]
+    });
+  }
+
  private async updateNetworkData() {
    // Track requests/sec history for the trend sparkline (moved out of render)
    const reqPerSec = this.networkState.requestsPerSecond || 0;
Author	SHA1	Message	Date
Juergen Kunz	dc010dc3ae	v11.10.1 Some checks failed Docker (tags) / security (push) Failing after 3s Details Docker (tags) / test (push) Has been skipped Details Docker (tags) / release (push) Has been skipped Details Docker (tags) / metadata (push) Has been skipped Details	2026-03-23 10:29:16 +00:00
Juergen Kunz	61d5d3b1ad	fix(deps): bump @push.rocks/smartproxy to ^26.2.0	2026-03-23 10:29:16 +00:00
Juergen Kunz	dd70790d40	v11.10.0 Some checks failed Docker (tags) / security (push) Failing after 3s Details Docker (tags) / test (push) Has been skipped Details Docker (tags) / release (push) Has been skipped Details Docker (tags) / metadata (push) Has been skipped Details	2026-03-23 07:17:33 +00:00
Juergen Kunz	2f8c04edc4	feat(monitoring): add backend protocol metrics to network stats and ops dashboard	2026-03-23 07:17:33 +00:00
Juergen Kunz	474cc328dd	v11.9.1 Some checks failed Docker (tags) / security (push) Failing after 2s Details Docker (tags) / test (push) Has been skipped Details Docker (tags) / release (push) Has been skipped Details Docker (tags) / metadata (push) Has been skipped Details	2026-03-21 22:30:30 +00:00
Juergen Kunz	39ff159bf7	fix(lifecycle): clean up service subscriptions, proxy retries, and stale runtime state on shutdown	2026-03-21 22:30:30 +00:00