Files
meshcore-analyzer/cmd
Kpa-clawbot 0f7cce3a5f fix(#1370): revert ingestor envelope-timestamp path — server ingest time for packet/observation storage (counters #1233) (#1372)
## Summary

Reverts the part of PR #1233 (commit `498fbc03`) that routed the MQTT
envelope's `timestamp` field into `PacketData.Timestamp` for
`transmissions.first_seen` and `observations.timestamp`. Packet
ordering is restored to server ingest time — the client clock is
untrusted.

`UpsertObserverAt` + `MAX(MIN(existing, ingestNow), rxTime)` for
observer/node `last_seen` (PR #1233's other half) is preserved
unchanged. `parseEnvelopeTime` / `resolveRxTime` helpers are
preserved — they still feed the observer.last_seen path.

## Diagnosis — Voodoo3 tx 304114 on staging

Staging `tx_id = 304114` in channel `#test` has 5 observations:

| # | observer  | reported timestamp | comment |
|---|-----------|--------------------|---------|
| 1 | Voodoo3 | 18:42 | broken client RTC — ingested first, locks
`first_seen` |
| 2 | Voodoo3   | 18:42  | broken client RTC |
| 3 | Voodoo3   | 18:42  | broken client RTC |
| 4 | Voodoo3   | 18:42  | broken client RTC |
| 5 | other obs | 01:42  | genuine receive time |

4 of 5 observations carry stale 18:42 timestamps from Voodoo3's own
broken clock. Because Voodoo3 ingested first, PR #1233's code wrote
`transmissions.first_seen = 18:42` (envelope value). Downstream
aggregators that compute `MAX(first_seen)` per channel saw 18:42 as
the latest activity, and `/api/channels` for `#test` displayed
`lastActivity` ~7h+ in the past plus a stale heartbeat in the row
preview — hiding the genuinely-newest message (Voodoo3's `tst hmdpt`
at 01:42).

## Why PR #1233's premise fails

PR #1233 assumed:
> Uploaders stamp `timestamp` when the radio receives the frame and
> freeze it; the MQTT message is published late, but the timestamp
> field is not re-stamped at publish. A buffered packet uploaded
> hours late still carries its true receive time.

That holds ONLY when the uploader's wall clock is correct. Observers
in the field (Voodoo3 here, surely others) have broken local clocks.
Their envelope timestamps are not a true receive time — they're a
broken-clock receive time, which is just garbage with extra steps.
The server clock is the only one we control, so packet ordering must
use it.

## Fix

### `cmd/ingestor/db.go`
- `BuildPacketData`: `PacketData.Timestamp =
time.Now().UTC().Format(time.RFC3339)`,
  NOT `msg.Timestamp`. Docstring updated to cite #1370 and explain
  why `msg.Timestamp` is no longer read here.

### `cmd/ingestor/main.go`
- Channel-companion path: `Timestamp: ingestNow` (was `rxTime`).
- DM-companion path: `Timestamp: ingestNow` (was `rxTime`).
- Local `rxTime := resolveRxTime(msg, tag)` removed from both paths
  (no remaining consumers in those scopes).

### Preserved (NOT touched)
- `resolveRxTime`, `parseEnvelopeTime` — still used by `handleMessage`
  to populate `mqttMsg.Timestamp` and to call `UpsertObserverAt`,
  which feeds `observer.last_seen` and `observer.last_packet_at`.
- All three `MAX(MIN(existing, ingestNow), rxTime)` guards (#1233
  observer.last_seen, observer.last_packet_at, node.last_seen).
- `MQTTPacketMessage.Timestamp` struct field.

## Tests

| File | Asserts |
|------|---------|
| `cmd/ingestor/ingest_time_regression_1370_test.go` (3 cases) |
Raw-packet, channel-companion, and DM-companion `handleMessage` paths.
Feed envelope `timestamp = T_now - 7h`; assert stored
`transmissions.first_seen` (RFC3339) and `observations.timestamp`
(epoch) are server wall clock (±5s). Each case fails on master under PR
#1233's premise. |

### Adjusted test
- `cmd/ingestor/db_test.go::TestBuildPacketData` — PR #1233 had asserted
  `pkt.Timestamp == "2026-05-16T10:00:00Z"` (the envelope value
  propagating). Now asserts the opposite: `pkt.Timestamp` is non-empty
  AND is NOT the envelope value. Comment cites #1370 and why the
  expectation flipped.

### Verified still-green
- `cmd/ingestor/rxtime_test.go` (`TestParseEnvelopeTime`,
  `TestResolveRxTime`) — helpers untouched, still cover envelope
  parsing for the observer.last_seen path.
- `cmd/server/channels_message_order_1366_test.go` (#1366).
- `cmd/server/db_channel_messages_perf_test.go` (#1368 perf budget).

## Commits

- `a9b7efc3` — RED: 3 `handleMessage` assertion-fail tests + test name
  collision check.
- `5a0891f0` — GREEN: revert envelope→PacketData.Timestamp plumbing in
  `cmd/ingestor/{db,main}.go` + flip `TestBuildPacketData`.

Fixes #1370

---------

Co-authored-by: corescope-bot <bot@corescope.dev>
2026-05-25 19:56:49 -07:00
..