Summary

MQTT bridges were connecting to upstream brokers but contributing almost nothing to the unified views. This PR fixes the entire ingest path so MQTT-relayed traffic lands properly attributed, decrypts via the channel database, and dedups across TCP + MQTT receptions of the same mesh packet.

Before: ~99% packet drop rate on Florida MQTT, zero messages in DB from MQTT sources, no MQTT entries in the unified channels picker or source filter.

After: ~25–35% ingest rate, full nodes/messages/telemetry/traceroutes/neighbors populated per MQTT source, picker entries from TCP and MQTT collapse to one logical channel, and a single mesh packet heard by TCP + Florida MQTT + Yeraze Broker appears as one unified entry with three receptions.

What's in here

Ingest pipeline (src/server/mqttIngestion.ts)

• ingestServiceEnvelope is async now and dispatches four additional portnums with the same storage semantics as the TCP path: TRACEROUTE_APP (incl. route segments + hop telemetry), NEIGHBORINFO_APP, PAXCOUNTER_APP, and STORE_FORWARD_APP (ROUTER_HEARTBEAT + ROUTER_TEXT_*).
• Server-side channel decryption via channelDecryptionService, mirroring meshtasticManager.processMeshPacket — encrypted packets get a synthetic decoded field populated from any matching channel_database PSK.
• bootstrapMqttChannelDatabase auto-seeds the well-known LongFast key (AQ==, expanded by expandShorthandPsk) so MQTT decryption works out of the box for new MQTT sources. Idempotent across multiple sources.
• Auto-records each (envelope.channelId, packet.channel) pair seen into the per-source channels table so the unified channels picker surfaces MQTT-side labels.
• Message row IDs now use the TCP convention ${sourceId}_${fromNum}_${packetId}. This is load-bearing — extractPacketIdFromRowId in unifiedRoutes.ts splits on _ and reads the trailing segment for the cross-source dedup key. Previously diverged with hyphens, which made the same packet appear N times in the unified view.
• Messages now flow through databaseService.messages.insertMessage(msg, sourceId) (repo) instead of databaseService.insertMessage(msg) (facade). The facade drops the sourceId, leaving rows orphaned with sourceId=NULL and invisible to source-scoped queries.

Geo-membership seed (src/server/mqttPacketFilter.ts, mqttBridgeManager.ts)

• seedMembership(positions) marks nodes whose stored position is inside the bbox as 'in' on bridge start, so non-POSITION traffic from already-known nodes flows without waiting for a fresh POSITION_APP broadcast (which can be hours and is reset on every restart).
• seedTrustedNodes(nodeNums) bypasses the bbox check for any node already heard directly by a non-MQTT source — fixes the case where the operator's own station (GPS off, no stored position) was geo-dropped on MQTT-relayed copies of its own packets.

Unified routes (src/server/routes/unifiedRoutes.ts)

• /telemetry: getLatestTelemetryByNode now takes a sourceId so cross-source telemetry no longer misattributes to whichever source happens to be iterating in the outer loop. Telemetry repo signatures widened.
• /channels + /messages: multi-slot match (filter, not find) so MQTT sources with multiple slots sharing one channel name all resolve.
• unifiedChannelDisplayName accepts a preset hint; slot 0 with empty name resolves to the firmware-derived label (MediumFast, LongFast, etc.) from the persisted lora.preset.<sourceId> setting. Collapses TCP empty-name slot 0 with MQTT-side "MediumFast" rows into one picker entry. meshtasticManager persists the preset on each LoRa config response.
• New MODEM_PRESET_CHANNEL_NAMES constant + modemPresetChannelName helper in src/server/constants/meshtastic.ts (firmware-spec pascal-case names — distinct from the human-friendly "Long Fast" labels).
• Expanded jsdoc on extractPacketIdFromRowId documenting the row-ID contract so future ingest paths don't diverge.

Misc

• docker-compose.dev.yml: removed the standalone LN4CY mqtt-proxy sidecar service. The feature has been integrated.

Test plan

• npx vitest run — 10064 tests pass (4 new in mqttPacketFilter, 10 new in mqttIngestion, 3 new in unifiedRoutes)
• npx tsc --noEmit -p tsconfig.json — clean
• Live verification in dev container with 3 MQTT sources (1 broker + 2 bridges):
  • Bridges seed 346 trusted + ~600-700 in-bbox nodes on start
  • LongFast PSK auto-bootstrapped to channel_database

  • 4500 packets decrypted via channel decryption in normal operation

  • Telemetry, traceroute, neighbor info rows landing per-source
  • Sent test message confirmed to appear as ONE unified entry with TCP + Florida MQTT + Yeraze Broker receptions stacked
  • MediumFast shows in the unified picker (was Primary)
• System tests run on every PR via CI

🤖 Generated with Claude Code