TMM extend to ephemeral 3rd tier store#11050

Open

NomDeTom wants to merge 44 commits into

meshtastic:developfrom

NomDeTom:tmm-super-superset

Commits on Jul 18, 2026

Harden TMM NodeInfo direct-response: staleness, key hygiene, throttle

claude
authored and
NomDeTom
committed
Add TODO(T1-T9) markers for code-review findings on NodeInfo hardening

claude
authored and
NomDeTom
committed
Address code-review cleanups T6, T7, T8 in NodeInfo direct-response

claude
authored and
NomDeTom
committed
Throttle the NodeDB fallback direct-response path (T3)

claude
authored and
NomDeTom
committed
Make NodeInfo staleness/throttle wrap- and sentinel-safe (T4, T9)

claude
authored and
NomDeTom
committed
Stamp PSRAM throttle entry by captured index, not a rescan (T5)

claude
authored and
NomDeTom
committed
Document accepted per-target throttle tradeoffs (T1, T2)

claude
authored and
NomDeTom
committed
Track signed-provenance of cached NodeInfo public keys

claude
authored and
NomDeTom
committed
Draw public keys from the TMM NodeInfo cache as a last resort

claude
authored and
NomDeTom
committed
Retain keyed NodeInfo entries as a pubkey pool; trust-tier eviction

claude
authored and
NomDeTom
committed
Test signed-provenance flag and copyPublicKey key-pool source

claude
authored and
NomDeTom
committed
Inherit signer provenance from NodeDB when caching a re-found node

claude
authored and
NomDeTom
committed
Lock NodeInfoPayloadEntry packing with a size assert

claude
authored and
NomDeTom
committed
Pack NodeInfo cache booleans into 1-bit fields

claude
authored and
NomDeTom
committed
Gate NodeInfo replay on signer-proven provenance (compile-time, default on)

claude
authored and
NomDeTom
committed
Rehydrate re-admitted node names from the TMM NodeInfo cache

claude
authored and
NomDeTom
committed
Drop non-portable NodeInfoPayloadEntry size assert (fixes pico build)

claude
authored and
NomDeTom
committed
Run the NodeInfo cache paths in native tests (TMM_HAS_NODEINFO_CACHE)

claude
authored and
NomDeTom
committed
Pin NodeInfo cache keys against the warm tier, not just the hot store

claude
authored and
NomDeTom
committed
Convert NodeInfo cache clocks to uint8 tick counters

claude
authored and
NomDeTom
committed
Keep the NodeInfo cache a superset of NodeDB (seed + keep-alive)

claude
authored and
NomDeTom
committed
Write-through NodeDB identity commits into the NodeInfo cache

claude
authored and
NomDeTom
committed
Purge TrafficManagement caches on explicit node removal

claude
authored and
NomDeTom
committed
Document the tmm-fix-2 / tmm-fix-superset reconciliation decisions

claude
authored and
NomDeTom
committed
Reconcile retention: no timed eviction, obsTick LRU, hourly seeding

claude
authored and
NomDeTom
committed
Reconcile hooks: key-commit write-through, purgeAll, key-matched signer

claude
authored and
NomDeTom
committed
Merge the two branches' test suites for the reconciled design

claude
authored and
NomDeTom
committed
Adapt cherry-picked and seeding tests to the reconciled semantics

claude
authored and
NomDeTom
committed
trunk fml
NomDeTom
committed
Doc tidyup
NomDeTom
committed
TrafficManagement: key NodeInfo-cache maintenance to its own guard

NomDeTom
and
claude
committed
TrafficManagement: forward throttled NodeInfo requests instead of consuming them

NomDeTom
and
claude
committed
TrafficManagement: consolidate NodeInfo-cache #if sprawl into one region

NomDeTom
and
claude
committed
Router: resolve sender key only for PKI-decrypt candidates

NomDeTom
and
claude
committed
TrafficManagement: refresh NodeInfo membership hourly, not per-sweep

NomDeTom
and
claude
committed
NodeDB: centralize bare-key commits in commitRemoteKey()

NomDeTom
and
claude
committed
docs: tick wrap-safety analysis, updated cadences, CodeRabbit doc fixes

NomDeTom
and
claude
committed
TrafficManagement: adapt tests to forwarded throttles and hourly membership

NomDeTom
and
claude
committed
expand test coverage
NomDeTom
committed
nitpicks and docs update
NomDeTom
committed
more comment fixes
NomDeTom
committed
nitpicks
NomDeTom
committed
test: make TMM fixture cleanup abort-safe in tearDown()
NomDeTom
committed
test: correct native-suite-count to 37
NomDeTom
committed