Add MLS Queue service

[jakzale]

Adds MLS Coordinator and Queue

In order to send messages client calls encryptGroupEventEpochSecret which matches that API of encryptGroupEvent.

In order to receive messages, the Coordinator has to be hooked via an adapter. The adapter will come in a separate PR.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

1 Skipped Deployment

Name	Status	Preview	Comments	Updated (UTC)
river-sample-app	⬜️ Ignored (Inspect)	Visit Preview		Jan 13, 2025 6:11pm

[erikolsson]

I would consider changing this pattern here:

river/packages/sdk/src/mls/group/groupService.ts

Lines 198 to 201 in ba2d0a4

	if (this.groupCache.has(streamId)) {
	this.log.error(`externalJoinMessage: Group already exists for ${streamId}`)
	throw new Error(`Group already exists for ${streamId}`)
	}

where the caller gets an external join message, but it also writes the group state to cache making it impossible to create a new external join message. we should be able to track the pending state in a better way

[erikolsson]

overall i think it maps pretty well with the direction we've talked about. but i'm sure we'll find some things we want to change down the road anyway.
some things we'll need to take into account:

• sync resets (clean queue, decide what to do next)
• (?) make sure we don't advance groups too far (3 epochs?) until we're dead certain that the epoch list is closed in the node