Tracking: Group Chat - Prod (Mobile/LibXMTP)

[nplasterer]

LIBXMTP

MUST

• Push Notifications (SMALL) Push notifications handling guide #527 - @nplasterer
• Enforce 250 limit (SMALL) Enforce group size limit #503 - @alexrisch
• Expose Message Kind (SMALL) Expose message kind to platform SDKS so they can spot fake GroupMembershipChanged messages #522 - @nplasterer
• Who added me in a group (SMALL) Store "who added me" on the group #501 - @zombieobject
• Message send state (SMALL) Message send state #516 @nplasterer
• Mutable Metadata (MEDIUM) Mutable Metadata (name a group) #548 - @cameronvoell
• Future Group Migrations #651 - @nplasterer
• Bug: Crashes when DB is shared with notification extension #732 - @nplasterer
• Identity work - @nplasterer
• Private Preference inbox id #752 - @nplasterer
• Migration and Rollout Strategy #650
• Bug: Allow Group Name to be undefined #816 - @nplasterer
• Bug: After a metadata update fails as expected for insufficient permissions, subsequent valid updates also fail for that client #805 - @cameronvoell
• Mutable admin permissions  #664 - @cameronvoell
• How high can we grow the size of group chat limit.  #701 - @insipx
• Storage interface upgrades #714 - @tuddman

SHOULD

• Message History (LARGE) Tracking: Message History #619 - @tuddman *
• Notify of new group via streamGroups() for groups created by self #504
• Message failed state #671
• Botkit Groups botkit#18 - @rygine
• Leave (self removal) (MEDIUM) Self-removal/muting support MVP #441
• Is Sender HMAC Verification (MEDIUM) Support for is_sender verification for push notifications via HMAC #422 *
• Streaming Reliability

• Becomes a must if multi clients launch

SECURITY

MUST

• Key rotation after welcome (SMALL) When joining a group from a welcome, members should update their keys before sending the first message #347 - @lfzkoala
• Block resumption PSK from being used #678 - @nplasterer

SHOULD

• Key Package updates - Last resort key packages + key package expiry #366 Delete expired KeyPackage, rotate KeyPackages #541
  • Credential Validation (blocked on identity work)
  • Matching MLS spec https://www.rfc-editor.org/rfc/rfc9420.html#name-credential-validation
  • Matching identity doc
  • Not allowing credential updates/changes
• Security Audit

BACKEND

• Datadog Metrics
• Dune Dashboards
• Released on Production Network

DOCS

• Push Notifications Docs
• SDK Integration Docs
• Technical Docs
  • Identity Docs

[nplasterer]

Production Ready Checklist

• Can make a change to mutable metadata without needing a database wipe (or with a clear migration path setup to do so) group image url
• Update MLS storage to be TLS serialization instead of json Storage interface upgrades #714
• Validate Performance
• Thorough testing of features (inbox mobile being used to find bugs)