Shared .proto definitions and generated gRPC stubs for CryptOS-PKI.

Published as a standalone, versioned Go module. Consumed by cryptos and manager as a Go dependency; consumed by web via generated TypeScript stubs.

proto/cryptos/v1/    # .proto sources (the contract)
go/cryptos/v1/       # generated Go stubs (committed; no toolchain required to consume)
buf.yaml             # buf module + lint config (STANDARD)
buf.gen.yaml         # buf generation: protoc-gen-go + protoc-gen-go-grpc
Taskfile.yml         # fmt / lint / generate / test / ci targets

Phase 2 will add role-aware service splits, protocol-adapter management, and full machine-config schema. Phase 3 adds HA, fleet, extensions, and recovery RPCs.

go get github.com/CryptOS-PKI/api@latest

import cryptosv1 "github.com/CryptOS-PKI/api/go/cryptos/v1"

Generated TS stubs (for web/) ship in a follow-up release once Phase 2 frontend work begins.

Requires Go 1.24+, buf, protoc-gen-go, protoc-gen-go-grpc, and go-task.

go install google.golang.org/protobuf/cmd/protoc-gen-go@latest
go install google.golang.org/grpc/cmd/protoc-gen-go-grpc@latest

task ci          # fmt + lint + generate-and-verify + test
task generate    # regenerate Go stubs after a .proto change
task license     # re-inject Apache 2.0 headers via golic

The generated stubs under go/cryptos/v1/ are committed; CI fails if they drift from the protos.

Pre-alpha. The surface is unstable while Phase 1 lands. Tag-based semver kicks in once the v1 contract solidifies.

Apache License 2.0. Copyright 2026 Shane.