Skip to main content

​
Protobuf Schemas

The quint-proto repository contains the authoritative Protobuf schema definitions shared across all Quint components. All schemas are versioned under quint/v1/ and managed with Buf.

​
Schema Files

common.proto

Shared types: JSON-RPC wrappers, enums (Action, Verdict, Direction, DataClassification, MCPTransport)

auth.proto

Authentication: Passkey/WebAuthn, API keys, sessions

policy.proto

Policy configuration: server policies, tool rules, scoring policies

proxy.proto

Proxy interception: intercepted messages, policy decisions, audit queries

audit.proto

Signed audit logs: Ed25519 signatures, chain-linked entries, export bundles

risk_evaluation.proto

Risk scoring: action context, score decomposition, risk assessment, gRPC service

​
Consumers

ComponentLanguageImport
quint-proxyGogen/go/quint/v1
quint-cliTypeScriptgen/ts
quint-infraPythongRPC stubs from risk_evaluation.proto

​
Build

# Generate Go + TypeScript code
make generate

# Lint against STANDARD rules
make lint

# Clean generated code
make clean

​
buf.gen.yaml

version: v2
plugins:
  - remote: buf.build/protocolbuffers/go
    out: gen/go
    opt: paths=source_relative
  - remote: buf.build/bufbuild/es
    out: gen/ts

​
Versioning

All schemas are under quint/v1/. Breaking changes require a new version (quint/v2/). The buf breaking check enforces FILE-level breaking change detection.

​
Design Principles

  1. Canonical action format: domain:scope:verb (e.g., mcp:github:pr.create)
  2. Backward compatibility: Legacy flat fields coexist with new canonical nested context
  3. Dual auth: Passkey/WebAuthn for interactive, API keys (qk_ prefix) for headless
  4. Signed audit trail: Ed25519 per-entry signatures with SHA-256 chain linking
  5. 4-layer scoring: Intrinsic, GNN, policy, temporal — all expressed in ScoreDecomposition