Milestone 1.1.2: Auth Protobuf and Codegen

Status: Complete
Goal: 1.1 Persistence and auth data plane

Summary

Add ibex.auth.v1 protobuf definitions for token validation (and future auth RPCs), register in Buf module, document local buf generate for Go stubs without committing gen/.

Branch

chore/m1-1-2-auth-proto-codegen (merged)

PR title (example)

chore(proto): auth protobuf and codegen (m1.1.2)

Estimated effort

2 days

Prerequisites

• 1.1.1 merged (schema exists for later implementation)

Tasks

• ADR-0006: auth proto package layout, RPC naming, error model
• Create packages/proto/proto/ibex/auth/v1/auth.proto with AuthService:
  • ValidateToken(ValidateTokenRequest) returns (ValidateTokenResponse)
  • Messages: token string, org_id, agent_id optional, permission bitmap, expiry
  • go_package option aligned with ADR-0004
• Update packages/proto/buf.yaml / lint if needed for new package
• Update packages/proto/buf.gen.yaml for Go output path under packages/proto/gen/go/...
• Document local generation in packages/proto/README.md
• CI: buf lint includes auth package; breaking check against main baseline
• Add .gitignore confirmation for gen/ (already policy)
• Optional: make proto-gen target (local only) in dev-tool.sh
• Contract tests: make proto-test, make proto-test-integration; CI proto-contract job

Files affected

Testing requirements

• buf lint pass
• buf breaking pass against main (after first merge, baseline exists)
• No generated files committed
• make proto-test and make proto-test-integration pass

Documentation updates

• ADR-0006
• packages/proto/README.md
• roadmap CURRENT_STATE after merge

Definition of done

• Auth proto reviewed against ARCHITECTURE.md auth validation pipeline
• Buf CI green
• Local buf generate produces importable Go stubs for auth service work
• No service implementation in this PR
• Contract unit and integration tests in CI

Risks

Merge

Squash merge PR #13 → main at 343e8c3.