Record SSH-signed keychain init ops

crates/geth-control/src/lib.rs

@@ -3,7 +3,7 @@ use geth_cas::{FileConflict, FileRoot, FileRootScan};
 use geth_db::{CrSqliteChangeBatch, DbResource};
 use geth_discovery::{DiscoveredPeer, PeerCard};
 use geth_document::{DocumentResource, DocumentState};
-use geth_keychain::KeychainOp;
+use geth_keychain::{KeychainOp, KeychainOpSignature};
 use geth_kv::{KvEntry, KvResource, KvSyncEntry};
 use geth_pipe::{PipeConnection, PipeListener};
 use geth_pubsub::PubsubMessage;
@@ -99,6 +99,7 @@ pub enum ControlRequest {
     },
     KeychainInit {
         admin_key_path: Option<PathBuf>,
+        signing_key_path: Option<PathBuf>,
     },
     KeychainStatus,
     SecretStatus,
@@ -369,6 +370,7 @@ pub enum ControlResponse {
     KeychainStatus(KeychainStatusResponse),
     KeychainInitialized {
         ops: Vec<KeychainOp>,
+        signatures: Vec<KeychainOpSignature>,
     },
     SecretStatus {
         secrets: Vec<ResourceMasterSecret>,
@@ -911,6 +913,15 @@ mod tests {
 
     #[test]
     fn control_request_response_serialization_roundtrip() {
+        let request = ControlRequest::KeychainInit {
+            admin_key_path: Some(PathBuf::from("admin.pub")),
+            signing_key_path: Some(PathBuf::from("admin")),
+        };
+        assert_eq!(
+            decode_request(&encode_request(&request).expect("encode")).expect("decode"),
+            request
+        );
+
         let request = ControlRequest::CasHas {
             hash: "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef".into(),
         };