Wire keychain status to local keychain ops

crates/geth-control/Cargo.toml

@@ -10,6 +10,7 @@ serde.workspace = true
 serde_json.workspace = true
 thiserror.workspace = true
 geth-auth = { path = "../geth-auth" }
+geth-keychain = { path = "../geth-keychain" }
 geth-resource = { path = "../geth-resource" }
 geth-ssh-identity = { path = "../geth-ssh-identity" }
 geth-types = { path = "../geth-types" }

crates/geth-control/src/lib.rs

@@ -1,4 +1,5 @@
 use geth_auth::{AuthExplanation, AuthOp};
+use geth_keychain::KeychainOp;
 use geth_resource::ResourceDescriptor;
 use geth_ssh_identity::{
     SshCertApproval, SshCertRequest, SshCertificateRecord, SshRevocationEntry,
@@ -31,6 +32,9 @@ pub enum ControlRequest {
         hash: BlobHash,
     },
     CasList,
+    KeychainInit {
+        admin_key_path: Option<PathBuf>,
+    },
     KeychainStatus,
     AuthExplain {
         subject: String,
@@ -114,6 +118,9 @@ pub enum ControlResponse {
         blobs: Vec<CasBlob>,
     },
     KeychainStatus(KeychainStatusResponse),
+    KeychainInitialized {
+        ops: Vec<KeychainOp>,
+    },
     AuthExplain(AuthExplanation),
     AuthOpRecorded {
         op: AuthOp,