Wire auth explain to local auth ops

crates/geth-control/src/lib.rs

@@ -1,4 +1,4 @@
-use geth_auth::AuthExplanation;
+use geth_auth::{AuthExplanation, AuthOp};
 use geth_resource::ResourceDescriptor;
 use geth_ssh_identity::{
     SshCertApproval, SshCertRequest, SshCertificateRecord, SshRevocationEntry,
@@ -37,6 +37,16 @@ pub enum ControlRequest {
         resource: String,
         capability: String,
     },
+    AuthGrant {
+        subject: String,
+        resource: String,
+        capability: String,
+        grant_id: Option<String>,
+    },
+    AuthRevoke {
+        resource: String,
+        grant_id: String,
+    },
     SshCertRequest {
         public_key_path: PathBuf,
         cert_kind: String,
@@ -105,6 +115,9 @@ pub enum ControlResponse {
     },
     KeychainStatus(KeychainStatusResponse),
     AuthExplain(AuthExplanation),
+    AuthOpRecorded {
+        op: AuthOp,
+    },
     SshCertRequested {
         request: SshCertRequest,
     },