From 168290040cef867614afdb8a8c3a255489a87bf2 Mon Sep 17 00:00:00 2001
From: hdbg <httpdebugger@protonmail.com>
Date: Wed, 11 Mar 2026 15:09:57 +0100
Subject: [PATCH] feat(server::client): approval flow through user-agent on
 first-time client connects

---
 protobufs/user_agent.proto | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/protobufs/user_agent.proto b/protobufs/user_agent.proto
index 9120776..a1370b7 100644
--- a/protobufs/user_agent.proto
+++ b/protobufs/user_agent.proto
@@ -48,6 +48,16 @@ enum VaultState {
   VAULT_STATE_ERROR = 4;
 }
 
+message ClientConnectionRequest {
+  bytes pubkey = 1;
+}
+
+message ClientConnectionResponse {
+  bool approved = 1;
+}
+
+message ClientConnectionCancel {}
+
 message UserAgentRequest {
   oneof payload {
     AuthChallengeRequest auth_challenge_request = 1;
@@ -55,6 +65,7 @@ message UserAgentRequest {
     UnsealStart unseal_start = 3;
     UnsealEncryptedKey unseal_encrypted_key = 4;
     google.protobuf.Empty query_vault_state = 5;
+    ClientConnectionResponse client_connection_response = 11;
   }
 }
 message UserAgentResponse {
@@ -64,5 +75,7 @@ message UserAgentResponse {
     UnsealStartResponse unseal_start_response = 3;
     UnsealResult unseal_result = 4;
     VaultState vault_state = 5;
+    ClientConnectionRequest client_connection_request = 11;
+    ClientConnectionCancel client_connection_cancel = 12;
   }
 }