Owns one persistent ``cmdop-core`` subprocess and the id-mux over it.

Forward-compat: a frame whose shape we do not model yet.

Minimal stand-in for cmdop.client.Client that SkillsResource needs.

An ``error`` outcome from ``machines.ask`` (machine_offline/timeout/internal).

Base class for every SDK error.

Async-iterable of :data:`AskFrame` with ``pin()`` / ``confirm()`` / ``collect()``. Iterating starts the streaming call (sends the REQUEST), t

``not_found`` — resource not visible / not found (404).

``rate_limit`` — too many requests (429).

A StreamWriter-like sink: bytes land on an asyncio.StreamReader the test 'core' reads, so the core sees exactly what the transport wrote.

``auth`` — invalid/expired/missing token (401).

Base for every resource wrapper. Owns the shared transport + fleet defaulting.

Async client backed by the baked-in ``cmdop-core`` Go binary.

Resolved, immutable per-client configuration.

``conflict`` — slug taken, already linked, last-owner, etc. (409).

``connection`` — transport failure (DNS, refused, reset) or the core process died.

A cursor-paginated list (`MachineList`, `ScheduleRunList`).

* A bounded push→pull async-iterator: bridges the demux's push of frames into a * `for await` consumer (the canonical "queueable" pattern, report 11

An offset-paginated list (`FleetList`/`MemberList`/`TunnelList`/...).

``permission`` — role/api-key restriction (403).

``pin_denied`` — the connection PIN was rejected (wrong PIN, lockout). Subclasses :class:`PermissionError` so existing ``except PermissionError``

``pin_required_timeout`` — no PIN supplied (or verified) within the gate window. Subclasses :class:`PermissionError`. Non-retryable.

``server`` — relay/agent internal error (5xx).