Module control 

The one-shot WS control client used by the CLI verbs (DESIGN.md §13).

Unlike the bridge’s persistent, reconnecting link (crate::bridge), each CLI control/admin verb is a single request/response: connect → challenge-response auth (or register) → send one control frame → read the reply → disconnect. The server authorizes admin ops by role, so a non-admin op comes back as a ProtocolMessage::Error here.

Functions

one_shot

Authenticates with the local key on url and performs one request/response control exchange.

register

Claims a username + enrolls this machine on url, returning the resolved session path.