Bowman

Bowman is an independent local URI trust boundary for Python applications. It provides signed and expiring envelopes, authentication strength, provenance, capabilities, validity, replay protection, revocation, delegation, tracing, redaction, rate limiting, idempotency, OAuth primitives, and native OS privilege elevation.

Bowman contains no District Terminal storage or session-management logic.

Directory contents

Files

• __init__.py — Bowman public interface.
• audit.py — Tamper-evident hash-chained audit records.
• context.py — Immutable trusted request context.
• delegation.py — Capability delegation for local agents and applications.
• elevation.py — Explicit OS-native privilege elevation.
• elevation_uri.py — Signed one-use elevation URIs backed by native OS authentication.
• envelope.py — Signed request/response protocol envelopes.
• errors.py — Bowman exceptions.
• helper.py — One-time signed grants for a minimal privileged helper.
• identity.py — Caller provenance and executable authorization.
• json_types.py — Strict JSON-compatible value types used across Bowman.
• keys.py — Local signing key ring and rotation.
• link.py — Present one signed Bowman request as a native URI, URL, or QR value.
• models.py — Core immutable Bowman models.
• oauth.py — OAuth 2.x and OpenID Connect local-client primitives.
• protection.py — Rate limiting, idempotency, and redaction helpers.
• pyproject.toml — Provide pyproject toml content.
• revocation.py — Generic revocation registry.
• secrets.py — Secret storage and refresh-token vault.
• security.py — Security policies, OAuth bearer validation, and signed local sessions.
• shortener.py — Short-code URI shortening and resolution.
• tmux.py — Typed tmux status-line configuration, format DSL, and CLI renderer.
• trace.py — Structured trace spans.
• trust.py — Trust, authentication strength, and caller provenance.
• uri.py — Signed, expiring, optionally one-use local URI envelopes.
• validity.py — Validity windows and policy-driven evaluation.

Subdirectories

No subdirectories.