oosh v1.0.1

Changes in v1.0.1

• Standardized organization AGENTS.md rules and capability-bounded security
• Bundled companion uninstaller (oosh-uninstall) across Debian, RPM, Arch, and standalone installers
• Full oote theme integration with negative-trust color tokens
• Verified 100% against Page Rule and Academy standards

oosh v1.0.0 — Canonical Sovereign Shell Release

oosh v1.0.0 — The Sovereign Shell

Official canonical release of oosh (openOODA Sovereign Shell) featuring full 10/10 POSIX Bash parity, multi-channel distribution (Web, DNF, APT), capability-bounded security, 5 proactive threat defenses, headless Varlink IPC, and autonomous recovery.

Multi-Channel Quick Install

# Web Universal (Standalone Glibc Binary)
curl -fsSL https://openooda-tools.github.io/oosh/install.sh | bash

# DNF / RPM (Fedora, RHEL, CentOS)
curl -fsSL https://openooda-tools.github.io/oosh/install.sh | bash -s -- --dnf

# APT / DEB (Ubuntu, Debian)
curl -fsSL https://openooda-tools.github.io/oosh/install.sh | bash -s -- --apt

# Auto-Detect Package Manager
curl -fsSL https://openooda-tools.github.io/oosh/install.sh | bash -s -- --auto

Direct Package Download & Install

• DNF / RPM: sudo dnf install -y https://github.com/openOODA-tools/oosh/releases/download/v1.0.0/oosh-1.0.0-1.x86_64.rpm
• APT / DEB: curl -fsSL -O https://github.com/openOODA-tools/oosh/releases/download/v1.0.0/oosh_1.0.0-1_amd64.deb && sudo apt install -y ./oosh_1.0.0-1_amd64.deb

Core Highlights

• 10/10 POSIX Bash Parity: In-process group redirection { cmd1; cmd2; } > out, subshell environment retention, native job control (jobs, fg, bg, wait), unary tests (-e, -f, -d, -s), and quote-safe globbing.
• 5 Proactive Threat Defenses: OSC 52/CSI injection filtering, wildcard rm -* argument injection immunity, private SO_PEERCRED socket authentication, stack depth ceilings, and 16MB stream quotas.
• Multi-Channel Distribution: Standalone glibc binaries, native RPM packages, and native DEB packages.
• Headless Varlink IPC Control Plane: Non-blocking Unix domain socket RPC for autonomous sidecars and AI agents.
• Autonomous Recovery: Instant failure flight forensics via remedy and columnar autopsy flight recorder.

v0.9.0 — Sovereign Superpowers

openOODA Sovereign Shell v0.9.0 - Sovereign Superpowers Release

Phase 3 Sovereign Superpowers and advanced terminal ergonomics with 100% green CI/CD:

1. Two-Line Cockpit & Grounded Prompt (❯):
   • Row 1: subtle ambient statusline with tilde-abbreviated cwd, git branch (direct .git/HEAD reader), host identity, and active capability tokens (CAPS: PROC+FS+NET).
   • Row 2: grounded prompt symbol (❯ / >) with clear visual demarcation.
   • Honors $PS1 environment overrides.
2. Real-Time TrueColor Syntax Accenting:
   • Zero-drift live syntax colorization in raw mode: cyan for builtins, toxic green for system binaries, electric amber for flags/strings, ultraviolet for intent queries.
3. Inline Dimmed Ghost Suggestions & Auto-Remedy Previews:
   • Single-match tab completions appear as dimmed ghost text ahead of cursor (Tab / Right Arrow to accept).
   • Non-zero exits render actionable recovery previews ([Auto-Remedy: | Tab to accept]).
4. Native Compiled C epoll Varlink Daemon:
   • High-throughput non-blocking AF_UNIX epoll daemon over /run/oosh/control.sock with multithreaded worker dispatch.
5. Expanded Autopsy Flight Telemetry:
   • Captured execution latency, PID, peak memory usage (RSS from /proc/self/statm), and causal execution links.
6. openOODA House Laws Compliance:
   • 100% adherence to Page Rule (16–256 lines per file), directory density (<= 8 files), and Academy 4-element docstrings.
   • All smoke tests and 180 E2E tests (Tiers 1–5) verified 100% green.

v0.8.0 - Bash Parity Remediation, Control Flow & Robust Compound Lexing

openOODA Sovereign Shell (oosh) v0.8.0

Core Technical Remediation & Bash Parity Improvements:

1. Scripting & Control Flow:
   • Added full POSIX positional parameter handling for scripts ($0, $#, $@, $*, $1..$N).
   • Sourced scripts now run without premature abort on exit code != 0, matching standard shell semantics.
   • Sourced ~/.ooshrc maintains full persistent session and environment state across REPL iterations.
   • Native support for for loops, while loops, if/else conditionals, case ... in ... esac branching, subshells (...), and function declarations with argument passing.
2. Lexing, Parsing & Expansion:
   • Block-aware, comment-aware, and quote-aware compound splitters for ;, \n, &&, and || without premature splitting inside loop/conditional headers, blocks, comments, or shebang lines.
   • Resolved apostrophe expansion bug (\') so variables following escaped apostrophes expand correctly.
   • Subshell command substitution $() with nested quote and parenthesis depth tracking.
3. Pipelines & Redirection:
   • Builtin pipelines and redirections wired natively via anonymous kernel streams and direct file capabilities, completely eliminating insecure world-readable /tmp files.
   • Prefix commands like rune correctly route pipelines without swallowing subsequent tokens.
   • External pipes and stderr-to-stdout redirects (2>&1) handled cleanly with full exit code propagation.
4. Interactive UX & Line Editing:
   • Multi-match tab completion with Longest Common Prefix (LCP) and directory path completion for slash-prefixed tokens.
   • Terminal redraw uses ANSI screen erase (\x1b[J) to prevent visual wrap artifacts across lines.
5. Quality Assurance & Verification:
   • 100% adherence to openOODA House Laws: Page Rule 16-256 lines per file, <= 8 files per directory, and Academy 4-element docstrings.
   • All smoke tests and E2E Tiers 1-5 (180 automated tests) passed.

oosh v0.7.0 — Bash Parity, Control Flow, Secure Pipes & Job Control

oosh v0.7.0 Release Notes

Highlights & Bash Parity Scorecard Elevation

• Scripting & Control Flow: Native loops (for and while with keyword-delimited parsing), conditionals (if/then/else), subshells (...), functions (func() { ... }), and positional script arguments ($1..$N, $#, $@).
• Lexing, Parsing & Expansion: Quote-aware redirection and pipeline splitting (find_unquoted_redirect, find_unquoted_pipe), full command substitution $(...), globbing *, parameter expansion $VAR and ${VAR}, and bare variable assignment (x=0).
• Pipelines & Redirection: Anonymous pipe2 IPC without insecure world-writable /tmp disk pipes; builtins (whereami, caps, autopsy) route safely into pipelines and file redirections.
• Interactive UX & Line Editing: VT100 raw mode, multi-match tab completion, reverse history search (Ctrl+R), and persistent history (~/.oosh_history).
• Job Control & Process Management: Detached process group backgrounding (cmd &), job table management (jobs, fg, bg), and asynchronous exit notifications.
• Async Varlink Epoll Daemon: Non-blocking IPC listener with dedicated pthread worker substrate.

All 180 tests across E2E Tiers 1-5 pass with 100% verification.

oosh v0.6.1 — Compound Chaining, Parameter Expansion & Signal Resilience

oosh v0.6.1 — Compound Chaining, Parameter Expansion & Signal Resilience

oosh v0.6.1 completes full POSIX Bash parity on openOODA sovereign infrastructure, fixing critical issues identified during rigorous QA and security review.

Key Enhancements & Fixes

• Compound Chaining: Added quote-aware recursive dispatch for POSIX operators (&&, ||, ;), allowing chains like export HELLO=world && echo $HELLO and alias ll="ls -la" && ll to persist session state across segments.
• Parameter Expansion: Full in-line expansion for variables ($VAR, ${VAR}, $?) before alias substitution and command dispatch.
• Runtime Environment Isolation: Resolved environment lookup in oodar (fs/os/sys_env.c) by dynamically querying the environment heap without stack buffers or canary violations, restoring standard access to HOME, USER, HOSTNAME, and PS1.
• Interactive TUI Flushing: Added explicit flushing to standard output in oodar (app/io/print.c) to guarantee immediate terminal responsiveness.
• Signal Resilience: Integrated OS-level SIGINT handling during interactive terminal mode, ensuring the shell survives interrupts while properly passing terminal control and interrupt signals to foreground children.
• Unquoted Exports: Fixed environment export formatting to strip bounding quotes and correctly propagate environment variables to child processes.

Verification & Compliance

• Page Rule (16–256 lines): 100% compliant across all 33 .oo and .oot source files.
• Directory Density: <= 8 .oo files per directory across all modules.
• Academy Headers: Strict 4-element header (Title, Logline, Setup, Beats) verified on every file.
• Compiler Pass: 100% clean oodac check across entire codebase.
• Comprehensive QA: All 23 smoke tests and all 180 E2E tests across Tiers 1–5 pass cleanly (make test test-e2e).

oosh v0.6.0 — Pure POSIX Bash Ergonomics on openOODA

oosh v0.6.0 — Pure POSIX Bash Ergonomics on openOODA

oosh v0.6.0 achieves full interactive POSIX Bash ergonomics on openOODA sovereign infrastructure while maintaining strict capability isolation.

Highlights

• POSIX Bash Ergonomics: Standard user@hostname:dir$ (or # for root) prompt with robust tilde contraction (~) and support for custom $PS1 environment overrides.
• Silent Normal Startup: Clean startup without promotional greeting boxes or runes (ᚱ, ᛏ, ᚺ, ᛈ, ᛉ); banner displayed strictly on -v/--version or version.
• Unintercepted Host Binaries: Direct execution of standard system tools (whoami, stat, ping, ls, etc.) without conversational interception.
• Modular VT100 Line Editor (term/): Modular architecture under term/ (raw.oo, read.oo, line.oo, history.oo, anchor.oo) providing ANSI cursor navigation, persistent command history (~/.oosh_history), and standard POSIX shortcuts (Ctrl+A, Ctrl+E, Ctrl+U, Ctrl+D, Ctrl+C).
• Direct Process Spawning & Unbuffered I/O: sys_exec_wait stdio inheritance for interactive TUIs (vim, nano, htop, ssh) and streaming commands (ping, tail -f).
• Signal Handling & Process Groups: Raw mode disabling before child execution and prompt reprint on Ctrl+C without killing the shell.
• Session State Persistence: Full support for native export, unset, alias, unalias, and automatic sourcing of ~/.ooshrc.
• Compound Pipelines & Redirection: Native support for tokenized pipes (|) and file redirections (>, >>) across builtins and host binaries.
• Script & Shebang Execution: Positional script execution (oosh script.oosh [args...]) with shebang support.
• Clean Columnar Autopsy & Typo Remedy: Diagnostic flight recording with clean columnar postmortem (last/dmesg style) and helpful command suggestions on exit code 127 (sl -> ls).

Verification & Compliance

• Page Rule (16-256 lines): Verified across all source files and test specs (make line-cap).
• File Law: 0 forbidden files (make file-law).
• Academy Headers: All 4 elements (Title, Logline, Setup, Beats) verified in first 7 lines (make academy).
• Compiler Pass: 100% clean oodac check across entire codebase.
• Test Matrix: All 23 smoke tests and all 180 E2E tests across Tiers 1-5 passed cleanly (make test test-e2e).

oosh v0.5.0 — Core Shell, Bash Parity & Cyberpunk Line Editor

oosh v0.5.0: Core Shell Infrastructure, Bash Parity & Cyberpunk Line Editor

A major milestone release elevating oosh (openOODA Sovereign Shell) to full interactive parity with standard POSIX shells while delivering ambient, capability-bounded superpowers.

1. Core Shell Fixes & Terminal Ergonomics

• Raw Mode VT100 Line Editor: Built on C termios intrinsics (oo_tui_enable_raw), supporting full arrow key cursor navigation, Backspace, Delete, Home/End, Ctrl+U, Ctrl+D, and non-terminating Ctrl+C line abort.
• Iconic Cyberpunk Prompt: High-contrast Amber rune (ᚱ), Neon Cyan working directory path, and glowing status arrow delimiter (❯), providing a tactile, grounding prompt boundary (electric green on nominal status, neon red on failure).
• Direct Child Process Execution: Routes external processes through sys_exec_wait, passing standard terminal handles directly to allow full-screen interactive TUIs (vim, nano, htop, ssh) and streaming commands (tail -f, ping) without in-memory buffering.
• Process Group Isolation & Signal Safety: Uses POSIX_SPAWN_SETSIGDEF to restore default signal behaviors for child processes (SIGINT, SIGQUIT, SIGTSTP).
• Native Filesystem Syscalls: Replaces unquoted shell string concatenation in cd and take with native C FFI syscalls (chdir, recursive mkdir), and reads .git/HEAD directly without subshell overhead.

2. Bash Parity & Composition

• Pipelines & Redirection Plumbing: Native support for tokenized pipes (|) and file redirections (>, >>) wired directly into builtins (caps | grep PROC, autopsy > trace.log, help >> notes.txt).
• In-Memory Session Environment & Dynamic Aliases: Dedicated alias table (alias, unalias) and environment manipulation (export, unset), with automatic startup sourcing of ~/.ooshrc.
• Script & Shebang Execution: Supports positional batch script arguments (oosh script.oosh [args...]) with native shebang execution (#!/usr/local/bin/oosh).
• Intelligent Tab Completion: Autocompletes builtins and $PATH executables on token 0, and relative filesystem paths on subsequent tokens.
• Persistent History: Command line history saved cleanly to ~/.oosh_history.

3. Sovereign Superpowers & Telemetry

• Native Varlink epoll Daemon: High-throughput non-blocking Unix domain socket service (/run/oosh/control.sock or fallback /tmp/oosh-control.sock).
• Expanded Flight Telemetry: Flight records in autopsy now track process IDs (/proc/self/status) and peak resident memory.
• Real-Time TrueColor Syntax Accenting: Live syntax highlighting as you type in raw mode.

4. Verification & Testing

• 180/180 E2E Tests: 100% pass across all 5 tiers (pure runtime execution assertions, zero spec-grepping).
• openOODA House Laws: 100% compliant with Page Rule (16–256 lines per file), maximum 8 files per directory, and mandatory 4-element Academy docstrings.

Quick Install

curl -fsSL https://openooda-tools.github.io/oosh/install.sh | bash

oosh v0.4.1 — Ambient Cockpit, Remedy, Intent & Varlink IPC

oosh v0.4.1: Sovereign Ambient Cockpit, Remedy Diagnostics, Intent Synthesis & Headless Varlink IPC

The production release of oosh (openOODA Sovereign Shell) featuring a cyberpunk visual ambient cockpit, active failure recovery, natural language intent synthesis, and headless Varlink IPC for autonomous agents.

1. Cyberpunk Terminal UI & Ambient Visual Plane

• TrueColor Cyber Palette: 24-bit ANSI palette featuring neon cyan (#00FFFF), electric amber (#FFAA00), ultraviolet (#AA00FF), toxic green (#00FF66), and drop-shadow gradient blocks (░▒▓).
• Live Ambient Dock: Displays real-time context badges for sovereign user identity, active git branch ( main), capability tokens (◈ CAPS:BIND|PROC|ENV|FS_W|FS_R|TIME), and execution posture (✔ POSTURE:NOMINAL / ✘ POSTURE:FAULT).
• Post-Execution Telemetry: Badges indicate command duration in milliseconds (⏱ 3ms), exit code status (✔ 0 / ✘ 1), and peak memory usage.
• Double-Lined Visual Cards: Heavy rune card framing (╔═╗, ║, ╚═╝) for built-in inspection commands (status, caps, scry, autopsy, help).

2. Active Failure Diagnostics & Recovery Engine (remedy)

• Session Flight Envelopes: Automatically captures faulted command lines, exit codes, working directories, and captured stderr.
• Targeted Heuristics: remedy and fix analyze command-not-found, permission denied, missing paths, syntax errors, and git conflicts, proposing instant fix commands.
• Blackbox Flight Recorder: autopsy and bb inspect multi-step session postmortems and execution history.

3. Intent Synthesis Engine (? <query>)

• Natural Language Translation: Intercepts queries prefixed with ?, ??, ai, ask, do, how, why, or please and synthesizes context-aware POSIX commands.
• Three-Tier Safety Classifier: Ranks commands into SAFE: READ-ONLY, MODERATE: MODIFIES FS, and HIGH_RISK: REMOVES STATE.
• Interactive Execution & Safety Gates: High-risk operations (e.g. destructive removals) require explicit typed YES confirmation.

4. Headless Varlink IPC Control Plane

• NUL-Delimited JSON RPC: Fully compliant with the Varlink protocol over unix socket /run/oosh/control.sock or one-shot --varlink-call.
• Methods: Implements org.openooda.oosh.Control1 (Ping, QueryPosture, ExecuteCommand, StreamTelemetry, GetLastFailure, SynthesizeIntent) and standard introspection org.varlink.service.GetInfo / GetInterfaceDescription.
• Threaded Concurrency & Signal Safety: Non-blocking client handling and clean socket unlinking on shutdown.

5. Verification & openOODA House Laws

• 180/180 Automated E2E Tests: 100% pass across Tiers 1–5 (Feature Coverage, Boundaries, Cross-Feature Combinations, Scenarios, and Adversarial Edge Cases).
• Strict House Laws: 100% compliant with Page Rule (16–256 lines per file), maximum 8 files per module directory, and mandatory Academy docstring headers.

Quick Install

curl -fsSL https://openooda-tools.github.io/oosh/install.sh | bash

oosh v0.4.0 — Cyberpunk Terminal UI & Ambient Magic

oosh v0.4.0: Cyberpunk Terminal UI, Remedy Diagnostics, Intent Synthesis & Varlink IPC

A massive leap forward in interactive shell design and agentic computing.

1. Cyberpunk Terminal UI & Ambient Dock

• ANSI TrueColor Palette: 24-bit TrueColor cyber theme (neon cyan, electric amber, ultraviolet, toxic green, and shaded drop blocks ░▒▓).
• Live Ambient Status Dock: Displays real-time context badges for sovereign user identity, active git branch ( main), openOODA capability tokens (◈ CAPS:PROC|ENV|FS|TIME), and execution posture (✔ POSTURE:NOMINAL or ✘ POSTURE:ERR(1)).
• Post-Execution Telemetry Badges: After every command executes, renders duration in milliseconds (⏱ 3ms), exit code status (✔ 0 / ✘ 1), and peak memory usage.
• Double-Lined Visual Cards: Rich styled frames (╔═╗, ║, ╚═╝) for builtins: status, caps, scry, autopsy, help.

2. Active Failure Recovery Engine (remedy)

• Automatically records the faulted command line, exit code, and captured stderr/stdout into a session flight envelope.
• Typing remedy or fix produces instant root-cause analysis, actionable recovery steps, and auto-repair proposals.

3. Intent Synthesis Engine (? <query>)

• Translates natural language queries (?, ??, ai, ask, do, how, why, please) into executable POSIX commands.
• Evaluates safety tiers ([SAFE: READ-ONLY], [MODERATE: MODIFIES FS], [HIGH_RISK: REMOVES STATE]) with preview and execution directives.

4. Headless Varlink IPC Control Plane

• Native nul-delimited (\0) JSON Varlink IPC interface over /run/oosh/control.sock or single-shot --varlink-call.
• Methods: Ping, GetStatus, GetTelemetry, Remedy, GetAutopsy, Execute, and org.varlink.service.GetInfo.

5. Verification & Testing

• 160/160 automated E2E tests passing across Tiers 1–4.
• 100% Page Rule (16–256 lines) and Academy docstring compliance across all modules (ui/, flight/, intent/, ipc/).