oosh v1.0.0 — Canonical Sovereign Shell Release

oosh v1.0.0 — The Sovereign Shell

Official canonical release of oosh (openOODA Sovereign Shell) featuring full 10/10 POSIX Bash parity, multi-channel distribution (Web, DNF, APT), capability-bounded security, 5 proactive threat defenses, headless Varlink IPC, and autonomous recovery.

Multi-Channel Quick Install

# Web Universal (Standalone Glibc Binary)
curl -fsSL https://openooda-tools.github.io/oosh/install.sh | bash

# DNF / RPM (Fedora, RHEL, CentOS)
curl -fsSL https://openooda-tools.github.io/oosh/install.sh | bash -s -- --dnf

# APT / DEB (Ubuntu, Debian)
curl -fsSL https://openooda-tools.github.io/oosh/install.sh | bash -s -- --apt

# Auto-Detect Package Manager
curl -fsSL https://openooda-tools.github.io/oosh/install.sh | bash -s -- --auto

Direct Package Download & Install

• DNF / RPM: sudo dnf install -y https://github.com/openOODA-tools/oosh/releases/download/v1.0.0/oosh-1.0.0-1.x86_64.rpm
• APT / DEB: curl -fsSL -O https://github.com/openOODA-tools/oosh/releases/download/v1.0.0/oosh_1.0.0-1_amd64.deb && sudo apt install -y ./oosh_1.0.0-1_amd64.deb

Core Highlights

• 10/10 POSIX Bash Parity: In-process group redirection { cmd1; cmd2; } > out, subshell environment retention, native job control (jobs, fg, bg, wait), unary tests (-e, -f, -d, -s), and quote-safe globbing.
• 5 Proactive Threat Defenses: OSC 52/CSI injection filtering, wildcard rm -* argument injection immunity, private SO_PEERCRED socket authentication, stack depth ceilings, and 16MB stream quotas.
• Multi-Channel Distribution: Standalone glibc binaries, native RPM packages, and native DEB packages.
• Headless Varlink IPC Control Plane: Non-blocking Unix domain socket RPC for autonomous sidecars and AI agents.
• Autonomous Recovery: Instant failure flight forensics via remedy and columnar autopsy flight recorder.