everything-gemini 2.2.0 → 2.7.0

package/docs/LAUNCH_KIT_PHP2SHELL.md

@@ -0,0 +1,240 @@
+# 📢 PHP2Shell Security Advisory & Social Media Launch Kit
+
+> **Campaign Theme**: Immediate, non-intrusive defensive auditing for PHP2Shell (CVE-2026-109618 & CVE-2026-109619).  
+> **Target Audience**: Sysadmins, DevOps engineers, SecOps/InfoSec teams, CTOs, and PHP developers worldwide.  
+> **Key Utility**: Zero-install 10-second inspection command via `npx everything-gemini phpcheck <url|--server>`.
+
+---
+
+## 🎯 Executive Summary for Posts
+
+On October 21, 2026, the PHP core security team disclosed two critical security vulnerabilities dubbed **PHP2Shell**:
+- **CVE-2026-109618**: Remote memory corruption and execution vulnerability in stream handling and buffer boundaries.
+- **CVE-2026-109619**: Out-of-bounds read and memory disclosure enabling authorization bypass or remote execution.
+- **Severity**: CVSS 9.2 (Critical Remote Code Execution / Memory Disclosure).
+- **Fixed Upstream Releases**: `8.2.35`, `8.3.36`, `8.4.27`, `8.5.12`.
+- **Inherently Vulnerable EOL Branches**: `5.4`–`5.6`, `7.0`–`7.4`, `8.0`, `8.1` (unless patched with Linux vendor enterprise backports).
+- **The #1 Real-World Risk**: Admins run `apt upgrade` or `dnf update`, updating the binary on disk, but running `php-fpm` or Apache worker processes **continue executing unpatched vulnerable code from RAM** until explicitly restarted.
+
+---
+
+## 🐦 Platform 1: X (Twitter) Viral Thread
+
+### Tweet 1 (The Hook)
+🚨 **CRITICAL SECURITY ALERT: PHP2Shell (CVE-2026-109618 / CVE-2026-109619)** 🚨
+
+If you run PHP in production, you might be exposed to an active CVSS 9.2 Remote Code Execution flaw.
+
+Even worse: running `apt update && apt upgrade` might NOT have protected you.
+
+Here is what you need to know and how to test in 10 seconds 🧵👇
+
+---
+
+### Tweet 2 (The Vulnerability & Affected Versions)
+2/ Upstream PHP released urgent patches on Oct 21 for two critical memory corruption & boundary flaws.
+
+Patched upstream versions:
+✅ 8.2.35+
+✅ 8.3.36+
+✅ 8.4.27+
+✅ 8.5.12+
+
+⚠️ Everything below this—including EOL branches (5.x, 7.x, 8.0, 8.1)—is potentially vulnerable.
+
+---
+
+### Tweet 3 (The 10-Second Remote Check)
+3/ You don't need to install anything or run invasive exploit payloads.
+
+We built a 100% defensive banner & version checker into `@salmandev/everything-gemini`:
+
+```bash
+npx everything-gemini phpcheck https://your-site.com
+```
+
+Outputs human or `--json` status: `OK`, `POTENTIALLY VULNERABLE`, or `UNKNOWN`.
+
+---
+
+### Tweet 4 (The Hidden Trap: Un-Restarted Workers)
+4/ ⚠️ THE BIGGEST TRAP: The "Ghost Memory" Worker.
+
+Many teams upgraded their distro packages (`apt upgrade php8.3-fpm`), but long-running FPM or Apache workers were NEVER restarted.
+
+The disk binary is updated, but your running web processes are still executing vulnerable memory in RAM!
+
+---
+
+### Tweet 5 (Server-Side & Container Fleet Audit)
+5/ To audit your local Linux host, Kubernetes pod, or Docker container directly:
+
+```bash
+npx everything-gemini phpcheck --server
+```
+
+It inspects `/proc/*/exe` for deleted unlinked binaries, queries `dpkg`/`rpm` package vendor revisions, and warns you if workers need a restart.
+
+---
+
+### Tweet 6 (Remediation Runbook)
+6/ Immediate Remediation Checklist:
+
+1️⃣ Upgrade package:
+`sudo apt update && sudo apt install --only-upgrade php*-fpm`
+2️⃣ Mandatory Restart:
+`sudo systemctl restart 'php*-fpm'`
+3️⃣ Verify RAM:
+`ls -l /proc/*/exe | grep deleted` (must be 0 lines!)
+4️⃣ Turn off version leak:
+`expose_php = Off` in `php.ini`
+
+---
+
+### Tweet 7 (Call to Action & Open Source Link)
+7/ Both the CLI checker and autonomous AI agent skills (`$phpcheck-url`, `$phpcheck-server`, `$php2shell-version-auditor`) are available open-source in `everything-gemini`.
+
+Star & audit your servers now:
+🔗 https://github.com/salmandev/everything-gemini
+
+Please RT to protect fellow DevOps & PHP developers! 🛡️
+
+---
+
+## 💼 Platform 2: LinkedIn (Executive & DevOps Advisory)
+
+**Headline**: 🚨 Urgent Security Advisory: PHP2Shell (CVE-2026-109618 / CVE-2026-109619) & Remediation Guide
+
+If your infrastructure runs PHP across web servers, microservices, or API gateways, your infrastructure may be exposed to two critical vulnerabilities disclosed on October 21: **CVE-2026-109618** and **CVE-2026-109619** (CVSS 9.2).
+
+### What Happened?
+The PHP core team announced fixes for remote memory corruption and boundary check bypasses in stream handling:
+- **Patched Upstream Releases**: `8.2.35`, `8.3.36`, `8.4.27`, `8.5.12`.
+- **EOL Branches**: PHP 5.x, 7.x, 8.0, and 8.1 are affected unless running paid vendor backports (Debian DLA/DSA, Ubuntu Pro USN-8948-1/2, Red Hat RHSA-2026:87080/87151).
+
+### The Critical "Stale Worker" Gotcha
+In production post-mortems, we consistently observe that automated unattended upgrades install newer packages to disk, but active `php-fpm` pools or Apache `mod_php` daemons remain running with open file descriptors pointing to **unlinked, vulnerable binaries in RAM**.
+
+Until worker pools are cleanly restarted, your web application remains exposed!
+
+### How to Audit in Seconds (Zero Installation)
+To help teams quickly inventory public endpoints and private server fleets without sending intrusive exploit probes, we've integrated defensive inspection skills into **Everything Gemini**:
+
+1. **Remote Endpoint Audit**:
+```bash
+npx everything-gemini phpcheck "https://your-domain.com"
+```
+
+2. **Server / Container Fleet Audit**:
+```bash
+npx everything-gemini phpcheck --server
+```
+
+3. **Autonomous Agent Skills**:
+If you use Google Antigravity or AI coding harnesses, you can delegate fleet triage to the `$php2shell-version-auditor`, `$phpcheck-url`, and `$phpcheck-server` skills.
+
+### Immediate Action Required:
+1. Update distribution packages (`apt update` / `dnf update`).
+2. Explicitly restart web daemons: `systemctl restart 'php*-fpm'`.
+3. Check `/proc/*/exe` for unlinked deleted binaries.
+4. Set `expose_php = Off` in `php.ini` to eliminate public banner reconnaissance.
+
+Open-source project link: https://github.com/salmandev/everything-gemini
+
+#Cybersecurity #DevOps #PHP #VulnerabilityAlert #InfoSec #SysAdmin #ApplicationSecurity #CloudSecurity
+
+---
+
+## 👾 Platform 3: Reddit (r/sysadmin, r/PHP, r/netsec)
+
+**Title**: [PSA] PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Upstream fixes, vendor backport matrix, and the "un-restarted FPM worker" trap
+
+**Body**:
+
+Hey everyone,
+
+Following the October 21 disclosure of **PHP2Shell** (CVE-2026-109618 and CVE-2026-109619, CVSS 9.2 RCE / memory exposure), here is a no-nonsense technical summary, vendor package breakdown, and a free zero-install scanner we put together to help audit your infrastructure.
+
+### 1. Affected Upstream Releases
+If you build from source or use official Docker images (`php:8.3-fpm`, etc.), ensure you are running at least:
+- **8.2**: `8.2.35+`
+- **8.3**: `8.3.36+`
+- **8.4**: `8.4.27+`
+- **8.5**: `8.5.12+`
+- **Older branches**: 5.4–5.6, 7.0–7.4, 8.0, and 8.1 are unmaintained upstream and vulnerable unless protected by vendor security backports.
+
+### 2. Linux Distribution Backport Matrix
+
+| OS / Release | Package Stream | Fixed Package Revision | Advisory |
+| :--- | :--- | :--- | :--- |
+| **Debian 12 (bookworm)** | `php8.2-fpm` | `8.2.35-1~deb12u1` | DLA-4848-1 |
+| **Debian 13 (trixie)** | `php8.4-fpm` | `8.4.27-1~deb13u1` | DSA-6574-1 |
+| **Ubuntu 24.04 LTS** | `php8.3` | `8.3.6-0ubuntu0.24.04.13` | USN-8948-1 |
+| **Ubuntu 22.04 LTS** | `php8.1` | `8.1.2-1ubuntu2.28` | USN-8948-1 |
+| **Ubuntu 20.04 (Pro)** | `php7.4` | `7.4.3-4ubuntu2.29+esm5` | USN-8948-2 |
+| **RHEL 8.10** | PHP 7.4 stream | `7.4.33-8.module+el8.10.0+25117+30337cca` | RHSA-2026:87080 |
+| **RHEL 9.8** | PHP 8.0 stream | `8.0.30-8.el9_8.1` | RHSA-2026:87151 |
+
+### 3. The "Un-restarted FPM Worker" Trap
+Many sysadmins ran `apt-get upgrade` and assumed they were protected. But if your system didn't restart the `php-fpm` service, the running master and child processes keep mapped in RAM the old unlinked `.so` and executable.
+
+To check if you are suffering from this:
+```bash
+ls -l /proc/*/exe 2>/dev/null | grep -E '(php|apache|httpd).*\(deleted\)'
+```
+If you see `(deleted)`, your workers are still running the vulnerable binary. Run:
+```bash
+sudo systemctl restart 'php*-fpm'
+```
+
+### 4. Zero-Install Scanning Tools
+We ported and expanded the OpenAI defensive version-checking logic into `everything-gemini` so you can scan external URLs and local servers without sending exploit payloads:
+
+**External URL Banner Check**:
+```bash
+npx everything-gemini phpcheck https://yourdomain.com
+npx everything-gemini phpcheck https://yourdomain.com --json
+```
+
+**Local Host / Container Worker Audit**:
+```bash
+npx everything-gemini phpcheck --server
+```
+
+Repository: https://github.com/salmandev/everything-gemini
+
+Stay safe and check your daemons!
+
+---
+
+## 🟧 Platform 4: Hacker News (Show HN)
+
+**Title**: Show HN: everything-gemini phpcheck – Non-intrusive PHP2Shell (CVE-2026-109618/19) patch auditor
+
+**Submission Text / First Comment**:
+
+Hi HN,
+
+Following the October 21 disclosure of PHP2Shell (CVE-2026-109618 and CVE-2026-109619), we observed that many teams were struggling with two main triage challenges:
+
+1. **Reconnaissance without exploit probes**: How to verify whether public-facing endpoints or staging environments advertise an affected PHP runtime without firing active exploit payloads or risking service degradation.
+2. **The "Ghost Worker" problem**: Many sysadmins applied `apt upgrade`, which replaces packages on disk, but forgot to restart long-running PHP-FPM worker pools or Apache daemons. Because the kernel preserves open inodes in memory, the active workers continue running the unpatched code in RAM indefinitely.
+
+We've integrated a defensive checker and agent skill suite into `everything-gemini`:
+
+```bash
+# Check any remote website/API (reads Server / X-Powered-By via HEAD fallback)
+npx everything-gemini phpcheck https://example.com
+
+# Audit local server, container, OS package revisions, and /proc/*/exe deleted handles
+npx everything-gemini phpcheck --server
+```
+
+### Design Notes:
+- **Non-intrusive**: Uses HTTP `HEAD` by default, falling back to `GET` only on 405/501 status codes. Never inspects response bodies or issues crash probes.
+- **Vendor-aware**: Cross-references Debian (12/13), Ubuntu (14.04-26.10 ESM/Pro), RHEL (8.10/9.8), and upstream source builds (8.2.35+, 8.3.36+, 8.4.27+, 8.5.12+).
+- **AI Agent Native**: Includes progressive disclosure skills (`$phpcheck-url`, `$phpcheck-server`, and `$php2shell-version-auditor`) for Google Antigravity & AI coding assistants to automate fleet triage and write pull requests.
+
+GitHub: https://github.com/salmandev/everything-gemini
+
+Feedback and PRs welcome!

package/docs/LAUNCH_KIT_v2.4.0.md

@@ -0,0 +1,164 @@
+# 🚀 Everything Gemini v2.4.0 Launch Kit
+## The Century Milestone (100 Components): Ephemeral Swarms, Dynamic Thinking Allocation & eBPF Sandboxing
+
+Turnkey, platform-optimized announcements to broadcast **Everything Gemini (`everything-gemini`) v2.4.0** across LinkedIn, X (Twitter), Reddit, Hacker News, and developer communities.
+
+---
+
+## 📌 Executive Summary / Stats Sheet
+
+- **Release Milestone**: `v2.4.0` (The Century Landmark Release)
+- **Total Ecosystem Components**: **100** (76 Progressive Skills, 14 Scoped Subagents, 10 Lifecycle Hooks, 14 Curated MCP Blueprints)
+- **Runbook Corpus**: **~76,000 tokens** indexed via Progressive Disclosure, reducing per-turn system prompt overhead by **>85% (up to 93% token savings)**.
+- **New Superpowers**:
+  - 1️⃣ **`ephemeral-swarm-orchestrator` & `swarm-coordinator`**: Dynamic Ephemeral Subagent Spawning, parallel multi-agent task decomposition across isolated worktrees, and Byzantine consensus voting.
+  - 2️⃣ **`dynamic-thinking-allocation` & `thinking-budget`**: Gemini 3.8 Extended Thinking token budgeting (0 to 24,576 tokens), cognitive entropy profiling, and automated routing between Flash and deep reasoning tiers.
+  - 3️⃣ **`ebpf-sandbox-enforcer`**: Zero-trust kernel-level agent sandboxing with Cilium eBPF, Linux Landlock, and seccomp-BPF isolating speculative tool executions.
+  - 4️⃣ **`quantum-safe-cryptography`**: NIST FIPS 203 (ML-KEM / Kyber) and FIPS 204 (ML-DSA / Dilithium) post-quantum cryptography migration for AI agent mTLS and token signing.
+  - 5️⃣ **Interactive Mission Control v2.4.0 (`everything-gemini ui`)**: Live web dashboard with swarm topology visualizer, thinking token monitor, and real-time WebSocket telemetry.
+- **Install Command**: `npx everything-gemini install`
+- **Documentation**: [https://salmandev.github.io/everything-gemini/](https://salmandev.github.io/everything-gemini/)
+- **GitHub**: [https://github.com/salmandev/everything-gemini](https://github.com/salmandev/everything-gemini)
+- **NPM Package**: [https://www.npmjs.com/package/everything-gemini](https://www.npmjs.com/package/everything-gemini)
+
+---
+
+## 1. 💼 LinkedIn Post
+
+```markdown
+🪐 The Century Milestone: Everything Gemini (everything-gemini) v2.4.0 is officially LIVE!
+
+Today, we cross 100 enterprise production components (76 progressive skills, 14 scoped subagents, 10 lifecycle hooks) — cementing Everything Gemini as the premier Autonomous AGI Agent Operating System for Google Gemini & Antigravity.
+
+When engineering teams attempt to scale autonomous agents from simple prototypes into production refactoring engines, they hit fundamental boundaries:
+1. Rigid, static subagents that cannot adapt to specialized emergent problems.
+2. Uncontrolled reasoning latency and runaway thinking token burn.
+3. Unsafe tool execution without kernel-level sandboxing.
+
+Everything Gemini v2.4.0 solves this with Ephemeral Swarms, Dynamic Thinking Tokens, and eBPF Zero-Trust Sandboxing:
+
+🔥 What's New in v2.4.0:
+• 🐝 Ephemeral Swarm Intelligence (`everything-gemini swarm`): The Swarm Coordinator subagent dynamically synthesizes on-demand micro-agents, dispatches parallel workers into isolated git worktrees, and arbitrates multi-agent Byzantine consensus voting before promoting diffs.
+• 🧠 Dynamic Thinking Allocation (`everything-gemini thinking`): Automatically profiles task entropy and routes between Gemini 2.0 Flash (0 thinking tokens for tool plumbing) and Gemini 3.8 Extended Thinking (up to 24,576 reasoning tokens for deep architectural refactoring).
+• 🛡️ Thinking Budget Hook (`hooks/thinking-budget/`): PreToolUse deterministic lifecycle gate capping extended reasoning spend and preventing token runaways.
+• 🔒 eBPF Sandbox Enforcer (`ebpf-sandbox-enforcer`): Linux Landlock filesystem isolation and Cilium eBPF socket filtering protecting host environments during speculative agent tool runs.
+• ⚛️ Quantum-Safe Cryptography (`quantum-safe-cryptography`): NIST FIPS 203 (ML-KEM / Kyber) and FIPS 204 (ML-DSA) hybrid post-quantum key exchange for agent API authentication.
+• 🎛️ Visual Mission Control UI: Live local web dashboard with real-time swarm topology graphs, thinking token burn monitors, and human-in-the-loop review queues.
+
+Zero dependencies. Instant install:
+$ npx everything-gemini install
+$ npx everything-gemini swarm spawn "refactor auth middleware to zero-trust mTLS" --workers 3
+$ npx everything-gemini thinking budget --level deep --dry-run
+$ npx everything-gemini ui --port 4200
+
+⭐ GitHub: https://github.com/salmandev/everything-gemini
+🌐 Live Catalog: https://salmandev.github.io/everything-gemini/
+📦 npm: https://www.npmjs.com/package/everything-gemini
+
+#AI #Gemini #GoogleCloud #Antigravity #AutonomousAgents #SoftwareEngineering #MultiAgent #FinOps #OpenSource
+```
+
+---
+
+## 2. 🐦 X (Twitter) Launch Thread
+
+```text
+1/7 🪐 WE HIT THE CENTURY MILESTONE: Everything Gemini v2.4.0 is officially LIVE!
+
+100 production components (76 progressive skills, 14 subagents, 10 lifecycle hooks).
+
+Introducing Ephemeral Swarms, Dynamic Thinking Tokens for Gemini 3.8, and eBPF Sandboxing 🧵👇
+
+2/7 🐝 Dynamic Ephemeral Swarms:
+Gone are rigid, static subagents. The Swarm Coordinator dynamically synthesizes micro-agents, dispatches them to parallel git worktrees, and requires 67%+ Byzantine consensus before committing code.
+
+Run it:
+`npx everything-gemini swarm spawn "task" --workers 3`
+
+3/7 🧠 Dynamic Thinking Allocation:
+Gemini 3.8 brings massive internal reasoning tokens. But you don't need 16k tokens to format code!
+Everything Gemini profiles task entropy and allocates 0 tokens (Flash), 4k (Pro), or 16k-24k (Thinking).
+
+Protected by `hooks/thinking-budget/`!
+
+4/7 🛡️ Zero-Trust eBPF Sandboxing:
+When agents run speculative tool commands, they shouldn't access host secrets.
+`ebpf-sandbox-enforcer` applies Linux Landlock filesystem boundaries and Cilium eBPF egress policies. Zero host escapes.
+
+5/7 ⚛️ Quantum-Safe Cryptography:
+Future-proof agent communication against "Harvest Now, Decrypt Later".
+Implements NIST FIPS 203 (ML-KEM / Kyber) and FIPS 204 (ML-DSA) hybrid TLS 1.3 key exchanges for agent tokens.
+
+6/7 🎛️ Visual Mission Control UI:
+Launch a real-time web dashboard showing active swarm topologies, token burn velocity, and human-in-the-loop approvals:
+`npx everything-gemini ui --port 4200`
+
+7/7 🚀 100 Components. Zero dependencies. >85% token savings.
+Install instantly in any project:
+`npx everything-gemini install`
+
+⭐ Star on GitHub: https://github.com/salmandev/everything-gemini
+🌐 Docs & Catalog: https://salmandev.github.io/everything-gemini/
+```
+
+---
+
+## 3. 🟠 Hacker News (Show HN)
+
+```text
+Title: Show HN: Everything Gemini v2.4.0 – Ephemeral Swarms and AGI OS for Google Antigravity
+
+Link: https://github.com/salmandev/everything-gemini
+
+Body:
+Hi HN,
+
+Today we released Everything Gemini v2.4.0, marking the 100-component milestone (76 progressive skills, 14 scoped subagents, 10 lifecycle hooks).
+
+Everything Gemini is an open-source agent harness and runtime designed for Google Antigravity and Gemini models. Instead of dumping massive prompt files into the model's system context on every turn, Everything Gemini uses Progressive Disclosure (loading YAML metadata first, procedural runbooks only on demand) and Native Prefix Context Caching, cutting recurring token overhead by >85%.
+
+In v2.4.0, we're introducing three major architectural pillars:
+1. Dynamic Ephemeral Swarms: A Swarm Coordinator subagent that dynamically authors targeted worker agents, runs them in isolated git worktrees, and arbitrates multi-agent Byzantine consensus before accepting diffs.
+2. Dynamic Thinking Allocation: Task-complexity routing that sets optimal Gemini 3.8 extended reasoning token budgets (from 0 tokens for simple plumbing to 24,576 tokens for deep concurrency refactors), backed by a deterministic thinking-budget lifecycle hook.
+3. eBPF Zero-Trust Isolation: Speculative tool executions are locked down with Linux Landlock and Cilium eBPF network filtering.
+
+Zero external npm dependencies. Everything runs via Node.js standard libraries.
+
+Try it:
+$ npx everything-gemini install
+$ npx everything-gemini swarm spawn "audit concurrency" --workers 3
+$ npx everything-gemini ui --dry-run
+
+Feedback, issue reports, and PRs are very welcome!
+```
+
+---
+
+## 4. 👽 Reddit (r/LocalLLaMA & r/programming)
+
+```markdown
+**Title**: [Project] Everything Gemini v2.4.0: 100 Components, Ephemeral Multi-Agent Swarms, and Gemini 3.8 Dynamic Thinking Allocation
+
+Hey everyone,
+
+We just hit the 100-component Century Milestone in Everything Gemini (`everything-gemini` v2.4.0), the open-source agent harness for Google Antigravity and Gemini 3.8.
+
+### Why does this matter?
+Most agent frameworks suffer from:
+1. Prompt Bloat: Monolithic 50k token prompts burning budgets and eroding attention.
+2. Rigid Agent Roles: Pre-defined agents that can't handle hyper-specific edge cases.
+3. Thinking Token Runaways: Using deep reasoning models for basic formatting, or under-allocating thinking tokens for race conditions.
+
+### What's new in v2.4.0:
+- **Ephemeral Swarm Orchestration**: The Swarm Coordinator dynamically synthesizes micro-agents, executes them in parallel git worktrees, and requires 67%+ multi-agent quorum before code is merged.
+- **Dynamic Thinking Budgeting**: Entropy-based profiling routing tasks to Gemini 2.0 Flash (0 thinking tokens), Gemini 2.5 Pro (4k), or Gemini 3.8 Extended Thinking (up to 24k tokens), enforced by `hooks/thinking-budget/`.
+- **Zero-Trust eBPF Tool Sandboxing**: Linux Landlock filesystem boundaries + Cilium eBPF network filters.
+- **NIST Post-Quantum Cryptography (PQC)**: FIPS 203/204 hybrid TLS 1.3 for agent API delegation.
+- **Visual Mission Control**: Local web dashboard (`everything-gemini ui`) for monitoring active swarms.
+
+Zero dependencies. Instant install:
+`npx everything-gemini install`
+
+GitHub: https://github.com/salmandev/everything-gemini  
+Docs: https://salmandev.github.io/everything-gemini/
+```

package/docs/LAUNCH_KIT_v2.5.0.md

@@ -0,0 +1,187 @@
+# 🚀 Everything Gemini v2.5.0 Launch Kit
+## The 80-Skill Frontier (106 Components): WebRTC Voice Gateway, OpenTelemetry Observability & Harness³ Mutation Testing
+
+Turnkey, platform-optimized announcements to broadcast **Everything Gemini (`everything-gemini`) v2.5.0** across LinkedIn, X (Twitter), Reddit, Hacker News, and developer communities.
+
+---
+
+## 📌 Executive Summary / Stats Sheet
+
+- **Release Milestone**: `v2.5.0` (The 80-Skill Frontier)
+- **Total Ecosystem Components**: **106** (80 Progressive Skills, 15 Scoped Subagents, 11 Lifecycle Hooks, 14 Curated MCP Blueprints)
+- **Runbook Corpus**: **~82,500 tokens** indexed via Progressive Disclosure, reducing per-turn system prompt overhead by **>85% (up to 93.1% token savings)**.
+- **New Superpowers**:
+  - 1️⃣ **`webrtc-agent-gateway`**: Sub-200ms real-time bidirectional WebRTC audio duplex gateways, Opus transcoding, and live voice pair-programming with Gemini Live API.
+  - 2️⃣ **`opentelemetry-agent-observability`**: OpenTelemetry GenAI Semantic Conventions (v1.30+), W3C `traceparent` context propagation across subagent handoffs, and Google Cloud Trace export.
+  - 3️⃣ **`harness3-mutation-testing` & `resilience-engineer`**: 15th Scoped Subagent and Harness³ mutation testing engine injecting adversarial latency, 429 shocks, schema drifts, and poisoned outputs to mathematically score agent resilience ($R \ge 90\%$).
+  - 4️⃣ **`envoy-ai-gateway`**: High-performance Envoy Proxy AI Gateway with token-aware rate limiting, active health checking, and automatic circuit breaking across Gemini Flash, Pro, and Extended Thinking tiers.
+  - 5️⃣ **`drift-detector`**: 11th Lifecycle Safety Hook intercepting tool calls to detect adversarial prompt injection patterns, command evasion, and unexpected schema drift.
+  - 6️⃣ **New CLI Commands**:
+    - `everything-gemini resilience run|inject|report`
+    - `everything-gemini telemetry status|spans|export`
+  - 7️⃣ **Visual Mission Control v2.5.0 (`everything-gemini ui`)**: Live web dashboard with Chaos Resilience scoring cards, OpenTelemetry span graphs, and `/api/resilience`, `/api/telemetry` endpoints.
+- **Install Command**: `npx everything-gemini install`
+- **Documentation**: [https://salmandev.github.io/everything-gemini/](https://salmandev.github.io/everything-gemini/)
+- **GitHub**: [https://github.com/salmandev/everything-gemini](https://github.com/salmandev/everything-gemini)
+- **NPM Package**: [https://www.npmjs.com/package/everything-gemini](https://www.npmjs.com/package/everything-gemini)
+
+---
+
+## 1. 💼 LinkedIn Post
+
+```markdown
+🪐 Everything Gemini (everything-gemini) v2.5.0 is LIVE: The 80-Skill Frontier (106 Components)!
+
+We just broke through another milestone: 106 enterprise production components (80 progressive skills, 15 scoped subagents, 11 lifecycle hooks) engineered specifically for Google Gemini & Antigravity.
+
+Autonomous agents in 2026 must do more than write code in turn-by-turn chat. They must:
+1. Speak with developers in sub-second real-time duplex voice while debugging active IDE screens.
+2. Emit standardized distributed telemetry across multi-agent handoffs for SRE observability.
+3. Survive adversarial network shocks, rate-limit cascades, and poisoned tool outputs with mathematical resilience.
+
+Everything Gemini v2.5.0 delivers the full autonomous enterprise stack:
+
+🔥 What's New in v2.5.0:
+• 🎙️ WebRTC Agent Gateway (`webrtc-agent-gateway`): Ultra-low latency (<200ms) bidirectional Opus audio duplex streaming connecting browser/IDE microphones to Google Gemini Live API with STUN/TURN NAT traversal.
+• 📡 OpenTelemetry GenAI Observability (`opentelemetry-agent-observability` & `everything-gemini telemetry`): Full OpenTelemetry GenAI semantic conventions (v1.30+), W3C traceparent context propagation across subagent handoffs, and Google Cloud Trace integration.
+• 🛡️ Harness³ Chaos & Mutation Testing (`harness3-mutation-testing` & `everything-gemini resilience`): Injects synthetic latency (+3000ms), 429 shocks, and schema drifts into agent harnesses to mathematically verify that resilience score R >= 90% before production deploy.
+• 🤖 15th Scoped Subagent: Resilience Engineer (`agents/resilience-engineer.md`): Specialist subagent for chaos engineering, fault injection, and circuit breaker failover auditing.
+• 🚪 Envoy Proxy AI Gateway (`envoy-ai-gateway`): Multi-model traffic director with token-aware rate limiting, active health checks, and automatic fallback from Flash to Pro to Gemini 3.8 Extended Thinking.
+• 🛑 Drift Sentinel Lifecycle Hook (`hooks/drift-detector/`): PreToolUse deterministic safety gate detecting adversarial prompt injections, command evasion, and schema drift.
+• 🎛️ Mission Control UI v2.5.0: Enhanced visual dashboard with live Chaos Resilience scorecards and OpenTelemetry distributed trace monitors.
+
+Zero dependencies. Instant install:
+$ npx everything-gemini install
+$ npx everything-gemini resilience run --iterations 10
+$ npx everything-gemini telemetry status --trace-id 4bf92f3577b34da6a3ce929d0e0e4736
+$ npx everything-gemini ui --port 4200
+
+⭐ GitHub: https://github.com/salmandev/everything-gemini
+🌐 Live Interactive Catalog: https://salmandev.github.io/everything-gemini/
+📦 npm: https://www.npmjs.com/package/everything-gemini
+
+#AI #Gemini #GoogleCloud #Antigravity #AutonomousAgents #OpenTelemetry #WebRTC #ChaosEngineering #DevOps #OpenSource
+```
+
+---
+
+## 2. 🐦 X (Twitter) Launch Thread
+
+### Tweet 1 (Hook & Hero Video/Card)
+🪐 Everything Gemini v2.5.0 is LIVE!
+
+The Autonomous AGI Agent Operating System crosses the 80-Skill Frontier (106 components!):
+• Sub-200ms WebRTC voice pair-programming
+• OpenTelemetry GenAI distributed tracing
+• Harness³ mutation testing & chaos resilience
+
+🧵👇
+
+### Tweet 2 (WebRTC Voice Pair-Programming)
+1/4 Real-Time WebRTC Voice Gateway 🎙️
+Stop waiting for turn-by-turn HTTP requests.
+`webrtc-agent-gateway` bridges browser/IDE microphones to Gemini Live with Opus audio duplex, STUN/TURN traversal, and sub-200ms TTFT voice interaction while analyzing active IDE screens.
+
+### Tweet 3 (OpenTelemetry GenAI Tracing)
+2/4 OpenTelemetry GenAI Semantic Conventions 📡
+Multi-agent swarms without distributed tracing are a black box.
+`opentelemetry-agent-observability` injects W3C traceparents across subagent handoffs, records thinking token usage, and exports directly to Google Cloud Trace & Jaeger.
+`npx everything-gemini telemetry status`
+
+### Tweet 4 (Harness³ Chaos Resilience & 15th Subagent)
+3/4 Harness³ Chaos & Mutation Testing 🛡️
+Meet our 15th Scoped Subagent: `resilience-engineer`.
+Injects synthetic 429 shocks, gateway timeouts, schema drifts, and poisoned tool outputs into agent harnesses. Mathematically verifies that resilience score R >= 90% before merge.
+`npx everything-gemini resilience run`
+
+### Tweet 5 (Envoy Gateway & Drift Sentinel)
+4/4 Envoy AI Gateway & Drift Sentinel Hook 🚀
+• Envoy proxy AI gateway with token-aware rate limiting & fallback cascades across Gemini Flash/Pro/Thinking.
+• 11th Lifecycle Hook `hooks/drift-detector/` blocking adversarial prompt injections.
+
+Install in 5 seconds:
+$ npx everything-gemini install
+
+⭐ https://github.com/salmandev/everything-gemini
+
+---
+
+## 3. 👽 Reddit Post (r/MachineLearning, r/LocalLLaMA, r/programming)
+
+**Title**: Everything Gemini v2.5.0: The 80-Skill Milestone for Autonomous Agents with WebRTC Voice, OpenTelemetry GenAI Tracing & Harness³ Mutation Testing
+
+```markdown
+Hey everyone,
+
+We just tagged v2.5.0 of Everything Gemini (`everything-gemini`), the open-source agent harness and multi-agent operating system for Google Gemini & Antigravity.
+
+With this release, we've crossed 106 production components (80 progressive skills, 15 scoped subagents, 11 lifecycle safety hooks) representing ~82,500 tokens of runbooks that save >85% in system prompt tokens via lazy-loading.
+
+### What's New in v2.5.0:
+
+1. **Real-Time WebRTC Audio Duplex (`webrtc-agent-gateway`)**:
+   - Bridges browser/IDE client streams into Gemini Live API via WebSockets.
+   - Opus audio transcoding and STUN/TURN negotiation for sub-200ms voice pair-programming.
+
+2. **OpenTelemetry GenAI Distributed Tracing (`opentelemetry-agent-observability`)**:
+   - Standardized GenAI v1.30+ semantic attributes (`gen_ai.system`, `gen_ai.request.model`, `gen_ai.usage.thinking_tokens`).
+   - W3C traceparent context propagation across subagent handoffs.
+   - Built-in CLI viewer: `npx everything-gemini telemetry status`.
+
+3. **Harness³ Mutation Testing & Fault Injection (`harness3-mutation-testing`)**:
+   - Adversarial fault injection into agent harness surfaces: synthetic latency (+3000ms), 429 rate limit shocks, schema drift, poisoned tool JSON.
+   - Mathematical resilience scoring: verifies agent recovery >= 90% before production merge.
+   - CLI runner: `npx everything-gemini resilience run --iterations 10`.
+
+4. **15th Scoped Subagent: Resilience Engineer (`agents/resilience-engineer.md`)**:
+   - Dedicated specialist for chaos engineering, fault injection, and circuit breaker failover auditing.
+
+5. **Envoy Proxy AI Gateway (`envoy-ai-gateway`)**:
+   - Envoy proxy AI gateway configuration with token-aware rate limiting, active health checking, and automatic circuit breaking across Gemini Flash, Pro, and Extended Thinking tiers.
+
+6. **11th Lifecycle Hook: Drift Sentinel (`hooks/drift-detector/`)**:
+   - PreToolUse deterministic safety hook blocking adversarial prompt injections, command evasion, and unexpected schema drift.
+
+### Try it out:
+```bash
+npx everything-gemini install
+npx everything-gemini resilience run --iterations 10
+npx everything-gemini telemetry status
+npx everything-gemini ui --port 4200
+```
+
+GitHub: https://github.com/salmandev/everything-gemini
+Interactive Catalog: https://salmandev.github.io/everything-gemini/
+
+Feedback, issues, and contributions welcome!
+```
+
+---
+
+## 4. 🔶 Hacker News (Show HN)
+
+**Title**: Show HN: Everything Gemini v2.5.0 – WebRTC Voice, OpenTelemetry & Harness Mutation Testing for Autonomous Agents
+
+```markdown
+Hi HN,
+
+We built Everything Gemini (https://github.com/salmandev/everything-gemini) to solve the core architectural bottlenecks of running autonomous AI agents in production: token bloat, runaway reasoning loops, and fragile tool executions.
+
+Today we're releasing v2.5.0, reaching 106 enterprise components (80 progressive skills, 15 scoped subagents, 11 lifecycle safety hooks):
+
+1. WebRTC Audio Duplex Gateway: Sub-200ms bidirectional Opus voice streaming directly to the Gemini Live API with STUN/TURN NAT traversal for live voice pair-programming.
+2. OpenTelemetry GenAI Semantic Conventions (v1.30+): Preserves W3C traceparent headers across multi-agent handoffs, recording prompt, completion, and internal thinking tokens to Google Cloud Trace or Jaeger.
+3. Harness³ Mutation Testing & Fault Injection: Mathematically evaluates agent harness resilience by injecting adversarial latency shocks, 429 rate-limiting, and schema drifts into active tool surfaces.
+4. Envoy Proxy AI Gateway: High-performance Envoy proxy with token-aware rate limiting, active health checking, and automated fallback across Gemini 2.0 Flash, 3.8 Pro, and 3.8 Extended Thinking.
+5. Drift Sentinel Lifecycle Hook: PreToolUse deterministic gate blocking prompt injection vectors and schema drift.
+
+Everything is completely open-source (Apache 2.0) with zero external npm runtime dependencies.
+
+You can inspect the catalog here:
+https://salmandev.github.io/everything-gemini/
+
+Or install into any project:
+npx everything-gemini install
+
+We'd love your thoughts on agent telemetry conventions and harness mutation testing!
+```