refactor: drop 12 runtimes, keep Claude, Codex, OpenCode, Cursor, ZCode, Antigravity

Removes kilo, kimi, kimi-code, copilot, windsurf, augment, trae, qwen, hermes,
cline, codebuddy and pi end to end: capability descriptors, installer branches
and converters (bin/install.js 14.9k -> 11.2k lines), TypeScript converters,
hook surfaces and runtime homes, review lanes qwen/kimi-code, the two pi
migrations, Kimi payload normalization in the hook guards, dead hostBehaviors
vocabulary, launcher home probes, fixtures, runtime-specific tests and the
prose that presented them as supported.

Installer output for the six kept runtimes is byte-identical to before the
prune. The Kimi tool-vocabulary tests in workflow-guard, read-guard and
read-injection-scanner are left in place pending a decision.

docs/ARCHITECTURE.md

@@ -21,7 +21,7 @@
 
 ## System Overview
 
-MSD Core is a **meta-prompting framework** that sits between the user and AI coding agents (Claude Code, Kimi CLI, OpenCode, Kilo, Codex, Copilot, Antigravity, Trae, Cline, Augment Code). It provides:
+MSD Core is a **meta-prompting framework** that sits between the user and AI coding agents (Claude Code, OpenCode, Codex, Antigravity, Cursor). It provides:
 
 1. **Context engineering** — Structured artifacts that give the AI everything it needs per task (see [Context engineering](explanation/context-engineering.md))
 2. **Multi-agent orchestration** — Thin orchestrators that spawn specialized agents with fresh context windows (see [Multi-agent orchestration](explanation/multi-agent-orchestration.md))
@@ -112,17 +112,15 @@ Multiple layers prevent common failure modes:
 User-facing entry points. Each file contains YAML frontmatter (name, description, allowed-tools) and a prompt body that bootstraps the workflow. Commands are installed as:
 
 - **Claude Code:** Custom slash commands (hyphen form, `/msd-command-name`)
-- **OpenCode / Kilo:** Slash commands (hyphen form, `/msd-command-name`)
+- **OpenCode:** Slash commands (hyphen form, `/msd-command-name`)
 - **Codex:** Skills (`$msd-command-name`)
-- **Copilot:** Slash commands (hyphen form, `/msd-command-name`)
-- **Kimi CLI:** Agent Skills (`/skill:msd-command-name`) plus an explicit custom agent launch with `kimi --agent-file`
 - **Antigravity:** Skills
 
 **Total commands:** see [`docs/INVENTORY.md`](INVENTORY.md#commands) for the authoritative count and full roster.
 
 #### Two-stage hierarchical routing (v1.40, [#2792](https://github.com/open-gsd/gsd-core/issues/2792))
 
-To keep the eager skill-listing token cost low, v1.40 introduces six namespace **meta-skills** (`msd-workflow`, `msd-project`, `msd-quality`, `msd-context`, `msd-manage`, `msd-ideate` — sourced from `commands/msd/ns-*.md`, but the invocable `name:` is the bare form shown here) layered above the concrete sub-skills. On runtimes with non-recursive skill loaders (cline, qwen, hermes, augment, trae) the installer now realizes this fully: it emits only the 6 namespace router bundles as top-level skills and nests the ~61 concrete skills under `<router>/skills/<name>/SKILL.md`, so the eager listing is ≈6 entries instead of ≈67. The model selects a namespace router, which instructs it to read the nested concrete skill file via a routing table embedded in the router body. On these runtimes concrete skills are **not** directly invocable by bare name via the Skill tool; they are reachable through the router. Slash commands (`/msd-*`, via the separate commands surface) are unaffected where the runtime has one. On runtimes with recursive or unconfirmed skill loaders (claude global, cursor, codex, copilot, windsurf, codebuddy, opencode, kilo, antigravity) the layout remains flat — all skills emitted at the top level as before. Antigravity moved from nested to flat in #1614: `agy` scans only `skills/<name>/SKILL.md`, so nested sub-skills were unreachable. Claude was reverted to flat in #924: the Skill tool hard-errors on unknown names rather than re-routing via the router, so nested concrete skills were uninvokable.
+To keep the eager skill-listing token cost low, v1.40 introduces six namespace **meta-skills** (`msd-workflow`, `msd-project`, `msd-quality`, `msd-context`, `msd-manage`, `msd-ideate` — sourced from `commands/msd/ns-*.md`, but the invocable `name:` is the bare form shown here) layered above the concrete sub-skills. On runtimes with non-recursive skill loaders the installer realizes this fully: it emits only the 6 namespace router bundles as top-level skills and nests the ~61 concrete skills under `<router>/skills/<name>/SKILL.md`, so the eager listing is ≈6 entries instead of ≈67. The model selects a namespace router, which instructs it to read the nested concrete skill file via a routing table embedded in the router body. On these runtimes concrete skills are **not** directly invocable by bare name via the Skill tool; they are reachable through the router. Slash commands (`/msd-*`, via the separate commands surface) are unaffected where the runtime has one. On runtimes with recursive or unconfirmed skill loaders (claude global, cursor, codex, opencode, antigravity) the layout remains flat — all skills emitted at the top level as before. Antigravity moved from nested to flat in #1614: `agy` scans only `skills/<name>/SKILL.md`, so nested sub-skills were unreachable. Claude was reverted to flat in #924: the Skill tool hard-errors on unknown names rather than re-routing via the router, so nested concrete skills were uninvokable.
 
 The router descriptions use pipe-separated keyword tags (≤ 60 chars) per the Tool Attention research showing keyword-dense tags outperform prose for routing at ~40 % the token cost.
 
@@ -379,7 +377,7 @@ in-file `<!-- msd:section id="<id>" when="<when>" -->` / `<!-- /msd:section -->`
 compiled parser/composer seam (generated to `msd-core/bin/lib/workflow-fragments.cjs` per
 ADR-457) partitions a marked document into fragments and recomposes them through the shared
 `context-composer.cjs` budget seam (ADR-1671, #2929) before any per-runtime converter sees the
-text — so a marker attribute can never be corrupted by a `.claude/` → `.windsurf/`-style
+text — so a marker attribute can never be corrupted by a `.claude/` → `.cursor/`-style
 path-rewrite regex. `bin/install.js`'s `copyWithPathReplacement` calls `composeWorkflow` on
 every workflow file at emit time; an unmarked file (88 of the 89 shipped workflows today)
 parses to a single implicit fragment and round-trips byte-identical, so this is a no-op for
@@ -476,7 +474,7 @@ Node.js CLI utility (`msd-tools.cjs`) with domain modules split across `msd-core
 | `graphify-command-router.cjs` | ADR-959 capability command router — first real capability command cutover (phase 4d-impl-2); extracted from the `case 'graphify':` arm in `msd-tools.cjs`; dispatches build/query/status/diff subcommands; discovered via `commandFamilies` in the capability registry |
 | `audit-command-router.cjs` | ADR-959 capability command router (phase 4d-impl-3); extracted from the `case 'audit-uat':` and `case 'audit-open':` arms in `msd-tools.cjs`; `routeAuditUat` → `uat.cjs:cmdAuditUat`, `routeAuditOpen` → `audit.cjs:{auditOpenArtifacts,formatAuditReport}`; discovered via `commandFamilies` in the capability registry |
 | `intel-command-router.cjs` | ADR-959 capability command router (phase 4d-impl-4, last first-party cutover); extracted from the `case 'intel':` arm in `msd-tools.cjs`; `routeIntelCommand` → all 9 intel subcommands via lazy `require('./intel.cjs')`; preserves non-raw `timeAgo` transform on `status.files[*].updated_at`; discovered via `commandFamilies` in the capability registry |
-| `runtime-hooks-surface.cjs` | Hook-surface writer and configured-entrypoint validation module (ADR-857 phase 5f-1); owns Cline rules/agents-md/pre-tool-use hook generation, Cursor/Windsurf `hooks.json`, Kimi hook TOML, Copilot session-hook config, Codex hook-block management, and construction-time records for paths emitted into runtime configuration. Installer success requires those records to pass non-executing file-type and interpreter-resolution checks. |
+| `runtime-hooks-surface.cjs` | Hook-surface writer and configured-entrypoint validation module (ADR-857 phase 5f-1); owns Cursor `hooks.json`, Codex hook-block management, and construction-time records for paths emitted into runtime configuration. Installer success requires those records to pass non-executing file-type and interpreter-resolution checks. |
 
 
 ---
@@ -701,19 +699,9 @@ UI-SPEC.md (per phase) ───────────────────
 Equivalent paths for other runtimes:
 
 - **OpenCode:** `~/.config/opencode/` global or `./.opencode/` local
-- **Kilo:** `~/.config/kilo/` global or `./.kilo/` local
-- **Kimi CLI:** first-existing generic global root (`~/.config/agents/` recommended, then `~/.agents/` if its `skills/` directory already exists); local install is deferred and guarded
 - **Codex:** `~/.codex/` global or `./.codex/` local
-- **Copilot:** `~/.copilot/` global or `./.github/` local
 - **Antigravity:** auto-detected global root (`~/.gemini/antigravity/`, `~/.gemini/antigravity-ide/`, or `~/.gemini/antigravity-cli/`) for settings and runtime files; global skills/agents under `~/.gemini/config/` (the machine-local discovery dir, #3738) or `./.agent/` local
 - **Cursor:** `~/.cursor/` global or `./.cursor/` local
-- **Windsurf/Devin Desktop:** `~/.codeium/windsurf/` global config or `./.windsurf/` local workflows
-- **Augment Code:** `~/.augment/` global or `./.augment/` local
-- **Trae:** `~/.trae/` global or `./.trae/` local
-- **Qwen Code:** `~/.qwen/` global or `./.qwen/` local
-- **Hermes Agent:** `~/.hermes/` global or `./.hermes/` local
-- **CodeBuddy:** `~/.codebuddy/` global or `./.codebuddy/` local
-- **Cline:** `~/.cline/` global or project-root `.clinerules` local
 
 ### Project Files (`.planning/`)
 
@@ -814,25 +802,15 @@ artifact, not codebase structure.
 
 The installer (`bin/install.js`, ~10,700 lines) handles:
 
-1. **Runtime detection** — Interactive prompt or CLI flags (`--claude`, `--opencode`, `--kimi`, `--kilo`, `--codex`, `--copilot`, `--antigravity`, `--cursor`, `--windsurf`, `--augment`, `--trae`, `--qwen`, `--hermes`, `--codebuddy`, `--cline`, `--all`)
+1. **Runtime detection** — Interactive prompt or CLI flags (`--claude`, `--opencode`, `--codex`, `--antigravity`, `--cursor`, `--all`)
 2. **Location selection** — Global (`--global`) or local (`--local`)
 3. **File deployment** — Copies commands, skills, workflows, references, templates, agents, and hooks
 4. **Runtime adaptation** — Transforms file content per runtime:
   - Claude Code: Uses as-is
   - OpenCode: Converts commands/agents to OpenCode-compatible flat command + subagent format
-  - Kilo: Reuses the OpenCode conversion pipeline with Kilo config paths
   - Codex: Generates TOML config + skills from commands
-  - Kimi CLI: Generates Agent Skills under `skills/msd-*/SKILL.md`, custom agent YAML/prompt files, and explicit `kimi_cli.tools.*` module paths
-  - Copilot: Maps tool names (Read→read, Bash→execute, etc.)
   - Antigravity: Skills-first with Google model equivalents; adjusts hook event names (`AfterTool` instead of `PostToolUse`)
   - Cursor: Skills-first with Cursor rule references
-  - Windsurf: Skills-first with Windsurf rule references
-  - Trae: Skills-first install to `~/.trae` / `./.trae` with no `settings.json` or hook integration
-  - Qwen Code: Skills-first with Qwen-branded path and prompt rewrites
-  - Hermes Agent: Category-based skills under `skills/msd/`
-  - CodeBuddy: Skills-first with CodeBuddy path and prompt rewrites
-  - Cline: Writes `.clinerules` for rule-based integration
-  - Augment Code: Skills-first with full skill conversion and config management
 5. **Path normalization** — Replaces `~/.claude/` paths with runtime-specific paths
 6. **Settings integration** — Registers hooks in runtime's `settings.json`
 7. **Patch backup** — Since v1.17, backs up locally modified files to `msd-local-patches/` for `/msd-update --reapply`
@@ -840,7 +818,7 @@ The installer (`bin/install.js`, ~10,700 lines) handles:
 9. **Uninstall mode** — `--uninstall` removes all MSD files, hooks, and settings
 
 `installRuntimeArtifacts` (`install-engine.cjs`) returns the executed plan it ran — per kind, per
-scope, including on the combined OpenCode/Kilo family path, which previously early-returned `void` —
+scope, including on the OpenCode family path, which previously early-returned `void` —
 rather than being observable only by re-reading disk afterward. Its destination-writing IO (copies,
 removals, snapshot/restore, best-effort cleanup) now routes through an injectable fs seam,
 `install-fs-adapter.cjs`, so a full install can be exercised against a fake adapter with zero real
@@ -988,45 +966,27 @@ The migration-specific ownership and source snapshots live in
 | --- | --- | --- | --- | --- | --- |
 | Claude Code | `~/.claude` | `./.claude` | Global `skills/msd-*/SKILL.md` (flat, #924); local `commands/msd/*.md` | `agents/msd-*.md` | `settings.json` hook and statusLine entries |
 | OpenCode | `~/.config/opencode` | `./.opencode` | `commands/msd-*.md` | `agents/msd-*.md` | `opencode.json` or `opencode.jsonc`; no MSD hooks |
-| Kilo | `~/.config/kilo` | `./.kilo` | `command/msd-*.md` | `agents/msd-*.md` | `kilo.json` or `kilo.jsonc`; no MSD hooks |
-| Kimi CLI | First-existing generic root: `~/.config/agents` recommended, then `~/.agents` when `~/.agents/skills` exists and `~/.config/agents/skills` does not | Deferred and guarded | `skills/msd-*/SKILL.md` (flat) invoked as `/skill:msd-*` | `agents/msd.yaml`, `agents/msd.md`, and `agents/subagents/msd-*` YAML/prompt pairs | Explicit `kimi --agent-file <configRoot>/agents/msd.yaml`; no MSD hooks or statusline |
 | Codex | `~/.codex` | `./.codex` | `skills/msd-*/SKILL.md` (flat) | `agents/` source markdown plus per-agent TOML (Codex auto-discovers each `agents/msd-*.toml`; this is the sole canonical role registration, #2406) | `config.toml` bare `[agents]` dispatch-tuning scalar (`max_depth`, no per-role `[agents.msd-*]` tables), `[features].hooks` (canonical; legacy alias `codex_hooks` is recognized and migrated forward on reinstall, #3566), and hook tables |
-| GitHub Copilot | `~/.copilot` | `./.github` | `skills/msd-*/SKILL.md` (flat), `copilot-instructions.md`, and `AGENTS.md` (repo root, local) | `.agent.md` files | Self-contained `sessionStart` hook (`hooks/msd-session.json`, inline `command` type); no statusline |
 | Antigravity | auto-detected: `~/.gemini/antigravity`, `~/.gemini/antigravity-ide`, or `~/.gemini/antigravity-cli` | `./.agent` | `~/.gemini/config/skills/msd-*/SKILL.md` (flat, #1614; global home override #3738) | `~/.gemini/config/agents/msd-*.md` (#3738) | Gemini-style `settings.json` hook entries when installed by MSD |
 | Cursor | `~/.cursor` | `./.cursor` | `skills/msd-*/SKILL.md` (flat) | `agents/msd-*.md` | Rule references under `rules/`; `hooks.json` with sessionStart context injection and postToolUse STATE.md monitor (#777) |
-| Windsurf | `~/.codeium/windsurf` config | `./.windsurf` | `workflows/msd-*.md` slash-command workflows | No custom-agent artifact surface | No MSD hooks |
-| Augment Code | `~/.augment` | `./.augment` | `skills/msd-ns-*/SKILL.md` (6 routers) + `skills/msd-ns-*/skills/<name>/SKILL.md` (nested concretes) | `agents/msd-*.md` | No MSD hooks or statusline |
-| Trae | `~/.trae` | `./.trae` | `skills/msd-ns-*/SKILL.md` (6 routers) + `skills/msd-ns-*/skills/<name>/SKILL.md` (nested concretes) | `agents/msd-*.md` | Rule references under `rules/`; no MSD hooks |
-| Qwen Code | `~/.qwen` | `./.qwen` | `skills/msd-ns-*/SKILL.md` (6 routers) + `skills/msd-ns-*/skills/<name>/SKILL.md` (nested concretes) | `agents/msd-*.md` | Common MSD settings and hook entries where supported |
-| Hermes Agent | `~/.hermes` | `./.hermes` | `skills/msd/ns-*/SKILL.md` (6 routers, prefix='') + `skills/msd/ns-*/skills/<name>/SKILL.md` (nested concretes) | `agents/msd-*.md` | Common MSD settings and hook entries where supported |
-| CodeBuddy | `~/.codebuddy` | `./.codebuddy` | `skills/msd-*/SKILL.md` (flat, `user-invocable: false`) | `agents/msd-*.md` | `/msd-*` slash commands under `commands/`; common MSD settings and hook entries where supported |
-| Cline | `~/.cline` | project root | `skills/msd-ns-*/SKILL.md` (6 routers) + `skills/msd-ns-*/skills/<name>/SKILL.md` (nested concretes) + `.clinerules` | Rules only | No MSD hooks or statusline |
 
 ### Upstream Contract Sources
 
 Runtime install expectations are checked against primary documentation where
-available. The current source snapshot is 2026-05-11, with Kimi CLI rechecked
-on 2026-06-07:
+available. The current source snapshot is 2026-05-11:
 
 - Claude Code: Anthropic slash commands, settings, hooks, and subagents docs.
-- OpenCode and Kilo: OpenCode config docs and Kilo custom subagent docs.
-- Qwen Code: command/config docs; Qwen command docs were last
-  updated 2026-05-06.
-- Kimi CLI: Agent Skills docs for user-level brand roots and first-existing
-  generic roots (`~/.config/agents/skills/` recommended, then
-  `~/.agents/skills/`), plus Agents docs for YAML files, `system_prompt_path`,
-  `kimi_cli.tools.*` module paths, and explicit `kimi --agent-file` launch.
+- OpenCode: OpenCode config docs.
 - Codex: OpenAI Codex docs and `config-schema.json`; the installer also carries
   Codex 0.124.0 compatibility for agent table shape.
-- Copilot, Cursor, Cline, Augment, Hermes, and CodeBuddy: vendor docs for
-  custom instructions, rules, skills, or config.
-- Antigravity, Windsurf, and Trae: source-limited rows. The installer documents
-  current compatibility shims, and migrations must refresh those sources before
-  rewriting their config.
+- Cursor: vendor docs for custom instructions, rules, skills, or config.
+- Antigravity: source-limited row. The installer documents current
+  compatibility shims, and migrations must refresh those sources before
+  rewriting its config.
 
 ### Abstraction Points
 
-1. **Tool name mapping** — Each runtime has its own tool names (e.g., Claude's `Bash` → Copilot's `execute`)
+1. **Tool name mapping** — Each runtime has its own tool names (e.g., Claude's `Bash` → Codex's shell tool)
 2. **Hook event names** — Claude uses `PostToolUse`, Antigravity uses `AfterTool`
 3. **Agent frontmatter** — Each runtime has its own agent definition format
 4. **Path conventions** — Each runtime stores config in different directories