refactor(monorepo): remove root cmd entrypoints

docs/implementation-roadmap.md

@@ -30,8 +30,8 @@ As of now:
 - the original five `docs/tests/orch-skill/` cases also include recorded real subagent-forward runs captured on `2026-03-19`, with spawned leader and worker agents using the packaged `skills/orch/` and `skills/inbox/` bundles
 - a council-review skill forward-test plan directory now exists under `docs/tests/council-review-skill/`, with a shared execution contract and nine council workflow scenarios covering end-to-end flow, unanimous-only defaults, timeout/before-tally errors, explicit minority reporting, invalid report filters, strict tally semantics, malformed reviewer JSON, and target-file inputs
 - an execution-roadmap workflow now exists under `docs/roadmaps/active/` and `docs/roadmaps/archive/` for agent-level work traces and completion archives
-- a forward-looking web product monorepo plan now exists under `docs/web-product-monorepo.md`, defining the recommended React frontend, `chi` HTTP service, `cmd/orchd` entrypoint, and shared application/query layering for future web work
-- the Phase 1 web-product skeleton is now in place, including root `pnpm` workspace files, a standalone React app under `apps/web`, an initial OpenAPI/events contract under `api/`, and a new `cmd/orchd` HTTP service backed by `internal/app`, `internal/query`, and `internal/httpapi`
+- a forward-looking web product monorepo plan now exists under `docs/web-product-monorepo.md`, defining the recommended React frontend, `chi` HTTP service, and the package-owned `orchd` runtime path for future web work
+- the Phase 1 web-product skeleton is now in place, including root `pnpm` workspace files, a standalone React app under `apps/web`, an initial OpenAPI/events contract under `api/`, and the package-owned `orchd` backend runtime
 - `orchd` now serves a minimal read-only web API with `chi`, including `/health`, runs list/detail, run task list, blocked-task list, and thread detail endpoints backed by the existing SQLite state
 - HTTP tests now cover the initial read-only `orchd` slice, and the new frontend workspace builds successfully with `pnpm run web:build`
 - Phase 2 frontend work has now started by bootstrapping `apps/web` with copied-in `cadence-ui` tokens and foundational components for button, input, textarea, dialog, form, tabs, card, badge, and alert, with the shared token stylesheet loaded from the frontend entrypoint
@@ -116,12 +116,10 @@ Goal:
 
 Recommended shape:
 
-- `cmd/inbox`
-- `cmd/orch`
-- `internal/db`
-- `internal/store`
-- `internal/protocol`
-- `internal/cli`
+- `packages/coord-core`
+- `packages/inbox-runtime`
+- `packages/orch-runtime`
+- compatibility shims only at the root if still needed temporarily
 
 Definition of done:
 
@@ -393,10 +391,7 @@ Add:
 - `apps/web`
 - `api/openapi.yaml`
 - `api/events.md`
-- `cmd/orchd`
-- `internal/app`
-- `internal/query`
-- `internal/httpapi`
+- `packages/orchd-runtime`
 
 Definition of done:
 
@@ -412,10 +407,10 @@ Completed so far:
 
 - root `package.json`, `pnpm-workspace.yaml`, and `pnpm-lock.yaml` now define the monorepo JS workspace
 - `apps/web` now contains a Vite + React + TypeScript + TanStack Router + TanStack Query frontend shell
-- `cmd/orchd` now opens the shared SQLite database, applies migrations, and serves a `chi` router with graceful shutdown handling
-- `internal/query` now exposes run list/detail, run tasks, blocked-task, and thread-detail read models for the web surface
-- `internal/app` now provides a thin web-service boundary over the new read service
-- `internal/httpapi` now owns HTTP routing, JSON/error helpers, and the initial read-only endpoints
+- `packages/orchd-runtime/cmd/orchd` now opens the shared SQLite database, applies migrations, and serves a `chi` router with graceful shutdown handling
+- `packages/orchd-runtime/internal/query` now exposes run list/detail, run tasks, blocked-task, and thread-detail read models for the web surface
+- `packages/orchd-runtime/internal/app` now provides a thin web-service boundary over the new read service
+- `packages/orchd-runtime/internal/httpapi` now owns HTTP routing, JSON/error helpers, and the initial read-only endpoints
 - `api/openapi.yaml` now documents the implemented read-only endpoints and response shapes
 - `api/events.md` now captures the planned SSE contract for the next realtime slice
 - `go test ./...` covers the new HTTP slice, and `pnpm run web:build` succeeds for the frontend workspace
@@ -494,16 +489,16 @@ Completed so far:
 - the repository-level migration design is captured in `docs/skill-workspace-monorepo.md`
 - the target package split now distinguishes `coord-core`, runtime packages, skill bundles, and support apps
 - the migration plan now defines phased extraction for `coord-core`, `inbox-runtime`, `orch-runtime`, `orchd-runtime`, and `repo-memory-runtime`
-- root `go.work` now includes the current root module plus the initial runtime package module roots under `packages/`
-- `pnpm-workspace.yaml` now includes `packages/*`, and root `package.json` now exposes monorepo bundle planning and validation scripts
+- root `go.work` now includes the package-owned runtime module roots under `packages/`
+- `pnpm-workspace.yaml` now includes `packages/*`, and root `package.json` now exposes monorepo bundle planning, validation, and Go package test scripts
 - initial module roots now exist for `packages/coord-core`, `packages/inbox-runtime`, `packages/orch-runtime`, `packages/orchd-runtime`, and `packages/repo-memory-runtime`
 - `scripts/skill-bundles.json` now records the first package-oriented skill bundle metadata, including the future `repo-memory` runtime mapping
 - `scripts/package_skill_runtimes.sh` now provides a declarative bundle plan/validate scaffold that targets package paths rather than hardcoded root runtime paths
 - `packages/coord-core/db` now owns the shared SQLite open, pragmas, migrations, and coordination schema files
 - `packages/coord-core/protocol` now owns the shared JSON and CLI error helpers used across the coordination stack
 - `packages/coord-core/store` now owns the shared inbox, orch, and council store logic plus its coordination-domain tests
-- root coordination runtimes under `cmd/`, `internal/cli/`, `internal/app/`, `internal/httpapi/`, and `internal/query/` now import `coord-core` instead of depending on root `internal/db`, `internal/store`, or root `internal/protocol`
-- `go test ./...` still passes for the root module, and `go test ./...` passes inside `packages/coord-core`
+- package-owned coordination runtimes now depend on `packages/coord-core` instead of root `internal/db`, `internal/store`, or root `internal/protocol`
+- package-oriented Go validation now runs through the workspace runtime packages, and `packages/coord-core` passes `go test ./...`
 - `packages/inbox-runtime/cmd/inbox` plus `packages/inbox-runtime/internal/cli/inbox` now provide a package-owned inbox runtime and pass `go test ./...`
 - `packages/orch-runtime/cmd/orch` plus `packages/orch-runtime/internal/cli/orch` now provide a package-owned orch runtime and pass `go test ./...`
 - `scripts/skill-bundles.json` now marks `inbox`, `orch`, and `council-review` as ready package-backed bundles
@@ -513,8 +508,8 @@ Completed so far:
 - `packages/repo-memory-runtime/cmd/briefdb` plus its package-local `internal/brief` and `internal/store` now provide a package-owned repo-memory runtime and pass `go test ./...`
 - `skills/repo-memory/` now exists with `SKILL.md`, `agents/openai.yaml`, and a bundled `assets/briefdb` binary produced by the declarative packaging flow
 - `docs/tests/repo-memory-skill/` now exists with a README plus an initial forward-test case covering search-before-add and durable entry retrieval through the bundled skill
-- root `cmd/inbox`, `cmd/orch`, and `cmd/orchd` now act as compatibility shims that invoke package-owned runtimes instead of root-owned runtime implementations
 - legacy root runtime implementation directories under `internal/` have been removed now that package-owned runtimes and package-backed skill bundles are in place
+- legacy root `cmd/` compatibility shims have also been removed, so package-owned runtimes under `packages/*/cmd/*` are now the only maintained Go entrypoints
 
 Remaining: