Complete action runtime rewrite

README.md

@@ -29,11 +29,11 @@ flow dotfiles repos push [--repo NAME] [--dry-run]
 
 # Packages
 flow packages install [NAMES...] [--profile NAME] [--dry-run]
-flow packages remove NAMES...
+flow packages remove NAMES... [--dry-run]
 flow packages list [--all]
 
 # Bootstrap
-flow setup run PROFILE [--dry-run]  # run a full bootstrap profile
+flow setup run [PROFILE|--profile NAME] [--dry-run] [--var KEY=VALUE]
 flow setup show PROFILE             # preview profile steps
 flow setup list
 
@@ -71,8 +71,9 @@ flow --no-color                    # disable colored output
 - `dotfiles` -> `dot`
 - `dotfiles repos` -> `dotfiles repo`
 - `packages` -> `package`, `pkg`
-- `projects` -> `project`, `sync` (with `--fetch` default)
-- `setup` -> `bootstrap`
+- `projects` -> `project`; `flow sync` -> `flow projects check --fetch`
+- `setup` -> `bootstrap`, `provision`
+- `remote enter` -> `enter`
 - `dev attach` -> `dev connect`
 - `dev remove` -> `dev rm`
 
@@ -181,9 +182,15 @@ profiles:
 
 ## Architecture
 
-Four layers: **core** (runtime primitives, config, errors) -> **domain** (pure functions, frozen dataclasses) -> **services** (I/O orchestration) -> **commands** (thin CLI adapters).
+Flow uses an action-centered runtime:
 
-Core primitives (`SystemRuntime`): `CommandRunner`, `FileSystem`, `GitClient`, `TmuxClient`, `ContainerRuntime`.
+- **cli** parses Typer command arguments and calls app use-cases.
+- **app** resolves config/state, builds `ActionPlan` objects for executor-managed work, and keeps only explicit interactive boundaries outside the executor.
+- **domain** modules keep planning and resolution logic pure with frozen dataclasses.
+- **actions** are the execution boundary: `DomainAction` records domain intent, expansion converts it to `PrimitiveAction`, and `ActionExecutor` handles dry-run rendering, audit logging, rollback, and dispatch.
+- **adapters** provide runtime primitives through `SystemRuntime`: `CommandRunner`, `FileSystem`, `GitClient`, `TmuxClient`, `ContainerRuntime`, download, and archive adapters.
+
+Action audit records are appended to `actions.jsonl` under the relevant flow state directory.
 
 ## Security
 
@@ -195,5 +202,6 @@ Core primitives (`SystemRuntime`): `CommandRunner`, `FileSystem`, `GitClient`, `
 
 ```bash
 make deps                              # create .venv + install deps
-.venv/bin/python -m pytest tests/ -v   # run tests
+.venv/bin/python -m pytest tests/ -v --ignore=tests/e2e
+FLOW_RUN_E2E=1 .venv/bin/python -m pytest tests/e2e/ -v  # requires docker or podman
 ```