Rename journal, steps and recovery: rename.json (RENAME_JOURNAL_FILE) records each step, documents are written whole and committed alone (FlowStore.replace_documents, identity.write_documents) and rolled back before the journal goes forward; history per run scoped by flow id, alert ledger, alerts.json, state and queue steps idempotent and checkpointed; audit row once per op; recover_documents before assign_ids and recover_runtime before the engine is built, retried until done; repeated requests get the stored result, stale ones 409; plan refuses rename_in_progress; alerts.json written atomically; completeness scanner in the test utilities

docs/reference/configuration.md

@@ -21,6 +21,7 @@ For CLI installations, select storage with `--data-dir`, `FLUKSIO_HOME` or
 | `FLOWS_DIR` | `$DATA_DIR/flows` | flow git repository |
 | `SECRETS_FILE` | `$DATA_DIR/secrets.enc` | encrypted credentials |
 | `ALERTS_FILE` | `$DATA_DIR/alerts.json` | alert channels and rules |
+| `RENAME_JOURNAL_FILE` | `$DATA_DIR/rename.json` | the last key rename, step by step, so a restart finishes or undoes one a crash interrupted |
 | `WEBPUSH_FILE` | `$DATA_DIR/webpush.json` | push keys and browser subscriptions |
 | `PROVISIONERS_FILE` | `$DATA_DIR/provisioners.json` | optional worker provisioning configuration |
 | `DEVICES_FILE` | `$DATA_DIR/devices.json` | device credential nonces, outside the flow repository |