@kontextmind/kxm 0.7.52 → 0.7.53

package/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "kxm",
       "source": "./plugins/kxm",
       "description": "Durable workflows, peer agents, and kxm tui",
-      "version": "0.7.52",
+      "version": "0.7.53",
       "category": "development",
       "tags": ["kxm", "multi-agent", "workflows", "mcp"]
     }

package/CHANGELOG.md

@@ -35,6 +35,23 @@ All notable user-facing changes are documented here. The project follows [Semant
 
 ### Changed
 
+- **No schema migration lanes, no legacy stamp tolerance (single-operator tool).** Stepwise
+  schema migration lanes are removed from the hub store and the per-project event store, and
+  the external-effects store no longer runs an in-place `ALTER TABLE ... ADD COLUMN` whose
+  failure it swallowed (that column is declared in the fresh schema, so the lane could only
+  ever fire on an older store; the store has no production caller yet, so this closes the
+  lane rather than fixing a live upgrade).
+  A database stamped behind this build now fails closed with `runtime_schema_outdated` and
+  a message that says to delete the state file or re-run `kxm init` — and the refusal never
+  advances `user_version`, so the store stays identifiably old (WAL sidecars may still be
+  checkpointed by opening the file, so the whole state set remains the backup unit — see
+  [`docs/operations.md`](docs/operations.md)). Relabelling a store it refused to open would
+  only hide the problem until a query hit a missing column. The coordinator fingerprint no
+  longer recomputes over stored authority to forgive rows written before set canonicalisation:
+  a stale coordinator is re-bound. Intake tests go from 23 to 22; the two forced-race tests
+  now win against ordinary current-format rows, and one refusal test asserts the untouched
+  stamp.
+
 - **`kxm hub bind` no longer stores a remote URL it cannot authenticate to.** A remote
   binding is a deliberate network decision, so it is now refused when no credential resolves
   (explicit `KXM_AUTH_TOKEN`, or the persisted hub record's admin or project tokens) —

package/docs/contracts/migration.md

@@ -16,7 +16,7 @@ Presence of KXM documents does not activate new behavior.
 | Long-lived manually started Pi workers | Runtime-managed run-scoped sessions | Existing worker mode remains available during compatibility release |
 | Shared/off workflow Pi history | `{run, agent, instance, scopeEpoch}` sessions | Never import shared conversation history into a narrower run scope |
 | Hub-owned workflow state | Home Runtime event log with hub projection | Import completed history as legacy records; active-run cutover requires quiescence |
-| SQLite schema v3 `kxm.db` | Runtime registry, per-project event stores, hub registry/project stores | Copy through versioned migration; never mutate the only database in place |
+| SQLite schema v3 `kxm.db` | Runtime registry, per-project event stores, hub registry/project stores | **No in-place schema migration.** A store stamped behind the current build fails closed with `runtime_schema_outdated` and the refusal never advances `user_version` (opening the file may still checkpoint WAL sidecars, so the whole state set is the backup unit); re-init instead. Stepwise lanes were removed 2026-09-20 under the single-operator decision from the hub store, the per-project event store, and the external-effects `ALTER TABLE` add-column; the Runtime registry never carried a stepwise lane (see [implementation-plan.md](../../plans/implementation-plan.md) → Decided) |
 | Full peer message bodies in hub DB | Summary-first sync events | Existing bodies remain protected legacy data and are not re-emitted automatically |
 | Project tokens/manual environment auth | Runtime enrollment and scoped credentials | Preserve current mode until enrollment is confirmed; never copy tokens into Git |
 | `.kxm/config/env.example` | Built-in defaults plus optional scoped env YAML | Import only explicit portable differences; secrets become references |
@@ -26,12 +26,27 @@ Presence of KXM documents does not activate new behavior.
 
 ## Compatibility releases and activation
 
+> **Scope note (2026-09-20).** This matrix documents the Mesh/v0.5 → KXM cutover. KXM has
+> one operator and no external installs, so **schema migration and old-state tolerance are
+> out of scope** and the lanes that existed are gone: stores refuse an older stamp rather
+> than upgrading, the external-effects store no longer adds a column in place, and the
+> coordinator fingerprint no longer recomputes to forgive pre-canonicalisation rows. What
+> remains here describes the **project/content** cutover, which the follow-up cut removes
+> along with `kxm migrate`. Nothing here promises that the runtime will read an old
+> database.
+
 Local Runtime support may ship publicly before hub KXM, but it remains beside
 existing hub contracts and stores. Old command names are not preserved. A project
 activates `kxm.*.v1` only by an explicit successful `kxm init`/migration receipt;
 file presence alone never activates it. Legacy hub runs continue on the legacy
 engine.
 
+> **Superseded (2026-09-20).** The single-operator decision removes legacy readers
+> **without** a compatibility release, so this transition-release list is no longer a plan of
+> record. It stays here to name what was given up: no dual-read window, no `mesh_*` shim, and
+> no period where legacy JSON stays loadable while KXM writes YAML. Anything still holding
+> legacy state is refused rather than served from both shapes.
+
 When Phase 8 activates hub KXM, at least one hub transition release provides:
 
 - current `mesh_*` peer tools;
@@ -58,6 +73,12 @@ kxm migrate verify
 
 `kxm init` invokes the planning flow when it detects legacy state.
 
+> **Superseded (2026-09-20).** The single-operator decision removed every schema
+> migration lane, so "database/WAL migration … remain later-phase work" below is
+> no longer the plan: there will be none. The `kxm migrate` commands described on
+> this page are deleted in the follow-up cut, and a tree still holding legacy JSON
+> fails closed at load instead of being converted.
+
 **Implementation status (Phase 1 slice):** the commands above are implemented
 for **configuration migration only** — legacy `agents.json`, `gates.json`, and
 workflow-definition JSON under `.kxm/config/`. Database/WAL migration,
@@ -120,6 +141,18 @@ installed resource bytes against the receipt. It performs no writes.
 
 ## Database migration
 
+> **Superseded in part (2026-09-20).** What the code guarantees today is narrower than the
+> checklist below and belongs to two different moments:
+>
+> - **Opening a store** verifies `user_version`, refuses a newer-than-known version, and
+>   enables WAL. That is implemented.
+> - **Backing a store up** is where checkpointing, `-wal` handling, integrity verification,
+>   and hash recording happen — see the whole-state-set recipe in
+>   [`docs/operations.md`](../operations.md). Those are **not** properties of an ordinary open.
+>
+> The legacy-record import paragraphs describe a cutover that will not happen: this build
+> migrates no database, and an older stamp is refused outright.
+
 Before any database operation:
 
 - verify SQLite `user_version`;
@@ -211,6 +244,11 @@ workflow history.
 
 ## Removal gate
 
+> **Superseded (2026-09-20).** The operator decided removal happens **without** a
+> compatibility release, so the list below no longer gates removal — it is kept only
+> to record why the gate existed. Legacy readers are being deleted now, and old names
+> fail closed by brake rather than alias.
+
 Legacy readers and command aliases are removed only after:
 
 - at least one compatibility release;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kontextmind/kxm",
-  "version": "0.7.52",
+  "version": "0.7.53",
   "description": "KXM local-first multi-agent orchestration and operator dashboard",
   "type": "module",
   "author": "KontextMind",

package/plugins/kxm/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "kxm",
   "displayName": "KXM",
-  "version": "0.7.52",
+  "version": "0.7.53",
   "description": "Headless multi-agent orchestration, durable workflows, and a live operator dashboard for Pi and Claude Code",
   "author": {
     "name": "KontextMind",

package/plugins/kxm/dist/cli.js

@@ -23767,20 +23767,11 @@ function openDatabase(file, description, spec) {
       database.exec(spec.schema);
       database.exec(`PRAGMA user_version = ${spec.version}`);
     } else if (version < spec.version) {
-      let currentVersion = version;
-      while (currentVersion < spec.version) {
-        const step = spec.migrations?.find((m2) => m2.fromVersion === currentVersion);
-        if (!step) {
-          throw databaseError(
-            "runtime_schema_outdated",
-            file,
-            `${description} schema version ${version} is older than ${spec.version}; no migration lane, backup and restore remain E6`
-          );
-        }
-        step.migrate(database);
-        currentVersion = step.toVersion;
-        database.exec(`PRAGMA user_version = ${currentVersion}`);
-      }
+      throw databaseError(
+        "runtime_schema_outdated",
+        file,
+        `${description} is schema version ${version}; this build requires ${spec.version}. Delete the state file (or re-run \`kxm init\`) to start fresh \u2014 upgrading old state in place is deliberately unsupported`
+      );
     }
     if (spec.tables) {
       verifyExpectedTables(database, file, description, spec.tables);

package/plugins/kxm/dist/mcp-server.js

@@ -17121,7 +17121,7 @@ async function deliverInboxNotification(messageId, delivered, notify) {
 }
 
 // plugins/kxm/src/mcp-server.ts
-var VERSION = "0.7.52";
+var VERSION = "0.7.53";
 var inbox = /* @__PURE__ */ new Map();
 var notifiedInbox = /* @__PURE__ */ new Set();
 var meshClient;

package/plugins/kxm/dist/runtime-supervisor.js

@@ -17612,20 +17612,11 @@ function openDatabase(file, description, spec) {
       database.exec(spec.schema);
       database.exec(`PRAGMA user_version = ${spec.version}`);
     } else if (version < spec.version) {
-      let currentVersion = version;
-      while (currentVersion < spec.version) {
-        const step = spec.migrations?.find((m) => m.fromVersion === currentVersion);
-        if (!step) {
-          throw databaseError(
-            "runtime_schema_outdated",
-            file,
-            `${description} schema version ${version} is older than ${spec.version}; no migration lane, backup and restore remain E6`
-          );
-        }
-        step.migrate(database);
-        currentVersion = step.toVersion;
-        database.exec(`PRAGMA user_version = ${currentVersion}`);
-      }
+      throw databaseError(
+        "runtime_schema_outdated",
+        file,
+        `${description} is schema version ${version}; this build requires ${spec.version}. Delete the state file (or re-run \`kxm init\`) to start fresh \u2014 upgrading old state in place is deliberately unsupported`
+      );
     }
     if (spec.tables) {
       verifyExpectedTables(database, file, description, spec.tables);
@@ -18270,71 +18261,6 @@ CREATE TABLE project_controls (
   record TEXT NOT NULL
 ) STRICT;
 `;
-var COORDINATOR_INTAKE_DDL = `
-CREATE TABLE IF NOT EXISTS coordinators (
-  coordinator_id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL,
-  role TEXT NOT NULL,
-  channel TEXT NOT NULL,
-  ceiling_hash TEXT NOT NULL,
-  config_revision TEXT NOT NULL,
-  bound_at TEXT NOT NULL,
-  schema TEXT NOT NULL,
-  record TEXT NOT NULL
-) STRICT;
-CREATE UNIQUE INDEX IF NOT EXISTS coordinators_slot ON coordinators(project_id, role, channel);
-CREATE TABLE IF NOT EXISTS intake_messages (
-  message_id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL,
-  coordinator_id TEXT NOT NULL,
-  idempotency_key TEXT NOT NULL,
-  content_hash TEXT NOT NULL,
-  received_at TEXT NOT NULL,
-  dispatch_state TEXT NOT NULL CHECK (dispatch_state IN ('ready','held_paused','admitted','refused')),
-  schema TEXT NOT NULL,
-  record TEXT NOT NULL
-) STRICT;
-CREATE UNIQUE INDEX IF NOT EXISTS intake_idempotency ON intake_messages(project_id, coordinator_id, idempotency_key);
-CREATE INDEX IF NOT EXISTS intake_dispatch ON intake_messages(project_id, dispatch_state, received_at, message_id);
-CREATE TABLE IF NOT EXISTS project_controls (
-  project_id TEXT PRIMARY KEY,
-  paused INTEGER NOT NULL CHECK (paused IN (0, 1)),
-  reason TEXT,
-  updated_at TEXT NOT NULL,
-  actor TEXT NOT NULL,
-  schema TEXT NOT NULL,
-  record TEXT NOT NULL
-) STRICT;
-`;
-var DRIVE_RECEIPTS_DDL = `
-CREATE TABLE IF NOT EXISTS drive_receipts (
-  drive_id TEXT PRIMARY KEY,
-  run_id TEXT NOT NULL,
-  project_id TEXT NOT NULL,
-  opened_sequence INTEGER NOT NULL,
-  last_sequence INTEGER NOT NULL,
-  closed_at TEXT NOT NULL,
-  schema TEXT NOT NULL,
-  receipt TEXT NOT NULL
-) STRICT;
-CREATE INDEX IF NOT EXISTS drive_receipts_run ON drive_receipts(run_id);
-`;
-var EVENT_STORE_MIGRATIONS = [
-  {
-    fromVersion: 3,
-    toVersion: 4,
-    migrate(database) {
-      database.exec(DRIVE_RECEIPTS_DDL);
-    }
-  },
-  {
-    fromVersion: 4,
-    toVersion: 5,
-    migrate(database) {
-      database.exec(COORDINATOR_INTAKE_DDL);
-    }
-  }
-];
 var KxmRunEventStore = class {
   path;
   database;
@@ -18343,8 +18269,7 @@ var KxmRunEventStore = class {
     this.database = openDatabase(this.path, "run event store", {
       schema: EVENT_STORE_SCHEMA,
       version: KXM_EVENT_STORE_SCHEMA_VERSION,
-      tables: EVENT_STORE_TABLES,
-      migrations: EVENT_STORE_MIGRATIONS
+      tables: EVENT_STORE_TABLES
     });
   }
   close() {

package/plugins/kxm/dist/runtime.js

@@ -17783,20 +17783,11 @@ function openDatabase(file, description, spec) {
       database.exec(spec.schema);
       database.exec(`PRAGMA user_version = ${spec.version}`);
     } else if (version < spec.version) {
-      let currentVersion = version;
-      while (currentVersion < spec.version) {
-        const step = spec.migrations?.find((m) => m.fromVersion === currentVersion);
-        if (!step) {
-          throw databaseError(
-            "runtime_schema_outdated",
-            file,
-            `${description} schema version ${version} is older than ${spec.version}; no migration lane, backup and restore remain E6`
-          );
-        }
-        step.migrate(database);
-        currentVersion = step.toVersion;
-        database.exec(`PRAGMA user_version = ${currentVersion}`);
-      }
+      throw databaseError(
+        "runtime_schema_outdated",
+        file,
+        `${description} is schema version ${version}; this build requires ${spec.version}. Delete the state file (or re-run \`kxm init\`) to start fresh \u2014 upgrading old state in place is deliberately unsupported`
+      );
     }
     if (spec.tables) {
       verifyExpectedTables(database, file, description, spec.tables);
@@ -18710,71 +18701,6 @@ CREATE TABLE project_controls (
   record TEXT NOT NULL
 ) STRICT;
 `;
-var COORDINATOR_INTAKE_DDL = `
-CREATE TABLE IF NOT EXISTS coordinators (
-  coordinator_id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL,
-  role TEXT NOT NULL,
-  channel TEXT NOT NULL,
-  ceiling_hash TEXT NOT NULL,
-  config_revision TEXT NOT NULL,
-  bound_at TEXT NOT NULL,
-  schema TEXT NOT NULL,
-  record TEXT NOT NULL
-) STRICT;
-CREATE UNIQUE INDEX IF NOT EXISTS coordinators_slot ON coordinators(project_id, role, channel);
-CREATE TABLE IF NOT EXISTS intake_messages (
-  message_id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL,
-  coordinator_id TEXT NOT NULL,
-  idempotency_key TEXT NOT NULL,
-  content_hash TEXT NOT NULL,
-  received_at TEXT NOT NULL,
-  dispatch_state TEXT NOT NULL CHECK (dispatch_state IN ('ready','held_paused','admitted','refused')),
-  schema TEXT NOT NULL,
-  record TEXT NOT NULL
-) STRICT;
-CREATE UNIQUE INDEX IF NOT EXISTS intake_idempotency ON intake_messages(project_id, coordinator_id, idempotency_key);
-CREATE INDEX IF NOT EXISTS intake_dispatch ON intake_messages(project_id, dispatch_state, received_at, message_id);
-CREATE TABLE IF NOT EXISTS project_controls (
-  project_id TEXT PRIMARY KEY,
-  paused INTEGER NOT NULL CHECK (paused IN (0, 1)),
-  reason TEXT,
-  updated_at TEXT NOT NULL,
-  actor TEXT NOT NULL,
-  schema TEXT NOT NULL,
-  record TEXT NOT NULL
-) STRICT;
-`;
-var DRIVE_RECEIPTS_DDL = `
-CREATE TABLE IF NOT EXISTS drive_receipts (
-  drive_id TEXT PRIMARY KEY,
-  run_id TEXT NOT NULL,
-  project_id TEXT NOT NULL,
-  opened_sequence INTEGER NOT NULL,
-  last_sequence INTEGER NOT NULL,
-  closed_at TEXT NOT NULL,
-  schema TEXT NOT NULL,
-  receipt TEXT NOT NULL
-) STRICT;
-CREATE INDEX IF NOT EXISTS drive_receipts_run ON drive_receipts(run_id);
-`;
-var EVENT_STORE_MIGRATIONS = [
-  {
-    fromVersion: 3,
-    toVersion: 4,
-    migrate(database) {
-      database.exec(DRIVE_RECEIPTS_DDL);
-    }
-  },
-  {
-    fromVersion: 4,
-    toVersion: 5,
-    migrate(database) {
-      database.exec(COORDINATOR_INTAKE_DDL);
-    }
-  }
-];
 var KxmRunEventStore = class {
   path;
   database;
@@ -18783,8 +18709,7 @@ var KxmRunEventStore = class {
     this.database = openDatabase(this.path, "run event store", {
       schema: EVENT_STORE_SCHEMA,
       version: KXM_EVENT_STORE_SCHEMA_VERSION,
-      tables: EVENT_STORE_TABLES,
-      migrations: EVENT_STORE_MIGRATIONS
+      tables: EVENT_STORE_TABLES
     });
   }
   close() {

package/plugins/kxm/dist/server.js

@@ -11504,20 +11504,11 @@ function openDatabase(file, description, spec) {
       database.exec(spec.schema);
       database.exec(`PRAGMA user_version = ${spec.version}`);
     } else if (version < spec.version) {
-      let currentVersion = version;
-      while (currentVersion < spec.version) {
-        const step = spec.migrations?.find((m) => m.fromVersion === currentVersion);
-        if (!step) {
-          throw databaseError(
-            "runtime_schema_outdated",
-            file,
-            `${description} schema version ${version} is older than ${spec.version}; no migration lane, backup and restore remain E6`
-          );
-        }
-        step.migrate(database);
-        currentVersion = step.toVersion;
-        database.exec(`PRAGMA user_version = ${currentVersion}`);
-      }
+      throw databaseError(
+        "runtime_schema_outdated",
+        file,
+        `${description} is schema version ${version}; this build requires ${spec.version}. Delete the state file (or re-run \`kxm init\`) to start fresh \u2014 upgrading old state in place is deliberately unsupported`
+      );
     }
     if (spec.tables) {
       verifyExpectedTables(database, file, description, spec.tables);
@@ -11683,100 +11674,10 @@ var HUB_STORE_SCHEMA_V3 = `
   ) STRICT;
   CREATE INDEX IF NOT EXISTS context_items_project ON context_items(project);
 `;
-var HUB_STORE_MIGRATIONS = Object.freeze([
-  {
-    fromVersion: 1,
-    toVersion: 2,
-    migrate: (db) => {
-      db.exec(`
-        CREATE TABLE IF NOT EXISTS agents (
-          id TEXT PRIMARY KEY,
-          record TEXT NOT NULL
-        ) STRICT;
-        CREATE TABLE IF NOT EXISTS messages (
-          id TEXT PRIMARY KEY,
-          record TEXT NOT NULL
-        ) STRICT;
-        CREATE TABLE IF NOT EXISTS workflow_runs (
-          id TEXT PRIMARY KEY,
-          definition_id TEXT NOT NULL,
-          delivery_id TEXT NOT NULL,
-          record TEXT NOT NULL,
-          UNIQUE(definition_id, delivery_id)
-        ) STRICT;
-        CREATE TABLE IF NOT EXISTS workflow_journal (
-          id TEXT PRIMARY KEY,
-          run_id TEXT NOT NULL,
-          category TEXT NOT NULL,
-          area TEXT NOT NULL,
-          record TEXT NOT NULL
-        ) STRICT;
-        CREATE INDEX IF NOT EXISTS workflow_journal_run_id ON workflow_journal(run_id);
-      `);
-    }
-  },
-  {
-    fromVersion: 2,
-    toVersion: 3,
-    migrate: (db) => {
-      db.exec(`
-        CREATE TABLE IF NOT EXISTS agents (
-          id TEXT PRIMARY KEY,
-          record TEXT NOT NULL
-        ) STRICT;
-        CREATE TABLE IF NOT EXISTS messages (
-          id TEXT PRIMARY KEY,
-          record TEXT NOT NULL
-        ) STRICT;
-        CREATE TABLE IF NOT EXISTS workflow_runs (
-          id TEXT PRIMARY KEY,
-          definition_id TEXT NOT NULL,
-          delivery_id TEXT NOT NULL,
-          record TEXT NOT NULL,
-          UNIQUE(definition_id, delivery_id)
-        ) STRICT;
-        CREATE TABLE IF NOT EXISTS workflow_journal (
-          id TEXT PRIMARY KEY,
-          run_id TEXT NOT NULL,
-          category TEXT NOT NULL,
-          area TEXT NOT NULL,
-          record TEXT NOT NULL
-        ) STRICT;
-        CREATE INDEX IF NOT EXISTS workflow_journal_run_id ON workflow_journal(run_id);
-        CREATE TABLE IF NOT EXISTS context_items (
-          id TEXT PRIMARY KEY,
-          project TEXT NOT NULL,
-          kind TEXT NOT NULL,
-          record TEXT NOT NULL
-        ) STRICT;
-        CREATE INDEX IF NOT EXISTS context_items_project ON context_items(project);
-        CREATE UNIQUE INDEX IF NOT EXISTS messages_from_idempotency
-        ON messages(
-          json_extract(record, '$.from'),
-          json_extract(record, '$.idempotencyKey')
-        ) WHERE json_extract(record, '$.idempotencyKey') IS NOT NULL;
-        CREATE INDEX IF NOT EXISTS messages_to_seq
-        ON messages(
-          json_extract(record, '$.to'),
-          COALESCE(json_extract(record, '$.seq'), 0)
-        );
-        CREATE TABLE IF NOT EXISTS consumer_cursors (
-          agent_id TEXT PRIMARY KEY,
-          cursor INTEGER NOT NULL
-        ) STRICT;
-        CREATE TABLE IF NOT EXISTS agent_sequences (
-          agent_id TEXT PRIMARY KEY,
-          next_seq INTEGER NOT NULL
-        ) STRICT;
-      `);
-    }
-  }
-]);
 var HUB_STORE_SCHEMA_SPEC = Object.freeze({
   schema: HUB_STORE_SCHEMA_V3,
   version: HUB_STORE_SCHEMA_VERSION,
-  tables: HUB_STORE_TABLES,
-  migrations: HUB_STORE_MIGRATIONS
+  tables: HUB_STORE_TABLES
 });
 var MessageMap = class extends Map {
   store;

package/plugins/kxm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-plugin",
-  "version": "0.7.52",
+  "version": "0.7.53",
   "private": true,
   "type": "module",
   "engines": {

package/plugins/kxm/src/database.ts

@@ -14,17 +14,10 @@ import { basename, dirname, join, resolve } from "node:path";
 import { DatabaseSync } from "./sqlite.ts";
 import { KxmConfigError, type KxmConfigIssue } from "./project-config.ts";
 
-export interface DatabaseMigrationStep {
-  fromVersion: number;
-  toVersion: number;
-  migrate: (database: DatabaseSync) => void;
-}
-
 export interface DatabaseSchemaSpec {
   schema: string;
   version: number;
   tables?: Readonly<Record<string, readonly string[]>>;
-  migrations?: readonly DatabaseMigrationStep[];
   timeoutMs?: number;
 }
 
@@ -179,20 +172,15 @@ export function openDatabase(file: string, description: string, spec: DatabaseSc
       database.exec(spec.schema);
       database.exec(`PRAGMA user_version = ${spec.version}`);
     } else if (version < spec.version) {
-      let currentVersion = version;
-      while (currentVersion < spec.version) {
-        const step = spec.migrations?.find((m) => m.fromVersion === currentVersion);
-        if (!step) {
-          throw databaseError(
-            "runtime_schema_outdated",
-            file,
-            `${description} schema version ${version} is older than ${spec.version}; no migration lane, backup and restore remain E6`,
-          );
-        }
-        step.migrate(database);
-        currentVersion = step.toVersion;
-        database.exec(`PRAGMA user_version = ${currentVersion}`);
-      }
+      // No migration lanes. This is a single-operator tool: an older database is
+      // re-initialised, not upgraded in place, and the code never carries two schema
+      // shapes at once. Silently accepting an older file would mean every query has to
+      // work against shapes it no longer tests.
+      throw databaseError(
+        "runtime_schema_outdated",
+        file,
+        `${description} is schema version ${version}; this build requires ${spec.version}. Delete the state file (or re-run \`kxm init\`) to start fresh — upgrading old state in place is deliberately unsupported`,
+      );
     }
 
     if (spec.tables) {

package/plugins/kxm/src/external-effects.ts

@@ -16,6 +16,7 @@ import {
   lstatSync,
 } from "node:fs";
 import { dirname, join, resolve } from "node:path";
+import { openDatabase } from "./database.ts";
 import { spawnSync } from "node:child_process";
 
 export const EXTERNAL_EFFECT_SCHEMA = "kxm.external-effect-receipt.v1" as const;
@@ -114,6 +115,33 @@ export function computeEffectKey(
   return `eff_${createHash("sha256").update(raw).digest("hex").slice(0, 16)}`;
 }
 
+const EXTERNAL_EFFECTS_SCHEMA_VERSION = 1;
+
+const EXTERNAL_EFFECTS_DDL = `
+CREATE TABLE IF NOT EXISTS external_effects (
+  effect_key TEXT PRIMARY KEY,
+  run_id TEXT NOT NULL,
+  step_id TEXT NOT NULL,
+  attempt_id TEXT NOT NULL,
+  action_kind TEXT NOT NULL,
+  target_ref TEXT NOT NULL,
+  status TEXT NOT NULL,
+  payload_hash TEXT NOT NULL,
+  receipt_payload TEXT NOT NULL,
+  executed_at TEXT NOT NULL,
+  last_heartbeat_at TEXT,
+  completed_at TEXT
+);
+CREATE INDEX IF NOT EXISTS idx_ext_effects_run ON external_effects(run_id);
+`;
+
+const EXTERNAL_EFFECTS_SHAPE = {
+  external_effects: [
+    "effect_key", "run_id", "step_id", "attempt_id", "action_kind", "target_ref",
+    "status", "payload_hash", "receipt_payload", "executed_at", "last_heartbeat_at", "completed_at",
+  ],
+} as const;
+
 export class ExternalEffectsLedger {
   private db: DatabaseSync;
 
@@ -121,33 +149,15 @@ export class ExternalEffectsLedger {
     if (dbPath !== ":memory:") {
       mkdirSync(dirname(dbPath), { recursive: true });
     }
-    this.db = new DatabaseSync(dbPath);
-    this.initSchema();
-  }
-
-  private initSchema(): void {
-    this.db.exec(`
-      CREATE TABLE IF NOT EXISTS external_effects (
-        effect_key TEXT PRIMARY KEY,
-        run_id TEXT NOT NULL,
-        step_id TEXT NOT NULL,
-        attempt_id TEXT NOT NULL,
-        action_kind TEXT NOT NULL,
-        target_ref TEXT NOT NULL,
-        status TEXT NOT NULL,
-        payload_hash TEXT NOT NULL,
-        receipt_payload TEXT NOT NULL,
-        executed_at TEXT NOT NULL,
-        last_heartbeat_at TEXT,
-        completed_at TEXT
-      );
-      CREATE INDEX IF NOT EXISTS idx_ext_effects_run ON external_effects(run_id);
-    `);
-    try {
-      this.db.exec(`ALTER TABLE external_effects ADD COLUMN last_heartbeat_at TEXT;`);
-    } catch {
-      // Column already present in schema
-    }
+    // Goes through the shared opener, not a bare `new DatabaseSync`: that is what gives this
+    // store the same contract as every other one — path checks, WAL, the `user_version` gate
+    // that refuses an older stamp outright, and the column-shape check that turns a missing
+    // column into `runtime_schema_shape_invalid` here instead of a bare SQL error on first use.
+    this.db = openDatabase(dbPath, "external effects ledger", {
+      schema: EXTERNAL_EFFECTS_DDL,
+      version: EXTERNAL_EFFECTS_SCHEMA_VERSION,
+      tables: EXTERNAL_EFFECTS_SHAPE,
+    });
   }
 
   /**

package/plugins/kxm/src/intake.ts

@@ -102,20 +102,15 @@ export function kxmCeilingHash(authority: KxmCoordinatorAuthority): string {
 }
 
 /**
- * Does an already-stored coordinator express this ceiling?
+ * Does a stored coordinator already express the ceiling being requested?
  *
- * A row written before set normalisation existed carries a fingerprint that
- * `kxmCeilingHash` no longer reproduces, so comparing the stored hash alone is
- * not enough: recompute over the authority it kept. Every path that asks this
- * question — the initial slot lookup and **both** lost-write read-backs — must
- * go through here, or an upgrade makes the same row equivalent on lookup and a
- * `coordinator_write_lost` conflict on the race path.
- *
- * A legacy row is returned as stored, so its `ceilingHash` is historical: a
- * caller must not assume every persisted hash uses today's algorithm.
+ * Stored fingerprint only. Recomputing the fingerprint over the stored authority — the
+ * previous behaviour — existed to tolerate rows written before set canonicalisation, and
+ * that compatibility is gone with the single-operator decision: no migration lanes, no
+ * second schema or hash shape carried forward. A stale row is re-bound, not forgiven.
  */
 function ceilingsMatch(stored: KxmCoordinatorRecord, ceilingHash: string): boolean {
-  return stored.ceilingHash === ceilingHash || kxmCeilingHash(stored.authority) === ceilingHash;
+  return stored.ceilingHash === ceilingHash;
 }
 
 function normalizeAuthority(authority: KxmCoordinatorAuthority): KxmCoordinatorAuthority {

package/plugins/kxm/src/mcp-server.ts

@@ -8,7 +8,7 @@ import { AGENT_COMMANDS_MAP, enforceToolPolicy, getMcpTools, reconcileInbox } fr
 import { deliverInboxNotification } from "./inbox.ts";
 import type { HubEvent, MessageRecord } from "./protocol.ts";
 
-const VERSION = "0.7.52";
+const VERSION = "0.7.53";
 const inbox = new Map<string, MessageRecord>();
 const notifiedInbox = new Set<string>();
 let meshClient: HubClient | undefined;

package/plugins/kxm/src/runtime-store.ts

@@ -782,74 +782,6 @@ CREATE TABLE project_controls (
 ) STRICT;
 `;
 
-const COORDINATOR_INTAKE_DDL = `
-CREATE TABLE IF NOT EXISTS coordinators (
-  coordinator_id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL,
-  role TEXT NOT NULL,
-  channel TEXT NOT NULL,
-  ceiling_hash TEXT NOT NULL,
-  config_revision TEXT NOT NULL,
-  bound_at TEXT NOT NULL,
-  schema TEXT NOT NULL,
-  record TEXT NOT NULL
-) STRICT;
-CREATE UNIQUE INDEX IF NOT EXISTS coordinators_slot ON coordinators(project_id, role, channel);
-CREATE TABLE IF NOT EXISTS intake_messages (
-  message_id TEXT PRIMARY KEY,
-  project_id TEXT NOT NULL,
-  coordinator_id TEXT NOT NULL,
-  idempotency_key TEXT NOT NULL,
-  content_hash TEXT NOT NULL,
-  received_at TEXT NOT NULL,
-  dispatch_state TEXT NOT NULL CHECK (dispatch_state IN ('ready','held_paused','admitted','refused')),
-  schema TEXT NOT NULL,
-  record TEXT NOT NULL
-) STRICT;
-CREATE UNIQUE INDEX IF NOT EXISTS intake_idempotency ON intake_messages(project_id, coordinator_id, idempotency_key);
-CREATE INDEX IF NOT EXISTS intake_dispatch ON intake_messages(project_id, dispatch_state, received_at, message_id);
-CREATE TABLE IF NOT EXISTS project_controls (
-  project_id TEXT PRIMARY KEY,
-  paused INTEGER NOT NULL CHECK (paused IN (0, 1)),
-  reason TEXT,
-  updated_at TEXT NOT NULL,
-  actor TEXT NOT NULL,
-  schema TEXT NOT NULL,
-  record TEXT NOT NULL
-) STRICT;
-`;
-
-const DRIVE_RECEIPTS_DDL = `
-CREATE TABLE IF NOT EXISTS drive_receipts (
-  drive_id TEXT PRIMARY KEY,
-  run_id TEXT NOT NULL,
-  project_id TEXT NOT NULL,
-  opened_sequence INTEGER NOT NULL,
-  last_sequence INTEGER NOT NULL,
-  closed_at TEXT NOT NULL,
-  schema TEXT NOT NULL,
-  receipt TEXT NOT NULL
-) STRICT;
-CREATE INDEX IF NOT EXISTS drive_receipts_run ON drive_receipts(run_id);
-`;
-
-const EVENT_STORE_MIGRATIONS = [
-  {
-    fromVersion: 3,
-    toVersion: 4,
-    migrate(database: DatabaseSync): void {
-      database.exec(DRIVE_RECEIPTS_DDL);
-    },
-  },
-  {
-    fromVersion: 4,
-    toVersion: 5,
-    migrate(database: DatabaseSync): void {
-      database.exec(COORDINATOR_INTAKE_DDL);
-    },
-  },
-];
-
 /** One persisted coordinator identity (`kxm.coordinator.v1`). */
 export interface KxmCoordinatorRow {
   coordinatorId: string;
@@ -894,7 +826,6 @@ export class KxmRunEventStore {
       schema: EVENT_STORE_SCHEMA,
       version: KXM_EVENT_STORE_SCHEMA_VERSION,
       tables: EVENT_STORE_TABLES,
-      migrations: EVENT_STORE_MIGRATIONS,
     });
   }
 

package/plugins/kxm/src/store.ts

@@ -6,7 +6,6 @@ import type { WorkflowJournalEntry, WorkflowRun } from "./workflow.ts";
 import {
   openDatabase,
   withDatabaseTransaction,
-  type DatabaseMigrationStep,
   type DatabaseSchemaSpec,
 } from "./database.ts";
 
@@ -73,101 +72,10 @@ export const HUB_STORE_SCHEMA_V3 = `
   CREATE INDEX IF NOT EXISTS context_items_project ON context_items(project);
 `;
 
-export const HUB_STORE_MIGRATIONS: readonly DatabaseMigrationStep[] = Object.freeze([
-  {
-    fromVersion: 1,
-    toVersion: 2,
-    migrate: (db: DatabaseSync) => {
-      db.exec(`
-        CREATE TABLE IF NOT EXISTS agents (
-          id TEXT PRIMARY KEY,
-          record TEXT NOT NULL
-        ) STRICT;
-        CREATE TABLE IF NOT EXISTS messages (
-          id TEXT PRIMARY KEY,
-          record TEXT NOT NULL
-        ) STRICT;
-        CREATE TABLE IF NOT EXISTS workflow_runs (
-          id TEXT PRIMARY KEY,
-          definition_id TEXT NOT NULL,
-          delivery_id TEXT NOT NULL,
-          record TEXT NOT NULL,
-          UNIQUE(definition_id, delivery_id)
-        ) STRICT;
-        CREATE TABLE IF NOT EXISTS workflow_journal (
-          id TEXT PRIMARY KEY,
-          run_id TEXT NOT NULL,
-          category TEXT NOT NULL,
-          area TEXT NOT NULL,
-          record TEXT NOT NULL
-        ) STRICT;
-        CREATE INDEX IF NOT EXISTS workflow_journal_run_id ON workflow_journal(run_id);
-      `);
-    },
-  },
-  {
-    fromVersion: 2,
-    toVersion: 3,
-    migrate: (db: DatabaseSync) => {
-      db.exec(`
-        CREATE TABLE IF NOT EXISTS agents (
-          id TEXT PRIMARY KEY,
-          record TEXT NOT NULL
-        ) STRICT;
-        CREATE TABLE IF NOT EXISTS messages (
-          id TEXT PRIMARY KEY,
-          record TEXT NOT NULL
-        ) STRICT;
-        CREATE TABLE IF NOT EXISTS workflow_runs (
-          id TEXT PRIMARY KEY,
-          definition_id TEXT NOT NULL,
-          delivery_id TEXT NOT NULL,
-          record TEXT NOT NULL,
-          UNIQUE(definition_id, delivery_id)
-        ) STRICT;
-        CREATE TABLE IF NOT EXISTS workflow_journal (
-          id TEXT PRIMARY KEY,
-          run_id TEXT NOT NULL,
-          category TEXT NOT NULL,
-          area TEXT NOT NULL,
-          record TEXT NOT NULL
-        ) STRICT;
-        CREATE INDEX IF NOT EXISTS workflow_journal_run_id ON workflow_journal(run_id);
-        CREATE TABLE IF NOT EXISTS context_items (
-          id TEXT PRIMARY KEY,
-          project TEXT NOT NULL,
-          kind TEXT NOT NULL,
-          record TEXT NOT NULL
-        ) STRICT;
-        CREATE INDEX IF NOT EXISTS context_items_project ON context_items(project);
-        CREATE UNIQUE INDEX IF NOT EXISTS messages_from_idempotency
-        ON messages(
-          json_extract(record, '$.from'),
-          json_extract(record, '$.idempotencyKey')
-        ) WHERE json_extract(record, '$.idempotencyKey') IS NOT NULL;
-        CREATE INDEX IF NOT EXISTS messages_to_seq
-        ON messages(
-          json_extract(record, '$.to'),
-          COALESCE(json_extract(record, '$.seq'), 0)
-        );
-        CREATE TABLE IF NOT EXISTS consumer_cursors (
-          agent_id TEXT PRIMARY KEY,
-          cursor INTEGER NOT NULL
-        ) STRICT;
-        CREATE TABLE IF NOT EXISTS agent_sequences (
-          agent_id TEXT PRIMARY KEY,
-          next_seq INTEGER NOT NULL
-        ) STRICT;
-      `);
-    },
-  },
-]);
-
 export const HUB_STORE_SCHEMA_SPEC: DatabaseSchemaSpec = Object.freeze({
   schema: HUB_STORE_SCHEMA_V3,
   version: HUB_STORE_SCHEMA_VERSION,
   tables: HUB_STORE_TABLES,
-  migrations: HUB_STORE_MIGRATIONS,
 });
 
 export interface StoredAgent extends AgentRecord {