@sabaiway/agent-workflow-engine 1.9.0 → 1.10.0

package/CHANGELOG.md

@@ -4,6 +4,25 @@ All notable changes to the methodology engine. Versions are this **package's** n
 they are distinct from the **deployment-lineage** stamp written into a project's `docs/ai/`
 (which tracks the shared `agent-workflow` lineage, head `1.3.0`).
 
+## 1.10.0 — Cost-lane vocabulary in the orchestration canon (§5)
+
+A **feature** release (canon text + its tests; installer unchanged). Work now has named **cost
+lanes**, and the canon states who runs what:
+
+- **`orchestration.md` §5 defines the lanes** — **L0** deterministic script · **L1** cheap
+  subagent (small model, low effort, read-only tools) · **L2** subscription bridge · **L3**
+  frontier — plus the two routing rules: route every step to the **cheapest adequate executor**,
+  and **a step with no named guardrail does not move down** a lane. The **red lines never move
+  down**: council review models · real code · ADR/plan/handover/changelog-entry wording ·
+  persuasive copy · go/no-go · the maintainer approval asks. Asymmetric pairing (cheap drafts,
+  a deterministic tool or the frontier verifies) and the incident-repair default (salvage
+  recorded state first, never frontier re-derivation) are canon now.
+- **Lockstep tests** — `test/orchestration-canon.test.mjs` pins the four lane tokens, both
+  routing rules, the red-line list, and that §5 stays generic (the L0 examples name the family's
+  own surfaces — the gate runner over `docs/ai/gates.json`, the rotation checks — never a
+  project's publish mechanics); `test/procedures-canon.test.mjs` pins the same canon tokens the
+  composition root's advisor paraphrases, so the two cannot silently drift apart.
+
 ## 1.9.0 — Honest installer messaging: the verb states what was observed, the note states facts
 
 A **feature** release (installer output contract only; the canon text is unchanged). `bin/install.mjs`

package/SKILL.md

@@ -3,7 +3,7 @@ name: agent-workflow-engine
 description: Canonical home of the agent-workflow planning methodology — the Plan→Phase→Step→Substep vocabulary, plan lifecycle, queue.md series index, mandatory Cleanup phase, the bounded methodology slot fragment, the orchestration-recipe vocabulary (Solo / Reviewed / Council / Delegated), and the activity-procedures canon (plan-authoring / plan-execution, with typed recipe slots). A published, installable npm package (available:true) that *provides* the methodology text; it mutates nothing. The composition root (agent-workflow-kit) reads this canon LIVE from the installed engine and injects the bounded slots from it — one source of truth, no bundled mirror; `npx @sabaiway/agent-workflow-kit@latest init` installs the engine.
 disable-model-invocation: true
 metadata:
-  version: '1.9.0'
+  version: '1.10.0'
 ---
 
 # agent-workflow-engine

package/capability.json

@@ -3,7 +3,7 @@
   "schema": 1,
   "name": "agent-workflow-engine",
   "kind": "methodology-engine",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "available": true,
   "provides": ["plan"],
   "roles": {},

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sabaiway/agent-workflow-engine",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "description": "Canonical home of the agent-workflow planning methodology — the Plan→Phase→Step vocabulary, plan lifecycle, queue.md series index, and mandatory Cleanup phase, consumed by the kit (composition root). The methodology engine of the agent-workflow family.",
   "keywords": [
     "ai-agents",

package/references/orchestration.md

@@ -101,6 +101,41 @@ already accepted: run both, every round, until a round comes back clean — or u
 marks the crossover (§4), resolved at altitude rather than by exhausting the strictest backend. Spending
 quota to line-by-line re-review mechanics past that crossover is the over-run the divergence stop prevents.
 
+### Cost lanes — route every step to the cheapest adequate executor
+
+Model quota is one axis of a wider guard: work has **lanes**, and every step routes to the
+**cheapest adequate executor**:
+
+- **L0 — deterministic script.** Anything rule-driven and verifiable by exit code: the batched
+  project gate matrix (the family's generic gate runner over a project-declared
+  `docs/ai/gates.json`), the docs cap/index checks, the rotation `--check` scripts
+  (changelog / issues / decisions). If a step CAN be a script, it IS a script — a model
+  re-reading what an exit code already proves is the canonical waste.
+- **L1 — cheap subagent** (a small model at low effort, bounded read-only tools): mechanical
+  extraction at scale — inventories, fact sweeps, changelog fact-skeletons, digesting long
+  failing output. Extraction and drafting ONLY; the orchestrator verifies the output against
+  sources and owns every conclusion.
+- **L2 — subscription bridge** (`codex` / `agy`): review and bounded delegated execution,
+  governed by the recipes above; real review work stays on frontier bridge models
+  (quality-first — economy on this lane comes from precomputed context, never a weaker model).
+- **L3 — frontier main lane**: judgment — plans, folds, syntheses, ADR / handover /
+  changelog-entry wording, user-facing copy, go/no-go, real code.
+
+Two rules bound the routing. **A step with no named guardrail does not move down a lane** — a
+deterministic checker, a pinned test, or a verifying orchestrator must catch a cheaper executor's
+error, otherwise the step stays where it is. And the **red lines never move down**: council
+reviews on frontier bridge models · real code implementation · ADR / plan / handover /
+changelog-entry wording · persuasive user-facing copy · go/no-go judgment · the maintainer's
+approval asks (commit / push / publish — cost tiering never touches approval gates).
+
+**Asymmetric pairing** is the default composition: the cheap lane drafts, a deterministic tool or
+the frontier verifies and signs — never the reverse.
+
+**Incident repair (your own error) defaults down-lane:** salvage recorded state first (journals,
+transcripts, git), replay it deterministically (L0), hand the leftovers to L1 in one batch —
+frontier re-derivation of recoverable state is the expensive failure mode, and the maintainer
+never pays frontier tokens for the agent's own mistake.
+
 A **standing health advisory** applies to `agy`: the Antigravity service can **stall on substantive
 prompts** (a long hang that returns nothing — an external service issue, not a setup problem;
 tracked as **Issue-001** in the kit's known issues). It is **invisible to file-presence detection**,