melchizedek-agents 1.0.2 → 1.1.0

package/config/agents/syndicate.schema.json

@@ -0,0 +1,1979 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "type": "object",
+  "properties": {
+    "syndicate_name": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Display name for this syndicate."
+    },
+    "orchestrator": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string",
+          "pattern": "^[A-Za-z_$][A-Za-z0-9_$-]*$",
+          "description": "Unique agent name within the tree. A valid identifier; cannot be \"user\"."
+        },
+        "description": {
+          "description": "One line other agents read to decide when to delegate here.",
+          "type": "string"
+        },
+        "model": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Model id; its prefix picks the provider (gemini-*, claude-*, gpt-*/o*, grok-*, ollama/*)."
+        },
+        "fallback_model": {
+          "description": "A model on another provider that answers when this agent's model fails provider-side (5xx, 429, network) before producing anything, or while that provider's circuit is open (ADR 0044).",
+          "type": "string",
+          "minLength": 1
+        },
+        "instruction": {
+          "type": "string",
+          "minLength": 1,
+          "description": "System prompt / persona."
+        },
+        "globalInstruction": {
+          "description": "Instruction applied to every agent in the tree; only the root agent's value takes effect.",
+          "type": "string"
+        },
+        "tools": {
+          "description": "Named tools from lib/toolRegistry.ts (e.g. web_search, web_extract, wiki_search).",
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "require_approval": {
+          "description": "Tools from this agent's `tools` that run only after a person approves the exact call (ADR 0028): the A2A task ends input-required until the caller answers approve or reject. Allowed on any agent but one a workflow map node runs; inside a delegated subagent the pause reaches the caller through its open call (ADR 0110).",
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "includeContents": {
+          "description": "\"default\" = include conversation history, \"none\" = stateless.",
+          "type": "string",
+          "enum": [
+            "default",
+            "none"
+          ]
+        },
+        "disallowTransferToParent": {
+          "type": "boolean"
+        },
+        "disallowTransferToPeers": {
+          "type": "boolean"
+        },
+        "outputKey": {
+          "description": "Session-state key the final reply is saved under.",
+          "type": "string"
+        },
+        "generateContentConfig": {
+          "type": "object",
+          "properties": {
+            "temperature": {
+              "type": "number"
+            },
+            "topP": {
+              "type": "number"
+            },
+            "topK": {
+              "type": "number"
+            },
+            "maxOutputTokens": {
+              "type": "integer",
+              "exclusiveMinimum": 0,
+              "maximum": 9007199254740991
+            },
+            "stopSequences": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            },
+            "candidateCount": {
+              "type": "integer",
+              "exclusiveMinimum": 0,
+              "maximum": 9007199254740991
+            },
+            "presencePenalty": {
+              "type": "number"
+            },
+            "frequencyPenalty": {
+              "type": "number"
+            },
+            "seed": {
+              "type": "integer",
+              "minimum": -9007199254740991,
+              "maximum": 9007199254740991
+            },
+            "responseMimeType": {
+              "type": "string"
+            },
+            "safetySettings": {
+              "type": "array",
+              "items": {
+                "type": "object",
+                "properties": {
+                  "category": {
+                    "type": "string"
+                  },
+                  "threshold": {
+                    "type": "string"
+                  }
+                },
+                "required": [
+                  "category",
+                  "threshold"
+                ],
+                "additionalProperties": {}
+              }
+            },
+            "thinkingConfig": {
+              "type": "object",
+              "properties": {
+                "thinkingBudget": {
+                  "description": "Reasoning token budget. 0 = off, -1 = dynamic.",
+                  "type": "integer",
+                  "minimum": -9007199254740991,
+                  "maximum": 9007199254740991
+                },
+                "includeThoughts": {
+                  "description": "Stream the thinking trace in the response.",
+                  "type": "boolean"
+                }
+              },
+              "additionalProperties": {},
+              "description": "Older spelling of `reasoning` for Gemini and Claude (thinkingLevel or thinkingBudget). Cannot be combined with `reasoning`."
+            },
+            "reasoningEffort": {
+              "description": "Older spelling of `reasoning` for the chat-completions and Responses providers. Cannot be combined with `reasoning`.",
+              "type": "string"
+            }
+          },
+          "additionalProperties": {},
+          "description": "Deprecated v1 spelling (ADR 0115): write `sampling` (temperature, top_p, max_output_tokens, stop), `output.mime` (responseMimeType) and `reasoning` (thinkingConfig, reasoningEffort) instead; npx melchizedek-codemod rewrites a file. Still read: the Gemini GenerateContentConfig shape the engine takes. Do not set tools here.",
+          "deprecated": true
+        },
+        "reasoning": {
+          "anyOf": [
+            {
+              "type": "string",
+              "enum": [
+                "none",
+                "low",
+                "medium",
+                "high"
+              ]
+            },
+            {
+              "type": "object",
+              "properties": {
+                "budget_tokens": {
+                  "type": "integer",
+                  "minimum": 0,
+                  "maximum": 9007199254740991,
+                  "description": "Thinking tokens; 0 = none. Effort-only providers take the nearest level at or above it."
+                }
+              },
+              "required": [
+                "budget_tokens"
+              ],
+              "additionalProperties": false
+            }
+          ],
+          "description": "How hard this agent reasons, on any provider: none | low | medium | high, or { budget_tokens: <int> }. Replaces generateContentConfig.thinkingConfig and reasoningEffort (ADR 0047)."
+        },
+        "sampling": {
+          "type": "object",
+          "properties": {
+            "temperature": {
+              "description": "Sampling temperature. Replaces generateContentConfig.temperature.",
+              "type": "number"
+            },
+            "top_p": {
+              "description": "Nucleus sampling. Replaces generateContentConfig.topP.",
+              "type": "number"
+            },
+            "max_output_tokens": {
+              "description": "Cap on the reply's tokens. Replaces generateContentConfig.maxOutputTokens.",
+              "type": "integer",
+              "exclusiveMinimum": 0,
+              "maximum": 9007199254740991
+            },
+            "stop": {
+              "description": "Stop sequences. Replaces generateContentConfig.stopSequences.",
+              "minItems": 1,
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          },
+          "additionalProperties": false,
+          "description": "How this agent samples, on any provider (ADR 0115). Replaces the same keys under generateContentConfig; cannot be combined with them.",
+          "minProperties": 1
+        },
+        "output": {
+          "type": "object",
+          "properties": {
+            "schema": {
+              "description": "JSON Schema the final reply is one object of. Replaces outputSchema; same behaviour beside tools and subagents (ADR 0109).",
+              "type": "object",
+              "propertyNames": {
+                "type": "string"
+              },
+              "additionalProperties": {}
+            },
+            "mime": {
+              "description": "application/json: JSON mode without a schema. Replaces generateContentConfig.responseMimeType.",
+              "type": "string",
+              "enum": [
+                "application/json",
+                "text/plain"
+              ]
+            }
+          },
+          "additionalProperties": false,
+          "description": "What this agent's final reply is (ADR 0115). Replaces outputSchema and generateContentConfig.responseMimeType; cannot be combined with them.",
+          "minProperties": 1
+        },
+        "model_overrides": {
+          "type": "object",
+          "properties": {
+            "gemini": {
+              "type": "object",
+              "properties": {
+                "instruction": {
+                  "description": "Replaces the agent's instruction on this provider.",
+                  "type": "string",
+                  "minLength": 1
+                },
+                "instruction_append": {
+                  "description": "Appended to the agent's instruction, after a blank line, on this provider.",
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "additionalProperties": false,
+              "description": "The instruction on one provider: exactly one of instruction or instruction_append.",
+              "oneOf": [
+                {
+                  "required": [
+                    "instruction"
+                  ]
+                },
+                {
+                  "required": [
+                    "instruction_append"
+                  ]
+                }
+              ]
+            },
+            "anthropic": {
+              "type": "object",
+              "properties": {
+                "instruction": {
+                  "description": "Replaces the agent's instruction on this provider.",
+                  "type": "string",
+                  "minLength": 1
+                },
+                "instruction_append": {
+                  "description": "Appended to the agent's instruction, after a blank line, on this provider.",
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "additionalProperties": false,
+              "description": "The instruction on one provider: exactly one of instruction or instruction_append.",
+              "oneOf": [
+                {
+                  "required": [
+                    "instruction"
+                  ]
+                },
+                {
+                  "required": [
+                    "instruction_append"
+                  ]
+                }
+              ]
+            },
+            "openai": {
+              "type": "object",
+              "properties": {
+                "instruction": {
+                  "description": "Replaces the agent's instruction on this provider.",
+                  "type": "string",
+                  "minLength": 1
+                },
+                "instruction_append": {
+                  "description": "Appended to the agent's instruction, after a blank line, on this provider.",
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "additionalProperties": false,
+              "description": "The instruction on one provider: exactly one of instruction or instruction_append.",
+              "oneOf": [
+                {
+                  "required": [
+                    "instruction"
+                  ]
+                },
+                {
+                  "required": [
+                    "instruction_append"
+                  ]
+                }
+              ]
+            },
+            "xai": {
+              "type": "object",
+              "properties": {
+                "instruction": {
+                  "description": "Replaces the agent's instruction on this provider.",
+                  "type": "string",
+                  "minLength": 1
+                },
+                "instruction_append": {
+                  "description": "Appended to the agent's instruction, after a blank line, on this provider.",
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "additionalProperties": false,
+              "description": "The instruction on one provider: exactly one of instruction or instruction_append.",
+              "oneOf": [
+                {
+                  "required": [
+                    "instruction"
+                  ]
+                },
+                {
+                  "required": [
+                    "instruction_append"
+                  ]
+                }
+              ]
+            },
+            "moonshot": {
+              "type": "object",
+              "properties": {
+                "instruction": {
+                  "description": "Replaces the agent's instruction on this provider.",
+                  "type": "string",
+                  "minLength": 1
+                },
+                "instruction_append": {
+                  "description": "Appended to the agent's instruction, after a blank line, on this provider.",
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "additionalProperties": false,
+              "description": "The instruction on one provider: exactly one of instruction or instruction_append.",
+              "oneOf": [
+                {
+                  "required": [
+                    "instruction"
+                  ]
+                },
+                {
+                  "required": [
+                    "instruction_append"
+                  ]
+                }
+              ]
+            },
+            "ollama": {
+              "type": "object",
+              "properties": {
+                "instruction": {
+                  "description": "Replaces the agent's instruction on this provider.",
+                  "type": "string",
+                  "minLength": 1
+                },
+                "instruction_append": {
+                  "description": "Appended to the agent's instruction, after a blank line, on this provider.",
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "additionalProperties": false,
+              "description": "The instruction on one provider: exactly one of instruction or instruction_append.",
+              "oneOf": [
+                {
+                  "required": [
+                    "instruction"
+                  ]
+                },
+                {
+                  "required": [
+                    "instruction_append"
+                  ]
+                }
+              ]
+            }
+          },
+          "additionalProperties": false,
+          "description": "Per-provider instruction, keyed by the provider of the agent's model id (lib/models/providerMap.ts). Applied at compile time before the skills index; not to fallback_model, and never to globalInstruction (ADR 0115)."
+        },
+        "outputSchema": {
+          "description": "Deprecated v1 spelling (ADR 0115): write output.schema. JSON Schema for structured output: the agent answers with one JSON object matching it. An agent that also calls tools or delegates to subagents does that first, then ends its turn on that JSON: the schema travels beside the tools where the model takes both in one request, as a set_model_response tool elsewhere (the capability matrix's structured_output_with_tools, ADR 0109).",
+          "type": "object",
+          "propertyNames": {
+            "type": "string"
+          },
+          "additionalProperties": {},
+          "deprecated": true
+        },
+        "mcp_server_url": {
+          "description": "MCP server (SSE) whose tools are discovered at runtime and merged with `tools`.",
+          "type": "string"
+        },
+        "mcp_tools": {
+          "description": "The MCP server's tools this agent may use, by name; any other tool the server lists is not exposed. Without it, every listed tool is. require_approval may name these. Needs mcp_server_url.",
+          "minItems": 1,
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "mcp_auth": {
+          "description": "The OAuth grant the MCP server takes (ADR 0112). With authorization_code, each user's own token on their own connection, and mcp_tools is required. Needs mcp_server_url; replaces MCP_BEARER_TOKENS for this server.",
+          "type": "object",
+          "properties": {
+            "oauth2": {
+              "type": "object",
+              "properties": {
+                "provider": {
+                  "type": "string",
+                  "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+                  "description": "The credential store's name for the provider (e.g. github). Every tool naming it shares one grant."
+                },
+                "grant": {
+                  "type": "string",
+                  "enum": [
+                    "authorization_code",
+                    "client_credentials"
+                  ],
+                  "description": "authorization_code: each user's own token, granted through the consent pause (ADR 0085). client_credentials: the server's own token, from the token endpoint."
+                },
+                "authorization_url": {
+                  "description": "The provider's authorization endpoint (https). authorization_code only.",
+                  "type": "string",
+                  "format": "uri"
+                },
+                "token_url": {
+                  "type": "string",
+                  "format": "uri",
+                  "description": "The provider's token endpoint (https)."
+                },
+                "client_id": {
+                  "description": "The OAuth client id, written out (it is not a secret). Or client_id_env.",
+                  "type": "string",
+                  "minLength": 1,
+                  "maxLength": 512
+                },
+                "client_id_env": {
+                  "description": "Environment variable holding the client id. Or client_id.",
+                  "type": "string",
+                  "pattern": "^[A-Z_][A-Z0-9_]*$"
+                },
+                "client_secret_env": {
+                  "description": "Environment variable NAME holding the client secret, never the value. Required for client_credentials; omit for a public client (PKCE alone).",
+                  "type": "string",
+                  "pattern": "^[A-Z_][A-Z0-9_]*$"
+                },
+                "scopes": {
+                  "description": "The scopes the grant asks for.",
+                  "maxItems": 64,
+                  "type": "array",
+                  "items": {
+                    "type": "string",
+                    "pattern": "^[\\x21\\x23-\\x5b\\x5d-\\x7e]{1,256}$"
+                  }
+                },
+                "authorization_params": {
+                  "description": "Extra authorization parameters (e.g. access_type: offline). authorization_code only; never state, redirect_uri, scope, client_id or the PKCE pair.",
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string",
+                    "pattern": "^[A-Za-z0-9_.-]{1,64}$"
+                  },
+                  "additionalProperties": {
+                    "type": "string",
+                    "maxLength": 512
+                  }
+                }
+              },
+              "required": [
+                "provider",
+                "grant",
+                "token_url"
+              ],
+              "additionalProperties": false,
+              "description": "An OAuth 2 access token sent as a bearer token on every call (lib/tools/oauthTools.ts). Secrets come from environment variable names, never values."
+            }
+          },
+          "required": [
+            "oauth2"
+          ],
+          "additionalProperties": false
+        },
+        "skills": {
+          "type": "object",
+          "properties": {
+            "dir": {
+              "type": "string",
+              "minLength": 1,
+              "description": "A directory of skills: one subdirectory per skill, named as its SKILL.md frontmatter names it. Relative to the working directory."
+            },
+            "scripts": {
+              "description": "Whether a skill's scripts/ may run. \"local\" runs them on this machine, each after a person approves (ADR 0028); default \"none\".",
+              "type": "string",
+              "enum": [
+                "none",
+                "local"
+              ]
+            },
+            "tools": {
+              "description": "Registry tool names a skill may unlock through its `allowed-tools` frontmatter once it is loaded. Omitted, no skill unlocks anything.",
+              "type": "array",
+              "items": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "env": {
+              "description": "Environment variable NAMES (never values) a skill script gets, beyond PATH, HOME, the temp directory, the locale and the OS essentials (ADR 0086). A name that looks like a secret (KEY, TOKEN, SECRET, PASSWORD, AUTH, DATABASE, …) belongs under secret_env.",
+              "type": "array",
+              "items": {
+                "type": "string",
+                "pattern": "^[A-Z_][A-Z0-9_]*$"
+              }
+            },
+            "secret_env": {
+              "description": "Secret-shaped environment variable names a skill script gets, listed here so passing a credential to a script is a deliberate, reviewable act (ADR 0086).",
+              "type": "array",
+              "items": {
+                "type": "string",
+                "pattern": "^[A-Z_][A-Z0-9_]*$"
+              }
+            }
+          },
+          "required": [
+            "dir"
+          ],
+          "additionalProperties": false,
+          "description": "Agent Skills (SKILL.md directories) this agent reads the way a coding harness does."
+        },
+        "openapi": {
+          "minItems": 1,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "spec": {
+                "type": "string",
+                "minLength": 1,
+                "description": "An OpenAPI 3 spec file (.yaml, .yml, .json), relative to this syndicate file. Files only, never URLs."
+              },
+              "operations": {
+                "description": "Operations to expose, by operationId or tool name. Omitted: every GET operation, and nothing that writes.",
+                "minItems": 1,
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "base_url": {
+                "description": "Overrides the spec's servers[0].url. Checked by the SSRF guard.",
+                "type": "string",
+                "format": "uri"
+              },
+              "prefix": {
+                "description": "Prepended to each tool name, to keep two APIs apart.",
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9_]*$"
+              },
+              "auth": {
+                "description": "Credentials, always from the environment, never written in YAML.",
+                "type": "object",
+                "properties": {
+                  "bearer_env": {
+                    "description": "Environment variable holding a bearer token.",
+                    "type": "string",
+                    "pattern": "^[A-Z_][A-Z0-9_]*$"
+                  },
+                  "api_key": {
+                    "description": "An API key read from `env`, sent in a header or the query under `name`.",
+                    "type": "object",
+                    "properties": {
+                      "env": {
+                        "type": "string",
+                        "pattern": "^[A-Z_][A-Z0-9_]*$"
+                      },
+                      "in": {
+                        "type": "string",
+                        "enum": [
+                          "header",
+                          "query"
+                        ]
+                      },
+                      "name": {
+                        "type": "string",
+                        "minLength": 1
+                      }
+                    },
+                    "required": [
+                      "env",
+                      "in",
+                      "name"
+                    ],
+                    "additionalProperties": false
+                  },
+                  "oauth2": {
+                    "type": "object",
+                    "properties": {
+                      "provider": {
+                        "type": "string",
+                        "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+                        "description": "The credential store's name for the provider (e.g. github). Every tool naming it shares one grant."
+                      },
+                      "grant": {
+                        "type": "string",
+                        "enum": [
+                          "authorization_code",
+                          "client_credentials"
+                        ],
+                        "description": "authorization_code: each user's own token, granted through the consent pause (ADR 0085). client_credentials: the server's own token, from the token endpoint."
+                      },
+                      "authorization_url": {
+                        "description": "The provider's authorization endpoint (https). authorization_code only.",
+                        "type": "string",
+                        "format": "uri"
+                      },
+                      "token_url": {
+                        "type": "string",
+                        "format": "uri",
+                        "description": "The provider's token endpoint (https)."
+                      },
+                      "client_id": {
+                        "description": "The OAuth client id, written out (it is not a secret). Or client_id_env.",
+                        "type": "string",
+                        "minLength": 1,
+                        "maxLength": 512
+                      },
+                      "client_id_env": {
+                        "description": "Environment variable holding the client id. Or client_id.",
+                        "type": "string",
+                        "pattern": "^[A-Z_][A-Z0-9_]*$"
+                      },
+                      "client_secret_env": {
+                        "description": "Environment variable NAME holding the client secret, never the value. Required for client_credentials; omit for a public client (PKCE alone).",
+                        "type": "string",
+                        "pattern": "^[A-Z_][A-Z0-9_]*$"
+                      },
+                      "scopes": {
+                        "description": "The scopes the grant asks for.",
+                        "maxItems": 64,
+                        "type": "array",
+                        "items": {
+                          "type": "string",
+                          "pattern": "^[\\x21\\x23-\\x5b\\x5d-\\x7e]{1,256}$"
+                        }
+                      },
+                      "authorization_params": {
+                        "description": "Extra authorization parameters (e.g. access_type: offline). authorization_code only; never state, redirect_uri, scope, client_id or the PKCE pair.",
+                        "type": "object",
+                        "propertyNames": {
+                          "type": "string",
+                          "pattern": "^[A-Za-z0-9_.-]{1,64}$"
+                        },
+                        "additionalProperties": {
+                          "type": "string",
+                          "maxLength": 512
+                        }
+                      }
+                    },
+                    "required": [
+                      "provider",
+                      "grant",
+                      "token_url"
+                    ],
+                    "additionalProperties": false,
+                    "description": "An OAuth 2 access token sent as a bearer token on every call (lib/tools/oauthTools.ts). Secrets come from environment variable names, never values."
+                  }
+                },
+                "additionalProperties": false
+              }
+            },
+            "required": [
+              "spec"
+            ],
+            "additionalProperties": false,
+            "description": "An HTTP API as tools, from its OpenAPI spec (lib/tools/openapiTools.ts)."
+          }
+        },
+        "code_execution": {
+          "description": "\"gemini\": the model writes and runs Python in Gemini's server-side sandbox; nothing runs on this host. Gemini models only.",
+          "type": "string",
+          "const": "gemini"
+        },
+        "context": {
+          "description": "Summarize a long conversation instead of overflowing the window. The orchestrator of a delegate syndicate only.",
+          "type": "object",
+          "properties": {
+            "compact_after_tokens": {
+              "type": "integer",
+              "minimum": 1000,
+              "maximum": 9007199254740991,
+              "description": "Compact when the last request's prompt passed this many tokens."
+            },
+            "keep_recent_events": {
+              "description": "Events kept verbatim after the summary. Default 6.",
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 100
+            },
+            "summary_model": {
+              "description": "The model that writes the summary. Default: the agent's own.",
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "compact_after_tokens"
+          ],
+          "additionalProperties": false
+        },
+        "examples": {
+          "description": "Few-shot exchanges (input, output) added to every request's instruction.",
+          "minItems": 1,
+          "maxItems": 20,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "input": {
+                "type": "string",
+                "minLength": 1
+              },
+              "output": {
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "required": [
+              "input",
+              "output"
+            ],
+            "additionalProperties": false
+          }
+        },
+        "mode": {
+          "description": "\"task\": the agent works until it calls finish_task; its arguments (matching outputSchema) are the node's output. Workflow nodes only.",
+          "type": "string",
+          "const": "task"
+        },
+        "orchestration": {
+          "type": "object",
+          "properties": {
+            "role": {
+              "type": "string",
+              "enum": [
+                "primary",
+                "sub-agent"
+              ]
+            },
+            "delegates": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          },
+          "additionalProperties": false
+        }
+      },
+      "required": [
+        "name",
+        "model",
+        "instruction"
+      ],
+      "additionalProperties": false,
+      "description": "The root agent, which the engine's agent loop runs (keys spelled after ADK's LlmAgentConfig)."
+    },
+    "subagents": {
+      "description": "The orchestrator's team. Omit it (or write `subagents: []`) for a single-agent syndicate.",
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "pattern": "^[A-Za-z_$][A-Za-z0-9_$-]*$",
+            "description": "Unique agent name within the tree. A valid identifier; cannot be \"user\"."
+          },
+          "description": {
+            "type": "string",
+            "minLength": 1,
+            "description": "Required: the orchestrator reads it to decide when to call this subagent."
+          },
+          "model": {
+            "description": "Model id. Inherits the orchestrator's when omitted.",
+            "type": "string",
+            "minLength": 1
+          },
+          "fallback_model": {
+            "description": "A model on another provider that answers when this agent's model fails provider-side (5xx, 429, network) before producing anything, or while that provider's circuit is open (ADR 0044).",
+            "type": "string",
+            "minLength": 1
+          },
+          "instruction": {
+            "type": "string",
+            "minLength": 1,
+            "description": "System prompt / persona."
+          },
+          "globalInstruction": {
+            "description": "Instruction applied to every agent in the tree; only the root agent's value takes effect.",
+            "type": "string"
+          },
+          "tools": {
+            "description": "Named tools from lib/toolRegistry.ts (e.g. web_search, web_extract, wiki_search).",
+            "type": "array",
+            "items": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "require_approval": {
+            "description": "Tools from this agent's `tools` that run only after a person approves the exact call (ADR 0028): the A2A task ends input-required until the caller answers approve or reject. Allowed on any agent but one a workflow map node runs; inside a delegated subagent the pause reaches the caller through its open call (ADR 0110).",
+            "type": "array",
+            "items": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "includeContents": {
+            "description": "\"default\" = include conversation history, \"none\" = stateless.",
+            "type": "string",
+            "enum": [
+              "default",
+              "none"
+            ]
+          },
+          "disallowTransferToParent": {
+            "type": "boolean"
+          },
+          "disallowTransferToPeers": {
+            "type": "boolean"
+          },
+          "outputKey": {
+            "description": "Session-state key the final reply is saved under.",
+            "type": "string"
+          },
+          "generateContentConfig": {
+            "type": "object",
+            "properties": {
+              "temperature": {
+                "type": "number"
+              },
+              "topP": {
+                "type": "number"
+              },
+              "topK": {
+                "type": "number"
+              },
+              "maxOutputTokens": {
+                "type": "integer",
+                "exclusiveMinimum": 0,
+                "maximum": 9007199254740991
+              },
+              "stopSequences": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              },
+              "candidateCount": {
+                "type": "integer",
+                "exclusiveMinimum": 0,
+                "maximum": 9007199254740991
+              },
+              "presencePenalty": {
+                "type": "number"
+              },
+              "frequencyPenalty": {
+                "type": "number"
+              },
+              "seed": {
+                "type": "integer",
+                "minimum": -9007199254740991,
+                "maximum": 9007199254740991
+              },
+              "responseMimeType": {
+                "type": "string"
+              },
+              "safetySettings": {
+                "type": "array",
+                "items": {
+                  "type": "object",
+                  "properties": {
+                    "category": {
+                      "type": "string"
+                    },
+                    "threshold": {
+                      "type": "string"
+                    }
+                  },
+                  "required": [
+                    "category",
+                    "threshold"
+                  ],
+                  "additionalProperties": {}
+                }
+              },
+              "thinkingConfig": {
+                "type": "object",
+                "properties": {
+                  "thinkingBudget": {
+                    "description": "Reasoning token budget. 0 = off, -1 = dynamic.",
+                    "type": "integer",
+                    "minimum": -9007199254740991,
+                    "maximum": 9007199254740991
+                  },
+                  "includeThoughts": {
+                    "description": "Stream the thinking trace in the response.",
+                    "type": "boolean"
+                  }
+                },
+                "additionalProperties": {},
+                "description": "Older spelling of `reasoning` for Gemini and Claude (thinkingLevel or thinkingBudget). Cannot be combined with `reasoning`."
+              },
+              "reasoningEffort": {
+                "description": "Older spelling of `reasoning` for the chat-completions and Responses providers. Cannot be combined with `reasoning`.",
+                "type": "string"
+              }
+            },
+            "additionalProperties": {},
+            "description": "Deprecated v1 spelling (ADR 0115): write `sampling` (temperature, top_p, max_output_tokens, stop), `output.mime` (responseMimeType) and `reasoning` (thinkingConfig, reasoningEffort) instead; npx melchizedek-codemod rewrites a file. Still read: the Gemini GenerateContentConfig shape the engine takes. Do not set tools here.",
+            "deprecated": true
+          },
+          "reasoning": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "none",
+                  "low",
+                  "medium",
+                  "high"
+                ]
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "budget_tokens": {
+                    "type": "integer",
+                    "minimum": 0,
+                    "maximum": 9007199254740991,
+                    "description": "Thinking tokens; 0 = none. Effort-only providers take the nearest level at or above it."
+                  }
+                },
+                "required": [
+                  "budget_tokens"
+                ],
+                "additionalProperties": false
+              }
+            ],
+            "description": "How hard this agent reasons, on any provider: none | low | medium | high, or { budget_tokens: <int> }. Replaces generateContentConfig.thinkingConfig and reasoningEffort (ADR 0047)."
+          },
+          "sampling": {
+            "type": "object",
+            "properties": {
+              "temperature": {
+                "description": "Sampling temperature. Replaces generateContentConfig.temperature.",
+                "type": "number"
+              },
+              "top_p": {
+                "description": "Nucleus sampling. Replaces generateContentConfig.topP.",
+                "type": "number"
+              },
+              "max_output_tokens": {
+                "description": "Cap on the reply's tokens. Replaces generateContentConfig.maxOutputTokens.",
+                "type": "integer",
+                "exclusiveMinimum": 0,
+                "maximum": 9007199254740991
+              },
+              "stop": {
+                "description": "Stop sequences. Replaces generateContentConfig.stopSequences.",
+                "minItems": 1,
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              }
+            },
+            "additionalProperties": false,
+            "description": "How this agent samples, on any provider (ADR 0115). Replaces the same keys under generateContentConfig; cannot be combined with them.",
+            "minProperties": 1
+          },
+          "output": {
+            "type": "object",
+            "properties": {
+              "schema": {
+                "description": "JSON Schema the final reply is one object of. Replaces outputSchema; same behaviour beside tools and subagents (ADR 0109).",
+                "type": "object",
+                "propertyNames": {
+                  "type": "string"
+                },
+                "additionalProperties": {}
+              },
+              "mime": {
+                "description": "application/json: JSON mode without a schema. Replaces generateContentConfig.responseMimeType.",
+                "type": "string",
+                "enum": [
+                  "application/json",
+                  "text/plain"
+                ]
+              }
+            },
+            "additionalProperties": false,
+            "description": "What this agent's final reply is (ADR 0115). Replaces outputSchema and generateContentConfig.responseMimeType; cannot be combined with them.",
+            "minProperties": 1
+          },
+          "model_overrides": {
+            "type": "object",
+            "properties": {
+              "gemini": {
+                "type": "object",
+                "properties": {
+                  "instruction": {
+                    "description": "Replaces the agent's instruction on this provider.",
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "instruction_append": {
+                    "description": "Appended to the agent's instruction, after a blank line, on this provider.",
+                    "type": "string",
+                    "minLength": 1
+                  }
+                },
+                "additionalProperties": false,
+                "description": "The instruction on one provider: exactly one of instruction or instruction_append.",
+                "oneOf": [
+                  {
+                    "required": [
+                      "instruction"
+                    ]
+                  },
+                  {
+                    "required": [
+                      "instruction_append"
+                    ]
+                  }
+                ]
+              },
+              "anthropic": {
+                "type": "object",
+                "properties": {
+                  "instruction": {
+                    "description": "Replaces the agent's instruction on this provider.",
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "instruction_append": {
+                    "description": "Appended to the agent's instruction, after a blank line, on this provider.",
+                    "type": "string",
+                    "minLength": 1
+                  }
+                },
+                "additionalProperties": false,
+                "description": "The instruction on one provider: exactly one of instruction or instruction_append.",
+                "oneOf": [
+                  {
+                    "required": [
+                      "instruction"
+                    ]
+                  },
+                  {
+                    "required": [
+                      "instruction_append"
+                    ]
+                  }
+                ]
+              },
+              "openai": {
+                "type": "object",
+                "properties": {
+                  "instruction": {
+                    "description": "Replaces the agent's instruction on this provider.",
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "instruction_append": {
+                    "description": "Appended to the agent's instruction, after a blank line, on this provider.",
+                    "type": "string",
+                    "minLength": 1
+                  }
+                },
+                "additionalProperties": false,
+                "description": "The instruction on one provider: exactly one of instruction or instruction_append.",
+                "oneOf": [
+                  {
+                    "required": [
+                      "instruction"
+                    ]
+                  },
+                  {
+                    "required": [
+                      "instruction_append"
+                    ]
+                  }
+                ]
+              },
+              "xai": {
+                "type": "object",
+                "properties": {
+                  "instruction": {
+                    "description": "Replaces the agent's instruction on this provider.",
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "instruction_append": {
+                    "description": "Appended to the agent's instruction, after a blank line, on this provider.",
+                    "type": "string",
+                    "minLength": 1
+                  }
+                },
+                "additionalProperties": false,
+                "description": "The instruction on one provider: exactly one of instruction or instruction_append.",
+                "oneOf": [
+                  {
+                    "required": [
+                      "instruction"
+                    ]
+                  },
+                  {
+                    "required": [
+                      "instruction_append"
+                    ]
+                  }
+                ]
+              },
+              "moonshot": {
+                "type": "object",
+                "properties": {
+                  "instruction": {
+                    "description": "Replaces the agent's instruction on this provider.",
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "instruction_append": {
+                    "description": "Appended to the agent's instruction, after a blank line, on this provider.",
+                    "type": "string",
+                    "minLength": 1
+                  }
+                },
+                "additionalProperties": false,
+                "description": "The instruction on one provider: exactly one of instruction or instruction_append.",
+                "oneOf": [
+                  {
+                    "required": [
+                      "instruction"
+                    ]
+                  },
+                  {
+                    "required": [
+                      "instruction_append"
+                    ]
+                  }
+                ]
+              },
+              "ollama": {
+                "type": "object",
+                "properties": {
+                  "instruction": {
+                    "description": "Replaces the agent's instruction on this provider.",
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "instruction_append": {
+                    "description": "Appended to the agent's instruction, after a blank line, on this provider.",
+                    "type": "string",
+                    "minLength": 1
+                  }
+                },
+                "additionalProperties": false,
+                "description": "The instruction on one provider: exactly one of instruction or instruction_append.",
+                "oneOf": [
+                  {
+                    "required": [
+                      "instruction"
+                    ]
+                  },
+                  {
+                    "required": [
+                      "instruction_append"
+                    ]
+                  }
+                ]
+              }
+            },
+            "additionalProperties": false,
+            "description": "Per-provider instruction, keyed by the provider of the agent's model id (lib/models/providerMap.ts). Applied at compile time before the skills index; not to fallback_model, and never to globalInstruction (ADR 0115)."
+          },
+          "outputSchema": {
+            "description": "Deprecated v1 spelling (ADR 0115): write output.schema. JSON Schema for structured output: the agent answers with one JSON object matching it. An agent that also calls tools or delegates to subagents does that first, then ends its turn on that JSON: the schema travels beside the tools where the model takes both in one request, as a set_model_response tool elsewhere (the capability matrix's structured_output_with_tools, ADR 0109).",
+            "type": "object",
+            "propertyNames": {
+              "type": "string"
+            },
+            "additionalProperties": {},
+            "deprecated": true
+          },
+          "mcp_server_url": {
+            "description": "MCP server (SSE) whose tools are discovered at runtime and merged with `tools`.",
+            "type": "string"
+          },
+          "mcp_tools": {
+            "description": "The MCP server's tools this agent may use, by name; any other tool the server lists is not exposed. Without it, every listed tool is. require_approval may name these. Needs mcp_server_url.",
+            "minItems": 1,
+            "type": "array",
+            "items": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "mcp_auth": {
+            "description": "The OAuth grant the MCP server takes (ADR 0112). With authorization_code, each user's own token on their own connection, and mcp_tools is required. Needs mcp_server_url; replaces MCP_BEARER_TOKENS for this server.",
+            "type": "object",
+            "properties": {
+              "oauth2": {
+                "type": "object",
+                "properties": {
+                  "provider": {
+                    "type": "string",
+                    "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+                    "description": "The credential store's name for the provider (e.g. github). Every tool naming it shares one grant."
+                  },
+                  "grant": {
+                    "type": "string",
+                    "enum": [
+                      "authorization_code",
+                      "client_credentials"
+                    ],
+                    "description": "authorization_code: each user's own token, granted through the consent pause (ADR 0085). client_credentials: the server's own token, from the token endpoint."
+                  },
+                  "authorization_url": {
+                    "description": "The provider's authorization endpoint (https). authorization_code only.",
+                    "type": "string",
+                    "format": "uri"
+                  },
+                  "token_url": {
+                    "type": "string",
+                    "format": "uri",
+                    "description": "The provider's token endpoint (https)."
+                  },
+                  "client_id": {
+                    "description": "The OAuth client id, written out (it is not a secret). Or client_id_env.",
+                    "type": "string",
+                    "minLength": 1,
+                    "maxLength": 512
+                  },
+                  "client_id_env": {
+                    "description": "Environment variable holding the client id. Or client_id.",
+                    "type": "string",
+                    "pattern": "^[A-Z_][A-Z0-9_]*$"
+                  },
+                  "client_secret_env": {
+                    "description": "Environment variable NAME holding the client secret, never the value. Required for client_credentials; omit for a public client (PKCE alone).",
+                    "type": "string",
+                    "pattern": "^[A-Z_][A-Z0-9_]*$"
+                  },
+                  "scopes": {
+                    "description": "The scopes the grant asks for.",
+                    "maxItems": 64,
+                    "type": "array",
+                    "items": {
+                      "type": "string",
+                      "pattern": "^[\\x21\\x23-\\x5b\\x5d-\\x7e]{1,256}$"
+                    }
+                  },
+                  "authorization_params": {
+                    "description": "Extra authorization parameters (e.g. access_type: offline). authorization_code only; never state, redirect_uri, scope, client_id or the PKCE pair.",
+                    "type": "object",
+                    "propertyNames": {
+                      "type": "string",
+                      "pattern": "^[A-Za-z0-9_.-]{1,64}$"
+                    },
+                    "additionalProperties": {
+                      "type": "string",
+                      "maxLength": 512
+                    }
+                  }
+                },
+                "required": [
+                  "provider",
+                  "grant",
+                  "token_url"
+                ],
+                "additionalProperties": false,
+                "description": "An OAuth 2 access token sent as a bearer token on every call (lib/tools/oauthTools.ts). Secrets come from environment variable names, never values."
+              }
+            },
+            "required": [
+              "oauth2"
+            ],
+            "additionalProperties": false
+          },
+          "skills": {
+            "type": "object",
+            "properties": {
+              "dir": {
+                "type": "string",
+                "minLength": 1,
+                "description": "A directory of skills: one subdirectory per skill, named as its SKILL.md frontmatter names it. Relative to the working directory."
+              },
+              "scripts": {
+                "description": "Whether a skill's scripts/ may run. \"local\" runs them on this machine, each after a person approves (ADR 0028); default \"none\".",
+                "type": "string",
+                "enum": [
+                  "none",
+                  "local"
+                ]
+              },
+              "tools": {
+                "description": "Registry tool names a skill may unlock through its `allowed-tools` frontmatter once it is loaded. Omitted, no skill unlocks anything.",
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "env": {
+                "description": "Environment variable NAMES (never values) a skill script gets, beyond PATH, HOME, the temp directory, the locale and the OS essentials (ADR 0086). A name that looks like a secret (KEY, TOKEN, SECRET, PASSWORD, AUTH, DATABASE, …) belongs under secret_env.",
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "pattern": "^[A-Z_][A-Z0-9_]*$"
+                }
+              },
+              "secret_env": {
+                "description": "Secret-shaped environment variable names a skill script gets, listed here so passing a credential to a script is a deliberate, reviewable act (ADR 0086).",
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "pattern": "^[A-Z_][A-Z0-9_]*$"
+                }
+              }
+            },
+            "required": [
+              "dir"
+            ],
+            "additionalProperties": false,
+            "description": "Agent Skills (SKILL.md directories) this agent reads the way a coding harness does."
+          },
+          "openapi": {
+            "minItems": 1,
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "spec": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "An OpenAPI 3 spec file (.yaml, .yml, .json), relative to this syndicate file. Files only, never URLs."
+                },
+                "operations": {
+                  "description": "Operations to expose, by operationId or tool name. Omitted: every GET operation, and nothing that writes.",
+                  "minItems": 1,
+                  "type": "array",
+                  "items": {
+                    "type": "string",
+                    "minLength": 1
+                  }
+                },
+                "base_url": {
+                  "description": "Overrides the spec's servers[0].url. Checked by the SSRF guard.",
+                  "type": "string",
+                  "format": "uri"
+                },
+                "prefix": {
+                  "description": "Prepended to each tool name, to keep two APIs apart.",
+                  "type": "string",
+                  "pattern": "^[a-z][a-z0-9_]*$"
+                },
+                "auth": {
+                  "description": "Credentials, always from the environment, never written in YAML.",
+                  "type": "object",
+                  "properties": {
+                    "bearer_env": {
+                      "description": "Environment variable holding a bearer token.",
+                      "type": "string",
+                      "pattern": "^[A-Z_][A-Z0-9_]*$"
+                    },
+                    "api_key": {
+                      "description": "An API key read from `env`, sent in a header or the query under `name`.",
+                      "type": "object",
+                      "properties": {
+                        "env": {
+                          "type": "string",
+                          "pattern": "^[A-Z_][A-Z0-9_]*$"
+                        },
+                        "in": {
+                          "type": "string",
+                          "enum": [
+                            "header",
+                            "query"
+                          ]
+                        },
+                        "name": {
+                          "type": "string",
+                          "minLength": 1
+                        }
+                      },
+                      "required": [
+                        "env",
+                        "in",
+                        "name"
+                      ],
+                      "additionalProperties": false
+                    },
+                    "oauth2": {
+                      "type": "object",
+                      "properties": {
+                        "provider": {
+                          "type": "string",
+                          "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+                          "description": "The credential store's name for the provider (e.g. github). Every tool naming it shares one grant."
+                        },
+                        "grant": {
+                          "type": "string",
+                          "enum": [
+                            "authorization_code",
+                            "client_credentials"
+                          ],
+                          "description": "authorization_code: each user's own token, granted through the consent pause (ADR 0085). client_credentials: the server's own token, from the token endpoint."
+                        },
+                        "authorization_url": {
+                          "description": "The provider's authorization endpoint (https). authorization_code only.",
+                          "type": "string",
+                          "format": "uri"
+                        },
+                        "token_url": {
+                          "type": "string",
+                          "format": "uri",
+                          "description": "The provider's token endpoint (https)."
+                        },
+                        "client_id": {
+                          "description": "The OAuth client id, written out (it is not a secret). Or client_id_env.",
+                          "type": "string",
+                          "minLength": 1,
+                          "maxLength": 512
+                        },
+                        "client_id_env": {
+                          "description": "Environment variable holding the client id. Or client_id.",
+                          "type": "string",
+                          "pattern": "^[A-Z_][A-Z0-9_]*$"
+                        },
+                        "client_secret_env": {
+                          "description": "Environment variable NAME holding the client secret, never the value. Required for client_credentials; omit for a public client (PKCE alone).",
+                          "type": "string",
+                          "pattern": "^[A-Z_][A-Z0-9_]*$"
+                        },
+                        "scopes": {
+                          "description": "The scopes the grant asks for.",
+                          "maxItems": 64,
+                          "type": "array",
+                          "items": {
+                            "type": "string",
+                            "pattern": "^[\\x21\\x23-\\x5b\\x5d-\\x7e]{1,256}$"
+                          }
+                        },
+                        "authorization_params": {
+                          "description": "Extra authorization parameters (e.g. access_type: offline). authorization_code only; never state, redirect_uri, scope, client_id or the PKCE pair.",
+                          "type": "object",
+                          "propertyNames": {
+                            "type": "string",
+                            "pattern": "^[A-Za-z0-9_.-]{1,64}$"
+                          },
+                          "additionalProperties": {
+                            "type": "string",
+                            "maxLength": 512
+                          }
+                        }
+                      },
+                      "required": [
+                        "provider",
+                        "grant",
+                        "token_url"
+                      ],
+                      "additionalProperties": false,
+                      "description": "An OAuth 2 access token sent as a bearer token on every call (lib/tools/oauthTools.ts). Secrets come from environment variable names, never values."
+                    }
+                  },
+                  "additionalProperties": false
+                }
+              },
+              "required": [
+                "spec"
+              ],
+              "additionalProperties": false,
+              "description": "An HTTP API as tools, from its OpenAPI spec (lib/tools/openapiTools.ts)."
+            }
+          },
+          "code_execution": {
+            "description": "\"gemini\": the model writes and runs Python in Gemini's server-side sandbox; nothing runs on this host. Gemini models only.",
+            "type": "string",
+            "const": "gemini"
+          },
+          "context": {
+            "description": "Summarize a long conversation instead of overflowing the window. The orchestrator of a delegate syndicate only.",
+            "type": "object",
+            "properties": {
+              "compact_after_tokens": {
+                "type": "integer",
+                "minimum": 1000,
+                "maximum": 9007199254740991,
+                "description": "Compact when the last request's prompt passed this many tokens."
+              },
+              "keep_recent_events": {
+                "description": "Events kept verbatim after the summary. Default 6.",
+                "type": "integer",
+                "minimum": 1,
+                "maximum": 100
+              },
+              "summary_model": {
+                "description": "The model that writes the summary. Default: the agent's own.",
+                "type": "string",
+                "minLength": 1
+              }
+            },
+            "required": [
+              "compact_after_tokens"
+            ],
+            "additionalProperties": false
+          },
+          "examples": {
+            "description": "Few-shot exchanges (input, output) added to every request's instruction.",
+            "minItems": 1,
+            "maxItems": 20,
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "input": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "output": {
+                  "type": "string",
+                  "minLength": 1
+                }
+              },
+              "required": [
+                "input",
+                "output"
+              ],
+              "additionalProperties": false
+            }
+          },
+          "mode": {
+            "description": "\"task\": the agent works until it calls finish_task; its arguments (matching outputSchema) are the node's output. Workflow nodes only.",
+            "type": "string",
+            "const": "task"
+          },
+          "orchestration": {
+            "type": "object",
+            "properties": {
+              "role": {
+                "type": "string",
+                "enum": [
+                  "primary",
+                  "sub-agent"
+                ]
+              },
+              "delegates": {
+                "type": "array",
+                "items": {
+                  "type": "string"
+                }
+              }
+            },
+            "additionalProperties": false
+          },
+          "yaml_reference": {
+            "description": "A whole nested syndicate (filename under the agents dir) used as this subagent. An approval request or ask_user question raised inside it pauses the turn with the agent path (ADR 0110, ADR 0111): a delegate syndicate's gates anywhere, a dispatch syndicate's on its classifier (its routes never run nested), and a workflow's ask_user nodes and gates when it is delegated to as a subagent.",
+            "type": "string",
+            "minLength": 1
+          },
+          "a2a_agent_url": {
+            "description": "A remote agent over A2A: the server base URL or its agent-card URL. Needs no model or instruction; credentials come from A2A_AGENT_TOKENS, never YAML.",
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "required": [
+          "name",
+          "description"
+        ],
+        "additionalProperties": false,
+        "description": "A subagent: an inline agent, a nested syndicate (yaml_reference), or a remote A2A agent (a2a_agent_url).",
+        "anyOf": [
+          {
+            "required": [
+              "instruction"
+            ]
+          },
+          {
+            "required": [
+              "yaml_reference"
+            ]
+          },
+          {
+            "required": [
+              "a2a_agent_url"
+            ]
+          }
+        ],
+        "not": {
+          "required": [
+            "yaml_reference",
+            "a2a_agent_url"
+          ]
+        }
+      }
+    },
+    "dispatch": {
+      "type": "object",
+      "properties": {
+        "default_route": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Subagent used whenever routing yields no usable answer. Must name a declared subagent."
+        },
+        "route_key": {
+          "description": "JSON property holding the chosen route. Default \"route\".",
+          "type": "string"
+        },
+        "reason_key": {
+          "description": "JSON property holding the justification. Default \"reason\".",
+          "type": "string"
+        },
+        "route_overrides": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "route": {
+                "type": "string",
+                "minLength": 1,
+                "description": "Subagent to run on a match."
+              },
+              "pattern": {
+                "type": "string",
+                "minLength": 1,
+                "description": "JS regular expression source tested against the raw message."
+              },
+              "flags": {
+                "description": "Regex flags. Default \"i\".",
+                "type": "string"
+              },
+              "reason": {
+                "description": "Shown to the waiting user as the [STATUS] route note.",
+                "type": "string"
+              }
+            },
+            "required": [
+              "route",
+              "pattern"
+            ],
+            "additionalProperties": false
+          }
+        }
+      },
+      "required": [
+        "default_route"
+      ],
+      "additionalProperties": false,
+      "description": "Opts into PLAN-DISPATCH orchestration (lib/dispatch.ts)."
+    },
+    "workflow": {
+      "type": "object",
+      "properties": {
+        "edges": {
+          "minItems": 1,
+          "type": "array",
+          "items": {
+            "minItems": 2,
+            "type": "array",
+            "items": {
+              "anyOf": [
+                {
+                  "type": "string",
+                  "minLength": 1
+                },
+                {
+                  "minItems": 1,
+                  "type": "array",
+                  "items": {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "description": "Several nodes: fan-out when they follow one node, fan-in when one node follows them."
+                },
+                {
+                  "type": "object",
+                  "propertyNames": {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "additionalProperties": {
+                    "anyOf": [
+                      {
+                        "type": "string",
+                        "minLength": 1
+                      },
+                      {
+                        "minItems": 1,
+                        "type": "array",
+                        "items": {
+                          "type": "string",
+                          "minLength": 1
+                        }
+                      }
+                    ]
+                  },
+                  "description": "A routing map after a node: `{ <route>: <node or nodes>, default: <node> }`, matched against that node's output."
+                }
+              ]
+            }
+          },
+          "description": "Chains of nodes, each a list; `START` begins at least one. A routing map follows the node whose output it routes."
+        },
+        "nodes": {
+          "type": "object",
+          "propertyNames": {
+            "type": "string",
+            "minLength": 1
+          },
+          "additionalProperties": {
+            "type": "object",
+            "properties": {
+              "ask_user": {
+                "description": "Pause and ask the person this; the reply becomes the node's output.",
+                "type": "string",
+                "minLength": 1
+              },
+              "schema": {
+                "description": "JSON Schema a structured reply to ask_user must satisfy; plain text passes as is.",
+                "type": "object",
+                "propertyNames": {
+                  "type": "string"
+                },
+                "additionalProperties": {}
+              },
+              "join": {
+                "description": "Wait for every predecessor; output `{ <predecessor>: <output> }`.",
+                "type": "boolean",
+                "const": true
+              },
+              "map": {
+                "description": "Run this agent once per item of a list input, concurrently; output the list of results.",
+                "type": "string",
+                "minLength": 1
+              },
+              "max_parallel": {
+                "description": "Concurrency of map. Default 8.",
+                "type": "integer",
+                "exclusiveMinimum": 0,
+                "maximum": 9007199254740991
+              },
+              "tool": {
+                "description": "Run this registry tool with the node input as its arguments.",
+                "type": "string",
+                "minLength": 1
+              },
+              "route_key": {
+                "description": "Property of a JSON output holding the route. Default \"route\".",
+                "type": "string",
+                "minLength": 1
+              },
+              "retry": {
+                "description": "Retry this node on failure. Not on a map node: each item runs under its agent's own retry.",
+                "type": "object",
+                "properties": {
+                  "max_attempts": {
+                    "description": "Attempts including the first; 1 = no retry. Default 5.",
+                    "type": "integer",
+                    "exclusiveMinimum": 0,
+                    "maximum": 9007199254740991
+                  },
+                  "initial_delay": {
+                    "description": "Seconds before the first retry.",
+                    "type": "number",
+                    "minimum": 0
+                  },
+                  "max_delay": {
+                    "type": "number",
+                    "minimum": 0
+                  },
+                  "backoff_factor": {
+                    "type": "number",
+                    "exclusiveMinimum": 0
+                  },
+                  "jitter": {
+                    "description": "Randomness of the backoff; 0 = none. Default 1.",
+                    "type": "number",
+                    "minimum": 0
+                  },
+                  "exceptions": {
+                    "description": "Error names to retry on (the error's class or its `name`); every error when absent.",
+                    "minItems": 1,
+                    "type": "array",
+                    "items": {
+                      "type": "string",
+                      "pattern": "^[A-Za-z_$][\\w$]*$"
+                    }
+                  }
+                },
+                "additionalProperties": false
+              },
+              "timeout": {
+                "description": "Seconds this node may run before it fails. Not on a map node: each item runs under its agent's own timeout.",
+                "type": "number",
+                "exclusiveMinimum": 0
+              }
+            },
+            "additionalProperties": false,
+            "description": "A declared node (exactly one of ask_user, join, map, tool) or modifiers for an agent node (retry, timeout, route_key)."
+          }
+        },
+        "max_concurrency": {
+          "description": "Nodes that may run at once. Default: unbounded.",
+          "type": "integer",
+          "exclusiveMinimum": 0,
+          "maximum": 9007199254740991
+        }
+      },
+      "required": [
+        "edges"
+      ],
+      "additionalProperties": false,
+      "description": "Opts into a WORKFLOW: the syndicate as a graph (lib/workflow.ts). Cannot be combined with dispatch."
+    },
+    "retries": {
+      "description": "Self-correction on model and tool errors: the engine's reflect-and-retry. On by default.",
+      "type": "object",
+      "properties": {
+        "model_errors": {
+          "description": "Retries of a malformed model reply. Default 2; 0 off.",
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 5
+        },
+        "tool_errors": {
+          "description": "Retries of a tool that threw, with reflection guidance. Default 3; 0 off.",
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 5
+        }
+      },
+      "additionalProperties": false
+    },
+    "variables": {
+      "description": "Defaults for {{token}} interpolation. {{current_date}} is built in.",
+      "type": "object",
+      "propertyNames": {
+        "type": "string"
+      },
+      "additionalProperties": {
+        "type": [
+          "string",
+          "number",
+          "boolean"
+        ]
+      }
+    },
+    "memory_system": {
+      "description": "Persistence and semantic-memory layer.",
+      "type": "string",
+      "enum": [
+        "internal-only",
+        "session-only",
+        "long-term"
+      ]
+    },
+    "guards": {
+      "description": "Post-answer guards by name (lib/guards/index.ts).",
+      "type": "array",
+      "items": {
+        "type": "string",
+        "minLength": 1
+      }
+    },
+    "memory_namespace": {
+      "description": "Where long-term memory is stored: the syndicate name plus a generated id, written once and never recomputed (ADR 0020). Syndicates that declare the same namespace share memory.",
+      "type": "string",
+      "pattern": "^[A-Za-z0-9._-]{1,96}$"
+    },
+    "memory_extraction_rules": {
+      "description": "Domain rules appended to the fact-extraction prompt (long-term memory only).",
+      "type": "string"
+    },
+    "memory_extraction_model": {
+      "description": "The model that distils this syndicate's turns into memory records; default MEMORY_EXTRACTION_MODEL (ADR 0020).",
+      "type": "string",
+      "minLength": 1
+    },
+    "memory_retention_days": {
+      "description": "Days a memory fact is kept in this syndicate's namespace; older facts are deleted daily. Needs memory_namespace (ADR 0020).",
+      "type": "integer",
+      "exclusiveMinimum": 0,
+      "maximum": 9007199254740991
+    },
+    "max_steps": {
+      "description": "Hard cap on model calls per turn, subagents included. Default 50 (DEFAULT_MAX_STEPS) when unset.",
+      "type": "integer",
+      "exclusiveMinimum": 0,
+      "maximum": 9007199254740991
+    },
+    "max_concurrency": {
+      "description": "Subagent calls from one orchestrator step that run at once; the rest wait their turn, in call order. Default 4; 1 runs them one after another. A delegate syndicate only (ADR 0116).",
+      "type": "integer",
+      "exclusiveMinimum": 0,
+      "maximum": 32
+    },
+    "bundled_references": {
+      "description": "Written by the registry publisher, not by hand: every nested yaml_reference this syndicate reaches, as it was when published, so a registry version is one unit (ADR 0018). Nested references load from here instead of from files.",
+      "type": "object",
+      "propertyNames": {
+        "type": "string"
+      },
+      "additionalProperties": {
+        "type": "object",
+        "propertyNames": {
+          "type": "string"
+        },
+        "additionalProperties": {}
+      }
+    }
+  },
+  "required": [
+    "syndicate_name",
+    "orchestrator"
+  ],
+  "additionalProperties": false,
+  "description": "A Melchizedek syndicate definition (lib/loadSyndicate.ts).",
+  "title": "Melchizedek syndicate"
+}