melchizedek-agents 1.1.0 → 1.3.0

package/config/agents/syndicate.schema.json

@@ -156,7 +156,7 @@
             }
           },
           "additionalProperties": {},
-          "description": "Deprecated v1 spelling (ADR 0115): write `sampling` (temperature, top_p, max_output_tokens, stop), `output.mime` (responseMimeType) and `reasoning` (thinkingConfig, reasoningEffort) instead; npx melchizedek-codemod rewrites a file. Still read: the Gemini GenerateContentConfig shape the engine takes. Do not set tools here.",
+          "description": "Deprecated v1 spelling (ADR 0115): write `sampling` (temperature, top_p, max_output_tokens, stop), `output.mime` (responseMimeType), `reasoning` (thinkingConfig, reasoningEffort) and `tool_choice` (toolConfig.functionCallingConfig) instead; npx melchizedek-codemod rewrites a file. Still read: the Gemini GenerateContentConfig shape the engine takes. Do not set tools here.",
           "deprecated": true
         },
         "reasoning": {
@@ -167,7 +167,9 @@
                 "none",
                 "low",
                 "medium",
-                "high"
+                "high",
+                "xhigh",
+                "max"
               ]
             },
             {
@@ -186,7 +188,7 @@
               "additionalProperties": false
             }
           ],
-          "description": "How hard this agent reasons, on any provider: none | low | medium | high, or { budget_tokens: <int> }. Replaces generateContentConfig.thinkingConfig and reasoningEffort (ADR 0047)."
+          "description": "How hard this agent reasons, on any provider: none | low | medium | high | xhigh | max, or { budget_tokens: <int> }. xhigh and max reach the models that take them; elsewhere they go as the model's highest setting (ADR 0117). Replaces generateContentConfig.thinkingConfig and reasoningEffort (ADR 0047)."
         },
         "sampling": {
           "type": "object",
@@ -242,6 +244,33 @@
           "description": "What this agent's final reply is (ADR 0115). Replaces outputSchema and generateContentConfig.responseMimeType; cannot be combined with them.",
           "minProperties": 1
         },
+        "tool_choice": {
+          "anyOf": [
+            {
+              "type": "string",
+              "enum": [
+                "auto",
+                "none",
+                "required"
+              ]
+            },
+            {
+              "type": "object",
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "minLength": 1,
+                  "description": "The one tool the model must call: a name from this agent's tools, subagents or MCP tools."
+                }
+              },
+              "required": [
+                "name"
+              ],
+              "additionalProperties": false
+            }
+          ],
+          "description": "Which tools the model may call, on any provider (ADR 0117): auto (the default), none, required (some tool), or { name: <tool> } (that tool). A provider that rejects forcing sends a weaker choice and marks the span llm.tool_choice.weakened. Replaces generateContentConfig.toolConfig.functionCallingConfig; cannot be combined with it."
+        },
         "model_overrides": {
           "type": "object",
           "properties": {
@@ -433,7 +462,7 @@
           "deprecated": true
         },
         "mcp_server_url": {
-          "description": "MCP server (SSE) whose tools are discovered at runtime and merged with `tools`.",
+          "description": "MCP server (Streamable HTTP, or legacy SSE) whose tools are discovered at runtime and merged with `tools`. For more than one server, use mcp_servers.",
           "type": "string"
         },
         "mcp_tools": {
@@ -465,15 +494,20 @@
                   ],
                   "description": "authorization_code: each user's own token, granted through the consent pause (ADR 0085). client_credentials: the server's own token, from the token endpoint."
                 },
+                "client_registration": {
+                  "description": "\"dynamic\": an MCP server's authorization_code grant with no pre-issued client. The authorization server is discovered from the MCP server (RFC 9728, RFC 8414) and this deployment registers itself as a public PKCE client (RFC 7591), once per server and redirect URI, sealed in the credential store (ADR 0124). Every discovered host must be on the operator's OAuth host allowlist. MCP servers only; no client id, client secret or endpoint URL beside it.",
+                  "type": "string",
+                  "const": "dynamic"
+                },
                 "authorization_url": {
-                  "description": "The provider's authorization endpoint (https). authorization_code only.",
+                  "description": "The provider's authorization endpoint (https). authorization_code only; discovered with client_registration: dynamic.",
                   "type": "string",
                   "format": "uri"
                 },
                 "token_url": {
+                  "description": "The provider's token endpoint (https). Required, except with client_registration: dynamic, which discovers it.",
                   "type": "string",
-                  "format": "uri",
-                  "description": "The provider's token endpoint (https)."
+                  "format": "uri"
                 },
                 "client_id": {
                   "description": "The OAuth client id, written out (it is not a secret). Or client_id_env.",
@@ -501,7 +535,7 @@
                   }
                 },
                 "authorization_params": {
-                  "description": "Extra authorization parameters (e.g. access_type: offline). authorization_code only; never state, redirect_uri, scope, client_id or the PKCE pair.",
+                  "description": "Extra authorization parameters (e.g. access_type: offline). authorization_code only; never state, redirect_uri, scope, client_id, resource or the PKCE pair.",
                   "type": "object",
                   "propertyNames": {
                     "type": "string",
@@ -515,8 +549,7 @@
               },
               "required": [
                 "provider",
-                "grant",
-                "token_url"
+                "grant"
               ],
               "additionalProperties": false,
               "description": "An OAuth 2 access token sent as a bearer token on every call (lib/tools/oauthTools.ts). Secrets come from environment variable names, never values."
@@ -527,6 +560,147 @@
           ],
           "additionalProperties": false
         },
+        "mcp_transport": {
+          "description": "How mcp_server_url is reached: auto (the default), streamable_http or sse (ADR 0124). Needs mcp_server_url.",
+          "type": "string",
+          "enum": [
+            "auto",
+            "streamable_http",
+            "sse"
+          ]
+        },
+        "mcp_servers": {
+          "description": "Several MCP servers, each with the tools this agent may use from it, its grant and its transport (ADR 0124). Cannot be combined with mcp_server_url.",
+          "minItems": 1,
+          "maxItems": 16,
+          "type": "array",
+          "items": {
+            "type": "object",
+            "properties": {
+              "name": {
+                "type": "string",
+                "pattern": "^[a-z][a-z0-9_-]{0,63}$",
+                "description": "A short name for the server, unique on this agent: logs and errors name it."
+              },
+              "url": {
+                "type": "string",
+                "format": "uri",
+                "description": "The MCP server's URL: its Streamable HTTP endpoint, or a legacy SSE endpoint. Checked by the SSRF guard."
+              },
+              "tools": {
+                "minItems": 1,
+                "type": "array",
+                "items": {
+                  "type": "string",
+                  "minLength": 1
+                },
+                "description": "The server's tools this agent may use, by name; any other tool it lists is not exposed. A name may appear on one server only, and never among the agent's own tools. require_approval may name these."
+              },
+              "auth": {
+                "description": "The OAuth grant this server takes (ADR 0112, ADR 0124). Without it, MCP_BEARER_TOKENS applies.",
+                "type": "object",
+                "properties": {
+                  "oauth2": {
+                    "type": "object",
+                    "properties": {
+                      "provider": {
+                        "type": "string",
+                        "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+                        "description": "The credential store's name for the provider (e.g. github). Every tool naming it shares one grant."
+                      },
+                      "grant": {
+                        "type": "string",
+                        "enum": [
+                          "authorization_code",
+                          "client_credentials"
+                        ],
+                        "description": "authorization_code: each user's own token, granted through the consent pause (ADR 0085). client_credentials: the server's own token, from the token endpoint."
+                      },
+                      "client_registration": {
+                        "description": "\"dynamic\": an MCP server's authorization_code grant with no pre-issued client. The authorization server is discovered from the MCP server (RFC 9728, RFC 8414) and this deployment registers itself as a public PKCE client (RFC 7591), once per server and redirect URI, sealed in the credential store (ADR 0124). Every discovered host must be on the operator's OAuth host allowlist. MCP servers only; no client id, client secret or endpoint URL beside it.",
+                        "type": "string",
+                        "const": "dynamic"
+                      },
+                      "authorization_url": {
+                        "description": "The provider's authorization endpoint (https). authorization_code only; discovered with client_registration: dynamic.",
+                        "type": "string",
+                        "format": "uri"
+                      },
+                      "token_url": {
+                        "description": "The provider's token endpoint (https). Required, except with client_registration: dynamic, which discovers it.",
+                        "type": "string",
+                        "format": "uri"
+                      },
+                      "client_id": {
+                        "description": "The OAuth client id, written out (it is not a secret). Or client_id_env.",
+                        "type": "string",
+                        "minLength": 1,
+                        "maxLength": 512
+                      },
+                      "client_id_env": {
+                        "description": "Environment variable holding the client id. Or client_id.",
+                        "type": "string",
+                        "pattern": "^[A-Z_][A-Z0-9_]*$"
+                      },
+                      "client_secret_env": {
+                        "description": "Environment variable NAME holding the client secret, never the value. Required for client_credentials; omit for a public client (PKCE alone).",
+                        "type": "string",
+                        "pattern": "^[A-Z_][A-Z0-9_]*$"
+                      },
+                      "scopes": {
+                        "description": "The scopes the grant asks for.",
+                        "maxItems": 64,
+                        "type": "array",
+                        "items": {
+                          "type": "string",
+                          "pattern": "^[\\x21\\x23-\\x5b\\x5d-\\x7e]{1,256}$"
+                        }
+                      },
+                      "authorization_params": {
+                        "description": "Extra authorization parameters (e.g. access_type: offline). authorization_code only; never state, redirect_uri, scope, client_id, resource or the PKCE pair.",
+                        "type": "object",
+                        "propertyNames": {
+                          "type": "string",
+                          "pattern": "^[A-Za-z0-9_.-]{1,64}$"
+                        },
+                        "additionalProperties": {
+                          "type": "string",
+                          "maxLength": 512
+                        }
+                      }
+                    },
+                    "required": [
+                      "provider",
+                      "grant"
+                    ],
+                    "additionalProperties": false,
+                    "description": "An OAuth 2 access token sent as a bearer token on every call (lib/tools/oauthTools.ts). Secrets come from environment variable names, never values."
+                  }
+                },
+                "required": [
+                  "oauth2"
+                ],
+                "additionalProperties": false
+              },
+              "transport": {
+                "type": "string",
+                "enum": [
+                  "auto",
+                  "streamable_http",
+                  "sse"
+                ],
+                "description": "How the MCP server is reached: auto (the default) tries Streamable HTTP and falls back to the legacy SSE transport on the spec's signal; streamable_http or sse use that one only (ADR 0124)."
+              }
+            },
+            "required": [
+              "name",
+              "url",
+              "tools"
+            ],
+            "additionalProperties": false,
+            "description": "One MCP server among several (ADR 0124)."
+          }
+        },
         "skills": {
           "type": "object",
           "properties": {
@@ -656,15 +830,20 @@
                         ],
                         "description": "authorization_code: each user's own token, granted through the consent pause (ADR 0085). client_credentials: the server's own token, from the token endpoint."
                       },
+                      "client_registration": {
+                        "description": "\"dynamic\": an MCP server's authorization_code grant with no pre-issued client. The authorization server is discovered from the MCP server (RFC 9728, RFC 8414) and this deployment registers itself as a public PKCE client (RFC 7591), once per server and redirect URI, sealed in the credential store (ADR 0124). Every discovered host must be on the operator's OAuth host allowlist. MCP servers only; no client id, client secret or endpoint URL beside it.",
+                        "type": "string",
+                        "const": "dynamic"
+                      },
                       "authorization_url": {
-                        "description": "The provider's authorization endpoint (https). authorization_code only.",
+                        "description": "The provider's authorization endpoint (https). authorization_code only; discovered with client_registration: dynamic.",
                         "type": "string",
                         "format": "uri"
                       },
                       "token_url": {
+                        "description": "The provider's token endpoint (https). Required, except with client_registration: dynamic, which discovers it.",
                         "type": "string",
-                        "format": "uri",
-                        "description": "The provider's token endpoint (https)."
+                        "format": "uri"
                       },
                       "client_id": {
                         "description": "The OAuth client id, written out (it is not a secret). Or client_id_env.",
@@ -692,7 +871,7 @@
                         }
                       },
                       "authorization_params": {
-                        "description": "Extra authorization parameters (e.g. access_type: offline). authorization_code only; never state, redirect_uri, scope, client_id or the PKCE pair.",
+                        "description": "Extra authorization parameters (e.g. access_type: offline). authorization_code only; never state, redirect_uri, scope, client_id, resource or the PKCE pair.",
                         "type": "object",
                         "propertyNames": {
                           "type": "string",
@@ -706,8 +885,7 @@
                     },
                     "required": [
                       "provider",
-                      "grant",
-                      "token_url"
+                      "grant"
                     ],
                     "additionalProperties": false,
                     "description": "An OAuth 2 access token sent as a bearer token on every call (lib/tools/oauthTools.ts). Secrets come from environment variable names, never values."
@@ -965,7 +1143,7 @@
               }
             },
             "additionalProperties": {},
-            "description": "Deprecated v1 spelling (ADR 0115): write `sampling` (temperature, top_p, max_output_tokens, stop), `output.mime` (responseMimeType) and `reasoning` (thinkingConfig, reasoningEffort) instead; npx melchizedek-codemod rewrites a file. Still read: the Gemini GenerateContentConfig shape the engine takes. Do not set tools here.",
+            "description": "Deprecated v1 spelling (ADR 0115): write `sampling` (temperature, top_p, max_output_tokens, stop), `output.mime` (responseMimeType), `reasoning` (thinkingConfig, reasoningEffort) and `tool_choice` (toolConfig.functionCallingConfig) instead; npx melchizedek-codemod rewrites a file. Still read: the Gemini GenerateContentConfig shape the engine takes. Do not set tools here.",
             "deprecated": true
           },
           "reasoning": {
@@ -976,7 +1154,9 @@
                   "none",
                   "low",
                   "medium",
-                  "high"
+                  "high",
+                  "xhigh",
+                  "max"
                 ]
               },
               {
@@ -995,7 +1175,7 @@
                 "additionalProperties": false
               }
             ],
-            "description": "How hard this agent reasons, on any provider: none | low | medium | high, or { budget_tokens: <int> }. Replaces generateContentConfig.thinkingConfig and reasoningEffort (ADR 0047)."
+            "description": "How hard this agent reasons, on any provider: none | low | medium | high | xhigh | max, or { budget_tokens: <int> }. xhigh and max reach the models that take them; elsewhere they go as the model's highest setting (ADR 0117). Replaces generateContentConfig.thinkingConfig and reasoningEffort (ADR 0047)."
           },
           "sampling": {
             "type": "object",
@@ -1051,6 +1231,33 @@
             "description": "What this agent's final reply is (ADR 0115). Replaces outputSchema and generateContentConfig.responseMimeType; cannot be combined with them.",
             "minProperties": 1
           },
+          "tool_choice": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "auto",
+                  "none",
+                  "required"
+                ]
+              },
+              {
+                "type": "object",
+                "properties": {
+                  "name": {
+                    "type": "string",
+                    "minLength": 1,
+                    "description": "The one tool the model must call: a name from this agent's tools, subagents or MCP tools."
+                  }
+                },
+                "required": [
+                  "name"
+                ],
+                "additionalProperties": false
+              }
+            ],
+            "description": "Which tools the model may call, on any provider (ADR 0117): auto (the default), none, required (some tool), or { name: <tool> } (that tool). A provider that rejects forcing sends a weaker choice and marks the span llm.tool_choice.weakened. Replaces generateContentConfig.toolConfig.functionCallingConfig; cannot be combined with it."
+          },
           "model_overrides": {
             "type": "object",
             "properties": {
@@ -1242,7 +1449,7 @@
             "deprecated": true
           },
           "mcp_server_url": {
-            "description": "MCP server (SSE) whose tools are discovered at runtime and merged with `tools`.",
+            "description": "MCP server (Streamable HTTP, or legacy SSE) whose tools are discovered at runtime and merged with `tools`. For more than one server, use mcp_servers.",
             "type": "string"
           },
           "mcp_tools": {
@@ -1274,15 +1481,20 @@
                     ],
                     "description": "authorization_code: each user's own token, granted through the consent pause (ADR 0085). client_credentials: the server's own token, from the token endpoint."
                   },
+                  "client_registration": {
+                    "description": "\"dynamic\": an MCP server's authorization_code grant with no pre-issued client. The authorization server is discovered from the MCP server (RFC 9728, RFC 8414) and this deployment registers itself as a public PKCE client (RFC 7591), once per server and redirect URI, sealed in the credential store (ADR 0124). Every discovered host must be on the operator's OAuth host allowlist. MCP servers only; no client id, client secret or endpoint URL beside it.",
+                    "type": "string",
+                    "const": "dynamic"
+                  },
                   "authorization_url": {
-                    "description": "The provider's authorization endpoint (https). authorization_code only.",
+                    "description": "The provider's authorization endpoint (https). authorization_code only; discovered with client_registration: dynamic.",
                     "type": "string",
                     "format": "uri"
                   },
                   "token_url": {
+                    "description": "The provider's token endpoint (https). Required, except with client_registration: dynamic, which discovers it.",
                     "type": "string",
-                    "format": "uri",
-                    "description": "The provider's token endpoint (https)."
+                    "format": "uri"
                   },
                   "client_id": {
                     "description": "The OAuth client id, written out (it is not a secret). Or client_id_env.",
@@ -1310,7 +1522,7 @@
                     }
                   },
                   "authorization_params": {
-                    "description": "Extra authorization parameters (e.g. access_type: offline). authorization_code only; never state, redirect_uri, scope, client_id or the PKCE pair.",
+                    "description": "Extra authorization parameters (e.g. access_type: offline). authorization_code only; never state, redirect_uri, scope, client_id, resource or the PKCE pair.",
                     "type": "object",
                     "propertyNames": {
                       "type": "string",
@@ -1324,8 +1536,7 @@
                 },
                 "required": [
                   "provider",
-                  "grant",
-                  "token_url"
+                  "grant"
                 ],
                 "additionalProperties": false,
                 "description": "An OAuth 2 access token sent as a bearer token on every call (lib/tools/oauthTools.ts). Secrets come from environment variable names, never values."
@@ -1336,6 +1547,147 @@
             ],
             "additionalProperties": false
           },
+          "mcp_transport": {
+            "description": "How mcp_server_url is reached: auto (the default), streamable_http or sse (ADR 0124). Needs mcp_server_url.",
+            "type": "string",
+            "enum": [
+              "auto",
+              "streamable_http",
+              "sse"
+            ]
+          },
+          "mcp_servers": {
+            "description": "Several MCP servers, each with the tools this agent may use from it, its grant and its transport (ADR 0124). Cannot be combined with mcp_server_url.",
+            "minItems": 1,
+            "maxItems": 16,
+            "type": "array",
+            "items": {
+              "type": "object",
+              "properties": {
+                "name": {
+                  "type": "string",
+                  "pattern": "^[a-z][a-z0-9_-]{0,63}$",
+                  "description": "A short name for the server, unique on this agent: logs and errors name it."
+                },
+                "url": {
+                  "type": "string",
+                  "format": "uri",
+                  "description": "The MCP server's URL: its Streamable HTTP endpoint, or a legacy SSE endpoint. Checked by the SSRF guard."
+                },
+                "tools": {
+                  "minItems": 1,
+                  "type": "array",
+                  "items": {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "description": "The server's tools this agent may use, by name; any other tool it lists is not exposed. A name may appear on one server only, and never among the agent's own tools. require_approval may name these."
+                },
+                "auth": {
+                  "description": "The OAuth grant this server takes (ADR 0112, ADR 0124). Without it, MCP_BEARER_TOKENS applies.",
+                  "type": "object",
+                  "properties": {
+                    "oauth2": {
+                      "type": "object",
+                      "properties": {
+                        "provider": {
+                          "type": "string",
+                          "pattern": "^[a-z0-9][a-z0-9._-]{0,63}$",
+                          "description": "The credential store's name for the provider (e.g. github). Every tool naming it shares one grant."
+                        },
+                        "grant": {
+                          "type": "string",
+                          "enum": [
+                            "authorization_code",
+                            "client_credentials"
+                          ],
+                          "description": "authorization_code: each user's own token, granted through the consent pause (ADR 0085). client_credentials: the server's own token, from the token endpoint."
+                        },
+                        "client_registration": {
+                          "description": "\"dynamic\": an MCP server's authorization_code grant with no pre-issued client. The authorization server is discovered from the MCP server (RFC 9728, RFC 8414) and this deployment registers itself as a public PKCE client (RFC 7591), once per server and redirect URI, sealed in the credential store (ADR 0124). Every discovered host must be on the operator's OAuth host allowlist. MCP servers only; no client id, client secret or endpoint URL beside it.",
+                          "type": "string",
+                          "const": "dynamic"
+                        },
+                        "authorization_url": {
+                          "description": "The provider's authorization endpoint (https). authorization_code only; discovered with client_registration: dynamic.",
+                          "type": "string",
+                          "format": "uri"
+                        },
+                        "token_url": {
+                          "description": "The provider's token endpoint (https). Required, except with client_registration: dynamic, which discovers it.",
+                          "type": "string",
+                          "format": "uri"
+                        },
+                        "client_id": {
+                          "description": "The OAuth client id, written out (it is not a secret). Or client_id_env.",
+                          "type": "string",
+                          "minLength": 1,
+                          "maxLength": 512
+                        },
+                        "client_id_env": {
+                          "description": "Environment variable holding the client id. Or client_id.",
+                          "type": "string",
+                          "pattern": "^[A-Z_][A-Z0-9_]*$"
+                        },
+                        "client_secret_env": {
+                          "description": "Environment variable NAME holding the client secret, never the value. Required for client_credentials; omit for a public client (PKCE alone).",
+                          "type": "string",
+                          "pattern": "^[A-Z_][A-Z0-9_]*$"
+                        },
+                        "scopes": {
+                          "description": "The scopes the grant asks for.",
+                          "maxItems": 64,
+                          "type": "array",
+                          "items": {
+                            "type": "string",
+                            "pattern": "^[\\x21\\x23-\\x5b\\x5d-\\x7e]{1,256}$"
+                          }
+                        },
+                        "authorization_params": {
+                          "description": "Extra authorization parameters (e.g. access_type: offline). authorization_code only; never state, redirect_uri, scope, client_id, resource or the PKCE pair.",
+                          "type": "object",
+                          "propertyNames": {
+                            "type": "string",
+                            "pattern": "^[A-Za-z0-9_.-]{1,64}$"
+                          },
+                          "additionalProperties": {
+                            "type": "string",
+                            "maxLength": 512
+                          }
+                        }
+                      },
+                      "required": [
+                        "provider",
+                        "grant"
+                      ],
+                      "additionalProperties": false,
+                      "description": "An OAuth 2 access token sent as a bearer token on every call (lib/tools/oauthTools.ts). Secrets come from environment variable names, never values."
+                    }
+                  },
+                  "required": [
+                    "oauth2"
+                  ],
+                  "additionalProperties": false
+                },
+                "transport": {
+                  "type": "string",
+                  "enum": [
+                    "auto",
+                    "streamable_http",
+                    "sse"
+                  ],
+                  "description": "How the MCP server is reached: auto (the default) tries Streamable HTTP and falls back to the legacy SSE transport on the spec's signal; streamable_http or sse use that one only (ADR 0124)."
+                }
+              },
+              "required": [
+                "name",
+                "url",
+                "tools"
+              ],
+              "additionalProperties": false,
+              "description": "One MCP server among several (ADR 0124)."
+            }
+          },
           "skills": {
             "type": "object",
             "properties": {
@@ -1465,15 +1817,20 @@
                           ],
                           "description": "authorization_code: each user's own token, granted through the consent pause (ADR 0085). client_credentials: the server's own token, from the token endpoint."
                         },
+                        "client_registration": {
+                          "description": "\"dynamic\": an MCP server's authorization_code grant with no pre-issued client. The authorization server is discovered from the MCP server (RFC 9728, RFC 8414) and this deployment registers itself as a public PKCE client (RFC 7591), once per server and redirect URI, sealed in the credential store (ADR 0124). Every discovered host must be on the operator's OAuth host allowlist. MCP servers only; no client id, client secret or endpoint URL beside it.",
+                          "type": "string",
+                          "const": "dynamic"
+                        },
                         "authorization_url": {
-                          "description": "The provider's authorization endpoint (https). authorization_code only.",
+                          "description": "The provider's authorization endpoint (https). authorization_code only; discovered with client_registration: dynamic.",
                           "type": "string",
                           "format": "uri"
                         },
                         "token_url": {
+                          "description": "The provider's token endpoint (https). Required, except with client_registration: dynamic, which discovers it.",
                           "type": "string",
-                          "format": "uri",
-                          "description": "The provider's token endpoint (https)."
+                          "format": "uri"
                         },
                         "client_id": {
                           "description": "The OAuth client id, written out (it is not a secret). Or client_id_env.",
@@ -1501,7 +1858,7 @@
                           }
                         },
                         "authorization_params": {
-                          "description": "Extra authorization parameters (e.g. access_type: offline). authorization_code only; never state, redirect_uri, scope, client_id or the PKCE pair.",
+                          "description": "Extra authorization parameters (e.g. access_type: offline). authorization_code only; never state, redirect_uri, scope, client_id, resource or the PKCE pair.",
                           "type": "object",
                           "propertyNames": {
                             "type": "string",
@@ -1515,8 +1872,7 @@
                       },
                       "required": [
                         "provider",
-                        "grant",
-                        "token_url"
+                        "grant"
                       ],
                       "additionalProperties": false,
                       "description": "An OAuth 2 access token sent as a bearer token on every call (lib/tools/oauthTools.ts). Secrets come from environment variable names, never values."
@@ -1613,7 +1969,7 @@
             "additionalProperties": false
           },
           "yaml_reference": {
-            "description": "A whole nested syndicate (filename under the agents dir) used as this subagent. An approval request or ask_user question raised inside it pauses the turn with the agent path (ADR 0110, ADR 0111): a delegate syndicate's gates anywhere, a dispatch syndicate's on its classifier (its routes never run nested), and a workflow's ask_user nodes and gates when it is delegated to as a subagent.",
+            "description": "A whole nested syndicate (filename under the agents dir) used as this subagent. An approval request or ask_user question raised inside it pauses the turn with the agent path (ADR 0110, ADR 0111): a delegate syndicate's gates anywhere, a dispatch syndicate's on its routes, which it classifies and runs as at the top, its route's answer being its own (ADR 0120), and a workflow's ask_user nodes and gates, wherever each runs: delegated to as a subagent, as a dispatch route or as a workflow node (ADR 0119).",
             "type": "string",
             "minLength": 1
           },