The plugin config is validated by a schema; unknown or malformed input is rejected with a clear, secret-free message.

Field	Type	Default	Meaning
`sources`	array	`[]`	Configured search sources (see below)
`profiles`	array	`[]`	Optional field profiles for non-standard schemas
`defaultSource`	string	`""`	Source used when a tool call omits `source`; with exactly one source it is the default automatically
`allowInsecureHttp`	boolean	`false`	Allow plain HTTP for non-loopback hosts. Off by default

Field	Default	Meaning
`id`	(system)	Read-only, system-generated unique id. Credential refs derive from it
`name`	—	Unique handle the agent uses to select the source (any language)
`provider`	`opensearch`	Only `opensearch` in v0.1; `elasticsearch` is a roadmap item
`auth`	`basic`	`none`, `basic`, or `bearer`
`url`	—	Base URL, e.g. `https://search.example.com:9200`. Must not contain credentials, a query string or a fragment
`username`	`""`	Optional non-secret username for basic auth
`usernameRef`	(derived)	Credential ref for the basic-auth username
`passwordRef`	(derived)	Credential ref for the basic-auth password
`tokenRef`	(derived)	Credential ref for the bearer token
`profile`	`""`	Name of the field profile bound to this source; empty = auto-detect

The resolver also accepts an object-map form ({"sources": {"prod": {...}}}) for convenience; the array form above is what the Settings UI edits.

dsh-searchops

설치