dsh-ag-ui

Profile configuration

Environment variables are the shortest setup path. A Profile can instead override the bundle row in its own cordis.patch.yml:

- insert:
    - id: ag-ui
      name: dsh-ag-ui
      disabled: false
      config:
        provider: openai
        model: gpt-5.6-sol
        sharedSecret: !!js process.env.DSH_AG_UI_SHARED_SECRET
        path: /ag-ui
        maxThreads: 100
        frontendToolTimeoutMs: 300000

    - id: ag-ui-invariant
      name: dsh-ag-ui/invariant
      disabled: false

A later Profile patch replaces the bundle row's complete config; include every value that deployment needs.

Configuration

provider, model, and sharedSecret are required. sharedSecret must contain at least 16 UTF-8 bytes.

Field	Default	Purpose
path	/ag-ui	Exact Host HTTP route
provider	required	Registered DSH model provider route
model	required	Model ID owned by the provider
sharedSecret	required	Bearer secret shared only with the trusted BFF
tenantHeader	x-dsh-tenant-id	Trusted tenant identity header
userHeader	x-dsh-user-id	Trusted user identity header
allowNonLoopback	false	Permit a non-loopback Host bind explicitly
maxRequestBytes	262144	Maximum request body bytes
maxIdentityBytes	256	Maximum bytes per protocol or identity ID
maxMessages	256	Maximum message count per request
maxMessageBytes	524288	Maximum combined message JSON bytes
maxContexts	32	Maximum context entry count
maxContextBytes	131072	Maximum combined context JSON bytes
maxTools	32	Maximum browser Tool count
maxToolBytes	131072	Maximum browser Tool JSON bytes
maxToolSchemaDepth	16	Maximum browser Tool schema depth
maxForwardedPropsBytes	65536	Maximum forwardedProps JSON bytes
maxStateBytes	65536	Maximum state JSON bytes
maxThreads	100	Maximum process-local live threads
threadIdleMs	1800000	Idle thread lifetime
frontendToolTimeoutMs	300000	Maximum browser Tool result wait
maxRunEvents	4096	Maximum events retained per run
maxRunEventBytes	2097152	Maximum retained event bytes per run
maxRunsPerThread	32	Maximum retained run ledger entries per thread

A non-loopback DSH WebServer requires allowNonLoopback: true. Prefer a loopback Gateway behind a same-host authenticated BFF.