dsh-searchops

Configuration

The plugin config is validated by a schema; unknown or malformed input is rejected with a clear, secret-free message.

Field	Type	Default	Meaning
sources	array	[]	Configured search sources (see below)
profiles	array	[]	Optional field profiles for non-standard schemas
defaultSource	string	""	Source used when a tool call omits source; with exactly one source it is the default automatically
allowInsecureHttp	boolean	false	Allow plain HTTP for non-loopback hosts. Off by default

Source object

Field	Default	Meaning
id	(system)	Read-only, system-generated unique id. Credential refs derive from it
name	—	Unique handle the agent uses to select the source (any language)
provider	opensearch	Only opensearch in v0.1; elasticsearch is a roadmap item
auth	basic	none, basic, or bearer
url	—	Base URL, e.g. https://search.example.com:9200. Must not contain credentials, a query string or a fragment
username	""	Optional non-secret username for basic auth
usernameRef	(derived)	Credential ref for the basic-auth username
passwordRef	(derived)	Credential ref for the basic-auth password
tokenRef	(derived)	Credential ref for the bearer token
profile	""	Name of the field profile bound to this source; empty = auto-detect

The resolver also accepts an object-map form ({"sources": {"prod": {...}}}) for convenience; the array form above is what the Settings UI edits.

---