dsh-key-rotation

High-throughput autonomous agent workflows, parallel subagent swarms, and multi-turn tool loops inevitably collide with upstream rate limits (HTTP 429, RPM/TPM exhaustion), daily quotas, or sudden provider outages. In a standard DeepSeek Harness deployment a single exhausted API key tears the entire execution chain apart, destroys the session replay state, and forces manual intervention.

dsh-key-rotation is built natively on the Cordis microkernel and hooks transparently into credential resolution and the streaming request layer. Without ever altering the provider identity it delivers key-pool rotation, pre-emptive token-bucket throttling (saturated keys are skipped before any network call is issued), least-connections concurrency balancing, and cross-provider failover cascades. When the entire primary provider pool enters cooldown, requests escalate automatically to a fallback provider; before a quarantined key is restored, a lightweight canary probe validates upstream availability so real user traffic is never exposed to an unstable endpoint.

The plugin also ships a rich visual dashboard (parallel sandbox-probe health matrix, live cooldown countdowns, drag-and-drop priority ordering, usage analytics charts), multi-platform interactive webhook alerts with HMAC-signed action buttons on Telegram, Discord, and Slack (admins can reset cooldowns or pause providers directly from their phone), TTFT latency percentile tracking, and strict key security — configuration files store only environment-variable reference names while real secrets live in the DSH Credentials vault, with only a five-character tail exposed to the browser for visual identification.

If you are running production-grade multi-agent pipelines, juggling several API keys to dodge 429 quota walls, or want seamless failover the moment an upstream provider hiccups, dsh-key-rotation is built for you.