DeepSeek Harness Account Switcher (@local/account-switcher)
面向 SRE / 运维人员的 DeepSeek Harness 运维级多账号高可用平滑切换与凭据治理插件。
DevOps & SRE-grade multi-account high-availability failover and credential governance plugin for DeepSeek Harness (DSH).
English | 中文说明
中文说明
在高频次调用大模型、多 Agent 并发或自动化开发场景下，单一 DeepSeek 账号常面临配额消耗过快、触发 API 频率限制（Rate Limit / 429）或突发服务降级的痛点。
本插件以 SRE / 运维可观测性与高可用容灾思维 为核心设计理念，为 DeepSeek Harness 提供零停机热切换、任务并发保护、端到端延迟探测、实时配额监控与自动化凭据治理能力。
🛠️ 运维与 SRE 设计特性
flowchart LR
subgraph DSH_Runtime["DSH Host Runtime"]
Vault[("0600 本地凭据库\nVault")]
Watcher["凭据监听器\nrecord-updated"]
Switcher["热重载交换机\nHot-Swap Dispatcher"]
Mutex["任务互斥锁\nTask Mutex Guard"]
end
subgraph Observability["可观测性与探针"]
Probe["网络往返探针\nRTT Latency (ms)"]
Balance["配额监控\nBalance & Quota"]
end
subgraph DeepSeek_API["DeepSeek Cloud"]
Platform["/auth-api/users/current"]
Models["/models"]
BalAPI["/user/balance"]
end
Watcher -->|自动捕获持久化| Vault
Switcher -->|热重载| Mutex
Mutex -->|无运行中任务时安全交换| DeepSeek_API
Probe -->|健康探测| Models
Balance -->|额度感知| BalAPI
-
高可用主备故障转移与零停机热重载 (HA & Zero-Downtime Hot-Swapping)
- 通过重写底层 Platform Grant，实现毫秒级会话切换。
- 下一次模型调用即刻生效，无需重启 DSH 进程，保障大模型任务流的持续性。
-
会话互斥安全保护锁 (Session Mutex & Task Concurrency Guard)
- 切换前主动检查
agents.list() 中正在执行的任务数。
- 若当前账号仍有并发工作任务，拒绝切换，严防会话漂移导致任务状态损坏。
-
端到端网络延迟与可用性探针 (Active Latency Probing)
- 双向主动探针校验：平台用户状态（
/auth-api/v0/users/current）+ 模型能力握手（/models）。
- 实时测量各账号端到端网络往返延迟（RTT ms），为多账号最优路由提供量化指标。
-
资源容量与配额可观测性 (Quota & Balance Observability)
- 直连官方资金接口（
/user/balance），展示总余额、赠金（Granted）、充值金（Topped-up）及货币种类。
- 支持单卡片一键“刷新余额”，及时掌握配额水位，防患额度耗尽突发故障。
-
凭据生命周期与健康自愈 (Credential Hygiene & Self-Healing)
- 登录自愈：全自动捕获新登录凭据，热写入 Vault，杜绝人工误操作导致凭据遗失。
- 一键全量测活：并发测试库内全部账号健康度，自动标记失效凭据。
- 故障熔断剔除：一键清理（Prune）全部失效账号，保持凭据池的高可用与整洁。
-
零信任本地隔离与合规 (Zero-Trust Local Security)
- 凭据仅存储于宿主机受保护的凭据库（0600 权限），绝不上云、不外发任何第三方，符合企业级安全基线。
-
运维批处理与多环境镜像导入/导出 (Batch Operations)
- 批量导入：支持标准制表符行（
账号\tToken）、纯 Token 列表、对象数组 JSON、字典映射等全形态输入。
- 备份与迁移：支持导出为 TSV、JSON、Tokens 纯列表，方便集群化多机镜像同步。
English
In intensive LLM agent development and automated CI/CD workflows, relying on a single DeepSeek account frequently leads to quota exhaustion, rate-limiting (HTTP 429), or service degradation.
This plugin is architected from an SRE and operational resilience perspective, introducing zero-downtime hot-swapping, concurrency task guards, live latency probing, quota observability, and automated credential hygiene into DeepSeek Harness.
🛠️ DevOps & SRE Highlights
-
Zero-Downtime Credential Hot-Swapping
- Swaps stored platform grants in memory without restarting the DSH process.
- The subsequent model turn immediately uses the new credential.
-
Task Concurrency Guard (Session Mutex)
- Inspects running agent tasks before executing a switch.
- Refuses switching if tasks are actively bound to the current credential, preventing session race conditions.
-
Active Latency & Availability Probing
- Two-way active probing via
/auth-api/v0/users/current and /models.
- Displays live round-trip network latency (RTT in ms), allowing operations teams to route requests via the fastest credentials.
-
Resource Quota & Balance Observability
- Integrates directly with official endpoints (
api.deepseek.com/user/balance).
- Tracks total, granted, and topped-up amounts across currencies (CNY/USD).
-
Automated Credential Hygiene & Pruning
- Auto-Persistence: Listens to
credentials/record-updated and persists newly signed-in accounts into the local vault automatically.
- Concurrent Health Check: Probes all credentials in parallel with pass/fail metrics.
- Pruning Circuit Breaker: One-click cleanup of expired/invalid accounts.
-
Zero-Trust Local Security
- Credentials reside exclusively within the local encrypted vault (0600 file permissions). No credentials ever leave your host.
-
Multi-Format Batch Import & Backup
- Supports delimited text (
name\ttoken, phone:token), bare tokens, and standard JSON formats.
- One-click export to TSV, JSON, or token lists for cross-machine migration.
📦 安装与启用 (Installation)
# 1. 克隆本插件到 DSH profiles 模块目录
git clone https://github.com/keerzzz/dsh-account-switcher.git ~/.dsh/profiles/web/node_modules/@local/account-switcher
# 2. 在 DSH 配置文件 cordis.yml 中确认加载:
# - id: account-switcher
# name: '@local/account-switcher'
# 3. 重启 DSH 服务即可在设置面板中体验
pnpm dsh web
📄 License
MIT License © 2026 keerzzz
