Configuration

Field	Default	Meaning
`enabled`	`true`	Master switch.
`fallbacks`	`[]`	Ordered fallback routes `{provider, model}`; must point at providers with a registered adapter.
`tripCodes`	`RATE_LIMIT, SERVER, TIMEOUT, TRANSPORT, QUOTA, EMPTY_RESPONSE`	Failure codes that count toward a circuit; e.g. `AUTH`/`INVALID_CREDENTIAL` stay terminal.
`modelCircuitThreshold`	`2`	Failures inside the burst window that open a model circuit.
`modelCooldownMs`	`60000`	Cooldown before an open model circuit is probed.
`platformCircuitThreshold`	`2`	Distinct open models that open the whole provider.
`platformCooldownMs`	`120000`	Provider-wide cooldown.
`burstWindowMs`	`300000`	Failures older than this start a fresh burst.
`enableProbe`	`true`	Probe open models after cooldown to recover circuits.
`probeMaxTokens`	`8`	Output cap for probe calls.
`stripReasoningEffort`	`true`	Drop the primary's reasoning effort when failing over (fallbacks may not support it).
`notifyUser`	`true`	Append a user-visible message when a route switches.

dsh-model-failover