---

Project overview

[email protected] is a community Host plugin for DeepSeek Harness. It binds cancelable, no-tools auxiliary model calls to an already-live Session, applies per-Session policy, and records usage in a dedicated ledger backed by the official storageDomain service. The current compile and metadata target is official Host 0.1.1-rc.2; exact Host 0.1.0-rc.8 remains supported.

The published 0.1.1 tarball has standalone value without SeekTTY or Clarify: official web Typert remotes auxiliary-runtime/snapshot and auxiliary-runtime/cancel work on stock Host 0.1.1-rc.2. Same-process run stays private to other Host plugins. Clarify and SeekTTY remain optional consumers, not install requirements. Standalone T1 does not replace the published rollback joint baseline.

Clarify can use Auxiliary Runtime's same-process run service to generate contextual questions, options, and evolving Draft previews outside the main Session transcript. SeekTTY can consume the read-only snapshot and show Official, Auxiliary, and Combined values in /status while the capability is healthy.

                       +----------------------+
                       | DeepSeek Harness     |
                       | live Session         |
                       | official model route |
                       +----------+-----------+
                                  |
                           llm.prepareCall
                                  |
                                  v
+----------------+       +----------------------+       +----------------+
| Clarify        | ----> | Auxiliary Runtime    | ----> | Provider stream|
| same-process   | run   | admission / cancel   |       | usage chunks   |
| Draft preview  | <---- | bounded live output  | <---- | final status   |
+----------------+       +----------+-----------+       +----------------+
                                  |
                                  | durable rows
                                  v
                       +----------------------+
                       | storageDomain        |
                       | auxiliary_runtime v0 |
                       | calls / policies     |
                       +----------+-----------+
                                  |
                           read-only snapshot
                                  v
                       +----------------------+
                       | SeekTTY /status      |
                       | Official / Auxiliary |
                       | Combined             |
                       +----------------------+

Three sourced usage views

View	Source and meaning
Official	The official Host tokenUsage projection, owned by the Agent loop.
Auxiliary	This plugin's auxiliary_runtime ledger, aggregated from authoritative call rows.
Combined	A read-time, bucket-by-bucket sum of Official and Auxiliary values.

The four disjoint buckets are uncachedInputTokens, outputTokens, cacheReadTokens, and cacheWriteTokens. Combined values are derived for consumers and stay outside the official projection.

Main Session transcript

Auxiliary calls use the existing Session as an identity and routing fence. The main transcript receives formal messages through the normal Session flow, after the user submits an accepted Draft. Clarify questions, answers, and Draft previews remain in Clarify's temporary Host state.

Durable auxiliary ledger

Durable rows contain identifiers, purpose, status, the four token buckets, usageRecorded, normalized failure { category, code }, and timestamps. Prompts, messages, system text, model output, custom answers, credentials, environment values, and filesystem paths remain outside storage. Failure records contain only the normalized { category, code }; the official LlmFailure.message stays outside storage.

Runtime design

Admission, usage, and replay

run writes a durable running row before llm.prepareCall and prepared.stream. Prepared requests complete token-limit admission after provider metadata has been materialized and before streaming begins. The latest provider usage chunk replaces the four buckets on the authoritative row; usageRecorded distinguishes an observed all-zero report from a missing report. Recorded usage survives a later error or aborted finish.

Successful live calls return model text ephemerally to the same-process caller, joined in stream order and bounded to 65,536 UTF-16 code units. Terminal replay returns the durable status and usage with replayed: true and output: null; a caller that needs new text uses a new callId. Active-id reuse, cross-Session reuse, and purpose changes are reported as conflicts.

Limits and cancellation

Per-Session policy covers maxConcurrentCalls, maxCallsPerSession, and maxAuxiliaryTotalTokens. Limits combine recorded usage with process-local reservations for in-flight calls. Provider-reported usage becomes authoritative after dispatch, including values above the initial reservation.

Cancellation composes the caller signal and service signal through AbortController. Provider failures preserve official categories such as QUOTA and CONTEXT_WINDOW_EXCEEDED. Durable running rows found during the next initialization become interrupted without additional usage.

Persistence and Session fencing

The official storage domain is auxiliary_runtime, version 0, with calls and policies tables. Call rows are authoritative; aggregates rebuild from rows during initialization and update after durable writes succeed.

Records are fenced by Session id and session.header.createdAt, so a reused id starts with a new usage and policy identity. Uninstalling the Bundle leaves the official storage-domain file available for a later reinstall. Version 0 preserves its audit rows and refuses new calls at 10,000 rows. The supported deployment shape is one Host process per DSH_HOME.

Service lifecycle

The plugin waits for official storageDomain through Cordis child-context injection. Service withdrawal cancels active work and disposes stale references; restoration creates a fresh runtime. Missing Host services, a missing live Session, a domain version mismatch, and invalid stored records fail closed before provider dispatch.

Quick start

Install the published 0.1.1 tarball into an isolated DSH_HOME with stock official Host 0.1.1-rc.2. SeekTTY and Clarify are not required:

pnpm add --global @deepseek-ai/[email protected]
dsh plugin --profile web add https://github.com/Hilbert-beinghappy/dsh-plugin-auxiliary-runtime/releases/download/v0.1.1/dsh-plugin-auxiliary-runtime-0.1.1.tgz

Or add a locally verified dsh-plugin-auxiliary-runtime-0.1.1.tgz whose SHA256 matches the published SHA256SUMS. Do not treat a local pnpm pack tree as standalone T1 evidence.

The published rollback joint baseline remains exact Host 0.1.0-rc.8 with Auxiliary Runtime 0.1.0, Clarify 0.2.1, and SeekTTY 1.2.0. Auxiliary 0.1.1 plus SeekTTY 1.2.1 and Clarify 0.2.2 has Lane A no-key PTY evidence and 2026-08-22 Lane B live-provider observations on candidate4. That is not a new recommended combo and not complete joint acceptance. See Compatibility and verification.

The Bundle patch inserts id: auxiliary-runtime / name: dsh-plugin-auxiliary-runtime. The consumer package contains no workspace: dependency and uses the official Host Context for Harness services.

Service contracts

Same-process service

run is available only to plugins in the same Host process:

const runtime = ctx.get('auxiliaryRuntime')

const result = await runtime.run({
  callId,          // caller-generated
  sessionId,       // already-live Session
  purpose,         // 'clarify' | 'compaction' | 'session-title'
  config,          // official LlmCallConfig
  prepareRequest,  // optional atomic prepared metadata => request + reservation
  signal,          // optional caller AbortSignal
})

run accepts exactly one request mode:

• static system / messages with a mandatory four-bucket reservation;
• legacy same-process buildRequest(preparedConfig) with a mandatory reservation; or
• prepareRequest({ config, context, adapterDefaults }), atomically returning { system?, messages, reservation } from the same prepared metadata.

Prepared callbacks receive detached, frozen structural data after llm.prepareCall. Callback functions and products remain process-local. getPolicy(sessionId) and setPolicy(sessionId, policy) manage the three per-Session limits.

Typert Host

The separate auxiliary-runtime Typert receiver exposes two methods:

• auxiliary-runtime/snapshot — read-only { official, auxiliary, combined, capability }
• auxiliary-runtime/cancel — abort an active call and report its stable state

Model execution remains a same-process capability; HTTP consumers receive usage snapshots and cancellation only.

Compatibility and verification

The current compile and metadata target is official DeepSeek Harness 0.1.1-rc.2 with Node ^22.19.0 || >=24. Exact Host 0.1.0-rc.8 remains supported. Runtime integration uses these public Host services:

• storageDomain.open / KvTable
• sessions.get and header.createdAt
• llm.prepareCall / prepared.stream
• sessionProjections.snapshot for read-only Official usage
• Typert Host register for snapshot and cancel

The published rollback joint baseline remains exact Host 0.1.0-rc.8. Auxiliary Runtime 0.1.1 is published and admits exact 0.1.1-rc.2. Standalone T1 on stock web (no SeekTTY, no Clarify) is recorded under docs/t1-evidence/0.1.1-rc.2/ after a checksum-verified --write run; this repository does not hand-author that evidence and does not promote 0.1.1 as a new recommended joint baseline. Lane A (2026-08-21, unmodified stock 0.1.1-rc.2, isolated DSH_HOME, real PTY, Auxiliary 0.1.1 + Clarify 0.2.2 + SeekTTY 1.2.1): /doctor 0 error / 0 warning, 99 plugins running; /status healthy; /clarify routed through Auxiliary, returned MISSING_CREDENTIAL without a key, and kept the composer; Vision-Exp was visible and selectable; a PNG attachment restored after /restart. Missing-source restore: unit tests keep the failure copy to a basename, cover both notice orders, and keep absolute paths out of the text; a real-PTY hardcopy/visible scan found only the ASCII basename vision-logo.png and none of private/tmp, /tmp, Users, or Volumes. That does not prove the restore error stayed visible after dismissing the no-key onboarding modal (Esc also clears notices). Lane B (2026-08-22, unmodified stock 0.1.1-rc.2, isolated DSH_HOME, candidate4): Vision-Exp was selected explicitly; a PNG image-only send succeeded, cleared attachments on send, and recognized the logo, but the image-only prompt with no question led the model to call read_image again; a real JFIF JPEG queued through SeekTTY was converted by the official Host to a PNG variant as usual, then OCR succeeded without tools; Clarify via Auxiliary completed 6 dynamic rounds, a 41-line full review, and a second-confirm accept back into the composer without auto-send; /status showed Official, Auxiliary, and Combined usage; an 895-file scan found 0 secret literals. This is not a new recommended combo or complete joint acceptance. It does not prove Web UI, GIF/WebP, over-limit rejection, JPEG original-byte passthrough, PNG without any tool use, this-round interruption recovery, or a cost/cache A/B. Clarify 0.2.1 preserves the six-method Remote, clarify.wire/1, and compatibility boundary of 0.2.0.

Clarify 0.2.0 live-provider joint acceptance covered model-generated clarification, multi-round Draft evolution, user-controlled submission, interruption recovery, usage provenance, and ledger privacy. Clarify 0.2.1 post-release no-key acceptance re-downloaded and verified all three Release assets, passed stock add/boot/remove/re-add and /doctor with 0 errors, 0 warnings, and 99 plugins on exact 0.1.0-rc.8, then reached running, routed through Auxiliary, and returned the expected isolated-environment MISSING_CREDENTIAL result. Version 0.2.1 has not rerun live-provider multi-round acceptance or a cache/cost A/B.

The published rollback stack is official @deepseek-ai/[email protected], Auxiliary Runtime 0.1.0, Clarify 0.2.1, and SeekTTY 1.2.0.

package.json#dshPlugin.testedHost is the compile pin 0.1.1-rc.2. dshPlugin.testedHosts lists the two exact admission pins 0.1.0-rc.8 and 0.1.1-rc.2. Capability probing can boot when the Host exposes no version value and reports hostConfirmed: false; a known version outside those two pins is rejected.

Development

pnpm install
pnpm test
pnpm typecheck
pnpm build
pnpm pack:check

pnpm typecheck is the official type gate. The official-contract runtime test only pins installed package versions; the compile-time Assert aliases in that file are checked by pnpm typecheck. pnpm test includes offline T1 inspector/schema checks. The real isolated Host lifecycle is pnpm t1 -- --tgz <release-tgz> --sha256sums <SHA256SUMS> --dsh-bin <dsh> --write and is not a CI job. Standalone T1 takes the Host pin from exact dsh --version plus evidence.dshVersion. On stock 0.1.1-rc.2 the plugin-internal version report is unconfirmed (hostConfirmed=false); that is not host-confirmed.

Release assets are the published 0.1.1 tarball and SHA256SUMS. This documentation pass does not create a new Release.

License

MIT