dsh-plugin-devin
Unofficial bridge between the Devin CLI and DeepSeek Harness: a devin delegation tool plus a /devin command running devin -p (headless print mode), and a devin LLM provider route with automatic model discovery — all over the ctx.subprocess seam. Not affiliated with Cognition.
What the agent gets
devin tool — spawns devin -p "<prompt>" as a managed child process. Per-call cwd, model, permissionMode, resume, cloud, and timeoutMs. Returns { ok, exitCode, stdout, stderr, timedOut, truncated }./devin <task> — slash command shortcut (when the profile composes the commands service).
Cancelling the tool call aborts the child via the subprocess seam's terminate escalation (SIGTERM → grace → SIGKILL on the process tree); output capture is bounded and keeps the tail on overflow.
Prerequisites
devin CLI on PATH (or set devinPath to an absolute path)devin auth login completed, or WINDSURF_API_KEY exported (forwarded to the child via forwardEnv)
Install
# from npm
dsh plugin --profile <your-profile> add @quonaro/dsh-plugin-devin
# or straight from a git host
dsh plugin --profile <your-profile> add github:quonaro/dsh-plugin-devin
# or from a local checkout
dsh plugin --profile <your-profile> add /path/to/dsh-plugin-devin
The package declares dsh.bundle, so dsh plugin add applies cordis.patch.yml to the profile automatically. On pnpm ≥ 10 the first git install refuses the prepare build — copy the package key pnpm prints into the profile's pnpm-workspace.yaml allowBuilds: and re-run.
Configuration
Edit the dsh-plugin-devin row in the profile's cordis.patch.yml, or the derived settings namespace in the GUI. All fields are volatile — changes apply to the next call without a restart.
| Key | Default | Notes |
|---|
devinPath | devin | Executable name or absolute path |
permissionMode | accept-edits | Headless runs can't answer prompts; bypass/autonomous for fully unattended work |
model | '' | Devin model; empty = CLI/account default |
cloud | false | true → devin --cloud (Devin Cloud sessions) |
timeoutMs | 600000 | Cooperative per-call timeout |
maxOutputBytes | 1048576 | In-memory cap per captured stream; tail kept on overflow |
respectWorkspaceTrust | false | false → passes --respect-workspace-trust false (required for -p in untrusted dirs) |
forwardEnv | PATH/HOME/USER/XDG_*/WINDSURF_API_KEY | Env var names forwarded to the child on top of the scrubbed base |
extraArgs | [] | Extra flags appended verbatim, e.g. ['--sandbox'] |
Develop
pnpm install
pnpm test # typecheck + tsdown build + smoke test (uses a fake devin binary)
Notes
- The plugin hard-injects
tools and subprocess — profiles must compose a subprocess provider (all shipped base profiles do; sdk-minimal does not).
--print mode fails on the workspace-trust prompt in untrusted directories; that's why respectWorkspaceTrust: false is the default. Set it true if you prefer Devin's own trust flow.- The provider half keeps persistent ACP sessions (one
devin acp process, one session per conversation); the devin tool stays stateless — resume still lets you chain -p calls by session ID.
Provider half (@quonaro/dsh-plugin-devin/provider)
The package also ships an LLM-adapter entry point that registers devin as a provider route — it shows up in Settings → Models and /model, and the whole dsh agent loop can run on it.
Generation rides devin acp (Agent Client Protocol over stdio) through a pooled connection — one process serves many sessions, modelled on acp2api's session manager. A harness conversation (GenerateOptions.sessionId) maps to one persistent ACP session:
- a fresh session receives the whole transcript (brief +
<transcript> + every attached image as a native content block) — the agent holds no history of its own;
- a reused session receives only the messages it has not seen yet and their images — never a replay, which would duplicate its history;
- turns on one session are single-flight (a second call queues behind the first), while different conversations run in parallel on the same process;
- if the process dies, the next call respawns it, recreates the session, and replays the transcript exactly once;
- compaction and session-title calls get ephemeral sessions so they don't pollute the conversation's own;
- the idle reaper (
sessionIdleMs) forgets expired session indexes and terminates empty processes; ACP v1 cannot delete a session, so the process is the reclaimable unit. All pooled agents die when the plugin unloads.
Attached images go as native image content blocks — SWE and other vision-capable models actually see them. session/update notifications stream back as text and reasoning deltas, and the prompt result carries real token usage. transport: 'print' keeps the old stateless devin -p path (text only — images degrade to [image] placeholders). listModels probes devin acp (initialize + session/new) for the account's real model catalog and falls back to the static models table ({id, devinModel, name}) on failure; the session-title aux call is answered locally when localSessionTitles is on.
The agent advertises devin-browser auth, so authenticate is called during the initialize handshake with WINDSURF_API_KEY from the forwarded env, or the key stored by devin auth login (lazy-retry on an auth-required reply covers servers that demand auth without advertising). permissionMode maps to the ACP session mode via session/set_mode (bypass/autonomous → bypass; normal keeps the account default), the requested model is applied via session/set_config_option per session, and session/request_permission prompts are answered allow-once. cloud and respectWorkspaceTrust only apply to transport: 'print'.
Semantics: Devin is an agent, not a model. Every model call is a complete headless Devin session running its own tool loop — per-response latency is minutes, and harness-side tools are never invoked. The devin tool (main entry) is the right shape for delegation; the provider exists for routing whole conversations through Devin.
| Extra config | Default | Notes |
|---|
cwd | '' | Working dir for spawned sessions; empty = harness cwd |
timeoutMs | 1800000 | Provider calls get a longer budget than tool calls |
transport | acp | acp = devin acp session/prompt (images, usage, reasoning); print = devin -p text-only |
maxImages | 8 | Most recent image occurrences attached to one ACP prompt |
maxImageBytes | 5242880 | Per-image byte cap; larger attachments degrade to [image] placeholders |
models | default, opus | Advertised model ids → --model value + display name |
brief | (English wrapper) | Instruction prepended to each flattened transcript |
localSessionTitles | true | Don't spend a Devin run on session-title generation |
autoDiscoverModels | true | Probe devin acp (initialize + session/new) for the account's real model catalog — the same mechanism ACP clients like Zed use. Falls back to the static models table on failure |
discoveryTimeoutMs | 60000 | Timeout for one discovery probe |
discoveryCacheMs | 300000 | Cache a successful probe before re-probing |
sessionIdleMs | 900000 | Idle lifetime of pooled ACP sessions/processes; an expired session replays on next turn, an empty expired process is terminated. 0 disables reaping |
Both halves are independent rows in cordis.patch.yml — remove dsh-plugin-devin-provider to keep only the tool, or dsh-plugin-devin to keep only the provider.
