@quonaro/dsh-plugin-devin
DeepSeek Harness 中的 Devin CLI：一个 `devin` 委派工具、一个 /devin 命令，以及一个 `devin` LLM provider 路由——全部通过 ctx.subprocess 接口实现。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add @quonaro/dsh-plugin-devin@0.1.4Plugin Devin 以 @quonaro/dsh-plugin-devin 发布，当前版本为 0.1.4。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Unofficial bridge between the Devin CLI and DeepSeek Harness: a devin delegation tool plus a /devin command running devin -p (headless print mode), and a devin LLM provider route with automatic model discovery — all over the ctx.subprocess seam. Not affiliated with Cognition.
devin tool — spawns devin -p "<prompt>" as a managed child process. Per-call cwd, model, permissionMode, resume, cloud, and timeoutMs. Returns { ok, exitCode, stdout, stderr, timedOut, truncated }./devin <task> — slash command shortcut (when the profile composes the commands service).Cancelling the tool call aborts the child via the subprocess seam's terminate escalation (SIGTERM → grace → SIGKILL on the process tree); output capture is bounded and keeps the tail on overflow.
devin CLI on PATH (or set devinPath to an absolute path)devin auth login completed, or WINDSURF_API_KEY exported (forwarded to the child via forwardEnv)# from npm
dsh plugin --profile <your-profile> add @quonaro/dsh-plugin-devin
# or straight from a git host
dsh plugin --profile <your-profile> add github:quonaro/dsh-plugin-devin
# or from a local checkout
dsh plugin --profile <your-profile> add /path/to/dsh-plugin-devin
The package declares dsh.bundle, so dsh plugin add applies cordis.patch.yml to the profile automatically. On pnpm ≥ 10 the first git install refuses the prepare build — copy the package key pnpm prints into the profile's pnpm-workspace.yaml allowBuilds: and re-run.
Edit the dsh-plugin-devin row in the profile's cordis.patch.yml, or the derived settings namespace in the GUI. All fields are volatile — changes apply to the next call without a restart.
| Key | Default | Notes |
|---|---|---|
devinPath | devin | Executable name or absolute path |
permissionMode | accept-edits | Headless runs can't answer prompts; bypass/autonomous for fully unattended work |
model | '' | Devin model; empty = CLI/account default |
cloud | false | true → devin --cloud (Devin Cloud sessions) |
timeoutMs | 600000 | Cooperative per-call timeout |
maxOutputBytes | 1048576 | In-memory cap per captured stream; tail kept on overflow |
respectWorkspaceTrust | false | false → passes --respect-workspace-trust false (required for -p in untrusted dirs) |
forwardEnv | PATH/HOME/USER/XDG_*/WINDSURF_API_KEY | Env var names forwarded to the child on top of the scrubbed base |
extraArgs | [] | Extra flags appended verbatim, e.g. ['--sandbox'] |
pnpm install
pnpm test # typecheck + tsdown build + smoke test (uses a fake devin binary)
tools and subprocess — profiles must compose a subprocess provider (all shipped base profiles do; sdk-minimal does not).--print mode fails on the workspace-trust prompt in untrusted directories; that's why respectWorkspaceTrust: false is the default. Set it true if you prefer Devin's own trust flow.devin acp process, one session per conversation); the devin tool stays stateless — resume still lets you chain -p calls by session ID.@quonaro/dsh-plugin-devin/provider)The package also ships an LLM-adapter entry point that registers devin as a provider route — it shows up in Settings → Models and /model, and the whole dsh agent loop can run on it.
Generation rides devin acp (Agent Client Protocol over stdio) through a pooled connection — one process serves many sessions, modelled on acp2api's session manager. A harness conversation (GenerateOptions.sessionId) maps to one persistent ACP session:
<transcript> + every attached image as a native content block) — the agent holds no history of its own;sessionIdleMs) forgets expired session indexes and terminates empty processes; ACP v1 cannot delete a session, so the process is the reclaimable unit. All pooled agents die when the plugin unloads.Attached images go as native image content blocks — SWE and other vision-capable models actually see them. session/update notifications stream back as text and reasoning deltas, and the prompt result carries real token usage. transport: 'print' keeps the old stateless devin -p path (text only — images degrade to [image] placeholders). listModels probes devin acp (initialize + session/new) for the account's real model catalog and falls back to the static models table ({id, devinModel, name}) on failure; the session-title aux call is answered locally when localSessionTitles is on.
The agent advertises devin-browser auth, so authenticate is called during the initialize handshake with WINDSURF_API_KEY from the forwarded env, or the key stored by devin auth login (lazy-retry on an auth-required reply covers servers that demand auth without advertising). permissionMode maps to the ACP session mode via session/set_mode (bypass/autonomous → bypass; normal keeps the account default), the requested model is applied via session/set_config_option per session, and session/request_permission prompts are answered allow-once. cloud and respectWorkspaceTrust only apply to transport: 'print'.
Semantics: Devin is an agent, not a model. Every model call is a complete headless Devin session running its own tool loop — per-response latency is minutes, and harness-side tools are never invoked. The devin tool (main entry) is the right shape for delegation; the provider exists for routing whole conversations through Devin.
| Extra config | Default | Notes |
|---|---|---|
cwd | '' | Working dir for spawned sessions; empty = harness cwd |
timeoutMs | 1800000 | Provider calls get a longer budget than tool calls |
transport | acp | acp = devin acp session/prompt (images, usage, reasoning); print = devin -p text-only |
maxImages | 8 | Most recent image occurrences attached to one ACP prompt |
maxImageBytes | 5242880 | Per-image byte cap; larger attachments degrade to [image] placeholders |
models | default, opus | Advertised model ids → --model value + display name |
brief | (English wrapper) | Instruction prepended to each flattened transcript |
localSessionTitles | true | Don't spend a Devin run on session-title generation |
autoDiscoverModels | true | Probe devin acp (initialize + session/new) for the account's real model catalog — the same mechanism ACP clients like Zed use. Falls back to the static models table on failure |
discoveryTimeoutMs | 60000 | Timeout for one discovery probe |
discoveryCacheMs | 300000 | Cache a successful probe before re-probing |
sessionIdleMs | 900000 | Idle lifetime of pooled ACP sessions/processes; an expired session replays on next turn, an empty expired process is terminated. 0 disables reaping |
Both halves are independent rows in cordis.patch.yml — remove dsh-plugin-devin-provider to keep only the tool, or dsh-plugin-devin to keep only the provider.