Add Devin as an ACP-based provider

[JoeProAI]

Summary

Adds Devin CLI as a built-in provider, modeled on the existing Grok ACP integration. Devin ships a full ACP server (devin acp), so the integration is standards-only ACP — no private protocol extensions.

• Contracts: DevinSettings (binaryPath, apiKey, customModels), driver kind, model defaults
• Server: DevinAcpSupport (spawn + auth), DevinAdapter (sessions/streaming/tool calls/plans/approvals), DevinProvider (health probe + ACP model discovery), DevinDriver registered in BUILT_IN_DRIVERS, DevinTextGeneration
• Web: provider picker entry, settings card, icon
• Cross-cutting: AcpSessionRuntime gains an optional authenticateMeta passthrough — Devin's ACP server takes credentials via authenticate _meta (API key) with a PKCE browser-login fallback, and intentionally ignores local CLI credentials

Devin-specific behaviors handled:

• Status probes never trigger the PKCE browser flow (no API key → ready/unauthenticated, discovery skipped)
• session/set_model is not implemented by Devin (server-side Adaptive routing) — only called when the agent negotiates model state

Tests

Devin suites mirroring Grok's: DevinAcpSupport.test.ts, DevinProvider.test.ts, DevinAdapter.test.ts (against the shared ACP mock agent), plus devin coverage in the registry tests. vp check and vp run typecheck pass.

Note

I know contributions aren't open yet — this is a draft to have the work reviewable whenever you are. Happy to adjust to any conventions. Tested end-to-end on Windows with real devin acp sessions streaming in the UI.

This integration was written by Devin CLI itself.

Generated with Devin

Note

Add Devin as an ACP-based provider with full session, adapter, and text generation support

• Introduces the DevinDriver and DevinAdapter as a new built-in provider, wiring ACP session lifecycle (start/stop/interrupt/resume), turn sending with text and image attachments, permission and user-input request handling, and event streaming via PubSub.
• Adds checkDevinProviderStatus to probe CLI availability via devin --version, detect credentials, and discover available models via ACP startup; surfaces distinct states for missing binary, unauthenticated, and ACP failure.
• Adds makeDevinTextGeneration to back commit message, PR content, branch name, and thread title generation through Devin ACP with a 180s timeout, streaming accumulation, and JSON schema decoding.
• Registers Devin in contracts (DEVIN_DRIVER_KIND, DevinSettings), the built-in driver registry, the settings UI (PROVIDER_CLIENT_DEFINITIONS), the provider picker (PROVIDER_OPTIONS with a "new" badge), and the provider icon map.
• Risk: Devin sessions spawn a child ACP process per session; failures in ACP startup or model discovery surface as provider error states rather than hard startup failures.

📊 Macroscope summarized 39001d2. 15 files reviewed, 0 issues evaluated, 0 issues filtered, 0 comments posted

🗂️ Filtered Issues

No issues evaluated.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro

Run ID: 12c6e789-049e-4684-8834-99666c78112c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

🟠 High acp/AcpSessionRuntime.ts:543

The authenticate request payload now includes options.authenticateMeta, which for Devin contains the API key. startOnce() passes this payload through runLoggedRequest("authenticate", authenticatePayload, ...), which logs the full payload on start, success, and failure. Enabling requestLogger writes the secret API key to logs. Consider redacting or omitting the _meta field from the logged payload while still sending it in the actual RPC request.

🤖 Copy this AI Prompt to have your agent fix this:

In file @apps/server/src/provider/acp/AcpSessionRuntime.ts around line 543:

The `authenticate` request payload now includes `options.authenticateMeta`, which for Devin contains the API key. `startOnce()` passes this payload through `runLoggedRequest("authenticate", authenticatePayload, ...)`, which logs the full `payload` on start, success, and failure. Enabling `requestLogger` writes the secret API key to logs. Consider redacting or omitting the `_meta` field from the logged payload while still sending it in the actual RPC request.

[macroscopeapp]

🟡 Medium Layers/DevinAdapter.ts:605

startSession only registers acp.handleRequestPermission(...) and never registers a callback for user-input requests. As a result, when the Devin session sends a structured user-input request, the adapter never records an entry in pendingUserInputs and never emits a user-input.requested runtime event, so the UI is never surfaced the question. A later call to respondToUserInput always fails with Unknown pending user-input request because pendingUserInputs is never populated. Consider registering the corresponding ACP user-input handler (analogous to handleRequestPermission) that creates a Deferred, stores it in pendingUserInputs, and emits the appropriate runtime event.

🤖 Copy this AI Prompt to have your agent fix this:

In file @apps/server/src/provider/Layers/DevinAdapter.ts around line 605:

`startSession` only registers `acp.handleRequestPermission(...)` and never registers a callback for user-input requests. As a result, when the Devin session sends a structured user-input request, the adapter never records an entry in `pendingUserInputs` and never emits a `user-input.requested` runtime event, so the UI is never surfaced the question. A later call to `respondToUserInput` always fails with `Unknown pending user-input request` because `pendingUserInputs` is never populated. Consider registering the corresponding ACP user-input handler (analogous to `handleRequestPermission`) that creates a `Deferred`, stores it in `pendingUserInputs`, and emits the appropriate runtime event.

[JoeProAI]

Good catch — fixed in b89428d. \makeDevinAcpRuntime\ now defaults an omitted \environment\ to \process.env\ before resolving credentials and building the spawn input, so the child keeps PATH and \WINDSURF_API_KEY.