Provider: Devin CLI

Keep the gateway's Devin (devin) integration aligned with the upstream CLI. This skill does not define argv or environment behaviour. The single mechanical source of truth is UPSTREAM_CLI_CONTRACTS.devin in src/upstream-contracts.ts, enforced by validateUpstreamCliArgs and validateUpstreamCliEnv. Do not re-encode flags, permission modes, ACP rules, or session rules here or in TOML.

Identity

These values mirror UPSTREAM_CLI_CONTRACTS.devin.upstreamMetadata and docs/upstream/provider-sources.dag.toml ([providers.devin]). The TypeScript metadata is authoritative; the TOML is scanner input only.

Gateway use

1. Discover the live gateway surface before relying on Devin-specific controls:

   provider_tool_capabilities({cli:"devin"})

   For a cached read-only resource, use provider-tools://devin.
2. Use devin_request for normal work and devin_request_async for long-running work. Sync calls may auto-defer; poll llm_job_status and fetch with llm_job_result when that happens.
3. Omit model unless the caller explicitly requests one. Use only request controls reported by provider_tool_capabilities. Devin must use approvalStrategy:"legacy": it rejects Claude-only mcp_managed before launch, and approvalPolicy has no effect.
4. Treat permissionMode:"accept-edits" as an explicit edit-authorizing choice. It is not equivalent to unrestricted autonomous execution.
5. Devin accepts flat prompt only, not promptParts. For CLI transport, pass local workingDir or a verified registered workspace to bind the repository. Use gateway worktree only with an explicit provider-native sessionId that is not overridden by createNewSession; fresh, createNewSession, and resumeLatest-only worktree requests fail closed. ACP rejects workingDir and worktree; use its registered workspace selector. An unscoped CLI child runs in a fresh neutral temporary cwd, not the gateway repository.
6. Use a real resumable provider session only when the response reports it as resumable. Gateway bookkeeping IDs are not automatically valid Devin session IDs. resumeLatest:true needs workingDir, workspace, or a configured default workspace because Devin's latest-session pointer is cwd-scoped.
7. Native ACP is capability-gated. It rejects approvalStrategy:"mcp_managed" and any approvalPolicy, as does the Devin CLI gateway path. Probe the actual entrypoint with devin acp --help, not only devin --version.
8. Devin's CLI print prompt is argv-bound. Oversized UTF-8 input fails before spawn as non-retryable input_too_large; the gateway never truncates it. All other caller-controlled argv values are admitted in their final encoded form before spawn. Embedded NUL bytes return non-retryable invalid_input without exposing the rejected value.

Full-access review handoff

For a user-authorized exhaustive review that needs full provider permissions and native MCP access, do not infer the launch controls from this maintenance guide. Follow multi-llm-review's full-access protocol, inspect the current request schema and live capability response, and use a fresh target-checkout node dist/index.js --transport=stdio gateway rather than a global process. Reapply the grant on every new job, preserve native MCP configuration without a pretend gateway allowlist, send the corrective-program report and exact diff/file identity, set no caller caps, and honor a user-required 90-second progress cadence. The reviewer must independently inspect code, docs, tests, and commands before it can approve.

Scan for upstream change

npm run upstream:scan -- --provider devin
npm run upstream:scan -- --live --provider devin --fail-on-critical
npm run upstream:scan -- --provider devin --probe-installed --fail-on-critical
npm run upstream:scan -- --live --provider devin --probe-installed --write-snapshot --write-report

A failed source fetch is advisory unless --fail-on-critical is passed. The installed help probe is the primary evidence for fast-moving CLI surface drift.

Update procedure

1. Edit UPSTREAM_CLI_CONTRACTS.devin in src/upstream-contracts.ts: flags, arities, enum values, permission modes, session rules, ACP probe commands, and catalogued subcommands belong there.
2. Add conformance fixtures that prove every new accept and reject behavior.
3. If a source URL or watch category changes, update TypeScript metadata first, then mirror it in docs/upstream/provider-sources.dag.toml.
4. Verify with npm run build, npm run upstream:contracts, and targeted provider tests before the full suite.

Devin-specific notes

• Tested against devin 3000.6.12 (fc947ca5).
• Current upstream help includes auto, accept-edits, smart, and dangerous permission modes. Keep the gateway contract, request schemas, capability description, and fixtures synchronized when that set changes.
• --print and --resume accept optional upstream values. The gateway's headless request path may intentionally use a narrower form, which should be stated in request tests rather than inferred from root help.
• Catalog administrative, authentication, plugin, MCP, sandbox, and setup commands for drift monitoring. Do not expose them through request argv without a separately reviewed gateway surface.