Add Devin CLI provider

.github/workflows/ci.yml

@@ -68,11 +68,14 @@ jobs:
         uses: actions/setup-node@v4
         with:
           node-version: "20"
-          cache: "npm"
-          cache-dependency-path: web/package-lock.json
+          registry-url: "https://registry.npmjs.org"
+
+      - name: Clear npm cache
+        run: npm cache clean --force
+        working-directory: web
 
       - name: Install dependencies
-        run: npm ci
+        run: rm -f package-lock.json && npm install --registry=https://registry.npmjs.org
         working-directory: web
 
       - name: Type check

src/cli_agent_orchestrator/api/main.py

@@ -532,6 +532,7 @@ async def list_providers_endpoint() -> List[Dict]:
         "opencode_cli": "opencode",
         "cursor_cli": "agent",
         "antigravity_cli": "agy",
+        "devin_cli": "devin",
     }
     result = []
     for provider, binary in provider_binaries.items():

src/cli_agent_orchestrator/backends/base.py

@@ -147,6 +147,7 @@ def send_keys(
         enter_count: int = 1,
         force_bracketed_paste: bool = False,
         submit_delay: float = 0.3,
+        use_paste_buffer: bool = True,
     ) -> None:
         """Send text input to a window.
 

src/cli_agent_orchestrator/backends/herdr_backend.py

@@ -284,7 +284,7 @@ def create_session(
             session_name, window_name, terminal_id, pane_id=new_pane_id, extra_env=extra_env
         )
 
-        logger.info(f"Created herdr workspace: {session_name} in {working_directory}")
+        logger.info("Created herdr workspace")
         return window_name
 
     def session_exists(self, session_name: str) -> bool:
@@ -323,12 +323,12 @@ def kill_session(self, session_name: str) -> bool:
         try:
             workspace_id = self._resolve_workspace_id(session_name)
         except TerminalBackendError:
-            logger.warning(f"kill_session: workspace '{session_name}' not found")
+            logger.warning("kill_session: workspace not found")
             return False
         result = self._run_herdr(["workspace", "close", workspace_id], check=False)
         if result.returncode == 0:
             self._workspace_cache.pop(session_name, None)
-            logger.info(f"Killed herdr workspace: {session_name}")
+            logger.info("Killed herdr workspace")
             return True
         return False
 
@@ -371,9 +371,9 @@ def create_window(
             try:
                 self._run_herdr(["pane", "run", new_pane_id, window_shell])
             except TerminalBackendError as e:
-                logger.warning(f"create_window: pane run failed for {new_pane_id} (non-fatal): {e}")
+                logger.warning(f"create_window: pane run failed (non-fatal): {e}")
 
-        logger.info(f"Created herdr tab in workspace {session_name}")
+        logger.info("Created herdr tab in workspace")
         return window_name
 
     def kill_window(self, session_name: str, window_name: str) -> bool:
@@ -401,6 +401,7 @@ def send_keys(
         enter_count: int = 1,
         force_bracketed_paste: bool = False,
         submit_delay: float = 0.3,
+        use_paste_buffer: bool = True,  # Ignored for Herdr
     ) -> None:
         """Send text to a pane via herdr pane send-text + send-keys Enter.
 

src/cli_agent_orchestrator/backends/tmux_backend.py

@@ -89,6 +89,7 @@ def send_keys(
         enter_count: int = 1,
         force_bracketed_paste: bool = False,
         submit_delay: float = 0.3,
+        use_paste_buffer: bool = True,
     ) -> None:
         self._client.send_keys(
             session_name,
@@ -97,6 +98,7 @@ def send_keys(
             enter_count=enter_count,
             force_bracketed_paste=force_bracketed_paste,
             submit_delay=submit_delay,
+            use_paste_buffer=use_paste_buffer,
         )
 
     def send_special_key(self, session_name: str, window_name: str, key: str) -> None:

src/cli_agent_orchestrator/cli/commands/launch.py

@@ -29,6 +29,7 @@
     "codex",
     "copilot_cli",
     "cursor_cli",
+    "devin_cli",
     "gemini_cli",
     "hermes",
     "kimi_cli",

src/cli_agent_orchestrator/clients/tmux.py

@@ -296,6 +296,7 @@ def send_keys(
         enter_count: int = 1,
         force_bracketed_paste: bool = False,
         submit_delay: float = 0.3,
+        use_paste_buffer: bool = True,
     ) -> None:
         """Send keys to window using tmux paste-buffer for instant delivery.
 
@@ -317,13 +318,29 @@ def send_keys(
                 Do NOT use for shell commands sent to bash during initialization
                 (bash 4.x does not support bracketed paste and will inject the
                 escape sequences literally into the command line).
+            submit_delay: Seconds to wait after pasting before sending Enter.
+                Some TUIs need time to process bracketed-paste end sequences.
+            use_paste_buffer: If False, use send-keys instead of paste-buffer.
+                Some CLIs (e.g., Devin CLI) don't support paste-buffer for user input.
         """
+        # If paste-buffer is disabled, use send-keys instead (for user input)
+        if not use_paste_buffer:
+            logger.info(
+                f"send_keys (via send-keys): {session_name}:{window_name} - keys: {keys[:100]}..."
+            )
+            target = f"{session_name}:{window_name}"
+            for i in range(enter_count):
+                subprocess.run(
+                    ["tmux", "send-keys", "-t", target, keys, "C-m"],
+                    check=True,
+                )
+                if i < enter_count - 1:
+                    time.sleep(0.1)
+            return
+
         # Defence-in-depth: re-validate at the sink even though callers
-        # validate at the API/MCP boundary. Both halves flow into a
-        # tmux subprocess argument (-t target), and tmux itself parses
-        # ':' / '.' as target delimiters, so any leak past upstream
-        # validation could pivot to a different pane. Validating here
-        # also clears the CodeQL py/command-line-injection data flow.
+        # should have validated. Prevents malformed UTF-8 or embedded
+        # control characters from corrupting tmux state.
         validated_session = validate_tmux_name(session_name, "session_name")
         validated_window = validate_tmux_name(window_name, "window_name")
         target = f"{validated_session}:{validated_window}"

src/cli_agent_orchestrator/constants.py

@@ -63,6 +63,8 @@ def _env_int(name: str, default: int) -> int:
 TERMINAL_LOG_DIR.mkdir(parents=True, exist_ok=True)
 
 # FIFO directory for event-driven terminal output streaming
+# Use /tmp instead of CAO_HOME_DIR to avoid WSL2 Windows mount limitations
+# (WSL2 doesn't support FIFO pipes on /mnt/c filesystem)
 FIFO_DIR = CAO_HOME_DIR / "fifos"  # Named pipes for tmux pipe-pane streaming
 FIFO_DIR.mkdir(parents=True, exist_ok=True)
 

src/cli_agent_orchestrator/models/provider.py

@@ -15,3 +15,4 @@ class ProviderType(str, Enum):
     HERMES = "hermes"
     CURSOR_CLI = "cursor_cli"
     ANTIGRAVITY_CLI = "antigravity_cli"
+    DEVIN_CLI = "devin_cli"

src/cli_agent_orchestrator/providers/base.py

@@ -99,6 +99,18 @@ def paste_enter_count(self) -> int:
         """
         return 2
 
+    @property
+    def use_paste_buffer(self) -> bool:
+        """Whether to use tmux paste-buffer for input delivery.
+
+        Most TUIs benefit from paste-buffer (instant delivery, bracketed paste).
+        Some CLIs (e.g., Devin CLI) don't support paste-buffer and require
+        send-keys instead.
+
+        Override to False for CLIs that don't support paste-buffer.
+        """
+        return True
+
     @abstractmethod
     async def initialize(self) -> bool:
         """Initialize the provider (e.g., start CLI tool, send setup commands).