refactor(pi): use native RPC CLI runtime

docs/agent-profile-schema.md

@@ -64,7 +64,7 @@ model can choose the right profile.
 
 ### `provider`
 
-Required built-in provider id:
+Required provider instance id. The default instance ids are:
 
 ```yaml
 provider: codex
@@ -76,22 +76,29 @@ provider: copilot
 provider: grok
 ```
 
-Unsupported or custom providers are rejected. DevSpace maps providers to their
-native integration:
+Profiles may also reference named provider instances configured under
+`subagents.providers`, such as `provider: codex-work`. Provider instances map
+to one of these built-in driver integrations:
 
 - `codex`: the host-installed `codex app-server` command
 - `claude`: Claude Code SDK
-- `opencode`: OpenCode SDK
-- `pi`: the installed Pi coding-agent SDK, one in-process session per DevSpace agent
-- `cursor`: ACP
-- `copilot`: ACP
-- `grok`: Grok Build ACP (`grok agent stdio`)
-
-Codex is resolved from the user's environment rather than bundled with
-DevSpace. Run `codex login` normally before using it; set `CODEX_COMMAND` when
-the executable is not on the normal PATH. OpenCode, Cursor, and Copilot
-runtimes are started and reused by the daemon internally, while Pi is embedded
-through its Node SDK.
+- `opencode`: the host-installed OpenCode CLI; DevSpace probes its major version
+  and uses the matching 1.x or 2.x protocol internally
+- `pi`: Pi's normal `--mode rpc` CLI process. DevSpace preserves Pi's native
+  auth, settings, extensions, skills, context files, and session store.
+- `acp`: generic Agent Client Protocol integration. Cursor, Copilot, and Grok
+  are default provider instances using this driver; other ACP agents can be
+  configured without adding a DevSpace driver.
+
+Codex and OpenCode are resolved from the user's environment rather than bundled
+as executables. Run their normal login/setup flows before using them; set
+`CODEX_COMMAND` when Codex is not on the normal PATH. OpenCode is discovered as
+`opencode`, and DevSpace automatically routes OpenCode 1.x and 2.x to their
+matching runtime implementations. OpenCode, Cursor, and Copilot runtimes are
+started and reused by the daemon internally. Pi is launched in RPC mode and
+uses its native persisted session file as DevSpace's continuation identity;
+`PI_COMMAND` selects another Pi executable (otherwise `pi` on `PATH`, then the
+bundled package). Pi 0.80.5 or newer is required for the `agent_settled` event.
 
 ### `model`
 
@@ -118,10 +125,10 @@ DevSpace passes this through to providers that expose a matching control:
 
 - `claude`: SDK effort with adaptive thinking.
 - `codex`: app-server model reasoning effort.
-- `pi`: the AgentSession thinking-level control.
+- `pi`: RPC `set_thinking_level`.
 - `opencode`: model variant.
-- `cursor` and `copilot`: ACP thought-level config when supported.
-- `grok`: `--reasoning-effort` on startup and xAI's ACP model metadata for resumed sessions.
+- ACP: standard model/thought-level config when advertised by the agent. The
+  Grok flavor also understands xAI's typed model metadata and startup effort.
 
 ### `disabled`
 

docs/configuration.md

@@ -149,6 +149,27 @@ Subagent providers are explicit. Omitted providers are disabled:
 }
 ```
 
+`id` is the provider instance id used by profiles and `devspace agents run`.
+For the default built-in instance ids, `driver` is optional and defaults to the
+same value. Named instances declare the driver explicitly, which allows
+multiple independently configured instances of one integration:
+
+```jsonc
+{
+  "id": "codex-work",
+  "driver": "codex",
+  "enabled": true,
+  "env": {
+    "CODEX_HOME": "/home/alice/.codex-work",
+  },
+}
+```
+
+Profiles can then select that instance with `provider: codex-work`. The driver
+is the implementation (`codex`, `claude`, `opencode`, `pi`, or `acp`);
+provider-native session ids remain internal to DevSpace. Cursor, Copilot, and
+Grok are default ACP provider instances rather than separate drivers.
+
 `subagents.instructions` controls when ChatGPT receives the managed workflow:
 
 | Value | Behavior |
@@ -171,15 +192,42 @@ does not expand `$NAME` references in these values.
 All subagent providers accept `env`. The daemon inherits its startup
 environment, then overlays the provider's `env` without mutating the daemon's
 process environment. OpenCode receives that environment on its managed server
-process; embedded Pi scopes it to its provider requests and command execution.
+process; Pi receives it on its managed RPC process.
+
+The `opencode` driver runs `opencode --version` before creating its first
+runtime and automatically selects the OpenCode 1.x or 2.x protocol. Both major
+versions use the same provider instance and profile configuration; `opencode2`
+is not a separate driver.
+
+Codex, Claude, Pi, and ACP instances also accept `command`. OpenCode does not
+expose a command override. Cursor, Copilot, and Grok retain their built-in ACP
+commands when `command` is omitted. An arbitrary ACP instance declares its
+executable and may provide fixed startup arguments under `config.args`:
+
+```jsonc
+{
+  "id": "kiro",
+  "driver": "acp",
+  "enabled": true,
+  "command": "kiro",
+  "config": { "args": ["acp"] }
+}
+```
+
+`config.flavor` is reserved for the small built-in protocol quirks currently
+needed by `cursor`, `copilot`, and `grok`; generic ACP agents normally omit it.
+Those built-in flavors derive their sandbox arguments from the write mode, so
+they reject `config.args`. DevSpace cannot enforce `read_only` or `allowed` on an
+arbitrary ACP agent, so generic ACP instances run only with `full_access`.
 
-Codex, Claude, Cursor, Copilot, and Grok also accept `command`. OpenCode and Pi
-do not expose a command override. For providers that support it, an explicit
-`command` wins over both the inherited command override and a command override
-placed in `env`.
+Pi runs as the normal CLI in `--mode rpc`, so user-installed extensions,
+skills, context files, auth, models, and settings load normally. Restricted
+DevSpace modes inject a sandbox extension and pin Pi's active built-in tools to
+the matching read-only/workspace-safe set; `full_access` leaves Pi's normal
+tool configuration untouched.
 
 Existing process-level overrides remain supported: `CODEX_COMMAND`,
-`CODEX_HOME`, `CLAUDE_COMMAND`, `CURSOR_COMMAND`, `COPILOT_COMMAND`,
+`CODEX_HOME`, `CLAUDE_COMMAND`, `PI_COMMAND`, `CURSOR_COMMAND`, `COPILOT_COMMAND`,
 `GROK_COMMAND`, and `GROK_AGENT_PROFILE`. Provider configuration takes
 precedence where the same value is set in both places.
 

package.json

@@ -52,12 +52,13 @@
     "@anthropic-ai/claude-agent-sdk": "0.3.200",
     "@anthropic-ai/sandbox-runtime": "0.0.71",
     "@clack/prompts": "^1.5.1",
-    "@earendil-works/pi-coding-agent": "^0.80.3",
+    "@earendil-works/pi-coding-agent": "^0.80.10",
     "@modelcontextprotocol/ext-apps": "^1.7.2",
     "@modelcontextprotocol/node": "^2.0.0",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "@modelcontextprotocol/server": "^2.0.0",
     "@opencode-ai/sdk": "1.17.13",
+    "@opencode/client": "2.0.18",
     "@pierre/diffs": "^1.3.6",
     "better-result": "^2.10.0",
     "better-sqlite3": "^12.10.0",
@@ -66,7 +67,7 @@
     "drizzle-orm": "^0.45.2",
     "express": "^5.2.1",
     "jsonc-parser": "^3.3.1",
-    "koffi": "^3.1.2",
+    "koffi": "3.2.1",
     "lucide": "^1.24.0",
     "react": "^19.2.6",
     "react-dom": "^19.2.6",