feat: fully hide ralph_*/rlm_* tools from normal sessions via dedicated agent

Plugin config hook denies ralph_*/rlm_* globally and re-allows them only in a
new 'ralph-worker' agent (now the default worker.agent); engine spawns workers
under it. Verified live against opencode serve: normal session = tools hidden
(NO_SUCH_TOOL), worker agent = tools usable + full coding tools intact. Removed
worker.agent:build from example/scaffold (build now denies these tools).
104 tests pass.

Author: doeixd

.opencode/ralph-provider.example.json

@@ -5,7 +5,6 @@
     "maxToolRounds": 8
   },
   "worker": {
-    "agent": "build",
     "providerID": "opencode",
     "modelID": "deepseek-v4-flash-free"
   }

CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to this project are documented here.
 
 Format based on [Keep a Changelog](https://keepachangelog.com/).
 
+## [0.3.7] - 2026-06-24
+
+### Changed
+
+- **`ralph_*` / `rlm_*` tools are now hidden from normal OpenCode sessions** (not just inert). The worker plugin's `config` hook denies them globally and re-allows them only in a dedicated **`ralph-worker`** agent that workers run under (the new default `worker.agent`). Verified live: a normal session reports the tools as unavailable; a worker session can use them and still has full coding tools. The 0.3.6 session-scoped gate/prompt remain as defense-in-depth.
+- Do not set `worker.agent` (e.g. to `build`) — that agent has the Ralph tools denied; workers must use `ralph-worker`. The example/scaffold configs no longer set it.
+
 ## [0.3.6] - 2026-06-24
 
 ### Fixed

README.md

@@ -162,7 +162,7 @@ Model: Attempt 2. Last verify failed. Worker idle. …
 - **Exit criterion:** `verify.command` in `.opencode/ralph.json` (single source of truth for “done”).
 - **Memory:** protocol files in the active plan dir (`.ralph-rlm/plans/<name>/`, or repo root in legacy mode) — not chat history.
 - **Workers:** fresh OpenCode session per attempt; engine spawns via SDK.
-- **Worker plugin:** gates `edit`/`bash` until `ralph_load_context()`; provides FFF-accelerated `rlm_grep`, `rlm_file_search`, `rlm_glob`, and `rlm_slice`.
+- **Worker plugin:** gates `edit`/`bash` until `ralph_load_context()`; provides FFF-accelerated `rlm_grep`, `rlm_file_search`, `rlm_glob`, and `rlm_slice`. Its `ralph_*` / `rlm_*` tools are **hidden from your normal OpenCode sessions** — they're denied globally and re-enabled only in the dedicated `ralph-worker` agent that workers run under.
 - **Permissions:** bash/edit prompts appear in the **worker session** TUI (answer there).
 
 

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@doeixd/opencode-ralph-rlm",
-  "version": "0.3.6",
+  "version": "0.3.7",
   "description": "Ralph RLM v0.2: OpenCode supervisor provider + loop engine + worker plugin",
   "type": "module",
   "workspaces": [

packages/engine/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@doeixd/opencode-ralph-rlm-engine",
   "private": true,
-  "version": "0.3.6",
+  "version": "0.3.7",
   "description": "Ralph RLM loop engine — verify, rollover, OpenCode SDK worker lifecycle",
   "license": "MIT",
   "repository": {

packages/engine/src/index.ts

@@ -193,6 +193,7 @@ export {
 
 export {
   loadWorkerSpawnConfig,
+  RALPH_WORKER_AGENT,
   type WorkerSpawnConfig,
 } from "./worker-spawn.js";
 

packages/engine/src/setup.ts

@@ -317,7 +317,8 @@ export async function setupProject(options: SetupOptions): Promise<SetupResult>
             maxToolRounds: 8,
           },
           worker: {
-            agent: "build",
+            providerID: "opencode",
+            modelID: "deepseek-v4-flash-free",
           },
         }),
         options,

packages/engine/src/worker-spawn.ts

@@ -2,6 +2,13 @@ import path from "node:path";
 import { fileExists, readTextFile } from "./fs.js";
 import type { EngineTemplates } from "./templates.js";
 
+/**
+ * OpenCode agent workers run under. A dedicated agent (defined by the worker
+ * plugin's `config` hook) lets us hide the `ralph_*` / `rlm_*` tools from normal
+ * sessions (denied globally) while re-allowing them here.
+ */
+export const RALPH_WORKER_AGENT = "ralph-worker";
+
 export type WorkerSpawnConfig = {
   agent: string;
   systemPrompt: string;
@@ -38,7 +45,7 @@ export async function loadWorkerSpawnConfig(
     templates.workerSystemPrompt;
 
   const config: WorkerSpawnConfig = {
-    agent: fromEnv.agent || worker.agent?.trim() || "build",
+    agent: fromEnv.agent || worker.agent?.trim() || RALPH_WORKER_AGENT,
     systemPrompt,
   };
 

packages/provider/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@doeixd/opencode-ralph-rlm-provider",
   "private": true,
-  "version": "0.3.6",
+  "version": "0.3.7",
   "description": "Ralph RLM OpenAI-compatible supervisor provider (Nitro)",
   "license": "MIT",
   "repository": {

packages/provider/server/routes/api/health.get.ts

@@ -16,7 +16,7 @@ export default defineHandler(async () => {
   return {
     healthy: true,
     provider: "@doeixd/opencode-ralph-rlm",
-    version: "0.3.6",
+    version: "0.3.7",
     opencode: {
       baseUrl: runtime.baseUrl,
       ...opencode,