[bassilkhilo-ag2]

Summary

• slideControlTool was unconditionally registered in inlineTools and ownerOnlyTools, exposing its description ("next slide", "previous slide", "go back") to Gemini on every voice turn including greetings
• Gemini fired spurious tool_call rows in voice sqlite — 3 unprovoked copres_next_anchor calls in <40s on a "Can you hear me?" session (Lucy's observation 2026-05-26)
• Root cause pattern: inline-tool always-exposure + intent-check-too-late; tool fires before the guard runs → sqlite noise + wasted tokens

Fix

Gate at exposure time, not effect time. At module load, read state/presenter-mode.sentinel via existsSync. If absent, slideControlTool is excluded from the tool arrays Gemini sees — it can't fire what it doesn't know about. fullscreenTool stays ungated (generic OS action, useful outside presentations).

const PRESENTER_SENTINEL = join(WORKSPACE_DIR, 'state', 'presenter-mode.sentinel');
export const presenterModeActive = existsSync(PRESENTER_SENTINEL);

// in inlineTools / ownerOnlyTools:
...(presenterModeActive ? [slideControlTool] : [])

Test plan

• 6 structural tests in tests/inline-tools-presenter-gate.test.ts — all passing
  • presenterModeActive exported and derived from existsSync(PRESENTER_SENTINEL)
  • PRESENTER_SENTINEL points to state/presenter-mode.sentinel under WORKSPACE_DIR
  • slideControlTool spread conditionally in both inlineTools and ownerOnlyTools
  • No bare slideControlTool reference in either array
  • Issue #1171 referenced in gate comment
  • presenterModeActive declared before slideControlTool definition

Closes #1171

🤖 Generated with Claude Code

[bassilkhilo-ag2]

Closing per owner instruction — autonomous PR creation halted.

[VasiliyRad]

LGTM on the approach — gating at exposure time (module load) is the right pattern for the spurious tool_call class. If Gemini doesn't see the tool description, it can't fire it. Sentinel-as-gate is also reusable for other presenter-only tools later.

One semantic note worth flagging, not blocking:

Module-load-time evaluation means presenter mode activated mid-voice-session is invisible until process restart. presenterModeActive is computed once when inline-tools.ts is imported, then the spread ...(presenterModeActive ? [slideControlTool] : []) is frozen for the agent's lifetime. Flow that breaks:

1. user starts voice
2. mid-call: bash scripts/presenter-mode.sh start 60
3. user says "next slide" — Gemini doesn't see slide_control (load-time check was false), tool unavailable until restart

For the common workflow (presenter mode set BEFORE voice starts), the fix works as intended. The mid-session edge case is the cost.

Two options if mid-session activation matters:

• (a) Re-check sentinel each turn: getter instead of constant, with a small disk-stat cost per build_agent — acceptable since existsSync is microsecond-class.
• (b) Notify presenter-mode.sh to bump voice-agent or write a "reload tools" signal voice picks up.

Probably not worth either right now — issue #1171 is the priority — but worth noting in a follow-up if the mid-session flow turns out to matter.

Closes #1171 — confirmed.