Skip to main content

hematite/agent/
routing.rs

1use super::conversation::WorkflowMode;
2
3#[derive(Clone, Copy, Debug, Eq, PartialEq)]
4pub(crate) enum QueryIntentClass {
5    ProductTruth,
6    RuntimeDiagnosis,
7    RepoArchitecture,
8    Toolchain,
9    Capability,
10    Implementation,
11    Unknown,
12}
13
14#[derive(Clone, Copy, Debug, Eq, PartialEq)]
15pub(crate) enum DirectAnswerKind {
16    About,
17    LanguageCapability,
18    UnsafeWorkflowPressure,
19    SessionMemory,
20    RecoveryRecipes,
21    McpLifecycle,
22    AuthorizationPolicy,
23    ToolClasses,
24    ToolRegistryOwnership,
25    SessionResetSemantics,
26    ProductSurface,
27    ReasoningSplit,
28    Identity,
29    WorkflowModes,
30    GemmaNative,
31    GemmaNativeSettings,
32    VerifyProfiles,
33    Toolchain,
34    ArchitectSessionResetPlan,
35}
36
37#[derive(Clone, Copy, Debug)]
38pub(crate) struct QueryIntent {
39    pub(crate) primary_class: QueryIntentClass,
40    pub(crate) direct_answer: Option<DirectAnswerKind>,
41    pub(crate) grounded_trace_mode: bool,
42    pub(crate) capability_mode: bool,
43    pub(crate) capability_needs_repo: bool,
44    pub(crate) toolchain_mode: bool,
45    pub(crate) host_inspection_mode: bool,
46    pub(crate) maintainer_workflow_mode: bool,
47    pub(crate) workspace_workflow_mode: bool,
48    pub(crate) architecture_overview_mode: bool,
49}
50
51fn contains_any(haystack: &str, needles: &[&str]) -> bool {
52    needles.iter().any(|needle| haystack.contains(needle))
53}
54
55fn contains_all(haystack: &str, needles: &[&str]) -> bool {
56    needles.iter().all(|needle| haystack.contains(needle))
57}
58
59fn mentions_reset_commands(lower: &str) -> bool {
60    contains_all(lower, &["/clear", "/new", "/forget"])
61}
62
63fn mentions_stable_product_surface(lower: &str) -> bool {
64    contains_any(
65        lower,
66        &[
67            "stable product-surface question",
68            "stable product surface question",
69            "stable product-surface questions",
70            "stable product surface questions",
71        ],
72    )
73}
74
75fn mentions_product_truth_routing(lower: &str) -> bool {
76    let asks_decision_policy = contains_any(
77        lower,
78        &[
79            "how hematite decides",
80            "how does hematite decide",
81            "decides whether",
82            "decide whether",
83        ],
84    );
85    let asks_direct_vs_inspect_split = contains_any(
86        lower,
87        &[
88            "answered as stable product truth",
89            "stable product truth",
90            "stable product behavior",
91            "answer directly",
92            "direct answer",
93            "inspect the repository",
94            "inspect repository",
95            "repository implementation",
96            "repo implementation",
97        ],
98    );
99    asks_decision_policy && asks_direct_vs_inspect_split
100}
101
102fn mentions_broad_system_walkthrough(lower: &str) -> bool {
103    let asks_walkthrough = contains_any(
104        lower,
105        &[
106            "walk me through",
107            "walk through",
108            "how hematite is wired",
109            "understand how hematite is wired",
110            "major runtime pieces",
111            "normal message moves",
112            "moves from the tui to the model and back",
113        ],
114    );
115    let asks_multiple_runtime_areas = contains_any(
116        lower,
117        &[
118            "session recovery",
119            "tool policy",
120            "mcp state",
121            "mcp policy",
122            "files own the major runtime pieces",
123            "which files own",
124            "where session recovery",
125            "where tool policy",
126            "where mcp state",
127        ],
128    );
129    asks_walkthrough && asks_multiple_runtime_areas
130}
131
132fn mentions_capability_question(lower: &str) -> bool {
133    contains_any(
134        lower,
135        &[
136            "what can you do",
137            "what are you capable",
138            "can you make projects",
139            "can you build projects",
140            "do you know other coding languages",
141            "other coding languages",
142            "what languages",
143            "can you use the internet",
144            "internet research capabilities",
145            "what tools do you have",
146        ],
147    )
148}
149
150fn mentions_creator_question(lower: &str) -> bool {
151    contains_any(
152        lower,
153        &[
154            "who created you",
155            "who built you",
156            "who made you",
157            "who developed you",
158            "who engineered you",
159            "who engineered your architecture",
160            "who created hematite",
161            "who built hematite",
162            "who developed hematite",
163            "who engineered hematite",
164            "who maintains hematite",
165            "who authored hematite",
166            "who is the author",
167            "who wrote this",
168            "who made this app",
169        ],
170    )
171}
172
173fn capability_question_requires_repo_inspection(lower: &str) -> bool {
174    contains_any(
175        lower,
176        &[
177            "this repo",
178            "this repository",
179            "codebase",
180            "which files",
181            "implementation",
182            "in this project",
183        ],
184    )
185}
186
187fn mentions_host_inspection_question(lower: &str) -> bool {
188    let host_scope = contains_any(
189        lower,
190        &[
191            "path",
192            "package manager",
193            "package managers",
194            "env doctor",
195            "environment doctor",
196            "pip",
197            "winget",
198            "choco",
199            "scoop",
200            "network",
201            "adapter",
202            "dns",
203            "gateway",
204            "ip address",
205            "ipconfig",
206            "wifi",
207            "ethernet",
208            "service",
209            "services",
210            "daemon",
211            "startup type",
212            "process",
213            "processes",
214            "task manager",
215            "ram",
216            "cpu",
217            "memory",
218            "developer tools",
219            "toolchains",
220            "installed",
221            "desktop",
222            "downloads",
223            "folder",
224            "directory",
225            "local development",
226            "machine",
227            "computer",
228            "firewall",
229            "vpn",
230            "proxy",
231            "internet",
232            "online",
233            "connectivity",
234            "ssid",
235            "wireless",
236            "tcp connection",
237            "active connection",
238            "traceroute",
239            "tracert",
240            "dns cache",
241            "arp table",
242            "arp cache",
243            "route table",
244            "routing table",
245            "default gateway",
246            "next hop",
247            "power plan",
248            "power settings",
249            "uptime",
250            "reboot",
251            "health",
252            "report",
253            "bitlocker",
254            "rdp",
255            "remote desktop",
256            "vss",
257            "shadow copy",
258            "shadow copies",
259            "pagefile",
260            "virtual memory",
261            "swap",
262            "windows feature",
263            "optional feature",
264            "printer",
265            "print queue",
266            "winrm",
267            "psremoting",
268            "network stats",
269            "adapter stats",
270            "udp listening",
271            "udp port",
272            "session",
273            "logon",
274            "login",
275            "virtualization",
276            "hypervisor",
277            "vt-x",
278            "slat",
279        ],
280    );
281    let host_action = contains_any(
282        lower,
283        &[
284            "inspect",
285            "count",
286            "tell me",
287            "summarize",
288            "how big",
289            "biggest",
290            "versions",
291            "duplicate",
292            "missing",
293            "ready",
294            "fix",
295            "repair",
296            "resolve",
297            "troubleshoot",
298        ],
299    );
300
301    host_scope && host_action
302}
303
304pub fn preferred_host_inspection_topic(user_input: &str) -> Option<&'static str> {
305    let lower = user_input.to_lowercase();
306    let asks_fix_plan = (lower.contains("fix")
307        || lower.contains("repair")
308        || lower.contains("resolve")
309        || lower.contains("troubleshoot"))
310        && (lower.contains("cargo")
311            || lower.contains("path")
312            || lower.contains("package manager")
313            || lower.contains("toolchain")
314            || lower.contains("port ")
315            || lower.contains("already in use")
316            || lower.contains("lm studio")
317            || lower.contains("localhost:1234")
318            || lower.contains("embedding model")
319            || lower.contains("no coding model loaded"));
320    let asks_path = lower.contains("path entries")
321        || lower.contains("raw path")
322        || (lower.contains("path") && (lower.contains("show") || lower.contains("what is")));
323    let asks_gpo = lower.contains("gpo")
324        || lower.contains("group policy")
325        || lower.contains("gpresult")
326        || lower.contains("applied policy");
327    let asks_certificates = lower.contains("cert")
328        || lower.contains("ssl")
329        || lower.contains("client cert")
330        || lower.contains("expiring cert");
331    let asks_integrity = lower.contains("integrity")
332        || lower.contains("sfc")
333        || lower.contains("dism")
334        || lower.contains("corruption")
335        || lower.contains("os health");
336    let asks_domain = lower.contains("domain")
337        || lower.contains("active directory")
338        || lower.contains("ad join")
339        || lower.contains("workgroup")
340        || lower.contains("netbios");
341    let asks_device_health = lower.contains("device health")
342        || lower.contains("hardware error")
343        || lower.contains("malfunctioning")
344        || lower.contains("yellow bang")
345        || lower.contains("hardware failing");
346    let asks_drivers =
347        lower.contains("driver") || lower.contains("kmod") || lower.contains("kernel module");
348    let asks_peripherals = lower.contains("peripheral")
349        || lower.contains("usb")
350        || lower.contains("keyboard")
351        || lower.contains("mouse")
352        || lower.contains("pointer")
353        || lower.contains("monitor")
354        || lower.contains("input device")
355        || lower.contains("connected hardware");
356    let asks_sessions = lower.contains("session")
357        || lower.contains("login")
358        || lower.contains("who is on")
359        || lower.contains("active user");
360    let asks_virtualization = lower.contains("virtualization")
361        || lower.contains("hypervisor")
362        || lower.contains("vt-x")
363        || lower.contains("slat")
364        || lower.contains("v-p")
365        || lower.contains("nested virt");
366    let asks_startup = lower.contains("startup")
367        || lower.contains("boot program")
368        || lower.contains("autorun")
369        || lower.contains("run at boot");
370    let asks_env_doctor = lower.contains("env doctor")
371        || lower.contains("environment doctor")
372        || lower.contains("package manager")
373        || lower.contains("package managers")
374        || lower.contains("shims")
375        || lower.contains("path drift")
376        || (lower.contains("dev machine") && lower.contains("off"))
377        || (lower.contains("environment") && lower.contains("sane"));
378    let asks_network = lower.contains("network")
379        || lower.contains("adapter")
380        || lower.contains("dns")
381        || lower.contains("gateway")
382        || lower.contains("ip address")
383        || lower.contains("ipconfig")
384        || lower.contains("wifi")
385        || lower.contains("ethernet")
386        || lower.contains("subnet");
387    let asks_services = lower.contains("service")
388        || lower.contains("services")
389        || lower.contains("daemon")
390        || lower.contains("startup type")
391        || lower.contains("background service")
392        || lower.contains("windows service")
393        || lower.contains("systemctl")
394        || lower.contains("get-service");
395    let asks_processes = lower.contains("process")
396        || lower.contains("processes")
397        || lower.contains("task manager")
398        || lower.contains("what is running")
399        || lower.contains("what's running")
400        || lower.contains("using my ram")
401        || lower.contains("using ram")
402        || lower.contains("using my cpu")
403        || lower.contains("top memory")
404        || lower.contains("top ram")
405        || lower.contains("high memory")
406        || lower.contains("resource-heavy processes")
407        || lower.contains("heavy hitters");
408    let asks_toolchains = lower.contains("developer tools")
409        || lower.contains("toolchains")
410        || (lower.contains("installed") && lower.contains("version"))
411        || (lower.contains("detect") && lower.contains("version"));
412    let asks_ports = lower.contains("listening on port")
413        || lower.contains("listening port")
414        || lower.contains("open port")
415        || lower.contains("port 3000")
416        || lower.contains("port ")
417        || lower.contains("listening on ")
418        || lower.contains("exposed")
419        || lower.contains("what is listening");
420    let asks_repo_doctor = lower.contains("repo doctor")
421        || lower.contains("repository doctor")
422        || lower.contains("workspace health")
423        || lower.contains("repo health")
424        || lower.contains("workspace sanity")
425        || (lower.contains("git state")
426            && (lower.contains("release artifacts")
427                || lower.contains("build markers")
428                || lower.contains("hematite memory")));
429    let asks_directory = lower.contains("directory")
430        || lower.contains("folder")
431        || lower.contains("how big")
432        || lower.contains("biggest");
433    let asks_broad_readiness = lower.contains("local development")
434        || lower.contains("ready for local development")
435        || (lower.contains("machine") && lower.contains("ready"))
436        || (lower.contains("computer") && lower.contains("ready"));
437    let asks_os_config = lower.contains("firewall")
438        || lower.contains("power plan")
439        || lower.contains("power settings")
440        || lower.contains("powercfg")
441        || lower.contains("uptime")
442        || lower.contains("reboot")
443        || lower.contains("boot time")
444        || lower.contains("last boot");
445    let asks_health_report = lower.contains("health report")
446        || lower.contains("system health")
447        || (lower.contains("how") && lower.contains("machine") && lower.contains("doing"))
448        || (lower.contains("status") && lower.contains("report") && !lower.contains("git"));
449    let asks_updates = lower.contains("up to date")
450        || lower.contains("windows update")
451        || lower.contains("pending update")
452        || lower.contains("update available")
453        || lower.contains("check for update")
454        || lower.contains("latest update")
455        || (lower.contains("update")
456            && (lower.contains("my pc")
457                || lower.contains("my computer")
458                || lower.contains("my machine")));
459    let asks_security = lower.contains("antivirus")
460        || lower.contains("defender")
461        || lower.contains("virus protection")
462        || lower.contains("malware")
463        || lower.contains("windows security")
464        || lower.contains("uac")
465        || lower.contains("windows activated")
466        || lower.contains("activation status")
467        || (lower.contains("protected") && (lower.contains("pc") || lower.contains("computer")))
468        || (lower.contains("security")
469            && !lower.contains("git")
470            && !lower.contains("ssh")
471            && !lower.contains("token"));
472    let asks_pending_reboot = lower.contains("need to restart")
473        || lower.contains("need to reboot")
474        || lower.contains("requires restart")
475        || lower.contains("requires a reboot")
476        || lower.contains("reboot required")
477        || lower.contains("restart required")
478        || lower.contains("pending restart")
479        || lower.contains("pending reboot")
480        || (lower.contains("restart")
481            && (lower.contains("waiting")
482                || lower.contains("queued")
483                || lower.contains("required")))
484        || (lower.contains("reboot") && lower.contains("required"));
485    let asks_disk_health = lower.contains("disk health")
486        || lower.contains("drive health")
487        || lower.contains("hard drive dying")
488        || lower.contains("smart status")
489        || lower.contains("drive failing")
490        || lower.contains("drive fail")
491        || (lower.contains("dying") && (lower.contains("drive") || lower.contains("disk")))
492        || (lower.contains("healthy")
493            && (lower.contains("drive")
494                || lower.contains("disk")
495                || lower.contains("ssd")
496                || lower.contains("hdd")));
497    let asks_battery = lower.contains("battery")
498        || lower.contains("battery life")
499        || lower.contains("battery health")
500        || lower.contains("battery wear")
501        || lower.contains("charge level")
502        || lower.contains("how long until")
503        || (lower.contains("dying") && lower.contains("batter"));
504    let asks_recent_crashes = lower.contains("crash")
505        || lower.contains("bsod")
506        || lower.contains("blue screen")
507        || lower.contains("why did my pc restart")
508        || lower.contains("unexpected restart")
509        || lower.contains("sudden restart")
510        || lower.contains("kernel panic")
511        || lower.contains("app crash")
512        || (lower.contains("restart") && lower.contains("itself"))
513        || (lower.contains("restart") && lower.contains("by itself"));
514    let asks_scheduled_tasks = lower.contains("scheduled task")
515        || lower.contains("scheduled tasks")
516        || lower.contains("task scheduler")
517        || lower.contains("what runs on a timer")
518        || lower.contains("what runs at")
519        || lower.contains("cron job")
520        || lower.contains("background task");
521    let asks_dev_conflicts = lower.contains("dev conflict")
522        || lower.contains("environment conflict")
523        || lower.contains("toolchain conflict")
524        || lower.contains("version conflict")
525        || lower.contains("path conflict")
526        || lower.contains("duplicate path")
527        || (lower.contains("python") && lower.contains("wrong version"))
528        || (lower.contains("node") && lower.contains("wrong version"))
529        || lower.contains("conda shadow")
530        || lower.contains("dev environment clean");
531    let asks_disk_benchmark = lower.contains("benchmark")
532        || lower.contains("stress test")
533        || lower.contains("load test")
534        || lower.contains("intensity report")
535        || lower.contains("io intensity")
536        || lower.contains("disk intensity")
537        || lower.contains("thrash")
538        || lower.contains("latency report");
539    let asks_resource_load = lower.contains("resource load")
540        || lower.contains("system load")
541        || lower.contains("performance")
542        || lower.contains("utilization")
543        || lower.contains("usage report")
544        || lower.contains("performance report")
545        || lower.contains("what is my load")
546        || lower.contains("current load")
547        || lower.contains("why is it slow")
548        || lower.contains("why is it laggy")
549        || lower.contains("is it working hard")
550        || lower.contains("high cpu")
551        || lower.contains("high ram")
552        || lower.contains("cpu load")
553        || lower.contains("heavy hitters")
554        || (lower.contains("resource") && lower.contains("usage"));
555
556    let asks_connectivity = lower.contains("internet")
557        || lower.contains("online")
558        || lower.contains("connectivity")
559        || lower.contains("am i connected")
560        || lower.contains("ping google")
561        || lower.contains("reach the internet")
562        || lower.contains("internet access")
563        || lower.contains("no internet")
564        || lower.contains("internet down")
565        || (lower.contains("check") && lower.contains("connection"))
566        || (lower.contains("dns") && (lower.contains("resolv") || lower.contains("working")));
567    let asks_wifi = lower.contains("wi-fi")
568        || lower.contains("wifi")
569        || lower.contains("wireless")
570        || lower.contains("wlan")
571        || lower.contains("signal strength")
572        || lower.contains("ssid")
573        || lower.contains("access point")
574        || (lower.contains("wireless") && lower.contains("connect"));
575    let asks_connections = lower.contains("tcp connection")
576        || lower.contains("active connection")
577        || lower.contains("established connection")
578        || lower.contains("socket")
579        || lower.contains("netstat")
580        || (lower.contains("connection") && lower.contains("active"))
581        || (lower.contains("connection") && lower.contains("open"));
582    let asks_vpn = lower.contains("vpn")
583        || lower.contains("virtual private network")
584        || (lower.contains("tunnel") && (lower.contains("network") || lower.contains("vpn")));
585    let asks_proxy = lower.contains("proxy")
586        || lower.contains("proxy setting")
587        || lower.contains("winhttp proxy")
588        || lower.contains("system proxy")
589        || (lower.contains("routed") && lower.contains("proxy"));
590    let asks_firewall_rules = (lower.contains("firewall")
591        && (lower.contains("rule")
592            || lower.contains("block")
593            || lower.contains("allow")
594            || lower.contains("inbound")
595            || lower.contains("outbound")))
596        || lower.contains("blocked port")
597        || lower.contains("firewall rule");
598    let asks_traceroute = lower.contains("traceroute")
599        || lower.contains("tracert")
600        || lower.contains("tracepath")
601        || lower.contains("trace route")
602        || lower.contains("trace the path")
603        || lower.contains("network path")
604        || lower.contains("how many hops")
605        || lower.contains("where does traffic go")
606        || (lower.contains("trace") && lower.contains("hop"))
607        || (lower.contains("route") && lower.contains("traffic"));
608    let asks_dns_cache = lower.contains("dns cache")
609        || lower.contains("cached dns")
610        || lower.contains("dns lookup cache")
611        || lower.contains("displaydns")
612        || lower.contains("/displaydns")
613        || lower.contains("get-dnsclientcache")
614        || lower.contains("dns entries")
615        || (lower.contains("dns") && lower.contains("cached"));
616    let asks_arp = lower.contains("arp -")
617        || lower.contains("arp table")
618        || lower.contains("arp cache")
619        || lower.contains("mac address")
620        || lower.contains("neighbor table")
621        || lower.contains("ip to mac")
622        || lower.contains("ip neigh")
623        || (lower.contains("arp")
624            && (lower.contains("who") || lower.contains("entry") || lower.contains("entries")));
625    let asks_route_table = lower.contains("route print")
626        || lower.contains("route table")
627        || lower.contains("routing table")
628        || lower.contains("get-netroute")
629        || lower.contains("default gateway")
630        || lower.contains("network routes")
631        || lower.contains("ip route")
632        || lower.contains("next hop")
633        || (lower.contains("route")
634            && (lower.contains("table") || lower.contains("entry") || lower.contains("entries")));
635    let asks_env = (lower.contains("environment variable")
636        || lower.contains("env var")
637        || lower.contains("env vars")
638        || lower.contains("show env")
639        || lower.contains("list env"))
640        && !lower.contains("env doctor");
641    let asks_hosts_file = lower.contains("hosts file")
642        || lower.contains("/etc/hosts")
643        || lower.contains("etc/hosts")
644        || lower.contains("hosts entry")
645        || lower.contains("hosts entries")
646        || (lower.contains("hosts")
647            && (lower.contains("redirect")
648                || lower.contains("block")
649                || lower.contains("loopback")));
650    let asks_docker = lower.contains("docker")
651        || lower.contains("container")
652        || lower.contains("docker compose")
653        || lower.contains("docker ps")
654        || lower.contains("running container");
655    let asks_wsl = lower.contains("wsl")
656        || lower.contains("windows subsystem")
657        || lower.contains("linux distro")
658        || lower.contains("ubuntu on windows")
659        || (lower.contains("subsystem") && lower.contains("linux"));
660    let asks_ssh = (lower.contains("ssh") && !lower.contains("ssh key") && !lower.contains("git"))
661        || lower.contains("sshd")
662        || lower.contains("ssh config")
663        || lower.contains("ssh server")
664        || lower.contains("ssh client")
665        || lower.contains("known_hosts")
666        || lower.contains("authorized_keys")
667        || lower.contains("ssh key")
668        || (lower.contains("ssh")
669            && (lower.contains("running")
670                || lower.contains("service")
671                || lower.contains("port 22")));
672    let asks_installed_software = lower.contains("installed software")
673        || lower.contains("installed program")
674        || lower.contains("installed app")
675        || lower.contains("installed package")
676        || lower.contains("what is installed")
677        || lower.contains("what's installed")
678        || lower.contains("winget list")
679        || lower.contains("list programs")
680        || (lower.contains("installed")
681            && (lower.contains("on this machine")
682                || lower.contains("on my machine")
683                || lower.contains("on my pc")));
684    let asks_databases = lower.contains("postgres")
685        || lower.contains("postgresql")
686        || lower.contains("mysql")
687        || lower.contains("mariadb")
688        || lower.contains("mongodb")
689        || lower.contains("mongo")
690        || lower.contains("redis")
691        || lower.contains("sql server")
692        || lower.contains("mssql")
693        || lower.contains("sqlite")
694        || lower.contains("elasticsearch")
695        || lower.contains("cassandra")
696        || lower.contains("couchdb")
697        || (lower.contains("database")
698            && (lower.contains("running")
699                || lower.contains("service")
700                || lower.contains("installed")
701                || lower.contains("up")
702                || lower.contains("local")))
703        || lower.contains("db service")
704        || lower.contains("database server")
705        || (lower.contains("is")
706            && lower.contains("running")
707            && (lower.contains("db") || lower.contains("database")));
708    let asks_git_config = (lower.contains("git config")
709        || lower.contains("git configuration")
710        || lower.contains("git global")
711        || (lower.contains("git") && lower.contains("user.name"))
712        || (lower.contains("git") && lower.contains("user.email"))
713        || (lower.contains("git") && lower.contains("signing"))
714        || (lower.contains("git") && lower.contains("credential"))
715        || lower.contains("git aliases"))
716        && !lower.contains("github");
717    let asks_user_accounts = lower.contains("local user")
718        || lower.contains("user account")
719        || lower.contains("who is logged in")
720        || lower.contains("who is logged on")
721        || lower.contains("logged in user")
722        || lower.contains("logged on user")
723        || lower.contains("admin group")
724        || lower.contains("administrators group")
725        || lower.contains("local admin")
726        || lower.contains("who has admin")
727        || lower.contains("running as admin")
728        || lower.contains("is this elevated")
729        || lower.contains("active sessions")
730        || lower.contains("logon session")
731        || lower.contains("net user")
732        || lower.contains("get-localuser");
733    let asks_audit_policy = lower.contains("audit policy")
734        || lower.contains("auditpol")
735        || lower.contains("audit log")
736        || lower.contains("what is being logged")
737        || lower.contains("security audit")
738        || lower.contains("logon event")
739        || lower.contains("audit category")
740        || lower.contains("event auditing");
741    let asks_shares = lower.contains("smb share")
742        || lower.contains("network share")
743        || lower.contains("shared folder")
744        || lower.contains("mapped drive")
745        || lower.contains("mapped network drive")
746        || lower.contains("get-smbshare")
747        || lower.contains("what is shared")
748        || lower.contains("what am i sharing")
749        || lower.contains("smb1")
750        || lower.contains("smb signing")
751        || lower.contains("nfs export");
752    let asks_dns_servers = (lower.contains("dns server")
753        || lower.contains("dns resolver")
754        || lower.contains("nameserver")
755        || lower.contains("which dns")
756        || lower.contains("what dns")
757        || lower.contains("dns over https")
758        || lower.contains("doh")
759        || lower.contains("dns search suffix")
760        || lower.contains("configured dns")
761        || lower.contains("get-dnsclientserveraddress"))
762        && !lower.contains("dns cache");
763    let asks_bitlocker = lower.contains("bitlocker")
764        || (lower.contains("drive") && lower.contains("encrypt"))
765        || (lower.contains("disk") && lower.contains("encrypt"))
766        || lower.contains("encryption status");
767    let asks_rdp = lower.contains("rdp")
768        || lower.contains("remote desktop")
769        || (lower.contains("remote") && lower.contains("access") && !lower.contains("git"));
770    let asks_shadow_copies = lower.contains("shadow copy")
771        || lower.contains("shadow copies")
772        || lower.contains("vss")
773        || lower.contains("snapshot")
774        || lower.contains("restore point");
775    let asks_pagefile = lower.contains("pagefile")
776        || lower.contains("page file")
777        || lower.contains("virtual memory")
778        || lower.contains("swap file")
779        || (lower.contains("paging") && lower.contains("file"));
780    let asks_windows_features = (lower.contains("window") && lower.contains("feature"))
781        || lower.contains("optional feature")
782        || lower.contains("iis")
783        || lower.contains("hyper-v")
784        || (lower.contains("feature")
785            && (lower.contains("install")
786                || lower.contains("enabled")
787                || lower.contains("turn on")));
788    let asks_printers =
789        lower.contains("printer") || lower.contains("print queue") || lower.contains("get-printer");
790    let asks_winrm = lower.contains("winrm")
791        || lower.contains("psremoting")
792        || (lower.contains("ps") && lower.contains("remoting"))
793        || (lower.contains("remote") && lower.contains("management") && !lower.contains("rdp"));
794    let asks_network_stats = (lower.contains("network") && lower.contains("stat"))
795        || (lower.contains("adapter") && lower.contains("stat"))
796        || (lower.contains("nic") && lower.contains("stat"))
797        || lower.contains("throughput")
798        || lower.contains("packet loss")
799        || lower.contains("dropped packet");
800    let asks_udp_ports = lower.contains("udp port")
801        || lower.contains("udp listener")
802        || (lower.contains("udp")
803            && (lower.contains("port") || lower.contains("listen") || lower.contains("open")));
804
805    if asks_disk_benchmark {
806        Some("disk_benchmark")
807    } else if asks_fix_plan {
808        Some("fix_plan")
809    } else if asks_gpo {
810        Some("gpo")
811    } else if asks_certificates {
812        Some("certificates")
813    } else if asks_integrity {
814        Some("integrity")
815    } else if asks_domain {
816        Some("domain")
817    } else if asks_device_health {
818        Some("device_health")
819    } else if asks_drivers {
820        Some("drivers")
821    } else if asks_peripherals {
822        Some("peripherals")
823    } else if asks_user_accounts {
824        Some("user_accounts")
825    } else if asks_sessions {
826        Some("sessions")
827    } else if asks_virtualization {
828        Some("hardware")
829    } else if asks_startup {
830        Some("startup_items")
831    } else if asks_bitlocker {
832        Some("bitlocker")
833    } else if asks_rdp {
834        Some("rdp")
835    } else if asks_shadow_copies {
836        Some("shadow_copies")
837    } else if asks_pagefile {
838        Some("pagefile")
839    } else if asks_windows_features {
840        Some("windows_features")
841    } else if asks_printers {
842        Some("printers")
843    } else if asks_winrm {
844        Some("winrm")
845    } else if asks_network_stats {
846        Some("network_stats")
847    } else if asks_udp_ports {
848        Some("udp_ports")
849    } else if asks_updates {
850        Some("updates")
851    } else if asks_audit_policy {
852        Some("audit_policy")
853    } else if asks_security {
854        Some("security")
855    } else if asks_pending_reboot {
856        Some("pending_reboot")
857    } else if asks_disk_health {
858        Some("disk_health")
859    } else if asks_battery {
860        Some("battery")
861    } else if asks_recent_crashes {
862        Some("recent_crashes")
863    } else if asks_scheduled_tasks {
864        Some("scheduled_tasks")
865    } else if asks_dev_conflicts {
866        Some("dev_conflicts")
867    } else if (asks_path && asks_toolchains)
868        || (mentions_host_inspection_question(&lower) && asks_broad_readiness)
869    {
870        Some("summary")
871    } else if asks_env_doctor {
872        Some("env_doctor")
873    } else if asks_dns_servers {
874        Some("dns_servers")
875    } else if asks_connectivity {
876        Some("connectivity")
877    } else if asks_wifi {
878        Some("wifi")
879    } else if asks_connections {
880        Some("connections")
881    } else if asks_vpn {
882        Some("vpn")
883    } else if asks_proxy {
884        Some("proxy")
885    } else if asks_firewall_rules {
886        Some("firewall_rules")
887    } else if asks_traceroute {
888        Some("traceroute")
889    } else if asks_dns_cache {
890        Some("dns_cache")
891    } else if asks_arp {
892        Some("arp")
893    } else if asks_route_table {
894        Some("route_table")
895    } else if asks_databases {
896        Some("databases")
897    } else if asks_docker {
898        Some("docker")
899    } else if asks_wsl {
900        Some("wsl")
901    } else if asks_ssh {
902        Some("ssh")
903    } else if asks_git_config {
904        Some("git_config")
905    } else if asks_installed_software {
906        Some("installed_software")
907    } else if asks_env {
908        Some("env")
909    } else if asks_shares {
910        Some("shares")
911    } else if asks_hosts_file {
912        Some("hosts_file")
913    } else if asks_network {
914        Some("network")
915    } else if asks_services {
916        Some("services")
917    } else if asks_processes {
918        Some("processes")
919    } else if asks_ports {
920        Some("ports")
921    } else if asks_repo_doctor {
922        Some("repo_doctor")
923    } else if lower.contains("desktop") {
924        Some("desktop")
925    } else if lower.contains("downloads") {
926        Some("downloads")
927    } else if asks_path {
928        Some("path")
929    } else if asks_toolchains {
930        Some("toolchains")
931    } else if asks_os_config {
932        Some("os_config")
933    } else if asks_resource_load {
934        Some("resource_load")
935    } else if asks_health_report {
936        Some("health_report")
937    } else if asks_directory {
938        Some("directory")
939    } else if mentions_host_inspection_question(&lower) {
940        Some("summary")
941    } else {
942        None
943    }
944}
945
946/// Returns all distinct inspect_host topics detected in a user prompt.
947/// Used by the harness to pre-run multiple topics when the user asks for several at once,
948/// so the model receives all results and only needs to synthesize rather than orchestrate.
949pub fn all_host_inspection_topics(user_input: &str) -> Vec<&'static str> {
950    // All topic detectors in priority order — ordered so more specific topics come
951    // before generic fallbacks (e.g. traceroute before network).
952    let detectors: &[(&str, fn(&str) -> bool)] = &[
953        ("fix_plan", |l| {
954            l.contains("fix")
955                && (l.contains("cargo")
956                    || l.contains("port ")
957                    || l.contains("lm studio")
958                    || l.contains("toolchain"))
959        }),
960        ("updates", |l| {
961            l.contains("up to date")
962                || l.contains("windows update")
963                || l.contains("pending update")
964                || l.contains("update available")
965        }),
966        ("security", |l| {
967            l.contains("antivirus")
968                || l.contains("defender")
969                || l.contains("uac")
970                || (l.contains("security") && !l.contains("git") && !l.contains("ssh"))
971        }),
972        ("pending_reboot", |l| {
973            l.contains("pending reboot")
974                || l.contains("pending restart")
975                || l.contains("need to restart")
976                || l.contains("reboot required")
977        }),
978        ("disk_health", |l| {
979            l.contains("disk health")
980                || l.contains("drive health")
981                || l.contains("smart status")
982                || (l.contains("healthy")
983                    && (l.contains("drive") || l.contains("disk") || l.contains("ssd")))
984        }),
985        ("battery", |l| l.contains("battery")),
986        ("recent_crashes", |l| {
987            l.contains("crash") || l.contains("bsod") || l.contains("blue screen")
988        }),
989        ("scheduled_tasks", |l| {
990            l.contains("scheduled task") || l.contains("task scheduler")
991        }),
992        ("dev_conflicts", |l| {
993            l.contains("dev conflict")
994                || l.contains("toolchain conflict")
995                || l.contains("duplicate path")
996        }),
997        ("storage", |l| {
998            l.contains("disk space")
999                || l.contains("storage")
1000                || l.contains("drive capacity")
1001                || l.contains("cache size")
1002        }),
1003        ("hardware", |l| {
1004            l.contains("cpu model")
1005                || l.contains("ram size")
1006                || l.contains("hardware spec")
1007                || (l.contains("what hardware") && l.contains("have"))
1008        }),
1009        ("health_report", |l| {
1010            l.contains("health report") || l.contains("system health")
1011        }),
1012        ("resource_load", |l| {
1013            l.contains("resource load")
1014                || l.contains("cpu load")
1015                || l.contains("ram %")
1016                || l.contains("cpu %")
1017                || l.contains("performance")
1018        }),
1019        ("processes", |l| {
1020            l.contains("process")
1021                || l.contains("task manager")
1022                || l.contains("what is running")
1023                || l.contains("using my ram")
1024                || l.contains("hitting the disk")
1025                || l.contains("disk thrasher")
1026        }),
1027        ("services", |l| {
1028            l.contains("service") || l.contains("daemon") || l.contains("windows service")
1029        }),
1030        ("ports", |l| {
1031            l.contains("listening port")
1032                || l.contains("open port")
1033                || l.contains("what is on port")
1034                || l.contains("port 3000")
1035        }),
1036        ("traceroute", |l| {
1037            l.contains("traceroute")
1038                || l.contains("tracert")
1039                || l.contains("trace route")
1040                || l.contains("trace the path")
1041                || l.contains("network path")
1042                || l.contains("how many hops")
1043                || (l.contains("trace") && l.contains("hop"))
1044        }),
1045        ("dns_cache", |l| {
1046            l.contains("dns cache")
1047                || l.contains("cached dns")
1048                || l.contains("displaydns")
1049                || (l.contains("dns") && l.contains("cached"))
1050        }),
1051        ("arp", |l| {
1052            l.contains("arp table")
1053                || l.contains("arp cache")
1054                || l.contains("mac address")
1055                || l.contains("ip to mac")
1056                || l.contains("arp -")
1057        }),
1058        ("route_table", |l| {
1059            l.contains("route table")
1060                || l.contains("routing table")
1061                || l.contains("route print")
1062                || l.contains("network route")
1063                || l.contains("next hop")
1064        }),
1065        ("connectivity", |l| {
1066            l.contains("internet")
1067                || l.contains("am i connected")
1068                || l.contains("ping google")
1069                || l.contains("internet access")
1070                || l.contains("no internet")
1071        }),
1072        ("wifi", |l| {
1073            l.contains("wi-fi")
1074                || l.contains("wifi")
1075                || l.contains("wireless")
1076                || l.contains("ssid")
1077                || l.contains("signal strength")
1078        }),
1079        ("connections", |l| {
1080            l.contains("tcp connection")
1081                || l.contains("active connection")
1082                || l.contains("netstat")
1083                || l.contains("open socket")
1084        }),
1085        ("vpn", |l| {
1086            l.contains("vpn") || l.contains("virtual private network")
1087        }),
1088        ("proxy", |l| {
1089            l.contains("proxy setting") || l.contains("system proxy") || l.contains("winhttp proxy")
1090        }),
1091        ("firewall_rules", |l| {
1092            (l.contains("firewall")
1093                && (l.contains("rule") || l.contains("inbound") || l.contains("outbound")))
1094                || l.contains("firewall rule")
1095        }),
1096        ("network", |l| {
1097            l.contains("network adapter")
1098                || l.contains("ip address")
1099                || l.contains("ipconfig")
1100                || l.contains("gateway")
1101                || l.contains("subnet")
1102        }),
1103        ("env_doctor", |l| {
1104            l.contains("env doctor")
1105                || l.contains("environment doctor")
1106                || l.contains("package manager")
1107                || l.contains("path drift")
1108        }),
1109        ("os_config", |l| {
1110            l.contains("power plan")
1111                || l.contains("uptime")
1112                || l.contains("boot time")
1113                || l.contains("last boot")
1114        }),
1115        ("path", |l| {
1116            l.contains("path entries") || l.contains("raw path")
1117        }),
1118        ("toolchains", |l| {
1119            l.contains("developer tools")
1120                || l.contains("toolchains")
1121                || (l.contains("installed") && l.contains("version"))
1122        }),
1123        ("docker", |l| {
1124            l.contains("docker") || l.contains("container") || l.contains("running container")
1125        }),
1126        ("wsl", |l| {
1127            l.contains("wsl")
1128                || l.contains("windows subsystem")
1129                || (l.contains("subsystem") && l.contains("linux"))
1130        }),
1131        ("ssh", |l| {
1132            l.contains("ssh")
1133                || l.contains("sshd")
1134                || l.contains("known_hosts")
1135                || l.contains("authorized_keys")
1136        }),
1137        ("git_config", |l| {
1138            (l.contains("git config") || l.contains("git global") || l.contains("git aliases"))
1139                && !l.contains("github")
1140        }),
1141        ("installed_software", |l| {
1142            l.contains("installed software")
1143                || l.contains("installed program")
1144                || l.contains("what is installed")
1145                || l.contains("what's installed")
1146                || l.contains("winget list")
1147        }),
1148        ("env", |l| {
1149            (l.contains("environment variable") || l.contains("env var") || l.contains("env vars"))
1150                && !l.contains("env doctor")
1151        }),
1152        ("hosts_file", |l| {
1153            l.contains("hosts file") || l.contains("/etc/hosts") || l.contains("hosts entry")
1154        }),
1155        ("databases", |l| {
1156            l.contains("postgres")
1157                || l.contains("mysql")
1158                || l.contains("mariadb")
1159                || l.contains("mongodb")
1160                || l.contains("redis")
1161                || l.contains("sqlite")
1162                || l.contains("sql server")
1163                || l.contains("elasticsearch")
1164                || (l.contains("database") && (l.contains("running") || l.contains("service")))
1165        }),
1166        ("user_accounts", |l| {
1167            l.contains("local user")
1168                || l.contains("user account")
1169                || l.contains("who is logged")
1170                || l.contains("admin group")
1171                || l.contains("local admin")
1172                || l.contains("active sessions")
1173                || l.contains("running as admin")
1174        }),
1175        ("audit_policy", |l| {
1176            l.contains("audit policy")
1177                || l.contains("auditpol")
1178                || l.contains("what is being logged")
1179                || l.contains("security audit")
1180                || l.contains("event auditing")
1181        }),
1182        ("shares", |l| {
1183            l.contains("smb share")
1184                || l.contains("network share")
1185                || l.contains("shared folder")
1186                || l.contains("mapped drive")
1187                || l.contains("smb1")
1188                || l.contains("nfs export")
1189        }),
1190        ("dns_servers", |l| {
1191            (l.contains("dns server")
1192                || l.contains("dns resolver")
1193                || l.contains("nameserver")
1194                || l.contains("which dns")
1195                || l.contains("dns over https")
1196                || l.contains("configured dns"))
1197                && !l.contains("dns cache")
1198        }),
1199        ("bitlocker", |l| {
1200            l.contains("bitlocker")
1201                || (l.contains("drive") && l.contains("encrypt"))
1202                || (l.contains("disk") && l.contains("encrypt"))
1203                || l.contains("encryption status")
1204        }),
1205        ("rdp", |l| {
1206            l.contains("rdp")
1207                || l.contains("remote desktop")
1208                || (l.contains("remote") && l.contains("access") && !l.contains("git"))
1209        }),
1210        ("shadow_copies", |l| {
1211            l.contains("shadow copy")
1212                || l.contains("shadow copies")
1213                || l.contains("vss")
1214                || l.contains("snapshot")
1215                || l.contains("restore point")
1216        }),
1217        ("pagefile", |l| {
1218            l.contains("pagefile")
1219                || l.contains("page file")
1220                || l.contains("virtual memory")
1221                || l.contains("swap file")
1222        }),
1223        ("windows_features", |l| {
1224            (l.contains("window") && l.contains("feature"))
1225                || l.contains("optional feature")
1226                || l.contains("iis")
1227                || l.contains("hyper-v")
1228                || (l.contains("feature") && (l.contains("install") || l.contains("enabled")))
1229        }),
1230        ("printers", |l| {
1231            l.contains("printer") || l.contains("print queue") || l.contains("get-printer")
1232        }),
1233        ("winrm", |l| {
1234            l.contains("winrm")
1235                || l.contains("psremoting")
1236                || (l.contains("remote") && l.contains("management") && !l.contains("rdp"))
1237        }),
1238        ("network_stats", |l| {
1239            (l.contains("network") && l.contains("stat"))
1240                || (l.contains("adapter") && l.contains("stat"))
1241                || l.contains("throughput")
1242                || l.contains("packet loss")
1243                || l.contains("dropped packet")
1244        }),
1245        ("startup_items", |l| {
1246            l.contains("startup") || l.contains("boot program") || l.contains("autorun")
1247        }),
1248        ("udp_ports", |l| {
1249            l.contains("udp port")
1250                || l.contains("udp listener")
1251                || (l.contains("udp") && l.contains("listening"))
1252        }),
1253        ("gpo", |l| {
1254            l.contains("gpo") || l.contains("group policy") || l.contains("gpresult")
1255        }),
1256        ("certificates", |l| {
1257            l.contains("cert") || l.contains("ssl") || l.contains("thumbprint")
1258        }),
1259        ("integrity", |l| {
1260            l.contains("integrity") || l.contains("sfc") || l.contains("dism")
1261        }),
1262        ("domain", |l| {
1263            l.contains("domain")
1264                || l.contains("workgroup")
1265                || l.contains("netbios")
1266                || l.contains("active directory")
1267        }),
1268        ("device_health", |l| {
1269            l.contains("device health")
1270                || l.contains("hardware error")
1271                || l.contains("yellow bang")
1272                || l.contains("malfunctioning")
1273        }),
1274        ("drivers", |l| {
1275            l.contains("driver") || l.contains("system driver")
1276        }),
1277        ("peripherals", |l| {
1278            l.contains("peripheral")
1279                || l.contains("usb")
1280                || l.contains("keyboard")
1281                || l.contains("mouse")
1282                || l.contains("monitor")
1283        }),
1284        ("sessions", |l| {
1285            l.contains("session") || l.contains("who is logged") || l.contains("active login")
1286        }),
1287        ("hardware", |l| {
1288            l.contains("virtualization")
1289                || l.contains("hypervisor")
1290                || l.contains("vt-x")
1291                || l.contains("slat")
1292        }),
1293    ];
1294
1295    let lower = user_input.to_lowercase();
1296    let mut topics: Vec<&'static str> = Vec::new();
1297    for (topic, check) in detectors {
1298        if check(&lower) && !topics.contains(topic) {
1299            topics.push(topic);
1300        }
1301    }
1302    topics
1303}
1304
1305pub(crate) fn preferred_maintainer_workflow(user_input: &str) -> Option<&'static str> {
1306    let lower = user_input.to_ascii_lowercase();
1307    let asks_cleanup = contains_any(
1308        &lower,
1309        &[
1310            "run my cleanup",
1311            "run the cleanup",
1312            "run cleanup",
1313            "deep clean",
1314            "prune dist",
1315            "clean.ps1",
1316            "cleanup script",
1317            "cleanup workflow",
1318            "clean up scripts",
1319        ],
1320    );
1321    let asks_package = contains_any(
1322        &lower,
1323        &[
1324            "rebuild local portable",
1325            "rebuild the portable",
1326            "run the local build",
1327            "run the portable",
1328            "package-windows.ps1",
1329            "package windows",
1330            "build installer",
1331            "overwrite the portable",
1332            "refresh the portable",
1333            "update path",
1334            "update path with the portable",
1335        ],
1336    );
1337    let asks_release = contains_any(
1338        &lower,
1339        &[
1340            "run the release flow",
1341            "regular workflow",
1342            "cut the release",
1343            "ship it",
1344            "release.ps1",
1345            "bump to ",
1346            "tag it",
1347            "full tag and everything",
1348            "publish crates",
1349        ],
1350    );
1351
1352    if asks_cleanup {
1353        Some("clean")
1354    } else if asks_package {
1355        Some("package_windows")
1356    } else if asks_release {
1357        Some("release")
1358    } else {
1359        None
1360    }
1361}
1362
1363pub(crate) fn preferred_workspace_workflow(user_input: &str) -> Option<&'static str> {
1364    let lower = user_input.to_ascii_lowercase();
1365    let asks_project_scope = contains_any(
1366        &lower,
1367        &[
1368            "this repo",
1369            "this repository",
1370            "this project",
1371            "current project",
1372            "current repo",
1373            "workspace",
1374            "in this folder",
1375            "here",
1376        ],
1377    );
1378    let asks_build = contains_any(
1379        &lower,
1380        &[
1381            "run the build",
1382            "build this project",
1383            "build this repo",
1384            "run build",
1385            "compile this project",
1386            "cargo build",
1387            "npm run build",
1388            "pnpm run build",
1389            "yarn build",
1390            "go build",
1391            "gradlew build",
1392        ],
1393    );
1394    let asks_test = contains_any(
1395        &lower,
1396        &[
1397            "run the tests",
1398            "run tests",
1399            "test this project",
1400            "test this repo",
1401            "run the test suite",
1402            "cargo test",
1403            "npm test",
1404            "pnpm test",
1405            "yarn test",
1406            "pytest",
1407            "go test",
1408            "gradlew test",
1409        ],
1410    );
1411    let asks_lint = contains_any(
1412        &lower,
1413        &[
1414            "run lint",
1415            "lint this project",
1416            "lint this repo",
1417            "cargo clippy",
1418            "npm run lint",
1419            "pnpm run lint",
1420            "yarn lint",
1421        ],
1422    );
1423    let asks_fix = contains_any(
1424        &lower,
1425        &[
1426            "run fix",
1427            "fix formatting",
1428            "run formatter",
1429            "cargo fmt",
1430            "npm run fix",
1431            "pnpm run fix",
1432            "yarn fix",
1433        ],
1434    );
1435    let asks_script = contains_any(
1436        &lower,
1437        &[
1438            "npm run ",
1439            "pnpm run ",
1440            "yarn ",
1441            "bun run ",
1442            "make ",
1443            "just ",
1444            "task ",
1445            "scripts/",
1446            ".\\scripts\\",
1447            "./scripts/",
1448            ".ps1",
1449            ".sh",
1450            ".py",
1451            ".cmd",
1452            ".bat",
1453        ],
1454    );
1455
1456    if asks_build
1457        && (asks_project_scope
1458            || !contains_any(&lower, &["release.ps1", "package-windows.ps1", "clean.ps1"]))
1459    {
1460        Some("build")
1461    } else if asks_test && asks_project_scope {
1462        Some("test")
1463    } else if asks_lint && asks_project_scope {
1464        Some("lint")
1465    } else if asks_fix && asks_project_scope {
1466        Some("fix")
1467    } else if asks_script && !preferred_maintainer_workflow(user_input).is_some() {
1468        Some("script")
1469    } else if (asks_test || asks_lint || asks_fix)
1470        && !preferred_maintainer_workflow(user_input).is_some()
1471    {
1472        Some(if asks_test {
1473            "test"
1474        } else if asks_lint {
1475            "lint"
1476        } else {
1477            "fix"
1478        })
1479    } else {
1480        None
1481    }
1482}
1483
1484pub(crate) fn looks_like_mutation_request(user_input: &str) -> bool {
1485    let lower = user_input.to_lowercase();
1486    [
1487        "fix ",
1488        "change ",
1489        "edit ",
1490        "modify ",
1491        "update ",
1492        "rename ",
1493        "refactor ",
1494        "patch ",
1495        "rewrite ",
1496        "implement ",
1497        "create a file",
1498        "create file",
1499        "add a file",
1500        "delete ",
1501        "remove ",
1502        "make the change",
1503    ]
1504    .iter()
1505    .any(|needle| lower.contains(needle))
1506}
1507
1508pub(crate) fn classify_query_intent(workflow_mode: WorkflowMode, user_input: &str) -> QueryIntent {
1509    let lower = user_input.to_lowercase();
1510    let trimmed = user_input.trim().to_ascii_lowercase();
1511
1512    let mentions_runtime_trace = contains_any(
1513        &lower,
1514        &[
1515            "trace",
1516            "how does",
1517            "what are the main runtime subsystems",
1518            "how does a user message move",
1519            "separate normal assistant output",
1520            "session reset behavior",
1521            "file references",
1522            "event types",
1523            "channels",
1524        ],
1525    );
1526    let anti_guess = contains_any(&lower, &["do not guess", "if you are unsure"]);
1527    let capability_mode = mentions_capability_question(&lower);
1528    let capability_needs_repo =
1529        capability_mode && capability_question_requires_repo_inspection(&lower);
1530    let host_inspection_mode = preferred_host_inspection_topic(&lower).is_some();
1531    let maintainer_workflow_mode = preferred_maintainer_workflow(&lower).is_some();
1532    let workspace_workflow_mode =
1533        preferred_workspace_workflow(&lower).is_some() && !maintainer_workflow_mode;
1534    let toolchain_mode = contains_any(
1535        &lower,
1536        &[
1537            "tooling discipline",
1538            "best read-only toolchain",
1539            "identify the best tools you actually have",
1540            "concrete read-only investigation plan",
1541            "do not execute the plan",
1542            "available repo-inspection tools",
1543            "tool choice discipline",
1544            "what tools would you choose first",
1545        ],
1546    ) || (lower.contains("which tools") && lower.contains("why"))
1547        || (lower.contains("when would you choose") && lower.contains("tool"));
1548    let architecture_overview_mode = {
1549        let architecture_signals = contains_any(
1550            &lower,
1551            &[
1552                "architecture overview",
1553                "architecture walkthrough",
1554                "full architecture",
1555                "runtime walkthrough",
1556                "control flow",
1557                "tool routing",
1558                "workflow modes",
1559                "repo map behavior",
1560                "mcp policy",
1561                "prompt budgeting",
1562                "compaction",
1563                "file ownership",
1564                "owner file",
1565                "project structure",
1566                "repository structure",
1567            ],
1568        );
1569        let broad = contains_any(
1570            &lower,
1571            &[
1572                "full detailed",
1573                "all in one answer",
1574                "concrete file ownership",
1575                "walk me through",
1576                "major runtime pieces",
1577                "which files own",
1578                "how",
1579                "explain",
1580                "overview",
1581            ],
1582        );
1583        (architecture_signals && broad)
1584            || (lower.contains("runtime")
1585                && lower.contains("workflow")
1586                && (lower.contains("architecture") || lower.contains("tool routing")))
1587            || mentions_broad_system_walkthrough(&lower)
1588    };
1589
1590    let direct_answer = if trimmed == "/about" || mentions_creator_question(&lower) {
1591        Some(DirectAnswerKind::About)
1592    } else if matches!(
1593        trimmed.as_str(),
1594        "who are you" | "who are you?" | "what are you" | "what are you?"
1595    ) || (lower.contains("what is hematite") && !lower.contains("lm studio"))
1596    {
1597        Some(DirectAnswerKind::Identity)
1598    } else if (mentions_stable_product_surface(&lower) || mentions_product_truth_routing(&lower))
1599        && contains_any(
1600            &lower,
1601            &[
1602                "how hematite answers",
1603                "how does hematite answer",
1604                "how hematite handles",
1605                "how does hematite handle",
1606                "how hematite decides",
1607                "how does hematite decide",
1608                "decides whether",
1609                "decide whether",
1610            ],
1611        )
1612    {
1613        Some(DirectAnswerKind::ProductSurface)
1614    } else if mentions_reset_commands(&lower)
1615        && contains_any(
1616            &lower,
1617            &[
1618                "exact difference",
1619                "difference between",
1620                "explain the exact difference",
1621                "what is the difference",
1622            ],
1623        )
1624    {
1625        Some(DirectAnswerKind::SessionResetSemantics)
1626    } else if (lower.contains("reasoning output") || lower.contains("reasoning"))
1627        && contains_any(
1628            &lower,
1629            &["visible chat output", "visible chat", "chat output"],
1630        )
1631    {
1632        Some(DirectAnswerKind::ReasoningSplit)
1633    } else if lower.contains("/ask")
1634        && lower.contains("/code")
1635        && lower.contains("/architect")
1636        && lower.contains("/read-only")
1637        && lower.contains("/auto")
1638        && contains_any(&lower, &["difference", "differences", "what are"])
1639    {
1640        Some(DirectAnswerKind::WorkflowModes)
1641    } else if lower.contains(".hematite/settings.json")
1642        && lower.contains("gemma_native_auto")
1643        && lower.contains("gemma_native_formatting")
1644    {
1645        Some(DirectAnswerKind::GemmaNativeSettings)
1646    } else if contains_any(
1647        &lower,
1648        &[
1649            "skip verification",
1650            "skip build verification",
1651            "commit it immediately",
1652            "commit immediately",
1653        ],
1654    ) && contains_any(
1655        &lower,
1656        &[
1657            "make a code change",
1658            "make the change",
1659            "change the code",
1660            "edit the code",
1661            "edit a file",
1662            "implement",
1663        ],
1664    ) {
1665        Some(DirectAnswerKind::UnsafeWorkflowPressure)
1666    } else if contains_any(&lower, &["/gemma-native", "gemma native"])
1667        && contains_any(&lower, &["what does", "what is", "how does", "what do"])
1668    {
1669        Some(DirectAnswerKind::GemmaNative)
1670    } else if lower.contains("verify_build")
1671        && lower.contains(".hematite/settings.json")
1672        && contains_any(
1673            &lower,
1674            &["build", "test", "lint", "fix", "verification commands"],
1675        )
1676    {
1677        Some(DirectAnswerKind::VerifyProfiles)
1678    } else if (lower.contains("carry forward by default")
1679        || lower.contains("session memory should you carry forward")
1680        || (lower.contains("carry forward")
1681            && contains_any(
1682                &lower,
1683                &[
1684                    "besides the active task",
1685                    "blocker",
1686                    "compacts",
1687                    "recovers from a blocker",
1688                    "session state",
1689                ],
1690            )))
1691        && contains_any(
1692            &lower,
1693            &[
1694                "restarted hematite",
1695                "restarted",
1696                "avoid carrying forward",
1697                "session state",
1698                "active task",
1699                "blocker",
1700                "compacts",
1701                "recovers from a blocker",
1702            ],
1703        )
1704    {
1705        Some(DirectAnswerKind::SessionMemory)
1706    } else if contains_any(
1707        &lower,
1708        &[
1709            "recovery recipe",
1710            "recovery recipes",
1711            "recovery step",
1712            "recovery steps",
1713        ],
1714    ) && contains_any(
1715        &lower,
1716        &[
1717            "blocker",
1718            "runtime failure",
1719            "degrades",
1720            "context window",
1721            "context-window",
1722            "operator",
1723        ],
1724    ) {
1725        Some(DirectAnswerKind::RecoveryRecipes)
1726    } else if !architecture_overview_mode
1727        && contains_any(
1728            &lower,
1729            &[
1730                "mcp server health",
1731                "mcp runtime state",
1732                "mcp lifecycle",
1733                "mcp state",
1734                "mcp healthy",
1735                "mcp degraded",
1736                "mcp failed",
1737            ],
1738        )
1739    {
1740        Some(DirectAnswerKind::McpLifecycle)
1741    } else if contains_any(
1742        &lower,
1743        &[
1744            "allowed, denied, or require approval",
1745            "allowed denied or require approval",
1746            "allow, ask, or deny",
1747            "tool call should be allowed",
1748            "authorization logic",
1749            "workspace trust",
1750            "trust-allowlisted",
1751        ],
1752    ) {
1753        Some(DirectAnswerKind::AuthorizationPolicy)
1754    } else if contains_any(
1755        &lower,
1756        &[
1757            "tool classes",
1758            "tool class",
1759            "flat tool list",
1760            "runtime tool classes",
1761            "different runtime tool classes",
1762        ],
1763    ) || (lower.contains("repo reads")
1764        && lower.contains("repo writes")
1765        && contains_any(
1766            &lower,
1767            &[
1768                "verification tools",
1769                "git tools",
1770                "external mcp tools",
1771                "different runtime",
1772            ],
1773        ))
1774    {
1775        Some(DirectAnswerKind::ToolClasses)
1776    } else if contains_any(
1777        &lower,
1778        &[
1779            "built-in tool catalog",
1780            "builtin tool catalog",
1781            "builtin-tool dispatch",
1782            "built-in tool dispatch",
1783            "tool registry ownership",
1784            "which file now owns",
1785        ],
1786    ) && contains_any(
1787        &lower,
1788        &[
1789            "tool catalog",
1790            "dispatch path",
1791            "dispatch",
1792            "tool registry",
1793            "owns",
1794        ],
1795    ) {
1796        Some(DirectAnswerKind::ToolRegistryOwnership)
1797    } else if (lower.contains("other coding languages")
1798        || lower.contains("what languages")
1799        || lower.contains("know other languages"))
1800        && contains_any(
1801            &lower,
1802            &[
1803                "capable of making projects",
1804                "can you make projects",
1805                "can you build projects",
1806            ],
1807        )
1808    {
1809        Some(DirectAnswerKind::LanguageCapability)
1810    } else if workflow_mode == WorkflowMode::Architect
1811        && (lower.contains("session reset")
1812            || (lower.contains("/clear") && lower.contains("/new") && lower.contains("/forget")))
1813        && contains_any(&lower, &["redesign", "clearer", "easier", "understand"])
1814    {
1815        Some(DirectAnswerKind::ArchitectSessionResetPlan)
1816    } else if toolchain_mode
1817        && lower.contains("read-only")
1818        && contains_any(
1819            &lower,
1820            &[
1821                "tooling discipline",
1822                "investigation plan",
1823                "best read-only toolchain",
1824                "tool choice discipline",
1825                "what tools would you choose first",
1826            ],
1827        )
1828    {
1829        Some(DirectAnswerKind::Toolchain)
1830    } else {
1831        None
1832    };
1833
1834    let primary_class = if direct_answer.is_some()
1835        || mentions_stable_product_surface(&lower)
1836        || mentions_product_truth_routing(&lower)
1837    {
1838        QueryIntentClass::ProductTruth
1839    } else if architecture_overview_mode {
1840        QueryIntentClass::RepoArchitecture
1841    } else if toolchain_mode {
1842        QueryIntentClass::Toolchain
1843    } else if capability_mode {
1844        QueryIntentClass::Capability
1845    } else if mentions_runtime_trace || anti_guess || lower.contains("read-only") {
1846        QueryIntentClass::RuntimeDiagnosis
1847    } else if looks_like_mutation_request(user_input) {
1848        QueryIntentClass::Implementation
1849    } else {
1850        QueryIntentClass::Unknown
1851    };
1852
1853    QueryIntent {
1854        primary_class,
1855        direct_answer,
1856        grounded_trace_mode: mentions_runtime_trace || lower.contains("read-only") || anti_guess,
1857        capability_mode,
1858        capability_needs_repo,
1859        toolchain_mode,
1860        host_inspection_mode,
1861        maintainer_workflow_mode,
1862        workspace_workflow_mode,
1863        architecture_overview_mode,
1864    }
1865}
1866
1867pub(crate) fn is_capability_probe_tool(name: &str) -> bool {
1868    matches!(
1869        name,
1870        "read_file"
1871            | "inspect_lines"
1872            | "list_files"
1873            | "grep_files"
1874            | "lsp_definitions"
1875            | "lsp_references"
1876            | "lsp_hover"
1877            | "lsp_search_symbol"
1878            | "lsp_get_diagnostics"
1879            | "trace_runtime_flow"
1880            | "auto_pin_context"
1881            | "list_pinned"
1882    )
1883}
1884
1885/// Returns true when the user's query involves computation that must be exact —
1886/// checksums, financial math, statistics, date arithmetic, algorithmic verification, etc.
1887/// Used by the harness to inject a pre-turn nudge toward run_code instead of model memory.
1888pub fn needs_computation_sandbox(user_input: &str) -> bool {
1889    let lower = user_input.to_lowercase();
1890    let hash_or_checksum = lower.contains("sha")
1891        || lower.contains("md5")
1892        || lower.contains("checksum")
1893        || lower.contains("crc")
1894        || lower.contains("hash")
1895        || lower.contains("fingerprint");
1896    let financial =
1897        (lower.contains("calculat") || lower.contains("compute") || lower.contains("what is"))
1898            && (lower.contains("percent")
1899                || lower.contains("%")
1900                || lower.contains("interest")
1901                || lower.contains("compound")
1902                || lower.contains("roi")
1903                || lower.contains("tax")
1904                || lower.contains("discount")
1905                || lower.contains("profit")
1906                || lower.contains("loss"));
1907    let statistics = lower.contains("standard deviation")
1908        || lower.contains("std dev")
1909        || lower.contains("mean of")
1910        || lower.contains("median of")
1911        || lower.contains("average of")
1912        || lower.contains("variance")
1913        || lower.contains("regression")
1914        || lower.contains("correlation");
1915    let date_math = (lower.contains("how many days")
1916        || lower.contains("days between")
1917        || lower.contains("days until")
1918        || lower.contains("days since")
1919        || lower.contains("unix timestamp")
1920        || lower.contains("epoch")
1921        || lower.contains("time zone")
1922        || lower.contains("timezone"))
1923        && (lower.contains("date")
1924            || lower.contains("day")
1925            || lower.contains("timestamp")
1926            || lower.contains("time"));
1927    let algorithmic = lower.contains("is prime")
1928        || lower.contains("prime number")
1929        || lower.contains("factori")
1930        || lower.contains("fibonacci")
1931        || lower.contains("factorial")
1932        || lower.contains("sort this")
1933        || lower.contains("verify this algorithm")
1934        || lower.contains("run this code")
1935        || lower.contains("execute this");
1936    let unit_conversion = (lower.contains("convert") || lower.contains("how many"))
1937        && (lower.contains(" bytes")
1938            || lower.contains(" kb")
1939            || lower.contains(" mb")
1940            || lower.contains(" gb")
1941            || lower.contains(" tb")
1942            || lower.contains("gigabyte")
1943            || lower.contains("megabyte")
1944            || lower.contains("celsius")
1945            || lower.contains("fahrenheit")
1946            || lower.contains("kelvin")
1947            || lower.contains("kilometers")
1948            || lower.contains("miles")
1949            || lower.contains("pounds")
1950            || lower.contains("kilograms"));
1951    hash_or_checksum || financial || statistics || date_math || algorithmic || unit_conversion
1952}
1953
1954#[cfg(test)]
1955mod tests {
1956    use super::*;
1957
1958    #[test]
1959    fn classify_query_intent_routes_creator_questions_to_about() {
1960        let intent = classify_query_intent(WorkflowMode::Auto, "Who created Hematite?");
1961        assert_eq!(intent.direct_answer, Some(DirectAnswerKind::About));
1962
1963        let intent = classify_query_intent(WorkflowMode::Auto, "/about");
1964        assert_eq!(intent.direct_answer, Some(DirectAnswerKind::About));
1965    }
1966
1967    #[test]
1968    fn classify_query_intent_marks_maintainer_workflow_requests() {
1969        let intent = classify_query_intent(
1970            WorkflowMode::Auto,
1971            "Run my cleanup scripts and prune old artifacts.",
1972        );
1973        assert!(intent.maintainer_workflow_mode);
1974        assert_eq!(
1975            preferred_maintainer_workflow("Rebuild the local portable and update PATH."),
1976            Some("package_windows")
1977        );
1978        assert_eq!(
1979            preferred_maintainer_workflow("Run the release flow and publish crates."),
1980            Some("release")
1981        );
1982    }
1983
1984    #[test]
1985    fn classify_query_intent_marks_workspace_workflow_requests() {
1986        let intent = classify_query_intent(WorkflowMode::Auto, "Run the tests in this project.");
1987        assert!(intent.workspace_workflow_mode);
1988        assert_eq!(
1989            preferred_workspace_workflow("Run the tests in this project."),
1990            Some("test")
1991        );
1992        assert_eq!(
1993            preferred_workspace_workflow("Run npm run dev in this repo."),
1994            Some("script")
1995        );
1996    }
1997}