Skip to main content

hematite/agent/
routing.rs

1use super::conversation::WorkflowMode;
2
3#[derive(Clone, Copy, Debug, Eq, PartialEq)]
4pub(crate) enum QueryIntentClass {
5    ProductTruth,
6    RuntimeDiagnosis,
7    RepoArchitecture,
8    Toolchain,
9    Capability,
10    Implementation,
11    Unknown,
12}
13
14#[derive(Clone, Copy, Debug, Eq, PartialEq)]
15pub(crate) enum DirectAnswerKind {
16    About,
17    LanguageCapability,
18    UnsafeWorkflowPressure,
19    SessionMemory,
20    RecoveryRecipes,
21    McpLifecycle,
22    AuthorizationPolicy,
23    ToolClasses,
24    ToolRegistryOwnership,
25    SessionResetSemantics,
26    ProductSurface,
27    ReasoningSplit,
28    Identity,
29    WorkflowModes,
30    GemmaNative,
31    GemmaNativeSettings,
32    VerifyProfiles,
33    Toolchain,
34    ArchitectSessionResetPlan,
35}
36
37#[derive(Clone, Copy, Debug)]
38pub(crate) struct QueryIntent {
39    pub(crate) primary_class: QueryIntentClass,
40    pub(crate) direct_answer: Option<DirectAnswerKind>,
41    pub(crate) grounded_trace_mode: bool,
42    pub(crate) capability_mode: bool,
43    pub(crate) capability_needs_repo: bool,
44    pub(crate) toolchain_mode: bool,
45    pub(crate) host_inspection_mode: bool,
46    pub(crate) maintainer_workflow_mode: bool,
47    pub(crate) workspace_workflow_mode: bool,
48    pub(crate) architecture_overview_mode: bool,
49}
50
51fn contains_any(haystack: &str, needles: &[&str]) -> bool {
52    needles.iter().any(|needle| haystack.contains(needle))
53}
54
55fn contains_all(haystack: &str, needles: &[&str]) -> bool {
56    needles.iter().all(|needle| haystack.contains(needle))
57}
58
59fn mentions_reset_commands(lower: &str) -> bool {
60    contains_all(lower, &["/clear", "/new", "/forget"])
61}
62
63fn mentions_stable_product_surface(lower: &str) -> bool {
64    contains_any(
65        lower,
66        &[
67            "stable product-surface question",
68            "stable product surface question",
69            "stable product-surface questions",
70            "stable product surface questions",
71        ],
72    )
73}
74
75fn mentions_product_truth_routing(lower: &str) -> bool {
76    let asks_decision_policy = contains_any(
77        lower,
78        &[
79            "how hematite decides",
80            "how does hematite decide",
81            "decides whether",
82            "decide whether",
83        ],
84    );
85    let asks_direct_vs_inspect_split = contains_any(
86        lower,
87        &[
88            "answered as stable product truth",
89            "stable product truth",
90            "stable product behavior",
91            "answer directly",
92            "direct answer",
93            "inspect the repository",
94            "inspect repository",
95            "repository implementation",
96            "repo implementation",
97        ],
98    );
99    asks_decision_policy && asks_direct_vs_inspect_split
100}
101
102fn mentions_broad_system_walkthrough(lower: &str) -> bool {
103    let asks_walkthrough = contains_any(
104        lower,
105        &[
106            "walk me through",
107            "walk through",
108            "how hematite is wired",
109            "understand how hematite is wired",
110            "major runtime pieces",
111            "normal message moves",
112            "moves from the tui to the model and back",
113        ],
114    );
115    let asks_multiple_runtime_areas = contains_any(
116        lower,
117        &[
118            "session recovery",
119            "tool policy",
120            "mcp state",
121            "mcp policy",
122            "files own the major runtime pieces",
123            "which files own",
124            "where session recovery",
125            "where tool policy",
126            "where mcp state",
127        ],
128    );
129    asks_walkthrough && asks_multiple_runtime_areas
130}
131
132fn mentions_capability_question(lower: &str) -> bool {
133    contains_any(
134        lower,
135        &[
136            "what can you do",
137            "what are you capable",
138            "can you make projects",
139            "can you build projects",
140            "do you know other coding languages",
141            "other coding languages",
142            "what languages",
143            "can you use the internet",
144            "internet research capabilities",
145            "what tools do you have",
146        ],
147    )
148}
149
150fn mentions_creator_question(lower: &str) -> bool {
151    contains_any(
152        lower,
153        &[
154            "who created you",
155            "who built you",
156            "who made you",
157            "who developed you",
158            "who engineered you",
159            "who engineered your architecture",
160            "who created hematite",
161            "who built hematite",
162            "who developed hematite",
163            "who engineered hematite",
164            "who maintains hematite",
165            "who authored hematite",
166            "who is the author",
167            "who wrote this",
168            "who made this app",
169        ],
170    )
171}
172
173fn capability_question_requires_repo_inspection(lower: &str) -> bool {
174    contains_any(
175        lower,
176        &[
177            "this repo",
178            "this repository",
179            "codebase",
180            "which files",
181            "implementation",
182            "in this project",
183        ],
184    )
185}
186
187fn mentions_host_inspection_question(lower: &str) -> bool {
188    let host_scope = contains_any(
189        lower,
190        &[
191            "path",
192            "package manager",
193            "package managers",
194            "env doctor",
195            "environment doctor",
196            "pip",
197            "winget",
198            "choco",
199            "scoop",
200            "network",
201            "adapter",
202            "dns",
203            "gateway",
204            "ip address",
205            "ipconfig",
206            "wifi",
207            "ethernet",
208            "service",
209            "services",
210            "daemon",
211            "startup type",
212            "process",
213            "processes",
214            "task manager",
215            "ram",
216            "cpu",
217            "memory",
218            "developer tools",
219            "toolchains",
220            "installed",
221            "desktop",
222            "downloads",
223            "folder",
224            "directory",
225            "local development",
226            "machine",
227            "computer",
228            "firewall",
229            "vpn",
230            "proxy",
231            "internet",
232            "online",
233            "connectivity",
234            "ssid",
235            "wireless",
236            "tcp connection",
237            "active connection",
238            "traceroute",
239            "tracert",
240            "dns cache",
241            "arp table",
242            "arp cache",
243            "route table",
244            "routing table",
245            "default gateway",
246            "next hop",
247            "power plan",
248            "power settings",
249            "uptime",
250            "reboot",
251            "health",
252            "report",
253            "bitlocker",
254            "rdp",
255            "remote desktop",
256            "vss",
257            "shadow copy",
258            "shadow copies",
259            "pagefile",
260            "virtual memory",
261            "swap",
262            "windows feature",
263            "optional feature",
264            "printer",
265            "print queue",
266            "winrm",
267            "psremoting",
268            "network stats",
269            "adapter stats",
270            "udp listening",
271            "udp port",
272            "session",
273            "logon",
274            "login",
275            "slat",
276            "error",
277            "warning",
278            "event",
279            "log",
280            "throughput",
281            "permission",
282            "access control",
283            "login",
284            "logon",
285            "registry",
286            "share",
287            "mbps",
288            "ad",
289            "sid",
290            "vm",
291            "hyper-v",
292            "hyperv",
293            "dhcp",
294            "lease",
295        ],
296    );
297    let host_action = contains_any(
298        lower,
299        &[
300            "inspect",
301            "count",
302            "tell me",
303            "summarize",
304            "how big",
305            "biggest",
306            "versions",
307            "duplicate",
308            "analyze",
309            "missing",
310            "ready",
311            "resolve",
312            "troubleshoot",
313            "show me",
314            "show",
315            "find",
316            "list",
317            "audit",
318            "test",
319        ],
320    );
321
322    host_scope && host_action
323}
324
325pub fn preferred_host_inspection_topic(user_input: &str) -> Option<&'static str> {
326    let lower = user_input.to_lowercase();
327    let asks_fix_plan = (lower.contains("fix")
328        || lower.contains("repair")
329        || lower.contains("resolve")
330        || lower.contains("troubleshoot"))
331        && (lower.contains("cargo")
332            || lower.contains("path")
333            || lower.contains("package manager")
334            || lower.contains("toolchain")
335            || lower.contains("port ")
336            || lower.contains("already in use")
337            || lower.contains("lm studio")
338            || lower.contains("localhost:1234")
339            || lower.contains("embedding model")
340            || lower.contains("no coding model loaded"));
341    let asks_path = lower.contains("path entries")
342        || lower.contains("raw path")
343        || (lower.contains("path") && (lower.contains("show") || lower.contains("what is")));
344    let asks_gpo = lower.contains("gpo")
345        || lower.contains("group policy")
346        || lower.contains("gpresult")
347        || lower.contains("applied policy");
348    let asks_certificates = lower.contains("cert")
349        || lower.contains("ssl")
350        || lower.contains("client cert")
351        || lower.contains("expiring cert");
352    let asks_integrity = lower.contains("integrity")
353        || lower.contains("sfc")
354        || lower.contains("dism")
355        || lower.contains("corruption")
356        || lower.contains("os health");
357    let asks_user_accounts = lower.contains("user account")
358        || lower.contains("local user")
359        || lower.contains("local group")
360        || lower.contains("get-localuser")
361        || lower.contains("get-localgroup")
362        || lower.contains("get-localgroupmember")
363        || lower.contains("who is logged in")
364        || lower.contains("who is logged on")
365        || lower.contains("who am i")
366        || lower.contains("logged in as")
367        || lower.contains("logged in user")
368        || lower.contains("logged on user")
369        || lower.contains("admin group")
370        || lower.contains("administrators group")
371        || lower.contains("local admin")
372        || lower.contains("who has admin")
373        || lower.contains("running as admin")
374        || lower.contains("is this elevated")
375        || lower.contains("active sessions")
376        || lower.contains("logon session")
377        || lower.contains("net user")
378        || lower.contains("net localgroup");
379    let asks_ad_user = lower.contains("ad user")
380        || lower.contains("domain user")
381        || (lower.contains("user") && (lower.contains("sid") || lower.contains("membership")));
382    let asks_dns_lookup = (lower.contains("dns") || lower.contains("record"))
383        && (lower.contains("lookup") || lower.contains("srv") || lower.contains("mx") || lower.contains("txt"));
384    let asks_hyperv = lower.contains("hyper-v") || lower.contains("hyperv") || lower.contains("list vm");
385    let asks_ip_config = lower.contains("ipconfig") && (lower.contains("all") || lower.contains("detailed"));
386    let asks_domain = lower.contains("domain")
387        || lower.contains("active directory")
388        || lower.contains("ad join")
389        || lower.contains("workgroup")
390        || lower.contains("netbios");
391    let asks_device_health = lower.contains("device health")
392        || lower.contains("hardware error")
393        || lower.contains("malfunctioning")
394        || lower.contains("yellow bang")
395        || lower.contains("hardware failing");
396    let asks_drivers =
397        lower.contains("driver") || lower.contains("kmod") || lower.contains("kernel module");
398    let asks_peripherals = lower.contains("peripheral")
399        || lower.contains("usb")
400        || lower.contains("keyboard")
401        || lower.contains("mouse")
402        || lower.contains("pointer")
403        || lower.contains("monitor")
404        || lower.contains("input device")
405        || lower.contains("connected hardware");
406    let asks_sessions = lower.contains("session")
407        || lower.contains("login")
408        || lower.contains("who is on")
409        || lower.contains("active user");
410    let asks_virtualization = lower.contains("virtualization")
411        || lower.contains("hypervisor")
412        || lower.contains("vt-x")
413        || lower.contains("slat")
414        || lower.contains("v-p")
415        || lower.contains("nested virt")
416        || lower.contains("cpu model")
417        || lower.contains("ram size")
418        || lower.contains("hardware spec")
419        || lower.contains("hardware dna")
420        || lower.contains("hardware info")
421        || lower.contains("bios version")
422        || lower.contains("motherboard")
423        || lower.contains("gpu name")
424        || lower.contains("gpu driver")
425        || lower.contains("how much ram")
426        || lower.contains("how much vram")
427        || lower.contains("what processor")
428        || lower.contains("what cpu")
429        || lower.contains("what gpu")
430        || (lower.contains("what hardware") && lower.contains("have"))
431        || (lower.contains("hardware") && lower.contains("inventory"));
432    let asks_startup = lower.contains("startup")
433        || lower.contains("boot program")
434        || lower.contains("autorun")
435        || lower.contains("run at boot");
436    let asks_env_doctor = lower.contains("env doctor")
437        || lower.contains("environment doctor")
438        || lower.contains("package manager")
439        || lower.contains("package managers")
440        || lower.contains("shims")
441        || lower.contains("path drift")
442        || (lower.contains("dev machine") && lower.contains("off"))
443        || (lower.contains("environment") && lower.contains("sane"));
444    let asks_network = (((lower.contains("network") && !lower.contains("active directory"))
445        && !lower.contains("stat")
446        && !lower.contains("share")
447        && !lower.contains("throughput"))
448        || lower.contains("adapter")
449        || lower.contains("ip address")
450        || lower.contains("ipconfig")
451        || lower.contains("ipv4")
452        || lower.contains("ipv6")
453        || lower.contains("subnet")
454        || lower.contains("dns server")
455        || lower.contains("nameserver")
456        || lower.contains("wifi")
457        || lower.contains("wireless")
458        || lower.contains("ethernet")
459        || lower.contains("lan"))
460        && !asks_ad_user;
461    let asks_services = lower.contains("service")
462        || lower.contains("services")
463        || lower.contains("daemon")
464        || lower.contains("startup type")
465        || lower.contains("background service")
466        || lower.contains("windows service")
467        || lower.contains("systemctl")
468        || lower.contains("get-service");
469    let asks_processes = lower.contains("process")
470        || lower.contains("processes")
471        || lower.contains("task manager")
472        || lower.contains("what is running")
473        || lower.contains("what's running")
474        || lower.contains("using my ram")
475        || lower.contains("using ram")
476        || lower.contains("using my cpu")
477        || lower.contains("top memory")
478        || lower.contains("top ram")
479        || lower.contains("high memory")
480        || lower.contains("resource-heavy processes")
481        || lower.contains("heavy hitters")
482        || (lower.contains("using the most") && (lower.contains("cpu") || lower.contains("ram") || lower.contains("memory")))
483        || (lower.contains("most cpu") || lower.contains("most ram") || lower.contains("most memory"))
484        || (lower.contains("hitting") && (lower.contains("cpu") || lower.contains("ram") || lower.contains("disk")));
485    let asks_toolchains = lower.contains("developer tools")
486        || lower.contains("toolchains")
487        || (lower.contains("installed") && lower.contains("version"))
488        || (lower.contains("detect") && lower.contains("version"));
489    let asks_permissions = lower.contains("permission")
490        || lower.contains("access control")
491        || lower.contains("get-acl")
492        || lower.contains("acl ")
493        || lower.contains("icacls")
494        || lower.contains("takeown")
495        || lower.contains("ntfs permission")
496        || (lower.contains("who has") && lower.contains("access"));
497    let asks_login_history = lower.contains("login history")
498        || lower.contains("logon history")
499        || lower.contains("who logged in")
500        || lower.contains("recent logon")
501        || lower.contains("failed logon")
502        || lower.contains("event id 4624")
503        || lower.contains("eventid 4624");
504    let asks_registry_audit = lower.contains("registry audit")
505        || lower.contains("persistence")
506        || lower.contains("debugger hijack")
507        || lower.contains("ifeo")
508        || lower.contains("winlogon shell")
509        || lower.contains("bootexecute")
510        || lower.contains("reg query")
511        || lower.contains("regedit")
512        || lower.contains("sticky keys")
513        || lower.contains("sethc.exe");
514    let asks_share_access = lower.contains("share access")
515        || lower.contains("unc path")
516        || lower.contains("smbshare")
517        || lower.contains("net share")
518        || lower.contains("net use")
519        || lower.contains("\\\\")
520        || lower.contains("share is reachable")
521        || lower.contains("reachable share")
522        || (lower.contains("network share") && (lower.contains("reach") || lower.contains("access") || lower.contains("test")));
523    let asks_thermal = lower.contains("thermal")
524        || lower.contains("throttling")
525        || lower.contains("overheating")
526        || lower.contains("cpu temp");
527    let asks_activation = lower.contains("activation")
528        || lower.contains("slmgr")
529        || lower.contains("license status")
530        || lower.contains("is windows genuine");
531    let asks_patch_history = lower.contains("patch history")
532        || lower.contains("hotfix")
533        || lower.contains("kb history")
534        || lower.contains("installed updates");
535    let asks_ports = lower.contains("listening on port")
536        || lower.contains("listening port")
537        || lower.contains("open port")
538        || lower.contains("port 3000")
539        || lower.contains("port ")
540        || lower.contains("listening on ")
541        || lower.contains("exposed")
542        || lower.contains("what is listening")
543        || (lower.contains("listening") && lower.contains("port"));
544    let asks_repo_doctor = lower.contains("repo doctor")
545        || lower.contains("repository doctor")
546        || lower.contains("workspace health")
547        || lower.contains("repo health")
548        || lower.contains("workspace sanity")
549        || (lower.contains("git state")
550            && (lower.contains("release artifacts")
551                || lower.contains("build markers")
552                || lower.contains("hematite memory")));
553    let asks_directory = lower.contains("directory")
554        || lower.contains("folder")
555        || lower.contains("how big")
556        || lower.contains("biggest");
557    let asks_broad_readiness = lower.contains("local development")
558        || lower.contains("ready for local development")
559        || (lower.contains("machine") && lower.contains("ready"))
560        || (lower.contains("computer") && lower.contains("ready"));
561    let asks_os_config = lower.contains("firewall")
562        || lower.contains("power plan")
563        || lower.contains("power settings")
564        || lower.contains("powercfg")
565        || lower.contains("uptime")
566        || lower.contains("reboot")
567        || lower.contains("boot time")
568        || lower.contains("last boot");
569    let asks_health_report = lower.contains("health report")
570        || lower.contains("system health")
571        || (lower.contains("how") && lower.contains("machine") && lower.contains("doing"))
572        || (lower.contains("status") && lower.contains("report") && !lower.contains("git"));
573    let asks_updates = lower.contains("up to date")
574        || lower.contains("windows update")
575        || lower.contains("pending update")
576        || lower.contains("update available")
577        || lower.contains("check for update")
578        || lower.contains("latest update")
579        || (lower.contains("update")
580            && (lower.contains("my pc")
581                || lower.contains("my computer")
582                || lower.contains("my machine")));
583    let asks_security = lower.contains("antivirus")
584        || lower.contains("defender")
585        || lower.contains("virus protection")
586        || lower.contains("malware")
587        || lower.contains("windows security")
588        || lower.contains("uac")
589        || lower.contains("windows activated")
590        || lower.contains("activation status")
591        || (lower.contains("protected") && (lower.contains("pc") || lower.contains("computer")))
592        || (lower.contains("security")
593            && !lower.contains("git")
594            && !lower.contains("ssh")
595            && !lower.contains("token"));
596    let asks_pending_reboot = lower.contains("need to restart")
597        || lower.contains("need to reboot")
598        || lower.contains("requires restart")
599        || lower.contains("requires a reboot")
600        || lower.contains("reboot required")
601        || lower.contains("restart required")
602        || lower.contains("pending restart")
603        || lower.contains("pending reboot")
604        || (lower.contains("restart")
605            && (lower.contains("waiting")
606                || lower.contains("queued")
607                || lower.contains("required")))
608        || (lower.contains("reboot") && lower.contains("required"))
609        || (lower.contains("reboot") && lower.contains("pending"))
610        || (lower.contains("restart") && lower.contains("pending"));
611    let asks_disk_health = lower.contains("disk health")
612        || lower.contains("drive health")
613        || lower.contains("hard drive dying")
614        || lower.contains("smart status")
615        || lower.contains("drive failing")
616        || lower.contains("drive fail")
617        || (lower.contains("dying") && (lower.contains("drive") || lower.contains("disk")))
618        || (lower.contains("healthy")
619            && (lower.contains("drive")
620                || lower.contains("disk")
621                || lower.contains("ssd")
622                || lower.contains("hdd")));
623    let asks_battery = lower.contains("battery")
624        || lower.contains("battery life")
625        || lower.contains("battery health")
626        || lower.contains("battery wear")
627        || lower.contains("charge level")
628        || lower.contains("how long until")
629        || (lower.contains("dying") && lower.contains("batter"));
630    let asks_recent_crashes = lower.contains("crash")
631        || lower.contains("bsod")
632        || lower.contains("blue screen")
633        || lower.contains("why did my pc restart")
634        || lower.contains("unexpected restart")
635        || lower.contains("sudden restart")
636        || lower.contains("kernel panic")
637        || lower.contains("app crash")
638        || (lower.contains("restart") && lower.contains("itself"))
639        || (lower.contains("restart") && lower.contains("by itself"));
640    let asks_log_check = lower.contains("event log")
641        || lower.contains("windows log")
642        || lower.contains("system log")
643        || lower.contains("error log")
644        || lower.contains("recent errors")
645        || lower.contains("recent warnings")
646        || lower.contains("recent events")
647        || lower.contains("event viewer")
648        || lower.contains("journald")
649        || lower.contains("journal log")
650        || lower.contains("show me warnings")
651        || (lower.contains("log") && lower.contains("error"))
652        || (lower.contains("log") && lower.contains("warning"))
653        || (lower.contains("show me") && lower.contains("error"))
654        || (lower.contains("show me") && lower.contains("warning"))
655        || (lower.contains("what errors") && lower.contains("log"));
656    let asks_scheduled_tasks = lower.contains("scheduled task")
657        || lower.contains("scheduled tasks")
658        || lower.contains("task scheduler")
659        || lower.contains("what runs on a timer")
660        || lower.contains("what runs at")
661        || lower.contains("cron job")
662        || lower.contains("background task");
663    let asks_dev_conflicts = lower.contains("dev conflict")
664        || lower.contains("environment conflict")
665        || lower.contains("toolchain conflict")
666        || lower.contains("version conflict")
667        || lower.contains("path conflict")
668        || lower.contains("duplicate path")
669        || (lower.contains("python") && lower.contains("wrong version"))
670        || (lower.contains("node") && lower.contains("wrong version"))
671        || lower.contains("conda shadow")
672        || lower.contains("dev environment clean");
673    let asks_disk_benchmark = lower.contains("benchmark")
674        || lower.contains("stress test")
675        || lower.contains("load test")
676        || lower.contains("intensity report")
677        || lower.contains("io intensity")
678        || lower.contains("disk intensity")
679        || lower.contains("thrash")
680        || lower.contains("latency report");
681    let asks_storage = lower.contains("storage")
682        || lower.contains("disk space")
683        || lower.contains("drive capacity")
684        || lower.contains("free space")
685        || lower.contains("how much space")
686        || lower.contains("space left")
687        || lower.contains("running out of space")
688        || lower.contains("i/o pressure")
689        || lower.contains("disk usage")
690        || lower.contains("disk usage")
691        || lower.contains("how much disk")
692        || lower.contains("how full")
693        || lower.contains("cache size")
694        || (lower.contains("drive") && lower.contains("usage"))
695        || (lower.contains("drives") && lower.contains("usage"))
696        || (lower.contains("where") && lower.contains("space") && lower.contains("go"));
697    let asks_resource_load = lower.contains("resource load")
698        || lower.contains("system load")
699        || lower.contains("performance")
700        || lower.contains("utilization")
701        || lower.contains("usage report")
702        || lower.contains("performance report")
703        || lower.contains("what is my load")
704        || lower.contains("current load")
705        || lower.contains("why is it slow")
706        || lower.contains("why is it laggy")
707        || lower.contains("slow")
708        || lower.contains("lag")
709        || lower.contains("sluggish")
710        || lower.contains("hang")
711        || lower.contains("unresponsive")
712        || lower.contains("is it working hard")
713        || lower.contains("high cpu")
714        || lower.contains("high ram")
715        || lower.contains("cpu load")
716        || lower.contains("heavy hitters")
717        || (lower.contains("resource") && lower.contains("usage"));
718
719    let asks_connectivity = lower.contains("internet")
720        || lower.contains("online")
721        || lower.contains("connectivity")
722        || lower.contains("am i connected")
723        || lower.contains("ping google")
724        || lower.contains("reach the internet")
725        || lower.contains("internet access")
726        || lower.contains("no internet")
727        || lower.contains("internet down")
728        || lower.starts_with("ping ")
729        || lower.contains(" ping ")
730        || (lower.contains("check") && lower.contains("connection"))
731        || (lower.contains("dns") && (lower.contains("resolv") || lower.contains("working")));
732    let asks_wifi = lower.contains("wi-fi")
733        || lower.contains("wifi")
734        || lower.contains("wireless")
735        || lower.contains("wlan")
736        || lower.contains("signal strength")
737        || lower.contains("ssid")
738        || lower.contains("access point")
739        || (lower.contains("wireless") && lower.contains("connect"));
740    let asks_connections = lower.contains("tcp connection")
741        || lower.contains("active connection")
742        || lower.contains("established connection")
743        || lower.contains("socket")
744        || lower.contains("netstat")
745        || (lower.contains("connection") && lower.contains("active"))
746        || (lower.contains("connection") && lower.contains("open"));
747    let asks_vpn = lower.contains("vpn")
748        || lower.contains("virtual private network")
749        || (lower.contains("tunnel") && (lower.contains("network") || lower.contains("vpn")));
750    let asks_proxy = lower.contains("proxy")
751        || lower.contains("proxy setting")
752        || lower.contains("winhttp proxy")
753        || lower.contains("system proxy")
754        || (lower.contains("routed") && lower.contains("proxy"));
755    let asks_firewall_rules = (lower.contains("firewall")
756        && (lower.contains("rule")
757            || lower.contains("block")
758            || lower.contains("allow")
759            || lower.contains("inbound")
760            || lower.contains("outbound")))
761        || lower.contains("blocked port")
762        || lower.contains("firewall rule");
763    let asks_traceroute = lower.contains("traceroute")
764        || lower.contains("tracert")
765        || lower.contains("tracepath")
766        || lower.contains("trace route")
767        || lower.contains("trace the route")
768        || lower.contains("trace the path")
769        || lower.contains("network path")
770        || lower.contains("how many hops")
771        || lower.contains("where does traffic go")
772        || (lower.contains("trace") && lower.contains("hop"))
773        || (lower.contains("route") && lower.contains("traffic"))
774        || (lower.contains("trace") && lower.contains("8.8.8.8"))
775        || (lower.contains("path") && lower.contains("8.8.8.8"));
776    let asks_dns_cache = lower.contains("dns cache")
777        || lower.contains("cached dns")
778        || lower.contains("dns lookup cache")
779        || lower.contains("displaydns")
780        || lower.contains("/displaydns")
781        || lower.contains("get-dnsclientcache")
782        || lower.contains("dns entries")
783        || (lower.contains("dns") && lower.contains("cached"));
784    let asks_arp = lower.contains("arp -")
785        || lower.contains("arp table")
786        || lower.contains("arp cache")
787        || lower.contains("mac address")
788        || lower.contains("neighbor table")
789        || lower.contains("ip to mac")
790        || lower.contains("ip neigh")
791        || (lower.contains("arp")
792            && (lower.contains("who") || lower.contains("entry") || lower.contains("entries")));
793    let asks_route_table = lower.contains("route print")
794        || lower.contains("route table")
795        || lower.contains("routing table")
796        || lower.contains("get-netroute")
797        || lower.contains("default gateway")
798        || lower.contains("network routes")
799        || lower.contains("ip route")
800        || lower.contains("next hop")
801        || (lower.contains("route")
802            && (lower.contains("table") || lower.contains("entry") || lower.contains("entries")));
803    let asks_env = (lower.contains("environment variable")
804        || lower.contains("env var")
805        || lower.contains("env vars")
806        || lower.contains("show env")
807        || lower.contains("list env"))
808        && !lower.contains("env doctor");
809    let asks_hosts_file = lower.contains("hosts file")
810        || lower.contains("/etc/hosts")
811        || lower.contains("etc/hosts")
812        || lower.contains("hosts entry")
813        || lower.contains("hosts entries")
814        || (lower.contains("hosts")
815            && (lower.contains("redirect")
816                || lower.contains("block")
817                || lower.contains("loopback")));
818    let asks_docker = lower.contains("docker")
819        || lower.contains("container")
820        || lower.contains("docker compose")
821        || lower.contains("docker ps")
822        || lower.contains("running container");
823    let asks_wsl = lower.contains("wsl")
824        || lower.contains("windows subsystem")
825        || lower.contains("linux distro")
826        || lower.contains("ubuntu on windows")
827        || (lower.contains("subsystem") && lower.contains("linux"));
828    let asks_ssh = (lower.contains("ssh") && !lower.contains("ssh key") && !lower.contains("git"))
829        || lower.contains("sshd")
830        || lower.contains("ssh config")
831        || lower.contains("ssh server")
832        || lower.contains("ssh client")
833        || lower.contains("known_hosts")
834        || lower.contains("authorized_keys")
835        || lower.contains("ssh key")
836        || (lower.contains("ssh")
837            && (lower.contains("running")
838                || lower.contains("service")
839                || lower.contains("port 22")));
840    let asks_installed_software = lower.contains("installed software")
841        || lower.contains("installed program")
842        || lower.contains("installed app")
843        || lower.contains("installed package")
844        || lower.contains("what is installed")
845        || lower.contains("what's installed")
846        || lower.contains("winget list")
847        || lower.contains("list programs")
848        || (lower.contains("installed")
849            && (lower.contains("on this machine")
850                || lower.contains("on my machine")
851                || lower.contains("on my pc")));
852    let asks_databases = lower.contains("postgres")
853        || lower.contains("postgresql")
854        || lower.contains("mysql")
855        || lower.contains("mariadb")
856        || lower.contains("mongodb")
857        || lower.contains("mongo")
858        || lower.contains("redis")
859        || lower.contains("sql server")
860        || lower.contains("mssql")
861        || lower.contains("sqlite")
862        || lower.contains("elasticsearch")
863        || lower.contains("cassandra")
864        || lower.contains("couchdb")
865        || (lower.contains("database")
866            && (lower.contains("running")
867                || lower.contains("service")
868                || lower.contains("installed")
869                || lower.contains("up")
870                || lower.contains("local")))
871        || lower.contains("db service")
872        || lower.contains("database server")
873        || (lower.contains("is")
874            && lower.contains("running")
875            && (lower.contains("db") || lower.contains("database")));
876    let asks_git_config = (lower.contains("git config")
877        || lower.contains("git configuration")
878        || lower.contains("git global")
879        || (lower.contains("git") && lower.contains("user.name"))
880        || (lower.contains("git") && lower.contains("user.email"))
881        || (lower.contains("git") && lower.contains("signing"))
882        || (lower.contains("git") && lower.contains("credential"))
883        || lower.contains("git aliases"))
884        && !lower.contains("github");
885    let asks_audit_policy = lower.contains("audit policy")
886        || lower.contains("auditpol")
887        || lower.contains("audit log")
888        || lower.contains("what is being logged")
889        || lower.contains("security audit")
890        || lower.contains("logon event")
891        || lower.contains("audit category")
892        || lower.contains("event auditing");
893    let asks_shares = lower.contains("smb share")
894        || lower.contains("network share")
895        || lower.contains("shared folder")
896        || lower.contains("mapped drive")
897        || lower.contains("mapped network drive")
898        || lower.contains("get-smbshare")
899        || lower.contains("what is shared")
900        || lower.contains("what am i sharing")
901        || lower.contains("smb session")
902        || lower.contains("lanmanager")
903        || lower.contains("netlanmanager")
904        || lower.contains("smb1")
905        || lower.contains("smb signing")
906        || lower.contains("nfs export");
907    let asks_dns_servers = (lower.contains("dns server")
908        || lower.contains("dns resolver")
909        || lower.contains("nameserver")
910        || lower.contains("which dns")
911        || lower.contains("what dns")
912        || lower.contains("dns over https")
913        || lower.contains("doh")
914        || lower.contains("dns search suffix")
915        || lower.contains("configured dns")
916        || lower.contains("get-dnsclientserveraddress"))
917        && !lower.contains("dns cache");
918    let asks_bitlocker = lower.contains("bitlocker")
919        || (lower.contains("drive") && lower.contains("encrypt"))
920        || (lower.contains("disk") && lower.contains("encrypt"))
921        || lower.contains("encryption status");
922    let asks_rdp = lower.contains("rdp")
923        || lower.contains("remote desktop")
924        || (lower.contains("remote") && lower.contains("access") && !lower.contains("git"));
925    let asks_shadow_copies = lower.contains("shadow copy")
926        || lower.contains("shadow copies")
927        || lower.contains("vss")
928        || lower.contains("snapshot")
929        || lower.contains("restore point");
930    let asks_pagefile = lower.contains("pagefile")
931        || lower.contains("page file")
932        || lower.contains("virtual memory")
933        || lower.contains("swap file")
934        || (lower.contains("paging") && lower.contains("file"));
935    let asks_windows_features = (lower.contains("window") && lower.contains("feature"))
936        || lower.contains("optional feature")
937        || lower.contains("iis")
938        || lower.contains("hyper-v")
939        || (lower.contains("feature")
940            && (lower.contains("install")
941                || lower.contains("enabled")
942                || lower.contains("turn on")));
943    let asks_printers =
944        lower.contains("printer") || lower.contains("print queue") || lower.contains("get-printer");
945    let asks_winrm = lower.contains("winrm")
946        || lower.contains("psremoting")
947        || (lower.contains("ps") && lower.contains("remoting"))
948        || (lower.contains("remote") && lower.contains("management") && !lower.contains("rdp"));
949    let asks_network_stats = (lower.contains("network") && lower.contains("stat"))
950        || (lower.contains("adapter") && lower.contains("stat"))
951        || (lower.contains("nic") && lower.contains("stat"))
952        || lower.contains("throughput")
953        || lower.contains("packet loss")
954        || lower.contains("dropped packet");
955    let asks_udp_ports = lower.contains("udp port")
956        || lower.contains("udp listener")
957        || (lower.contains("udp")
958            && (lower.contains("port") || lower.contains("listen") || lower.contains("open")));
959
960    // Priority 1: High-Precision Enterprise Triage (IT Pro Plus)
961    if asks_ad_user {
962        Some("ad_user")
963    } else if asks_user_accounts {
964        Some("user_accounts")
965    } else if asks_dns_lookup {
966        Some("dns_lookup")
967    } else if asks_hyperv {
968        Some("hyperv")
969    } else if asks_ip_config {
970        Some("ip_config")
971    } else if asks_disk_benchmark {
972        Some("disk_benchmark")
973    } else if asks_fix_plan {
974        Some("fix_plan")
975    } else if asks_permissions {
976        Some("permissions")
977    } else if asks_login_history {
978        Some("login_history")
979    } else if asks_registry_audit {
980        Some("registry_audit")
981    } else if asks_share_access {
982        Some("share_access")
983    } else if asks_thermal {
984        Some("thermal")
985    } else if asks_activation {
986        Some("activation")
987    } else if asks_patch_history {
988        Some("patch_history")
989    } else if asks_storage {
990        Some("storage")
991    } else if asks_gpo {
992        Some("gpo")
993    } else if asks_certificates {
994        Some("certificates")
995    } else if asks_integrity {
996        Some("integrity")
997    } else if asks_domain {
998        Some("domain")
999    } else if asks_device_health {
1000        Some("device_health")
1001    } else if asks_drivers {
1002        Some("drivers")
1003    } else if asks_peripherals {
1004        Some("peripherals")
1005    } else if asks_user_accounts {
1006        Some("user_accounts")
1007    } else if asks_sessions {
1008        Some("sessions")
1009    } else if asks_virtualization {
1010        Some("hardware")
1011    } else if asks_services {
1012        Some("services")
1013    } else if asks_startup {
1014        Some("startup_items")
1015    } else if asks_bitlocker {
1016        Some("bitlocker")
1017    } else if asks_rdp {
1018        Some("rdp")
1019    } else if asks_shadow_copies {
1020        Some("shadow_copies")
1021    } else if asks_pagefile {
1022        Some("pagefile")
1023    } else if asks_windows_features {
1024        Some("windows_features")
1025    } else if asks_printers {
1026        Some("printers")
1027    } else if asks_winrm {
1028        Some("winrm")
1029    } else if (asks_path && asks_toolchains)
1030        || (mentions_host_inspection_question(&lower) && asks_broad_readiness)
1031    {
1032        Some("summary")
1033    } else if asks_env_doctor {
1034        Some("env_doctor")
1035    } else if asks_dns_servers {
1036        Some("dns_servers")
1037    } else if asks_connectivity {
1038        Some("connectivity")
1039    } else if asks_wifi {
1040        Some("wifi")
1041    } else if asks_connections {
1042        Some("connections")
1043    } else if asks_vpn {
1044        Some("vpn")
1045    } else if asks_proxy {
1046        Some("proxy")
1047    } else if asks_firewall_rules {
1048        Some("firewall_rules")
1049    } else if asks_traceroute {
1050        Some("traceroute")
1051    } else if asks_dns_cache {
1052        Some("dns_cache")
1053    } else if asks_arp {
1054        Some("arp")
1055    } else if asks_route_table {
1056        Some("route_table")
1057    } else if asks_network_stats {
1058        Some("network_stats")
1059    } else if asks_udp_ports {
1060        Some("udp_ports")
1061    } else if asks_shares {
1062        Some("shares")
1063    } else if asks_os_config {
1064        Some("os_config")
1065    } else if asks_network {
1066        Some("network")
1067    } else if asks_updates {
1068        Some("updates")
1069    } else if asks_audit_policy {
1070        Some("audit_policy")
1071    } else if asks_security {
1072        Some("security")
1073    } else if asks_pending_reboot {
1074        Some("pending_reboot")
1075    } else if asks_disk_health {
1076        Some("disk_health")
1077    } else if asks_battery {
1078        Some("battery")
1079    } else if asks_recent_crashes {
1080        Some("recent_crashes")
1081    } else if asks_log_check {
1082        Some("log_check")
1083    } else if asks_scheduled_tasks {
1084        Some("scheduled_tasks")
1085    } else if asks_dev_conflicts {
1086        Some("dev_conflicts")
1087    } else if asks_databases {
1088        Some("databases")
1089    } else if asks_docker {
1090        Some("docker")
1091    } else if asks_wsl {
1092        Some("wsl")
1093    } else if asks_ssh {
1094        Some("ssh")
1095    } else if asks_git_config {
1096        Some("git_config")
1097    } else if asks_installed_software {
1098        Some("installed_software")
1099    } else if asks_env {
1100        Some("env")
1101    } else if asks_hosts_file {
1102        Some("hosts_file")
1103    } else if asks_ports {
1104        Some("ports")
1105    } else if asks_processes {
1106        Some("processes")
1107    } else if asks_repo_doctor {
1108        Some("repo_doctor")
1109    } else if lower.contains("desktop") {
1110        Some("desktop")
1111    } else if lower.contains("downloads") {
1112        Some("downloads")
1113    } else if asks_path {
1114        Some("path")
1115    } else if asks_toolchains {
1116        Some("toolchains")
1117    } else if asks_resource_load {
1118        Some("resource_load")
1119    } else if asks_health_report {
1120        Some("health_report")
1121    } else if asks_directory {
1122        Some("directory")
1123    } else if mentions_host_inspection_question(&lower) {
1124        Some("summary")
1125    } else {
1126        None
1127    }
1128}
1129
1130pub fn all_host_inspection_topics(user_input: &str) -> Vec<&'static str> {
1131    // All topic detectors in priority order — ordered so more specific topics come
1132    // before generic fallbacks (e.g. traceroute before network).
1133    let lower = user_input.to_lowercase();
1134    let mut topics: Vec<&'static str> = Vec::new();
1135
1136    let detectors: &[(&str, fn(&str) -> bool)] = &[
1137        ("ad_user", |l| {
1138            l.contains("ad user")
1139                || l.contains("domain user")
1140                || (l.contains("user") && (l.contains("sid") || l.contains("membership")))
1141        }),
1142        ("dns_lookup", |l| {
1143            l.contains("dns lookup")
1144                || l.contains("dns record")
1145                || l.contains("dns query")
1146                || l.contains("nslookup")
1147                || l.contains(" dig ")
1148                || l.contains("srv record")
1149                || l.contains("mx record")
1150        }),
1151        ("hyperv", |l| {
1152            l.contains("hyper-v")
1153                || l.contains("hyperv")
1154                || (l.contains("virtual machine") && l.contains("load"))
1155                || l.contains("vmmem")
1156        }),
1157        ("ip_config", |l| {
1158            l.contains("ipconfig")
1159                || l.contains("ip config")
1160                || l.contains("adapter detail")
1161                || l.contains("dhcp lease")
1162        }),
1163        ("fix_plan", |l| {
1164            l.contains("fix")
1165                && (l.contains("cargo")
1166                    || l.contains("port ")
1167                    || l.contains("lm studio")
1168                    || l.contains("toolchain"))
1169        }),
1170        ("updates", |l| {
1171            l.contains("up to date")
1172                || l.contains("windows update")
1173                || l.contains("pending update")
1174                || l.contains("update available")
1175        }),
1176        ("security", |l| {
1177            l.contains("antivirus")
1178                || l.contains("defender")
1179                || l.contains("uac")
1180                || (l.contains("security") && !l.contains("git") && !l.contains("ssh"))
1181        }),
1182        ("permissions", |l| {
1183            l.contains("permission") || l.contains("access control") || l.contains("get-acl")
1184        }),
1185        ("login_history", |l| {
1186            l.contains("login history") || l.contains("logon history") || l.contains("event id 4624")
1187        }),
1188        ("registry_audit", |l| {
1189            l.contains("registry audit") || l.contains("persistence") || l.contains("ifeo") || l.contains("reg query")
1190        }),
1191        ("share_access", |l| {
1192            l.contains("share access") || l.contains("unc path") || l.contains("smbshare") || l.contains("net share")
1193        }),
1194        ("thermal", |l| {
1195            l.contains("thermal") || l.contains("throttling") || l.contains("overheating")
1196        }),
1197        ("activation", |l| {
1198            l.contains("activation") || l.contains("slmgr") || l.contains("license status")
1199        }),
1200        ("patch_history", |l| {
1201            l.contains("patch history") || l.contains("hotfix") || l.contains("kb history")
1202        }),
1203        ("pending_reboot", |l| {
1204            l.contains("pending reboot")
1205                || l.contains("pending restart")
1206                || l.contains("need to restart")
1207                || l.contains("reboot required")
1208                || (l.contains("reboot") && l.contains("pending"))
1209                || (l.contains("restart") && l.contains("pending"))
1210        }),
1211        ("disk_health", |l| {
1212            l.contains("disk health")
1213                || l.contains("drive health")
1214                || l.contains("smart status")
1215                || (l.contains("healthy")
1216                    && (l.contains("drive") || l.contains("disk") || l.contains("ssd")))
1217        }),
1218        ("battery", |l| l.contains("battery")),
1219        ("recent_crashes", |l| {
1220            l.contains("crash") || l.contains("bsod") || l.contains("blue screen")
1221        }),
1222        ("scheduled_tasks", |l| {
1223            l.contains("scheduled task") || l.contains("task scheduler")
1224        }),
1225        ("ad_user", |l| {
1226            l.contains("ad user") || l.contains("domain user") || (l.contains("user") && l.contains("sid"))
1227        }),
1228        ("dns_lookup", |l| {
1229            l.contains("dns") && (l.contains("lookup") || l.contains("srv") || l.contains("mx"))
1230        }),
1231        ("hyperv", |l| {
1232            l.contains("hyper-v") || l.contains("hyperv") || (l.contains("list") && l.contains("vm"))
1233        }),
1234        ("ip_config", |l| {
1235            l.contains("ipconfig") && (l.contains("all") || l.contains("detail"))
1236        }),
1237        ("dev_conflicts", |l| {
1238            l.contains("dev conflict")
1239                || l.contains("toolchain conflict")
1240                || l.contains("duplicate path")
1241        }),
1242        ("storage", |l| {
1243            l.contains("disk space")
1244                || l.contains("storage")
1245                || l.contains("drive capacity")
1246                || l.contains("cache size")
1247                || l.contains("i/o pressure")
1248                || l.contains("disk usage")
1249        }),
1250        ("hardware", |l| {
1251            l.contains("cpu model")
1252                || l.contains("ram size")
1253                || l.contains("hardware spec")
1254                || (l.contains("what hardware") && l.contains("have"))
1255        }),
1256        ("health_report", |l| {
1257            l.contains("health report") || l.contains("system health")
1258        }),
1259        ("resource_load", |l| {
1260            l.contains("resource load")
1261                || l.contains("cpu load")
1262                || l.contains("ram %")
1263                || l.contains("cpu %")
1264                || l.contains("performance")
1265                || l.contains("slow")
1266                || l.contains("lag")
1267                || l.contains("sluggish")
1268                || l.contains("hang")
1269                || l.contains("unresponsive")
1270        }),
1271        ("processes", |l| {
1272            l.contains("process")
1273                || l.contains("task manager")
1274                || l.contains("what is running")
1275                || l.contains("using my ram")
1276                || l.contains("hitting the disk")
1277                || l.contains("disk thrasher")
1278        }),
1279        ("services", |l| {
1280            l.contains("service") || l.contains("daemon") || l.contains("windows service")
1281        }),
1282        ("ports", |l| {
1283            l.contains("listening port")
1284                || l.contains("open port")
1285                || l.contains("what is on port")
1286                || l.contains("port 3000")
1287                || (l.contains("listening") && l.contains("port"))
1288        }),
1289        ("traceroute", |l| {
1290            l.contains("traceroute")
1291                || l.contains("tracert")
1292                || l.contains("trace route")
1293                || l.contains("trace the path")
1294                || l.contains("network path")
1295                || l.contains("how many hops")
1296                || (l.contains("trace") && l.contains("hop"))
1297        }),
1298        ("dns_cache", |l| {
1299            l.contains("dns cache")
1300                || l.contains("cached dns")
1301                || l.contains("displaydns")
1302                || (l.contains("dns") && l.contains("cached"))
1303        }),
1304        ("arp", |l| {
1305            l.contains("arp table")
1306                || l.contains("arp cache")
1307                || l.contains("mac address")
1308                || l.contains("ip to mac")
1309                || l.contains("arp -")
1310        }),
1311        ("route_table", |l| {
1312            l.contains("route table")
1313                || l.contains("routing table")
1314                || l.contains("route print")
1315                || l.contains("network route")
1316                || l.contains("next hop")
1317        }),
1318        ("connectivity", |l| {
1319            l.contains("internet")
1320                || l.contains("am i connected")
1321                || l.contains("ping google")
1322                || l.contains("internet access")
1323                || l.contains("no internet")
1324        }),
1325        ("wifi", |l| {
1326            l.contains("wi-fi")
1327                || l.contains("wifi")
1328                || l.contains("wireless")
1329                || l.contains("ssid")
1330                || l.contains("signal strength")
1331        }),
1332        ("connections", |l| {
1333            l.contains("tcp connection")
1334                || l.contains("active connection")
1335                || l.contains("netstat")
1336                || l.contains("open socket")
1337                || (l.contains("established") && l.contains("connection"))
1338        }),
1339        ("vpn", |l| {
1340            l.contains("vpn") || l.contains("virtual private network")
1341        }),
1342        ("proxy", |l| {
1343            l.contains("proxy setting") || l.contains("system proxy") || l.contains("winhttp proxy")
1344        }),
1345        ("firewall_rules", |l| {
1346            (l.contains("firewall")
1347                && (l.contains("rule") || l.contains("inbound") || l.contains("outbound")))
1348                || l.contains("firewall rule")
1349        }),
1350        ("network", |l| {
1351            l.contains("network adapter")
1352                || l.contains("ip address")
1353                || l.contains("ipconfig")
1354                || l.contains("gateway")
1355                || l.contains("subnet")
1356        }),
1357        ("env_doctor", |l| {
1358            l.contains("env doctor")
1359                || l.contains("environment doctor")
1360                || l.contains("package manager")
1361                || l.contains("path drift")
1362        }),
1363        ("os_config", |l| {
1364            l.contains("power plan")
1365                || l.contains("uptime")
1366                || l.contains("boot time")
1367                || l.contains("last boot")
1368        }),
1369        ("path", |l| {
1370            l.contains("path entries") || l.contains("raw path")
1371        }),
1372        ("toolchains", |l| {
1373            l.contains("developer tools")
1374                || l.contains("toolchains")
1375                || (l.contains("installed") && l.contains("version"))
1376        }),
1377        ("docker", |l| {
1378            l.contains("docker") || l.contains("container") || l.contains("running container")
1379        }),
1380        ("wsl", |l| {
1381            l.contains("wsl")
1382                || l.contains("windows subsystem")
1383                || (l.contains("subsystem") && l.contains("linux"))
1384        }),
1385        ("ssh", |l| {
1386            l.contains("ssh")
1387                || l.contains("sshd")
1388                || l.contains("known_hosts")
1389                || l.contains("authorized_keys")
1390        }),
1391        ("git_config", |l| {
1392            (l.contains("git config") || l.contains("git global") || l.contains("git aliases"))
1393                && !l.contains("github")
1394        }),
1395        ("installed_software", |l| {
1396            l.contains("installed software")
1397                || l.contains("installed program")
1398                || l.contains("what is installed")
1399                || l.contains("what's installed")
1400                || l.contains("winget list")
1401        }),
1402        ("env", |l| {
1403            (l.contains("environment variable") || l.contains("env var") || l.contains("env vars"))
1404                && !l.contains("env doctor")
1405        }),
1406        ("hosts_file", |l| {
1407            l.contains("hosts file") || l.contains("/etc/hosts") || l.contains("hosts entry")
1408        }),
1409        ("databases", |l| {
1410            l.contains("postgres")
1411                || l.contains("mysql")
1412                || l.contains("mariadb")
1413                || l.contains("mongodb")
1414                || l.contains("redis")
1415                || l.contains("sqlite")
1416                || l.contains("sql server")
1417                || l.contains("elasticsearch")
1418                || (l.contains("database") && (l.contains("running") || l.contains("service")))
1419        }),
1420        ("user_accounts", |l| {
1421            l.contains("local user")
1422                || l.contains("user account")
1423                || l.contains("who is logged")
1424                || l.contains("who am i")
1425                || l.contains("logged in as")
1426                || l.contains("admin group")
1427                || l.contains("local admin")
1428                || l.contains("active sessions")
1429                || l.contains("running as admin")
1430        }),
1431        ("audit_policy", |l| {
1432            l.contains("audit policy")
1433                || l.contains("auditpol")
1434                || l.contains("what is being logged")
1435                || l.contains("security audit")
1436                || l.contains("event auditing")
1437        }),
1438        ("shares", |l| {
1439            l.contains("smb share")
1440                || l.contains("network share")
1441                || l.contains("shared folder")
1442                || l.contains("mapped drive")
1443                || l.contains("smb1")
1444                || l.contains("nfs export")
1445        }),
1446        ("dns_servers", |l| {
1447            (l.contains("dns server")
1448                || l.contains("dns resolver")
1449                || l.contains("nameserver")
1450                || l.contains("which dns")
1451                || l.contains("dns over https")
1452                || l.contains("configured dns"))
1453                && !l.contains("dns cache")
1454        }),
1455        ("bitlocker", |l| {
1456            l.contains("bitlocker")
1457                || (l.contains("drive") && l.contains("encrypt"))
1458                || (l.contains("disk") && l.contains("encrypt"))
1459                || l.contains("encryption status")
1460        }),
1461        ("rdp", |l| {
1462            l.contains("rdp")
1463                || l.contains("remote desktop")
1464                || (l.contains("remote") && l.contains("access") && !l.contains("git"))
1465        }),
1466        ("shadow_copies", |l| {
1467            l.contains("shadow copy")
1468                || l.contains("shadow copies")
1469                || l.contains("vss")
1470                || l.contains("snapshot")
1471                || l.contains("restore point")
1472        }),
1473        ("pagefile", |l| {
1474            l.contains("pagefile")
1475                || l.contains("page file")
1476                || l.contains("virtual memory")
1477                || l.contains("swap file")
1478        }),
1479        ("windows_features", |l| {
1480            (l.contains("window") && l.contains("feature"))
1481                || l.contains("optional feature")
1482                || l.contains("iis")
1483                || l.contains("hyper-v")
1484                || (l.contains("feature") && (l.contains("install") || l.contains("enabled")))
1485        }),
1486        ("printers", |l| {
1487            l.contains("printer") || l.contains("print queue") || l.contains("get-printer")
1488        }),
1489        ("winrm", |l| {
1490            l.contains("winrm")
1491                || l.contains("psremoting")
1492                || (l.contains("remote") && l.contains("management") && !l.contains("rdp"))
1493        }),
1494        ("network_stats", |l| {
1495            (l.contains("network") && l.contains("stat"))
1496                || (l.contains("adapter") && l.contains("stat"))
1497                || l.contains("throughput")
1498                || l.contains("packet loss")
1499                || l.contains("dropped packet")
1500        }),
1501        ("startup_items", |l| {
1502            l.contains("startup") || l.contains("boot program") || l.contains("autorun")
1503        }),
1504        ("udp_ports", |l| {
1505            l.contains("udp port")
1506                || l.contains("udp listener")
1507                || (l.contains("udp") && l.contains("listening"))
1508        }),
1509        ("gpo", |l| {
1510            l.contains("gpo") || l.contains("group policy") || l.contains("gpresult")
1511        }),
1512        ("certificates", |l| {
1513            l.contains("cert") || l.contains("ssl") || l.contains("thumbprint")
1514        }),
1515        ("integrity", |l| {
1516            l.contains("integrity") || l.contains("sfc") || l.contains("dism")
1517        }),
1518        ("domain", |l| {
1519            l.contains("domain")
1520                || l.contains("workgroup")
1521                || l.contains("netbios")
1522                || l.contains("active directory")
1523        }),
1524        ("device_health", |l| {
1525            l.contains("device health")
1526                || l.contains("hardware error")
1527                || l.contains("yellow bang")
1528                || l.contains("malfunctioning")
1529        }),
1530        ("drivers", |l| {
1531            l.contains("driver") || l.contains("system driver")
1532        }),
1533        ("peripherals", |l| {
1534            l.contains("peripheral")
1535                || l.contains("usb")
1536                || l.contains("keyboard")
1537                || l.contains("mouse")
1538                || l.contains("monitor")
1539        }),
1540        ("sessions", |l| {
1541            l.contains("session") || l.contains("who is logged") || l.contains("active login")
1542        }),
1543        ("hardware", |l| {
1544            l.contains("virtualization")
1545                || l.contains("hypervisor")
1546                || l.contains("vt-x")
1547                || l.contains("slat")
1548        }),
1549    ];
1550
1551    for (topic, check) in detectors {
1552        if check(&lower) && !topics.contains(topic) {
1553            topics.push(topic);
1554        }
1555    }
1556    topics
1557}
1558
1559pub(crate) fn preferred_maintainer_workflow(user_input: &str) -> Option<&'static str> {
1560    let lower = user_input.to_ascii_lowercase();
1561    let asks_cleanup = contains_any(
1562        &lower,
1563        &[
1564            "run my cleanup",
1565            "run the cleanup",
1566            "run cleanup",
1567            "deep clean",
1568            "prune dist",
1569            "clean.ps1",
1570            "cleanup script",
1571            "cleanup workflow",
1572            "clean up scripts",
1573        ],
1574    );
1575    let asks_package = contains_any(
1576        &lower,
1577        &[
1578            "rebuild local portable",
1579            "rebuild the portable",
1580            "run the local build",
1581            "run the portable",
1582            "package-windows.ps1",
1583            "package windows",
1584            "build installer",
1585            "overwrite the portable",
1586            "refresh the portable",
1587            "update path",
1588            "update path with the portable",
1589        ],
1590    );
1591    let asks_release = contains_any(
1592        &lower,
1593        &[
1594            "run the release flow",
1595            "regular workflow",
1596            "cut the release",
1597            "ship it",
1598            "release.ps1",
1599            "bump to ",
1600            "tag it",
1601            "full tag and everything",
1602            "publish crates",
1603        ],
1604    );
1605
1606    if asks_cleanup {
1607        Some("clean")
1608    } else if asks_package {
1609        Some("package_windows")
1610    } else if asks_release {
1611        Some("release")
1612    } else {
1613        None
1614    }
1615}
1616
1617pub(crate) fn preferred_workspace_workflow(user_input: &str) -> Option<&'static str> {
1618    let lower = user_input.to_ascii_lowercase();
1619    let asks_project_scope = contains_any(
1620        &lower,
1621        &[
1622            "this repo",
1623            "this repository",
1624            "this project",
1625            "current project",
1626            "current repo",
1627            "workspace",
1628            "in this folder",
1629            "here",
1630        ],
1631    );
1632    let asks_build = contains_any(
1633        &lower,
1634        &[
1635            "run the build",
1636            "build this project",
1637            "build this repo",
1638            "run build",
1639            "compile this project",
1640            "cargo build",
1641            "npm run build",
1642            "pnpm run build",
1643            "yarn build",
1644            "go build",
1645            "gradlew build",
1646        ],
1647    );
1648    let asks_test = contains_any(
1649        &lower,
1650        &[
1651            "run the tests",
1652            "run tests",
1653            "test this project",
1654            "test this repo",
1655            "run the test suite",
1656            "cargo test",
1657            "npm test",
1658            "pnpm test",
1659            "yarn test",
1660            "pytest",
1661            "go test",
1662            "gradlew test",
1663        ],
1664    );
1665    let asks_lint = contains_any(
1666        &lower,
1667        &[
1668            "run lint",
1669            "lint this project",
1670            "lint this repo",
1671            "cargo clippy",
1672            "npm run lint",
1673            "pnpm run lint",
1674            "yarn lint",
1675        ],
1676    );
1677    let asks_fix = contains_any(
1678        &lower,
1679        &[
1680            "run fix",
1681            "fix formatting",
1682            "run formatter",
1683            "cargo fmt",
1684            "npm run fix",
1685            "pnpm run fix",
1686            "yarn fix",
1687        ],
1688    );
1689    let asks_script = contains_any(
1690        &lower,
1691        &[
1692            "npm run ",
1693            "pnpm run ",
1694            "yarn ",
1695            "bun run ",
1696            "make ",
1697            "just ",
1698            "task ",
1699            "scripts/",
1700            ".\\scripts\\",
1701            "./scripts/",
1702            ".ps1",
1703            ".sh",
1704            ".py",
1705            ".cmd",
1706            ".bat",
1707        ],
1708    );
1709
1710    if asks_build
1711        && (asks_project_scope
1712            || !contains_any(&lower, &["release.ps1", "package-windows.ps1", "clean.ps1"]))
1713    {
1714        Some("build")
1715    } else if asks_test && asks_project_scope {
1716        Some("test")
1717    } else if asks_lint && asks_project_scope {
1718        Some("lint")
1719    } else if asks_fix && asks_project_scope {
1720        Some("fix")
1721    } else if asks_script && !preferred_maintainer_workflow(user_input).is_some() {
1722        Some("script")
1723    } else if (asks_test || asks_lint || asks_fix)
1724        && !preferred_maintainer_workflow(user_input).is_some()
1725    {
1726        Some(if asks_test {
1727            "test"
1728        } else if asks_lint {
1729            "lint"
1730        } else {
1731            "fix"
1732        })
1733    } else {
1734        None
1735    }
1736}
1737
1738pub(crate) fn looks_like_mutation_request(user_input: &str) -> bool {
1739    let lower = user_input.to_lowercase();
1740    [
1741        "fix ",
1742        "change ",
1743        "edit ",
1744        "modify ",
1745        "update ",
1746        "rename ",
1747        "refactor ",
1748        "patch ",
1749        "rewrite ",
1750        "implement ",
1751        "create a file",
1752        "create file",
1753        "add a file",
1754        "delete ",
1755        "remove ",
1756        "make the change",
1757    ]
1758    .iter()
1759    .any(|needle| lower.contains(needle))
1760}
1761
1762pub(crate) fn classify_query_intent(workflow_mode: WorkflowMode, user_input: &str) -> QueryIntent {
1763    let lower = user_input.to_lowercase();
1764    let trimmed = user_input.trim().to_ascii_lowercase();
1765
1766    let mentions_runtime_trace = contains_any(
1767        &lower,
1768        &[
1769            "trace",
1770            "how does",
1771            "what are the main runtime subsystems",
1772            "how does a user message move",
1773            "separate normal assistant output",
1774            "session reset behavior",
1775            "file references",
1776            "event types",
1777            "channels",
1778        ],
1779    );
1780    let anti_guess = contains_any(&lower, &["do not guess", "if you are unsure"]);
1781    let capability_mode = mentions_capability_question(&lower);
1782    let capability_needs_repo =
1783        capability_mode && capability_question_requires_repo_inspection(&lower);
1784    let host_inspection_mode = preferred_host_inspection_topic(&lower).is_some();
1785    let maintainer_workflow_mode = preferred_maintainer_workflow(&lower).is_some();
1786    let workspace_workflow_mode =
1787        preferred_workspace_workflow(&lower).is_some() && !maintainer_workflow_mode;
1788    let toolchain_mode = contains_any(
1789        &lower,
1790        &[
1791            "tooling discipline",
1792            "best read-only toolchain",
1793            "identify the best tools you actually have",
1794            "concrete read-only investigation plan",
1795            "do not execute the plan",
1796            "available repo-inspection tools",
1797            "tool choice discipline",
1798            "what tools would you choose first",
1799        ],
1800    ) || (lower.contains("which tools") && lower.contains("why"))
1801        || (lower.contains("when would you choose") && lower.contains("tool"));
1802    let architecture_overview_mode = {
1803        let architecture_signals = contains_any(
1804            &lower,
1805            &[
1806                "architecture overview",
1807                "architecture walkthrough",
1808                "full architecture",
1809                "runtime walkthrough",
1810                "control flow",
1811                "tool routing",
1812                "workflow modes",
1813                "repo map behavior",
1814                "mcp policy",
1815                "prompt budgeting",
1816                "compaction",
1817                "file ownership",
1818                "owner file",
1819                "project structure",
1820                "repository structure",
1821            ],
1822        );
1823        let broad = contains_any(
1824            &lower,
1825            &[
1826                "full detailed",
1827                "all in one answer",
1828                "concrete file ownership",
1829                "walk me through",
1830                "major runtime pieces",
1831                "which files own",
1832                "how",
1833                "explain",
1834                "overview",
1835            ],
1836        );
1837        (architecture_signals && broad)
1838            || (lower.contains("runtime")
1839                && lower.contains("workflow")
1840                && (lower.contains("architecture") || lower.contains("tool routing")))
1841            || mentions_broad_system_walkthrough(&lower)
1842    };
1843
1844    let direct_answer = if trimmed == "/about" || mentions_creator_question(&lower) {
1845        Some(DirectAnswerKind::About)
1846    } else if matches!(
1847        trimmed.as_str(),
1848        "who are you" | "who are you?" | "what are you" | "what are you?"
1849    ) || (lower.contains("what is hematite") && !lower.contains("lm studio"))
1850    {
1851        Some(DirectAnswerKind::Identity)
1852    } else if (mentions_stable_product_surface(&lower) || mentions_product_truth_routing(&lower))
1853        && contains_any(
1854            &lower,
1855            &[
1856                "how hematite answers",
1857                "how does hematite answer",
1858                "how hematite handles",
1859                "how does hematite handle",
1860                "how hematite decides",
1861                "how does hematite decide",
1862                "decides whether",
1863                "decide whether",
1864            ],
1865        )
1866    {
1867        Some(DirectAnswerKind::ProductSurface)
1868    } else if mentions_reset_commands(&lower)
1869        && contains_any(
1870            &lower,
1871            &[
1872                "exact difference",
1873                "difference between",
1874                "explain the exact difference",
1875                "what is the difference",
1876            ],
1877        )
1878    {
1879        Some(DirectAnswerKind::SessionResetSemantics)
1880    } else if (lower.contains("reasoning output") || lower.contains("reasoning"))
1881        && contains_any(
1882            &lower,
1883            &["visible chat output", "visible chat", "chat output"],
1884        )
1885    {
1886        Some(DirectAnswerKind::ReasoningSplit)
1887    } else if lower.contains("/ask")
1888        && lower.contains("/code")
1889        && lower.contains("/architect")
1890        && lower.contains("/read-only")
1891        && lower.contains("/auto")
1892        && contains_any(&lower, &["difference", "differences", "what are"])
1893    {
1894        Some(DirectAnswerKind::WorkflowModes)
1895    } else if lower.contains(".hematite/settings.json")
1896        && lower.contains("gemma_native_auto")
1897        && lower.contains("gemma_native_formatting")
1898    {
1899        Some(DirectAnswerKind::GemmaNativeSettings)
1900    } else if contains_any(
1901        &lower,
1902        &[
1903            "skip verification",
1904            "skip build verification",
1905            "commit it immediately",
1906            "commit immediately",
1907        ],
1908    ) && contains_any(
1909        &lower,
1910        &[
1911            "make a code change",
1912            "make the change",
1913            "change the code",
1914            "edit the code",
1915            "edit a file",
1916            "implement",
1917        ],
1918    ) {
1919        Some(DirectAnswerKind::UnsafeWorkflowPressure)
1920    } else if contains_any(&lower, &["/gemma-native", "gemma native"])
1921        && contains_any(&lower, &["what does", "what is", "how does", "what do"])
1922    {
1923        Some(DirectAnswerKind::GemmaNative)
1924    } else if lower.contains("verify_build")
1925        && lower.contains(".hematite/settings.json")
1926        && contains_any(
1927            &lower,
1928            &["build", "test", "lint", "fix", "verification commands"],
1929        )
1930    {
1931        Some(DirectAnswerKind::VerifyProfiles)
1932    } else if (lower.contains("carry forward by default")
1933        || lower.contains("session memory should you carry forward")
1934        || (lower.contains("carry forward")
1935            && contains_any(
1936                &lower,
1937                &[
1938                    "besides the active task",
1939                    "blocker",
1940                    "compacts",
1941                    "recovers from a blocker",
1942                    "session state",
1943                ],
1944            )))
1945        && contains_any(
1946            &lower,
1947            &[
1948                "restarted hematite",
1949                "restarted",
1950                "avoid carrying forward",
1951                "session state",
1952                "active task",
1953                "blocker",
1954                "compacts",
1955                "recovers from a blocker",
1956            ],
1957        )
1958    {
1959        Some(DirectAnswerKind::SessionMemory)
1960    } else if contains_any(
1961        &lower,
1962        &[
1963            "recovery recipe",
1964            "recovery recipes",
1965            "recovery step",
1966            "recovery steps",
1967        ],
1968    ) && contains_any(
1969        &lower,
1970        &[
1971            "blocker",
1972            "runtime failure",
1973            "degrades",
1974            "context window",
1975            "context-window",
1976            "operator",
1977        ],
1978    ) {
1979        Some(DirectAnswerKind::RecoveryRecipes)
1980    } else if !architecture_overview_mode
1981        && contains_any(
1982            &lower,
1983            &[
1984                "mcp server health",
1985                "mcp runtime state",
1986                "mcp lifecycle",
1987                "mcp state",
1988                "mcp healthy",
1989                "mcp degraded",
1990                "mcp failed",
1991            ],
1992        )
1993    {
1994        Some(DirectAnswerKind::McpLifecycle)
1995    } else if contains_any(
1996        &lower,
1997        &[
1998            "allowed, denied, or require approval",
1999            "allowed denied or require approval",
2000            "allow, ask, or deny",
2001            "tool call should be allowed",
2002            "authorization logic",
2003            "workspace trust",
2004            "trust-allowlisted",
2005        ],
2006    ) {
2007        Some(DirectAnswerKind::AuthorizationPolicy)
2008    } else if contains_any(
2009        &lower,
2010        &[
2011            "tool classes",
2012            "tool class",
2013            "flat tool list",
2014            "runtime tool classes",
2015            "different runtime tool classes",
2016        ],
2017    ) || (lower.contains("repo reads")
2018        && lower.contains("repo writes")
2019        && contains_any(
2020            &lower,
2021            &[
2022                "verification tools",
2023                "git tools",
2024                "external mcp tools",
2025                "different runtime",
2026            ],
2027        ))
2028    {
2029        Some(DirectAnswerKind::ToolClasses)
2030    } else if contains_any(
2031        &lower,
2032        &[
2033            "built-in tool catalog",
2034            "builtin tool catalog",
2035            "builtin-tool dispatch",
2036            "built-in tool dispatch",
2037            "tool registry ownership",
2038            "which file now owns",
2039        ],
2040    ) && contains_any(
2041        &lower,
2042        &[
2043            "tool catalog",
2044            "dispatch path",
2045            "dispatch",
2046            "tool registry",
2047            "owns",
2048        ],
2049    ) {
2050        Some(DirectAnswerKind::ToolRegistryOwnership)
2051    } else if (lower.contains("other coding languages")
2052        || lower.contains("what languages")
2053        || lower.contains("know other languages"))
2054        && contains_any(
2055            &lower,
2056            &[
2057                "capable of making projects",
2058                "can you make projects",
2059                "can you build projects",
2060            ],
2061        )
2062    {
2063        Some(DirectAnswerKind::LanguageCapability)
2064    } else if workflow_mode == WorkflowMode::Architect
2065        && (lower.contains("session reset")
2066            || (lower.contains("/clear") && lower.contains("/new") && lower.contains("/forget")))
2067        && contains_any(&lower, &["redesign", "clearer", "easier", "understand"])
2068    {
2069        Some(DirectAnswerKind::ArchitectSessionResetPlan)
2070    } else if toolchain_mode
2071        && lower.contains("read-only")
2072        && contains_any(
2073            &lower,
2074            &[
2075                "tooling discipline",
2076                "investigation plan",
2077                "best read-only toolchain",
2078                "tool choice discipline",
2079                "what tools would you choose first",
2080            ],
2081        )
2082    {
2083        Some(DirectAnswerKind::Toolchain)
2084    } else {
2085        None
2086    };
2087
2088    let primary_class = if direct_answer.is_some()
2089        || mentions_stable_product_surface(&lower)
2090        || mentions_product_truth_routing(&lower)
2091    {
2092        QueryIntentClass::ProductTruth
2093    } else if architecture_overview_mode {
2094        QueryIntentClass::RepoArchitecture
2095    } else if toolchain_mode {
2096        QueryIntentClass::Toolchain
2097    } else if capability_mode {
2098        QueryIntentClass::Capability
2099    } else if mentions_runtime_trace || anti_guess || lower.contains("read-only") {
2100        QueryIntentClass::RuntimeDiagnosis
2101    } else if looks_like_mutation_request(user_input) {
2102        QueryIntentClass::Implementation
2103    } else {
2104        QueryIntentClass::Unknown
2105    };
2106
2107    QueryIntent {
2108        primary_class,
2109        direct_answer,
2110        grounded_trace_mode: mentions_runtime_trace || lower.contains("read-only") || anti_guess,
2111        capability_mode,
2112        capability_needs_repo,
2113        toolchain_mode,
2114        host_inspection_mode,
2115        maintainer_workflow_mode,
2116        workspace_workflow_mode,
2117        architecture_overview_mode,
2118    }
2119}
2120
2121pub(crate) fn is_capability_probe_tool(name: &str) -> bool {
2122    matches!(
2123        name,
2124        "read_file"
2125            | "inspect_lines"
2126            | "list_files"
2127            | "grep_files"
2128            | "lsp_definitions"
2129            | "lsp_references"
2130            | "lsp_hover"
2131            | "lsp_search_symbol"
2132            | "lsp_get_diagnostics"
2133            | "trace_runtime_flow"
2134            | "auto_pin_context"
2135            | "list_pinned"
2136    )
2137}
2138
2139
2140/// Returns true when the user's query involves computation that must be exact —
2141/// checksums, financial math, statistics, date arithmetic, algorithmic verification, etc.
2142/// Used by the harness to inject a pre-turn nudge toward run_code instead of model memory.
2143pub fn needs_computation_sandbox(user_input: &str) -> bool {
2144    let lower = user_input.to_lowercase();
2145    let hash_or_checksum = lower.contains("sha")
2146        || lower.contains("md5")
2147        || lower.contains("checksum")
2148        || lower.contains("crc")
2149        || lower.contains("hash")
2150        || lower.contains("fingerprint");
2151    let financial =
2152        (lower.contains("calculat") || lower.contains("compute") || lower.contains("what is"))
2153            && (lower.contains("percent")
2154                || lower.contains("%")
2155                || lower.contains("interest")
2156                || lower.contains("compound")
2157                || lower.contains("roi")
2158                || lower.contains("tax")
2159                || lower.contains("discount")
2160                || lower.contains("profit")
2161                || lower.contains("loss"));
2162    let statistics = lower.contains("standard deviation")
2163        || lower.contains("std dev")
2164        || lower.contains("mean of")
2165        || lower.contains("median of")
2166        || lower.contains("average of")
2167        || lower.contains("variance")
2168        || lower.contains("regression")
2169        || lower.contains("correlation");
2170    let date_math = (lower.contains("how many days")
2171        || lower.contains("days between")
2172        || lower.contains("days until")
2173        || lower.contains("days since")
2174        || lower.contains("unix timestamp")
2175        || lower.contains("epoch")
2176        || lower.contains("time zone")
2177        || lower.contains("timezone"))
2178        && (lower.contains("date")
2179            || lower.contains("day")
2180            || lower.contains("timestamp")
2181            || lower.contains("time"));
2182    let algorithmic = lower.contains("is prime")
2183        || lower.contains("prime number")
2184        || lower.contains("factori")
2185        || lower.contains("fibonacci")
2186        || lower.contains("factorial")
2187        || lower.contains("sort this")
2188        || lower.contains("verify this algorithm")
2189        || lower.contains("run this code")
2190        || lower.contains("execute this");
2191    let unit_conversion = (lower.contains("convert") || lower.contains("how many"))
2192        && (lower.contains(" bytes")
2193            || lower.contains(" kb")
2194            || lower.contains(" mb")
2195            || lower.contains(" gb")
2196            || lower.contains(" tb")
2197            || lower.contains("gigabyte")
2198            || lower.contains("megabyte")
2199            || lower.contains("celsius")
2200            || lower.contains("fahrenheit")
2201            || lower.contains("kelvin")
2202            || lower.contains("kilometers")
2203            || lower.contains("miles")
2204            || lower.contains("pounds")
2205            || lower.contains("kilograms"));
2206    hash_or_checksum || financial || statistics || date_math || algorithmic || unit_conversion
2207}
2208
2209#[cfg(test)]
2210mod tests {
2211    use super::*;
2212
2213    #[test]
2214    fn classify_query_intent_routes_creator_questions_to_about() {
2215        let intent = classify_query_intent(WorkflowMode::Auto, "Who created Hematite?");
2216        assert_eq!(intent.direct_answer, Some(DirectAnswerKind::About));
2217
2218        let intent = classify_query_intent(WorkflowMode::Auto, "/about");
2219        assert_eq!(intent.direct_answer, Some(DirectAnswerKind::About));
2220    }
2221
2222    #[test]
2223    fn classify_query_intent_marks_maintainer_workflow_requests() {
2224        let intent = classify_query_intent(
2225            WorkflowMode::Auto,
2226            "Run my cleanup scripts and prune old artifacts.",
2227        );
2228        assert!(intent.maintainer_workflow_mode);
2229        assert_eq!(
2230            preferred_maintainer_workflow("Rebuild the local portable and update PATH."),
2231            Some("package_windows")
2232        );
2233        assert_eq!(
2234            preferred_maintainer_workflow("Run the release flow and publish crates."),
2235            Some("release")
2236        );
2237    }
2238
2239    #[test]
2240    fn classify_query_intent_marks_workspace_workflow_requests() {
2241        let intent = classify_query_intent(WorkflowMode::Auto, "Run the tests in this project.");
2242        assert!(intent.workspace_workflow_mode);
2243        assert_eq!(
2244            preferred_workspace_workflow("Run the tests in this project."),
2245            Some("test")
2246        );
2247        assert_eq!(
2248            preferred_workspace_workflow("Run npm run dev in this repo."),
2249            Some("script")
2250        );
2251    }
2252}