feat: Permission system for client tool calls

.gitignore

@@ -13,3 +13,5 @@ ui/backend/target
 ui/backend/gen
 
 sqlite-server.db*
+
+.atuin/permissions.*.toml

Cargo.toml

@@ -1,5 +1,9 @@
 [workspace]
-members = ["crates/*", "crates/atuin-nucleo/matcher", "crates/atuin-nucleo/bench"]
+members = [
+  "crates/*",
+  "crates/atuin-nucleo/matcher",
+  "crates/atuin-nucleo/bench",
+]
 
 resolver = "2"
 exclude = ["ui/backend", "crates/atuin-nucleo/matcher/fuzz"]
@@ -65,6 +69,7 @@ rustls = { version = "0.23", default-features = false, features = [
   "std",
   "tls12",
 ] }
+regex = "1.10.5"
 
 [workspace.dependencies.tracing-subscriber]
 version = "0.3"

crates/atuin-ai/Cargo.toml

@@ -39,9 +39,17 @@ async-stream = "0.3"
 uuid = { workspace = true }
 tui-textarea-2 = "0.10.2"
 unicode-width = "0.2"
-eye_declare = "0.3"
+eye_declare = { path = "../../../eye_declare/crates/eye_declare" }
 ratatui-core = "0.1"
 ratatui-widgets = "0.3"
+thiserror = { workspace = true }
+regex = { workspace = true }
+time = { workspace = true }
+toml = "1.1"
+tree-sitter = "0.26.8"
+tree-sitter-bash = "0.25.1"
+tree-sitter-fish = "3.6.0"
+typed-builder = { workspace = true }
 
 [dev-dependencies]
 pretty_assertions = { workspace = true }

crates/atuin-ai/src/commands.rs

@@ -9,10 +9,10 @@ use eyre::Result;
 use tracing_appender::rolling::{RollingFileAppender, Rotation};
 use tracing_subscriber::{EnvFilter, Layer, fmt, layer::SubscriberExt, util::SubscriberInitExt};
 pub mod init;
-pub mod inline;
+pub(crate) mod inline;
 
 #[derive(Args, Debug)]
-pub struct AiArgs {
+pub(crate) struct AiArgs {
     /// Enable verbose logging
     #[arg(short, long, global = true)]
     verbose: bool,
@@ -71,7 +71,7 @@ pub async fn run(
     }
 }
 
-pub fn detect_shell() -> Option<String> {
+pub(crate) fn detect_shell() -> Option<String> {
     Some(Shell::current().to_string())
 }
 

crates/atuin-ai/src/commands/init.rs

@@ -1,6 +1,6 @@
 use crate::commands::detect_shell;
 
-pub async fn run(shell: String) -> eyre::Result<()> {
+pub(crate) async fn run(shell: String) -> eyre::Result<()> {
     let integration = match shell.as_str() {
         "zsh" => generate_zsh_integration(),
         "bash" => generate_bash_integration(),