fix(ai): improve assistant execution and MCP settings

src-tauri/src/commands/ai.rs

@@ -86,6 +86,7 @@ pub async fn ai_agent_stream(
     database: String,
     db_type: String,
     mode: Option<String>,
+    allow_write_sql: Option<bool>,
 ) -> Result<String, String> {
     let request = resolve_codex_cli_request(request);
     let cancelled = dbx_core::ai::register_stream(&session_id).await;
@@ -104,6 +105,11 @@ pub async fn ai_agent_stream(
         database,
         db_type: parsed_db_type,
         cli_mcp_server_command,
+        // Explicit confirmation grants write access only to this agent run.
+        sql_permissions: dbx_core::agent_tools::AgentSqlPermissions {
+            allow_writes: allow_write_sql.unwrap_or(false),
+            allow_dangerous: allow_write_sql.unwrap_or(false),
+        },
     };
     let is_agent_mode = mode.as_deref() == Some("agent");