fix(mongodb): guard aggregate execution paths

src-tauri/src/commands/connection.rs

@@ -143,6 +143,7 @@ mod tests {
             ssh_key_passphrase: String::new(),
             ssh_expose_lan: false,
             ssh_connect_timeout_secs: dbx_core::models::connection::default_ssh_connect_timeout_secs(),
+            connect_timeout_secs: dbx_core::models::connection::default_connect_timeout_secs(),
             query_timeout_secs: dbx_core::models::connection::default_query_timeout_secs(),
             proxy_enabled: false,
             proxy_type: ProxyType::Socks5,

src-tauri/src/commands/mcp_bridge.rs

@@ -22,6 +22,8 @@ struct ExecuteQueryRequest {
     database: Option<String>,
     sql: String,
     schema: Option<String>,
+    allow_writes: Option<bool>,
+    allow_dangerous: Option<bool>,
 }
 
 #[derive(Deserialize)]
@@ -56,6 +58,7 @@ struct MongoAggregateDocumentsRequest {
     database: Option<String>,
     collection: String,
     pipeline_json: String,
+    max_rows: Option<usize>,
 }
 
 #[derive(Deserialize)]
@@ -98,6 +101,8 @@ pub struct McpExecuteQueryEvent {
     pub connection_id: String,
     pub database: String,
     pub sql: String,
+    pub allow_writes: bool,
+    pub allow_dangerous: bool,
 }
 
 pub fn start(app_handle: AppHandle, state: Arc<AppState>) {
@@ -282,6 +287,8 @@ async fn handle_execute_query(app: &AppHandle, state: &Arc<AppState>, body: &str
         connection_id: config.id.clone(),
         database: req.database.unwrap_or_else(|| config.database.clone().unwrap_or_default()),
         sql: req.sql,
+        allow_writes: req.allow_writes.unwrap_or(false),
+        allow_dangerous: req.allow_dangerous.unwrap_or(false),
     };
     let _ = app.emit("mcp-execute-query", &event);
     respond(stream, "200 OK", "ok").await;
@@ -398,6 +405,7 @@ async fn handle_mongo_aggregate_documents_data(state: &Arc<AppState>, body: &str
         &database,
         &req.collection,
         &req.pipeline_json,
+        req.max_rows,
     )
     .await
     {

src-tauri/src/commands/mongo_cmd.rs

@@ -52,9 +52,17 @@ pub async fn mongo_aggregate_documents(
     database: String,
     collection: String,
     pipeline_json: String,
+    max_rows: Option<usize>,
 ) -> Result<MongoDocumentResult, String> {
-    dbx_core::mongo_ops::mongo_aggregate_documents_core(&state, &connection_id, &database, &collection, &pipeline_json)
-        .await
+    dbx_core::mongo_ops::mongo_aggregate_documents_core(
+        &state,
+        &connection_id,
+        &database,
+        &collection,
+        &pipeline_json,
+        max_rows,
+    )
+    .await
 }
 
 #[tauri::command]