datasette-agent 0.3a0 introduces execute_write_sql to prompt for user approval and apply DB permissions, plus chat CLI approval flags.