Skip to content
Odyssey Wire OW markOWOdysseyWire

Tracing AI through its unexpected turns.

Datasette Apps 0.3a0: Agents now manage stored query permissions with full-screen viewing support
AI software

Datasette Apps 0.3a0: Agents now manage stored query permissions with full-screen viewing support

Simon Willison reports that Datasette Apps 0.3a0 adds permission checks for stored queries and full-screen viewing within the Datasette Agent interface.

Depth
1 outlet · newest source 277h ago

Key points

  • Version 0.3a0 introduces approval steps for write queries before app creation.
  • New tools allow agents to manage which stored queries an app can call.
  • Apps now open in full screen within the Datasette Agent panel.

Simon Willison reported on 4 November 2026 that Datasette Apps version 0.3a0 has been released. This update focuses on tightening how custom HTML applications interact with stored queries inside the Datasette environment, particularly when those apps are generated using large language models via Datasette Agent.This update adds safety checks so AI agents must ask permission before changing data.The 0.3a0 release implements runtime validation for stored query existence and permission scopes.

Evidence: reporteddatasette-apps 0.3a0

aifleet-willison

The claim

The release notes state that the new version improves integration between Datasette Apps and Datasette Agent. Users can now tag existing apps in chat messages using a hash symbol, which triggers autocomplete for apps they have permission to view. This feature aims to streamline how users reference and manage their custom applications during agent interactions.

The response

The update introduces new tools, specifically app_add_stored_queries() and app_remove_stored_queries(), which let the agent manage the specific stored queries an app is allowed to execute. Crucially, granting permission for any write query requires explicit approval from the user before the agent can proceed, adding a layer of security to automated app creation.

What the evidence means

The app_create() function now validates that every requested stored query actually exists and that the user has viewing rights for it. It also pauses to ask for user approval for any write queries before the app is finalized. This suggests a shift toward stricter permission handling in automated workflows, reducing the risk of unintended data modifications by agents.

In practice

Enterprise IT buyers should note that the "View app" buttons and links to app references now open the application in full screen within the Datasette Agent panel. This change alters the user interface for reviewing agent-generated code. Access remains gated by user permissions, and availability is tied to the 0.3a0 release. No broader system changes are documented.

Evidence: reporteddatasette-apps 0.3a0

aifleet-willison

Why it matters

  • The mandatory approval for write queries reduces the risk of accidental data corruption by autonomous agents.
  • Full-screen viewing within the agent panel may improve usability for debugging complex HTML applications.
  • Permission checks during app creation ensure agents cannot reference non-existent or restricted queries.
  • Autocomplete for app tags speeds up workflow for users managing multiple custom applications.

Topics: datasette, datasette-agent, datasette-apps, llm-tools, ai-security

Updated

Then / now / next

Then

Datasette Apps allowed agent-generated HTML apps with less granular query control.

Now

Version 0.3a0 enforces existence checks and user approval for write queries.

Next

Watch for future updates that might expand these permission controls to other agent tools.

Story timeline

  1. Then Datasette Apps allowed agent-generated HTML apps with less granular query control.
  2. 04 Nov 2026 datasette-apps 0.3a0
  3. Now Version 0.3a0 enforces existence checks and user approval for write queries.
  4. Next Watch for future updates that might expand these permission controls to other agent tools.

The strongest doubt

Counterpoint from the sources

The material does not discuss potential performance impacts of these additional approval steps.

For readers

Developers

  • New tools allow managing which stored queries an app can call.
  • Full-screen viewing changes how apps are reviewed in the agent panel.

Business

  • Approval steps for write queries add a security layer to automated workflows.
  • Permission checks prevent agents from accessing restricted data.

Policy

  • Explicit user approval requirements align with stricter data governance standards.

Try it

Create an app with a write query

Good result: The agent will pause and request user approval before creating the app.

Ask the article

Local keyword search of this article; no generated answers.

Did this article give you the evidence you needed?

No vote saved on this device.
Your choice stays on this device. No public tally.

Terms in this story

Datasette Apps

A feature allowing hosting and editing of custom HTML applications inside Datasette.

Datasette Agent

An AI assistant that helps create and manage apps using large language models.

Stored queries

Pre-defined database queries that apps can call to retrieve or modify data.

Write query

A database query that modifies or adds data, requiring explicit user approval.

Questions readers ask

Does this release require user approval for read-only queries?

The material states that approval is required for write queries, but does not specify requirements for read-only queries.

Can agents still create apps without user intervention?

Agents can create apps, but they must pause for user approval if any write queries are involved.

Is the full-screen view available for all apps?

The full-screen view is available for apps referenced in the Datasette Agent panel, based on user permissions.

Reading receipt

  • Version 0.3a0 introduces approval steps for write queries before app creation.
  • New tools allow agents to manage which stored queries an app can call.
  • Apps now open in full screen within the Datasette Agent panel.
Time spent: 0:00 · Depth: Full

Sources

  1. Simon Willison AI

Related stories

Background reading