feat(agent): Integrate user group tool permissions into permissions view

Add uai-user-group-tool-permissions component to agent permissions
workspace view with change handler for managing user group-specific
permission overrides.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: mattbrailsford

Umbraco.AI.Agent/src/Umbraco.AI.Agent.Web.StaticAssets/Client/src/agent/components/exports.ts

@@ -1 +1,2 @@
 export type { UaiAgentScopePickerElement } from "./agent-scope-picker/agent-scope-picker.element.js";
+export { UaiUserGroupToolPermissionsElement } from "./user-group-tool-permissions/user-group-tool-permissions.element.js";

Umbraco.AI.Agent/src/Umbraco.AI.Agent.Web.StaticAssets/Client/src/agent/manifests.ts

@@ -1,6 +1,7 @@
 import { agentCollectionManifests } from "./collection/manifests.js";
 import { agentEntityActionManifests } from "./entity-actions/manifests.js";
 import { agentMenuManifests } from "./menu/manifests.js";
+import { agentModalManifests } from "./modals/manifests.js";
 import { agentRepositoryManifests } from "./repository/manifests.js";
 import { agentWorkspaceManifests } from "./workspace/manifests.js";
 
@@ -10,6 +11,7 @@ export const agentManifests = [
     ...agentCollectionManifests,
     ...agentEntityActionManifests,
     ...agentMenuManifests,
+    ...agentModalManifests,
     ...agentRepositoryManifests,
     ...agentWorkspaceManifests,
 ];

Umbraco.AI.Agent/src/Umbraco.AI.Agent.Web.StaticAssets/Client/src/agent/modals/manifests.ts

@@ -0,0 +1,12 @@
+import type { ManifestModal } from "@umbraco-cms/backoffice/extension-registry";
+
+const modals: Array<ManifestModal> = [
+	{
+		type: "modal",
+		alias: "Uai.Modal.ToolPermissionsOverrideEditor",
+		name: "Tool Permissions Override Editor Modal",
+		js: () => import("./tool-permissions-override-editor/tool-permissions-override-editor-modal.element.js"),
+	},
+];
+
+export const agentModalManifests = [...modals];

Umbraco.AI.Agent/src/Umbraco.AI.Agent.Web.StaticAssets/Client/src/agent/workspace/agent/views/agent-permissions-workspace-view.element.ts

@@ -69,6 +69,17 @@ export class UaiAgentPermissionsWorkspaceViewElement extends UmbLitElement {
         );
     }
 
+    #onUserGroupPermissionsChange(event: UmbChangeEvent) {
+        event.stopPropagation();
+        const component = event.target as any;
+        this.#workspaceContext?.handleCommand(
+            new UaiPartialUpdateCommand<UaiAgentDetailModel>(
+                { userGroupPermissions: component.value },
+                "userGroupPermissions"
+            )
+        );
+    }
+
     render() {
         if (!this._model) return html`<uui-loader></uui-loader>`;
 
@@ -96,6 +107,14 @@ export class UaiAgentPermissionsWorkspaceViewElement extends UmbLitElement {
                         @change=${this.#onAllowedToolIdsChange}
                     ></uai-tool-picker>
                 </umb-property-layout>
+                <uai-user-group-tool-permissions
+                    .value=${this._model.userGroupPermissions}
+                    .agentDefaults=${{
+                        allowedToolIds: this._model.allowedToolIds,
+                        allowedToolScopeIds: this._model.allowedToolScopeIds
+                    }}
+                    @change=${this.#onUserGroupPermissionsChange}
+                ></uai-user-group-tool-permissions>
             </uui-box>
         `;
     }