Class AIAgentPermissionHelper

Clears the AIEngineBase cache. Useful when permissions have been modified. This forces a reload of all cached metadata including permissions.

Narrows agents to the ones user may run: the 'run' permission, and Active only unless includeInactive. Keeps the input order.

This is the filter the Find Best Agent / Find Candidate Agents actions apply to their search results, and the one agent decision discovery applies to the whole catalog, so both offer the same agents.

Gets all agents that a user has access to with a specific permission level. Uses cached metadata from AIEngineBase instead of querying database.

Gets the aggregate permissions for a user on a specific agent. Implements hierarchical permission logic:

• Delete implies Edit, Run, and View
• Edit implies Run and View
• Run implies View

Default behavior when no permission records exist:

• Anyone can View and Run (open by default)
• Only owner can Edit and Delete

Checks ownership first, then combines all matching user and role permissions.

Checks if a user has a specific permission for an agent.

Whether an agent is meant to be found and delegated to directly. Sub-Agents and child agents are meant to be called by other agents, not discovered directly, so an agent whose InvocationMode is 'Sub-Agent', or that has a ParentID, is not.

Refreshes the AIEngineBase cache to pick up permission changes.