fix(computer-use): read the permission group with the lightweight query hook

usePermissionConfig pulls the block and provider registries into the Desktop
settings bundle; the settings gate only needs the user's resolved config.

Author: waleedlatif1

apps/sim/app/workspace/[workspaceId]/settings/components/desktop/computer-use.test.tsx

@@ -20,10 +20,17 @@ const native = vi.hoisted(() => ({
   cancel: vi.fn<() => Promise<void>>(),
   onActivity: vi.fn<(listener: (activity: ComputerUseActivity | null) => void) => () => void>(),
 }))
-const permission = vi.hoisted(() => ({ config: {} as Record<string, unknown>, ready: true }))
-vi.mock('@/hooks/use-permission-config', () => ({
-  usePermissionConfig: () => ({ config: permission.config, isPermissionReady: permission.ready }),
+const permission = vi.hoisted(() => ({
+  config: null as Record<string, unknown> | null,
+  ready: true,
 }))
+vi.mock('@/ee/access-control/hooks/permission-groups', () => ({
+  useUserPermissionConfig: () =>
+    permission.ready
+      ? { isSuccess: true, data: { config: permission.config } }
+      : { isSuccess: false, data: undefined },
+}))
+vi.mock('next/navigation', () => ({ useParams: () => ({ workspaceId: 'ws-1' }) }))
 vi.mock('@/lib/desktop', () => libDesktopMock)
 
 const initialPermissions = [
@@ -37,7 +44,7 @@ let root: Root
 let container: HTMLDivElement
 
 beforeEach(() => {
-  permission.config = { ...DEFAULT_PERMISSION_GROUP_CONFIG }
+  permission.config = null
   permission.ready = true
   permissions = [...initialPermissions]
   activity = null

apps/sim/app/workspace/[workspaceId]/settings/components/desktop/computer-use.tsx

@@ -3,12 +3,13 @@
 import { useCallback, useEffect, useRef, useState } from 'react'
 import type { ComputerUseAppPermission } from '@sim/desktop-bridge'
 import { Chip, ChipSwitch, Label, toast } from '@sim/emcn'
+import { useParams } from 'next/navigation'
 import { ComputerUseActivity } from '@/components/computer-use/activity'
 import { getDesktopBridge } from '@/lib/desktop'
 import { CAPABILITY_RULES } from '@/lib/permission-groups/capabilities'
 import { SettingsSection } from '@/app/workspace/[workspaceId]/settings/components/settings-section/settings-section'
+import { useUserPermissionConfig } from '@/ee/access-control/hooks/permission-groups'
 import { useComputerUseStatus } from '@/hooks/use-computer-use-status'
-import { usePermissionConfig } from '@/hooks/use-permission-config'
 
 export function ComputerUseSettings() {
   return (
@@ -22,7 +23,8 @@ export function ComputerUseSettings() {
 function ComputerUseSettingsControls() {
   const requestVersion = useRef(0)
   const bridge = getDesktopBridge()?.computerUse
-  const { config: permissionConfig, isPermissionReady } = usePermissionConfig()
+  const { workspaceId } = useParams<{ workspaceId: string }>()
+  const permission = useUserPermissionConfig(workspaceId)
   const { status, setStatus, refresh, error } = useComputerUseStatus()
   const [apps, setApps] = useState<ComputerUseAppPermission[]>([])
   const [pending, setPending] = useState(false)
@@ -44,8 +46,9 @@ function ComputerUseSettingsControls() {
   }, [refreshApps, status?.activeAction])
   if (
     !bridge ||
-    !isPermissionReady ||
-    CAPABILITY_RULES['computer_use.use'].deniedBy(permissionConfig) ||
+    !permission.isSuccess ||
+    (permission.data.config !== null &&
+      CAPABILITY_RULES['computer_use.use'].deniedBy(permission.data.config)) ||
     status?.supported === false
   )
     return null

apps/sim/app/workspace/[workspaceId]/settings/components/desktop/desktop.test.tsx

@@ -8,9 +8,15 @@ import { nextNavigationMock } from '@sim/testing/mocks/next-navigation.mock'
 import { createRoot, type Root } from 'react-dom/client'
 import { afterEach, describe, expect, it, vi } from 'vitest'
 
-const permission = vi.hoisted(() => ({ config: {} as Record<string, unknown> }))
-vi.mock('@/hooks/use-permission-config', () => ({
-  usePermissionConfig: () => ({ config: permission.config }),
+const permission = vi.hoisted(() => ({
+  config: null as Record<string, unknown> | null,
+  ready: true,
+}))
+vi.mock('@/ee/access-control/hooks/permission-groups', () => ({
+  useUserPermissionConfig: () =>
+    permission.ready
+      ? { isSuccess: true, data: { config: permission.config } }
+      : { isSuccess: false, data: undefined },
 }))
 vi.mock('@sim/emcn', () => ({
   ...emcnMock,