@arbidocs/blocks 0.5.22 → 0.5.23

package/dist/connect/index.cjs

@@ -56,7 +56,7 @@ var chunk2EI7NCUA_cjs = require('../chunk-2EI7NCUA.cjs');
 require('../chunk-QW3SVHGM.cjs');
 var chunkLKK52DEY_cjs = require('../chunk-LKK52DEY.cjs');
 var chunkQVBZESYQ_cjs = require('../chunk-QVBZESYQ.cjs');
-var chunkK237IYOD_cjs = require('../chunk-K237IYOD.cjs');
+var chunkBYJUI4AT_cjs = require('../chunk-BYJUI4AT.cjs');
 var chunkCG757WKY_cjs = require('../chunk-CG757WKY.cjs');
 var chunkW3PSIIMN_cjs = require('../chunk-W3PSIIMN.cjs');
 var chunkQUMUAJ2P_cjs = require('../chunk-QUMUAJ2P.cjs');
@@ -7685,7 +7685,7 @@ var NO_SSO = {
 };
 function useAuthPages() {
   const auth = chunkMB3S2ETI_cjs.useHost().auth;
-  return { ...auth, passwordRules: auth?.passwordRules ?? chunkK237IYOD_cjs.DEFAULT_PASSWORD_RULES };
+  return { ...auth, passwordRules: auth?.passwordRules ?? chunkBYJUI4AT_cjs.DEFAULT_PASSWORD_RULES };
 }
 function useSsoSignIn() {
   const sso = chunkMB3S2ETI_cjs.useHost().sso;
@@ -8144,7 +8144,7 @@ function ConnectedSsoDisconnect() {
             /* @__PURE__ */ jsxRuntime.jsx(ui.DialogDescription, { children: "Sign in with your email and master password instead. Your data stays unchanged." })
           ] }),
           /* @__PURE__ */ jsxRuntime.jsxs("form", { className: "space-y-4", onSubmit: submit, children: [
-            step === "email" ? /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthField, { htmlFor: "disconnect-email", label: "Email", children: /* @__PURE__ */ jsxRuntime.jsx(
+            step === "email" ? /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthField, { htmlFor: "disconnect-email", label: "Email", children: /* @__PURE__ */ jsxRuntime.jsx(
               ui.Input,
               {
                 id: "disconnect-email",
@@ -8156,7 +8156,7 @@ function ConnectedSsoDisconnect() {
                 disabled: busy
               }
             ) }) : /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
-              changedEmail && /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthField, { htmlFor: "disconnect-code", label: `Verification code sent to ${email}`, children: /* @__PURE__ */ jsxRuntime.jsx(
+              changedEmail && /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthField, { htmlFor: "disconnect-code", label: `Verification code sent to ${email}`, children: /* @__PURE__ */ jsxRuntime.jsx(
                 ui.Input,
                 {
                   id: "disconnect-code",
@@ -8167,7 +8167,7 @@ function ConnectedSsoDisconnect() {
                   disabled: busy
                 }
               ) }),
-              /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthField, { htmlFor: "disconnect-password", label: "Master password", children: /* @__PURE__ */ jsxRuntime.jsx(
+              /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthField, { htmlFor: "disconnect-password", label: "Master password", children: /* @__PURE__ */ jsxRuntime.jsx(
                 ui.Input,
                 {
                   id: "disconnect-password",
@@ -8191,6 +8191,32 @@ function ConnectedSsoDisconnect() {
     )
   ] });
 }
+function ConnectedBoxPortalSection() {
+  const { isBoxAdmin } = react.useBoxRole();
+  const { licenceUrl } = chunk2QQUGL2V_cjs.useBlocksEnvironment().runtimeConfig;
+  if (!isBoxAdmin || !licenceUrl) return null;
+  return /* @__PURE__ */ jsxRuntime.jsx(chunkIRY63R4L_cjs.SettingsSection, { icon: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Building2, {}), title: "Box", testId: "box-portal-section", children: /* @__PURE__ */ jsxRuntime.jsx(chunkIRY63R4L_cjs.SettingsCard, { children: /* @__PURE__ */ jsxRuntime.jsx(
+    chunkIRY63R4L_cjs.SettingsRow,
+    {
+      label: "Manage your Box in the ARBI portal",
+      description: "Users, storage, AI usage and billing.",
+      children: /* @__PURE__ */ jsxRuntime.jsxs(
+        "a",
+        {
+          href: licenceUrl,
+          target: "_blank",
+          rel: "noopener noreferrer",
+          className: "inline-flex shrink-0 items-center gap-1.5 self-start rounded-md border border-input bg-background px-3 py-1.5 text-sm font-medium text-foreground hover:bg-muted focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring pointer-coarse:min-h-11",
+          "data-testid": "box-portal-link",
+          children: [
+            "Open portal",
+            /* @__PURE__ */ jsxRuntime.jsx(lucideReact.ExternalLink, { className: "size-3.5", "aria-hidden": true })
+          ]
+        }
+      )
+    }
+  ) }) });
+}
 function ServerConnectionRow({ onRefresh, ...status }) {
   const { runtimeConfig } = chunk2QQUGL2V_cjs.useBlocksEnvironment();
   const [isRefreshing, setIsRefreshing] = React7.useState(false);
@@ -8229,6 +8255,7 @@ function ConnectedAccountSettings({
   const [logoutOpen, setLogoutOpen] = React7.useState(false);
   return /* @__PURE__ */ jsxRuntime.jsxs(chunkIRY63R4L_cjs.SettingsPanel, { className: "max-w-2xl", children: [
     /* @__PURE__ */ jsxRuntime.jsx(ConnectedProfileCard, { avatarClassName, nameBadge: profileBadge }),
+    /* @__PURE__ */ jsxRuntime.jsx(ConnectedBoxPortalSection, {}),
     afterProfile,
     /* @__PURE__ */ jsxRuntime.jsxs(chunkIRY63R4L_cjs.SettingsDisclosure, { title: "More", testId: "account-more-settings", children: [
       /* @__PURE__ */ jsxRuntime.jsx(ConnectedSsoDisconnect, {}),
@@ -11287,6 +11314,46 @@ function ConnectedDriveSyncDialog({
     }
   );
 }
+function ConnectedSharePointAdminConsentPage({
+  result: givenResult
+} = {}) {
+  const queryResult = React7.useMemo(() => new URLSearchParams(window.location.search).get("result"), []);
+  const result = givenResult === void 0 ? queryResult : givenResult;
+  const { apiBaseUrl } = chunk2QQUGL2V_cjs.useBlocksEnvironment().runtimeConfig;
+  const consentUrl = `${apiBaseUrl}/v1/connectors/microsoft_sharepoint/admin-consent`;
+  return /* @__PURE__ */ jsxRuntime.jsx(chunkS4G3DNMA_cjs.ConsentPage, { children: /* @__PURE__ */ jsxRuntime.jsxs(chunkS4G3DNMA_cjs.ConsentCard, { size: "md", children: [
+    /* @__PURE__ */ jsxRuntime.jsx(
+      chunkS4G3DNMA_cjs.ConsentHeader,
+      {
+        icon: /* @__PURE__ */ jsxRuntime.jsx(chunkEWWVKXEQ_cjs.VendorLogo, { vendorKey: "microsoft_sharepoint", product: "sharepoint" }),
+        title: "Approve ARBI for SharePoint access",
+        children: "A member of your organization uses ARBI and wants to sync documents from SharePoint. Your Microsoft 365 organization requires an administrator to approve this once for the whole organization."
+      }
+    ),
+    result === "granted" && /* @__PURE__ */ jsxRuntime.jsx(chunkS4G3DNMA_cjs.ConsentNotice, { tone: "success", title: "Access approved \u2014 you\u2019re all set.", className: "mt-4", children: "People in your organization can now connect SharePoint from their own ARBI account. Nothing is synced until each user connects and chooses what to import." }),
+    result === "declined" && /* @__PURE__ */ jsxRuntime.jsx(chunkS4G3DNMA_cjs.ConsentNotice, { tone: "warning", title: "The approval didn\u2019t complete.", className: "mt-4", children: "The request was declined or canceled on the Microsoft screen. You can try again below \u2014 you must sign in with a Microsoft 365 administrator account of your organization." }),
+    /* @__PURE__ */ jsxRuntime.jsxs(chunkS4G3DNMA_cjs.ConsentSection, { title: "What you are approving", children: [
+      /* @__PURE__ */ jsxRuntime.jsx(
+        chunkS4G3DNMA_cjs.ConsentBulletList,
+        {
+          items: [
+            /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+              /* @__PURE__ */ jsxRuntime.jsx(chunkS4G3DNMA_cjs.ConsentStrong, { children: "Read SharePoint sites and files" }),
+              " \u2014 lets each user who connects their own account import documents from sites they already have access to. ARBI never gets more access than the user has."
+            ] }),
+            /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
+              /* @__PURE__ */ jsxRuntime.jsx(chunkS4G3DNMA_cjs.ConsentStrong, { children: "Sign users in and keep access" }),
+              " \u2014 standard sign-in (openid, profile, email) and offline access so syncs keep working between sessions."
+            ] })
+          ]
+        }
+      ),
+      /* @__PURE__ */ jsxRuntime.jsx(chunkS4G3DNMA_cjs.ConsentText, { children: "Approving does not sync anything by itself and grants ARBI no standing access to your tenant. Each user still connects their own Microsoft account, and their tokens are end-to-end encrypted so ARBI\u2019s servers cannot read them at rest." }),
+      /* @__PURE__ */ jsxRuntime.jsx(ui.Button, { asChild: true, className: "w-full pointer-coarse:h-11", children: /* @__PURE__ */ jsxRuntime.jsx("a", { href: consentUrl, children: "Review and approve in Microsoft" }) }),
+      /* @__PURE__ */ jsxRuntime.jsx(chunkS4G3DNMA_cjs.ConsentText, { variant: "footnote", children: "You\u2019ll sign in at login.microsoftonline.com and see Microsoft\u2019s own summary of these permissions before anything is granted." })
+    ] })
+  ] }) });
+}
 var focus = null;
 var listeners2 = /* @__PURE__ */ new Set();
 function requestProjectBillingFocus(next) {
@@ -14055,8 +14122,13 @@ function useAutoRefreshPendingProjects() {
 var QUOTA_EXCEEDED_MESSAGE = "This project's AI usage for this month is used up.";
 var BOX_MEMBER_QUOTA_MESSAGE = "AI usage for this month is used up. Ask your Box admin to add more.";
 var BOX_ADMIN_QUOTA_MESSAGE = "AI usage for this month is used up. Add more in the ARBI portal.";
-function ConnectedQuotaDialog({ info, onClose: close, box }) {
-  const { openProject } = chunk2QQUGL2V_cjs.useBlocksEnvironment();
+function ConnectedQuotaDialog({ info, onClose: close }) {
+  const { openProject, runtimeConfig } = chunk2QQUGL2V_cjs.useBlocksEnvironment();
+  const role = react.useBoxRole({ enabled: info !== null });
+  const box = role.isBox ? {
+    isAdmin: role.isBoxAdmin && !!runtimeConfig.licenceUrl,
+    portalUrl: runtimeConfig.licenceUrl
+  } : void 0;
   const { data: projects, refetch: refetchProjects } = react.useProjects();
   const [addAiUsageFor, setAddAiUsageFor] = React7.useState(null);
   const open = info !== null;
@@ -35761,7 +35833,7 @@ function ConnectedForgotPassword({
         setError(null);
       } else {
         setError(
-          chunkK237IYOD_cjs.parseAuthError(err, {
+          chunkBYJUI4AT_cjs.parseAuthError(err, {
             messageMap: { "Incorrect username or password": client.RECOVERY_KEY_ERRORS.AUTH_FAILED },
             defaultMessage: "Failed to authenticate with recovery key. Please check your email and try again."
           })
@@ -35786,7 +35858,7 @@ function ConnectedForgotPassword({
     await sso.signIn({ returnTo: "/recover" });
   };
   return /* @__PURE__ */ jsxRuntime.jsx(
-    chunkK237IYOD_cjs.AccountRecoveryDialog,
+    chunkBYJUI4AT_cjs.AccountRecoveryDialog,
     {
       open,
       onClose: handleClose,
@@ -35812,7 +35884,7 @@ async function backUpOnSignup({
   saveRecoveryKey,
   auth0Sub
 }) {
-  await chunkK237IYOD_cjs.promptSaveCredential(email, password);
+  await chunkBYJUI4AT_cjs.promptSaveCredential(email, password);
   if (!saveRecoveryKey) return;
   try {
     await react.downloadRecoveryFile({ signingPrivateKey, email, auth0Sub });
@@ -35828,6 +35900,7 @@ function useLoginActions({
   formActions
 }) {
   const arbi = react.useArbi();
+  const signInLayer = chunkIWT4QVQL_cjs.useOptionalConnection();
   const sso = useSsoSignIn();
   const { notify: notify17 } = chunk2QQUGL2V_cjs.useBlocksEnvironment();
   const { passwordRules, onRegistered, onUnlockedOffline } = useAuthPages();
@@ -35889,14 +35962,16 @@ function useLoginActions({
   const handleLocalLogin = React7.useCallback(
     async (opts) => {
       arbi.session?.setSsoMode(false);
-      if (!password) {
+      const loginEmail = opts?.credentials?.email ?? email;
+      const loginPassword = opts?.credentials?.password ?? password;
+      if (!loginPassword) {
         notify17("Please fill in all required fields.", "error");
         return;
       }
-      if (!validateEmailWithError(email)) return;
+      if (!validateEmailWithError(loginEmail)) return;
       if (typeof navigator !== "undefined" && !navigator.onLine) {
         try {
-          await arbi.unlock(email, password);
+          await arbi.unlock(loginEmail, loginPassword);
           onUnlockedOffline?.();
         } catch (err) {
           notify17(
@@ -35906,22 +35981,35 @@ function useLoginActions({
         }
         return;
       }
+      if (signInLayer && !signInLayer.apiConfigured) {
+        await signInLayer.login(loginEmail, loginPassword);
+        return;
+      }
       setIsAuthenticating(true);
       try {
-        const login = await arbi.login(email, password);
+        const login = await arbi.login(loginEmail, loginPassword);
         if (opts?.isFreshRegistration) onRegistered?.(login);
       } catch (error) {
         setIsAuthenticating(false);
         console.error("Login error:", error);
         notify17(
-          chunkK237IYOD_cjs.parseAuthError(error, {
+          chunkBYJUI4AT_cjs.parseAuthError(error, {
             messageMap: { "Incorrect username or password": BAD_CREDENTIALS }
           }),
           "error"
         );
       }
     },
-    [arbi, email, password, validateEmailWithError, notify17, onRegistered, onUnlockedOffline]
+    [
+      arbi,
+      signInLayer,
+      email,
+      password,
+      validateEmailWithError,
+      notify17,
+      onRegistered,
+      onUnlockedOffline
+    ]
   );
   const handleRegister = React7.useCallback(
     async (saveRecoveryKey = true) => {
@@ -35954,7 +36042,7 @@ function useLoginActions({
       } catch (error) {
         setIsAuthenticating(false);
         console.error("Registration error:", error);
-        notify17(chunkK237IYOD_cjs.parseAuthError(error), "error");
+        notify17(chunkBYJUI4AT_cjs.parseAuthError(error), "error");
       }
     },
     [
@@ -36012,7 +36100,7 @@ function useLoginForm() {
     };
   }, []);
   React7.useEffect(() => {
-    const { params: hashParams, trailingFragment } = chunkK237IYOD_cjs.splitAuthHash(window.location.hash);
+    const { params: hashParams, trailingFragment } = chunkBYJUI4AT_cjs.splitAuthHash(window.location.hash);
     const errorParam = hashParams.get("error");
     const errorDescriptionParam = hashParams.get("error_description");
     const emailParam = hashParams.get("verify");
@@ -36027,7 +36115,7 @@ function useLoginForm() {
     }
     const nextParam = hashParams.get("next");
     if (nextParam) {
-      onReturnPath?.(chunkK237IYOD_cjs.withTrailingFragment(decodeURIComponent(nextParam), trailingFragment));
+      onReturnPath?.(chunkBYJUI4AT_cjs.withTrailingFragment(decodeURIComponent(nextParam), trailingFragment));
     }
     if (emailParam) {
       setIsRegistering(true);
@@ -36230,6 +36318,7 @@ function ConnectedLoginPage() {
   const auth = useAuthPages();
   const { notify: notify17 } = chunk2QQUGL2V_cjs.useBlocksEnvironment();
   const isSsoOnly = !!auth.ssoOnly;
+  const allowRegistration = auth.allowRegistration ?? true;
   const isOnline = documentTools.useIsOnline();
   const passwordRules = auth.passwordRules;
   useSsoVerificationRedirect();
@@ -36290,13 +36379,21 @@ function ConnectedLoginPage() {
     auth.onIntent?.();
   };
   React7.useEffect(() => {
-    if (!isOnline) setIsRegistering(false);
-  }, [isOnline, setIsRegistering]);
+    if (!isOnline || !allowRegistration) setIsRegistering(false);
+  }, [isOnline, allowRegistration, setIsRegistering]);
+  chunkBYJUI4AT_cjs.useFragmentCredentials({
+    enabled: !!auth.fragmentSignIn,
+    onCredentials: ({ email: linkEmail, password: linkPassword, next }) => {
+      setEmail(linkEmail);
+      if (next) auth.onReturnPath?.(next);
+      void handleLocalLogin({ credentials: { email: linkEmail, password: linkPassword } });
+    }
+  });
   const autoRequestFiredRef = React7.useRef(false);
   const emailInputRef = React7.useRef(null);
   React7.useEffect(() => {
     if (!pendingAutoRequest || autoRequestFiredRef.current) return;
-    if (isSsoOnly || !isOnline) return;
+    if (isSsoOnly || !isOnline || !allowRegistration) return;
     autoRequestFiredRef.current = true;
     setPendingAutoRequest(false);
     void handleRequestVerificationCode();
@@ -36304,6 +36401,7 @@ function ConnectedLoginPage() {
     pendingAutoRequest,
     isSsoOnly,
     isOnline,
+    allowRegistration,
     setPendingAutoRequest,
     handleRequestVerificationCode
   ]);
@@ -36373,9 +36471,9 @@ function ConnectedLoginPage() {
       handleLocalLogin();
     }
   };
-  const offlineIndicator = /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthOfflineBadge, { title: "No connection \u2014 sign in to unlock your offline files on this device" });
+  const offlineIndicator = /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthOfflineBadge, { title: "No connection \u2014 sign in to unlock your offline files on this device" });
   const loginRegisterToggle = /* @__PURE__ */ jsxRuntime.jsx(
-    chunkK237IYOD_cjs.AuthTabs,
+    chunkBYJUI4AT_cjs.AuthTabs,
     {
       ariaLabel: "Login or register",
       value: isRegistering ? "register" : "login",
@@ -36389,16 +36487,22 @@ function ConnectedLoginPage() {
   const aside = isSsoOnly ? void 0 : auth.aside;
   const isStepTwo = isRegistering && verificationSent && showVerificationForm;
   return /* @__PURE__ */ jsxRuntime.jsxs(
-    chunkK237IYOD_cjs.AuthLayout,
+    chunkBYJUI4AT_cjs.AuthLayout,
     {
       brand: auth.brand,
       corner: auth.corner,
-      headerRight: !isSsoOnly ? isOnline ? loginRegisterToggle : offlineIndicator : void 0,
+      headerRight: isSsoOnly ? void 0 : !isOnline ? offlineIndicator : allowRegistration ? loginRegisterToggle : void 0,
       aside,
       children: [
         auth.banner,
         !isSsoOnly && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
-          /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthHeading, { title: isRegistering ? "Create your account" : "Welcome back" }),
+          /* @__PURE__ */ jsxRuntime.jsx(
+            chunkBYJUI4AT_cjs.AuthHeading,
+            {
+              title: isRegistering ? "Create your account" : auth.heading?.title ?? "Welcome back",
+              description: isRegistering ? void 0 : auth.heading?.description
+            }
+          ),
           /* @__PURE__ */ jsxRuntime.jsxs("div", { "data-testid": "login-form-container", children: [
             /* @__PURE__ */ jsxRuntime.jsxs(
               "form",
@@ -36410,17 +36514,17 @@ function ConnectedLoginPage() {
                 "aria-busy": isAuthenticating,
                 children: [
                   /* @__PURE__ */ jsxRuntime.jsx(
-                    chunkK237IYOD_cjs.AuthField,
+                    chunkBYJUI4AT_cjs.AuthField,
                     {
                       htmlFor: "email",
-                      label: "Email",
+                      label: isRegistering ? "Email" : auth.emailLabel ?? "Email",
                       required: true,
-                      labelAction: isRegistering && verificationSent ? /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthLink, { onClick: clearForm, "data-testid": "clear-button", children: "Clear form" }) : void 0,
+                      labelAction: isRegistering && verificationSent ? /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthLink, { onClick: clearForm, "data-testid": "clear-button", children: "Clear form" }) : void 0,
                       trailing: (
                         // Shown once the address is locked in with a code in hand — i.e. the emailed
                         // link, or a code typed in. The server checks the code when the account is made.
                         showVerifiedBadge ? /* @__PURE__ */ jsxRuntime.jsx(
-                          chunkK237IYOD_cjs.AuthFieldBadge,
+                          chunkBYJUI4AT_cjs.AuthFieldBadge,
                           {
                             testId: "email-verified-badge",
                             icon: /* @__PURE__ */ jsxRuntime.jsx(lucideReact.BadgeCheck, { className: "h-4 w-4", "aria-hidden": "true" }),
@@ -36429,7 +36533,7 @@ function ConnectedLoginPage() {
                         ) : void 0
                       ),
                       children: /* @__PURE__ */ jsxRuntime.jsx(
-                        chunkK237IYOD_cjs.AuthInput,
+                        chunkBYJUI4AT_cjs.AuthInput,
                         {
                           ref: emailInputRef,
                           type: "email",
@@ -36461,7 +36565,7 @@ function ConnectedLoginPage() {
                       }
                     ),
                     /* @__PURE__ */ jsxRuntime.jsx(
-                      chunkK237IYOD_cjs.AuthLink,
+                      chunkBYJUI4AT_cjs.AuthLink,
                       {
                         onClick: () => {
                           if (!email) {
@@ -36483,9 +36587,9 @@ function ConnectedLoginPage() {
                     )
                   ] }),
                   isRegistering && verificationSent && !showVerificationForm && /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "space-y-2 pt-1", "data-testid": "verification-sent-notice", children: [
-                    /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthNote, { children: "We've sent a link to your email \u2014 click it to continue." }),
+                    /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthNote, { children: "We've sent a link to your email \u2014 click it to continue." }),
                     /* @__PURE__ */ jsxRuntime.jsx(
-                      chunkK237IYOD_cjs.AuthLink,
+                      chunkBYJUI4AT_cjs.AuthLink,
                       {
                         onClick: () => setShowVerificationForm(true),
                         className: "w-full text-center",
@@ -36495,8 +36599,8 @@ function ConnectedLoginPage() {
                     )
                   ] }),
                   isStepTwo && /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
-                    !showVerifiedBadge && /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthField, { htmlFor: "verificationCode", label: "Verification Code", required: true, children: /* @__PURE__ */ jsxRuntime.jsx(
-                      chunkK237IYOD_cjs.AuthInput,
+                    !showVerifiedBadge && /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthField, { htmlFor: "verificationCode", label: "Verification Code", required: true, children: /* @__PURE__ */ jsxRuntime.jsx(
+                      chunkBYJUI4AT_cjs.AuthInput,
                       {
                         type: "text",
                         placeholder: "THREE-WORD-CODE",
@@ -36514,8 +36618,8 @@ function ConnectedLoginPage() {
                       }
                     ) }),
                     /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "grid grid-cols-1 gap-4 sm:grid-cols-2", children: [
-                      /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthField, { htmlFor: "firstName", label: "First Name", required: true, children: /* @__PURE__ */ jsxRuntime.jsx(
-                        chunkK237IYOD_cjs.AuthInput,
+                      /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthField, { htmlFor: "firstName", label: "First Name", required: true, children: /* @__PURE__ */ jsxRuntime.jsx(
+                        chunkBYJUI4AT_cjs.AuthInput,
                         {
                           type: "text",
                           placeholder: "",
@@ -36528,8 +36632,8 @@ function ConnectedLoginPage() {
                           required: true
                         }
                       ) }),
-                      /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthField, { htmlFor: "lastName", label: "Last Name", required: true, children: /* @__PURE__ */ jsxRuntime.jsx(
-                        chunkK237IYOD_cjs.AuthInput,
+                      /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthField, { htmlFor: "lastName", label: "Last Name", required: true, children: /* @__PURE__ */ jsxRuntime.jsx(
+                        chunkBYJUI4AT_cjs.AuthInput,
                         {
                           type: "text",
                           placeholder: "",
@@ -36559,9 +36663,9 @@ function ConnectedLoginPage() {
                       }
                     )
                   ] }),
-                  !isRegistering && /* @__PURE__ */ jsxRuntime.jsxs(chunkK237IYOD_cjs.AuthField, { htmlFor: "password", label: "Password", required: true, children: [
+                  !isRegistering && /* @__PURE__ */ jsxRuntime.jsxs(chunkBYJUI4AT_cjs.AuthField, { htmlFor: "password", label: "Password", required: true, children: [
                     /* @__PURE__ */ jsxRuntime.jsx(
-                      chunkK237IYOD_cjs.RevealablePasswordInput,
+                      chunkBYJUI4AT_cjs.RevealablePasswordInput,
                       {
                         isRevealed: showPassword,
                         onToggleReveal: () => setShowPassword((v) => !v),
@@ -36580,7 +36684,7 @@ function ConnectedLoginPage() {
                       }
                     ),
                     /* @__PURE__ */ jsxRuntime.jsx(
-                      chunkK237IYOD_cjs.AuthLink,
+                      chunkBYJUI4AT_cjs.AuthLink,
                       {
                         onClick: () => setShowForgotPasswordModal(true),
                         className: "mt-2",
@@ -36590,7 +36694,7 @@ function ConnectedLoginPage() {
                     )
                   ] }),
                   isStepTwo && /* @__PURE__ */ jsxRuntime.jsx(
-                    chunkK237IYOD_cjs.AuthConsent,
+                    chunkBYJUI4AT_cjs.AuthConsent,
                     {
                       termsAccepted,
                       onTermsAcceptedChange: setTermsAccepted,
@@ -36602,7 +36706,7 @@ function ConnectedLoginPage() {
                     }
                   ),
                   (!isRegistering || isStepTwo) && /* @__PURE__ */ jsxRuntime.jsx("div", { className: "space-y-3 pt-1", children: /* @__PURE__ */ jsxRuntime.jsx(
-                    chunkK237IYOD_cjs.AuthSubmitButton,
+                    chunkBYJUI4AT_cjs.AuthSubmitButton,
                     {
                       isBusy: isAuthenticating,
                       disabled: isAuthenticating || isRegistering && isRegisterSubmitDisabled,
@@ -36613,7 +36717,7 @@ function ConnectedLoginPage() {
               }
             ),
             (!isRegistering || !verificationSent) && sso.available && /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "mt-6 space-y-4", children: [
-              /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthDivider, { label: "or continue with" }),
+              /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthDivider, { label: "or continue with" }),
               /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "grid grid-cols-3 gap-2", children: [
                 /* @__PURE__ */ jsxRuntime.jsxs(
                   ui.Button,
@@ -36670,7 +36774,7 @@ function ConnectedLoginPage() {
             ] })
           ] })
         ] }),
-        !isRegistering && sso.available && /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthLink, { onClick: () => handleSsoLogin(), "data-testid": "login-with-arbi-button", children: "Continue with Arbicity" }),
+        !isRegistering && sso.available && /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthLink, { onClick: () => handleSsoLogin(), "data-testid": "login-with-arbi-button", children: "Continue with Arbicity" }),
         !isRegistering && auth.footer,
         /* @__PURE__ */ jsxRuntime.jsx(
           ConnectedForgotPassword,
@@ -37134,7 +37238,7 @@ function ConnectedSsoCallback() {
         window.location.href = sso.continueUrl("link", auth0Message.state);
       }
     } : () => navigate("/");
-    return /* @__PURE__ */ jsxRuntime.jsxs(chunkK237IYOD_cjs.AuthLayout, { brand: auth.brand, corner: auth.corner, children: [
+    return /* @__PURE__ */ jsxRuntime.jsxs(chunkBYJUI4AT_cjs.AuthLayout, { brand: auth.brand, corner: auth.corner, children: [
       /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "text-center py-8", "data-testid": "auth0-message", children: [
         /* @__PURE__ */ jsxRuntime.jsx("h2", { className: "text-lg font-semibold text-foreground mb-2", children: getTitle() }),
         /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-muted-foreground", children: getDescription() }),
@@ -37185,7 +37289,7 @@ function ConnectedSsoCallback() {
     ] });
   }
   if (isCheckingStatus || !ssoStatus) {
-    return /* @__PURE__ */ jsxRuntime.jsxs(chunkK237IYOD_cjs.AuthLayout, { brand: auth.brand, corner: auth.corner, children: [
+    return /* @__PURE__ */ jsxRuntime.jsxs(chunkBYJUI4AT_cjs.AuthLayout, { brand: auth.brand, corner: auth.corner, children: [
       /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "text-center py-8", "data-testid": "sso-loading", children: [
         /* @__PURE__ */ jsxRuntime.jsx(lucideReact.Loader2, { className: "h-8 w-8 animate-spin mx-auto mb-4" }),
         /* @__PURE__ */ jsxRuntime.jsx("p", { className: "text-sm text-muted-foreground", children: "Completing authentication..." })
@@ -37193,14 +37297,14 @@ function ConnectedSsoCallback() {
       /* @__PURE__ */ jsxRuntime.jsx(ui.Button, { onClick: () => navigate("/login"), variant: "ghost", className: "w-full text-sm", children: "Cancel" })
     ] });
   }
-  return /* @__PURE__ */ jsxRuntime.jsxs(chunkK237IYOD_cjs.AuthLayout, { brand: auth.brand, corner: auth.corner, children: [
+  return /* @__PURE__ */ jsxRuntime.jsxs(chunkBYJUI4AT_cjs.AuthLayout, { brand: auth.brand, corner: auth.corner, children: [
     /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "pt-3", "data-testid": "sso-password-form", children: [
       /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "mb-6 text-center", children: [
         /* @__PURE__ */ jsxRuntime.jsx("h2", { className: "text-lg font-semibold text-foreground", children: getTitle() }),
         getDescription() && /* @__PURE__ */ jsxRuntime.jsx("p", { className: "mt-2 text-sm text-muted-foreground", children: getDescription() })
       ] }),
       /* @__PURE__ */ jsxRuntime.jsxs("form", { onSubmit: handlePasswordSubmit, className: "space-y-4", children: [
-        /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthField, { htmlFor: "email", label: "Email", children: /* @__PURE__ */ jsxRuntime.jsx(
+        /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthField, { htmlFor: "email", label: "Email", children: /* @__PURE__ */ jsxRuntime.jsx(
           ui.Input,
           {
             type: "email",
@@ -37215,7 +37319,7 @@ function ConnectedSsoCallback() {
         ) }),
         ssoStatus.status === "new_user" ? /* @__PURE__ */ jsxRuntime.jsxs(jsxRuntime.Fragment, { children: [
           /* @__PURE__ */ jsxRuntime.jsxs("div", { className: "flex gap-4", children: [
-            /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthField, { htmlFor: "firstName", label: "First Name", className: "flex-1", children: /* @__PURE__ */ jsxRuntime.jsx(
+            /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthField, { htmlFor: "firstName", label: "First Name", className: "flex-1", children: /* @__PURE__ */ jsxRuntime.jsx(
               ui.Input,
               {
                 type: "text",
@@ -37228,7 +37332,7 @@ function ConnectedSsoCallback() {
                 "data-testid": "sso-firstname-display"
               }
             ) }),
-            /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthField, { htmlFor: "lastName", label: "Last Name", className: "flex-1", children: /* @__PURE__ */ jsxRuntime.jsx(
+            /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthField, { htmlFor: "lastName", label: "Last Name", className: "flex-1", children: /* @__PURE__ */ jsxRuntime.jsx(
               ui.Input,
               {
                 type: "text",
@@ -37257,7 +37361,7 @@ function ConnectedSsoCallback() {
               getUnmetRequirement: passwordRules.unmet
             }
           )
-        ] }) : /* @__PURE__ */ jsxRuntime.jsxs(chunkK237IYOD_cjs.AuthField, { htmlFor: "password", label: "Password", required: true, children: [
+        ] }) : /* @__PURE__ */ jsxRuntime.jsxs(chunkBYJUI4AT_cjs.AuthField, { htmlFor: "password", label: "Password", required: true, children: [
           /* @__PURE__ */ jsxRuntime.jsx(
             ui.Input,
             {
@@ -37276,7 +37380,7 @@ function ConnectedSsoCallback() {
             }
           ),
           ssoStatus?.status === "sso_exists" && /* @__PURE__ */ jsxRuntime.jsx(
-            chunkK237IYOD_cjs.AuthLink,
+            chunkBYJUI4AT_cjs.AuthLink,
             {
               onClick: () => setShowForgotPasswordModal(true),
               className: "mt-2",
@@ -37285,9 +37389,9 @@ function ConnectedSsoCallback() {
             }
           )
         ] }),
-        error && /* @__PURE__ */ jsxRuntime.jsx(chunkK237IYOD_cjs.AuthAlert, { testId: "sso-error-message", children: error.message }),
+        error && /* @__PURE__ */ jsxRuntime.jsx(chunkBYJUI4AT_cjs.AuthAlert, { testId: "sso-error-message", children: error.message }),
         ssoStatus.status === "new_user" && /* @__PURE__ */ jsxRuntime.jsx(
-          chunkK237IYOD_cjs.AuthConsent,
+          chunkBYJUI4AT_cjs.AuthConsent,
           {
             termsAccepted,
             onTermsAcceptedChange: setTermsAccepted,
@@ -37529,7 +37633,7 @@ function ConnectedRecoveryKeyDialog({
     onOpenChange(false);
   };
   return /* @__PURE__ */ jsxRuntime.jsx(
-    chunkK237IYOD_cjs.RecoveryKeyDialog,
+    chunkBYJUI4AT_cjs.RecoveryKeyDialog,
     {
       open,
       onClose: handleClose,
@@ -38165,6 +38269,7 @@ exports.ConnectedSearchPage = ConnectedSearchPage;
 exports.ConnectedSecuritySection = ConnectedSecuritySection;
 exports.ConnectedSessionsRow = ConnectedSessionsRow;
 exports.ConnectedSettingsPage = ConnectedSettingsPage;
+exports.ConnectedSharePointAdminConsentPage = ConnectedSharePointAdminConsentPage;
 exports.ConnectedSharedFilesPage = ConnectedSharedFilesPage;
 exports.ConnectedSignatureVerifyPage = ConnectedSignatureVerifyPage;
 exports.ConnectedSkillUpload = ConnectedSkillUpload;