Agent sharepoint knowledge connector

[adrinr]

Description

Adds a SharePoint knowledge connector for agents.

TODO in a different PR:

• Discuss designs
• Dev/prod
• Handle imports/exports
• Better feedback if !env.MICROSOFT_CLIENT_ID or !env.MICROSOFT_CLIENT_SECRET
• Delete schedules tasks on workspace delete/reimport

---

Summary by cubic

Adds a SharePoint knowledge connector for agents using Microsoft OAuth and Microsoft Graph, plus a settings page to view SharePoint connections and where they’re used; the connector is gated behind the AI_RAG_SHAREPOINT feature flag.

• New Features

  • Microsoft OAuth2 for SharePoint with scopes offline_access https://graph.microsoft.com/Sites.Read.All (override via RAG_SHAREPOINT_DEFAULT_SCOPE); pre-auth supports returnPath, validates provider, binds OAuth state to appId, requires continueSetupId, uses a 10‑minute setup cache TTL, and allow-lists Graph nextLink URLs to prevent SSRF.
  • Persisted SharePoint OAuth connections via AgentKnowledgeSourceConnection; shown under Settings > Connections > Knowledge with de‑duplicated entries, used-by agents, and site lists.
  • New agent knowledgeSources model and APIs: list SharePoint site options with last-run stats, select sites (returns site info), trigger per-site sync, and disconnect (removes files from disconnected sites). Endpoints moved under aiAgents.
  • Scheduled sync via knowledgeSourceSyncQueue (configurable interval); jobs rehydrated on startup and reconciled on deploy with summary logging; visible in BullBoard.
  • Sync tracking via AgentKnowledgeSourceSyncState (last run, counts, run status, including unsupported). UI hides 0/0 before first run and formats missing timestamps as —. Knowledge base files include externalSourceId.
  • Builder UI: “Add knowledge” modal; SharePoint site picker after OAuth; per-site sync/disconnect; files status modal; better row click/loading with row-level __clickable. ActionButton supports custom icons and loading.
  • File handling: 100MB upload limit, accepts only supported types in UI and backend, counts unsupported, deletes temp files on unsupported uploads; upload logic moved into the store.
  • Validates SharePoint site IDs to allow only canonical Graph IDs.

• Migration

  • Enable AI_RAG_SHAREPOINT (defaults off).
  • Set MICROSOFT_CLIENT_ID, MICROSOFT_CLIENT_SECRET, and optional MICROSOFT_TENANT_ID.
  • Ensure the Microsoft app grants Sites.Read.All and offline_access.
  • Optional: set RAG_SHAREPOINT_DEFAULT_SCOPE and SHAREPOINT_SYNC_INTERVAL_MS (defaults to 1 day).
  • Restart the server to initialize knowledgeSourceSyncQueue.

^{Written for commit e2eb46a. Summary will update on new commits.}

[deanhannigan]

LGTM! Really solid work @adrinr. A few minor comments, but nothing to prevent merging. 🚀