[WorkplaceAI][PerUserAuth] Add hooks for connector code grant OAuth flow

oas_docs/output/kibana.serverless.yaml

@@ -454,9 +454,9 @@ paths:
             type: string
       responses:
         '200':
-          description: Returns an HTML page with error details if authorization fails.
+          description: Returns an HTML callback page.
         '302':
-          description: Redirects to Kibana on successful authorization.
+          description: Redirects to the return URL with authorization result query parameters.
         '401':
           description: User is not authenticated.
       summary: Handle OAuth callback
@@ -465,6 +465,22 @@ paths:
       x-metaTags:
         - content: Kibana, Elastic Cloud Serverless
           name: product_name
+  /api/actions/connector/_oauth_callback_script:
+    get:
+      operationId: get-actions-connector-oauth-callback-script
+      parameters: []
+      responses: {}
+      summary: ''
+      tags: []
+      x-metaTags:
+        - content: Kibana, Elastic Cloud Serverless
+          name: product_name
+      description: |-
+        **Spaces method and path for this operation:**
+
+        <div><span class="operation-verb get">get</span>&nbsp;<span class="operation-path">/s/{space_id}/api/actions/connector/_oauth_callback_script</span></div>
+
+        Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.
   /api/actions/connector/{id}:
     delete:
       description: |-

oas_docs/output/kibana.yaml

@@ -525,9 +525,9 @@ paths:
             type: string
       responses:
         '200':
-          description: Returns an HTML page with error details if authorization fails.
+          description: Returns an HTML callback page.
         '302':
-          description: Redirects to Kibana on successful authorization.
+          description: Redirects to the return URL with authorization result query parameters.
         '401':
           description: User is not authenticated.
       summary: Handle OAuth callback
@@ -536,6 +536,22 @@ paths:
       x-metaTags:
         - content: Kibana
           name: product_name
+  /api/actions/connector/_oauth_callback_script:
+    get:
+      operationId: get-actions-connector-oauth-callback-script
+      parameters: []
+      responses: {}
+      summary: ''
+      tags: []
+      x-metaTags:
+        - content: Kibana
+          name: product_name
+      description: |-
+        **Spaces method and path for this operation:**
+
+        <div><span class="operation-verb get">get</span>&nbsp;<span class="operation-path">/s/{space_id}/api/actions/connector/_oauth_callback_script</span></div>
+
+        Refer to [Spaces](https://www.elastic.co/docs/deploy-manage/manage-spaces) for more information.
   /api/actions/connector/{id}:
     delete:
       description: |-

package.json

@@ -914,6 +914,7 @@
     "@kbn/response-ops-alerts-filters-form": "link:x-pack/platform/packages/shared/response-ops/alerts-filters-form",
     "@kbn/response-ops-alerts-table": "link:x-pack/platform/packages/shared/response-ops/alerts-table",
     "@kbn/response-ops-form-generator": "link:x-pack/platform/packages/shared/response-ops/form-generator",
+    "@kbn/response-ops-oauth-hooks": "link:x-pack/platform/packages/shared/response-ops/oauth-hooks",
     "@kbn/response-ops-recurring-schedule-form": "link:x-pack/platform/packages/shared/response-ops/recurring-schedule-form",
     "@kbn/response-ops-retry-service": "link:x-pack/platform/packages/shared/response-ops/retry-service",
     "@kbn/response-ops-rule-form": "link:x-pack/platform/packages/shared/response-ops/rule_form",

packages/kbn-optimizer/limits.yml

@@ -181,7 +181,7 @@ pageLoadAssetSize:
   telemetryManagementSection: 5522
   timelines: 192134
   transform: 16515
-  triggersActionsUi: 112000
+  triggersActionsUi: 126052
   uiActions: 35278
   uiActionsEnhanced: 17373
   unifiedDocViewer: 14513

src/core/server/integration_tests/ci_checks/saved_objects/check_registered_types.test.ts

@@ -150,7 +150,7 @@ describe('checking migration metadata changes on all registered SO types', () =>
         "ml-module": "cb77705b41ea0a35d8ba79b19014a30069e0e93a2cfb7ae8c6f20a79207d5daa",
         "ml-trained-model": "133305438dc0b60a6660c44f0d8183ad5ba079db8fdd4e4f4b5ab3a09d2f29b8",
         "monitoring-telemetry": "fa7c4f2a099b4f0539e571372a598601c2a0c65ba50f6c34df23b4d6925cdc53",
-        "oauth_state": "8902d67a5fb68ccea1f3a63100dc45b84a764c786dd13d77b75ca5a901f42335",
+        "oauth_state": "3938a56c1eeb6529ed2bb0f9026463063287ca1a29c285e4a7ce40b87faf359b",
         "observability-onboarding-state": "b656db675800bfee8a2ddb5bf73b543542c7a7db64ed268ab5adcae6910773d2",
         "osquery-manager-usage-metric": "8833b9f812e9179897444c395761f9911945cfb77de9869c4e9b6ee6eeb0f573",
         "osquery-pack": "7ee940ea04c9c562406977efaa213050b2079c5bcc4e06ec56c8be6a85eb5ccd",
@@ -1002,7 +1002,7 @@ describe('checking migration metadata changes on all registered SO types', () =>
         "oauth_state|global: a665293b001c9e7b6e92c0a50a553b8163dbcd41",
         "oauth_state|mappings: 04721e2fa836fed1f3f2e9c343d96ec5304f8f09",
         "oauth_state|schemas: da39a3ee5e6b4b0d3255bfef95601890afd80709",
-        "oauth_state|10.1.0: 8324da0f847d48f9b0de638008110b966275a95f53d3efc9242fe25f5a2f1f13",
+        "oauth_state|10.1.0: 236a9b2c3c43ceb53d30058aa6e5d82359abd4288cf1b7fcce954cd00ee53def",
         "====================================================================================",
         "observability-onboarding-state|global: c226ba4dd0412c2d7fd7a01976461e9da00b78bf",
         "observability-onboarding-state|mappings: d6efe91e6efcc5e1b41fac37b731b715182939ce",

tsconfig.base.json

@@ -1844,6 +1844,8 @@
       "@kbn/response-ops-alerts-table/*": ["x-pack/platform/packages/shared/response-ops/alerts-table/*"],
       "@kbn/response-ops-form-generator": ["x-pack/platform/packages/shared/response-ops/form-generator"],
       "@kbn/response-ops-form-generator/*": ["x-pack/platform/packages/shared/response-ops/form-generator/*"],
+      "@kbn/response-ops-oauth-hooks": ["x-pack/platform/packages/shared/response-ops/oauth-hooks"],
+      "@kbn/response-ops-oauth-hooks/*": ["x-pack/platform/packages/shared/response-ops/oauth-hooks/*"],
       "@kbn/response-ops-recurring-schedule-form": ["x-pack/platform/packages/shared/response-ops/recurring-schedule-form"],
       "@kbn/response-ops-recurring-schedule-form/*": ["x-pack/platform/packages/shared/response-ops/recurring-schedule-form/*"],
       "@kbn/response-ops-retry-service": ["x-pack/platform/packages/shared/response-ops/retry-service"],

x-pack/platform/packages/shared/response-ops/oauth-hooks/hooks/index.ts

@@ -0,0 +1,21 @@
+/*
+ * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
+ * or more contributor license agreements. Licensed under the Elastic License
+ * 2.0; you may not use this file except in compliance with the Elastic License
+ * 2.0.
+ */
+
+export {
+  useConnectorOAuthConnect,
+  OAuthRedirectMode,
+  type ConnectorOAuthConnectProps,
+  type ConnectorOAuthConnect,
+} from './use_connector_oauth_connect';
+
+export {
+  useConnectorOAuthDisconnect,
+  type ConnectorOAuthDisconnectProps,
+  type ConnectorOAuthDisconnect,
+} from './use_connector_oauth_disconnect';
+
+export { useOAuthRedirectResult, type OAuthRedirectResultProps } from './use_oauth_redirect_result';