${opts.name}

\n${rows}\n

`;\n}\n",[19,86],"4e8a7b3d-52e0-4b8e-a62e-f8d9958772d6","config.ts","019ef6d9-f176-705d-8d8e-e7f509817afc",4,["D",1784305242720],"/**\n * Wiring for the XAA demo stack. Client creds are NOT hardcoded — they\n * come from /register (see register.ts). The IdP and AS issue distinct\n * client_ids because each bakes its own issuer into the HMAC input.\n */\n\nexport const OKTA_ISSUER = \"https://integrator-7089468.okta.com\";\n\nexport const DEMO_USER = {\n sub: \"demo@example.com\",\n email: \"demo@example.com\",\n name: \"Demo User\",\n};\n\n// \"Am I on val.town?\" — esm.town serves deployed code\nexport const ON_VALTOWN = import.meta.url.startsWith(\"https://esm.town\");\n\nexport const URLS = ON_VALTOWN\n ? {\n idp: \"https://xaa-mcp-idp.val.run\",\n as: \"https://xaa-mcp-as.val.run\",\n rs: \"https://xaa-mcp-rs.val.run\",\n cal: \"https://xaa-mcp-cal.val.run\",\n as2: \"https://christinebetts--019ef6da11c372fc9887e43d7c03a238.web.val.run\",\n rs2: \"https://christinebetts--019ef6d9f176705d8d8ef6363a1c1df6.web.val.run\",\n }\n : {\n idp: \"http://localhost:3001\",\n as: \"http://localhost:3002\",\n rs: \"http://localhost:3000\",\n cal: \"http://localhost:3003\",\n as2: \"http://localhost:3005\",\n rs2: \"http://localhost:3004\",\n };\n",[19,92],"f9042eb3-87c6-4f64-9164-d80bcf24e2a6",["D",1782257938730],"directory",[19],{"_36":98,"_13":19,"_66":69,"_68":-5,"_70":71,"_72":73,"_74":75,"_38":113,"_17":77,"_78":100,"_80":-5,"_82":53,"_83":-5,"_110":114,"_18":115},{"_36":104,"_13":105,"_66":106,"_68":-5,"_70":71,"_72":73,"_74":75,"_38":107,"_17":77,"_78":108,"_80":109,"_82":53,"_83":-5,"_110":111,"_18":112},"e953619c-105e-411f-9633-d54c1dd001bb","http.ts","019ef6d9-f176-705d-8d8e-f6363a1c1df6",["D",1782257938730],"http","import { createResourceServer } from \"./shared/mcp-rs.ts\";\nimport { URLS } from \"./shared/config.ts\";\n\n// Fake gmail. The point is the sub claim — prove that bob@tables.fake's\n// identity flowed Okta → as2 → here without a single consent screen.\n\nconst INBOX = [\n { id: \"m1\", from: \"aaron@okta.com\", subject: \"XAA beta access enabled for integrator-7089468\", snippet: \"Your tenant now supports token-exchange → id-jag. Try the Cross-App Access panel under Security.\" },\n { id: \"m2\", from: \"noreply@val.town\", subject: \"xaa-mcp-as2 deployed\", snippet: \"https://xaa-mcp-as2.val.run is live\" },\n { id: \"m3\", from: \"you@example.com\", subject: \"reminder: record demo before Apr 3\", snippet: \"todos → cal → gmail, zero clicks after the first Okta login\" },\n];\n\nconst app = createResourceServer({\n name: \"xaa-mcp-rs2\",\n selfUrl: URLS.rs2,\n asUrls: [URLS.as2],\n scopes: [\"gmail.read\", \"offline_access\"],\n port: 3004,\n tools: [\n {\n name: \"list_messages\",\n description: \"List inbox messages. Returns id + from + subject.\",\n inputSchema: { type: \"object\", properties: {} },\n handler: (_args, claims) => ({\n content: [{\n type: \"text\",\n text: `Inbox for ${claims?.sub}:\\n` +\n INBOX.map((m) => ` [${m.id}] ${m.from} — ${m.subject}`).join(\"\\n\"),\n }],\n }),\n },\n {\n name: \"get_message\",\n description: \"Get one message by id.\",\n inputSchema: { type: \"object\", properties: { id: { type: \"string\" } }, required: [\"id\"] },\n handler: ({ id }) => {\n const m = INBOX.find((x) => x.id === id);\n return { content: [{ type: \"text\", text: m ? `From: ${m.from}\\nSubject: ${m.subject}\\n\\n${m.snippet}` : `No message ${id}` }] };\n },\n },\n ],\n});\n\nexport default app.fetch;\nif (import.meta.main) Deno.serve({ port: 3004 }, app.fetch);\n","children",[],[105],["D",1782257938730],[116,117,118],[19],{"_36":91,"_13":92,"_66":93,"_68":69,"_70":71,"_72":94,"_74":75,"_38":125,"_17":32,"_78":79,"_80":96,"_82":53,"_83":-5,"_110":126,"_18":127},{"_36":85,"_13":86,"_66":87,"_68":69,"_70":71,"_72":73,"_74":75,"_38":122,"_17":77,"_78":79,"_80":89,"_82":53,"_83":-5,"_110":123,"_18":124},{"_36":64,"_13":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_38":119,"_17":77,"_78":79,"_80":81,"_82":53,"_83":-5,"_110":120,"_18":121},["D",1782257938730],[],[19,65],["D",1782257938730],[],[19,86],["D",1784305242720],[],[19,92],"f726bb07-7ad6-425b-9da0-14a57a614b8f",["D",1782257938730],"legacyEnvVars","httpPrivacy","description","imageUrl","userId","233f790c-f1f9-4399-b755-e5132ae1a50a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","019ef0dd-3fa8-7728-86f8-0cae11cb5ae4","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_172":168},"org",{"_11":12,"_165":166,"_167":168,"_134":135,"_169":170,"_171":53},"branch",{"_17":94,"_13":16,"_36":71,"_42":128,"_45":37,"_47":161,"_162":55,"_163":43,"_164":59,"_60":14,"_56":12},12,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","displayName","Christine Betts","avatar","https://lh3.googleusercontent.com/a/ACg8ocIsz0U1bHCmvlQEmeKXflr2miVEnnjnL8WrdVAhJl2SLhAg7Cs=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_36":128,"_13":14,"_38":229,"_51":-5,"_130":53,"_54":55,"_131":55,"_132":-5,"_133":-5,"_134":135,"_136":-5,"_137":53,"_138":-5,"_139":-5,"_140":77,"_58":141,"_142":-5,"_143":-5,"_144":-5,"_145":-5,"_146":147,"_148":147,"_149":150,"_151":150,"_152":150,"_153":147,"_154":147,"_155":230,"_157":231,"_159":232,"_52":53},[214,218],"files",[214,215,216,217,218],"counts",{"_205":77,"_206":73,"_207":77,"_35":208,"_209":210},[199,200,201],{"_36":98,"_13":19,"_66":69,"_68":-5,"_70":71,"_72":73,"_74":75,"_38":99,"_17":77,"_78":100,"_80":-5,"_82":53,"_83":-5,"_18":198},"upstreamProject",{"_36":43,"_13":14,"_132":-5,"_133":-5,"_54":55,"_155":196},"upstreamBranch",{"_36":37,"_38":194,"_40":195,"_13":16,"_42":43,"_17":44,"_45":46,"_47":48,"_49":50,"_51":-5,"_52":53,"_54":55,"_56":57,"_58":59,"_60":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1778187041883],["D",1786678483921],{"_11":57,"_172":197},"https://lh3.googleusercontent.com/a/ACg8ocK3SYoizVYImoeptY6sq74_q6gNsNUG1dJKtPCpRH1O99Wt0eQ=s96-c",[19],{"_36":91,"_13":92,"_66":93,"_68":69,"_70":71,"_72":94,"_74":75,"_38":95,"_17":32,"_78":79,"_80":96,"_82":53,"_83":-5,"_18":204},{"_36":85,"_13":86,"_66":87,"_68":69,"_70":71,"_72":73,"_74":75,"_38":88,"_17":77,"_78":79,"_80":89,"_82":53,"_83":-5,"_18":203},{"_36":64,"_13":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_38":76,"_17":77,"_78":79,"_80":81,"_82":53,"_83":-5,"_18":202},[19,65],[19,86],[19,92],"pulls","branches","forks",{"_211":77,"_213":77},"connections",{"_211":77,"_212":77},"count","unfilledCount","emptyCount",{"_36":98,"_13":19,"_66":69,"_68":-5,"_70":71,"_72":73,"_74":75,"_38":113,"_17":77,"_78":100,"_80":-5,"_82":53,"_83":-5,"_110":227,"_18":228},{"_36":91,"_13":92,"_66":93,"_68":69,"_70":71,"_72":94,"_74":75,"_38":125,"_17":32,"_78":79,"_80":96,"_82":53,"_83":-5,"_110":225,"_18":226},{"_36":85,"_13":86,"_66":87,"_68":69,"_70":71,"_72":73,"_74":75,"_38":122,"_17":77,"_78":79,"_80":89,"_82":53,"_83":-5,"_110":223,"_18":224},{"_36":64,"_13":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_38":119,"_17":77,"_78":79,"_80":81,"_82":53,"_83":-5,"_110":221,"_18":222},{"_36":104,"_13":105,"_66":106,"_68":-5,"_70":71,"_72":73,"_74":75,"_38":107,"_17":77,"_78":108,"_80":109,"_82":53,"_83":-5,"_110":219,"_18":220},[],[105],[],[19,65],[],[19,86],[],[19,92],[215,216,217],[19],["D",1782257938730],{"_11":12,"_172":168},{"_11":12,"_165":166,"_167":168,"_134":135,"_169":170,"_171":53},{"_17":94,"_13":16,"_36":71,"_42":128,"_45":37,"_47":161,"_162":55,"_163":43,"_164":59,"_60":14,"_56":12},"ctx",{"_155":-5,"_191":266,"_267":268,"_269":270,"_271":53,"_272":53,"_273":53,"_274":75,"_275":-5,"_276":-7,"_277":-7,"_278":77,"_279":53,"_280":53,"_281":-5,"_282":53,"_283":53,"_284":53,"_285":-5},"ENV",{"_237":238,"_239":240,"_241":16,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263,"_264":265},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]