${opts.name}

\n${rows}\n

`;\n}\n",[18,81],"cf74fe76-40d1-4184-9436-66fbb9b9460e",["D",1784050278486],"/**\n * Wiring for the XAA demo stack. Client creds are NOT hardcoded — they\n * come from /register (see register.ts). The IdP and AS issue distinct\n * client_ids because each bakes its own issuer into the HMAC input.\n */\n\nexport const OKTA_ISSUER = \"https://integrator-7089468.okta.com\";\n\nexport const DEMO_USER = {\n sub: \"demo@example.com\",\n email: \"demo@example.com\",\n name: \"Demo User\",\n};\n\n// \"Am I on val.town?\" — esm.town serves deployed code\nexport const ON_VALTOWN = import.meta.url.startsWith(\"https://esm.town\");\n\nexport const URLS = ON_VALTOWN\n ? {\n idp: \"https://xaa-mcp-idp.val.run\",\n as: \"https://xaa-mcp-as.val.run\",\n rs: \"https://xaa-mcp-rs.val.run\",\n cal: \"https://xaa-mcp-cal.val.run\",\n as2: \"https://christinebetts--019ef6da11c372fc9887e43d7c03a238.web.val.run\",\n rs2: \"https://christinebetts--d261891c7fa911f1a6571607ee4eb77e.web.val.run\",\n }\n : {\n idp: \"http://localhost:3001\",\n as: \"http://localhost:3002\",\n rs: \"http://localhost:3000\",\n cal: \"http://localhost:3003\",\n as2: \"http://localhost:3005\",\n rs2: \"http://localhost:3004\",\n };\n",[18,66],"pulls","branches","forks","envVars",{"_199":26,"_201":26},"connections",{"_199":26,"_200":26},"count","unfilledCount","emptyCount",{"_36":170,"_13":18,"_64":99,"_46":-5,"_38":39,"_171":43,"_172":24,"_40":226,"_42":26,"_67":100,"_174":-5,"_69":30,"_175":-5,"_214":227,"_17":228},{"_36":188,"_13":66,"_64":65,"_46":99,"_38":39,"_171":93,"_172":24,"_40":223,"_42":43,"_67":68,"_174":190,"_69":30,"_175":-5,"_214":224,"_17":225},{"_36":184,"_13":81,"_64":80,"_46":99,"_38":39,"_171":75,"_172":24,"_40":220,"_42":26,"_67":68,"_174":186,"_69":30,"_175":-5,"_214":221,"_17":222},{"_36":180,"_13":90,"_64":89,"_46":99,"_38":39,"_171":84,"_172":24,"_40":217,"_42":26,"_67":68,"_174":182,"_69":30,"_175":-5,"_214":218,"_17":219},{"_36":207,"_13":208,"_64":209,"_46":-5,"_38":39,"_171":210,"_172":24,"_40":211,"_42":26,"_67":212,"_174":213,"_69":30,"_175":-5,"_214":215,"_17":216},"d3256abc-bd70-46a4-a220-03ea7981d4f4","http.ts","d261891c-7fa9-11f1-a657-1607ee4eb77e",4,["D",1784050278090],"http","import { createResourceServer } from \"./shared/mcp-rs.ts\";\nimport { URLS } from \"./shared/config.ts\";\n\n// Fake gmail. The point is the sub claim — prove that bob@tables.fake's\n// identity flowed Okta → as2 → here without a single consent screen.\n\nconst INBOX = [\n { id: \"m1\", from: \"aaron@okta.com\", subject: \"XAA beta access enabled for integrator-7089468\", snippet: \"Your tenant now supports token-exchange → id-jag. Try the Cross-App Access panel under Security.\" },\n { id: \"m2\", from: \"noreply@val.town\", subject: \"xaa-mcp-as2 deployed\", snippet: \"https://xaa-mcp-as2.val.run is live\" },\n { id: \"m3\", from: \"you@example.com\", subject: \"reminder: record demo before Apr 3\", snippet: \"todos → cal → gmail, zero clicks after the first Okta login\" },\n];\n\nconst app = createResourceServer({\n name: \"xaa-mcp-rs2\",\n selfUrl: URLS.rs2,\n asUrls: [URLS.as2],\n scopes: [\"gmail.read\", \"offline_access\"],\n port: 3004,\n tools: [\n {\n name: \"list_messages\",\n description: \"List inbox messages. Returns id + from + subject.\",\n inputSchema: { type: \"object\", properties: {} },\n handler: (_args, claims) => ({\n content: [{\n type: \"text\",\n text: `Inbox for ${claims?.sub}:\\n` +\n INBOX.map((m) => ` [${m.id}] ${m.from} — ${m.subject}`).join(\"\\n\"),\n }],\n }),\n },\n {\n name: \"get_message\",\n description: \"Get one message by id.\",\n inputSchema: { type: \"object\", properties: { id: { type: \"string\" } }, required: [\"id\"] },\n handler: ({ id }) => {\n const m = INBOX.find((x) => x.id === id);\n return { content: [{ type: \"text\", text: m ? `From: ${m.from}\\nSubject: ${m.subject}\\n\\n${m.snippet}` : `No message ${id}` }] };\n },\n },\n ],\n});\n\nexport default app.fetch;\nif (import.meta.main) Deno.serve({ port: 3004 }, app.fetch);\n","children",[],[208],["D",1784050277392],[],[18,90],["D",1784050277016],[],[18,81],["D",1784050278486],[],[18,66],["D",1784050276768],[203,204,205],[18],["D",1784050276289],{"_11":12,"_148":72},{"_11":12,"_143":144,"_71":72,"_31":70,"_145":146,"_147":30},{"_42":93,"_13":16,"_36":39,"_135":102,"_136":-5,"_137":-5,"_138":-5,"_139":-5,"_140":-5,"_141":14,"_142":12},"ctx",{"_54":-5,"_167":266,"_267":268,"_269":270,"_271":30,"_272":30,"_273":30,"_274":24,"_275":-5,"_276":-7,"_277":-7,"_278":26,"_279":30,"_280":30,"_281":-5,"_282":30,"_283":30,"_284":30,"_285":-5},"ENV",{"_237":238,"_239":240,"_241":16,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263,"_264":265},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","71c1b20804b3232a7e513be260cfffc1932a9e97","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · shared