${opts.name}

\n${rows}\n

`;\n}\n",[19,61],"cf74fe76-40d1-4184-9436-66fbb9b9460e","config.ts","d19982f0-7fa9-11f1-a599-1607ee4eb77e",5,["D",1784050278486],1,"/**\n * Wiring for the XAA demo stack. Client creds are NOT hardcoded — they\n * come from /register (see register.ts). The IdP and AS issue distinct\n * client_ids because each bakes its own issuer into the HMAC input.\n */\n\nexport const OKTA_ISSUER = \"https://integrator-7089468.okta.com\";\n\nexport const DEMO_USER = {\n sub: \"demo@example.com\",\n email: \"demo@example.com\",\n name: \"Demo User\",\n};\n\n// \"Am I on val.town?\" — esm.town serves deployed code\nexport const ON_VALTOWN = import.meta.url.startsWith(\"https://esm.town\");\n\nexport const URLS = ON_VALTOWN\n ? {\n idp: \"https://xaa-mcp-idp.val.run\",\n as: \"https://xaa-mcp-as.val.run\",\n rs: \"https://xaa-mcp-rs.val.run\",\n cal: \"https://xaa-mcp-cal.val.run\",\n as2: \"https://christinebetts--019ef6da11c372fc9887e43d7c03a238.web.val.run\",\n rs2: \"https://christinebetts--d261891c7fa911f1a6571607ee4eb77e.web.val.run\",\n }\n : {\n idp: \"http://localhost:3001\",\n as: \"http://localhost:3002\",\n rs: \"http://localhost:3000\",\n cal: \"http://localhost:3003\",\n as2: \"http://localhost:3005\",\n rs2: \"http://localhost:3004\",\n };\n",[19,68],"3612bf55-625e-491b-adc8-2133408421d5",["D",1784050276768],"directory",[19],{"_36":75,"_13":19,"_39":42,"_41":-5,"_43":44,"_45":72,"_47":48,"_49":91,"_17":51,"_52":77,"_54":-5,"_56":57,"_58":-5,"_88":92,"_18":93},{"_36":81,"_13":82,"_39":83,"_41":-5,"_43":44,"_45":84,"_47":48,"_49":85,"_17":51,"_52":86,"_54":87,"_56":57,"_58":-5,"_88":89,"_18":90},"d3256abc-bd70-46a4-a220-03ea7981d4f4","http.ts","d261891c-7fa9-11f1-a657-1607ee4eb77e",4,["D",1784050278090],"http","import { createResourceServer } from \"./shared/mcp-rs.ts\";\nimport { URLS } from \"./shared/config.ts\";\n\n// Fake gmail. The point is the sub claim — prove that bob@tables.fake's\n// identity flowed Okta → as2 → here without a single consent screen.\n\nconst INBOX = [\n { id: \"m1\", from: \"aaron@okta.com\", subject: \"XAA beta access enabled for integrator-7089468\", snippet: \"Your tenant now supports token-exchange → id-jag. Try the Cross-App Access panel under Security.\" },\n { id: \"m2\", from: \"noreply@val.town\", subject: \"xaa-mcp-as2 deployed\", snippet: \"https://xaa-mcp-as2.val.run is live\" },\n { id: \"m3\", from: \"you@example.com\", subject: \"reminder: record demo before Apr 3\", snippet: \"todos → cal → gmail, zero clicks after the first Okta login\" },\n];\n\nconst app = createResourceServer({\n name: \"xaa-mcp-rs2\",\n selfUrl: URLS.rs2,\n asUrls: [URLS.as2],\n scopes: [\"gmail.read\", \"offline_access\"],\n port: 3004,\n tools: [\n {\n name: \"list_messages\",\n description: \"List inbox messages. Returns id + from + subject.\",\n inputSchema: { type: \"object\", properties: {} },\n handler: (_args, claims) => ({\n content: [{\n type: \"text\",\n text: `Inbox for ${claims?.sub}:\\n` +\n INBOX.map((m) => ` [${m.id}] ${m.from} — ${m.subject}`).join(\"\\n\"),\n }],\n }),\n },\n {\n name: \"get_message\",\n description: \"Get one message by id.\",\n inputSchema: { type: \"object\", properties: { id: { type: \"string\" } }, required: [\"id\"] },\n handler: ({ id }) => {\n const m = INBOX.find((x) => x.id === id);\n return { content: [{ type: \"text\", text: m ? `From: ${m.from}\\nSubject: ${m.subject}\\n\\n${m.snippet}` : `No message ${id}` }] };\n },\n },\n ],\n});\n\nexport default app.fetch;\nif (import.meta.main) Deno.serve({ port: 3004 }, app.fetch);\n","children",[],[82],["D",1784050276768],[94,95,96],[19],{"_36":67,"_13":68,"_39":69,"_41":42,"_43":44,"_45":70,"_47":48,"_49":103,"_17":72,"_52":53,"_54":73,"_56":57,"_58":-5,"_88":104,"_18":105},{"_36":60,"_13":61,"_39":62,"_41":42,"_43":44,"_45":63,"_47":48,"_49":100,"_17":51,"_52":53,"_54":65,"_56":57,"_58":-5,"_88":101,"_18":102},{"_36":37,"_13":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":97,"_17":51,"_52":53,"_54":55,"_56":57,"_58":-5,"_88":98,"_18":99},["D",1784050277392],[],[19,38],["D",1784050277016],[],[19,61],["D",1784050278486],[],[19,68],"e83c5242-22f4-4aa0-84ff-664e60dd1853",["D",1784050276289],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","233f790c-f1f9-4399-b755-e5132ae1a50a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019ef0dd-3fa8-7728-86f8-0cae11cb5ae4","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_159":155},"org",{"_11":12,"_152":153,"_154":155,"_115":116,"_156":157,"_158":57},"branch",{"_17":70,"_13":16,"_36":44,"_144":106,"_145":-5,"_146":-5,"_147":-5,"_148":-5,"_149":-5,"_150":14,"_151":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Christine Betts","avatar","https://lh3.googleusercontent.com/a/ACg8ocIsz0U1bHCmvlQEmeKXflr2miVEnnjnL8WrdVAhJl2SLhAg7Cs=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_36":106,"_13":14,"_49":211,"_108":-5,"_109":57,"_110":111,"_112":111,"_113":-5,"_114":-5,"_115":116,"_117":-5,"_118":57,"_119":-5,"_120":-5,"_121":51,"_122":123,"_124":-5,"_125":-5,"_126":-5,"_127":-5,"_128":129,"_130":129,"_131":132,"_133":132,"_134":132,"_135":129,"_136":129,"_137":212,"_139":213,"_141":214,"_143":57},[196,200],"files",[196,197,198,199,200],"counts",{"_187":51,"_188":72,"_189":51,"_32":190,"_191":192},[181,182,183],{"_36":75,"_43":44,"_39":42,"_13":19,"_54":-5,"_52":77,"_17":51,"_41":-5,"_49":179,"_45":72,"_58":-5,"_18":180},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1784050276768],[19],{"_36":67,"_13":68,"_39":69,"_41":42,"_43":44,"_45":70,"_47":48,"_49":71,"_17":72,"_52":53,"_54":73,"_56":57,"_58":-5,"_18":186},{"_36":60,"_13":61,"_39":62,"_41":42,"_43":44,"_45":63,"_47":48,"_49":64,"_17":51,"_52":53,"_54":65,"_56":57,"_58":-5,"_18":185},{"_36":37,"_13":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_17":51,"_52":53,"_54":55,"_56":57,"_58":-5,"_18":184},[19,38],[19,61],[19,68],"pulls","branches","forks",{"_193":51,"_195":51},"connections",{"_193":51,"_194":51},"count","unfilledCount","emptyCount",{"_36":75,"_13":19,"_39":42,"_41":-5,"_43":44,"_45":72,"_47":48,"_49":91,"_17":51,"_52":77,"_54":-5,"_56":57,"_58":-5,"_88":209,"_18":210},{"_36":67,"_13":68,"_39":69,"_41":42,"_43":44,"_45":70,"_47":48,"_49":103,"_17":72,"_52":53,"_54":73,"_56":57,"_58":-5,"_88":207,"_18":208},{"_36":60,"_13":61,"_39":62,"_41":42,"_43":44,"_45":63,"_47":48,"_49":100,"_17":51,"_52":53,"_54":65,"_56":57,"_58":-5,"_88":205,"_18":206},{"_36":37,"_13":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":97,"_17":51,"_52":53,"_54":55,"_56":57,"_58":-5,"_88":203,"_18":204},{"_36":81,"_13":82,"_39":83,"_41":-5,"_43":44,"_45":84,"_47":48,"_49":85,"_17":51,"_52":86,"_54":87,"_56":57,"_58":-5,"_88":201,"_18":202},[],[82],[],[19,38],[],[19,61],[],[19,68],[197,198,199],[19],["D",1784050276289],{"_11":12,"_159":155},{"_11":12,"_152":153,"_154":155,"_115":116,"_156":157,"_158":57},{"_17":70,"_13":16,"_36":44,"_144":106,"_145":-5,"_146":-5,"_147":-5,"_148":-5,"_149":-5,"_150":14,"_151":12},"ctx",{"_137":-5,"_176":248,"_249":250,"_251":252,"_253":57,"_254":57,"_255":57,"_256":48,"_257":-5,"_258":-7,"_259":-7,"_260":51,"_261":57,"_262":57,"_263":-5,"_264":57,"_265":57,"_266":57,"_267":-5},"ENV",{"_219":220,"_221":222,"_223":16,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233,"_234":235,"_236":237,"_238":239,"_240":241,"_242":243,"_244":245,"_246":247},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","71c1b20804b3232a7e513be260cfffc1932a9e97","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]