${opts.name}

\n${rows}\n

`;\n}\n",[19,84],"229011b4-5b16-11f1-94e6-ee650bb23af1","config.ts","019e0434-fc8f-7068-a12e-b61e7f024a2c",2,["D",1780028605160],"/**\n * Wiring for the XAA demo stack. Client creds are NOT hardcoded — they\n * come from /register (see register.ts). The IdP and AS issue distinct\n * client_ids because each bakes its own issuer into the HMAC input.\n */\n\nexport const OKTA_ISSUER = \"https://integrator-7089468.okta.com\";\n\nexport const DEMO_USER = {\n sub: \"demo@example.com\",\n email: \"demo@example.com\",\n name: \"Demo User\",\n};\n\n// \"Am I on val.town?\" — esm.town serves deployed code\nexport const ON_VALTOWN = import.meta.url.startsWith(\"https://esm.town\");\n\nexport const URLS = ON_VALTOWN\n ? {\n idp: \"https://xaa-mcp-idp.val.run\",\n as: \"https://xaa-mcp-as.val.run\",\n rs: \"https://xaa-mcp-rs.val.run\",\n cal: \"https://xaa-mcp-cal.val.run\",\n as2: \"https://xaa-mcp-as2-jlu.val.run\",\n rs2: \"https://xaa-mcp-rs2-jlu.val.run\",\n }\n : {\n idp: \"http://localhost:3001\",\n as: \"http://localhost:3002\",\n rs: \"http://localhost:3000\",\n cal: \"http://localhost:3003\",\n as2: \"http://localhost:3005\",\n rs2: \"http://localhost:3004\",\n };\n",[19,91],"694cfa66-4a56-11f1-8e32-ee650bb23af1",["D",1778187041883],"directory",[19],{"_36":97,"_13":19,"_64":67,"_66":-5,"_68":69,"_70":86,"_72":73,"_38":115,"_17":34,"_76":99,"_78":-5,"_80":51,"_81":-5,"_112":116,"_18":117},{"_36":103,"_13":104,"_64":105,"_66":-5,"_68":69,"_70":106,"_72":73,"_38":107,"_17":108,"_76":109,"_78":110,"_80":51,"_81":111,"_112":113,"_18":114},"2003cd63-f690-4490-a753-013fd51cdafb","http.ts","019e0434-fc90-71c0-86b4-19e226c1afab",17,["D",1786678483921],8,"http","import { createResourceServer } from \"./shared/mcp-rs.ts\";\nimport { URLS } from \"./shared/config.ts\";\n\n// Fake gmail. The point is the sub claim — prove that bob@tables.fake's\n// identity flowed Okta → as2 → here without a single consent screen.\n\nconst INBOX = [\n { id: \"m1\", from: \"aaron@okta.com\", subject: \"XAA beta access enabled for integrator-7089468\", snippet: \"Your tenant now supports token-exchange → id-jag. Try the Cross-App Access panel under Security.\" },\n { id: \"m2\", from: \"noreply@val.town\", subject: \"xaa-mcp-as2 deployed\", snippet: \"https://xaa-mcp-as2.val.run is live\" },\n { id: \"m3\", from: \"you@example.com\", subject: \"reminder: record demo before Apr 3\", snippet: \"todos → cal → gmail, zero clicks after the first Okta login\" },\n];\n\nconst app = createResourceServer({\n name: \"xaa-mcp-rs2\",\n selfUrl: URLS.rs2,\n asUrls: [URLS.as2],\n scopes: [\n \"gmail.read\",\n \"gmail.send\",\n \"gmail.modify\",\n \"gmail.compose\",\n \"gmail.labels\",\n \"gmail.metadata\",\n \"gmail.settings.basic\",\n \"gmail.settings.sharing\",\n \"contacts.read\",\n \"profile\",\n ],\n port: 3004,\n tools: [\n {\n name: \"list_messages\",\n description: \"List inbox messages. Returns id + from + subject.\",\n inputSchema: { type: \"object\", properties: {} },\n handler: (_args, claims) => ({\n content: [{\n type: \"text\",\n text: `Inbox for ${claims?.sub}:\\n` +\n INBOX.map((m) => ` [${m.id}] ${m.from} — ${m.subject}`).join(\"\\n\"),\n }],\n }),\n },\n {\n name: \"get_message\",\n description: \"Get one message by id.\",\n inputSchema: { type: \"object\", properties: { id: { type: \"string\" } }, required: [\"id\"] },\n handler: ({ id }) => {\n const m = INBOX.find((x) => x.id === id);\n return { content: [{ type: \"text\", text: m ? `From: ${m.from}\\nSubject: ${m.subject}\\n\\n${m.snippet}` : `No message ${id}` }] };\n },\n },\n ],\n});\n\nexport default app.fetch;\nif (import.meta.main) Deno.serve({ port: 3004 }, app.fetch);\n","xaa-mcp-rs2-jlu","children",[],[104],["D",1778187041883],[118,119,120],[19],{"_36":90,"_13":91,"_64":92,"_66":67,"_68":69,"_70":93,"_72":73,"_38":127,"_17":86,"_76":77,"_78":95,"_80":51,"_81":-5,"_112":128,"_18":129},{"_36":83,"_13":84,"_64":85,"_66":67,"_68":69,"_70":86,"_72":73,"_38":124,"_17":34,"_76":77,"_78":88,"_80":51,"_81":-5,"_112":125,"_18":126},{"_36":62,"_13":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_38":121,"_17":75,"_76":77,"_78":79,"_80":51,"_81":-5,"_112":122,"_18":123},["D",1782947823169],[],[19,63],["D",1778187041883],[],[19,84],["D",1780028605160],[],[19,91],"6944ad98-4a56-11f1-8e32-ee650bb23af1",["D",1778187041883],"legacyEnvVars","httpPrivacy","description","imageUrl","userId","f6016879-c05b-4822-8e40-a3b6bd7a7e8a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","019e0433-9f2e-749c-bf05-4b5f5a8e723b","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_173":169},"org",{"_11":12,"_166":167,"_168":169,"_136":137,"_170":171,"_172":51},"branch",{"_17":106,"_13":16,"_36":69,"_42":130,"_45":37,"_46":44,"_163":53,"_164":43,"_165":57,"_58":14,"_54":12},"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","displayName","Justin Lu","avatar","https://lh3.googleusercontent.com/a/ACg8ocK3SYoizVYImoeptY6sq74_q6gNsNUG1dJKtPCpRH1O99Wt0eQ=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_36":130,"_13":14,"_38":230,"_49":-5,"_132":51,"_52":53,"_133":53,"_134":-5,"_135":-5,"_136":137,"_138":-5,"_139":51,"_140":-5,"_141":-5,"_142":34,"_56":143,"_144":-5,"_145":-5,"_146":-5,"_147":-5,"_148":149,"_150":149,"_151":152,"_153":152,"_154":152,"_155":149,"_156":149,"_157":231,"_159":232,"_161":233,"_50":51},[215,219],"files",[215,216,217,218,219],"counts",{"_206":34,"_207":86,"_208":86,"_35":209,"_210":211},[200,201,202],{"_36":97,"_13":19,"_64":67,"_66":-5,"_68":69,"_70":86,"_72":73,"_38":98,"_17":34,"_76":99,"_78":-5,"_80":51,"_81":-5,"_18":199},"upstreamProject",{"_36":43,"_13":14,"_134":-5,"_135":-5,"_52":53,"_157":197},"upstreamBranch",{"_36":37,"_38":195,"_40":196,"_13":16,"_42":43,"_17":44,"_45":-5,"_46":-5,"_47":48,"_49":-5,"_50":51,"_52":53,"_54":55,"_56":57,"_58":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1772721390899],["D",1775845333565],{"_11":55,"_173":198},"https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yZjg2YXM0MEVRM0hKQzVqcFJ5aHZteXUxUjUifQ",[19],{"_36":90,"_13":91,"_64":92,"_66":67,"_68":69,"_70":93,"_72":73,"_38":94,"_17":86,"_76":77,"_78":95,"_80":51,"_81":-5,"_18":205},{"_36":83,"_13":84,"_64":85,"_66":67,"_68":69,"_70":86,"_72":73,"_38":87,"_17":34,"_76":77,"_78":88,"_80":51,"_81":-5,"_18":204},{"_36":62,"_13":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_38":74,"_17":75,"_76":77,"_78":79,"_80":51,"_81":-5,"_18":203},[19,63],[19,84],[19,91],"pulls","branches","forks",{"_212":34,"_214":34},"connections",{"_212":34,"_213":34},"count","unfilledCount","emptyCount",{"_36":97,"_13":19,"_64":67,"_66":-5,"_68":69,"_70":86,"_72":73,"_38":115,"_17":34,"_76":99,"_78":-5,"_80":51,"_81":-5,"_112":228,"_18":229},{"_36":90,"_13":91,"_64":92,"_66":67,"_68":69,"_70":93,"_72":73,"_38":127,"_17":86,"_76":77,"_78":95,"_80":51,"_81":-5,"_112":226,"_18":227},{"_36":83,"_13":84,"_64":85,"_66":67,"_68":69,"_70":86,"_72":73,"_38":124,"_17":34,"_76":77,"_78":88,"_80":51,"_81":-5,"_112":224,"_18":225},{"_36":62,"_13":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_38":121,"_17":75,"_76":77,"_78":79,"_80":51,"_81":-5,"_112":222,"_18":223},{"_36":103,"_13":104,"_64":105,"_66":-5,"_68":69,"_70":106,"_72":73,"_38":107,"_17":108,"_76":109,"_78":110,"_80":51,"_81":111,"_112":220,"_18":221},[],[104],[],[19,63],[],[19,84],[],[19,91],[216,217,218],[19],["D",1778187041883],{"_11":12,"_173":169},{"_11":12,"_166":167,"_168":169,"_136":137,"_170":171,"_172":51},{"_17":106,"_13":16,"_36":69,"_42":130,"_45":37,"_46":44,"_163":53,"_164":43,"_165":57,"_58":14,"_54":12},"ctx",{"_157":-5,"_192":267,"_268":269,"_270":271,"_272":51,"_273":51,"_274":51,"_275":73,"_276":-5,"_277":-7,"_278":-7,"_279":34,"_280":51,"_281":51,"_282":-5,"_283":51,"_284":51,"_285":51,"_286":-5},"ENV",{"_238":239,"_240":241,"_242":16,"_243":244,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]