${opts.name}

\n${rows}\n

`;\n}\n",[],[160,190],{"_106":198,"_97":199,"_161":200,"_163":162,"_164":146,"_165":201,"_167":168,"_108":202,"_102":33,"_170":184,"_172":203,"_173":22,"_174":-5,"_175":204,"_100":205},"cf832f5e-17d8-11f1-b9d8-42dde27851f2","keys.ts","cf83303a-17d8-11f1-b9d8-42dde27851f2",3,["D",1772635538694],"/**\n * Keypair persistence. Val.town is stateless per-request; keys must survive.\n *\n * - On val.town: blob storage (getJSON/setJSON the private JWK)\n * - Local dev: in-memory (process lifetime — fine for --watch; ephemeral\n * means restarting one server invalidates tokens the others hold, which is\n * an acceptable dev quirk)\n */\n\nimport * as jose from \"npm:jose@5\";\nimport { ON_VALTOWN } from \"./config.ts\";\n\nexport interface Keypair {\n privateKey: jose.KeyLike;\n publicKey: jose.KeyLike;\n publicJwk: jose.JWK;\n kid: string;\n}\n\nconst localCache = new Map();\n\nasync function materialize(privateJwk: jose.JWK): Promise {\n const privateKey = await jose.importJWK(privateJwk, \"ES256\") as jose.KeyLike;\n // Public JWK = private JWK minus the private component\n const { d: _d, ...pub } = privateJwk;\n const publicJwk = pub as jose.JWK;\n const publicKey = await jose.importJWK(publicJwk, \"ES256\") as jose.KeyLike;\n const kid = await jose.calculateJwkThumbprint(publicJwk);\n return { privateKey, publicKey, publicJwk: { ...publicJwk, kid, use: \"sig\", alg: \"ES256\" }, kid };\n}\n\nasync function generate(): Promise {\n const { privateKey } = await jose.generateKeyPair(\"ES256\", { extractable: true });\n return await jose.exportJWK(privateKey);\n}\n\nexport async function getOrCreateKeypair(blobKey: string): Promise {\n if (ON_VALTOWN) {\n const { blob } = await import(\"https://esm.town/v/std/blob\");\n let jwk = await blob.getJSON(blobKey) as jose.JWK | undefined;\n if (!jwk) {\n jwk = await generate();\n await blob.setJSON(blobKey, jwk);\n }\n return materialize(jwk);\n }\n\n // Local: cache for process lifetime\n const cached = localCache.get(blobKey);\n if (cached) return cached;\n const kp = await materialize(await generate());\n localCache.set(blobKey, kp);\n console.warn(`[keys] ${blobKey}: ephemeral key (kid=${kp.kid.slice(0, 12)}…), lives until process restart`);\n return kp;\n}\n",[],[160,199],{"_106":207,"_97":208,"_161":209,"_163":162,"_164":146,"_165":103,"_167":22,"_108":210,"_102":33,"_170":184,"_172":211,"_173":22,"_174":-5,"_175":212,"_100":213},"ba43234e-17e0-11f1-8843-42dde27851f2","register.ts","ba432452-17e0-11f1-8843-42dde27851f2",["D",1772638939009],"/**\n * Stateless client registration via HMAC.\n *\n * client_id = _id_\n * client_secret = _sec_\n *\n * The prefix makes it obvious at a glance which server issued which cred.\n * Secret is keyed off the full client_id (prefix included) so the prefix\n * is authenticated — you can't swap an idp_id_ for an as1_id_ and have\n * the secret still validate.\n *\n * Nothing is stored. Validation is re-derivation. The redirect_uri is the\n * account key: register the same URI at IdP and AS → two distinct IDs, but\n * the IdP can re-derive the AS one because it knows both issuers and the URI.\n */\n\nimport { URLS } from \"./config.ts\";\n\n// Per-server prefixes. The IdP needs to know the AS's prefix too — it's part\n// of what deriveAsClientIdFor uses to match what the AS /register emitted.\nexport const IDP_PREFIX = \"idp\";\nexport const AS_PREFIX = \"as1\";\n\nconst KEY = \"xaa-demo-hmac-key-not-secret\";\nconst enc = new TextEncoder();\n\nlet hmacKey: CryptoKey | undefined;\nasync function key(): Promise {\n return hmacKey ??= await crypto.subtle.importKey(\n \"raw\", enc.encode(KEY), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"],\n );\n}\n\nasync function hmacHex(input: string): Promise {\n const sig = await crypto.subtle.sign(\"HMAC\", await key(), enc.encode(input));\n return Array.from(new Uint8Array(sig), (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport async function deriveClientId(prefix: string, issuer: string, redirectUri: string): Promise {\n return `${prefix}_id_${(await hmacHex(`${issuer}|${redirectUri}`)).slice(0, 12)}`;\n}\n\nexport async function deriveClientSecret(clientId: string): Promise {\n // Secret keys off the full client_id — prefix is bound, not cosmetic.\n const prefix = clientId.split(\"_id_\")[0];\n return `${prefix}_sec_${(await hmacHex(clientId)).slice(0, 16)}`;\n}\n\n/** /register: URI in, creds out. Same URI → same creds (idempotent). */\nexport async function register(prefix: string, issuer: string, redirectUri: string) {\n const client_id = await deriveClientId(prefix, issuer, redirectUri);\n const client_secret = await deriveClientSecret(client_id);\n return { client_id, client_secret, redirect_uri: redirectUri };\n}\n\n/** Validate a (client_id, client_secret) pair without knowing the redirect_uri. */\nexport async function validateSecret(clientId: string, clientSecret: string): Promise {\n return clientSecret === await deriveClientSecret(clientId);\n}\n\n/** Validate that a client_id was issued for a given redirect_uri at a given issuer. */\nexport async function validateRedirect(prefix: string, issuer: string, clientId: string, redirectUri: string): Promise {\n return clientId === await deriveClientId(prefix, issuer, redirectUri);\n}\n\n/**\n * The IdP's \"app<>app\" mapping. Given a redirect_uri (extracted from the\n * id_token) and a target AS issuer (the token-exchange `audience`), derive\n * what client_id the user got when they registered that same URI at the AS.\n */\nexport async function deriveAsClientIdFor(asIssuer: string, redirectUri: string): Promise {\n return deriveClientId(AS_PREFIX, asIssuer, redirectUri);\n}\n\n/** Canonical redirect_uri for /debug endpoints — matches CC's default port. */\nexport const DEBUG_REDIRECT_URI = \"http://localhost:52118/callback\";\n\n/** Pre-derived creds for /debug/context. */\nexport async function debugCreds() {\n const idp = await register(IDP_PREFIX, URLS.idp, DEBUG_REDIRECT_URI);\n const as = await register(AS_PREFIX, URLS.as, DEBUG_REDIRECT_URI);\n return { idp, as };\n}\n",[],[160,208],[160],{"_106":216,"_97":101,"_161":217,"_163":-5,"_164":146,"_165":218,"_167":22,"_108":219,"_102":183,"_170":220,"_172":221,"_173":22,"_174":98,"_175":222,"_100":223},"b999a9e0-17e0-11f1-81db-42dde27851f2","cee9af46-17d8-11f1-881f-42dde27851f2",5,["D",1772638937902],"http","import { Hono } from \"npm:hono@3\";\nimport { cors } from \"npm:hono@3/cors\";\nimport * as jose from \"npm:jose@5\";\nimport { URLS } from \"./shared/config.ts\";\nimport { getOrCreateKeypair } from \"./shared/keys.ts\";\nimport { indexPage } from \"./shared/html.ts\";\nimport { register, validateSecret, AS_PREFIX } from \"./shared/register.ts\";\n\nconst JWT_BEARER_GRANT = \"urn:ietf:params:oauth:grant-type:jwt-bearer\";\nconst ID_JAG_TYP = \"oauth-id-jag+jwt\";\n\nconst kp = await getOrCreateKeypair(\"xaa_as_signing_key_v1\");\nconst idpJwks = jose.createRemoteJWKSet(new URL(`${URLS.idp}/.well-known/jwks.json`));\n\nconst app = new Hono();\napp.use(\"*\", cors({\n origin: \"*\",\n allowMethods: [\"GET\", \"POST\", \"OPTIONS\"],\n allowHeaders: [\"Content-Type\", \"Authorization\", \"mcp-protocol-version\"],\n}));\n\n// ─── Metadata + JWKS ────────────────────────────────────────────────────────\n// authorization_endpoint + response_types_supported are SDK-schema-required\n// even though XAA never hits /authorize on the AS.\n\napp.get(\"/.well-known/oauth-authorization-server\", (c) =>\n c.json({\n issuer: URLS.as,\n token_endpoint: `${URLS.as}/token`,\n authorization_endpoint: `${URLS.idp}/authorize`,\n registration_endpoint: `${URLS.as}/register`,\n response_types_supported: [\"code\"],\n grant_types_supported: [JWT_BEARER_GRANT],\n token_endpoint_auth_methods_supported: [\"client_secret_basic\", \"client_secret_post\"],\n }));\n\napp.get(\"/.well-known/jwks.json\", (c) => c.json({ keys: [kp.publicJwk] }));\n\n// ─── /register ──────────────────────────────────────────────────────────────\n// jwt-bearer never redirects — the URI here is purely a binding key. It's\n// the shared string that lets the IdP re-derive your AS client_id when it\n// mints the ID-JAG (the demo's stand-in for real-world app<>app admin config).\n\napp.get(\"/register\", (c) =>\n c.html(`Register — AS\n\n

Register at the AS

jwt-bearer doesn't redirect — the URI below is just the binding key between you and the IdP. Enter the same value you registered there. In production this would be an admin setting up the app↔app mapping; here it's you typing the same string twice.

\n`));\n\napp.post(\"/register\", async (c) => {\n const body = await c.req.parseBody();\n const redirectUri = body.redirect_uri as string;\n if (!redirectUri) return c.json({ error: \"invalid_request\", error_description: \"redirect_uri required\" }, 400);\n return c.json(await register(AS_PREFIX, URLS.as, redirectUri));\n});\n\n// ─── /token — jwt-bearer ────────────────────────────────────────────────────\n// Validation order: client auth → typ → sig via IdP JWKS → iss/aud/clock →\n// client_id binding. Then mint an access-JWT aud-bound to the ID-JAG's\n// `resource` claim (not a hardcoded RS — we front multiple resources).\n\napp.post(\"/token\", async (c) => {\n const body = await c.req.parseBody();\n if (body.grant_type !== JWT_BEARER_GRANT) {\n return c.json({ error: \"unsupported_grant_type\", error_description: String(body.grant_type) }, 400);\n }\n\n // Client auth — basic or post\n let clientId: string | undefined, clientSecret: string | undefined;\n const authz = c.req.header(\"Authorization\");\n if (authz?.startsWith(\"Basic \")) {\n const decoded = atob(authz.slice(6));\n const sep = decoded.indexOf(\":\");\n clientId = decodeURIComponent(decoded.slice(0, sep));\n clientSecret = decodeURIComponent(decoded.slice(sep + 1));\n } else {\n clientId = body.client_id as string;\n clientSecret = body.client_secret as string;\n }\n if (!clientId || !clientSecret || !(await validateSecret(clientId, clientSecret))) {\n return c.json({ error: \"invalid_client\", error_description: \"client authentication failed\" }, 401);\n }\n\n const assertion = body.assertion as string;\n if (!assertion) {\n return c.json({ error: \"invalid_request\", error_description: \"missing assertion\" }, 400);\n }\n\n const header = jose.decodeProtectedHeader(assertion);\n if (header.typ !== ID_JAG_TYP) {\n return c.json({ error: \"invalid_grant\", error_description: `typ must be ${ID_JAG_TYP}, got ${header.typ}` }, 400);\n }\n\n let claims: jose.JWTPayload;\n try {\n const { payload } = await jose.jwtVerify(assertion, idpJwks, {\n issuer: URLS.idp,\n audience: [URLS.as, `${URLS.as}/`],\n clockTolerance: 30,\n });\n claims = payload;\n } catch (e) {\n return c.json({ error: \"invalid_grant\", error_description: `ID-JAG verification failed: ${e instanceof Error ? e.message : e}` }, 400);\n }\n\n // The IdP put your AS client_id in here. If it doesn't match who you\n // authenticated as just now, something's off.\n if (claims.client_id !== clientId) {\n return c.json({\n error: \"invalid_grant\",\n error_description: `ID-JAG client_id (${claims.client_id}) does not match authenticating client (${clientId})`,\n }, 400);\n }\n\n const resource = claims.resource as string;\n if (!resource) {\n return c.json({ error: \"invalid_grant\", error_description: \"ID-JAG missing resource claim\" }, 400);\n }\n\n const accessToken = await new jose.SignJWT({})\n .setProtectedHeader({ alg: \"ES256\", kid: kp.kid })\n .setIssuer(URLS.as)\n .setAudience(resource)\n .setSubject(claims.sub!)\n .setIssuedAt()\n .setExpirationTime(\"1h\")\n .sign(kp.privateKey);\n\n return c.json({ access_token: accessToken, token_type: \"Bearer\", expires_in: 3600 });\n});\n\napp.get(\"/\", (c) =>\n c.html(indexPage({\n role: \"AS\",\n name: \"xaa-mcp-as\",\n endpoints: [\n { method: \"GET\", path: \"/.well-known/oauth-authorization-server\" },\n { method: \"GET\", path: \"/.well-known/jwks.json\" },\n { method: \"GET\", path: \"/register\", note: \"same redirect_uri as at the IdP\" },\n { method: \"POST\", path: \"/token\", note: \"jwt-bearer\" },\n ],\n })));\n\napp.onError((err) => { throw err; });\n\nexport default app.fetch;\nif (import.meta.main) Deno.serve({ port: 3002 }, app.fetch);\n",[],[101],"files",[158,177,188,197,206,215],"counts",{"_228":33,"_229":183,"_230":33,"_231":232,"_235":236},"pulls","branches","forks","envVars",{"_233":33,"_234":33},"count","emptyCount","connections",{"_233":33,"_237":33},"unfilledCount","contents",[],"file",{"_106":216,"_97":101,"_161":217,"_163":-5,"_164":146,"_165":218,"_167":22,"_108":242,"_102":183,"_170":220,"_172":221,"_173":22,"_174":98,"_100":243},["D",1772638937902],[101],"upstreamProject","upstreamBranch","emptyEnvVars","isNew","flags",[],"routes/_app.x.$handle.$name.branch.$branch.version.$version.code.$",{"_95":96,"_97":98,"_99":45,"_102":103,"_100":101,"_104":252,"_156":257,"_224":276,"_240":277,"_238":279,"_280":-5,"_281":-5,"_282":-5,"_283":-5,"_284":285,"_231":-5},{"_106":107,"_97":98,"_108":253,"_110":-5,"_111":22,"_112":113,"_114":-5,"_115":-5,"_14":116,"_117":-5,"_118":22,"_119":-5,"_120":-5,"_121":33,"_16":122,"_123":-5,"_124":-5,"_125":-5,"_126":127,"_128":127,"_129":130,"_131":130,"_132":130,"_133":127,"_134":127,"_23":254,"_138":255,"_143":256,"_155":22},["D",1772635537332],{"_95":96,"_136":137},{"_95":96,"_140":137,"_14":116,"_141":142},{"_102":145,"_97":45,"_106":146,"_147":107,"_148":-5,"_149":-5,"_150":-5,"_151":-5,"_152":-5,"_153":98,"_154":96},[258,273],{"_106":159,"_97":160,"_161":162,"_163":-5,"_164":146,"_165":166,"_167":168,"_108":169,"_102":33,"_170":171,"_172":-5,"_173":22,"_174":-5,"_175":259,"_100":272},[260,263,266,269],{"_106":178,"_97":179,"_161":180,"_163":162,"_164":146,"_165":181,"_167":168,"_108":182,"_102":183,"_170":184,"_172":185,"_173":22,"_174":-5,"_175":261,"_100":262},[],[160,179],{"_106":189,"_97":190,"_161":191,"_163":162,"_164":146,"_165":192,"_167":168,"_108":193,"_102":33,"_170":184,"_172":194,"_173":22,"_174":-5,"_175":264,"_100":265},[],[160,190],{"_106":198,"_97":199,"_161":200,"_163":162,"_164":146,"_165":201,"_167":168,"_108":202,"_102":33,"_170":184,"_172":203,"_173":22,"_174":-5,"_175":267,"_100":268},[],[160,199],{"_106":207,"_97":208,"_161":209,"_163":162,"_164":146,"_165":103,"_167":22,"_108":210,"_102":33,"_170":184,"_172":211,"_173":22,"_174":-5,"_175":270,"_100":271},[],[160,208],[160],{"_106":216,"_97":101,"_161":217,"_163":-5,"_164":146,"_165":218,"_167":22,"_108":219,"_102":183,"_170":220,"_172":221,"_173":22,"_174":98,"_175":274,"_100":275},[],[101],[258,260,263,266,269,273],{"_106":216,"_97":101,"_161":217,"_163":-5,"_164":146,"_165":218,"_167":22,"_108":242,"_102":183,"_170":220,"_172":221,"_173":22,"_174":98,"_100":278},[101],[],"upstream","pull","ahead","behind","templates",[],"actionData","errors"]

pcarleton

xaa-mcp-as