${opts.name}

\n${rows}\n

`;\n}\n",[18,84],"832ccaa2-2d40-11f1-a405-42dde27851f2",["D",1774989052695],1,"/**\n * Wiring for the XAA demo stack. Client creds are NOT hardcoded — they\n * come from /register (see register.ts). The IdP and AS issue distinct\n * client_ids because each bakes its own issuer into the HMAC input.\n */\n\nexport const OKTA_ISSUER = \"https://integrator-7089468.okta.com\";\n\nexport const DEMO_USER = {\n sub: \"demo@example.com\",\n email: \"demo@example.com\",\n name: \"Demo User\",\n};\n\n// \"Am I on val.town?\" — esm.town serves deployed code\nexport const ON_VALTOWN = import.meta.url.startsWith(\"https://esm.town\");\n\nexport const URLS = ON_VALTOWN\n ? {\n idp: \"https://xaa-mcp-idp.val.run\",\n as: \"https://xaa-mcp-as.val.run\",\n rs: \"https://xaa-mcp-rs.val.run\",\n cal: \"https://xaa-mcp-cal.val.run\",\n as2: \"https://xaa-mcp-as2.val.run\",\n rs2: \"https://xaa-mcp-rs2.val.run\",\n }\n : {\n idp: \"http://localhost:3001\",\n as: \"http://localhost:3002\",\n rs: \"http://localhost:3000\",\n cal: \"http://localhost:3003\",\n as2: \"http://localhost:3005\",\n rs2: \"http://localhost:3004\",\n };\n",[18,69],"pulls","branches","forks","envVars",{"_216":26,"_218":26},"connections",{"_216":26,"_217":26},"count","unfilledCount","emptyCount",{"_38":186,"_13":18,"_67":116,"_48":-5,"_40":41,"_189":45,"_196":24,"_42":243,"_44":26,"_70":117,"_187":-5,"_72":30,"_190":-5,"_231":244,"_17":245},{"_38":204,"_13":69,"_67":68,"_48":116,"_40":41,"_189":96,"_196":24,"_42":240,"_44":206,"_70":71,"_187":207,"_72":30,"_190":-5,"_231":241,"_17":242},{"_38":200,"_13":84,"_67":83,"_48":116,"_40":41,"_189":78,"_196":24,"_42":237,"_44":26,"_70":71,"_187":202,"_72":30,"_190":-5,"_231":238,"_17":239},{"_38":195,"_13":93,"_67":92,"_48":116,"_40":41,"_189":110,"_196":24,"_42":234,"_44":45,"_70":71,"_187":198,"_72":30,"_190":-5,"_231":235,"_17":236},{"_38":224,"_13":225,"_67":226,"_48":-5,"_40":41,"_189":227,"_196":24,"_42":228,"_44":45,"_70":229,"_187":230,"_72":30,"_190":14,"_231":232,"_17":233},"31debd82-350a-11f1-80f8-42b51c65c3df","http.ts","b3a9bdb6-18a0-11f1-a028-42dde27851f2",8,["D",1775845332723],"http","import { createResourceServer } from \"./shared/mcp-rs.ts\";\nimport { URLS } from \"./shared/config.ts\";\n\n// Fake gmail. The point is the sub claim — prove that bob@tables.fake's\n// identity flowed Okta → as2 → here without a single consent screen.\n\nconst INBOX = [\n { id: \"m1\", from: \"aaron@okta.com\", subject: \"XAA beta access enabled for integrator-7089468\", snippet: \"Your tenant now supports token-exchange → id-jag. Try the Cross-App Access panel under Security.\" },\n { id: \"m2\", from: \"noreply@val.town\", subject: \"xaa-mcp-as2 deployed\", snippet: \"https://xaa-mcp-as2.val.run is live\" },\n { id: \"m3\", from: \"you@example.com\", subject: \"reminder: record demo before Apr 3\", snippet: \"todos → cal → gmail, zero clicks after the first Okta login\" },\n];\n\nconst app = createResourceServer({\n name: \"xaa-mcp-rs2\",\n selfUrl: URLS.rs2,\n // as2 first → toolbox PRM discovery picks the val AS for the Claude-as-IdP path.\n // Stytch second → xaa.ts Okta→Stytch demo keeps working against the same RS.\n asUrls: [URLS.as2, \"https://groovy-temple-5137.customers.stytch.dev\"],\n port: 3004,\n tools: [\n {\n name: \"list_messages\",\n description: \"List inbox messages. Returns id + from + subject.\",\n inputSchema: { type: \"object\", properties: {} },\n handler: (_args, claims) => ({\n content: [{\n type: \"text\",\n text: `Inbox for ${claims?.sub}:\\n` +\n INBOX.map((m) => ` [${m.id}] ${m.from} — ${m.subject}`).join(\"\\n\"),\n }],\n }),\n },\n {\n name: \"get_message\",\n description: \"Get one message by id.\",\n inputSchema: { type: \"object\", properties: { id: { type: \"string\" } }, required: [\"id\"] },\n handler: ({ id }) => {\n const m = INBOX.find((x) => x.id === id);\n return { content: [{ type: \"text\", text: m ? `From: ${m.from}\\nSubject: ${m.subject}\\n\\n${m.snippet}` : `No message ${id}` }] };\n },\n },\n ],\n});\n\nexport default app.fetch;\nif (import.meta.main) Deno.serve({ port: 3004 }, app.fetch);\n","children",[],[225],["D",1775845333565],[],[18,93],["D",1772721391937],[],[18,84],["D",1774989052695],[],[18,69],["D",1772721391623],[220,221,222],[18],["D",1772721390899],{"_11":12,"_164":75},{"_11":12,"_160":-5,"_74":75,"_31":73,"_161":162,"_163":30},{"_44":110,"_13":16,"_38":41,"_152":119,"_153":-5,"_154":-5,"_155":-5,"_156":-5,"_157":-5,"_158":14,"_159":12},"ctx",{"_57":-5,"_183":283,"_284":285,"_286":287,"_288":30,"_289":30,"_290":30,"_291":24,"_292":-5,"_293":-7,"_294":-7,"_295":26,"_296":30,"_297":30,"_298":-5,"_299":30,"_300":30,"_301":30,"_302":-5},"ENV",{"_254":255,"_256":257,"_258":16,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276,"_277":278,"_279":280,"_281":282},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · shared