${opts.name}

\n${rows}\n

`;\n}\n",[19,61],"832ccaa2-2d40-11f1-a405-42dde27851f2","config.ts","b3d805e0-18a0-11f1-a028-42dde27851f2",5,["D",1774989052695],1,"/**\n * Wiring for the XAA demo stack. Client creds are NOT hardcoded — they\n * come from /register (see register.ts). The IdP and AS issue distinct\n * client_ids because each bakes its own issuer into the HMAC input.\n */\n\nexport const OKTA_ISSUER = \"https://integrator-7089468.okta.com\";\n\nexport const DEMO_USER = {\n sub: \"demo@example.com\",\n email: \"demo@example.com\",\n name: \"Demo User\",\n};\n\n// \"Am I on val.town?\" — esm.town serves deployed code\nexport const ON_VALTOWN = import.meta.url.startsWith(\"https://esm.town\");\n\nexport const URLS = ON_VALTOWN\n ? {\n idp: \"https://xaa-mcp-idp.val.run\",\n as: \"https://xaa-mcp-as.val.run\",\n rs: \"https://xaa-mcp-rs.val.run\",\n cal: \"https://xaa-mcp-cal.val.run\",\n as2: \"https://xaa-mcp-as2.val.run\",\n rs2: \"https://xaa-mcp-rs2.val.run\",\n }\n : {\n idp: \"http://localhost:3001\",\n as: \"http://localhost:3002\",\n rs: \"http://localhost:3000\",\n cal: \"http://localhost:3003\",\n as2: \"http://localhost:3005\",\n rs2: \"http://localhost:3004\",\n };\n",[19,69],"b3d813dc-18a0-11f1-a028-42dde27851f2","directory",["D",1772721391623],[19],{"_36":76,"_13":19,"_39":42,"_41":-5,"_43":44,"_45":51,"_47":48,"_49":92,"_17":65,"_52":77,"_54":-5,"_56":57,"_58":-5,"_89":93,"_18":94},{"_36":82,"_13":83,"_39":84,"_41":-5,"_43":44,"_45":85,"_47":48,"_49":86,"_17":51,"_52":87,"_54":88,"_56":57,"_58":14,"_89":90,"_18":91},"31debd82-350a-11f1-80f8-42b51c65c3df","http.ts","b3a9bdb6-18a0-11f1-a028-42dde27851f2",8,["D",1775845332723],"http","import { createResourceServer } from \"./shared/mcp-rs.ts\";\nimport { URLS } from \"./shared/config.ts\";\n\n// Fake gmail. The point is the sub claim — prove that bob@tables.fake's\n// identity flowed Okta → as2 → here without a single consent screen.\n\nconst INBOX = [\n { id: \"m1\", from: \"aaron@okta.com\", subject: \"XAA beta access enabled for integrator-7089468\", snippet: \"Your tenant now supports token-exchange → id-jag. Try the Cross-App Access panel under Security.\" },\n { id: \"m2\", from: \"noreply@val.town\", subject: \"xaa-mcp-as2 deployed\", snippet: \"https://xaa-mcp-as2.val.run is live\" },\n { id: \"m3\", from: \"you@example.com\", subject: \"reminder: record demo before Apr 3\", snippet: \"todos → cal → gmail, zero clicks after the first Okta login\" },\n];\n\nconst app = createResourceServer({\n name: \"xaa-mcp-rs2\",\n selfUrl: URLS.rs2,\n // as2 first → toolbox PRM discovery picks the val AS for the Claude-as-IdP path.\n // Stytch second → xaa.ts Okta→Stytch demo keeps working against the same RS.\n asUrls: [URLS.as2, \"https://groovy-temple-5137.customers.stytch.dev\"],\n port: 3004,\n tools: [\n {\n name: \"list_messages\",\n description: \"List inbox messages. Returns id + from + subject.\",\n inputSchema: { type: \"object\", properties: {} },\n handler: (_args, claims) => ({\n content: [{\n type: \"text\",\n text: `Inbox for ${claims?.sub}:\\n` +\n INBOX.map((m) => ` [${m.id}] ${m.from} — ${m.subject}`).join(\"\\n\"),\n }],\n }),\n },\n {\n name: \"get_message\",\n description: \"Get one message by id.\",\n inputSchema: { type: \"object\", properties: { id: { type: \"string\" } }, required: [\"id\"] },\n handler: ({ id }) => {\n const m = INBOX.find((x) => x.id === id);\n return { content: [{ type: \"text\", text: m ? `From: ${m.from}\\nSubject: ${m.subject}\\n\\n${m.snippet}` : `No message ${id}` }] };\n },\n },\n ],\n});\n\nexport default app.fetch;\nif (import.meta.main) Deno.serve({ port: 3004 }, app.fetch);\n","children",[],[83],["D",1772721391623],[95,96,97],[19],{"_36":68,"_13":69,"_39":70,"_41":42,"_43":44,"_45":71,"_47":48,"_49":104,"_17":73,"_52":53,"_54":74,"_56":57,"_58":-5,"_89":105,"_18":106},{"_36":60,"_13":61,"_39":62,"_41":42,"_43":44,"_45":63,"_47":48,"_49":101,"_17":65,"_52":53,"_54":66,"_56":57,"_58":-5,"_89":102,"_18":103},{"_36":37,"_13":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":98,"_17":51,"_52":53,"_54":55,"_56":57,"_58":-5,"_89":99,"_18":100},["D",1775845333565],[],[19,38],["D",1772721391937],[],[19,61],["D",1774989052695],[],[19,69],"b3690820-18a0-11f1-bc84-42dde27851f2",["D",1772721390899],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","f4518a30-f52b-4b12-891c-a8fffb7240f8","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","1d3af61b-92b3-4fbf-b22a-ca08b2122f4d","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_159":155},"org",{"_11":12,"_153":-5,"_154":155,"_116":117,"_156":157,"_158":57},"branch",{"_17":46,"_13":16,"_36":44,"_145":107,"_146":-5,"_147":-5,"_148":-5,"_149":-5,"_150":-5,"_151":14,"_152":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yZjg2YXM0MEVRM0hKQzVqcFJ5aHZteXUxUjUifQ","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_36":107,"_13":14,"_49":211,"_109":-5,"_110":57,"_111":112,"_113":112,"_114":-5,"_115":-5,"_116":117,"_118":-5,"_119":57,"_120":-5,"_121":-5,"_122":65,"_123":124,"_125":-5,"_126":-5,"_127":-5,"_128":-5,"_129":130,"_131":130,"_132":133,"_134":133,"_135":133,"_136":130,"_137":130,"_138":212,"_140":213,"_142":214,"_144":57},[196,200],"files",[196,197,198,199,200],"counts",{"_187":65,"_188":73,"_189":51,"_32":190,"_191":192},[181,182,183],{"_36":76,"_13":19,"_39":42,"_41":-5,"_43":44,"_45":51,"_47":48,"_49":179,"_17":65,"_52":77,"_54":-5,"_56":57,"_58":-5,"_18":180},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1772721391623],[19],{"_36":68,"_13":69,"_39":70,"_41":42,"_43":44,"_45":71,"_47":48,"_49":72,"_17":73,"_52":53,"_54":74,"_56":57,"_58":-5,"_18":186},{"_36":60,"_13":61,"_39":62,"_41":42,"_43":44,"_45":63,"_47":48,"_49":64,"_17":65,"_52":53,"_54":66,"_56":57,"_58":-5,"_18":185},{"_36":37,"_13":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_17":51,"_52":53,"_54":55,"_56":57,"_58":-5,"_18":184},[19,38],[19,61],[19,69],"pulls","branches","forks",{"_193":65,"_195":65},"connections",{"_193":65,"_194":65},"count","unfilledCount","emptyCount",{"_36":76,"_13":19,"_39":42,"_41":-5,"_43":44,"_45":51,"_47":48,"_49":92,"_17":65,"_52":77,"_54":-5,"_56":57,"_58":-5,"_89":209,"_18":210},{"_36":68,"_13":69,"_39":70,"_41":42,"_43":44,"_45":71,"_47":48,"_49":104,"_17":73,"_52":53,"_54":74,"_56":57,"_58":-5,"_89":207,"_18":208},{"_36":60,"_13":61,"_39":62,"_41":42,"_43":44,"_45":63,"_47":48,"_49":101,"_17":65,"_52":53,"_54":66,"_56":57,"_58":-5,"_89":205,"_18":206},{"_36":37,"_13":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":98,"_17":51,"_52":53,"_54":55,"_56":57,"_58":-5,"_89":203,"_18":204},{"_36":82,"_13":83,"_39":84,"_41":-5,"_43":44,"_45":85,"_47":48,"_49":86,"_17":51,"_52":87,"_54":88,"_56":57,"_58":14,"_89":201,"_18":202},[],[83],[],[19,38],[],[19,61],[],[19,69],[197,198,199],[19],["D",1772721390899],{"_11":12,"_159":155},{"_11":12,"_153":-5,"_154":155,"_116":117,"_156":157,"_158":57},{"_17":46,"_13":16,"_36":44,"_145":107,"_146":-5,"_147":-5,"_148":-5,"_149":-5,"_150":-5,"_151":14,"_152":12},"ctx",{"_138":-5,"_176":248,"_249":250,"_251":252,"_253":57,"_254":57,"_255":57,"_256":48,"_257":-5,"_258":-7,"_259":-7,"_260":65,"_261":57,"_262":57,"_263":-5,"_264":57,"_265":57,"_266":57,"_267":-5},"ENV",{"_219":220,"_221":222,"_223":16,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233,"_234":235,"_236":237,"_238":239,"_240":241,"_242":243,"_244":245,"_246":247},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]