${opts.name}

\n${rows}\n

`;\n}\n",[19,84],"a70306a8-2e26-11f1-b865-42dde27851f2","config.ts","019d4b7b-c9ea-74af-ac0c-7bf96265e6cb",["D",1775087897007],"/**\n * Wiring for the XAA demo stack. Client creds are NOT hardcoded — they\n * come from /register (see register.ts). The IdP and AS issue distinct\n * client_ids because each bakes its own issuer into the HMAC input.\n */\n\nexport const OKTA_ISSUER = \"https://integrator-7089468.okta.com\";\n\nexport const DEMO_USER = {\n sub: \"demo@example.com\",\n email: \"demo@example.com\",\n name: \"Demo User\",\n};\n\n// \"Am I on val.town?\" — esm.town serves deployed code\nexport const ON_VALTOWN = import.meta.url.startsWith(\"https://esm.town\");\n\nexport const URLS = ON_VALTOWN\n ? {\n idp: \"https://xaa-mcp-idp.val.run\",\n as: \"https://xaa-mcp-as.val.run\",\n rs: \"https://xaa-mcp-rs.val.run\",\n cal: \"https://xaa-mcp-cal.val.run\",\n as2: \"https://xaa-mcp-as2.val.run\",\n rs2: \"https://xaa-mcp-rs2.val.run\",\n }\n : {\n idp: \"http://localhost:3001\",\n as: \"http://localhost:3002\",\n rs: \"http://localhost:3000\",\n cal: \"http://localhost:3003\",\n as2: \"http://localhost:3005\",\n rs2: \"http://localhost:3004\",\n };\n",[19,91],"a70336be-2e26-11f1-b865-42dde27851f2",["D",1775087897007],"directory",[19],{"_36":96,"_13":19,"_64":67,"_66":-5,"_68":69,"_70":75,"_72":73,"_38":113,"_17":87,"_76":98,"_78":-5,"_80":51,"_81":-5,"_110":114,"_18":115},{"_36":102,"_13":103,"_64":104,"_66":-5,"_68":69,"_70":105,"_72":73,"_38":106,"_17":107,"_76":108,"_78":109,"_80":51,"_81":14,"_110":111,"_18":112},"7929b274-2edd-11f1-bc52-42dde27851f2","http.ts","019d4b7b-c9ea-74af-ac0c-8979a9180e7b",12,["D",1775166418044],10,"http","import { createResourceServer } from \"./shared/mcp-rs.ts\";\nimport { URLS } from \"./shared/config.ts\";\n\n// Fake gmail. The point is the sub claim — prove that bob@tables.fake's\n// identity flowed Okta → as2 → here without a single consent screen.\n\nconst INBOX = [\n {\n id: \"t1\",\n from: \"aaron@okta.com\",\n subject: \"XAA beta access enabled for integrator-7089468\",\n snippet:\n \"Your tenant now supports token-exchange → id-jag. Try the Cross-App Access panel under Security.\",\n },\n {\n id: \"t2\",\n from: \"noreply@val.town\",\n subject: \"xaa-mcp-as2 deployed\",\n snippet: \"https://xaa-mcp-as2.val.run is live\",\n },\n {\n id: \"t3\",\n from: \"you@example.com\",\n subject: \"reminder: record demo before Apr 3\",\n snippet:\n \"todos → cal → gmail, zero clicks after the first Okta login. XAA means Cross-App Access\",\n },\n];\n\nconst app = createResourceServer({\n name: \"xaa-mcp-rs3\",\n selfUrl: \"https://xaa-mcp-rs3.val.run\",\n // asUrl: \"https://xaa-mcp-as2.val.run/\",\n asUrl: URLS.as2,\n port: 3004,\n tools: [\n {\n name: \"list_tasks\",\n description: \"List inbox messages. Returns id + from + subject.\",\n inputSchema: { type: \"object\", properties: {} },\n handler: (_args, claims) => ({\n content: [{\n type: \"text\",\n text: `Inbox for ${claims?.sub}:\\n` +\n INBOX.map((m) => ` [${m.id}] ${m.from} — ${m.subject}`).join(\"\\n\"),\n }],\n }),\n },\n {\n name: \"get_message\",\n description: \"Get one message by id.\",\n inputSchema: {\n type: \"object\",\n properties: { id: { type: \"string\" } },\n required: [\"id\"],\n },\n handler: ({ id }) => {\n const m = INBOX.find((x) => x.id === id);\n return {\n content: [{\n type: \"text\",\n text: m\n ? `From: ${m.from}\\nSubject: ${m.subject}\\n\\n${m.snippet}`\n : `No message ${id}`,\n }],\n };\n },\n },\n ],\n});\n\nexport default app.fetch;\nif (import.meta.main) Deno.serve({ port: 3004 }, app.fetch);","children",[],[103],["D",1775087897007],[116,117,118],[19],{"_36":90,"_13":91,"_64":92,"_66":67,"_68":69,"_70":75,"_72":73,"_38":125,"_17":87,"_76":77,"_78":94,"_80":51,"_81":-5,"_110":126,"_18":127},{"_36":83,"_13":84,"_64":85,"_66":67,"_68":69,"_70":75,"_72":73,"_38":122,"_17":87,"_76":77,"_78":88,"_80":51,"_81":-5,"_110":123,"_18":124},{"_36":62,"_13":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_38":119,"_17":75,"_76":77,"_78":79,"_80":51,"_81":-5,"_110":120,"_18":121},["D",1775166178314],[],[19,63],["D",1775087897007],[],[19,84],["D",1775087897007],[],[19,91],"a6f9b3f0-2e26-11f1-b865-42dde27851f2",["D",1775087897007],"legacyEnvVars","httpPrivacy","description","imageUrl","userId","f4518a30-f52b-4b12-891c-a8fffb7240f8","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_170":166},"org",{"_11":12,"_164":-5,"_165":166,"_134":135,"_167":168,"_169":51},"branch",{"_17":105,"_13":16,"_36":69,"_42":128,"_45":37,"_46":160,"_161":53,"_162":43,"_163":56,"_57":14,"_54":12},7,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yZjg2YXM0MEVRM0hKQzVqcFJ5aHZteXUxUjUifQ","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_36":128,"_13":14,"_38":227,"_49":-5,"_130":51,"_52":53,"_131":53,"_132":-5,"_133":-5,"_134":135,"_136":-5,"_137":51,"_138":-5,"_139":-5,"_140":87,"_55":56,"_141":-5,"_142":-5,"_143":-5,"_144":-5,"_145":146,"_147":146,"_148":149,"_150":149,"_151":149,"_152":146,"_153":146,"_154":228,"_156":229,"_158":230,"_50":51},[212,216],"files",[212,213,214,215,216],"counts",{"_203":87,"_204":75,"_205":87,"_35":206,"_207":208},[197,198,199],{"_36":96,"_68":69,"_64":67,"_13":19,"_78":-5,"_76":98,"_17":87,"_66":-5,"_38":195,"_70":75,"_81":-5,"_18":196},"upstreamProject",{"_36":43,"_13":58,"_132":-5,"_133":-5,"_52":53,"_154":194},"upstreamBranch",{"_36":37,"_38":192,"_40":193,"_13":16,"_42":43,"_17":44,"_45":-5,"_46":-5,"_47":48,"_49":-5,"_50":51,"_52":53,"_54":12,"_55":56,"_57":58},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1772721390899],["D",1775845333565],{"_11":12,"_170":166},["D",1775087897007],[19],{"_36":90,"_13":91,"_64":92,"_66":67,"_68":69,"_70":75,"_72":73,"_38":93,"_17":87,"_76":77,"_78":94,"_80":51,"_81":-5,"_18":202},{"_36":83,"_13":84,"_64":85,"_66":67,"_68":69,"_70":75,"_72":73,"_38":86,"_17":87,"_76":77,"_78":88,"_80":51,"_81":-5,"_18":201},{"_36":62,"_13":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_38":74,"_17":75,"_76":77,"_78":79,"_80":51,"_81":-5,"_18":200},[19,63],[19,84],[19,91],"pulls","branches","forks",{"_209":87,"_211":87},"connections",{"_209":87,"_210":87},"count","unfilledCount","emptyCount",{"_36":96,"_13":19,"_64":67,"_66":-5,"_68":69,"_70":75,"_72":73,"_38":113,"_17":87,"_76":98,"_78":-5,"_80":51,"_81":-5,"_110":225,"_18":226},{"_36":90,"_13":91,"_64":92,"_66":67,"_68":69,"_70":75,"_72":73,"_38":125,"_17":87,"_76":77,"_78":94,"_80":51,"_81":-5,"_110":223,"_18":224},{"_36":83,"_13":84,"_64":85,"_66":67,"_68":69,"_70":75,"_72":73,"_38":122,"_17":87,"_76":77,"_78":88,"_80":51,"_81":-5,"_110":221,"_18":222},{"_36":62,"_13":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_38":119,"_17":75,"_76":77,"_78":79,"_80":51,"_81":-5,"_110":219,"_18":220},{"_36":102,"_13":103,"_64":104,"_66":-5,"_68":69,"_70":105,"_72":73,"_38":106,"_17":107,"_76":108,"_78":109,"_80":51,"_81":14,"_110":217,"_18":218},[],[103],[],[19,63],[],[19,84],[],[19,91],[213,214,215],[19],["D",1775087897007],{"_11":12,"_170":166},{"_11":12,"_164":-5,"_165":166,"_134":135,"_167":168,"_169":51},{"_17":105,"_13":16,"_36":69,"_42":128,"_45":37,"_46":160,"_161":53,"_162":43,"_163":56,"_57":14,"_54":12},"ctx",{"_154":-5,"_189":264,"_265":266,"_267":268,"_269":51,"_270":51,"_271":51,"_272":73,"_273":-5,"_274":-7,"_275":-7,"_276":87,"_277":51,"_278":51,"_279":-5,"_280":51,"_281":51,"_282":51,"_283":-5},"ENV",{"_235":236,"_237":238,"_239":16,"_240":241,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]