[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_201":202,"_203":204},"routes/_app.x.$handle.$name",{"_107":106,"_33":54,"_116":97,"_28":62,"_13":14,"_117":-5,"_11":118,"_119":120,"_121":122,"_123":124,"_125":126,"_21":-5,"_127":-5,"_128":-5,"_129":26,"_130":131,"_132":133,"_134":-5,"_135":-5,"_136":137},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_52":53,"_33":54,"_39":55,"_56":-5,"_57":26,"_58":59,"_60":59,"_61":62,"_63":-5,"_18":64,"_65":-5,"_66":26,"_67":-5,"_68":-5,"_69":70,"_71":72,"_73":74,"_75":76,"_77":78,"_79":-5,"_80":81,"_82":81,"_83":84,"_85":84,"_86":84,"_87":81,"_88":81,"_89":90,"_91":92,"_93":94,"_95":26},"version",16,"changes",[19,20],"aiChatInfo","userId",{"_21":44,"_23":45,"_25":26,"_27":26,"_28":46,"_30":46},{"_21":22,"_23":24,"_25":26,"_27":26,"_28":29,"_30":29},"file",{"_31":32,"_33":29,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_25":26},"previous",{"_31":32,"_33":29,"_34":35,"_36":37},"deleted",false,"deletedHere","path","scim.ts","latestPath","fileId","62082e24-64e6-11f1-ae7c-1607ee4eb77e","name","fileType","http","content","import type { UserRow } from \"./db.ts\";\n\nexport const USER_SCHEMA = \"urn:ietf:params:scim:schemas:core:2.0:User\";\nexport const LIST_SCHEMA = \"urn:ietf:params:scim:api:messages:2.0:ListResponse\";\nexport const ERROR_SCHEMA = \"urn:ietf:params:scim:api:messages:2.0:Error\";\n\n/** Shape Okta sends on POST/PUT. */\nexport interface ScimUserInput {\n userName?: string;\n externalId?: string;\n active?: boolean;\n name?: { givenName?: string; familyName?: string };\n emails?: Array<{ value?: string; primary?: boolean; type?: string }>;\n}\n\n/** Convert a DB row into a SCIM User resource. */\nexport function toScimUser(u: UserRow, baseUrl: string) {\n return {\n schemas: [USER_SCHEMA],\n id: u.id,\n externalId: u.externalId ?? undefined,\n userName: u.userName,\n name: {\n givenName: u.givenName ?? undefined,\n familyName: u.familyName ?? undefined,\n },\n emails: u.email ? [{ value: u.email, primary: true }] : [],\n active: u.active === 1,\n meta: {\n resourceType: \"User\",\n created: u.createdAt,\n lastModified: u.updatedAt,\n location: `${baseUrl}/Users/${u.id}`,\n },\n };\n}\n\nexport function listResponse(resources: object[], startIndex = 1) {\n return {\n schemas: [LIST_SCHEMA],\n totalResults: resources.length,\n startIndex,\n itemsPerPage: resources.length,\n Resources: resources,\n };\n}\n\nexport function scimError(status: number, detail: string) {\n return { schemas: [ERROR_SCHEMA], status: String(status), detail };\n}\n\n/** Extract the primary (or first) email from an incoming SCIM payload. */\nexport function primaryEmail(body: ScimUserInput): string | null {\n if (!body.emails?.length) return null;\n const primary = body.emails.find((e) => e.primary) ?? body.emails[0];\n return primary?.value ?? null;\n}\n\n/**\n * Parse a SCIM filter like: userName eq \"john@example.com\"\n * Returns the userName value, or null if the filter isn't a userName-eq filter.\n */\nexport function parseUserNameFilter(filter: string | null): string | null {\n if (!filter) return null;\n const m = filter.match(/userName\\s+eq\\s+\"([^\"]+)\"/i);\n return m ? m[1] : null;\n}\n","import type { UserRow } from \"./db.ts\";\n\nexport const USER_SCHEMA = \"urn:ietf:params:scim:schemas:core:2.0:User\";\nexport const LIST_SCHEMA = \"urn:ietf:params:scim:api:messages:2.0:ListResponse\";\nexport const ERROR_SCHEMA = \"urn:ietf:params:scim:api:messages:2.0:Error\";\n\n/** Shape Okta sends on POST/PUT. */\nexport interface ScimUserInput {\n userName?: string;\n externalId?: string;\n active?: boolean;\n name?: { givenName?: string; familyName?: string };\n emails?: Array<{ value?: string; primary?: boolean; type?: string }>;\n}\n\n/** Convert a DB row into a SCIM User resource. */\nexport function toScimUser(u: UserRow, baseUrl: string) {\n return {\n schemas: [USER_SCHEMA],\n id: u.id,\n externalId: u.externalId ?? undefined,\n userName: u.userName,\n name: {\n givenName: u.givenName ?? undefined,\n familyName: u.familyName ?? undefined,\n },\n emails: u.email ? [{ value: u.email, primary: true }] : [],\n active: u.active === 1,\n meta: {\n resourceType: \"User\",\n created: u.createdAt,\n lastModified: u.updatedAt,\n location: `${baseUrl}/Users/${u.id}`,\n },\n };\n}\n\nexport function listResponse(resources: object[], startIndex = 1) {\n return {\n schemas: [LIST_SCHEMA],\n totalResults: resources.length,\n startIndex,\n itemsPerPage: resources.length,\n Resources: resources,\n };\n}\n\nexport function scimError(status: number, detail: string) {\n return { schemas: [ERROR_SCHEMA], status: String(status), detail };\n}\n\n/** Extract the primary (or first) email from an incoming SCIM payload. */\nexport function primaryEmail(body: ScimUserInput): string | null {\n if (!body.emails?.length) return null;\n const primary = body.emails.find((e) => e.primary) ?? body.emails[0];\n return primary?.value ?? null;\n}\n\n/**\n * Parse a SCIM filter like: userName eq \"john@example.com\"\n * Returns the userName value, or null if the filter isn't a userName-eq filter.\n */\nexport function parseUserNameFilter(filter: string | null): string | null {\n if (!filter) return null;\n const m = filter.match(/userName\\s+eq\\s+\"([^\"]+)\"/i);\n return m ? m[1] : null;\n}\n\nexport const GROUP_SCHEMA = \"urn:ietf:params:scim:schemas:core:2.0:Group\";\n\nexport interface ScimGroupInput {\n displayName?: string;\n members?: Array<{\n value: string;\n display?: string;\n }>;\n}\n\nexport function toScimGroup(g: GroupRow, baseUrl: string) {\n return {\n schemas: [GROUP_SCHEMA],\n id: g.id,\n displayName: g.displayName,\n meta: {\n resourceType: \"Group\",\n created: g.createdAt,\n lastModified: g.updatedAt,\n location: `${baseUrl}/Groups/${g.id}`,\n },\n };\n}\n\nexport function parseDisplayNameFilter(\n filter: string | null,\n): string | null {\n if (!filter) return null;\n\n const m = filter.match(\n /displayName\\s+eq\\s+\"([^\"]+)\"/i,\n );\n\n return m ? m[1] : null;\n}","createdAt",["D",1781204815061],"branchVersion","branchId","4228b4ba-b71f-48f6-b08f-de41006deb57",{"_31":47,"_33":46,"_34":48,"_36":50,"_39":51,"_41":14,"_42":43,"_25":26},{"_31":47,"_33":46,"_34":48,"_36":49},"db.ts","5b69369e-64e6-11f1-9214-1607ee4eb77e","script","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TABLE = \"scim_users\";\n\nexport async function initDb() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE} (\n id TEXT PRIMARY KEY,\n userName TEXT UNIQUE NOT NULL,\n givenName TEXT,\n familyName TEXT,\n email TEXT,\n active INTEGER NOT NULL DEFAULT 1,\n externalId TEXT,\n createdAt TEXT NOT NULL,\n updatedAt TEXT NOT NULL\n )`);\n}\n\nexport interface UserRow {\n id: string;\n userName: string;\n givenName: string | null;\n familyName: string | null;\n email: string | null;\n active: number;\n externalId: string | null;\n createdAt: string;\n updatedAt: string;\n}\n\nexport async function listUsers(userNameFilter?: string): Promise {\n const res = userNameFilter\n ? await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE userName = ? ORDER BY createdAt`,\n args: [userNameFilter],\n })\n : await sqlite.execute(`SELECT * FROM ${TABLE} ORDER BY createdAt`);\n return res.rows as unknown as UserRow[];\n}\n\nexport async function getUser(id: string): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE id = ?`,\n args: [id],\n });\n return (res.rows as unknown as UserRow[])[0];\n}\n\nexport async function getUserByUserName(userName: string): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE userName = ?`,\n args: [userName],\n });\n return (res.rows as unknown as UserRow[])[0];\n}\n\nexport async function insertUser(u: UserRow): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ${TABLE}\n (id, userName, givenName, familyName, email, active, externalId, createdAt, updatedAt)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n u.id, u.userName, u.givenName, u.familyName, u.email,\n u.active, u.externalId, u.createdAt, u.updatedAt,\n ],\n });\n}\n\nexport async function updateUser(u: UserRow): Promise {\n await sqlite.execute({\n sql: `UPDATE ${TABLE} SET\n userName = ?, givenName = ?, familyName = ?, email = ?,\n active = ?, externalId = ?, updatedAt = ?\n WHERE id = ?`,\n args: [\n u.userName, u.givenName, u.familyName, u.email,\n u.active, u.externalId, u.updatedAt, u.id,\n ],\n });\n}\n\nexport async function deleteUser(id: string): Promise {\n await sqlite.execute({ sql: `DELETE FROM ${TABLE} WHERE id = ?`, args: [id] });\n}\n","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TABLE = \"scim_users\";\n\nexport async function initDb() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE} (\n id TEXT PRIMARY KEY,\n userName TEXT UNIQUE NOT NULL,\n givenName TEXT,\n familyName TEXT,\n email TEXT,\n active INTEGER NOT NULL DEFAULT 1,\n externalId TEXT,\n createdAt TEXT NOT NULL,\n updatedAt TEXT NOT NULL\n )`);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${GROUP_TABLE} (\n id TEXT PRIMARY KEY,\n displayName TEXT UNIQUE NOT NULL,\n createdAt TEXT NOT NULL,\n updatedAt TEXT NOT NULL\n )\n`);\n}\n\nexport interface UserRow {\n id: string;\n userName: string;\n givenName: string | null;\n familyName: string | null;\n email: string | null;\n active: number;\n externalId: string | null;\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface GroupRow {\n id: string;\n displayName: string;\n createdAt: string;\n updatedAt: string;\n}\n\nexport async function listGroups(\n displayNameFilter?: string,\n): Promise {\n const res = displayNameFilter\n ? await sqlite.execute({\n sql: `SELECT * FROM ${GROUP_TABLE}\n WHERE displayName = ?`,\n args: [displayNameFilter],\n })\n : await sqlite.execute(\n `SELECT * FROM ${GROUP_TABLE}`,\n );\n\n return res.rows as unknown as GroupRow[];\n}\n\nexport async function getGroup(\n id: string,\n): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${GROUP_TABLE}\n WHERE id = ?`,\n args: [id],\n });\n\n return (res.rows as unknown as GroupRow[])[0];\n}\n\nexport async function getGroupByName(\n displayName: string,\n): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${GROUP_TABLE}\n WHERE displayName = ?`,\n args: [displayName],\n });\n\n return (res.rows as unknown as GroupRow[])[0];\n}\n\nexport async function insertGroup(\n g: GroupRow,\n): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ${GROUP_TABLE}\n (id, displayName, createdAt, updatedAt)\n VALUES (?, ?, ?, ?)`,\n args: [\n g.id,\n g.displayName,\n g.createdAt,\n g.updatedAt,\n ],\n });\n}\n\nexport async function updateGroup(\n g: GroupRow,\n): Promise {\n await sqlite.execute({\n sql: `UPDATE ${GROUP_TABLE}\n SET displayName = ?, updatedAt = ?\n WHERE id = ?`,\n args: [\n g.displayName,\n g.updatedAt,\n g.id,\n ],\n });\n}\n\nexport async function deleteGroup(\n id: string,\n): Promise {\n await sqlite.execute({\n sql: `DELETE FROM ${GROUP_TABLE}\n WHERE id = ?`,\n args: [id],\n });\n}\n\nexport async function listUsers(userNameFilter?: string): Promise {\n const res = userNameFilter\n ? await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE userName = ? ORDER BY createdAt`,\n args: [userNameFilter],\n })\n : await sqlite.execute(`SELECT * FROM ${TABLE} ORDER BY createdAt`);\n return res.rows as unknown as UserRow[];\n}\n\nexport async function getUser(id: string): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE id = ?`,\n args: [id],\n });\n return (res.rows as unknown as UserRow[])[0];\n}\n\nexport async function getUserByUserName(\n userName: string,\n): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE userName = ?`,\n args: [userName],\n });\n return (res.rows as unknown as UserRow[])[0];\n}\n\nexport async function insertUser(u: UserRow): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ${TABLE}\n (id, userName, givenName, familyName, email, active, externalId, createdAt, updatedAt)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n u.id,\n u.userName,\n u.givenName,\n u.familyName,\n u.email,\n u.active,\n u.externalId,\n u.createdAt,\n u.updatedAt,\n ],\n });\n}\n\nexport async function updateUser(u: UserRow): Promise {\n await sqlite.execute({\n sql: `UPDATE ${TABLE} SET\n userName = ?, givenName = ?, familyName = ?, email = ?,\n active = ?, externalId = ?, updatedAt = ?\n WHERE id = ?`,\n args: [\n u.userName,\n u.givenName,\n u.familyName,\n u.email,\n u.active,\n u.externalId,\n u.updatedAt,\n u.id,\n ],\n });\n}\n\nexport async function deleteUser(id: string): Promise {\n await sqlite.execute({\n sql: `DELETE FROM ${TABLE} WHERE id = ?`,\n args: [id],\n });\n}\n\nconst GROUP_TABLE = \"scim_groups\";",["D",1781204815061],"id","a9f1d2d7-3d5e-424a-81d9-121f19b87ca2","test-scim",["D",1781106505649],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","57869f4f-f735-49a7-8cbe-c94d835b43a5","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019eb238-0324-740e-9739-98a6085cae13","tursoName","a9f1d2d73d5e424a81d9121f19b87ca2","tursoHostname","a9f1d2d73d5e424a81d9121f19b87ca2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789494036282],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_107":106,"_115":111},"org",{"_107":106,"_108":109,"_110":111,"_18":64,"_112":113,"_114":26},"branch",{"_13":96,"_33":97,"_52":43,"_98":53,"_99":-5,"_100":-5,"_101":-5,"_102":-5,"_103":-5,"_104":54,"_105":106},"isOwned",25,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","robyz7","handle","displayName","Robyz7","avatar","https://lh3.googleusercontent.com/a/ACg8ocJqaB9GyT0LDtIypEn9dLooRukNKqoJ-Gok4-VlN26TIbJ2j67D=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_52":53,"_33":54,"_39":196,"_56":-5,"_57":26,"_58":59,"_60":59,"_61":62,"_63":-5,"_18":64,"_65":-5,"_66":26,"_67":-5,"_68":-5,"_69":70,"_71":72,"_73":74,"_75":76,"_77":197,"_79":-5,"_80":81,"_82":81,"_83":84,"_85":84,"_86":84,"_87":81,"_88":81,"_89":198,"_91":199,"_93":200,"_95":26},"tree",[179,180,181,182],"files",[179,180,181,182],"counts",{"_168":70,"_169":170,"_171":70,"_172":173,"_174":175},"contents",[138,139,140,141],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_52":161,"_33":162,"_31":163,"_143":-5,"_42":43,"_41":164,"_144":133,"_39":165,"_13":70,"_34":21,"_36":166,"_25":26,"_147":-5,"_28":167},{"_52":157,"_33":46,"_31":47,"_143":-5,"_42":43,"_41":14,"_144":26,"_39":158,"_13":159,"_34":48,"_36":50,"_25":26,"_147":-5,"_28":160},{"_52":149,"_33":150,"_31":151,"_143":-5,"_42":43,"_41":152,"_144":26,"_39":153,"_13":154,"_34":35,"_36":155,"_25":26,"_147":-5,"_28":156},{"_52":142,"_33":29,"_31":32,"_143":-5,"_42":43,"_41":14,"_144":26,"_39":145,"_13":146,"_34":35,"_36":38,"_25":26,"_147":-5,"_28":148},"dc4111e9-5a8c-46ba-afcb-d4fc1498bec6","parentId","latest",["D",1781204815061],4,"label",[29],"1c1f9ede-0703-4407-92f9-da592e47cc7d","main.ts","d1499f00-64e3-11f1-8c2c-1607ee4eb77e",15,["D",1781204787102],8,"import { Hono } from \"npm:hono\";\nimport {\n deleteUser,\n getUser,\n getUserByUserName,\n initDb,\n insertUser,\n listUsers,\n updateUser,\n type UserRow,\n} from \"./db.ts\";\nimport {\n listResponse,\n parseUserNameFilter,\n primaryEmail,\n type ScimUserInput,\n scimError,\n toScimUser,\n USER_SCHEMA,\n} from \"./scim.ts\";\n\nawait initDb();\n\nconst app = new Hono();\n// Surface real errors instead of Hono's generic 500.\napp.onError((err) => Promise.reject(err));\n\nconst SCIM_CT = { \"Content-Type\": \"application/scim+json\" };\nconst now = () => new Date().toISOString();\nconst baseUrl = (req: Request) => new URL(req.url).origin;\n\n// --- Auth: every route requires the bearer token ---\napp.use(\"*\", async (c, next) => {\n const expected = Deno.env.get(\"SCIM_TOKEN\");\n if (!expected) {\n return c.json(scimError(500, \"Server missing SCIM_TOKEN\"), 500, SCIM_CT);\n }\n if (c.req.header(\"Authorization\") !== `Bearer ${expected}`) {\n return c.json(scimError(401, \"Unauthorized\"), 401, SCIM_CT);\n }\n await next();\n});\n\n// --- Discovery endpoints Okta probes ---\napp.get(\"/ServiceProviderConfig\", (c) =>\n c.json({\n schemas: [\"urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig\"],\n patch: { supported: true },\n bulk: { supported: false, maxOperations: 0, maxPayloadSize: 0 },\n filter: { supported: true, maxResults: 200 },\n changePassword: { supported: false },\n sort: { supported: false },\n etag: { supported: false },\n authenticationSchemes: [{\n type: \"oauthbearertoken\",\n name: \"OAuth Bearer Token\",\n description: \"Authentication via the HTTP Authorization header.\",\n }],\n }, 200, SCIM_CT));\n\napp.get(\"/ResourceTypes\", (c) =>\n c.json(listResponse([{\n schemas: [\"urn:ietf:params:scim:schemas:core:2.0:ResourceType\"],\n id: \"User\",\n name: \"User\",\n endpoint: \"/Users\",\n schema: USER_SCHEMA,\n }]), 200, SCIM_CT));\n\n// --- GET /Users (list + filter) ---\napp.get(\"/Users\", async (c) => {\n const filterUserName = parseUserNameFilter(c.req.query(\"filter\") ?? null);\n const rows = await listUsers(filterUserName ?? undefined);\n const resources = rows.map((r) => toScimUser(r, baseUrl(c.req.raw)));\n return c.json(listResponse(resources), 200, SCIM_CT);\n});\n\n// --- GET /Users/:id ---\napp.get(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n return c.json(toScimUser(row, baseUrl(c.req.raw)), 200, SCIM_CT);\n});\n\n// --- POST /Users (create) ---\napp.post(\"/Users\", async (c) => {\n const body = await c.req.json();\n if (!body.userName) {\n return c.json(scimError(400, \"userName is required\"), 400, SCIM_CT);\n }\n const existing = await getUserByUserName(body.userName);\n if (existing) {\n // 409 tells Okta the user already exists so it switches to update.\n return c.json(scimError(409, \"User already exists\"), 409, SCIM_CT);\n }\n const ts = now();\n const row: UserRow = {\n id: crypto.randomUUID(),\n userName: body.userName,\n givenName: body.name?.givenName ?? null,\n familyName: body.name?.familyName ?? null,\n email: primaryEmail(body),\n active: body.active === false ? 0 : 1,\n externalId: body.externalId ?? null,\n createdAt: ts,\n updatedAt: ts,\n };\n await insertUser(row);\n return c.json(toScimUser(row, baseUrl(c.req.raw)), 201, SCIM_CT);\n});\n\n// --- PUT /Users/:id (full replace) ---\napp.put(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n const body = await c.req.json();\n const updated: UserRow = {\n ...row,\n userName: body.userName ?? row.userName,\n givenName: body.name?.givenName ?? null,\n familyName: body.name?.familyName ?? null,\n email: primaryEmail(body),\n active: body.active === false ? 0 : 1,\n externalId: body.externalId ?? row.externalId,\n updatedAt: now(),\n };\n await updateUser(updated);\n return c.json(toScimUser(updated, baseUrl(c.req.raw)), 200, SCIM_CT);\n});\n\n// --- PATCH /Users/:id (partial; Okta mainly toggles `active`) ---\napp.patch(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n const body = await c.req.json<{ Operations?: Array<{ op: string; path?: string; value: unknown }> }>();\n for (const op of body.Operations ?? []) {\n const value = op.value as Record | boolean;\n // Handle both { path: \"active\", value: false } and { value: { active: false } }\n if (op.path === \"active\") row.active = value === false || value === \"false\" ? 0 : 1;\n else if (typeof value === \"object\" && value && \"active\" in value) {\n row.active = value.active === false ? 0 : 1;\n }\n }\n row.updatedAt = now();\n await updateUser(row);\n return c.json(toScimUser(row, baseUrl(c.req.raw)), 200, SCIM_CT);\n});\n\n// --- DELETE /Users/:id ---\napp.delete(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n await deleteUser(row.id);\n return c.body(null, 204);\n});\n\napp.all(\"*\", (c) => c.json(scimError(404, \"Not found\"), 404, SCIM_CT));\n\nexport default app.fetch;\n",[150],"5f8c12f5-7b58-4f39-9008-ea9ea6ea2ee1",["D",1781204815061],3,[46],"e17f56d0-f2a9-4837-a061-3e5780a70005","README.md","89fd2402-64e6-11f1-a82c-1607ee4eb77e",7,["D",1781107674529],"# test-scim\n\nA SCIM 2.0 server for user provisioning from Okta (or any SCIM client), backed by Val Town SQLite.\n\n## Connecting Okta\n\nIn Okta's SCIM provisioning settings:\n\n| Field | Value |\n| --- | --- |\n| **SCIM base URL** | `https://robyz7--d1499f0064e311f18c2c1607ee4eb77e.web.val.run` |\n| **Unique identifier** | `userName` |\n| **Auth mode** | HTTP Header |\n| **Authorization header** | `Bearer ` |\n\nThe bearer token is read from the `SCIM_TOKEN` environment variable.\n\n👉 Set/rotate the token here: https://www.val.town/x/robyz7/test-scim/environment-variables?key=SCIM_TOKEN\n\n## Supported operations\n\n| Method | Path | Purpose |\n| --- | --- | --- |\n| GET | `/ServiceProviderConfig` | Capability discovery |\n| GET | `/ResourceTypes` | Resource type discovery |\n| GET | `/Users` | List users (supports `?filter=userName eq \"...\"`) |\n| GET | `/Users/:id` | Fetch one user |\n| POST | `/Users` | Create user (409 if `userName` exists) |\n| PUT | `/Users/:id` | Full replace |\n| PATCH | `/Users/:id` | Partial update (e.g. deactivate via `active:false`) |\n| DELETE | `/Users/:id` | Hard delete (204) |\n\n## Architecture\n\n```mermaid\nflowchart LR\n Okta -- \"Bearer SCIM_TOKEN\" --> main[main.ts
Hono router + auth]\n main --> scim[scim.ts
SCIM (de)serialization]\n main --> db[db.ts
SQLite CRUD]\n db --> sqlite[(scim_users table)]\n```\n\n## Files\n\n- **main.ts** — HTTP entrypoint: bearer-token auth middleware + all SCIM routes.\n- **scim.ts** — Converts between DB rows and SCIM JSON; filter parsing; error shapes.\n- **db.ts** — SQLite schema (`scim_users`) and CRUD helpers.\n\n## Notes\n\n- Deactivation: Okta sends `PATCH` with `active:false` to offboard a user; the row is kept but marked inactive. A separate `DELETE` removes it entirely.\n- The legacy hardcoded `john.doe` / `jane.smith` demo users are gone — data is now persisted per real provisioning events.\n",[162],"pulls","branches",1,"forks","envVars",{"_176":170,"_178":70},"connections",{"_176":70,"_177":70},"count","unfilledCount","emptyCount",{"_52":161,"_33":162,"_31":163,"_143":-5,"_42":43,"_41":164,"_144":133,"_39":193,"_13":70,"_34":21,"_36":166,"_25":26,"_147":-5,"_184":194,"_28":195},{"_52":157,"_33":46,"_31":47,"_143":-5,"_42":43,"_41":14,"_144":26,"_39":190,"_13":159,"_34":48,"_36":50,"_25":26,"_147":-5,"_184":191,"_28":192},{"_52":149,"_33":150,"_31":151,"_143":-5,"_42":43,"_41":152,"_144":26,"_39":187,"_13":154,"_34":35,"_36":155,"_25":26,"_147":-5,"_184":188,"_28":189},{"_52":142,"_33":29,"_31":32,"_143":-5,"_42":43,"_41":14,"_144":26,"_39":183,"_13":146,"_34":35,"_36":38,"_25":26,"_147":-5,"_184":185,"_28":186},["D",1781204815061],"children",[],[29],["D",1781204787102],[],[150],["D",1781204815061],[],[46],["D",1781107674529],[],[162],["D",1781106505649],["D",1789494036282],{"_107":106,"_115":111},{"_107":106,"_108":109,"_110":111,"_18":64,"_112":113,"_114":26},{"_13":96,"_33":97,"_52":43,"_98":53,"_99":-5,"_100":-5,"_101":-5,"_102":-5,"_103":-5,"_104":54,"_105":106},"ctx",{"_89":-5,"_135":234,"_235":236,"_237":238,"_239":26,"_240":26,"_241":26,"_242":133,"_243":-5,"_244":-7,"_245":-7,"_246":70,"_247":26,"_248":26,"_249":-5,"_250":26,"_251":26,"_252":26,"_253":-5},"ENV",{"_205":206,"_207":208,"_209":97,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v16