[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_192":193,"_194":195},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_91":-7,"_92":43,"_29":-7,"_93":-5,"_15":94,"_95":96,"_97":98,"_99":100,"_101":102,"_103":-5,"_104":-5,"_105":-5,"_106":38,"_107":108,"_109":110,"_111":-5,"_112":-5,"_113":114},"routes/_app.x.$handle.$name.branches",{"_11":12,"_13":14,"_15":16,"_17":18},"handle","robyz7","name","test-scim","project",{"_20":28,"_13":14,"_22":36,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":43,"_44":-5,"_45":46,"_47":-5,"_48":38,"_49":-5,"_50":-5,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":-5,"_62":63,"_64":63,"_65":66,"_67":66,"_68":66,"_69":63,"_70":63,"_71":72,"_73":74,"_75":76,"_77":38},"branches",[19],{"_20":21,"_22":23,"_24":25,"_13":26,"_27":28,"_29":30,"_31":-5,"_32":-5,"_33":34,"_35":-5},"id","4228b4ba-b71f-48f6-b08f-de41006deb57","createdAt",["D",1781106505654],"updatedAt",["D",1781283876302],"main","projectId","a9f1d2d7-3d5e-424a-81d9-121f19b87ca2","version",25,"forkedBranchId","forkedBranchVersion","lockfileKey","1781283898253-esm.town_v_robyz7_test-scim@25-main","deletedAt",["D",1781106505649],"legacyEnvVars",false,"privacy","public","httpPrivacy","description","","imageUrl","userId","57869f4f-f735-49a7-8cbe-c94d835b43a5","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019eb238-0324-740e-9739-98a6085cae13","tursoName","a9f1d2d73d5e424a81d9121f19b87ca2","tursoHostname","a9f1d2d73d5e424a81d9121f19b87ca2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789494036282],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_90":86},"org",{"_11":12,"_83":84,"_85":86,"_45":46,"_87":88,"_89":38},"branch",{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_78":-5,"_79":-5,"_80":-5,"_81":14,"_82":12},"isOwned","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Robyz7","avatar","https://lh3.googleusercontent.com/a/ACg8ocJqaB9GyT0LDtIypEn9dLooRukNKqoJ-Gok4-VlN26TIbJ2j67D=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","path","adoptOrgId",{"_20":28,"_13":14,"_22":187,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":43,"_44":-5,"_45":46,"_47":-5,"_48":38,"_49":-5,"_50":-5,"_51":52,"_53":54,"_55":56,"_57":58,"_59":188,"_61":-5,"_62":63,"_64":63,"_65":66,"_67":66,"_68":66,"_69":63,"_70":63,"_71":189,"_73":190,"_75":191,"_77":38},"tree",[170,171,172,173],"files",[170,171,172,173],"counts",{"_160":52,"_17":161,"_162":52,"_163":164,"_165":166},"contents",[115,116,117,118],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_20":153,"_13":154,"_121":155,"_123":-5,"_124":21,"_125":156,"_127":110,"_22":157,"_29":52,"_130":103,"_132":158,"_134":38,"_135":-5,"_92":159},{"_20":145,"_13":146,"_121":147,"_123":-5,"_124":21,"_125":148,"_127":110,"_22":149,"_29":150,"_130":131,"_132":151,"_134":38,"_135":-5,"_92":152},{"_20":137,"_13":138,"_121":139,"_123":-5,"_124":21,"_125":30,"_127":110,"_22":140,"_29":141,"_130":142,"_132":143,"_134":38,"_135":-5,"_92":144},{"_20":119,"_13":120,"_121":122,"_123":-5,"_124":21,"_125":126,"_127":110,"_22":128,"_29":129,"_130":131,"_132":133,"_134":38,"_135":-5,"_92":136},"01d28e9c-da5e-4257-9af8-627c82543664","scim.ts","fileId","62082e24-64e6-11f1-ae7c-1607ee4eb77e","parentId","branchId","branchVersion",24,"latest",["D",1781276813642],6,"fileType","script","content","import type { GroupRow, UserRow } from \"./db.ts\";\n\nexport const USER_SCHEMA = \"urn:ietf:params:scim:schemas:core:2.0:User\";\nexport const LIST_SCHEMA = \"urn:ietf:params:scim:api:messages:2.0:ListResponse\";\nexport const ERROR_SCHEMA = \"urn:ietf:params:scim:api:messages:2.0:Error\";\nexport const GROUP_SCHEMA = \"urn:ietf:params:scim:schemas:core:2.0:Group\";\n\n/** Shape Okta sends on POST/PUT. */\nexport interface ScimUserInput {\n userName?: string;\n externalId?: string;\n active?: boolean;\n name?: { givenName?: string; familyName?: string };\n emails?: Array<{ value?: string; primary?: boolean; type?: string }>;\n}\n\nexport interface ScimGroupInput {\n displayName?: string;\n members?: Array<{\n value: string;\n display?: string;\n }>;\n}\n\n/** Convert a DB row into a SCIM User resource. */\nexport function toScimUser(u: UserRow, baseUrl: string) {\n return {\n schemas: [USER_SCHEMA],\n id: u.id,\n externalId: u.externalId ?? undefined,\n userName: u.userName,\n name: {\n givenName: u.givenName ?? undefined,\n familyName: u.familyName ?? undefined,\n },\n emails: u.email ? [{ value: u.email, primary: true }] : [],\n active: u.active === 1,\n meta: {\n resourceType: \"User\",\n created: u.createdAt,\n lastModified: u.updatedAt,\n location: `${baseUrl}/Users/${u.id}`,\n },\n };\n}\n\nexport function toScimGroup(\n g: GroupRow,\n baseUrl: string,\n) {\n return {\n schemas: [GROUP_SCHEMA],\n id: g.id,\n displayName: g.displayName,\n meta: {\n resourceType: \"Group\",\n created: g.createdAt,\n lastModified: g.updatedAt,\n location: `${baseUrl}/Groups/${g.id}`,\n },\n };\n}\n\nexport function listResponse(resources: object[], startIndex = 1) {\n return {\n schemas: [LIST_SCHEMA],\n totalResults: resources.length,\n startIndex,\n itemsPerPage: resources.length,\n Resources: resources,\n };\n}\n\nexport function scimError(status: number, detail: string) {\n return { schemas: [ERROR_SCHEMA], status: String(status), detail };\n}\n\n/** Extract the primary (or first) email from an incoming SCIM payload. */\nexport function primaryEmail(body: ScimUserInput): string | null {\n if (!body.emails?.length) return null;\n const primary = body.emails.find((e) => e.primary) ?? body.emails[0];\n return primary?.value ?? null;\n}\n\n/**\n * Parse a SCIM filter like: userName eq \"john@example.com\"\n * Returns the userName value, or null if the filter isn't a userName-eq filter.\n */\nexport function parseUserNameFilter(filter: string | null): string | null {\n if (!filter) return null;\n const m = filter.match(/userName\\s+eq\\s+\"([^\"]+)\"/i);\n return m ? m[1] : null;\n}\n\nexport function parseDisplayNameFilter(\n filter: string | null,\n): string | null {\n if (!filter) return null;\n\n const m = filter.match(\n /displayName\\s+eq\\s+\"([^\"]+)\"/i,\n );\n\n return m ? m[1] : null;\n}","deleted","label",[120],"8bee3b26-85a4-4ad7-85f9-742425c2f2c5","main.ts","d1499f00-64e3-11f1-8c2c-1607ee4eb77e",["D",1781283876302],14,"http","import { Hono } from \"npm:hono\";\nimport {\n deleteGroup,\n deleteUser,\n getGroup,\n getGroupByName,\n getUser,\n getUserByUserName,\n type GroupRow,\n initDb,\n insertGroup,\n insertUser,\n listGroups,\n listUsers,\n updateGroup,\n updateUser,\n type UserRow,\n} from \"./db.ts\";\nimport {\n GROUP_SCHEMA,\n listResponse,\n parseDisplayNameFilter,\n parseUserNameFilter,\n primaryEmail,\n scimError,\n type ScimGroupInput,\n type ScimUserInput,\n toScimGroup,\n toScimUser,\n USER_SCHEMA,\n} from \"./scim.ts\";\n\nawait initDb();\n\nconst app = new Hono();\n// Surface real errors instead of Hono's generic 500.\napp.onError((err) => Promise.reject(err));\n\napp.use(\"*\", async (c, next) => {\n console.log(\"REQUEST:\", c.req.method, c.req.url);\n\n try {\n const body = await c.req.text();\n\n if (body) {\n console.log(\"BODY:\", body);\n }\n } catch {}\n\n await next();\n});\n\nconst SCIM_CT = { \"Content-Type\": \"application/scim+json\" };\nconst now = () => new Date().toISOString();\nconst baseUrl = (req: Request) => new URL(req.url).origin;\n\n// --- Auth: every route requires the bearer token ---\napp.use(\"*\", async (c, next) => {\n const expected = Deno.env.get(\"SCIM_TOKEN\");\n if (!expected) {\n return c.json(scimError(500, \"Server missing SCIM_TOKEN\"), 500, SCIM_CT);\n }\n if (c.req.header(\"Authorization\") !== `Bearer ${expected}`) {\n return c.json(scimError(401, \"Unauthorized\"), 401, SCIM_CT);\n }\n await next();\n});\n\n// --- Discovery endpoints Okta probes ---\napp.get(\"/ServiceProviderConfig\", (c) =>\n c.json(\n {\n schemas: [\"urn:ietf:params:scim:schemas:core:2.0:ServiceProviderConfig\"],\n patch: { supported: true },\n bulk: { supported: false, maxOperations: 0, maxPayloadSize: 0 },\n filter: { supported: true, maxResults: 200 },\n changePassword: { supported: false },\n sort: { supported: false },\n etag: { supported: false },\n authenticationSchemes: [{\n type: \"oauthbearertoken\",\n name: \"OAuth Bearer Token\",\n description: \"Authentication via the HTTP Authorization header.\",\n }],\n },\n 200,\n SCIM_CT,\n ));\n\napp.get(\"/ResourceTypes\", (c) =>\n c.json(\n listResponse([\n {\n schemas: [\n \"urn:ietf:params:scim:schemas:core:2.0:ResourceType\",\n ],\n id: \"User\",\n name: \"User\",\n endpoint: \"/Users\",\n schema: USER_SCHEMA,\n },\n {\n schemas: [\n \"urn:ietf:params:scim:schemas:core:2.0:ResourceType\",\n ],\n id: \"Group\",\n name: \"Group\",\n endpoint: \"/Groups\",\n schema: GROUP_SCHEMA,\n },\n ]),\n 200,\n SCIM_CT,\n ));\n\n// --- GET /Users (list + filter) ---\napp.get(\"/Users\", async (c) => {\n const filterUserName = parseUserNameFilter(c.req.query(\"filter\") ?? null);\n const rows = await listUsers(filterUserName ?? undefined);\n const resources = rows.map((r) => toScimUser(r, baseUrl(c.req.raw)));\n return c.json(listResponse(resources), 200, SCIM_CT);\n});\n\n// --- GET /Users/:id ---\napp.get(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n return c.json(toScimUser(row, baseUrl(c.req.raw)), 200, SCIM_CT);\n});\n\n// --- POST /Users (create) ---\napp.post(\"/Users\", async (c) => {\n const body = await c.req.json();\n if (!body.userName) {\n return c.json(scimError(400, \"userName is required\"), 400, SCIM_CT);\n }\n const existing = await getUserByUserName(body.userName);\n if (existing) {\n // 409 tells Okta the user already exists so it switches to update.\n return c.json(scimError(409, \"User already exists\"), 409, SCIM_CT);\n }\n const ts = now();\n const row: UserRow = {\n id: crypto.randomUUID(),\n userName: body.userName,\n givenName: body.name?.givenName ?? null,\n familyName: body.name?.familyName ?? null,\n email: primaryEmail(body),\n active: body.active === false ? 0 : 1,\n externalId: body.externalId ?? null,\n createdAt: ts,\n updatedAt: ts,\n };\n await insertUser(row);\n return c.json(toScimUser(row, baseUrl(c.req.raw)), 201, SCIM_CT);\n});\n\n// --- PUT /Users/:id (full replace) ---\napp.put(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n const body = await c.req.json();\n const updated: UserRow = {\n ...row,\n userName: body.userName ?? row.userName,\n givenName: body.name?.givenName ?? null,\n familyName: body.name?.familyName ?? null,\n email: primaryEmail(body),\n active: body.active === false ? 0 : 1,\n externalId: body.externalId ?? row.externalId,\n updatedAt: now(),\n };\n await updateUser(updated);\n return c.json(toScimUser(updated, baseUrl(c.req.raw)), 200, SCIM_CT);\n});\n\n// --- PATCH /Users/:id (partial; Okta mainly toggles `active`) ---\napp.patch(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n const body = await c.req.json<\n { Operations?: Array<{ op: string; path?: string; value: unknown }> }\n >();\n for (const op of body.Operations ?? []) {\n const value = op.value as Record | boolean;\n // Handle both { path: \"active\", value: false } and { value: { active: false } }\n if (op.path === \"active\") {\n row.active = value === false || value === \"false\" ? 0 : 1;\n } else if (typeof value === \"object\" && value && \"active\" in value) {\n row.active = value.active === false ? 0 : 1;\n }\n }\n row.updatedAt = now();\n await updateUser(row);\n return c.json(toScimUser(row, baseUrl(c.req.raw)), 200, SCIM_CT);\n});\n\n// --- DELETE /Users/:id ---\napp.delete(\"/Users/:id\", async (c) => {\n const row = await getUser(c.req.param(\"id\"));\n if (!row) return c.json(scimError(404, \"User not found\"), 404, SCIM_CT);\n await deleteUser(row.id);\n return c.body(null, 204);\n});\n\napp.get(\"/Groups\", async (c) => {\n const filter = parseDisplayNameFilter(\n c.req.query(\"filter\") ?? null,\n );\n\n const groups = await listGroups(\n filter ?? undefined,\n );\n\n return c.json(\n listResponse(\n groups.map((g) =>\n toScimGroup(\n g,\n baseUrl(c.req.raw),\n )\n ),\n ),\n 200,\n SCIM_CT,\n );\n});\n\napp.get(\"/Groups/:id\", async (c) => {\n const group = await getGroup(\n c.req.param(\"id\"),\n );\n\n if (!group) {\n return c.json(\n scimError(404, \"Group not found\"),\n 404,\n SCIM_CT,\n );\n }\n\n return c.json(\n toScimGroup(\n group,\n baseUrl(c.req.raw),\n ),\n 200,\n SCIM_CT,\n );\n});\n\napp.post(\"/Groups\", async (c) => {\n const body = await c.req.json();\n\n if (!body.displayName) {\n return c.json(\n scimError(\n 400,\n \"displayName is required\",\n ),\n 400,\n SCIM_CT,\n );\n }\n\n const existing = await getGroupByName(\n body.displayName,\n );\n\n if (existing) {\n return c.json(\n scimError(\n 409,\n \"Group already exists\",\n ),\n 409,\n SCIM_CT,\n );\n }\n\n const ts = now();\n\n const group: GroupRow = {\n id: crypto.randomUUID(),\n displayName: body.displayName,\n createdAt: ts,\n updatedAt: ts,\n };\n\n await insertGroup(group);\n\n return c.json(\n toScimGroup(\n group,\n baseUrl(c.req.raw),\n ),\n 201,\n SCIM_CT,\n );\n});\n\napp.delete(\"/Groups/:id\", async (c) => {\n const group = await getGroup(\n c.req.param(\"id\"),\n );\n\n if (!group) {\n return c.json(\n scimError(404, \"Group not found\"),\n 404,\n SCIM_CT,\n );\n }\n\n await deleteGroup(group.id);\n\n return c.body(null, 204);\n});\n\napp.put(\"/Groups/:id\", async (c) => {\n const group = await getGroup(c.req.param(\"id\"));\n\n if (!group) {\n return c.json(\n scimError(404, \"Group not found\"),\n 404,\n SCIM_CT,\n );\n }\n\n const body = await c.req.json();\n\n group.displayName = body.displayName ?? group.displayName;\n\n group.updatedAt = now();\n\n await updateGroup(group);\n\n return c.json(\n toScimGroup(\n group,\n baseUrl(c.req.raw),\n ),\n 200,\n SCIM_CT,\n );\n});\n\napp.all(\"*\", (c) => c.json(scimError(404, \"Not found\"), 404, SCIM_CT));\n\nexport default app.fetch;",[138],"f900c0d4-0b38-42c3-8fb7-cb2a369c6d60","db.ts","5b69369e-64e6-11f1-9214-1607ee4eb77e",18,["D",1781205257225],4,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TABLE = \"scim_users\";\nconst GROUP_TABLE = \"scim_groups\";\n\nexport async function initDb() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE} (\n id TEXT PRIMARY KEY,\n userName TEXT UNIQUE NOT NULL,\n givenName TEXT,\n familyName TEXT,\n email TEXT,\n active INTEGER NOT NULL DEFAULT 1,\n externalId TEXT,\n createdAt TEXT NOT NULL,\n updatedAt TEXT NOT NULL\n )`);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${GROUP_TABLE} (\n id TEXT PRIMARY KEY,\n displayName TEXT UNIQUE NOT NULL,\n createdAt TEXT NOT NULL,\n updatedAt TEXT NOT NULL\n )\n`);\n}\n\nexport interface UserRow {\n id: string;\n userName: string;\n givenName: string | null;\n familyName: string | null;\n email: string | null;\n active: number;\n externalId: string | null;\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface GroupRow {\n id: string;\n displayName: string;\n createdAt: string;\n updatedAt: string;\n}\n\nexport async function listGroups(\n displayNameFilter?: string,\n): Promise {\n const res = displayNameFilter\n ? await sqlite.execute({\n sql: `SELECT * FROM ${GROUP_TABLE}\n WHERE displayName = ?`,\n args: [displayNameFilter],\n })\n : await sqlite.execute(\n `SELECT * FROM ${GROUP_TABLE}`,\n );\n\n return res.rows as unknown as GroupRow[];\n}\n\nexport async function getGroup(\n id: string,\n): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${GROUP_TABLE}\n WHERE id = ?`,\n args: [id],\n });\n\n return (res.rows as unknown as GroupRow[])[0];\n}\n\nexport async function getGroupByName(\n displayName: string,\n): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${GROUP_TABLE}\n WHERE displayName = ?`,\n args: [displayName],\n });\n\n return (res.rows as unknown as GroupRow[])[0];\n}\n\nexport async function insertGroup(\n g: GroupRow,\n): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ${GROUP_TABLE}\n (id, displayName, createdAt, updatedAt)\n VALUES (?, ?, ?, ?)`,\n args: [\n g.id,\n g.displayName,\n g.createdAt,\n g.updatedAt,\n ],\n });\n}\n\nexport async function updateGroup(\n g: GroupRow,\n): Promise {\n await sqlite.execute({\n sql: `UPDATE ${GROUP_TABLE}\n SET displayName = ?, updatedAt = ?\n WHERE id = ?`,\n args: [\n g.displayName,\n g.updatedAt,\n g.id,\n ],\n });\n}\n\nexport async function deleteGroup(\n id: string,\n): Promise {\n await sqlite.execute({\n sql: `DELETE FROM ${GROUP_TABLE}\n WHERE id = ?`,\n args: [id],\n });\n}\n\nexport async function listUsers(userNameFilter?: string): Promise {\n const res = userNameFilter\n ? await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE userName = ? ORDER BY createdAt`,\n args: [userNameFilter],\n })\n : await sqlite.execute(`SELECT * FROM ${TABLE} ORDER BY createdAt`);\n return res.rows as unknown as UserRow[];\n}\n\nexport async function getUser(id: string): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE id = ?`,\n args: [id],\n });\n return (res.rows as unknown as UserRow[])[0];\n}\n\nexport async function getUserByUserName(\n userName: string,\n): Promise {\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE userName = ?`,\n args: [userName],\n });\n return (res.rows as unknown as UserRow[])[0];\n}\n\nexport async function insertUser(u: UserRow): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ${TABLE}\n (id, userName, givenName, familyName, email, active, externalId, createdAt, updatedAt)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n u.id,\n u.userName,\n u.givenName,\n u.familyName,\n u.email,\n u.active,\n u.externalId,\n u.createdAt,\n u.updatedAt,\n ],\n });\n}\n\nexport async function updateUser(u: UserRow): Promise {\n await sqlite.execute({\n sql: `UPDATE ${TABLE} SET\n userName = ?, givenName = ?, familyName = ?, email = ?,\n active = ?, externalId = ?, updatedAt = ?\n WHERE id = ?`,\n args: [\n u.userName,\n u.givenName,\n u.familyName,\n u.email,\n u.active,\n u.externalId,\n u.updatedAt,\n u.id,\n ],\n });\n}\n\nexport async function deleteUser(id: string): Promise {\n await sqlite.execute({\n sql: `DELETE FROM ${TABLE} WHERE id = ?`,\n args: [id],\n });\n}",[146],"e17f56d0-f2a9-4837-a061-3e5780a70005","README.md","89fd2402-64e6-11f1-a82c-1607ee4eb77e",7,["D",1781107674529],"# test-scim\n\nA SCIM 2.0 server for user provisioning from Okta (or any SCIM client), backed by Val Town SQLite.\n\n## Connecting Okta\n\nIn Okta's SCIM provisioning settings:\n\n| Field | Value |\n| --- | --- |\n| **SCIM base URL** | `https://robyz7--d1499f0064e311f18c2c1607ee4eb77e.web.val.run` |\n| **Unique identifier** | `userName` |\n| **Auth mode** | HTTP Header |\n| **Authorization header** | `Bearer ` |\n\nThe bearer token is read from the `SCIM_TOKEN` environment variable.\n\n👉 Set/rotate the token here: https://www.val.town/x/robyz7/test-scim/environment-variables?key=SCIM_TOKEN\n\n## Supported operations\n\n| Method | Path | Purpose |\n| --- | --- | --- |\n| GET | `/ServiceProviderConfig` | Capability discovery |\n| GET | `/ResourceTypes` | Resource type discovery |\n| GET | `/Users` | List users (supports `?filter=userName eq \"...\"`) |\n| GET | `/Users/:id` | Fetch one user |\n| POST | `/Users` | Create user (409 if `userName` exists) |\n| PUT | `/Users/:id` | Full replace |\n| PATCH | `/Users/:id` | Partial update (e.g. deactivate via `active:false`) |\n| DELETE | `/Users/:id` | Hard delete (204) |\n\n## Architecture\n\n```mermaid\nflowchart LR\n Okta -- \"Bearer SCIM_TOKEN\" --> main[main.ts
Hono router + auth]\n main --> scim[scim.ts
SCIM (de)serialization]\n main --> db[db.ts
SQLite CRUD]\n db --> sqlite[(scim_users table)]\n```\n\n## Files\n\n- **main.ts** — HTTP entrypoint: bearer-token auth middleware + all SCIM routes.\n- **scim.ts** — Converts between DB rows and SCIM JSON; filter parsing; error shapes.\n- **db.ts** — SQLite schema (`scim_users`) and CRUD helpers.\n\n## Notes\n\n- Deactivation: Okta sends `PATCH` with `active:false` to offboard a user; the row is kept but marked inactive. A separate `DELETE` removes it entirely.\n- The legacy hardcoded `john.doe` / `jane.smith` demo users are gone — data is now persisted per real provisioning events.\n",[154],"pulls",1,"forks","envVars",{"_167":161,"_169":52},"connections",{"_167":52,"_168":52},"count","unfilledCount","emptyCount",{"_20":153,"_13":154,"_121":155,"_123":-5,"_124":21,"_125":156,"_127":110,"_22":184,"_29":52,"_130":103,"_132":158,"_134":38,"_135":-5,"_175":185,"_92":186},{"_20":145,"_13":146,"_121":147,"_123":-5,"_124":21,"_125":148,"_127":110,"_22":181,"_29":150,"_130":131,"_132":151,"_134":38,"_135":-5,"_175":182,"_92":183},{"_20":137,"_13":138,"_121":139,"_123":-5,"_124":21,"_125":30,"_127":110,"_22":178,"_29":141,"_130":142,"_132":143,"_134":38,"_135":-5,"_175":179,"_92":180},{"_20":119,"_13":120,"_121":122,"_123":-5,"_124":21,"_125":126,"_127":110,"_22":174,"_29":129,"_130":131,"_132":133,"_134":38,"_135":-5,"_175":176,"_92":177},["D",1781276813642],"children",[],[120],["D",1781283876302],[],[138],["D",1781205257225],[],[146],["D",1781107674529],[],[154],["D",1781106505649],["D",1789494036282],{"_11":12,"_90":86},{"_11":12,"_83":84,"_85":86,"_45":46,"_87":88,"_89":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_78":-5,"_79":-5,"_80":-5,"_81":14,"_82":12},"ctx",{"_71":-5,"_112":225,"_226":227,"_228":229,"_230":38,"_231":38,"_232":38,"_233":110,"_234":-5,"_235":-7,"_236":-7,"_237":52,"_238":38,"_239":38,"_240":-5,"_241":38,"_242":38,"_243":38,"_244":-5},"ENV",{"_196":197,"_198":199,"_200":26,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1