From a356330e16977011dea00c0b788c67cc2ad42d0d Mon Sep 17 00:00:00 2001
From: Anthony Ettinger <anthony@chovy.com>
Date: Sat, 12 Sep 2026 19:02:27 +0000
Subject: [PATCH] Serve an OpenAccess descriptor at
 /.well-known/openaccess.json

Lists ugig on OpenAccess hubs (openaccess.logicsrc.com) so people can
link it with OAuth 2.1 + PKCE and it honours the shared
profullstack.com/all-access entitlement. The Ed25519 public key here is
the app's credential for reporting sales; the private half is in the
logicsrc teams vault openaccess-app-keys--prod. Scopes are empty for now:
the reserved openid, email and entitlements scopes need no listing.

Spec: https://logicsrc.com/openaccess

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SWRffW4ifQPUrGXJtgYWMd
---
 public/.well-known/openaccess.json | 42 ++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)
 create mode 100644 public/.well-known/openaccess.json

diff --git a/public/.well-known/openaccess.json b/public/.well-known/openaccess.json
new file mode 100644
index 00000000..9802ae9b
--- /dev/null
+++ b/public/.well-known/openaccess.json
@@ -0,0 +1,42 @@
+{
+  "openaccess": "0.1",
+  "name": "ugig",
+  "url": "https://ugig.net",
+  "operator": "https://logicsrc.com/.well-known/openprofile.md",
+  "redirect_uris": [
+    "https://ugig.net/api/v1/openaccess/callback"
+  ],
+  "jwks": {
+    "keys": [
+      {
+        "kty": "OKP",
+        "crv": "Ed25519",
+        "kid": "DycuLswDbPZK",
+        "x": "oMLe7bXtS3QFkI0nx23XJAGVPIA2eG229-0vJ1AEs5w",
+        "alg": "EdDSA",
+        "use": "sig"
+      }
+    ]
+  },
+  "scopes": {},
+  "offers": [
+    {
+      "product": "ugig.net/pro",
+      "name": "Pro",
+      "price": "29 USD/month",
+      "links": {
+        "pay": "https://ugig.net/dashboard/subscription?principal={principal}",
+        "cancel": "https://ugig.net/settings/billing",
+        "manage": "https://ugig.net/settings/billing"
+      }
+    }
+  ],
+  "honours": [
+    "profullstack.com/all-access",
+    "ugig.net/pro"
+  ],
+  "webhooks": "https://ugig.net/api/v1/openaccess/events",
+  "hubs": [
+    "https://openaccess.logicsrc.com"
+  ]
+}