Discover
Listings, creator profiles, collections, discovery, and trust signals stay separate from package delivery.
Docs
Architecture
OlyWork is the secure install layer for AI capabilities.
How public discovery, protected package artifacts, buyer entitlements, and CLI install fit together.
Layers
Package registry
Products, manifests, versions, artifacts, sources, and install targets form the internal package registry.
DRM access
Access tokens are linked to one buyer entitlement and one product, then checked on every sync attempt.
Secure delivery
The Oly CLI calls `/api/v1/sync`; the API validates access and returns install payloads without source URLs.
MCP gateway
Premium MCP access can go through OlyWork proxy routes so creator runtime/source details stay hidden.
Design principles
GitHub is a source, not the paid delivery layer
Creators can import from GitHub, but premium buyers install through OlyWork secure sync.
Stable buyer contract
The public buyer interface stays simple: get access, open Library, run `oly install <token>`.