Connect GitHub App
Creator installs the OlyWork GitHub App and grants repository access.
Docs1 2 3 4
GitHub import
Use GitHub as creator source, not buyer delivery.
GitHub can remain the creator workflow. Premium buyers still install through OlyWork secure sync instead of receiving private clone access.
Import flow
Select repo path
Creator chooses owner, repo, branch/ref, and package path to ingest.
Ingest server-side
OlyWork reads the selected content using an installation access token.
Store artifact
OlyWork encrypts package payloads and stores only protected delivery metadata.
Security boundaries
Creator source
Repository owner, name, ref, and path are creator-side source metadata.
Buyer payload
Buyers receive an install payload through `/api/v1/sync`, not repository URLs.
Access control
Access tokens are linked to buyer, purchase, product, and status.
Rules
Use a GitHub App installation, not buyer-facing personal access tokens.
Never return private source URLs in library, sync APIs, pack exports, or manifests.
Treat public GitHub repos as free/open-source source material only.
For premium packages, ingest source server-side and publish encrypted artifacts.
Keep source metadata private to Creator Studio and internal audit flows.
Premium delivery model
OlyWork is the distribution layer
The product is not trying to replace GitHub. It adds monetization, entitlement, package manifests, token validation, revocation, and install/update flows on top of creator source workflows.