Public launch scope
Launch with Discover browsing, creator publishing, GitHub import, secure package delivery, Library, and Oly CLI sync.
Docs
Launch
Public launch runbook.
Use this checklist before opening OlyWork to external creators and users. It keeps the launch focused on secure distribution while payments come later.
Launch stance
Payments coming later
Keep Stripe checkout, subscriptions, and payouts disabled until the company, tax, and payout workflow are ready.
Security promise
Premium source, private repositories, storage keys, and creator infrastructure never appear in public pages or sync responses.
Environment
Required production env
NEXT_PUBLIC_APP_URL=https://www.olywork.comPublic app URL.
AUTH_URL=https://www.olywork.comAuth.js canonical URL.
NEXTAUTH_URL=https://www.olywork.comOAuth callback base URL.
AUTH_SECRET=...Auth session secret.
PACKAGE_ENCRYPTION_KEY=...32-byte base64 package encryption key.
TOKEN_ENCRYPTION_KEY=...Token reveal encryption key.
MONETIZATION_ENABLED=falseKeep paid checkout dormant for beta.
NEXT_PUBLIC_SUPPORT_EMAIL=support@olywork.comPolicy and support contact.
OAuth callbacks
Register `/api/auth/callback/github` and `/api/auth/callback/google` on the production domain, plus localhost callbacks for development.
Infrastructure
PostgreSQL
Use Cloud SQL PostgreSQL, run `npx prisma db push` only after reviewing schema changes, and keep backups enabled before inviting external creators.
Artifacts
Use `PACKAGE_ARTIFACT_STORAGE=DATABASE` for local/dev. Switch to `GCS` only after `GCS_BUCKET_NAME` and Cloud Run service account permissions are ready.
Redis
Use Google Cloud Memorystore with `RATE_LIMIT_BACKEND=redis` and `REDIS_URL` for shared sync/API rate limits in production.
Smoke test
Local proof commands
npm run dev -- --port 3000Run the app locally.
npm run smoke:secureProve package, token, sync, and revoke behavior.
cd oly-cli && npm linkRegister the local Oly CLI.
oly install <token>Install through secure sync.
Creator can join and open Creator Studio.
Creator can paste a package and create a secure draft.
Creator can import from GitHub without exposing private repo URLs publicly.
Admin can approve/publish the listing.
Buyer can get access, open Library, and copy an Oly CLI command.
`oly install <token>` installs the expected payload.
Revoked or suspended tokens fail sync.
Premium direct download routes return secure-install-required behavior.
Go/no-go checklist
NEXT_PUBLIC_APP_URL, AUTH_URL, and NEXTAUTH_URL point to the same production domain.
GitHub and Google OAuth callback URLs are registered for the production domain.
PACKAGE_ENCRYPTION_KEY and TOKEN_ENCRYPTION_KEY are present, secret, and not rotated casually.
DATABASE_URL points to Cloud SQL PostgreSQL and Prisma Client is generated from the current schema.
Redis points to Google Cloud Memorystore when RATE_LIMIT_BACKEND=redis.
GCS is configured before switching PACKAGE_ARTIFACT_STORAGE from DATABASE to GCS.
MONETIZATION_ENABLED remains false until company, Stripe, tax, and payout setup are ready.
Launch command
Ready for public launch when all checks pass
Open the creator flow publicly, but keep monetization off. Watch sync/access logs, inspect reported packages manually, and only turn on payments after company and payout operations are complete.