Push Dart logic updates to live apps in seconds, without an app-store review. Every release is Ed25519-signed, rolled out in stages, and one click (or one crash spike) away from rollback.
No credit card. Early-access invites roll out in batches.
A complete, self-hostable code-push platform — not just a file host.
Every package is Ed25519-signed offline and verified on-device against a pinned public key. The server never holds your private seed.
Ship to 10% → 50% → 100% by channel and platform. Catch regressions on a slice of traffic before everyone gets them.
Rollback directives are pre-signed at publish time — revert a bad release without the signing machine, the key, or a rebuild.
Crash and incident ingestion watches live releases and can auto-roll-back when error rates spike past your threshold.
Adoption, active devices, apply success and failure rates per release — as live counters and historical timeseries.
Flip behavior without a release, and hit the ota_master_switch to freeze all updates for an app in an emergency.
Mint publish- or promote-scoped keys for CI. Secrets are shown once and stored only as hashes, with a full audit trail.
Tenants, apps, and plan-based limits out of the box, with a Clerk-authenticated console and organization support.
himsha_ota drives the whole lifecycle — keygen, build, sign, publish, promote, rollback — and ships an MCP server for AI agents.
himsha_ota keygen creates your Ed25519 keypair offline. Pin the base64 public key in your app; keep the seed off CI.
Bundle your Dart zone, sign it against the seed, and publish to staging with a promote-scoped CI key.
Promote 10% → 50% → 100% from the console, watch metrics, and roll back instantly if anything looks wrong.
We're onboarding teams in batches. Join the waitlist and we'll send an invite when a spot opens up.