FireOTA
Changelog

Admin controls, code signing, AI agents and security alerts

Sujal Khedekar
SDK 0.2.0CLI 0.2.0Security

SDK and CLI 0.2.0: Expo-style update IDs, optional code signing, custom roles, bring-your-own-key agents and malicious-activity detection.

Updates identified by ID

Like Expo, every update now has its own ID and a message. Each update targets exactly one runtime version; the app page shows updates grouped by store build.

Code signing

Optional per app. Generate keys with npx fireota signing generate; the server and the app reject updates whose RSA-SHA256 signature does not match.

Admin and team

  • Custom roles with any mix of permissions; suspend, reactivate and remove members.
  • Admin-only API keys with expiry and delete.
  • Create, edit, pause and delete channels.
  • Delete applications and remove Firebase projects.

Agents and security

  • Bring your own Claude or OpenAI key for three built-in agents.
  • A Security page that flags destructive bursts, leaked keys, privilege changes and invalid signatures.
  • Notifications for every workspace activity, with per-member read state and preferences.

The CLI now detects commit, branch and build number on every major CI tool.

Follow