Add SKU-aware OTA release artifacts (#56)

* feat: add SKU-aware OTA release artifacts

Persist OTA artifact URL/hash data separately from rollout state so stable release responses can choose artifacts by compatible SKU while release rollout remains version/type based.

* fix: select compatible OTA releases by SKU

Ensure stable release selection only considers releases with artifacts compatible with the requested SKU, and tighten tests around the DB-backed OTA contract.

* fix: match production OTA release responses

Only expose stable signature URLs that actually exist and preserve production's version-first SKU error behavior.

* fix: restrict legacy OTA artifacts and make sync create-only

Pre-SKU artifacts (no skus/ folder) are jetkvm-v2 only. Marking them
compatible with jetkvm-v2-sdmmc would brick devices that received
firmware predating their hardware. Future SKUs must opt in via an
explicit skus/<sku>/ upload.

sync-releases now skips releases already in the DB instead of upserting
them. This prevents routine sync runs from rewriting Release.url/hash
or appending duplicate ReleaseArtifact rows if R2_CDN_URL ever changes.
Backfills and repairs are left to one-off scripts.

* refactor: drop forceUpdate query parameter from /releases

The flag is no longer sent by any client. Routine update checks now
always go through the rollout-aware default-and-latest path, which is
what forceUpdate effectively short-circuited to. Removes one query
parameter, one branch in the handler, and the corresponding axis from
the compare-releases sweep.

* fix: skip incompatible defaults and parallelize stable DB lookups

getDefaultRelease previously picked the newest 100%-rolled-out release
without checking SKU compatibility. If that release lacked a compatible
artifact, the request 404'd downstream even though older 100%-rolled-out
releases had valid binaries for the SKU. It now filters to releases that
actually ship a compatible artifact before selecting the latest, falling
back to a 404 only when no compatible default exists.

The four DB lookups in the stable rollout-aware path are independent; run
them concurrently so background-check latency drops from ~4 round trips
to ~1.

Author: adamshiervani

package.json

@@ -11,6 +11,7 @@
     "prisma-dev-migrate": "prisma migrate dev",
     "prisma-migrate": "prisma migrate deploy",
     "seed": "NODE_ENV=development node -r ts-node/register --env-file=.env.development ./scripts/seed.ts",
+    "sync-releases": "NODE_ENV=development node -r ts-node/register --env-file=.env.development ./scripts/sync-releases.ts",
     "build": "tsc",
     "test": "vitest run",
     "test:watch": "vitest",

prisma/migrations/20260427143200_add_release_artifacts/migration.sql

@@ -0,0 +1,28 @@
+-- CreateTable
+CREATE TABLE "ReleaseArtifact" (
+    "id" BIGSERIAL NOT NULL,
+    "releaseId" BIGINT NOT NULL,
+    "url" TEXT NOT NULL,
+    "hash" TEXT NOT NULL,
+    "compatibleSkus" TEXT[] NOT NULL,
+
+    CONSTRAINT "ReleaseArtifact_pkey" PRIMARY KEY ("id")
+);
+
+-- Backfill one artifact for every existing release.
+-- Pre-SKU artifacts only target the original jetkvm-v2 hardware; future SKUs
+-- (e.g. jetkvm-v2-sdmmc) require explicit SKU-folder uploads to be registered
+-- by scripts/sync-releases.ts.
+INSERT INTO "ReleaseArtifact" ("releaseId", "url", "hash", "compatibleSkus")
+SELECT
+    "id",
+    "url",
+    "hash",
+    ARRAY['jetkvm-v2']::TEXT[]
+FROM "Release";
+
+-- CreateIndex
+CREATE UNIQUE INDEX "ReleaseArtifact_releaseId_url_key" ON "ReleaseArtifact"("releaseId", "url");
+
+-- AddForeignKey
+ALTER TABLE "ReleaseArtifact" ADD CONSTRAINT "ReleaseArtifact_releaseId_fkey" FOREIGN KEY ("releaseId") REFERENCES "Release"("id") ON DELETE CASCADE ON UPDATE CASCADE;

prisma/schema.prisma

@@ -43,14 +43,26 @@ model TurnActivity {
 }
 
 model Release {
-  id                BigInt   @id @default(autoincrement())
+  id                BigInt            @id @default(autoincrement())
   version           String
-  rolloutPercentage Int      @default(10) // 10% of users
-  createdAt         DateTime @default(now())
-  updatedAt         DateTime @updatedAt
+  rolloutPercentage Int               @default(10) // 10% of users
+  createdAt         DateTime          @default(now())
+  updatedAt         DateTime          @updatedAt
   url               String
-  type              String   @default("app") // "app" or "system"
+  type              String            @default("app") // "app" or "system"
   hash              String
+  artifacts         ReleaseArtifact[]
 
   @@unique([version, type])
 }
+
+model ReleaseArtifact {
+  id             BigInt   @id @default(autoincrement())
+  release        Release  @relation(fields: [releaseId], references: [id], onDelete: Cascade)
+  releaseId      BigInt
+  url            String
+  hash           String
+  compatibleSkus String[]
+
+  @@unique([releaseId, url])
+}