OTA for specific SKUs

.github/workflows/pull-request.yml

@@ -9,13 +9,29 @@ on:
 jobs:
   build:
     runs-on: ubuntu-latest
+    env:
+      DATABASE_URL: postgresql://jetkvm:jetkvm@localhost:5432/jetkvm?schema=public
+    services:
+      postgres:
+        image: postgres:16
+        env:
+          POSTGRES_USER: jetkvm
+          POSTGRES_PASSWORD: jetkvm
+          POSTGRES_DB: jetkvm
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd "pg_isready -U jetkvm -d jetkvm"
+          --health-interval 5s
+          --health-timeout 5s
+          --health-retries 10
     steps:
     - uses: actions/checkout@v4
 
     - name: Use Node.js
       uses: actions/setup-node@v4
       with:
-        node-version: v21.1.0
+        node-version: v22.21.0
         cache: 'npm'
         cache-dependency-path: '**/package-lock.json'
 
@@ -35,6 +51,9 @@ jobs:
       env:
         CI: true
 
+    - name: Run Prisma Migrations
+      run: npx prisma migrate deploy
+
     - name: Run Tests
       run: npm test
 

README.md

@@ -50,6 +50,9 @@ npx prisma migrate deploy
 
 # Start the production server on port 3000
 npm run dev
+
+# Run tests
+npm test
 ```
 
 ## Production

package.json

@@ -16,7 +16,7 @@
     "test:coverage": "vitest run --coverage"
   },
   "engines": {
-    "node": "21.1.0"
+    "node": "22.21.0"
   },
   "keywords": [],
   "author": "JetKVM",
@@ -42,7 +42,8 @@
     "semver": "^7.6.3",
     "ts-node": "^10.9.2",
     "typescript": "^5.4.5",
-    "ws": "^8.17.1"
+    "ws": "^8.17.1",
+    "zod": "^4.3.6"
   },
   "optionalDependencies": {
     "bufferutil": "^4.0.8"

src/devices.ts

@@ -40,7 +40,10 @@ export const List = async (req: express.Request, res: express.Response) => {
   }
 };
 
-export const Retrieve = async (req: express.Request, res: express.Response) => {
+export const Retrieve = async (
+  req: express.Request<{ id: string }>,
+  res: express.Response
+) => {
   const idToken = req.session?.id_token;
   const { sub } = jose.decodeJwt(idToken);
   const { id } = req.params;
@@ -55,7 +58,10 @@ export const Retrieve = async (req: express.Request, res: express.Response) => {
   return res.status(200).json({ device });
 };
 
-export const Update = async (req: express.Request, res: express.Response) => {
+export const Update = async (
+  req: express.Request<{ id: string }>,
+  res: express.Response
+) => {
   const idToken = req.session?.id_token;
   const { sub } = jose.decodeJwt(idToken);
   if (!sub) throw new UnauthorizedError("Missing sub in token");
@@ -94,7 +100,10 @@ export const Token = async (req: express.Request, res: express.Response) => {
   return res.json({ secretToken });
 };
 
-export const Delete = async (req: express.Request, res: express.Response) => {
+export const Delete = async (
+  req: express.Request<{ id: string }>,
+  res: express.Response
+) => {
   if (req.headers.authorization?.startsWith("Bearer ")) {
     const secretToken = req.headers.authorization.split("Bearer ")[1];
 

src/helpers.ts

@@ -32,7 +32,9 @@ export async function verifyHash(
 ): Promise<boolean> {
   const content = await streamToBuffer(file.Body);
   const remoteHash = await streamToString(hashFile.Body);
-  const localHash = createHash("sha256").update(content).digest("hex");
+  const localHash = createHash("sha256")
+    .update(new Uint8Array(content))
+    .digest("hex");
 
   const matches = remoteHash.trim() === localHash;
   if (!matches && exception) {
@@ -44,4 +46,14 @@ export async function verifyHash(
 export function toSemverRange(range?: string) {
   if (!range) return "*";
   return validRange(range) || "*";
+}
+
+/**
+ * Computes a deterministic rollout bucket (0-99) for a device ID.
+ * Used to decide if a device is eligible for a staged rollout.
+ */
+export function getDeviceRolloutBucket(deviceId: string): number {
+  const hash = createHash("md5").update(deviceId).digest("hex");
+  const hashPrefix = hash.substring(0, 8);
+  return parseInt(hashPrefix, 16) % 100;
 }