Releases: recovery image per product

[adamshiervani]

The Mini's recovery image is a merged full-flash binary: bootloader, partition table, the firmware in the first OTA slot, erased OTA selection data. Written with esptool or a browser flasher at offset 0. It is built with the firmware and shares its version, so it lives next to it.

 src/skus.ts
-  "jetkvm-mini-ethernet": { system: "mini/jetkvm-mini.bin" },
-  "jetkvm-mini-wireless": { system: "mini/jetkvm-mini.bin" },
+  "jetkvm-mini-ethernet": { system: "mini/jetkvm-mini.bin", recovery: "mini/jetkvm-mini-full.bin" },
+  "jetkvm-mini-wireless": { system: "mini/jetkvm-mini.bin", recovery: "mini/jetkvm-mini-full.bin" },

The recovery redirect already reads prefix and file for the requested SKU from the table (#70), so registering the artifact is the whole change:

GET /releases/system_recovery/latest?sku=jetkvm-v2              -> system/<v>/skus/jetkvm-v2/update.img
GET /releases/system_recovery/latest?sku=jetkvm-mini-wireless   -> mini/<v>/skus/jetkvm-mini-wireless/jetkvm-mini-full.bin

JetKVM redirects are unchanged. The route keeps its historical name.

Not in this PR: the kvm-mini build does not produce jetkvm-mini-full.bin yet. Until it is uploaded, a Mini request 404s from the artifact lookup like any missing version.

Stack: 5 of 5. Based on #71. Independent of the devices PR.

---

Note

Medium Risk
Changes device firmware and recovery download URLs for a new product line; incorrect SKU mapping could serve wrong hardware images, though unknown SKUs remain rejected at the API boundary.

Overview
Registers full-flash recovery (mini/jetkvm-mini-full.bin) for jetkvm-mini-ethernet and jetkvm-mini-wireless in the SKU table, alongside their existing system OTA image (mini/jetkvm-mini.bin). Because /releases/system_recovery/latest already resolves prefix and filename from artifactFor(sku, "recovery"), Mini recovery requests redirect under the mini/ R2 prefix instead of system/, while JetKVM behavior stays the same.

Also documents mini as a valid Release.type / R2 prefix in the Prisma schema comment, extends sync-releases and SKU tests for the mini/ prefix (SKU-only layout, no legacy mini paths), and adds release API tests for Mini-only OTA responses (system fields only, no app), prerelease listing scoped to mini/, recovery redirects, and rejecting app-latest for Mini SKUs.

^{Reviewed by Cursor Bugbot for commit ff346ce. Bugbot is set up for automated code reviews on this repo. Configure here.}

[adamshiervani]

bugbot run

[cursor]

Skipping Bugbot: Bugbot is disabled for this repository. Visit the Bugbot dashboard to update your settings.

[adamshiervani]

bugbot run

[cursor]

Stale Bugbot comment from a previous run.

[adamshiervani]

bugbot run

[cursor]

Stale Bugbot comment from a previous run.

[adamshiervani]

bugbot run

[adamshiervani]

bugbot run

[cursor]

Stale Bugbot comment from a previous run.

[adamshiervani]

bugbot run

[cursor]

Stale Bugbot comment from a previous run.

[adamshiervani]

bugbot run

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit 6afa94f. Configure here.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-18T16:28:13.690904Z	ff346ce	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.