Function mountProtocolRoutes

server/src/schemas-middleware.ts:101–216

(app: Application, protocolPath: string)

 * artifact they want.
 */
export function mountProtocolRoutes(app: Application, protocolPath: string): void {
  app.get("/protocol/", async (_req, res) => {
    try {
      const entries = await fs.readdir(protocolPath, { withFileTypes: true });
      const tarballs = entries
        .filter(
          (e) =>
            e.isFile() &&
            e.name.endsWith(".tgz") &&
            (e.name === "latest.tgz" ||
              semver.valid(e.name.replace(/\.tgz$/, "")) !== null),
        )
        .map((e) => e.name);

      const versioned = tarballs
        .filter((name) => name !== "latest.tgz")
        .sort((a, b) => semver.rcompare(a.replace(/\.tgz$/, ""), b.replace(/\.tgz$/, "")));

      const sidecarFiles = new Set(
        entries.filter((e) => e.isFile()).map((e) => e.name),
      );
      const sidecarsFor = (tarballName: string) => {
        const sigName = `${tarballName}.sig`;
        const crtName = `${tarballName}.crt`;
        return {
          signature: sidecarFiles.has(sigName)
            ? `/protocol/${sigName}`
            : undefined,
          certificate: sidecarFiles.has(crtName)
            ? `/protocol/${crtName}`
            : undefined,
        };
      };

      let latestBlock: {
        tarball: string;
        checksum: string;
        signature?: string;
        certificate?: string;
        adcp_version?: string;
        generated_at?: string;
        note: string;
      } | null = null;
      if (tarballs.includes("latest.tgz")) {
        const latestPath = `${protocolPath}/latest.tgz`;
        let generatedAt: string | undefined;
        try {
          const stat = await fs.stat(latestPath);
          generatedAt = stat.mtime.toISOString();
        } catch {
          // ignore — absent file is already handled upstream
        }
        const latestSidecars = sidecarsFor("latest.tgz");
        latestBlock = {
          tarball: "/protocol/latest.tgz",
          checksum: "/protocol/latest.tgz.sha256",
          ...(latestSidecars.signature && { signature: latestSidecars.signature }),
          ...(latestSidecars.certificate && { certificate: latestSidecars.certificate }),