Sync upstream into main

.github/workflows/config-serving-deploy.yml

@@ -16,21 +16,16 @@ jobs:
     deploy-config:
         if: github.repository == 'beyond-all-reason/bar-lobby'
         runs-on: ubuntu-latest
+        env:
+            CONFIG_URL: https://lobby-config.beyondallreason.dev/config.json
         steps:
+            - uses: actions/checkout@v4
+
             - name: Push config
-              env:
-                  CONFIG_URL: https://lobby-config.beyondallreason.dev/config.json
               run: |
-                  # TODO: Just an empty config for now, to show that workflow works,
-                  # replace with real path from validated config.json.
-                  cat > config.json <<EOF
-                  {
-                      "configUrl": "$CONFIG_URL"
-                  }
-                  EOF
                   CURL_OPTS=(-sS --fail-with-body --connect-timeout 10 --max-time 30 --retry 3 --retry-connrefused)
                   IDTOKEN="$(curl "${CURL_OPTS[@]}" -H "Authorization: Bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \
                       "$ACTIONS_ID_TOKEN_REQUEST_URL&audience=$CONFIG_URL" | jq -r '.value')"
                   curl "${CURL_OPTS[@]}" -X PUT "$CONFIG_URL" \
                       -H "Authorization: Bearer $IDTOKEN" \
-                      --data @config.json
+                      --data @./remoteConfig/config.json

.github/workflows/redirector-test.yml

@@ -0,0 +1,38 @@
+# SPDX-FileCopyrightText: 2026 The BAR Lobby Authors
+#
+# SPDX-License-Identifier: CC0-1.0
+
+name: Redirector CI
+on:
+    push:
+        branches:
+            - master
+        paths:
+            - "auxiliary/redirector/**"
+            - ".github/workflows/redirector-test.yml"
+    pull_request:
+        paths:
+            - "auxiliary/redirector/**"
+            - ".github/workflows/redirector-test.yml"
+    workflow_dispatch:
+permissions:
+    contents: read
+jobs:
+    test-redirector:
+        runs-on: ubuntu-latest
+        defaults:
+            run:
+                working-directory: auxiliary/redirector
+        steps:
+            - name: Checkout Git repository
+              uses: actions/checkout@v7
+            - name: Setup node
+              uses: actions/setup-node@v7
+              with:
+                  node-version: 24
+                  cache: npm
+                  cache-dependency-path: auxiliary/redirector/package-lock.json
+            - name: Install deps
+              run: npm ci
+            - name: Typecheck
+              run: npm run typecheck

.github/workflows/tests.yml

@@ -36,9 +36,18 @@ jobs:
             - name: Type check
               run: npm run typecheck
 
+            - name: Validate committed config
+              run: npm run validate-config
+
             - name: Lint check
               run: npm run lint
 
+            # The language files under src/renderer/assets are generated from lang/, and nothing else
+            # checks the two agree: a key added straight to the generated side passes types, lint and
+            # tests, then disappears the next time anyone regenerates.
+            - name: Translation assets are up to date
+              run: npm run generate-i18n-assets:check
+
             - name: Test Vite Build
               run: npm run package
 

.prettierignore

@@ -1,6 +1,8 @@
 dist_electron
 src/routes.ts
 node_modules
+# Agent worktrees hold whole copies of this repo, which the unscoped check would walk into.
+.claude
 typed-router.d.ts
 vendor
 dist

REUSE.toml

@@ -16,6 +16,7 @@ path = [
     "AUTHORS",
     "PULL_REQUEST_TEMPLATE.md",
     "playwright.config.ts",
+    "remoteConfig/config.json",
 ]
 precedence = "aggregate"
 SPDX-FileCopyrightText = "NONE"

auxiliary/redirector/.gitignore

@@ -0,0 +1,4 @@
+.wrangler/
+node_modules/
+# Generated by `wrangler types`, see the typecheck script.
+worker-configuration.d.ts

auxiliary/redirector/README.md

@@ -0,0 +1,17 @@
+<!--
+SPDX-FileCopyrightText: 2026 The BAR Lobby Authors
+
+SPDX-License-Identifier: CC0-1.0
+-->
+
+# Redirector
+
+Cloudflare Worker serving <https://barrts.app>.
+
+For now it's a placeholder page; it will grow into a redirector for lobby links.
+
+Run locally with `npm run dev`, deploy with `npm run deploy`.
+
+Types for the Worker runtime and bindings are generated from `wrangler.jsonc` by
+`wrangler types` into `worker-configuration.d.ts`, which is not checked in;
+`npm run typecheck` regenerates it first.

auxiliary/redirector/REUSE.toml

@@ -0,0 +1,13 @@
+version = 1
+
+[[annotations]]
+# We don't consider the top level configuration files copyrightable in any way
+path = [
+	".*",
+	"package*.json",
+	"tsconfig.json",
+	"wrangler.jsonc",
+]
+precedence = "aggregate"
+SPDX-FileCopyrightText = "NONE"
+SPDX-License-Identifier = "CC0-1.0"