fix: station json check

Author: whes1015

.github/workflows/protect-station-json.yml

@@ -0,0 +1,96 @@
+name: Protect station.json
+
+on:
+  push:
+    paths:
+      - "resource/station.json"
+
+jobs:
+  protect:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.PAT_TOKEN }}
+          fetch-depth: 0
+
+      - name: Check if committer is bot and revert if needed
+        env:
+          PAT_TOKEN: ${{ secrets.PAT_TOKEN }}
+        run: |
+          BRANCH="${{ github.ref_name }}"
+          ACTOR="${{ github.actor }}"
+          COMMITTER_EMAIL="${{ github.event.commits[0].author.email }}"
+          COMMITTER_NAME="${{ github.event.commits[0].author.name }}"
+          COMMIT_MESSAGE="${{ github.event.commits[0].message }}"
+          COMMIT_SHA="${{ github.event.commits[0].sha }}"
+
+          echo "檢查分支: $BRANCH"
+
+          # 首先檢查是否在 main 分支上
+          if [ "$BRANCH" != "main" ]; then
+            echo "❌ 錯誤: 不允許直接修改 resource/station.json"
+            exit 1
+          fi
+
+          echo "檢查提交者信息:"
+          echo "  Actor: $ACTOR"
+          echo "  提交者: $COMMITTER_NAME ($COMMITTER_EMAIL)"
+          echo "  提交訊息: $COMMIT_MESSAGE"
+          echo "  提交 SHA: $COMMIT_SHA"
+
+          # 檢查是否為 bot 提交
+          IS_BOT=false
+
+          # 檢查 actor 是否為 bot
+          if [[ "$ACTOR" == *"[bot]"* ]] || [[ "$ACTOR" == "github-actions[bot]" ]]; then
+            IS_BOT=true
+          fi
+
+          # 檢查提交者 email 是否為 GitHub Actions
+          if [[ "$COMMITTER_EMAIL" == *"noreply@github.com"* ]] || \
+             [[ "$COMMITTER_EMAIL" == "action@github.com" ]]; then
+            IS_BOT=true
+          fi
+
+          # 檢查提交者名稱
+          if [[ "$COMMITTER_NAME" == "GitHub Action" ]] || \
+             [[ "$COMMITTER_NAME" == *"[bot]"* ]]; then
+            IS_BOT=true
+          fi
+
+          # 檢查提交訊息是否包含 [skip ci]（我們的 workflow 使用這個標記）
+          if [[ "$COMMIT_MESSAGE" == *"[skip ci]"* ]]; then
+            IS_BOT=true
+          fi
+
+          if [ "$IS_BOT" = false ]; then
+            echo "❌ 錯誤: resource/station.json 只能由 bot 或 GitHub Actions 更新"
+            echo "   當前提交者: $COMMITTER_NAME ($COMMITTER_EMAIL)"
+            echo "   操作者: $ACTOR"
+            echo ""
+            echo "正在 revert resource/station.json 檔案..."
+            
+            # 配置 git
+            git config --local user.email "action@github.com"
+            git config --local user.name "GitHub Action"
+            
+            # 設置 remote URL 包含 PAT token
+            git remote set-url origin https://x-access-token:$PAT_TOKEN@github.com/${{ github.repository }}.git
+            
+            # 只 revert station.json 檔案（從上一個提交恢復）
+            git checkout HEAD~1 -- resource/station.json
+            
+            # 提交恢復的檔案
+            git add resource/station.json
+            git commit -m "Revert unauthorized change to station.json [skip ci]"
+            
+            # 強制推送
+            git push origin $BRANCH --force
+            
+            echo "✅ 已 revert resource/station.json 並強制推送"
+            exit 1
+          fi
+
+          echo "✅ 允許: 提交來自 bot 或 GitHub Actions"

.github/workflows/station-json-check.yml

@@ -0,0 +1,53 @@
+name: Station JSON Check
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - main
+    paths:
+      - "resource/station-dev.json"
+  pull_request:
+    types: [opened, synchronize, reopened]
+    paths:
+      - "resource/station-dev.json"
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.PAT_TOKEN }}
+          fetch-depth: 0
+          persist-credentials: true
+          sparse-checkout: |
+            resource/station-dev.json
+            resource/station.json
+            scripts/station-json-check.ts
+          sparse-checkout-cone-mode: false
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Run station JSON check
+        run: bun run scripts/station-json-check.ts
+
+      - name: Commit and push changes
+        if: success() && github.event_name == 'push' && github.ref == 'refs/heads/main'
+        env:
+          PAT_TOKEN: ${{ secrets.PAT_TOKEN }}
+        run: |
+          git config --local user.email "action@github.com"
+          git config --local user.name "GitHub Action"
+
+          # 設置 remote URL 包含 PAT token
+          git remote set-url origin https://x-access-token:$PAT_TOKEN@github.com/${{ github.repository }}.git
+
+          git add resource/station.json
+          git diff --staged --quiet || git commit -m "chore: update station.json from station-dev.json [skip ci]"
+          git push origin main