feat: replace chb with consent groups and preserve runtime config (api#317, #17)

.gitea/workflows/deploy.yml

@@ -129,6 +129,32 @@ jobs:
           SSHPASS="$SFTP_PASS" sshpass -e sftp -oBatchMode=no -oStrictHostKeyChecking=yes -oUserKnownHostsFile="$known_hosts" -b "$batch" "$SFTP_USER@$SFTP_HOST"
           echo "залито файлов: $(wc -l < "$files")"
 
+      # Сначала совместимый PHP-код: он понимает старый host-config без chb.
+      # Затем меняем только согласованные consent-ключи, не заменяя весь config снимком Git.
+      - name: Migrate consent UTM in preserved host config
+        env:
+          SFTP_HOST: ${{ secrets.ZOOMPIXEL_SFTP_HOST }}
+          SFTP_USER: ${{ secrets.ZOOMPIXEL_SFTP_USER }}
+          SFTP_PASS: ${{ secrets.ZOOMPIXEL_SFTP_PASS }}
+          SFTP_KNOWN_HOSTS: ${{ secrets.ZOOMPIXEL_SFTP_KNOWN_HOSTS }}
+        run: |
+          set -eu
+          umask 077
+          known_hosts=$(mktemp); batch=$(mktemp); config=$(mktemp)
+          trap 'rm -f "$known_hosts" "$batch" "$config"' EXIT
+          printf '%s\n' "$SFTP_KNOWN_HOSTS" > "$known_hosts"
+          printf '%s\n' "get -p $REMOTE_DIR/config.json $config" > "$batch"
+          SSHPASS="$SFTP_PASS" sshpass -e sftp -oBatchMode=no -oStrictHostKeyChecking=yes -oUserKnownHostsFile="$known_hosts" -b "$batch" "$SFTP_USER@$SFTP_HOST"
+          changed=0
+          php bin/ensure-cons-config.php "$config" || changed=$?
+          case "$changed" in
+            0) ;;
+            10) revision=$(git rev-parse HEAD)
+                printf '%s\n' "put -p $config $REMOTE_DIR/config.json.upload-$revision" "rename $REMOTE_DIR/config.json.upload-$revision $REMOTE_DIR/config.json" > "$batch"
+                SSHPASS="$SFTP_PASS" sshpass -e sftp -oBatchMode=no -oStrictHostKeyChecking=yes -oUserKnownHostsFile="$known_hosts" -b "$batch" "$SFTP_USER@$SFTP_HOST" ;;
+            *) exit "$changed" ;;
+          esac
+
       - name: Check the page
         run: |
           set -eu