修复认证挑战与可信代理安全边界（07-17-auth-challenge-trusted-proxy-hardening）

deploy/trialrun/deploy.sh

@@ -172,25 +172,27 @@ echo ">>> 4.2 启动基础服务"
 if [[ "$ENABLE_MINIO" == "1" ]]; then
   "${compose_cmd[@]}" "${profile_args[@]}" up -d minio minio_init
 fi
+
+echo ">>> 4.3 构建最新 init 镜像"
+"${compose_cmd[@]}" build init
+
+echo ">>> 4.4 预检新配置并执行 init"
+"${compose_cmd[@]}" run --rm -T --entrypoint sh init -lc 'cd /app/server && node -e '\''require("./src/config").getConfig()'\'' && npm run prisma:migrate:deploy && npm run seed:config && npm run seed:trialrun' </dev/null
+
+echo ">>> 4.5 构建并切换应用服务"
 "${compose_cmd[@]}" "${profile_args[@]}" up -d --build server
 if [[ "$ENABLE_WORKER" == "1" ]]; then
   "${compose_cmd[@]}" "${profile_args[@]}" up -d worker
 fi
 
-echo ">>> 4.3 构建最新 init 镜像"
-"${compose_cmd[@]}" build init
-
-echo ">>> 4.4 执行 init"
-"${compose_cmd[@]}" run --rm -T --entrypoint sh init -lc 'cd /app/server && npm run prisma:migrate:deploy && npm run seed:config && npm run seed:trialrun' </dev/null
-
-echo ">>> 4.5 校验 Prisma migration status"
+echo ">>> 4.6 校验 Prisma migration status"
 if ! "${compose_cmd[@]}" exec -T server sh -lc 'cd /app/server && npx prisma migrate status' </dev/null; then
   echo "[ERROR] Prisma migration status 未通过，停止部署" >&2
   "${compose_cmd[@]}" logs --tail=200 server || true
   exit 1
 fi
 
-echo ">>> 4.6 等待 /ready 并核对构建标识"
+echo ">>> 4.7 等待 /ready 并核对构建标识"
 ready_ok=0
 for i in $(seq 1 60); do
   if ready_payload="$(curl -fsS http://127.0.0.1:3000/ready 2>/dev/null)"; then
@@ -211,21 +213,21 @@ if [[ "$ready_ok" != "1" ]]; then
   exit 1
 fi
 
-echo ">>> 4.7 执行 external deps smoke"
+echo ">>> 4.8 执行 external deps smoke"
 if ! "${compose_cmd[@]}" exec -T server node src/scripts/smoke-external-deps.js </dev/null; then
   echo "[ERROR] external deps smoke 失败，输出最近 server 日志" >&2
   "${compose_cmd[@]}" logs --tail=200 server || true
   exit 1
 fi
 
-echo ">>> 4.8 执行 runtime smoke"
+echo ">>> 4.9 执行 runtime smoke"
 if ! "${compose_cmd[@]}" exec -T server node src/scripts/smoke-trialrun-runtime.js </dev/null; then
   echo "[ERROR] runtime smoke 失败，输出最近 server 日志" >&2
   "${compose_cmd[@]}" logs --tail=200 server || true
   exit 1
 fi
 
-echo ">>> 4.9 当前服务状态"
+echo ">>> 4.10 当前服务状态"
 "${compose_cmd[@]}" ps
 REMOTE