完善企微开通与部署端口契约（07-26-internal-ops-recovery-baseline）

deploy/trialrun/deploy.sh

@@ -193,9 +193,15 @@ if ! "${compose_cmd[@]}" exec -T server sh -lc 'cd /app/server && npx prisma mig
 fi
 
 echo ">>> 4.7 等待 /ready 并核对构建标识"
+server_port_output="$("${compose_cmd[@]}" port server 3000)"
+server_host_port="${server_port_output##*:}"
+if [[ ! "$server_host_port" =~ ^[0-9]+$ ]]; then
+  echo "[ERROR] 无法从 Compose 解析 server 宿主端口" >&2
+  exit 1
+fi
 ready_ok=0
 for i in $(seq 1 60); do
-  if ready_payload="$(curl -fsS http://127.0.0.1:3000/ready 2>/dev/null)"; then
+  if ready_payload="$(curl -fsS "http://127.0.0.1:${server_host_port}/ready" 2>/dev/null)"; then
     if READY_PAYLOAD="$ready_payload" EXPECTED_BUILD_SHA="${BUILD_SHA:0:12}" node -e '
       const payload = JSON.parse(process.env.READY_PAYLOAD || "{}");
       if (payload?.data?.buildSha !== process.env.EXPECTED_BUILD_SHA) process.exit(1);
@@ -263,4 +269,4 @@ echo ">>> 10. 部署完成"
 echo "    来源提交: ${SOURCE_COMMIT}"
 echo "    已自动执行：契约校验 + /ready + external deps smoke + runtime smoke + 公网前端资源文案扫描"
 echo "    若本地已配置 LIVE_SMOKE_*，部署后会自动补跑网页 live smoke"
-echo "    请确认 Caddy 或等效反向代理已把 OA 域名反代到 127.0.0.1:3000"
+echo "    请确认 Caddy 或等效反向代理已把 OA 域名反代到 Compose 暴露的回环端口"