fix(deploy): 初始化并校验公开 API 地址

start.ps1

@@ -23,6 +23,7 @@ $script:DeployDryRun = ($env:DEPLOY_DRY_RUN -eq "1")
 $script:DeployIP = ""
 $script:SkipDeployQuestions = $false
 $script:SecurityEnvMode = "upgrade"
+$script:PublicApiBaseUrlCandidate = ""
 $script:DockerDesktopUrl = "https://desktop.docker.com/win/main/amd64/Docker%20Desktop%20Installer.exe"
 
 function Write-Log {
@@ -166,12 +167,20 @@ function Setup-EnvFiles {
     $content = Get-Content ".env" -Raw -Encoding UTF8
     if (-not $content) { $content = "" }
 
-    $content = Upsert-Env $content "NUXT_PUBLIC_BASE_APIURL" "http://$($script:DeployIP):3001"
+    $serverPortMatch = [regex]::Match($content, '(?m)^SERVER_HTTP_PORT=(\d+)$')
+    $serverPort = if ($serverPortMatch.Success) { $serverPortMatch.Groups[1].Value } else { "3001" }
+    $publicApiBaseUrl = "http://$($script:DeployIP):$serverPort"
+    $content = Upsert-Env $content "NUXT_PUBLIC_BASE_APIURL" $publicApiBaseUrl
     $content = Upsert-Env $content "NUXT_PUBLIC_BASE_SOCKETURL" "ws://$($script:DeployIP):3002"
     $content = Upsert-Env $content "NUXT_PUBLIC_SG_APIURL" "http://$($script:DeployIP):3003"
     $webPortMatch = [regex]::Match($content, '(?m)^WEB_PORT=(\d+)$')
     $webPort = if ($webPortMatch.Success) { $webPortMatch.Groups[1].Value } else { "3010" }
     $content = Upsert-Env $content "CONFIG_SECURITY_ORIGIN" "http://$($script:DeployIP):$webPort"
+    $script:PublicApiBaseUrlCandidate = if ($env:DEPLOY_PUBLIC_API_BASE_URL) {
+        $env:DEPLOY_PUBLIC_API_BASE_URL
+    } else {
+        $publicApiBaseUrl
+    }
 
     [System.IO.File]::WriteAllText((Join-Path $script:Root ".env"), $content, [System.Text.UTF8Encoding]::new($false))
     Ok ".env configured for IP=$($script:DeployIP)"
@@ -353,7 +362,7 @@ function Main {
     if ((Test-Path ".env") -and -not $env:DEPLOY_FORCE_RECONFIG -and -not $env:DEPLOY_IP -and -not $env:DEPLOY_ACCESS) {
         if ($env:DEPLOY_NON_INTERACTIVE -eq "1" -or $env:CI -eq "true") {
             $line = Get-Content ".env" -Encoding UTF8 | Where-Object { $_ -like "NUXT_PUBLIC_BASE_APIURL=*" } | Select-Object -First 1
-            if ($line -and $line -like "*:3001*") { $script:DeployIP = ($line -replace ".*http://", "" -replace ":3001.*", "").Trim() }
+            if ($line -match '^NUXT_PUBLIC_BASE_APIURL=http://([^/:]+)(?::\d+)?(?:/.*)?$') { $script:DeployIP = $Matches[1] }
             $script:SkipDeployQuestions = $true
             Step "Using existing env config"
         } else {
@@ -361,7 +370,7 @@ function Main {
             $yes = ($answer.Length -gt 0) -and ($answer[0] -eq [char]121)
             if (-not $yes) {
                 $line = Get-Content ".env" -Encoding UTF8 | Where-Object { $_ -like "NUXT_PUBLIC_BASE_APIURL=*" } | Select-Object -First 1
-                if ($line -and $line -like "*:3001*") { $script:DeployIP = ($line -replace ".*http://", "" -replace ":3001.*", "").Trim() }
+                if ($line -match '^NUXT_PUBLIC_BASE_APIURL=http://([^/:]+)(?::\d+)?(?:/.*)?$') { $script:DeployIP = $Matches[1] }
                 $script:SkipDeployQuestions = $true
                 Step "Using existing env config"
             }
@@ -380,6 +389,13 @@ function Main {
     . (Join-Path $script:Root "scripts\Initialize-SecurityEnv.ps1")
     Initialize-SecurityEnv -Path (Join-Path $script:Root ".env") -Mode $script:SecurityEnvMode
 
+    . (Join-Path $script:Root "scripts\Initialize-PublicApiBaseUrl.ps1")
+    $publicUrlMode = if ($script:SkipDeployQuestions) { "upgrade" } else { "configure" }
+    Initialize-PublicApiBaseUrl `
+        -Path (Join-Path $script:Root ".env") `
+        -Mode $publicUrlMode `
+        -Override $script:PublicApiBaseUrlCandidate
+
     if ($script:DeployDryRun) {
         Warn "dry-run mode: skip docker and services"
     } else {