收口宿主事件白名单

新增共享 HostBridge event 白名单与类型守卫

让 H5、Expo 和 Tauri 只分发白名单宿主事件

补齐移动端、桌面端和根级原生壳门禁

更新宿主壳方案文档和项目决策记录

apps/desktop-shell/src-tauri/src/shell/events.rs

@@ -1,10 +1,28 @@
 use crate::host_bridge::protocol::{HOST_BRIDGE_PROTOCOL, HOST_BRIDGE_VERSION};
 use serde_json::{json, Value};
 
+const HOST_BRIDGE_EVENTS: [&str; 4] = [
+    "app.lifecycle",
+    "network.statusChanged",
+    "navigation.canGoBack",
+    "file.imageDropped",
+];
+
+fn is_host_bridge_event_name(event: &str) -> bool {
+    HOST_BRIDGE_EVENTS.contains(&event)
+}
+
 pub(crate) fn host_bridge_event_script(
     event: &str,
     payload: Value,
 ) -> Result<String, serde_json::Error> {
+    if !is_host_bridge_event_name(event) {
+        return Err(serde_json::Error::io(std::io::Error::new(
+            std::io::ErrorKind::InvalidInput,
+            format!("unknown HostBridge event: {}", event),
+        )));
+    }
+
     let message = json!({
         "bridge": HOST_BRIDGE_PROTOCOL,
         "version": HOST_BRIDGE_VERSION,
@@ -45,4 +63,12 @@ mod tests {
         assert!(script.contains("\\\"state\\\":\\\"active\\\""));
         assert!(script.contains("\\\"focused\\\":true"));
     }
+
+    #[test]
+    fn host_bridge_event_script_rejects_unknown_events() {
+        let error =
+            host_bridge_event_script("unknown.event", json!({})).expect_err("unknown event");
+
+        assert!(error.to_string().contains("unknown HostBridge event"));
+    }
 }