收紧原生壳桥接权限边界

移动壳 HostBridge 协议名和版本改为共享契约常量

移动壳配置检查锁定主动导航和 deep link 宿主上下文补写

桌面壳主窗口 capability 移除 Tauri core 默认权限

桌面壳配置检查拒绝 core 默认权限和插件权限外露

更新原生壳方案与共享决策记录

apps/mobile-shell/src/shell/ShellApp.tsx

@@ -15,6 +15,10 @@ import { SafeAreaProvider, SafeAreaView } from 'react-native-safe-area-context';
 import type { WebViewMessageEvent } from 'react-native-webview';
 import { WebView } from 'react-native-webview';
 
+import {
+  HOST_BRIDGE_PROTOCOL,
+  HOST_BRIDGE_VERSION,
+} from '../../../../packages/shared/src/contracts/hostBridge';
 import {
   configureMobileHostBridgeNavigation,
   handleMobileHostBridgeMessage,
@@ -97,8 +101,8 @@ export default function ShellApp() {
   const injectHostBridgeEvent = useCallback((event: string, payload: unknown) => {
     webViewRef.current?.injectJavaScript(
       buildHostBridgeMessageScript({
-        bridge: 'GenarrativeHostBridge',
-        version: 1,
+        bridge: HOST_BRIDGE_PROTOCOL,
+        version: HOST_BRIDGE_VERSION,
         event,
         payload,
       }),