收紧原生壳桥接权限边界

移动壳 HostBridge 协议名和版本改为共享契约常量

移动壳配置检查锁定主动导航和 deep link 宿主上下文补写

桌面壳主窗口 capability 移除 Tauri core 默认权限

桌面壳配置检查拒绝 core 默认权限和插件权限外露

更新原生壳方案与共享决策记录

apps/mobile-shell/src/shell/url.ts

@@ -1,6 +1,7 @@
-import type {
-  HostBridgeCapability,
-  NativeHostPlatform,
+import {
+  HOST_BRIDGE_VERSION,
+  type HostBridgeCapability,
+  type NativeHostPlatform,
 } from '../../../../packages/shared/src/contracts/hostBridge';
 
 export type MobileShellUrlOptions = {
@@ -58,7 +59,7 @@ export function buildMobileShellUrl(
   url.searchParams.set('hostShell', 'expo_mobile');
   url.searchParams.set('hostPlatform', options.platform);
   url.searchParams.set('hostVersion', options.hostVersion);
-  url.searchParams.set('bridgeVersion', '1');
+  url.searchParams.set('bridgeVersion', HOST_BRIDGE_VERSION.toString());
   url.searchParams.set('hostCapabilities', options.capabilities.join(','));
   return url.toString();
 }