收紧原生壳桥接权限边界

移动壳 HostBridge 协议名和版本改为共享契约常量

移动壳配置检查锁定主动导航和 deep link 宿主上下文补写

桌面壳主窗口 capability 移除 Tauri core 默认权限

桌面壳配置检查拒绝 core 默认权限和插件权限外露

更新原生壳方案与共享决策记录

apps/mobile-shell/src/shell/webViewHistory.test.ts

@@ -1,5 +1,9 @@
 import { describe, expect, test } from 'vitest';
 
+import {
+  HOST_BRIDGE_PROTOCOL,
+  HOST_BRIDGE_VERSION,
+} from '../../../../packages/shared/src/contracts/hostBridge';
 import { parseMobileWebViewHistoryStateMessage } from './webViewHistory';
 
 describe('parseMobileWebViewHistoryStateMessage', () => {
@@ -31,8 +35,8 @@ describe('parseMobileWebViewHistoryStateMessage', () => {
     expect(
       parseMobileWebViewHistoryStateMessage(
         JSON.stringify({
-          bridge: 'GenarrativeHostBridge',
-          version: 1,
+          bridge: HOST_BRIDGE_PROTOCOL,
+          version: HOST_BRIDGE_VERSION,
           method: 'host.getRuntime',
         }),
       ),