扩展原生壳禁替身扫描

原生壳总门禁纳入 H5 HostBridge transport 扫描

共享 HostBridge 契约进入生产禁替身检查

更新原生壳方案和共享决策记录扫描口径

scripts/check-native-shells.mjs

@@ -8,10 +8,12 @@ const npmCommand = process.platform === 'win32' ? 'npm.cmd' : 'npm';
 const nativeShellPlanPath =
   'docs/【前端架构】ExpoReactNative与Tauri宿主壳方案-2026-06-17.md';
 
-const productionShellRoots = [
+const productionShellScanRoots = [
   'apps/mobile-shell',
   'apps/desktop-shell',
   'miniprogram',
+  'packages/shared/src/contracts/hostBridge.ts',
+  'src/services/host-bridge',
 ];
 const expectedWechatHostBridgeFiles = [
   'dispatch.js',
@@ -238,7 +240,7 @@ function collectProductionShellFiles(entryPath) {
 }
 
 function assertNoProductionShellDevScaffoldTerms() {
-  const files = productionShellRoots.flatMap(collectProductionShellFiles);
+  const files = productionShellScanRoots.flatMap(collectProductionShellFiles);
 
   for (const file of files) {
     const source = fs.readFileSync(file, 'utf8');