禁用移动壳麦克风权限

移动壳 Android 包配置通过 blockedPermissions 移除 RECORD_AUDIO

移动壳检查脚本拒绝麦克风权限缺失拦截或被重新声明

宿主壳方案和共享决策记录移动端权限边界

apps/mobile-shell/scripts/check-config.mjs

@@ -243,6 +243,20 @@ if (appConfig.android?.usesCleartextTraffic !== false) {
   throw new Error('mobile shell Android package must disable cleartext traffic');
 }
 
+if (
+  !appConfig.android?.blockedPermissions?.includes(
+    'android.permission.RECORD_AUDIO',
+  )
+) {
+  throw new Error('mobile shell Android package must block microphone permission');
+}
+
+if (
+  appConfig.android?.permissions?.includes('android.permission.RECORD_AUDIO')
+) {
+  throw new Error('mobile shell Android package must not request microphone');
+}
+
 if (
   appConfig.android?.adaptiveIcon?.foregroundImage !== './assets/icon.png' ||
   appConfig.android?.adaptiveIcon?.backgroundColor !== brandBackgroundColor