docs: clarify native bridge canary scope

Author: dwgx

.env.example

@@ -57,11 +57,16 @@ LS_PORT=42100
 # Native Cascade tool bridge. Default off because Cascade executes native
 # Read/Bash-style tools in the remote Windsurf workspace, while most clients
 # expect local execution.
-# Recommended experimental mode: enable only when every declared tool maps to
-# Cascade native kinds (Read/Bash/Grep/Glob/WebSearch/WebFetch, etc.) so the
-# proxy does not inject those tool definitions into the prompt preamble.
+# v2.0.123 production canary scope is intentionally narrow: without an
+# explicit tool allowlist, only Bash / shell_command / run_command can route
+# through the native bridge. Read/Grep/Glob/WebSearch/WebFetch are protocol
+# matrix work, not production defaults.
 # WINDSURFAPI_NATIVE_TOOL_BRIDGE=all_mapped
-# Force partition mode for mixed mapped/unmapped toolsets:
+# Optional gray gates for real testing:
+# WINDSURFAPI_NATIVE_TOOL_BRIDGE_TOOLS=Bash
+# WINDSURFAPI_NATIVE_TOOL_BRIDGE_MODELS=claude-4.5-haiku
+# WINDSURFAPI_NATIVE_TOOL_BRIDGE_API_KEYS=your-test-api-key
+# Force bridge mode for mapped subsets only after the canary is proven:
 # WINDSURFAPI_NATIVE_TOOL_BRIDGE=1
 # Emergency hard-off:
 # WINDSURFAPI_NATIVE_TOOL_BRIDGE_OFF=1

docs/index.html

@@ -873,6 +873,17 @@ <h2 class="section-title">這些朋友把這個專案<em>撐起來</em>了。</h
         </div>
         <p class="contrib-summary">早期代碼審查先行者，一個 PR 涵蓋 15 個安全 / 並發 / 資源管理 bug：XSS 轉義、grpc HTTP/2 池、16MB frame 上限、varint BigInt。雖未直接合並，方向都對，後續多項被獨立重做。</p>
       </a>
+
+      <a class="contrib-card" href="https://github.com/andya1lan" target="_blank" rel="noopener">
+        <div class="contrib-head">
+          <img class="contrib-avatar" src="https://github.com/andya1lan.png?size=128" alt="andya1lan" loading="lazy" onerror="this.style.visibility='hidden'">
+          <div class="contrib-meta">
+            <div class="contrib-name">@andya1lan <span class="contrib-weight contrib-weight-B-plus">B+</span></div>
+            <div class="contrib-prs">PR #192</div>
+          </div>
+        </div>
+        <p class="contrib-summary">修正 update.sh 的 LS 二進制更新鏈路，改為復用 install-ls.sh 的多源 fallback 和 atomic rename；同時去掉 GNU grep -P 依賴，讓 macOS BSD grep 環境下的一鍵更新也能穩定執行。</p>
+      </a>
     </div>
 
     <p class="reveal" style="text-align:center;margin-top:2rem;font-size:.85rem;color:var(--muted)">
@@ -908,7 +919,7 @@ <h5>文檔</h5>
       </div>
     </div>
     <div class="footer-bottom">
-      <span>Contributors: <a href="https://github.com/aict666">@aict666</a> · <a href="https://github.com/baily-zhang">@baily-zhang</a> · <a href="https://github.com/youfak">@youfak</a> · <a href="https://github.com/motto1">@motto1</a> · <a href="https://github.com/smeinecke">@smeinecke</a> · <a href="https://github.com/abwuge">@abwuge</a> · <a href="https://github.com/dd373156">@dd373156</a> · <a href="https://github.com/colin1112a">@colin1112a</a> · <a href="#contributors" style="opacity:.7">完整名單 ↑</a></span>
+      <span>Contributors: <a href="https://github.com/aict666">@aict666</a> · <a href="https://github.com/baily-zhang">@baily-zhang</a> · <a href="https://github.com/youfak">@youfak</a> · <a href="https://github.com/motto1">@motto1</a> · <a href="https://github.com/smeinecke">@smeinecke</a> · <a href="https://github.com/abwuge">@abwuge</a> · <a href="https://github.com/dd373156">@dd373156</a> · <a href="https://github.com/colin1112a">@colin1112a</a> · <a href="https://github.com/andya1lan">@andya1lan</a> · <a href="#contributors" style="opacity:.7">完整名單 ↑</a></span>
       <span>&copy; 2026 dwgx</span>
     </div>
   </div>