feat(install-source): accept archive URLs from any public host

[alcpereira]

Summary

install-from-source URL sources from any public host can now be archives (or a bare .ipa on iOS). Previously iOS refused every URL outside GitHub Actions/EAS, and both platforms refused to extract archives from other hosts. Use case: a hub hands the device host a short-lived signed blob URL, so no GitHub token leaves the hub.

agent-device install-from-source "https://<signed-blob-host>/build.zip?sig=…" --platform ios

Threat model: the allowlist checked only the first URL and admitted any repo's artifact. Host-side safety comes from per-hop SSRF approval, cross-origin header stripping, byte caps, and extractArchiveSafely, which apply to every source. None of this makes app contents safe: a simulator .app is effectively host code, which any repo's artifact, public EAS URLs, and uploads already reached. Daemon auth is the boundary; security-trust.md now says so.

isTrustedInstallSourceUrl stays exported as @deprecated (public SDK since v0.11.16, used by a downstream bridge per #387), pending a maintainer decision on removal.

Lands after #3111 (host-kit directory-mode fix). 9 files.

Validation

Tested commit 1cf8109d8.

• pnpm check:affected --run: all checks passed (vitest-related 364 files / 2381 tests).
• The new iOS test fails on the old gate ("only supported for trusted artifact services").
• Live run on an iOS 27.0 simulator: install-from-source https://github.com/callstack/agent-device/releases/download/v0.21.18/agent-device-ios-runner-0.21.18.app.tar.gz --platform ios (a releases/download URL, outside the allowlist) installed com.callstack.agentdevice.runner.uitests.xctrunner. The simulator's prior runner was restored afterwards.
• Android archive URL: unit coverage only, no live run.

[cubic-dev-ai]

All reported issues were addressed across 9 files

<sub>Reply with feedback, questions, or to request a fix.

Re-trigger cubic</sub>

[thymikee]

The code looks fine at 61d15d0, but I can't call it ready yet because evidence is still pending: Smoke Tests is still running, and #3111 is not in this head. There are no conflicts.

I did not run the tests locally. I did not see the live iOS run output, only the PR body's description. Its URL is outside the old allowlist, so that run would have reached the new route. Android had no live run. The Android change only removes a host-side gate before materialization, and the device install of the extracted .apk is the same route that trusted-archive installs already used. Unit coverage exercises the real approval and extraction route. I did not review #3111 itself. I only confirmed it is not included in this head.

The smoke lanes install fixture apps through prepareAndroidInstallArtifact and prepareIosInstallArtifact, which this diff changes. Path sources behave the same as before, because allowArchiveExtraction was already true for every non-url source. A smoke failure would touch the changed functions but not the changed branch.

Not blocking, and you can take or leave these: the bullet at https://github.com/callstack/agent-device/blob/61d15d0/website/docs/docs/commands.md#L382 still says direct Android URL sources may be .apk or .aab, so it could also list iOS .ipa. Also, https://github.com/callstack/agent-device/blob/61d15d0/packages/provision-kit/src/install-source-archive.ts#L35 does not have #3111 yet. Without it, an archive that declares a 0o300 directory mode leaks its temp tree on cleanup (EACCES), and after this PR any public URL can serve such an archive.

Is there a smaller design than this change across the Android and Apple backends and provision-kit? I looked and found none. It already deletes the allowArchiveExtraction parameter, the assertArchiveExtractionAllowed guard and the iOS URL gate (net -27 production lines). The only leftover is the deprecated isTrustedInstallSourceUrl export, which now has no production caller. Removing it needs a maintainer decision to break the public ./install-source export, which has shipped since v0.11.16 and has a downstream user per #387.

Please merge #3111 first, or rebase onto it, and then wait for Smoke Tests to finish.

[thymikee]

Update for 61d15d0: Smoke Tests finished with one failure, and it is likely unrelated. The failing test is RunnerTests.testSynthesizedReplacementPacesAnAppOwnedFieldAtItsAcknowledgeWindow, an iOS runner typing test (https://github.com/callstack/agent-device/actions/runs/36999435603/job/110813837773). This diff does not touch the runner or text input.

The code verdict is the same. The next blocker is still #3111: it now has a change request for the directory mode rule, and this PR needs it merged or included before it is ready.

[thymikee]

Update for 262181f: this head is a clean rebase of 61d15d0 with the same patch, and it now includes #3111, which was the remaining blocker. The code verdict is the same, and there are no conflicts, so this is ready for human review.

Smoke Tests failed in the iOS simulator step that waits for the deep-link destination (https://github.com/callstack/agent-device/actions/runs/37022237282/job/110887924775). This is likely unrelated: the diff changes how archive URLs are accepted for install, and that step does not install from a URL.