Deskless install test

1. iCloud share link (baseline)

Universal link. Should open Shortcuts preview directly, no dialog. 2 taps total.

2. import-shortcut, HTTPS (the real test)

Simulates per-user signed file hosted on your own server. Expect "Open in Shortcuts?" dialog, then same preview.

2b. import-shortcut pointing at iCloud URL (whitelist test)

Same scheme, but url= is the icloud.com link. If this works while 2 fails, Shortcuts only accepts iCloud-hosted URLs in import-shortcut.

3. import-shortcut, plain HTTP (expected to fail)

Same but http:// LAN URL — checks whether Shortcuts blocks non-HTTPS fetches. Works only if your iPhone is on the same Wi-Fi.

4. Direct file download (bad flow demo)

Downloads the .shortcut file in Safari — see how many extra steps this costs.

5. Token handoff (activation demo)

Runs the installed shortcut with "demo-token-123" as input — the Route B activation step. Warning: actually runs it (records audio, posts to your API).