feat: confine source requests to a destinations policy

[abnegate]

What

Target::setDestinations(Destinations) confines a target's requests to a Utopia\Client\Destinations policy. The Appwrite source also applies it to its SDK client, through Sources\Appwrite\Client, a subclass of the SDK 30 client that adds the policy to the HTTP client the SDK builds (createHttpClient()).

Unset, nothing changes: requests connect anywhere, as before.

Why

appwrite/appwrite#14034 checks an Appwrite migration source's endpoint before it connects. The source then resolves the host again on every request and follows redirects, so a host that rebinds, or redirects, still reaches the internal network.

utopia-php/client already solves this. Its curl adapter checks every connection and redirect hop against the address curl actually connected to, and refuses proxies when the policy restricts addresses. On 3.x every source request goes through utopia-php/client, either Target::call() or the SDK 30 client. So the library only has to pass the caller's policy through.

This replaces the resolver hook in #229 and #230. Those predate the move to utopia-php/client: they pinned CURLOPT_RESOLVE entries and re-implemented the SDK's curl call.

Tests

tests/Migration/Unit/General/TargetDestinationsTest.php runs a local HTTP server on 127.0.0.1 and covers:

• a target with no policy reaching it;
• PublicInternet refusing it;
• PublicInternet with a 127.0.0.0/8 range admitting it;
• a policy set after a request applying to the next one;
• the SDK client refusing and admitting it in the same way;
• the Appwrite source passing its policy to the SDK client.

6 of the 7 fail without the change. The default case passes either way.

Locally, Pint passes and the full unit suite passes (161 tests). PHPStan level 3 reports no errors in the changed files. The only errors it reports are 10 that MigrationCLITest already has on main.

Not verified

• The E2E suite. It needs the Docker stack, which I did not run.

🤖 Generated with Claude Code

[abnegate]

Superseded by #229, which merged the resolver and redirect controls on main. appwrite/appwrite#14034 now uses that, so nothing depends on this branch. I'm leaving the PR open for a maintainer to close.

[abnegate]

Ported to appwrite/appwrite#14508. Migration now lives in packages/migration in appwrite/appwrite (appwrite/appwrite#14503), and this repository is a read-only mirror. The port keeps the resolver hook from #229 alongside setDestinations(), because appwrite/appwrite#14034 still uses it.