[codex] Harden advanced Caddy routing and restore checks

[imsakg]

Summary

• Harden advanced Caddy route and forward-auth rendering by validating upstreams, matchers, paths, and header names before emitting Caddyfile blocks.
• Apply Pint formatting across the PHP codebase.
• Align tests with the current ProxySite workflow, remove stale Breeze-era auth/project tests, add a test APP_KEY, and remove the unused Breeze dev dependency.

Why

The lint/check pass found stale test coverage from older Breeze and Project workflows, plus unsafe advanced-route input paths that could render invalid Caddy config. This PR keeps the current ProxyPanther model and routes under test while preserving the enterprise route-hardening work already on the branch.

Validation

• composer validate --strict
• vendor/bin/pint --test
• php artisan test passed: 21 tests, 90 assertions
• PHP syntax pass over app, bootstrap, config, database, routes, and tests
• composer audit
• yarn build passed after refreshing Docker-runner Yarn dependencies; Vite still reports the existing large chunk warning

Notes

• origin push was denied for imsakg, so the branch was pushed to imsakg/proxypanther and opened back into paramientos/proxypanther:main.
• codedb.snapshot remains untracked and is intentionally excluded from this PR.

[Copilot]

Pull request overview

This PR hardens Caddyfile generation for advanced routes/forward-auth by validating and sanitizing user-provided inputs before rendering, while also updating the test suite and applying Pint formatting/cleanup across the codebase.

Changes:

• Validate/sanitize advanced-route + forward-auth matcher/upstream/header inputs before emitting Caddyfile blocks.
• Refresh feature tests to match the current ProxySite workflow and remove stale Breeze-era auth/project tests.
• Repo-wide formatting/cleanup (Pint), plus test env tweaks (APP_KEY) and dependency cleanup (remove Breeze).

Reviewed changes

Copilot reviewed 46 out of 55 changed files in this pull request and generated 5 comments.

Show a summary per file

File	Description
tests/Feature/WebhookTest.php	Updates webhook behavior test to target ProxySite failover workflow.
tests/Feature/ProxySiteTest.php	Adds dashboard + create-site feature coverage for ProxySite workflow.
tests/Feature/ProjectTest.php	Removes stale Project workflow tests.
tests/Feature/CaddyServiceTest.php	Adds coverage for advanced-route sanitization and persistence normalization.
tests/Feature/Auth/RegistrationTest.php	Removes Breeze-era registration tests.
tests/Feature/Auth/PasswordUpdateTest.php	Aligns password update test with SettingsController workflow/logout behavior.
tests/Feature/Auth/PasswordResetTest.php	Removes Breeze-era password reset tests.
tests/Feature/Auth/PasswordConfirmationTest.php	Removes Breeze-era password confirmation tests.
tests/Feature/Auth/EmailVerificationTest.php	Removes Breeze-era email verification tests.
routes/api.php	Import ordering cleanup.
resources/js/Pages/Sites/Show.jsx	Adjusts JSON editor change/blur handling.
phpunit.xml	Adds APP_KEY for test runs.
database/seeders/UserSeeder.php	Pint formatting cleanup.
database/seeders/ProxySiteSeeder.php	Removes unused import.
database/seeders/DatabaseSeeder.php	Import cleanup and comment formatting.
database/seeders/BannedIpSeeder.php	Removes unused import.
database/migrations/2026_04_13_235000_create_config_audits_table.php	Whitespace cleanup.
config/services.php	Pint alignment/formatting.
config/sanctum.php	Uses imported middleware class names (formatting/clarity).
composer.lock	Removes Breeze package, updates platform PHP constraint.
composer.json	Removes Breeze dev dependency.
bootstrap/app.php	Import cleanup and scheduling/exception handler formatting.
app/Services/WafPresetService.php	Array formatting cleanup.
app/Services/PolicyOptimizerService.php	Pint formatting cleanup.
app/Services/HealthCheckService.php	Import ordering + formatting cleanup.
app/Services/ErrorPageService.php	Fixes trailing commas in template array entries.
app/Services/CaddyService.php	Adds matcher/upstream/header sanitization + skips unrenderable matcher blocks.
app/Providers/AppServiceProvider.php	Uses AppSetting import + formatting cleanup.
app/Models/User.php	Uses relation type imports for cleaner return types.
app/Models/SecurityEvent.php	Removes unused import.
app/Models/PageRule.php	Adds trailing commas in arrays.
app/Models/Notification.php	Uses NotificationSent import; formatting cleanup.
app/Models/HealthCheckLog.php	Adds trailing commas; formatting cleanup.
app/Models/BannedIp.php	Import ordering cleanup.
app/Models/AppSetting.php	Minor formatting/spacing cleanup.
app/Http/Middleware/HandleInertiaRequests.php	Formatting cleanup.
app/Http/Controllers/WebhookController.php	Formatting cleanup around site lookup + sync calls.
app/Http/Controllers/UptimeController.php	Formatting cleanup.
app/Http/Controllers/TeamController.php	Removes unused imports; formatting cleanup.
app/Http/Controllers/SettingsController.php	Adds explicit logout on email/password change; formatting cleanup.
app/Http/Controllers/SearchController.php	Formatting cleanup.
app/Http/Controllers/ProxySiteController.php	Normalizes/validates advanced-route inputs before persistence.
app/Http/Controllers/PolicyOptimizerController.php	Formatting cleanup.
app/Http/Controllers/NotificationController.php	Removes unused import.
app/Http/Controllers/LogExplorerController.php	Formatting cleanup.
app/Http/Controllers/BannedIpController.php	Constructor formatting cleanup.
app/Http/Controllers/AuthController.php	Removes unused imports; formatting cleanup.
app/Http/Controllers/AnalyticsController.php	Removes unused imports; formatting cleanup.
app/Events/SecurityEventOccurred.php	Constructor formatting cleanup.
app/Events/NotificationSent.php	Formatting cleanup.
app/Events/BackendHealthUpdated.php	Uses ProxySite import; constructor formatting cleanup.
app/Console/Commands/SyncCaddyCommand.php	Import cleanup and formatting (but see scheduled name mismatch comment).
app/Console/Commands/ResetAdminPassword.php	Minor formatting cleanup.
app/Console/Commands/IngestLogsCommand.php	Import cleanup and formatting.
app/Console/Commands/CheckBackendHealth.php	Import order cleanup.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[imsakg]

@copilot apply changes based on the comments in this thread

[imsakg]

@paramientos bump!