From c93e216e668930e64821642f6a517b815a1870f5 Mon Sep 17 00:00:00 2001
From: mattd-tg <mattd@twingate.com>
Date: Sat, 1 Nov 2025 20:13:46 -0400
Subject: [PATCH 1/2] test commit

---
 .claude/settings.local.json | 35 +++++++++++++++++++++++++++++++++++
 file1                       |  0
 2 files changed, 35 insertions(+)
 create mode 100644 .claude/settings.local.json
 create mode 100644 file1

diff --git a/.claude/settings.local.json b/.claude/settings.local.json
new file mode 100644
index 0000000..78db08e
--- /dev/null
+++ b/.claude/settings.local.json
@@ -0,0 +1,35 @@
+{
+  "permissions": {
+    "allow": [
+      "WebFetch(domain:www.twingate.com)",
+      "WebSearch",
+      "WebFetch(domain:caddyserver.com)",
+      "Bash(go build:*)",
+      "Bash(xcaddy build:*)",
+      "Bash(timeout:*)",
+      "Bash(./caddy run:*)",
+      "WebFetch(domain:github.com)",
+      "WebFetch(domain:raw.githubusercontent.com)",
+      "mcp__ai-counsel__deliberate",
+      "Bash(go doc -all github.com/caddyserver/caddy/v2/modules/caddyevents)",
+      "WebFetch(domain:pkg.go.dev)",
+      "Bash(go doc github.com/caddyserver/caddy/v2/modules/caddyevents.Handler)",
+      "Bash(go test -v -run \"TestGetOutboundIP|TestNormalizePath|TestCanonicalKey|TestResourceAlias\")",
+      "Bash(go test -v)",
+      "Bash(go test -v -run TestDeleteStaleResources)",
+      "Bash(go test -v ./...)",
+      "WebFetch(domain:mise.jdx.dev)"
+    ],
+    "deny": [],
+    "ask": []
+  },
+  "mcpServers": {
+    "ai-counsel": {
+      "type": "stdio",
+      "command": "/Users/demi-twingate/repos/ai-counsel/.venv/bin/python",
+      "args": [
+        "/Users/demi-twingate/repos/ai-counsel/server.py"
+      ]
+    }
+  }
+}
diff --git a/file1 b/file1
new file mode 100644
index 0000000..e69de29

From 1040650e4e8511443e663f65a9889c7d3dc5b4ad Mon Sep 17 00:00:00 2001
From: mattd-tg <mattd@twingate.com>
Date: Sat, 1 Nov 2025 20:17:50 -0400
Subject: [PATCH 2/2] ci validation

---
 .github/workflows/pr-validation.yml | 91 ++++++++++++++++++++++++++++-
 .github/workflows/release.yml       |  7 +++
 2 files changed, 95 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/pr-validation.yml b/.github/workflows/pr-validation.yml
index 24d350b..789d6ee 100644
--- a/.github/workflows/pr-validation.yml
+++ b/.github/workflows/pr-validation.yml
@@ -10,8 +10,8 @@ permissions:
   pull-requests: read
 
 jobs:
-  validate:
-    name: CI Validation
+  setup:
+    name: Setup Dependencies
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
@@ -21,18 +21,103 @@ jobs:
         uses: jdx/mise-action@v3
         with:
           install: true
-          cache: false
+          cache: true
           experimental: true
 
+      - name: Setup Go cache
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/go/pkg/mod
+            ~/.cache/go-build
+          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-
+
       - name: Download Go dependencies
         run: go mod download
 
+  format:
+    name: Format Check
+    runs-on: ubuntu-latest
+    needs: setup
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install mise
+        uses: jdx/mise-action@v3
+        with:
+          install: true
+          cache: true
+          experimental: true
+
+      - name: Restore Go cache
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/go/pkg/mod
+            ~/.cache/go-build
+          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-
+
       - name: Run format check
         run: mise run format
 
+  lint:
+    name: Lint
+    runs-on: ubuntu-latest
+    needs: setup
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install mise
+        uses: jdx/mise-action@v3
+        with:
+          install: true
+          cache: true
+          experimental: true
+
+      - name: Restore Go cache
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/go/pkg/mod
+            ~/.cache/go-build
+          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-
+
       - name: Run lint
         run: mise run lint
 
+  test:
+    name: Tests
+    runs-on: ubuntu-latest
+    needs: setup
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Install mise
+        uses: jdx/mise-action@v3
+        with:
+          install: true
+          cache: true
+          experimental: true
+
+      - name: Restore Go cache
+        uses: actions/cache@v4
+        with:
+          path: |
+            ~/go/pkg/mod
+            ~/.cache/go-build
+          key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
+          restore-keys: |
+            ${{ runner.os }}-go-
+
       - name: Run tests
         run: mise run test
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2638731..a3be531 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -55,6 +55,13 @@ jobs:
           draft: false
           prerelease: false
 
+      - name: Update latest tag
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git tag -f latest
+          git push -f origin latest
+
       - name: Upload Caddy Binary (Linux AMD64)
         uses: actions/upload-release-asset@v1
         env: