From 68bf953d88045a7c28dc908da4c89a4b866c072a Mon Sep 17 00:00:00 2001
From: Abdelkarim Mateos Sanchez <abdelkarim.mateos@castris.com>
Date: Fri, 17 Jul 2026 16:39:04 +0200
Subject: [PATCH] =?UTF-8?q?refactor(quality):=20Rector=20wave=201=20?=
 =?UTF-8?q?=E2=80=94=20declare(strict=5Ftypes=3D1)=20in=20app/=20(AID-529)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Enable DeclareStrictTypesRector and apply it via composer refactor: 73
files in app/ gain declare(strict_types=1), bringing app/ to 182/182.

This is the only semantic wave: strict_types changes runtime type
coercion, so a file that today accepts "5" where it declares int starts
throwing TypeError. Every other wave only changed shape.

Scope decision — Pint stays out of it. The ticket floated adding
declare_strict_types to pint.json to own the convention repo-wide, on
the premise that Rector alone would leave new files uncovered. That
premise was wrong: with the rule in the gate, a new app/ file without
the declare fails refactor:dry (proven by violation probe below), so the
gate already owns app/. Pint would only extend reach OUTSIDE app/ —
measured at 44 files in tests/, 2 in routes/, 6 in bootstrap/ — which is
a different mechanism with a different risk profile and belongs to its
own wave, not smuggled into a semantic PR.

Wave checklist (per rector.php header):
- clean tree at start; applied via composer refactor (rector + pint)
- diff shape-verified pure: 146 added lines = 73 declares + 73 blank
  lines, zero others, zero deletions (insert-only)
- rule proven to bite, attributably: a new file without the declare ->
  exit 2 naming app/ProbeStrict.php:1
- idempotence proven: second composer refactor pass is a byte-level
  no-op (ordered checksum identical, rector reports zero changes)
- gates: check-full green, 1442 passed / 16 skipped, coverage 89.8%,
  PHPStan clean, refactor:dry exit 0

Semantic risk reviewed by hand, since a green suite does not prove
coercion is safe on uncovered paths. The 73 files break down as 32
Filament, 10 artisan commands, 8 models, 7 exceptions, 3 services, 2
each of controllers/middleware/Livewire/traits. Artisan commands are the
classic hazard — argument() and option() always return strings — so
every raw-input site was traced to its destination: Host::where('id',
$hostId) and Host::find($hostId) pass strings to Eloquent (accepted);
UnblockIpCommand already casts with (int) $hostId before the typed call;
the remaining option() uses are boolean flags and request()->ip() is
string. No string reaches a typed int/float parameter uncast.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 app/Console/Commands/AddHostKeyCommand.php       |  2 ++
 .../Commands/Develop/BackupSqliteCommand.php     |  2 ++
 .../Develop/TestHostConnectionCommand.php        |  2 ++
 .../Develop/TestSpatieMultiplexerCommand.php     |  2 ++
 .../Commands/Develop/UpdateStructureSql.php      |  2 ++
 .../Commands/Develop/UpdateStructureSqlite.php   |  2 ++
 app/Console/Commands/QueueMonitorCommand.php     |  2 ++
 app/Console/Commands/TestEmailJobCommand.php     |  2 ++
 app/Console/Commands/UnblockIpCommand.php        |  2 ++
 app/Console/Commands/UserAuthorizeCommand.php    |  2 ++
 app/Enums/AuditAction.php                        |  2 ++
 app/Exceptions/AuthenticationException.php       |  2 ++
 app/Exceptions/CommandExecutionException.php     |  2 ++
 app/Exceptions/ConnectionFailedException.php     |  2 ++
 app/Exceptions/CsfServiceException.php           |  2 ++
 app/Exceptions/FirewallException.php             |  2 ++
 app/Exceptions/InvalidIpException.php            |  2 ++
 app/Exceptions/InvalidKeyException.php           |  2 ++
 app/Filament/Resources/AccountResource.php       |  2 ++
 .../AccountResource/Pages/EditAccount.php        |  2 ++
 .../AccountResource/Pages/ListAccounts.php       |  2 ++
 .../AccountResource/Pages/ViewAccount.php        |  2 ++
 .../RelationManagers/DomainsRelationManager.php  |  2 ++
 app/Filament/Resources/HostResource.php          |  2 ++
 .../Resources/HostResource/Pages/CreateHost.php  |  2 ++
 .../Resources/HostResource/Pages/EditHost.php    |  2 ++
 .../Resources/HostResource/Pages/ListHosts.php   |  2 ++
 .../Resources/HostResource/Pages/ViewHost.php    |  2 ++
 .../RelationManagers/AccountsRelationManager.php |  2 ++
 .../RelationManagers/DomainsRelationManager.php  |  2 ++
 .../RelationManagers/HostingsRelationManager.php |  2 ++
 app/Filament/Resources/HostingResource.php       |  2 ++
 .../HostingResource/Pages/CreateHosting.php      |  2 ++
 .../HostingResource/Pages/EditHosting.php        |  2 ++
 .../HostingResource/Pages/ListHostings.php       |  2 ++
 .../HostingResource/Pages/ViewHosting.php        |  2 ++
 .../Resources/PatternDetectionResource.php       |  2 ++
 .../Pages/ListPatternDetections.php              |  2 ++
 .../Pages/ViewPatternDetection.php               |  2 ++
 app/Filament/Resources/ReportResource.php        |  2 ++
 .../ReportResource/Pages/ManageReports.php       |  2 ++
 app/Filament/Resources/UserResource.php          |  2 ++
 .../Resources/UserResource/Pages/CreateUser.php  |  2 ++
 .../Resources/UserResource/Pages/EditUser.php    |  2 ++
 .../Resources/UserResource/Pages/ListUsers.php   |  2 ++
 .../Resources/UserResource/Pages/ViewUser.php    |  2 ++
 .../DelegatedUsersRelationManager.php            |  2 ++
 .../RelationManagers/HostingsRelationManager.php |  2 ++
 .../RelationManagers/HostsRelationManager.php    |  2 ++
 .../Widgets/PatternDetectionStatsWidget.php      |  2 ++
 app/Http/Controllers/Controller.php              |  2 ++
 app/Http/Controllers/ReportController.php        |  2 ++
 app/Http/Middleware/CheckSessionTimeout.php      |  2 ++
 app/Http/Middleware/VerifyIsAdminMiddleware.php  |  2 ++
 app/Livewire/Actions/Logout.php                  |  2 ++
 app/Livewire/OtpLogin.php                        |  2 ++
 app/Mail/LogNotificationMail.php                 |  2 ++
 app/Models/Account.php                           |  2 ++
 app/Models/ActionAudit.php                       |  2 ++
 app/Models/Domain.php                            |  2 ++
 app/Models/Host.php                              |  2 ++
 app/Models/Hosting.php                           |  2 ++
 app/Models/Report.php                            |  2 ++
 app/Models/User.php                              |  2 ++
 app/Models/UserHostingPermission.php             |  2 ++
 .../Admin/ErrorParsingNotification.php           |  2 ++
 app/Providers/AppServiceProvider.php             |  2 ++
 app/Providers/Filament/AdminPanelProvider.php    |  2 ++
 app/Services/AuditService.php                    |  2 ++
 .../Firewall/FirewallAnalyzerFactory.php         |  2 ++
 .../Firewall/FirewallAnalyzerInterface.php       |  2 ++
 app/Traits/AuditLoginTrait.php                   |  2 ++
 app/Traits/CommandOutputParserTrait.php          |  2 ++
 rector.php                                       | 16 ++++++++++++----
 74 files changed, 158 insertions(+), 4 deletions(-)

diff --git a/app/Console/Commands/AddHostKeyCommand.php b/app/Console/Commands/AddHostKeyCommand.php
index 939cd3d..72c1d5e 100644
--- a/app/Console/Commands/AddHostKeyCommand.php
+++ b/app/Console/Commands/AddHostKeyCommand.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Console\Commands;
 
 use App\Models\Host;
diff --git a/app/Console/Commands/Develop/BackupSqliteCommand.php b/app/Console/Commands/Develop/BackupSqliteCommand.php
index bf1cea2..7105c07 100644
--- a/app/Console/Commands/Develop/BackupSqliteCommand.php
+++ b/app/Console/Commands/Develop/BackupSqliteCommand.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Console\Commands\Develop;
 
 use Exception;
diff --git a/app/Console/Commands/Develop/TestHostConnectionCommand.php b/app/Console/Commands/Develop/TestHostConnectionCommand.php
index 319ac85..48da116 100644
--- a/app/Console/Commands/Develop/TestHostConnectionCommand.php
+++ b/app/Console/Commands/Develop/TestHostConnectionCommand.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Console\Commands\Develop;
 
 use App\Models\Host;
diff --git a/app/Console/Commands/Develop/TestSpatieMultiplexerCommand.php b/app/Console/Commands/Develop/TestSpatieMultiplexerCommand.php
index 57070de..90b39d9 100644
--- a/app/Console/Commands/Develop/TestSpatieMultiplexerCommand.php
+++ b/app/Console/Commands/Develop/TestSpatieMultiplexerCommand.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Console\Commands\Develop;
 
 use App\Models\Host;
diff --git a/app/Console/Commands/Develop/UpdateStructureSql.php b/app/Console/Commands/Develop/UpdateStructureSql.php
index 537e662..ae4fa4b 100644
--- a/app/Console/Commands/Develop/UpdateStructureSql.php
+++ b/app/Console/Commands/Develop/UpdateStructureSql.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 /** @file app/Console/Commands/Develop/UpdateStructureSql.php */
 
 namespace App\Console\Commands\Develop;
diff --git a/app/Console/Commands/Develop/UpdateStructureSqlite.php b/app/Console/Commands/Develop/UpdateStructureSqlite.php
index 54f8376..d3c25b7 100644
--- a/app/Console/Commands/Develop/UpdateStructureSqlite.php
+++ b/app/Console/Commands/Develop/UpdateStructureSqlite.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 /** @file app/Console/Commands/Develop/UpdateStructureSqlite.php */
 
 namespace App\Console\Commands\Develop;
diff --git a/app/Console/Commands/QueueMonitorCommand.php b/app/Console/Commands/QueueMonitorCommand.php
index 989a4a6..bfb4d3d 100644
--- a/app/Console/Commands/QueueMonitorCommand.php
+++ b/app/Console/Commands/QueueMonitorCommand.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Console\Commands;
 
 use Exception;
diff --git a/app/Console/Commands/TestEmailJobCommand.php b/app/Console/Commands/TestEmailJobCommand.php
index d9d883a..3895f0b 100644
--- a/app/Console/Commands/TestEmailJobCommand.php
+++ b/app/Console/Commands/TestEmailJobCommand.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Console\Commands;
 
 use App\Models\{Host, Report, User};
diff --git a/app/Console/Commands/UnblockIpCommand.php b/app/Console/Commands/UnblockIpCommand.php
index 7ec68b8..0c3b5cf 100644
--- a/app/Console/Commands/UnblockIpCommand.php
+++ b/app/Console/Commands/UnblockIpCommand.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Console\Commands;
 
 use App\Actions\UnblockIpAction;
diff --git a/app/Console/Commands/UserAuthorizeCommand.php b/app/Console/Commands/UserAuthorizeCommand.php
index 86c764a..8027e48 100644
--- a/app/Console/Commands/UserAuthorizeCommand.php
+++ b/app/Console/Commands/UserAuthorizeCommand.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Console\Commands;
 
 use App\Models\{User, UserHostingPermission};
diff --git a/app/Enums/AuditAction.php b/app/Enums/AuditAction.php
index 340fe43..70d6e51 100644
--- a/app/Enums/AuditAction.php
+++ b/app/Enums/AuditAction.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Enums;
 
 enum AuditAction: int
diff --git a/app/Exceptions/AuthenticationException.php b/app/Exceptions/AuthenticationException.php
index ec97217..8bef4d9 100644
--- a/app/Exceptions/AuthenticationException.php
+++ b/app/Exceptions/AuthenticationException.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Exceptions;
 
 use Exception;
diff --git a/app/Exceptions/CommandExecutionException.php b/app/Exceptions/CommandExecutionException.php
index 610456b..e9610f7 100644
--- a/app/Exceptions/CommandExecutionException.php
+++ b/app/Exceptions/CommandExecutionException.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Exceptions;
 
 use Exception;
diff --git a/app/Exceptions/ConnectionFailedException.php b/app/Exceptions/ConnectionFailedException.php
index 2b54ca2..eb09106 100644
--- a/app/Exceptions/ConnectionFailedException.php
+++ b/app/Exceptions/ConnectionFailedException.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Exceptions;
 
 use App\Notifications\Admin\ErrorParsingNotification;
diff --git a/app/Exceptions/CsfServiceException.php b/app/Exceptions/CsfServiceException.php
index d802458..65c790d 100644
--- a/app/Exceptions/CsfServiceException.php
+++ b/app/Exceptions/CsfServiceException.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Exceptions;
 
 use App\Notifications\Admin\ErrorParsingNotification;
diff --git a/app/Exceptions/FirewallException.php b/app/Exceptions/FirewallException.php
index 42ffffb..405f280 100644
--- a/app/Exceptions/FirewallException.php
+++ b/app/Exceptions/FirewallException.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Exceptions;
 
 use Exception;
diff --git a/app/Exceptions/InvalidIpException.php b/app/Exceptions/InvalidIpException.php
index fbbab87..fb76bc1 100644
--- a/app/Exceptions/InvalidIpException.php
+++ b/app/Exceptions/InvalidIpException.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Exceptions;
 
 use Exception;
diff --git a/app/Exceptions/InvalidKeyException.php b/app/Exceptions/InvalidKeyException.php
index 4a584a0..7dcab06 100644
--- a/app/Exceptions/InvalidKeyException.php
+++ b/app/Exceptions/InvalidKeyException.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Exceptions;
 
 use Exception;
diff --git a/app/Filament/Resources/AccountResource.php b/app/Filament/Resources/AccountResource.php
index 350ab94..02a140a 100644
--- a/app/Filament/Resources/AccountResource.php
+++ b/app/Filament/Resources/AccountResource.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources;
 
 use App\Filament\Resources\AccountResource\{Pages, RelationManagers\DomainsRelationManager};
diff --git a/app/Filament/Resources/AccountResource/Pages/EditAccount.php b/app/Filament/Resources/AccountResource/Pages/EditAccount.php
index dbac4df..d3cd8c3 100644
--- a/app/Filament/Resources/AccountResource/Pages/EditAccount.php
+++ b/app/Filament/Resources/AccountResource/Pages/EditAccount.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\AccountResource\Pages;
 
 use App\Filament\Resources\AccountResource;
diff --git a/app/Filament/Resources/AccountResource/Pages/ListAccounts.php b/app/Filament/Resources/AccountResource/Pages/ListAccounts.php
index 6ea44b0..9e996a3 100644
--- a/app/Filament/Resources/AccountResource/Pages/ListAccounts.php
+++ b/app/Filament/Resources/AccountResource/Pages/ListAccounts.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\AccountResource\Pages;
 
 use App\Filament\Resources\AccountResource;
diff --git a/app/Filament/Resources/AccountResource/Pages/ViewAccount.php b/app/Filament/Resources/AccountResource/Pages/ViewAccount.php
index 7945d4b..36574d2 100644
--- a/app/Filament/Resources/AccountResource/Pages/ViewAccount.php
+++ b/app/Filament/Resources/AccountResource/Pages/ViewAccount.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\AccountResource\Pages;
 
 use App\Filament\Resources\AccountResource;
diff --git a/app/Filament/Resources/AccountResource/RelationManagers/DomainsRelationManager.php b/app/Filament/Resources/AccountResource/RelationManagers/DomainsRelationManager.php
index 2577ac7..362682c 100644
--- a/app/Filament/Resources/AccountResource/RelationManagers/DomainsRelationManager.php
+++ b/app/Filament/Resources/AccountResource/RelationManagers/DomainsRelationManager.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\AccountResource\RelationManagers;
 
 use Filament\{Actions, Forms, Tables};
diff --git a/app/Filament/Resources/HostResource.php b/app/Filament/Resources/HostResource.php
index a91dc9f..c8e8663 100644
--- a/app/Filament/Resources/HostResource.php
+++ b/app/Filament/Resources/HostResource.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources;
 
 use App\Enums\PanelType;
diff --git a/app/Filament/Resources/HostResource/Pages/CreateHost.php b/app/Filament/Resources/HostResource/Pages/CreateHost.php
index b306634..4452ee5 100644
--- a/app/Filament/Resources/HostResource/Pages/CreateHost.php
+++ b/app/Filament/Resources/HostResource/Pages/CreateHost.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\HostResource\Pages;
 
 use App\Filament\Resources\HostResource;
diff --git a/app/Filament/Resources/HostResource/Pages/EditHost.php b/app/Filament/Resources/HostResource/Pages/EditHost.php
index 69d988f..adf3bc6 100644
--- a/app/Filament/Resources/HostResource/Pages/EditHost.php
+++ b/app/Filament/Resources/HostResource/Pages/EditHost.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\HostResource\Pages;
 
 use App\Filament\Actions\{GenerateSshKeysAction, TestHostConnectionAction};
diff --git a/app/Filament/Resources/HostResource/Pages/ListHosts.php b/app/Filament/Resources/HostResource/Pages/ListHosts.php
index 026a09a..752efce 100644
--- a/app/Filament/Resources/HostResource/Pages/ListHosts.php
+++ b/app/Filament/Resources/HostResource/Pages/ListHosts.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\HostResource\Pages;
 
 use App\Filament\Resources\HostResource;
diff --git a/app/Filament/Resources/HostResource/Pages/ViewHost.php b/app/Filament/Resources/HostResource/Pages/ViewHost.php
index 2e0d755..3de263b 100644
--- a/app/Filament/Resources/HostResource/Pages/ViewHost.php
+++ b/app/Filament/Resources/HostResource/Pages/ViewHost.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\HostResource\Pages;
 
 use App\Filament\Actions\{GenerateSshKeysAction, TestHostConnectionAction};
diff --git a/app/Filament/Resources/HostResource/RelationManagers/AccountsRelationManager.php b/app/Filament/Resources/HostResource/RelationManagers/AccountsRelationManager.php
index b4ecaf5..995807e 100644
--- a/app/Filament/Resources/HostResource/RelationManagers/AccountsRelationManager.php
+++ b/app/Filament/Resources/HostResource/RelationManagers/AccountsRelationManager.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\HostResource\RelationManagers;
 
 use Filament\{Actions, Forms, Tables};
diff --git a/app/Filament/Resources/HostResource/RelationManagers/DomainsRelationManager.php b/app/Filament/Resources/HostResource/RelationManagers/DomainsRelationManager.php
index b7ca6eb..32bd91e 100644
--- a/app/Filament/Resources/HostResource/RelationManagers/DomainsRelationManager.php
+++ b/app/Filament/Resources/HostResource/RelationManagers/DomainsRelationManager.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\HostResource\RelationManagers;
 
 use Filament\{Actions, Forms, Tables};
diff --git a/app/Filament/Resources/HostResource/RelationManagers/HostingsRelationManager.php b/app/Filament/Resources/HostResource/RelationManagers/HostingsRelationManager.php
index f51788e..b287101 100644
--- a/app/Filament/Resources/HostResource/RelationManagers/HostingsRelationManager.php
+++ b/app/Filament/Resources/HostResource/RelationManagers/HostingsRelationManager.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\HostResource\RelationManagers;
 
 use Filament\{Actions, Forms, Tables};
diff --git a/app/Filament/Resources/HostingResource.php b/app/Filament/Resources/HostingResource.php
index ce45809..6ad358c 100644
--- a/app/Filament/Resources/HostingResource.php
+++ b/app/Filament/Resources/HostingResource.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources;
 
 use App\Filament\Resources\HostingResource\Pages\{CreateHosting, EditHosting, ListHostings, ViewHosting};
diff --git a/app/Filament/Resources/HostingResource/Pages/CreateHosting.php b/app/Filament/Resources/HostingResource/Pages/CreateHosting.php
index 8484da2..86dc598 100644
--- a/app/Filament/Resources/HostingResource/Pages/CreateHosting.php
+++ b/app/Filament/Resources/HostingResource/Pages/CreateHosting.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\HostingResource\Pages;
 
 use App\Filament\Resources\HostingResource;
diff --git a/app/Filament/Resources/HostingResource/Pages/EditHosting.php b/app/Filament/Resources/HostingResource/Pages/EditHosting.php
index feb6f2c..18fa0be 100644
--- a/app/Filament/Resources/HostingResource/Pages/EditHosting.php
+++ b/app/Filament/Resources/HostingResource/Pages/EditHosting.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\HostingResource\Pages;
 
 use App\Filament\Resources\HostingResource;
diff --git a/app/Filament/Resources/HostingResource/Pages/ListHostings.php b/app/Filament/Resources/HostingResource/Pages/ListHostings.php
index ce9147e..15a4e52 100644
--- a/app/Filament/Resources/HostingResource/Pages/ListHostings.php
+++ b/app/Filament/Resources/HostingResource/Pages/ListHostings.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\HostingResource\Pages;
 
 use App\Filament\Resources\HostingResource;
diff --git a/app/Filament/Resources/HostingResource/Pages/ViewHosting.php b/app/Filament/Resources/HostingResource/Pages/ViewHosting.php
index 531a95d..226fd98 100644
--- a/app/Filament/Resources/HostingResource/Pages/ViewHosting.php
+++ b/app/Filament/Resources/HostingResource/Pages/ViewHosting.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\HostingResource\Pages;
 
 use App\Filament\Resources\HostingResource;
diff --git a/app/Filament/Resources/PatternDetectionResource.php b/app/Filament/Resources/PatternDetectionResource.php
index 71e3bce..afba409 100644
--- a/app/Filament/Resources/PatternDetectionResource.php
+++ b/app/Filament/Resources/PatternDetectionResource.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources;
 
 use App\Filament\Resources\PatternDetectionResource\Pages;
diff --git a/app/Filament/Resources/PatternDetectionResource/Pages/ListPatternDetections.php b/app/Filament/Resources/PatternDetectionResource/Pages/ListPatternDetections.php
index f132cb7..fc3cfb7 100644
--- a/app/Filament/Resources/PatternDetectionResource/Pages/ListPatternDetections.php
+++ b/app/Filament/Resources/PatternDetectionResource/Pages/ListPatternDetections.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\PatternDetectionResource\Pages;
 
 use App\Filament\Resources\PatternDetectionResource;
diff --git a/app/Filament/Resources/PatternDetectionResource/Pages/ViewPatternDetection.php b/app/Filament/Resources/PatternDetectionResource/Pages/ViewPatternDetection.php
index 03efc05..e0ddf17 100644
--- a/app/Filament/Resources/PatternDetectionResource/Pages/ViewPatternDetection.php
+++ b/app/Filament/Resources/PatternDetectionResource/Pages/ViewPatternDetection.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\PatternDetectionResource\Pages;
 
 use App\Filament\Resources\PatternDetectionResource;
diff --git a/app/Filament/Resources/ReportResource.php b/app/Filament/Resources/ReportResource.php
index 410b617..d055012 100644
--- a/app/Filament/Resources/ReportResource.php
+++ b/app/Filament/Resources/ReportResource.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources;
 
 use App\Filament\Resources\ReportResource\Pages\ManageReports;
diff --git a/app/Filament/Resources/ReportResource/Pages/ManageReports.php b/app/Filament/Resources/ReportResource/Pages/ManageReports.php
index 4198294..923b654 100644
--- a/app/Filament/Resources/ReportResource/Pages/ManageReports.php
+++ b/app/Filament/Resources/ReportResource/Pages/ManageReports.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\ReportResource\Pages;
 
 use App\Filament\Resources\ReportResource;
diff --git a/app/Filament/Resources/UserResource.php b/app/Filament/Resources/UserResource.php
index 13e4d2f..de6347e 100644
--- a/app/Filament/Resources/UserResource.php
+++ b/app/Filament/Resources/UserResource.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources;
 
 use App\Filament\Resources\UserResource\{
diff --git a/app/Filament/Resources/UserResource/Pages/CreateUser.php b/app/Filament/Resources/UserResource/Pages/CreateUser.php
index 78a3894..72b81bb 100644
--- a/app/Filament/Resources/UserResource/Pages/CreateUser.php
+++ b/app/Filament/Resources/UserResource/Pages/CreateUser.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\UserResource\Pages;
 
 use App\Filament\Resources\UserResource;
diff --git a/app/Filament/Resources/UserResource/Pages/EditUser.php b/app/Filament/Resources/UserResource/Pages/EditUser.php
index 0c907e0..c2d64a5 100644
--- a/app/Filament/Resources/UserResource/Pages/EditUser.php
+++ b/app/Filament/Resources/UserResource/Pages/EditUser.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\UserResource\Pages;
 
 use App\Filament\Resources\UserResource;
diff --git a/app/Filament/Resources/UserResource/Pages/ListUsers.php b/app/Filament/Resources/UserResource/Pages/ListUsers.php
index 0a8d40a..83281a2 100644
--- a/app/Filament/Resources/UserResource/Pages/ListUsers.php
+++ b/app/Filament/Resources/UserResource/Pages/ListUsers.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\UserResource\Pages;
 
 use App\Filament\Resources\UserResource;
diff --git a/app/Filament/Resources/UserResource/Pages/ViewUser.php b/app/Filament/Resources/UserResource/Pages/ViewUser.php
index 98ee406..64282e0 100644
--- a/app/Filament/Resources/UserResource/Pages/ViewUser.php
+++ b/app/Filament/Resources/UserResource/Pages/ViewUser.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\UserResource\Pages;
 
 use App\Filament\Resources\UserResource;
diff --git a/app/Filament/Resources/UserResource/RelationManagers/DelegatedUsersRelationManager.php b/app/Filament/Resources/UserResource/RelationManagers/DelegatedUsersRelationManager.php
index 309f371..ace76f3 100644
--- a/app/Filament/Resources/UserResource/RelationManagers/DelegatedUsersRelationManager.php
+++ b/app/Filament/Resources/UserResource/RelationManagers/DelegatedUsersRelationManager.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\UserResource\RelationManagers;
 
 use Filament\Actions\{BulkActionGroup, CreateAction, DeleteAction, DeleteBulkAction, EditAction};
diff --git a/app/Filament/Resources/UserResource/RelationManagers/HostingsRelationManager.php b/app/Filament/Resources/UserResource/RelationManagers/HostingsRelationManager.php
index eb396ba..af795c3 100644
--- a/app/Filament/Resources/UserResource/RelationManagers/HostingsRelationManager.php
+++ b/app/Filament/Resources/UserResource/RelationManagers/HostingsRelationManager.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\UserResource\RelationManagers;
 
 use App\Models\Host;
diff --git a/app/Filament/Resources/UserResource/RelationManagers/HostsRelationManager.php b/app/Filament/Resources/UserResource/RelationManagers/HostsRelationManager.php
index fbac002..580f2f7 100644
--- a/app/Filament/Resources/UserResource/RelationManagers/HostsRelationManager.php
+++ b/app/Filament/Resources/UserResource/RelationManagers/HostsRelationManager.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Resources\UserResource\RelationManagers;
 
 use App\Enums\PanelType;
diff --git a/app/Filament/Widgets/PatternDetectionStatsWidget.php b/app/Filament/Widgets/PatternDetectionStatsWidget.php
index ed16e12..6cc0e51 100644
--- a/app/Filament/Widgets/PatternDetectionStatsWidget.php
+++ b/app/Filament/Widgets/PatternDetectionStatsWidget.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Filament\Widgets;
 
 use App\Models\PatternDetection;
diff --git a/app/Http/Controllers/Controller.php b/app/Http/Controllers/Controller.php
index 8677cd5..e2af3d2 100644
--- a/app/Http/Controllers/Controller.php
+++ b/app/Http/Controllers/Controller.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Http\Controllers;
 
 abstract class Controller
diff --git a/app/Http/Controllers/ReportController.php b/app/Http/Controllers/ReportController.php
index 81c8253..f421860 100644
--- a/app/Http/Controllers/ReportController.php
+++ b/app/Http/Controllers/ReportController.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Http\Controllers;
 
 use App\Models\Report;
diff --git a/app/Http/Middleware/CheckSessionTimeout.php b/app/Http/Middleware/CheckSessionTimeout.php
index 12561f8..833095b 100644
--- a/app/Http/Middleware/CheckSessionTimeout.php
+++ b/app/Http/Middleware/CheckSessionTimeout.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Http\Middleware;
 
 use Closure;
diff --git a/app/Http/Middleware/VerifyIsAdminMiddleware.php b/app/Http/Middleware/VerifyIsAdminMiddleware.php
index f629e5c..fa6d23b 100644
--- a/app/Http/Middleware/VerifyIsAdminMiddleware.php
+++ b/app/Http/Middleware/VerifyIsAdminMiddleware.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Http\Middleware;
 
 use Closure;
diff --git a/app/Livewire/Actions/Logout.php b/app/Livewire/Actions/Logout.php
index 238ff21..f173e83 100644
--- a/app/Livewire/Actions/Logout.php
+++ b/app/Livewire/Actions/Logout.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Livewire\Actions;
 
 use Illuminate\Support\Facades\{Auth, Session};
diff --git a/app/Livewire/OtpLogin.php b/app/Livewire/OtpLogin.php
index aedd727..206fc55 100644
--- a/app/Livewire/OtpLogin.php
+++ b/app/Livewire/OtpLogin.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Livewire;
 
 use App\Models\User;
diff --git a/app/Mail/LogNotificationMail.php b/app/Mail/LogNotificationMail.php
index a65ea5d..cac3e38 100644
--- a/app/Mail/LogNotificationMail.php
+++ b/app/Mail/LogNotificationMail.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Mail;
 
 use App\Models\User;
diff --git a/app/Models/Account.php b/app/Models/Account.php
index 9bd3ff3..1658636 100644
--- a/app/Models/Account.php
+++ b/app/Models/Account.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Models;
 
 use Carbon\Carbon;
diff --git a/app/Models/ActionAudit.php b/app/Models/ActionAudit.php
index 5a0ff87..2da8fe4 100644
--- a/app/Models/ActionAudit.php
+++ b/app/Models/ActionAudit.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Models;
 
 use Illuminate\Database\Eloquent\Model;
diff --git a/app/Models/Domain.php b/app/Models/Domain.php
index ecd297d..ff2f592 100644
--- a/app/Models/Domain.php
+++ b/app/Models/Domain.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Models;
 
 use Carbon\Carbon;
diff --git a/app/Models/Host.php b/app/Models/Host.php
index 993155c..95efb97 100644
--- a/app/Models/Host.php
+++ b/app/Models/Host.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Models;
 
 use App\Enums\PanelType;
diff --git a/app/Models/Hosting.php b/app/Models/Hosting.php
index aefbc8b..878328a 100644
--- a/app/Models/Hosting.php
+++ b/app/Models/Hosting.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Models;
 
 use Database\Factories\HostingFactory;
diff --git a/app/Models/Report.php b/app/Models/Report.php
index 6506157..f8fa7f4 100644
--- a/app/Models/Report.php
+++ b/app/Models/Report.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Models;
 
 use App\Observers\ReportObserver;
diff --git a/app/Models/User.php b/app/Models/User.php
index a598bbc..a4efa59 100644
--- a/app/Models/User.php
+++ b/app/Models/User.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Models;
 
 // use Illuminate\Contracts\Auth\MustVerifyEmail;
diff --git a/app/Models/UserHostingPermission.php b/app/Models/UserHostingPermission.php
index 70f871f..63f36e3 100644
--- a/app/Models/UserHostingPermission.php
+++ b/app/Models/UserHostingPermission.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Models;
 
 use Database\Factories\UserHostingPermissionFactory;
diff --git a/app/Notifications/Admin/ErrorParsingNotification.php b/app/Notifications/Admin/ErrorParsingNotification.php
index 21de99a..17d1161 100644
--- a/app/Notifications/Admin/ErrorParsingNotification.php
+++ b/app/Notifications/Admin/ErrorParsingNotification.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Notifications\Admin;
 
 use Illuminate\Bus\Queueable;
diff --git a/app/Providers/AppServiceProvider.php b/app/Providers/AppServiceProvider.php
index 4fa4ca9..1a2a62a 100644
--- a/app/Providers/AppServiceProvider.php
+++ b/app/Providers/AppServiceProvider.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Providers;
 
 use Illuminate\Support\Facades\Event;
diff --git a/app/Providers/Filament/AdminPanelProvider.php b/app/Providers/Filament/AdminPanelProvider.php
index d50fc8c..0d64ce3 100644
--- a/app/Providers/Filament/AdminPanelProvider.php
+++ b/app/Providers/Filament/AdminPanelProvider.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Providers\Filament;
 
 use App\Http\Middleware\{CheckSessionTimeout, RequireAdminOtp, SetUserLocale, VerifyIsAdminMiddleware};
diff --git a/app/Services/AuditService.php b/app/Services/AuditService.php
index eefc2a0..ec11a81 100644
--- a/app/Services/AuditService.php
+++ b/app/Services/AuditService.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Services;
 
 use App\Models\{Host, User};
diff --git a/app/Services/Firewall/FirewallAnalyzerFactory.php b/app/Services/Firewall/FirewallAnalyzerFactory.php
index d66e987..2ec8ddc 100644
--- a/app/Services/Firewall/FirewallAnalyzerFactory.php
+++ b/app/Services/Firewall/FirewallAnalyzerFactory.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Services\Firewall;
 
 use App\Models\Host;
diff --git a/app/Services/Firewall/FirewallAnalyzerInterface.php b/app/Services/Firewall/FirewallAnalyzerInterface.php
index 674d512..395f9f5 100644
--- a/app/Services/Firewall/FirewallAnalyzerInterface.php
+++ b/app/Services/Firewall/FirewallAnalyzerInterface.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Services\Firewall;
 
 interface FirewallAnalyzerInterface
diff --git a/app/Traits/AuditLoginTrait.php b/app/Traits/AuditLoginTrait.php
index 60229b4..bb31828 100644
--- a/app/Traits/AuditLoginTrait.php
+++ b/app/Traits/AuditLoginTrait.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Traits;
 
 use App\Enums\AuditAction;
diff --git a/app/Traits/CommandOutputParserTrait.php b/app/Traits/CommandOutputParserTrait.php
index 58ec84e..424b29b 100644
--- a/app/Traits/CommandOutputParserTrait.php
+++ b/app/Traits/CommandOutputParserTrait.php
@@ -1,5 +1,7 @@
 <?php
 
+declare(strict_types=1);
+
 namespace App\Traits;
 
 use App\Notifications\Admin\ErrorParsingNotification;
diff --git a/rector.php b/rector.php
index 64676e6..bfe3f5b 100644
--- a/rector.php
+++ b/rector.php
@@ -5,6 +5,7 @@
 use Rector\Config\RectorConfig;
 use Rector\Php83\Rector\ClassConst\AddTypeToConstRector;
 use Rector\Php83\Rector\ClassMethod\AddOverrideAttributeToOverriddenMethodsRector;
+use Rector\TypeDeclaration\Rector\StmtsAwareInterface\DeclareStrictTypesRector;
 use Rector\ValueObject\PhpVersion;
 use RectorLaravel\Rector\FuncCall\{AppToResolveRector, RemoveDumpDataDeadCodeRector, ThrowIfAndThrowUnlessExceptionsToUseClassStringRector};
 use RectorLaravel\Rector\If_\ThrowIfRector;
@@ -39,10 +40,14 @@
  * the gate, not protection. ReadOnlyClassRector is additionally a forward
  * risk here: Filament/Livewire components mutate properties by design.
  *
- * Convention ownership: unlike openmizan, this repo's pint.json does NOT set
- * `declare_strict_types`, and app/ sits at 109/182. DeclareStrictTypesRector
- * is therefore deliberately absent — enabling it is a semantic change over 73
- * files (runtime type coercion) and belongs to its own wave, not here.
+ * Convention ownership (AID-529): unlike openmizan, this repo's pint.json does
+ * NOT set `declare_strict_types` — and it stays that way on purpose. The gate
+ * owns the convention for app/: DeclareStrictTypesRector below makes a new
+ * file without the declare fail `refactor:dry`, so Pint is not needed to
+ * enforce it here. Pint would only add reach OUTSIDE app/ (measured at
+ * adoption: tests/ 44 files short of the convention, routes/ 2, bootstrap/ 6)
+ * — that is a separate wave decision with a different mechanism and a
+ * different risk profile, not a side effect of this one.
  */
 return RectorConfig::configure()
     ->withPaths([
@@ -58,6 +63,9 @@
         // above. Measured with --clear-cache: 48 + 9 files, overlap zero.
         AddOverrideAttributeToOverriddenMethodsRector::class,
         AddTypeToConstRector::class,
+        // Wave 1 (AID-529), landed last: the only semantic rule here, since
+        // strict_types changes runtime type coercion rather than shape.
+        DeclareStrictTypesRector::class,
     ])
     ->withSkip([
         // Excluded by design decision (AID-528), armed BEFORE any wave enables