From e4db5931f4bff63aad355fa1e6cb9b5e96184949 Mon Sep 17 00:00:00 2001
From: mkorwel <matt.korwel@gmail.com>
Date: Mon, 16 Mar 2026 11:19:13 -0700
Subject: [PATCH] fix(offload): ensure leading dot in DNS suffix for project
 isolation

---
 .gemini/skills/offload/scripts/setup.ts | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/.gemini/skills/offload/scripts/setup.ts b/.gemini/skills/offload/scripts/setup.ts
index ac4ddcca8a..97ac8906a1 100644
--- a/.gemini/skills/offload/scripts/setup.ts
+++ b/.gemini/skills/offload/scripts/setup.ts
@@ -65,8 +65,10 @@ export async function runSetup(env: NodeJS.ProcessEnv = process.env) {
   console.log(`\n🚀 Configuring Isolated SSH Alias...`);
   let dnsSuffix = await prompt('Internal DNS Suffix (e.g. .internal or .internal.gcpnode.com)', '.internal.gcpnode.com');
   
-  // Ensure suffix starts with a dot
-  if (dnsSuffix && !dnsSuffix.startsWith('.')) dnsSuffix = '.' + dnsSuffix;
+  // FIX: Ensure exactly ONE dot between projectId and suffix
+  if (dnsSuffix && !dnsSuffix.startsWith('.')) {
+      dnsSuffix = '.' + dnsSuffix;
+  }
   
   // PREPEND nic0. for direct internal routing
   const internalHostname = `nic0.${targetVM}.${zone}.c.${projectId}${dnsSuffix}`;