@codex review

🦋 Changeset detected

Latest commit: cf857bc

The changes in this PR will be included in the next version bump.

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

Greptile Summary

This PR introduces custom-domain DNS automation for Edge Scripts: when a hostname lives in a Bunny DNS zone the CLI now detects it, offers to add/repoint a PULLZONE record, and then waits for propagation and issues SSL automatically — all in one guided flow. It also refactors script-selector boilerplate into shared selectScript/scriptSelectorBuilder helpers (used across show, stats, env *, deployments *) and adds dns zones link/unlink commands.

• New core/hostnames/ modules (bunny-dns.ts, dns.ts, flow.ts): longest-suffix zone detection, injectable DNS resolvers with public-resolver fallback, and the offerBunnyDnsThenSsl / offerDnsWaitAndSsl orchestration that correctly isolates the zone-detection try/catch from user-confirmed writes.
• scripts create / scripts init: gain a --domain flag and an interactive custom-domain prompt backed by the new setupCustomDomain helper; SSL issuance failures are warnings, not hard errors, since the script is already created.
• Script command selector refactor: resolveManifestId + manual positional boilerplate replaced by selectScript / scriptSelectorBuilder / scriptIdOptionBuilder; commands now fall back to an interactive picker when no manifest or explicit ID is given, and always call offerLink after output.

Confidence Score: 4/5

Safe to merge after addressing the unsafe Id cast in the script picker's re-fetch path.

The new selectScript helper re-fetches the full script model after an interactive pick using selected.Id as number. Since EdgeScriptModel.Id is typed number | undefined, a script returned from the list endpoint without an ID would silently embed undefined in the fetch URL, producing a confusing 404. Every other path in this PR has solid guards for the same | undefined pattern (the existing.Id == null guard in bunny-dns.ts is the explicit fix for the equivalent issue raised last cycle).

packages/cli/src/commands/scripts/interactive.ts — the selected.Id as number cast on line 79 in the re-fetch added by this PR.

Important Files Changed

Sequence Diagram

sequenceDiagram
    participant User
    participant CLI as CLI (add / create)
    participant BunnyDNS as Bunny DNS API
    participant PullZone as Pull Zone API
    participant DnsPoll as DNS Poll (system + 1.1.1.1/8.8.8.8)

    User->>CLI: domains add shop.example.com [--wait]
    CLI->>PullZone: addHostname(shop.example.com)
    PullZone-->>CLI: hostnames + cnameTarget

    alt Interactive / TTY
        CLI->>BunnyDNS: findBunnyDnsZone(shop.example.com)
        BunnyDNS-->>CLI: "match { zoneId, delegated }"

        alt Zone found
            CLI->>User: Point shop.example.com at this pull zone?
            User-->>CLI: yes

            alt "delegated == true"
                CLI->>BunnyDNS: addPullZoneRecord / repointPullZoneRecord
                BunnyDNS-->>CLI: ok
                CLI->>PullZone: enableSsl (up to 3 attempts)
                PullZone-->>CLI: certificate issued
                CLI->>User: SSL certificate issued
            else "delegated == false"
                CLI->>BunnyDNS: addPullZoneRecord
                BunnyDNS-->>CLI: ok
                CLI->>User: Zone not delegated — update registrar NS
            end

        else Zone not found
            CLI->>User: CNAME shop.example.com to system-hostname
            CLI->>User: Wait for DNS and enable HTTPS now?
            User-->>CLI: yes / --wait
            loop Poll every 5s (max 10 min)
                CLI->>DnsPoll: anyResolverPointsAt?
                DnsPoll-->>CLI: true
            end
            CLI->>PullZone: enableSsl
            PullZone-->>CLI: certificate issued
            CLI->>User: SSL certificate issued
        end
    end

_{Reviews (10): Last reviewed commit: "autolink dns and scripts" | Re-trigger Greptile}

@greptile-apps re-review

Want your agent to iterate on Greptile's feedback? Try greploops.