Merge remote-tracking branch 'origin/main' into resolve-pr-133

# Conflicts:
#	docker-compose.yml
#	packages/lib/src/core/templates/docker-compose.ts
#	packages/lib/src/core/templates/dockerfile.ts
#	packages/lib/src/usecases/actions/prepare-files.ts
#	packages/lib/src/usecases/auth-sync-helpers.ts

Author: skulidropek

.githooks/pre-push

@@ -10,3 +10,14 @@ if [ "${DOCKER_GIT_SKIP_KNOWLEDGE_GUARD:-}" = "1" ]; then
 fi
 
 node scripts/pre-push-knowledge-guard.js "$@"
+
+# CHANGE: backup AI session to a private session repository on push (supports Claude, Codex, Gemini)
+# WHY: allows returning to old AI sessions and provides PR context without gist limits
+# QUOTE(ТЗ): "когда происходит push мы сразу заливаем текущую сессию с AI агентом в gits приватный"
+# REF: issue-143
+# PURITY: SHELL
+if [ "${DOCKER_GIT_SKIP_SESSION_BACKUP:-}" != "1" ]; then
+  if command -v gh >/dev/null 2>&1; then
+    node scripts/session-backup-gist.js --verbose || echo "[session-backup] Warning: session backup failed (non-fatal)"
+  fi
+fi

.github/actions/setup/action.yml

@@ -10,12 +10,12 @@ runs:
   using: composite
   steps:
     - name: Install pnpm
-      uses: pnpm/action-setup@v3
+      uses: pnpm/action-setup@v5
     - name: Install node
       uses: actions/setup-node@v6
       with:
         cache: pnpm
         node-version: ${{ inputs.node-version }}
     - name: Install dependencies
       shell: bash
-      run: pnpm install
+      run: pnpm install --frozen-lockfile

.github/workflows/check.yml

@@ -23,6 +23,8 @@ jobs:
       - uses: actions/checkout@v6
       - name: Install dependencies
         uses: ./.github/actions/setup
+      - name: Build (docker-git package)
+        run: pnpm --filter ./packages/app build
 
   types:
     name: Types

.github/workflows/checking-dependencies.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@v5
       - uses: actions/setup-node@v6
         with:
           node-version: 24.14.0

GEMINI.md

@@ -0,0 +1,5 @@
+# Role & Instructions
+You are a highly pragmatic, autonomous AI software engineer. 
+Focus strictly on implementation, executing terminal commands, and deploying tests via the Playwright MCP.
+Do not ask for permission, do not write long explanations or greetings. 
+Analyze the state, execute the plan directly, and output the result.

docker-compose.api.yml

@@ -12,6 +12,10 @@ services:
       DOCKER_GIT_FEDERATION_ACTOR: ${DOCKER_GIT_FEDERATION_ACTOR:-docker-git}
     ports:
       - "${DOCKER_GIT_API_BIND_HOST:-127.0.0.1}:${DOCKER_GIT_API_PORT:-3334}:${DOCKER_GIT_API_PORT:-3334}"
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 1.1.1.1
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - docker_git_projects:${DOCKER_GIT_PROJECTS_ROOT:-/home/dev/.docker-git}

docker-compose.yml

@@ -12,6 +12,10 @@ services:
       DOCKER_GIT_FEDERATION_ACTOR: ${DOCKER_GIT_FEDERATION_ACTOR:-docker-git}
     ports:
       - "${DOCKER_GIT_API_BIND_HOST:-127.0.0.1}:${DOCKER_GIT_API_PORT:-3334}:${DOCKER_GIT_API_PORT:-3334}"
+    dns:
+      - 8.8.8.8
+      - 8.8.4.4
+      - 1.1.1.1
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
       - docker_git_projects:${DOCKER_GIT_PROJECTS_ROOT:-/home/dev/.docker-git}

entrypoint.sh

@@ -11,6 +11,42 @@
 # COMPLEXITY: O(network + repo_size)
 set -euo pipefail
 
+# 0) Ensure DNS resolution works; repair /etc/resolv.conf if Docker DNS is broken
+docker_git_repair_dns() {
+  local test_domain="github.com"
+  local resolv="/etc/resolv.conf"
+  local fallback_dns="8.8.8.8 8.8.4.4 1.1.1.1"
+
+  if getent hosts "$test_domain" >/dev/null 2>&1; then
+    return 0
+  fi
+
+  echo "[dns-repair] DNS resolution failed for $test_domain; attempting repair..."
+
+  local has_external=0
+  for ns in $fallback_dns; do
+    if grep -q "nameserver $ns" "$resolv" 2>/dev/null; then
+      has_external=1
+    fi
+  done
+
+  if [[ "$has_external" -eq 0 ]]; then
+    for ns in $fallback_dns; do
+      printf "nameserver %s\n" "$ns" >> "$resolv"
+    done
+    echo "[dns-repair] appended fallback nameservers to $resolv"
+  fi
+
+  if getent hosts "$test_domain" >/dev/null 2>&1; then
+    echo "[dns-repair] DNS resolution restored"
+    return 0
+  fi
+
+  echo "[dns-repair] WARNING: DNS resolution still failing after repair attempt"
+  return 1
+}
+docker_git_repair_dns || true
+
 REPO_URL="${REPO_URL:-}"
 REPO_REF="${REPO_REF:-}"
 TARGET_DIR="${TARGET_DIR:-/work/app}"

packages/api/package.json

@@ -19,18 +19,18 @@
   },
   "dependencies": {
     "@effect-template/lib": "workspace:*",
-    "@effect/platform": "^0.94.5",
-    "@effect/platform-node": "^0.104.1",
+    "@effect/platform": "^0.96.0",
+    "@effect/platform-node": "^0.106.0",
     "@effect/schema": "^0.75.5",
-    "effect": "^3.19.19"
+    "effect": "^3.21.0"
   },
   "devDependencies": {
-    "@effect/vitest": "^0.27.0",
+    "@effect/vitest": "^0.29.0",
     "@eslint/js": "10.0.1",
     "@types/node": "^24.12.0",
-    "@typescript-eslint/eslint-plugin": "^8.57.0",
-    "@typescript-eslint/parser": "^8.57.0",
-    "eslint": "^10.0.3",
+    "@typescript-eslint/eslint-plugin": "^8.57.1",
+    "@typescript-eslint/parser": "^8.57.1",
+    "eslint": "^10.1.0",
     "globals": "^17.4.0",
     "typescript": "^5.9.3",
     "vitest": "^4.1.0"

packages/app/.jscpd.json

@@ -11,6 +11,7 @@
 	],
 	"skipComments": true,
 	"ignorePattern": [
-		"private readonly \\w+: \\w+;\\s*private readonly \\w+: \\w+;\\s*private \\w+: \\w+ \\| null = null;\\s*private \\w+: \\w+ \\| null = null;"
+		"private readonly \\w+: \\w+;\\s*private readonly \\w+: \\w+;\\s*private \\w+: \\w+ \\| null = null;\\s*private \\w+: \\w+ \\| null = null;",
+		"const \\{ rest, subcommand \\} = splitSubcommand\\(args\\)\\s*if \\(subcommand === null\\) \\{\\s*return parseList\\(args\\)\\s*\\}\\s*return Match\\.value\\(subcommand\\)\\.pipe\\("
 	]
 }