fix(private-org-sync): retry all git operations on transient network errors

Wrap gitExec with withRetryOnTransientError to transparently retry any
git command (fetch, push, ls-remote, etc.) up to 3 times with a
5-second delay when transient network errors are detected (DNS resolution
failures, connection timeouts/refused/reset, server 5xx errors).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: petr-muller

cmd/private-org-sync/main.go

@@ -170,6 +170,27 @@ func withRetryOnNonzero(f gitFunc, retries int) gitFunc {
 	}
 }
 
+func withRetryOnTransientError(f gitFunc, retries int) gitFunc {
+	return func(logger *logrus.Entry, dir string, command ...string) (string, int, error) {
+		var out string
+		var exitCode int
+		var commandErr error
+		for attempt := 1; attempt <= retries; attempt++ {
+			out, exitCode, commandErr = f(logger, dir, command...)
+			if commandErr == nil && exitCode == 0 {
+				return out, exitCode, nil
+			}
+			if attempt < retries && isTransientNetworkError(out) {
+				logger.Infof("Transient network error, retrying git command (%d/%d)", attempt, retries)
+				time.Sleep(5 * time.Second)
+				continue
+			}
+			break
+		}
+		return out, exitCode, commandErr
+	}
+}
+
 func gitExec(logger *logrus.Entry, dir string, command ...string) (string, int, error) {
 	cmdLogger := logger.WithField("command", fmt.Sprintf("git %s", strings.Join(command, " ")))
 	cmd := exec.Command("git", command...)
@@ -319,6 +340,23 @@ func maybeTooShallow(pushOutput string) bool {
 	return false
 }
 
+func isTransientNetworkError(output string) bool {
+	patterns := []string{
+		"Could not resolve host",
+		"Failed to connect to",
+		"Connection timed out",
+		"Connection refused",
+		"Connection reset by peer",
+		"The requested URL returned error: 5",
+	}
+	for _, pattern := range patterns {
+		if strings.Contains(output, pattern) {
+			return true
+		}
+	}
+	return false
+}
+
 // location specifies a GitHub repository branch used as a source or destination
 type location struct {
 	org, repo, branch string
@@ -611,7 +649,7 @@ func main() {
 		token:                token,
 		root:                 o.gitDir,
 		confirm:              o.confirm,
-		git:                  gitExec,
+		git:                  withRetryOnTransientError(gitExec, 3),
 		failOnNonexistentDst: o.failOnNonexistentDst,
 		gitName:              o.gitName,
 		gitEmail:             o.gitEmail,