
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@workforge/gitq-core
Advanced tools
Stacked branch engine for Git. Manages branch stacks, cascade rebases, conflict detection, forge integration (GitHub/GitLab), and stack diagnostics.
Stacked branch engine for Git. Manages branch stacks, cascade rebases, conflict detection, forge integration (GitHub/GitLab), and stack diagnostics.
The engine is organized around a few core subsystems:
stack-manager.ts)CRUD operations on branch stacks: add/remove/rename/reparent branches, fold and split branches, manage the StackStore (persisted JSON).
rebase-engine.ts)Cascade rebase logic for stacked branches:
preflight() — pre-rebase conflict prediction via git merge-tree --write-tree. Returns PreFlightReport with predicted conflict files, drift warnings, and thread warnings.cascadeRebase() / doCascadeLoop() — rebases all branches in topological order. Handles merged parents (tombstone resolution, fork-point detection). Pauses on conflict with CascadePauseInfo.classifyConflicts() — classifies conflict patterns from file types (e.g., parent-improved-child-moved from UD+AU pairs). Currently only runs post-failure; the active initiative moves it to preflight.syncLocalStack() — fetch + cascade rebase onto latest trunk.stack-diagnostics.ts)Two-layer diagnostic pipeline:
collectSnapshot() — parallel git queries per branch: divergence, ancestry, tombstone drift. Produces StackSnapshot.diagnoseStack() — pure classifier that produces NodeDirective objects with situation codes (parent-merged, behind-parent, diverged, etc.), badges, action buttons, and edge/banner directives for the UI.conflict-resolver.ts)classifyConflictFiles() — classifies files as generated, lockfile, or manual-resolutionprepareForAgent() — auto-resolves generated/lock files, returns AgentResolutionTask for remaining conflictsproposeResolutionPlan() — LLM-based resolution plan proposalforge-sync.ts)Bidirectional sync with GitHub/GitLab: publish stacks as MRs/PRs, detect merges, refresh pipeline statuses, import stacks from existing MRs.
git-shell.ts)Thin wrapper around git CLI commands. Key methods:
| Category | Methods |
|---|---|
| Branch | getCurrentBranch, getBranchHead, getMergeBase, branchExists, createBranch, checkoutBranch, deleteBranch |
| Rebase | rebaseOnto, rebaseContinue, rebaseAbort |
| Merge/Conflict | mergeTreeDryRun, listConflictedFiles, listConflictedFilesWithTypes, checkoutOurs, checkoutTheirs |
| Tree/Content | lsTree, showFile, checkoutFileFromRef, diff, diffNameOnly |
| History | log, logDetailed, cherry, isAncestor, getMergeBaseForkPoint |
| Remote | fetch, pushForceWithLease, getRemoteUrl |
interface StackNode {
branch: string;
parent: string | null;
status: 'local-only' | 'synced' | 'drift' | 'merged';
lastKnownHead: string; // tombstone for merged branches
forkPoint: string | null;
mrIid?: number;
mrUrl?: string;
}
interface Stack {
id: string;
stackName: string;
root: string; // trunk branch (e.g., "main", "master")
nodes: StackNode[];
}
type Situation =
| 'up-to-date' | 'ahead' | 'behind' | 'diverged'
| 'behind-parent' | 'parent-merged' | 'parent-merged-drifted'
| 'remote-gone' | 'untracked' | 'unmanaged';
bun install # install deps (from repo root)
bun run test:unit # unit tests
bun run test:integration # integration tests (creates temp git repos)
bun run test # both
bun run check-types # type-check
bun run lint # eslint
Integration tests create isolated temporary git repositories, so they're safe to run without side effects on real repos.
Detailed design documents for active engineering initiatives:
docs/mcp-agent-experience-redesign.md — How the MCP server should surface conflict intelligence to agentsdocs/parent-improved-child-moved-resolution.md — Detection and resolution pipeline for parent-improved-child-moved conflictsFAQs
Stacked branch engine for Git. Manages branch stacks, cascade rebases, conflict detection, forge integration (GitHub/GitLab), and stack diagnostics.
We found that @workforge/gitq-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.