Add active worktree sync actions, publish modal, and source ref tracking

- SPROUTGIT_SOURCE_REF env var passed to hooks (persisted via worktree_provenance table)
- Remote refs included in list_refs (upstream/* → origin/* → other remotes order)
- Source ref picker defaults to upstream-first ref when creating worktrees
- Fetch/Pull toolbar buttons now functional for the active worktree
- Push detects missing upstream and opens a Publish modal with remote selection
- Branch is deleted when its managed worktree is removed
- E2E daily-workflow test updated to reflect branch-deletion behaviour

Author: liam-russell

.github/copilot-instructions.md

@@ -156,10 +156,11 @@ SproutGit manages user repos in a prescribed directory layout:
 
 Representative command groups currently include:
 
-- Git operations and worktree lifecycle (`git_info`, `list_worktrees`, `create_managed_worktree`, `delete_managed_worktree`, `checkout_worktree`, `reset_worktree_branch`)
+- Git operations and worktree lifecycle (`git_info`, `list_worktrees`, `create_managed_worktree`, `delete_managed_worktree`, `checkout_worktree`, `reset_worktree_branch`, `get_worktree_push_status`, `fetch_worktree`, `pull_worktree`, `push_worktree_branch`)
 - Diff and staging (`get_diff_files`, `get_diff_content`, `get_worktree_status`, `stage_files`, `unstage_files`, `create_commit`, `get_working_diff`)
 - Workspace and config (`create_sproutgit_workspace`, `import_git_repo_workspace`, `inspect_sproutgit_workspace`, recent workspaces, app settings)
 - Hooks (`list_workspace_hooks`, create/update/delete/toggle, `run_workspace_hook`)
+- Worktree metadata (`list_worktree_provenance`, `get_worktree_provenance`, nested repo sync rule CRUD)
 - Editor/Git tool integration (`open_in_editor`, editor detection, git config read/write)
 - Terminal and watcher (`spawn_terminal`, `terminal_input`, `start_watching_worktrees`)
 - Optional E2E-only helpers (`set_window_size` when `e2e-testing` feature is enabled)
@@ -192,9 +193,10 @@ Representative export groups include:
 
 - `getGitInfo()`, `createWorkspace()`, `inspectWorkspace()`
 - Workspace import and recents/settings
-- Worktree lifecycle (`createManagedWorktree`, delete, checkout, reset)
+- Worktree lifecycle (`createManagedWorktree`, delete, checkout, reset, push status, fetch, pull, push/publish)
 - Diff and staging helpers
 - Hook CRUD + progress listeners (`onHookProgress`)
+- Worktree provenance + nested repo sync rule helpers
 - File watcher helpers
 - Terminal lifecycle helpers
 - GitHub auth/repo helpers

README.md

@@ -72,6 +72,9 @@ No conflicts, no stash juggling, no waiting. Each agent works independently on i
 - **Interactive commit graph** — Lane-based SVG graph with search, selection, and context menus
 - **Diff viewer** — Single-commit and multi-commit range diffs with file list and unified diff display
 - **Branch management** — Checkout, reset (soft/mixed/hard), and create branches from any ref
+- **Publish-aware push** — First push publishes with upstream (`-u`) when none is configured; later pushes use normal tracking
+- **Active worktree sync actions** — Fetch, pull (`--ff-only`), and push/publish from the toolbar for the selected worktree
+- **Remote-first source refs** — Worktree creation prioritizes remote refs (prefers `upstream/*`) to reduce stale local-base mistakes
 - **Workspace hooks** — Run before/after create, remove, and switch operations with dependency ordering and per-hook output
 - **Editor integration** — Open worktrees in your configured editor (respects `GIT_EDITOR`, `core.editor`, `VISUAL`, `EDITOR`)
 - **Dark mode** — Automatic light/dark theme via system preferences

docs/branch-worktree-policy.md

@@ -132,6 +132,16 @@ Remote refs are source of truth for synchronization status, but local lifecycle
 - Remote state does not unilaterally force local deletion.
 - Local branch deletion always requires explicit user confirmation (except future policy opt-ins).
 
+## Upstream And Publish Policy
+
+To avoid accidental pushes to the wrong remote branch, SproutGit uses an explicit publish model for new worktree branches.
+
+1. On managed worktree create, upstream tracking is cleared intentionally.
+2. The first push from a branch without upstream requires explicit publish setup: user selects the remote, then SproutGit runs publish semantics (`git push -u <remote> <branch>`).
+3. Publish picks remote in this order: `branch.<name>.pushRemote`, `remote.pushDefault`, `branch.<name>.remote`, then `origin`, then `upstream`, then first configured remote.
+4. Once upstream exists, subsequent pushes use normal `git push` behavior.
+5. Source ref selection for new worktrees should prefer remote refs, with `upstream/*` ranked ahead of local branches.
+
 ## Default Product Policy (Recommended)
 
 1. Enforce 1:1 binding for managed branches.

docs/worktree-hooks.md

@@ -212,6 +212,7 @@ Provide minimal, explicit environment variables:
 - `SPROUTGIT_TRIGGER`
 - `SPROUTGIT_TRIGGER_PHASE`
 - `SPROUTGIT_TRIGGER_ACTION`
+- `SPROUTGIT_SOURCE_REF` (set for worktree create triggers when available)
 - `SPROUTGIT_HOOK_ID`
 - `SPROUTGIT_HOOK_NAME`
 - `SPROUTGIT_HOOK_SCOPE`

e2e/specs/daily-workflow.spec.ts

@@ -437,10 +437,9 @@ test.describe('Daily developer workflow', () => {
     const worktreeListAfter = runGit(gitRoot, ['worktree', 'list', '--porcelain']);
     expect(worktreeListAfter).not.toContain('null-pointer');
 
-    // Git: bugfix branch still exists (SproutGit removes the worktree dir and prunes the
-    // worktree ref, but does NOT delete the branch — the commit remains reachable).
+    // Git: bugfix branch is deleted with managed worktree cleanup.
     const branchesAfter = runGit(gitRoot, ['branch']);
-    expect(branchesAfter).toContain('bugfix/null-pointer');
+    expect(branchesAfter).not.toContain('bugfix/null-pointer');
 
     // Git: feature/new-dashboard worktree and branch still exist
     expect(worktreeListAfter).toContain('feature/new-dashboard');

src-tauri/migrations/workspace/004_worktree_provenance_and_nested_repo_rules.sql

@@ -0,0 +1,25 @@
+CREATE TABLE IF NOT EXISTS worktree_provenance (
+    worktree_path             TEXT PRIMARY KEY,
+    branch                    TEXT NOT NULL,
+    source_ref                TEXT NOT NULL,
+    initiating_worktree_path  TEXT,
+    root_repo_path            TEXT NOT NULL,
+    created_at                INTEGER NOT NULL,
+    updated_at                INTEGER NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_worktree_provenance_source_ref
+    ON worktree_provenance (source_ref);
+
+CREATE INDEX IF NOT EXISTS idx_worktree_provenance_created_at
+    ON worktree_provenance (created_at);
+
+CREATE TABLE IF NOT EXISTS nested_repo_sync_rules (
+    repo_relative_path TEXT PRIMARY KEY,
+    enabled            INTEGER NOT NULL DEFAULT 1,
+    created_at         INTEGER NOT NULL,
+    updated_at         INTEGER NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_nested_repo_sync_rules_enabled
+    ON nested_repo_sync_rules (enabled, repo_relative_path);

src-tauri/src/db.rs

@@ -41,6 +41,9 @@ static WORKSPACE_MIGRATIONS: LazyLock<Migrations<'static>> = LazyLock::new(|| {
         M::up(include_str!(
             "../migrations/workspace/003_hook_execution_preferences.sql"
         )),
+        M::up(include_str!(
+            "../migrations/workspace/004_worktree_provenance_and_nested_repo_rules.sql"
+        )),
     ])
 });
 

src-tauri/src/git/helpers.rs

@@ -59,11 +59,16 @@ pub enum GitAction {
     StageFiles,
     UnstageFiles,
     CreateCommit,
+    DeleteBranch,
+    Push,
+    Fetch,
+    Pull,
+    ListRemotes,
 }
 
 impl GitAction {
     #[cfg(test)]
-    pub const ALL: [GitAction; 26] = [
+    pub const ALL: [GitAction; 31] = [
         GitAction::GitInfo,
         GitAction::WorktreeList,
         GitAction::ListRefs,
@@ -90,6 +95,11 @@ impl GitAction {
         GitAction::StageFiles,
         GitAction::UnstageFiles,
         GitAction::CreateCommit,
+        GitAction::DeleteBranch,
+        GitAction::Push,
+        GitAction::Fetch,
+        GitAction::Pull,
+        GitAction::ListRemotes,
     ];
 
     pub fn label(self) -> &'static str {
@@ -120,6 +130,11 @@ impl GitAction {
             GitAction::StageFiles => "stage_files",
             GitAction::UnstageFiles => "unstage_files",
             GitAction::CreateCommit => "create_commit",
+            GitAction::DeleteBranch => "delete_branch",
+            GitAction::Push => "push",
+            GitAction::Fetch => "fetch",
+            GitAction::Pull => "pull",
+            GitAction::ListRemotes => "list_remotes",
         }
     }
 }