Worktree teardown + git-status across CLI, MCP, and portal

[dotdevdotdev]

Goal

Make the full worktree lifecycle drivable from MCP without dropping to the shell, and give the portal/MCP read-only git awareness of worktrees (the portal provides worktree UI but had no way to know a worktree's state).

Previously: MCP could create (session_create) and kill the tmux session (session_kill), but session_kill leaves the worktree + branch on disk. Full teardown (agentwire worktree --remove) was CLI-only, and nothing — CLI, MCP, or portal — could report a worktree's git status.

Scope

• In: read-only git status (dirty/ahead/behind/pushed, local git only — no network, no gh), worktree teardown exposed to MCP, portal route + sidebar badges.
• Out: MCP committing/pushing/PR'ing. By design there is no write verb — commit/push/PR stays the agent's job (the worktree-session role instructs it).

Approach

SSOT preserved: every layer routes through the one CLI worktree command. Portal and MCP are thin wrappers (run_agentwire_cmd), no parallel git logic.

• CLI: worktree_status(path) helper; worktree --status <name>; git status folded into worktree --list --json.
• MCP: worktree_list, worktree_status (read-only), worktree_remove (teardown: kill session + tmux, force-remove worktree + branch, unregister).
• Portal: GET /api/worktrees.
• Frontend: git badges on worktree session cards.

Verification

End-to-end: real-flow worktree reads unpushed until pushed; dirty detection; teardown removes worktree; MCP tools register; live portal route returns the git field.

[dotdevdotdev]

PR opened: #431

Breadcrumb (PR-open): Shipped worktree teardown + read-only git status across all three layers, SSOT-compliant (all routed through CLI worktree).

• worktree.py: worktree_status() — local git only (no network/gh): branch, dirty(+counts), upstream, ahead/behind, pushed.
• CLI: worktree --status; status folded into worktree --list --json.
• MCP: worktree_list / worktree_status (read-only) / worktree_remove (teardown). No write verb — commit/push/PR stays the agent's job.
• Portal: GET /api/worktrees. Frontend: badges on worktree cards.

Key contract locked in: a real agentwire worktree reports upstream: null / pushed: false until the agent runs git push -u (the detach + checkout -b flow sets no tracking). Verified end-to-end. Agents need a session restart to pick up the new MCP tools.