Publish work the executor committed itself, and gate when there is none

On the first live run the executor committed its milestone itself, as
its plan asked. The publisher only published a commit it made, found a
clean tree, reported "no changes to publish", and left the agent in
EXECUTING, where every message is answered "busy".

- publish(): with nothing left to commit, publish anyway when the branch
  has commits origin/<base> lacks; report no changes only when it has
  none.
- push_followup(): same for review fixes, comparing HEAD with what the
  remote branch holds (ls-remote; pushes go by URL, so there is no
  tracking ref).
- Nothing to publish now gates to AWAIT_INPUT, and the reply returns to
  the still-approved milestone plan.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PPQ14L3LikyefCMFBqEbKE

nisse-dev/tests/test_publish.py

@@ -1,4 +1,5 @@
 import io
+import subprocess
 from pathlib import Path
 from typing import Any
 
@@ -37,15 +38,36 @@ class FakeGitea:
 
 
 class FakeGit:
-    """Records what would have been pushed; no network."""
+    """A real repository whose origin/main is a local ref; pushes are
+    recorded, not sent."""
 
-    def __init__(self, root: Path, *, changes: bool = True) -> None:
+    def __init__(
+        self, root: Path, *, changes: bool = True, committed: bool = False
+    ) -> None:
         self.repo = GitRepo(root)
         self.repo.init()
         self.repo.configure_identity("bot", "bot@example.test")
+        (root / "README.md").write_text("sandbox")
+        self.repo.commit_all("Initial commit")
+        git(root, "update-ref", "refs/remotes/origin/main", "HEAD")
         if changes:
             (root / "work.txt").write_text("done")
+        if committed:
+            # The executor committing its own work, as on the first live run.
+            self.repo.commit_all("Add the work")
         self.pushed: list[str] = []
+        self.remote: dict[str, str] = {}
+
+    def head_sha(self) -> str:
+        return self.repo.head_sha()
+
+    def commits_since(self, ref: str) -> int:
+        return self.repo.commits_since(ref)
+
+    def remote_sha(
+        self, remote_url: str, branch: str, *, token: str | None = None
+    ) -> str | None:
+        return self.remote.get(branch)
 
     def current_branch(self) -> str:
         return self.repo.current_branch()
@@ -58,6 +80,11 @@ class FakeGit:
 
     def push(self, remote_url: str, branch: str, *, token: str | None = None) -> None:
         self.pushed.append(branch)
+        self.remote[branch] = self.repo.head_sha()
+
+
+def git(root: Path, *args: str) -> None:
+    subprocess.run(["git", *args], cwd=root, check=True, capture_output=True)
 
 
 @pytest.fixture
@@ -156,3 +183,32 @@ def test_reconciler_settles_an_intent_left_by_a_crash(
 
     store.commit_intent(intent_id, cause="verified")
     assert client.opened == []  # nothing re-published
+
+
+def test_work_the_executor_committed_itself_is_published(
+    store: StateStore, tmp_path: Path
+) -> None:
+    git = FakeGit(tmp_path / "work", committed=True)
+    client = FakeGitea()
+    result = build(store, git, client).publish(
+        task_id="t", milestone=1, project="demo", plan="p"
+    )
+    assert result.pull_request is not None
+    assert git.pushed == ["t/milestone-1"]
+    assert git.remote["t/milestone-1"] == git.head_sha()
+
+
+def test_a_followup_the_executor_committed_itself_is_pushed(
+    store: StateStore, tmp_path: Path
+) -> None:
+    git = FakeGit(tmp_path / "work")
+    publisher = build(store, git, FakeGitea())
+    publisher.publish(task_id="t", milestone=1, project="demo", plan="p")
+    (tmp_path / "work" / "work.txt").write_text("fixed")
+    git.repo.commit_all("Address review")
+    sha = publisher.push_followup(task_id="t", milestone=1, message="m")
+    assert sha == git.head_sha()
+    assert git.pushed == ["t/milestone-1", "t/milestone-1"]
+    # Nothing new since that push: no second push, and it says so.
+    assert publisher.push_followup(task_id="t", milestone=1, message="m") is None
+    assert len(git.pushed) == 2