review loop: working repositories, git socket, push and review verdicts, row 93 (#1587)

Commits move as v2 bundles over bus-host/git.sock (decision 135). The bus
host keeps one bare working repository per business and project, seeds main
from the project root under a per-repository lock, fetches a pushed bundle
with fsck into a temp ref, requires history shared with main, and moves the
task's work ref only as a fast-forward. Host and runner git run with no
system or global config, hooks at /dev/null and local transports only. The
socket binds only for roles holding git.push.working or review.verdict.

The broker records a push as the action.allowed for git.push.working with
its commit, takes review.request for the latest push and one review.verdict
per request, and refuses task.close on a pushed task without an approve
verdict for the latest push. recordEvent reserves both shapes, so agents
can't forge either.

Reviewed by Dewey (28196) and Sage (28197), both approve. Gate on 7a729aef:
14 node suites and 9 scripts green.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

packages/bus/src/runtime.mjs

@@ -75,15 +75,22 @@ export async function startBroker({
     });
     // S6 launcher operations. The host decides capacity and the instance list; the broker
     // authorizes role.launch and keeps the evidence, refusals included.
-    function authorizeLaunch(cap, instance) {
+    // A refusal is recorded against the caller, as request() records one.
+    function refusing(cap, fn, subject = null) {
       try {
-        return broker.authorize(cap, 'role.launch', { target: instance });
+        return fn();
       } catch (e) {
         if (!(e instanceof BusError)) throw e;
-        broker.refuse(cap, e.code);
+        broker.refuse(cap, e.code, subject);
         throw e;
       }
     }
+    const authorizeLaunch = (cap, instance) =>
+      refusing(cap, () => broker.authorize(cap, 'role.launch', { target: instance }));
+    // Row 93 (#1587): the host's git socket. A push is checked before the host takes the bundle
+    // and recorded once the ref moved; a reviewer's fetch is checked against its review.requested.
+    const checkPush = (cap, task_ref) => refusing(cap, () => broker.checkPush(cap, task_ref), task_ref);
+    const reviewFetch = (cap, args) => refusing(cap, () => broker.reviewFetch(cap, args), args?.task_ref);
     // Metadata only (service, date, state); the token stays in Credentials.
     function credentialStatus(business, role) {
       return credentials
@@ -99,7 +106,10 @@ export async function startBroker({
       endLaunch: (r) => broker.endLaunch(r),
       identity: (cap) => broker.identity(cap),
       authorizeLaunch,
-      refuse: (cap, code) => broker.refuse(cap, code),
+      checkPush,
+      recordPush: (cap, push) => refusing(cap, () => broker.recordPush(cap, push), push?.task_ref),
+      reviewFetch,
+      refuse: (cap, code, subject) => broker.refuse(cap, code, subject),
       credentialStatus,
       launches: bound,
       readers: readCaps,