Merge main into feat/47-G-join11: the tool runner's mesh/stream.publish (issue 1979)

The capability stream-publish is stated under mesh-sdk's word (buscalls.StreamPublishWord) and in the runtime artifact's states, so G's test that the stated words are the manifest's states holds; the publish uses G's exported JetStream.

Builds: design 47 G §545, §622; design 42 zfs-owns-zfs A-42, A-44

Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h

node-tools/internal/bus/bindings_test.go

@@ -2,6 +2,7 @@ package bus_test
 
 import (
 	"context"
+	"encoding/json"
 	"errors"
 	"io"
 	"strings"
@@ -99,6 +100,23 @@ func TestABundleReachesItsOwnBoundObjectsAndStreamsOnly(t *testing.T) {
 		t.Fatalf("fill %+v, %v", fill, err)
 	}
 
+	// A-42: an event said on the module's own stream lands on the binding's subject plus the event, acknowledged, and a
+	// second say with the same id is the same message.
+	said, err := conn.StreamPublish("m", buscalls.StreamPublishRequest{Stream: "events", Event: "scrub.requested",
+		Body: json.RawMessage(`{"pool":"tank"}`), ID: "id-1"})
+	if err != nil || said.Sequence != 3 {
+		t.Fatalf("said %+v, %v", said, err)
+	}
+	if again, err := conn.StreamPublish("m", buscalls.StreamPublishRequest{Stream: "events", Event: "scrub.requested",
+		Body: json.RawMessage(`{"pool":"tank"}`), ID: "id-1"}); err != nil || again.Sequence != 3 {
+		t.Fatalf("said again %+v, %v", again, err)
+	}
+	if page, err := conn.StreamRead("m", buscalls.StreamReadRequest{Stream: "events", From: 3,
+		Subjects: "mesh.state.m.events.scrub.requested"}); err != nil || len(page.Messages) != 1 ||
+		string(page.Messages[0].Body) != `{"pool":"tank"}` {
+		t.Fatalf("read back %+v, %v", page, err)
+	}
+
 	for _, c := range []struct {
 		name, module, refusal string
 		call                  func(module string) error
@@ -115,6 +133,14 @@ func TestABundleReachesItsOwnBoundObjectsAndStreamsOnly(t *testing.T) {
 			_, err := conn.ObjectsList(module, buscalls.ObjectsRequest{Objects: "events"})
 			return err
 		}},
+		{"say on another module's stream", "other", `other was bound no stream called "events"`, func(module string) error {
+			_, err := conn.StreamPublish(module, buscalls.StreamPublishRequest{Stream: "events", Event: "x"})
+			return err
+		}},
+		{"say on a binding that is not a stream", "m", `"files" is bound with the storage type object-store, not stream`, func(module string) error {
+			_, err := conn.StreamPublish(module, buscalls.StreamPublishRequest{Stream: "files", Event: "x"})
+			return err
+		}},
 		{"a work queue not bound", "m", `bound no stream called "jobs"`, func(module string) error {
 			_, err := conn.WorkQueueSize(module, buscalls.WorkQueueRequest{Queue: "jobs"})
 			return err