@serfab/cadre-host 0.10.0 → 0.11.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (138) hide show
  1. package/dist/server/static.js +38 -38
  2. package/dist/ui/assets/index-C-iks41M.js.map +1 -1
  3. package/dist/ui/index.html +12 -12
  4. package/package.json +4 -4
  5. package/service/cadre-host.service.tmpl +16 -16
  6. package/service/com.serfab.cadre-host.plist.tmpl +35 -35
  7. package/service/install-service.ps1 +98 -98
  8. package/service/uninstall-service.ps1 +19 -19
  9. package/src/__tests__/build-targets.test.ts +26 -26
  10. package/src/__tests__/cli-invite.smoke.test.ts +192 -192
  11. package/src/__tests__/cli-nat.smoke.test.ts +212 -212
  12. package/src/__tests__/cli.smoke.test.ts +46 -46
  13. package/src/__tests__/global-setup.ts +51 -51
  14. package/src/__tests__/host-owner.smoke.test.ts +123 -123
  15. package/src/__tests__/orchestrator-env-scrub.test.ts +140 -140
  16. package/src/__tests__/orchestrator-node-identity.test.ts +204 -204
  17. package/src/__tests__/orchestrator-owner.test.ts +198 -198
  18. package/src/__tests__/orchestrator-pin-keys.test.ts +153 -153
  19. package/src/__tests__/orchestrator-push.test.ts +145 -145
  20. package/src/__tests__/orchestrator.test.ts +951 -951
  21. package/src/auth/__tests__/duration.test.ts +28 -28
  22. package/src/auth/__tests__/self-label.test.ts +85 -85
  23. package/src/auth/__tests__/trust-circle-store.test.ts +115 -115
  24. package/src/auth/__tests__/trust-circle.test.ts +445 -445
  25. package/src/auth/duration.ts +33 -33
  26. package/src/auth/index.ts +21 -21
  27. package/src/auth/self-label.ts +74 -74
  28. package/src/auth/trust-circle-store.ts +155 -155
  29. package/src/auth/types.ts +99 -99
  30. package/src/donation/__tests__/donation-service.test.ts +1068 -1068
  31. package/src/donation/__tests__/donation-supervisor.test.ts +510 -510
  32. package/src/donation/__tests__/fake-orchestrator.test.ts +168 -168
  33. package/src/donation/__tests__/fake-orchestrator.ts +225 -225
  34. package/src/donation/__tests__/grant-service.test.ts +213 -213
  35. package/src/donation/__tests__/grant-store.test.ts +113 -113
  36. package/src/donation/donation-service.ts +962 -962
  37. package/src/donation/donation-store.ts +171 -171
  38. package/src/donation/donation-supervisor.ts +388 -388
  39. package/src/donation/grant-service.ts +200 -200
  40. package/src/donation/grant-store.ts +152 -152
  41. package/src/donation/index.ts +64 -64
  42. package/src/donation/types.ts +243 -243
  43. package/src/installer/__tests__/identity.test.ts +34 -34
  44. package/src/installer/__tests__/paths.test.ts +47 -47
  45. package/src/installer/__tests__/service-host.test.ts +62 -62
  46. package/src/installer/__tests__/wizard.test.ts +64 -64
  47. package/src/installer/identity.ts +49 -49
  48. package/src/installer/paths.ts +109 -109
  49. package/src/installer/platform.ts +27 -27
  50. package/src/installer/service-host/index.ts +21 -21
  51. package/src/installer/service-host/template.ts +21 -21
  52. package/src/installer/wizard.ts +103 -103
  53. package/src/nat/__tests__/address-resolver.test.ts +82 -82
  54. package/src/nat/__tests__/ddns-duckdns.test.ts +83 -83
  55. package/src/nat/__tests__/ddns-updater.test.ts +253 -253
  56. package/src/nat/__tests__/external-ip.test.ts +124 -124
  57. package/src/nat/__tests__/nat-service.test.ts +497 -497
  58. package/src/nat/__tests__/nat-store.test.ts +93 -93
  59. package/src/nat/__tests__/port-mapper.test.ts +191 -191
  60. package/src/nat/__tests__/reachability.test.ts +24 -24
  61. package/src/nat/__tests__/secrets.test.ts +178 -178
  62. package/src/nat/address-resolver.ts +51 -51
  63. package/src/nat/ddns/duckdns.ts +76 -76
  64. package/src/nat/ddns/index.ts +55 -55
  65. package/src/nat/ddns/updater.ts +243 -243
  66. package/src/nat/external-ip.ts +154 -154
  67. package/src/nat/index.ts +71 -71
  68. package/src/nat/nat-service.ts +501 -501
  69. package/src/nat/nat-store.ts +154 -154
  70. package/src/nat/port-mapper.ts +329 -329
  71. package/src/nat/reachability.ts +34 -34
  72. package/src/nat/secrets/file-store.ts +130 -130
  73. package/src/nat/secrets/index.ts +112 -112
  74. package/src/nat/secrets/keytar-store.ts +67 -67
  75. package/src/nat/types.ts +159 -159
  76. package/src/orchestrator/__tests__/node-identity.test.ts +62 -62
  77. package/src/orchestrator/host-process-orchestrator.ts +1133 -1133
  78. package/src/orchestrator/index.ts +10 -10
  79. package/src/orchestrator/log-rotator.ts +53 -53
  80. package/src/orchestrator/node-identity.ts +40 -40
  81. package/src/orchestrator/pid-liveness.ts +24 -24
  82. package/src/orchestrator/port-allocator.ts +91 -91
  83. package/src/orchestrator/state-store.ts +90 -90
  84. package/src/orchestrator/types.ts +141 -141
  85. package/src/owner/__tests__/owner-node-client.test.ts +194 -194
  86. package/src/owner/index.ts +12 -12
  87. package/src/owner/owner-node-client.ts +259 -259
  88. package/src/push/__tests__/push.test.ts +90 -90
  89. package/src/push/index.ts +146 -146
  90. package/src/server/__tests__/bus.test.ts +38 -38
  91. package/src/server/__tests__/error-handler.test.ts +118 -118
  92. package/src/server/__tests__/grants-admin-route.test.ts +73 -73
  93. package/src/server/__tests__/grants-route.test.ts +263 -263
  94. package/src/server/__tests__/nodes-route.test.ts +259 -259
  95. package/src/server/__tests__/origin-guard.test.ts +72 -72
  96. package/src/server/__tests__/publishers.test.ts +216 -216
  97. package/src/server/__tests__/server.smoke.test.ts +253 -253
  98. package/src/server/__tests__/settings-route.test.ts +194 -194
  99. package/src/server/__tests__/sse-route.test.ts +119 -119
  100. package/src/server/__tests__/static.test.ts +145 -145
  101. package/src/server/__tests__/status-route.test.ts +134 -134
  102. package/src/server/__tests__/strands-route.test.ts +233 -233
  103. package/src/server/error-handler.ts +178 -178
  104. package/src/server/events/bus.ts +42 -42
  105. package/src/server/events/sse-route.ts +81 -81
  106. package/src/server/events/types.ts +23 -23
  107. package/src/server/index.ts +267 -267
  108. package/src/server/origin-guard.ts +84 -84
  109. package/src/server/routes/grants-admin.ts +41 -41
  110. package/src/server/routes/grants.ts +210 -210
  111. package/src/server/routes/nat.ts +63 -63
  112. package/src/server/routes/nodes.ts +170 -170
  113. package/src/server/routes/settings.ts +123 -123
  114. package/src/server/routes/status.ts +118 -118
  115. package/src/server/routes/strands.ts +54 -54
  116. package/src/server/routes/trust-circle.ts +49 -49
  117. package/src/server/routes/update.ts +43 -43
  118. package/src/server/server.ts +122 -122
  119. package/src/server/settings-store.ts +37 -37
  120. package/src/server/static.ts +207 -207
  121. package/src/strands/__tests__/strand-service.test.ts +165 -165
  122. package/src/strands/index.ts +14 -14
  123. package/src/strands/strand-service.ts +135 -135
  124. package/src/strands/types.ts +102 -102
  125. package/src/update/__tests__/apply.test.ts +158 -158
  126. package/src/update/__tests__/manifest.test.ts +128 -128
  127. package/src/update/__tests__/release-key.test.ts +42 -42
  128. package/src/update/__tests__/sign.test.ts +78 -78
  129. package/src/update/__tests__/store.test.ts +81 -81
  130. package/src/update/__tests__/update-service.integration.test.ts +256 -256
  131. package/src/update/__tests__/version.test.ts +31 -31
  132. package/src/update/apply.ts +190 -190
  133. package/src/update/index.ts +341 -341
  134. package/src/update/release-key.ts +71 -71
  135. package/src/update/sign.ts +74 -74
  136. package/src/update/store.ts +101 -101
  137. package/src/update/types.ts +109 -109
  138. package/src/update/version.ts +80 -80
@@ -1,168 +1,168 @@
1
- /**
2
- * Contract tests for `FakeOrchestrator` itself — the handle lifecycle it borrows
3
- * from `HostProcessOrchestrator`. The donation suites lean on these semantics to
4
- * express races that only exist because the real class drops and rejects
5
- * handles, so this file exists to stop a later relaxation of the fake from
6
- * quietly turning one of those tests green. Each case names the real behaviour
7
- * it mirrors.
8
- */
9
-
10
- import { describe, expect, it } from 'vitest';
11
-
12
- import type { OrchestratorCreateRequest } from '@serfab/cadre-provider';
13
-
14
- import { FakeOrchestrator } from './fake-orchestrator.js';
15
-
16
- const request = (containerId: string): OrchestratorCreateRequest => ({
17
- containerId,
18
- partyId: 'party-P',
19
- bootstrapNodes: ['/ip4/127.0.0.1/tcp/4001/p2p/12D3KooReq'],
20
- profile: 'storage',
21
- });
22
-
23
- describe('FakeOrchestrator handle lifecycle', () => {
24
- it('drops the prior handle when a re-spawn succeeds (mirrors dropStaleHandle)', async () => {
25
- const orch = new FakeOrchestrator();
26
- const first = await orch.createContainer(request('grn_1'));
27
- const second = await orch.createContainer(request('grn_1'));
28
-
29
- await expect(orch.stopContainer(first.dockerId)).rejects.toThrow(
30
- `Container not found: ${first.dockerId}`,
31
- );
32
- // The rejected call left no trace: `stopped` records handles acted on, not
33
- // calls attempted.
34
- expect(orch.stopped).toEqual([]);
35
- // …and the container now resolves only to the new spawn.
36
- expect(orch.resolveDockerId('grn_1')).toBe(second.dockerId);
37
-
38
- await orch.stopContainer(second.dockerId);
39
- expect(orch.stopped).toEqual([second.dockerId]);
40
- });
41
-
42
- it('drops only the re-spawned container, leaving another container untouched', async () => {
43
- const orch = new FakeOrchestrator();
44
- const other = await orch.createContainer(request('grn_2'));
45
- await orch.createContainer(request('grn_1'));
46
- await orch.createContainer(request('grn_1'));
47
-
48
- // The real drop filters on containerId; a fake that cleared the whole map
49
- // would still pass every same-container case above.
50
- await expect(orch.stopContainer(other.dockerId)).resolves.toBeUndefined();
51
- expect(orch.resolveDockerId('grn_2')).toBe(other.dockerId);
52
- });
53
-
54
- it('keeps the prior handle live across the whole pre-drop await window', async () => {
55
- const orch = new FakeOrchestrator();
56
- const first = await orch.createContainer(request('grn_1'));
57
-
58
- // The invariant the donation race tests rest on: a concurrent stop started
59
- // from `onCreate` still finds the old handle. Deferring it onto a microtask
60
- // puts it strictly after `onCreate` returns and strictly before the
61
- // `createDelayMs` timer, so this one case pins the drop behind BOTH — with
62
- // no dependence on wall-clock timing. The outcome is captured rather than
63
- // rethrown so a regression fails this assertion instead of surfacing as an
64
- // unhandled rejection.
65
- orch.createDelayMs = 1;
66
- let outcome: Promise<string> | undefined;
67
- orch.onCreate = () => {
68
- outcome ??= Promise.resolve()
69
- .then(() => orch.stopContainer(first.dockerId))
70
- .then(() => 'stopped', (err: Error) => `rejected: ${err.message}`);
71
- };
72
-
73
- const second = await orch.createContainer(request('grn_1'));
74
-
75
- expect(await outcome).toBe('stopped');
76
- expect(orch.stopped).toEqual([first.dockerId]);
77
- expect(orch.resolveDockerId('grn_1')).toBe(second.dockerId);
78
- });
79
-
80
- it('leaves the prior handle in place when the re-spawn fails (mirrors restoreDroppedHandles)', async () => {
81
- const orch = new FakeOrchestrator();
82
- const first = await orch.createContainer(request('grn_1'));
83
-
84
- orch.failCreate = true;
85
- await expect(orch.createContainer(request('grn_1'))).rejects.toThrow('spawn boom');
86
-
87
- // Host state is exactly as the failed attempt found it — which is what lets
88
- // `DonationSupervisor.giveUp` still stop the child it knows about.
89
- await expect(orch.stopContainer(first.dockerId)).resolves.toBeUndefined();
90
- expect(orch.stopped).toEqual([first.dockerId]);
91
- expect(orch.resolveDockerId('grn_1')).toBe(first.dockerId);
92
- });
93
-
94
- it('rejects a never-issued dockerId (mirrors requireHandle)', async () => {
95
- const orch = new FakeOrchestrator();
96
-
97
- await expect(orch.removeContainer('dock_nope')).rejects.toThrow(
98
- 'Container not found: dock_nope',
99
- );
100
- expect(orch.removed).toEqual([]);
101
- });
102
-
103
- it('rejects a second call once a handle has been removed (mirrors removeContainer deleting it)', async () => {
104
- const orch = new FakeOrchestrator();
105
- const { dockerId } = await orch.createContainer(request('grn_1'));
106
-
107
- await orch.removeContainer(dockerId);
108
- expect(orch.removed).toEqual([dockerId]);
109
-
110
- await expect(orch.stopContainer(dockerId)).rejects.toThrow(
111
- `Container not found: ${dockerId}`,
112
- );
113
- expect(orch.stopped).toEqual([]);
114
- });
115
-
116
- it('fires onStop for a rejected stop, so a test can still observe the attempt', async () => {
117
- const orch = new FakeOrchestrator();
118
- const attempted: string[] = [];
119
- orch.onStop = (id) => { attempted.push(id); };
120
-
121
- await expect(orch.stopContainer('dock_nope')).rejects.toThrow('Container not found');
122
- expect(attempted).toEqual(['dock_nope']);
123
- expect(orch.stopped).toEqual([]);
124
- });
125
-
126
- it('refuses to reclaim the workdir of a container that still resolves (mirrors the live-handle guard)', async () => {
127
- const orch = new FakeOrchestrator();
128
- await orch.createContainer(request('grn_1'));
129
-
130
- // A live handle owns that directory; only `removeContainer` — which stops
131
- // the child first — may delete it.
132
- expect(orch.reclaimWorkdir('grn_1')).toBe(false);
133
- expect(orch.reclaimedWorkdirs).toEqual([]);
134
- });
135
-
136
- it('reclaims the workdir of a container no handle owns', async () => {
137
- const orch = new FakeOrchestrator();
138
-
139
- // Never spawned — the stuck-`provisioning` record whose host died before a
140
- // handle ever existed.
141
- expect(orch.reclaimWorkdir('grn_orphan')).toBe(true);
142
- expect(orch.reclaimedWorkdirs).toEqual(['grn_orphan']);
143
-
144
- // …and once the container's own handle is removed, its id becomes
145
- // reclaimable too.
146
- const { dockerId } = await orch.createContainer(request('grn_1'));
147
- expect(orch.reclaimWorkdir('grn_1')).toBe(false);
148
- await orch.removeContainer(dockerId);
149
- expect(orch.reclaimWorkdir('grn_1')).toBe(true);
150
- expect(orch.reclaimedWorkdirs).toEqual(['grn_orphan', 'grn_1']);
151
- });
152
-
153
- it('fires onSpawned after the drop, with the new handle live and the old one gone', async () => {
154
- const orch = new FakeOrchestrator();
155
- const first = await orch.createContainer(request('grn_1'));
156
-
157
- let observed: { spawned: string; resolves: string | undefined } | undefined;
158
- orch.onSpawned = (dockerId) => {
159
- observed = { spawned: dockerId, resolves: orch.resolveDockerId('grn_1') };
160
- };
161
- const second = await orch.createContainer(request('grn_1'));
162
-
163
- // The post-drop world: the container already resolves to the new handle, so
164
- // work driven from here sees what `abandonRespawn`'s caller would see.
165
- expect(observed).toEqual({ spawned: second.dockerId, resolves: second.dockerId });
166
- expect(second.dockerId).not.toBe(first.dockerId);
167
- });
168
- });
1
+ /**
2
+ * Contract tests for `FakeOrchestrator` itself — the handle lifecycle it borrows
3
+ * from `HostProcessOrchestrator`. The donation suites lean on these semantics to
4
+ * express races that only exist because the real class drops and rejects
5
+ * handles, so this file exists to stop a later relaxation of the fake from
6
+ * quietly turning one of those tests green. Each case names the real behaviour
7
+ * it mirrors.
8
+ */
9
+
10
+ import { describe, expect, it } from 'vitest';
11
+
12
+ import type { OrchestratorCreateRequest } from '@serfab/cadre-provider';
13
+
14
+ import { FakeOrchestrator } from './fake-orchestrator.js';
15
+
16
+ const request = (containerId: string): OrchestratorCreateRequest => ({
17
+ containerId,
18
+ partyId: 'party-P',
19
+ bootstrapNodes: ['/ip4/127.0.0.1/tcp/4001/p2p/12D3KooReq'],
20
+ profile: 'storage',
21
+ });
22
+
23
+ describe('FakeOrchestrator handle lifecycle', () => {
24
+ it('drops the prior handle when a re-spawn succeeds (mirrors dropStaleHandle)', async () => {
25
+ const orch = new FakeOrchestrator();
26
+ const first = await orch.createContainer(request('grn_1'));
27
+ const second = await orch.createContainer(request('grn_1'));
28
+
29
+ await expect(orch.stopContainer(first.dockerId)).rejects.toThrow(
30
+ `Container not found: ${first.dockerId}`,
31
+ );
32
+ // The rejected call left no trace: `stopped` records handles acted on, not
33
+ // calls attempted.
34
+ expect(orch.stopped).toEqual([]);
35
+ // …and the container now resolves only to the new spawn.
36
+ expect(orch.resolveDockerId('grn_1')).toBe(second.dockerId);
37
+
38
+ await orch.stopContainer(second.dockerId);
39
+ expect(orch.stopped).toEqual([second.dockerId]);
40
+ });
41
+
42
+ it('drops only the re-spawned container, leaving another container untouched', async () => {
43
+ const orch = new FakeOrchestrator();
44
+ const other = await orch.createContainer(request('grn_2'));
45
+ await orch.createContainer(request('grn_1'));
46
+ await orch.createContainer(request('grn_1'));
47
+
48
+ // The real drop filters on containerId; a fake that cleared the whole map
49
+ // would still pass every same-container case above.
50
+ await expect(orch.stopContainer(other.dockerId)).resolves.toBeUndefined();
51
+ expect(orch.resolveDockerId('grn_2')).toBe(other.dockerId);
52
+ });
53
+
54
+ it('keeps the prior handle live across the whole pre-drop await window', async () => {
55
+ const orch = new FakeOrchestrator();
56
+ const first = await orch.createContainer(request('grn_1'));
57
+
58
+ // The invariant the donation race tests rest on: a concurrent stop started
59
+ // from `onCreate` still finds the old handle. Deferring it onto a microtask
60
+ // puts it strictly after `onCreate` returns and strictly before the
61
+ // `createDelayMs` timer, so this one case pins the drop behind BOTH — with
62
+ // no dependence on wall-clock timing. The outcome is captured rather than
63
+ // rethrown so a regression fails this assertion instead of surfacing as an
64
+ // unhandled rejection.
65
+ orch.createDelayMs = 1;
66
+ let outcome: Promise<string> | undefined;
67
+ orch.onCreate = () => {
68
+ outcome ??= Promise.resolve()
69
+ .then(() => orch.stopContainer(first.dockerId))
70
+ .then(() => 'stopped', (err: Error) => `rejected: ${err.message}`);
71
+ };
72
+
73
+ const second = await orch.createContainer(request('grn_1'));
74
+
75
+ expect(await outcome).toBe('stopped');
76
+ expect(orch.stopped).toEqual([first.dockerId]);
77
+ expect(orch.resolveDockerId('grn_1')).toBe(second.dockerId);
78
+ });
79
+
80
+ it('leaves the prior handle in place when the re-spawn fails (mirrors restoreDroppedHandles)', async () => {
81
+ const orch = new FakeOrchestrator();
82
+ const first = await orch.createContainer(request('grn_1'));
83
+
84
+ orch.failCreate = true;
85
+ await expect(orch.createContainer(request('grn_1'))).rejects.toThrow('spawn boom');
86
+
87
+ // Host state is exactly as the failed attempt found it — which is what lets
88
+ // `DonationSupervisor.giveUp` still stop the child it knows about.
89
+ await expect(orch.stopContainer(first.dockerId)).resolves.toBeUndefined();
90
+ expect(orch.stopped).toEqual([first.dockerId]);
91
+ expect(orch.resolveDockerId('grn_1')).toBe(first.dockerId);
92
+ });
93
+
94
+ it('rejects a never-issued dockerId (mirrors requireHandle)', async () => {
95
+ const orch = new FakeOrchestrator();
96
+
97
+ await expect(orch.removeContainer('dock_nope')).rejects.toThrow(
98
+ 'Container not found: dock_nope',
99
+ );
100
+ expect(orch.removed).toEqual([]);
101
+ });
102
+
103
+ it('rejects a second call once a handle has been removed (mirrors removeContainer deleting it)', async () => {
104
+ const orch = new FakeOrchestrator();
105
+ const { dockerId } = await orch.createContainer(request('grn_1'));
106
+
107
+ await orch.removeContainer(dockerId);
108
+ expect(orch.removed).toEqual([dockerId]);
109
+
110
+ await expect(orch.stopContainer(dockerId)).rejects.toThrow(
111
+ `Container not found: ${dockerId}`,
112
+ );
113
+ expect(orch.stopped).toEqual([]);
114
+ });
115
+
116
+ it('fires onStop for a rejected stop, so a test can still observe the attempt', async () => {
117
+ const orch = new FakeOrchestrator();
118
+ const attempted: string[] = [];
119
+ orch.onStop = (id) => { attempted.push(id); };
120
+
121
+ await expect(orch.stopContainer('dock_nope')).rejects.toThrow('Container not found');
122
+ expect(attempted).toEqual(['dock_nope']);
123
+ expect(orch.stopped).toEqual([]);
124
+ });
125
+
126
+ it('refuses to reclaim the workdir of a container that still resolves (mirrors the live-handle guard)', async () => {
127
+ const orch = new FakeOrchestrator();
128
+ await orch.createContainer(request('grn_1'));
129
+
130
+ // A live handle owns that directory; only `removeContainer` — which stops
131
+ // the child first — may delete it.
132
+ expect(orch.reclaimWorkdir('grn_1')).toBe(false);
133
+ expect(orch.reclaimedWorkdirs).toEqual([]);
134
+ });
135
+
136
+ it('reclaims the workdir of a container no handle owns', async () => {
137
+ const orch = new FakeOrchestrator();
138
+
139
+ // Never spawned — the stuck-`provisioning` record whose host died before a
140
+ // handle ever existed.
141
+ expect(orch.reclaimWorkdir('grn_orphan')).toBe(true);
142
+ expect(orch.reclaimedWorkdirs).toEqual(['grn_orphan']);
143
+
144
+ // …and once the container's own handle is removed, its id becomes
145
+ // reclaimable too.
146
+ const { dockerId } = await orch.createContainer(request('grn_1'));
147
+ expect(orch.reclaimWorkdir('grn_1')).toBe(false);
148
+ await orch.removeContainer(dockerId);
149
+ expect(orch.reclaimWorkdir('grn_1')).toBe(true);
150
+ expect(orch.reclaimedWorkdirs).toEqual(['grn_orphan', 'grn_1']);
151
+ });
152
+
153
+ it('fires onSpawned after the drop, with the new handle live and the old one gone', async () => {
154
+ const orch = new FakeOrchestrator();
155
+ const first = await orch.createContainer(request('grn_1'));
156
+
157
+ let observed: { spawned: string; resolves: string | undefined } | undefined;
158
+ orch.onSpawned = (dockerId) => {
159
+ observed = { spawned: dockerId, resolves: orch.resolveDockerId('grn_1') };
160
+ };
161
+ const second = await orch.createContainer(request('grn_1'));
162
+
163
+ // The post-drop world: the container already resolves to the new handle, so
164
+ // work driven from here sees what `abandonRespawn`'s caller would see.
165
+ expect(observed).toEqual({ spawned: second.dockerId, resolves: second.dockerId });
166
+ expect(second.dockerId).not.toBe(first.dockerId);
167
+ });
168
+ });