test(net): pin handoff scenario 16316 as a plain test, and sweep 20,000 nightly

.github/workflows/nightly.yml

@@ -363,6 +363,7 @@ jobs:
         # `test resume-model` sweeps resume against its model from a fresh seed; PRs run a fixed 64.
         # `test route-key-model` proves the route key proof with Tamarin, and that each variant breaks what it names.
         # `test route-sweep` checks random lite-07 meshes against the route rules from a fresh seed; PRs run a fixed 8.
+        # It also runs the router's handoff sweeps over 20,000 fixed scenarios; PRs run 150.
         # It also runs the bandwidth probe's acceptance suite, of which PRs run the short cases.
         # `test drill impaired` runs the relay drills over a freshly seeded shaper; PRs run loopback.
         # `rs cli-export` runs moq-cli's export process tests, which take tens of seconds of real time.

rs/moq-net/src/route/tests/handoff.rs

@@ -594,6 +594,37 @@ fn widening_past_a_changed_claim_moves_it_up() {
 	assert_eq!(false_ends(&sim.events), 0);
 }
 
+/// A client widens past a claim that changed while its relay had lost the
+/// origin. When the relay gets the origin back, the client's narrow
+/// presentation moves up to the changed claim without ending.
+#[test]
+fn widening_while_the_relay_lost_the_origin_moves_the_claim_up() {
+	let (origin, relay, client) = (0, 1, 2);
+	let mut sim = Sim::new(3);
+	sim.leaf(origin);
+	sim.leaf(client);
+	sim.join(origin, relay, 1);
+	sim.join(client, relay, 1);
+	sim.originate(origin, 7, 0);
+	assert!(sim.run());
+	sim.announce(origin, "live/", 2, None);
+	sim.watch(client, "live/b");
+	for (from, to) in [(origin, relay), (origin, relay), (relay, client), (relay, client)] {
+		assert!(sim.deliver(from, to));
+	}
+	assert_eq!(sim.shows(client, 7, "live/b"), Some(true));
+
+	// The relay's answer to the old interest is still queued when the client widens.
+	sim.disconnect(origin, relay);
+	sim.announce(origin, "live/", 0, None);
+	sim.watch(client, "");
+	sim.connect(origin, relay);
+	assert!(sim.run());
+	assert_eq!(sim.shows(client, 7, "live/"), Some(true));
+	assert_eq!(sim.shown(client).len(), 1);
+	assert_eq!(false_ends(&sim.events), 0);
+}
+
 /// A claim withdrawn below one its origin still has ends: the claim above
 /// covers its path but is not the claim it was.
 #[test]

test/route-sweep.sh

@@ -10,3 +10,5 @@ echo "Route sweep: MOQ_ROUTE_SEED=$MOQ_ROUTE_SEED MOQ_ROUTE_CASES=$MOQ_ROUTE_CAS
 # Release keeps the sweep inside nextest's hang budget; the checks stay on so it still catches what a debug run would.
 export CARGO_PROFILE_RELEASE_DEBUG_ASSERTIONS=true CARGO_PROFILE_RELEASE_OVERFLOW_CHECKS=true
 just rs test -p moq-net --release --features async --test integration -E 'test(=mesh_sweep::seeded_meshes_hold_the_route_rules)'
+# The router's handoff sweeps replay their fixed scenarios past the gate's 150.
+MOQ_ROUTE_SCENARIOS=${MOQ_ROUTE_SCENARIOS:-20000} just rs test -P sweep -p moq-net --release -E 'test(/^route::tests::handoff::sweep_/)'