test: execute the HTTP scenario catalog

scripts/lib/validated-json-artifact.ts

@@ -1,4 +1,5 @@
 import { randomUUID } from "node:crypto";
+import { constants } from "node:fs";
 import {
   open as openFile,
   rename as renameFile,
@@ -15,8 +16,13 @@ export type ValidatedJsonArtifactInput = Readonly<{
 }>;
 
 export type ValidatedJsonArtifactFileSystem = Readonly<{
-  open: (path: string, flags: "wx") => Promise<{
+  open: (path: string, flags: number, mode: number) => Promise<{
     writeFile(data: string, encoding: "utf8"): Promise<unknown>;
+    sync(): Promise<unknown>;
+    close(): Promise<unknown>;
+  }>;
+  openDirectory: (path: string) => Promise<{
+    sync(): Promise<unknown>;
     close(): Promise<unknown>;
   }>;
   rename: (source: string, destination: string) => Promise<unknown>;
@@ -29,11 +35,21 @@ type ValidatedJsonArtifactWriterDependencies = Readonly<{
 }>;
 
 const defaultFileSystem: ValidatedJsonArtifactFileSystem = Object.freeze({
-  open: async (target, flags) => openFile(target, flags),
+  open: async (target, flags, mode) => openFile(target, flags, mode),
+  openDirectory: async (target) => openFile(target, constants.O_RDONLY),
   rename: async (source, destination) => renameFile(source, destination),
   rm: async (target, options) => removeFile(target, options),
 });
 
+function hasErrorCode(error: unknown, code: string): boolean {
+  return (
+    typeof error === "object" &&
+    error !== null &&
+    "code" in error &&
+    error.code === code
+  );
+}
+
 /**
  * Builds a writer whose only publish operation is an atomic sibling rename.
  * Dependency injection is limited to the file-system boundary so failure
@@ -60,12 +76,20 @@ export function createValidatedJsonArtifactWriter(
     );
     let ownsTemporaryFile = false;
     try {
-      const handle = await fileSystem.open(temporaryPath, "wx");
+      const handle = await fileSystem.open(
+        temporaryPath,
+        constants.O_WRONLY |
+          constants.O_CREAT |
+          constants.O_EXCL |
+          constants.O_NOFOLLOW,
+        0o600,
+      );
       ownsTemporaryFile = true;
       let writeFailed = false;
       let writeFailure: unknown;
       try {
         await handle.writeFile(`${serialized}\n`, "utf8");
+        await handle.sync();
       } catch (error) {
         writeFailed = true;
         writeFailure = error;
@@ -81,6 +105,21 @@ export function createValidatedJsonArtifactWriter(
       if (writeFailed) throw writeFailure;
       if (closeFailed) throw closeFailure;
       await fileSystem.rename(temporaryPath, input.path);
+      ownsTemporaryFile = false;
+      const directoryHandle = await fileSystem.openDirectory(
+        path.dirname(input.path),
+      );
+      try {
+        try {
+          await directoryHandle.sync();
+        } catch (error) {
+          if (!hasErrorCode(error, "EINVAL") && !hasErrorCode(error, "ENOTSUP")) {
+            throw error;
+          }
+        }
+      } finally {
+        await directoryHandle.close();
+      }
     } catch (error) {
       if (ownsTemporaryFile) {
         try {