[ChakraFusion]

A save folder this device may not write to (one under Program Files, for a program not run as administrator) fails every pull into it with "access denied". Every pass from every peer tried again, and each logged the same raw error ("sync … failed: patch save.dat: create temp file: … Access is denied"), saying nothing about what to do.

The change (syncengine/unwritable.go):

• When a pull fails with a permission error, it is said once, plainly: OpenSave may not write to that folder; give it write access or track the game at another folder; trying again in 30 minutes.
• Pulls into that save then wait 30 minutes before trying again. This is held in memory, so a restart (perhaps with new rights) tries at once.
• The peer's result is unwritable, which, like a conflict, does not advance the last-synced stamp.

Test: TestUnwritable_SaidOnceAndNotRetriedEveryPass. On Windows it denies writes on its own temp folder with icacls, which is how a folder under Program Files behaves; elsewhere it uses chmod. Over three passes, the message appears once. Once the wait is over and the rights are back, the next pass takes the peer's save. On dev-public the same setup logged the raw error on every pass.

Checks: the full unit and e2e suites pass locally on today's dev-public.

🤖 Generated with Claude Code

[vercel]

@ChakraFusion is attempting to deploy a commit to the sivadaboi's projects Team on Vercel.

A member of the Team first needs to authorize it.

[Omar-VF]

Thanks, saying this once with what to do is much better than the raw error on every pass. One concern: on Windows, renaming over a file that a running game holds open also fails with "Access is denied" (it surfaces as fs.ErrPermission after replaceWithRetry gives up). A save the game simply has open would then get "OpenSave may not write to its save folder" and a 30-minute wait. Could noteUnwritable confirm the folder itself refuses writes first, for example by creating and removing a small probe file in it, and only then declare it unwritable? If the probe works, it's a file in use, and the ordinary retry applies.