fix: close combat ghost, admin traversal, login throttle, journal double-pay, and quality/economy gaps

1 files changed, 7 insertions, 1 deletions

diff --git a/internal/player/store.go b/internal/player/store.go
index 0b0e70e..5d69ec3 100644
--- a/internal/player/store.go
+++ b/internal/player/store.go
@@ -52,7 +52,13 @@ func writePrivate(path string, data []byte) error {
 	if err := persistence.WriteFile(path, data, 0600); err != nil {
 		return err
 	}
-	return os.Chmod(path, 0600)
+	// The file was already renamed into place; a chmod failure is a
+	// post-replacement durability-uncertain condition, not "nothing
+	// happened".
+	if err := os.Chmod(path, 0600); err != nil {
+		return fmt.Errorf("%w: chmod: %v", persistence.ErrDurabilityUncertain, err)
+	}
+	return nil
 }
 
 // MarshalAccount serializes an account; callers that own the account (the