From e94f11b19785dd063eda124293b4bfe13e1eaaf9 Mon Sep 17 00:00:00 2001
From: Minh Nguyen Cong <mcong@box.com>
Date: Wed, 3 Jun 2026 12:49:03 +0200
Subject: [PATCH] feat: check access for keytar write operation

---
 src/secure-storage.js | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/src/secure-storage.js b/src/secure-storage.js
index a4e942bd..c3042a07 100644
--- a/src/secure-storage.js
+++ b/src/secure-storage.js
@@ -41,6 +41,19 @@ function ensureKeytarBinary() {
 			return;
 		}
 
+		const writableDir = fs.existsSync(releaseDir)
+			? releaseDir
+			: keytarDir;
+		try {
+			fs.accessSync(writableDir, fs.constants.W_OK);
+		} catch {
+			DEBUG.init(
+				'No write permission on %s, skipping keytar binary copy',
+				writableDir
+			);
+			return;
+		}
+
 		fs.mkdirSync(releaseDir, { recursive: true });
 		fs.copyFileSync(sourceBinary, targetBinary);
 		DEBUG.init(