fix_next_cloud

src/interfaces/api/handlers/webdav_handler.rs

@@ -1208,7 +1208,10 @@ async fn handle_mkcol(
         }
         accumulated_path.push_str(segment);
 
-        match folder_service.get_folder_by_path(&accumulated_path, user.id).await {
+        match folder_service
+            .get_folder_by_path(&accumulated_path, user.id)
+            .await
+        {
             Ok(existing) => {
                 parent_id = Some(existing.id);
             }
@@ -1443,7 +1446,9 @@ async fn handle_move(
             let move_dto = crate::application::dtos::folder_dto::MoveFolderDto {
                 parent_id: if dest_parent_path.is_empty() {
                     None
-                } else if let Ok(parent) = folder_service.get_folder_by_path(dest_parent_path, user.id).await
+                } else if let Ok(parent) = folder_service
+                    .get_folder_by_path(dest_parent_path, user.id)
+                    .await
                 {
                     assert_owner(
                         parent.owner_id.as_deref(),
@@ -1644,7 +1649,10 @@ async fn handle_copy(
 
     let target_parent_id = if dest_parent_path.is_empty() {
         None
-    } else if let Ok(parent) = folder_service.get_folder_by_path(dest_parent_path, user.id).await {
+    } else if let Ok(parent) = folder_service
+        .get_folder_by_path(dest_parent_path, user.id)
+        .await
+    {
         assert_owner(
             parent.owner_id.as_deref(),
             &user.id.to_string(),

src/interfaces/nextcloud/basic_auth_middleware.rs

@@ -168,22 +168,31 @@ pub async fn basic_auth_middleware(
             };
 
             // ── Resolve chroot from the Basic Auth drive marker ─────
-            // No marker → user's home folder. With a marker →
+            // No marker → caller's default personal drive's root folder
+            // (post-D0 every internal user has one — provisioned by the
+            // lifecycle hook via the atomic four-write transaction in
+            // §3 of docs/plan/drive.md). With a marker →
             // `get_folder_with_perms` enforces per-folder access (404
             // anti-enumeration on miss / no-read). Today this is the
             // sole chroot source; tomorrow it'll come from the
             // app-password row instead.
+            //
+            // Pre-D0 this lookup name-matched `"My Folder - <username>"`
+            // against the user's root folders; that broke after the
+            // wrapper was renamed to `"Personal"` and shared across all
+            // users — name-matching was the wrong axis. The drive lookup
+            // is the right one: name-independent, secondary-drive-safe.
             use crate::application::ports::folder_ports::FolderUseCase;
+            use crate::domain::repositories::drive_repository::DriveRepository;
             let chroot = match drive_marker.as_deref() {
                 None => {
-                    let expected = format!("My Folder - {}", current_user.username);
-                    match state
-                        .applications
-                        .folder_service
-                        .list_folders_with_perms(None, current_user.id)
-                        .await
-                    {
-                        Ok(folders) => folders.into_iter().find(|f| f.name == expected),
+                    match state.drive_repo.find_default_for_user(current_user.id).await {
+                        Ok(drive_with_name) => state
+                            .applications
+                            .folder_service
+                            .get_folder(&drive_with_name.drive.root_folder_id.to_string())
+                            .await
+                            .ok(),
                         Err(_) => None,
                     }
                 }