feat(drive): personal drives have the user's quota in commun

src/interfaces/api/handlers/admin_handler.rs

@@ -2072,15 +2072,21 @@ pub async fn internal_trigger_sweep(
                 .into_response();
         }
     };
-    if let Err(e) = svc.update_all_users_storage_usage().await {
-        return AppError::internal_error(format!("user sweep failed: {e}")).into_response();
-    }
+    // Order matches the periodic ticker (`start_reconciliation_job`):
+    // drive sweep first because the user sweep reads `drives.used_bytes`
+    // (sum-of-personal-drives — `docs/plan/drive.md` §7). Running them
+    // in the other order makes the user counter freeze on the previous
+    // tick's drive numbers — invisible in steady state but breaks any
+    // Hurl that trashes + sweeps within one call.
     if let Err(e) = svc.update_all_drives_storage_usage().await {
         return AppError::internal_error(format!("drive sweep failed: {e}")).into_response();
     }
+    if let Err(e) = svc.update_all_users_storage_usage().await {
+        return AppError::internal_error(format!("user sweep failed: {e}")).into_response();
+    }
     (
         StatusCode::OK,
-        Json(serde_json::json!({ "ok": true, "ran": ["users", "drives"] })),
+        Json(serde_json::json!({ "ok": true, "ran": ["drives", "users"] })),
     )
         .into_response()
 }

src/interfaces/api/handlers/auth_handler.rs

@@ -471,11 +471,16 @@ pub async fn get_current_user(
 
     // Storage usage is served from the cached `storage_used_bytes` column —
     // it is NOT recomputed here. Recomputing on this hot endpoint meant an
-    // O(N) `SUM(size)` over all the user's files plus an `UPDATE` of
-    // `auth.users` on every single call (one of the most frequent endpoints).
-    // The cached value is kept current by the per-upload update and a periodic
-    // background reconciliation sweep
+    // O(N) `SUM(size)` plus an `UPDATE` of `auth.users` on every single call
+    // (one of the most frequent endpoints). The cached value is kept current
+    // by the per-upload update and a periodic background reconciliation sweep
     // (see `StorageUsageService::start_reconciliation_job`).
+    //
+    // Semantics (`docs/plan/drive.md` §7): `storage_used_bytes` is the SUM
+    // of `used_bytes` across the user's personal drives only. Shared drives
+    // never count against this envelope — collaborating in a team drive
+    // costs no personal bytes. The matching cap is
+    // `storage_quota_bytes` (admin-only mutation).
     let user = auth_service
         .auth_application_service
         .get_user_by_id(user_id)