the radicale config stops claiming caldav is single-user

the setting was right and the sentence beside it was not, which is the worse of
the two: anyone reading this config would conclude caldav is single-user and
either build around a limit that is not there or "fix" a line that was never
broken. it had been false since multi-user landed on 2026-08-07.

owner_only is what makes it per-user, together with the sync door resolving an
app password to one account and sending that id as X-Remote-User. verified on
alpha: collections/collection-root/1/{personal,contacts,tasks}.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Officer-Session: 656f5c85-e49a-4f1f-b9f3-042a04b4d043

sidecar/radicale.ts

@@ -92,7 +92,17 @@ type = multifilesystem
 filesystem_folder = ${storagePath}
 
 [rights]
-# The owner is the only principal that exists; single-user is a platform invariant.
+# Every account is its own principal, and owns only its own collections.
+#
+# This said "the owner is the only principal that exists; single-user is a platform invariant" until
+# 2026-08-27, which had been false since multi-user landed on 2026-08-07 — the SETTING was right the whole
+# time and the sentence explaining it was not, which is the worse of the two failures: anyone reading this
+# config would conclude caldav is single-user and either build around a limit that is not there or
+# "fix" a line that was never broken.
+#
+# What makes it per-user is upstream: the sync door resolves an app password to one account and sends that
+# account's id as X-Remote-User, so `owner_only` scopes each principal to its own tree under
+# `collections/collection-root/<id>/`.
 type = owner_only
 
 [logging]