[rrvsh]

Summary

• add a generic account catalogue that derives each Google Drive remote, service, runtime config, cache, state directory, and mount point
• declare rafiq@file.ai as the initial account for Kikir, Alpha, Nemesis, and Mercury
• mount with NFS on macOS and FUSE on Linux while keeping OAuth state writable, host-local, and outside Nix, Git, SOPS, and Syncthing
• use rclone’s built-in Google OAuth client, with declarative local-browser versus headless authorization behavior
• add generic gdrive commands for authorization, lifecycle, status, reauthentication, and bounded logs
• stream reads directly, use a bounded write cache, and leave unmounted directories non-writable

Validation

• nix develop -c just check-nix
• nix develop -c just test-nix
• built the Kikir Home Manager activation package
• evaluated the Kikir and Mercury account and browser-auth settings
• verified the generated generic helper lists FileAI, reports unauthenticated state, and rejects unknown accounts
• verified the generic module contains no FileAI account or Mercury host literals

Live Google authorization and mounted read/write testing remain pending.