fix(node): plug an auto-ejected removable root back once its files return

A node started with the desktop session runs before the session has mounted
its USB drives. The safety net then auto-ejected every removable root and
persisted it exactly like an operator's eject, so after each reboot those
roots stayed ejected until someone plugged them by hand (seen on a node whose
/media drives were mounted a minute after it started).

An auto-eject is now stored as such ("auto" in roster.db). At startup and at
every reconcile, an auto-ejected root whose path is readable again is checked
against a few files the hash cache knows under it, at the same path with the
same size and mtime; one found and the root is plugged back and rescanned.
An empty mount point or another drive in its place is not recognised and
stays ejected. An operator's eject is never undone automatically.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 4 insertions, 1 deletions

diff --git a/packages/meshbay-node/src/meshbay_node/daemon.py b/packages/meshbay-node/src/meshbay_node/daemon.py
index 1777bc3..d6293ee 100644
--- a/packages/meshbay-node/src/meshbay_node/daemon.py
+++ b/packages/meshbay-node/src/meshbay_node/daemon.py
@@ -1259,11 +1259,13 @@ class NodeDaemon(EnrichmentMixin):
         specs = [asdict(r) for r in group_cfg.roots]
         if self._roster:
             ejected = await self._roster.ejected_roots(group_cfg.id)
+            auto = await self._roster.auto_ejected_roots(group_cfg.id)
             if ejected:
                 for spec in specs:
                     name = spec.get("name") or Path(spec.get("path", "")).name
                     if fold(name) in ejected:
                         spec["ejected"] = True
+                        spec["ejected_auto"] = fold(name) in auto
         return RootSet.build(specs)
 
     # Every application that keeps directories. This is the one list, and it
@@ -1305,9 +1307,10 @@ class NodeDaemon(EnrichmentMixin):
         """`on_root_ejected` bound to one group, for that group's indexer."""
         async def persist(root_name: str, ejected: bool) -> None:
             if self._roster:
+                # The indexer only reports the safety net's own changes.
                 await self._roster.set_root_ejected(
                     group_id, root_name, ejected,
-                    set_by=self._state.get("node_user_id", ""))
+                    set_by=self._state.get("node_user_id", ""), auto=ejected)
         return persist
 
     async def _on_index_change(self, indexer: DirectoryIndexer) -> None: