fix(node): plug an auto-ejected removable root back once its files return

A node started with the desktop session runs before the session has mounted
its USB drives. The safety net then auto-ejected every removable root and
persisted it exactly like an operator's eject, so after each reboot those
roots stayed ejected until someone plugged them by hand (seen on a node whose
/media drives were mounted a minute after it started).

An auto-eject is now stored as such ("auto" in roster.db). At startup and at
every reconcile, an auto-ejected root whose path is readable again is checked
against a few files the hash cache knows under it, at the same path with the
same size and mtime; one found and the root is plugged back and rescanned.
An empty mount point or another drive in its place is not recognised and
stays ejected. An operator's eject is never undone automatically.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 6 insertions, 0 deletions

diff --git a/packages/meshbay-node/src/meshbay_node/roots.py b/packages/meshbay-node/src/meshbay_node/roots.py
index 2de0708..2b48292 100644
--- a/packages/meshbay-node/src/meshbay_node/roots.py
+++ b/packages/meshbay-node/src/meshbay_node/roots.py
@@ -178,6 +178,10 @@ class Root:
     writable: bool = False
     removable: bool = False
     ejected: bool = False
+    # Ejected by the safety net in `refresh_availability`, not by the operator:
+    # such a root comes back on its own once its files are there again
+    # (`DirectoryIndexer._reconcile`). An operator's eject never does.
+    auto: bool = False
     available: bool = True
 
     @property
@@ -323,6 +327,7 @@ class RootSet:
                         writable=writable,
                         removable=bool(spec.get("removable", False)),
                         ejected=bool(spec.get("ejected", False)),
+                        auto=bool(spec.get("ejected_auto", False)),
                         available=not bool(spec.get("ejected", False)))
             _refuse_nesting(root, roots)
             roots.append(root)
@@ -441,6 +446,7 @@ class RootSet:
             live = root.is_live()
             if not live and root.removable:
                 root.ejected = True
+                root.auto = True
                 # Recorded for the caller to persist. A flag that only lives
                 # in memory would be forgotten on the next restart, and the
                 # rescan that followed would read an empty mount point as an