feat: rebuild desktop sync as linked server accounts, fix packaged plugin bundles and UI scaling

src/backend/database/routes/plugins.ts

@@ -306,6 +306,14 @@ router.get("/", authenticateJWT, async (req: Request, res: Response) => {
   }
 });
 
+async function isManagedByLinkedServer(pluginId: string): Promise<boolean> {
+  if (process.env.ELECTRON_EMBEDDED !== "true") return false;
+  const { getLink } = await import("../../sync/client/link-store.js");
+  if (!(await getLink())) return false;
+  const { isServerManaged } = await import("../../sync/client/plugins.js");
+  return isServerManaged(pluginId);
+}
+
 /**
  * @openapi
  * /plugins/{id}/state:
@@ -338,6 +346,8 @@ router.get("/", authenticateJWT, async (req: Request, res: Response) => {
  *         description: The caller lacks admin.plugins.manage.
  *       404:
  *         description: No such plugin.
+ *       409:
+ *         description: This desktop is linked to a server, which decides whether the plugin runs.
  */
 router.patch(
   "/:id/state",
@@ -360,6 +370,15 @@ router.patch(
         return;
       }
 
+      // A linked desktop runs what its server runs.
+      if (await isManagedByLinkedServer(pluginId)) {
+        res.status(409).json({
+          error: "Managed by the linked server",
+          code: "MANAGED_BY_SERVER",
+        });
+        return;
+      }
+
       // Persist first: if the start or stop below throws, the recorded
       // intent still matches what the user asked for, and the next boot
       // acts on it rather than silently reverting.