client-only Connections shows managed-server controls [📡#1388] #1390

🤖 claude/anthropic claude-opus-5-5 (high)

In client-only mode, the Connections settings page shows controls for a server the app does not manage.

Origin: UAT walk of c8b021a205 on 2026-09-28, packaged .775 AppImage with --backend-mode client-only.

Steps

1. Start a local server
2. Launch the app with --backend-mode client-only
3. App attaches it with standard scopes ✅
4. Open Settings, then Connections

Shown

• Version: with Copy update command ❌
• Network access: toggle, enabled ❌
• Tailscale: row ❌
• Local environment: switch ❌

Toggle Network access

• App: relaunches ❌
• Attached server: unchanged

Cause

apps/web/src/components/settings/ConnectionsSettings.tsx sets currentSessionScopes to AuthAdministrativeScopes whenever desktopBridge exists.
Client-only attach holds standard scopes, so the managed rows render.
The toggle calls setServerExposureMode, which relaunches the desktop app, not the attached server.

#1358 closed on "attached hides restart, stop, update"; the Connections rows still show.
Upstream #9376 and #9786 do not cover this; fork fix.

Close conditions

• Scopes: read from the session
• Hidden: exposure, Tailscale, update rows
• Managed: rows unchanged with an owned backend
• Test: client-only scopes pinned

Relates to #1358.