offscale is a plugin

headscale leaves the platform. 45 files move to plugins/offscale/ and the
platform stops knowing it exists.

  api/router.ts   the thin auth-gated proxy, now at /api/offscale
  sidecar/        18 files, the whole headscale contract and its admin keys
  db/             schema + queries, offscale_servers
  web/            26 files as panels and a layout — no screen, per the rule

removed from the platform: the hono mount, the `headscale` capability, the
App.tsx route pair, the screen and its barrel, the AppRegistry spread, the
officerdev re-exports, the dock tile, the page-title rule, and both database
barrels. tsgo is clean and nothing references it.

the imports tell the story of what the plugin↔host API actually is. the sidecar
takes @@/sidecar/protocol, @@/sidecar/connect, @@/data-path and
@@/officer-url.mjs; the queries take officerdb/db and officerdb/crypto; the
schema takes officerdb/auth/schema for the one reference a plugin may make; the
web half takes useClient, copyToClipboard, WorkspaceView and TerminalView from
the officerdev barrel. all of it resolves because a plugin lives inside the repo
— no publishing, no version negotiation.

AND IT FOUND A REAL BUG IN THE INSTALLER. createSidecarProxy learns its port
from a one-shot `<name>:server` event and subscribes when the plugin's router is
first imported — at mount. install started the sidecar BEFORE mounting, so the
announcement fired into a void: process online, routes mounted, every request
answering `503 sidecar not available` until something forced a reconnect. it
would have hit every plugin with an http sidecar. `example` never caught it
because it has no listener to announce.

install and enable now mount before starting; disable still unmounts before
stopping. neither direction leaves a mounted route in front of a sidecar that
cannot be reached.

verified live: /api/offscale/_officer/servers answers {"servers":[]}, /offscale
and /offscale/nodes serve, the old /api/headscale is 404, the offscale
capability is registered from the manifest, and officer-offscale is online.

757 pass, same 10 pre-existing failures.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

src/servers/api/server-settings/smtp.ts

@@ -38,7 +38,9 @@ function buildTransportUrl(config: SmtpConfig): string {
   if (config.provider === 'mailhog') {
     return `smtp://${config.host ?? 'localhost'}:${config.port ?? 1025}`;
   }
-  const auth = config.username ? `${encodeURIComponent(config.username)}:${encodeURIComponent(config.password ?? '')}@` : '';
+  const auth = config.username
+    ? `${encodeURIComponent(config.username)}:${encodeURIComponent(config.password ?? '')}@`
+    : '';
   const protocol = config.secure ? 'smtps' : 'smtp';
   return `${protocol}://${auth}${config.host}:${config.port ?? 587}`;
 }
@@ -73,7 +75,7 @@ smtpRouter.post('/test-connection', async (ctx) => {
 
     if (result.type === 'resend') {
       const res = await fetch('https://api.resend.com/domains', {
-        headers: { 'Authorization': `Bearer ${result.apiKey}` },
+        headers: { Authorization: `Bearer ${result.apiKey}` },
       });
       if (!res.ok) {
         const err = await res.json();
@@ -103,14 +105,15 @@ smtpRouter.post('/test', async (ctx) => {
   }
 
   const from = `${body.fromName} <${body.fromEmail}>`;
-  const testHtml = '<h2>Officer Test Email</h2><p>If you received this, your email configuration is working correctly.</p>';
+  const testHtml =
+    '<h2>Officer Test Email</h2><p>If you received this, your email configuration is working correctly.</p>';
 
   try {
     if (body.provider === 'resend') {
       const res = await fetch('https://api.resend.com/emails', {
         method: 'POST',
         headers: {
-          'Authorization': `Bearer ${body.apiKey}`,
+          Authorization: `Bearer ${body.apiKey}`,
           'Content-Type': 'application/json',
         },
         body: JSON.stringify({ from, to: body.to, subject: 'officer.dev Test Email', html: testHtml }),