From 266084f4c8eeefee1f8dec6e34879b5d39a1eae1 Mon Sep 17 00:00:00 2001
From: Vincent Koc <vincentkoc@ieee.org>
Date: Sun, 1 Mar 2026 12:55:05 -0800
Subject: [PATCH] CLI routes: preload plugins for status security parity

---
 src/cli/program/routes.ts | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/cli/program/routes.ts b/src/cli/program/routes.ts
index 856b565564c..3ab0da290b4 100644
--- a/src/cli/program/routes.ts
+++ b/src/cli/program/routes.ts
@@ -24,8 +24,9 @@ const routeHealth: RouteSpec = {
 
 const routeStatus: RouteSpec = {
   match: (path) => path[0] === "status",
-  // JSON mode omits the human-readable channel table, so skip expensive plugin preloading.
-  loadPlugins: (argv) => !hasFlag(argv, "--json"),
+  // Status runs security audit with channel checks in both text and JSON output,
+  // so plugin registry must be ready for consistent findings.
+  loadPlugins: true,
   run: async (argv) => {
     const json = hasFlag(argv, "--json");
     const deep = hasFlag(argv, "--deep");