@lifeaitools/clauth 1.30.12 → 1.30.13

package/cli/supervisor-registry.js

@@ -140,6 +140,10 @@ export function validatePluginManifest(manifest, sourcePath = "") {
     id,
     version,
     publisher: String(manifest.publisher || "unknown"),
+    // Only trusted managed manifests may opt into automatic startup. User
+    // plugins remain awaiting_enable until an operator explicitly enables them.
+    core: manifest.core === true,
+    enable_default: manifest.enable_default === true,
     sourcePath,
     destination: normalizeDestination(manifest.destination),
     lifecycle_owner: normalizeLifecycleOwner(manifest.lifecycle_owner),
@@ -226,15 +230,17 @@ export function discoverPlugins() {
           throw new Error("user plugin cannot silently shadow a managed plugin id");
         }
         const prior = byId.get(manifest.id);
-        const state = prior?.enabled ? (prior.manifest_hash === hash ? "current" : "version_drift") : "awaiting_enable";
-        const plugin = { ...manifest, source, discovery_root: root, manifest_hash: hash, state, enabled: Boolean(prior?.enabled), discovered_at: now() };
+        const autoEnabled = source === "managed" && manifest.core === true && manifest.enable_default === true;
+        const enabled = Boolean(prior?.enabled || autoEnabled);
+        const state = enabled ? (prior?.manifest_hash === hash || autoEnabled ? "current" : "version_drift") : "awaiting_enable";
+        const plugin = { ...manifest, source, discovery_root: root, manifest_hash: hash, state, enabled, discovered_at: now() };
         plugins.push(plugin);
         for (const surface of plugin.surfaces) surfaces.push({ ...surface, enabled: plugin.enabled, state });
         for (const credential of plugin.credentials) {
           events.push({ kind: "credential_required", plugin_id: plugin.id, credential, value_set: false });
         }
         seen.add(plugin.id);
-        events.push({ kind: "plugin_discovered", plugin_id: plugin.id, state, source, manifest_hash: hash });
+        events.push({ kind: autoEnabled && !prior?.enabled ? "core_plugin_auto_enabled" : "plugin_discovered", plugin_id: plugin.id, state, source, manifest_hash: hash });
       } catch (error) {
         const id = path.basename(path.dirname(manifestPath));
         plugins.push({

package/cli/supervisor-registry.test.js

@@ -109,6 +109,24 @@ test("discovery merges managed and user roots without silent managed-id shadowin
   assert.match(invalid.error, /shadow/);
 }));
 
+test("trusted managed core plugins auto-enable while user plugins remain opt-in", () => withTempSupervisor((root) => {
+  const managed = path.join(root, "managed");
+  const user = path.join(root, "user");
+  process.env.CLAUTH_MANAGED_PLUGIN_ROOTS = managed;
+  process.env.CLAUTH_USER_PLUGIN_ROOTS = user;
+  writePlugin(root, "managed", "core-mcp", baseManifest("core-mcp", { core: true, enable_default: true }));
+  writePlugin(root, "user", "user-mcp", baseManifest("user-mcp", { core: true, enable_default: true }));
+
+  const result = discoverPlugins();
+  const core = result.plugins.find((plugin) => plugin.id === "core-mcp");
+  const userPlugin = result.plugins.find((plugin) => plugin.id === "user-mcp");
+  assert.equal(core.enabled, true);
+  assert.equal(core.state, "current");
+  assert.equal(result.events.some((event) => event.kind === "core_plugin_auto_enabled" && event.plugin_id === "core-mcp"), true);
+  assert.equal(userPlugin.enabled, false);
+  assert.equal(userPlugin.state, "awaiting_enable");
+}));
+
 test("plugin test marks a private candidate and never creates a public route", () => withTempSupervisor((root) => {
   const managed = path.join(root, "managed");
   process.env.CLAUTH_MANAGED_PLUGIN_ROOTS = managed;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lifeaitools/clauth",
-  "version": "1.30.12",
+  "version": "1.30.13",
   "description": "Hardware-bound credential vault for the LIFEAI infrastructure stack",
   "type": "module",
   "bin": {