Skip to content

Release 2.1.3 (2026-06-04)

Documentation

  • port Vergil 2.1 workflow & architecture design (§§1–10) Port the workflow/architecture half of the Vergil 2.1 design from vergil-claude-plugin#427 into its canonical home here, bringing the eight self-contained HTML figures. Covers the multi-role identity model, the implement<->audit local handshake over .vergil/, the mechanized await tools, the audit feedback model, the post-PR loop, and the Route B merge gate. The plugin spec retains the skill dispositions; this is the tooling/architecture canonical copy. Ref #1376

Features

  • add vrg-await blocking file waiter + atomic channel writer The keystone of the .vergil/ implement<->audit handshake (§6). vrg-await [--since ] blocks until the path appears, or (with --since) until its SHA-256 differs, then prints the current digest to thread back on the next round. Change detection is checksum-authoritative: the digest is recomputed each poll rather than gated on flaky mtime. await_file.atomic_write writes via temp file + os.replace so a reader never observes a half-written file; pr_template.write_template now uses it. Ref #1376

  • add pr_checks, pr_reviews, post_check_run helpers GitHub API helpers for the post-PR loop and merge gate. pr_checks reads each check's name/bucket/state, tolerating gh's non-zero exit while pending/failing and treating 'no checks reported' as a valid empty result. pr_reviews returns the PR's reviews. post_check_run posts a completed App check-run bound to a head SHA — the mechanism behind the vergil-audit/approved merge gate (§10). Ref #1376

  • add vrg-pr-await settle-predicate waiter The post-PR counterpart to vrg-await (§9). With no webhook ingress on a laptop, it polls the GitHub API and blocks until the PR settles: all checks reach a terminal conclusion, OR the head SHA moves (new commit), OR a new review appears. --since-sha/--since-reviews baselines let the caller detect a fresh commit/review even when checks are already terminal. The settle decision is deterministic code; the agent acts only on the returned JSON state. Ref #1376

  • emit pr-watch one-liner and add vergil-audit/approved poster Close the loop across the agent/human boundary. vrg-submit-pr now prints '/vergil:pr-watch ' on success (§9), the line the human pastes into both agent sessions to start the post-PR loop. vrg-audit-approve posts the vergil-audit/approved check-run that gates merges (§10); it refuses to run under the USER identity (forging the gate), defense-in-depth behind the credential and the integration_id pin. Registers vrg-await, vrg-pr-await, and vrg-audit-approve as console scripts. Ref #1376