Release 2.1.87 (2026-06-29)

Features

• re-allow issue close for the USER agent (#1967) Closing is now automated (vrg-finalize-pr closes tasks, rollup closes epics) and documented as mechanical, so the original ambiguity that led agents to close issues prematurely is resolved. A manual USER close is now safe and is the one genuinely useful case (repo migration via /vergil:migrate-repo).

Remove issue close from the agent deny list so it falls through to the USER allowlist. AUDIT stays barred from closing because issue is not in its allowlist at all (least privilege). issue reopen stays denied for agents — the lib path covers reopen-on-late-child.