plugins:update
Update a locked plugin from a local file or signed index.
Syntax#
vigil --allow-mutation plugins:update (--file PATH|--index SOURCE --id ID --version VERSION) [--approve CAPABILITY ...|--approve-all]
Options#
| Flag | Description |
|---|
--json | Emit the versioned JSON envelope. |
--file | Choose a local plugin executable. |
--index | Choose a signed index path or HTTPS URL. |
--id | Require an exact plugin id. |
--version | Require an exact semantic version. |
--digest | Require an exact SHA-256 executable digest. |
--approve | Approve one declared capability. |
--approve-all | Approve every declared capability. |
--restore-trust | Remove a matching local digest revocation. |
--stream | Stream phase status as text or JSONL. |
--verbose | Stream additional phase details. |
Examples#
vigil --allow-mutation plugins:update --file ./vigil-plugin-example --approve-all
Example Use Cases#
- Use this command when you need to update a locked plugin from a local file or signed index.
- Preview or review the operation before allowing repository changes.
Technical Contract#
| Binding | builtin:plugins:update |
|---|
| Stability | stable |
|---|
| Timeout | 2m0s |
|---|
| Required tools | None |
|---|
| Capabilities | filesystem:read, filesystem:write, network, process |
|---|
| Output formats | text, json |
|---|