From 8469e55fd59213ff2813e9496ee6bed6a455b34b Mon Sep 17 00:00:00 2001
From: "github-actions[bot]"
 <41898282+github-actions[bot]@users.noreply.github.com>
Date: Thu, 21 May 2026 09:51:00 +0000
Subject: [PATCH] [instructions] Sync safe-outputs.md with current schema

- Update add-reviewer to use canonical allowed-reviewers /
  allowed-team-reviewers (reviewers / team-reviewers are deprecated
  aliases per schema since #33350).
- Document per-output max-patch-size / max-patch-files on
  create-pull-request and max-patch-size on push-to-pull-request-branch
  (added in #33650).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 .github/aw/safe-outputs.md | 15 +++++++++------
 1 file changed, 9 insertions(+), 6 deletions(-)

diff --git a/.github/aw/safe-outputs.md b/.github/aw/safe-outputs.md
index 778404d4bf8..06c8a62a3b6 100644
--- a/.github/aw/safe-outputs.md
+++ b/.github/aw/safe-outputs.md
@@ -175,6 +175,8 @@ Safe outputs are the primary mechanism for write operations in agentic workflows
       allowed-base-branches:          # Optional: glob patterns for allowed base branch overrides per run
         - "release/*"
         - "main"
+      max-patch-size: 2048            # Optional: per-output cap on git patch size in KB (overrides global; default: 1024 KB, max: 10240)
+      max-patch-files: 50             # Optional: per-output cap on unique files in the patch (overrides global; default: 100)
   ```
 
   **Dynamic Base Branch**: When `allowed-base-branches` is set, the agent can provide a `base` field in its output to override the default base branch for a single run — but only if the value matches one of the configured glob patterns. Without `allowed-base-branches`, only the static `base-branch:` is used. Accepts a literal array or a GitHub Actions expression resolving to a comma-separated list (e.g. `${{ inputs.allowed-base-branches }}`).
@@ -337,14 +339,14 @@ Safe outputs are the primary mechanism for write operations in agentic workflows
   ```yaml
   safe-outputs:
     add-reviewer:
-      reviewers: [user1, copilot]     # Optional: restrict to specific reviewers
-      team-reviewers: [platform-team] # Optional: allowed team slugs
-      max: 3                          # Optional: max reviewers (default: 3)
-      target: "*"                     # Optional: "triggering" (default), "*", or number
-      target-repo: "owner/repo"       # Optional: cross-repository
+      allowed-reviewers: [user1, copilot]     # Optional: restrict to specific reviewer usernames (any allowed if omitted)
+      allowed-team-reviewers: [platform-team] # Optional: restrict to specific team slugs (any allowed if omitted)
+      max: 3                                  # Optional: max reviewers (default: 3)
+      target: "*"                             # Optional: "triggering" (default), "*", or number
+      target-repo: "owner/repo"               # Optional: cross-repository
   ```
 
-  At least one of `reviewers` or `team-reviewers` must be present in agent output. Use `reviewers: copilot` to assign Copilot PR reviewer bot. Requires PAT as `COPILOT_GITHUB_TOKEN`.
+  At least one reviewer or team reviewer must be present in agent output. Use `allowed-reviewers: [copilot]` to assign Copilot PR reviewer bot. Requires PAT as `COPILOT_GITHUB_TOKEN`. The legacy `reviewers` / `team-reviewers` field names are deprecated aliases.
 - `assign-milestone:` - Assign issues to milestones
 
   ```yaml
@@ -496,6 +498,7 @@ Safe outputs are the primary mechanism for write operations in agentic workflows
       excluded-files:                 # Optional: glob patterns to strip from the patch entirely
         - "**/*.lock"
       protected-files: blocked        # Optional: "blocked" (default), "fallback-to-issue", or "allowed"
+      max-patch-size: 2048            # Optional: per-output cap on git patch size in KB (overrides global; default: 1024 KB, max: 10240)
   ```
 
   Not supported for cross-repository operations. To trigger CI on pushed commits, use `github-token-for-extra-empty-commit` or set the magic secret `GH_AW_CI_TRIGGER_TOKEN`.