[docs] Update documentation for features merged April 15, 2026

[github-actions]

Documentation Updates — April 15, 2026

This PR updates the documentation based on features merged in the last 24 hours.

Features Documented

• --approve flag for compile, run, and upgrade commands (from fix: rename --approve-updates to --approve and skip safe update enforcement on first compile #26350)
• protected-files: { policy, exclude } object form for create-pull-request and push-to-pull-request-branch (from feat: add protected-files: { exclude: [...] } to override the default protected-file set #26339)

📝 Detailed Changes & References

Changes Made

• Updated docs/src/content/docs/setup/cli.md:

  • Added --approve to the options list for compile, run, and upgrade commands
  • Added a description of safe update mode enforcement and when --approve is needed (subsequent compiles with manifest changes vs. first-compile no-op)

• Updated docs/src/content/docs/reference/safe-outputs-pull-requests.md:

  • Added documentation for the new protected-files object form ({ policy: ..., exclude: [...] })
  • Explains how to exempt specific files (e.g., AGENTS.md, .agents/) from the default protected set without disabling all protection via allowed

Merged PRs Referenced

• fix: rename --approve-updates to --approve and skip safe update enforcement on first compile #26350 — fix: rename --approve-updates to --approve and skip safe update enforcement on first compile
• feat: add protected-files: { exclude: [...] } to override the default protected-file set #26339 — feat: add protected-files: { exclude: [...] } to override the default protected-file set

Skipped Issues

• Provider-based authentication for Claude, Copilot, Codex. #16498 — COPILOT_PROVIDER_* BYOK vars: requires understanding of Copilot CLI 1.0.19 internals not present in a recent code change; deferring to a focused follow-up.
• Meet the workflows points to specific versions, need to keep these up to date #20391 — Stale v0.45.5 version links in blog posts: requires automation or bulk update across 18 files; out of scope for this daily run.
• Add WorkQueueOps and BatchOps doc pages under design patterns #22001 — WorkQueueOps/BatchOps: daily reports indicate the docs already exist (patterns/workqueue-ops.md, patterns/batch-ops.md); issue can be closed separately.

Notes

The following merged PRs from the last 24 hours were reviewed but did not require doc updates:

• fix: propagate context through all CLI subprocess calls for Ctrl-C cancellation #26372 — Ctrl-C cancellation fix (internal implementation only)
• [jsweep] Clean add_reviewer.cjs #26371 — Type annotation cleanup (internal)
• Make safe-outputs-pull-requests the primary reference for all PR-safe outputs #26366 — Docs consolidation (already applied in a previous PR)
• [docs] Reduce redundancy in playwright.md reference doc #26360 — Playwright.md redundancy reduction (already applied)
• fix: preserve uses version comments and ordered step fields in injectProxyEnvIntoCustomSteps #26357 — DIFC proxy YAML round-trip fix (internal)
• refactor: use git cat-file blob instead of git show in readBlobAsBase64 #26349 — git cat-file refactor (internal)
• Add shared/reporting.md import to non-compliant reporting workflows #26342 — Shared reporting import fix (internal)
• fix: use .mcp.json instead of .vscode/mcp.json for Copilot CLI compatibility #26340 — .mcp.json path fix (already documented correctly)
• fix: resolve permission-discussions unexpected input warning from actions/create-github-app-token #26337 — permission-discussions warning fix (internal)
• fix: guard activation .github checkout against cross-repo GITHUB_TOKEN failure on workflow_call #26336 — Activation checkout guard (internal)
• fix: make release immutable by removing post-creation artifact uploads #26332 — Release immutability fix (internal)
• docs(console): document 21 undocumented exported functions; fix StripANSI reference in AGENTS.md #26330 — Console package docs (code-level, not user-facing workflow docs)
• fix: tools.github: false does not override tools.github.* from shared imports #26323 — tools.github: false override fix (internal)
• feat: DIFC proxy uses step-scoped env instead of mutating GITHUB_ENV #26322 — DIFC proxy step-scoped env (internal)
• feat: add Time Between Turns (TBT) to audit/logs command and glossary #26321 — Time Between Turns metric (already documented in audit reference)
• fix: normalize periods in dispatch-workflow MCP tool names to prevent CAPIError 400 #26324 — MCP tool name normalization (internal)

Generated by Daily Documentation Updater · ● 448.4K · ◷

• expires on Apr 16, 2026, 10:59 AM UTC