А ну и напоследок - у кодекса появилось оказывается ДОХУИЩЕ флажков которыми мож

tools.web_search: per-tool search config; object form supports context_size, allowed_domains, and location.

tools.view_image: enable/disable the local image-viewing tool.

apps._default.enabled: default app/connector enablement.

apps._default.destructive_enabled: default permission for destructive app tools.

apps._default.open_world_enabled: default permission for open-world app tools.

apps.<id>.enabled: enable/disable a specific app.

apps.<id>.destructive_enabled: allow destructive tools for one app.

apps.<id>.open_world_enabled: allow open-world tools for one app.

apps.<id>.default_tools_enabled: default tool enablement for one app.

apps.<id>.default_tools_approval_mode: default approval mode for one app’s tools.

apps.<id>.tools.<tool>.enabled: enable/disable one specific app tool.

apps.<id>.tools.<tool>.approval_mode: set approval behavior for one app tool.

mcp_servers.<id>.env: env vars passed to an MCP stdio server.

mcp_servers.<id>.env_vars: whitelist extra inherited env vars for an MCP server.

mcp_servers.<id>.cwd: working directory for an MCP stdio server.
mcp_servers.<id>.http_headers: static headers for MCP HTTP servers.