А ну и напоследок - у кодекса появилось оказывается ДОХУИЩЕ флажков которыми мож

apps.<id>.destructive_enabled: allow destructive tools for one app.

apps.<id>.open_world_enabled: allow open-world tools for one app.

apps.<id>.default_tools_enabled: default tool enablement for one app.

apps.<id>.default_tools_approval_mode: default approval mode for one app’s tools.

apps.<id>.tools.<tool>.enabled: enable/disable one specific app tool.

apps.<id>.tools.<tool>.approval_mode: set approval behavior for one app tool.

mcp_servers.<id>.env: env vars passed to an MCP stdio server.

mcp_servers.<id>.env_vars: whitelist extra inherited env vars for an MCP server.

mcp_servers.<id>.cwd: working directory for an MCP stdio server.
mcp_servers.<id>.http_headers: static headers for MCP HTTP servers.

mcp_servers.<id>.env_http_headers: headers sourced from env vars.

mcp_servers.<id>.enabled: disable a configured MCP server without deleting it.

mcp_servers.<id>.required: fail startup/resume if that server is unavailable.

mcp_servers.<id>.startup_timeout_ms: millisecond alias of startup timeout.

mcp_servers.<id>.tool_timeout_sec: per-tool MCP timeout.

mcp_servers.<id>.enabled_tools: allowlist exposed MCP tools.

mcp_servers.<id>.disabled_tools: denylist exposed MCP tools.