А ну и напоследок - у кодекса появилось оказывается ДОХУИЩЕ флажков которыми мож

permissions.<name>.filesystem.<path>: read/write/none for a specific path.

permissions.<name>.filesystem.":project_roots".<subpath>: scoped access relative to project roots.

permissions.<name>.network.enabled: enable network in that profile.

permissions.<name>.network.mode: limited | full.

permissions.<name>.network.proxy_url: HTTP proxy.

permissions.<name>.network.socks_url: SOCKS proxy.

permissions.<name>.network.enable_socks5: expose SOCKS5 listener.

permissions.<name>.network.enable_socks5_udp: allow UDP via SOCKS5.

permissions.<name>.network.allow_upstream_proxy: allow chained proxying.

permissions.<name>.network.allowed_domains: network allowlist.

permissions.<name>.network.denied_domains: network denylist.

permissions.<name>.network.allow_unix_sockets: allow specific Unix sockets.

permissions.<name>.network.allow_local_binding: allow local bind/listen.

permissions.<name>.network.dangerously_allow_non_loopback_proxy: allow non-loopback proxy listener.

permissions.<name>.network.dangerously_allow_all_unix_sockets: allow arbitrary Unix sockets.

sandbox_workspace_write.writable_roots: extra writable roots in workspace-write mode.