А ну и напоследок - у кодекса появилось оказывается ДОХУИЩЕ флажков которыми мож

permissions.<name>.network.enable_socks5_udp: allow UDP via SOCKS5.

permissions.<name>.network.allow_upstream_proxy: allow chained proxying.

permissions.<name>.network.allowed_domains: network allowlist.

permissions.<name>.network.denied_domains: network denylist.

permissions.<name>.network.allow_unix_sockets: allow specific Unix sockets.

permissions.<name>.network.allow_local_binding: allow local bind/listen.

permissions.<name>.network.dangerously_allow_non_loopback_proxy: allow non-loopback proxy listener.

permissions.<name>.network.dangerously_allow_all_unix_sockets: allow arbitrary Unix sockets.

sandbox_workspace_write.writable_roots: extra writable roots in workspace-write mode.

sandbox_workspace_write.network_access: network access inside workspace-write mode.

sandbox_workspace_write.exclude_tmpdir_env_var: remove $TMPDIR from writable roots.

sandbox_workspace_write.exclude_slash_tmp: remove /tmp from writable roots.

profile: default named profile at startup.

profiles.<name>.*: profile-scoped overrides.

profiles.<name>.service_tier: per-profile tier.

profiles.<name>.plan_mode_reasoning_effort: per-profile plan reasoning.