А ну и напоследок - у кодекса появилось оказывается ДОХУИЩЕ флажков которыми мож

apps.<id>.destructive_enabled: allow destructive tools for one app.

apps.<id>.open_world_enabled: allow open-world tools for one app.

apps.<id>.default_tools_enabled: default tool enablement for one app.

apps.<id>.default_tools_approval_mode: default approval mode for one app’s tools.

apps.<id>.tools.<tool>.enabled: enable/disable one specific app tool.

apps.<id>.tools.<tool>.approval_mode: set approval behavior for one app tool.

mcp_servers.<id>.env: env vars passed to an MCP stdio server.

mcp_servers.<id>.env_vars: whitelist extra inherited env vars for an MCP server.

mcp_servers.<id>.cwd: working directory for an MCP stdio server.