The whole hunk
from line 248, old and new numbered
/
lines
from line 248
248248* `forceLoginMethod` and `forceLoginOrgUUID` pin the login method and organization
249249* `availableModels` and `enforceAvailableModels` restrict which models sessions can use
250250* `permissions.deny` blocks two file reads and `curl`, and `disableBypassPermissionsMode` removes the bypass permission mode
251* `allowManagedPermissionRulesOnly` and `allowManagedMcpServersOnly` make the managed permission and MCP allowlists the only ones that apply
251* [`allowManagedPermissionRulesOnly`](/docs/en/settings-reference#allowmanagedpermissionrulesonly) and [`allowManagedMcpServersOnly`](/docs/en/settings-reference#allowmanagedmcpserversonly) make the managed permission and MCP allowlists the only ones that apply
252252* `allowedMcpServers` pins the MCP server by URL
253253* `strictKnownMarketplaces` allows one plugin marketplace
254254* `sandbox` sandboxes commands with a fixed network allowlist and no unsandboxed retry
from line 341
341341 // Remove the bypass-permissions mode from every session
342342 "disableBypassPermissionsMode": "disable"
343343 },
344 // Only managed permission rules apply
344 // Ignore permission rules from user, project, and local settings
345345 "allowManagedPermissionRulesOnly": true,
346346 // Only the GitHub MCP server, matched by URL rather than by name, since a user can
347347 // name any server "github". Servers that don't match don't load, which includes every