[Bug] Domain allowlist not propagating to cowork-egress proxy after configuration update

Bug Description
Domain allowlist propagation bug - cowork-egress proxy
Description:
Confirmed bug: Domains added in Settings → Capabilities don't propagate to the cowork-egress proxy.
Technical details:
Added domain: giy.context-link.ai
Configuration present in ~/.claude/settings.json under sandbox.network.allowedDomains
Persistent error: "Host '*.context-link.ai' is not on the network allowlist (cowork-egress-blocked)"
Only old domains (.fr, **.com) appear in proxy allowlist
Steps reproduced:
Added domain in Settings → Capabilities
Manually modified ~/.claude/settings.json
Full restart of Claude Desktop and Claude Code
Cleared caches
cowork-egress proxy continues blocking the new domain
Environment: Claude Desktop on macOS
The Unix socket proxy appears to maintain its own list independently of user configuration.

Environment Info

• Platform: darwin
• Terminal: Apple_Terminal
• Version: 2.1.85
• Feedback ID: f22dcc99-9a8a-4e96-a50d-261f17d58aaf

Errors

[]