fix(support): bridge AGENT_BROWSER_ALLOWED_DOMAINS so env-file hardening works

Author: lpb-docs

lpb.conf.env

@@ -57,6 +57,11 @@ LPB_AGENT_BROWSER_CONTENT_BOUNDARIES=true
 LPB_AGENT_BROWSER_CONFIRM_ACTIONS=delete,download,cookie_delete,file_access
 # Daemon idle timeout (5 minutes) — auto-cleanup after inactivity
 LPB_AGENT_BROWSER_IDLE_TIMEOUT_MS=300000
+# Opt-in navigation allowlist (unset = unrestricted, the default — fine for general use).
+# When set: only listed domains are reachable at navigation; localhost is NOT
+# auto-allowed (list localhost,127.0.0.1 explicitly), and a fresh browser context
+# is required (no --restore, no CDP). start.sh bridges it to the bare name.
+# LPB_AGENT_BROWSER_ALLOWED_DOMAINS=localhost,127.0.0.1,*.github.com
 
 # ─── Misc ───────────────────────────────────────────────────────────────
 # Persist gh CLI auth to ~/.config/gh inside container

support/start.sh

@@ -145,6 +145,7 @@ BARE_NAMES=(
     AGENT_BROWSER_CONFIRM_ACTIONS
     AGENT_BROWSER_IDLE_TIMEOUT_MS
     AGENT_BROWSER_SESSION
+    AGENT_BROWSER_ALLOWED_DOMAINS
 )
 # Container-safe fallbacks per bare name (absent = pure LPB_→bare promotion).
 declare -A BARE_FALLBACKS=(