fix(codex): defer workspace trust handling

bot_bottle/agent_provider.py

@@ -154,13 +154,9 @@ def agent_provision_plan(
         dirs.append(AgentProvisionDir(auth_dir))
         config_path = f"{auth_dir}/config.toml"
         config_file = state_dir / "codex-config.toml"
-        workspace = f"{guest_home}/workspace"
         config_file.write_text(
             f'[projects."{guest_home}"]\n'
             'trust_level = "trusted"\n'
-            "\n"
-            f'[projects."{workspace}"]\n'
-            'trust_level = "trusted"\n'
         )
         config_file.chmod(0o600)
         files.append(AgentProvisionFile(config_file, config_path))

tests/unit/test_agent_provider.py

@@ -31,7 +31,6 @@ class TestAgentProviderRuntime(unittest.TestCase):
                 dockerfile="/tmp/Dockerfile.codex",
                 state_dir=Path(tmp),
             )
-            config = (Path(tmp) / "codex-config.toml").read_text()
         self.assertEqual("codex", plan.template)
         self.assertEqual("codex", plan.command)
         self.assertEqual("read_prompt_file", plan.prompt_mode)
@@ -46,9 +45,6 @@ class TestAgentProviderRuntime(unittest.TestCase):
             ("/home/node/.codex/config.toml",),
             tuple(f.guest_path for f in plan.files),
         )
-        self.assertIn('[projects."/home/node"]', config)
-        self.assertIn('[projects."/home/node/workspace"]', config)
-        self.assertEqual(2, config.count('trust_level = "trusted"'))
 
     def test_codex_forward_host_credentials_adds_auth_and_verify(self):
         with tempfile.TemporaryDirectory(prefix="bb-provider.") as tmp: