lines 177-183 should also be moved into the agent provision step: it's the responsibility of the agent provisioner to determine whether or not there should be something like "egress-placeholder" in the env and which env var it should go into. This should also remove the need for placeholder_env in the provider runtime.
when we don't forward host credentials there should still be egress routes, just not egress routes with an auto-injected token (and we should have passthrough set to true so the tokens the user would set after logging in don't get stripped out)
RE: didericis/bot-bottle#110 (comment)
I want to remove _ensure_codex_host_credential_route, and have that happen via an agent provider abstraction that…
why can't we just provision the bottle egress routes based on an agent provision plan?
this should also be in the agent provisioner now, assuming we can evaluate has_provider_auth at that stage. If not we'll need a more generic hook to call into here/there should not be any logic specific to an specific type of agent in here anymore.
env provisioning should be a part of the agent provider plan/we shouldn't need to know anything about codex here.
Replying to didericis/bot-bottle#110 (comment)
In the future I'd like users to be able to specify their own agent provisioning logic, so we should be…
This should be grouped with the agent_provider template in some way/probably scoped under the agent provider, and only respected when the template is set to codex