Add project-scoped Codex execution over a private socket

cmd/foundry/main.go

@@ -10,6 +10,7 @@ import (
 	"time"
 
 	"gitea.entroia.com/Zayden-Jung/foundry-core/internal/auth"
+	"gitea.entroia.com/Zayden-Jung/foundry-core/internal/codex"
 	"github.com/jackc/pgx/v5"
 	"github.com/jackc/pgx/v5/stdlib"
 )
@@ -22,6 +23,9 @@ func env(key, fallback string) string {
 }
 
 func main() {
+	if len(os.Args) == 2 && os.Args[1] == "codex-worker" {
+		log.Fatal(codex.ServeWorker("/run/foundry-codex/worker.sock"))
+	}
 	origin, err := url.Parse(os.Getenv("PUBLIC_ORIGIN"))
 	if err != nil || origin.Scheme != "https" || origin.Hostname() == "" || origin.User != nil ||
 		(origin.Path != "" && origin.Path != "/") || origin.RawQuery != "" || origin.Fragment != "" {
@@ -45,10 +49,15 @@ func main() {
 	if err != nil {
 		log.Fatal(err)
 	}
+	mux := http.NewServeMux()
+	if err := codex.Register(mux, callbacks, os.Getenv("FOUNDRY_CODEX_SOCKET"), os.Getenv("FOUNDRY_CODEX_GRANTS")); err != nil {
+		log.Fatal(err)
+	}
+	mux.Handle("/", handler)
 	server := &http.Server{
 		Addr:    net.JoinHostPort(env("HOST", "127.0.0.1"), env("PORT", "8080")),
-		Handler: handler, ReadHeaderTimeout: 5 * time.Second, ReadTimeout: 10 * time.Second,
-		WriteTimeout: 30 * time.Second, IdleTimeout: 60 * time.Second,
+		Handler: mux, ReadHeaderTimeout: 5 * time.Second, ReadTimeout: 10 * time.Second,
+		WriteTimeout: 110 * time.Second, IdleTimeout: 60 * time.Second,
 	}
 	log.Fatal(server.ListenAndServe())
 }