Add project-scoped Codex execution over a private socket

deploy/codex-worker.sh

@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+base=/opt/endoleap-infra
+dir=$base/foundry/codex
+binary=$(realpath "$1")
+test -x "$binary"
+test -s "$dir/home/auth.json"
+test -s "$dir/grants/projects.json"
+install -d -m 700 -o 1000 -g 1000 "$dir/run"
+
+# The host operator supplies an isolated Codex home and starts a single worker.
+# The Docker default bridge supplies egress independently of Foundry's network.
+docker run -d --name foundry-codex-worker --restart unless-stopped --init \
+  --network bridge --user 1000:1000 --cap-drop ALL --security-opt no-new-privileges \
+  --read-only --pids-limit 128 --memory 384m --tmpfs /tmp:rw,nosuid,nodev \
+  --tmpfs /work:ro,nosuid,nodev --workdir /work \
+  --mount "type=bind,source=$binary,target=/opt/foundry,readonly" \
+  --mount "type=bind,source=$base/codex-cli,target=/opt/codex,readonly" \
+  --mount "type=bind,source=$dir/home,target=/home/node/.codex" \
+  --mount "type=bind,source=$dir/run,target=/run/foundry-codex" \
+  --mount "type=bind,source=/etc/ssl/certs/ca-certificates.crt,target=/etc/ssl/certs/ca-certificates.crt,readonly" \
+  node:24-bookworm-slim /opt/foundry codex-worker

deploy/release.sh

@@ -44,7 +44,20 @@ docker network inspect "$network" >/dev/null
 release=$(mktemp -d "$foundry/release.XXXXXXXX")
 install -m 755 "$1" "$release/foundry"
 export HOST=0.0.0.0 PORT=8080 PUBLIC_ORIGIN="$origin"
-docker run -d --name "$candidate" --network "$network" \
+codex_mounts=()
+codex_dir=$foundry/codex
+if [[ -d "$codex_dir" ]]; then
+  test -S "$codex_dir/run/worker.sock"
+  test -s "$codex_dir/grants/projects.json"
+  codex_mounts=(
+    --mount "type=bind,source=$codex_dir/run,target=/run/foundry-codex,readonly"
+    --mount "type=bind,source=$codex_dir/grants,target=/etc/foundry-codex,readonly"
+    -e FOUNDRY_CODEX_SOCKET=/run/foundry-codex/worker.sock
+    -e FOUNDRY_CODEX_GRANTS=/etc/foundry-codex/projects.json
+  )
+fi
+
+docker run -d --name "$candidate" "${codex_mounts[@]}" --network "$network" \
   --env-file "$foundry/database.env" -e HOST -e PORT -e PUBLIC_ORIGIN \
   -e GOOGLE_CLIENT_ID -e GOOGLE_CLIENT_SECRET -e FOUNDRY_PROJECTS \
   --user 1000:1000 --cap-drop ALL --security-opt no-new-privileges \