Start the configured Codex worker during Foundry deployment

deploy/release.sh

@@ -47,6 +47,13 @@ export HOST=0.0.0.0 PORT=8080 PUBLIC_ORIGIN="$origin"
 codex_mounts=()
 codex_dir=$foundry/codex
 if [[ -d "$codex_dir" ]]; then
+  if ! docker inspect -f '{{.State.Running}}' foundry-codex-worker 2>/dev/null | grep -qx true; then
+    bash "$(dirname "$0")/codex-worker.sh" "$release/foundry" >/dev/null
+  fi
+  for attempt in {1..20}; do
+    [[ ! -S "$codex_dir/run/worker.sock" ]] || break
+    sleep 0.25
+  done
   test -S "$codex_dir/run/worker.sock"
   test -s "$codex_dir/grants/projects.json"
   codex_mounts=(
@@ -87,6 +94,10 @@ docker exec "$candidate" node -e '
     const project = Object.keys(JSON.parse(process.env.FOUNDRY_PROJECTS))[0];
     const route = base + "/projects/" + encodeURIComponent(project) + "/auth";
     assert.equal((await fetch(route + "/me")).status, 401);
+    if (process.env.FOUNDRY_CODEX_SOCKET) {
+      const exec = base + "/projects/" + encodeURIComponent(project) + "/codex/exec";
+      assert.equal((await fetch(exec, {method: "POST"})).status, 401);
+    }
   }
   verify().catch(() => { console.error("Foundry readiness or anonymous access check failed"); process.exit(1); });
 '