feat: add river-backed async task queue

apps/api/internal/httpapi/server.go

@@ -1,6 +1,7 @@
 package httpapi
 
 import (
+	"context"
 	"log/slog"
 	"net/http"
 	"strings"
@@ -12,6 +13,7 @@ import (
 )
 
 type Server struct {
+	ctx    context.Context
 	cfg    config.Config
 	store  *store.Store
 	auth   *auth.Authenticator
@@ -20,7 +22,12 @@ type Server struct {
 }
 
 func NewServer(cfg config.Config, db *store.Store, logger *slog.Logger) http.Handler {
+	return NewServerWithContext(context.Background(), cfg, db, logger)
+}
+
+func NewServerWithContext(ctx context.Context, cfg config.Config, db *store.Store, logger *slog.Logger) http.Handler {
 	server := &Server{
+		ctx:    ctx,
 		cfg:    cfg,
 		store:  db,
 		auth:   auth.New(cfg.JWTSecret, cfg.ServerMainBaseURL, cfg.ServerMainInternalToken),
@@ -28,6 +35,7 @@ func NewServer(cfg config.Config, db *store.Store, logger *slog.Logger) http.Han
 		logger: logger,
 	}
 	server.auth.LocalAPIKeyVerifier = db.VerifyLocalAPIKey
+	server.runner.StartAsyncQueueWorker(ctx)
 
 	mux := http.NewServeMux()
 	mux.HandleFunc("GET /healthz", server.health)
@@ -146,7 +154,7 @@ func (s *Server) cors(next http.Handler) http.Handler {
 			w.Header().Set("Access-Control-Allow-Origin", origin)
 			w.Header().Set("Vary", "Origin")
 			w.Header().Set("Access-Control-Allow-Credentials", "true")
-			w.Header().Set("Access-Control-Allow-Headers", "Authorization, Content-Type, X-Comfy-Api-Key")
+			w.Header().Set("Access-Control-Allow-Headers", "Authorization, Content-Type, X-Comfy-Api-Key, X-Async")
 			w.Header().Set("Access-Control-Allow-Methods", "GET, POST, PUT, PATCH, DELETE, OPTIONS")
 		}
 		if r.Method == http.MethodOptions {