feat: switch ingress proxy to direct container IP routing and capture network metadata on launch

Refactor proxy target resolution to connect straight to the container's bridge IP and container port, bypassing the host port-publishing layer entirely. Introduce `container_ip`/`container_gateway` fields captured from Docker inspect on each running instance, stored alongside status updates. Update the fake backend to emit realistic `NetworkSettings` with per-container IPs. Remove the now-unused `CONTAINER_PROXY_HOST` config default and the old `ports_json`-based host port lookup in the proxy router.

devplacepy/services/containers/api.py

@@ -371,20 +371,62 @@ def _http_probe(host: str, port: int, timeout: float = 1.0) -> str:
         return f"unreachable: {type(exc).__name__}"
 
 
-def _ingress_host_port(instance: dict, port_maps: list) -> int:
+def _net_entry(data: dict) -> dict:
+    net = (data or {}).get("NetworkSettings") or {}
+    if net.get("IPAddress") or net.get("Gateway"):
+        return net
+    for entry in (net.get("Networks") or {}).values():
+        if entry and (entry.get("IPAddress") or entry.get("Gateway")):
+            return entry
+    return {}
+
+
+def container_ip_from_inspect(data: dict) -> str:
+    return (_net_entry(data).get("IPAddress") or "").strip()
+
+
+def container_gateway_from_inspect(data: dict) -> str:
+    return (_net_entry(data).get("Gateway") or "").strip()
+
+
+def _ingress_container_port(instance: dict, port_maps: list) -> int:
     ingress_port = int(instance.get("ingress_port") or 0)
     if ingress_port:
         for mapping in port_maps:
             if int(mapping.get("container") or 0) == ingress_port:
-                return int(mapping.get("host") or 0)
+                return ingress_port
         return 0
-    return int(port_maps[0].get("host") or 0) if port_maps else 0
+    return int(port_maps[0].get("container") or 0) if port_maps else 0
+
+
+def _host_port_for(port_maps: list, container_port: int) -> int:
+    for mapping in port_maps:
+        if int(mapping.get("container") or 0) == container_port:
+            return int(mapping.get("host") or 0)
+    return 0
+
+
+def proxy_target(instance: dict) -> tuple:
+    port_maps = json.loads(instance.get("ports_json") or "[]")
+    container_port = _ingress_container_port(instance, port_maps)
+    if not container_port:
+        return None, None
+    host_port = _host_port_for(port_maps, container_port)
+    if config.CONTAINER_PROXY_HOST:
+        return (config.CONTAINER_PROXY_HOST, host_port) if host_port else (None, None)
+    if not host_port:
+        return None, None
+    gateway = (instance.get("container_gateway") or "").strip()
+    return (gateway or "127.0.0.1", host_port)
 
 
 def instance_runtime(instance: dict) -> dict:
     boot = (instance.get("boot_command") or "").strip()
     port_maps = json.loads(instance.get("ports_json") or "[]")
-    host = config.CONTAINER_PROXY_HOST
+    container_ip = (instance.get("container_ip") or "").strip()
+    container_gateway = (instance.get("container_gateway") or "").strip()
+    target_host, target_port = proxy_target(instance)
+    probe_host = config.CONTAINER_PROXY_HOST or container_gateway or "127.0.0.1"
     ports = []
     for mapping in port_maps:
         host_port = int(mapping.get("host") or 0)
@@ -393,18 +435,24 @@ def instance_runtime(instance: dict) -> dict:
                 "container": int(mapping.get("container") or 0),
                 "host": host_port,
                 "proto": mapping.get("proto", "tcp"),
-                "reachable": _port_reachable(host, host_port) if host_port else False,
+                "reachable": _port_reachable(probe_host, host_port)
+                if host_port
+                else False,
             }
         )
-    ingress_host_port = _ingress_host_port(instance, port_maps)
     ingress_serving = (
-        _http_probe(host, ingress_host_port)
-        if ingress_host_port
+        _http_probe(target_host, target_port)
+        if target_host and target_port
         else "no ingress port mapped"
     )
     return {
         "command": boot or "image CMD (no boot_command set)",
         "ports": ports,
+        "container_ip": container_ip,
+        "container_gateway": container_gateway,
+        "ingress_target": (
+            f"{target_host}:{target_port}" if target_host and target_port else ""
+        ),
         "ingress_port": int(instance.get("ingress_port") or 0),
         "ingress_serving": ingress_serving,
         "status_ok_for_ingress": instance.get("status") == store.ST_RUNNING,