"""Single-container inspect + lifecycle for compose-managed containers."""
from __future__ import annotations

from fastapi import APIRouter, Depends, Request
from sqlmodel import Session

from auth import get_current_user, require_admin
from database import get_session
from models.user import User
from services import audit_service, container_service

router = APIRouter(prefix="/api/containers", tags=["containers"])


def _ip(request: Request) -> str:
    return request.client.host if request.client else "unknown"


@router.get("/{container_id}")
def inspect(container_id: str, _user: User = Depends(get_current_user)) -> dict:
    return container_service.inspect_container(container_id)


@router.post("/{container_id}/{action}")
def action(
    container_id: str,
    action: str,
    request: Request,
    session: Session = Depends(get_session),
    user: User = Depends(require_admin),
) -> dict:
    result = container_service.container_action(container_id, action)
    audit_service.record(
        session, user=user.username, action=f"container.{action}",
        target=container_id[:12], ip=_ip(request),
    )
    return result