fix: use Docker HEALTHCHECK status for Ollama readiness polling

The direct HTTP polling approach failed because the API container and
Ollama container are on different Docker networks and cannot reach
each other by IP. Switch back to polling Docker HEALTHCHECK status,
which now uses "ollama list" (available in the image) instead of curl.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: barckcode

internal/runtime/ollama.go

@@ -4,9 +4,7 @@ import (
 	"bufio"
 	"context"
 	"fmt"
-	"io"
 	"log/slog"
-	"net/http"
 	"os/exec"
 	"strings"
 	"time"
@@ -129,53 +127,29 @@ func (d *DockerRuntime) EnsureOllama(ctx context.Context) (string, error) {
 	return resp.ID, nil
 }
 
-// waitForOllamaHealthy polls the Ollama HTTP API directly until it responds
-// or the timeout expires. This is more reliable than Docker HEALTHCHECK because
-// it doesn't depend on tools being installed inside the container.
+// waitForOllamaHealthy polls the Docker HEALTHCHECK status until the container
+// becomes healthy or the timeout expires. The HEALTHCHECK uses "ollama list"
+// which runs inside the container, avoiding network reachability issues between
+// the API container and the Ollama container (they may be on different Docker networks).
 func (d *DockerRuntime) waitForOllamaHealthy(ctx context.Context, containerID string, timeout time.Duration) error {
 	deadline := time.Now().Add(timeout)
-	httpClient := &http.Client{Timeout: 3 * time.Second}
-
 	for time.Now().Before(deadline) {
-		// Get container IP to call the Ollama API directly.
 		info, err := d.client.ContainerInspect(ctx, containerID)
 		if err != nil {
 			return fmt.Errorf("inspecting ollama container: %w", err)
 		}
-
-		// Try all available network IPs (container may not have a default bridge IP).
-		var ollamaURL string
-		if info.NetworkSettings != nil {
-			// First try the default IP.
-			if info.NetworkSettings.IPAddress != "" {
-				ollamaURL = fmt.Sprintf("http://%s:%s/api/tags", info.NetworkSettings.IPAddress, OllamaInternalPort)
-			}
-			// If no default IP, try IPs from named networks.
-			if ollamaURL == "" {
-				for _, net := range info.NetworkSettings.Networks {
-					if net.IPAddress != "" {
-						ollamaURL = fmt.Sprintf("http://%s:%s/api/tags", net.IPAddress, OllamaInternalPort)
-						break
-					}
-				}
-			}
+		if info.State.Health != nil && info.State.Health.Status == "healthy" {
+			slog.Info("ollama container is healthy", "id", containerID[:12])
+			return nil
 		}
-
-		if ollamaURL != "" {
-			req, err := http.NewRequestWithContext(ctx, http.MethodGet, ollamaURL, nil)
-			if err == nil {
-				resp, err := httpClient.Do(req)
-				if err == nil {
-					io.Copy(io.Discard, resp.Body)
-					resp.Body.Close()
-					if resp.StatusCode == http.StatusOK {
-						slog.Info("ollama container is healthy", "id", containerID[:12], "url", ollamaURL)
-						return nil
-					}
+		slog.Debug("waiting for ollama to become healthy",
+			"id", containerID[:12],
+			"health", func() string {
+				if info.State.Health != nil {
+					return info.State.Health.Status
 				}
-			}
-		}
-
+				return "no-healthcheck"
+			}())
 		select {
 		case <-ctx.Done():
 			return ctx.Err()