temp egress probe

Dockerfile

@@ -0,0 +1,3 @@
+FROM python:3.12-slim
+COPY app.py /app.py
+CMD ["python", "/app.py"]

README.md

@@ -1,10 +1,5 @@
 ---
-title: Test
-emoji: 🐠
-colorFrom: yellow
-colorTo: red
+title: probe
 sdk: docker
-pinned: false
+app_port: 7860
 ---
-
-Check out the configuration reference at https://huggingface.co/docs/hub/spaces-config-reference

app.py

@@ -0,0 +1,25 @@
+# 临时出口探针：只转发到 mp-staging.kaggle.net / ipinfo.io，Kaggle key 放 X-Kaggle-Auth
+import json, os, hmac, urllib.request, urllib.error
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+ALLOWED = ("https://mp-staging.kaggle.net/", "https://ipinfo.io/")
+class H(BaseHTTPRequestHandler):
+    def _go(self, method):
+        if not hmac.compare_digest(self.headers.get("X-Probe", ""), os.environ.get("PROBE_SECRET", "-")):
+            self.send_response(401); self.end_headers(); return
+        target = self.headers.get("X-Target", "")
+        if not target.startswith(ALLOWED):
+            self.send_response(404); self.end_headers(); return
+        body = self.rfile.read(int(self.headers.get("Content-Length") or 0)) if method == "POST" else None
+        hdr = {"Content-Type": "application/json"}
+        if self.headers.get("X-Kaggle-Auth"): hdr["Authorization"] = self.headers["X-Kaggle-Auth"]
+        req = urllib.request.Request(target, data=body, headers=hdr, method=method)
+        try:
+            with urllib.request.urlopen(req, timeout=90) as r: code, data = r.status, r.read()
+        except urllib.error.HTTPError as e: code, data = e.code, e.read()
+        except Exception as e: code, data = 599, str(e).encode()
+        self.send_response(code); self.send_header("Content-Type", "application/json"); self.end_headers(); self.wfile.write(data)
+    def do_GET(self):
+        if self.path == "/": self.send_response(200); self.end_headers(); self.wfile.write(b"ok"); return
+        self._go("GET")
+    def do_POST(self): self._go("POST")
+ThreadingHTTPServer(("0.0.0.0", 7860), H).serve_forever()