@openclaw/comfy-provider 2026.8.1-beta.3 → 2026.8.1

package/dist/workflow-runtime.js

@@ -1,12 +1,13 @@
+import { randomInt } from "node:crypto";
 import fs from "node:fs/promises";
 import { resolveGeneratedMediaMaxBytes } from "openclaw/plugin-sdk/media-generation-runtime";
 import { extensionForMime } from "openclaw/plugin-sdk/media-mime";
 import { resolvePositiveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { isProviderApiKeyConfigured } from "openclaw/plugin-sdk/provider-auth";
 import { resolveApiKeyForProvider } from "openclaw/plugin-sdk/provider-auth-runtime";
-import { assertOkOrThrowHttpError, normalizeBaseUrl, readProviderJsonResponse, resolveProviderHttpRequestConfig } from "openclaw/plugin-sdk/provider-http";
+import { assertOkOrThrowHttpError, normalizeBaseUrl, readProviderJsonResponse, redactProviderResponseErrorText, resolveProviderHttpRequestConfig } from "openclaw/plugin-sdk/provider-http";
 import { readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
-import { normalizeSecretInputString, resolveSecretInputString } from "openclaw/plugin-sdk/secret-input-runtime";
+import { normalizeSecretInputString, resolveConfiguredSecretInputString, resolveSecretInputString } from "openclaw/plugin-sdk/secret-input-runtime";
 import { canResolveEnvSecretRefInReadOnlyPath } from "openclaw/plugin-sdk/secret-ref-readonly";
 import { fetchWithSsrFGuard, isPrivateOrLoopbackHost, mergeSsrFPolicies, ssrfPolicyFromHttpBaseUrlAllowedOrigin } from "openclaw/plugin-sdk/ssrf-runtime";
 import { asBoolean, isRecord, normalizeOptionalLowercaseString, normalizeOptionalString, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -16,8 +17,10 @@ const DEFAULT_COMFY_LOCAL_BASE_URL = "http://127.0.0.1:8188";
 const DEFAULT_COMFY_CLOUD_BASE_URL = "https://cloud.comfy.org";
 const DEFAULT_PROMPT_INPUT_NAME = "text";
 const DEFAULT_INPUT_IMAGE_INPUT_NAME = "image";
+const DEFAULT_SEED_INPUT_NAME = "seed";
 const DEFAULT_POLL_INTERVAL_MS = 1500;
 const DEFAULT_TIMEOUT_MS = 5 * 6e4;
+const RANDOM_SEED_EXCLUSIVE_MAX = 2 ** 48 - 1;
 const DEFAULT_COMFY_MODEL = "workflow";
 function readConfigInteger(config, key) {
 	const value = config[key];
@@ -107,6 +110,34 @@ function setWorkflowInput(params) {
 	if (!isRecord(inputs)) throw new Error(`Comfy workflow node "${params.nodeId}" is missing an inputs object`);
 	inputs[params.inputName] = params.value;
 }
+async function resolveComfyHeadersConfig(value, cfg) {
+	const headers = new Headers();
+	if (!isRecord(value)) return headers;
+	for (const [name, headerValue] of Object.entries(value)) {
+		const path = `plugins.entries.comfy.config.headers.${name}`;
+		const inspected = resolveSecretInputString({
+			value: headerValue,
+			path,
+			defaults: cfg.secrets?.defaults,
+			mode: "inspect"
+		});
+		if (inspected.status === "available") {
+			headers.set(name, inspected.value);
+			continue;
+		}
+		if (inspected.status === "missing") continue;
+		const resolved = await resolveConfiguredSecretInputString({
+			config: cfg,
+			env: process.env,
+			value: headerValue,
+			path,
+			unresolvedReasonStyle: "detailed"
+		});
+		if (resolved.unresolvedRefReason) throw new Error(`${path} references an unavailable secret: ${resolved.unresolvedRefReason}`);
+		if (resolved.value) headers.set(name, resolved.value);
+	}
+	return headers;
+}
 function resolveComfyNetworkPolicy(params) {
 	let parsed;
 	try {
@@ -138,8 +169,9 @@ async function readJsonResponse(params) {
 		auditContext: params.auditContext
 	});
 	try {
-		await assertOkOrThrowHttpError(response, params.errorPrefix);
-		return await readProviderJsonResponse(response, params.errorPrefix);
+		const requestHeaders = params.init?.headers;
+		await assertOkOrThrowHttpError(response, params.errorPrefix, { requestHeaders });
+		return await readProviderJsonResponse(response, params.errorPrefix, { requestHeaders });
 	} finally {
 		await release();
 	}
@@ -230,7 +262,10 @@ async function waitForCloudCompletion(params) {
 			errorPrefix: "Comfy status lookup failed"
 		});
 		if (status.status === "completed") return;
-		if (status.status === "failed" || status.status === "cancelled") throw new Error(`Comfy workflow ${status.status}: ${status.error ?? status.message ?? params.promptId}`);
+		if (status.status === "failed" || status.status === "cancelled") {
+			const detail = redactProviderResponseErrorText(status.error ?? status.message ?? params.promptId, params.headers);
+			throw new Error(`Comfy workflow ${status.status}: ${detail}`);
+		}
 		const pollDelayMs = resolveComfyRemainingMs(deadline, params.timeoutMs, params.pollIntervalMs);
 		await new Promise((resolve) => {
 			setTimeout(resolve, pollDelayMs);
@@ -290,7 +325,7 @@ async function downloadOutputFile(params) {
 		auditContext
 	});
 	try {
-		await assertOkOrThrowHttpError(firstResponse.response, "Comfy output download failed");
+		await assertOkOrThrowHttpError(firstResponse.response, "Comfy output download failed", { requestHeaders: params.headers });
 		const mimeType = normalizeOptionalString(firstResponse.response.headers.get("content-type")) || "application/octet-stream";
 		return {
 			buffer: await readResponseWithLimit(firstResponse.response, params.maxBytes, {
@@ -304,11 +339,30 @@ async function downloadOutputFile(params) {
 		await firstResponse.release();
 	}
 }
+function hasUnavailableComfyHeaderSecret(value, cfg) {
+	if (!isRecord(value)) return false;
+	return Object.entries(value).some(([name, headerValue]) => {
+		const inspected = resolveSecretInputString({
+			value: headerValue,
+			path: `plugins.entries.comfy.config.headers.${name}`,
+			defaults: cfg?.secrets?.defaults,
+			mode: "inspect"
+		});
+		if (inspected.status !== "configured_unavailable" || inspected.ref.source !== "env") return false;
+		const envVarName = inspected.ref.id.trim();
+		return !(canResolveEnvSecretRefInReadOnlyPath({
+			cfg,
+			provider: inspected.ref.provider,
+			id: envVarName
+		}) && Boolean(normalizeSecretInputString(process.env[envVarName])));
+	});
+}
 function isComfyCapabilityConfigured(params) {
 	const capabilityConfig = getComfyCapabilityConfig(getComfyConfig(params.cfg), params.capability);
 	const hasWorkflow = Boolean(resolveComfyWorkflowSource(capabilityConfig).workflow || normalizeOptionalString(capabilityConfig.workflowPath));
 	const hasPromptNode = Boolean(normalizeOptionalString(capabilityConfig.promptNodeId));
 	if (!hasWorkflow || !hasPromptNode) return false;
+	if (hasUnavailableComfyHeaderSecret(capabilityConfig.headers, params.cfg)) return false;
 	if (resolveComfyMode(capabilityConfig) === "local") return true;
 	const configuredApiKey = resolveComfyApiKey(capabilityConfig, params.cfg);
 	if (configuredApiKey.status === "available") return true;
@@ -327,6 +381,8 @@ async function runComfyWorkflow(params) {
 	const promptInputName = normalizeOptionalString(capabilityConfig.promptInputName) ?? DEFAULT_PROMPT_INPUT_NAME;
 	const inputImageNodeId = normalizeOptionalString(capabilityConfig.inputImageNodeId);
 	const inputImageInputName = normalizeOptionalString(capabilityConfig.inputImageInputName) ?? DEFAULT_INPUT_IMAGE_INPUT_NAME;
+	const seedNodeId = normalizeOptionalString(capabilityConfig.seedNodeId);
+	const seedInputName = normalizeOptionalString(capabilityConfig.seedInputName) ?? DEFAULT_SEED_INPUT_NAME;
 	const outputNodeId = normalizeOptionalString(capabilityConfig.outputNodeId);
 	const pollIntervalMs = resolvePositiveTimerTimeoutMs(readConfigInteger(capabilityConfig, "pollIntervalMs"), DEFAULT_POLL_INTERVAL_MS);
 	const timeoutMs = resolvePositiveTimerTimeoutMs(readConfigInteger(capabilityConfig, "timeoutMs") ?? params.timeoutMs, DEFAULT_TIMEOUT_MS);
@@ -337,6 +393,12 @@ async function runComfyWorkflow(params) {
 		inputName: promptInputName,
 		value: params.prompt
 	});
+	if (seedNodeId) setWorkflowInput({
+		workflow,
+		nodeId: seedNodeId,
+		inputName: seedInputName,
+		value: randomInt(RANDOM_SEED_EXCLUSIVE_MAX)
+	});
 	const pluginApiKey = resolveComfyApiKey(capabilityConfig, params.cfg);
 	const resolvedAuth = mode === "cloud" ? pluginApiKey.status === "available" ? {
 		apiKey: pluginApiKey.apiKey,
@@ -354,6 +416,7 @@ async function runComfyWorkflow(params) {
 		baseUrl: normalizeOptionalString(capabilityConfig.baseUrl),
 		defaultBaseUrl: mode === "cloud" ? DEFAULT_COMFY_CLOUD_BASE_URL : DEFAULT_COMFY_LOCAL_BASE_URL,
 		allowPrivateNetwork: mode === "local" || explicitAllowPrivateNetwork,
+		headers: await resolveComfyHeadersConfig(capabilityConfig.headers, params.cfg),
 		defaultHeaders: mode === "cloud" ? {
 			"X-API-Key": resolvedAuth?.apiKey ?? "",
 			"Content-Type": "application/json"

package/openclaw.plugin.json

@@ -5,6 +5,11 @@
   },
   "enabledByDefault": true,
   "providers": ["comfy"],
+  "configContracts": {
+    "secretInputs": {
+      "paths": [{ "path": "headers.*", "expected": "string" }]
+    }
+  },
   "setup": {
     "providers": [
       {
@@ -196,6 +201,10 @@
       "allowPrivateNetwork": {
         "type": "boolean"
       },
+      "headers": {
+        "type": "object",
+        "additionalProperties": { "type": ["string", "object"] }
+      },
       "workflowPath": {
         "type": "string"
       },
@@ -208,6 +217,12 @@
       "promptInputName": {
         "type": "string"
       },
+      "seedNodeId": {
+        "type": "string"
+      },
+      "seedInputName": {
+        "type": "string"
+      },
       "inputImageNodeId": {
         "type": "string"
       },
@@ -233,6 +248,8 @@
           "workflow": { "type": "object" },
           "promptNodeId": { "type": "string" },
           "promptInputName": { "type": "string" },
+          "seedNodeId": { "type": "string" },
+          "seedInputName": { "type": "string" },
           "inputImageNodeId": { "type": "string" },
           "inputImageInputName": { "type": "string" },
           "outputNodeId": { "type": "string" },
@@ -248,6 +265,8 @@
           "workflow": { "type": "object" },
           "promptNodeId": { "type": "string" },
           "promptInputName": { "type": "string" },
+          "seedNodeId": { "type": "string" },
+          "seedInputName": { "type": "string" },
           "inputImageNodeId": { "type": "string" },
           "inputImageInputName": { "type": "string" },
           "outputNodeId": { "type": "string" },
@@ -263,6 +282,8 @@
           "workflow": { "type": "object" },
           "promptNodeId": { "type": "string" },
           "promptInputName": { "type": "string" },
+          "seedNodeId": { "type": "string" },
+          "seedInputName": { "type": "string" },
           "outputNodeId": { "type": "string" },
           "pollIntervalMs": { "type": "integer", "minimum": 100 },
           "timeoutMs": { "type": "integer", "minimum": 1000 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/comfy-provider",
-  "version": "2026.8.1-beta.3",
+  "version": "2026.8.1",
   "description": "OpenClaw ComfyUI provider plugin.",
   "repository": {
     "type": "git",
@@ -18,10 +18,10 @@
       "minHostVersion": ">=2026.7.2"
     },
     "compat": {
-      "pluginApi": ">=2026.8.1-beta.3"
+      "pluginApi": ">=2026.8.1"
     },
     "build": {
-      "openclawVersion": "2026.8.1-beta.3",
+      "openclawVersion": "2026.8.1",
       "bundledDist": false
     },
     "release": {
@@ -38,7 +38,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.8.1-beta.3"
+    "openclaw": ">=2026.8.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {