@openclaw/comfy-provider 2026.9.1-beta.1 → 2026.9.2

package/dist/workflow-runtime.js

@@ -1,12 +1,14 @@
+import { randomInt } from "node:crypto";
 import fs from "node:fs/promises";
+import { bufferToBlobPart } from "openclaw/plugin-sdk/blob-runtime";
 import { resolveGeneratedMediaMaxBytes } from "openclaw/plugin-sdk/media-generation-runtime";
 import { extensionForMime } from "openclaw/plugin-sdk/media-mime";
 import { resolvePositiveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { isProviderApiKeyConfigured } from "openclaw/plugin-sdk/provider-auth";
 import { resolveApiKeyForProvider } from "openclaw/plugin-sdk/provider-auth-runtime";
-import { assertOkOrThrowHttpError, normalizeBaseUrl, readProviderJsonResponse, resolveProviderHttpRequestConfig } from "openclaw/plugin-sdk/provider-http";
+import { assertOkOrThrowHttpError, normalizeBaseUrl, readProviderJsonResponse, redactProviderResponseErrorText, resolveProviderHttpRequestConfig } from "openclaw/plugin-sdk/provider-http";
 import { readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
-import { normalizeSecretInputString, resolveSecretInputString } from "openclaw/plugin-sdk/secret-input-runtime";
+import { normalizeSecretInputString, resolveConfiguredSecretInputString, resolveSecretInputString } from "openclaw/plugin-sdk/secret-input-runtime";
 import { canResolveEnvSecretRefInReadOnlyPath } from "openclaw/plugin-sdk/secret-ref-readonly";
 import { fetchWithSsrFGuard, isPrivateOrLoopbackHost, mergeSsrFPolicies, ssrfPolicyFromHttpBaseUrlAllowedOrigin } from "openclaw/plugin-sdk/ssrf-runtime";
 import { asBoolean, isRecord, normalizeOptionalLowercaseString, normalizeOptionalString, uniqueStrings } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -16,8 +18,10 @@ const DEFAULT_COMFY_LOCAL_BASE_URL = "http://127.0.0.1:8188";
 const DEFAULT_COMFY_CLOUD_BASE_URL = "https://cloud.comfy.org";
 const DEFAULT_PROMPT_INPUT_NAME = "text";
 const DEFAULT_INPUT_IMAGE_INPUT_NAME = "image";
+const DEFAULT_SEED_INPUT_NAME = "seed";
 const DEFAULT_POLL_INTERVAL_MS = 1500;
-const DEFAULT_TIMEOUT_MS = 5 * 6e4;
+const DEFAULT_TIMEOUT_MS = 3e5;
+const RANDOM_SEED_EXCLUSIVE_MAX = 2 ** 48 - 1;
 const DEFAULT_COMFY_MODEL = "workflow";
 function readConfigInteger(config, key) {
 	const value = config[key];
@@ -107,6 +111,34 @@ function setWorkflowInput(params) {
 	if (!isRecord(inputs)) throw new Error(`Comfy workflow node "${params.nodeId}" is missing an inputs object`);
 	inputs[params.inputName] = params.value;
 }
+async function resolveComfyHeadersConfig(value, cfg) {
+	const headers = new Headers();
+	if (!isRecord(value)) return headers;
+	for (const [name, headerValue] of Object.entries(value)) {
+		const path = `plugins.entries.comfy.config.headers.${name}`;
+		const inspected = resolveSecretInputString({
+			value: headerValue,
+			path,
+			defaults: cfg.secrets?.defaults,
+			mode: "inspect"
+		});
+		if (inspected.status === "available") {
+			headers.set(name, inspected.value);
+			continue;
+		}
+		if (inspected.status === "missing") continue;
+		const resolved = await resolveConfiguredSecretInputString({
+			config: cfg,
+			env: process.env,
+			value: headerValue,
+			path,
+			unresolvedReasonStyle: "detailed"
+		});
+		if (resolved.unresolvedRefReason) throw new Error(`${path} references an unavailable secret: ${resolved.unresolvedRefReason}`);
+		if (resolved.value) headers.set(name, resolved.value);
+	}
+	return headers;
+}
 function resolveComfyNetworkPolicy(params) {
 	let parsed;
 	try {
@@ -138,8 +170,9 @@ async function readJsonResponse(params) {
 		auditContext: params.auditContext
 	});
 	try {
-		await assertOkOrThrowHttpError(response, params.errorPrefix);
-		return await readProviderJsonResponse(response, params.errorPrefix);
+		const requestHeaders = params.init?.headers;
+		await assertOkOrThrowHttpError(response, params.errorPrefix, { requestHeaders });
+		return await readProviderJsonResponse(response, params.errorPrefix, { requestHeaders });
 	} finally {
 		await release();
 	}
@@ -153,14 +186,9 @@ function resolveFileExtension(params) {
 	if (dotIndex < 0 || dotIndex === fileName.length - 1) return "bin";
 	return fileName.slice(dotIndex + 1);
 }
-function toBlobBytes(buffer) {
-	const arrayBuffer = new ArrayBuffer(buffer.byteLength);
-	new Uint8Array(arrayBuffer).set(buffer);
-	return arrayBuffer;
-}
 async function uploadInputImage(params) {
 	const form = new FormData();
-	form.set("image", new Blob([toBlobBytes(params.image.buffer)], { type: params.image.mimeType }), normalizeOptionalString(params.image.fileName) || `input.${resolveFileExtension({ mimeType: params.image.mimeType })}`);
+	form.set("image", new Blob([bufferToBlobPart(params.image.buffer)], { type: params.image.mimeType }), normalizeOptionalString(params.image.fileName) || `input.${resolveFileExtension({ mimeType: params.image.mimeType })}`);
 	form.set("type", "input");
 	form.set("overwrite", "true");
 	const headers = new Headers(params.headers);
@@ -230,7 +258,10 @@ async function waitForCloudCompletion(params) {
 			errorPrefix: "Comfy status lookup failed"
 		});
 		if (status.status === "completed") return;
-		if (status.status === "failed" || status.status === "cancelled") throw new Error(`Comfy workflow ${status.status}: ${status.error ?? status.message ?? params.promptId}`);
+		if (status.status === "failed" || status.status === "cancelled") {
+			const detail = redactProviderResponseErrorText(status.error ?? status.message ?? params.promptId, params.headers);
+			throw new Error(`Comfy workflow ${status.status}: ${detail}`);
+		}
 		const pollDelayMs = resolveComfyRemainingMs(deadline, params.timeoutMs, params.pollIntervalMs);
 		await new Promise((resolve) => {
 			setTimeout(resolve, pollDelayMs);
@@ -290,7 +321,7 @@ async function downloadOutputFile(params) {
 		auditContext
 	});
 	try {
-		await assertOkOrThrowHttpError(firstResponse.response, "Comfy output download failed");
+		await assertOkOrThrowHttpError(firstResponse.response, "Comfy output download failed", { requestHeaders: params.headers });
 		const mimeType = normalizeOptionalString(firstResponse.response.headers.get("content-type")) || "application/octet-stream";
 		return {
 			buffer: await readResponseWithLimit(firstResponse.response, params.maxBytes, {
@@ -304,11 +335,30 @@ async function downloadOutputFile(params) {
 		await firstResponse.release();
 	}
 }
+function hasUnavailableComfyHeaderSecret(value, cfg) {
+	if (!isRecord(value)) return false;
+	return Object.entries(value).some(([name, headerValue]) => {
+		const inspected = resolveSecretInputString({
+			value: headerValue,
+			path: `plugins.entries.comfy.config.headers.${name}`,
+			defaults: cfg?.secrets?.defaults,
+			mode: "inspect"
+		});
+		if (inspected.status !== "configured_unavailable" || inspected.ref.source !== "env") return false;
+		const envVarName = inspected.ref.id.trim();
+		return !(canResolveEnvSecretRefInReadOnlyPath({
+			cfg,
+			provider: inspected.ref.provider,
+			id: envVarName
+		}) && Boolean(normalizeSecretInputString(process.env[envVarName])));
+	});
+}
 function isComfyCapabilityConfigured(params) {
 	const capabilityConfig = getComfyCapabilityConfig(getComfyConfig(params.cfg), params.capability);
 	const hasWorkflow = Boolean(resolveComfyWorkflowSource(capabilityConfig).workflow || normalizeOptionalString(capabilityConfig.workflowPath));
 	const hasPromptNode = Boolean(normalizeOptionalString(capabilityConfig.promptNodeId));
 	if (!hasWorkflow || !hasPromptNode) return false;
+	if (hasUnavailableComfyHeaderSecret(capabilityConfig.headers, params.cfg)) return false;
 	if (resolveComfyMode(capabilityConfig) === "local") return true;
 	const configuredApiKey = resolveComfyApiKey(capabilityConfig, params.cfg);
 	if (configuredApiKey.status === "available") return true;
@@ -327,6 +377,8 @@ async function runComfyWorkflow(params) {
 	const promptInputName = normalizeOptionalString(capabilityConfig.promptInputName) ?? DEFAULT_PROMPT_INPUT_NAME;
 	const inputImageNodeId = normalizeOptionalString(capabilityConfig.inputImageNodeId);
 	const inputImageInputName = normalizeOptionalString(capabilityConfig.inputImageInputName) ?? DEFAULT_INPUT_IMAGE_INPUT_NAME;
+	const seedNodeId = normalizeOptionalString(capabilityConfig.seedNodeId);
+	const seedInputName = normalizeOptionalString(capabilityConfig.seedInputName) ?? DEFAULT_SEED_INPUT_NAME;
 	const outputNodeId = normalizeOptionalString(capabilityConfig.outputNodeId);
 	const pollIntervalMs = resolvePositiveTimerTimeoutMs(readConfigInteger(capabilityConfig, "pollIntervalMs"), DEFAULT_POLL_INTERVAL_MS);
 	const timeoutMs = resolvePositiveTimerTimeoutMs(readConfigInteger(capabilityConfig, "timeoutMs") ?? params.timeoutMs, DEFAULT_TIMEOUT_MS);
@@ -337,6 +389,12 @@ async function runComfyWorkflow(params) {
 		inputName: promptInputName,
 		value: params.prompt
 	});
+	if (seedNodeId) setWorkflowInput({
+		workflow,
+		nodeId: seedNodeId,
+		inputName: seedInputName,
+		value: randomInt(RANDOM_SEED_EXCLUSIVE_MAX)
+	});
 	const pluginApiKey = resolveComfyApiKey(capabilityConfig, params.cfg);
 	const resolvedAuth = mode === "cloud" ? pluginApiKey.status === "available" ? {
 		apiKey: pluginApiKey.apiKey,
@@ -354,6 +412,7 @@ async function runComfyWorkflow(params) {
 		baseUrl: normalizeOptionalString(capabilityConfig.baseUrl),
 		defaultBaseUrl: mode === "cloud" ? DEFAULT_COMFY_CLOUD_BASE_URL : DEFAULT_COMFY_LOCAL_BASE_URL,
 		allowPrivateNetwork: mode === "local" || explicitAllowPrivateNetwork,
+		headers: await resolveComfyHeadersConfig(capabilityConfig.headers, params.cfg),
 		defaultHeaders: mode === "cloud" ? {
 			"X-API-Key": resolvedAuth?.apiKey ?? "",
 			"Content-Type": "application/json"
@@ -391,7 +450,7 @@ async function runComfyWorkflow(params) {
 		prompt: workflow,
 		...mode === "cloud" && resolvedAuth?.apiKey ? { extra_data: { api_key_comfy_org: resolvedAuth.apiKey } } : {}
 	};
-	const promptId = normalizeOptionalString((await readJsonResponse({
+	const promptResponse = await readJsonResponse({
 		url: `${normalizedBaseUrl}${mode === "cloud" ? "/api/prompt" : "/prompt"}`,
 		init: {
 			method: "POST",
@@ -403,7 +462,8 @@ async function runComfyWorkflow(params) {
 		dispatcherPolicy,
 		auditContext: `comfy-${params.capability}-generate`,
 		errorPrefix: "Comfy workflow submit failed"
-	})).prompt_id);
+	});
+	const promptId = normalizeOptionalString(promptResponse.prompt_id);
 	if (!promptId) throw new Error("Comfy workflow submit response missing prompt_id");
 	const historyEntry = extractHistoryEntry(mode === "cloud" ? await (async () => {
 		await waitForCloudCompletion({

package/openclaw.plugin.json

@@ -5,6 +5,11 @@
   },
   "enabledByDefault": true,
   "providers": ["comfy"],
+  "configContracts": {
+    "secretInputs": {
+      "paths": [{ "path": "headers.*", "expected": "string" }]
+    }
+  },
   "setup": {
     "providers": [
       {
@@ -196,6 +201,10 @@
       "allowPrivateNetwork": {
         "type": "boolean"
       },
+      "headers": {
+        "type": "object",
+        "additionalProperties": { "type": ["string", "object"] }
+      },
       "workflowPath": {
         "type": "string"
       },
@@ -208,6 +217,12 @@
       "promptInputName": {
         "type": "string"
       },
+      "seedNodeId": {
+        "type": "string"
+      },
+      "seedInputName": {
+        "type": "string"
+      },
       "inputImageNodeId": {
         "type": "string"
       },
@@ -233,6 +248,8 @@
           "workflow": { "type": "object" },
           "promptNodeId": { "type": "string" },
           "promptInputName": { "type": "string" },
+          "seedNodeId": { "type": "string" },
+          "seedInputName": { "type": "string" },
           "inputImageNodeId": { "type": "string" },
           "inputImageInputName": { "type": "string" },
           "outputNodeId": { "type": "string" },
@@ -248,6 +265,8 @@
           "workflow": { "type": "object" },
           "promptNodeId": { "type": "string" },
           "promptInputName": { "type": "string" },
+          "seedNodeId": { "type": "string" },
+          "seedInputName": { "type": "string" },
           "inputImageNodeId": { "type": "string" },
           "inputImageInputName": { "type": "string" },
           "outputNodeId": { "type": "string" },
@@ -263,6 +282,8 @@
           "workflow": { "type": "object" },
           "promptNodeId": { "type": "string" },
           "promptInputName": { "type": "string" },
+          "seedNodeId": { "type": "string" },
+          "seedInputName": { "type": "string" },
           "outputNodeId": { "type": "string" },
           "pollIntervalMs": { "type": "integer", "minimum": 100 },
           "timeoutMs": { "type": "integer", "minimum": 1000 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/comfy-provider",
-  "version": "2026.9.1-beta.1",
+  "version": "2026.9.2",
   "description": "OpenClaw ComfyUI provider plugin.",
   "repository": {
     "type": "git",
@@ -18,10 +18,10 @@
       "minHostVersion": ">=2026.7.2"
     },
     "compat": {
-      "pluginApi": ">=2026.9.1-beta.1"
+      "pluginApi": ">=2026.9.2"
     },
     "build": {
-      "openclawVersion": "2026.9.1-beta.1",
+      "openclawVersion": "2026.9.2",
       "bundledDist": false
     },
     "release": {
@@ -38,7 +38,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.9.1-beta.1"
+    "openclaw": ">=2026.9.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {