comfyui-mcp 0.41.0 → 0.43.0

package/docker/runpod/config.ini

@@ -0,0 +1,28 @@
+; comfyui-mcp Manager v2 config TEMPLATE  (-> <user-dir>/__manager/config.ini)
+; -----------------------------------------------------------------------------
+; REQUIRED for the comfyui-mcp Agent Panel to install models/nodes remotely.
+;
+;   network_mode = personal_cloud
+;       The /v2 install-model security gate only permits remote installs in
+;       personal_cloud mode. Do NOT leave this at the default or remote installs
+;       are rejected.
+;
+;   security_level = weak
+;       Permissive so the Agent Panel can install custom nodes from ARBITRARY
+;       git URLs — Manager classes those high-risk and silently skips them at
+;       "normal-" (registry-id installs pass, git-URL installs never appear: a
+;       confusing half-working state). This is a single-user pod whose premise
+;       is agent-driven installs. Set "normal-" to restore the guardrails.
+;       Override at runtime with the COMFY_SECURITY_LEVEL env (re-asserted by
+;       /post_start.sh on every boot).
+;
+; FAST-RESTART design: ComfyUI runs from the IMMUTABLE image at /opt/ComfyUI, but
+; its --user-directory is the /workspace volume, so comfyui_manager reads its
+; config from the VOLUME (user/__manager/config.ini, or the older
+; user/default/ComfyUI-Manager/config.ini). This file is baked into the image as
+; a template (/opt/ComfyUI/config.ini.seed); /post_start.sh copies it to BOTH
+; volume locations on first boot and re-asserts these two keys on every boot
+; (idempotent), so the remote-install gate is always correct.
+[default]
+network_mode = personal_cloud
+security_level = weak

package/docker/runpod/deploy-dockerhub.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+#
+# deploy-dockerhub.sh — gated Docker Hub release for the comfyui-mcp RunPod
+# image. Refuses to push anything that hasn't passed test_image.sh (static +
+# boot suite), then verifies what the registry ACTUALLY serves post-push.
+#
+#   ./deploy-dockerhub.sh <version> [<local-image-ref>]
+#
+#   <version>          e.g. 1.6  (also moves :latest)
+#   <local-image-ref>  default: artokun/comfyui-mcp-runpod:build
+#
+# Typical flow:
+#   docker build -t artokun/comfyui-mcp-runpod:build docker/runpod
+#   docker/runpod/deploy-dockerhub.sh 1.6
+#
+# After pushing, PIN THE RUNPOD TEMPLATE to the new VERSION tag (not :latest):
+# RunPod hosts cache images per-tag, so a template on :latest can silently serve
+# a stale build — a version tag forces every new pod onto the bits you tested.
+set -euo pipefail
+
+VERSION="${1:?usage: deploy-dockerhub.sh <version> [<local-image-ref>]}"
+SRC="${2:-artokun/comfyui-mcp-runpod:build}"
+REPO="artokun/comfyui-mcp-runpod"
+HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+
+echo "[deploy] gate 1/2: test_image.sh (static + boot suite) on ${SRC}…"
+"${HERE}/test_image.sh" "${SRC}"
+
+echo "[deploy] tagging ${SRC} -> ${REPO}:${VERSION} + ${REPO}:latest"
+docker tag "${SRC}" "${REPO}:${VERSION}"
+docker tag "${SRC}" "${REPO}:latest"
+
+echo "[deploy] pushing ${REPO}:${VERSION}…"
+docker push "${REPO}:${VERSION}"
+echo "[deploy] pushing ${REPO}:latest…"
+docker push "${REPO}:latest"
+
+echo "[deploy] gate 2/2: verifying what the registry actually serves…"
+PY="$(command -v python3 || command -v python)"
+"${PY}" "${HERE}/verify_image_remote.py" "docker.io/${REPO}:${VERSION}"
+
+cat <<EOF
+[deploy] DONE: ${REPO}:${VERSION} (+ :latest) pushed and registry-verified.
+[deploy] NEXT: pin the RunPod template image to  ${REPO}:${VERSION}
+[deploy]       (console.runpod.io -> Templates; do NOT leave it on :latest).
+EOF

package/docker/runpod/extra_model_paths.yaml

@@ -0,0 +1,61 @@
+# comfyui-mcp RunPod image — extra model paths (FAST-RESTART design).
+# =============================================================================
+# Baked into the image at /opt/ComfyUI/extra_model_paths.yaml and loaded at
+# launch via:  main.py --extra-model-paths-config /opt/ComfyUI/extra_model_paths.yaml
+#
+# WHY: ComfyUI software (install + venv + custom_nodes) lives in the IMMUTABLE
+# image at /opt/ComfyUI. ONLY user data lives on the /workspace network volume.
+# This file points EVERY model category at /workspace/models/<cat> so:
+#   * your models persist across stop/start (they're on the volume), and
+#   * Manager's install-model writes downloads to the volume — NOT to the image.
+#
+# `is_default: true` makes these paths the PRIMARY entries (inserted at the FRONT
+# of each category's folder list via folder_paths.add_model_folder_path), so they
+# become the DEFAULT download target. Without it, ComfyUI's built-in
+# /opt/ComfyUI/models/<cat> (ephemeral, in the image) would stay first and
+# Manager downloads would NOT persist.
+#
+# NOTE: there is deliberately NO `custom_nodes:` key here. custom_nodes must stay
+# in the image (immutable software). Mapping custom_nodes to the volume would
+# defeat the fast-restart design and the image-baked-nodes contract.
+#
+# base_path is /workspace, and each value is relative to it (matching ComfyUI's
+# own extra_model_paths.yaml.example convention, e.g. `models/checkpoints/`).
+# Category KEYS match ComfyUI's folder_names_and_paths keys exactly.
+# =============================================================================
+
+comfyui_mcp_volume:
+    base_path: /workspace
+    is_default: true
+
+    checkpoints: models/checkpoints/
+    configs: models/configs/
+    loras: models/loras/
+    vae: models/vae/
+    text_encoders: |
+        models/text_encoders/
+        models/clip/
+    diffusion_models: |
+        models/diffusion_models/
+        models/unet/
+    clip_vision: models/clip_vision/
+    style_models: models/style_models/
+    embeddings: models/embeddings/
+    diffusers: models/diffusers/
+    vae_approx: models/vae_approx/
+    controlnet: |
+        models/controlnet/
+        models/t2i_adapter/
+    gligen: models/gligen/
+    upscale_models: models/upscale_models/
+    latent_upscale_models: models/latent_upscale_models/
+    hypernetworks: models/hypernetworks/
+    photomaker: models/photomaker/
+    classifiers: models/classifiers/
+    model_patches: models/model_patches/
+    audio_encoders: models/audio_encoders/
+    background_removal: models/background_removal/
+    frame_interpolation: models/frame_interpolation/
+    geometry_estimation: models/geometry_estimation/
+    optical_flow: models/optical_flow/
+    detection: models/detection/

package/docker/runpod/nginx.conf

@@ -0,0 +1,124 @@
+# comfyui-mcp RunPod reverse proxy — SELF-CONTAINED (no include/snippet deps).
+# =============================================================================
+# Replaces the base image's /etc/nginx/nginx.conf. The base's /start.sh runs
+# `service nginx start` reading THIS file at boot.
+#
+# Public HTTP :3000  ->  ComfyUI :3001   (the comfyui-mcp panel / connect target)
+#   * websocket-aware  (/ws, /queue/join, and the live-preview upgrade on /)
+#   * "starting" fallback: while ComfyUI (:3001) is down, 502s are rewritten to a
+#     friendly readme.html (HTTP 200) instead of nginx's raw error page.
+#
+# Also fronts the two extra services on RunPod-convention ports:
+#   :8081 -> code-server :8080
+#   :8001 -> app-manager :8000
+# (JupyterLab :8888 and SSH :22 are served directly by the base — not proxied.)
+# =============================================================================
+
+worker_processes auto;
+events { worker_connections 2048; }
+
+http {
+    client_max_body_size 1024M;       # large model / image uploads
+    sendfile on;
+
+    # WebSocket upgrade plumbing (Connection: upgrade only when requested).
+    map $http_upgrade $connection_upgrade {
+        default upgrade;
+        ''      close;
+    }
+
+    # ---- shared proxy behavior, applied per-server via the directives below ----
+    # (Defined at server scope so all locations inherit them; ComfyUI generations
+    #  and websockets need long timeouts.)
+
+    # ============================ ComfyUI (:3000 -> :3001) ====================
+    server {
+        listen 3000;
+
+        proxy_http_version 1.1;
+        proxy_set_header Host              $host;
+        proxy_set_header Upgrade           $http_upgrade;
+        proxy_set_header Connection        $connection_upgrade;
+        proxy_set_header X-Real-IP         $remote_addr;
+        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header X-Forwarded-Host  $host;
+        proxy_cache_bypass $http_upgrade;
+        proxy_buffering off;              # stream SSE/preview promptly
+        proxy_read_timeout  3600s;        # long generations / idle websockets
+        proxy_send_timeout  3600s;
+
+        # Show the "starting" page instead of a raw 502 until ComfyUI is up.
+        proxy_intercept_errors on;
+        error_page 502 504 =200 @starting;
+
+        location /ws         { proxy_pass http://127.0.0.1:3001; }
+        location /queue/join { proxy_pass http://127.0.0.1:3001; }
+        location /           { proxy_pass http://127.0.0.1:3001; }
+
+        location @starting {
+            proxy_intercept_errors off;
+            add_header Cache-Control no-cache;
+            root /usr/share/nginx/html;
+            rewrite ^(.*)$ /readme.html break;
+        }
+    }
+
+    # ============================ code-server (:8081 -> :8080) =================
+    server {
+        listen 8081;
+        proxy_http_version 1.1;
+        proxy_set_header Host       $host;
+        proxy_set_header Upgrade    $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_read_timeout 3600s;
+        proxy_intercept_errors on;
+        error_page 502 504 =200 @starting8081;
+        location /          { proxy_pass http://127.0.0.1:8080; }
+        location @starting8081 {
+            proxy_intercept_errors off;
+            root /usr/share/nginx/html;
+            rewrite ^(.*)$ /readme.html break;
+        }
+    }
+
+    # ============================ app-manager (:8001 -> :8000) =================
+    server {
+        listen 8001;
+        proxy_http_version 1.1;
+        proxy_set_header Host       $host;
+        proxy_set_header Upgrade    $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_read_timeout 3600s;
+        proxy_intercept_errors on;
+        error_page 502 504 =200 @starting8001;
+        location /          { proxy_pass http://127.0.0.1:8000; }
+        location @starting8001 {
+            proxy_intercept_errors off;
+            root /usr/share/nginx/html;
+            rewrite ^(.*)$ /readme.html break;
+        }
+    }
+
+    # ============================ File Browser (:8083 -> :8082) ================
+    # Web file manager rooted at /workspace (browse/upload/download/delete).
+    # client_max_body_size 0 = no cap, so multi-GB model uploads aren't rejected.
+    server {
+        listen 8083;
+        client_max_body_size 0;
+        proxy_http_version 1.1;
+        proxy_set_header Host       $host;
+        proxy_set_header Upgrade    $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_read_timeout 3600s;
+        proxy_request_buffering off;      # stream large uploads straight through
+        proxy_intercept_errors on;
+        error_page 502 504 =200 @starting8083;
+        location /          { proxy_pass http://127.0.0.1:8082; }
+        location @starting8083 {
+            proxy_intercept_errors off;
+            root /usr/share/nginx/html;
+            rewrite ^(.*)$ /readme.html break;
+        }
+    }
+}