chore: public-repo hygiene check passes on main

[skishore23]

Summary

The hygiene / public-repo-hygiene check (Comfy-Org/github-workflows reusable
workflow, pinned at 609f9729…) has been red on main, so every PR shows red.
Findings and disposition:

• comfy_cli/cql/engine.py:7, comfy_cli/knowledge.py:4 — source comments
  named two private Comfy-Org GitHub repos (cql, comfy-knowledge) by
  string. Reworded to describe what they are ("the Go reference engine", "the
  curated knowledge bundle repo") instead of naming them. No behavior change.

• .github/workflows/refresh-cql-catalogs.yml (8 lines) — this workflow
  genuinely, intentionally clones/reads the private cloud repo to fetch
  no_gpu_nodes.json. That's the point of the workflow, not a leak, so it's
  now in exclude_paths with a comment explaining why.

• comfy_cli/command/run/preflight.py:176, tests/e2e/test_e2e.py:344 —
  real huggingface.co/Comfy-Org/stable-diffusion-v1-5-archive model download
  URLs. I checked the checker source
  (check_public_repo_hygiene.py): it has no Hugging Face allowlist — its
  Comfy-Org/<name> pattern matches the literal string regardless of the
  surrounding URL/host, so a fully-qualified HF URL does not clear it (and
  preflight.py:176 was already a full URL, confirming this). The HF repo
  can't go in the checker's allowlist either — that list is GitHub repos
  only and is org-owned, not settable from this repo. Excluded both files,
  with a comment explaining the HF-vs-GitHub root cause.

• tests/comfy_cli/fixtures/** (gallery + sd15_ui_workflow.json) —
  verbatim gallery/workflow template fixtures; several embed
  Comfy-Org/<huggingface-model-repo> strings (Qwen-Image, ACE-Step) for the
  same HF-vs-GitHub reason above. These must stay byte-for-byte identical to
  the real templates, so excluded rather than edited.

• HALO-03 (test_knowledge_attach.py:146, test_knowledge.py:495) —
  fictional product id used as test fixture data, not a real ticket. Added to
  ticket_allowlist alongside the existing HAILUO-03.

All changes are in .github/workflows/public-repo-hygiene.yml (ticket
allowlist + exclude_paths, each with an explanatory comment) plus the two
docstring rewordings. No fixture files were edited.

Test plan

• Ran the checker locally exactly as CI invokes it (root ., same
  --exclude/--ticket-allow values now in the workflow):
  Result: no internal-only references found. (exit 0; 457 files
  scanned, 4 exclusion entries matched 17 files total, 0 findings)
• uvx ruff@0.15.15 check . — all checks passed
• pytest tests/comfy_cli/test_knowledge.py tests/comfy_cli/test_knowledge_attach.py tests/comfy_cli/cql/test_engine.py tests/comfy_cli/test_run_execution_lifecycle.py — 355 passed

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: dfa2a2ce-356d-41db-84eb-a3691c6cfc78

📥 Commits

Reviewing files that changed from the base of the PR and between fa52ded and c746603.

📒 Files selected for processing (3)

• .github/workflows/public-repo-hygiene.yml
• comfy_cli/cql/engine.py
• comfy_cli/knowledge.py

Included review availability: 0 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 8 reviews per hour.

---

📝 Walkthrough

Walkthrough

The pull request updates the public repository hygiene workflow and revises provenance descriptions in the CQL engine and knowledge bundle modules.

Changes

Repository hygiene and provenance

Layer / File(s)	Summary
Hygiene checker allowlist and exclusions .github/workflows/public-repo-hygiene.yml	The workflow allowlists HALO-03 and excludes known legitimate references and test fixture paths.
Module provenance descriptions comfy_cli/cql/engine.py, comfy_cli/knowledge.py	The module docstrings use updated descriptions for their source repositories and packages.

Suggested reviewers: annehe9

Merge Risk: ⚪ Minimal · up to c7466

This PR updates repository hygiene exclusions and rewords two source comments without changing runtime behavior; no actionable merge-blocking risk remains beyond normal checks and review.

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch skishore23/public-repo-hygiene

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch skishore23/public-repo-hygiene

---

_{Comment @coderabbitai help to get the list of available commands.}