Skip to content

v1.13.0 — agent-drivable cloud login, run-template, spend gates

Choose a tag to compare

View all tags
@mattmillerai mattmillerai released this 28 Jul 02:49
v1.13.0
6c88dd7
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

First release since v1.12.0 (2026-07-07) — 41 commits.

Features

  • comfy cloud login is now agent-drivable. In --json mode it emits a machine-readable login_url event as soon as the authorize URL exists, instead of printing it only in pretty mode. This is what lets an MCP server or agent drive sign-in and hand the URL to a user.
  • comfy run-template — fetch a template, fill its params, spend-gate, and run to completion in one verb.
  • comfy outdated — read-only version check for ComfyUI core and installed node packs against latest.
  • comfy run --prompt / --set — local text2img straight from the bundled default workflow, no graph authoring required.
  • comfy generate spend gate — explicit consent before spending credits.
  • comfy generate now derives partner model enums from the active OpenAPI spec rather than a pinned list.
  • comfy validate auto-converts UI-format workflows, matching comfy run.
  • COMFY_LOCAL_URL is honored for the local ComfyUI address — the :8188 hardcode is gone.

Fixes

Transfers / downloads

  • Verify Content-Length and download atomically via .part rename.
  • Sanitize the download extension taken from an untrusted ?filename= param.
  • Structured envelope on connection errors.

Workflows

  • Detect oversize responses in _http_request instead of silently truncating.
  • Widget-aware dynamic-combo expansion and name-aligned control-marker filtering in workflow_to_api.
  • validate presence-checks required inputs, adds a no-outputs check, and hard-errors range violations.

Run / jobs

  • Refresh the OAuth session during local partner-credential injection.
  • Close the run WebSocket on every exit path of local --wait.
  • get_job_status migrated off the deprecated /api/job/<id>/status endpoint.

Telemetry / install

  • Bound telemetry network I/O so it can't outlive the run envelope.
  • Build telemetry providers lazily so comfy install can upgrade pydantic_core.
  • Pin mixpanel<5 so comfy install can't wedge pydantic-core on Windows.

Misc

  • comfy generate refresh falls back to /openapi.yml.
  • Escape square brackets in Typer help strings so choice lists render.
  • Surface GitHub rate limits from find_pr_by_branch.
  • Registry pyproject hints emitted as single-line tomlkit comments.

Internal

Nine refactors (dead-code removal, shared helpers for banners/tarballs/download loops, CQL validate extraction, jobs WS dispatch table), CI now installs test deps from uv.lock so upstream releases can't break every PR, and an AGENTS.md contributor onboarding guide.

Full changelog: v1.12.0...v1.13.0

Assets 2
Loading