ComfyUI-Manager/comfyui_manager
Can H. Tartanoglu 1584887823
feat: opt-out switch for prestartup pip install/upgrade
Add a `dependency_management` config key (and matching
`COMFYUI_MANAGER_DEPENDENCY_MANAGEMENT` env override) so installs on
externally-managed Python environments — Nix, Guix, system packages,
locked-down corporate images — can disable every prestartup path that
mutates the interpreter.

When set to `off`:
- `PIPFixer.fix_broken()` returns immediately (no torch/opencv/comfy
  rollback, no `comfyui-frontend-package` reinstall).
- The unified dependency resolver is skipped before it tries to
  `uv pip install` against a read-only store.
- Per-node `pip install -r requirements.txt` in
  `execute_lazy_install_script` is skipped.

Read-only operations (`pip list`, `pip freeze`, `pip show`) still run,
so the UI, inventory, and security checks keep functioning. Default is
`on`, preserving today's behavior for every existing user.
2026-05-04 15:19:08 +02:00
..
common feat: opt-out switch for prestartup pip install/upgrade 2026-05-04 15:19:08 +02:00
data_models fix(security): harden CSRF with Content-Type gate and expand E2E coverage (#2818) 2026-04-22 05:04:30 +09:00
glob fix(security): harden CSRF with Content-Type gate and expand E2E coverage (#2818) 2026-04-22 05:04:30 +09:00
js fix(security): harden CSRF with Content-Type gate and expand E2E coverage (#2818) 2026-04-22 05:04:30 +09:00
legacy fix(security): harden CSRF with Content-Type gate and expand E2E coverage (#2818) 2026-04-22 05:04:30 +09:00
__init__.py chore(release): 4.2.1 — register extension.manager.supports_csrf_post feature flag (#2823) 2026-04-22 22:07:16 +09:00
alter-list.json Merge branch 'main' into draft-v4 2025-09-03 01:24:47 +09:00
channels.list.template fixed: missing channels.list.template 2025-04-23 08:58:47 +09:00
custom-node-list.json Merge branch 'main' into manager-v4 2025-11-26 22:14:11 +09:00
extension-node-map.json Merge branch 'main' into manager-v4 2025-11-26 22:14:11 +09:00
extras.json Merge branch 'main' into draft-v4 2025-09-03 01:24:47 +09:00
github-stats.json Merge branch 'main' into manager-v4 2025-11-26 22:14:11 +09:00
model-list.json Merge branch 'main' into manager-v4 2025-11-26 22:14:11 +09:00
prestartup_script.py feat: opt-out switch for prestartup pip install/upgrade 2026-05-04 15:19:08 +02:00
README.md Merge branch 'main' into draft-v4 2025-06-01 06:23:11 +09:00

ComfyUI-Manager: Core Backend (glob)

This directory contains the Python backend modules that power ComfyUI-Manager, handling the core functionality of node management, downloading, security, and server operations.

Directory Structure

  • glob/ - code for new cacheless ComfyUI-Manager
  • legacy/ - code for legacy ComfyUI-Manager

Core Modules

  • manager_core.py: The central implementation of management functions, handling configuration, installation, updates, and node management.
  • manager_server.py: Implements server functionality and API endpoints for the web interface to interact with the backend.

Specialized Modules

  • share_3rdparty.py: Manages integration with third-party sharing platforms.

Architecture

The backend follows a modular design pattern with clear separation of concerns:

  1. Core Layer: Manager modules provide the primary API and business logic
  2. Utility Layer: Helper modules provide specialized functionality
  3. Integration Layer: Modules that connect to external systems

Security Model

The system implements a comprehensive security framework with multiple levels:

  • Block: Highest security - blocks most remote operations
  • High: Allows only specific trusted operations
  • Middle: Standard security for most users
  • Normal-: More permissive for advanced users
  • Weak: Lowest security for development environments

Implementation Details

  • The backend is designed to work seamlessly with ComfyUI
  • Asynchronous task queuing is implemented for background operations
  • The system supports multiple installation modes
  • Error handling and risk assessment are integrated throughout the codebase

API Integration

The backend exposes a REST API via manager_server.py that enables:

  • Custom node management (install, update, disable, remove)
  • Model downloading and organization
  • System configuration
  • Snapshot management
  • Workflow component handling