[PR #3333] [MERGED] Add ComfyUI-ChickTools #3203

New issue

Closed

opened 2026-10-28 21:16:03 +00:00 by bsakaguchi · 0 comments

bsakaguchi commented

2026-10-28 21:16:03 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/Comfy-Org/ComfyUI-Manager/pull/3333
Author: @chookg
Created: 10/2/2026
Status: ✅ Merged
Merged: 10/8/2026
Merged by: @ltdrdata

Base: main ← Head: codex/add-chicktools

📝 Commits (3)

4dc0b0b Add ComfyUI-ChickTools
024360c Describe reviewed callback host policy
bef8882 Require HTTPS for NotifyMe callbacks

📊 Changes

1 file changed (+10 additions, -0 deletions)

View changed files

📝 custom-node-list.json (+10 -0)

📄 Description

Adds ComfyUI-ChickTools to the custom node catalog. NotifyMe sends a task id and optional text msg to an allowlisted HTTPS callback, with any-type passthrough after HTTP 200.

Repository: https://github.com/chookg/ComfyUI-ChickTools
Version: 0.6.1. Source revision: aa9f7e583de3cb210c90a52b3e96de410fd4e94f. License: MIT; install type: git-clone.

Only HTTPS on the exact normalized hostname notify.bro3.net is accepted. HTTP and unlisted hosts are rejected before DNS/network I/O, and the transport independently rejects non-HTTPS targets. Public-address checks, pinned connections, certificate/hostname verification, disabled redirects/retries and 15-second connect/read timeouts remain in place. Workflow inputs cannot change the source-controlled allowlist. Callback URLs default to blank.

All four node display names, descriptions and tooltips default to English. Additional independent nodes are ChickHideNode, ChickSaveImage and ChickRestoreImage.

Validation:

65 unit tests passed, including real TLS, untrusted certificates, hostname mismatches, HTTP rejection and review-session isolation/expiry/deletion.
16 model-free CPU workflow checks passed: 12 successful runs and 4 expected rejections with zero requests.
Automated integration tests use a temporary trusted test certificate and isolated DNS/socket routing; the production hostname, IP and TLS checks remain enabled.
Public HTTPS verification passed on 2026-10-04 with normal DNS and certificate/hostname verification enabled. Three real, model-free ComfyUI runs (connected text, repeat queue, empty message) delivered exact id/msg values to the reviewer receiver. Desktop/mobile browser checks passed for session creation, result display and deletion. Direct node tests also preserved passthrough identity.
The catalog change adds only one entry.

Live reviewer receiver: https://notify.bro3.net/ — select Create test session, paste its URL into NotifyMe, run the text example, then select Check results.

Receiver source and instructions: https://github.com/chookg/ComfyUI-ChickTools/blob/main/docs/REVIEW_SERVICE.md
It uses separate temporary sessions, keeps bounded messages in memory, and makes no outbound requests. It is optional and is not imported by the installed nodes.

Domain additions require maintainer review followed by separate upstream/platform review. Repository acceptance does not imply platform approval.

Example: https://github.com/chookg/ComfyUI-ChickTools/blob/main/examples/notify_me_example.json

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/Comfy-Org/ComfyUI-Manager/pull/3333 **Author:** [@chookg](https://github.com/chookg) **Created:** 10/2/2026 **Status:** ✅ Merged **Merged:** 10/8/2026 **Merged by:** [@ltdrdata](https://github.com/ltdrdata) **Base:** `main` ← **Head:** `codex/add-chicktools` --- ### 📝 Commits (3) - [`4dc0b0b`](https://github.com/Comfy-Org/ComfyUI-Manager/commit/4dc0b0b01cc17ed9cd2c2b5ce09f54154c0608b0) Add ComfyUI-ChickTools - [`024360c`](https://github.com/Comfy-Org/ComfyUI-Manager/commit/024360c097213940e037b923fd12c295f241e5c7) Describe reviewed callback host policy - [`bef8882`](https://github.com/Comfy-Org/ComfyUI-Manager/commit/bef8882929bf4ca203c4d83c09ac43113d56d77d) Require HTTPS for NotifyMe callbacks ### 📊 Changes **1 file changed** (+10 additions, -0 deletions) <details> <summary>View changed files</summary> 📝 `custom-node-list.json` (+10 -0) </details> ### 📄 Description Adds ComfyUI-ChickTools to the custom node catalog. NotifyMe sends a task `id` and optional text `msg` to an allowlisted HTTPS callback, with any-type passthrough after HTTP 200. Repository: https://github.com/chookg/ComfyUI-ChickTools Version: 0.6.1. Source revision: aa9f7e583de3cb210c90a52b3e96de410fd4e94f. License: MIT; install type: git-clone. Only HTTPS on the exact normalized hostname `notify.bro3.net` is accepted. HTTP and unlisted hosts are rejected before DNS/network I/O, and the transport independently rejects non-HTTPS targets. Public-address checks, pinned connections, certificate/hostname verification, disabled redirects/retries and 15-second connect/read timeouts remain in place. Workflow inputs cannot change the source-controlled allowlist. Callback URLs default to blank. All four node display names, descriptions and tooltips default to English. Additional independent nodes are `ChickHideNode`, `ChickSaveImage` and `ChickRestoreImage`. Validation: - 65 unit tests passed, including real TLS, untrusted certificates, hostname mismatches, HTTP rejection and review-session isolation/expiry/deletion. - 16 model-free CPU workflow checks passed: 12 successful runs and 4 expected rejections with zero requests. - Automated integration tests use a temporary trusted test certificate and isolated DNS/socket routing; the production hostname, IP and TLS checks remain enabled. - Public HTTPS verification passed on 2026-10-04 with normal DNS and certificate/hostname verification enabled. Three real, model-free ComfyUI runs (connected text, repeat queue, empty message) delivered exact id/msg values to the reviewer receiver. Desktop/mobile browser checks passed for session creation, result display and deletion. Direct node tests also preserved passthrough identity. - The catalog change adds only one entry. Live reviewer receiver: https://notify.bro3.net/ — select **Create test session**, paste its URL into NotifyMe, run the text example, then select **Check results**. Receiver source and instructions: https://github.com/chookg/ComfyUI-ChickTools/blob/main/docs/REVIEW_SERVICE.md It uses separate temporary sessions, keeps bounded messages in memory, and makes no outbound requests. It is optional and is not imported by the installed nodes. Domain additions require maintainer review followed by separate upstream/platform review. Repository acceptance does not imply platform approval. Example: https://github.com/chookg/ComfyUI-ChickTools/blob/main/examples/notify_me_example.json --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

bsakaguchi

2026-10-28 21:16:03 +00:00