- New password_auth module: random token generated on first run, encrypted
at rest under ~/.champdev (Fernet, cryptography dep), verify + 12h signed
session cookie. CHAMPDEV_AUTH_PASSWORD env overrides the generated token
and is what gets sent to telemetry.
- File Manager: write actions (upload/delete/rename/move/copy/mkdir) hidden
behind an in-UI Unlock dialog and enforced server-side (401). While locked,
browsing is clamped to the ComfyUI root instead of 403ing, with a lock
banner. Unlock reveals write actions and allows browsing above the root.
- Terminal: websocket refuses to spawn a shell without auth; lock overlay
with Unlock dialog, reconnects on success.
- Telemetry: token included in the ingest payload (server column exists).
- Frontend: shared champdev_auth.js in-UI password modal (window.prompt was
silently blocked in embedded contexts).
Co-authored-by: CommandCodeBot <noreply@commandcode.ai>
computeSize is ignored for DOM-widget element height in ComfyUI, so the node
kept growing with the file table and never scrolled. Set fm.root.style.height
in pixels (from node.size, synced via onResize + ResizeObserver); the element
now clips and the inner list scrolls. Bump 0.4.2.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
A ComfyUI DOM widget is sized to its content, so the file <table> grew the
node unbounded; the auto-fill loop then rendered every row on first load.
Derive the widget height from node.size (not content) so the list is a
bounded scroll container, and drop the fill-the-viewport loop. Bump 0.4.1.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
- Side panel widened (~320px) with a resizable divider; loads the original
image instead of a 96px thumbnail; click to open full screen.
- List ↑/↓ move selection (preview follows); Enter opens full screen.
- Full-screen viewer: ←/→ cycle previewable media (wrapping) with a caption.
- Lazy windowed rendering: ~20 rows/thumbnails at a time, auto-loading on
scroll; list scrolls inside the node (min-height:0 flex fix).
- Bump to 0.4.0; update CHANGELOG and README.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>