# NOTICE — Inferway Studio embedded editor

This directory (`website/studio-editor/`) holds the files Inferway adds around a
third-party build. Everything here is published unminified and is its own source.

---

## English

### Upstream component

| | |
|---|---|
| Project | **ComfyUI_frontend** (the official ComfyUI frontend), by Comfy Org |
| Version | **1.51.10** |
| Tag | `v1.51.10` |
| Commit | `e7d1c7fc6823e330fdab524610b0000394cb1dbc` |
| Source | <https://github.com/Comfy-Org/ComfyUI_frontend> (tree at <https://github.com/Comfy-Org/ComfyUI_frontend/tree/v1.51.10>) |
| Distributed as | PyPI wheel `comfyui_frontend_package-1.51.10-py3-none-any.whl` |
| Wheel sha256 | `52e7d299f0b061c1b66217ef7b64dfba176355d9df72528cf4381caa2daeb3fb` |
| Licence | **GPL-3.0** — the upstream licence text for tag `v1.51.10`, shipped here as `LICENSE.txt` (sha256 `3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986`, 35,149 bytes) |

The wheel is fetched and sha256-verified at build time against
`website/scripts/studio-editor.lock.json`; it is never committed to this
repository. The licence text above is taken from the matching tag, not from the
upstream default branch.

### Exactly what Inferway changed

Inferway ships the upstream static build **intact** and adds only:

1. **One line, added by the build, to the upstream `index.html`** — inserted as
   the first element of `<head>`:

   ```html
   <script src="./inferway-shim.js"></script>
   ```

   That is the whole of the modification to an upstream file: one added script
   element, nothing else. The build verifies it — stripping that single line
   must reproduce the upstream `index.html` byte for byte
   (sha256 `58765417ef5f3f693178e01fcdc0ce21c43a0f1f1d0511f72fecfb17baf62f08`,
   20,059 bytes) — and fails the build if anything else differs.
2. **Four added files, none of them overwriting an upstream file:**
   - `inferway-shim.js` — the sandbox adapter (storage, cookie, request
     interception, dialogs, downloads, clipboard);
   - `inferway-bridge-protocol.js` — the message-type list, schema validation
     and size caps shared with the parent page;
   - `NOTICE.md` — this file;
   - `LICENSE.txt` — a verbatim copy of the upstream GPL-3.0 licence text.

**Date of the modification to `index.html`: 2026-10-06** — the day the one
injected line above was introduced, and the only change ever made to an
upstream file (GPL-3.0 §5(a): prominent notice of the change and its date).

**Licence of the added files (GPL-3.0 §5(c)):** `inferway-shim.js` and
`inferway-bridge-protocol.js` are new works, combined with the upstream
`index.html` in the same served document. They are distributed under
**GPL-3.0-only** — the same licence as the upstream component — and each file
begins with the line
`// SPDX-License-Identifier: GPL-3.0-only`, which is the identifier the lock
file records for this component (`scripts/studio-editor.lock.json`,
`license.spdx`). They are published unminified, so the licence header ships
with the code it covers.

No other upstream file is modified. `inferway-shim.js` and
`inferway-bridge-protocol.js` are served unminified: what the browser downloads
is exactly the source in this repository.

---

## 中文说明

### 第三方组件

| | |
|---|---|
| 项目 | **ComfyUI_frontend**（ComfyUI 官方前端），作者 Comfy Org |
| 版本 | **1.51.10** |
| 标签 | `v1.51.10` |
| 提交 | `e7d1c7fc6823e330fdab524610b0000394cb1dbc` |
| 源码地址 | <https://github.com/Comfy-Org/ComfyUI_frontend>（对应标签：<https://github.com/Comfy-Org/ComfyUI_frontend/tree/v1.51.10>） |
| 分发形式 | PyPI 轮子包 `comfyui_frontend_package-1.51.10-py3-none-any.whl` |
| 轮子包 sha256 | `52e7d299f0b061c1b66217ef7b64dfba176355d9df72528cf4381caa2daeb3fb` |
| 许可证 | **GPL-3.0**，取自 `v1.51.10` 标签，随页面一同分发为 `LICENSE.txt`（sha256 `3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986`，35,149 字节） |

轮子包在构建时按 `website/scripts/studio-editor.lock.json` 下载并先校验 sha256 再解压，
不进入本仓库；许可证文本按对应标签取得，不使用上游主分支的版本。

### Inferway 具体改了什么

上游静态构建产物原样发布，只做了两件事：

1. **构建时在上游 `index.html` 里加一行**，位置在 `<head>` 的最前面：

   ```html
   <script src="./inferway-shim.js"></script>
   ```

   对上游文件的改动仅此一行，没有别的改动。构建会自行核对：去掉这一行之后，
   `index.html` 必须与上游文件逐字节一致（sha256
   `58765417ef5f3f693178e01fcdc0ce21c43a0f1f1d0511f72fecfb17baf62f08`，
   20,059 字节），只要有一处不同，构建就失败。
2. **新增四个文件**，都不覆盖上游任何文件：
   - `inferway-shim.js` —— 沙箱适配层（存储、cookie、请求拦截、对话框、下载、剪贴板）；
   - `inferway-bridge-protocol.js` —— 与父页面共用的消息类型表、字段校验和大小上限；
   - `NOTICE.md` —— 本文件；
   - `LICENSE.txt` —— 上游 GPL-3.0 许可证原文的副本。

**`index.html` 的修改日期：2026-10-06**——即上面那一行注入脚本引入的当天，
也是对上游文件唯一的一次改动（GPL-3.0 第 5(a) 条要求：显著说明改动及其日期）。

**新增文件的许可证（GPL-3.0 第 5(c) 条）：** `inferway-shim.js` 与
`inferway-bridge-protocol.js` 是新增的作品，与上游 `index.html` 组合在同一份
页面文件中一同发布，均采用与上游组件相同的 **GPL-3.0-only** 许可证；两个文件的
第一行都是 `// SPDX-License-Identifier: GPL-3.0-only`，与锁文件
（`scripts/studio-editor.lock.json` 的 `license.spdx`）记录的标识一致。两个文件
都未压缩发布，许可证标识随它所覆盖的代码一起送达。

除以上之外，上游文件一个都没有改。`inferway-shim.js` 与
`inferway-bridge-protocol.js` 均以未压缩形式提供：浏览器下载到的内容就是本仓库里的源码本身。

### 源码获取

这两个新增脚本随页面一同公开，浏览器可直接查看；对应的源文件位于本仓库
`website/studio-editor/`（`inferway-shim.js`、`inferway-bridge-protocol.js`），
许可证副本为同目录下的 `LICENSE.comfyui-frontend-v1.51.10.txt`。