Harden local updater and install changed dependencies

__init__.py

@@ -208,7 +208,7 @@ try:
     from server import PromptServer
     import folder_paths
     from .utils.config import CONFIG_FILE, load_config, NETWORK_ROUTES
-    from .utils.updater import UpdateError, update_package
+    from .utils.updater import UpdateError, is_local_management_request, update_package
     import threading as _update_threading
 
     _update_lock = _update_threading.Lock()
@@ -618,7 +618,7 @@ try:
 
     @PromptServer.instance.routes.post("/o1key/update")
     async def update_node_package(request):
-        if request.headers.get("X-O1Key-Update") != "1":
+        if not is_local_management_request(request) or request.headers.get("X-O1Key-Update") != "1":
             return web.json_response({"error": "无效的更新请求。"}, status=403)
         if not _update_lock.acquire(blocking=False):
             return web.json_response({"error": "更新正在进行，请稍候。"}, status=409)
@@ -636,6 +636,8 @@ try:
     # === AI 聊天代理（流式 SSE 透传） ===
     @PromptServer.instance.routes.post("/o1key/restart")
     async def restart_server(request):
+        if not is_local_management_request(request):
+            return web.json_response({"error": "仅允许在本机界面重启 ComfyUI。"}, status=403)
         import sys, os as _ros, subprocess, threading
         def _do_restart():
             import time