Add a password-gated private instance mode for xaigen.

Keep Authentik on aigen, isolate library data per instance, and purge Comfy outputs from the desktop after they are saved on the server.

Co-authored-by: Cursor <cursoragent@cursor.com>

server/api/generate.post.ts

@@ -110,6 +110,7 @@ async function runGeneration(
   const done = watchComfyJob(job)
   job.status = 'uploading'
   const uploaded = await uploadImage(params.image)
+  if (job.library) job.library.imageName = uploaded.name
   emitJob(job, { type: 'status', message: 'Queueing MiniMax H3 job...', progress: 6 })
   await waitForComfySocket(job, 4000)
 
@@ -121,7 +122,8 @@ async function runGeneration(
     steps: params.steps,
     seed: params.seed,
     turbo: params.turbo,
-    length: params.length
+    length: params.length,
+    filenamePrefix: comfyFilenamePrefix()
   })
 
   const queued = await queuePrompt(graph, job.clientId)
@@ -143,7 +145,8 @@ async function runGeneration(
       steps: job.library.steps,
       turbo: job.library.turbo,
       seed: job.library.seed,
-      startedAt: job.startedAt
+      startedAt: job.startedAt,
+      imageName: job.library.imageName
     })
   }
   emitJob(job, { type: 'status', message: 'Job queued on ComfyUI', progress: 8 })