Add support for local mode, to prevent running potentially vulnerable extensions like browser

Author: mythz

llms/extensions/browser/__init__.py

@@ -24,6 +24,11 @@ def install(ctx):
         ctx.disabled = True
         return
 
+    if not ctx.is_local:
+        ctx.log("Browser extension is only supported in local mode.")
+        ctx.disabled = True
+        return
+
     def ensure_dir(path):
         os.makedirs(path, exist_ok=True)
         return path

llms/main.py

@@ -61,6 +61,7 @@
 DEBUG = os.getenv("DEBUG") == "1"
 MOCK = os.getenv("MOCK") == "1"
 MOCK_DIR = os.getenv("MOCK_DIR")
+LLMS_MODE = os.getenv("LLMS_MODE", "local")
 DISABLE_EXTENSIONS = (os.getenv("LLMS_DISABLE") or "").split(",")
 DEFAULT_LIMITS = {
     "client_timeout": 120,
@@ -2874,6 +2875,8 @@ def __init__(self, cli_args: argparse.Namespace, extra_args: Dict[str, Any]):
         self.extra_args = extra_args
         self.config = None
         self.limits = DEFAULT_LIMITS
+        self.mode = LLMS_MODE
+        self.is_local = self.mode == "local"
         self.error_auth_required = create_error_response("Authentication required", "Unauthorized")
         self.ui_extensions = []
         self.chat_request_filters = []
@@ -3121,6 +3124,8 @@ def __init__(self, app: AppExtensions, path: str):
         self.app = app
         self.config = app.config
         self.limits = app.limits
+        self.mode = app.mode
+        self.is_local = app.is_local
         self.cli_args = app.cli_args
         self.extra_args = app.extra_args
         self.error_auth_required = app.error_auth_required